search

TNG / keycloak-mock

A Java library to test REST endpoints secured by Keycloak via OpenID connect.
Apache License 2.0
122 stars 27 forks source link

Draft: Support OAuth2 token introspection #157 #158

Open nrmaridu opened 10 months ago

nrmaridu commented 10 months ago

fixes #157

Signed-off-by: Nageswara Rao Maridu <maridu.nageswararao@gmail.com

nrmaridu commented 10 months ago

The Introspection Endpoint was implemented as per below guidelines. The introspection response contains a json property called 'active', which can be used to determine whether the token is active or not.

For supporting various use cases, the introspection response returns all the claims found in the provided token along with active property.

Introspection Endpoint : POST {baseUrl}/realms/{issuer}/protocol/openid-connect/token/introspect