[Openid-specs-ab] Regrets and id_token question
George Fletcher
gffletch at aol.com
Thu Jan 18 15:01:12 UTC 2018
Unfortunately, I'm not going to be able to make the WG meeting today.
One quick question. The id_token has optional fields for things like
auth_time or amr. What is the preferred way to get this information
after the fact? Should it be returned from the /introspection endpoint?
(not my favorite).
Maybe a token_exchange profile to exchange a refresh_token
(access_token????) for an id_token?
Other thoughts?
Thanks,
George
More information about the Openid-specs-ab
mailing list