Provide introspection_endpoint for clients

[lonli.lokli]

I am really surprised that this fature was not implemented.

Right now there is no way to integrate Role-based authorization for .NET Core with angular frontend.
UI is sedning inly access_token so we cqnnot determine roles on API side because we need to call introspect endpoint which idoes not exist!

[dan.woda]

Hi @lonli.lokli,

It looks like there is an existing feature request for this. Feel free to add a vote to the existing request.

Introspection endpoint for Opaque tokens or more flexible rules to get clear JWT access token

Feature: By default, Auth0 provide opaque access token instead of clear JWT Token. Auth0 should also provide introspection endpoints. Description: By default here means: when the ‘openid’ scope is requested and/or when no audience is passed and/or when the /userinfo endpoint is used as audience - which is the required one for Login feature on Native app for example. Such Opaque token cannot be used to read claims, especially permission related one(s) from other middlewares such as API Gatew…