[JIRA] (JOIDC-152) Implement maximum refresh time and/or maximum refresh uses.

[Pierre Sagne (Jira)]

Pierre Sagne ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=712020%3Ab389f93c-082f-42b2-8684-ac3e951ab163 ) *commented* on JOIDC-152 ( https://shibboleth.atlassian.net/browse/JOIDC-152?atlOrigin=eyJpIjoiMTg4ZGViMzAyNDg5NGI5MTgzMDVlN2M4NGYyM2FhZTciLCJwIjoiaiJ9 )

Re: Implement maximum refresh time and/or maximum refresh uses. ( https://shibboleth.atlassian.net/browse/JOIDC-152?atlOrigin=eyJpIjoiMTg4ZGViMzAyNDg5NGI5MTgzMDVlN2M4NGYyM2FhZTciLCJwIjoiaiJ9 )

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) : in my understanding, refreshTokenLifetime is the duration before a refresh token expires. It is the same as the max time if you don’t activate refresh token rotation.

If you do activate refresh token rotation, you get a new refresh token each time you refresh. I’m not sure what is the duration of the new token ? refreshTokenLifetime too, or refreshTokenLifetime minus the time elapsed ?

If it is the second case, we are good, and it fullfills my need. Maybe just mention it in the documentation (or if it already is in the doc, i apologize, and will buy new glasses).

If it is the first case, it would result in the possibility for unlimited refreshes, and we need something to configure that max refresh time.

( https://shibboleth.atlassian.net/browse/JOIDC-152#add-comment?atlOrigin=eyJpIjoiMTg4ZGViMzAyNDg5NGI5MTgzMDVlN2M4NGYyM2FhZTciLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-152#add-comment?atlOrigin=eyJpIjoiMTg4ZGViMzAyNDg5NGI5MTgzMDVlN2M4NGYyM2FhZTciLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100223- sha1:038ca59 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230426/2d9e27ae/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-16b4c3ec-207b-4a79-94a1-4f1e529c67df
Type: image/png
Size: 302 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230426/2d9e27ae/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-4b50379f-8593-4166-ad94-4406e34b6278
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230426/2d9e27ae/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-3549fdd8-3120-4756-ba25-7ddb73eb8702
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230426/2d9e27ae/attachment-0005.png>