Verifies an id_token end to end and returns its claims.
Each refusal is separate and separately tested, since a missing one fails silently: signature
(anyone mints a login), iss (another provider's token), aud (a token for a different
application of the same provider, the confused-deputy case), expiry and nonce (replay).
alg comes from the key, never from the token header alone: trusting the header is how none
and the RS256-to-HS256 confusion attack work.
Verifies an
id_tokenend to end and returns its claims.Each refusal is separate and separately tested, since a missing one fails silently: signature (anyone mints a login),
iss(another provider's token),aud(a token for a different application of the same provider, the confused-deputy case), expiry andnonce(replay).algcomes from the key, never from the token header alone: trusting the header is hownoneand the RS256-to-HS256 confusion attack work.