#dev 2017-02-18

2017-02-18 UTC

aaronpk if your token endpoint and authorization endpoint are part of the same system then you don't need to use that API to verify it, but the token endpoint is going to have to verify the token somehow