Token introspection

Indicates whether the given token (access token or refresh token) is valid and active. Additionally, it provides details about the token.

This endpoint is authenticated by provided the WorkOS Application’s client ID and client secret in the body of the request.

cURL

 curl -X POST https://authkit_domain/oauth2/introspection \
  -d "client_id=client_01JP8BD0CZ401TDF9X54NT5ZEK" \
  -d "client_secret=1eaaf7a47948398d89e2b07dce912b6a9c0282aa20e88c026fcb42fd6b06b73e" \
  -d "token=eyJhbGciOiJSUzI1NiIsImtpZCI6InNzb19vaWRjX2tleV9wYWlyXzAxSlBYTjZLRjdOQUVBWlRGRFlFU0FFMEtYIn0.eyJpc3MiOiJodHRwczovL2F1dGguZXhhbXBsZS5jb20iLCJzdWIiOiJ1c2VyXzAxSlBYTjZLQTc2MjJLSjRWUDgzWDFOVEtYIiwic2lkIjoiYXBwX2NvbnNlbnRfMDFKUFhONktBUVc4M0FNWFhZNVdYM1JIVEoiLCJqdGkiOiIwMUpQWE42S0ZHWlFZVzNBTTJERVZYODRZUyIsImV4cCI6MTc0MjYwNDg1MywiaWF0IjoxNzQyNjA0NTUzfQ.dsMI3PBp5LWGeUosFUYYLsjC78swFMI4EUVXW1LN7yd80hxLhAvCX6gKN2s9h13a1tkAX77PDI2PooEJ8RQyB-Zcp_wzdomHffjqCeL-YgGojuCUmgjOm9w7kwg86e81tcMBIX3y872pe9jg1HrVs0t_tJNjoLEKtSwm-Flegttyg7M5SikrHKzul0Jv6ovaXjN4RygDPH6Nbg7Ewag5UwYd9aQK7IRG2oXZPC6WjJx-boyRvwgAqJ5pCedRc2ta5-sb3KyrgS6Xb0S3y1KA57RiDvJdQp8z_wL2_4e6iwG00a7OwyorIDpxKl5kAJE_Fct71931lB4EmNsGkVLxoA" \
  -d "token_type_hint=access_token"

 {
  "active": true,
  "client_id": "client_01JP8BD0CZ401TDF9X54NT5ZEK",
  "iss": "https://authkit_domain",
  "aud": "client_123456789",
  "sub": "user_01JPXN6KA7622KJ4VP83X1NTKX",
  "org_id": "org_01HRDMC6CM357W30QMHMQ96Q0S",
  "sid": "app_consent_01JPXN6KAQW83AMXXY5WX3RHTJ",
  "jti": "01JPXN6KFGZQYW3AM2DEVX84YS",
  "exp": 1742604853,
  "iat": 1742604553,
  "token_type": "access_token"
}

 {
  "active": true,
  "aud": "client_123456789",
  "client_id": "client_01JP8BD0CZ401TDF9X54NT5ZEK",
  "iss": "https://authkit_domain",
  "sub": "client_01JP8BD0CZ401TDF9X54NT5ZEK",
  "org_id": "org_01JJT1ZX4Y9BG603K4Q9SHZ1KW",
  "jti": "01JPXN6KFGZQYW3AM2DEVX84YS",
  "exp": 1742604853,
  "iat": 1742604553,
  "token_type": "access_token"
}

 {
  "active": true,
  "client_id": "client_01JP8BD0CZ401TDF9X54NT5ZEK",
  "iss": "https://authkit_domain",
  "aud": "client_123456789",
  "sub": "user_01JPXN6KA7622KJ4VP83X1NTKX",
  "iat": 1742604553,
  "token_type": "refresh_token"
}

 {
  "active": false
}

POST

`/oauth2/token`

`Parameters`

`Returns` `object`

User information Continue to the next section

Up next

Token introspection

/oauth2/token

Parameters

client_id: string

client_secret: string

token: string

token_type_hint?: "access_token" | "refresh_token"

Returns object

active: boolean

token_type: "access_token" | "refresh_token"

client_id: string

iss: string

sub: string

iat: integer

sid?: string

jti?: string

org_id?: string

exp?: integer

`/oauth2/token`

`Parameters`

`Returns` `object`