I can't seem to get the gluu server to return claims in the id_token from the token endpoint using OpenId Connect. When I use the hybrid authentication flow, the initial id_token contains the claims I am wanting from the assigned scopes. Any subsequent call to the token endpoint does not however. I am guessing it has something to do with my request not being authorized to see those claims? I am using a client_secret_post authentication method for my client and my post body looks like: grant_type=authorization_code&redirect_uri=https://example.com/test&scopes=openid profile oauth_test&client_id=@!DA85.5F98.95A1.CA3B!0001!31B4.60A7!0008!BCF6.C587&code=d3c707a4-b1f0-41ae-bafe-95dfc5f66931&client_secret=example