Token exchange

• На основе access token выдается 2й для другого сервиса например.
• ID token will not have granted scopes (I know, this is another pain point).
• JWTs contain claims, which are statements (such as name or email address) about an entity (typically, the user) and additional metadata. The OpenID Connect specification defines a set of standard claims.
•