Tier B: the OIDC login the host completes before PHP is entered (the interpreter cannot verify an id_token signature). The browser carries a single-use ticket, not claims, which PHP redeems through cfwOidcClaims.
id_token
cfwOidcClaims
Tier B: the OIDC login the host completes before PHP is entered (the interpreter cannot verify an
id_tokensignature). The browser carries a single-use ticket, not claims, which PHP redeems throughcfwOidcClaims.