External ID Tokens#

Apple#

Implicit Flow#

JWT:

eyJraWQiOiJmaDZCczhDIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwczovL2FwcGxlaWQuYXBwbGUuY29tIiwiYXVkIjoiY29tLnNrYWxpby5zcGFjZXMiLCJleHAiOjE2NjA2NDIwMjEsImlhdCI6MTY2MDU1NTYyMSwic3ViIjoiMDAwMDY1LmNlYWNiNjhjZjQyMzRiZDQ5NTViNWJmOWFkNjAyOGVmLjE0MzQiLCJjX2hhc2giOiI2T0lhNko2YnExUTJSNFhlY29FaGd3IiwiZW1haWwiOiJoYW5rQHByYXk0c25vdy5kZSIsImVtYWlsX3ZlcmlmaWVkIjoidHJ1ZSIsImF1dGhfdGltZSI6MTY2MDU1NTYyMSwibm9uY2Vfc3VwcG9ydGVkIjp0cnVlfQ.I1yuQqG2SDxt_Kn6R-dCSH0RpEUOWc8aXovpySUUEy7d8V9BxdVhXIPjJvLhK_gE8s4Yiep9ZSfoc_S5Pa-4wonLRBnNcIsKRtV_1VBBWbqkHOj9-ybAKx166re8PiElBugYpNhsCKONCokiDZ9nLpYsmGkldFgHK-AcGU0erB5c1pXpgnYcDDyWxbzhYV8Nyz7es3XFuaDfIK5EAymmnKz_lKuhGDT2nxLbY8ZOHIuAmdoqXpGGIT-sLXIhwmpwgLkACZqwYqI4dikdEJN0lCZ4xuicqSRSgoKhYFZxAaQeZiP5qjaje9I42KBGsOPTcjEM4GYvDTuUKSQS0TzrMg

Decodes as:

{
  "iss": "https://appleid.apple.com",
  "aud": "com.skalio.spaces",
  "exp": 1660642021,
  "iat": 1660555621,
  "sub": "000065.ceacb68cf4234bd4955b5bf9ad6028ef.1434",
  "c_hash": "6OIa6J6bq1Q2R4XecoEhgw",
  "email": "hank@pray4snow.de",
  "email_verified": "true",
  "auth_time": 1660555621,
  "nonce_supported": true
}

Notice the audience of com.skalio.spaces.

Via Form Post Flow#

Form-post from Apple:

POST /id/v1/oidc/auth/form HTTP/1.1.
host: id.databeam.de.
content-length: 857.
cache-control: max-age=0.
sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104".
sec-ch-ua-mobile: ?0.
sec-ch-ua-platform: "macOS".
upgrade-insecure-requests: 1.
origin: https://appleid.apple.com.
content-type: application/x-www-form-urlencoded.
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36.
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9.
sec-fetch-site: cross-site.
sec-fetch-mode: navigate.
sec-fetch-user: ?1.
sec-fetch-dest: document.
referer: https://appleid.apple.com/.
accept-encoding: gzip, deflate, br.
accept-language: en-GB,en-US;q=0.9,en;q=0.8.
x-forwarded-for: 2001:67c:232c:103:7572:cb36:2202:7017.
connection: close.
.
state=bnjqah7hdodn4pdx&code=c612a62da63ff49f69f95711025c28512.0.mwv.OXcXxIuEdJpJcnMzhajHvA&id_token=eyJraWQiOiJmaDZCczhDIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwczovL2FwcGxlaWQuYXBwbGUuY29tIiwiYXVkIjoiZGUuZGF0YWJlYW0uYXBwIiwiZXhwIjoxNjYwNjQ3NjQ1LCJpYXQiOjE2NjA1NjEyNDUsInN1YiI6IjAwMDA2NS5jZWFjYjY4Y2Y0MjM0YmQ0OTU1YjViZjlhZDYwMjhlZi4xNDM0IiwiY19oYXNoIjoidThGNFdoSU5PMTNwVVBXaDZsVk9MQSIsImVtYWlsIjoiaGFua0BwcmF5NHNub3cuZGUiLCJlbWFpbF92ZXJpZmllZCI6InRydWUiLCJh

JWT:

eyJraWQiOiJmaDZCczhDIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwczovL2FwcGxlaWQuYXBwbGUuY29tIiwiYXVkIjoiZGUuZGF0YWJlYW0uYXBwIiwiZXhwIjoxNjYwNjQ3NjQ1LCJpYXQiOjE2NjA1NjEyNDUsInN1YiI6IjAwMDA2NS5jZWFjYjY4Y2Y0MjM0YmQ0OTU1YjViZjlhZDYwMjhlZi4xNDM0IiwiY19oYXNoIjoidThGNFdoSU5PMTNwVVBXaDZsVk9MQSIsImVtYWlsIjoiaGFua0BwcmF5NHNub3cuZGUiLCJlbWFpbF92ZXJpZmllZCI6InRydWUiLCJhdXRoX3RpbWUiOjE2NjA1NjEyNDUsIm5vbmNlX3N1cHBvcnRlZCI6dHJ1ZX0.aG0lR_AnPmpWQb7FrjNpPL7dWkD3BYUx3jWByH6NYT1wWJ4rMXRgvET4z3Tu9hy7q_-SKsOPr2WBDAM2g6Q6XV9hWSTw8d7eZjx8U8VcqHPgZrLhXeoyW2WOUMrefFGXbgjQwhBfk7snYAaOZg-EUFJR_PzwwSq2FPQj2XT0cmFQbAVj23Irf6tt2bc_f_mMwmDhCNsMDmFtpnNuegTpX0LfgIioX4E94og_8wH75s6SaOeM3zJu1JjnLt-C2b1AdzeiKp6IXQxAJBDXk7IYxksvcEIghSiLWZq44RyZVn_dc3nyQ3HsIW7vaWIsTLpRBlmy1Snu9JcJ9Bgf8qvMyQ

Decodes as:

{
  "iss": "https://appleid.apple.com",
  "aud": "de.databeam.app",
  "exp": 1660647645,
  "iat": 1660561245,
  "sub": "000065.ceacb68cf4234bd4955b5bf9ad6028ef.1434",
  "c_hash": "u8F4WhINO13pUPWh6lVOLA",
  "email": "hank@pray4snow.de",
  "email_verified": "true",
  "auth_time": 1660561245,
  "nonce_supported": true
}

Notice the audience of de.databeam.app.

Google#

Auth Code Flow#

JWT:

eyJhbGciOiJSUzI1NiIsImtpZCI6ImZkYTEwNjY0NTNkYzlkYzNkZDkzM2E0MWVhNTdkYTNlZjI0MmIwZjciLCJ0eXAiOiJKV1QifQ.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.e60SyOYRNt4LGXCoJdPd0c66EEy_wzY_LfjroIyvZ3TWlleYwlspb92OFbtwxe4wvw7qD700o6x7-7RlXafXzQh4si2AjeRPyE77S-bfToYHVZQA3GQ88IRHjTTOz516xFhDcmS04S57wIuLB3PCGFoZLnfKO47LMWEpQezHQI9yXBwyevpdhWhKQmuLTJrFZijssVmeJVRPVsiO2jhn6rArURU5WCjlt_hIkYyub0C-w6PByPtfApxOiVPuoIqeGtzJbdmq9JKxUkIgn-WnNxOE_TcwZTmP9pzyuhcCtD-uaWio4P0y6QNF2IqRSwtjOl9WwdXSESh7fEQi1I_BQA

Decodes as:

{
  "iss": "https://accounts.google.com",
  "azp": "28045425415-j321ric55as3en83u72bscpp023je00p.apps.googleusercontent.com",
  "aud": "28045425415-j321ric55as3en83u72bscpp023je00p.apps.googleusercontent.com",
  "sub": "110837180812657669314",
  "email": "hv@skalio.com",
  "email_verified": true,
  "at_hash": "FD-LRSc2bp7j02TEpybK4g",
  "name": "Henning Verbeek",
  "picture": "https://lh3.googleusercontent.com/a-/AFdZucowMnBEvV-apnwocYy2hsm19vrfZf46TEcXo8YT=s96-c",
  "given_name": "Henning",
  "family_name": "Verbeek",
  "locale": "en-GB",
  "iat": 1660647597,
  "exp": 1660651197
}

Microsoft#

Formpost Flow#

eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Ii1LSTNROW5OUjdiUm9meG1lWm9YcWJIWkdldyJ9.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.L6Kn4n_Ihr3BH2D-QD_PuyZzjbwlH1aXBk7G2Kc6Uov8-t6GoTOUfGBn2G2rKTxh3gc913YnhCS00JeIt73Sfxx4_uzAFqOjhi1Yx_SBtI63BHBM-ouR46HjQgR_VRQwVBI99MABgSlULieNfhuK2ukpbsqM1BmyC9d8zAIXbzJu2_fogUL8zQ5ga8ltxyYE3h2b_4_ECmfeNZZQhqQevB3dLHEkivrL8yF3e-uC-WsBZER63ViOWL9TNV5lSOI1U4DRUofScHdYwcFrxRkv65CTX5nWcJAQI7YXd_-CU8a8ZkgZIX3wICP0v9235slTO2YXpHxjenuXCvPQByhX8g&state=pgnxe2.kh2m3o1e2

Decodes as:

{
  "aud": "ff8c18e3-7438-4dd8-9758-8cf9ec268f53",
  "iss": "https://login.microsoftonline.com/c807e95f-6c60-438e-a888-33a4a9bb8498/v2.0",
  "iat": 1688472565,
  "nbf": 1688472565,
  "exp": 1688476465,
  "aio": "AWQAm/8TAAAA/qIKZ6KuHwHfZShlGsIXf/QQjMEQc3MXIHVllcxRb/MgpQZ06sK+Zane0hvFB50LMfGoID2vLt0aeFnuBtjzBvYp2bBHWGWuEQEMwwCMfNFof3cbEJhrYLf85fsP0jdf",
  "email": "hv@skalio.onmicrosoft.com",
  "name": "Henning Verbeek",
  "nonce": "678910",
  "oid": "f05a45b7-8a2f-4a89-96a6-19c3c8aa9136",
  "preferred_username": "hv@skalio.onmicrosoft.com",
  "rh": "0.AR8AX-kHyGBsjkOoiDOkqbuEmOMYjP84dNhNl1iM-ewmj1MfAAk.",
  "sub": "tuNH4GLZh0S4TXaVAvE_UXr8Hbc3V_4TRXkGw9kbxoA",
  "tid": "c807e95f-6c60-438e-a888-33a4a9bb8498",
  "uti": "44grhLP_lkyUvYAhHq8TAA",
  "ver": "2.0",
  "verified_primary_email": [
    "hv@skalio.onmicrosoft.com"
  ]
}