openid / fapi / issues

Title	T	P	Status	Assignee	Milestone	Created	Updated
#60: Only one method to Token Bind AT rather than two? FAPI 1: Advanced	task	critical	closed			2017-01-16	2017-05-28
#78: Malicious Endpoint Attack FAPI 1: Advanced	enhancement	minor	closed			2017-03-17	2017-05-28
#77: IdP Confusion Attack FAPI 1: Advanced	enhancement	minor	closed			2017-03-17	2017-05-28
#92: Put cipher suite recommendations in the security considerations FAPI 1: Advanced	bug	major	closed	Edmund Jay		2017-05-06	2017-05-28
#99: Part 2: TLS considerations section may be ambiguous FAPI 1: Advanced	bug	major	closed			2017-05-24	2017-05-25
#87: Need create request_uri endpoint in AS FAPI 1: Advanced	enhancement	major	closed			2017-05-01	2017-05-16
#72: Spec not clear as to which auth flows are supported FAPI 1: Advanced	proposal	major	closed			2017-03-02	2017-05-13
#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs FAPI 1: Baseline	bug	major	closed			2017-04-12	2017-05-10
#75: Support other method of HoK than TOKB FAPI 1: Advanced	bug	major	closed	Nat Sakimura		2017-03-03	2017-05-10
#79: Part 1: issues with x-fapi-customer-last-logged-time header FAPI 1: Baseline	bug	major	closed			2017-03-22	2017-04-06
#73: Spec says Authorization Server shall support both public and confidential clients; FAPI 1: Advanced	bug	major	closed			2017-03-02	2017-03-29
#63: There is no qualification on x-fapi-customer-id FAPI 1: Baseline	bug	major	closed	Nat Sakimura		2017-01-30	2017-02-03
#69: Notes like this are strange “NOTE: Providing access to Javascript clients or not has different security properites.;” FAPI 1: Baseline	bug	major	closed	Sascha Preibisch		2017-01-31	2017-02-02
#2: Accounts: Total Pages and Page does not make sense Part 4: Protected Resources - RO	bug	major	wontfix	Anoop Saxena	R2 - Nov 2016	2016-06-29	2022-03-08
#28: International names for retirement savings account names Part 4: Protected Resources - RO	proposal	minor	wontfix	Nat Sakimura		2016-08-31	2022-03-08
#7: Add "Open Data" data set Part 3: Open Data	bug	major	wontfix	Anoop Saxena	R1 - Aug 2016	2016-07-04	2022-03-08
#20: Meaning of the Surrogate Identifier Clause not clear Part 4: Protected Resources - RO	bug	major	wontfix	Anoop Saxena		2016-08-02	2022-03-08
#32: How to communicate back the partial errors to the client (Anoop) Part 4: Protected Resources - RO	bug	major	wontfix	Sascha Preibisch	R1 - Aug 2016	2016-09-27	2022-03-08
#48: Definition or description around log entry Part 4: Protected Resources - RO	bug	minor	wontfix			2016-12-07	2022-03-08
#372: FAPI1 section 8.1: "RS" and "resource server" are used FAPI 1: Baseline	bug	trivial	wontfix			2021-02-10	2021-03-10
#390: ISO29134 / ISO29184 links missing in part2 FAPI 1: Advanced	bug	minor	wontfix			2021-03-09	2021-03-09
#350: Crypto recommendations FAPI 1: Advanced	bug	major	wontfix	Daniel Fett		2020-12-06	2021-03-08
#310: Hanging paragraphs FAPI 1: Advanced	bug	major	wontfix	Edmund Jay		2020-09-02	2021-03-08
#352: nonce as PKCE alternative for OIDC flows FAPI2: Security Profile	enhancement	major	wontfix			2020-12-12	2020-12-23
#320: Pre-registration of redirect uris with PAR FAPI 1: Advanced	bug	major	wontfix	Dave Tonge		2020-09-30	2020-09-30

#60: Only one method to Token Bind AT rather than two?

FAPI 1: Advanced

task

critical

closed

2017-01-16

2017-05-28

#78: Malicious Endpoint Attack

FAPI 1: Advanced

enhancement

minor

closed

2017-03-17

2017-05-28

#77: IdP Confusion Attack

FAPI 1: Advanced

enhancement

minor

closed

2017-03-17

2017-05-28

#92: Put cipher suite recommendations in the security considerations

FAPI 1: Advanced

bug

major

closed

Edmund Jay

2017-05-06

2017-05-28

#99: Part 2: TLS considerations section may be ambiguous

FAPI 1: Advanced

bug

major

closed

2017-05-24

2017-05-25

#87: Need create request_uri endpoint in AS

FAPI 1: Advanced

enhancement

major

closed

2017-05-01

2017-05-16

#72: Spec not clear as to which auth flows are supported

FAPI 1: Advanced

proposal

major

closed

2017-03-02

2017-05-13

#84: RFC2616 is obsolete and references to it should be replaced with updated RFCs

FAPI 1: Baseline

bug

major

closed

2017-04-12

2017-05-10

#75: Support other method of HoK than TOKB

FAPI 1: Advanced

bug

major

closed

Nat Sakimura

2017-03-03

2017-05-10

#79: Part 1: issues with x-fapi-customer-last-logged-time header

FAPI 1: Baseline

bug

major

closed

2017-03-22

2017-04-06

#73: Spec says Authorization Server shall support both public and confidential clients;

FAPI 1: Advanced

bug

major

closed

2017-03-02

2017-03-29

#63: There is no qualification on x-fapi-customer-id

FAPI 1: Baseline

bug

major

closed

Nat Sakimura

2017-01-30

2017-02-03

#69: Notes like this are strange “NOTE: Providing access to Javascript clients or not has different security properites.;”

FAPI 1: Baseline

bug

major

closed

Sascha Preibisch

2017-01-31

2017-02-02

#2: Accounts: Total Pages and Page does not make sense

Part 4: Protected Resources - RO

bug

major

wontfix

Anoop Saxena

R2 - Nov 2016

2016-06-29

2022-03-08

#28: International names for retirement savings account names

Part 4: Protected Resources - RO

proposal

minor

wontfix

Nat Sakimura

2016-08-31

2022-03-08

#7: Add "Open Data" data set

Part 3: Open Data

bug

major

wontfix

Anoop Saxena

R1 - Aug 2016

2016-07-04

2022-03-08

#20: Meaning of the Surrogate Identifier Clause not clear

Part 4: Protected Resources - RO

bug

major

wontfix

Anoop Saxena

2016-08-02

2022-03-08

#32: How to communicate back the partial errors to the client (Anoop)

Part 4: Protected Resources - RO

bug

major

wontfix

Sascha Preibisch

R1 - Aug 2016

2016-09-27

2022-03-08

#48: Definition or description around log entry

Part 4: Protected Resources - RO

bug

minor

wontfix

2016-12-07

2022-03-08

#372: FAPI1 section 8.1: "RS" and "resource server" are used

FAPI 1: Baseline

bug

trivial

wontfix

2021-02-10

2021-03-10

#390: ISO29134 / ISO29184 links missing in part2

FAPI 1: Advanced

bug

minor

wontfix

2021-03-09

#350: Crypto recommendations

FAPI 1: Advanced

bug

major

wontfix

Daniel Fett

2020-12-06

2021-03-08

#310: Hanging paragraphs

FAPI 1: Advanced

bug

major

wontfix

Edmund Jay

2020-09-02

2021-03-08

#352: nonce as PKCE alternative for OIDC flows

FAPI2: Security Profile

enhancement

major

wontfix

2020-12-12

2020-12-23

#320: Pre-registration of redirect uris with PAR

FAPI 1: Advanced

bug

major

wontfix

Dave Tonge

2020-09-30

Issues

Issues (76–100 of 677)