Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The Hypothetical Security Event Token of Login #138

Open
andrei-galkin opened this issue Jan 16, 2024 · 1 comment
Open

The Hypothetical Security Event Token of Login #138

andrei-galkin opened this issue Jan 16, 2024 · 1 comment
Labels
enhancement New feature or request spec:CAEP

Comments

@andrei-galkin
Copy link

Hi guys,
I have checked the RFC and was not able to find any example of login.

Could you help to build any? It would be helpful if you add it into the RFC, I think.

Hypothetical Security Event Token of Login.

 {
     "iss": "https://server.example.com",
     "sub": "248289761001",
     "aud": "s6BhdRkqt3",
     "iat": 1471566154,
     "jti": "bWJq",
     "sid": "08a5019c-17e1-4977-8f42-65a12843ea02",
     "events": {
       "http://schemas.openid.net/event/backchannel-logout": {
       “user” : {
          “name”: “[email protected]”
        }
       }
     }
   }
@timcappalli
Copy link
Member

timcappalli commented Jan 19, 2024

@andrei-galkin which RFC are you referring to? SSF and SSF events are defined in OpenID specifications which are profiles of various IETF RFCs.

If you're looking for a way to signal a logout event, the CAEP Session Revoked event may work for the use case: https://openid.net/specs/openid-caep-specification-1_0.html#rfc.section.3.1

@tulshi tulshi added enhancement New feature or request spec:CAEP labels Apr 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request spec:CAEP
Projects
None yet
Development

No branches or pull requests

3 participants