CHchutes
Identity Provider

Introspect Token

Changed on

OAuth2 Token Introspection Endpoint (RFC 7662).

Token format includes embedded token_id for O(1) lookup, so client auth is optional.

Allows clients to check if a token is still valid and get metadata about it. Useful for determining if a user needs to re-authenticate.

Returns: - active: Whether the token is currently valid - exp: Expiration timestamp (Unix epoch) - iat: Issued at timestamp - scope: Space-separated list of scopes - client_id: The client that the token was issued to - username: The user's username - sub: The user's ID

post/idp/token/introspect

Request

  • Base URL
    https://api.chutes.ai (the document declares no server; this is the origin it was published from)
  • URL
    https://api.chutes.ai/idp/token/introspect
  • Auth
    none declared

Request body application/x-www-form-urlencoded

tokenstring required
token_type_hintstring nullable
client_idstring nullable
client_secretstring nullable

Response

Successful Response

string required

Changes

  • 23e8895b217dRevision changes
    • breaking

      the response's body type changed from no type to string for status

    • info

      added the optional property // to the response with the status

    • info

      added the optional property // to the response with the status

  • 8d909638091eRevision changes
    • info

      endpoint added