I’m currently experiencing an issue with token validation for two of my applications: a web application built with React and a native app built with Flutter. In the web app, token validation works when I use the ID Token but fails when I use the Access Token. However, in the native Flutter app, token validation fails for both the ID Token and Access Token.
To replicate the issue, I authenticate the user in both apps and obtain the ID Token and Access Token. I then make requests to my protected API using these tokens. In the web application, only the ID Token allows access, while the Access Token does not. In the native app, both tokens fail to validate