The claims of the end-user (= pieces of information about the end-user) in JSON format.

The authorization server implementation is required to retrieve claims of the subject (= information about the end-user) from its database and format them in JSON format.

For example, if given_name claim, family_name claim and email claim are requested, the authorization server implementation should generate a JSON object like the following and set this claims property to its string representation.

{
  "given_name": "Takahiko",
  "family_name": "Kawasaki",
  "email": "takahiko.kawasaki@example.com"
}

For more details, see OpenID Connect Core 1.0, 5.1. Standard Claims.

The value of the "sub" claim. If a non-empty value is given, it is used as the value of the "sub" claim. Otherwise, the value of the subject associated with the access token is used.

The access token which has been issued by Authlete. The access token is the one that has come along with the userinfo request from the client application.