ID token, JWT

Also written: ID token, JWT, JSON Web Token, access token, access_token

A signed pass proving who a user is, made of a header, a payload of facts and a signature, separated by dots. Anyone can read a JWT but only the service can sign one, and it lasts an hour before the SDK renews it.