Who a verified session is, from its ID token.
The pool's names of the IdPs this login federates through; empty for a password login.
cognito:username, which SECRET_HASH is computed over: google_… for a federated login.
cognito:username
SECRET_HASH
google_…
Who a verified session is, from its ID token.