According to my understanding of ID tokens , ID tokens are typically used to display user information. However, the documentation also says that ID tokens should be validated before they are used. To quote the documentation: These claims are statements about the user, which can be trusted if the co…

I would say it’s possible to find a specific scenario where the actual validation procedure won’t add much to the process; a good example would be the one you mention. If you get the ID token from a server-side component by directly calling the token endpoint and you also dynamically obtain the key …

Why validate ID tokens?

Get Help

Topic		Replies	Views
Is it required/advised to verify an ID Token in a native mobile app? Get Help jwt	2	2102	February 22, 2022
Clarify the usage of ID token for authenticating to an API you own Get Help	3	5049	May 28, 2019
Does React SDK validate ID Token automatically? Get Help jwt , react , id-token	3	3589	May 21, 2021
Validate access token that were created in another IDP Get Help missing-category , other	2	1505	February 15, 2023
Does Auth0Client.LoginAsync Validate the Identification and Access Tokens on the Client Side? Get Help auth0-sdk	3	4265	September 3, 2019

Why validate ID tokens?

Related topics