Quiz
Claims-Based Access in OpenID Connect
Understanding where roles and claims belong when authorizing users in OpenID Connect.
In an OpenID Connect flow, your API needs to enforce role-based access control. Which token and claim should the resource server (API) primarily rely on to authorize the request?