1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (1–25 of 79)

Title T P Status Votes Assignee Milestone Created Updated Actions
#570: Deprecation & removal of FAPI 1 Implementer's Draft conformance certification tests/programme
FAPI 1: Advanced
proposal major closed
#185: PKCE or Part2 mechanisms?
FAPI 1: Baseline
bug major closed
#243: FAPI-CIBA: Is request_context a claim or a request parameter?
CIBA
bug major closed
#244: FAPI-CIBA: Does "JWS/JWE Algorithm considerations" apply to Read-Only, too?
CIBA
proposal major closed
#470: Are unsigned id_tokens permitted in FAPI2 baseline?
FAPI2: Security Profile
bug major closed
#471: Resolve '?' in FAPI1 vs FAPI2 differences table
FAPI2: Security Profile
bug minor closed
#367: missing and extra "ands"
FAPI 1: Advanced
bug minor closed
#124: More examples as an appendix
FAPI 1: Advanced
proposal major closed
#307: FAPI-RW: Require pkce when using PAR
FAPI 1: Advanced
bug major closed
#264: expand on privacy considerations for id_tokens returned in front channel
FAPI 1: Advanced
enhancement major closed
#166: (ed) Need to add JARM in the introductions
FAPI 1: Advanced
bug major closed
#272: FAPI-CIBA mentions 'FAPI lodging intent' doc but links only to pushed request object
CIBA
bug major closed
#263: Are scopes required to be returned when exchanging Refresh Tokens for Access Tokens.
FAPI 1: Advanced
bug major closed
#259: Change name of Deployment doc
Others
enhancement major closed
#86: The read only spec should not contain 'if possible' in section 5.2.2
FAPI 1: Baseline
enhancement major closed
#218: LoA3 requirement in part2 may be too much
FAPI 1: Advanced
bug major closed
#246: FAPI-CIBA doesn't explicitly import FAPI-RW cipher limitations
CIBA
bug major closed
#187: Part 1 client requirements for state/nonce aren't reflected as authorization server requirements
FAPI 1: Baseline
bug major closed
#177: request object should contain iat or nbf
FAPI 1: Advanced
bug major closed
#225: Remove references to OAuth Token Binding
FAPI 1: Advanced
proposal major closed
#127: CIBA: security issues
CIBA
enhancement major closed
#208: Part 2 should limit allowed JWE algorithms
FAPI 1: Advanced
bug major closed 1
#233: (ed) CIBA: Move RFC6749, RFC6750, OIDC to Bibligraphy. Add RFC7636 to Bibliography
CIBA
bug trivial closed
#235: (te) 5.2.2 Add a note explaining why this profile mandates "shall not support CIBA push mode;"
CIBA
enhancement minor closed
#230: Call out that client notification endpoint bearer token is not MTLS certificate bound
CIBA
bug major closed
  2. 1
  3. 2
  4. 3
  5. 4