This doesn’t directly answer your question, but it may help.
I did this successfully in D7 using the oauth2_server module, which includes OpenID Connect support. The D8 version of that module is still in Beta, but development appears pretty active. The endpoint in the D7 version is oauth2/UserInfo.