I remember when I first read about it (late 2000s? not sure when), I thought it was an awesome idea and surely the web of the future would be full of “log in with OpenID” buttons.
Instead it is now full of “log in with Google”, “log in with Facebook”, “log in with Microsoft” buttons.
You can’t arbitrarily trust any OpenID implementation. I could easily have authelia report that I am schnurrito and the app has no way to confirm that.
Yes, you did: OpenID.
I remember when I first read about it (late 2000s? not sure when), I thought it was an awesome idea and surely the web of the future would be full of “log in with OpenID” buttons.
Instead it is now full of “log in with Google”, “log in with Facebook”, “log in with Microsoft” buttons.
It is just a framework. OpenID en OIDC are probably used by those companies to federate user access.
You can’t arbitrarily trust any OpenID implementation. I could easily have authelia report that I am schnurrito and the app has no way to confirm that.