Subject: [OAUTH-WG] Token Introspection: Misc Review Comments

From: Anthony Nadalin <[email-masked]>
Date: Thu, 5 Mar 2015 23:10:53 +0000

Some comments:

> The endpoint MAY allow other parameters to provide further context to the query.

If the endpoint does not understand these the endpoint must ignore.

The only MUST in this specification is to return the "active" Boolean, but this is still underspecified as there is no definition or criteria that a developer has to go upon to determine if that Boolean is set or not.

token_type_hint  is really not a type hint but just a token hint and thus should be chnaged