1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (1–25 of 97)

Title T P Status Votes Assignee Milestone Created Updated Actions
#185: PKCE or Part2 mechanisms?
FAPI 1: Baseline
bug major closed
#196: OAuth Security BCP and FAPI
FAPI 1: Baseline
bug major closed
#86: The read only spec should not contain 'if possible' in section 5.2.2
FAPI 1: Baseline
enhancement major closed
#187: Part 1 client requirements for state/nonce aren't reflected as authorization server requirements
FAPI 1: Baseline
bug major closed
#213: requirements on RSA/EC key sizes should apply to more situations
FAPI 1: Baseline
bug major closed
#11: OAuth Profile should mandate RFC7636 (PKCE) for code flow
FAPI 1: Baseline
proposal major closed 1
#5: Create Read Only Security Profile
FAPI 1: Baseline
task major closed
#21: Residual Data clause should be generalized and moved to privacy considerations
FAPI 1: Baseline
bug major closed
#22: Undefined OAuth response parameter "user_id" appears in the text
FAPI 1: Baseline
bug major closed
#51: Message source authentication failure -
FAPI 1: Baseline
proposal minor closed
#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs
FAPI 1: Baseline
bug major closed
#79: Part 1: issues with x-fapi-customer-last-logged-time header
FAPI 1: Baseline
bug major closed
#63: There is no qualification on x-fapi-customer-id
FAPI 1: Baseline
bug major closed
#69: Notes like this are strange “NOTE: Providing access to Javascript clients or not has different security properites.;”
FAPI 1: Baseline
bug major closed
#372: FAPI1 section 8.1: "RS" and "resource server" are used
FAPI 1: Baseline
bug trivial wontfix
#139: treatment of returned scopes divergent from RFC 6749
FAPI 1: Baseline
bug major wontfix
#41: WD2Part1:6.2.2 Add the description of "service bureau" as a Note as well.
FAPI 1: Baseline
bug major wontfix
#232: Part 1: Complete the privacy consideration section
FAPI 1: Baseline
task major duplicate
#451: FAPI 1 - Authors' Addresses: Edmund's name is missing
FAPI 1: Baseline
bug trivial resolved
#458: FAPI1 Part1: not clear as to which auth flows are supported
FAPI 1: Baseline
bug trivial resolved
#601: Title 8.1 is redundant
FAPI 1: Baseline
bug major resolved
#428: Baseline: Clause 7.4.1 Talks about security issues with authorization requests and responses but incorrectly refers to encrypting authorization 'responses' not requests.
FAPI 1: Baseline
bug trivial resolved
#371: Synchronize Foreword section in FAPI 1.0 Parts 1/2
FAPI 1: Baseline
bug major resolved
#370: FAPI1 HTML version: Part 2 should be linked from Part 1 within the text
FAPI 1: Baseline
enhancement trivial resolved
#359: Wrong reference in 7.7
FAPI 1: Baseline
bug major resolved
  2. 1
  3. 2
  4. 3
  5. 4