Introspect the token

post

https://{tenanturl}/oauth2/introspect

Use this API to introspect an OIDC token.

Form Data

token

string

required

The token that is being introspected.

token_type_hint

string

The token type. This attribute is an optional hint about the token that is being introspected.

client_id

string

The OIDC client ID that is required when the basic authorization header is not set.

client_secret

string

The OIDC client secret that is required when the basic authorization header is not set and the client is not a public client.

client_assertion

string

The JWT assertion being used to authenticate the client.

client_assertion_type

string

enum

The format of client assertion.

Allowed:

Headers

Authorization

string

The basic authorization header that contains a base64-encoded client ID and the client secret. Use this header as an alternative to sending the client ID and secret in the form parameters.

Responses

Language

URL

Response

Choose an example:

application/json

200The introspection result was returned.

500An internal server error occurred.