You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/sections/tokenintrospection.rst
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,12 +1,12 @@
1
1
.. _tokenintrospection:
2
2
3
3
Token Introspection
4
-
##################
4
+
###################
5
5
6
6
The `OAuth 2.0 Authorization Framework <https://tools.ietf.org/html/rfc6749>`_ extends its scope with many other speficications. One of these is the `OAuth 2.0 Token Introspection (RFC 7662) <https://tools.ietf.org/html/rfc7662>`_ which defines a protocol that allows authorized protected resources to query the authorization server to determine the set of metadata for a given token that was presented to them by an OAuth 2.0 client.
7
7
8
8
Client Setup
9
-
====
9
+
============
10
10
In order to enable this feature, some configurations must be performed in the ``Client``.
11
11
12
12
- The scope key:``token_introspection`` must be added to the client's scope.
@@ -16,7 +16,7 @@ If ``OIDC_INTROSPECTION_VALIDATE_AUDIENCE_SCOPE`` is set to ``True`` then:
16
16
- The ``client_id`` must be added to the client's scope.
17
17
18
18
Introspection Endpoint
19
-
====
19
+
======================
20
20
The introspection endpoint ``(/introspect)`` is an OAuth 2.0 endpoint that takes a parameter representing an OAuth 2.0 token and returns a JSON document representing the meta information surrounding the token.
21
21
22
22
The introspection endpoint its called using an HTTP POST request with parameters sent as *"application/x-www-form-urlencoded"* and **Basic authentication** (``base64(client_id:client_secret``).
@@ -47,7 +47,7 @@ Example Response::
47
47
}
48
48
49
49
Introspection Endpoint Errors
50
-
====
50
+
=============================
51
51
In case of error, the Introspection Endpoint will return a JSON document with the key ``active: false``
0 commit comments