openid / connect / issues

Title	T	P	Status	Assignee	Milestone	Created	Updated
#1276: Section 2.2. - Missing parameter to determine the credential type. Claims Aggregation	bug	blocker	open	Tobias Looker		2021-08-12	2022-03-07
#1193: prompt=create is still just a hint	bug	blocker	open	gffletch		2020-09-29	2021-01-14
#946: All - ipr="trust200902" ot ipr="none " and put IPR Note in the XML All	bug	blocker	resolved		Errata	2014-08-16	2014-08-20
#945: Migration spec currently requires a non-standard version of xml2rfc Migration	bug	blocker	invalid	Nat Sakimura	Implementer's Draft	2014-08-11	2014-08-16
#537: Process - Voting tool error prevents the start of voting	bug	blocker	resolved	Nat Sakimura		2012-02-07	2012-02-10
#471: Messages - 4.4 Undefined parameter encryption_url is used	bug	blocker	resolved	Nat Sakimura		2011-12-21	2011-12-21
#2128: [Federation] The federation_trust_mark_endpoint requires a "sub" request parameter Federation	bug	critical	resolved			2024-03-06	2024-03-15
#2100: Federation Historical Keys Federation	bug	critical	resolved			2023-12-03	2024-01-26
#1777: VC Issuance is vulnerable to Unknown Key Share attacks Credential Issuance	bug	critical	resolved			2023-01-10	2023-09-01
#1635: `credential_endpoint ` & `credential_issuer` should be removed from the service metadata	bug	critical	closed			2022-09-12	2022-09-15
#1194: Federation: Trust chain resolution: Require the signing JWK to be present in the superior statement's JWK set about the entity Federation	bug	critical	closed			2020-09-30	2021-04-03
#1164: insecure front-channel use of private_key_jwt client authentication Federation	bug	critical	closed	Roland Hedberg		2020-04-17	2021-04-02
#1040: Security Issue - Attacker may reuse MS to register new clients Federation	bug	critical	resolved	Roland Hedberg		2018-08-07	2020-10-01
#920: Attack identified against self-issued "sub" values Core	bug	critical	resolved	Michael Jones	Errata	2014-03-03	2014-08-01
#595: Discovery 2 - No means of discovery without web server for domain	bug	critical	wontfix	Michael Jones		2012-05-21	2013-10-29
#748: Messages 2.1.1.1 and 8.1 - MTI features for OpenID Request Object and Request File Messages	bug	critical	resolved	Michael Jones	Implementer's Draft	2013-02-04	2013-02-28
#703: Key publication needs to be reworked (x509_url and jwk_url) Messages	bug	critical	resolved	Brian Campbell	Implementer's Draft	2013-01-21	2013-02-28
#513: Basic 1.2, Messages 8.14, Discovery 3.1, 3.2 - Issuer Identifier can not contain a path component	bug	critical	resolved	John Bradley		2012-01-19	2012-03-22
#546: Basic 2.1 & 2.1.2 - Claims requested by profile scope not defined	bug	critical	resolved	Michael Jones		2012-02-15	2012-02-20
#522: All specs - Questioning the complexity of the Connect design	bug	critical	invalid			2012-01-19	2012-01-27
#463: Messages - xml2rfc syntax error	bug	critical	resolved	Nat Sakimura		2011-12-21	2011-12-21
#331: Messages - How is id_token returned when not accompanied by a code or token?	bug	critical	duplicate	John Bradley		2011-11-17	2011-12-03
#310: Basic and maybe Messages and Standard - Several problems with statement about UserInfo response not guaranteed to be about the Subject in the session	bug	critical	resolved	John Bradley		2011-11-17	2011-11-30
#343: Messages - Why is a refresh token needed if an authentication code is being used?	bug	critical	resolved	John Bradley		2011-11-20	2011-11-26
#339: Messages, Standard - Meaning of login_required, session_selection_required and approval_required errors unclear	bug	critical	resolved			2011-11-20	2011-11-21