Bhauu AuthDocumentation
Browse documentation

API usage

UserInfo

Read scoped identity claims for the token subject, not an arbitrary user.

Request

HTTP
GET https://auth.bhauu.online/oauth/userinfo
Authorization: Bearer <access_token>

Current response fields

FieldWhen returned
subAlways for a valid linked user; opaque public subject.
updated_atAlways; Unix timestamp.
nameWhen the access token has profile scope.
genderOptional, when present and profile scope is present.
email, email_verifiedWhen email scope is present; verification value reflects canonical state.

Profile and email are the documented public scopes. The handler gates these fields on the token's scope claim, but current normal token issuance sets profile email together. Do not assume that requesting fewer scopes always suppresses a claim. Missing optional fields are normal. The handler requires a valid Bearer access token, uses its subject and client context, and verifies an active client-user relationship. It does not accept an arbitrary user ID in the request.