1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (301–325 of 845)

Title T P Status Votes Assignee Milestone Created Updated Actions
#602: "Client" is misleading in the context of signed introspection responses
FAPI2: Message Signing
proposal major resolved
#617: Security issue in the JWT Response for OAuth Token Introspection specification
FAPI2: Message Signing
proposal major resolved
#618: Certification/conformance: Strictness of checking error responses
bug major resolved
#495: Certification: Requirements for alg support in RPs/OPs
Certification
bug major resolved
#527: Create security note/consideration on B. Access Token Injection with ID Token Replay (FAPI 1.0 Advanced)
FAPI 1: Advanced
bug major resolved
#405: Inconsistent usage of http and https in references
FAPI 1: Advanced
enhancement minor resolved
#458: FAPI1 Part1: not clear as to which auth flows are supported
FAPI 1: Baseline
bug trivial resolved
#409: MTLS References should be updated
FAPI 1: Advanced
task trivial resolved
#620: Request for clarification on fapi1-advanced-final-par-pushed-authorization-url-as-audience-in-request-object test case
FAPI 1: Advanced
bug major resolved
#613: FAPI1A - Remove 5.2.4 and 5.2.5
FAPI 1: Advanced
bug minor resolved
#601: Title 8.1 is redundant
FAPI 1: Baseline
bug major resolved
#468: Normative references to drafts in FAPI 1.0 Advanced
FAPI 1: Advanced
bug major resolved
#428: Baseline: Clause 7.4.1 Talks about security issues with authorization requests and responses but incorrectly refers to encrypting authorization 'responses' not requests.
FAPI 1: Baseline
bug trivial resolved
#494: FAPI1Adv: Apparent inconsistency in RP requirements compared to OP requirements
FAPI 1: Advanced
bug major resolved
#475: certification: FAPI2-Baseline - is OpenID Connect support optional?
Certification
bug major resolved
#249: certification clarification request: acr_values_supported in discovery
Certification
bug major resolved
#615: FAPI1 refers to JARM draft
FAPI 1: Advanced
bug major duplicate
#327: Dynamic Client Registration & Management
Implementation & Deployment Advice
bug major open
#293: PKCE & Nonce Security Considerations
Implementation & Deployment Advice
bug major open
#487: RS must check x-fapi-interaction-id is an UUID or IP address
Implementation & Deployment Advice
bug major open 1
#605: JARM for signed authZ responses seems to allow MACs
FAPI2: Message Signing
bug major invalid
#598: Version identifier for FAPI 2.0
FAPI2: Security Profile
task major duplicate
#403: proposed new FAPI certification test: private_key_jwt client authentication assertion where aud contains multiple values
FAPI 1: Advanced
proposal major resolved 1
#397: query over certification test for access tokens being revoked when authorization codes are reused
FAPI 1: Advanced
bug major resolved
#365: CDR Conformance Bugs
Certification
bug minor resolved
  2. 1
  3. 2
  4. …
  5. 11
  6. 12
  7. 13
  8. 14
  9. 15
  10. 16
  11. …
  12. 33
  13. 34