Skip to content

Conversation

@guabu
Copy link
Contributor

@guabu guabu commented Sep 5, 2025

Changes

Correct the parameter used in backchannel authentication to be requested_expiry instead of the previously incorrect request_expiry.

To maintain backwards compatibility, the parameter has been marked as deprecated and it used as an alias for requested_expiry while retaining it when being passed to the /bc-authorize endpoint.

References

This was previously based on the following incorrect version in the docs:

sh

https://auth0.com/docs/get-started/authentication-and-authorization-flow/client-initiated-backchannel-authentication-flow/user-authorization-with-ciba#step-1-client-application-initiates-a-ciba-request

Testing

  • This change adds unit test coverage
  • This change adds integration test coverage

Checklist

@guabu guabu requested a review from a team as a code owner September 5, 2025 11:46
tanya732
tanya732 previously approved these changes Sep 5, 2025
@frederikprijck frederikprijck merged commit 55825c5 into auth0:master Sep 8, 2025
11 of 12 checks passed
@guabu guabu deleted the requested_expiry branch September 8, 2025 12:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants