-
Notifications
You must be signed in to change notification settings - Fork 3
OAuth security BCP addition #843
Copy link
Copy link
Open
Labels
component: FAPI2: Security ProfileFAPI2: Security ProfileFAPI2: Security Profilemigrated-from-bitbucketMigrated from BitbucketMigrated from Bitbucketpriority: majorMajor priorityMajor prioritytype: bugBug reportBug report
Description
Activity
Metadata
Metadata
Assignees
Labels
component: FAPI2: Security ProfileFAPI2: Security ProfileFAPI2: Security Profilemigrated-from-bitbucketMigrated from BitbucketMigrated from Bitbucketpriority: majorMajor priorityMajor prioritytype: bugBug reportBug report
Note that there's an update to the OAuth security in progress:
https://datatracker.ietf.org/doc/draft-ietf-oauth-security-topics-update/
We should probably address the document and each mentioned attack in some way.
1 attack is the private_key_jwt aud issue that's already addressed. I'm not sure about the others.
Bitbucket status: new
Bitbucket origin: issue 855