```json5
  {
    "id_token": "id_token_...",
    "scope": "offline_access groups email profile openid", 
    "access_token": "access_token_...", 
    "token_type": "Bearer", 
    "refresh_token": "refresh_token_...",    // if scope contains offline_access
    "expires_in": 28800
}
```