FAPI2SP vs FAPI1 table has incorrect value for request_uri lifetime
Issue #545
resolved
The table says “request_uri has lifetime under 300 seconds
”. However the normative language limits the lifetime to 600 seconds:
shall issue pushed authorization requests
request_uri
withexpires_in
values of between 5 and 600 seconds.
The table should be corrected.
Comments (3)
-
reporter -
reporter - changed status to resolved
PR merged.
-
- changed component to FAPI2: Security Profile
- Log in to comment
PR here: https://bitbucket.org/openid/fapi/pull-requests/376