{"id":1420,"date":"2023-03-21T14:35:46","date_gmt":"2023-03-21T06:35:46","guid":{"rendered":"http:\/\/idaas-doc.cloudentify.com\/docs\/?p=1420"},"modified":"2023-06-01T13:38:21","modified_gmt":"2023-06-01T05:38:21","slug":"oidc","status":"publish","type":"post","link":"https:\/\/idaas-doc.cloudentify.com\/docs\/oidc\/","title":{"rendered":"OIDC"},"content":{"rendered":"\n<h3><span id=\"i\">\u534f\u8bae\u6982\u8ff0<\/span><\/h3>\n\n\n\n<p>OIDC\uff08OpenID Connect\uff09\u662f\u4e00\u4e2a\u57fa\u4e8eOAuth 2.0\u534f\u8bae\u7684\u8eab\u4efd\u8ba4\u8bc1\u6807\u51c6\u534f\u8bae\uff0c\u589e\u52a0\u4e86 Id Token\u3002<\/p>\n\n\n\n<h3><span id=\"i-2\">\u540d\u8bcd\u89e3\u91ca<\/span><\/h3>\n\n\n\n<ol>\n<li>OpenID Provider\uff08OP\uff09: OIDC \u6388\u6743\u670d\u52a1\u5668\uff0c\u8d1f\u8d23\u7b7e\u53d1 ID Token\u3002<\/li>\n\n\n\n<li>End-User\uff08EU\uff09\uff1a\u7528\u6237\uff0cID Token \u7684\u4fe1\u606f\u4e2d\u4f1a\u5305\u542b\u7ec8\u7aef\u7528\u6237\u7684\u4fe1\u606f\u3002<\/li>\n\n\n\n<li>ID Token \u7531 OpenID Provider \u9881\u53d1\uff0c\u5305\u542b\u5173\u4e8e\u7ec8\u7aef\u7528\u6237\u7684\u4fe1\u606f\u5b57\u6bb5\u3002<\/li>\n\n\n\n<li>UserInfo Endpoint\uff1a\u7528\u6237\u4fe1\u606f\u63a5\u53e3\uff0c\u901a\u8fc7 ID Token \u8bbf\u95ee\u65f6\u8fd4\u56de\u7528\u6237\u4fe1\u606f\u3002<\/li>\n\n\n\n<li>Claims \u6307\u7ec8\u7aef\u7528\u6237\u4fe1\u606f\u5b57\u6bb5\u3002<\/li>\n<\/ol>\n\n\n\n<h3><span id=\"i-3\">\u767b\u5f55\u6d41\u7a0b<\/span><\/h3>\n\n\n\n<ol>\n<li>\u7528\u6237\u5c1d\u8bd5\u767b\u5f55\u5e94\u7528\u7cfb\u7edf\u3002<\/li>\n\n\n\n<li>\u5e94\u7528\u7cfb\u7edf\u53d1\u9001\u8ba4\u8bc1\u8bf7\u6c42\u5230OIDC \u6388\u6743\u670d\u52a1\u5668\u3002<\/li>\n\n\n\n<li>OIDC \u6388\u6743\u670d\u52a1\u5668\u5bf9\u7528\u6237\u8fdb\u884c\u8ba4\u8bc1\u4e0e\u6388\u6743\u3002<\/li>\n\n\n\n<li> OIDC \u6388\u6743\u670d\u52a1\u5668\u8fd4\u56de\u8ba4\u8bc1\u4fe1\u606f\uff0c\u5305\u542b ID Token\u3001Access Token\u548cRefresh Token\u3002<\/li>\n\n\n\n<li> \u5e94\u7528\u7cfb\u7edf\u83b7\u53d6\u8ba4\u8bc1\u4fe1\u606f\u540e\uff0c\u518d\u643a\u5e26Access Token \u53d1\u9001\u8bf7\u6c42\u5230 UserInfo Endpoint\u3002<\/li>\n\n\n\n<li>UserInfo Endpoint \u8fd4\u56de End-User \u7684 Claims\u3002<\/li>\n\n\n\n<li>\u5e94\u7528\u7cfb\u7edf\u9a8c\u8bc1End-User\u4fe1\u606f\u662f\u5426\u6709\u6548\uff0c\u6709\u6548\u5219\u767b\u5f55\u6210\u529f\uff0c\u53cd\u4e4b\u5931\u8d25\u3002<\/li>\n<\/ol>\n\n\n\n<h3><span id=\"i-4\">\u5f00\u53d1\u8be6\u60c5<\/span><\/h3>\n\n\n\n<p>\u5f00\u53d1\u8be6\u60c5\u4ee5\u6388\u6743\u7801\u6a21\u5f0f\u4e3a\u4f8b\u3002<br>\u5e94\u7528\u7cfb\u7edf\u53ef\u4ee5\u901a\u8fc7\u6b64\u63a5\u53e3\u83b7\u53d6 OIDC \u6388\u6743\u670d\u52a1\u5668\u7684\u57fa\u672c\u914d\u7f6e\u4fe1\u606f\u3002<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>HTTP Method\uff1aGET\nhttps:\/\/demo.cloudentify.com\/api\/oauth\/oidc\/{appkey}\/.well-known\/openid-configuration<\/code>              <\/pre>\n\n\n\n<p>\u8fd4\u56de\u793a\u4f8b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>{\n    \"issuer\" : \"https:\/\/test.cloudentify.com\",\n    \"authorization_endpoint\" : \"https:\/\/test.cloudentify.com\/api\/oauth\/authorize\",\n    \"token_endpoint\" : \"https:\/\/test.cloudentify.com\/api\/oauth\/token\",\n    \"token_endpoint_auth_methods_supported\" : [ \"client_secret_basic\"],\n    \"jwks_uri\" : \"https:\/\/test.cloudentify.com\/api\/oauth\/oidc\/{appkey}\/.well-known\/jwks.json\",\n    \"response_types_supported\" : [ \"code\" ],\n    \"grant_types_supported\" : [ \"authorization_code\", \"refresh_token\" ],\n    \"subject_types_supported\" : [ \"public\" ],\n    \"id_token_signing_alg_values_supported\" : [ \"RS256\" ],\n    \"scopes_supported\" : [ \"openid\",\"username\",\"email\",\"phone\",\"address\",\"profile\",\"offline_access\"]\n}<\/code>         <\/pre>\n\n\n\n<p>\u6b65\u9aa41\uff1a<\/p>\n\n\n\n<ul>\n<li>\u83b7\u53d6\u7528\u6237\u6388\u6743\uff0c\u5982\u679c\u7528\u6237\u672a\u767b\u5f55\u7cfb\u7edf\uff0c\u5219\u8981\u6c42\u7528\u6237\u8fdb\u884c\u8eab\u4efd\u8ba4\u8bc1\uff08\u8df3\u8f6c\u81f3\u6388\u6743\u670d\u52a1\u5668\u8fdb\u884c\u8ba4\u8bc1\uff09\uff0c\u5e94\u7528\u53d1\u8d77\u91cd\u5b9a\u5411\u81f3\u6388\u6743\u670d\u52a1\u5668\u7684\u4ee5\u4e0b\u5730\u5740\u3002\u63a5\u53e3\u652f\u6301 PKCE \u6a21\u5f0f\uff0c\u5982\u9700\u8fdb\u884c PKCE \u6a21\u5f0f\u7684\u6821\u9a8c\uff0c\u53ef\u4f20\u5165\u76f8\u5e94\u7684\u53c2\u6570\u3002<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>HTTP Method\uff1aGET\nhttps:&#47;&#47;demo.cloudentify.com\/api\/oauth\/authorize<\/code><\/pre>\n\n\n\n<p>\u8bf7\u6c42\u53c2\u6570\uff1a<\/p>\n\n\n\n<ul>\n<li>client_id\uff1a\u5fc5\u586b\uff0c\u5ba2\u6237\u7aef ID\uff0c\u4ece\u7ba1\u7406\u5e73\u53f0-\u5e94\u7528\u7ba1\u7406-\u4f01\u4e1a\u5e94\u7528\u5217\u8868\u7684App ID\u5904\u83b7\u53d6\uff1b<\/li>\n\n\n\n<li>response_type\uff1a\u5fc5\u586b\uff0c\u56fa\u5b9a\u503c\u201ccode\u201d\uff1b<\/li>\n\n\n\n<li>redirect_uri\uff1a\u5fc5\u586b\uff0c\u6388\u6743\u6210\u529f\u540e\u7684\u91cd\u5b9a\u5411\u5730\u5740\uff1b<\/li>\n\n\n\n<li>state\uff1a\u975e\u5fc5\u586b\uff0c\u5e94\u7528\u7cfb\u7edf\u63d0\u4f9b\u7684\u4e00\u4e2a\u968f\u673a\u5b57\u7b26\u4e32\uff0c\u670d\u52a1\u5668\u4f1a\u539f\u6837\u91cd\u5b9a\u5411\u7ed9\u5e94\u7528\u7cfb\u7edf\uff0c\u9632\u6b62 CSRF\u3001XSRF\uff1b<\/li>\n\n\n\n<li>scope\uff1a\u5fc5\u586b\uff0c\u53c2\u6570\u503c\u5e94\u4ee5 openid \u5f00\u5934\uff1b<\/li>\n\n\n\n<li>code_challenge_method\uff1a\u975e\u5fc5\u586b\uff0cPKCE \u6a21\u5f0f\u7684\u5fc5\u8981\u53c2\u6570\uff0c\u5373 code_challenge \u503c\u7684\u8ba1\u7b97\u65b9\u6cd5\uff0c\u76ee\u524d\u4ec5\u652f\u6301 SHA256\uff1b<\/li>\n\n\n\n<li>code_challenge\uff1a\u975e\u5fc5\u586b\uff0cPKCE \u6a21\u5f0f\u7684\u5fc5\u8981\u53c2\u6570\uff0c\u8ba1\u7b97\u65b9\u5f0f\uff1acode_challenge = code_challenge_method(code_verifier)\u3002code_verifier \u4e3a\u6821\u9a8c\u7801\u539f\u6587\uff0c\u5e94\u7528\u7cfb\u7edf\u9700\u8981\u81ea\u884c\u4fdd\u5b58code_verifier\uff0c\u5e76\u5728\u83b7\u53d6\u6388\u6743\u4ee4\u724c\u7684\u8bf7\u6c42\u4e2d\u5e26\u4e0a\uff0c\u7528\u4f5c\u9a8c\u8bc1\uff0ccode_challenge_method\u4f7f\u7528SHA256\u3002<\/li>\n<\/ul>\n\n\n\n<p>\u8bf7\u6c42\u793a\u4f8b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;demo.cloudentify.com\/api\/oauth\/authorize?client_id=EFTDBB&amp;response_type=code&amp;redirect_uri=http%3A%2F%2Fwww.test.com&amp;scope=openid%20phone%20profile%20offline_access%20email&amp;code_challenge_method=S256&amp;code_challenge=FWOeBX6Qw_krhUE2M0lOIH3jcxaZzfs5J4jtai5hOX4&amp;state=123456<\/code><\/pre>\n\n\n\n<ul>\n<li>\u6388\u6743\u670d\u52a1\u5668\u8fdb\u884c\u8ba4\u8bc1\u540e\uff0c\u5c06\u901a\u8fc7redirect_uri\u4f20\u5165\u7684\u91cd\u5b9a\u5411\u5730\u5740\uff0c\u5411\u5e94\u7528\u4e0b\u53d1\u6388\u6743\u7801\u3002<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>HTTP Method\uff1aGET\nhttp:&#47;&#47;www.test.com?code=b9eb0dc233&amp;state=123456<\/code><\/pre>\n\n\n\n<p>\u6b65\u9aa42\uff1a<\/p>\n\n\n\n<ul>\n<li>\u5e94\u7528\u83b7\u53d6\u5230\u6388\u6743\u7801\u540e\uff0c\u4f7f\u7528\u6388\u6743\u7801\u6362\u53d6\u8bbf\u95ee\u4ee4\u724c\u3002<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>HTTP Method\uff1aPOST\nhttps:&#47;&#47;demo.cloudentify.com\/api\/oauth\/token<\/code><\/pre>\n\n\n\n<p>\u8bf7\u6c42\u53c2\u6570\uff1a<\/p>\n\n\n\n<ul>\n<li>Authorization\uff1a\u5fc5\u586b\uff0c\u5b58\u653eHeader\u4e2d\uff0c \u63a5\u53e3\u9274\u6743\u503c\uff0cBasic base64encode(client_id:client_secret)\uff1b<\/li>\n\n\n\n<li>grant_type\uff1a\u5fc5\u586b\uff0c\u56fa\u5b9a\u503c\u201cauthorization_code\u201d\uff1b<\/li>\n\n\n\n<li>redirect_uri\uff1a\u5fc5\u586b\uff0c\u6388\u6743\u6210\u529f\u540e\u7684\u91cd\u5b9a\u5411\u5730\u5740\u3002\u5982\u679c\u201coauth\/authorize\u201d\u8bf7\u6c42\u5e26\u6709 redirect_uri \u53c2\u6570\uff0c\u5219\u672c\u6b65\u9aa4\u8bf7\u6c42\u5fc5\u987b\u4e0a\u9001 redirect_uri \u53c2\u6570\uff1b<\/li>\n\n\n\n<li>code\uff1a\u5fc5\u586b\uff0c\u6388\u6743\u7801\uff1b<\/li>\n\n\n\n<li>scope\uff1a\u5fc5\u586b\uff0c\u53c2\u6570\u503c\u5e94\u4ee5 openid \u5f00\u5934\uff1b<\/li>\n\n\n\n<li>code_verifier\uff1a\u975e\u5fc5\u586b\uff0cPKCE \u6a21\u5f0f\u5fc5\u8981\u53c2\u6570\uff0ccode_verifier \u6821\u9a8c\u7801\u539f\u6587\u3002<\/li>\n<\/ul>\n\n\n\n<p>\u8bf7\u6c42\u793a\u4f8b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Authorization: 'Basic MTIzNDU2OjEyMzQ1Ng=='\nhttps:&#47;&#47;demo.cloudentify.com\/api\/oauth\/token?grant_type=authorization_code&amp;redirect_\nuri=http%3A%2F%2Fwww.baidu.com&amp;code=123456&amp;code_verifier=2D9RWc5iTdtejle7GTMzQ9Mg15InNmqk3GZL-Hg5Iz0&amp;scope=openid<\/code><\/pre>\n\n\n\n<p>\u8fd4\u56de\u53c2\u6570\uff1a<\/p>\n\n\n\n<ul>\n<li>access_token\uff1aaccess_token\u4ee4\u724c\uff1b<\/li>\n\n\n\n<li>expires_in\uff1aaccess_token\u6709\u6548\u65f6\u95f4\uff1b<\/li>\n\n\n\n<li>token_type\uff1a\u56fa\u5b9a\u503c\u201cbearer\u201d\uff1b<\/li>\n\n\n\n<li>refresh_token\uff1a\u5237\u65b0\u4ee4\u724c\uff1b<\/li>\n\n\n\n<li>id_token\uff1aid_token\u3002<\/li>\n<\/ul>\n\n\n\n<p>\u8fd4\u56de\u793a\u4f8b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n  \"access_token\":\"2YotnFZFEjr1zCsicMWpAA\",\n  \"token_type\":\"bearer\",\n  \"expires_in\":3600,\n  \"refresh_token\":\"tGzv3JOkF0XG5Qx2TlKWIA\",\n  \"id_token\":\"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJzdGV2ZW4iLCJBQ0NPVU5UIjoic3RldmVuIiwi\n   aXNzIjoiaHR0cDpcL1wvd3d3LmJhaWR1LmNvbSIsImV4cCI6MTY1MDA5NTIzOX0.r7NCR3LF3ZoyhlX9UMERt6H_-DFCo6gcuTwsoTmI33U\"\n}<\/code><\/pre>\n\n\n\n<p>\u6b65\u9aa43\uff1a<\/p>\n\n\n\n<ul>\n<li>\u8bbf\u95ee\u4ee4\u724c\u8fc7\u671f\u540e\uff0c\u53ef\u4f7f\u7528\u5237\u65b0\u4ee4\u724c\u7f6e\u6362\u65b0\u7684\u8bbf\u95ee\u4ee4\u724c\u3002<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>HTTP Method\uff1aPOST\nhttps:&#47;&#47;demo.cloudentify.com\/api\/oauth\/token<\/code><\/pre>\n\n\n\n<p>\u8bf7\u6c42\u53c2\u6570\uff1a<\/p>\n\n\n\n<ul>\n<li>Authorization\uff1a\u5fc5\u586b\uff0c\u5b58\u653eHeader\u4e2d\uff0c \u63a5\u53e3\u9274\u6743\u503c\uff0cBasic base64encode(client_id:client_secret)\uff1b<\/li>\n\n\n\n<li>grant_type\uff1a\u5fc5\u586b\uff0c\u56fa\u5b9a\u503c\u201crefresh_token\u201d\uff1b<\/li>\n\n\n\n<li>refresh_token\uff1a\u5fc5\u586b\uff0crefresh_token\uff1b<\/li>\n\n\n\n<li>scope\uff1a\u5fc5\u586b\uff0c\u53c2\u6570\u503c\u5e94\u4ee5 openid \u5f00\u5934\u3002<\/li>\n<\/ul>\n\n\n\n<p>\u8bf7\u6c42\u793a\u4f8b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Authorization: 'Basic MTIzNDU2OjEyMzQ1Ng=='\nhttps:&#47;&#47;demo.cloudentify.com\/api\/oauth\/token?grant_type=refresh_token&amp;refresh_token=tGzv3JOkF0XG5Qx2TlKWIA&amp;scope=openid<\/code><\/pre>\n\n\n\n<p>\u8fd4\u56de\u53c2\u6570\uff1a<\/p>\n\n\n\n<ul>\n<li>access_token\uff1aaccess_token\u4ee4\u724c\uff1b<\/li>\n\n\n\n<li>expires_in\uff1aaccess_token\u6709\u6548\u65f6\u95f4\uff1b<\/li>\n\n\n\n<li>token_type\uff1a\u56fa\u5b9a\u503c\u201cbearer\u201d\uff1b<\/li>\n\n\n\n<li>refresh_token\uff1a\u5237\u65b0\u4ee4\u724c\uff1b<\/li>\n\n\n\n<li>id_token\uff1aid_token\u3002<\/li>\n<\/ul>\n\n\n\n<p>\u8fd4\u56de\u793a\u4f8b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n   \"access_token\":\"2YotnFZFEjr1zCsicMWpAA\",\n   \"token_type\":\"bearer\",\n   \"expires_in\":3600,\n   \"refresh_token\":\"tGzv3JOkF0XG5Qx2TlKWIA\",     \"id_token\":\"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJzdGV2ZW4iLCJBQ0NPVU5UIjoic3RldmVuIiwiaXNzIjoiaHR0cDpcL1wvd3d3LmJhaWR1LmNvbSIsImV4cCI6MTY1MDA5NTIzOX0.r7NCR3LF3ZoyhlX9UMERt6H_-DFCo6gcuTwsoTmI33U\"\n}<\/code><\/pre>\n\n\n\n<ul>\n<li>\u5982\u679c\u540e\u53f0id_token \u7b7e\u540d\u7b97\u6cd5\u8bbe\u7f6e\u4e3aRS256\uff0c\u53ef\u901a\u8fc7\u8be5\u63a5\u53e3\u83b7\u53d6\u7b97\u6cd5\u4fe1\u606f\u548cJWT \u516c\u94a5\u5bf9ID Token\u8fdb\u884c\u9a8c\u8bc1\u3002<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>HTTP Method\uff1aGET\nhttps:&#47;&#47;demo.cloudentify.com\/api\/oauth\/oidc\/{appkey}\/.well-known\/jwks.json<\/code><\/pre>\n\n\n\n<p>\u8fd4\u56de\u793a\u4f8b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n  \"keys\": &#91;\n    {\n      \"kid\": \"d98f49bc6ca4581eae8dfadd494fce10ea23aab0\",\n      \"use\": \"sig\",\n      \"kty\": \"RSA\",\n      \"alg\": \"RS256\",\n      \"e\": \"AQAB\",\n      \"n\":\"tCwhHOxX_ylh5kVwfVqW7QIBTIsPjkjCjVCppDrynuF_3msEdtEaG64eJUz84ODFNMCC0BQ57G7wrKQVWkdSDxWUEqGk2BixBiHJRWZdof\n      z1WOBTdPVicvHW5Zl_aIt7uXWMdOp_SODw-O2y2f05EqbFWFnR2-1y9K8KbiOp82CD72ny1Jbb_3PxTs2Z0F4ECAtTzpDteaJtjeeueRjr7040J\n      AjQ-5fpL5D1g8x14LJyVIo-FL_y94NPFbMp7UCi69CIfVHXFO8WYFz949og-47mWRrID5lS4zpx-QLuvNhUb_lSqmylUdQB3HpRdOcYdj3xwy4M\n      HJuu7tTaf0AmCQ\"\n    }\n  ]\n}<\/code><\/pre>\n\n\n\n<p>\u6b65\u9aa44\uff1a<\/p>\n\n\n\n<ul>\n<li>\u5e94\u7528\u53ef\u901a\u8fc7\u8bbf\u95ee\u4ee4\u724c\u83b7\u53d6\u7528\u6237\u4fe1\u606f\u3002<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>HTTP Method\uff1aPOST\nhttps:&#47;&#47;demo.cloudentify.com\/api\/oauth\/oidc\/me?access_token=f148b9b4-2f02-42dd-8a59-4ca92a12c48b<\/code><\/pre>\n\n\n\n<p>\u8fd4\u56de\u793a\u4f8b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n   \"sub\": \"steven\",\n   \"name\": \"steven\",\n   \"preferred_username\": \"steven\",\n   \"given_name\": \"\",\n   \"family_name\": \"\",\n   \"middle_name\": \"\",\n   \"nickname\": \"steven\",\n   \"profile\": \"profile\",\n   \"picture\": \"picture\",\n   \"website\": \"\",\n   \"gender\": \"U\",\n   \"zoneinfo\": \"\",\n   \"locale\": \"\",\n   \"birthdate\": \"\",\n   \"email\": \"\",\n   \"email_verified\": false,\n   \"phone_number\": \"\",\n   \"phone_number_verified\": false,\n   \"address\": {\n           \"country\": \"\",\n           \"region\": \"\",\n           \"locality\": \"\",\n           \"street_address\": \"\",\n           \"formatted\": \"\",\n           \"postal_code\": \"\"\n},\n   \"authorization\": {\n\t   \"roleList\": &#91;\n\t\t{\n\t\t   \"roleCode\": \"OrderAdmin\",\n\t\t   \"descp\": \"\u8ba2\u5355\u7ba1\u7406\u5458\"\n\t\t},\n            \u2026\n\t     ],\n\t    \"ruleList\": &#91;\n\t\t{\n\t\t    \"accessmode\": 0,\n\t\t    \"accessmodeStr\": \"\u5141\u8bb8\",\n\t\t    \"resourceName\": \"\u8ba2\u5355\u7ba1\u7406\",\n\t\t    \"resourceCode\": \"1000\",\n\t\t    \"parentResourceCode\": \"\"\n\t\t },\n            \u2026\n\t\t]\n\t}\n}<\/code><\/pre>\n\n\n\n<p><strong>\u767b\u5f55\u6001\u6ce8\u9500\uff08\u9000\u51fa\u767b\u5f55\uff09\uff1a<\/strong><\/p>\n\n\n\n<ul>\n<li>\u4e1a\u52a1\u7cfb\u7edf\u4e3b\u52a8\u8c03\u7528\u98de\u5929\u4e91\u4fe1\u6ce8\u9500Access Token\u3002<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>HTTP Method\uff1aPOST\nhttps:&#47;&#47;demo.cloudentify.com\/api\/oauth\/oidc\/endsession\nHeader Content-Type\uff1aapplication\/x-www-form-urlencoded<\/code><\/pre>\n\n\n\n<p>FORM\u8868\u5355\u63d0\u4ea4\uff0c\u8bf7\u6c42\u53c2\u6570\uff1a<\/p>\n\n\n\n<p>id_token_hint\uff1a\u5fc5\u586b\uff0c\u586b\u5165id_token\uff1b<\/p>\n\n\n\n<ul>\n<li>\u4e1a\u52a1\u7cfb\u7edf\u88ab\u52a8\u7b49\u5f85\u98de\u5929\u4e91\u4fe1\u8c03\u7528\u6ce8\u9500\u7528\u6237\u767b\u5f55\u72b6\u6001\u3002<\/li>\n<\/ul>\n\n\n\n<p>\u4e1a\u52a1\u7cfb\u7edf\u63d0\u4f9b\u767b\u51fa\u56de\u8c03URL\uff0c\u63a5\u53e3\u63cf\u8ff0\u5982\u4e0b\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>HTTP Method\uff1aPOST\nHeader Content-Type\uff1aapplication\/x-www-form-urlencoded<\/code><\/pre>\n\n\n\n<p>\u63a5\u53e3\u53c2\u6570\uff1a<\/p>\n\n\n\n<ol>\n<li>id\uff1aUUID\uff1b<\/li>\n\n\n\n<li>principal\uff1a\u767b\u5f55\u4e1a\u52a1\u7cfb\u7edf\u7684\u7528\u6237\u540d\uff1b<\/li>\n\n\n\n<li>request\uff1a\u56fa\u5b9a\u503c\u201clogoutRequest\u201d\uff1b<\/li>\n\n\n\n<li>issueInstant\uff1a\u8bf7\u6c42\u65f6\u95f4\uff0c\u683c\u5f0f\u4e3ayyyy-MM-dd&#8217;T&#8217;HH:mm:ss.SSS&#8217;Z\uff1b<\/li>\n\n\n\n<li>online_ticket\uff1aid_token\u3002<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>\u534f\u8bae\u6982\u8ff0 OIDC\uff08OpenID Connect\uff09\u662f\u4e00\u4e2a\u57fa\u4e8eOAuth 2.0\u534f\u8bae\u7684\u8eab\u4efd\u8ba4\u8bc1\u6807\u51c6\u534f\u8bae\uff0c\u589e\u52a0\u4e86  &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/idaas-doc.cloudentify.com\/docs\/oidc\/\"> <span class=\"screen-reader-text\">OIDC<\/span> \u67e5\u770b\u5168\u6587 &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-global-header-display":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":""},"categories":[25],"tags":[],"_links":{"self":[{"href":"https:\/\/idaas-doc.cloudentify.com\/docs\/wp-json\/wp\/v2\/posts\/1420"}],"collection":[{"href":"https:\/\/idaas-doc.cloudentify.com\/docs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/idaas-doc.cloudentify.com\/docs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/idaas-doc.cloudentify.com\/docs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/idaas-doc.cloudentify.com\/docs\/wp-json\/wp\/v2\/comments?post=1420"}],"version-history":[{"count":44,"href":"https:\/\/idaas-doc.cloudentify.com\/docs\/wp-json\/wp\/v2\/posts\/1420\/revisions"}],"predecessor-version":[{"id":2234,"href":"https:\/\/idaas-doc.cloudentify.com\/docs\/wp-json\/wp\/v2\/posts\/1420\/revisions\/2234"}],"wp:attachment":[{"href":"https:\/\/idaas-doc.cloudentify.com\/docs\/wp-json\/wp\/v2\/media?parent=1420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/idaas-doc.cloudentify.com\/docs\/wp-json\/wp\/v2\/categories?post=1420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/idaas-doc.cloudentify.com\/docs\/wp-json\/wp\/v2\/tags?post=1420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}