Add mention that subject could get claims from server side sessions.

[RolandGuijt]

No description provided.

[github-actions]

Azure Static Web Apps: Your stage site is ready! Visit it here: https://happy-ocean-048b8e60f-507.eastus2.azurestaticapps.net

[josephdecock]

I think we should incorporate this into the previous paragraph to make which claims you'll get more obvious. If server side sessions are on, we always use that. If they're off, then we give you different claims depending on the context.

[josephdecock]

And maybe we can explain the the claims identity at the time of grant creation is stored in the grant store. So if you are in the profile service in the context of using a grant (exchanging a code for a token, etc), we can give you those claims, but if you are in the user info endpoint, we don't have anything except what is in the access token sent to the user info endpoint.

[github-actions]

Azure Static Web Apps: Your stage site is ready! Visit it here: https://happy-ocean-048b8e60f-507.eastus2.azurestaticapps.net

[RolandGuijt]

@josephdecock I've used bullets now to create an if..then structure which should be more clear.

[github-actions]

Azure Static Web Apps: Your stage site is ready! Visit it here: https://happy-ocean-048b8e60f-507.eastus2.azurestaticapps.net

[RolandGuijt]

@josephdecock Agreed.

[github-actions]

Azure Static Web Apps: Your stage site is ready! Visit it here: https://happy-ocean-048b8e60f-507.eastus2.azurestaticapps.net