Skip to main content
2 of 2
deleted 35 characters in body; edited tags
Brock Adams
  • 13k
  • 5
  • 39
  • 64

Does verifying OAuth2 `access_token` validity count towards API call quota?

Does this Stack Exchange API endpoint count towards quota usage? :

http://api.stackexchange.com/docs/read-access-tokens

(This is the most promising API call I found for verifying the validity of an access_token.)

I'm doing user authentication, not Stack Exchange API calls.
My application's cache acts as the first level for checking whether a user is still logged in, but when a call slips through, it has to hit some API call on Stack Exchange API to verify whether the token is still valid.


Which gets me to my second question:
Is there a purpose-built endpoint just for verifying the validity of an access_token?
GitHub apparently has:

#check-an-authorization ("OAuth applications can use a special API method for checking OAuth token validity without running afoul of normal rate limits for failed login attempts")

Gima
  • 123
  • 4