When authenticating with auth0, I specify the phone
scope. According to the openID connect documentation this should include both the phone_number
and phone_number_verified
attributes. I can see that my users do have a phone_number_verified
attribute on their profile. However, in both the id_token and the /userinfo
api endpoint only phone_number
is returned. Is there a way to force it to also display phone_number_verified
or is this a bug?
Here is the authorization code (js):
const Auth = new auth0.WebAuth({
audience: '....',
clientID: '...',
domain: '...',
redirectUri: '...',
responseType: 'token id_token',
scope: 'openid profile email phone',
})