Return user claims
GET/userinfo
Returns a JSON object containing claims about the currently authenticated end-user,
identified by the Bearer access token supplied in the Authorization header.
Only claims whose values are non-null for the given user are included in the response.
The sub claim is always present. All other standard claims (name, given_name,
family_name, email, phone_number, birthdate, gender, locale, updated_at,
address) are included when available.
The set of returned claims is further constrained by the scopes granted to the access
token: profile enables name and profile claims, email enables the email claim,
phone enables the phone claim, and address enables the address claim.
Implements the GET variant required by
OIDC Core 1.0 Section 5.3.
Refer to the introduction section for details on how to configure this use case.
Request
Responses
- 200
- 401
User claims returned successfully
The access token is missing, expired, revoked, or otherwise invalid. The response includes a WWW-Authenticate header with an error code.