I've got a regular OWIN OAuth setup for my MVC WebAPI project - one of the requests from the frontend developers was to be able to determine whether a token is rejected because it's expired, or when it's just an invalid token. I've got a regular OWIN OAuth setup for my MVC