Last update:
ID Token Content validation
Aug 21, 2026
- Issuer in preconfigured values must match the “iss” attribute in JWT Token
- Audience “aud” in JWT token must be same as ClientID
- IDToken must be in valid window – see more note a bit below for lifespan validation.
Time validity – As per specification here token MUST NOT be accepted on or after any specified exp time.
Token validity implementation must satisfy following specifications:
Note: All of these (timestamp related) claims are optional as per specification, however when present in ID Token, they must be validated against so implementation must follow a null-safe pattern without making any mandatory assumption at code-level if a particular claim would be present or not.
Previous:
ID Token Signature verification
Next:
Accessing UserInfo
Share additional feedback to help us improve.
0/255
|
Powered by Aikyam @2025 All rights reserved
+1 866 451 2735
+1 866 451 2735
+1 855 819 5909