OptionalauthOptionalcacheCache successful introspection results for this many seconds, so a burst of
requests bearing the same token does not introspect on every call. The cached
entry never outlives the token's own exp. Default 60. Set 0 to introspect on
every request (instant revocation visibility, at the cost of more AS load).
Client credentials this Resource Server uses to authenticate to the introspection endpoint.
OptionalfetchInjectable for tests.
The OAuth 2.0 token introspection endpoint (RFC 7662).
OptionalmaxMaximum number of cached tokens; oldest entries are evicted first. Default 1000.
OptionalnowInjectable clock (ms).
OptionalretriesRetries for transient introspection failures (network, 429, 5xx). Default 0.
OptionalretryBase backoff (ms), doubled each retry. Default 200.
OptionaltimeoutTimeout (ms) for the introspection request. Default 10000. Pass 0 to disable.
How to present the client credentials. Default
basic(HTTP Basic).