1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (26–50 of 107)

Title T P Status Votes Assignee Milestone Created Updated Actions
#541: HTTP Signatures
FAPI2: Message Signing
enhancement minor resolved
#348: FAPI2 Release Communication
FAPI2: Security Profile
enhancement major resolved
#334: Question regarding metadata
FAPI 1: Baseline
enhancement minor resolved
#262: should long lived access tokens be permitted
FAPI 1: Baseline
enhancement major resolved
#240: FAPI-R: length/entropy of authorization code / refresh token / client_secret
FAPI 1: Baseline
enhancement minor resolved
#175: Clarify attacker model (PKCE method and CSRF protection)
FAPI 1: Baseline
enhancement major resolved
#220: [BIS] Clarify attacker model (PKCE method and CSRF protection)
FAPI 1: Baseline
enhancement major resolved
#100: Signing API response payloads
FAPI 1: Baseline
enhancement major resolved
#209: Ciphers
FAPI 1: Advanced
enhancement major resolved
#204: CIBA Binding Messages
CIBA
enhancement major on hold
#198: FAPI CIBA Profile
CIBA
enhancement major resolved
#674: length of nonce tested in OP conformance tests
FAPI2: Security Profile
bug major open 1
#651: Avoid "should be" and "shall be" where possible
FAPI2: Security Profile
bug major open
#659: No normative statement on id_token encryption
FAPI2: Security Profile
bug major resolved
#521: Change name and file name of FAPI 2 Advanced to FAPI 2 Message Signing
FAPI2: Message Signing
bug major resolved
#577: FAPI2SP appears to permit response_types "id_token", "id_token token" and "none"
FAPI2: Security Profile
bug minor resolved
#603: Require servers to allow for clock skew
FAPI2: Security Profile
bug major resolved
#631: shall vs shall only
FAPI2: Security Profile
bug minor resolved
#596: Non Repudiation
FAPI2: Message Signing
bug major resolved
#594: Value of JARM for non-repudiation
FAPI2: Message Signing
bug major resolved
#579: FAPI2SP: Note about client assertion audience looks misleading
FAPI2: Security Profile
bug major resolved
#562: Scope needs clarification
FAPI2: Security Profile
bug major resolved
#609: CIBA - Make clear limitation of binding message
CIBA
bug major open
#575: Issue with http sig request/response binding
FAPI2: Message Signing
bug major resolved
#608: Make clear that requests and responses to resource servers don't have to be bound
FAPI2: Message Signing
bug major resolved
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5