diff --git a/docs/src/main/asciidoc/security-authentication-mechanisms.adoc b/docs/src/main/asciidoc/security-authentication-mechanisms.adoc index f5cc1a250b9e0..08683efef4ba0 100644 --- a/docs/src/main/asciidoc/security-authentication-mechanisms.adoc +++ b/docs/src/main/asciidoc/security-authentication-mechanisms.adoc @@ -448,7 +448,12 @@ For more information, see the Quarkus xref:security-oauth2.adoc[Using OAuth2] gu endif::no-quarkus-elytron-security-oauth2[] [[oidc-jwt-oauth2-comparison]] +ifndef::no-quarkus-elytron-security-oauth2[] == Choosing between OpenID Connect, SmallRye JWT, and OAuth2 authentication mechanisms +endif::no-quarkus-elytron-security-oauth2[] +ifdef::no-quarkus-elytron-security-oauth2[] +== Choosing between OpenID Connect and SmallRye JWT authentication mechanisms +endif::no-quarkus-elytron-security-oauth2[] Use the following information to select the appropriate token authentication mechanism to secure your Quarkus applications. diff --git a/docs/src/main/asciidoc/security-identity-providers.adoc b/docs/src/main/asciidoc/security-identity-providers.adoc index aee512286f909..081378f54bde7 100644 --- a/docs/src/main/asciidoc/security-identity-providers.adoc +++ b/docs/src/main/asciidoc/security-identity-providers.adoc @@ -17,7 +17,7 @@ In the Quarkus Security framework, identity providers play a crucial role in aut [[identity-providers]] `IdentityProvider` converts the authentication credentials provided by `HttpAuthenticationMechanism` to a `SecurityIdentity` instance. -Some extensions, for example, `OIDC`, `OAuth2`, and `SmallRye JWT`, have inline `IdentityProvider` implementations specific to the supported authentication flow. +Some extensions, such as the ones for OIDC and SmallRye JWT, include inline `IdentityProvider` implementations specific to the supported authentication flow. For example, `quarkus-oidc` uses its own `IdentityProvider` to convert a token to a `SecurityIdentity` instance. If you use Basic or form-based authentication, you must add an `IdentityProvider` instance to convert a username and password to a `SecurityIdentity` instance.