Central Auth APIOAuth Provider

Post Oauth 2 Introspect

Introspect an OAuth2 access or refresh token

Authentication

AuthorizationBearer
Bearer token authentication

Request

This endpoint expects an object.
tokenstringRequired

The token to introspect (access or refresh token)

client_idstringOptional
OAuth2 client ID
client_secretstringOptional
OAuth2 client secret
token_type_hintstringOptional

Hint about the token type. Recognized values: access_token, refresh_token.

Response

Token introspection response
activeboolean
Whether the token is active
scopestring
Scopes associated with the token
client_idstring
Client ID associated with the token
usernamestring
Username associated with the token
token_typestring
Type of the token
expdouble

Expiration time of the token (seconds since epoch)

iatdouble

Issued at time (seconds since epoch)

nbfdouble

Not before time (seconds since epoch)

substring
Subject of the token
audstring
Audience of the token
issstring
Issuer of the token
jtistring
JWT ID

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
429
Too Many Requests Error
500
Internal Server Error