Interaction Code Flow
Full Interaction OAuth 2.0 + OIDC flow with Discovery, PKCE, and Nonce validation. This comprehensive flow demonstrates the complete authentication journey including provider discovery, secure code exchange with PKCE, ID Token validation, and UserInfo retrieval.
Interaction Code Flow
Full Interaction OAuth 2.0 + OIDC flow with Discovery, PKCE, and Nonce validation. This comprehensive flow demonstrates the complete authentication journey including provider discovery, secure code exchange with PKCE, ID Token validation, and UserInfo retrieval.
ID Token
Sequence Diagram
Click any step for details
Request
Response
Redirect
Internal
Step-by-Step Breakdown
1
OpenID Discovery
Client → OpenID Provider
2
JWKS Fetch
Client → OpenID Provider
3
Authorization Request
Client → OpenID Provider
4
User Authentication
User → OpenID Provider
5
Authorization Response
OpenID Provider → Client
6
Token Exchange
Client → OpenID Provider
7
Token Response
OpenID Provider → Client
8
ID Token Validation
Client → Client
9
UserInfo Request
Client → OpenID Provider
10
UserInfo Response
OpenID Provider → Client
Token Inspector
Specs for this flow
Sections of the protocol that normatively define this flow, plus the security considerations that apply to it.