Central Auth APIOAuth Provider

Post Oauth 2 Introspect

Introspect an OAuth2 access or refresh token

Authentication

AuthorizationBearer
Bearer token authentication

Request

This endpoint expects an object.
tokenstringRequired

The token to introspect (access or refresh token)

client_idstringOptional
OAuth2 client ID
client_secretstringOptional
OAuth2 client secret
token_type_hintstringOptional

Hint about the token type. Recognized values: access_token, refresh_token.

Response

Token introspection response
activeboolean
Whether the token is active
scopestringOptional
Scopes associated with the token
client_idstringOptional
Client ID associated with the token
usernamestringOptional
Username associated with the token
token_typestringOptional
Type of the token
expdoubleOptional

Expiration time of the token (seconds since epoch)

iatdoubleOptional

Issued at time (seconds since epoch)

nbfdoubleOptional

Not before time (seconds since epoch)

substringOptional
Subject of the token
audstringOptional
Audience of the token
issstringOptional
Issuer of the token
jtistringOptional
JWT ID

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
429
Too Many Requests Error
500
Internal Server Error