oauthlib

OIDC device code flow never returns id_token Open

Difficulty 3/5 1-2 days Newbie friendliness 76/100

oauthlib/oauthlib#968 · Opened Aug 27, 2026

RFC 8707: repeated resource parameters collapse to the last value Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

oauthlib/oauthlib#959 · Opened Jul 6, 2026

Device Grant Scopes not Validated Open

Bug OAuth2-Provider

Difficulty 3/5 1-2 days Newbie friendliness 68/100

oauthlib/oauthlib#949 · 2 comments · Opened May 7, 2026

Security Hardening: Reject duplicate authorization response parameters in parse_request_uri_response Open

Difficulty 3/5 1-2 days Newbie friendliness 58/100

oauthlib/oauthlib#948 · Opened May 3, 2026

Nonce would be more likely to be unique if more random bits replaced the timestamp Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

oauthlib/oauthlib#946 · Opened Apr 16, 2026

Add validate_device_authorization_code() to RequestValidator to give DeviceCodeGrant symmetry with Authorization Code Grant Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

oauthlib/oauthlib#944 · Opened Apr 1, 2026

`JWTToken.estimate_type` claims all JWT-shaped tokens, preventing `BearerToken` from handling JWT access tokens Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

oauthlib/oauthlib#939 · Opened Mar 17, 2026

Improve error message when application/x-www-form-urlencoded is not used for token requests Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

oauthlib/oauthlib#928 · Opened Nov 26, 2025

signed_token_generator does not include claims from request.claims. Open

Difficulty 2/5 1-3 hours Newbie friendliness 58/100

oauthlib/oauthlib#926 · 1 comment · Opened Nov 11, 2025

Run CI tests based on build artifacts Open

Cleanup Contributor Friendly Feature

Difficulty 4/5 3-5 days Newbie friendliness 30/100

oauthlib/oauthlib#917 · 1 comment · Opened Jul 12, 2025

How should we do type checking? Open

Discussion

Difficulty 5/5 Over a week Newbie friendliness 25/100

oauthlib/oauthlib#916 · 2 comments · Opened Jul 11, 2025

Support for OIDC CIBA? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

oauthlib/oauthlib#890 · 1 comment · Opened Dec 20, 2024

`validate_token_parameters` should only error if there are missing scopes Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

oauthlib/oauthlib#888 · Opened Nov 6, 2024

Csrf warning Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

oauthlib/oauthlib#875 · 1 reaction · Opened Apr 20, 2024

Modifications of headers returned by Client.prepare_*_request affects future calls Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

oauthlib/oauthlib#873 · Opened Jan 31, 2024

fastapi Support Open

Contributor Friendly Feature

Difficulty 5/5 Over a week Newbie friendliness 20/100

oauthlib/oauthlib#870 · 3 comments · 2 reactions · Opened Dec 11, 2023

accessing session user in validate_silent_login Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

oauthlib/oauthlib#868 · 2 comments · Opened Nov 15, 2023

Oauthlib not catching error: CompactToken validation failed with reason code: 80049228 Open

Difficulty 4/5 3-5 days Newbie friendliness 28/100

oauthlib/oauthlib#867 · 1 comment · Opened Nov 7, 2023

typing issues Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

oauthlib/oauthlib#856 · 2 comments · Opened Aug 24, 2023

Support for refresh token expiration Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

oauthlib/oauthlib#852 · 1 reaction · Opened Aug 7, 2023

OAuth2Session is not pickleable Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

oauthlib/oauthlib#849 · 2 comments · 1 reaction · Opened Apr 30, 2023

Will the default warning behavior for scope changes be updated? Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

oauthlib/oauthlib#845 · 1 comment · Opened Apr 5, 2023

private_key_jwt Open

Contributor Friendly Feature OAuth2-Client OAuth2-Provider

Difficulty 5/5 Over a week Newbie friendliness 25/100

oauthlib/oauthlib#843 · Opened Mar 16, 2023

oauth2 implicit grant does not seem to properly return the error in uri fragment when client is unauthorized to use response_type token Open

Bug Contributor Friendly OAuth2-Provider

Difficulty 3/5 1-2 days Newbie friendliness 45/100

oauthlib/oauthlib#814 · 1 comment · Opened Apr 23, 2022

OAuth1 - Adding parameter to authorization header Open

Contributor Friendly Discussion Feature OAuth1

Difficulty 4/5 3-5 days Newbie friendliness 35/100

oauthlib/oauthlib#812 · 1 comment · Opened Apr 1, 2022

Show Diff for Changed Scope Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

oauthlib/oauthlib#809 · 2 comments · Opened Mar 18, 2022

Documentation Error: Implicit Grant is being depreciated in favor of Authorization Code + PKCE Open

Contributor Friendly Documentation

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

oauthlib/oauthlib#794 · 1 comment · Opened Dec 8, 2021

oauth2 `raise_from_error` raises random error for `invalid_request` Open

Bug Contributor Friendly

Difficulty 3/5 1-2 days Newbie friendliness 45/100

oauthlib/oauthlib#776 · 1 comment · 1 reaction · Opened Sep 23, 2021

Client: Include a buffer to the validity check. Open

Discussion Feature OAuth2-Client

Difficulty 4/5 3-5 days Newbie friendliness 35/100

oauthlib/oauthlib#775 · 1 comment · Opened Sep 2, 2021

Support additional response_types in WebApplicationClient Open

Contributor Friendly Feature OAuth2-Client OIDC

Difficulty 3/5 1-2 days Newbie friendliness 35/100

oauthlib/oauthlib#773 · 1 comment · Opened Aug 18, 2021

Blog-post/docs on implementing Google SSO with oauthlib Open

Contributor Friendly Documentation

Difficulty 5/5 Over a week Newbie friendliness 25/100

oauthlib/oauthlib#769 · 2 comments · Opened Jul 9, 2021

Add is_expired Method for Clients Open

Contributor Friendly Feature OAuth2-Client

Difficulty 2/5 1-3 hours Newbie friendliness 50/100

oauthlib/oauthlib#754 · 5 comments · Opened Apr 9, 2021

Consistency between setup.py and requirements.txt Open

Cleanup Contributor Friendly Discussion

oauthlib/oauthlib#724 · 1 comment · 1 assignee · Opened Apr 3, 2020

In setup.py merge "signedtoken" extras into "rsa" extras so RSA features work Open

Bug Cleanup Contributor Friendly Discussion

oauthlib/oauthlib#721 · 1 assignee · Opened Mar 24, 2020

Why get_authorization_code_scopes is called before validate_code? Open

Discussion OAuth2-Provider OIDC

Difficulty 4/5 3-5 days Newbie friendliness 25/100

oauthlib/oauthlib#719 · 1 comment · Opened Mar 7, 2020

Misleading method name with "magic" fallback Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

oauthlib/oauthlib#718 · 1 comment · Opened Mar 6, 2020

Documentation for OIDC provider unclear Open

Contributor Friendly Documentation

Difficulty 4/5 3-5 days Newbie friendliness 35/100

oauthlib/oauthlib#715 · 1 comment · Opened Jan 19, 2020

Missing datastore models for OpenID Connect/Provider Open

Contributor Friendly Documentation OAuth2-Provider OIDC

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

oauthlib/oauthlib#713 · Opened Jan 15, 2020

Add property/method to check for OIDC flow Open

Feature OIDC

Difficulty 5/5 Over a week Newbie friendliness 25/100

oauthlib/oauthlib#696 · Opened Aug 12, 2019

confirm_redirect_uri after validate_code feels wrong Open

Discussion OAuth2-Provider

Difficulty 5/5 Over a week Newbie friendliness 25/100

oauthlib/oauthlib#688 · 1 comment · Opened Jul 18, 2019

Support for Azure AD on-behalf-of grant Open

Contributor Friendly Feature OAuth2-Client

Difficulty 3/5 1-2 days Newbie friendliness 38/100

oauthlib/oauthlib#686 · 4 comments · Opened Jul 16, 2019

OAuth2.0 Revoke 7008 token_type_hint enhancement Open

Contributor Friendly Discussion Feature OAuth2-Provider

Difficulty 4/5 3-5 days Newbie friendliness 35/100

oauthlib/oauthlib#685 · 1 reaction · Opened Jul 16, 2019

Community members - activity Open

Discussion

Difficulty 5/5 Over a week Newbie friendliness 15/100

oauthlib/oauthlib#678 · 34 comments · 2 reactions · Opened May 21, 2019

RFC7591 - Dynamic Client Registration Open

Discussion Feature OAuth2-Client OAuth2-Provider

Difficulty 5/5 Over a week Newbie friendliness 25/100

oauthlib/oauthlib#649 · 2 comments · 2 reactions · Opened Feb 5, 2019

Change validate_user/validate_grant_type order for Resource Owner Password Grant Open

Breaking Bug OAuth2-Provider

Difficulty 3/5 1-2 days Newbie friendliness 35/100

oauthlib/oauthlib#643 · Opened Jan 8, 2019

Missing assignment of request.client_id Open

Bug OAuth2-Provider

Difficulty 2/5 1-3 hours Newbie friendliness 64/100

oauthlib/oauthlib#641 · 2 comments · Opened Jan 6, 2019

Add support of OAuth 2.0 for Native Apps Open

Feature OAuth2-Client OAuth2-Provider OIDC

Difficulty 5/5 Over a week Newbie friendliness 35/100

oauthlib/oauthlib#633 · 3 comments · 2 reactions · Opened Dec 16, 2018

Device Code Grant Type Open

Contributor Friendly Feature OAuth2-Client OAuth2-Provider

Difficulty 5/5 Over a week Newbie friendliness 25/100

oauthlib/oauthlib#626 · 22 comments · 3 reactions · Opened Dec 12, 2018

OAuth2.0 Authorization Code - security issue - race condition Open

Bug OAuth2-Provider

Difficulty 4/5 3-5 days Newbie friendliness 35/100

oauthlib/oauthlib#618 · 5 comments · Opened Nov 30, 2018

Unified Custom Validators (hooks) for Grant and Server Open

Contributor Friendly Discussion Documentation OAuth2-Provider OIDC

Difficulty 5/5 Over a week Newbie friendliness 25/100

oauthlib/oauthlib#613 · 5 comments · 1 reaction · Opened Nov 20, 2018

Get new issues in your inbox