<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">As the id_token is not an access token, I don't think it directly applies. <div><br></div><div>I guess that it might be able to be reused for direct logout messages.</div><div><br></div><div>We may want to incorporate it for the user-info access tokens.</div><div><br></div><div>John<br><div><div>On 2011-09-19, at 6:49 PM, Nat Sakimura wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">Breno?<br><br><div class="gmail_quote">On Mon, Sep 19, 2011 at 4:55 PM, Roland Hedberg <span dir="ltr"><<a href="mailto:roland.hedberg@adm.umu.se">roland.hedberg@adm.umu.se</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hi!<br>
<br>
Would be interesting to know how the OAuth2 token revocation draft fits into the OpenID Connect session management.<br>
<br>
<a href="http://tools.ietf.org/html/draft-lodderstedt-oauth-revocation-03" target="_blank">http://tools.ietf.org/html/draft-lodderstedt-oauth-revocation-03</a><br>
<br>
-- Roland<br>
_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net">Openid-specs-ab@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br>Nat Sakimura (=nat)<div>Chairman, OpenID Foundation<br><a href="http://nat.sakimura.org/" target="_blank">http://nat.sakimura.org/</a><br>@_nat_en</div><br>
_______________________________________________<br>Openid-specs-ab mailing list<br><a href="mailto:Openid-specs-ab@lists.openid.net">Openid-specs-ab@lists.openid.net</a><br>http://lists.openid.net/mailman/listinfo/openid-specs-ab<br></blockquote></div><br></div></body></html>