1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. connect

Issues

Filter by:

Advanced search

Issues (1–25 of 119)

Title T P Status Votes Assignee Milestone Version Created Updated Actions
#920: Attack identified against self-issued "sub" values
Core
bug critical resolved
#2115: POST to authorization endpoint
Core
bug major open
#1055: Limits on overall url length
Core
bug major open
#2098: query over userinfo_signing_alg_values_supported & aggregated claims
Core
bug major new
#2074: Parameter pollution with redirect_uri injection in Authorization step
Core
bug major open 1
#2045: Certification: Proposed change to how invalid redirect urls are tested
Core
bug major resolved
#2066: Additional Security Considerations for Custom URI Schemes on iOS
Core
bug major resolved
#2047: postal_code/etc in address claim should be stated to be strings
Core
bug major resolved
#2030: ISO29115 date wrong
Core
bug major resolved
#2029: Reference RFC 9101 "JWT-Secured Authorization Request (JAR)"
Core
bug major resolved
#2028: Reference to RFC 8176 "Authentication Method Reference Values" needed
Core
bug major resolved
#1811: `sid` is missing in core spec
Core
bug major resolved
#1112: Register openid to the well-known URI scheme IANA registry
Core
task major open
#1362: alignment of certification tests with OAuth 2.1
Core
bug major open
#1395: usage of id_token_hint in OIDC.Core
Core
enhancement major resolved
#1026: Self Issued provider returning tokens to an RP App in iOS
Core
bug major resolved
#1066: Core 5.6.2. Aggregated and Distributed Claims text lacks guidance on signature validation
Core
bug major resolved
#1117: Core 5.6.2 - not clear behavior for distributed claims source if not all claims present
Core
bug major resolved
#1114: Several doubts about value in individual claim requests (5.5.1)
Core
enhancement major resolved
#1169: s/URL/URI/g in Core: 6.2.1
Core
bug major resolved
#1115: how should the OP behave when a claim is requested but not understood
Core
bug major resolved
#1752: Core - 15.5.3 CSRF Attack on Fragment Response Example
Core
bug major open
#1048: Correct way to return errors (fragment vs query) in hybrid flow is unclear
Core
bug major resolved
#1415: re-using ID Token as a source of third party attested user-claims
Core
proposal major open
#1058: sector_identifier_uri should have a /.well-known/ path
Core
enhancement major open
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5