OAuth2 Token Introspection (RFC 7662)

POST

/oauth2/introspect

• Nhost Authentication API Server

Introspect a token to determine its current state and metadata.

Request Body^required

Token introspection request parameters (RFC 7662 Section 2.1).

object

token

required

string

token_type_hint

string

nullable

Allowed values: access_token refresh_token

client_id

string

nullable

client_secret

string

nullable

Responses

200

Token introspection response

object

active

required

boolean

scope

string

client_id

string

sub

string

exp

integer

iat

integer

iss

string

token_type

string

default

OAuth2 error response

object

error

required

OAuth2 error code

string

error_description

Human-readable error description

string