pape.auth_time versus pape.auth_age
Eddy Nigg (StartCom Ltd.)
eddy_nigg at startcom.org
Sat Feb 2 16:46:11 UTC 2008
The PHP library (and examples) from openidenabled.com currently return
in the Auth_OpenID_PAPE_Response function pape.max_auth_age. Reading the
specs from
http://openid.net/specs/openid-provider-authentication-policy-extension-1_0-02.html#anchor10
this should be however pape.auth_time. The sample consumer seems to be
happy with that, but I think this to be a mistake...
Can somebody confirm that sending pape.max_auth_age is wrong and it
should be pape.auth_time instead?
--
Regards
Signer: Eddy Nigg, StartCom Ltd. <http://www.startcom.org>
Jabber: startcom at startcom.org <xmpp:startcom at startcom.org>
Blog: Join the Revolution! <http://blog.startcom.org>
Phone: +1.213.341.0390
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs/attachments/20080202/82b667af/attachment-0002.htm>
More information about the specs
mailing list