Truecaller OAuth User Verification API
The backend half of the Truecaller OAuth SDK flow. After the mobile SDK returns an authorization code, partners exchange it at POST /v1/token (authorization_code grant with PKCE code_verifier; refresh_token also supported) and fetch the verified user profile at GET /v1/userinfo with the Bearer access token. The host publishes OpenID Connect discovery at /.well-known/openid-configuration with /v1/auth, /v1/token, /v1/revoke, per-client JWKS, RS256 id tokens, and S256 PKCE.