[{"data":1,"prerenderedAt":163},["ShallowReactive",2],{"navigation":3,"\u002F":55,"\u002F-surround":160},[4,8,38],{"title":5,"path":6,"stem":7},"Общая информация","\u002F","1.index",{"title":9,"icon":10,"path":11,"stem":12,"children":13,"page":10},"Авторизация",false,"\u002Fauth","2.auth",[14,27],{"title":15,"icon":10,"path":16,"stem":17,"children":18,"page":10},"Авторизация пользователя","\u002Fauth\u002Foidc","2.auth\u002F1.oidc",[19,23],{"title":20,"path":21,"stem":22},"Описание взаимодействия","\u002Fauth\u002Foidc\u002Finteraction","2.auth\u002F1.oidc\u002F1.interaction",{"title":24,"path":25,"stem":26},"Описание запросов","\u002Fauth\u002Foidc\u002Frequests","2.auth\u002F1.oidc\u002F2.requests",{"title":28,"icon":10,"path":29,"stem":30,"children":31,"page":10},"Авторизация сервисов","\u002Fauth\u002Fservices","2.auth\u002F2.services",[32,35],{"title":5,"path":33,"stem":34},"\u002Fauth\u002Fservices\u002Finteraction","2.auth\u002F2.services\u002F1.interaction",{"title":24,"path":36,"stem":37},"\u002Fauth\u002Fservices\u002Frequests","2.auth\u002F2.services\u002F2.requests",{"title":39,"icon":10,"path":40,"stem":41,"children":42,"page":10},"Данные пользователя","\u002Fscopes","3.scopes",[43,47,51],{"title":44,"path":45,"stem":46},"Профиль","\u002Fscopes\u002Fprofile","3.scopes\u002F1.profile",{"title":48,"path":49,"stem":50},"Обучение","\u002Fscopes\u002Fedu","3.scopes\u002F2.edu",{"title":52,"path":53,"stem":54},"Работа","\u002Fscopes\u002Fwork","3.scopes\u002F3.work",{"id":56,"title":5,"body":57,"description":150,"extension":155,"meta":156,"navigation":157,"path":6,"seo":158,"stem":7,"__hash__":159},"docs\u002F1.index.md",{"type":58,"value":59,"toc":149},"minimark",[60,65,69,73,80,86,101,113,119,125,131,137,143],[61,62,64],"h2",{"id":63},"что-такое-itmoid","Что такое ITMO.ID ?",[66,67,68],"p",{},"ITMO.ID – единая система авторизации (SSO) Университета ИТМО.",[61,70,72],{"id":71},"основные-понятия","Основные понятия",[66,74,75,79],{},[76,77,78],"strong",{},"Сервер авторизации (Authorization server)"," – сервер, осуществляющий авторизацию и аутентификацию пользователей",[66,81,82,85],{},[76,83,84],{},"Клиент (Client)"," – конечное приложение, подключаемое к SSO",[66,87,88,91,92],{},[76,89,90],{},"OAuth2.0"," – стандарт авторизации пользователей. Подробное описание стандарта: ",[93,94,95],"span",{},[96,97,98],"a",{"href":98,"rel":99},"https:\u002F\u002Foauth.net\u002F2\u002F",[100],"nofollow",[66,102,103,106,107],{},[76,104,105],{},"OpenID Connect (OIDC)"," – протокол аутентификации, построенный на базе протокола OAuth2.0. Подробное описание стандарта: ",[93,108,109],{},[96,110,111],{"href":111,"rel":112},"https:\u002F\u002Fopenid.net\u002Fconnect\u002F",[100],[66,114,115,118],{},[76,116,117],{},"JWT (JSON Web Token)"," – стандарт токенов доступа, основанный на формате JSON. Токены создаются сервером авторизации, подписываются секретным ключом и передаются клиенту.",[66,120,121,124],{},[76,122,123],{},"JWS (JSON Web Signature)"," – стандарт подписи токенов доступа. Токены подписываются секретным ключом на сервере авторизации, клиент должен проверить подпись публичным ключом при получении запроса с токеном.",[66,126,127,130],{},[76,128,129],{},"JWK (JSON Web Key)"," – стандарт представления ключей для подписи токенов.",[66,132,133,136],{},[76,134,135],{},"Access Token"," – JWT-токен выполняющий роль токена доступа. Содержит в себе информацию о пользователе.",[66,138,139,142],{},[76,140,141],{},"Refresh Token"," – Одноразовый JWT-токен, используемый для обновления Access Token.",[66,144,145,148],{},[76,146,147],{},"Scope"," – Параметр обозначающий набор данных\u002Fразрешений, которым дается доступ.",{"title":150,"searchDepth":151,"depth":151,"links":152},"",2,[153,154],{"id":63,"depth":151,"text":64},{"id":71,"depth":151,"text":72},"md",{},true,{"title":5,"description":150},"Y0a3-gY3eq6bpYrGM0Jb3pMAv8XIV2H6loQYDc_B58M",[161,162],null,{"title":20,"path":21,"stem":22,"description":150,"children":-1},1786744261388]