[OpenID Connect API docs](https://gluu.org/docs/ce/api-guide/openid-connect-api/).

The similar link is already specified in question. Can you answer how access token can be validated?

What client software are you using?

I am calling gluu open id connect api from java application. Using oxauth client api.

You should use one of the existing client software projects listed on our [integration guide](https://gluu.org/docs/ce/integration/). We are unable to support custom OAuth/OpenID client development. Thanks, Will

We are using the existing one. Followed same guide: Client Software# Client software performs some of the heavy lifting for developers around leveraging OAuth 2.0 directly in their applications. Calling the API’s directly will enable “smarter” handling of authentication in your applications. For example, transaction level security can be more easily implemented by calling the OAuth 2.0 APIs directly. This can have a positive impact on usability. Also, giving developers more ability to leverage centralized policies increases re-use of policies, and ultimately results in better security. We recommend the following client software to implement OpenID Connect in server-side web applications: oxd Not using oxd since it is paid. The same can be done by calling APIs in gluu api section. But not seeing much details documented regarding validation of access token by calling gluu api. I have checked oxd apis also,it also lacks this api information. I wonder whether it need validation.

> We are using the existing one. No, you aren't. If you were using one of the recommended client software projects, you would actually be using it. By your own admission, you are not using it: > Not using oxd since it is paid. That's my point. You need to use one of the recommended software projects. Try mod_auth_openidc if you want a free open source client. As mentioned, we do not support custom client development, which is what you are trying to do.

We need it from application level not from apache server. Can you tell what to do to validate access token if I am using oxd?

oxd does all the validation for you. That's why we wrote oxd--it handles much of the protocol implementation for you. It's taken us many years to write a good client. It's not a trivial undertaking.

Hi valsaraj viswanathan, can you please give me your phone number, i am also trying to write client for oauth,saml and ldap. i need some clarifications. please give me the reply. u can whatsapp your no to 7411417149