OIDC UserInfo endpoint
GET/oauth2/userinfo
Returns the profile claims for the presented access token: sub always, email with the email or profile scope, phone_number with phone.
Responses
- 200
- 401
The subject's scope-authorized claims
invalid_token — the access token is missing, expired, or invalid.
Carries a WWW-Authenticate: Bearer error="invalid_token" header.