While using the id_token client response type, I planned to save the expires_in redirect uri parameter to reference how long I should cache my returned ID token. However I saw the token expired sooner than what was returned in the redirect param. I looked through the code for the authorize endpoint and saw the OIDC_TOKEN_EXPIRE setting is used for any flow, access token and ID token, rather than referencing OIDC_IDTOKEN_EXPIRE when that’s the returning token.
Is this expected? Maybe I’m missing something.
The JWT itself has the right details anyway, so in the meantime I’m planning to just stash that value while in my code’s validate JWT step
While using the
id_tokenclient response type, I planned to save theexpires_inredirect uri parameter to reference how long I should cache my returned ID token. However I saw the token expired sooner than what was returned in the redirect param. I looked through the code for the authorize endpoint and saw theOIDC_TOKEN_EXPIREsetting is used for any flow, access token and ID token, rather than referencingOIDC_IDTOKEN_EXPIREwhen that’s the returning token.Is this expected? Maybe I’m missing something.
The JWT itself has the right details anyway, so in the meantime I’m planning to just stash that value while in my code’s validate JWT step