Userinfo
Userinfo
After obtaining an access token through the authorization code flow or client-initiated backchannel authentication (CIBA), call the UserInfo endpoint to retrieve information about the authenticated user.
Endpoint
Send a GET request to the endpoint on the appropriate environment's:
Sanbox: https://test-openbanking.tbcbank.ge/userinfo
Production: https://openbanking.tbcbank.ge/userinfo
Use the access token returned by the corresponding flow. Keep the token confidential and send it only over HTTPS.
Authorization: Bearer {access_token}
Response
The response content type is application/jwt. The response body is a signed JWT containing the UserInfo claims.
Verify the JWT signature using the public keys published at the jwks_uri in the environment's OpenID Provider configuration. Retrieve the discovery document and JWKS from the same environment used for the UserInfo request. Do not trust the claims until signature verification succeeds.
Response Example
eyJraWQiOiJjNjA2YTJhNC0wZjFiLTRjMTQtYmVjNS1mZTRjYWZmNjhkZjQiLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.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-GDmOGDnOGDmOGDoeGDouGDoOGDnSJ9fSwidHlwZSI6ImRvY3VtZW50In1dLCJ0cnVzdF9mcmFtZXdvcmsiOiJnZV9hbWwiLCJ0aW1lIjoiMjAyNi0wMS0wMVQwMDowMDowMCswNDowMCIsImFzc3VyYW5jZV9sZXZlbCI6ImJhc2ljIiwidmVyaWZpY2F0aW9uX3Byb2Nlc3MiOiIzMDBjZjhiNS03MmU5LTQ4YzItYThkZi01NjEzNDkwNDYzNmMifX0sImlzcyI6Imh0dHBzOi8vdGVzdC1hcGkudGJjYmFuay5nZSIsImlhdCI6MTc2NzIxMTIwMDAwMCwianRpIjoiYzkyMDA3ODEtMGViNi00NjBjLTlhYjQtZDY5YjczOTA2NGQyIn0.P_bjTfATXh4rp5zo-0UQP7S0lFqTy30Xz2IF4NYNJqvJz0jZLEcJFOvZThvEqBezIYkpNhvGoVbHcmPevRkvlZ4Hii62ThBfA6LWquXx_InbwTndHlflbb-mNksgH1UHABcCc82HhlK5kGj1ojxebN0WAVgzyOxan52VotcNPKxtM9McMFx3K9qjI2eS3JlDynJEhDhdLX4aRvOeycW6W-5eUD91YH9Hyd7x1kEDQ83AQbclMzh0lZXUhxEi_AvfBSUr31FPrfECORlC5ejvdSVohQHLjzxLmm-w5kpJ7_CJsvB8zTdr8ssuK2OIWd36Nsk5T5ufs0-osttXIYFx7A{
"sub": "123456789",
"aud": "PSDGE-NBG-CLIENTID",
"verified_claims": {
"claims": {
"place_of_birth": {
"country": "GE",
"locality": "საქართველო"
},
"birthdate": "1970-01-01",
"nationalities": [
"GE"
],
"personal_number": "PNOGE-01234567890",
"given_name": "სახელი",
"msisdn": "123456789",
"family_name": "გვარიაშვილი",
"email": "[email protected]"
},
"verification": {
"evidence": [
{
"check_details": [
{
"check_method": "vpip"
},
{
"check_method": "pvp"
}
],
"document_details": {
"date_of_issuance": "2025-01-01",
"document_number": "01IA23456",
"date_of_expiry": "2035-01-01",
"personal_number": "01234567890",
"type": "idcard",
"issuer": {
"country": "GE",
"name": "იუსტიციის სამინისტრო"
}
},
"type": "document"
}
],
"trust_framework": "ge_aml",
"time": "2026-01-01T00:00:00+04:00",
"assurance_level": "basic",
"verification_process": "300cf8b5-72e9-48c2-a8df-56134904636c"
}
},
"iss": "https://test-api.tbcbank.ge",
"iat": 1767211200000,
"jti": "c9200781-0eb6-460c-9ab4-d69b739064d2"
}Updated 5 days ago
