<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body>
<div style="font-family: Aptos, Aptos_MSFontService, -apple-system, Roboto, Arial, Helvetica, sans-serif; font-size: 12pt;" dir="auto">
Omit the claim.</div>
<div style="font-family: Aptos, Aptos_MSFontService, -apple-system, Roboto, Arial, Helvetica, sans-serif; font-size: 12pt;" dir="auto">
<br>
</div>
<div id="ms-outlook-mobile-body-separator-line" dir="auto"><br>
</div>
<div id="ms-outlook-mobile-signature" dir="auto" style="font-family: Aptos, Aptos_MSFontService, -apple-system, Roboto, Arial, Helvetica, sans-serif; font-size: 12pt;">
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Openid-specs-ab <openid-specs-ab-bounces@lists.openid.net> on behalf of Nick Watson via Openid-specs-ab <openid-specs-ab@lists.openid.net><br>
<b>Sent:</b> Wednesday, June 18, 2025 2:20:44 PM<br>
<b>To:</b> openid-specs-ab@lists.openid.net <openid-specs-ab@lists.openid.net><br>
<b>Cc:</b> Nick Watson <nwatson@google.com><br>
<b>Subject:</b> [Openid-specs-ab] Representation of infinite duration/timestamp</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div>Hi all,</div>
<div><br>
</div>
<div>Is there a recommended or canonical way to represent an infinite duration or timestamp? This has come up in a couple of contexts: (1) the session_lifetime claim in
<a href="https://openid.net/specs/ipsie-openid-connect-sl1-profile-1_0.html#section-3.3.1-5" originalsrc="https://openid.net/specs/ipsie-openid-connect-sl1-profile-1_0.html#section-3.3.1-5">
IPSIE OIDC SL1</a>, e.g. for low-risk applications that can afford infinite sessions for convenience, and (2) an upcoming refresh token expiration spec I'm drafting.</div>
<div><br>
</div>
<div>There are a couple of options I'm considering:</div>
<div><br>
</div>
<div>1. Omit the field. The primary drawback here is that you can't distinguish between "no expiration" and "service doesn't support the spec". This option could potentially be coupled with mandatory updates to authz server metadata so that it's unambiguous
whether the server supports the spec.</div>
<div><br>
</div>
<div>2. Use ISO 8601 values with an additional "infinite" keyword. This is explicit but somewhat heavyweight (compared to ints), and existing 8601 parsers would need to be extended/wrapped to handle "infinite".</div>
<div><br>
</div>
<div>3. Use -1. This keeps fields numeric, but it's ugly and likely still requires special handling by clients.</div>
<div><br>
</div>
<div>4. Set arbitrary large values (order of years) and assume that's good enough. This is how cookies work, so there's some parallel there. The downside being that it doesn't really communicate what it intends, and some clients may end up implementing logic
like "a value larger than X indicates infinite".</div>
<div><br>
</div>
<div>Curious to hear the group's thoughts.</div>
<div><br>
</div>
<div>Nick</div>
<div><br>
</div>
<span class="x_gmail_signature_prefix">-- </span><br>
<div dir="ltr" class="x_gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div style="line-height:1.5em; padding-top:10px; margin-top:10px; color:rgb(85,85,85); font-family:sans-serif; font-size:small">
<span style="border-top-width:2px; border-right-width:0px; border-bottom-width:0px; border-left-width:0px; border-top-style:solid; border-right-style:solid; border-bottom-style:solid; border-left-style:solid; border-top-color:rgb(213,15,37); border-right-color:rgb(213,15,37); border-bottom-color:rgb(213,15,37); border-left-color:rgb(213,15,37); padding-top:2px; margin-top:2px">Nick
Watson |</span><span style="border-top-width:2px; border-right-width:0px; border-bottom-width:0px; border-left-width:0px; border-top-style:solid; border-right-style:solid; border-bottom-style:solid; border-left-style:solid; border-top-color:rgb(51,105,232); border-right-color:rgb(51,105,232); border-bottom-color:rgb(51,105,232); border-left-color:rgb(51,105,232); padding-top:2px; margin-top:2px"> Software
Engineer |</span><span style="border-top-width:2px; border-right-width:0px; border-bottom-width:0px; border-left-width:0px; border-top-style:solid; border-right-style:solid; border-bottom-style:solid; border-left-style:solid; border-top-color:rgb(0,153,57); border-right-color:rgb(0,153,57); border-bottom-color:rgb(0,153,57); border-left-color:rgb(0,153,57); padding-top:2px; margin-top:2px"> <a href="mailto:nwatson@google.com" target="_blank">nwatson@google.com</a> |</span><span style="border-top-width:2px; border-right-width:0px; border-bottom-width:0px; border-left-width:0px; border-top-style:solid; border-right-style:solid; border-bottom-style:solid; border-left-style:solid; border-top-color:rgb(238,178,17); border-right-color:rgb(238,178,17); border-bottom-color:rgb(238,178,17); border-left-color:rgb(238,178,17); padding-top:2px; margin-top:2px"> (781)
608-3352</span></div>
</div>
</div>
</div>
</div>
</body>
</html>