OIDC introspect IAT and EXP values as string instead of integer in SPS

Products

• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)
• SITEMINDER

Issue/Introduction

 

In OIDC introspect call gets IAT and EXP values as a string when it should be an integer type. As per RFC 7662, it should be an integer (1).

"exp": "1661269126",
"iat": "1661265226",

=====================

    {
        "active": true,
        "client_id": "xxxxxxxxxx",
        "token_type": "access_token",
        "scope": "openid",
        "sub": "uid=xxxxxxx",
        "exp": "1661269126",
        "iat": "1661265226",
        "iss": "https://_host._domain._com/xxxxxxxx"
    }

Resolution

 

Upgrade to CA Access Gateway (SPS) to 12.8SP8 when this one is available. Please reach out to Broadcom support for further assistance on this issue.

 

Additional Information

 

(1)

    OAuth 2.0 Token Introspection