We need to use the introspect endpoint to validate tokens
Add into the config page of the client the introspect token among other endpoints
Active
3.0
Code