Kong: OAuth2 plugin: Token Introspection support
Token Introspection allows APIs to check the state of an OAuth2 token.
More info: https://tools.ietf.org/html/rfc7662
vitorsdcs
All 5 comments
@vitorsdcs you can also invoke the /oauth2_tokens endpoint on the Admin API to get a list of all the tokens on the system and their properties.
subnetmarco
on 13 Sep 2016
This was done! :) https://getkong.org/plugins/oauth2-introspection/
p0pr0ck5
on 21 Apr 2017
I assume this issue requested to implement the Introspection endpoint support as a new endpoint in the existing OAuth 2.0 plugin, as opposed to the linked OAuth 2.0 Introspection Endpoint plugin which leverages a third-party Introspection endpoint to authenticate requests.
If that's the case, it should be re-opened.
subnetmarco
on 21 Apr 2017
Ah yep, I think that's the case. Faulty assumption on my part; thanks.
p0pr0ck5
on 21 Apr 2017
...so? How's this feature development going? :smiley:
NebojsaKrtolica
on 14 Apr 2019
Related issues
kwahome
路
3Comments
z843248880
路
3Comments
ghost
路
3Comments
cospotato
路
3Comments
antoniott15
路
3Comments
Most helpful comment
@vitorsdcs you can also invoke the
/oauth2_tokensendpoint on the Admin API to get a list of all the tokens on the system and their properties.