if you use the session api, the session token is always opaque, but you can also decide to build oidc into your custom login ui and therefore create jwt tokens
We should allow Session Tokens to be exchanged for OAuth / OIDC tokens on the Token Exchange. This would give developers the opportunity to get an access_token from a session token, without the nee...