Verify that the access token and id token is actually related to each other

@daniel7,

I am assuming this is somewhat related to your other topic.

If you get a JWT rather than an opaque token, you can verify the user of the token via the sub claim.

See JWT claims here:

Hope this helps!

Dan

1 Like