openid/authzen

Issues somebody may already be working on are listed last. List everything by date

• JFYI: Article on ways to express OAuth grants in generic PDP

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 1/5 Under an hour Newbie friendliness 35/100

  openid/authzen#794 · Opened Oct 29, 2026

  Maintainers usually reply within 1 day

• Profile for OAuth - Presentation of the client information

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#789 · 2 comments · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• Profiling representation of Security Token in AuthZEN requests

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#788 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• ARAP: which Context members a PDP binds to an approval

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 5/5 Over a week Newbie friendliness 32/100

  openid/authzen#787 · 1 comment · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• ARAP: withdraw the default next action cascade

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  openid/authzen#786 · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• ARAP: register approval_revoked and narrow approval_expired

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 3/5 1-2 days Newbie friendliness 58/100

  openid/authzen#785 · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• ARAP: bound retry and polling when no expiry is supplied

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 5/5 Over a week Newbie friendliness 38/100

  openid/authzen#784 · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• ARAP: what Context the PEP sends at re-evaluation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 4/5 3-5 days Newbie friendliness 38/100

  openid/authzen#783 · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• ARAP: state side-effect freedom and idempotency as invariants

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  openid/authzen#782 · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• May an entity `type`, `id` or action `name` be the empty string?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  openid/authzen#781 · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• Certification Scenario - Should `delete` appear in Action Search results?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/authzen#780 · Opened Oct 21, 2026

  Maintainers usually reply within 1 day

• Must a PDP accept a property whose value is null?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#779 · Opened Oct 21, 2026

  Maintainers usually reply within 1 day

• May a PDP reject a `charset` parameter on the request media type?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  openid/authzen#778 · Opened Oct 21, 2026

  Maintainers usually reply within 1 day

• Two scenario sentences the suite does not follow

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 1/5 Under an hour Newbie friendliness 55/100

  openid/authzen#777 · Opened Oct 21, 2026

  Maintainers usually reply within 1 day

• Certification Scenario fixture guarantee a second resource for Resource Search?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 2/5 1-3 hours Newbie friendliness 48/100

  openid/authzen#776 · Opened Oct 21, 2026

  Maintainers usually reply within 1 day

• A page returned for a changed page-token request: a continuation or a new search?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/authzen#775 · Opened Oct 21, 2026

  Maintainers usually reply within 1 day

• Certification Scenario §7.2.2, §7.3.2 and §7.4.2: identical results, or identical fixture results?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 2/5 1-3 hours Newbie friendliness 72/100

  openid/authzen#774 · Opened Oct 21, 2026

  Maintainers usually reply within 1 day

• What form should capability values take?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#771 · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• Sender authentication (spec §11.3)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/authzen#770 · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• Evaluation semantics

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  openid/authzen#769 · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• Resource hierarchy: declaring resource types, their tree, and the actions of each type

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/authzen#762 · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• Resource hierarchy: scoping Resource Search to a parent

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#761 · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• Resource hierarchy: convey ancestors in resource.properties and define subtree coverage

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/authzen#760 · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• ARAP: registry home and the claim of no IANA actions

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 4/5 3-5 days Newbie friendliness 38/100

  openid/authzen#755 · Opened Oct 18, 2026

  Maintainers usually reply within 1 day

• ARAP: capability declarations change the decision but are not bound

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 4/5 3-5 days Newbie friendliness 42/100

  openid/authzen#754 · Opened Oct 18, 2026

  Maintainers usually reply within 1 day

• Ambiguity in Section 7.2, Access Evaluations Response

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  errata

  Difficulty 2/5 1-3 hours Newbie friendliness 45/100

  openid/authzen#749 · Opened Oct 15, 2026

  Maintainers usually reply within 1 day

• Consistency issue between the `evaluation` and `evaluations` endpoints?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api errata

  Difficulty 5/5 Over a week Newbie friendliness 12/100

  openid/authzen#748 · 1 comment · Opened Oct 15, 2026

  Maintainers usually reply within 1 day

• Should the profile cover the authorization endpoint interaction, not only the token endpoint?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  oauth-as-profile

  Difficulty 5/5 Over a week Newbie friendliness 8/100

  openid/authzen#743 · 1 comment · 1 reaction · Opened Oct 14, 2026

  Maintainers usually reply within 1 day

• ARAP: the response-side approval object needs a PEP support signal

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 5/5 Over a week Newbie friendliness 8/100

  openid/authzen#740 · Opened Oct 13, 2026

  Maintainers usually reply within 1 day

• Use case: authorizing agent actions when the inputs behind them come from untrusted sources

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 8/100

  openid/authzen#733 · 2 comments · Opened Oct 8, 2026

  Maintainers usually reply within 1 day

• Search interop runner compares results as JSON strings, so member order decides PASS/FAIL

  May be free again A pull request for this issue was closed without being merged. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 88/100

  openid/authzen#693 · 3 comments · Opened Oct 3, 2026

  Maintainers usually reply within 1 day

• COAZ-MCP defines no mapping for `initialize`, so Unknown Methods denies it

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 48/100

  openid/authzen#657 · Opened Sep 18, 2026

  Maintainers usually reply within 1 day

• §11.6 signed responses... time to revisit?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#656 · 1 comment · Opened Sep 17, 2026

  Maintainers usually reply within 1 day

• Agent context profile: proposed property names for principal, delegation chain and attestation state

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  coaz

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#655 · 1 comment · Opened Sep 17, 2026

  Maintainers usually reply within 1 day

• Conformance suite: pdp_auth_type=api_key is unusable with discovery, and blocks the invalid-credentials 401 module

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  certification

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  openid/authzen#641 · 2 comments · Opened Sep 7, 2026

  Maintainers usually reply within 1 day

• Conformance suite batch default-value module tests sub-field merging, which c-3-2-7 and #231 rule out

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  certification

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  openid/authzen#640 · 1 comment · Opened Sep 6, 2026

  Maintainers usually reply within 1 day

• ARAP: inconsistencies and over-stepping

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/authzen#610 · Opened Aug 6, 2026

  Maintainers usually reply within 1 day

• decision_ref binding: pin to binding_token now, or track ARAP as published?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#606 · Opened Aug 4, 2026

  Maintainers usually reply within 1 day

• IANA registrations

  May be free again @tulshi claimed this 94 days ago, and no pull request is open. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api

  openid/authzen#597 · 6 comments · 1 assignee · Opened Jul 30, 2026

  Maintainers usually reply within 1 day

• AI agent example is unclear

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 2/5 1-3 hours Newbie friendliness 50/100

  openid/authzen#579 · Opened Jul 24, 2026

  Maintainers usually reply within 1 day

• Drop classic deployments paragraph

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 2/5 1-3 hours Newbie friendliness 72/100

  openid/authzen#578 · 3 comments · Opened Jul 24, 2026

  Maintainers usually reply within 1 day

• Policy Decision Point (PDP) neutral packaging format for policy store

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  policy-store

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/authzen#542 · 14 comments · 1 reaction · Opened Jun 29, 2026

  Maintainers usually reply within 1 day

• Obligations and Constraints

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  advice-obligations-constraints

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#521 · 4 comments · Opened Jun 11, 2026

  Maintainers usually reply within 1 day

• ARAP does too many things

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#520 · 6 comments · Opened Jun 10, 2026

  Maintainers usually reply within 1 day

• What about autonomous use cases, where the agent is running without a user principal?

  May be free again @tulshi claimed this 45 days ago, and no pull request is open. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  coaz

  openid/authzen#483 · 4 comments · 1 assignee · Opened Apr 14, 2026

  Maintainers usually reply within 1 day

• Support for Indeterminate Decision / Evaluation Status in Authorization Responses

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#456 · 2 comments · Opened Mar 19, 2026

  Maintainers usually reply within 1 day

• [Feature Request] Add 'delegation_chain' to Subject for AI Agent and Multi-Actor Scenarios

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 30/100

  openid/authzen#416 · 4 comments · Opened Dec 29, 2025

  Maintainers usually reply within 1 day

• Certification Scenario Batch cases 6.2.1 and 6.2.6: may the harness check the fixture decision they contain?

  Possibly taken @alexolivier claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 3/5 1-2 days Newbie friendliness 48/100

  openid/authzen#773 · 1 comment · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• Must a PDP echo X-Request-ID on error responses?

  Possibly taken @alexolivier claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 4/5 3-5 days Newbie friendliness 42/100

  openid/authzen#772 · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• An endpoint missing from the PDP metadata: "not capable", or use the default path?

  Possibly taken @alexolivier claimed this 3 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 4/5 3-5 days Newbie friendliness 42/100

  openid/authzen#768 · 1 comment · Opened Oct 20, 2026

  Maintainers usually reply within 1 day