Jon

OIDC Token Revocation and Expiration

12

With an OIDC authentication configuration, Outline is currently setting its own access token cookie with an arbitrary expiration period of 3 months. https://github.com/outline/outline/blob/37e68413f0b59b7fdd21ee18db1373f8aac5685c/server/routes/auth/index.ts#L34-L37 Best security practices recommend using the OIDC...