openid / connect / issues

Title	T	P	Status	Assignee	Milestone	Created	Updated
#841: Standard - 2.2.6.1 Add ID Token Validation text Standard	enhancement	major	resolved	Nat Sakimura	Implementer's Draft	2013-05-31	2013-06-06
#848: Messages - 2.1.2.1 'acr' value 'MAY' seems wrong Messages	bug	major	resolved	Michael Jones	Implementer's Draft	2013-06-02	2013-06-04
#842: Session 5.1 - Make post_logout_redirect_uri treatment more parallel to redirect_uri Session	bug	major	resolved	Michael Jones	Implementer's Draft	2013-05-31	2013-06-02
#840: Messages - 9.10 Also mention about cut&paste attack Messages	enhancement	major	resolved	Michael Jones	Implementer's Draft	2013-05-31	2013-06-02
#847: UserInfo "updated_at" claim: string or number? Messages	bug	major	resolved			2013-06-02	2013-06-02
#843: All: Check 'must', 'should', 'may' and replace with MUST etc., or other words	bug	major	resolved		Implementer's Draft	2013-06-02	2013-06-02
#839: Standard - Add x-frame-options to security consideration Standard	bug	major	resolved			2013-05-31	2013-06-01
#837: Session - 5. Add id_token to the RP initiated logout request Session	bug	major	resolved	Michael Jones	Implementer's Draft	2013-05-28	2013-05-30
#735: 2.2.1. Client Register Operation Response: default expires_at value? Registration	bug	major	resolved	Michael Jones	Implementer's Draft	2013-01-29	2013-05-24
#830: what is azp really? Messages	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-28	2013-05-04
#831: Messages - Don't use x5u or jku header fields in ID Tokens Messages	bug	major	resolved	Michael Jones	Implementer's Draft	2013-04-04	2013-05-04
#829: Messages 2.4 - Clarify that additional scope values may be used Messages	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-28	2013-05-04
#822: says response_type parameter value MUST include token and id_token when just id_token would be fine Messages	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-28	2013-05-03
#820: Messages/Registration preclude a client who wants encrypted content but doesn't sign? Messages	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-28	2013-05-03
#832: Standard 4.1 - Add claim filter to user info request Standard	enhancement	major	wontfix	Michael Jones		2013-04-25	2013-05-02
#813: Write JOSE security considerations on using RSA PKCS #1 1.5	bug	major	resolved	John Bradley	Implementer's Draft	2013-03-18	2013-04-28
#816: All - Relax "must understand" language in manner parallel to JOSE changes All	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-20	2013-03-25
#815: Registration - Add registration_locale metadata parameter Registration	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-19	2013-03-25
#814: Messages 2.5: State explicitly which standard UserInfo claims can have language tags Messages	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-19	2013-03-25
#802: Messages 2.5.2 - Clarify responsibilities when claims employ languages and scripts Messages	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-07	2013-03-25
#812: All clarify that language tag values used need not be unnecessarily specific All	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-18	2013-03-22
#811: All - Character case usage in language tag values All	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-15	2013-03-22
#805: Messages - "sub" can be returned in Distributed UserInfo ? Messages	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-08	2013-03-20
#794: Messages 2.5 - Require "picture" to refer to an image file Messages	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-07	2013-03-20
#804: Registration - 2 Remove access_token from client metadata Registration	bug	major	resolved	Michael Jones	Implementer's Draft	2013-03-07	2013-03-20

#841: Standard - 2.2.6.1 Add ID Token Validation text

Standard

enhancement

major

resolved

Nat Sakimura

Implementer's Draft

2013-05-31

2013-06-06

#848: Messages - 2.1.2.1 'acr' value 'MAY' seems wrong

Messages

bug

major

resolved

Michael Jones

Implementer's Draft

2013-06-02

2013-06-04

#842: Session 5.1 - Make post_logout_redirect_uri treatment more parallel to redirect_uri

Session

bug

major

resolved

Michael Jones

Implementer's Draft

2013-05-31

2013-06-02

#840: Messages - 9.10 Also mention about cut&paste attack

Messages

enhancement

major

resolved

Michael Jones

Implementer's Draft

2013-05-31

2013-06-02

#847: UserInfo "updated_at" claim: string or number?

Messages

bug

major

resolved

2013-06-02

#843: All: Check 'must', 'should', 'may' and replace with MUST etc., or other words

bug

major

resolved

Implementer's Draft

2013-06-02

#839: Standard - Add x-frame-options to security consideration

Standard

bug

major

resolved

2013-05-31

2013-06-01

#837: Session - 5. Add id_token to the RP initiated logout request

Session

bug

major

resolved

Michael Jones

Implementer's Draft

2013-05-28

2013-05-30

#735: 2.2.1. Client Register Operation Response: default expires_at value?

Registration

bug

major

resolved

Michael Jones

Implementer's Draft

2013-01-29

2013-05-24

#830: what is azp really?

Messages

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-28

2013-05-04

#831: Messages - Don't use x5u or jku header fields in ID Tokens

Messages

bug

major

resolved

Michael Jones

Implementer's Draft

2013-04-04

2013-05-04

#829: Messages 2.4 - Clarify that additional scope values may be used

Messages

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-28

2013-05-04

#822: says response_type parameter value MUST include token and id_token when just id_token would be fine

Messages

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-28

2013-05-03

#820: Messages/Registration preclude a client who wants encrypted content but doesn't sign?

Messages

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-28

2013-05-03

#832: Standard 4.1 - Add claim filter to user info request

Standard

enhancement

major

wontfix

Michael Jones

2013-04-25

2013-05-02

#813: Write JOSE security considerations on using RSA PKCS #1 1.5

bug

major

resolved

John Bradley

Implementer's Draft

2013-03-18

2013-04-28

#816: All - Relax "must understand" language in manner parallel to JOSE changes

All

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-20

2013-03-25

#815: Registration - Add registration_locale metadata parameter

Registration

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-19

2013-03-25

#814: Messages 2.5: State explicitly which standard UserInfo claims can have language tags

Messages

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-19

2013-03-25

#802: Messages 2.5.2 - Clarify responsibilities when claims employ languages and scripts

Messages

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-07

2013-03-25

#812: All clarify that language tag values used need not be unnecessarily specific

All

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-18

2013-03-22

#811: All - Character case usage in language tag values

All

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-15

2013-03-22

#805: Messages - "sub" can be returned in Distributed UserInfo ?

Messages

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-08

2013-03-20

#794: Messages 2.5 - Require "picture" to refer to an image file

Messages

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-07

2013-03-20

#804: Registration - 2 Remove access_token from client metadata

Registration

bug

major

resolved

Michael Jones

Implementer's Draft

2013-03-07

2013-03-20

Issues

Issues (951–975 of 1,540)