Hello.
I’m developing SpringBoot application that should authorize using OAuth2 with SmartThings account. I’m getting Authorization Code, Access Token, but unfortunately I’m not able to get any information about user. Is there any possibility to get it like in case of other portals (ex for Google https://www.googleapis.com/oauth2/v3/userinfo with token)?
There is no info about it in documentation
Thank you
Welcome to the SmartThings Community, @Karolina!
Getting the user info is not possible with the granted token for security reasons. If your purpose is to differentiate each installation, it can be done with the installedAppId as it’s unique for each instance.
Normally, it’s critical that you validate an ID token before trusting any of the information inside it. This is because in other OpenID Connect flows your app will get an ID token over an untrusted channel such as a browser redirect. advanced md