ESRI Authentication Access Token

HarryMalming

Hi,

I want to secure my server/API with Auth0 bearer token validation, however the Access_Token from my client login does not appear to be a valid JWT token.

This is how I retrieve it on the client (second step): 

https://www.arcgis.com/sharing/rest/oauth2/authorize?client_id=CLIENT_ID&response_type=token&expiration=20160&redirect_uri=http://localhost:3000/esriauthredirect

 

Questions:

1. What type of token did I just receive?

2. Can I receive a JWT token?

3. How do I validate the token if it's not JWT (I'm using Java/SpringBoot on the server)?

 

Thanks,

Harry