Description
Add OAuth2 introspection endpoint to allow clients to verify token validity, scope, and expiration without parsing JWT directly.
Acceptance Criteria
- Introspection endpoint follows RFC 7662
- Returns token metadata (scope, exp, iat, etc.)
- Rate limited per client
- Works with both access and refresh tokens
- Proper error handling for invalid tokens
Implementation Notes
- Create /oauth/introspect endpoint
- Implement RFC 7662 compliance
- Add rate limiting
- Test with OAuth2 clients
Description
Add OAuth2 introspection endpoint to allow clients to verify token validity, scope, and expiration without parsing JWT directly.
Acceptance Criteria
Implementation Notes