Skip to main content
POST
Introspect token

Body

application/json

Introspect request params

token
string
required

The token to introspect.

Example:

"eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."

client_id
string

The client identifier.

Example:

"550e8400-e29b-41d4-a716-446655440000"

client_secret
string

The client secret.

Example:

"my-client-secret"

Response

Token introspection result.

Token introspection response. When active is false, only that field is returned.

active
boolean
required

Whether the token is active.

Example:

true

client_id
string

The client identifier for the OAuth 2.0 client that requested this token.

Example:

"550e8400-e29b-41d4-a716-446655440000"

exp
integer

The Unix timestamp when the token expires.

Example:

1704067200

iat
integer

The Unix timestamp when the token was issued.

Example:

1704063600

iss
string

The issuer of the token.

Example:

"https://api.example.com"

scope
string

A space-separated list of scopes associated with the token.

Example:

"read write"

sub
string

The subject of the token (user ID).

Example:

"550e8400-e29b-41d4-a716-446655440000"

username
string

The username of the resource owner.

Example:

"user@example.com"