When an resource server makes a request to Authlete’s /auth/introspection API, and the request includes an expired access token, Authlete works as follows:Documentation Index
Fetch the complete documentation index at: https://developers.authlete.com/llms.txt
Use this file to discover all available pages before exploring further.
- To the first request: Authlete determines the token has been expired and then removes the token from its database.
- To the second and subsequent requests: Authlete determines the token doesn’t exist. Because the token has been removed at the first request.