openid/authzen

View on GitHub

Proposed standard for an Authorization API

Stars: 160
Forks: 41
Open beginner issues: 0
Indexed issues: 26
Avg merge: 2d 3h
Merged PRs (30d): 23

Dominant language: TypeScript
License: No license data
Last GitHub push: Sep 17, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

26 open issues indexed

COAZ-MCP defines no mapping for `initialize`, so Unknown Methods denies it Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

openid/authzen#657 · Opened Sep 18, 2026
§11.6 signed responses... time to revisit? Open

authorization-api

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/authzen#656 · Opened Sep 17, 2026
Agent context profile: proposed property names for principal, delegation chain and attestation state Open

coaz

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/authzen#655 · Opened Sep 17, 2026
Conformance suite: pdp_auth_type=api_key is unusable with discovery, and blocks the invalid-credentials 401 module Open

certification

Difficulty 3/5 1-2 days Newbie friendliness 68/100

openid/authzen#641 · 2 comments · Opened Sep 7, 2026
Conformance suite batch default-value module tests sub-field merging, which c-3-2-7 and #231 rule out Open

certification

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

openid/authzen#640 · 1 comment · Opened Sep 6, 2026
Separate gate and scope tuples by resource.type instead of the reserved issue: prefix Open

oauth-as-profile

openid/authzen#638 · 1 assignee · Opened Sep 4, 2026
issue:id_token:* gates have no defined `audience` resource Open

oauth-as-profile

openid/authzen#636 · 1 assignee · Opened Sep 4, 2026
Should `context.agent` be trust-anchored when derived from the validated token? Open

coaz

Difficulty 5/5 Over a week Newbie friendliness 35/100

openid/authzen#612 · 13 comments · Opened Aug 9, 2026
ARAP: inconsistencies and over-stepping Open

access-requests

Difficulty 5/5 Over a week Newbie friendliness 35/100

openid/authzen#610 · Opened Aug 6, 2026
decision_ref binding: pin to binding_token now, or track ARAP as published? Open

access-requests

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/authzen#606 · Opened Aug 4, 2026
Metadata parameter is named `capabilities` in §9.1.2 but referenced as `supported_capabilities` in §8.2.2 Open

authorization-api errata

openid/authzen#601 · 1 reaction · 3 assignees · Opened Aug 1, 2026
IANA registrations Open

authorization-api

openid/authzen#597 · 1 comment · 1 assignee · Opened Jul 30, 2026
AI agent example is unclear Open

access-requests

Difficulty 2/5 1-3 hours Newbie friendliness 50/100

openid/authzen#579 · Opened Jul 24, 2026
Drop classic deployments paragraph Open

access-requests

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

openid/authzen#578 · 2 comments · Opened Jul 24, 2026
Fix incorrect metadata member name in Section 8.2.1 Open

authorization-api errata

Difficulty 1/5 Under an hour Newbie friendliness 92/100

openid/authzen#554 · Opened Jul 13, 2026
Policy Decision Point (PDP) neutral packaging format for policy store Open

policy-store

Difficulty 5/5 Over a week Newbie friendliness 35/100

openid/authzen#542 · 12 comments · 1 reaction · Opened Jun 29, 2026
Obligations and Constraints Open

advice-obligations-constraints

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/authzen#521 · 1 comment · Opened Jun 11, 2026
ARAP does too many things Open

access-requests

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/authzen#520 · 5 comments · Opened Jun 10, 2026
How to represent both agent OBO human and agent OBO itself in COAZ mapping Open

coaz

Difficulty 4/5 3-5 days Newbie friendliness 35/100

openid/authzen#492 · 4 comments · Opened Apr 16, 2026
How do OAuth scopes work with the coaz model? Open

coaz

Difficulty 5/5 Over a week Newbie friendliness 35/100

openid/authzen#487 · 3 comments · Opened Apr 14, 2026
New fields should be added to the _meta field Open

coaz

Difficulty 5/5 Over a week Newbie friendliness 35/100

openid/authzen#486 · 1 comment · Opened Apr 14, 2026
What about autonomous use cases, where the agent is running without a user principal? Open

coaz

openid/authzen#483 · 4 comments · 1 assignee · Opened Apr 14, 2026
How is the identity of the user represented? Open

coaz

openid/authzen#482 · 3 comments · 1 assignee · Opened Apr 14, 2026
Client usage example Open

coaz

openid/authzen#481 · 1 comment · 1 assignee · Opened Apr 14, 2026
Support for Indeterminate Decision / Evaluation Status in Authorization Responses Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/authzen#456 · 2 comments · Opened Mar 19, 2026
[Feature Request] Add 'delegation_chain' to Subject for AI Agent and Multi-Actor Scenarios Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

openid/authzen#416 · 4 comments · Opened Dec 29, 2025

openid/authzen

Get new issues in your inbox