From 9b6dfd4e1de01fb2399d968810e61d623801c998 Mon Sep 17 00:00:00 2001
From: Justin Richer <jricher@mitre.org>
Date: Tue, 5 Mar 2013 15:01:25 -0500
Subject: [PATCH] require auth time, reuse refresh token, and default max age

---
 .../src/main/webapp/resources/js/client.js      |  4 ++--
 .../main/webapp/resources/template/client.html  | 17 +++++++++++++++++
 2 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/openid-connect-server/src/main/webapp/resources/js/client.js b/openid-connect-server/src/main/webapp/resources/js/client.js
index fe335ec81..c78aef5f4 100644
--- a/openid-connect-server/src/main/webapp/resources/js/client.js
+++ b/openid-connect-server/src/main/webapp/resources/js/client.js
@@ -397,6 +397,8 @@ var ClientFormView = Backbone.View.extend({
             initiateLoginUri: $('#initiateLoginUri input').val(),
             postLogoutRedirectUri: $('#postLogoutRedirectUri input').val(),
             reuseRefreshToken: $('#reuseRefreshToken').is(':checked') // TODO: another funny checkbox
+            requireAuthTime: $('#requireAuthTime input').is(':checked'),
+            defaultMaxAge: $('#defaultMaxAge input').val(), // TODO: validate integer
             
             
             
@@ -409,8 +411,6 @@ var ClientFormView = Backbone.View.extend({
             idTokenSignedResponseAlg: idTokenSignedResponseAlg,         // "
             idTokenEncryptedResponseAlg: idTokenEncryptedResponseAlg,   // "
             idTokenEncryptedResponseEnc: idTokenEncryptedResponseEnc,   // "
-            defaultMaxAge: $('#defaultMaxAge input').val(), // TODO: validate integer
-            requireAuthTime: $('#requireAuthTime input').is(':checked'),
             defaultAcrValues: this.defaultAcrValuesCollection.pluck('item'),
             requestUris: this.requestUrisCollection.pluck('item'),
             resourceIds: this.resourceIdsCollection.pluck('item'),
diff --git a/openid-connect-server/src/main/webapp/resources/template/client.html b/openid-connect-server/src/main/webapp/resources/template/client.html
index 4a3d32768..53263d086 100644
--- a/openid-connect-server/src/main/webapp/resources/template/client.html
+++ b/openid-connect-server/src/main/webapp/resources/template/client.html
@@ -363,6 +363,7 @@
                 <div class="controls">
                     <label class="checkbox">
                         <input type="checkbox" id="allowRefresh" <%=(allowRefresh == true ? 'checked' : '')%>> Refresh tokens are issued for this client
+                        <input type="checkbox" id="reuseRefreshToken" <%=(reuseRefreshToken == true ? 'checked' : '')%>> Refresh tokens for this client are re-used
                     </label>
                 </div>
             </div>
@@ -413,6 +414,22 @@
 			</div>
 
 
+            <div class="control-group" id="requireAuthTime">
+                <label class="control-label">Require Auth Time</label>
+                <div class="controls">
+                    <label class="checkbox">
+                        <input type="checkbox" <%=(requireAuthTime == true ? 'checked' : '')%>> Always require that the auth_time claim be sent in the id token
+                    </label>
+                </div>
+            </div>
+
+			<div class="control-group" id="defaultMaxAge">
+				<label class="control-label">Default Max Age</label>
+				<div class="controls">
+					<input placeholder="" value="<%=defaultMaxAge%>" maxlength="1000" type="text" class=""/>
+					<p class="help-block">Default maximum session age before re-prompting</p>
+				</div>
+			</div>
 	</div>