Oauth Userinfo
oauth
Oauth Userinfo
OIDC UserInfo Endpoint (RFC 6749 §3.1 / OIDC §5.3).
Accepts a Bearer access_token with aud=“mio-oauth”. Returns identity claims gated by the granted scope:
- always: sub, hub_id
- “email” scope: email, email_verified
- “profile” scope: name, picture (when available)
SECURITY:
- Only accepts aud=mio-oauth tokens (contact, mio-api, and refresh tokens all have wrong audiences and are rejected with 401).
- Revoked (blacklisted jti) tokens return 401.
- Errors follow RFC 6750 §3.1: 401 + WWW-Authenticate: Bearer header.
This is an OIDC standard endpoint — NOT JSON:API.
GET
Oauth Userinfo
Authorizations
Send platform JWTs, contact JWTs, or team API keys as Authorization: Bearer <token>.
Response
200 - application/vnd.api+json
Successful Response
OIDC UserInfo response (§5.3).
sub and hub_id are always present. email/email_verified are included only when the "email" scope was granted. name/picture only when "profile" granted.