oauth

Introspect

RFC 7662 token introspection. Always returns 200 to avoid leaking info about which tokens exist; a caller that's unauthorised gets {"active": false}.

The token_type_hint is advisory -- we look up access tokens first by default, refresh tokens if the access lookup misses or if the hint says refresh_token.

post/oauth/introspect

Request

  • Base URL: https://api.bitpoort.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.bitpoort.com/oauth/introspect
  • Auth: none required

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.