1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (176–200 of 505)

Title T P Status Votes Assignee Milestone Created Updated Actions
#535: Attackers A7/A8 break session integrity
FAPI2: Security Profile
bug major resolved
#504: Attacker Model - Browsers and Endpoints
FAPI2: Attacker Model
bug major resolved
#545: FAPI2SP vs FAPI1 table has incorrect value for request_uri lifetime
FAPI2: Security Profile
bug minor resolved
#523: Rotation of Refresh token - Compromised client highlighted by AU - CDR Independent review.
FAPI2: Security Profile
proposal critical resolved
#546: lower limit on request_uri lifetime in FAPI2 may be too short
FAPI2: Security Profile
bug major resolved
#531: Insert "2. Normative references" to comply with ISODIR2
FAPI2: Security Profile
bug major resolved
#539: Access token lifetime
FAPI2: Security Profile
bug major resolved
#534: Authorization Request Leaks lead to CSRF
FAPI2: Security Profile
bug major resolved
#503: DPoP, PAR and Authorization Code binding
FAPI2: Security Profile
bug major resolved
#538: Lifetime of authorization codes
FAPI2: Security Profile
bug major resolved
#526: Decide on B. Access Token Injection with ID Token Replay
FAPI2: Security Profile
bug major resolved
#533: DPoP & resource leaks
FAPI2: Security Profile
bug major resolved
#505: Create security and privacy consideration for FAPI 2.0 Security Profile
FAPI2: Security Profile
bug critical resolved
#507: FAPI2S 4.5 Differences to FAPI 1.0
FAPI2: Security Profile
bug major resolved
#536: Discovery should be mandated for clients
FAPI2: Security Profile
bug major resolved
#530: Privacy consideration is missing
FAPI2: Security Profile
bug major resolved
#525: Decide on what to do for A. Cuckoo’s Token Attack
FAPI2: Security Profile
bug major resolved
#529: Applicability of Security BCP to FAPI 2.0
FAPI2: Security Profile
proposal minor resolved
#528: C. PKCE Chosen Challenge Attack
FAPI2: Security Profile
bug major resolved
#416: RAR if scope *and* claims param not expressive enough
FAPI2: Advanced Authorization
bug major resolved
#484: Key management in FAPI2 Advanced
FAPI2: Message Signing
bug major resolved
#512: Protocol run identifier such as nonce or PKCE should be required
JARM
bug major resolved
#509: 2.3.1 Note in Response Mode "query.jwt"
JARM
bug major resolved
#513: Is missing "Privacy consideration" OK?
JARM
bug major resolved
#515: Small "may" in the last paragraph of Clause 3. Client Metadata
JARM
bug major resolved
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6
  8. 7
  9. 8
  10. 9
  11. 10
  12. …
  13. 20
  14. 21