---
title: "The Introspection OAuth 2 Endpoint for RPT."
method: GET
path: "/rpt/status"
tags: ["Token Introspection"]
---

# The Introspection OAuth 2 Endpoint for RPT.

`GET /rpt/status`

The Introspection OAuth 2 Endpoint for RPT.

## Query parameters

- `token` string, required
- `token_type_hint` string

## Headers

- `Authorization` string, required

## Response `200`

OK

- object
  - `active` boolean, required — Boolean indicator of whether or not the presented token is currently active.
  - `exp` integer — Integer timestamp, in seconds since January 1 1970 UTC, indicating when this token will expire.
  - `iat` integer — Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this permission was originally issued.
  - `clientId` string — Client id used to obtain RPT.
  - `sub` string — Subject of the token. Usually a machine-readable identifier of the resource owner who authorized this token.
  - `aud` string — Service-specific string identifier or list of string identifiers representing the intended audience for this token.
  - `permissions` object[], required
    - `resource_id` string, required — A string that uniquely identifies the protected resource, access to which has been granted to this client on behalf of this requesting party. The identifier MUST correspond to a resource that was previously registered as protected.
    - `resource_scopes` string[], required — An array referencing zero or more strings representing scopes to which access was granted for this resource. Each string MUST correspond to a scope that was registered by this resource server for the referenced resource.
    - `exp` integer — Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this permission will expire. If the token-level exp value pre-dates a permission-level exp value, the token-level value takes precedence.
    - `iat` integer — Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this permission was originally issued. If the token-level iat value post-dates a permission-level iat value, the token-level value takes precedence.
    - `nbf` integer — Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating the time before which this permission is not valid. If the token-level nbf value post-dates a permission-level nbf value, the token-level value takes precedence.
  - `pct_claims` object — PCT token claims.
  - `iss` string — String representing the issuer of this token, as defined in JWT [RFC7519].
  - `jti` string — String identifier for the token, as defined in JWT [RFC7519].
  - `nbf` integer — Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating the time before which this permission is not valid.
  - `resource_id` string, required — Resource ID.
  - `resource_scopes` string[], required

## Other responses

- `405` — Introspection of RPT is not allowed.
- `500` — Invalid parameters provided to endpoint.

## Changes

- **2022-03-25** `d6fc0677410c` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/janssenproject/apis/janssen-authorization-server/changes/rpt/status/get.md)

---

[API](https://skmtc.dev/janssenproject/apis/janssen-authorization-server.md) · [All operations](https://skmtc.dev/janssenproject/apis/janssen-authorization-server/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/janssenproject/janssen-authorization-server/revisions/ae174ecfdc21/schema)