Other properties.
Anchored refresh token. Represents a sub-part (usually the first 6 letters) of the refresh token. Anchor is used for invalidation purposes.
The "aud" (audience) claim identifies the recipients that the JWT is intended for.
Each principal intended to process the JWT must identify itself with a value in the audience claim.
If the principal processing the claim does not identify itself with a value in the aud claim when this claim is present, then the JWT must be rejected.
The "exp" (expiration time) claim identifies the expiration time on or after which the JWT must not be accepted for processing. The value should be in NumericDate format.
The "iat" (issued at) claim identifies the time at which the JWT was issued.
Identifies principal that issued the JWT.
The not-before time claim identifies the time on which the JWT will start to be accepted for processing.
Role of the subject (e.g. admin, user).
Identifies the subject of the JWT.
JWT payload that has been issued to clients.