OIDC - using ID token as Access Token

36 views
Skip to first unread message

Ivan Obradović

unread,
Dec 3, 2018, 5:40:05 AM12/3/18
to CAS Community
Hi guys,

Currently I'm using CAS and OAuth 2.0 protocol and would like to switch to OIDC. As I saw OIDC implementation is built on top of OAuth implementation. It is using the same mechanism to generate Access and Refresh token, and adds new ID token to response.

Is it possible to use ID token as Access token or will it be possible in a future version of CAS server ?

I have several Rest API resource servers and all of them has to send requests to CAS server to validate Access Token. If I switch to OIDC I expected Access Token is the same as ID token so my Rest APIs can validate JWT token without sending request to CAS server. However Access Token still is meaningless text, and all have to be done the same like for OAuth 2.0 protocol.

Am I wrong ? Could this be done in OIDC/ID token way or not ?

Best regards,
Ivan
Reply all
Reply to author
Forward
0 new messages