Search results

Device Grant Scopes not Validated

Status: Open.

#949 In oauthlib/oauthlib;

· dopry opened on May 7, 2026

Security Hardening: Reject duplicate authorization response parameters in parse_request_uri_response

Status: Open.

#948 In oauthlib/oauthlib;

· PabloCCanizares opened on May 3, 2026

Nonce would be more likely to be unique if more random bits replaced the timestamp

Status: Open.

#946 In oauthlib/oauthlib;

· here-abarany opened on Apr 16, 2026

Add validate_device_authorization_code() to RequestValidator to give DeviceCodeGrant symmetry with Authorization Code Grant

Status: Open.

#944 In oauthlib/oauthlib;

· dopry opened on Apr 1, 2026

JWTToken.estimate_type claims all JWT-shaped tokens, preventing BearerToken from handling JWT access tokens

Status: Open.

#939 In oauthlib/oauthlib;

· juannyG opened on Mar 17, 2026

Improve error message when application/x-www-form-urlencoded is not used for token requests

Status: Open.

#928 In oauthlib/oauthlib;

· Kris-Val opened on Nov 26, 2025

signed_token_generator does not include claims from request.claims.

Status: Open.

#926 In oauthlib/oauthlib;

· rorymurphy opened on Nov 11, 2025

DeviceCodeGrant.validate_token_request tries to authenticate public clients

OAuth2-ProviderThis impact the provider part of OAuth2This impact the provider part of OAuth2

Status: Open.

Bug

#919 In oauthlib/oauthlib;

· hekhuisk opened on Jul 14, 2025

·  

3.4.0

Run CI tests based on build artifacts

Cleanup

Contributor Friendly

Feature

Status: Open.

#917 In oauthlib/oauthlib;

· JonathanHuot opened on Jul 12, 2025

How should we do type checking?

Discussion

Status: Open.

#916 In oauthlib/oauthlib;

· cclauss opened on Jul 11, 2025

Support for OIDC CIBA?

Status: Open.

#890 In oauthlib/oauthlib;

· tr33 opened on Dec 20, 2024

validate_token_parameters should only error if there are missing scopes

Status: Open.

#888 In oauthlib/oauthlib;

· justmobilize opened on Nov 6, 2024