1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (126–150 of 377)

Title T P Status Votes Assignee Milestone Created Updated Actions
#567: "Clause 20" does not exist any longer...
FAPI2: Security Profile
bug major resolved
#566: Some of the documents in Informative references are actually required so need to be moved to Normative reference
FAPI2: Message Signing
bug major closed
#212: FAPI-CIBA; should id_token tie itself to the auth request?
CIBA
bug major open
#229: FAPI CIBA and ID Tokens
CIBA
bug major open
#420: Multi Party Consents
Grant Management
bug major open
#489: Align FAPI-CIBA to FAPI2-baseline/advanced
CIBA
bug major open
#556: Add reference to IETF cross device security doc
CIBA
bug major open
#540: Use of eKYC-IDA spec with CIBA/FAPI-CIBA
CIBA
bug major resolved
#548: Proposed new FAPI1-Adv test: consistent sub from different authorisations for same client
FAPI 1: Advanced
bug major resolved
#508: Security goals requirements ("shalls") may need to be relaxed/reworded
FAPI2: Attacker Model
bug major resolved
#542: A7 Attacker Clarification
FAPI2: Attacker Model
bug major resolved
#543: Browser swap attack explained on 2022-09-28
FAPI2: Security Profile
bug major resolved
#535: Attackers A7/A8 break session integrity
FAPI2: Security Profile
bug major resolved
#504: Attacker Model - Browsers and Endpoints
FAPI2: Attacker Model
bug major resolved
#520: Versioning for first draft of FAPI2-Advanced
FAPI2: Message Signing
bug major closed
#546: lower limit on request_uri lifetime in FAPI2 may be too short
FAPI2: Security Profile
bug major resolved
#531: Insert "2. Normative references" to comply with ISODIR2
FAPI2: Security Profile
bug major resolved
#539: Access token lifetime
FAPI2: Security Profile
bug major resolved
#534: Authorization Request Leaks lead to CSRF
FAPI2: Security Profile
bug major resolved
#503: DPoP, PAR and Authorization Code binding
FAPI2: Security Profile
bug major resolved
#538: Lifetime of authorization codes
FAPI2: Security Profile
bug major resolved
#526: Decide on B. Access Token Injection with ID Token Replay
FAPI2: Security Profile
bug major resolved
#533: DPoP & resource leaks
FAPI2: Security Profile
bug major resolved
#507: FAPI2S 4.5 Differences to FAPI 1.0
FAPI2: Security Profile
bug major resolved
#536: Discovery should be mandated for clients
FAPI2: Security Profile
bug major resolved
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6
  8. 7
  9. 8
  10. …
  11. 15
  12. 16