openid / fapi / issues

Title	T	P	Status	Assignee	Milestone	Created	Updated
#97: "alg" MUST not be "none" FAPI 1: Advanced	bug	major	resolved			2017-05-16	2017-05-16
#72: Spec not clear as to which auth flows are supported FAPI 1: Advanced	proposal	major	closed			2017-03-02	2017-05-13
#88: Sender constraining the code FAPI 1: Advanced	bug	major	invalid			2017-05-03	2017-05-13
#89: s_hash needs to be defined more precisely FAPI 1: Advanced	bug	major	invalid			2017-05-03	2017-05-13
#93: Not clear why AS needs to support signed+encrypted ID Token FAPI 1: Advanced	bug	major	resolved			2017-05-06	2017-05-13
#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs FAPI 1: Baseline	bug	major	closed			2017-04-12	2017-05-10
#75: Support other method of HoK than TOKB FAPI 1: Advanced	bug	major	closed	Nat Sakimura		2017-03-03	2017-05-10
#74: Write spec should only support confidential clients FAPI 1: Advanced	proposal	major	resolved			2017-03-02	2017-04-26
#85: Make the bullets in the provisions numbered FAPI 1: Baseline	bug	major	resolved	Nat Sakimura		2017-04-13	2017-04-14
#79: Part 1: issues with x-fapi-customer-last-logged-time header FAPI 1: Baseline	bug	major	closed			2017-03-22	2017-04-06
#61: Fund availability API Part 5: Protected Resources - RW	task	major	on hold			2017-01-17	2017-04-04
#73: Spec says Authorization Server shall support both public and confidential clients; FAPI 1: Advanced	bug	major	closed			2017-03-02	2017-03-29
#63: There is no qualification on x-fapi-customer-id FAPI 1: Baseline	bug	major	closed	Nat Sakimura		2017-01-30	2017-02-03
#70: "User-agents" in 5.2.3 confusing. FAPI 1: Baseline	bug	major	resolved			2017-02-01	2017-02-02
#68: Privacy consideration should be talking about more specifics FAPI 1: Baseline	bug	major	resolved	Nat Sakimura		2017-01-31	2017-02-02
#66: CustomerId == sub == x-fapi-customer-id: Should standardize as sub FAPI 1: Baseline	bug	major	resolved	Nat Sakimura		2017-01-31	2017-02-02
#69: Notes like this are strange “NOTE: Providing access to Javascript clients or not has different security properites.;” FAPI 1: Baseline	bug	major	closed	Sascha Preibisch		2017-01-31	2017-02-02
#64: "non monotonically increasing" does not cover all cases FAPI 1: Baseline	bug	major	resolved	Nat Sakimura		2017-01-31	2017-02-02
#62: Scope is not specific enough FAPI 1: Baseline	bug	major	resolved	Nat Sakimura		2017-01-30	2017-02-02
#67: CustomerId is not defined. FAPI 1: Baseline	bug	major	resolved	Nat Sakimura		2017-01-31	2017-02-02
#65: user-agent header requirement is not a security feature FAPI 1: Baseline	bug	major	resolved	Nat Sakimura		2017-01-31	2017-02-02
#42: WD2:Part 1: Add ISO/IEC 29134 etc. to the bibliography FAPI 1: Baseline	bug	major	resolved	Nat Sakimura	R2 - Nov 2016	2016-11-29	2016-12-16
#40: 2nd WD: Part 1: 6.2.1: Constraint on the InteractionId string uncliear FAPI 1: Baseline	bug	major	resolved	Edmund Jay		2016-11-29	2016-12-16
#26: Error coding and API IDs should be added (Sascha) Others	enhancement	major	resolved	Nat Sakimura		2016-08-23	2016-12-06
#12: OAuth Profile should mandate per AS redirect URI for Clients with session comparison FAPI 1: Baseline	proposal	major	resolved	Nat Sakimura		2016-08-02	2016-12-06

#97: "alg" MUST not be "none"

FAPI 1: Advanced

bug

major

resolved

2017-05-16

#72: Spec not clear as to which auth flows are supported

FAPI 1: Advanced

proposal

major

closed

2017-03-02

2017-05-13

#88: Sender constraining the code

FAPI 1: Advanced

bug

major

invalid

2017-05-03

2017-05-13

#89: s_hash needs to be defined more precisely

FAPI 1: Advanced

bug

major

invalid

2017-05-03

2017-05-13

#93: Not clear why AS needs to support signed+encrypted ID Token

FAPI 1: Advanced

bug

major

resolved

2017-05-06

2017-05-13

#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs

FAPI 1: Baseline

bug

major

closed

2017-04-12

2017-05-10

#75: Support other method of HoK than TOKB

FAPI 1: Advanced

bug

major

closed

Nat Sakimura

2017-03-03

2017-05-10

#74: Write spec should only support confidential clients

FAPI 1: Advanced

proposal

major

resolved

2017-03-02

2017-04-26

#85: Make the bullets in the provisions numbered

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-04-13

2017-04-14

#79: Part 1: issues with x-fapi-customer-last-logged-time header

FAPI 1: Baseline

bug

major

closed

2017-03-22

2017-04-06

#61: Fund availability API

Part 5: Protected Resources - RW

task

major

on hold

2017-01-17

2017-04-04

#73: Spec says Authorization Server shall support both public and confidential clients;

FAPI 1: Advanced

bug

major

closed

2017-03-02

2017-03-29

#63: There is no qualification on x-fapi-customer-id

FAPI 1: Baseline

bug

major

closed

Nat Sakimura

2017-01-30

2017-02-03

#70: "User-agents" in 5.2.3 confusing.

FAPI 1: Baseline

bug

major

resolved

2017-02-01

2017-02-02

#68: Privacy consideration should be talking about more specifics

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-01-31

2017-02-02

#66: CustomerId == sub == x-fapi-customer-id: Should standardize as sub

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-01-31

2017-02-02

#69: Notes like this are strange “NOTE: Providing access to Javascript clients or not has different security properites.;”

FAPI 1: Baseline

bug

major

closed

Sascha Preibisch

2017-01-31

2017-02-02

#64: "non monotonically increasing" does not cover all cases

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-01-31

2017-02-02

#62: Scope is not specific enough

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-01-30

2017-02-02

#67: CustomerId is not defined.

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-01-31

2017-02-02

#65: user-agent header requirement is not a security feature

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-01-31

2017-02-02

#42: WD2:Part 1: Add ISO/IEC 29134 etc. to the bibliography

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

R2 - Nov 2016

2016-11-29

2016-12-16

#40: 2nd WD: Part 1: 6.2.1: Constraint on the InteractionId string uncliear

FAPI 1: Baseline

bug

major

resolved

Edmund Jay

2016-11-29

2016-12-16

#26: Error coding and API IDs should be added (Sascha)

Others

enhancement

major

resolved

Nat Sakimura

2016-08-23

2016-12-06

#12: OAuth Profile should mandate per AS redirect URI for Clients with session comparison

FAPI 1: Baseline

proposal

major

resolved

Nat Sakimura

2016-08-02

2016-12-06

Issues

Issues (501–525 of 539)