\documentclass[10pt,a4paper]{article} % Packages \usepackage{fancyhdr} % For header and footer \usepackage{multicol} % Allows multicols in tables \usepackage{tabularx} % Intelligent column widths \usepackage{tabulary} % Used in header and footer \usepackage{hhline} % Border under tables \usepackage{graphicx} % For images \usepackage{xcolor} % For hex colours %\usepackage[utf8x]{inputenc} % For unicode character support \usepackage[T1]{fontenc} % Without this we get weird character replacements \usepackage{colortbl} % For coloured tables \usepackage{setspace} % For line height \usepackage{lastpage} % Needed for total page number \usepackage{seqsplit} % Splits long words. %\usepackage{opensans} % Can't make this work so far. Shame. Would be lovely. \usepackage[normalem]{ulem} % For underlining links % Most of the following are not required for the majority % of cheat sheets but are needed for some symbol support. \usepackage{amsmath} % Symbols \usepackage{MnSymbol} % Symbols \usepackage{wasysym} % Symbols %\usepackage[english,german,french,spanish,italian]{babel} % Languages % Document Info \author{iMalignus} \pdfinfo{ /Title (open-id-connect.pdf) /Creator (Cheatography) /Author (iMalignus) /Subject (Open ID Connect Cheat Sheet) } % Lengths and widths \addtolength{\textwidth}{6cm} \addtolength{\textheight}{-1cm} \addtolength{\hoffset}{-3cm} \addtolength{\voffset}{-2cm} \setlength{\tabcolsep}{0.2cm} % Space between columns \setlength{\headsep}{-12pt} % Reduce space between header and content \setlength{\headheight}{85pt} % If less, LaTeX automatically increases it \renewcommand{\footrulewidth}{0pt} % Remove footer line \renewcommand{\headrulewidth}{0pt} % Remove header line \renewcommand{\seqinsert}{\ifmmode\allowbreak\else\-\fi} % Hyphens in seqsplit % This two commands together give roughly % the right line height in the tables \renewcommand{\arraystretch}{1.3} \onehalfspacing % Commands \newcommand{\SetRowColor}[1]{\noalign{\gdef\RowColorName{#1}}\rowcolor{\RowColorName}} % Shortcut for row colour \newcommand{\mymulticolumn}[3]{\multicolumn{#1}{>{\columncolor{\RowColorName}}#2}{#3}} % For coloured multi-cols \newcolumntype{x}[1]{>{\raggedright}p{#1}} % New column types for ragged-right paragraph columns \newcommand{\tn}{\tabularnewline} % Required as custom column type in use % Font and Colours \definecolor{HeadBackground}{HTML}{333333} \definecolor{FootBackground}{HTML}{666666} \definecolor{TextColor}{HTML}{333333} \definecolor{DarkBackground}{HTML}{990000} \definecolor{LightBackground}{HTML}{FBF7F7} \renewcommand{\familydefault}{\sfdefault} \color{TextColor} % Header and Footer \pagestyle{fancy} \fancyhead{} % Set header to blank \fancyfoot{} % Set footer to blank \fancyhead[L]{ \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{C} \SetRowColor{DarkBackground} \vspace{-7pt} {\parbox{\dimexpr\textwidth-2\fboxsep\relax}{\noindent \hspace*{-6pt}\includegraphics[width=5.8cm]{/web/www.cheatography.com/public/images/cheatography_logo.pdf}} } \end{tabulary} \columnbreak \begin{tabulary}{11cm}{L} \vspace{-2pt}\large{\bf{\textcolor{DarkBackground}{\textrm{Open ID Connect Cheat Sheet}}}} \\ \normalsize{by \textcolor{DarkBackground}{iMalignus} via \textcolor{DarkBackground}{\uline{cheatography.com/20929/cs/3784/}}} \end{tabulary} \end{multicols}} \fancyfoot[L]{ \footnotesize \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{LL} \SetRowColor{FootBackground} \mymulticolumn{2}{p{5.377cm}}{\bf\textcolor{white}{Cheatographer}} \\ \vspace{-2pt}iMalignus \\ \uline{cheatography.com/imalignus} \\ \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Cheat Sheet}} \\ \vspace{-2pt}Not Yet Published.\\ Updated 13th May, 2016.\\ Page {\thepage} of \pageref{LastPage}. \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Sponsor}} \\ \SetRowColor{white} \vspace{-5pt} %\includegraphics[width=48px,height=48px]{dave.jpeg} Measure your website readability!\\ www.readability-score.com \end{tabulary} \end{multicols}} \begin{document} \raggedright \raggedcolumns % Set font size to small. Switch to any value % from this page to resize cheat sheet text: % www.emerson.emory.edu/services/latex/latex_169.html \footnotesize % Small font. \begin{multicols*}{4} \begin{tabularx}{3.833cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{3.833cm}}{\bf\textcolor{white}{Overview}} \tn \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{The OpenID Connect protocol, in abstract, follows the following steps. \newline % Row Count 2 (+ 2) 1. The RP (Client) sends a request to the OpenID Provider (OP). \newline % Row Count 4 (+ 2) 2. The OP authenticates the End-User and obtains authorization. \newline % Row Count 6 (+ 2) 3. The OP responds with an ID Token and usually an Access Token. \newline % Row Count 8 (+ 2) 4. The RP can send a request with the Access Token to the UserInfo Endpoint. \newline % Row Count 10 (+ 2) 5. The UserInfo Endpoint returns Claims about the End-User.% Row Count 12 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{3.833cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{3.833cm}}{\bf\textcolor{white}{ID Token}} \tn \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{{\bf{iss:}} issuer. \newline % Row Count 1 (+ 1) {\bf{sub:}} subject. \newline % Row Count 2 (+ 1) {\bf{aud:}} audience. \newline % Row Count 3 (+ 1) {\bf{exp:}} expiration time. \newline % Row Count 4 (+ 1) {\bf{iat:}} Time at which the JWT was issued. \newline % Row Count 5 (+ 1) {\bf{auth\_time:}} authentication time. \newline % Row Count 6 (+ 1) {\bf{nonce:}} String value used to associate a Client session with an ID Token. \newline % Row Count 8 (+ 2) {\bf{acr:}} Authentication Context Class Reference.% Row Count 9 (+ 1) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{3.833cm}{x{1.54485 cm} x{1.88815 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{3.833cm}}{\bf\textcolor{white}{Response Types}} \tn % Row 0 \SetRowColor{LightBackground} code & Authorization Code Flow \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} id\_token & Implicit Flow \tn % Row Count 3 (+ 1) % Row 2 \SetRowColor{LightBackground} id\_token token & Implicit Flow \tn % Row Count 4 (+ 1) % Row 3 \SetRowColor{white} code id\_token & Hybrid Flow \tn % Row Count 5 (+ 1) % Row 4 \SetRowColor{LightBackground} code token & Hybrid Flow \tn % Row Count 6 (+ 1) % Row 5 \SetRowColor{white} code id\_token token & Hybrid Flow \tn % Row Count 8 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{3.833cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{3.833cm}}{\bf\textcolor{white}{Display Types}} \tn % Row 0 \SetRowColor{LightBackground} \mymulticolumn{1}{x{3.833cm}}{page} \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{popup} \tn % Row Count 2 (+ 1) % Row 2 \SetRowColor{LightBackground} \mymulticolumn{1}{x{3.833cm}}{touch} \tn % Row Count 3 (+ 1) % Row 3 \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{wap} \tn % Row Count 4 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{3.833cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{3.833cm}}{\bf\textcolor{white}{Prompt types}} \tn % Row 0 \SetRowColor{LightBackground} \mymulticolumn{1}{x{3.833cm}}{none} \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{login} \tn % Row Count 2 (+ 1) % Row 2 \SetRowColor{LightBackground} \mymulticolumn{1}{x{3.833cm}}{consent} \tn % Row Count 3 (+ 1) % Row 3 \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{select\_account} \tn % Row Count 4 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{3.833cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{3.833cm}}{\bf\textcolor{white}{Authorization Code Flow}} \tn \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{The Authorization Code Flow goes through the following steps. \newline % Row Count 2 (+ 2) Client prepares an Authentication Request containing the desired request parameters. \newline % Row Count 4 (+ 2) 1. Client sends the request to the Authorization Server. \newline % Row Count 6 (+ 2) 2. Authorization Server Authenticates the End-User. \newline % Row Count 8 (+ 2) 3. Authorization Server obtains End-User Consent/Authorization. \newline % Row Count 10 (+ 2) 4. Authorization Server sends the End-User back to the Client with an 5. \newline % Row Count 12 (+ 2) 5. Authorization Code. \newline % Row Count 13 (+ 1) 6.Client requests a response using the Authorization Code at the Token Endpoint. \newline % Row Count 15 (+ 2) 7. Client receives a response that contains an ID Token and Access Token in the response body. \newline % Row Count 17 (+ 2) 8. Client validates the ID token and retrieves the End-User's Subject Identifier.% Row Count 19 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{3.833cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{3.833cm}}{\bf\textcolor{white}{Authentication Request}} \tn \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{{\bf{scope:}} scope values. \newline % Row Count 1 (+ 1) {\bf{response\_type:}} authorization processing flow to be used. \newline % Row Count 3 (+ 2) {\bf{client\_id:}} valid client id. \newline % Row Count 4 (+ 1) redirect\_uri:** Redirection URI to which the response will be sent. \newline % Row Count 6 (+ 2) {\bf{state:}} used to maintain state between the request and the callback. \newline % Row Count 8 (+ 2) {\bf{nonce:}} String value used to associate a Client session with an ID Token. \newline % Row Count 10 (+ 2) {\bf{display:}} display interface page (page, popup, touch, wap). \newline % Row Count 12 (+ 2) {\bf{prompt:}} reauthentication and consent prompts (none, login, consent, select\_acount).% Row Count 14 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{3.833cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{3.833cm}}{\bf\textcolor{white}{Successful Authentication Response}} \tn \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{`HTTP/1.1 302 Found Location: \seqsplit{https://client.example.org/cb?code=SplxlOBeZQQYbYS6WxSbIA\&state=af0ifjsldkj`}% Row Count 3 (+ 3) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{3.833cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{3.833cm}}{\bf\textcolor{white}{Access Token Request}} \tn \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{`POST /token HTTP/1.1` \newline % Row Count 1 (+ 1) `Host: server.example.com` \newline % Row Count 2 (+ 1) `Content-Type: \seqsplit{application/x-www-form-urlencoded`} \newline % Row Count 3 (+ 1) `Authorization: Basic \seqsplit{czZCaGRSa3F0MzpnWDFmQmF0M2JW`} \newline % Row Count 5 (+ 2) \seqsplit{`grant\_type=authorization\_code\&code=SplxlOBeZQQYbYS6WxSbIA\&redirect\_uri=https\%3A\%2F\%2Fclient}.example.org\%2Fcb`% Row Count 8 (+ 3) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{3.833cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{3.833cm}}{\bf\textcolor{white}{Access Token Response}} \tn \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{{\bf{access\_token:}} OAuth 2.0 access token. \newline % Row Count 1 (+ 1) {\bf{token\_type:}} token\_type value. \newline % Row Count 2 (+ 1) {\bf{refresh\_token:}} token to refresh authorization. \newline % Row Count 4 (+ 2) {\bf{expires\_in:}} expiration time of the Access Token. \newline % Row Count 6 (+ 2) {\bf{id\_token:}} ID Token.% Row Count 7 (+ 1) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{3.833cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{3.833cm}}{\bf\textcolor{white}{Implicit Flow Overview}} \tn \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{The Implicit Flow follows the following steps: \newline % Row Count 1 (+ 1) 1. Client prepares an Authentication Request containing the desired request parameters. \newline % Row Count 3 (+ 2) 2. Client sends the request to the Authorization Server. \newline % Row Count 5 (+ 2) 3. Authorization Server Authenticates the End-User. \newline % Row Count 7 (+ 2) 4. Authorization Server obtains End-User Consent/Authorization. \newline % Row Count 9 (+ 2) 5.Authorization Server sends the End-User back to the Client with an ID Token and, if requested, an Access Token. \newline % Row Count 12 (+ 3) 6. Client validates the ID token and retrieves the End-User's Subject Identifier.% Row Count 14 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{3.833cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{3.833cm}}{\bf\textcolor{white}{Authentication Request}} \tn \SetRowColor{white} \mymulticolumn{1}{x{3.833cm}}{{\bf{response\_type: }} value is id\_token token or id\_token. \newline % Row Count 2 (+ 2) {\bf{redirect\_uri:}} Redirection URI to which the response will be sent. \newline % Row Count 4 (+ 2) {\bf{nonce:}} String value used to associate a Client session with an ID Token.% Row Count 6 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} % That's all folks \end{multicols*} \end{document}