UserInfo

Request

Return claims about the authenticated end-user by sending a Bearer access token as the form-encoded access_token body parameter. The token must be issued with the openid scope. For more information, see the OIDC UserInfo spec. The set of claims returned is determined by the granted scopes and the claims.userinfo request parameter from the original authorization request.

Bodyapplication/x-www-form-urlencoded

access_tokenstring

Access token, when not supplied via the Authorization header.

curl -i -X POST \
  https://api.sbx.transmitsecurity.io/cis/oidc/me \
  -H 'Content-Type: application/x-www-form-urlencoded' \
  -d access_token=string

Responses

Claims about the authenticated end-user. The response always includes the baseline claims (see the response schema) and any claim requested via claims.userinfo on the originating authorization request is attached to the same JSON object.

Bodyapplication/json

substringrequired

Subject identifier — stable identifier for the end-user.

Example:"string"

tidstring

Tenant identifier.

Example:"string"

emailstring

Primary email address.

Example:"string"

groupsArray of strings

Groups the user belongs to.

Example:

[]

new_userboolean

Whether this user was just created during the originating authentication flow.

Example:true

webauthnobject

WebAuthn-related claims for the user.

Example:

{}

property name*anyadditional property

Response

{
  "sub": "string",
  "tid": "string",
  "email": "string",
  "groups": [],
  "new_user": true,
  "webauthn": {}
}