Look at the JWT standard, it usually contains things like claims, roles, user ids, etc.