OIDC extension: refresh and validate endpoints?

[Greg Haverkamp]

You're talking about access and refresh tokens, and not OIDC session
management, right?

Refresh tokens are sent to the token endpoint to obtain a new access token.

For "validate", are you interested in the Introspection endpoint?  Not
being terribly knowledgeable about the operations of the extension, it
looks to me like it probably needs to be added to the OP metadata template:
https://github.com/CSCfi/shibboleth-idp-oidc-extension/blob/1cb253121d82ced9ce6c283fbd1f9ce88e46e64e/roles/oidc-extension/templates/openid-configuration

Greg


On Tue, Aug 27, 2019 at 8:50 AM Wessel, Keith <kwessel at illinois.edu> wrote:

> All,
>
> The same developers who were talking to me yesterday about access token
> and refresh token lifetimes pointed out to me that the refresh and validate
> endpoints aren't listed in our opened-configuration. I checked the template
> that ships with the extension and, sure enough, they aren't there. Is there
> a reason for this? If not, can someone help me figure out what those URLs
> should be so I can add them?
>
> Thanks,
> Keith
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190827/c89216da/attachment.html>