1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (101–125 of 136)

Title T P Status Votes Assignee Milestone Created Updated Actions
#503: DPoP, PAR and Authorization Code binding
FAPI2: Security Profile
bug major resolved
#538: Lifetime of authorization codes
FAPI2: Security Profile
bug major resolved
#533: DPoP & resource leaks
FAPI2: Security Profile
bug major resolved
#536: Discovery should be mandated for clients
FAPI2: Security Profile
bug major resolved
#525: Decide on what to do for A. Cuckoo’s Token Attack
FAPI2: Security Profile
bug major resolved
#478: FAPI2 Baseline + jarm & iss draft
FAPI2: Security Profile
bug minor resolved
#415: Discovery Metadata for mtls
FAPI2: Security Profile
bug minor resolved
#470: Are unsigned id_tokens permitted in FAPI2 baseline?
FAPI2: Security Profile
bug major closed
#471: Resolve '?' in FAPI1 vs FAPI2 differences table
FAPI2: Security Profile
bug minor closed
#462: FAPI2 Baseline has two copyright notices
FAPI2: Security Profile
bug minor resolved
#638: Add some more text to Introduction
FAPI2: Security Profile
bug major resolved
#690: 5.1.1. Introduction recommends Grant Management but the maturity level of the document makes it inappropriate to recommend it in the FIANL specification
FAPI2: Security Profile
bug major open
#695: iat, nbf clause readability
FAPI2: Security Profile
bug major new
#693: MTLS section readability
FAPI2: Security Profile
bug major open
#674: length of nonce tested in OP conformance tests
FAPI2: Security Profile
bug major resolved 1
#651: Avoid "should be" and "shall be" where possible
FAPI2: Security Profile
bug major resolved
#682: Clarify allowed use of `state` and required CSRF protection in FAPI 2.0 SP
FAPI2: Security Profile
proposal major resolved
#659: No normative statement on id_token encryption
FAPI2: Security Profile
bug major resolved
#577: FAPI2SP appears to permit response_types "id_token", "id_token token" and "none"
FAPI2: Security Profile
bug minor resolved
#603: Require servers to allow for clock skew
FAPI2: Security Profile
bug major resolved
#631: shall vs shall only
FAPI2: Security Profile
bug minor resolved
#579: FAPI2SP: Note about client assertion audience looks misleading
FAPI2: Security Profile
bug major resolved
#562: Scope needs clarification
FAPI2: Security Profile
bug major resolved
#544: FAPI1 vs FAPI2 blog post should be updated
FAPI2: Security Profile
task major resolved
#554: Mention U of Stuttgart researchers in Acknowledgements
FAPI2: Security Profile
bug major resolved
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6