1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (1–25 of 130)

Title T P Status Votes Assignee Milestone Created Updated Actions
#555: Tracking: Implementers of FAPI 1.0 and FAPI 2.0
FAPI2: Security Profile
task minor new
#598: Version identifier for FAPI 2.0
FAPI2: Security Profile
task major duplicate
#544: FAPI1 vs FAPI2 blog post should be updated
FAPI2: Security Profile
task major resolved
#431: FAPI 2.0 Baseline Attacker model not referenced.
FAPI2: Security Profile
task major resolved
#682: Clarify allowed use of `state` and required CSRF protection in FAPI 2.0 SP
FAPI2: Security Profile
proposal major resolved
#688: Simplifying the usage of FAPI-CIBA and FAPI 2 profiles together
FAPI2: Security Profile
proposal major new
#523: Rotation of Refresh token - Compromised client highlighted by AU - CDR Independent review.
FAPI2: Security Profile
proposal critical resolved
#529: Applicability of Security BCP to FAPI 2.0
FAPI2: Security Profile
proposal minor resolved
#336: FAPI 2 Baseline - Client types
FAPI2: Security Profile
proposal minor resolved
#492: EdDSA in FAPI 2.0
FAPI2: Security Profile
proposal minor resolved
#456: Proposal - should we remove support for refresh token rotation from FAPI 2.0 (one of the drafts)
FAPI2: Security Profile
proposal minor resolved
#173: Mix-up mitigation (defence in depth)
FAPI2: Security Profile
proposal minor resolved
#639: FAPI 2.0 Title Change - Add Part 1, Part 2, etc...
FAPI2: Security Profile
enhancement major resolved
#658: allow use of a future fully specified JWS algorithm identifier for EdDSA w/ Ed25519
FAPI2: Security Profile
enhancement major resolved
#574: FAPI 2 Basline - Interop Question Clarification over the use of PAR
FAPI2: Security Profile
enhancement major resolved
#522: optional ID Token signature validation for code flow
FAPI2: Security Profile
enhancement major resolved
#465: Align the chapter etc. structure to FAPI 1
FAPI2: Security Profile
enhancement major resolved
#348: FAPI2 Release Communication
FAPI2: Security Profile
enhancement major resolved
#486: oAuth 2.0 Authorization Server Issuer Identification References Need Updating
FAPI2: Security Profile
enhancement major resolved
#418: 303 should be used
FAPI2: Security Profile
enhancement major resolved
#352: nonce as PKCE alternative for OIDC flows
FAPI2: Security Profile
enhancement major wontfix
#690: 5.1.1. Introduction recommends Grant Management but the maturity level of the document makes it inappropriate to recommend it in the FIANL specification
FAPI2: Security Profile
bug major new
#674: length of nonce tested in OP conformance tests
FAPI2: Security Profile
bug major resolved 1
#670: Use of FAPI with mandatory MTLS
FAPI2: Security Profile
bug major resolved
#651: Avoid "should be" and "shall be" where possible
FAPI2: Security Profile
bug major resolved
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6