protected.diff

85,88c85,132
< 	/*
< 	 * Implement the UserInfo Endpoint
< 	 */
< 
---
> 	if (!__.contains(req.access_token.scope, 'openid')) {
> 		res.status(403).end();
> 		return;
> 	}
> 	
> 	var user = req.access_token.user;
> 	if (!user) {
> 		res.status(404).end();
> 		return;
> 	}
> 	
> 	var out = {};
> 	__.each(req.access_token.scope, function (scope) {
> 		if (scope == 'openid') {
> 			__.each(['sub'], function(claim) {
> 				if (user[claim]) {
> 					out[claim] = user[claim];
> 				}
> 			});
> 		} else if (scope == 'profile') {
> 			__.each(['name', 'family_name', 'given_name', 'middle_name', 'nickname', 'preferred_username', 'profile', 'picture', 'website', 'gender', 'birthdate', 'zoneinfo', 'locale', 'updated_at'], function(claim) {
> 				if (user[claim]) {
> 					out[claim] = user[claim];
> 				}
> 			});
> 		} else if (scope == 'email') {
> 			__.each(['email', 'email_verified'], function(claim) {
> 				if (user[claim]) {
> 					out[claim] = user[claim];
> 				}
> 			});
> 		} else if (scope == 'address') {
> 			__.each(['address'], function(claim) {
> 				if (user[claim]) {
> 					out[claim] = user[claim];
> 				}
> 			});
> 		} else if (scope == 'phone') {
> 			__.each(['phone_number', 'phone_number_verified'], function(claim) {
> 				if (user[claim]) {
> 					out[claim] = user[claim];
> 				}
> 			});
> 		}
> 	});
> 	
> 	res.status(200).json(out);
> 	return;