openid / fapi / issues

Title	T	P	Status	Votes	Milestone	Created	Updated
#428: Baseline: Clause 7.4.1 Talks about security issues with authorization requests and responses but incorrectly refers to encrypting authorization 'responses' not requests. FAPI 1: Baseline	bug	trivial	resolved		Errata	2021-07-01	2023-08-09
#372: FAPI1 section 8.1: "RS" and "resource server" are used FAPI 1: Baseline	bug	trivial	wontfix			2021-02-10	2021-03-10
#370: FAPI1 HTML version: Part 2 should be linked from Part 1 within the text FAPI 1: Baseline	enhancement	trivial	resolved			2021-02-09	2021-02-11
#358: Bibliography links FAPI 1: Baseline	enhancement	minor	resolved			2021-01-11	2021-01-13
#196: OAuth Security BCP and FAPI FAPI 1: Baseline	bug	major	closed			2018-12-19	2020-04-15
#188: Broken link in FAPI part 1 ID2 FAPI 1: Baseline	bug	major	resolved			2018-11-06	2020-04-01
#257: state is required for non-OpenID-Clients now, PCKE should be as well FAPI 1: Baseline	enhancement	major	resolved			2019-07-24	2019-10-02
#183: Poor section title: 5.2.2.1 returning authenticated user's identifier Authorization server FAPI 1: Baseline	bug	trivial	resolved			2018-10-16	2019-06-12
#179: Resources served by a Resource Server may not necessarily be UTF-8 encoded FAPI 1: Baseline	proposal	minor	resolved		2nd Implementers Draft	2018-10-10	2019-05-15
#11: OAuth Profile should mandate RFC7636 (PKCE) for code flow FAPI 1: Baseline	proposal	major	closed	1		2016-08-02	2018-07-23
#139: treatment of returned scopes divergent from RFC 6749 FAPI 1: Baseline	bug	major	wontfix			2018-04-24	2018-05-25
#138: Question: Is including openid in the scope required? FAPI 1: Baseline	proposal	trivial	resolved			2018-04-07	2018-04-11
#6: Create Write Access Security Profile FAPI 1: Baseline	task	major	resolved		R3 - Nov 2017	2016-07-04	2018-01-29
#5: Create Read Only Security Profile FAPI 1: Baseline	task	major	closed		R2 - Nov 2016	2016-07-04	2018-01-29
#51: Message source authentication failure - FAPI 1: Baseline	proposal	minor	closed			2016-12-08	2018-01-29
#80: Token Response FAPI 1: Baseline	enhancement	trivial	resolved			2017-03-23	2017-12-21
#81: Identify user associated to the access token FAPI 1: Baseline	enhancement	minor	resolved			2017-03-23	2017-12-20
#52: Access Token / Refresh Token description not required? FAPI 1: Baseline	proposal	minor	resolved			2016-12-08	2017-12-20
#82: Strict Access Control to logs FAPI 1: Baseline	enhancement	minor	resolved			2017-03-23	2017-12-20
#31: 5.2 - te - More fine grained scope needed FAPI 1: Baseline	enhancement	major	resolved		R1 - Aug 2016	2016-09-20	2017-12-20
#18: "Authorization token" is not a defined term in RFC6749 FAPI 1: Baseline	bug	major	resolved			2016-08-02	2017-12-20
#14: Allowed Redirection Client URI is not a defined term FAPI 1: Baseline	bug	major	resolved			2016-08-02	2017-12-20
#108: update Mutual TLS reference in Part 1 FAPI 1: Baseline	bug	major	resolved			2017-07-06	2017-07-15
#107: Content-type header in HTTP response from resource server FAPI 1: Baseline	proposal	minor	resolved			2017-07-04	2017-07-15
#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs FAPI 1: Baseline	bug	major	closed			2017-04-12	2017-05-10

#428: Baseline: Clause 7.4.1 Talks about security issues with authorization requests and responses but incorrectly refers to encrypting authorization 'responses' not requests.

FAPI 1: Baseline

bug

trivial

resolved

Errata

2021-07-01

2023-08-09

#372: FAPI1 section 8.1: "RS" and "resource server" are used

FAPI 1: Baseline

bug

trivial

wontfix

2021-02-10

2021-03-10

#370: FAPI1 HTML version: Part 2 should be linked from Part 1 within the text

FAPI 1: Baseline

enhancement

trivial

resolved

2021-02-09

2021-02-11

#358: Bibliography links

FAPI 1: Baseline

enhancement

minor

resolved

2021-01-11

2021-01-13

#196: OAuth Security BCP and FAPI

FAPI 1: Baseline

bug

major

closed

2018-12-19

2020-04-15

#188: Broken link in FAPI part 1 ID2

FAPI 1: Baseline

bug

major

resolved

2018-11-06

2020-04-01

#257: state is required for non-OpenID-Clients now, PCKE should be as well

FAPI 1: Baseline

enhancement

major

resolved

2019-07-24

2019-10-02

#183: Poor section title: 5.2.2.1 returning authenticated user's identifier Authorization server

FAPI 1: Baseline

bug

trivial

resolved

2018-10-16

2019-06-12

#179: Resources served by a Resource Server may not necessarily be UTF-8 encoded

FAPI 1: Baseline

proposal

minor

resolved

2nd Implementers Draft

2018-10-10

2019-05-15

#11: OAuth Profile should mandate RFC7636 (PKCE) for code flow

FAPI 1: Baseline

proposal

major

closed

1

2016-08-02

2018-07-23

#139: treatment of returned scopes divergent from RFC 6749

FAPI 1: Baseline

bug

major

wontfix

2018-04-24

2018-05-25

#138: Question: Is including openid in the scope required?

FAPI 1: Baseline

proposal

trivial

resolved

2018-04-07

2018-04-11

#6: Create Write Access Security Profile

FAPI 1: Baseline

task

major

resolved

R3 - Nov 2017

2016-07-04

2018-01-29

#5: Create Read Only Security Profile

FAPI 1: Baseline

task

major

closed

R2 - Nov 2016

2016-07-04

2018-01-29

#51: Message source authentication failure -

FAPI 1: Baseline

proposal

minor

closed

2016-12-08

2018-01-29

#80: Token Response

FAPI 1: Baseline

enhancement

trivial

resolved

2017-03-23

2017-12-21

#81: Identify user associated to the access token

FAPI 1: Baseline

enhancement

minor

resolved

2017-03-23

2017-12-20

#52: Access Token / Refresh Token description not required?

FAPI 1: Baseline

proposal

minor

resolved

2016-12-08

2017-12-20

#82: Strict Access Control to logs

FAPI 1: Baseline

enhancement

minor

resolved

2017-03-23

2017-12-20

#31: 5.2 - te - More fine grained scope needed

FAPI 1: Baseline

enhancement

major

resolved

R1 - Aug 2016

2016-09-20

2017-12-20

#18: "Authorization token" is not a defined term in RFC6749

FAPI 1: Baseline

bug

major

resolved

2016-08-02

2017-12-20

#14: Allowed Redirection Client URI is not a defined term

FAPI 1: Baseline

bug

major

resolved

2016-08-02

2017-12-20

#108: update Mutual TLS reference in Part 1

FAPI 1: Baseline

bug

major

resolved

2017-07-06

2017-07-15

#107: Content-type header in HTTP response from resource server

FAPI 1: Baseline

proposal

minor

resolved

2017-07-04

2017-07-15

#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs

FAPI 1: Baseline

bug

major

closed

2017-04-12

2017-05-10

Issues

Issues (1–25 of 97)