In this tut (https://www.ory.sh/run-oauth2-server-open-source-api-security/) in the section on " Performing the OAuth 2.0 Client Credentials Flow" it is stated that:
"
You can set arbitrary data in the token, if you want. For more information on this head over to the developer guide.
"
I’ve been scanning the docs but can’t find every reference…any pointers?