There's no need to omit unpopulated fields. So, this can be simplified to:

    res.json({
      client_id: access_token.client_id,
      user_id: access_token.user_id,
      display_name: user.display_name,
      photo_url: user.photo_url
    });