[KongchangAI]
Unverified50% confidenceDecision RuleExact time

When an RP validates a logout token, it must check that iss matches, aud contains its own client ID, iat is within a reasonable window (±5 minutes is recommended), and extract sid or sub to locate the session.

1
Sources
50%
Confidence
Long-term
Relevance
9/11/2026
First Seen

Sources

Related Entities

Related Claims

Cite This Claim

Stable URI
https://kongchang.com/claim/899051
API
curl https://kongchang.com/api/v1/knowledge/claims/899051
MCP
get_claim(id=899051)