Resolve current identity data shared with an application.

GET

/userinfo

curl --request GET \
  --url https://session-api.sudomimus.com/userinfo \
  --header 'Authorization: Bearer <token>'

• Production

Accepts an ordinary application access token as a Bearer credential and returns current, consent-gated identity data for its live session. This endpoint accepts only sessions whose issuance protocol is APPLICATION; OIDC clients use the discovered OIDC userinfo_endpoint instead. Profile data is read live and is never copied from the access token.

Authorizations

• BearerAccessToken

Responses

200

Current application-visible identity data.

Media typeapplication/json

object

sub

required

Pairwise sector subject for this application.

string

>= 1 characters

email

string format: email

email_verified

boolean

name

string

given_name

string

family_name

The approved surname. Empty when the account legitimately has no surname.

string

picture

string format: uri

picture_animated

Sudomimus private claim for the sector-scoped animated avatar URL.

string format: uri

Example^generated

{
  "sub": "example",
  "email": "[email protected]",
  "email_verified": true,
  "name": "example",
  "given_name": "example",
  "family_name": "example",
  "picture": "https://example.com",
  "picture_animated": "https://example.com"
}

Headers

Cache-Control

string

Allowed values: no-store

Prevent storage of the credential-bearing response.

Pragma

string

Allowed values: no-cache

Legacy cache instruction retained for credential responses.

Vary

string

Allowed values: Authorization

Prevent shared-cache reuse across Bearer credentials.

401

Bearer token missing, malformed, expired, inactive, or owned by another issuance protocol.

Media typeapplication/json

object

error

required

string

Allowed values: invalid_token

Example

{
  "error": "invalid_token"
}

Headers

WWW-Authenticate

string

Bearer authentication challenge.