[OpenID] pape.auth_time versus pape.auth_age

Eddy Nigg (StartCom Ltd.) eddy_nigg at startcom.org
Sat Feb 2 16:46:11 UTC 2008


The PHP library (and examples) from openidenabled.com currently return 
in the Auth_OpenID_PAPE_Response function pape.max_auth_age. Reading the 
specs from 
http://openid.net/specs/openid-provider-authentication-policy-extension-1_0-02.html#anchor10 
this should be however pape.auth_time. The sample consumer seems to be 
happy with that, but I think this to be a mistake...

Can somebody confirm that sending pape.max_auth_age is wrong and it 
should be pape.auth_time instead?

-- 
Regards 
 
Signer:  	Eddy Nigg, StartCom Ltd. <http://www.startcom.org>
Jabber:  	startcom at startcom.org <xmpp:startcom at startcom.org>
Blog:  	Join the Revolution! <http://blog.startcom.org>
Phone:  	+1.213.341.0390
 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080202/82b667af/attachment-0002.htm>


More information about the general mailing list