pomerium/pkg/grpc/session
Kenneth Jenkins 9fe646f25a
session: do not invalidate based on ID token (#5182)
Per the OIDC spec, section 2:

> NOTE: The ID Token expiration time is unrelated [to] the lifetime of
> the authenticated session between the RP and the OP.

A Pomerium session should remain valid for as long as the underlying
OAuth2 session.
2024-07-19 16:29:06 -07:00
..
session.go session: do not invalidate based on ID token (#5182) 2024-07-19 16:29:06 -07:00
session.pb.go core/grpc: fix deprecated protobuf package, remove tools (#4643) 2023-10-26 11:38:54 -06:00
session.proto authorize: track session and service account access date (#3220) 2022-03-31 09:19:04 -06:00
session_test.go session: do not invalidate based on ID token (#5182) 2024-07-19 16:29:06 -07:00