---
title: "Get authenticated user information"
method: GET
path: "/oauth2/userinfo"
tags: ["OpenID Connect"]
---

# Get authenticated user information

`GET /oauth2/userinfo`

OpenID Connect UserInfo Endpoint.

Returns claims about the authenticated user. Requires a valid access token
with the `openid` scope.

**Available Claims:**
- `user_id` - User identifier
- `name`, `given_name`, `family_name` - Name claims (with `profile` scope)
- `email`, `email_verified` - Email claims (with `email` scope)

**Authentication:**
Pass the access token as a Bearer token: `Authorization: Bearer {access_token}`

## Response `200`

User information

- OAuthUserInfoResponse — OpenID Connect UserInfo Response. Contains claims about the authenticated user.
  - `user_id` string, required — User ID
  - `name` string — Full name
  - `given_name` string — First name
  - `family_name` string — Last name
  - `email` string, email — Email address
  - `email_verified` boolean — Whether email has been verified
  - `picture` string, uri — Profile picture URL
  - `updated_at` integer — Last profile update timestamp (Unix epoch)

## Other responses

- `401` — Invalid or missing access token
- `403` — Token does not have openid scope

---

[API](https://skmtc.net/pipeshub-ai/apis/pipeshub-api.md) · [All operations](https://skmtc.net/pipeshub-ai/apis/pipeshub-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/pipeshub-ai/pipeshub-api/revisions/64bfe76b130e/schema)