1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (126–150 of 695)

Title T P Status Votes Assignee Milestone Created Updated Actions
#602: "Client" is misleading in the context of signed introspection responses
FAPI2: Message Signing
proposal major resolved
#617: Security issue in the JWT Response for OAuth Token Introspection specification
FAPI2: Message Signing
proposal major resolved
#490: Request for suggestions for tests for FAPI2-Baseline RP/client testing
Certification
bug minor open
#618: Certification/conformance: Strictness of checking error responses
bug major resolved
#495: Certification: Requirements for alg support in RPs/OPs
Certification
bug major resolved
#527: Create security note/consideration on B. Access Token Injection with ID Token Replay (FAPI 1.0 Advanced)
FAPI 1: Advanced
bug major resolved
#405: Inconsistent usage of http and https in references
FAPI 1: Advanced
enhancement minor resolved
#458: FAPI1 Part1: not clear as to which auth flows are supported
FAPI 1: Baseline
bug trivial resolved
#409: MTLS References should be updated
FAPI 1: Advanced
task trivial resolved
#620: Request for clarification on fapi1-advanced-final-par-pushed-authorization-url-as-audience-in-request-object test case
FAPI 1: Advanced
bug major resolved
#613: FAPI1A - Remove 5.2.4 and 5.2.5
FAPI 1: Advanced
bug minor resolved
#601: Title 8.1 is redundant
FAPI 1: Baseline
bug major resolved
#468: Normative references to drafts in FAPI 1.0 Advanced
FAPI 1: Advanced
bug major resolved
#428: Baseline: Clause 7.4.1 Talks about security issues with authorization requests and responses but incorrectly refers to encrypting authorization 'responses' not requests.
FAPI 1: Baseline
bug trivial resolved
#494: FAPI1Adv: Apparent inconsistency in RP requirements compared to OP requirements
FAPI 1: Advanced
bug major resolved
#475: certification: FAPI2-Baseline - is OpenID Connect support optional?
Certification
bug major resolved
#249: certification clarification request: acr_values_supported in discovery
Certification
bug major resolved
#610: Ability for AS to reject requests that have suspicious state/nonce or other params
Implementation & Deployment Advice
bug minor open
#615: FAPI1 refers to JARM draft
FAPI 1: Advanced
bug major duplicate
#429: FAPI Certification with Lodged Intent or RAR - User Consent vs Technical Process Certification.
Implementation & Deployment Advice
enhancement major open
#282: FAPI 2.0: x-fapi-* headers
Implementation & Deployment Advice
bug major open
#434: Certification Team Query: error messages shown by OPs
Implementation & Deployment Advice
bug major open
#327: Dynamic Client Registration & Management
Implementation & Deployment Advice
bug major open
#293: PKCE & Nonce Security Considerations
Implementation & Deployment Advice
bug major open
#223: Need of a customer unique/immutable identity as part of ID Token
Implementation & Deployment Advice
enhancement major open
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6
  8. 7
  9. 8
  10. …
  11. 27
  12. 28