This article was originally published on Jo4 Blog . If you're using Auth0 as an OIDC provider for a Spring backend, here's a question worth asking right now: what fields does your backend assume are in the access token, but aren't actually there by default? For us, the answer was email .
Source: [Dev.to](https://dev.to/anand_rathnas_d5b608cc3de/we-were-hitting-auth0-userinfo-on-every-request-heres-the-fix-4blc)