This specification extends the OAuth 2.0 Token Introspection method defined in RFC 7662. It defines a method for an OAuth 2.0 Authorization Server (AS) that receives an introspection request for a token it did not issue, to query a different, trusted AS. This enables the AS to determine the active state of the token and to retrieve associated metadata.

Document URL: https://zenodo.org/records/10205863/files/AARC-G052%20-%20OAuth%202.0%20Proxied%20Token%20Introspection.pdf
Development information: N/A
Status: Final (27 Oct 2025) – Endorsed by AEGIS
DOI: 10.5281/zenodo.15334672
Errata: none
Supersedes: none