# 7.1. Request

**URL:** <https://forum.italia.it/t/7-1-request/10926>\
**Category:** Linee Guida OpenID Connect in SPID\
**Created:** [27 Agosto 2019, 11:48am UTC](https://forum.italia.it/t/7-1-request/10926 "2019-08-27T11:48:59Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![docs-italia](https://forum.italia.it/user_avatar/forum.italia.it/docs-italia/32/709_2.png) [@docs-italia](https://forum.italia.it/u/docs-italia)\
**Post date:** [27 Agosto 2019, 11:48am UTC](https://forum.italia.it/t/7-1-request/10926/1 "2019-08-27T11:48:59Z")

</div>

**Esempio di richiesta con authorization code (caso 1)**

[Continua a leggere su Docs Italia.](https://docs.italia.it/AgID/documenti-in-consultazione/lg-openidconnect-spid-docs/it/bozza/token-endpoint-richiesta-token/request.html)

---

<div class="post-metadata">

**Author:** ![daserzw](https://forum.italia.it/user_avatar/forum.italia.it/daserzw/32/66_2.png) [@daserzw](https://forum.italia.it/u/daserzw)\
**Post date:** [26 Settembre 2019, 12:33pm UTC](https://forum.italia.it/t/7-1-request/10926/2 "2019-09-26T12:33:39Z")

</div>

Come mai nei valori ammessi `iat` ed `exp` sono limitati alle “modalità definite dall’Agenzia per l’Italia Digitale”? In cosa differiscono tali modalita’ dallo standard? E dove e quando saranno definite?

Davide Vaghetti (GARR)

---

<div class="post-metadata">

**Author:** ![peppelinux](https://forum.italia.it/user_avatar/forum.italia.it/peppelinux/32/2076_2.png) [@peppelinux](https://forum.italia.it/u/peppelinux)\
**Post date:** [6 Novembre 2019, 2:17pm UTC](https://forum.italia.it/t/7-1-request/10926/3 "2019-11-06T14:17:54Z")

</div>

code\_verifier:  
[https://tools.ietf.org/html/rfc7636#page-10](https://tools.ietf.org/html/rfc7636#page-10)

---

<div class="post-metadata">

**Author:** ![peppelinux](https://forum.italia.it/user_avatar/forum.italia.it/peppelinux/32/2076_2.png) [@peppelinux](https://forum.italia.it/u/peppelinux)\
**Post date:** [6 Novembre 2019, 2:24pm UTC](https://forum.italia.it/t/7-1-request/10926/4 "2019-11-06T14:24:41Z")

</div>

“client\_assert ion” e “client\_assert ion\_type” hanno uno spazio in “assertion” 🙂

su iat (issued at) ed exp (expiration time):  
[https://tools.ietf.org/html/rfc7519#section-4.1.4](https://tools.ietf.org/html/rfc7519#section-4.1.4)

il formato standard sarebbe un NumericDate, ovvero consentire tutti i formati definiti in:  
[https://tools.ietf.org/html/rfc3339](https://tools.ietf.org/html/rfc3339)