nodeSolidServer / nodeSolidServer/node-solid-server
Implement OIDC token renewal
Open
@dmitrizagidulin is already working on this.
Since Apr 9, 2018.
authentication
security
- Dominant language
- JavaScript
- Stars
- 1.8k
- Forks
- 308
- PR merge metrics
- No merged PRs in 30d
Description
I believe the default access token for OIDC expires after 20 minutes.
While this helps in case it is leaked to another system in that period, it can be confusing for new users, developers and apps who are not prepared for short lived access.
I suggest during the developer / alpha phase, either non expiring or 2 week long access tokens as outlined in :
https://www.oauth.com/oauth2-servers/access-tokens/access-token-lifetime/
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.