title: What is the difference between id_token and access_token in Auth0
body: <p>In Auth0 you can use <a href="https://auth0.com/docs/libraries/lock/using-a-refresh-token#1" rel="noreferrer">refresh tokens</a>. In this link, we can see many returned parameters:</p>
  
  <pre><code>lock.showSignin({
    authParams: {
      scope: 'openid offline_access'
    }
  }, function (err, profile, id_token, access_token, state, refresh_token) {
    // store refresh_token
  });
  </code></pre>
  
  <p><a href="https://auth0.com/docs/oauth-web-protocol" rel="noreferrer">Apparently, access_tokens</a> can be used to retrieve user profile data. But this appears to be specific to oauth, and I thought auth0 uses openid?</p>
  
  <p>What is the difference between <code>id_token</code> and <code>access_token</code>?</p>