OpenID Foundation Financial-grade API

This is the official repository for OpenID Foundation Financial-grade API (FAPI) Working Group.

What is this repository for?

• FAPI 1.0 - This is a profile of OpenID Connect.
  • Part 1: Baseline 安全 个人资料
  • Part 2: Advanced 安全 个人资料
  • Client Initiated Backchannel Authentication 个人资料
  • JWT Secured Authorization Response Mode for OAuth 2.0 (JARM)
  • Implementation and Deployment Advice
• FAPI 2.0 - This is a profile of OAuth 2.0
  • Baseline 个人资料
  • Advanced 个人资料
  • Attacker Model
  • Grant Management
• Other documents
  • Cross-Browser Payment Initiation Attack
  • Implementation and deployment advice issues

You can find the overview and rationale of the working group at the WG page.

Contribution guidelines

• You MUST execute the Contributor Agreement either by
  • Electronic Signature and notify openid-specs-fapi-owner@lists.openid.net; OR
  • print this PDF and fill, sign, scan, and send it to openid-specs-fapi-owner@lists.openid.net.
• You MUST file an issue to the issue tracker before contributing a code.
• You MUST test that the contributed code compiles without error.

Who do I talk to?

• The chairs of the WG can be reached at openid-specs-fapi-owner@lists.openid.net