Feature request: Support retrieving additional metadata via `/userinfo`

[cognifloyd]

It would be nice to optionally retrieve additional claims that are only accessible via the /userinfo endpoint (eg if the ID groups claim is only accessible via the /userinfo endpoint instead of Always).

[matthewdevenny]

I understand the ask... but I am not seeing in the documentation where some claims are only accessible via /userinfo. Can you not just add the groups scope?

[matthewdevenny]

For reference.. If I understand correctly you could get at these with additional scopes added to the scope query parameter
https://developer.okta.com/docs/reference/api/oidc/#scope-dependent-claims-not-always-returned

[cognifloyd]

You can set a custom claim on an auth server to only be accessible via /userinfo.