developers

Introspect Access Token

post/introspect-access-token

Headers

Authorizationstring

AuthorizationOxdIdstring

Request body

oxd_idstring required

access_tokenstring required

Example request

{
  "oxd_id": "bcad760f-91ba-46e1-a020-05e4281d91b6",
  "access_token": "b75434ff-f465-4b70-92e4-b7ba6b6c58f2"
}

Response

activeboolean required

client_idstring required

usernamestring required

scopestring[] required

token_typestring required

substring required

audstring required

issstring required

expinteger required

number of seconds since January 1 1970 UTC, indicating when this token will expire

iatinteger required

number of seconds since January 1 1970 UTC, indicating when the token was issued at

nbfinteger required

number of seconds since January 1 1970 UTC, indicating when the token not to be used before

jtistring required

a unique identifier for the JWT

acr_valuesstring[] required

extension_fieldstring required

Example response

{
  "active": true,
  "client_id": "@!1736.179E.AA60.16B2!0001!8F7C.B9AB!0008!A2BB.9AE6.5F14.B387",
  "username": "John Black",
  "token_type": "bearer",
  "sub": "jblack",
  "aud": "l238j323ds-23ij4",
  "iss": "https://as.gluu.org/",
  "exp": 1535709072,
  "iat": 1535709072,
  "nbf": 1535709072,
  "acr_values": [
    "basic"
  ],
  "extension_field": "twenty-seven"
}

Changes

Changed in 3 of the 50 revisions of this API.516

Apr 22, 2020413442ee92801See the full diff
- ○
  added the new optional header request parameter AuthorizationOxdId
  new-optional-request-parameter
Feb 13, 20205ce3fb45d8065See the full diff
- ○
  added optional request body
  request-body-added-optional
- ○
  added the media type application/json for the response with the status 200
  response-media-type-added
- ○
  added the media type application/json for the response with the status 400
  response-media-type-added
- ○
  added the media type application/json for the response with the status 403
  response-media-type-added
- ○
  added the media type application/json for the response with the status 500
  response-media-type-added
Nov 30, 2018c28eaefdb28551See the full diff
- ▲
  removed the request body
  request-body-removed
- ▲
  removed the media type application/json for the response with the status 200
  response-media-type-removed
- ▲
  removed the media type application/json for the response with the status 400
  response-media-type-removed
- ▲
  removed the media type application/json for the response with the status 403
  response-media-type-removed
- ▲
  removed the media type application/json for the response with the status 500
  response-media-type-removed
- ●
  deleted the header request parameter AuthorizationOxdId
  request-parameter-removed
This revision also has 6 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

Full history