Introspect endpoint
chevron down

OAuth2 Introspect ver. 1.0 (Deprecated)

This version of the OAuth2 Introspect endpoint is deprecated because the response format changed which could affect your application. Please use Introspect endpoint ver. 1.1, instead.

Retrieve State of Tokens

An application can retrieve the active state of an OAuth 2.0 token. This endpoint conforms to RFC 7662.

Making Requests

Authorization: Bearer <Access Token>
Content-Type: application/x-www-form-urlencoded

token=<OAuth 2.0 token to retrieve the state of>

Example Response:

If the token passed in parameter is valid:

    "clientId":{"id":"<Client Id>"},
    "userId":{"id":"<User Id>"},
    "exp":<expires at>,
    "iat":<issued at>

If the token passed in parameter is not valid: