Sign in

v51

latestOpenAPI 3.1.0raw.githubusercontent.com2026-08-01302395850.8 KB
oauth

Introspect

OAuth 2.0 Token Introspection Endpoint (RFC 7662)

Allows clients to check if a token is valid and get its metadata.

Returns:

  • active: Whether the token is currently active
  • scopes: List of authorized scopes (if active)
  • client_id: The client the token was issued to (if active)
  • user_id: The user the token represents (if active)
  • exp: Expiration timestamp (if active)
  • token_type: "access_token" or "refresh_token" (if active)
post/api/oauth/introspect

Request body

tokenstring required

Token to introspect

token_type_hint'access_token' | 'refresh_token' nullable

Hint about token type ('access_token' or 'refresh_token')

client_idstring required

Client identifier

client_secretstring required

Client secret

Response

Successful Response

activeboolean required
scopesstring[] nullable
client_idstring nullable
user_idstring nullable
expinteger nullable
token_type'access_token' | 'refresh_token' nullable