Getting the requestor identifier from the access token

We need the requestor identifier to check whether the resource owner has given the requestor access to the resource.

The PingAuthorize Policy Editor provides many attributes, including HttpRequest.AccessToken. The HttpRequest.AccessToken.subject attribute has the needed information.