When to provide an id_token and when an access_token? How to use them correctly?

H

heducose2017-07-23 00:42:22

JSON Web Token

heducose, 2017-07-23 00:42:22

JWT. How and when to apply them?
Here, for example, 3 scenarios: SIGNUP, LOGIN, SECRET_ROUTE.
Do I need to provide both tokens on SIGNUP?
When passing through SECRET_ROUTE, check only access_token?
Why is id_token needed then?
What to issue if the user comes from a clean browser to LOGIN (i.e. already registered user)?

Reply

Answer the question

In order to leave comments, you need to log in

0 answer(s)