Fthere are two options
Fyou can either use the opaque session token, with that you can make a get session towards the session api, and validate what the session informations tell
For you implement the oidc standard in your login ui so you get some standardized tokens
FTo build your own login ui for your own application it is not necessary to have the OIDC standard included or any additional work that has to be done.
