Best Way to Validate Access Token?

Question

I'm looking to implement services where the client will pass the access_token from Sonos to the service I host.* Is there a good way to validate that access_token from the client is valid and get the user id? For reference, I'm thinking of something similar to googleapis.auth.OAuth2.verifyIdToken.

Thanks!

• The driver of this is wanting to fully delegate authorization and authentication to Sonos. I want to have an Alexa skill which just auths with Sonos and don't want to 'build out' the middle.

Answer 1

I'm not 100% clear about what you're trying to do, and I'm a little concerned that it runs afoul of sect 10.3 of the OAuth 2.0 spec, but validating a token should be as simple as performing a simple GET /households.