Login With Amazon (LWA) 服务是否产生 JWT 令牌?

Does Login With Amazon (LWA) service produce a JWT token?

Login with Amazon (LWA) service produces a bearer token which doesn't seem to be a valid JWT token according to https://jwt.io/ and http://jwt.calebb.net 个解码器生成的访问令牌:

Atza|IwEBIB2nUez1mH8PBGvzX5FbKb7zKdMJJd_isubqRPZub***sT7ubOV_IFiS-isAvrd-tIV4-1FkH8nZ3q8pjAsQ8bSpm812VdzJ2KLdHgRDRDd1F8b0oO4gYiVoW_2ROOysAT5DvEz7MzlVMVSwFgrOPLwYA_naa6qV0osBrAz4VM_rIXYWj*********_40DDEwNcz27myJvXJUTObwiG02P6jbcqqNZy1AlGG2spaz0WfIWbuX1b5XFmroB1lPavu8l0PIq3QNn5J38PdqCYqpOuZqIKvLkSVVB9YonX6E33Z4wR9cpQWGUWrEuXwcUdxVEaN0PtzbdDfXXXXXX10XsR7tgjSjBahyn40vzfSWe_P-jkuKN-7Bxy5vARughxeKSZ0el0kFeoYXdJlNR5qE8VQQpQHBe7Y-JrmA4VyGo6MyqgJvrAvFtvee5Pn8bTSV**********0t4sOQH1FzN2Rsdikp26sGnSWwPmGiD_VNvubIHCnXtkKPq62TnFMHsptl-va1I_4gVZgYt6dBylCA08-s9lKwq8orWcWvcnUtw

我只是想验证一下上面的说法是否正确。以及对以下内容进行一些澄清:

What is the relationship/the difference between a bearer token and a JWT and when the former need to be used in favor of latter (or otherwise)?

JWT 只是一种格式。我不知道不记名令牌是什么意思,但是如果您参考 RFC6750,在这种情况下可以使用 JWT 令牌以及任何其他符合不记名凭证语法的令牌。

格式和协议之间的比较没有意义。

Is it possible to convert from one format to another? Are they interchangealbe?

由于您提供的令牌看起来不透明,因此很难将其从这种格式转换为另一种格式。可以通过详细的文档来做到这一点。

Is LWA OpenID Connect compliant? Would an OpenID Connect compliant IdP be required to produce and id token in the JWT format or is it free to use any format of its choosing?

没有。在 OAuth2/OIDC 上下文中,与可以 have any format you want, the ID token must be a JWT (signed and possibly encrypted). No other format is allowed by the specification.

的访问令牌相反