Used by these tools

方案功能与规格

SpecRFC 6749 (OAuth 2.0), OpenID Connect 1.0
FlowsAuthorization Code + PKCE, Client Credentials, Device Authorization
TokensAccess tokens (short-lived), Refresh tokens, ID tokens (JWT)
PkcePKCE — RFC 7636 (required for public clients)
Use Case"Sign in with..." flows, API authorization, SSO