ID Token (OIDC 1.0)

The ID token is generated by the Tokens API (root) through the OAuth 2.0 endpoints and contains the account ID (sub claim). The audience of the ID token is the client, hence the client should be consuming the token for making the application identity-aware.

Key properties you can configure for the ID token are:

• token lifetime (exp)

• add custom claims using the extension

An example ID token:

{
  "https://api.quasr.io/claims/typ": "oidc1:id", // type
  "https://api.quasr.io/claims/max": 1973910487, // max validity
  "https://api.quasr.io/claims/use": 0, // unlimited use
  "sub": "ffd99cbb-f322-4dcf-8c64-48cc26c55c67", // account ID
  "jti": "9a71b341-94e1-473f-bf0a-c16f72dab533", // token ID
  "aud": "abe5ffb6-2f03-492d-8424-184e28685b11", // client ID
  "iss": "https://b62a482d-7365-4ae9-85a5-1453b3b0d5b8.api.quasr.io", // tenant ID
  "iat": 1642352887, // issued at
  "nbf": 1642352887, // not before
  "exp": 1642353187 // expires at
}