Checks that a renewed ID Token describes the same sign-in: the same iss and sub, and the same auth_time where both carry one.
iss
sub
auth_time
the kept tokens record
the renewed ID Token's claims
{ ok }, with why when not
{ ok }
why
Checks that a renewed ID Token describes the same sign-in: the same
issandsub, and the sameauth_timewhere both carry one.