connect2id / OAuth 2.0 SDK with OpenID Connect extensions / issues

Title	T	P	Status	Votes	Assignee	Milestone	Created	Updated
#429: is there plan to move oauth2-oidc-sdk to Jakarta EE 10 platform	enhancement	critical	invalid				2023-07-06	2023-07-06
#397: Unable to send x509 certificates in servlet for OAuth 2.0 Mutual TLS Authentication	task	critical	resolved				2022-08-11	2023-06-05
#184: ServletUtils#createHTTPRequest loose parameters in case of POST request	bug	critical	resolved				2016-05-23	2023-02-07
#396: NPE in TokenExchangeGrant.equals	bug	critical	resolved				2022-08-09	2022-08-09
#385: eKYC / IdA - empty JSON objects must be accepted in verification element specs	bug	critical	resolved				2022-02-09	2022-02-10
#365: java.lang.ClassCastException	bug	critical	invalid	1			2021-06-06	2021-07-15
#259: java.lang.ClassCastException	bug	critical	invalid	1			2018-11-08	2021-06-06
#362: ClientSecretBasic.java class second time decoding problem	bug	critical	invalid				2021-05-17	2021-05-18
#357: Bump json-smart to 2.4.2 for 8.x	enhancement	critical	resolved	1			2021-04-07	2021-04-15
#356: SAML2AssertionValidator: Disable access to external entities in XML parsing	bug	critical	resolved				2021-04-06	2021-04-15
#353: Remove json-smart dependency that has reported severe CVE-2021-27568	enhancement	critical	duplicate	3			2021-03-25	2021-04-05
#309: Open SAML: org.cryptacular:cryptacular vulnerabilities	bug	critical	resolved				2020-08-07	2021-02-01
#325: Prohibit insecure redirect_uri and post_logout_redirect_uri URI schemes, such as data, javascript, etc from being registered	bug	critical	resolved				2020-11-13	2020-11-13
#294: Dependency resolution broken...	bug	critical	resolved				2020-04-15	2020-04-20
#268: get userinfo and http response return 404 and unrecognized route	bug	critical	invalid			C2ID server 2.0	2019-05-24	2019-05-27
#262: List<String> to String cast exception on URLUtils -> serializeParameters	bug	critical	invalid				2019-03-04	2019-04-17
#210: com.nimbusds.oauth2.sdk.auth.Secret inconsitent	bug	critical	invalid				2017-03-17	2017-03-28
#185: GrantType.AUTHORIZATION_CODE seems to wrongly assume that client id is mandatory	bug	critical	invalid				2016-05-24	2016-05-31
#165: Support PKCE	enhancement	critical	resolved				2016-01-27	2016-01-28
#164: Support public clients in token revocation requests	bug	critical	resolved				2016-01-26	2016-01-27
#149: Explicit SSL support for non-servlet requests	enhancement	critical	resolved		connect2id	C2ID server 1.0	2015-09-29	2015-10-12
#153: Set all response headers in HTTPRequest.send()	bug	critical	resolved				2015-10-06	2015-10-06
#145: AuthorizationSuccessResponse does not support query params in the redirect URI	bug	critical	duplicate				2015-08-31	2015-09-02
#120: BearerTokenError parsing fails	bug	critical	resolved				2015-02-18	2015-02-18
#86: GrantType Parse Exception	bug	critical	invalid		Vladimir Dzhuvinov		2014-05-22	2014-05-22

#429: is there plan to move oauth2-oidc-sdk to Jakarta EE 10 platform

enhancement

critical

invalid

2023-07-06

#397: Unable to send x509 certificates in servlet for OAuth 2.0 Mutual TLS Authentication

task

critical

resolved

2022-08-11

2023-06-05

#184: ServletUtils#createHTTPRequest loose parameters in case of POST request

bug

critical

resolved

2016-05-23

2023-02-07

#396: NPE in TokenExchangeGrant.equals

bug

critical

resolved

2022-08-09

#385: eKYC / IdA - empty JSON objects must be accepted in verification element specs

bug

critical

resolved

2022-02-09

2022-02-10

#365: java.lang.ClassCastException

bug

critical

invalid

1

2021-06-06

2021-07-15

#259: java.lang.ClassCastException

bug

critical

invalid

1

2018-11-08

2021-06-06

#362: ClientSecretBasic.java class second time decoding problem

bug

critical

invalid

2021-05-17

2021-05-18

#357: Bump json-smart to 2.4.2 for 8.x

enhancement

critical

resolved

1

2021-04-07

2021-04-15

#356: SAML2AssertionValidator: Disable access to external entities in XML parsing

bug

critical

resolved

2021-04-06

2021-04-15

#353: Remove json-smart dependency that has reported severe CVE-2021-27568

enhancement

critical

duplicate

3

2021-03-25

2021-04-05

#309: Open SAML: org.cryptacular:cryptacular vulnerabilities

bug

critical

resolved

2020-08-07

2021-02-01

#325: Prohibit insecure redirect_uri and post_logout_redirect_uri URI schemes, such as data, javascript, etc from being registered

bug

critical

resolved

2020-11-13

#294: Dependency resolution broken...

bug

critical

resolved

2020-04-15

2020-04-20

#268: get userinfo and http response return 404 and unrecognized route

bug

critical

invalid

C2ID server 2.0

2019-05-24

2019-05-27

#262: List<String> to String cast exception on URLUtils -> serializeParameters

bug

critical

invalid

2019-03-04

2019-04-17

#210: com.nimbusds.oauth2.sdk.auth.Secret inconsitent

bug

critical

invalid

2017-03-17

2017-03-28

#185: GrantType.AUTHORIZATION_CODE seems to wrongly assume that client id is mandatory

bug

critical

invalid

2016-05-24

2016-05-31

#165: Support PKCE

enhancement

critical

resolved

2016-01-27

2016-01-28

#164: Support public clients in token revocation requests

bug

critical

resolved

2016-01-26

2016-01-27

#149: Explicit SSL support for non-servlet requests

enhancement

critical

resolved

connect2id

C2ID server 1.0

2015-09-29

2015-10-12

#153: Set all response headers in HTTPRequest.send()

bug

critical

resolved

2015-10-06

#145: AuthorizationSuccessResponse does not support query params in the redirect URI

bug

critical

duplicate

2015-08-31

2015-09-02

#120: BearerTokenError parsing fails

bug

critical

resolved

2015-02-18

#86: GrantType Parse Exception

bug

critical

invalid

Vladimir Dzhuvinov

2014-05-22

Issues

Issues (1–25 of 25)