Does the OpenID Connect Spec provide specifications for the design of the browser cookie?

Question

The OpenID provider checks if a user is already authentication session created within the authorization server via a browser cookie. Does the OpenID Connect spec contain design specifications / lock down the parameters for the implementation of the browser cookie?

Answer 1

不，这被认为是协议/交互规范的范围外-着重于同级之间的互操作性-并由授权服务器的实现者来决定。