Request
GET https://auth.bhauu.online/oauth/userinfo
Authorization: Bearer <access_token>Current response fields
| Field | When returned |
|---|---|
sub | Always for a valid linked user; opaque public subject. |
updated_at | Always; Unix timestamp. |
name | When the access token has profile scope. |
gender | Optional, when present and profile scope is present. |
email, email_verified | When email scope is present; verification value reflects canonical state. |
Profile and email are the documented public scopes. The handler gates these fields on the token's scope claim, but current normal token issuance sets profile email together. Do not assume that requesting fewer scopes always suppresses a claim. Missing optional fields are normal. The handler requires a valid Bearer access token, uses its subject and client context, and verifies an active client-user relationship. It does not accept an arbitrary user ID in the request.