Enhance Security and Trust: New Session Metadata in Sign in with Google- Google Developers Blog

Introduced new OpenID Connect (OIDC) claims, `auth_time` and `amr`, to the ID Token for Sign in with Google. `auth_time` indicates the last successful Google session authentication time, and `amr` lists the authentication methods used (e.g., `pwd`, `mfa`, `hwk`). These claims enable developers to implement risk-based session policies, step-up authentication, and enhanced audit logging for improved security and fraud prevention.