openid / fapi / issues

Title	T	P	Status	Assignee	Created	Updated
#86: The read only spec should not contain 'if possible' in section 5.2.2 FAPI 1: Baseline	enhancement	major	closed	Joseph Heenan	2017-04-25	2019-08-21
#85: Make the bullets in the provisions numbered FAPI 1: Baseline	bug	major	resolved	Nat Sakimura	2017-04-13	2017-04-14
#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs FAPI 1: Baseline	bug	major	closed		2017-04-12	2017-05-10
#83: Support for GET FAPI 1: Baseline	enhancement	trivial	resolved		2017-03-23	2017-04-25
#82: Strict Access Control to logs FAPI 1: Baseline	enhancement	minor	resolved		2017-03-23	2017-12-20
#81: Identify user associated to the access token FAPI 1: Baseline	enhancement	minor	resolved		2017-03-23	2017-12-20
#80: Token Response FAPI 1: Baseline	enhancement	trivial	resolved		2017-03-23	2017-12-21
#79: Part 1: issues with x-fapi-customer-last-logged-time header FAPI 1: Baseline	bug	major	closed		2017-03-22	2017-04-06
#78: Malicious Endpoint Attack FAPI 1: Advanced	enhancement	minor	closed		2017-03-17	2017-05-28
#77: IdP Confusion Attack FAPI 1: Advanced	enhancement	minor	closed		2017-03-17	2017-05-28
#76: meaning of 'can'? FAPI 1: Baseline	bug	minor	resolved		2017-03-14	2017-03-23
#75: Support other method of HoK than TOKB FAPI 1: Advanced	bug	major	closed	Nat Sakimura	2017-03-03	2017-05-10
#74: Write spec should only support confidential clients FAPI 1: Advanced	proposal	major	resolved		2017-03-02	2017-04-26
#73: Spec says Authorization Server shall support both public and confidential clients; FAPI 1: Advanced	bug	major	closed		2017-03-02	2017-03-29
#72: Spec not clear as to which auth flows are supported FAPI 1: Advanced	proposal	major	closed		2017-03-02	2017-05-13
#71: (ed) The heading level of 6.2.3 is wrong FAPI 1: Baseline	bug	minor	resolved	Nat Sakimura	2017-02-03	2017-02-08
#70: "User-agents" in 5.2.3 confusing. FAPI 1: Baseline	bug	major	resolved		2017-02-01	2017-02-02
#69: Notes like this are strange “NOTE: Providing access to Javascript clients or not has different security properites.;” FAPI 1: Baseline	bug	major	closed	Sascha Preibisch	2017-01-31	2017-02-02
#68: Privacy consideration should be talking about more specifics FAPI 1: Baseline	bug	major	resolved	Nat Sakimura	2017-01-31	2017-02-02
#67: CustomerId is not defined. FAPI 1: Baseline	bug	major	resolved	Nat Sakimura	2017-01-31	2017-02-02
#66: CustomerId == sub == x-fapi-customer-id: Should standardize as sub FAPI 1: Baseline	bug	major	resolved	Nat Sakimura	2017-01-31	2017-02-02
#65: user-agent header requirement is not a security feature FAPI 1: Baseline	bug	major	resolved	Nat Sakimura	2017-01-31	2017-02-02
#64: "non monotonically increasing" does not cover all cases FAPI 1: Baseline	bug	major	resolved	Nat Sakimura	2017-01-31	2017-02-02
#63: There is no qualification on x-fapi-customer-id FAPI 1: Baseline	bug	major	closed	Nat Sakimura	2017-01-30	2017-02-03
#62: Scope is not specific enough FAPI 1: Baseline	bug	major	resolved	Nat Sakimura	2017-01-30	2017-02-02

#86: The read only spec should not contain 'if possible' in section 5.2.2

FAPI 1: Baseline

enhancement

major

closed

Joseph Heenan

2017-04-25

2019-08-21

#85: Make the bullets in the provisions numbered

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-04-13

2017-04-14

#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs

FAPI 1: Baseline

bug

major

closed

2017-04-12

2017-05-10

#83: Support for GET

FAPI 1: Baseline

enhancement

trivial

resolved

2017-03-23

2017-04-25

#82: Strict Access Control to logs

FAPI 1: Baseline

enhancement

minor

resolved

2017-03-23

2017-12-20

#81: Identify user associated to the access token

FAPI 1: Baseline

enhancement

minor

resolved

2017-03-23

2017-12-20

#80: Token Response

FAPI 1: Baseline

enhancement

trivial

resolved

2017-03-23

2017-12-21

#79: Part 1: issues with x-fapi-customer-last-logged-time header

FAPI 1: Baseline

bug

major

closed

2017-03-22

2017-04-06

#78: Malicious Endpoint Attack

FAPI 1: Advanced

enhancement

minor

closed

2017-03-17

2017-05-28

#77: IdP Confusion Attack

FAPI 1: Advanced

enhancement

minor

closed

2017-03-17

2017-05-28

#76: meaning of 'can'?

FAPI 1: Baseline

bug

minor

resolved

2017-03-14

2017-03-23

#75: Support other method of HoK than TOKB

FAPI 1: Advanced

bug

major

closed

Nat Sakimura

2017-03-03

2017-05-10

#74: Write spec should only support confidential clients

FAPI 1: Advanced

proposal

major

resolved

2017-03-02

2017-04-26

#73: Spec says Authorization Server shall support both public and confidential clients;

FAPI 1: Advanced

bug

major

closed

2017-03-02

2017-03-29

#72: Spec not clear as to which auth flows are supported

FAPI 1: Advanced

proposal

major

closed

2017-03-02

2017-05-13

#71: (ed) The heading level of 6.2.3 is wrong

FAPI 1: Baseline

bug

minor

resolved

Nat Sakimura

2017-02-03

2017-02-08

#70: "User-agents" in 5.2.3 confusing.

FAPI 1: Baseline

bug

major

resolved

2017-02-01

2017-02-02

#69: Notes like this are strange “NOTE: Providing access to Javascript clients or not has different security properites.;”

FAPI 1: Baseline

bug

major

closed

Sascha Preibisch

2017-01-31

2017-02-02

#68: Privacy consideration should be talking about more specifics

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-01-31

2017-02-02

#67: CustomerId is not defined.

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-01-31

2017-02-02

#66: CustomerId == sub == x-fapi-customer-id: Should standardize as sub

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-01-31

2017-02-02

#65: user-agent header requirement is not a security feature

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-01-31

2017-02-02

#64: "non monotonically increasing" does not cover all cases

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-01-31

2017-02-02

#63: There is no qualification on x-fapi-customer-id

FAPI 1: Baseline

bug

major

closed

Nat Sakimura

2017-01-30

2017-02-03

#62: Scope is not specific enough

FAPI 1: Baseline

bug

major

resolved

Nat Sakimura

2017-01-30

2017-02-02

Issues

Issues (601–625 of 686)