On Tue, Dec 14, 2010 at 2:54 PM, Paul Walker <pjwal...@gmail.com> wrote: > It seems to me that expires_in suffers from the same machine time > synchronization issue and additionally throws in an indeterminable time > amount, while expires_at would only suffer from the former.
I don't see how expires_in suffers from same problem, it does not require any time synchronization. I does require a simple calculation, current time + expires_in, and it can be a few seconds off (the time since the token was issued until the client receives it and calculates the absolute expiration time). Marius _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth
