OpenID Connect JWT令牌包含一个
id_token
和一个access_token
(例如:"access_token": "SlAV32hkKG"
)。那么access_token
是用来做什么的?GET /userinfo HTTP/1.1
Host: openid.c2id.com
Authorization: Bearer SlAV32hkKG
HTTP/1.1 200 OK
Content-Type: application/json
{
"sub" : "alice",
"email" : "alice@wonderland.net",
"email_verified" : true,
"name" : "Alice Adams",
"picture" : "https://c2id.com/users/alice.jpg"
}