Aleksei Lissitsin

This is a very useful feature that comes up sooner or later in almost every real-life application using OIDC. Apps very often need service accounts. Many OIDC providers currently allow...

@aeneasr It looks like the (first-step) solution proposed by you in #1748 is exactly the original intention of the current ticket: Allow to define claims for a client to be...

Not exactly. I want the session to die after a period of inactivity of, say, 4-6 hours. But not to die when the user is active. If I could reset...

I think, a more-or-less standard name for such a behavior is session `timeout` (e.g., server.servlet.session.timeout in spring boot). This could, in theory, be different from the total max-age of the...