Check whether the session behind an access token is still valid.

POST

/introspect

curl --request POST \
  --url https://session-api.sudomimus.com/introspect \
  --header 'Content-Type: application/json' \
  --data '{ "accessToken": "example" }'

• Production

Returns the current effective status of the session identified by a signed access token. No client-auth JWT is required. The access token’s own expiry is intentionally ignored because the response describes the underlying session rather than token validity.

Request Body^required

Media typeapplication/json

object

accessToken

required

Signed access credential identifying the session to inspect; its own exp is intentionally ignored.

string

Example^generated

{
  "accessToken": "example"
}

Responses

200

Status of the session behind the access token.

Media typeapplication/json

object

status

required

string

Allowed values: active revoked expired not_found

recommendedRecheckSeconds

required

integer

Example

{
  "status": "active"
}

401

Access token missing, malformed, or with an invalid signature.

Media typeapplication/json

Error response body. A missing, malformed, or structurally invalid JSON request body returns InvalidBody. Documented status-only failures have an empty response body.

object

reason

required

string

message

string

Example^generated

{
  "reason": "example",
  "message": "example"
}

default

Error response.

Media typeapplication/json

Error response body. A missing, malformed, or structurally invalid JSON request body returns InvalidBody. Documented status-only failures have an empty response body.

object

reason

required

string

message

string

Example^generated

{
  "reason": "example",
  "message": "example"
}