OAuth 2.0 Token Introspection

Introduction

OAuth 2.0 Introspection extends Laravel Passport to separate the authorization server and the resource server.

To verify an access token at the resource server the client sends it as bearer token to the resource server and the resource server makes an introspection server-to-server call to verify data and signature of the given token.

Installation

Just install the package on your authorization server

composer require ipunkt/laravel-oauth-introspection

and add the Service Provider in your config/app.php

\Ipunkt\Laravel\OAuthIntrospection\Providers\OAuthIntrospectionServiceProvider::class,

Official Documentation

Documentation for OAuth 2.0 Token Introspection can be found on the RFC 7662.

License

OAuth 2.0 Token Introspection is open-sourced software licensed under the MIT license