Skip to content

Issues: authlib/authlib

Beta
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

104 Open 388 Closed
104 Open 388 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

RFC7523 JWT Bearer token grant misconception documentation
#769 opened May 3, 2025 by azmeuk
Migration to joserfc
#766 opened Apr 30, 2025 by azmeuk
Support for decoding existing access tokens client Concerns a client implementation
#764 opened Apr 29, 2025 by Aetylus
1
1
LinkedIn login failure: Flag to skip verifying nonce client Concerns a client implementation
#763 opened Apr 28, 2025 by t-o-o-m
The token endpoint auth method none should always be valid when the only grant type of the client is implicit server Concerns a server implementation
#759 opened Apr 27, 2025 by azmeuk
Support the OIDC claims authorization request parameter server Concerns a server implementation
#758 opened Apr 26, 2025 by azmeuk
Prevent authorization code reuse server Concerns a server implementation
#757 opened Apr 26, 2025 by azmeuk
Token validators should look for access tokens in other places than the Authorization header server Concerns a server implementation
#756 opened Apr 26, 2025 by azmeuk
Use the client metadata id_token_signed_response_alg to sign the id_token server Concerns a server implementation
#755 opened Apr 26, 2025 by azmeuk
JWT Secured Authorization Response Mode for OAuth 2.0 (JARM) server Concerns a server implementation spec Related to a RFC
#753 opened Apr 25, 2025 by azmeuk
RFC 9728 OAuth 2.0 Protected Resource Metadata server Concerns a server implementation spec Related to a RFC
#752 opened Apr 24, 2025 by azmeuk
Support for the OIDC acr_values authorization request parameter server Concerns a server implementation
#744 opened Apr 11, 2025 by azmeuk
1
Support for OIDC max_age claim server Concerns a server implementation
#741 opened Apr 10, 2025 by azmeuk
A ConsentRequired error should be raised when consent is needed but prompt is none server Concerns a server implementation
#740 opened Apr 10, 2025 by azmeuk
Initiating User Registration via OpenID Connect 1.0 good first issue spec Related to a RFC
#735 opened Apr 4, 2025 by azmeuk
RFC7523 - The AS iss value should be a valid aud in client JWT authentication server Concerns a server implementation
#730 opened Mar 31, 2025 by azmeuk
RFC9126 Pushed Authorization Requests (PAR) spec Related to a RFC
#724 opened Mar 19, 2025 by azmeuk
RFC9101 JWT-Secured Authorization Request (JAR) spec Related to a RFC
#723 opened Mar 19, 2025 by azmeuk
1
OAuthError: invalid_client: Client authentication failed | LinkedIn Login with OpenID Connect client Concerns a client implementation
#719 opened Mar 7, 2025 by coderkovid
@lepture
2
Agressive leeway in OAuth2 prevents OIDC flow from working client Concerns a client implementation
#716 opened Mar 5, 2025 by nonsleepr
@lepture
1
Making redirect_uri required in client authentication requests to match OIDC specification server Concerns a server implementation
#712 opened Feb 25, 2025 by funelie
Client-side support for plain code challenge method client Concerns a client implementation
#709 opened Feb 20, 2025 by azmeuk
OAuth2Session does not set a default http 'User-Agent' header client Concerns a client implementation
#704 opened Feb 11, 2025 by gwelch-contegix
@lepture
RFC9207 - OAuth 2.0 Authorization Server Issuer Identification client Concerns a client implementation server Concerns a server implementation spec Related to a RFC
#700 opened Feb 5, 2025 by azmeuk
fetch_token does not use the client_id and client_secret provided to OAuth2Session client Concerns a client implementation
#699 opened Feb 4, 2025 by gcbirzan-plutoflume
1
ProTip! Adding no:label will show everything without a label.