ensure the c_hash value in the ID Token matches the value produced by hashing the authorization code as specified.

Condition: if c_hash is present in the ID Token

The value of c_hash in the ID Token MUST match the value produced in the previous step if c_hash is present in the ID Token.

validate an Authorization Code issued from the Authorization Endpoint with an ID Token by following the specified c_hash calculation procedure.

Condition: when validating an Authorization Code issued from the Authorization Endpoint with an ID Token

To validate an Authorization Code issued from the Authorization Endpoint with an ID Token, the Client SHOULD do the following:

include c_hash in the ID Token.

Condition: if the ID Token is issued from the Authorization Endpoint with a code, which is the case for response_type values code id_token and code id_token token

If the ID Token is issued from the Authorization Endpoint with a code, which is the case for the response_type values code id_token and code id_token token, this is REQUIRED; otherwise, its inclusion is OPTIONAL.

include c_hash in the ID Token.

Condition: otherwise, when the ID Token is not issued from the Authorization Endpoint with a code

If the ID Token is issued from the Authorization Endpoint with a code, which is the case for the response_type values code id_token and code id_token token, this is REQUIRED; otherwise, its inclusion is OPTIONAL.