| There is a bug in some OIDC provider which are not actually properly implementing the userinfo endpoint. Fortunately, it's also often cases which put user information on the id token, making it possible to just skip the userinfo despite what the response type indicates. |
