Assertion: authorization code grant | /r/CapableOf | obtain the id_token
Facets:
Source sentences:
text: In contrast, when the app uses the Authorization Code grant to obtain the id_token , the token is sent over a secure HTTPS connection which provides a baseline level of security even if the token signature isn’t validated.