The OAuth2 and OIDC concepts are defined below, with the specificities of an application composed of an SPA frontend and an API backend. Caution: The names of -almost- the same concept are different between OAuth and OIDC, see the schema at the end of this section.