Skip to main content
POST
Token introspection (RFC 7662)

Authorizations

Authorization
string
header
required

Basic authentication header of the form Basic <encoded-value>, where <encoded-value> is the base64-encoded string username:password.

Body

application/json
token
string
required

Token to inspect

Response

Success

active
boolean

False for unknown, expired or revoked tokens — still HTTP 200

scope
string

Granted scopes when active

client_id
string

Owning OAuth client when active

username
string

Subject username when active

exp
integer

Expiry as Unix seconds when active