Both fields are considered optional because the parsed id_token is a direct result of the trusted server code->token exchange response.
id_token