OpenID Foundation Financial-grade API

This is the official repository for OpenID Foundation Financial-grade API (FAPI) Working Group.

The latest drafts are built automatically from this repository and published at https://openid.github.io/fapi/. These reflect in-progress edits; the official specifications are published at https://openid.net/specs/.

What is this repository for?

• FAPI 1.0 - This is a profile of OpenID Connect.
  • Part 1: Baseline Security Profile
  • Part 2: Advanced Security Profile
  • Client Initiated Backchannel Authentication Profile
  • JWT Secured Authorization Response Mode for OAuth 2.0 (JARM)
  • Implementation and Deployment Advice
• FAPI 2.0 - This is a profile of OAuth 2.0
  • Security Profile
  • Message Signing
  • Attacker Model
  • Grant Management
• Other documents
  • Cross-Browser Payment Initiation Attack
  • Implementation and deployment advice issues

You can find the overview and rationale of the working group at the WG page.

Contribution guidelines

• You MUST execute the Contributor Agreement either by
  • Electronic Signature and notify [email protected]; OR
  • print this PDF and fill, sign, scan, and send it to [email protected].
• You MUST file an issue to the issue tracker before contributing a code.
• You MUST test that the contributed code compiles without error.

Who do I talk to?

• The chairs of the WG can be reached at [email protected]