cation of the token expiration, and might include using introspection to verify the token has not been revoked. This enforcement includes constraining results returned to the scopes authorized by the access token. The Resource server might have further access controls beyond those in the token to enforce, such as Consent or business rules.
</p><p>
For further details, see <a href="security.html#binding">Security: Authorization and Access Control</a>.

</p>

<a name="query-parameters"></a>
<h5>Query Paramete