mattrglobal/draft-looker-oauth-client-id-scheme

Issues

• Remove unnecessary client_uri parameter

  #13 opened 2 years ago by selfissued
  4

• Add a security consideration for Server Side Request Forgey (SSRF)

  #11 opened 2 years ago by CheariX
  6

• Including the `client_discovery` parameter or not

  #19 opened 2 years ago by tplooker
  2

• Make it clear that a single client can have multiple metadata documents for different AS's

  #22 opened 2 years ago by tplooker
  0

• Add tos_uri and policy_uri to example metadata

  #21 opened 2 years ago by tplooker
  0

• Security Consideration - Referencing RFC 8414 vs defining in the spec

  #6 opened 2 years ago by karthiknz
  1

• Add a security consideration around trusting metadata elements that describe the clients identity

  #10 opened 2 years ago by tplooker
  1

• Define an AS metadata element so that an AS can advertise support for client discovery

  #23 opened 2 years ago by tplooker
  0

• Remove client password language in section 5

  #20 opened 2 years ago by tplooker
  0

• Certain metadata elements pose vectors for impersonation

  #17 opened 2 years ago by tplooker
  0

• Retain compatibility with equivalent OpenID Connect feature

  #12 opened 2 years ago by selfissued
  1

• Inserting .well-known at the beginning of the path is unworkable

  #15 opened 2 years ago by selfissued
  0

• Signing requests can prevent impersonation attacks

  #14 opened 2 years ago by selfissued
  0

• TODO - Compatibility Notes

  #7 opened 2 years ago by karthiknz
  0

• Placeholder to add operational considerations

  #5 opened 2 years ago by karthiknz
  0