Skip to main content
POST
Token introspection (RFC 7662)

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/x-www-form-urlencoded
token
string
required
client_id
string
required
token_type_hint
enum<string>
Available options:
access_token,
refresh_token
client_secret
string

Required only for confidential clients.

Response

Introspection result

active
boolean
required
scope
string
client_id
string
token_type
string

Bearer for access tokens, refresh_token for refresh tokens

sub
string

NexSpace user id the token acts as

exp
integer

Expiry (seconds since epoch)

iat
integer

Issued-at (seconds since epoch)