Search results

OIDC device code flow never returns id_token

Status: Open.

#968 In oauthlib/oauthlib;

· Henri-J-Norden opened on Aug 27, 2026

RFC 8707: repeated resource parameters collapse to the last value

Status: Open.

#959 In oauthlib/oauthlib;

· dopry opened on Jul 6, 2026

Device Grant Scopes not Validated

Bug

OAuth2-ProviderThis impact the provider part of OAuth2This impact the provider part of OAuth2

Status: Open.

#949 In oauthlib/oauthlib;

· dopry opened on May 7, 2026

Security Hardening: Reject duplicate authorization response parameters in parse_request_uri_response

Status: Open.

#948 In oauthlib/oauthlib;

· PabloCCanizares opened on May 3, 2026

Nonce would be more likely to be unique if more random bits replaced the timestamp

Status: Open.

#946 In oauthlib/oauthlib;

· here-abarany opened on Apr 16, 2026

Add validate_device_authorization_code() to RequestValidator to give DeviceCodeGrant symmetry with Authorization Code Grant

Status: Open.

#944 In oauthlib/oauthlib;

· dopry opened on Apr 1, 2026

JWTToken.estimate_type claims all JWT-shaped tokens, preventing BearerToken from handling JWT access tokens

Status: Open.

#939 In oauthlib/oauthlib;

· juannyG opened on Mar 17, 2026

Improve error message when application/x-www-form-urlencoded is not used for token requests

Status: Open.

#928 In oauthlib/oauthlib;

· Kris-Val opened on Nov 26, 2025

signed_token_generator does not include claims from request.claims.

Status: Open.

#926 In oauthlib/oauthlib;

· rorymurphy opened on Nov 11, 2025

Run CI tests based on build artifacts

Cleanup

Contributor Friendly

Feature

Status: Open.

#917 In oauthlib/oauthlib;

· JonathanHuot opened on Jul 12, 2025

How should we do type checking?

Discussion

Status: Open.

#916 In oauthlib/oauthlib;

· cclauss opened on Jul 11, 2025

Support for OIDC CIBA?

Status: Open.

#890 In oauthlib/oauthlib;

· tr33 opened on Dec 20, 2024