URL-based access-control based on OIDC claim (email_verified)

Question

I have a Spring Boot, Spring Security OAuth 2.0 Client & Spring Data Rest app.

The ID token contains an email_verified field. I want to restrict acce