In an OpenID Connect (OIDC) implementation, the/userinfoendpointis responsible for returning claims about the authenticated user. After the user has been authenticated and an access token has been issued, the client application can use this token to query the/userinfoendpoint to retrieve additional user information, such as name, email, and other profile details.
* Option A: Incorrect. The/introspectendpoint is used to validate the status of a token (e.g., whether it is active or expired), not to return user claims.
* Option B: Incorrect. The/authorizeendpoint is used to initiate the authentication process, not to return user claims.
* Option C: Correct. The/userinfoendpoint is specifically designed to return claims about the authenticated user.
* Option D: Incorrect. The/tokenendpoint is used to exchange an authorization code for tokens (e.g., access token, ID token), not to return user claims.
References:
* OpenID Connect Core Specification
* SAP Customer Data Cloud - OIDC Endpoints