Example JWTs

Id token

{
 "at_hash": "NdlfR-HyH_OvW-y130r0pw",
 "sub": "90fec290-550c-4864-8ac7-84dab04d61ff",
 "cognito:groups": [
  "us-east-1_Yn89yKizn_Google"
 ],
 "iss": "https://cognito-idp.us-east-1.amazonaws.com/us-east-1_Yn89yKizn",
 "cognito:username": "Google_101547421181098649763",
 "given_name": "Doug",
 "nonce": "bUR2R8DNsp0KflDW5gwwfcaSmQiB9Ay82xwG8aWPa28BAAIpVcTxgphvXHt6fJiOLhm_U94po4jsKhq_xWAOTxtDlA7gUaRzj-oz1Algaz9NuYIiENpR7qDWWK_BZ0p9sn7llYRfEDr_Dip-dI78wtqj114yOxJN0761u8ImM2o",
 "aud": "25h54vd0cundt7iaeon1rn8a02",
 "identities": [
  {
   "userId": "101547421181098649763",
   "providerName": "Google",
   "providerType": "Google",
   "issuer": null,
   "primary": "true",
   "dateCreated": "1578463776879"
  }
 ],
 "token_use": "id",
 "auth_time": 1581296923,
 "nickname": "Doug Naphas",
 "exp": 1581300523,
 "iat": 1581296923,
 "family_name": "Naphas",
 "email": "dnaphas@joor.com"
}

Access token

{
 "sub": "90fec290-550c-4864-8ac7-84dab04d61ff",
 "cognito:groups": [
  "us-east-1_Yn89yKizn_Google"
 ],
 "token_use": "access",
 "scope": "aws.cognito.signin.user.admin openid profile email",
 "auth_time": 1581296923,
 "iss": "https://cognito-idp.us-east-1.amazonaws.com/us-east-1_Yn89yKizn",
 "exp": 1582410271,
 "iat": 1581296923,
 "version": 2,
 "jti": "90ae518d-6557-4549-ac69-10caa9ec6437",
 "client_id": "25h54vd0cundt7iaeon1rn8a02",
 "username": "Google_101547421181098649763"
}

Refresh token

This seems to not be a JWT.