[Openid-specs-ab] Issue #1139: Assurance: Exactly what properties can have the max_age constraint? (openid/connect)

Takahiko Kawasaki issues-reply at bitbucket.org
Wed Dec 11 13:48:48 UTC 2019


New issue 1139: Assurance: Exactly what properties can have the max_age constraint?
https://bitbucket.org/openid/connect/issues/1139/assurance-exactly-what-properties-can-have

Takahiko Kawasaki:

“5.3. Defining constraints on Verification Data” defines `max_age`. From the context, it is apparent that `verified_claims/verification/time` can have the `max_age` constraint. However, the definition of `max_age` is not so clear for developers to reach one interpretation.

Can `id_document/time` have the `max_age` constraint? What will it mean if the constraint is given to `qes/created_at`? How about `utility_bill/date`? Is `id_document/document/date_of_issuance` affected?

It might be better to describe explicitly which properties can have the `max_age` constraint and how the constraint should be interpreted in each case than to leave the interpretation of the constraint to developers.




More information about the Openid-specs-ab mailing list