openid / fapi / issues

Title	T	P	Status	Assignee	Created	Updated
#113: awkward logic around client support for OAUTB or MTLS FAPI 1: Advanced	bug	minor	resolved		2017-07-06	2017-07-15
#111: MTLS only for Protected resources provisions? FAPI 1: Advanced	bug	major	resolved		2017-07-06	2017-07-15
#108: update Mutual TLS reference in Part 1 FAPI 1: Baseline	bug	major	resolved		2017-07-06	2017-07-15
#107: Content-type header in HTTP response from resource server FAPI 1: Baseline	proposal	minor	resolved		2017-07-04	2017-07-15
#105: RFC6736 incorrectly referenced in Foreword FAPI 1: Advanced	bug	major	resolved		2017-07-03	2017-07-06
#106: the s in s_hash is for state not code FAPI 1: Advanced	bug	minor	resolved		2017-07-03	2017-07-04
#96: Uncertainty around the resource server's handling of the access token FAPI 1: Advanced	bug	major	resolved	Nat Sakimura	2017-05-10	2017-05-28
#60: Only one method to Token Bind AT rather than two? FAPI 1: Advanced	task	critical	closed		2017-01-16	2017-05-28
#98: Move note regarding URN from 7.3 to 7.1 FAPI 1: Advanced	bug	major	resolved		2017-05-16	2017-05-28
#91: Id mix up attack FAPI 1: Advanced	bug	major	resolved		2017-05-06	2017-05-28
#78: Malicious Endpoint Attack FAPI 1: Advanced	enhancement	minor	closed		2017-03-17	2017-05-28
#77: IdP Confusion Attack FAPI 1: Advanced	enhancement	minor	closed		2017-03-17	2017-05-28
#92: Put cipher suite recommendations in the security considerations FAPI 1: Advanced	bug	major	closed	Edmund Jay	2017-05-06	2017-05-28
#99: Part 2: TLS considerations section may be ambiguous FAPI 1: Advanced	bug	major	closed		2017-05-24	2017-05-25
#87: Need create request_uri endpoint in AS FAPI 1: Advanced	enhancement	major	closed		2017-05-01	2017-05-16
#97: "alg" MUST not be "none" FAPI 1: Advanced	bug	major	resolved		2017-05-16	2017-05-16
#72: Spec not clear as to which auth flows are supported FAPI 1: Advanced	proposal	major	closed		2017-03-02	2017-05-13
#88: Sender constraining the code FAPI 1: Advanced	bug	major	invalid		2017-05-03	2017-05-13
#89: s_hash needs to be defined more precisely FAPI 1: Advanced	bug	major	invalid		2017-05-03	2017-05-13
#93: Not clear why AS needs to support signed+encrypted ID Token FAPI 1: Advanced	bug	major	resolved		2017-05-06	2017-05-13
#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs FAPI 1: Baseline	bug	major	closed		2017-04-12	2017-05-10
#75: Support other method of HoK than TOKB FAPI 1: Advanced	bug	major	closed	Nat Sakimura	2017-03-03	2017-05-10
#74: Write spec should only support confidential clients FAPI 1: Advanced	proposal	major	resolved		2017-03-02	2017-04-26
#83: Support for GET FAPI 1: Baseline	enhancement	trivial	resolved		2017-03-23	2017-04-25
#85: Make the bullets in the provisions numbered FAPI 1: Baseline	bug	major	resolved	Nat Sakimura	2017-04-13	2017-04-14

#113: awkward logic around client support for OAUTB or MTLS

FAPI 1: Advanced

bug

minor

resolved

2017-07-06

2017-07-15

#111: MTLS only for Protected resources provisions?

FAPI 1: Advanced

bug

major

resolved

2017-07-06

2017-07-15

#108: update Mutual TLS reference in Part 1

FAPI 1: Baseline

bug

major

resolved

2017-07-06

2017-07-15

#107: Content-type header in HTTP response from resource server

FAPI 1: Baseline

proposal

minor

resolved

2017-07-04

2017-07-15

#105: RFC6736 incorrectly referenced in Foreword

FAPI 1: Advanced

bug

major

resolved

2017-07-03

2017-07-06

#106: the s in s_hash is for state not code

FAPI 1: Advanced

bug

minor

resolved

2017-07-03

2017-07-04

#96: Uncertainty around the resource server's handling of the access token

FAPI 1: Advanced

bug

major

resolved

Nat Sakimura

2017-05-10

2017-05-28

#60: Only one method to Token Bind AT rather than two?

FAPI 1: Advanced

task

critical

closed

2017-01-16

2017-05-28

#98: Move note regarding URN from 7.3 to 7.1

FAPI 1: Advanced

bug

major

resolved

2017-05-16

2017-05-28

#91: Id mix up attack

FAPI 1: Advanced

bug

major

resolved

2017-05-06

2017-05-28

#78: Malicious Endpoint Attack

FAPI 1: Advanced

enhancement

minor

closed

2017-03-17

2017-05-28

#77: IdP Confusion Attack

FAPI 1: Advanced

enhancement

minor

closed

2017-03-17

2017-05-28

#92: Put cipher suite recommendations in the security considerations

FAPI 1: Advanced

bug

major

closed

Edmund Jay

2017-05-06

2017-05-28

#99: Part 2: TLS considerations section may be ambiguous

FAPI 1: Advanced

bug

major

closed

2017-05-24

2017-05-25

#87: Need create request_uri endpoint in AS

FAPI 1: Advanced

enhancement

major

closed

2017-05-01

2017-05-16

#97: "alg" MUST not be "none"

FAPI 1: Advanced

bug

major

resolved

2017-05-16

#72: Spec not clear as to which auth flows are supported

FAPI 1: Advanced

proposal

major

closed

2017-03-02

2017-05-13

#88: Sender constraining the code

FAPI 1: Advanced

bug

major

invalid

2017-05-03

2017-05-13

#89: s_hash needs to be defined more precisely

FAPI 1: Advanced

bug

major

invalid

2017-05-03

2017-05-13

#93: Not clear why AS needs to support signed+encrypted ID Token

FAPI 1: Advanced

bug

major

resolved

2017-05-06

2017-05-13

#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs

FAPI 1: Baseline

bug

major

closed

2017-04-12

2017-05-10

#75: Support other method of HoK than TOKB

FAPI 1: Advanced

bug

major

closed

Nat Sakimura

2017-03-03

2017-05-10

#74: Write spec should only support confidential clients

FAPI 1: Advanced

proposal

major

resolved

2017-03-02

2017-04-26

#83: Support for GET

FAPI 1: Baseline

enhancement

trivial

resolved

2017-03-23

2017-04-25

#85: Make the bullets in the provisions numbered

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-04-13

2017-04-14

Issues

Issues (601–625 of 677)