External - Who am I

Auth: Authenticated - any signed-in user.

Worked example of a scope-gated external endpoint. Returns the calling client's identity, granted permissions and allowed endpoints. Requires a bearer token from the external token endpoint, and the client must have been granted access to this path (enforced by ExternalApiAccessPreProcessor).