def METHOD_NAME(self, access_token, *args, **kwargs):
    response = kwargs.get("response")
    id_token = response.get("id_token")
    # get key id and algorithm
    key_id = get_unverified_header(id_token)["kid"]
    try:
        # retrieve certificate for key_id
        certificate = self.get_certificate(key_id)
        return jwt_decode(
            id_token,
            key=certificate.public_key(),
            algorithms=["RS256"],
            audience=self.setting("KEY"),
        )
    except (DecodeError, ExpiredSignatureError) as error:
        raise AuthTokenError(self, error)