---
title: "Introspect Access Token"
method: POST
path: "/introspect-access-token"
tags: ["developers"]
---

# Introspect Access Token

`POST /introspect-access-token`

Introspect Access Token

## Headers

- `Authorization` string
- `AuthorizationOxdId` string

## Request body

- object
  - `oxd_id` string, required
  - `access_token` string, required

## Response `200`

OK

- object
  - `active` boolean, required
  - `client_id` string, required
  - `username` string, required
  - `scope` string[], required
  - `token_type` string, required
  - `sub` string, required
  - `aud` string, required
  - `iss` string, required
  - `exp` integer, required — number of seconds since January 1 1970 UTC, indicating when this token will expire
  - `iat` integer, required — number of seconds since January 1 1970 UTC, indicating when the token was issued at
  - `nbf` integer, required — number of seconds since January 1 1970 UTC, indicating when the token not to be used before
  - `jti` string, required — a unique identifier for the JWT
  - `acr_values` string[], required
  - `extension_field` string, required

## Other responses

- `400` — Invalid parameters are provided to endpoint.
- `403` — Forbidden. Invalid access token provided in Authorization header.
- `500` — Internal error occured. Please check oxd-server.log file for details (usually located in /var/log/oxd-server/oxd-server.log).

---

[API](https://skmtc.net/gluufederation/apis/oxd-server.md) · [All operations](https://skmtc.net/gluufederation/apis/oxd-server/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gluufederation/oxd-server/versions/33ca9e18c54b/schema)