OAuth 2.0 Proxied Token Introspection (AARC-G052)

Read full text
Authors: Christos Kanellopoulos, Nicolas Liampotis, Dominik František Bučík, Marcus Hardt, Jens Jensen, Ioannis Kanakarakis, M. Sallé, Tomasz Kuczyński, Jan Pavlíček
Cited by: 0

Abstract

This specification extends the OAuth 2.0 Token Introspection method defined in RFC7662. It defines a method for an OAuth 2.0 Authorization Server (AS) that receives an introspection request for a token it did not issue, to query a different, trusted AS. This enables the AS to determine the active state of the token and to retrieve associated metadata.

Fields of Study & Subjects

Advanced Authentication Protocols Security Access Control and Trust User Authentication and Security Systems

Publication details

Journal / source
Zenodo (CERN European Organization for Nuclear Research)
Publication date
12 January 2026