Search results

Security Consideration: discourage clients from using dynamic CIMD documents

Status: Open.

#89 In oauth-wg/draft-ietf-oauth-client-id-metadata-document;

· itsvs opened on Jul 10, 2026

Requiring ASes to return the iss parameter for mix-up prevention

ietf-126

Status: Open.

#88 In oauth-wg/draft-ietf-oauth-client-id-metadata-document;

· itsvs opened on Jul 9, 2026

Add token_endpoint_auth_methods_supported to client metadata

ietf-126

Status: Open.

#87 In oauth-wg/draft-ietf-oauth-client-id-metadata-document;

· aaronpk opened on Jul 8, 2026

Disallow the root path / as a CIMD URL

ietf-126

Status: Open.

#86 In oauth-wg/draft-ietf-oauth-client-id-metadata-document;

· aaronpk opened on Jul 2, 2026

Be more prescriptive about how the AS should return errors

ietf-126

Status: Open.

#85 In oauth-wg/draft-ietf-oauth-client-id-metadata-document;

· aaronpk opened on Jul 2, 2026

Add guidance for pattern-based Client ID Metadata Document URL admission policies

Status: Open.

#82 In oauth-wg/draft-ietf-oauth-client-id-metadata-document;

· anoopgarlapati opened on May 18, 2026

Section 4.5 Redirect URIs

enhancementNew feature or requestNew feature or request

Status: Open.

#81 In oauth-wg/draft-ietf-oauth-client-id-metadata-document;

· ThisIsMissEm opened on May 16, 2026

Privacy Considerations Section

Status: Open.

Feature

#80 In oauth-wg/draft-ietf-oauth-client-id-metadata-document;

· ThisIsMissEm opened on May 16, 2026

Can AS optionally provide iss when fetching client_id?

ietf-126

Status: Open.

#78 In oauth-wg/draft-ietf-oauth-client-id-metadata-document;

· njwatson32 opened on May 1, 2026

Negative caching

Status: Open.

#77 In oauth-wg/draft-ietf-oauth-client-id-metadata-document;

· njwatson32 opened on May 1, 2026

Mixup attacks with issuer identifiers

Status: Open.

#76 In oauth-wg/draft-ietf-oauth-client-id-metadata-document;

· erincandescent opened on Apr 13, 2026

Ambiguity around application_type when metadata defaults and usage patterns point to different client types

Status: Open.

#75 In oauth-wg/draft-ietf-oauth-client-id-metadata-document;

· btiernay opened on Apr 6, 2026