OIDC dynamic client registration validity

[Wessel, Keith]

Hi, all,

I've got an OIDC client that was registered using the dynamic registration endpoint that has since disappeared from my storage database. I'm not sure if it's because the validity period expired or it was something else yet, but I've had clients registered for a matter of years that haven't disappeared yet. This led me to start wondering about the validity settings which I haven't changed from the defaults.

1. When a client's registration is older than the defaultRegistrationValidity, does the IdP remove it from the database?
2. Same question for the client secret validity period. What happens when the client secret is older than the client secret validity time?
3. Can anyone suggest a reason why I'd have clients in my database that have been there for months or years that haven't expired?
4. Most importantly, how does a client "renew" their registration or update the secret to keep their client from dropping out? Or do they simply need to re-register each time it expires?

Thanks,
Keith