In case anyone finds this I managed to figure it out. The scope that Strapi is requesting is the "user.read " permission. I had been using only the “openid profile” scope in my nextauth provider definition, but adding the aforementioned scope fixed the problem.
1 Like