Issues

• Search interop runner compares results as JSON strings, so member order decides PASS/FAIL

  openid/authzen#693 · Filter by author kanywst opened on Oct 3, 2026

• Markdown rendering of the Obligations profile has an error

  advice-obligations-constraintsbug
  Bug

  openid/authzen#686 · Filter by author davidjbrossard opened on Sep 30, 2026
  1

  

• A step-up obligation is not actionable at the token endpoint

  oauth-as-profile
  openid/authzen#674 · Filter by author ogazitt opened on Sep 23, 2026

• Token endpoint error semantics: denial, narrowing, and fail-closed

  oauth-as-profile
  openid/authzen#672 · Filter by author ogazitt opened on Sep 23, 2026

• An authorization_code request mints two tokens but forms only one gate tuple

  oauth-as-profile
  openid/authzen#670 · Filter by author ogazitt opened on Sep 23, 2026
  1

• ARAP: should signed binding be a separately claimed conformance target?

  access-requests
  openid/authzen#666 · Filter by author mcguinness opened on Sep 21, 2026
  1

• ARAP: the base Task Handle surface and extensibility

  access-requests
  openid/authzen#665 · Filter by author mcguinness opened on Sep 21, 2026

• ARAP: submission processing order

  access-requests
  openid/authzen#664 · Filter by author mcguinness opened on Sep 21, 2026

• ARAP: the PEP's re-evaluation round trip is underspecified

  access-requests
  openid/authzen#663 · Filter by author mcguinness opened on Sep 21, 2026
  2

• ARAP: binding rules do not name which identity they compare

  access-requests
  openid/authzen#662 · Filter by author mcguinness opened on Sep 21, 2026

• ARAP: issuer and audience identifiers and key discovery

  access-requests
  openid/authzen#661 · Filter by author mcguinness opened on Sep 21, 2026

• ARAP: the inline denial-binding form and the PEP's echo

  access-requests
  openid/authzen#660 · Filter by author mcguinness opened on Sep 21, 2026
  1

• ARAP: signed approval state has no interoperable payload

  access-requests
  openid/authzen#659 · Filter by author mcguinness opened on Sep 21, 2026
  1

• COAZ-MCP defines no mapping for initialize, so Unknown Methods denies it

  openid/authzen#657 · Filter by author kanywst opened on Sep 18, 2026

• §11.6 signed responses... time to revisit?

  authorization-api
  openid/authzen#656 · Filter by author sftimeless opened on Sep 17, 2026

• Agent context profile: proposed property names for principal, delegation chain and attestation state

  coaz
  openid/authzen#655 · Filter by author javmann100 opened on Sep 17, 2026

• Conformance suite: pdp_auth_type=api_key is unusable with discovery, and blocks the invalid-credentials 401 module

  certification
  openid/authzen#641 · Filter by author kanywst opened on Sep 7, 2026
  2

• Conformance suite batch default-value module tests sub-field merging, which c-3-2-7 and #231 rule out

  certification
  openid/authzen#640 · Filter by author kanywst opened on Sep 6, 2026
  1

• Separate gate and scope tuples by resource.type instead of the reserved issue: prefix

  oauth-as-profile
  openid/authzen#638 · Filter by author ogazitt opened on Sep 4, 2026
  1

  

• issue:id_token:* gates have no defined audience resource

  oauth-as-profile
  openid/authzen#636 · Filter by author ogazitt opened on Sep 4, 2026
  1

  

• Should context.agent be trust-anchored when derived from the validated token?

  coaz
  openid/authzen#612 · Filter by author arjun2075 opened on Aug 9, 2026
  18

• ARAP: inconsistencies and over-stepping

  access-requests
  openid/authzen#610 · Filter by author baboulebou opened on Aug 6, 2026

• decision_ref binding: pin to binding_token now, or track ARAP as published?

  access-requests
  openid/authzen#606 · Filter by author anivar opened on Aug 4, 2026

• Metadata parameter is named capabilities in §9.1.2 but referenced as supported_capabilities in §8.2.2

  authorization-apierrata
  openid/authzen#601 · Filter by author ogazitt opened on Aug 1, 2026
  

• IANA registrations

  authorization-api
  openid/authzen#597 · Filter by author ogazitt opened on Jul 30, 2026
  6