openid / connect / issues

Title	T	P	Status	Assignee	Created	Updated
#237: Basic 3.3.1.1 TLS peer matches that of the Endpoint (Editorial)	proposal	major	resolved	Edmund Jay	2011-10-18	2011-10-25
#236: Basic - 2 End-User term missing (Editorial)	bug	major	resolved	Edmund Jay	2011-10-18	2011-10-25
#142: Basic - 7.5. Assertion Substitution	enhancement	minor	resolved	John Bradley	2011-09-29	2011-10-17
#140: Basic - 7.1. To mitigate this attack,... sentences is number-blocked.	bug	major	resolved	John Bradley	2011-09-29	2011-10-17
#132: Basic - 3.1. Scope difference between OAuth and Connect	proposal	minor	resolved	John Bradley	2011-09-29	2011-10-17
#93: Basic - Remove the all normative language	bug	major	resolved	John Bradley	2011-09-14	2011-10-17
#137: Basic - 3.2.4.1 "User Info" / access_token usage	enhancement	minor	resolved	John Bradley	2011-09-29	2011-10-13
#136: Basic - 3.2.3. What openid scope request.	enhancement	minor	resolved	John Bradley	2011-09-29	2011-10-13
#139: Basic - 4.1. Why schema can be ommited in spite of REQUIRED parameter?	bug	major	resolved	John Bradley	2011-09-29	2011-10-13
#141: Basic - 7.4 - nonce is now REQUIRED.	bug	major	resolved	John Bradley	2011-09-29	2011-10-13
#134: Basic - 3.2.1 "access token" -> "access_token" ?	proposal	minor	resolved	John Bradley	2011-09-29	2011-10-11
#61: Basic - 3.1 scopes not attached to tokens	bug	major	resolved	Edmund Jay	2011-09-09	2011-09-20
#65: Basic - 3.2.1 prompt values not explained	bug	major	resolved	Edmund Jay	2011-09-09	2011-09-20
#64: Basic - 3.2.1 display values not explained	bug	major	resolved	Edmund Jay	2011-09-09	2011-09-20
#68: Basic 3.2.3 - user's authorization decision cannot be forced	bug	major	resolved	Edmund Jay	2011-09-09	2011-09-20
#106: Basic - 3.2.1 Normative text for Authorization servers in client only spec	bug	major	resolved	Edmund Jay	2011-09-20	2011-09-20
#74: Basic - 3.2.4.1 state validation not specified	bug	major	resolved	Edmund Jay	2011-09-09	2011-09-20
#82: Basic - 3.3.4.2 iss parameter processing not specified	bug	major	resolved	Edmund Jay	2011-09-09	2011-09-20
#96: Basic - 3.3.4.1 Request Verification : Move to request section	bug	major	resolved	Edmund Jay	2011-09-15	2011-09-20
#87: Basic - 3.3. Check Session Endpoint MAY be called or MUST be called?	proposal	minor	resolved	Edmund Jay	2011-09-13	2011-09-20
#85: Basic - 6 unclear what attack vector is mentioned	bug	major	resolved	Edmund Jay	2011-09-09	2011-09-18
#84: Basic - 4 misplaced normative text for check session endpoint	bug	major	resolved	Edmund Jay	2011-09-09	2011-09-18
#83: Basic - 4 unclear wording for Userinfo endpoint - subject binding	bug	major	resolved	Edmund Jay	2011-09-09	2011-09-18
#81: Basic - 3.3.4.2 nonce verification not specified	bug	major	resolved	Edmund Jay	2011-09-09	2011-09-18
#80: Basic - 3.3.4.2 ID token clarification	bug	major	resolved	Edmund Jay	2011-09-09	2011-09-18

#237: Basic 3.3.1.1 TLS peer matches that of the Endpoint (Editorial)

proposal

major

resolved

Edmund Jay

2011-10-18

2011-10-25

#236: Basic - 2 End-User term missing (Editorial)

bug

major

resolved

Edmund Jay

2011-10-18

2011-10-25

#142: Basic - 7.5. Assertion Substitution

enhancement

minor

resolved

John Bradley

2011-09-29

2011-10-17

#140: Basic - 7.1. To mitigate this attack,... sentences is number-blocked.

bug

major

resolved

John Bradley

2011-09-29

2011-10-17

#132: Basic - 3.1. Scope difference between OAuth and Connect

proposal

minor

resolved

John Bradley

2011-09-29

2011-10-17

#93: Basic - Remove the all normative language

bug

major

resolved

John Bradley

2011-09-14

2011-10-17

#137: Basic - 3.2.4.1 "User Info" / access_token usage

enhancement

minor

resolved

John Bradley

2011-09-29

2011-10-13

#136: Basic - 3.2.3. What **openid** scope request.

enhancement

minor

resolved

John Bradley

2011-09-29

2011-10-13

#139: Basic - 4.1. Why schema can be ommited in spite of REQUIRED parameter?

bug

major

resolved

John Bradley

2011-09-29

2011-10-13

#141: Basic - 7.4 - nonce is now REQUIRED.

bug

major

resolved

John Bradley

2011-09-29

2011-10-13

#134: Basic - 3.2.1 "access token" -> "access_token" ?

proposal

minor

resolved

John Bradley

2011-09-29

2011-10-11

#61: Basic - 3.1 scopes not attached to tokens

bug

major

resolved

Edmund Jay

2011-09-09

2011-09-20

#65: Basic - 3.2.1 prompt values not explained

bug

major

resolved

Edmund Jay

2011-09-09

2011-09-20

#64: Basic - 3.2.1 display values not explained

bug

major

resolved

Edmund Jay

2011-09-09

2011-09-20

#68: Basic 3.2.3 - user's authorization decision cannot be forced

bug

major

resolved

Edmund Jay

2011-09-09

2011-09-20

#106: Basic - 3.2.1 Normative text for Authorization servers in client only spec

bug

major

resolved

Edmund Jay

2011-09-20

#74: Basic - 3.2.4.1 state validation not specified

bug

major

resolved

Edmund Jay

2011-09-09

2011-09-20

#82: Basic - 3.3.4.2 iss parameter processing not specified

bug

major

resolved

Edmund Jay

2011-09-09

2011-09-20

#96: Basic - 3.3.4.1 Request Verification : Move to request section

bug

major

resolved

Edmund Jay

2011-09-15

2011-09-20

#87: Basic - 3.3. Check Session Endpoint MAY be called or MUST be called?

proposal

minor

resolved

Edmund Jay

2011-09-13

2011-09-20

#85: Basic - 6 unclear what attack vector is mentioned

bug

major

resolved

Edmund Jay

2011-09-09

2011-09-18

#84: Basic - 4 misplaced normative text for check session endpoint

bug

major

resolved

Edmund Jay

2011-09-09

2011-09-18

#83: Basic - 4 unclear wording for Userinfo endpoint - subject binding

bug

major

resolved

Edmund Jay

2011-09-09

2011-09-18

#81: Basic - 3.3.4.2 nonce verification not specified

bug

major

resolved

Edmund Jay

2011-09-09

2011-09-18

#80: Basic - 3.3.4.2 ID token clarification

bug

major

resolved

Edmund Jay

2011-09-09

2011-09-18

Issues

Issues (76–100 of 125)