w3c-fedid/FedCM

Issues

• Fields `name` and `given_name` have unclear usage

  #680 opened 2 months ago by aphillips
  4

• `IdentityProviderBranding` field `name` should provide lang and direction

  #679 opened 2 months ago by aphillips
  4

• Security considerations should be consistently organised by security risk?

  #685 opened a month ago by philsmart
  2

• Clarify the necessity to protect against device exfil attacks

  #664 opened 3 months ago by gioele-antoci
  4

• Horizontal Review preparation

  #652 opened 4 months ago by wseltzer
  5

• .

  #631 opened 2 months ago by Chanchaichoochuay007
  1

• IdP Blindness: Three Party OIDC

  #677 opened 2 months ago by samuelgoto
  1

• Allow for language negotiation or localization of privacy policy and TOS?

  #681 opened 2 months ago by aphillips
  1

• `Get Title` doesn't have language or direction metadata

  #682 opened 2 months ago by aphillips
  0

• Profile pictures have to be downloaded before filtering

  #672 opened 2 months ago by cbiesinger
  0

• Create a passkey and a federated assertion in a single unified prompt

  #671 opened 2 months ago by samuelgoto
  12

• In passive mode, clarify in the spec that the engine can make choices of what and whether to render prompts

  #675 opened 2 months ago by samuelgoto
  1

• Horizontal Review - i18n

  #673 opened 2 months ago by hlflanagan
  4

• Consider using `application/json` rather than `application/x-www-form-urlencoded` in the `id_assertion_endpoint`

  #644 opened 3 months ago by samuelgoto
  4

• Thoughts on FedCM full vs FedCM lite

  #665 opened 3 months ago by cbiesinger
  0

• OAuth profile for FedCM

  #599 opened 8 months ago by aaronpk
  17

• Secretle

  #663 opened 3 months ago by Resul0012
  1

• Add `interaction_required` error response

  #590 opened 8 months ago by aaronpk
  17

• `login_url` lacks a mode hint

  #602 opened 8 months ago by panva
  3

• Potential creation of (client_id, user) pairs through manipulated client_metadata links

  #659 opened 4 months ago by togamid
  1

• did think and communicate

  #649 opened 4 months ago by Smy0521
  5

• PR Preview broke

  #643 opened 4 months ago by npm1
  5

• Client authentication and consent creation

  #598 opened 8 months ago by yaron-zehavi
  12

• FedCM privacy concerns

  #595 opened 8 months ago by anderspitman
  20

• PP/TOS requirements are different from auto reauthentication

  #626 opened 5 months ago by npm1
  0

• Break the Login Status API spec out of the FedCM spec

  #641 opened 4 months ago by samuelgoto
  2

• Explainer is out of date. Should we remove it?

  #622 opened 4 months ago by samuelgoto
  3

• Allow selecting an account without email addresses

  #639 opened 5 months ago by samuelgoto
  18

• User Info API vs. preventSilentAccess

  #645 opened 4 months ago by johannhof
  1

• Specification Metadata outdated?

  #632 opened 5 months ago by lukewarlow
  1

• IdP Registration API: should the browser reveal to the RP when no IdP has registered before?

  #605 opened 5 months ago by samuelgoto
  3

• Returning accounts go first in getUserInfo

  #625 opened 5 months ago by npm1
  0

• Add webdriver command to open PP/TOS

  #627 opened 5 months ago by npm1
  0

• Support chained authentication flows before reducing heuristics and classifications/lists in navigational tracking mitigations

  #618 opened 7 months ago by judielaine
  3

• Spec says we send SameSite=Strict cookies

  #609 opened 7 months ago by cbiesinger
  0

• Providers list constraint violations should not result in a NetworkError

  #628 opened 5 months ago by timcappalli
  1

• Short IdP cookie lifetimes

  #621 opened 6 months ago by yoavweiss
  8

• Make it clearer that IdP needs to check Sec-Fetch-Dest

  #619 opened 7 months ago by npm1
  5

• Support signing in with an IdP using a redirection

  #617 opened 7 months ago by embesozzi
  2

• In addition to "use", "continue", "signin" and "signup", consider adding "pay" or "checkout"

  #615 opened 7 months ago by samuelgoto
  0

• Send `Accept-Language` in the HTTP requests

  #592 opened 8 months ago by samuelgoto
  9

• Error fetching the accounts list from localhost

  #608 opened 7 months ago by samuelgoto
  2

• infinite `login_url` loop when hints are not met

  #604 opened 8 months ago by panva
  7

• Validate email addresses before displaying them

  #607 opened 7 months ago by samuelgoto
  2

• Move the WPTs out of the credential-manager directory

  #611 opened 7 months ago by samuelgoto
  0

• FedCM IdP error responses

  #601 opened 8 months ago by panva
  5

• is `IdentityCredentialRequestOptionsContext` for FedCM UI only?

  #603 opened 8 months ago by panva
  5

• Bug - FedCM shows only 1st account after login

  #597 opened 8 months ago by yaron-zehavi
  5

• Account picture formats

  #600 opened 8 months ago by obfuscoder
  1

• Question: why use terms_of_service_url instead of tos_uri?

  #591 opened 8 months ago by ThisIsMissEm
  2