Introspection endpoint
The introspection endpoint provides a way to validate mainly access tokens (active/inactive) and retrieve their associated claims, such as scopes, subject, expiration time, and client information.
Client credentials must be included in the HTTP Authorization header.
(Authorization: Basic <credentials>).
Example: http://127.0.0.1:8080/oidc/tenant1/introspection-endpointRequest parameters
Section titled “Request parameters”These parameters must be posted as a part of the URL-encoded form values.
| Parameter | Description | Mandatory |
|---|---|---|
token | The access token to inspect. Both opaque and jwt is supported. | true |
User info endpoint errors
Section titled “User info endpoint errors”| Error id | Description |
|---|---|
invalid_request |
The request is NOT valid. This is usually due to missing access token. |
invalid_client |
The calling RP is not allowed. |