403 Forbidden - Missing openid scope occurs when calling to userinfo endpoint

[daro-123]

As mentioned in keycloak/keycloak#14237, Keycloak is now required openid scope for access token otherwise the request will return 403 Forbidden (Missing openid scope) when requesting to userinfo endpoint.

As a workaround, I have to create client scope openid and add it as a default of the client in Keycloak.

I tested on Keycloak 20.0.2
Doc https://www.keycloak.org/docs/latest/upgrading/index.html#userinfo-endpoint-changes

[18401172024]

Hi, I’m a new contributor.
I understand that newer versions of Keycloak require the openid scope for the userinfo endpoint.
Would you prefer this to be handled by:

Adding openid scope by default in OpenMRS configuration, or

Updating documentation to clearly mention this requirement, or

Making the scope configurable?

I’d be happy to work on this with guidance.