OIDC dynamic client registration validity

[Wessel, Keith]

The docs and the commented out value shipped with the IdP state that it's a 24-hour default for registration validity. Seems short to me, but who am I to judge. I'm going to register something later this afternoon and see if that expires field gets filled in. If it does, then this was a (possibly unintentional) change in the last release of the OIDC module.

If I don't want registrations to expire, what would I set that to? I haven't tried a negative number yet, but I haven't had much success with that trick in most cases.

Keith


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Tuesday, March 1, 2022 11:21 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: OIDC dynamic client registration validity

On 3/1/22, 11:20 AM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

>    So, if the registration endpoint is paying attention to the 
> defaultRegistrationValidity property and I'm not overriding that 
> property elsewhere, then the expiration time would be calculated at the time of registration and saved in the expires column in the StorageRecords table for that entry, correct?

If it's non-null. I actually don't know what the default is in the code. 

> I've never touched it or changed the default. So, I have to suspect 
> that in the past, it was somehow defaulting to no expiration and, possibly, that has changed?

I don't know.

>    Still doesn't explain how the entry in question disappeared last 
> week, though, since you've already told me that the JPA storage service just ignores expired entries instead of deleting them.

Yes, nothing would have deleted it that I know of. Some of the storage classes have a cleanup thread but the JPA one doesn't install one that I can see.

-- Scott


--
For Consortium Member technical support, see https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!DZ3fjg!oQ72-8LEgDZuuAHVeoLiRf8h2a8o0MJnNrAZcywPUcQ6xlWfVxbdW5EqBNcodzsZBg$
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net