Introspect OAuth token
POST/api/oauth/:OAuthAppName/introspect
Returns the active state and metadata of an OAuth access token (RFC 7662). Client must authenticate with client_id and client_secret (POST body or Basic). Invalid or expired tokens return active false.
Request
Responses
- 200
- 400
- 401
- 403
OK: Introspection result (active true with claims, or active false).
Status Bad Request: The request could not be understood by the server due to malformed syntax.
Status Unauthorized: The client must authenticate itself to get the requested response.
Status Forbidden: The client does not have permission to access the resource.