Skip to content

last_access claim #18 #21

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 6 additions & 2 deletions openid-provider-commands-1_0.md
Original file line number Diff line number Diff line change
Expand Up @@ -426,8 +426,9 @@ The RP MUST perform the [Unauthorize Functionality](#unauthorize-functionality)
## Audit Command
Identified by the `audit` value in the `command` Claim of a Command Token.

The RP MUST include the state of the Account and any Claims for an Account that the RP has retained that were provided by the OP. If the Account is not found, the RP returns `unknown` state.
The RP MUST include the state of the Account and any Claims for an Account that the RP has retained that were provided by the OP. If the Account is not found, the RP returns `unknown` state.

The RP MAY include a `last_access` claim, a NumericDate, representing the number of seconds from 1970-01-01T00:00:00Z UTC. The value MUST be an integer and is equivalent to the iat and exp claims as defined in [RFC7519](#RFC7519).

## Unauthorize Command

Expand Down Expand Up @@ -719,7 +720,8 @@ The following is a non-normative example of a Streaming Response for an Audit Te
"b0f4861d-f3d6-4f76-be2f-e467daddc6f6",
"88799417-c72f-48fc-9e63-f012d8822ad1"
],
"account_state": "active"
"account_state": "active",
"last_access": 1746792000,
}

id: 2
Expand Down Expand Up @@ -789,6 +791,8 @@ The RP sends a Streaming Response if it received a valid Suspend Tenant Command.

The RP MUST include any Claims for an Account that the RP has retained that were provided by the OP in the event `data` parameter JSON string. If the Claim values have been modified at the RP, the modified values should be returned.

The RP MAY include a `last_access` claim, a NumericDate, representing the number of seconds from 1970-01-01T00:00:00Z UTC. The value MUST be an integer and is equivalent to the iat and exp claims as defined in [RFC7519](#RFC7519).

## Suspend Tenant Command

Sent in a Streaming Request and identified by the `suspend_tenant` value in the `command` Claim in a Command Token.
Expand Down