[OAUTH-WG] Token expiration

Eran Hammer-Lahav <eran@hueniverse.com> Mon, 21 September 2009 21:24 UTC

From: Eran Hammer-Lahav <eran@hueniverse.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Date: Mon, 21 Sep 2009 14:25:29 -0700
Thread-Topic: Token expiration
Thread-Index: Aco7Agrq7+KRP3QZSVi1Q6qx/yWvbg==
Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343784D584A3@P3PW5EX1MB01.EX1.SECURESERVER.NET>
Accept-Language: en-US
Content-Language: en-US
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: [OAUTH-WG] Token expiration
Precedence: list

Should the core spec support the ability to indicate the duration of token credentials? This would be an addition to the web delegation draft [1] in section 6 (Token Credentials) in the form of a new response parameter, something like:

oauth_token_duration
    The token duration specified in second from the time of the HTTP response timestamp.

This has been consistently at the top of missing core funcationality.


EHL

[1] http://tools.ietf.org/html/draft-ietf-oauth-web-delegation-01

[OAUTH-WG] Token expiration Eran Hammer-Lahav
Re: [OAUTH-WG] Token expiration Hubert Le Van Gong
Re: [OAUTH-WG] Token expiration Chris Messina
Re: [OAUTH-WG] Token expiration Hubert Le Van Gong
Re: [OAUTH-WG] Token expiration Jonathan Sergent
Re: [OAUTH-WG] Token expiration Marcel Molina
Re: [OAUTH-WG] Token expiration Hubert Le Van Gong
Re: [OAUTH-WG] Token expiration Eran Hammer-Lahav
Re: [OAUTH-WG] Token expiration Jonathan Sergent
Re: [OAUTH-WG] Token expiration Chris Messina