ReferenceScopes
profile
Profile-related claims: `name`, `given_name`, `family_name`, `preferred_username`, `locale`. Olympus also surfaces identity traits here.
OAuth2 scope: profile
Source: OIDC spec
Description
Profile-related claims: name, given_name, family_name, preferred_username, locale. Olympus also surfaces identity traits here.
Requesting this scope
In the authorization URL:
GET /oauth2/auth?
&scope=profile
...Multiple scopes are space-separated.
Granting access
A client only receives this scope if it's on the client's allowed scope list. Configure in Athena → OAuth2 Clients → your client → Allowed Scopes.
Checking in your backend
The access token's scope claim contains the granted scopes:
const granted = info.scope?.split(" ") ?? [];
if (!granted.includes("profile")) return 403;