1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (1–25 of 83)

Title T P Status Votes Assignee Milestone Created Updated Actions
#682: Clarify allowed use of `state` and required CSRF protection in FAPI 2.0 SP
FAPI2: Security Profile
proposal major resolved
#674: length of nonce tested in OP conformance tests
FAPI2: Security Profile
bug major resolved 1
#659: No normative statement on id_token encryption
FAPI2: Security Profile
bug major resolved
#651: Avoid "should be" and "shall be" where possible
FAPI2: Security Profile
bug major resolved
#625: Changes to introduction of http signing section
FAPI2: Message Signing
bug major resolved
#622: Review FAPI1 security considerations for clarity
FAPI 1: Advanced
bug major new
#621: FAPI CIBA
CIBA
bug major new
#609: CIBA - Make clear limitation of binding message
CIBA
bug major open
#608: Make clear that requests and responses to resource servers don't have to be bound
FAPI2: Message Signing
bug major resolved
#603: Require servers to allow for clock skew
FAPI2: Security Profile
bug major resolved
#602: "Client" is misleading in the context of signed introspection responses
FAPI2: Message Signing
proposal major resolved
#596: Non Repudiation
FAPI2: Message Signing
bug major resolved
#595: Using OIDC Federation and FAPI together
bug major new
#594: Value of JARM for non-repudiation
FAPI2: Message Signing
bug major resolved
#580: FAPI CIBA
bug major open
#579: FAPI2SP: Note about client assertion audience looks misleading
FAPI2: Security Profile
bug major resolved
#575: Issue with http sig request/response binding
FAPI2: Message Signing
bug major resolved
#562: Scope needs clarification
FAPI2: Security Profile
bug major resolved
#561: Intro need to be fixed
FAPI2: Message Signing
bug major resolved
#559: Co-ordinate a joint call with Modrna WG on claims parameter for CIBA
CIBA
bug major new
#554: Mention U of Stuttgart researchers in Acknowledgements
FAPI2: Security Profile
bug major resolved
#544: FAPI1 vs FAPI2 blog post should be updated
FAPI2: Security Profile
task major resolved
#534: Authorization Request Leaks lead to CSRF
FAPI2: Security Profile
bug major resolved
#521: Change name and file name of FAPI 2 Advanced to FAPI 2 Message Signing
FAPI2: Message Signing
bug major resolved
#500: Signal that FAPI2 can work with client credentials grant
FAPI2: Security Profile
bug major resolved
  2. 1
  3. 2
  4. 3
  5. 4