Basic, Messages, Standard - Relying on prompt:none side effect bad design

[Michael Jones]

Depending on side effects is just bad design. What you really want to do is know if a particular session is still active. In that case there should be a specific request “Is this session still active?”

[Nat Sakimura]

This has been proposed to OAuth and we are following that practice.

[Michael Jones]

We can now explicitly check whether a session is still alive by sending the id_token in the prompt:none request.