1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. connect

Issues

Filter by:

Advanced search

Issues (1–25 of 37)

Title T P Status Votes Assignee Milestone Version Created Updated Actions
#2074: Parameter pollution with redirect_uri injection in Authorization step
Core
bug major open 1
#2115: POST to authorization endpoint
Core
bug major open
#2098: query over userinfo_signing_alg_values_supported & aggregated claims
Core
bug major new
#2045: Certification: Proposed change to how invalid redirect urls are tested
Core
bug major resolved
#1811: `sid` is missing in core spec
Core
bug major resolved
#1742: Should not fail an Auth server when cannot meet the `acr_values`?
Core
task minor closed
#1362: alignment of certification tests with OAuth 2.1
Core
bug major open
#1752: Core - 15.5.3 CSRF Attack on Fragment Response Example
Core
bug major open
#1415: re-using ID Token as a source of third party attested user-claims
Core
proposal major open
#1640: Website - The 1.0 Connect Core specs 403
Core
bug major resolved
#1530: Core - c_hash and at_hash parameters
Core
proposal minor resolved
#1524: Is it OpenID Connect Core when Authorization Request is sent to the OP without using redirects via a user agent?
Core
proposal major open
#1471: certification team query: allowing key rotation during tests
Core
bug major new
#1187: id_token_hint and non-repudiation
Core
bug major resolved
#1186: when to use invalid_request_object error
Core
bug minor resolved
#1214: Certification: remove requirement for RP to support unsigned jwt
Core
proposal major resolved 2
#1029: authentication_failed error response
Core
bug major resolved
#1172: Multi-usage type key ok?
Core
enhancement major resolved
#1170: typ in the Request Object?
Core
bug major wontfix
#1167: Required certification behaviour for request and request_uri parameters
Core
bug major resolved
#1161: Key rotation should require a delay between publishing a key and starting to use it?
Core
bug minor open
#1057: OIDCC appears to override single-use nature of auth code in RFC6749
Core
bug major wontfix
#1109: Use empty object instead of null in the claim request
Core
proposal major wontfix
#1147: certification: RFC6749 MUST for error_description
Core
bug minor resolved
#1153: redirect_uri definition contradiction in docs
Core
bug major resolved
  2. 1
  3. 2