Skip to main content

User information

The OpenID Connect UserInfo endpoint (OIDC Core 1.0 Section 5.3) returns claims about the authenticated end-user in exchange for a valid Bearer access token. In this deployment the endpoint is not served by nevisAuth itself: it is exposed via a nevisProxy URL mapping generated by the OAuth2UserInfo pattern. nevisAuth validates the Bearer access token through the AccessTokenConsumer AuthState, and nevisProxy forwards the authenticated request to nevisIDM, which resolves the caller to a user record and returns the requested claims as a JSON object. Both GET and POST variants are supported as required by the specification. The concrete endpoint URL is deployment-specific and is published in the authorization server's discovery document under userinfo_endpoint.