Why are you using an authorization protocol for authentication? Try OIDC.
OIDC is a layer on top of OAuth...
OIDC is a layer on top of OAuth...