@User

@

is not allowed in object IDs and we highly recommend against using email addresses as subjects because they cannot always be confirmed, nor are they considered "stable". Instead the recommendation is generally to link to the

sub

field of an OAuth flow, or use an internal user ID representation from your database. If neither is applicable, you can base64 encode the email address to store it, but again, that is not recommended