1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (51–75 of 107)

Title T P Status Votes Assignee Milestone Created Updated Actions
#194: Security considerations when two (oauth-mtls?) clients use same key
FAPI 1: Advanced
bug major resolved
#239: FAPI part 2 should mention/require discovery?
FAPI 1: Advanced
proposal major resolved
#255: certification clarification request: location of discovery document
FAPI 1: Advanced
bug major resolved
#292: PKCE inconsistencies between Part 1 and Part 2
FAPI 1: Advanced
bug major resolved
#279: document key selection algorithm
FAPI 1: Advanced
bug major resolved
#262: should long lived access tokens be permitted
FAPI 1: Baseline
enhancement major resolved
#205: Add requirement for Client to verify state matches session
FAPI 1: Advanced
bug major resolved
#227: Add intro to FAPI RW - to explain that we don't support public clients
FAPI 1: Advanced
bug major resolved
#299: "In addition, the confidential client for write operations" causes confusion
FAPI 1: Advanced
bug major resolved
#203: Guidance around jwks and jwks_uri
FAPI 1: Advanced
bug major resolved
#277: FAPI-RW: Is disallowing signed id_tokens allowed? (i.e. always used signed+encrypted)
FAPI 1: Advanced
bug major resolved
#110: more definition of s_hash
FAPI 1: Advanced
bug major resolved
#180: Behaviour of AS when presented with a non-uuid x-fapi-interaction-id is not clearly defined
FAPI 1: Baseline
bug major resolved
#294: x-fapi-customer-ip-address should probably have an example for ipv6
FAPI 1: Baseline
bug major resolved
#170: Remove Public Client Support
FAPI 1: Baseline
proposal major resolved
#175: Clarify attacker model (PKCE method and CSRF protection)
FAPI 1: Baseline
enhancement major resolved
#220: [BIS] Clarify attacker model (PKCE method and CSRF protection)
FAPI 1: Baseline
enhancement major resolved
#275: Adopt PAR & RAR as recommended way to convey authorization data
FAPI 1: Advanced
bug major resolved
#186: BCP for OAuth 2.0 for Native Apps clause wording could be improved
FAPI 1: Baseline
bug major resolved
#100: Signing API response payloads
FAPI 1: Baseline
enhancement major resolved
#200: CIBA: Signed Authentication Request
CIBA
proposal major resolved
#158: FAPI part 2 - request object for public clients (signing key?)
FAPI 1: Advanced
bug major resolved
#201: CIBA: acr/amr alignment
CIBA
proposal major closed
#146: CIBA - Fraud Indicator Standards and Signed Communication Mechanism of them.
CIBA
task major closed
#174: CIBA: End-user Identifiers
CIBA
proposal major closed
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5