openid / connect / issues

Title	T	P	Status	Assignee	Created	Updated
#447: Standard - 2.3 TLS 1.2 Required?	bug	major	resolved	Michael Jones	2011-12-19	2011-12-20
#421: Messages - 2.1.2 nonce definition differs from Standard and Basic	bug	major	invalid	Nat Sakimura	2011-12-16	2011-12-16
#409: Basic, Standard, maybe Messages - Use Authorization: Bearer in UserInfo examples	bug	major	resolved	John Bradley	2011-12-14	2011-12-15
#390: Message, Standard - Why id_token not access_token?	bug	major	resolved	John Bradley	2011-12-08	2011-12-14
#402: Standard - Check the use of "identity" and clarify	bug	major	resolved	Nat Sakimura	2011-12-14	2011-12-14
#400: Basic, Messages, Standard - NIST 800-63-1 FINAL	bug	minor	resolved	Edmund Jay	2011-12-14	2011-12-14
#304: Basic, Messages, Standard - Nonce seems redundant with state	bug	trivial	wontfix	John Bradley	2011-11-17	2011-12-08
#324: Basic, Messages, Standard - Why can’t the ID token be used to call the UserInfo endpoint?	bug	trivial	wontfix	John Bradley	2011-11-17	2011-12-08
#307: Basic, Messages, Standard - Need for prompt:select_account questionable	bug	trivial	resolved	John Bradley	2011-11-17	2011-12-08
#387: Standard 2.3.2, 5.2.1, etc. Validation rules should be in Messages, not Standard	bug	major	resolved	Nat Sakimura	2011-12-03	2011-12-08
#302: Messages, Basic, Standard - How random does a nonce have to be?	bug	minor	resolved	John Bradley	2011-11-17	2011-12-08
#355: Standard 2.1.1 - Possibly overly broad treatment of @ character	bug	major	resolved	Michael Jones	2011-11-21	2011-12-08
#386: Basic, Messages, Standard - Error response error codes augment OAuth Bearer codes, not OAuth Core codes	bug	minor	resolved	Edmund Jay	2011-12-02	2011-12-07
#310: Basic and maybe Messages and Standard - Several problems with statement about UserInfo response not guaranteed to be about the Subject in the session	bug	critical	resolved	John Bradley	2011-11-17	2011-11-30
#303: Basic, Messages, Standard - Use of state with implicit flow seems odd	bug	minor	resolved	Michael Jones	2011-11-17	2011-11-30
#379: Standard - 2.3.1.3. Request File URI	bug	major	resolved	John Bradley	2011-11-23	2011-11-23
#350: Standard 2.3.1 - Does request_uri have to be HTTPS?	bug	major	resolved	John Bradley	2011-11-21	2011-11-23
#351: Standard 2.3.1.3.3 - Questions about requiring a unique Request File URL for each request	bug	minor	resolved	Michael Jones	2011-11-21	2011-11-23
#347: Standard - "Request URI" should be renamed "Request File URI" (editorial)	bug	minor	resolved	Michael Jones	2011-11-21	2011-11-23
#312: Basic, Messages - Id "backwards compatibility" statement out of place in an entirely new standard	bug	major	resolved	Michael Jones	2011-11-17	2011-11-23
#298: Messages, Standard security considerations use of "the assertion" language	bug	minor	resolved	Nat Sakimura	2011-11-16	2011-11-23
#375: Standard - 5.1.2.1 Ref to Message 3.2.3 is wrong	bug	major	resolved	Nat Sakimura	2011-11-23	2011-11-23
#353: Standard 3 - Requiring use of POST at Token Endpoint	bug	minor	invalid	Nat Sakimura	2011-11-21	2011-11-23
#340: Messages, Standard - Meaning of user_mismatched unclear	bug	major	resolved		2011-11-20	2011-11-21
#339: Messages, Standard - Meaning of login_required, session_selection_required and approval_required errors unclear	bug	critical	resolved		2011-11-20	2011-11-21