When authenticating with auth0, I specify the phone scope. According to the openID connect documentation this should include both the phone_number and phone_number_verified attributes. I can see that my users do have a phone_number_verified attribute on their profile. However, in both the id_token and the /userinfo api endpoint only phone_number is returned. Is there a way to force it to also display phone_number_verified or is this a bug?
Here is the authorization code (js):
const Auth = new auth0.WebAuth({
audience: '....',
clientID: '...',
domain: '...',
redirectUri: '...',
responseType: 'token id_token',
scope: 'openid profile email phone',
})