Introspect Access Token

Developing

POST

{{baseUrl}}oauth/introspect

Verify the validity of an access (or refresh) token and return metadata about it. Useful to confirm if a token is active and trusted.

Request

Header Params

Body Params application/x-www-form-urlencodedRequired

Responses

🟢200Success

application/json

Body

Request Example

Shell

JavaScript

Java

Swift

curl --location -g --request POST '{{baseUrl}}oauth/introspect' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'token=ACCESS_TOKEN'

Response Example

{
  "active": true,
  "client_id": "gtc9...",
  "user_id": 12345,
  "scopes": ["profile:read", "..."],
  "expires_at": "2026-07-16 11:45:32"
}

Modified at 2026-04-08 11:49:55

Generate Access Token

Revoke Token