Missing Token introspection endpoint in openid configuration

[mohitraj]

I have got a free Auth0 tenant and the corresponding application metadata is hosted at https://dev-q0w2aecoktdbqili.us.auth0.com/.well-known/openid-configuration

But I unable to find a token introspect end point in it, which can be used to validate token validity. I would like to know if there are any settings which can be enabled either at tenant or application level with which I can see the introspect end point.

Kindly help.
Thanks.

[dan.woda]

Hi @mohitraj,

Welcome to the Auth0 Community!

This is covered here:

Provide introspection_endpoint for clients

I am really surprised that this fature was not implemented. Right now there is no way to integrate Role-based authorization for .NET Core with angular frontend. UI is sedning inly access_token so we cqnnot determine roles on API side because we need to call introspect endpoint which idoes not exist!

Validating an Access Token

Hi team I want to validate access token from the gateway. Which service should I hit in Auth0 to do so? I am looking for something equivalent of introspection end point provided by okta

Validate Access Tokens

[mohitraj]

Hi @dan.woda

From your response I could not figure out if the introspection end point is not supported or just not available in my tenant.

Could you please help with the same.

Thanks,
Mohit

[dan.woda]

From the second post I shared:

We don’t have an equivalent endpoint to the /introspect endpoint from Okta.