OAuth 2.0 Proxied Token Introspection (AARC-G052)
Abstract
This specification extends the OAuth 2.0 Token Introspection method defined in RFC7662. It defines a method for an OAuth 2.0 Authorization Server (AS) that receives an introspection request for a token it did not issue, to query a different, trusted AS. This enables the AS to determine the active state of the token and to retrieve associated metadata.
Fields of Study & Subjects
Advanced Authentication Protocols Security
Access Control and Trust
User Authentication and Security Systems
Publication details
- Journal / source
- Zenodo (CERN European Organization for Nuclear Research)
- Publication date
- 12 January 2026