1. connect2id Avatar connect2id
  2. OAuth
  3. OAuth 2.0 SDK with OpenID Connect extensions

Issues

Filter by:

Advanced search

Issues (1–25 of 526)

Title T P Status Votes Assignee Milestone Created Updated Actions
#457: Upgrade to OpenID Federation 1.0 + 1.1 final
task major open
#531: Support OP require_signed_request_object metadata
proposal major resolved
#530: Add RFC 9470 support to TokenSchemeError
proposal minor new
#529: AccessTokenParseUtils.parseValueFromAuthorizationHeader must trim whitespace around token value
bug major resolved
#528: Add non-negative checks when parsing Date from Unix timestamps
bug major resolved
#524: Consider allowing multiple client auth methods in token requests
proposal major resolved
#527: TokenIntrospectionRequest.parse must filter out client auth form parameters from the customParams
bug minor resolved
#521: AuthenticationRequest does not allow using an encrypted request object
bug minor open
#523: DPoP verification should throw a specific exception in case of missing/unmatched nonce
enhancement major resolved
#526: Support draft-ietf-oauth-identity-chaining
proposal major new
#525: Fix Issuer issues
bug major resolved
#522: DPoP verification should allow providing more than one accepted nonce
enhancement major resolved
#478: Location-header handling with JakartaServletUtils.applyHTTPResponse
bug major open
#496: Default value for DefaultResourceRetriever#sslSocketFactory is not set
bug minor open
#517: Add serialVersionUID for DeviceScopeValue class
proposal minor open
#519: DPoP verifiers ignore maxAge if singleUseChecker is null
bug major resolved
#520: Access token errors should embrace inherited customParams property
enhancement major open
#518: The ParseException message thrown Prompt.Type.parse must not include parsed input
bug major resolved
#516: Pass custom parameter(s) for device secret in OIDCTokens
proposal minor open
#515: ClientAuthenticationVerifier, JWTAssertionDetailsVerifier, DPoPProofClaimsSetVerifier, LogoutTokenValidator and SoftwareStatementProcessor must not include claim values in exception messages
bug minor resolved
#510: Missing from parameter grant_type in Weblogic
bug major open
#514: azp should not be required when validating token
bug major resolved
#509: Ignore nonce claim if server does not provide a nonce in DPoP verification
proposal major wontfix 1
#511: HTTPRequest.getQuery() should take into account the PUT method to return the body not only POST
bug minor resolved
#512: AuthorizationServerMetadata.parse(JSONObject) must set "signed_jwks_uri" and "jwks" independently from "client_registration_types_supported"
bug major resolved
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6
  8. …
  9. 21
  10. 22