title: Id_token lifetime with respect to access_token lifetime (OpenID Connect)
body: <p>Is id_token meant to have a longer lifetime than access token? </p>
  
  <p>Here the idea that the id_token can have a short lifetime is suggested:
  <a href="https://stackoverflow.com/questions/25686484/what-is-intent-of-id-token-expiry-time-in-openid-connect">What is intent of ID Token expiry time in OpenID Connect?</a></p>
  
  <p>However, here it is said that id_token lifetime is set to 10 hours by default to optimize performance.</p>
  
  <p><a href="https://auth0.com/docs/tokens/id-token" rel="nofollow noreferrer">https://auth0.com/docs/tokens/id-token</a></p>
  
  <p>I have seen Openidc client libraries that do not allow access to resources when either the access or id token is invalid (e.g. it has expired).
  <a href="https://github.com/damienbod/angular-auth-oidc-client" rel="nofollow noreferrer">https://github.com/damienbod/angular-auth-oidc-client</a></p>
  
  <p>Is this correct?</p>
  
  <p>What is the relationship between id token and access token regarding their lifetime?</p>