Next.js + Hydraでいい感じなOIDC+OAuth環境を構築する

express-jwtでJWTを検証
https://github.com/auth0/express-jwt

JWKSを使ってどうやって検証するか
https://github.com/auth0/express-jwt/issues/166

https://github.com/auth0/node-jwks-rsa/tree/master/examples/express-demo

id_tokenとaccess_token
https://auth0.com/blog/why-should-use-accesstokens-to-secure-an-api/

https://auth0.com/blog/id-token-access-token-what-is-the-difference/

https://auth0.com/docs/secure/tokens/access-tokens

nextjsとhydraを組み合わせるときに参考になった
https://github.com/ory/kratos/issues/2179

https://github.com/amorey/hydra-nextjs-reference/blob/main/pages/auth/sign-in.jsx

https://github.com/atreya2011/next-auth-kratos-hydra-test/blob/main/pages/api/auth/[...nextauth].ts

next-auth
https://next-auth.js.org/getting-started/example#configuring-callback-url-oauth-only

next-authでrefresh tokenは自前で実装
https://next-auth.js.org/tutorials/refresh-token-rotation#client-side

hydraのOIDC + OAuth2.0について
https://www.ory.sh/docs/hydra/