1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (1–25 of 70)

Title T P Status Votes Assignee Milestone Created Updated Actions
#185: PKCE or Part2 mechanisms?
FAPI 1: Baseline
bug major closed
#196: OAuth Security BCP and FAPI
FAPI 1: Baseline
bug major closed
#187: Part 1 client requirements for state/nonce aren't reflected as authorization server requirements
FAPI 1: Baseline
bug major closed
#213: requirements on RSA/EC key sizes should apply to more situations
FAPI 1: Baseline
bug major closed
#21: Residual Data clause should be generalized and moved to privacy considerations
FAPI 1: Baseline
bug major closed
#22: Undefined OAuth response parameter "user_id" appears in the text
FAPI 1: Baseline
bug major closed
#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs
FAPI 1: Baseline
bug major closed
#79: Part 1: issues with x-fapi-customer-last-logged-time header
FAPI 1: Baseline
bug major closed
#63: There is no qualification on x-fapi-customer-id
FAPI 1: Baseline
bug major closed
#69: Notes like this are strange “NOTE: Providing access to Javascript clients or not has different security properites.;”
FAPI 1: Baseline
bug major closed
#372: FAPI1 section 8.1: "RS" and "resource server" are used
FAPI 1: Baseline
bug trivial wontfix
#139: treatment of returned scopes divergent from RFC 6749
FAPI 1: Baseline
bug major wontfix
#41: WD2Part1:6.2.2 Add the description of "service bureau" as a Note as well.
FAPI 1: Baseline
bug major wontfix
#451: FAPI 1 - Authors' Addresses: Edmund's name is missing
FAPI 1: Baseline
bug trivial resolved
#458: FAPI1 Part1: not clear as to which auth flows are supported
FAPI 1: Baseline
bug trivial resolved
#601: Title 8.1 is redundant
FAPI 1: Baseline
bug major resolved
#428: Baseline: Clause 7.4.1 Talks about security issues with authorization requests and responses but incorrectly refers to encrypting authorization 'responses' not requests.
FAPI 1: Baseline
bug trivial resolved
#371: Synchronize Foreword section in FAPI 1.0 Parts 1/2
FAPI 1: Baseline
bug major resolved
#359: Wrong reference in 7.7
FAPI 1: Baseline
bug major resolved
#330: potentailly misleading language WRT JWT ATs
FAPI 1: Baseline
bug major resolved
#317: Part 1 'require the redirect_uri parameter' could have a better wording
FAPI 1: Baseline
bug major resolved
#180: Behaviour of AS when presented with a non-uuid x-fapi-interaction-id is not clearly defined
FAPI 1: Baseline
bug major resolved
#182: 128 bits of entropy cannot give probability of guessing below 2^-160
FAPI 1: Baseline
bug minor resolved
#169: Add requirement for clients to verify scope value returned from the token endpoint
FAPI 1: Baseline
bug minor resolved
#294: x-fapi-customer-ip-address should probably have an example for ipv6
FAPI 1: Baseline
bug major resolved
  2. 1
  3. 2
  4. 3