<div dir="ltr"><div>Hello,</div><div><br></div><div>reviewing the changes i noticed in Section 2.4 of Backchannel draft 03 the 'exp' claim got removed from Logout Token claims, however section 4 still recomends OPs to use short expiration times for their Logout Tokens. It is not clear enough if 'exp' should be present or not.</div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature">Best Regards,<br><b>Filip Skokan</b></div></div>
<br><div class="gmail_quote">On Wed, Aug 24, 2016 at 3:44 AM, Mike Jones via Openid-specs-ab <span dir="ltr"><<a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div>
<p class="MsoNormal">Session ID definitions in the OpenID Connect front-channel and back-channel logout specs have been aligned so that the Session ID definition is now the same in both specs. The Session ID is scoped to the Issuer in both specs now (whereas
it was previously global in scope in the front-channel spec). This means that the issuer value now needs to be supplied whenever the Session ID is. This doesn’t change the simple (no-parameter) front-channel logout messages. The back-channel specification
is now also aligned with the ID Event Token specification.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">The new specification versions are:<u></u><u></u></p>
<p><u></u><span style="font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><a href="http://openid.net/specs/openid-connect-frontchannel-1_0-01.html" target="_blank">http://openid.net/specs/<wbr>openid-connect-frontchannel-1_<wbr>0-01.html</a><u></u><u></u></p>
<p><u></u><span style="font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><a href="http://openid.net/specs/openid-connect-backchannel-1_0-03.html" target="_blank">http://openid.net/specs/<wbr>openid-connect-backchannel-1_<wbr>0-03.html</a><span class="HOEnZb"><font color="#888888"><u></u><u></u></font></span></p><span class="HOEnZb"><font color="#888888">
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"> <wbr> -- Mike<u></u><u></u></p>
</font></span><p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">P.S. This notice was also posted at <a href="http://self-issued.info/?p=1599" target="_blank">
http://self-issued.info/?p=<wbr>1599</a> and as <a href="https://twitter.com/selfissued" target="_blank">
@selfissued</a>.<u></u><u></u></p>
</div>
</div>
<br>______________________________<wbr>_________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net">Openid-specs-ab@lists.openid.<wbr>net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab" rel="noreferrer" target="_blank">http://lists.openid.net/<wbr>mailman/listinfo/openid-specs-<wbr>ab</a><br>
<br></blockquote></div><br></div></div>