Get an access-token by providing an id token

[tyf]

Hey there @christian.weissmann!

Thanks for the detailed description

@christian.weissmann

Sine the ID token proves a success login, I would think this makes sense to issue an access token. However I did not find documentation on a process like this.

While I’m not entirely sure what your environment looks like, in general it is not possible to exchange an ID Token for an Access Token. The ID Token represents successful Authentication, but not Authorization. Depending on your particular use case, you may want to explore silent authentication which is a way to essentially re-authorize (/authorize) without prompting the user.

What is the difference between idToken & accessToken?

Question: What is the difference between idToken and accessToken and why can’t I just use idToken to call my API? Answer: Auth0 uses two types of tokens: JSON Web Tokens (JWT): Tokens that conform to the JSON Web Token (JWT) standard and contain information about an identity in the form of claims. They are self-contained in that it is not necessary for the recipient to call a server to validate the token. Opaque tokens: Tokens in a proprietary format that typically contain some identifier …

Hope this helps!