OIDC

JWTs

  • JWTs encoded as base64 strings have 3 parts
    • You can use this to distinguish them from GCP access tokens

GCP

Get an identity token

gcloud auth print-identity-token
  • This should give an identity token that is the equivalent to the one produced by IAP