Obtaining user information from Identity Provider

Sometimes, it's not enough to retrieve just identity info from a third-party authenticated user. Depending on the application being developed, you might need to retrieve permissions or roles related to the authenticated user. OpenID Connect defines a special endpoint where the Relying Party can request user information. That's the user info endpoint, where the Identity Provider can return authorized data as a JSON object or even a signed JWT. This recipe will show you how to retrieve additional info about the user, how to discover the UserInfo endpoint, and how to update data from an already known user.

Getting ready

To run this recipe, you will need Java 8, Maven, Spring Web, and Spring Security. As this recipe adds the functionality to an OpenID Connect client, it also relies on the google-connect project, which was created for the Authenticating Google's users through Google OpenID Connect recipe. So, make sure you have implemented the source...