The protocol is specified here: Internet Identity Spec
With the relevant section:
the
maxTimeToLive, if present, indicates the desired time span (in nanoseconds) until the requested delegation should expire. The Identity Identity frontend is free to set an earlier expiry time, but should not create a larger.