openid / fapi / issues

Title	T	P	Status	Assignee	Milestone	Created	Updated
#178: Editorial: Specs should explain the risks of writing an RP library from scratch FAPI 1: Advanced	bug	major	closed	Joseph Heenan	2nd Implementers Draft	2018-09-27	2018-10-16
#150: Mandate at_hash check in the ID Token from the token endpoint FAPI 1: Advanced	bug	major	closed	Nat Sakimura		2018-07-04	2018-08-15
#143: Guidance required for decoupled FAPI 1: Advanced	bug	major	closed			2018-05-10	2018-08-15
#141: Remove x-fapi-financial-id FAPI 1: Advanced	bug	major	closed	Joseph Heenan		2018-05-10	2018-06-24
#136: responsibility FAPI 1: Advanced	bug	major	closed			2018-03-02	2018-03-07
#137: Eliminate use of public clients FAPI 1: Advanced	bug	major	closed			2018-03-03	2018-03-07
#109: is s_hash necessary? FAPI 1: Advanced	proposal	major	closed	Nat Sakimura	R3 - Nov 2017	2017-07-06	2018-01-29
#123: Is it okay for request object URNs to be predictable? FAPI 1: Advanced	bug	major	closed			2017-09-13	2017-10-03
#60: Only one method to Token Bind AT rather than two? FAPI 1: Advanced	task	critical	closed			2017-01-16	2017-05-28
#78: Malicious Endpoint Attack FAPI 1: Advanced	enhancement	minor	closed			2017-03-17	2017-05-28
#77: IdP Confusion Attack FAPI 1: Advanced	enhancement	minor	closed			2017-03-17	2017-05-28
#92: Put cipher suite recommendations in the security considerations FAPI 1: Advanced	bug	major	closed	Edmund Jay		2017-05-06	2017-05-28
#99: Part 2: TLS considerations section may be ambiguous FAPI 1: Advanced	bug	major	closed			2017-05-24	2017-05-25
#87: Need create request_uri endpoint in AS FAPI 1: Advanced	enhancement	major	closed			2017-05-01	2017-05-16
#72: Spec not clear as to which auth flows are supported FAPI 1: Advanced	proposal	major	closed			2017-03-02	2017-05-13
#75: Support other method of HoK than TOKB FAPI 1: Advanced	bug	major	closed	Nat Sakimura		2017-03-03	2017-05-10
#73: Spec says Authorization Server shall support both public and confidential clients; FAPI 1: Advanced	bug	major	closed			2017-03-02	2017-03-29
#390: ISO29134 / ISO29184 links missing in part2 FAPI 1: Advanced	bug	minor	wontfix			2021-03-09	2021-03-09
#350: Crypto recommendations FAPI 1: Advanced	bug	major	wontfix	Daniel Fett		2020-12-06	2021-03-08
#310: Hanging paragraphs FAPI 1: Advanced	bug	major	wontfix	Edmund Jay		2020-09-02	2021-03-08
#320: Pre-registration of redirect uris with PAR FAPI 1: Advanced	bug	major	wontfix	Dave Tonge		2020-09-30	2020-09-30
#224: FAPI certification conformance profile definitions needed FAPI 1: Advanced	task	major	wontfix	Joseph Heenan		2019-05-15	2020-09-09
#615: FAPI1 refers to JARM draft FAPI 1: Advanced	bug	major	duplicate		Errata	2023-07-06	2023-07-06
#335: (ed) ISO Directive Part 2 link broken FAPI 1: Advanced	bug	major	duplicate	Edmund Jay		2020-11-11	2020-12-02
#305: Check if the documents listed in Normative Refernece are refered by "shall" or included in Clause 3 FAPI 1: Advanced	bug	major	duplicate		3rd Implementers Draft	2020-08-12	2020-09-30

#178: Editorial: Specs should explain the risks of writing an RP library from scratch

FAPI 1: Advanced

bug

major

closed

Joseph Heenan

2nd Implementers Draft

2018-09-27

2018-10-16

#150: Mandate at_hash check in the ID Token from the token endpoint

FAPI 1: Advanced

bug

major

closed

Nat Sakimura

2018-07-04

2018-08-15

#143: Guidance required for decoupled

FAPI 1: Advanced

bug

major

closed

2018-05-10

2018-08-15

#141: Remove x-fapi-financial-id

FAPI 1: Advanced

bug

major

closed

Joseph Heenan

2018-05-10

2018-06-24

#136: responsibility

FAPI 1: Advanced

bug

major

closed

2018-03-02

2018-03-07

#137: Eliminate use of public clients

FAPI 1: Advanced

bug

major

closed

2018-03-03

2018-03-07

#109: is s_hash necessary?

FAPI 1: Advanced

proposal

major

closed

Nat Sakimura

R3 - Nov 2017

2017-07-06

2018-01-29

#123: Is it okay for request object URNs to be predictable?

FAPI 1: Advanced

bug

major

closed

2017-09-13

2017-10-03

#60: Only one method to Token Bind AT rather than two?

FAPI 1: Advanced

task

critical

closed

2017-01-16

2017-05-28

#78: Malicious Endpoint Attack

FAPI 1: Advanced

enhancement

minor

closed

2017-03-17

2017-05-28

#77: IdP Confusion Attack

FAPI 1: Advanced

enhancement

minor

closed

2017-03-17

2017-05-28

#92: Put cipher suite recommendations in the security considerations

FAPI 1: Advanced

bug

major

closed

Edmund Jay

2017-05-06

2017-05-28

#99: Part 2: TLS considerations section may be ambiguous

FAPI 1: Advanced

bug

major

closed

2017-05-24

2017-05-25

#87: Need create request_uri endpoint in AS

FAPI 1: Advanced

enhancement

major

closed

2017-05-01

2017-05-16

#72: Spec not clear as to which auth flows are supported

FAPI 1: Advanced

proposal

major

closed

2017-03-02

2017-05-13

#75: Support other method of HoK than TOKB

FAPI 1: Advanced

bug

major

closed

Nat Sakimura

2017-03-03

2017-05-10

#73: Spec says Authorization Server shall support both public and confidential clients;

FAPI 1: Advanced

bug

major

closed

2017-03-02

2017-03-29

#390: ISO29134 / ISO29184 links missing in part2

FAPI 1: Advanced

bug

minor

wontfix

2021-03-09

#350: Crypto recommendations

FAPI 1: Advanced

bug

major

wontfix

Daniel Fett

2020-12-06

2021-03-08

#310: Hanging paragraphs

FAPI 1: Advanced

bug

major

wontfix

Edmund Jay

2020-09-02

2021-03-08

#320: Pre-registration of redirect uris with PAR

FAPI 1: Advanced

bug

major

wontfix

Dave Tonge

2020-09-30

#224: FAPI certification conformance profile definitions needed

FAPI 1: Advanced

task

major

wontfix

Joseph Heenan

2019-05-15

2020-09-09

#615: FAPI1 refers to JARM draft

FAPI 1: Advanced

bug

major

duplicate

Errata

2023-07-06

#335: (ed) ISO Directive Part 2 link broken

FAPI 1: Advanced

bug

major

duplicate

Edmund Jay

2020-11-11

2020-12-02

#305: Check if the documents listed in Normative Refernece are refered by "shall" or included in Clause 3

FAPI 1: Advanced

bug

major

duplicate

3rd Implementers Draft

2020-08-12

2020-09-30

Issues

Issues (26–50 of 177)