1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (1–25 of 97)

Title T P Status Votes Assignee Milestone Created Updated Actions
#232: Part 1: Complete the privacy consideration section
FAPI 1: Baseline
task major duplicate
#6: Create Write Access Security Profile
FAPI 1: Baseline
task major resolved
#5: Create Read Only Security Profile
FAPI 1: Baseline
task major closed
#170: Remove Public Client Support
FAPI 1: Baseline
proposal major resolved
#179: Resources served by a Resource Server may not necessarily be UTF-8 encoded
FAPI 1: Baseline
proposal minor resolved
#11: OAuth Profile should mandate RFC7636 (PKCE) for code flow
FAPI 1: Baseline
proposal major closed 1
#138: Question: Is including openid in the scope required?
FAPI 1: Baseline
proposal trivial resolved
#16: Client Authentication -- Do we need TLS mutual authentication?
FAPI 1: Baseline
proposal major resolved
#51: Message source authentication failure -
FAPI 1: Baseline
proposal minor closed
#52: Access Token / Refresh Token description not required?
FAPI 1: Baseline
proposal minor resolved
#107: Content-type header in HTTP response from resource server
FAPI 1: Baseline
proposal minor resolved
#12: OAuth Profile should mandate per AS redirect URI for Clients with session comparison
FAPI 1: Baseline
proposal major resolved
#370: FAPI1 HTML version: Part 2 should be linked from Part 1 within the text
FAPI 1: Baseline
enhancement trivial resolved
#358: Bibliography links
FAPI 1: Baseline
enhancement minor resolved
#334: Question regarding metadata
FAPI 1: Baseline
enhancement minor resolved
#262: should long lived access tokens be permitted
FAPI 1: Baseline
enhancement major resolved
#240: FAPI-R: length/entropy of authorization code / refresh token / client_secret
FAPI 1: Baseline
enhancement minor resolved
#175: Clarify attacker model (PKCE method and CSRF protection)
FAPI 1: Baseline
enhancement major resolved
#220: [BIS] Clarify attacker model (PKCE method and CSRF protection)
FAPI 1: Baseline
enhancement major resolved
#100: Signing API response payloads
FAPI 1: Baseline
enhancement major resolved
#257: state is required for non-OpenID-Clients now, PCKE should be as well
FAPI 1: Baseline
enhancement major resolved
#86: The read only spec should not contain 'if possible' in section 5.2.2
FAPI 1: Baseline
enhancement major closed
#80: Token Response
FAPI 1: Baseline
enhancement trivial resolved
#81: Identify user associated to the access token
FAPI 1: Baseline
enhancement minor resolved
#82: Strict Access Control to logs
FAPI 1: Baseline
enhancement minor resolved
  2. 1
  3. 2
  4. 3
  5. 4