A scenario that has popped up a few times is that an admin wants to register clients, but has no way to determine if their requests for various lifetimes make sense. The well -known page does not have these. I propose allowing a query to GET that will return server defaults, so
A scenario that has popped up a few times is that an admin wants to register clients, but has no way to determine if their requests for various lifetimes make sense. The well -known page does not have these. I propose allowing a query to GET that will return server defaults, so
https://.../oidc-cm?query=org.oa4mp:/server/defaults
returns something like
(all in seconds) allowing admins to make sane requests.