https://www.youngju.dev/blog 천천히 올바르게. AI Researcher & DevOps Engineer Youngju's blog. GPU/CUDA, LLM, MLOps, Kubernetes AI workloads, and data engineering — plus mindset essays on confidence, routines, health, and sport psychology. ko fjvbn2003@gmail.com (Youngju Kim) fjvbn2003@gmail.com (Youngju Kim) Sat, 15 Aug 2026 00:00:00 GMT https://www.youngju.dev/blog/architecture/2026-08-15-guide-auth-and-authorization.en https://www.youngju.dev/blog/architecture/2026-08-15-guide-auth-and-authorization.en OAuth 2.0 is an authorization framework; OIDC is the authentication layer on top of it. This guide corrects the flows that fell out of the recommendations, the illusion of JWT validation, and the real trade-offs of token storage — using the text of RFC 6749, 9700, 7636, 7519, 8725, OIDC Core, and the OWASP cheat sheets. If the existing OAuth deep dive was about how it works, this one is about where it goes wrong. Sat, 15 Aug 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) 인증인가oauthoidcjwt보안세션 https://www.youngju.dev/blog/architecture/2026-08-15-guide-auth-and-authorization.ja https://www.youngju.dev/blog/architecture/2026-08-15-guide-auth-and-authorization.ja OAuth 2.0 は認可フレームワークであり、その上に認証を載せるのが OIDC です。推奨から外れたフロー、JWT 検証をめぐる錯覚、トークン保存場所のトレードオフを、RFC 6749・9700・7636・7519・8725、OIDC Core、OWASP チートシートの原文で整理します。既存の OAuth 詳解が「どう動くか」なら、この記事は「どこで間違えるか」です。 Sat, 15 Aug 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) 인증인가oauthoidcjwt보안세션 https://www.youngju.dev/blog/architecture/2026-08-15-guide-auth-and-authorization https://www.youngju.dev/blog/architecture/2026-08-15-guide-auth-and-authorization OAuth 2.0은 인가 프레임워크이고 OIDC가 그 위에 인증을 얹습니다. 권장에서 빠진 플로우, JWT 검증에 대한 착각, 토큰 저장 위치의 교환 조건을 RFC 6749·9700·7636·7519·8725와 OIDC Core, OWASP 치트시트 원문으로 정리합니다. 기존 OAuth 심화 글이 "어떻게 동작하는가"였다면 이 글은 "어디서 틀리는가"입니다. Sat, 15 Aug 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) 인증인가oauthoidcjwt보안세션