1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. connect

Issues

Filter by:

Advanced search

Issues (1–25 of 124)

Title T P Status Votes Assignee Milestone Version Created Updated Actions
#1471: certification team query: allowing key rotation during tests
Core
bug major open
#1524: Is it OpenID Connect Core when Authorization Request is sent to the OP without using redirects via a user agent?
Core
proposal major open
#1571: [CIBA] Include an optional "auth_req_hint" in the successful authentication request acknowledgement
Core
proposal major open
#1161: Key rotation should require a delay between publishing a key and starting to use it?
Core
bug minor open
#1415: re-using ID Token as a source of third party attested user-claims
Core
proposal major open
#2165: E.164 phone number example is not accurately representing E.164 format
Core
bug major open
#2162: recommendation to the use of explicit typing for ID Tokens
Core
bug minor open
#2115: POST to authorization endpoint
Core
bug major resolved
#1362: alignment of certification tests with OAuth 2.1
Core
bug major open
#2159: Consider recommendations from Cyber Safety Review Board report
Core
bug major open
#2157: OP RP-Initiated Logout and user's presence
Core
enhancement minor open
#2154: the iat claim and clock skew issues
Core
bug minor open
#2074: Parameter pollution with redirect_uri injection in Authorization step
Core
bug major resolved 1
#2098: query over userinfo_signing_alg_values_supported & aggregated claims
Core
bug major new
#2045: Certification: Proposed change to how invalid redirect urls are tested
Core
bug major resolved
#1811: `sid` is missing in core spec
Core
bug major resolved
#1742: Should not fail an Auth server when cannot meet the `acr_values`?
Core
task minor closed
#1752: Core - 15.5.3 CSRF Attack on Fragment Response Example
Core
bug major open
#1058: sector_identifier_uri should have a /.well-known/ path
Core
enhancement major open
#1640: Website - The 1.0 Connect Core specs 403
Core
bug major resolved
#1530: Core - c_hash and at_hash parameters
Core
proposal minor resolved
#1213: private_key_jwt, client_secret_jwt audience
Core
proposal major open 1
#1187: id_token_hint and non-repudiation
Core
bug major resolved
#1186: when to use invalid_request_object error
Core
bug minor resolved
#1214: Certification: remove requirement for RP to support unsigned jwt
Core
proposal major resolved 2
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5