openid/connect-key-binding

Repository for managing "connect-key-binding" as part of OpenID Foundation AB-Connect Working Group

Stars: 0
Forks: 4
Open beginner issues: 0
Indexed issues: 4

Dominant language: No language data
License: No license data
Last GitHub push: Aug 20, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

4 open issues indexed

cnf.jwk reuse across an RP's own apps can defeat OIDC Core's pairwise-identifier privacy design Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

openid/connect-key-binding#30 · Opened Aug 30, 2026
RP Authenticating→Consuming Component proof-of-possession is out of scope, with no minimum security properties defined Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

openid/connect-key-binding#29 · Opened Aug 30, 2026
Token Request validation never checks the DPoP proof's key against the dpop_jkt declared at the Authentication Request Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

openid/connect-key-binding#28 · Opened Aug 30, 2026
Determine whether key binding can be extended to CIBA, PAR, Token Exchange and other grant types Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

openid/connect-key-binding#27 · Opened Aug 13, 2026

A short digest of beginner-friendly GitHub issues.