What this test does

Only if a userinfo_endpoint is listed: requests it with the access token from your sign-in.

How it passes

HTTP 200 with a JSON object matching the profile from the token response.

Specification
§9
Needs
S402 Includes an access token