OIDC extension: refresh and validate endpoints?

[Liam Hoekenga]

>
> One more question based on what Liam brought up: what property controls
> the storage service to use for refresh tokens? I don’t see a storage
> setting for this in idp-oidc.properties. I only see dynamic registrations,
> remote JWK sets, and the revocation cache which, obviously, all must be
> server-side.
>

I'm pretty sure it they just use the same storage service that the rest of
the tokens use (session storage)

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190830/f0a3880c/attachment.html>