openid / igov / issues

Title	T	P	Status	Assignee	Created	Updated
#34: DNSSEC considerations?	enhancement	blocker	new		2023-05-02	2024-09-17
#35: Privacy considerations missing in OAuth profile	bug	blocker	new		2023-05-02	2024-09-17
#18: oauth2 Profile - 3.4. @torsten comment [token lifetimes]	bug	blocker	resolved	Tom Clancy	2019-03-05	2024-08-20
#48: Update examples	task	blocker	resolved	Kelley Burgin	2024-04-01	2024-08-20
#15: oauth2 Profile - 3.2.1 @torsten comment [clarify methods to determine JWT security characteristics]	bug	blocker	resolved		2019-03-05	2024-08-20
#49: Make PKCE mandatory for all clients and configure to resist downgrade attacks	enhancement	minor	resolved	Tom Clancy	2024-06-18	2024-08-19
#32: PKCE + request object signature as recommeded option	enhancement	blocker	resolved	Tom Clancy	2023-02-02	2024-08-19
#27: [Tokens] BCP references - RFC 8725 and RFC 9068	enhancement	major	open	Giuseppe De Marco	2022-10-17	2024-08-14
#10: oauth2 Profile - 2.3.1. @torsten comment	bug	blocker	resolved		2019-03-05	2024-07-23
#14: oauth2 Profile - 3.2. @torsten comment	bug	blocker	resolved		2019-03-05	2024-07-23
#17: oauth2 Profile - 3.3. @torsten comment	bug	blocker	resolved		2019-03-05	2024-07-23
#52: Two permitted TLS ciphers have known DoS attacks	bug	major	new		2024-07-23	2024-07-23
#51: "If the client uses sender-constrained tokens" is wrong if sender constrained tokens are mandatory	bug	major	new		2024-07-23	2024-07-23
#40: Add required ID token fields: acr, amr, at_hash	proposal	major	new	Tom Clancy	2023-06-30	2024-07-23
#7: oauth2 Profile - 2.1.2 5th paragraph @torsten comment [draft-ietf-oauth-security-topics]	bug	blocker	resolved		2019-03-05	2024-07-18
#50: Mitigation of AT theft using Nested JWT at the RS (userinfo endpoint)	enhancement	trivial	new		2024-07-18	2024-07-18
#22: [Authorization] PKCE as RECOMMENDED or REQUIRED	enhancement	major	resolved	Giuseppe De Marco	2022-10-17	2024-07-17
#20: [Authorization] mix-up attacks prevention in authorization endpoint response	enhancement	major	open	Giuseppe De Marco	2022-10-17	2024-07-17
#38: Single logical AS per protected resource (OAuth)	proposal	major	resolved	Tom Clancy	2023-06-30	2024-07-16
#2: Update links when we have published specs	bug	major	resolved		2017-05-26	2024-07-15
#16: oauth2 Profile - 3.2.2. 3rd paragraph @torsten comment	bug	major	resolved		2019-03-05	2024-07-15
#9: oauth2 Profile - 2.2.1 4th paragraph @torsten comment	bug	major	resolved		2019-03-05	2024-07-15
#11: oauth2 Profile - 2.3.2 @torsten comment	bug	major	resolved		2019-03-05	2024-07-15
#13: oauth2 Profile - 3.1.9 @torsten comment	bug	major	resolved	Giuseppe De Marco	2019-03-05	2024-07-15
#8: oauth2 Profile - 2.1.3 @torsten comment	bug	major	resolved	Giuseppe De Marco	2019-03-05	2024-07-15