1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (26–50 of 62)

Title T P Status Votes Assignee Milestone Created Updated Actions
#11: OAuth Profile should mandate RFC7636 (PKCE) for code flow
FAPI 1: Baseline
proposal major closed 1
#132: Requirement on token lengths may less than core OAuth requires
FAPI 1: Baseline
bug major resolved
#139: treatment of returned scopes divergent from RFC 6749
FAPI 1: Baseline
bug major wontfix
#114: Require `state`
FAPI 1: Baseline
bug major resolved
#128: redirect_uri in url query vs request object
FAPI 1: Baseline
bug major resolved
#129: TLS cipher restrictions should be relaxed for the authorise endpoint
FAPI 1: Baseline
bug major resolved
#6: Create Write Access Security Profile
FAPI 1: Baseline
task major resolved
#5: Create Read Only Security Profile
FAPI 1: Baseline
task major closed
#21: Residual Data clause should be generalized and moved to privacy considerations
FAPI 1: Baseline
bug major closed
#22: Undefined OAuth response parameter "user_id" appears in the text
FAPI 1: Baseline
bug major closed
#16: Client Authentication -- Do we need TLS mutual authentication?
FAPI 1: Baseline
proposal major resolved
#31: 5.2 - te - More fine grained scope needed
FAPI 1: Baseline
enhancement major resolved
#18: "Authorization token" is not a defined term in RFC6749
FAPI 1: Baseline
bug major resolved
#14: Allowed Redirection Client URI is not a defined term
FAPI 1: Baseline
bug major resolved
#108: update Mutual TLS reference in Part 1
FAPI 1: Baseline
bug major resolved
#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs
FAPI 1: Baseline
bug major closed
#85: Make the bullets in the provisions numbered
FAPI 1: Baseline
bug major resolved
#79: Part 1: issues with x-fapi-customer-last-logged-time header
FAPI 1: Baseline
bug major closed
#63: There is no qualification on x-fapi-customer-id
FAPI 1: Baseline
bug major closed
#70: "User-agents" in 5.2.3 confusing.
FAPI 1: Baseline
bug major resolved
#68: Privacy consideration should be talking about more specifics
FAPI 1: Baseline
bug major resolved
#66: CustomerId == sub == x-fapi-customer-id: Should standardize as sub
FAPI 1: Baseline
bug major resolved
#69: Notes like this are strange “NOTE: Providing access to Javascript clients or not has different security properites.;”
FAPI 1: Baseline
bug major closed
#64: "non monotonically increasing" does not cover all cases
FAPI 1: Baseline
bug major resolved
#62: Scope is not specific enough
FAPI 1: Baseline
bug major resolved
  2. 1
  3. 2
  4. 3