24.05.2017 - Is is acceptable to include additional fields in an OAuth token endpoint response? For example, I am returning UserId , Username and CompanyId below:.