OAuth 2.0 Token Introspection

Justin Richer
DOI: https://doi.org/10.17487/RFC7662
2015-10-01
Abstract:This specification defines a method for a protected resource to query an OAuth 2.0 authorization server to determine the active state of an OAuth 2.0 token and to determine meta-information about this token. OAuth 2.0 deployments can use this method to convey information about the authorization context of the token from the authorization server to the protected resource.
What problem does this paper attempt to address?