🔐
AB-132
Token introspection supported
What it means
Your OAuth metadata publishes an introspection_endpoint (optional).
Why it matters
Introspection lets resource servers validate tokens in real-time, enabling immediate revocation and audit trails.
✗
What's wrong
OAuth metadata has no introspection_endpoint.
✓
What's right
OAuth metadata: { introspection_endpoint: 'https://api.example.com/oauth/introspect' }
Check this rule on your site
Enter your URL to check just this one rule (AB-001).