Check whether the session behind an access token is still valid.

POST

/introspect

curl --request POST \
  --url https://session-api.sudomimus.com/introspect \
  --header 'Content-Type: application/json' \
  --data '{ "accessToken": "example" }'

• Production

Returns the current effective status of the session identified by a signed access token. No client-auth JWT is required. The access token’s own expiry is intentionally ignored because the response describes the underlying session rather than token validity. Workload tokens are accepted only when the session’s Workload principal, generation, pairwise actor subject, and source credential remain authoritative.

Request Body^required

Media typeapplication/json

object

accessToken

required

Signed Account or Workload access credential identifying the session to inspect; its own exp is intentionally ignored.

string

Example^generated

{
  "accessToken": "example"
}

Responses

200

Status of the session behind the access token.

Media typeapplication/json

object

status

required

string

Allowed values: active revoked expired not_found

recommendedRecheckSeconds

required

integer

Example

{
  "status": "active"
}

401

Access token missing, malformed, or with an invalid signature.

Media typeapplication/json

Error response body. A missing, malformed, or structurally invalid JSON request body returns InvalidBody. Documented status-only failures have an empty response body.

object

reason

required

string

message

string

Example^generated

{
  "reason": "example",
  "message": "example"
}

default

Error response.

Media typeapplication/json

Error response body. A missing, malformed, or structurally invalid JSON request body returns InvalidBody. Documented status-only failures have an empty response body.

object

reason

required

string

message

string

Example^generated

{
  "reason": "example",
  "message": "example"
}