Sign in
Identity Provider

Introspect Token

OAuth2 Token Introspection Endpoint (RFC 7662).

Token format includes embedded token_id for O(1) lookup, so client auth is optional.

Allows clients to check if a token is still valid and get metadata about it. Useful for determining if a user needs to re-authenticate.

Returns: - active: Whether the token is currently valid - exp: Expiration timestamp (Unix epoch) - iat: Issued at timestamp - scope: Space-separated list of scopes - client_id: The client that the token was issued to - username: The user's username - sub: The user's ID

post/idp/token/introspect

Response

Successful Response

{"stackTrail":"paths:/idp/token/introspect:post:responses:200:content:application/json:schema","oasType":"schema","type":"unknown"}

Changes

Changed in 2 of the 11 revisions of this API.11