The POST /{environmentId}/as/introspect endpoint returns the active state of an OAuth 2.0 token and the claims specified in RFC 7662 Section 2.2. The request requires the token parameter, which is the token string.

The response always shows the active attribute, which is a boolean that indicates whether the token is currently active. For active tokens, the response also shows the token_type attribute value.

For more information about token claims, see Token claims.

Warning: Applications in an environment that is configured to use a custom domain must use the custom domain URL in the {{authPath}} instead of the default PingOne domain. For more information about custom domains, see Custom Domains.