Can Oauth also gives user’s identity?
I am really confused when I read that Oauth is used when you want authorization & OpenId when you want authentication i.e. getting user’s identity.
Why is it not possible to use OAuth implicit grant flow with client secret or PKCE?
I have a question about OAuth.