1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (26–50 of 107)

Title T P Status Votes Assignee Milestone Created Updated Actions
#197: New Document Proposal: FAPI Implementation Guide
Implementation & Deployment Advice
proposal major open
#260: Add section in the "Implementation Advice" document about supporting Mobile Apps
Implementation & Deployment Advice
enhancement major open
#273: Security considerations re large access tokens
Implementation & Deployment Advice
enhancement major open
#541: HTTP Signatures
FAPI2: Message Signing
enhancement minor resolved
#534: Authorization Request Leaks lead to CSRF
FAPI2: Security Profile
bug major resolved
#499: Re structure FAPI2 baseline
FAPI2: Security Profile
bug major resolved
#500: Signal that FAPI2 can work with client credentials grant
FAPI2: Security Profile
bug major resolved
#401: Use of the phrase "non-repudiation"
FAPI2: Message Signing
bug major resolved
#491: Link attacker model to FAPI 2 Advanced
FAPI2: Message Signing
bug major resolved
#497: RS Clauses re access token
FAPI2: Security Profile
bug major resolved
#348: FAPI2 Release Communication
FAPI2: Security Profile
enhancement major resolved
#411: HTTP Signing
FAPI2: Message Signing
proposal major resolved
#483: Signed token intospection
FAPI2: Message Signing
bug major resolved
#476: is response_type=code id_token permitted in FAPI2 Baseline?
FAPI2: Security Profile
bug minor resolved
#474: "shall use the authorization code grant described in [RFC6749]" could be clearer
FAPI2: Security Profile
bug minor resolved
#473: FAPI2 JWS alg choices are much wider than FAPI1
FAPI2: Security Profile
bug major resolved
#394: Old links to part 1 / part 2 in git repo no longer work
FAPI 1: Advanced
bug major closed
#334: Question regarding metadata
FAPI 1: Baseline
enhancement minor resolved
#168: (ed) Normative Reference: Most of them are not quoted with "shall"
FAPI 1: Advanced
bug minor resolved
#317: Part 1 'require the redirect_uri parameter' could have a better wording
FAPI 1: Baseline
bug major resolved
#303: Proof Read Parts 1 and 2
FAPI 1: Advanced
bug major resolved
#318: Privacy consideration - "replay of long term grants at AS"
FAPI 1: Advanced
bug major resolved
#320: Pre-registration of redirect uris with PAR
FAPI 1: Advanced
bug major wontfix
#194: Security considerations when two (oauth-mtls?) clients use same key
FAPI 1: Advanced
bug major resolved
#239: FAPI part 2 should mention/require discovery?
FAPI 1: Advanced
proposal major resolved
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5