OIDC UserInfo endpoint

GET 
/oauth2/userinfo

Returns the signed-in user's profile claims for the presented access token. sub is always included; email is included only if the token was granted the email/profile scope, and phone_number only with the phone scope. The endpoint also accepts POST.

Responses

200

The subject's scope-authorized claims

401

invalid_token — the access token is missing, expired, or invalid. Carries a WWW-Authenticate: Bearer error="invalid_token" header.