What is the difference between id_token and access_token in auth0?

@adan 

In Auth0, the id_token and access_token are both used for authentication and authorization purposes, but they serve different purposes and have different scopes of usage.

1. id_token: The id_token is a JSON Web Token (JWT) that contains user information such as the user's identity, claims, and other related information. It is typically used for authentication purposes to prove the identity of the user. It is meant to be consumed by the client application and can be used to authenticate the user, display user information, and make authorization decisions.
2. access_token: The access_token is also a JWT that is used to access protected resources on behalf of the user. It contains information about the user's authorization to access specific resources or perform specific actions. It is typically used to authorize API requests and access protected resources on the server-side. The access_token is obtained after the user has been successfully authenticated and authorized.

In summary, the id_token is used for authentication purposes to prove the identity of the user, while the access_token is used for authorization purposes to access protected resources on behalf of the user.