FAPI2SP vs FAPI1 table has incorrect value for request_uri lifetime

Issue #545 resolved
Joseph Heenan created an issue

The table says “request_uri has lifetime under 300 seconds”. However the normative language limits the lifetime to 600 seconds:

shall issue pushed authorization requests request_uri with expires_in values of between 5 and 600 seconds.

The table should be corrected.

Comments (3)

  1. Log in to comment