Examine and introspect an access token locally. All standard and custom claims will be returned. No network calls are made when invoking this API method.
An error will be thrown if the token is not active.
This method supports only access tokens.
If an authorization_check object is passed in, this method will also check if the token contains scopes that are authorized to perform the specified action on the resource_id.
const stytch = require('stytch');
const client = new stytch.Client({
project_id: 'PROJECT_ID',
secret: 'SECRET',
custom_base_url: '${projectDomain}',
});
const params = {
token: 'eyJ...',
};
const options = {
authorization_check: {
resource_id: 'documents',
action: 'create',
},
};
client.idp
.introspectTokenLocal(params, options)
.then((resp) => {
console.log(resp);
})
.catch((err) => {
console.log(err);
});{
"subject": "member-test-32fc5024-9c09-4da3-bd2e-c9ce4da9375f",
"scope": "openid email profile",
"audience": ["PROJECT_ID"],
"client_id": "connected-app-test-d731954d-dab3-4a2b-bdee-07f3ad1be888",
"expires_at": 1738848103,
"issued_at": 1738844503,
"issuer": "https://${projectDomain}",
"token_type": "access_token"
}