openid/fapi

View on GitHub

Stars: 3
Forks: 3
Open beginner issues: 0
Indexed issues: 72

Dominant language: HTML
License: No license data
Last GitHub push: Sep 17, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

72 open issues indexed

OWASP ASVS 5.0 section 10.4.8 requires strict refresh token expiry, which conflicts with FAPI 2.0 SP 5.3.2.1-9 Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

openid/fapi#864 · 2 comments · Opened Aug 27, 2026
detecting inconsistent .well-known/openid-configuration vs .well-known/oauth-authorization-server on conformance tests Open

component: Certification component: FAPI2: Advanced Authorization

Difficulty 5/5 Over a week Newbie friendliness 35/100

openid/fapi#863 · Opened Aug 26, 2026
meaning of FAPI2 requirements around publishing discovery data Open

component: Certification component: FAPI2: Security Profile

Difficulty 4/5 3-5 days Newbie friendliness 35/100

openid/fapi#862 · Opened Aug 26, 2026
last_updated_at vs last_update Open

component: Grant Management

openid/fapi#857 · 1 comment · 1 assignee · Opened Aug 12, 2026
lots of urls in the repo still point at bitbucket Open

Difficulty 3/5 1-2 days Newbie friendliness 56/100

openid/fapi#853 · 1 comment · Opened Aug 12, 2026
Hard coded algs in FAPI 2.0 Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

openid/fapi#852 · Opened Aug 12, 2026
Is FAPI 2.0 being used in Agentic AI flows (MCP?) Open

openid/fapi#849 · 5 comments · 1 assignee · Opened Jul 13, 2026
how do we handle FAPI1 private_key_jwt aud changes in certification tools Open

component: Certification migrated-from-bitbucket priority: major type: bug

Difficulty 5/5 Over a week Newbie friendliness 30/100

openid/fapi#848 · 5 comments · Opened Jul 2, 2026
Crypto Streangth- JP CRYPTO REC recommended 192 bits instead of 128 bits as of today. Open

migrated-from-bitbucket priority: major type: task

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/fapi#846 · 1 comment · Opened Jul 2, 2026
Publishing updated draft of FAPI-CIBA Open

component: CIBA migrated-from-bitbucket priority: major type: task

openid/fapi#845 · 5 comments · 1 assignee · Opened Jul 2, 2026
FAPI not currently compliant with CNSA 2.0 Open

component: FAPI2: Security Profile migrated-from-bitbucket priority: minor type: bug

Difficulty 5/5 Over a week Newbie friendliness 28/100

openid/fapi#844 · 3 comments · Opened Jul 2, 2026
OAuth security BCP addition Open

component: FAPI2: Security Profile migrated-from-bitbucket priority: major type: bug

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/fapi#843 · 2 comments · Opened Jul 2, 2026
FAPI2.0 OSCAL Profile Open

component: FAPI2: Security Profile migrated-from-bitbucket priority: minor type: task

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/fapi#839 · 7 comments · Opened Jul 2, 2026
FAPI2: [Attacker Model ISO/IEC 26083-2 Review Comments] General and Editorial updates Open

component: FAPI2: Attacker Model migrated-from-bitbucket priority: major type: proposal

Difficulty 4/5 3-5 days Newbie friendliness 38/100

openid/fapi#838 · Opened Jul 2, 2026
FAPI2: [Security Profile ISO/IEC 26083-1 Review Comments] General and Editorial updates Open

component: FAPI2: Security Profile migrated-from-bitbucket priority: major type: proposal

Difficulty 4/5 3-5 days Newbie friendliness 35/100

openid/fapi#837 · 2 comments · Opened Jul 2, 2026
Abstract should not be there for FAPI1 Open

component: FAPI 1: Advanced migrated-from-bitbucket priority: major type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 62/100

openid/fapi#834 · 2 comments · Opened Jul 2, 2026
Yet other editorial fixes for ISO adoption Open

migrated-from-bitbucket priority: trivial type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

openid/fapi#833 · 1 comment · Opened Jul 2, 2026
Submit FAPI 2.0 MS IANA registrations Open

component: FAPI2: Message Signing migrated-from-bitbucket priority: major type: task

Difficulty 4/5 3-5 days Newbie friendliness 45/100

openid/fapi#832 · 3 comments · Opened Jul 2, 2026
Browser swapping attacks Open

component: FAPI2: Security Profile migrated-from-bitbucket priority: major type: bug

Difficulty 5/5 Over a week Newbie friendliness 35/100

openid/fapi#831 · 7 comments · Opened Jul 2, 2026
FAPI1: [ISO/IEC 25791-1 Review Comments] Remove "ISODIR2 ISO/IEC Directives Part 2" from Bibliography Open

component: FAPI 1: Baseline migrated-from-bitbucket priority: minor type: proposal

openid/fapi#769 · 3 comments · 1 assignee · Opened Jul 2, 2026
Some FAPI2SP clauses about the authorization code flow are in the wrong section Open

component: FAPI2: Security Profile migrated-from-bitbucket priority: major type: bug

openid/fapi#743 · 1 comment · 1 assignee · Opened Jul 2, 2026
Agent Payments Protocol (AP2) Impacts to FAPI Open

migrated-from-bitbucket priority: minor type: task

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/fapi#742 · 2 comments · Opened Jul 2, 2026
Is nbf a mandatory requirement for request object in FAPI 2 message signing? Open

component: FAPI2: Message Signing migrated-from-bitbucket priority: minor type: enhancement

openid/fapi#741 · 3 comments · 1 assignee · Opened Jul 2, 2026
Discuss collective issues impacting FAPI 1 Open

component: FAPI 1: Advanced migrated-from-bitbucket priority: minor type: task

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/fapi#739 · 3 comments · Opened Jul 2, 2026
Deprecation of FAPI2 ID2 tests Open

component: Certification migrated-from-bitbucket priority: major type: proposal

openid/fapi#738 · 8 comments · 1 assignee · Opened Jul 2, 2026
FAPI without (long lived) API access Open

component: Implementation & Deployment Advice migrated-from-bitbucket priority: minor type: enhancement

openid/fapi#737 · 7 comments · 1 assignee · Opened Jul 2, 2026
FAPI & Post-quantum cryptography Open

component: FAPI 1: Advanced migrated-from-bitbucket priority: major type: bug

Difficulty 5/5 Over a week Newbie friendliness 35/100

openid/fapi#736 · 4 comments · Opened Jul 2, 2026
JARM Downgrade Open

component: Implementation & Deployment Advice migrated-from-bitbucket priority: major type: proposal

Difficulty 5/5 Over a week Newbie friendliness 30/100

openid/fapi#733 · 8 comments · Opened Jul 2, 2026
Allow OAuth 2.0 Attestation-Based Client Authentication Open

component: FAPI2: Security Profile migrated-from-bitbucket priority: major type: bug

Difficulty 5/5 Over a week Newbie friendliness 30/100

openid/fapi#732 · 4 comments · Opened Jul 2, 2026
Client's Public Key Retrieval Open

component: FAPI2: Message Signing migrated-from-bitbucket priority: major type: bug

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/fapi#728 · 5 comments · Opened Jul 2, 2026
MCP Servers - Scope and RAR Open

component: Implementation & Deployment Advice migrated-from-bitbucket priority: minor type: bug

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/fapi#727 · 4 comments · Opened Jul 2, 2026
Create an Ecosystem comparison table. Open

component: Others migrated-from-bitbucket priority: major type: task

Difficulty 4/5 3-5 days Newbie friendliness 45/100

openid/fapi#726 · 2 comments · Opened Jul 2, 2026
Private key jwt aud restrictions Open

component: FAPI 1: Advanced migrated-from-bitbucket priority: major type: bug

openid/fapi#714 · 6 comments · 1 assignee · Opened Jul 2, 2026
Algorithms for HTTP message signatures Open

component: HTTP Signing migrated-from-bitbucket priority: major type: proposal

Difficulty 5/5 Over a week Newbie friendliness 30/100

openid/fapi#710 · 1 comment · Opened Jul 2, 2026
The keyid parameter Open

component: HTTP Signing migrated-from-bitbucket priority: major type: proposal

Difficulty 4/5 3-5 days Newbie friendliness 45/100

openid/fapi#709 · 2 comments · Opened Jul 2, 2026
Error codes for HTTP Message Signatures-related errors Open

component: HTTP Signing migrated-from-bitbucket priority: major type: proposal

Difficulty 5/5 Over a week Newbie friendliness 30/100

openid/fapi#707 · 4 comments · Opened Jul 2, 2026
"signature";req and "signature-input";req are not recommended Open

component: HTTP Signing migrated-from-bitbucket priority: major type: proposal

Difficulty 4/5 3-5 days Newbie friendliness 38/100

openid/fapi#706 · 17 comments · Opened Jul 2, 2026
JARM IANA registrations are missing Open

component: JARM migrated-from-bitbucket priority: major type: bug

openid/fapi#703 · 12 comments · 1 assignee · Opened Jul 2, 2026
Multiple HTTP message signatures in a single HTTP message Open

component: HTTP Signing migrated-from-bitbucket priority: major type: proposal

openid/fapi#702 · 5 comments · 1 assignee · Opened Jul 2, 2026
FAPI + FedCM Open

migrated-from-bitbucket priority: major type: bug

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/fapi#677 · 6 comments · Opened Jul 2, 2026
FAPI-CIBA shall be inheriting these sections from a chosen security profile (FAPI 1 or FAPI 2)? Open

component: CIBA migrated-from-bitbucket priority: major type: proposal

openid/fapi#675 · 1 comment · 1 assignee · Opened Jul 2, 2026
Define requirements for OpenAPI FAPI securityScheme type Open

component: Others migrated-from-bitbucket priority: major type: proposal

openid/fapi#648 · 13 comments · 1 assignee · Opened Jul 2, 2026
Implementations of FAPI2 Message Signing - Particularly HTTP Message Signatures Open

component: FAPI2: Message Signing migrated-from-bitbucket priority: major type: task

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/fapi#621 · 5 comments · Opened Jul 2, 2026
Pandoc publishing - the internal link names have I think changed Open

migrated-from-bitbucket priority: major type: bug

Difficulty 3/5 1-2 days Newbie friendliness 52/100

openid/fapi#602 · 1 comment · Opened Jul 2, 2026
Ability for AS to reject requests that have suspicious state/nonce or other params Open

component: Implementation & Deployment Advice migrated-from-bitbucket priority: minor type: bug

Difficulty 5/5 Over a week Newbie friendliness 30/100

openid/fapi#598 · 4 comments · Opened Jul 2, 2026
CIBA - Make clear limitation of binding message Open

component: CIBA migrated-from-bitbucket priority: major type: bug

openid/fapi#597 · 5 comments · 1 assignee · Opened Jul 2, 2026
Create a Resource Server Profile on top of FAPI 2 Open

component: Implementation & Deployment Advice migrated-from-bitbucket priority: minor type: proposal

Difficulty 5/5 Over a week Newbie friendliness 30/100

openid/fapi#595 · 3 comments · Opened Jul 2, 2026
Address concerns related to JWT Open

component: Implementation & Deployment Advice migrated-from-bitbucket priority: minor type: task

Difficulty 5/5 Over a week Newbie friendliness 25/100

openid/fapi#594 · 4 comments · Opened Jul 2, 2026
Using OIDC Federation and FAPI together Open

migrated-from-bitbucket priority: major type: bug

openid/fapi#583 · 4 comments · 1 assignee · Opened Jul 2, 2026
FAPI CIBA Open

component: CIBA migrated-from-bitbucket priority: major type: bug

openid/fapi#580 · 2 comments · 1 assignee · Opened Jul 2, 2026

openid/fapi

Get new issues in your inbox