Return claims from scope values in ID token if no access token requested
Reading carefully OpenID Connect specifications, we can see that claims linked to scope values must be returned in ID Token instead of UserInfo if no access token requested.
See https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims
The Claims requested by the profile, email, address, and phone scope values are returned from the UserInfo Endpoint, as described in Section 5.3.2, when a response_type value is used that results in an Access Token being issued. However, when no Access Token is issued (which is the case for the response_type value id_token), the resulting Claims are returned in the ID Token.