Endpoint
Authentication
This endpoint requires a valid OAuth access token in the Authorization header:Response
Success Response (200 OK) - Active Token
Whether the token is currently active (not expired or revoked)
Space-separated list of scopes granted to this token
The OAuth application’s client ID
Will always be “Bearer”
Unix timestamp when the token expires
Unix timestamp when the token was issued (created)
Subject - the ID of the user who authorized the token
Success Response (200 OK) - Inactive Token
If the token is expired, revoked, or invalid:Example
Use Cases
This endpoint is useful for:- Validating that a token is still active
- Checking which scopes a token has access to
- Determining when a token will expire
- Identifying which user authorized the token
- Token introspection for security auditing

