oauth2.dev

client_id_issued_at

IESG

Registry Context

An optional field in a successful dynamic client registration response that records when the client identifier was issued.

Technical Summary

RFC 7591 defines `client_id_issued_at` as an OPTIONAL member of the client information response. Its value represents the client identifier's issuance time as the number of seconds since 1970-01-01T00:00:00Z, measured in UTC.

When Used

Used in a successful dynamic client registration response when the authorization server includes the client identifier's issuance timestamp.

Normative Requirements

Authorization servers

MUST
1
  1. RFC 7591 - Section 3.2.1

    The authorization server MUST return `client_id_issued_at` when it is registered metadata about the client, including when provisioned by the authorization server..

    Condition: when returning a client information response

    the authorization server MUST return all registered metadata about this client, including any fields provisioned by the authorization server itself.

OPTIONAL
1
  1. RFC 7591 - Section 3.2.1

    The `client_id_issued_at` member is OPTIONAL in the client information response..

    Condition: when returning a client information response

    client_id_issued_at OPTIONAL.

Validation Guidance

info

Do not require every client information response to contain `client_id_issued_at`; the member is optional.

error

If `client_id_issued_at` is registered or server-provisioned metadata about the client, require it in the client information response.

warning

If present, verify that the value is a JSON number representing seconds since 1970-01-01T00:00:00Z, measured in UTC.

Reference

Details

Entry Id
client_id_issued_at
Client Metadata Name
client_id_issued_at
Client Metadata Description
Time at which the client identifier was issued
Change Controller
IESG
Reference
RFC7591