[Openid-specs-ab] Issue #1836: iat and/or exp in proof parameter (openid/connect)

[tlodderstedt]

New issue 1836: iat and/or exp in proof parameter
https://bitbucket.org/openid/connect/issues/1836/iat-and-or-exp-in-proof-parameter

Torsten Lodderstedt:

The current text requires the `iat` claim to be present in the proof of type “JWT”. How is the issuer expected to process this claim? I think the `exp` would be better suited as it allows the client to determine the lifetime of the proof of possession.