如何从不记名令牌转换为实体ID？

Question

Likely a noob question which is answered best by pointing to something else than the direct answer, BUT:

I have setup a web api with identity authentication. When someone logs in they login with email/password by calling /token , which gives them the bearer token they can use.

However, what is the best practice to get company settings? Is that calling an /customer?email=email ? I guess my question really is: How do you go from token to customerid for instance?

Answer 1

Since you are already creating a bearer token, you can put anything you want or need inside the token as claims.

If the company is not related to your account, then the beginning of your question (about the /token endpoint) is irrelevant,