I am currently going through some documentation on OIDC and one thing that I would like confirmation on is the /authorise flow using prompt=none

If I look at the Auth0 example below, it can't see any reference to a users access or ID Token being passed, which seems odd as the OP would surely need to know this to determine if any sessions are active.

> 
> It could be passed on the Auth Header, or as a cookie but it isn't
>  mentioned or clear and Im hoping someone smarter than me can clarify
>  this.
> 
> 
> 

Auth0 Example:

```
GET https://YOUR_DOMAIN/authorize
    ?response_type=id_token token&
    client_id=...&
    redirect_uri=...&
    state=...&
    scope=openid...&
    nonce=...&
    audience=...&
    response_mode=...&
    prompt=none

```