Token Introspection

curl -X POST https://auth.humansoft.co.th/oauth2/v1/introspect \
  -H "Content-Type: application/json" \
  -H "Authorization: Basic bXktYXBwOkNMSUVOVF9TRUNSRVQ=" \
  -d '{"token": "ACCESS_TOKEN_HERE"}'

const clientId = 'my-app'
const clientSecret = 'CLIENT_SECRET'
const credentials = btoa(`${clientId}:${clientSecret}`)
 
const response = await fetch('https://auth.humansoft.co.th/oauth2/v1/introspect', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Authorization': `Basic ${credentials}`,
  },
  body: JSON.stringify({
    token: 'ACCESS_TOKEN_HERE',
  }),
})
 
const result = await response.json()
if (result.active) {
  console.log('Token is valid, user:', result.sub)
} else {
  console.log('Token is invalid or expired')
}

import requests
from requests.auth import HTTPBasicAuth
 
url = "https://auth.humansoft.co.th/oauth2/v1/introspect"
data = {
    "token": "ACCESS_TOKEN_HERE"
}
 
response = requests.post(
    url,
    json=data,
    auth=HTTPBasicAuth("my-app", "CLIENT_SECRET")
)
 
result = response.json()
if result["active"]:
    print("Token is valid, user:", result["sub"])
else:
    print("Token is invalid or expired")

<?php
$url = "https://auth.humansoft.co.th/oauth2/v1/introspect";
$clientId = "my-app";
$clientSecret = "CLIENT_SECRET";
$credentials = base64_encode("{$clientId}:{$clientSecret}");
 
$data = json_encode([
    "token" => "ACCESS_TOKEN_HERE"
]);
 
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    "Content-Type: application/json",
    "Authorization: Basic {$credentials}"
]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 
$response = curl_exec($ch);
$result = json_decode($response, true);
 
if ($result["active"]) {
    echo "Token is valid, user: " . $result["sub"];
} else {
    echo "Token is invalid or expired";
}
curl_close($ch);
?>