This specification extends the OAuth 2.0 Token Introspection method defined in RFC 7662. It defines a method for an OAuth 2.0 Authorization Server (AS) that receives an introspection request for a token it did not issue to query a different, trusted AS. This enables the AS to determine the active state of the token and to retrieve associated metadata.

Document URL: Pending
Development information: https://docs.google.com/document/d/1wDBYgtVwQSIr-mpqhDMywweTeZyjGNfscFIW5lzRiwE/edit
Status: Final Call
DOI: 10.5281/zenodo.15334672
Errata: none
Supersedes: none