OIDC dynamic client registration validity

[Cantor, Scott]

On 2/28/22, 10:04 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

>    Thanks, Scott. I see a value in the json stored in the value column of the StorageRecords table for the secret
> expiration time, but I don't see anything stored in that JSON that seems to define a registration expire time.

There isn't.

> There's a value for when the client was registered, but not for when it expires. And the expires column of the
> StorageRecords table for everything with an oidcClientInformation scope is null, so it's not stored there, 

That means "no expiration".

The control over this is the profile configuration for the registration endpoint.

-- Scott