Refreshing ID Token
Open
Nobody has claimed this yet.
next
- Dominant language
- Bikeshed
- Stars
- 26
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
I'm creating this issue as follow up to the topic discussed today solid/authentication-panel#199
Looking at OIDC: 12. Using Refresh Tokens it looks that ID Token can also be refreshed by including openid scope in request.
Besides that, we also have the option of Silent Refresh using prompt=none.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the linked OpenID Connect section and the referenced solid/authentication-panel#199 discussion, then compare the proposed refresh-token and silent-refresh approaches. Done means the specification has a decided, documented position on how ID Tokens should be refreshed.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100