RFC7662: OAuth 2.0 Token Introspection
docs.authlib.org