Introduction

Spooky Services is a OAuth2 and OpenID Connect (OIDC)-compatible Identity Provider (IdP)

We follow the standard OAuth2 procedure for authorization

• User Consent (Auth URL) -> Callback Code -> Token Endpoint -> Access Token -> UserInfo Endpoint -> Get User Info

If you are using OIDC, some User Info will be provided at the Token Endpoint via a JSON Web Token (JWT) (id_token), at the same time Access Token will also be provided just like a standard OAuth2 procedure.