Interlaken
API referenceIdentity and accessOAuth 2.1

Claims about the signed-in user

GET
/oauth/userinfo

The OpenID Connect userinfo endpoint. Requires a bearer token that represents a user; a token issued to an API client has no user behind it and is rejected.

Authorization

AuthorizationBearer <token>

An access token from this zone's POST /oauth/token, or a session token from POST /api/v1/auth/login. Send it as Authorization: Bearer <token>.

In: header

Response Body

application/json

application/json

curl -X GET "https://example.com/oauth/userinfo"
{  "sub": "753487e7-10bc-4e69-b3b2-4da33721ea3e",  "email": "user@example.com",  "email_verified": true,  "name": "string",  "tenant_id": "34f5c98e-f430-457b-a812-92637d0c6fd0"}