1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. connect

Issues

Filter by:

Advanced search

Issues (1–25 of 119)

Title T P Status Votes Assignee Milestone Version Created Updated Actions
#2115: POST to authorization endpoint
Core
bug major open
#2098: query over userinfo_signing_alg_values_supported & aggregated claims
Core
bug major new
#2074: Parameter pollution with redirect_uri injection in Authorization step
Core
bug major open 1
#2066: Additional Security Considerations for Custom URI Schemes on iOS
Core
bug major resolved
#2053: Signatures in JWT examples are not all correct
Core
bug minor closed
#2047: postal_code/etc in address claim should be stated to be strings
Core
bug major resolved
#2045: Certification: Proposed change to how invalid redirect urls are tested
Core
bug major resolved
#2032: Java Script Clients and CORS
Core
bug trivial resolved
#2030: ISO29115 date wrong
Core
bug major resolved
#2029: Reference RFC 9101 "JWT-Secured Authorization Request (JAR)"
Core
bug major resolved
#2028: Reference to RFC 8176 "Authentication Method Reference Values" needed
Core
bug major resolved
#1811: `sid` is missing in core spec
Core
bug major resolved
#1752: Core - 15.5.3 CSRF Attack on Fragment Response Example
Core
bug major open
#1742: Should not fail an Auth server when cannot meet the `acr_values`?
Core
task minor closed
#1640: Website - The 1.0 Connect Core specs 403
Core
bug major resolved
#1571: [CIBA] Include an optional "auth_req_hint" in the successful authentication request acknowledgement
Core
proposal major new
#1546: query over updating certification tests to allow unsigned id_tokens
Core
bug major closed
#1530: Core - c_hash and at_hash parameters
Core
proposal minor resolved
#1524: Is it OpenID Connect Core when Authorization Request is sent to the OP without using redirects via a user agent?
Core
proposal major open
#1471: certification team query: allowing key rotation during tests
Core
bug major new
#1415: re-using ID Token as a source of third party attested user-claims
Core
proposal major open
#1395: usage of id_token_hint in OIDC.Core
Core
enhancement major resolved
#1362: alignment of certification tests with OAuth 2.1
Core
bug major open
#1266: Remove misleading self-issued language that seems to imply that nonce is optional
Core
bug minor resolved
#1251: Reference JWS definition of base64url encoding
Core
bug trivial resolved 1
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5