you then did call thje users API with the access token?
Something like
it is worth noting that if you have an access token for “temperrino” but “termperrino”'s email is not verified, then it won’t be returned (regardless of the scope) in the response as the email is not verified.