Issues

• Certification Scenario Batch cases 6.2.1 and 6.2.6: may the harness check the fixture decision they contain?

  openid/authzen#773 · Filter by author ewjay opened on Oct 20, 2026

• Must a PDP echo X-Request-ID on error responses?

  openid/authzen#772 · Filter by author ewjay opened on Oct 20, 2026

• What form should capability values take?

  openid/authzen#771 · Filter by author ewjay opened on Oct 20, 2026

• Sender authentication (spec §11.3)

  openid/authzen#770 · Filter by author ewjay opened on Oct 20, 2026

• Evaluation semantics

  openid/authzen#769 · Filter by author ewjay opened on Oct 20, 2026

• An endpoint missing from the PDP metadata: "not capable", or use the default path?

  openid/authzen#768 · Filter by author ewjay opened on Oct 20, 2026

• X-Request-ID: a MUST header (scenario) or a RECOMMENDED header (spec)?

  openid/authzen#767 · Filter by author ewjay opened on Oct 20, 2026

• An action member in an Action Search request

  openid/authzen#766 · Filter by author ewjay opened on Oct 20, 2026

• Empty results for unknown identifiers and types (scenario §7.6) vs the fixture notes

  openid/authzen#765 · Filter by author ewjay opened on Oct 20, 2026

• Pagination: is page.limit binding, how does a paginated search end, must limit be repeated?

  openid/authzen#764 · Filter by author ewjay opened on Oct 20, 2026

• A batch evaluation that has no subject, action or resource at any level: 400 or decision: false?

  openid/authzen#763 · Filter by author ewjay opened on Oct 20, 2026

• Resource hierarchy: declaring resource types, their tree, and the actions of each type

  openid/authzen#762 · Filter by author SCcagg5 opened on Oct 20, 2026

• Resource hierarchy: scoping Resource Search to a parent

  openid/authzen#761 · Filter by author SCcagg5 opened on Oct 20, 2026

• Resource hierarchy: convey ancestors in resource.properties and define subtree coverage

  openid/authzen#760 · Filter by author SCcagg5 opened on Oct 20, 2026

• ARAP: registry home and the claim of no IANA actions

  access-requests
  openid/authzen#755 · Filter by author mcguinness opened on Oct 18, 2026

• ARAP: capability declarations change the decision but are not bound

  access-requests
  openid/authzen#754 · Filter by author mcguinness opened on Oct 18, 2026

• Ambiguity in Section 7.2, Access Evaluations Response

  errata
  openid/authzen#749 · Filter by author ogazitt opened on Oct 15, 2026

• Consistency issue between the evaluation and evaluations endpoints?

  authorization-apierrata
  openid/authzen#748 · Filter by author davidjbrossard opened on Oct 15, 2026
  1

• ARAP: approval_unverifiable conflates verification failure with verification unavailability

  access-requests
  openid/authzen#747 · Filter by author mcguinness opened on Oct 14, 2026

• ARAP: an approval can outlive the authority that granted it

  access-requests
  openid/authzen#746 · Filter by author mcguinness opened on Oct 14, 2026

• ARAP: the acting party has no carrier at re-evaluation

  access-requests
  openid/authzen#744 · Filter by author mcguinness opened on Oct 14, 2026

• Should the profile cover the authorization endpoint interaction, not only the token endpoint?

  oauth-as-profile
  openid/authzen#743 · Filter by author ogazitt opened on Oct 14, 2026
  1

• ARAP: the response-side approval object needs a PEP support signal

  access-requests
  openid/authzen#740 · Filter by author mcguinness opened on Oct 13, 2026
  1

• ARAP: single-use approval for actions that can't be undone

  access-requests
  openid/authzen#737 · Filter by author Dimchik1990 opened on Oct 12, 2026
  9

• Use case: authorizing agent actions when the inputs behind them come from untrusted sources

  openid/authzen#733 · Filter by author yotam-vidi opened on Oct 8, 2026
  2