Introspection endpoint

Validates access tokens.

Client credentials must be included in the HTTP Authorization header.

(Authorization: Basic <credentials>).

Note: The metadata must contain the introspection_endpoint key.

Example: http://127.0.0.1:8080/oidc/tenant1/introspection-endpoint

Request parameters

These parameters must be posted as a part of the URL-encoded form values.

ParameterDescriptionMandatory

token

The access token to inspect.

User info endpoint errors

Error idDescription

invalid_request

The request is NOT valid. This is usually due to missing access token.

invalid_client

The calling RP is not allowed.