<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<font face="Helvetica, Arial, sans-serif">It should also be possible
to obtain the token expiry time by sending the refresh_token to
the /introspection endpoint.</font><br>
<br>
<div class="moz-cite-prefix">On 8/27/19 8:37 AM, Joseph Heenan via
Openid-specs-ab wrote:<br>
</div>
<blockquote type="cite"
cite="mid:7A9C7178-03F2-44A2-AF2E-69619D321755@authlete.com">
<pre class="moz-quote-pre" wrap="">Hi Mischa
There are [at least] 3 different solutions in the wild, all mentioned in <a class="moz-txt-link-freetext" href="https://bitbucket.org/openid/fapi/issues/251/refresh-token-expiry-time">https://bitbucket.org/openid/fapi/issues/251/refresh-token-expiry-time</a>
Joseph
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">On 27 Aug 2019, at 13:22, Mischa Salle via Openid-specs-ab <a class="moz-txt-link-rfc2396E" href="mailto:openid-specs-ab@lists.openid.net"><openid-specs-ab@lists.openid.net></a> wrote:
Hi all,
I was wondering if there is any standard (RFC or OpenID) for conveying
the lifetime or expiry time of a refresh token?
The access token response returns an expires_in for the
access token, following <a class="moz-txt-link-freetext" href="https://tools.ietf.org/html/rfc6749#section-4.2.2">https://tools.ietf.org/html/rfc6749#section-4.2.2</a>
but there seems to be no standard for returning an expiry time or
lifetime for the refresh token.
It would certainly be useful information for a client.
In case there is no standard yet, what would be the right thing to do?
I would suggest adding another access token response parameter, such as
rt_expires_in. Alternatively, it could be the expiry time, e.g.
refresh_token_exp or something like that.
Are there already parties doing something like this?
Mischa
--
Nikhef Room H155
Science Park 105 Tel. +31-20-592 5102
1098 XG Amsterdam Fax +31-20-592 5155
The Netherlands Email <a class="moz-txt-link-abbreviated" href="mailto:msalle@nikhef.nl">msalle@nikhef.nl</a>
__ .. ... _._. .... ._ ... ._ ._.. ._.. .._..
_______________________________________________
Openid-specs-ab mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Openid-specs-ab@lists.openid.net">Openid-specs-ab@lists.openid.net</a>
<a class="moz-txt-link-freetext" href="http://lists.openid.net/mailman/listinfo/openid-specs-ab">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a>
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
_______________________________________________
Openid-specs-ab mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Openid-specs-ab@lists.openid.net">Openid-specs-ab@lists.openid.net</a>
<a class="moz-txt-link-freetext" href="http://lists.openid.net/mailman/listinfo/openid-specs-ab">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a>
</pre>
</blockquote>
<br>
</body>
</html>