1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (126–148 of 148)

Title T P Status Votes Assignee Milestone Created Updated Actions
#470: Are unsigned id_tokens permitted in FAPI2 baseline?
FAPI2: Security Profile
bug major closed
#471: Resolve '?' in FAPI1 vs FAPI2 differences table
FAPI2: Security Profile
bug minor closed
#472: FAPI2 baseline references PAR draft, change to RFC9126
FAPI2: Security Profile
bug minor resolved
#426: FAPI 2 - Multiple audience values in client authentication assertions
FAPI2: Security Profile
bug major resolved
#400: create bitbucket pipeline for converting markdown files into html
FAPI2: Security Profile
bug major resolved
#462: FAPI2 Baseline has two copyright notices
FAPI2: Security Profile
bug minor resolved
#399: OP must accept 'aud' in client assertion as issuer
FAPI2: Security Profile
bug major resolved
#431: FAPI 2.0 Baseline Attacker model not referenced.
FAPI2: Security Profile
task major resolved
#418: 303 should be used
FAPI2: Security Profile
enhancement major resolved
#402: AS shall require that redirect URIs use the https scheme
FAPI2: Security Profile
bug major resolved
#341: Free DPoP
FAPI2: Security Profile
bug major resolved
#346: RAR requirement may be unnecessary?
FAPI2: Security Profile
bug major resolved
#337: Intro text in Basline
FAPI2: Security Profile
bug major resolved
#328: FAPI2 and oauth-security-topics
FAPI2: Security Profile
bug major resolved
#349: authorization code replay
FAPI2: Security Profile
bug major resolved
#352: nonce as PKCE alternative for OIDC flows
FAPI2: Security Profile
enhancement major wontfix
#343: what is authenticity and integrity of the redirect URI?
FAPI2: Security Profile
bug major resolved
#345: it's okay if a refresh token can be guessed?
FAPI2: Security Profile
bug major resolved
#340: treatment of authorization request parameters outside PAR
FAPI2: Security Profile
bug major resolved
#342: sender-constrained auth codes & refresh tokens: what does it mean?
FAPI2: Security Profile
bug major resolved
#344: "x-" isn't cool anymore
FAPI2: Security Profile
bug major resolved
#347: reject vs ignore on plain (or outside PAR) authorization request parameters
FAPI2: Security Profile
bug major duplicate
#173: Mix-up mitigation (defence in depth)
FAPI2: Security Profile
proposal minor resolved
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6