OIDC
JWTs
- JWTs encoded as base64 strings have 3 parts
- You can use this to distinguish them from GCP access tokens
GCP
Get an identity token
gcloud auth print-identity-token
- This should give an identity token that is the equivalent to the one produced by IAP