Skip to content

Commit a9452e6

Browse files
authored
Merge pull request #3 from andreassolberg/fix/trust-mark-delegation-exp-validation
Fix Trust Mark Delegation validation to handle optional exp claim
2 parents 7c6aa15 + 71a6ea7 commit a9452e6

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

openid-federation-1_1.xml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3571,7 +3571,8 @@
35713571
in the delegation.</t>
35723572
<t>The current time MUST be after the time represented by the iat (issued at) Claim in the delegation
35733573
(possibly allowing for some small leeway to account for clock skew).</t>
3574-
<t>The current time MUST be before the time represented by the exp (expiration) Claim in the delegation
3574+
<t>If the <spanx style="verb">exp</spanx> (expiration) Claim is present in the delegation,
3575+
the current time MUST be before the time it represents
35753576
(possibly allowing for some small leeway to account for clock skew).</t>
35763577
<t>
35773578
The value of the Claim <spanx style="verb">trust_mark_type</spanx> in the delegation MUST be the same

0 commit comments

Comments
 (0)