Explains the differences between Access Token and ID Token and why the later should never be used to secure an API.
https://auth0.com/docs/api-auth/why-use-access-tokens-to-secure-apis
* Introducing OIDC Conformant Authentication * Access Token * ID Token * JWT * the token's contents