Who Are You? I Really Want to Know… the Magic Behind OIDC

on YouTube ↗34m

" summary

Explains how OpenID Connect acts as a thin layer over OAuth to provide workload identity federation so CI and Kubernetes can trade short-lived ID tokens (JWT) for cloud credentials without long-lived keys; demos include GitHub Actions injecting a per-run token, git-sign/Sigstore opening a browser callback, and exchanging tokens for GCP service accounts which successfully assume roles. Covers discovery, JWKS key rotation, and why verifying issuer and audience claims prevents forged tokens.

AI-written summary · about

" chapters (7)

1. 0:00Introduction
2. 1:07Understanding OAuth
3. 8:54Limitations of OAuth
4. 11:28Introduction to OIDC
5. 19:19Workload identity federation
6. 26:19Security and token validation
7. 31:21Federation mechanics and wrap-up

" related talks

• 28mOAuth 2.0 and OIDCSara Daqiq · Silicon Valley Code Camp 2018
• 10mWhy OpenID Connect is More Secure then CertificatesMarc Boorshtein · Cloud Native Security Day North America 2020
• 36mTo Identity and BeyondBen Dechrai · PyCon India 2020
• 24mIntroduction to OpenID ConnectKarim Pinchon · Forum PHP 2020
• 52mOAuth Demystified!Sebastien Stormacq · Voxxed Days Luxembourg 2022
• 33mOAuth and OpenID Connect Deep DiveTravis Spencer · Nordic APIs Stockholm 2013
• 45mDemystifying OAuth2 and OIDCNejmeddine Ben Ouarred · DevFest Toulouse 2025
• 01h 12mIdentity 2.0: the what, why and how of social and federated loginFraser Tweedale · PyCon AU 2017