Hacker News new | ask | show | jobs
by user5994461 2189 days ago
Where are you blocked in this use case?

The easiest flow IMO: The API client needs a service account (username and password like a human). It authenticates to the OIDC server with the username/password and obtains a token. Then it can call any API service with the token.

It's quite straightforward really.