1.   Roll Call (Anoop)

• Attending: Nat, Ed, Mark, Dima and anoop
• Regrets:

Agenda/notes:

• Security Analysis update - Follow up
• • https://bitbucket.org/openid/fapi/issues/523/rotation-of-refresh-token-compromised
• • Issues 525 & 526 is Work in Progress and Plan is to review & close next Atlantic call.
• • 523
• • • Decided to not use refresh token rotation in AU CDR.
• • • We still need a follow with DSB - Report to get their feedback.
• • • Question for the team : Is refresh token time matters? Instead of 12 month to 5 yrs.
• • • Nat : Timing may not matter.
• • • Overlapping refresh token
• • • The refresh token includes a configurable grace period: "leeway": 30
• • AU (CDR)
• • Independent review fro AU CDR

https://github.com/ConsumerDataStandardsAustralia/standards/issues/258 [ Open for Feedback ]

2.   Next Call

Next call will be an Pacific Call. Next Pacific call will be in two weeks (08-11-2022 @ 5pm PST) UTC - 08-12-2022 1:00 AM.