# Are there any token validation methods other than the /userinfo endpoint?

**URL:** <https://community.auth0.com/t/are-there-any-token-validation-methods-other-than-the-userinfo-endpoint/90986>\
**Category:** Get Help\
**Created:** [September 20, 2022, 3:00pm UTC](https://community.auth0.com/t/are-there-any-token-validation-methods-other-than-the-userinfo-endpoint/90986 "2022-09-20T15:00:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![k\_saito](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/k_saito/32/36832_2.png) [@k\_saito](https://community.auth0.com/u/k_saito)\
**Post date:** [September 20, 2022, 3:00pm UTC](https://community.auth0.com/t/are-there-any-token-validation-methods-other-than-the-userinfo-endpoint/90986/1 "2022-09-20T15:00:13Z")

</div>

I am using the /userinfo endpoint to check if the user is authenticated correctly.  
but, /userinfo endpoint has a limit of 5 requests per minute.  
Is there a way to check if the user’s token is correct using an endpoint other than the /userinfo endpoint?

---

<div class="post-metadata">

**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\
**Post date:** [September 21, 2022, 1:24am UTC](https://community.auth0.com/t/are-there-any-token-validation-methods-other-than-the-userinfo-endpoint/90986/4 "2022-09-21T01:24:45Z")

</div>

Hey there @k_saito welcome to the community!

> [@k\_saito](#):
>
> Is there a way to check if the user’s token is correct using an endpoint other than the /userinfo endpoint?

Typically, in an Auth0 context, this is done through [token validation](https://auth0.com/docs/secure/tokens/json-web-tokens/validate-json-web-tokens) and there unfortunately is not another endpoint that supports introspection or the like. There is however an existing feedback request for this functionality if you’d like to upvote:

> [@Introspection endpoint for Opaque tokens or more flexible rules to get clear JWT access token](https://community.auth0.com/t/introspection-endpoint-for-opaque-tokens-or-more-flexible-rules-to-get-clear-jwt-access-token/63866):
>
> Feature: By default, Auth0 provide opaque access token instead of clear JWT Token. Auth0 should also provide introspection endpoints. Description: By default here means: when the ‘openid’ scope is requested and/or when no audience is passed and/or when the /userinfo endpoint is used as audience - which is the required one for Login feature on Native app for example. Such Opaque token cannot be used to read claims, especially permission related one(s) from other middlewares such as API Gatew…

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [October 5, 2022, 1:25am UTC](https://community.auth0.com/t/are-there-any-token-validation-methods-other-than-the-userinfo-endpoint/90986/5 "2022-10-05T01:25:05Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.