Issues

• JFYI: Article on ways to express OAuth grants in generic PDP

  openid/authzen#794 · Filter by author adedov opened on Oct 29, 2026

• Profile for OAuth - Presentation of the client information

  openid/authzen#789 · Filter by author identitymonk opened on Oct 26, 2026
  2

• Profiling representation of Security Token in AuthZEN requests

  openid/authzen#788 · Filter by author identitymonk opened on Oct 26, 2026

• ARAP: which Context members a PDP binds to an approval

  access-requests
  openid/authzen#787 · Filter by author mcguinness opened on Oct 22, 2026
  1

• ARAP: withdraw the default next action cascade

  access-requests
  openid/authzen#786 · Filter by author mcguinness opened on Oct 22, 2026

• ARAP: register approval_revoked and narrow approval_expired

  access-requests
  openid/authzen#785 · Filter by author mcguinness opened on Oct 22, 2026

• ARAP: bound retry and polling when no expiry is supplied

  access-requests
  openid/authzen#784 · Filter by author mcguinness opened on Oct 22, 2026

• ARAP: what Context the PEP sends at re-evaluation

  access-requests
  openid/authzen#783 · Filter by author mcguinness opened on Oct 22, 2026

• ARAP: state side-effect freedom and idempotency as invariants

  access-requests
  openid/authzen#782 · Filter by author mcguinness opened on Oct 22, 2026

• May an entity type, id or action name be the empty string?

  authorization-apicertification
  openid/authzen#781 · Filter by author ewjay opened on Oct 22, 2026

• Certification Scenario - Should delete appear in Action Search results?

  authorization-apicertification
  openid/authzen#780 · Filter by author ewjay opened on Oct 21, 2026

• Must a PDP accept a property whose value is null?

  authorization-apicertification
  openid/authzen#779 · Filter by author ewjay opened on Oct 21, 2026

• May a PDP reject a charset parameter on the request media type?

  authorization-apicertification
  openid/authzen#778 · Filter by author ewjay opened on Oct 21, 2026

• Two scenario sentences the suite does not follow

  authorization-apicertification
  openid/authzen#777 · Filter by author ewjay opened on Oct 21, 2026

• Certification Scenario fixture guarantee a second resource for Resource Search?

  authorization-apicertification
  openid/authzen#776 · Filter by author ewjay opened on Oct 21, 2026

• A page returned for a changed page-token request: a continuation or a new search?

  authorization-apicertification
  openid/authzen#775 · Filter by author ewjay opened on Oct 21, 2026

• Certification Scenario §7.2.2, §7.3.2 and §7.4.2: identical results, or identical fixture results?

  authorization-apicertification
  openid/authzen#774 · Filter by author ewjay opened on Oct 21, 2026

• Certification Scenario Batch cases 6.2.1 and 6.2.6: may the harness check the fixture decision they contain?

  authorization-apicertification
  openid/authzen#773 · Filter by author ewjay opened on Oct 20, 2026
  1

• Must a PDP echo X-Request-ID on error responses?

  authorization-apicertification
  openid/authzen#772 · Filter by author ewjay opened on Oct 20, 2026

• What form should capability values take?

  authorization-apicertification
  openid/authzen#771 · Filter by author ewjay opened on Oct 20, 2026

• Sender authentication (spec §11.3)

  authorization-apicertification
  openid/authzen#770 · Filter by author ewjay opened on Oct 20, 2026

• Evaluation semantics

  authorization-apicertification
  openid/authzen#769 · Filter by author ewjay opened on Oct 20, 2026

• An endpoint missing from the PDP metadata: "not capable", or use the default path?

  authorization-apicertification
  openid/authzen#768 · Filter by author ewjay opened on Oct 20, 2026
  1

• X-Request-ID: a MUST header (scenario) or a RECOMMENDED header (spec)?

  authorization-apicertification
  openid/authzen#767 · Filter by author ewjay opened on Oct 20, 2026
  1

• An action member in an Action Search request

  authorization-apicertification
  openid/authzen#766 · Filter by author ewjay opened on Oct 20, 2026
  1