1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (1–25 of 129)

Title T P Status Votes Assignee Milestone Created Updated Actions
#470: Are unsigned id_tokens permitted in FAPI2 baseline?
FAPI2: Security Profile
bug major closed
#471: Resolve '?' in FAPI1 vs FAPI2 differences table
FAPI2: Security Profile
bug minor closed
#352: nonce as PKCE alternative for OIDC flows
FAPI2: Security Profile
enhancement major wontfix
#598: Version identifier for FAPI 2.0
FAPI2: Security Profile
task major duplicate
#347: reject vs ignore on plain (or outside PAR) authorization request parameters
FAPI2: Security Profile
bug major duplicate
#674: length of nonce tested in OP conformance tests
FAPI2: Security Profile
bug major resolved 1
#670: Use of FAPI with mandatory MTLS
FAPI2: Security Profile
bug major resolved
#651: Avoid "should be" and "shall be" where possible
FAPI2: Security Profile
bug major resolved
#679: (ed) replace (this) specification with (this) document
FAPI2: Security Profile
bug major resolved
#642: Continuation of #619 -- Add some text to make the readers aware of the caveats.
FAPI2: Security Profile
bug major resolved
#550: Should Network Layer Protections be made server-side enforced?
FAPI2: Security Profile
bug major resolved
#682: Clarify allowed use of `state` and required CSRF protection in FAPI 2.0 SP
FAPI2: Security Profile
proposal major resolved
#683: minimum length for EC keys?
FAPI2: Security Profile
bug minor resolved
#638: Add some more text to Introduction
FAPI2: Security Profile
bug major resolved
#678: (ed) Privacy considerations is a top level clause while Security considerations is a second level subclause
FAPI2: Security Profile
bug major resolved
#652: CIBA is not in bibliography nor abbreviations
FAPI2: Security Profile
bug minor resolved
#646: NOTE in 5.2.1 has "can"
FAPI2: Security Profile
bug major resolved
#672: Inconsistent capitalization of "Client"
FAPI2: Security Profile
bug major resolved
#676: Incorrect reference in note2
FAPI2: Security Profile
bug minor resolved
#653: Add MTLS and DPoP etc. to 4. Abbreviations
FAPI2: Security Profile
bug minor resolved
#665: Reference PAR in 5.3.1.1 (12)
FAPI2: Security Profile
bug major resolved
#659: No normative statement on id_token encryption
FAPI2: Security Profile
bug major resolved
#641: Scope states "stated attacker model" without explicitly referencing it
FAPI2: Security Profile
bug major resolved
#655: Normatively require Attackermodel
FAPI2: Security Profile
bug major resolved
#662: Remove newline after 5.1. (1)
FAPI2: Security Profile
bug major resolved
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6