Advanced security considerations

Below you can find guides to advanced techniques to increase the security of your OIDC implementation.

Proof Key for Code Exchange (PKCE)

Add PKCE to your OIDC flows

Private Key JWT

Authenticate by signing a JWT with a private key

Pushed Authorization Requests (PAR)

Protect your authorization parameters with PAR

Encrypted/signed responses

Receive encrypted/signed responses from Signicat

Encryption/signing of the request object

Send signed and encrypted requests to Signicat