code: func claimsFromIDToken(oidcClient *oidc.Client, idToken string) (jose.Claims, error) {
  	jwt, err := jose.ParseJWT(idToken)
  	if err != nil {
  		return nil, trace.Wrap(err)
  	}
  
  	err = oidcClient.VerifyJWT(jwt)
  	if err != nil {
  		return nil, trace.Wrap(err)
  	}
  
  	log.Debugf("Extracting OIDC claims from ID token.")
  
  	claims, err := jwt.Claims()
  	if err != nil {
  		return nil, trace.Wrap(err)
  	}
  
  	return claims, nil
  }
docs: // claimsFromIDToken extracts claims from the ID token.