Any changes in OIDC RP overrides between V1 and V2?

Jim Fox fox at washington.edu
Mon Mar 29 18:03:46 UTC 2021


> 
> Well, that's a bummer as I thought I had the cause of this one figured out. Jim, is there a way of telling the expiration time on an access token or a refresh token without cranking up the IdP logging? Is this part of the response to the client when the token is issued?
>

At least access token lifetime is passed to the client.  I used apache with mod_auth_openidc.  One of the env variables it passes is the token lifetime.
I also tested this with idp 4.0.1 (the last snapshot it seems) and the times were correct according to the relyingparty override.

Jim


More information about the users mailing list