title: Spring Security and OpenID Connect (OIDC)
body: <p>In my current project I use in a full scope the Spring Security OAuth (<a href="http://projects.spring.io/spring-security-oauth/" rel="noreferrer">http://projects.spring.io/spring-security-oauth/</a>) project to protect our resources (Web API). Everything works fine till now.</p>
  
  <p>I'm now working on the development of the clients and I'm looking for a good support for the authentication scenarios (as OAuth is an authorization protocol). After long, long internet search I'm quite sure I should take the OpenID Connect (<a href="http://openid.net/connect/" rel="noreferrer">http://openid.net/connect/</a>) to fulfill this requirement, as it is "a simple identity layer on top of OAuth 2.0" (I know however, there is no "simple" in case of security topics).</p>
  
  <p>Sad but true I'm not able to find any good resources about the support for OpenID Connect (not to confuse with "pure" OpenID) in Spring Security. There is a OpenID  Connect reference implementation at <a href="https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server" rel="noreferrer">https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server</a> but I have expected something similar direct in/from Spring Security with comprehensive documentation and so on. I have found about 2 years old discussion about it here <a href="https://github.com/spring-projects/spring-security-oauth/issues/220" rel="noreferrer">https://github.com/spring-projects/spring-security-oauth/issues/220</a> but what is the current status? Looking for "Spring Security support for OpenID Connect" does not deliver any "tangible" results. </p>
  
  <p>Do you have any infos, documentation and/or experience regarding implementation of the OpenID Connect with the help of Spring Security?</p>