Audience — the tenant issuer URL.
Expiry timestamp (seconds since epoch).
Issued-at timestamp (seconds since epoch).
Issuer of the token.
OptionalmetadataUp to 1KB of key-value metadata set at session creation time.
Session ID.
Subject — the anonymous identity, e.g. anon@<uuid>.
Decoded claims from an anonymous session token (JWT).
Not returned by any method in EA. In EA, session tokens are issued as opaque JWEs — they cannot be decoded client-side and no SDK method currently returns this type. It is exported for forward compatibility: if session tokens move to a readable JWT format in a future release, this interface will describe the claims shape without a breaking change.