Any changes in OIDC RP overrides between V1 and V2?
Jim Fox
fox at washington.edu
Mon Mar 29 18:03:46 UTC 2021
>
> Well, that's a bummer as I thought I had the cause of this one figured out. Jim, is there a way of telling the expiration time on an access token or a refresh token without cranking up the IdP logging? Is this part of the response to the client when the token is issued?
>
At least access token lifetime is passed to the client. I used apache with mod_auth_openidc. One of the env variables it passes is the token lifetime.
I also tested this with idp 4.0.1 (the last snapshot it seems) and the times were correct according to the relyingparty override.
Jim
More information about the users
mailing list