ramosbugs / openidconnect-rs

OpenID Connect Library for Rust
MIT License
404 stars 100 forks source link

Allow updated_at to be an epoch string #165

Open multun opened 5 months ago

multun commented 5 months ago

Allow unix timestamps within a string for updated_at, as follows: "updated_at": "1713964430.299453"

This is not allowed by the specification, but was observed in the wild on at least one OpenAM instance. This misbehavior is probably caused by a plugin or unusual config, as other OpenAM instances work just fine.

Instance owners were notified, and aren't willing to do anything about it.

This parsing leniancy feature is gated behind "accept-string-epoch".