Returns the state of a token, per RFC 7662. Callers authenticate as the client the token was issued to, or as the protected resource the token was issued for, with client_secret_post, client_secret_basic or a Bearer token. Expired, revoked and unknown tokens return active: false.