1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (1–20 of 20)

Title T P Status Votes Assignee Milestone Created Updated Actions
#682: Clarify allowed use of `state` and required CSRF protection in FAPI 2.0 SP
FAPI2: Security Profile
proposal major resolved
#674: length of nonce tested in OP conformance tests
FAPI2: Security Profile
bug major resolved 1
#659: No normative statement on id_token encryption
FAPI2: Security Profile
bug major resolved
#651: Avoid "should be" and "shall be" where possible
FAPI2: Security Profile
bug major resolved
#631: shall vs shall only
FAPI2: Security Profile
bug minor resolved
#603: Require servers to allow for clock skew
FAPI2: Security Profile
bug major resolved
#579: FAPI2SP: Note about client assertion audience looks misleading
FAPI2: Security Profile
bug major resolved
#577: FAPI2SP appears to permit response_types "id_token", "id_token token" and "none"
FAPI2: Security Profile
bug minor resolved
#562: Scope needs clarification
FAPI2: Security Profile
bug major resolved
#554: Mention U of Stuttgart researchers in Acknowledgements
FAPI2: Security Profile
bug major resolved
#544: FAPI1 vs FAPI2 blog post should be updated
FAPI2: Security Profile
task major resolved
#534: Authorization Request Leaks lead to CSRF
FAPI2: Security Profile
bug major resolved
#500: Signal that FAPI2 can work with client credentials grant
FAPI2: Security Profile
bug major resolved
#499: Re structure FAPI2 baseline
FAPI2: Security Profile
bug major resolved
#497: RS Clauses re access token
FAPI2: Security Profile
bug major resolved
#476: is response_type=code id_token permitted in FAPI2 Baseline?
FAPI2: Security Profile
bug minor resolved
#474: "shall use the authorization code grant described in [RFC6749]" could be clearer
FAPI2: Security Profile
bug minor resolved
#473: FAPI2 JWS alg choices are much wider than FAPI1
FAPI2: Security Profile
bug major resolved
#417: Shall require introspection of claims
FAPI2: Security Profile
bug major resolved
#348: FAPI2 Release Communication
FAPI2: Security Profile
enhancement major resolved