Token introspection (RFC 7662)

POST

/introspect

Request

Authorization

OAuth 2.0

Authorization Code

Add the parameter

Authorization

to Headers，whose value is to concatenate the Token after the Bearer.

Example:

Authorization: Bearer ********************

Authorize URL: https://citizenhangar.space/oauth/authorize

Token URL: https://citizenhangar.space/oauth/token

Body Params application/x-www-form-urlencoded

Responses

🟢200

application/json

Introspection result

Body

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST 'https://citizenhangar.space/oauth/introspect' \
--data-urlencode 'token=' \
--data-urlencode 'token_type_hint='

Response Example

{
    "active": true,
    "scope": "string",
    "client_id": "string",
    "username": "string",
    "token_type": "string",
    "exp": 0,
    "iat": 0
}

Modified at 2025-12-29 19:35:45

UserInfo endpoint

Token revocation (RFC 7009)