1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (101–125 of 132)

Title T P Status Votes Assignee Milestone Created Updated Actions
#486: oAuth 2.0 Authorization Server Issuer Identification References Need Updating
FAPI2: Security Profile
enhancement major resolved
#415: Discovery Metadata for mtls
FAPI2: Security Profile
bug minor resolved
#460: FAPI2-Baseline TLS restrictions are written as prose
FAPI2: Security Profile
bug minor resolved
#461: FAPI2-Baseline - has the time come to recommend/require TLS 1.3?
FAPI2: Security Profile
bug major resolved
#476: is response_type=code id_token permitted in FAPI2 Baseline?
FAPI2: Security Profile
bug minor resolved
#474: "shall use the authorization code grant described in [RFC6749]" could be clearer
FAPI2: Security Profile
bug minor resolved
#456: Proposal - should we remove support for refresh token rotation from FAPI 2.0 (one of the drafts)
FAPI2: Security Profile
proposal minor resolved
#473: FAPI2 JWS alg choices are much wider than FAPI1
FAPI2: Security Profile
bug major resolved
#417: Shall require introspection of claims
FAPI2: Security Profile
bug major resolved
#470: Are unsigned id_tokens permitted in FAPI2 baseline?
FAPI2: Security Profile
bug major closed
#471: Resolve '?' in FAPI1 vs FAPI2 differences table
FAPI2: Security Profile
bug minor closed
#472: FAPI2 baseline references PAR draft, change to RFC9126
FAPI2: Security Profile
bug minor resolved
#426: FAPI 2 - Multiple audience values in client authentication assertions
FAPI2: Security Profile
bug major resolved
#400: create bitbucket pipeline for converting markdown files into html
FAPI2: Security Profile
bug major resolved
#462: FAPI2 Baseline has two copyright notices
FAPI2: Security Profile
bug minor resolved
#399: OP must accept 'aud' in client assertion as issuer
FAPI2: Security Profile
bug major resolved
#431: FAPI 2.0 Baseline Attacker model not referenced.
FAPI2: Security Profile
task major resolved
#418: 303 should be used
FAPI2: Security Profile
enhancement major resolved
#402: AS shall require that redirect URIs use the https scheme
FAPI2: Security Profile
bug major resolved
#341: Free DPoP
FAPI2: Security Profile
bug major resolved
#346: RAR requirement may be unnecessary?
FAPI2: Security Profile
bug major resolved
#337: Intro text in Basline
FAPI2: Security Profile
bug major resolved
#328: FAPI2 and oauth-security-topics
FAPI2: Security Profile
bug major resolved
#349: authorization code replay
FAPI2: Security Profile
bug major resolved
#352: nonce as PKCE alternative for OIDC flows
FAPI2: Security Profile
enhancement major wontfix
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6