openid / connect / issues

Title	T	P	Status	Assignee	Created	Updated
#324: Basic, Messages, Standard - Why can’t the ID token be used to call the UserInfo endpoint?	bug	trivial	wontfix	John Bradley	2011-11-17	2011-12-08
#307: Basic, Messages, Standard - Need for prompt:select_account questionable	bug	trivial	resolved	John Bradley	2011-11-17	2011-12-08
#387: Standard 2.3.2, 5.2.1, etc. Validation rules should be in Messages, not Standard	bug	major	resolved	Nat Sakimura	2011-12-03	2011-12-08
#335: Messages -- What should be returned by the userinfo endpoint if the scope was just 'openid'	bug	minor	resolved	John Bradley	2011-11-17	2011-12-08
#302: Messages, Basic, Standard - How random does a nonce have to be?	bug	minor	resolved	John Bradley	2011-11-17	2011-12-08
#323: Messages - Why must the Authorization Server always return an Access Token ?	bug	major	resolved	John Bradley	2011-11-17	2011-12-08
#330: Messages - Clearer statement about string comparison rules needed	bug	minor	resolved	Michael Jones	2011-11-17	2011-12-08
#301: Messages - Inconsistent statements about mitigating replay attacks	bug	major	resolved	Michael Jones	2011-11-17	2011-12-07
#386: Basic, Messages, Standard - Error response error codes augment OAuth Bearer codes, not OAuth Core codes	bug	minor	resolved	Edmund Jay	2011-12-02	2011-12-07
#331: Messages - How is id_token returned when not accompanied by a code or token?	bug	critical	duplicate	John Bradley	2011-11-17	2011-12-03
#325: Messages - Why must the Authorization Server be required to return a code or access_token?	bug	trivial	duplicate	John Bradley	2011-11-17	2011-12-03
#326: Messages - Session Management text not actionable	bug	major	resolved	John Bradley	2011-11-17	2011-12-03
#385: Messages - 5.1 OpenID Request Object verification.	bug	major	resolved		2011-12-01	2011-12-03
#384: Messages - 2.3.3 UserInfo Error Response refers to Bear Token errors	bug	major	invalid		2011-12-01	2011-12-03
#383: Messages - 2.2.1 client_secret_jwt and private_key_jwt authentication methods	bug	major	resolved	John Bradley	2011-12-01	2011-12-03
#380: Messages 5.3 Check ID Request Verification	bug	minor	resolved	John Bradley	2011-11-26	2011-12-03
#310: Basic and maybe Messages and Standard - Several problems with statement about UserInfo response not guaranteed to be about the Subject in the session	bug	critical	resolved	John Bradley	2011-11-17	2011-11-30
#318: Basic, Messages - UserInfo Error Response format underspecified	bug	minor	resolved	Michael Jones	2011-11-17	2011-11-30
#313: Basic, Messages - Specification silent on treatment of UserInfo Claims that are omitted, have null values, and have empty string values	bug	minor	resolved	Michael Jones	2011-11-17	2011-11-30
#303: Basic, Messages, Standard - Use of state with implicit flow seems odd	bug	minor	resolved	Michael Jones	2011-11-17	2011-11-30
#343: Messages - Why is a refresh token needed if an authentication code is being used?	bug	critical	resolved	John Bradley	2011-11-20	2011-11-26
#294: Messages - 2.4.2 Format of the Check ID Endpoint can only be JSON	bug	major	resolved	John Bradley	2011-11-16	2011-11-25
#332: Messages - What should happen when OpenID Request Object parameters are not understood?	bug	major	resolved	Michael Jones	2011-11-17	2011-11-24
#338: Messages – Proposal to reuse locales member for specifying per-claim locales, rather than claim#BCP47 syntax	bug	major	wontfix	Nat Sakimura	2011-11-20	2011-11-23
#378: Messages - 2.3.1.2 Parameters in request object	bug	major	resolved		2011-11-23	2011-11-23