Issues (126–140 of 140)

Title	T	P	Status	Assignee	Milestone	Created	Updated
#418: 303 should be used FAPI2: Security Profile	enhancement	major	resolved			2021-05-28	2021-06-23
#402: AS shall require that redirect URIs use the https scheme FAPI2: Security Profile	bug	major	resolved	Daniel Fett		2021-04-22	2021-04-28
#341: Free DPoP FAPI2: Security Profile	bug	major	resolved			2020-11-18	2021-02-27
#346: RAR requirement may be unnecessary? FAPI2: Security Profile	bug	major	resolved			2020-11-19	2021-01-27
#337: Intro text in Basline FAPI2: Security Profile	bug	major	resolved			2020-11-18	2021-01-27
#328: FAPI2 and oauth-security-topics FAPI2: Security Profile	bug	major	resolved			2020-10-14	2021-01-06
#349: authorization code replay FAPI2: Security Profile	bug	major	resolved	Daniel Fett		2020-11-25	2021-01-06
#352: nonce as PKCE alternative for OIDC flows FAPI2: Security Profile	enhancement	major	wontfix			2020-12-12	2020-12-23
#343: what is authenticity and integrity of the redirect URI? FAPI2: Security Profile	bug	major	resolved	Daniel Fett		2020-11-18	2020-12-16
#345: it's okay if a refresh token can be guessed? FAPI2: Security Profile	bug	major	resolved	Daniel Fett		2020-11-18	2020-12-16
#340: treatment of authorization request parameters outside PAR FAPI2: Security Profile	bug	major	resolved			2020-11-18	2020-11-20
#342: sender-constrained auth codes & refresh tokens: what does it mean? FAPI2: Security Profile	bug	major	resolved			2020-11-18	2020-11-20
#344: "x-" isn't cool anymore FAPI2: Security Profile	bug	major	resolved			2020-11-18	2020-11-20
#347: reject vs ignore on plain (or outside PAR) authorization request parameters FAPI2: Security Profile	bug	major	duplicate			2020-11-19	2020-11-20
#173: Mix-up mitigation (defence in depth) FAPI2: Security Profile	proposal	minor	resolved		3rd Implementers Draft	2018-09-11	2020-11-08