Skip to main content

New answers tagged

1 vote

Is it good practice to use the sub claim as the user_id in my app

The sub claim, per RFC7519, does indeed "identify the principal". However, its processing is "generally application specific". That means it's hard to reason about its behaviour ...
womble's user avatar
  • 129

Top 50 recent answers are included