Correct, I guess their respective calculations would be both off by the same amount.
On Dec 14, 2010, at 4:34 PM, Marius Scurtescu wrote: > On Tue, Dec 14, 2010 at 2:54 PM, Paul Walker <pjwal...@gmail.com> wrote: >> It seems to me that expires_in suffers from the same machine time >> synchronization issue and additionally throws in an indeterminable time >> amount, while expires_at would only suffer from the former. > > I don't see how expires_in suffers from same problem, it does not > require any time synchronization. I does require a simple calculation, > current time + expires_in, and it can be a few seconds off (the time > since the token was issued until the client receives it and calculates > the absolute expiration time). > > Marius _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth
