Token Introspection (RFC 7662)

POST

/oidc/introspect

const url = 'https://auth.timetonic.com/oidc/introspect';
const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/x-www-form-urlencoded'},
  body: new URLSearchParams({token: 'example'})
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request POST \
  --url https://auth.timetonic.com/oidc/introspect \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data token=example

Check whether an access token is active. Replaces legacy /api/session/validate.

Request Body^required

application/x-www-form-urlencoded

object

token

required

string

Example^generated

token=example

Responses

200

Introspection response

application/json

object

active

required

boolean

sub

string

scope

string

client_id

string

exp

integer

Example^generated

{
  "active": true,
  "sub": "example",
  "scope": "example",
  "client_id": "example",
  "exp": 1
}

Token Introspection (RFC 7662)

Request Bodyrequired

Examplegenerated

Responses

200

Examplegenerated

Request Body^required

Example^generated

Example^generated