Return 401 Unauthorized when calling /v1/userinfo with valid access token on OIDC flow

Questions OAuth/OIDC
1

I am new on using OKTA Integrator.

I am following this tutorial to create the application.

https://developer.okta.com/docs/guides/sign-into-spa-redirect/react/main/

I am ok to redirect back to the single app application after okta login and can see application being called /v1/token to retrieve the access_token, however, I try to get this token to make call to /v1/userinfo with Authorization Bearer Header, it return 401 Unauthorized.

I did not have idea how to continue the troubleshooting that which settings I have missed and make this issue.

Thanks any one can answer this.

2

Can you confirm how exactly you are formatting your /userinfo request?

Can you also ensure that you are sending the token to the same authorization server that issued it? For example, if the iss claim in the token is “https://example.okta.com”, then make sure you send it to the https://example.okta.com/oauth2/v1/userinfo endpoint.