CheRC

Поздравляю, какие нужные слова..., великолепная мысль
Since the id token is not signed by the api, the api would not have had chance pick up whether the application modified the token (for example, whether it added additional areas), if if it accepted the id http://miamiofficeit.com/lorem-ipsum-dolor-nulla-amet/.