Get introspection validation settings

GET

/api/admin/settings/introspection-validation

Code sample: Shell / cURL

curl --request GET \
  --url https://auth.example.com/api/admin/settings/introspection-validation \
  --header 'Authorization: Bearer <token>'

Returns strict validation and expected audience settings for RFC 7662 introspection responses.

Authorizations

• adminBearer
• adminSessionCookie

Responses

200

Introspection validation settings.

Media type application/json

object

settings

object

strictValidation

object

value

Resolved setting value.

source

Source for the resolved setting.

string

default

Default value.

metadata

Setting metadata and validation constraints.

object

key

additional properties

description

string

min

number

max

number

validOptions

Array

key

additional properties

expectedAudience

object

value

Resolved setting value.

source

Source for the resolved setting.

string

default

Default value.

metadata

Setting metadata and validation constraints.

object

key

additional properties

description

string

min

number

max

number

validOptions

Array

key

additional properties

key

additional properties

note

string

key

additional properties

Example

{
  "settings": {
    "strictValidation": {
      "value": true,
      "source": "kv",
      "default": false,
      "description": "When enabled, validates aud matches the current tenant issuer and client_id exists in database"
    },
    "expectedAudience": {
      "value": "https://tenant.example.com",
      "source": "kv",
      "default": null,
      "description": "Expected audience value (null = use the canonical issuer for the default tenant)"
    }
  },
  "note": "RFC 7662 does not require aud/client_id validation. Enable strictValidation for additional security checks."
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

500

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}