1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (1–25 of 132)

Title T P Status Votes Assignee Milestone Created Updated Actions
#555: Tracking: Implementers of FAPI 1.0 and FAPI 2.0
FAPI2: Security Profile
task minor new
#598: Version identifier for FAPI 2.0
FAPI2: Security Profile
task major duplicate
#544: FAPI1 vs FAPI2 blog post should be updated
FAPI2: Security Profile
task major resolved
#431: FAPI 2.0 Baseline Attacker model not referenced.
FAPI2: Security Profile
task major resolved
#682: Clarify allowed use of `state` and required CSRF protection in FAPI 2.0 SP
FAPI2: Security Profile
proposal major resolved
#523: Rotation of Refresh token - Compromised client highlighted by AU - CDR Independent review.
FAPI2: Security Profile
proposal critical resolved
#529: Applicability of Security BCP to FAPI 2.0
FAPI2: Security Profile
proposal minor resolved
#336: FAPI 2 Baseline - Client types
FAPI2: Security Profile
proposal minor resolved
#492: EdDSA in FAPI 2.0
FAPI2: Security Profile
proposal minor resolved
#456: Proposal - should we remove support for refresh token rotation from FAPI 2.0 (one of the drafts)
FAPI2: Security Profile
proposal minor resolved
#173: Mix-up mitigation (defence in depth)
FAPI2: Security Profile
proposal minor resolved
#658: allow use of a future fully specified JWS algorithm identifier for EdDSA w/ Ed25519
FAPI2: Security Profile
enhancement major resolved
#639: FAPI 2.0 Title Change - Add Part 1, Part 2, etc...
FAPI2: Security Profile
enhancement major resolved
#574: FAPI 2 Basline - Interop Question Clarification over the use of PAR
FAPI2: Security Profile
enhancement major resolved
#522: optional ID Token signature validation for code flow
FAPI2: Security Profile
enhancement major resolved
#465: Align the chapter etc. structure to FAPI 1
FAPI2: Security Profile
enhancement major resolved
#348: FAPI2 Release Communication
FAPI2: Security Profile
enhancement major resolved
#486: oAuth 2.0 Authorization Server Issuer Identification References Need Updating
FAPI2: Security Profile
enhancement major resolved
#418: 303 should be used
FAPI2: Security Profile
enhancement major resolved
#352: nonce as PKCE alternative for OIDC flows
FAPI2: Security Profile
enhancement major wontfix
#694: Refresh token clause readability
FAPI2: Security Profile
bug major new
#693: MTLS section readability
FAPI2: Security Profile
bug major new
#692: CAA records
FAPI2: Security Profile
bug major new
#685: Use of TLS 1.2 Ciphers
FAPI2: Security Profile
bug major new
#690: 5.1.1. Introduction recommends Grant Management but the maturity level of the document makes it inappropriate to recommend it in the FIANL specification
FAPI2: Security Profile
bug major new
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6