Repository files navigation

OAuth 2.0 Introspection extends Laravel Passport to separate the authorization server and the resource server.

To verify an access token at the resource server the client sends it as bearer token to the resource server and the resource server makes an introspection server-to-server call to verify data and signature of the given token.

Just install the package on your authorization server

composer require ipunkt/laravel-oauth-introspection

and add the Service Provider in yourconfig/app.php

\Ipunkt\Laravel\OAuthIntrospection\Providers\OAuthIntrospectionServiceProvider::class,

Documentation for OAuth 2.0 Token Introspection can be found on theRFC 7662.

OAuth 2.0 Token Introspection is open-sourced software licensed under theMIT license