Is ID token with AT is send by IDP (CAS) to service or maybe it is send only to user browser after giving permision by user to his data ( scopes) ?
In debug mode I'm able to find out how my ID token looks like for authenticated user , and a I'm able to decode JWT , but is it possible to see this id token (JWT) in user browser ? Some doc about OIDC are saying that AT and ID Token (JWT) are being send in one time to IDP but how is it look in CAS with OIDC module ? Regards. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/3d23f471-ba14-4174-b4a2-8a90491d4ab2n%40apereo.org.