<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
expires_in only specifies the lifetime of an association handle.
There's no parameter that indicates the lifetime of an authentication
response.<br>
<br>
Allen<br>
<br>
<br>
Martin Paljak wrote:
<blockquote
cite="mid:27557FB5-5BCF-4A83-8856-07F434C2F716@paljak.pri.ee"
type="cite">
<pre wrap="">On Feb 18, 2008, at 5:11 PM, McGovern, James F (HTSC, IT) wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Likewise, I would think that for automatic signon, it would be a good
thing if the OpenID provider could tell the relying party how long to
leave an otherwise idle session open before timing it out. Not sure if
this would require an extension or not.
</pre>
</blockquote>
<pre wrap=""><!---->
expires_in from <a class="moz-txt-link-freetext" href="http://openid.net/specs/openid-authentication-2_0.html#anchor20">http://openid.net/specs/openid-authentication-2_0.html#anchor20</a>
should do exactly this.
m.
</pre>
</blockquote>
<br>
</body>
</html>