Are there any token validation methods other than the /userinfo endpoint?

[k_saito]

I am using the /userinfo endpoint to check if the user is authenticated correctly.
but, /userinfo endpoint has a limit of 5 requests per minute.
Is there a way to check if the user’s token is correct using an endpoint other than the /userinfo endpoint?

[tyf]

Hey there @k_saito welcome to the community!

@k_saito

Is there a way to check if the user’s token is correct using an endpoint other than the /userinfo endpoint?

Typically, in an Auth0 context, this is done through token validation and there unfortunately is not another endpoint that supports introspection or the like. There is however an existing feedback request for this functionality if you’d like to upvote:

Introspection endpoint for Opaque tokens or more flexible rules to get clear JWT access token

Feature: By default, Auth0 provide opaque access token instead of clear JWT Token. Auth0 should also provide introspection endpoints. Description: By default here means: when the ‘openid’ scope is requested and/or when no audience is passed and/or when the /userinfo endpoint is used as audience - which is the required one for Login feature on Native app for example. Such Opaque token cannot be used to read claims, especially permission related one(s) from other middlewares such as API Gatew…