Search results

Support OAuth 2.1

Status: Open.

#787 In authlib/authlib;

· Avantol13 opened on Jul 24, 2025

ValueError: Invalid JSON Web Key Set raised when duplicate keys exist in JWKS

bug

Status: Open.

#785 In authlib/authlib;

· bruceduhamel opened on Jul 22, 2025

Refresh token with client credentials grant does not use access_token_params

bug

Status: Open.

#783 In authlib/authlib;

· markhobson opened on Jul 22, 2025

OAuth2Request in RFC6749 no longer takes "body" but version not bumped to breaking change

bug

Status: Open.

#781 In authlib/authlib;

· brad-getpassport opened on Jun 28, 2025

Refresh token with requests session, client_credentials grant and without explicitly provided grant_type breaks

bug

Status: Open.

#780 In authlib/authlib;

· iivanov-qb opened on Jun 26, 2025

authorize_access_token doesn't raise MissingCodeException when code parameter missing

bug

Status: Open.

#777 In authlib/authlib;

· markhobson opened on Jun 18, 2025

FastAPI ResourceProtector integration

Status: Open.

Feature

#775 In authlib/authlib;

· Aetylus opened on May 27, 2025

RFC7523 JWT Bearer token grant misconception

documentation

Status: Open.

Bug

#769 In authlib/authlib;

· azmeuk opened on May 3, 2025

Migration to joserfc

Status: Open.

Task

#766 In authlib/authlib;

· azmeuk opened on Apr 30, 2025

Support for decoding existing access tokens

clientConcerns a client implementationConcerns a client implementation

Status: Open.

Feature

#764 In authlib/authlib;

· Aetylus opened on Apr 29, 2025

LinkedIn login failure: Flag to skip verifying nonce

clientConcerns a client implementationConcerns a client implementation

Status: Open.

Bug

#763 In authlib/authlib;

· t-o-o-m opened on Apr 28, 2025

The token endpoint auth method <code>none</code> should always be valid when the only grant type of the client is <code>implicit</code>

serverConcerns a server implementationConcerns a server implementation

Status: Open.

Feature

#759 In authlib/authlib;

· azmeuk opened on Apr 27, 2025