title: OAuth2.0 and OpenID Connect Confusing
body: <p>I am confused about the use of OAuth 2.0 as an Authorization method and OpenID Connect as an Authentication method. </p>
  
  <p>Based on my knowledge <strong>OAuth 2.0</strong> is only an Authorization method. In other words, this is the process to request an ACCESS_TOKEN and RECEIVE this ACCESS_TOKEN, like depicted in the image below in yellow ellipse: (simplified)</p>
  
  <p><a href="https://i.stack.imgur.com/0kwQX.png" rel="noreferrer"><img src="https://i.stack.imgur.com/0kwQX.png" alt="enter image description here"></a></p>
  
  <p>Before an OAuth 2.0 Client retrieves an ACCESS_TOKEN from an Authorization Server this Server should verify if the User allows it and this is an Authentication Process that OAuth 2.0 does not care about.</p>
  
  <p>When OpenID Connect is included in the mix it allows for an Authentication Method as well, but in my knowledge OpenID Connect just adds a "Claim" in the JWT Token that holds information about user that is using the service, like: email, name and others. </p>
  
  <p>My questions are:</p>
  
  <ol>
  <li>Why not ignore OpenID Connect and just add more "claims" in OAuth
  2.0 to get information about users?</li>
  <li>Is my description of the flows correct?</li>
  </ol>