Ask HN: Sign Up with Facebook/Apple/Google – API or OAuth?

by brittpart_on 12/27/2020, 10:19 PMwith 3 comments

What is this technology called? An API, OAuth? I'm trying to do some research on how this works but I'm not sure what I should be researching.

by noodlesUKon 12/27/2020, 10:34 PM

Social login and SSO is generally implemented these days as OIDC (which is based on oauth2). You can read the RFCs for it, and they pretty much explain the whole thing.

Oauth2: https://tools.ietf.org/html/rfc6749

PKCE (replaces the implicit flow): https://tools.ietf.org/html/rfc7636

OIDC: https://openid.net/specs/openid-connect-core-1_0.html

by cuu508on 12/27/2020, 10:28 PM

They don't always make it obvious, but it is usually OAuth2, sometimes with tweaks