1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (1–25 of 508)

Title T P Status Votes Assignee Milestone Created Updated Actions
#673: Additional author(s) for FAPI2
FAPI2: Security Profile
bug major resolved 3
#660: Define requirements for OpenAPI FAPI securityScheme type
Others
proposal major open 2
#404: Interoperability: Validation of tls_client_auth_subject_dn using RFC7591
FAPI2: DCR & DCM
bug major new 2
#155: Support authorization and identity federation use cases for the same client_id
FAPI 1: Advanced
proposal major resolved 2
#674: length of nonce tested in OP conformance tests
FAPI2: Security Profile
bug major resolved 1
#487: RS must check x-fapi-interaction-id is an UUID or IP address
Implementation & Deployment Advice
bug major open 1
#403: proposed new FAPI certification test: private_key_jwt client authentication assertion where aud contains multiple values
FAPI 1: Advanced
proposal major resolved 1
#398: new certification check: aud in client assertions is issuer
FAPI 1: Advanced
bug major resolved 1
#353: FAPI for Berlin Group openFinance Framework
Others
proposal major resolved 1
#253: Pushed Request Object - Signed request object shouldn't be used for client authentication
Pushed Request Uri
proposal major resolved 1
#379: lifetime of grant_id
Grant Management
bug major resolved 1
#442: Grant vs Consent confusion
Grant Management
enhancement major resolved 1
#208: Part 2 should limit allowed JWE algorithms
FAPI 1: Advanced
bug major closed 1
#199: CIBA - which modes to support
CIBA
bug major resolved 1
#11: OAuth Profile should mandate RFC7636 (PKCE) for code flow
FAPI 1: Baseline
proposal major closed 1
#670: Use of FAPI with mandatory MTLS
FAPI2: Security Profile
bug major resolved
#651: Avoid "should be" and "shall be" where possible
FAPI2: Security Profile
bug major resolved
#679: (ed) replace (this) specification with (this) document
FAPI2: Security Profile
bug major resolved
#642: Continuation of #619 -- Add some text to make the readers aware of the caveats.
FAPI2: Security Profile
bug major resolved
#550: Should Network Layer Protections be made server-side enforced?
FAPI2: Security Profile
bug major resolved
#682: Clarify allowed use of `state` and required CSRF protection in FAPI 2.0 SP
FAPI2: Security Profile
proposal major resolved
#688: Simplifying the usage of FAPI-CIBA and FAPI 2 profiles together
FAPI2: Security Profile
proposal major new
#685: Use of TLS 1.2 Ciphers
FAPI2: Security Profile
bug major new
#689: FAPI + FedCM
bug major new
#633: Implementations of FAPI2 Message Signing - Particularly HTTP Message Signatures
FAPI2: Message Signing
task major new
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6
  8. …
  9. 20
  10. 21