/identityserver/reference/endpoints/introspection/

[giscus[bot]]

/identityserver/reference/endpoints/introspection/

https://docs.duendesoftware.com/identityserver/v7/reference/endpoints/introspection/

[jaydeep581990]

When we hit connect/introspect in post man it always return 401.

Do we need to configure any thing while creating client or any specific configuration require in the duende side which we are missing currently.

[EngSayed]

When I use ApiResource name and secret it still returns 401 response but I do not have any traces in application insights. If I use a wrong values then I see traces with validation failed.

[EngSayed]

I am guessing ApiResource Secret is hashed, if it is hashed and I lost the original secret then what can I do?

[EngSayed]

I created a new ApiResource.Secret and worked fine. But it seems that it validates tokens generated via client_credentials grant type, but if a token is generated via implicit flow then Introspect returns "active": false. How to validate tokens generated via implicit flow then?

[RolandGuijt]

Can you please share more details?

• The token that is sent
• The client configuration on the identity provider
• The code/handler config used on the client

[jaydeep581990]

@ALL my issue is resolve now by passing cliet_id and client_secret in the inferno "Additional Introspection Request Parameters". Now I am facing another issue and for the same I have raised the ticket at ONC.

onc-healthit/onc-certification-g10-test-kit#640

If any one know for the same as I explain in the ticket, it would be great help for me.