The access token is designed for saving size. Scopes are in the ID token. The disadvantage of the access token is the required back channel. But then this schem

The access token is designed for saving size. Scopes are in the ID token. The disadvantage of the access token is the required back channel. But then this scheme also needs a shared backchannel so it's pretty much an access token implementation (you could express it as such) https://developer.okta.com/docs/guides/validate-id-tokens/overview/ https://developer.okta.com/docs/guides/validate-id-tokens/ov...