OAuth2/OIDC user profile and permissions endpoints