Authlete's /auth/userinfo/issue API does internally verify access token in a request from authorization server.

Thus authorization server doesn't have to make a request to Authlete's introspection API (/auth/introspection) in advance of using the Userinfo API.