Issues

• Support RFC 9207 issuer identification (iss) in authorization responses

  zitadel/oidc#1005 · Filter by author azuretek opened on Oct 9, 2026

• [Bug]: Storage errors classified as server_error are flattened to invalid_client during client authentication

  Bug

  zitadel/oidc#990 · Filter by author aymkhalil opened on Sep 29, 2026

• [Bug]: content-type not checked during discovery

  Bug

  zitadel/oidc#967 · Filter by author cboitel opened on Aug 31, 2026
  3

  

• Preserve infrastructure errors in rp helpers

  Enhancement

  zitadel/oidc#961 · Filter by author jkroepke opened on Aug 26, 2026

• Proposal: single config-struct constructor for RelyingParty (and ResourceServer) client construction

  Enhancement

  zitadel/oidc#944 · Filter by author muhlemmer opened on Aug 13, 2026

• Make discovery grant and response types configurable

  zitadel/oidc#924 · Filter by author ryanio opened on Jul 20, 2026

• Make package usable for Telegram OP

  Enhancement

  zitadel/oidc#908 · Filter by author ulibaysya opened on Jul 3, 2026
  2

• Support private_key_jwt client authentication for client_credentials grant

  Enhancement

  zitadel/oidc#890 · Filter by author nurazon59 opened on May 9, 2026

• [Bug]: Cannot supply multiple client credentials on Okta

  Bug

  zitadel/oidc#857 · Filter by author suqin-haha opened on Mar 12, 2026

• Userinfo endpoint discards JWT claims

  zitadel/oidc#849 · Filter by author mohammadlashkari opened on Feb 14, 2026

• Cookie handler (v4)

  Enhancement

  zitadel/oidc#847 · Filter by author nickheyer opened on Feb 11, 2026

• rp.AuthURLHandler state function should accept http.Request

  Enhancement

  zitadel/oidc#838 · Filter by author CharlesPhilippeLabbe opened on Jan 15, 2026
  2

• [Bug]: Multiple authentication methods in Device Auth flow -> rejected by Authelia

  area/auth
  Bug

  zitadel/oidc#830 · Filter by author bjackman opened on Jan 11, 2026
  3

• Support of RFC-8707

  Enhancement

  zitadel/oidc#794 · Filter by author zekth opened on Sep 1, 2025
  1

• [Bug]: PKCE not supported for Device Authorization

  area/auth
  Enhancement

  zitadel/oidc#784 · Filter by author jonyoder opened on Aug 12, 2025
  2

• Support setting registration_endpoint metadata via option.

  area/auth
  Enhancement

  zitadel/oidc#763 · Filter by author zekth opened on Jun 26, 2025
  3

• IDToken in TokenExchangeReponse

  area/authservice-layer
  zitadel/oidc#748 · Filter by author lmindwarel opened on May 12, 2025
  2

• Support a TTL for rp.NewRemoteKeySet cache

  area/auth
  Enhancement

  zitadel/oidc#747 · Filter by author strideynet opened on May 9, 2025
  5

• Better control over expiration and IssuedAtOffset for grace periods

  area/auth
  zitadel/oidc#740 · Filter by author EthanHeilman opened on Apr 21, 2025
  6

• Allow enforcing limits on response sizes consumed

  area/auth
  zitadel/oidc#738 · Filter by author rosstimothy opened on Apr 16, 2025
  1

• The authentication response should also be able to return session_state.

  area/auth
  zitadel/oidc#670 · Filter by author nannany opened on Oct 27, 2024
  3

• PostLogoutRedirectURIGlobs uses path.Match and RedirectURIGlobs uses doublestar.Match

  area/auth
  zitadel/oidc#668 · Filter by author rbinder-vg opened on Oct 24, 2024
  2

• allow supplying extra login params to cli.CodeFlow

  area/auth
  zitadel/oidc#659 · Filter by author dovholuknf opened on Oct 4, 2024
  4

• Allow empty nonce from ID Tokens issued from Refresh Tokens

  area/auth
  zitadel/oidc#509 · Filter by author jkroepke opened on Jan 5, 2024
  10

• JWT Assertion payload does not match RFC example when generated with OIDC relying party

  area/auth
  zitadel/oidc#452 · Filter by author Kunde21 opened on Oct 4, 2023
  8