search

inabajunmr / azidp4j

[alpha] Java OAuth 2.0 Authorization Server & OpenID Connect Identity Provider Library for any web application frameworks.
MIT License
4 stars 0 forks source link

Profile claims only issue not issued access token #104

Closed inabajunmr closed 1 year ago

inabajunmr commented 1 year ago

https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims

The Claims requested by the profile, email, address, and phone scope values are returned from the UserInfo Endpoint, as described in Section 5.3.2, when a response_type value is used that results in an Access Token being issued. However, when no Access Token is issued (which is the case for the response_type value id_token), the resulting Claims are returned in the ID Token.