OAuth2 / OIDC Core

Token issuance/rotation, userinfo, revocation, and user lookup — the endpoints every login method converges on.

📄️OAuth token endpoint

Standard OAuth 2.0 token endpoint, selected by `grant_type`. Supports

📄️OIDC UserInfo endpoint

Returns the signed-in user's profile claims for the presented access

📄️OIDC UserInfo endpoint (POST variant)

The POST form of the UserInfo endpoint. Same behavior as GET; the access

📄️OAuth token revocation endpoint

Revokes the given refresh token. Only that one token is invalidated, not

📄️Get user details

Returns the profile of the user. Use `me` as the userId to get details