Inspect OAuth token validity
OAuth clients can use the introspection endpoint to check whether an access or refresh token is active and inspect its associated permissions and context. Discover the endpoint through the OAuth metadata rather than hardcoding its address.