Meet the JWT-based token that distinguishes OIDC from standard OAuth. We’ll dissect its structure—Header, Payload, Signature—and examine key claims like sub, iss, and exp that prove a user's identity.