Validate Access Token

Confirm that a Bearer access token is still valid. Returns validity and expiry only — no credential identifiers. Auth required; not billable.

Request

GET/api/v1/oauth/validate

{{baseUrl}}/api/v1/oauth/validate

Header

Header	Type	Description
Authorization	string	Bearer YOUR_ACCESS_TOKEN
Accept	string	application/json

Response

200 OKSample dataExample response

{
  "success": true,
  "response_code": 200,
  "message": "Token is valid",
  "data": {
    "valid": true,
    "expires_at": "2026-08-09T18:15:00Z"
  },
  "request_id": "550e8400-e29b-41d4-a716-446655440098"
}

Response Fields

Field	Type	Description
success	boolean	Whether the token is valid
response_code	number	Application response code (typically mirrors HTTP)
message	string	Human-readable status message
data.valid	boolean	Always true on HTTP 200
data.expires_at	string	Token expiry time (ISO 8601 UTC)
request_id	string	UUID for support and audit trails

Error codes

Standard Peleza HTTP / response_code values (same across all API calls). Validation message text is endpoint-specific. Full reference: Error Codes.

Code	When
200	Token is valid
401	Missing, expired, or invalid Bearer token

401 — unauthorized

401Sample data401 — unauthorized

{
  "success": false,
  "response_code": 401,
  "message": "Unauthorized. Please provide a valid access token.",
  "data": null,
  "request_id": "550e8400-e29b-41d4-a716-446655440021"
}

Set {{baseUrl}} to https://api.peleza.com (production) or https://sandbox.peleza.com (sandbox). Authenticated calls need a Bearer token from POST /api/v1/oauth/token.