1. Docs
  2. API Reference
  3. OIDC UserInfo endpoint

OIDC UserInfo endpoint

GET/oauth/userinfo

OIDC UserInfo endpoint (GET /oauth/userinfo). Requires a valid identity access token (IdentityJwtGuard) and returns the standard OIDC claims for the authenticated subject: sub, email, email_verified, given_name, family_name, and name. Returns 401 for an invalid token and 403 when the bearer is not an identity principal.

Responses

Invalid or expired token

This token is not authorized for this endpoint (wrong principal type — e.g., admin token on identity-only endpoint, or vice versa)

Request
curl -X GET "https://auth.canopy-io.com/oauth/userinfo"
Response
HTTP/1.1 401 Invalid or expired token

(empty body)
 Related endpoints Was this page helpful?

Tell us how we can improve this guide.

Canopy