1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (101–125 of 148)

Title T P Status Votes Assignee Milestone Created Updated Actions
#536: Discovery should be mandated for clients
FAPI2: Security Profile
bug major resolved
#530: Privacy consideration is missing
FAPI2: Security Profile
bug major resolved
#525: Decide on what to do for A. Cuckoo’s Token Attack
FAPI2: Security Profile
bug major resolved
#529: Applicability of Security BCP to FAPI 2.0
FAPI2: Security Profile
proposal minor resolved
#528: C. PKCE Chosen Challenge Attack
FAPI2: Security Profile
bug major resolved
#478: FAPI2 Baseline + jarm & iss draft
FAPI2: Security Profile
bug minor resolved
#496: clock sync and FAPI2 baseline
FAPI2: Security Profile
bug major resolved
#336: FAPI 2 Baseline - Client types
FAPI2: Security Profile
proposal minor resolved
#499: Re structure FAPI2 baseline
FAPI2: Security Profile
bug major resolved
#500: Signal that FAPI2 can work with client credentials grant
FAPI2: Security Profile
bug major resolved
#477: FAPI2 + dpop nonces
FAPI2: Security Profile
bug major resolved
#497: RS Clauses re access token
FAPI2: Security Profile
bug major resolved
#430: Add "Scope" clause to FAPI 2.0
FAPI2: Security Profile
bug major resolved
#492: EdDSA in FAPI 2.0
FAPI2: Security Profile
proposal minor resolved
#348: FAPI2 Release Communication
FAPI2: Security Profile
enhancement major resolved
#481: ecosystems diverging from FAPI2-Baseline spec
FAPI2: Security Profile
bug major resolved
#486: oAuth 2.0 Authorization Server Issuer Identification References Need Updating
FAPI2: Security Profile
enhancement major resolved
#415: Discovery Metadata for mtls
FAPI2: Security Profile
bug minor resolved
#460: FAPI2-Baseline TLS restrictions are written as prose
FAPI2: Security Profile
bug minor resolved
#461: FAPI2-Baseline - has the time come to recommend/require TLS 1.3?
FAPI2: Security Profile
bug major resolved
#476: is response_type=code id_token permitted in FAPI2 Baseline?
FAPI2: Security Profile
bug minor resolved
#474: "shall use the authorization code grant described in [RFC6749]" could be clearer
FAPI2: Security Profile
bug minor resolved
#456: Proposal - should we remove support for refresh token rotation from FAPI 2.0 (one of the drafts)
FAPI2: Security Profile
proposal minor resolved
#473: FAPI2 JWS alg choices are much wider than FAPI1
FAPI2: Security Profile
bug major resolved
#417: Shall require introspection of claims
FAPI2: Security Profile
bug major resolved
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6