-
assigned issue to
Messages 2.1.1.1.2, etc. - Possible changes to max_age
Issue #744
resolved
-
Should we move max_age up from being in the id_token member of the request object to being a top-level member of the request object?
-
Should we allow max_age to be specified a request parameter without using the request object?
-
Should requesting max_age have a side effect of requiring the auth_time claim?
Comments (2)
-
reporter -
reporter - changed status to resolved
Fixed
#744- Promoted "max_age" to being a top-level parameter→ <<cset 70e64294c06e>>
- Log in to comment
The working group decided to make these changes.