Hello, I am trying to determine why the

sub

is not available in a jwt when decoding an access token originated by

password

grant type using the

/oauth2/token

api (for legacy purposes). Also, when this token is introspected,

sub

in the response is empty where I expected a guid to be populated. Steps to reproduce:

call url: <https://oryhost/oauth2/token>
form data: client_id=...&client_secret=...&grant_type=password&username=...&password=...

access token received.

next, call url: <https://oryhost/oauth2/introspect>
form data: token=...

response with 'sub' empty, expected 'sub' to be the user's guid:

{
active: true,
client_id: "guid is present here",
sub: "", //<-- missing guid
exp: 1727129415,
iat: 1727125813,
nbf: 1727125813,
aud: [ ],
iss: "<https://oryhosthere>",
token_type: "Bearer",
token_use: "access_token"
}