1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (426–450 of 845)

Title T P Status Votes Assignee Milestone Created Updated Actions
#524: Create a security consideration/note on A. Cuckoo’s Token Attack (FAPI 1.0)
FAPI 1: Advanced
bug major invalid
#416: RAR if scope *and* claims param not expressive enough
FAPI2: Advanced Authorization
bug major resolved
#484: Key management in FAPI2 Advanced
FAPI2: Message Signing
bug major resolved
#512: Protocol run identifier such as nonce or PKCE should be required
JARM
bug major resolved
#509: 2.3.1 Note in Response Mode "query.jwt"
JARM
bug major resolved
#513: Is missing "Privacy consideration" OK?
JARM
bug major resolved
#515: Small "may" in the last paragraph of Clause 3. Client Metadata
JARM
bug major resolved
#511: 2.4 The Processing rules by the client does not use normative language.
JARM
bug major resolved
#516: 2.4 bullet 5. just states "checks its signature"
JARM
bug major resolved
#510: Prohibition of alg=none not quite enough
JARM
bug major resolved
#517: 3. Client Metadata bullets formatting are hard to read
JARM
bug major resolved
#514: Five occurence of "this draft" need to be changed to "this document"
JARM
bug major resolved
#518: Move 6. Acknowledgement after IANA Consideration or Informative References
JARM
bug major resolved
#478: FAPI2 Baseline + jarm & iss draft
FAPI2: Security Profile
bug minor resolved
#496: clock sync and FAPI2 baseline
FAPI2: Security Profile
bug major resolved
#436: Change grant_management_action "update" to "add" or "append"
Grant Management
proposal major resolved
#336: FAPI 2 Baseline - Client types
FAPI2: Security Profile
proposal minor resolved
#480: FAPI 2 Baseline: shall support authorization details if scope is not expressive enough needs enhancement to cover standard oidc claims.
FAPI2: Advanced Authorization
bug minor resolved
#499: Re structure FAPI2 baseline
FAPI2: Security Profile
bug major resolved
#501: Clarify that authorization response encryption is not required for FAPI2 + Message signing / JARM
FAPI2: Message Signing
enhancement minor resolved
#498: Rename "FAPI2: Advanced Authorization"
FAPI2: Advanced Authorization
bug major resolved
#500: Signal that FAPI2 can work with client credentials grant
FAPI2: Security Profile
bug major resolved
#401: Use of the phrase "non-repudiation"
FAPI2: Message Signing
bug major resolved
#491: Link attacker model to FAPI 2 Advanced
FAPI2: Message Signing
bug major resolved
#477: FAPI2 + dpop nonces
FAPI2: Security Profile
bug major resolved
  2. 1
  3. 2
  4. …
  5. 16
  6. 17
  7. 18
  8. 19
  9. 20
  10. 21
  11. …
  12. 33
  13. 34