1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (101–122 of 122)

Title T P Status Votes Assignee Milestone Created Updated Actions
#456: Proposal - should we remove support for refresh token rotation from FAPI 2.0 (one of the drafts)
FAPI2: Security Profile
proposal minor resolved
#473: FAPI2 JWS alg choices are much wider than FAPI1
FAPI2: Security Profile
bug major resolved
#417: Shall require introspection of claims
FAPI2: Security Profile
bug major resolved
#472: FAPI2 baseline references PAR draft, change to RFC9126
FAPI2: Security Profile
bug minor resolved
#426: FAPI 2 - Multiple audience values in client authentication assertions
FAPI2: Security Profile
bug major resolved
#400: create bitbucket pipeline for converting markdown files into html
FAPI2: Security Profile
bug major resolved
#462: FAPI2 Baseline has two copyright notices
FAPI2: Security Profile
bug minor resolved
#399: OP must accept 'aud' in client assertion as issuer
FAPI2: Security Profile
bug major resolved
#431: FAPI 2.0 Baseline Attacker model not referenced.
FAPI2: Security Profile
task major resolved
#418: 303 should be used
FAPI2: Security Profile
enhancement major resolved
#402: AS shall require that redirect URIs use the https scheme
FAPI2: Security Profile
bug major resolved
#341: Free DPoP
FAPI2: Security Profile
bug major resolved
#346: RAR requirement may be unnecessary?
FAPI2: Security Profile
bug major resolved
#337: Intro text in Basline
FAPI2: Security Profile
bug major resolved
#328: FAPI2 and oauth-security-topics
FAPI2: Security Profile
bug major resolved
#349: authorization code replay
FAPI2: Security Profile
bug major resolved
#343: what is authenticity and integrity of the redirect URI?
FAPI2: Security Profile
bug major resolved
#345: it's okay if a refresh token can be guessed?
FAPI2: Security Profile
bug major resolved
#340: treatment of authorization request parameters outside PAR
FAPI2: Security Profile
bug major resolved
#342: sender-constrained auth codes & refresh tokens: what does it mean?
FAPI2: Security Profile
bug major resolved
#344: "x-" isn't cool anymore
FAPI2: Security Profile
bug major resolved
#173: Mix-up mitigation (defence in depth)
FAPI2: Security Profile
proposal minor resolved
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5