The OIDC Introspection Endpoint. | |
The debugger can initiate an Introspection Endpoint call from either the frontend (browser) or from the backend API component. Certain IdPs make stringent assumptions about CORS and how calls will be originated. Especially concerning the Origin request header, which cannot be controlled from the browser. | Front Back |
The OIDC Introspection Token. | |
The OIDC Introspection Token Type Hint (access_token or refresh_token). | |
The OAuth2 Authentication Type (Basic Auth or Bearer Token). | |
The OAuth2 Client ID | |
The OAuth2 Client Secret | |
The OAuth2 Bearer Token | |
| |
