Preflight Checklist
Problem Description
I'm interested in building a RADIUS connector for Dex and one thing that RADIUS supports is sending clients a Session-Timeout attribute, which indicates how long the authentication session should be valid for. In Dex, the expiration for tokens is dictated by the configuration, and connectors cannot influence expiration based on the currently defined interfaces.
Proposed Solution
Two ideas:
- Add an optional
Expiration or MaxAge to the connector.Identity field that, if set, Dex uses to set the expiration for tokens issued using this connector.
- Add a new optional interface for connectors that can given a
connector.Identity returns how long a session is valid for. Connectors could encode the expiration into the ConnectorData field, and the method could extract expiration from the ConnectorData to return the Expiration/MaxAge of the session.
Alternatives Considered
No response
Additional Information
No response
Preflight Checklist
Problem Description
I'm interested in building a RADIUS connector for Dex and one thing that RADIUS supports is sending clients a
Session-Timeoutattribute, which indicates how long the authentication session should be valid for. In Dex, the expiration for tokens is dictated by the configuration, and connectors cannot influence expiration based on the currently defined interfaces.Proposed Solution
Two ideas:
ExpirationorMaxAgeto theconnector.Identityfield that, if set, Dex uses to set the expiration for tokens issued using this connector.connector.Identityreturns how long a session is valid for. Connectors could encode the expiration into theConnectorDatafield, and the method could extract expiration from theConnectorDatato return theExpiration/MaxAgeof the session.Alternatives Considered
No response
Additional Information
No response