Verify OpenID Connect ID tokens with nonce and hash claims

OpenID Connect ID tokens now include the nonce from the authorization request when you provide one. ID tokens issued with an access token also include at_hash, and hybrid responses that include an authorization code include c_hash. Your integration can validate these claims to tie the ID token to the original request and its associated credentials.

See the OAuth and OpenID Connect guide for the authorization and token flows.