OptionalaccessAccess token for calling APIs (if different from ID token)
Some providers (like Auth0) use the same token for both authentication and API access. Others (like MSAL) provide separate tokens.
Token expiration timestamp (milliseconds since epoch)
Use this to determine if the token needs to be refreshed.
The ID token as a JWT string
This is what should be sent to the backend GraphQL API in the Authorization header as "Bearer {idToken}"
OptionalscopesOAuth scopes granted with this token
Standardized token information returned by all auth providers
Provides access to tokens without exposing provider-specific claim structures. Each provider implements extractTokenInfoInternal() to extract tokens from their specific storage format.
Example