4 ms·
> /OIDC where there is no reliable backchannel for the identity provider to tell the service to expire sessions That's what the OAuth/OIDC refresh token is for
by tommiegannert 3y ago
> /OIDC where there is no reliable backchannel for the identity provider to tell the service to expire sessions
That's what the OAuth/OIDC refresh token is for: https://oauth.net/2/refresh-tokens/ https://oauth.net/2/refresh-tokens/