ID Token Structure & Signature
Deconstruct the ID Token (JWT) header, payload, and signature, understanding how it's signed and what information it contains.
Meet the ID Token
In OpenID Connect (OIDC), the ID Token is a crucial piece of information. It's a security token that contains claims about the authentication of an end-user by an Authorization Server.
Think of it as a digital ID card for the user, issued after they successfully log in.
ID Tokens Are JWTs
ID Tokens are always formatted as JSON Web Tokens (JWTs). A JWT is a compact, URL-safe means of representing claims to be transferred between two parties.
Every JWT has three main parts, separated by dots:
- Header
- Payload
- Signature
All lessons in this course
- ID Token Structure & Signature
- JWS and JWK Sets
- Token Revocation & Introspection
- Validating Standard ID Token Claims