1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (1–25 of 61)

Title T P Status Votes Assignee Milestone Created Updated Actions
#185: PKCE or Part2 mechanisms?
FAPI 1: Baseline
bug major closed
#196: OAuth Security BCP and FAPI
FAPI 1: Baseline
bug major closed
#86: The read only spec should not contain 'if possible' in section 5.2.2
FAPI 1: Baseline
enhancement major closed
#187: Part 1 client requirements for state/nonce aren't reflected as authorization server requirements
FAPI 1: Baseline
bug major closed
#213: requirements on RSA/EC key sizes should apply to more situations
FAPI 1: Baseline
bug major closed
#11: OAuth Profile should mandate RFC7636 (PKCE) for code flow
FAPI 1: Baseline
proposal major closed 1
#5: Create Read Only Security Profile
FAPI 1: Baseline
task major closed
#21: Residual Data clause should be generalized and moved to privacy considerations
FAPI 1: Baseline
bug major closed
#22: Undefined OAuth response parameter "user_id" appears in the text
FAPI 1: Baseline
bug major closed
#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs
FAPI 1: Baseline
bug major closed
#79: Part 1: issues with x-fapi-customer-last-logged-time header
FAPI 1: Baseline
bug major closed
#63: There is no qualification on x-fapi-customer-id
FAPI 1: Baseline
bug major closed
#69: Notes like this are strange “NOTE: Providing access to Javascript clients or not has different security properites.;”
FAPI 1: Baseline
bug major closed
#139: treatment of returned scopes divergent from RFC 6749
FAPI 1: Baseline
bug major wontfix
#41: WD2Part1:6.2.2 Add the description of "service bureau" as a Note as well.
FAPI 1: Baseline
bug major wontfix
#232: Part 1: Complete the privacy consideration section
FAPI 1: Baseline
task major duplicate
#395: Unclear formatting in FAPI1-Baseline final client section
FAPI 1: Baseline
bug major resolved
#601: Title 8.1 is redundant
FAPI 1: Baseline
bug major resolved
#371: Synchronize Foreword section in FAPI 1.0 Parts 1/2
FAPI 1: Baseline
bug major resolved
#359: Wrong reference in 7.7
FAPI 1: Baseline
bug major resolved
#330: potentailly misleading language WRT JWT ATs
FAPI 1: Baseline
bug major resolved
#317: Part 1 'require the redirect_uri parameter' could have a better wording
FAPI 1: Baseline
bug major resolved
#262: should long lived access tokens be permitted
FAPI 1: Baseline
enhancement major resolved
#180: Behaviour of AS when presented with a non-uuid x-fapi-interaction-id is not clearly defined
FAPI 1: Baseline
bug major resolved
#294: x-fapi-customer-ip-address should probably have an example for ipv6
FAPI 1: Baseline
bug major resolved
  2. 1
  3. 2
  4. 3