JWT Payload

Gemini example:

{
 "iss": "https://auth.example.com/",
 "sub": "user_8829104",
 "aud": "my-photo-printing-app",
 "iat": 1714982400,
 "exp": 1714986000,
 "scope": "openid profile photos.read",
 "email": "[email protected]",
 "email_verified": true,
 "roles": ["editor", "billing_admin"],
 "groups": ["engineering_team", "beta_testers"],
 "tenant_id": "org_445"
}

Related

• OIDC uses JWT tokens although is not enforced in the standard.

See also

• JWT, openssl rand, Bearer token, HMAC, JWT_SECRET_KEY, JWT signatures, HS256, RS256, JWKS URI, JWT Payload
• OAuth, Bearer Token, Scope, Google for authentication, PKCE, oAuth authorization flow, express-oauth-server, Authorization Code flow, /oauth2/default, okta_app_oauth, /oauth2/, OAuth 2.0 Authorization Framework, OAuth CLIs, oauth2c, Confidential client, Best practices
• Template:Payload