[Openid-specs-ab] Session Management Spec

Torsten Lodderstedt torsten at lodderstedt.net
Sat Jul 28 21:42:21 UTC 2012


Hi Nat,

thanks for preparing this spec.

At IIW, we also talked about supporting logout propagation via HTTP 
redirects, mainly to support older browsers. What happend to this option?

best regards,
Torsten.

Am 28.06.2012 07:50, schrieb Nat Sakimura:
> Since I did not receive any additional comments,
> I have committed it to the working repository (bitbucket).
>
> HTML version is here: 
> http://openid.bitbucket.org/openid-connect-session-1_0.html
>
> With it, I would like to ask the working group to consider adding the 
> following two items int eh OP Configuration file.
>
> OP iframe URL
>     The URL from which OP iframe is being loaded. This URL provides a
>     page that accepts postMessage from the relevant RP iframe and
>     postMessage back the login status of the user at the OP.
> OP Logout endpoint URL
>     The URL that initiate the user logout at the OP.
>
>
> The name for the each variable could be something like:
>
> op_session_iframe_url
>
>    and
>
> op_logout_url
>
> Best,
> -- 
> Nat Sakimura (=nat)
> Chairman, OpenID Foundation
> http://nat.sakimura.org/
> @_nat_en
>
>
>
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-ab

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20120728/990c7712/attachment.html>


More information about the Openid-specs-ab mailing list