Skip to content

Issues: oauth-wg/draft-ietf-oauth-attestation-based-client-auth

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

25 Open 33 Closed
25 Open 33 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Add section to consider usage at RS
#95 opened Dec 13, 2024 by paulbastian
JWT examples are missing the typ header parameter
#94 opened Nov 22, 2024 by TakahikoKawasaki
Remove backslash for line wrapping from examples discuss
#89 opened Oct 20, 2024 by c2bo
Take lessons learned from nonce endpoint in OpenID4VCI and apply to this draft discuss
#85 opened Oct 9, 2024 by paulbastian -03
@tplooker
Rewrite introduction that the main purpose is not about key attestation ready-for-pr
#84 opened Oct 9, 2024 by paulbastian -03
@paulbastian
client_id optional in the request body discuss
#81 opened Jul 26, 2024 by Sakurann
1
Usage of "public clients" / "deployments traditionally viewed as a public client" discuss
#79 opened May 22, 2024 by paulbastian
3
Add relevant oauth error responses to token requests when the client attestation is invalid ready-for-pr
#73 opened Mar 27, 2024 by tplooker
Propose to change the draft name discuss
#71 opened Mar 26, 2024 by tlodderstedt
3
Register AS and client metadata for algorithm negotiation of attestations and pops
#70 opened Mar 23, 2024 by tplooker
Usecase: authenticating the key used for DPoP bound access tokens back to the client
#69 opened Jan 25, 2024 by tplooker
Introducing a general purpose assertion-based client authentication with holder-of-key JWT
#68 opened Jan 18, 2024 by ju-cu
5
Include guidance to use token_endoint_auth_methods_support
#66 opened Nov 24, 2023 by paulbastian
IETF 118: Overlap/Synergies with "Attestation in Dynamic Client Registration Draft"
#62 opened Nov 10, 2023 by paulbastian
2
IETF 118 : Should this mechanism be used in parallel with Client Authentication /with Dynamic Client Registration
#61 opened Nov 10, 2023 by paulbastian
18
Using a server provided nonce to limit the lifetime of a Client Attestation PoP JWT
#59 opened Nov 8, 2023 by pmhsfelix
1
6
Extend the draft to define a new grant type
#58 opened Nov 5, 2023 by Sakurann
1
Authorization code binding to client instance
#56 opened Oct 24, 2023 by cobward
3
PoP attestation binding
#47 opened Sep 25, 2023 by peppelinux
5
Replay prevention
#39 opened Sep 6, 2023 by paulbastian
3
Should token_endpoint_auth_signing_alg be considered?
#35 opened Jul 21, 2023 by TakahikoKawasaki
5
Client Backend -> Client Attester
#32 opened Jul 16, 2023 by TakahikoKawasaki
@paulbastian
7
Client Key Attestation JWT Example
#13 opened May 30, 2023 by fmarino-ipzs
@paulbastian
20
sub value
#4 opened May 13, 2023 by Sakurann
26
Trust
#3 opened May 9, 2023 by Sakurann
@paulbastian
6
ProTip! Mix and match filters to narrow down what you’re looking for.