Node.js / Salesforce Platform APIs / OpenID Connect Token Introspection Endpoint
Back to Collection Items
var os = require('os');
if (os.platform() == 'win32') {
if (os.arch() == 'ia32') {
var chilkat = require('@chilkat/ck-node21-win-ia32');
} else {
var chilkat = require('@chilkat/ck-node21-win64');
}
} else if (os.platform() == 'linux') {
if (os.arch() == 'arm') {
var chilkat = require('@chilkat/ck-node21-arm');
} else if (os.arch() == 'x86') {
var chilkat = require('@chilkat/ck-node21-linux32');
} else {
var chilkat = require('@chilkat/ck-node21-linux64');
}
} else if (os.platform() == 'darwin') {
if (os.arch() == 'arm64') {
var chilkat = require('@chilkat/ck-node21-mac-m1');
} else {
var chilkat = require('@chilkat/ck-node21-macosx');
}
}
function chilkatExample() {
// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.
var http = new chilkat.Http();
var success;
var req = new chilkat.HttpRequest();
var jsonParam1 = new chilkat.JsonObject();
req.AddParam("token",jsonParam1.Emit());
req.AddParam("token_type_hint","access_token");
var jsonParam3 = new chilkat.JsonObject();
req.AddParam("client_id",jsonParam3.Emit());
var jsonParam4 = new chilkat.JsonObject();
req.AddParam("client_secret",jsonParam4.Emit());
req.AddHeader("Accept","application/json");
// resp: HttpResponse
var resp = http.PostUrlEncoded("https://login.salesforce.com{{site}}/services/oauth2/introspect",req);
if (http.LastMethodSuccess == false) {
console.log(http.LastErrorText);
return;
}
var sbResponseBody = new chilkat.StringBuilder();
resp.GetBodySb(sbResponseBody);
var jResp = new chilkat.JsonObject();
jResp.LoadSb(sbResponseBody);
jResp.EmitCompact = false;
console.log("Response Body:");
console.log(jResp.Emit());
var respStatusCode = resp.StatusCode;
console.log("Response Status Code = " + respStatusCode);
if (respStatusCode >= 400) {
console.log("Response Header:");
console.log(resp.Header);
console.log("Failed.");
return;
}
// Sample JSON response:
// (Sample code for parsing the JSON response is shown below)
// {
// "active": true,
// "scope": "<scope_list>",
// "client_id": "<client_id>",
// "username": "<username>",
// "sub": "https://login.salesforce.com/id/00D.../005...",
// "token_type": "access_token",
// "exp": <timestamp>,
// "iat": <timestamp>,
// "nbf": <timestamp>
// }
// Sample code for parsing the JSON response...
// Use this online tool to generate parsing code from sample JSON: Generate JSON Parsing Code
var active = jResp.BoolOf("active");
var scope = jResp.StringOf("scope");
var client_id = jResp.StringOf("client_id");
var username = jResp.StringOf("username");
var v_sub = jResp.StringOf("sub");
var token_type = jResp.StringOf("token_type");
var exp = jResp.IntOf("exp");
var iat = jResp.IntOf("iat");
var nbf = jResp.IntOf("nbf");
}
chilkatExample();
Curl Command
curl -X POST
-H "Content-Type: application/x-www-form-urlencoded"
-H "Accept: application/json"
--data-urlencode 'token={{_accessToken}}'
--data-urlencode 'token_type_hint=access_token'
--data-urlencode 'client_id={{clientId}}'
--data-urlencode 'client_secret={{clientSecret}}'
https://login.salesforce.com{{site}}/services/oauth2/introspect
Postman Collection Item JSON
{
"name": "OpenID Connect Token Introspection Endpoint",
"request": {
"auth": {
"type": "noauth"
},
"method": "POST",
"header": [
{
"key": "Content-Type",
"name": "Content-Type",
"value": "application/x-www-form-urlencoded",
"type": "text"
},
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "urlencoded",
"urlencoded": [
{
"key": "token",
"value": "{{_accessToken}}",
"type": "text"
},
{
"key": "token_type_hint",
"value": "access_token",
"type": "text"
},
{
"key": "client_id",
"value": "{{clientId}}",
"type": "text"
},
{
"key": "client_secret",
"value": "{{clientSecret}}",
"type": "text"
}
]
},
"url": {
"raw": "{{url}}{{site}}/services/oauth2/introspect",
"host": [
"{{url}}{{site}}"
],
"path": [
"services",
"oauth2",
"introspect"
]
}
},
"response": [
{
"name": "Successful OpenID Connect Token Introspection Endpoint",
"originalRequest": {
"method": "POST",
"header": [
{
"key": "Content-Type",
"value": "application/x-www-form-urlencoded"
},
{
"key": "Accept",
"value": "application/json"
}
],
"body": {
"mode": "urlencoded",
"urlencoded": [
{
"key": "token",
"value": "{{_accessToken}}",
"type": "text"
},
{
"key": "token_type_hint",
"value": "access_token",
"type": "text"
},
{
"key": "client_id",
"value": "{{clientId}}",
"type": "text"
},
{
"key": "client_secret",
"value": "{{clientSecret}}",
"type": "text"
}
]
},
"url": {
"raw": "{{url}}{{site}}/services/oauth2/introspect",
"host": [
"{{url}}{{site}}"
],
"path": [
"services",
"oauth2",
"introspect"
]
}
},
"status": "OK",
"code": 200,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Date",
"value": "Thu, 16 Nov 2023 15:54:42 GMT"
},
{
"key": "Strict-Transport-Security",
"value": "max-age=63072000; includeSubDomains"
},
{
"key": "X-Content-Type-Options",
"value": "nosniff"
},
{
"key": "X-XSS-Protection",
"value": "1; mode=block"
},
{
"key": "X-Robots-Tag",
"value": "none"
},
{
"key": "Cache-Control",
"value": "no-cache,must-revalidate,max-age=0,no-store,private"
},
{
"key": "Content-Type",
"value": "application/json;charset=UTF-8"
},
{
"key": "Vary",
"value": "Accept-Encoding"
},
{
"key": "Content-Encoding",
"value": "gzip"
},
{
"key": "Transfer-Encoding",
"value": "chunked"
}
],
"cookie": [
],
"body": "{\n \"active\": true,\n \"scope\": \"<scope_list>\",\n \"client_id\": \"<client_id>\",\n \"username\": \"<username>\",\n \"sub\": \"https://login.salesforce.com/id/00D.../005...\",\n \"token_type\": \"access_token\",\n \"exp\": <timestamp>,\n \"iat\": <timestamp>,\n \"nbf\": <timestamp>\n}"
}
]
}