1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (576–600 of 695)

Title T P Status Votes Assignee Milestone Created Updated Actions
#152: request objects should have iat and exp
FAPI 1: Advanced
bug major resolved
#162: does part 2 allow client_secret_jwt?
FAPI 1: Advanced
bug major resolved
#156: FAPI part 2 - request_uri mandatory or optional?
FAPI 1: Advanced
bug minor resolved
#131: client_id supplied in request body should match the one supplied elsewhere
FAPI 1: Baseline
bug major resolved
#157: FAPI part 2 - public clients and mTLS
FAPI 1: Advanced
enhancement major resolved
#150: Mandate at_hash check in the ID Token from the token endpoint
FAPI 1: Advanced
bug major closed
#143: Guidance required for decoupled
FAPI 1: Advanced
bug major closed
#11: OAuth Profile should mandate RFC7636 (PKCE) for code flow
FAPI 1: Baseline
proposal major closed 1
#141: Remove x-fapi-financial-id
FAPI 1: Advanced
bug major closed
#132: Requirement on token lengths may less than core OAuth requires
FAPI 1: Baseline
bug major resolved
#139: treatment of returned scopes divergent from RFC 6749
FAPI 1: Baseline
bug major wontfix
#134: Should we define a discovery metadata for request object endpoint
FAPI 1: Advanced
bug major resolved
#138: Question: Is including openid in the scope required?
FAPI 1: Baseline
proposal trivial resolved
#136: responsibility
FAPI 1: Advanced
bug major closed
#137: Eliminate use of public clients
FAPI 1: Advanced
bug major closed
#130: we could be clearer about which id_token s_hash is required in
FAPI 1: Advanced
bug major resolved
#114: Require `state`
FAPI 1: Baseline
bug major resolved
#128: redirect_uri in url query vs request object
FAPI 1: Baseline
bug major resolved
#129: TLS cipher restrictions should be relaxed for the authorise endpoint
FAPI 1: Baseline
bug major resolved
#6: Create Write Access Security Profile
FAPI 1: Baseline
task major resolved
#5: Create Read Only Security Profile
FAPI 1: Baseline
task major closed
#21: Residual Data clause should be generalized and moved to privacy considerations
FAPI 1: Baseline
bug major closed
#22: Undefined OAuth response parameter "user_id" appears in the text
FAPI 1: Baseline
bug major closed
#38: Part 1 -- write acknowledgement
Part 4: Protected Resources - RO
bug major closed
#16: Client Authentication -- Do we need TLS mutual authentication?
FAPI 1: Baseline
proposal major resolved
  2. 1
  3. 2
  4. …
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26
  10. 27
  11. 28