[OAUTH-WG] Weekly github digest (OAuth Activity Summary)

Repository Activity Summary Bot <do_not_reply@mnot.net> Sun, 04 January 2026 08:09 UTC

Return-Path: <do_not_reply@mnot.net>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 2418FA25981D for <oauth@mail2.ietf.org>; Sun, 4 Jan 2026 00:09:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.397
X-Spam-Level:
X-Spam-Status: No, score=-2.397 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, MSGID_FROM_MTA_HEADER=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=fail (2048-bit key) reason="fail (message has been altered)" header.d=mnot.net header.b="qudEeUHv"; dkim=fail (2048-bit key) reason="fail (message has been altered)" header.d=messagingengine.com header.b="mXA0Gagn"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Enz5y2a9nCI9 for <oauth@mail2.ietf.org>; Sun, 4 Jan 2026 00:09:39 -0800 (PST)
Received: from fout-a2-smtp.messagingengine.com (fout-a2-smtp.messagingengine.com [103.168.172.145]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 58764A249ED2 for <oauth@ietf.org>; Sat, 3 Jan 2026 23:44:01 -0800 (PST)
Received: from phl-compute-10.internal (phl-compute-10.internal [10.202.2.50]) by mailfout.phl.internal (Postfix) with ESMTP id 2E021EC00D1 for <oauth@ietf.org>; Sun, 4 Jan 2026 02:44:01 -0500 (EST)
Received: from phl-frontend-04 ([10.202.2.163]) by phl-compute-10.internal (MEProxy); Sun, 04 Jan 2026 02:44:01 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=cc :content-type:content-type:date:from:from:in-reply-to:message-id :mime-version:reply-to:subject:subject:to:to; s=fm3; t= 1767512641; x=1767599041; bh=3ufl5WOWlKPvJGKwe8qGHttX7/3VgXlU50w pY2PqzHQ=; b=qudEeUHvDc2xDjxHxXuq1ixa6W5d+N9amfDhgd3DAsfstfWdg3D NC6Nqb2iVKDrme1SXpkkGZjbNGzxeS4DgXmQiRsktQHvHZZH2UnJundbE+s8gBgl ph3Vn8ejhcpF0B3qq2LFJ17egBvBuXiqhR+CB8G3/FRXVKwAPrr5qr4HvV3M5h/3 iyjsbxyaaipWxK8dDtZYxOIHMLlqr8gK6uQvfH7XcM6ks5iOBMP4kPxWXPBUhNmk O7dAexYhVRAtEi/oSTfszZV9GRViMFYTXe5umj1pfMw/2jovfMi0a+CLPVX1LsLi SxrNTHOBZMLm50GwZRzSnV46Pv/WWqdcMPA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date :feedback-id:feedback-id:from:from:in-reply-to:message-id :mime-version:reply-to:subject:subject:to:to:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t=1767512641; x= 1767599041; bh=3ufl5WOWlKPvJGKwe8qGHttX7/3VgXlU50wpY2PqzHQ=; b=m XA0GagnmKCNj68bqTFiINtSHoR9h2dfrnVKaARtRHnP41ph9TAU8vAjlUKuXwjsN otTMd/OQMR3t5oHcZjBX6W/dLIYfgE2Wmk+FQvt2g1yj1dJrAGHGxuQkYk4ZTzVG Fh7iPUxmE1ErlUZTGvJWJaUDXxjhsSrwZDrS8+3qpf+sfDudNS1shBL2nwWdcF4x Ac14vWr6zhAiAFdFcmd/2mMci+HYYt7YBNWTM/t2uTlIgaNcsJbqUoJ5OiOPJf0x hh6qquUUc7hETcXVSZuEYzMq73k96BtNGo84aPDkkZyv/bx71GZnrPj7zwprbQiG tfqWL6h16p6Rcuhysq0LA==
X-ME-Sender: <xms:QRpaaTXS8t-yAHBH9xuB8X21xbKAH9wLxwVC7kgvTPqPFkbD76_oeQ> <xme:QRpaaRewuLQ9t0fqt8ZZz12GAQVixLIjowhiWQhxPlo2vbnvK-scU9UfP5qKjex4X m_OlfpOJSppffAqPFeWYnsNrI29BG0hMK45KMpjufNtT3jRtE57YA>
X-ME-Received: <xmr:QRpaaadwvDBrQ3VQXh13rrZxBjC7ZzXTlp9IQyt219zITyW-Tvj94P2SQZzrsCFnZ3MitZZ8_KTBWoe0AeTMGn4LIqp2zwA1AndaPp2txjrkMgWg6_ynCpUcCrimwIECwwvmDE8>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefgedrtddtgdelfeekiecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpuffrtefokffrpgfnqfghnecuuegr ihhlohhuthemuceftddtnecupfhoucgurghtvgcufhhivghlugculdegledmnecujfgurh eptggghffvufesrgdttdertddtjeenucfhrhhomheptfgvphhoshhithhorhihucettght ihhvihhthicuufhumhhmrghrhicuuehothcuoeguohgpnhhothgprhgvphhlhiesmhhnoh htrdhnvghtqeenucggtffrrghtthgvrhhnpeekfedvudetjedvfeekheeiveeugfefhfet teevgeffkefffeetffdvleehudeiteenucffohhmrghinhepghhithhhuhgsrdgtohhmne cuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepughopghn ohhtpghrvghplhihsehmnhhothdrnhgvthdpnhgspghrtghpthhtohepuddpmhhouggvpe hsmhhtphhouhhtpdhrtghpthhtohepohgruhhthhesihgvthhfrdhorhhg
X-ME-Proxy: <xmx:QRpaabIVBmCr6z-qvUod2j-jqmEXs7sI5IlJXJN8wlkxOCQbMX5Ang> <xmx:QRpaaRKUTzL5FgIN8ygJTgHuXvpne2Ag_Xi7lllsph144Z259ChiBA> <xmx:QRpaadG4928Xyh1zKDp-SAWisOLTu2DpT6kWzZy1KQRUQrWPpDlpqA> <xmx:QRpaaWlsVnyRPBz2mFIOA4IIGiDLZsklG2hUIqjynYlWk86Y8B6hJw> <xmx:QRpaaSdE0l45uMwe2hG1m6d8Wpczyvg6JvDuiSWPjSQbBhIeH_6GURk9>
Feedback-ID: i1c3946f2:Fastmail
Message-Id: <1767512641.566493.7CA3C7E2@outbound.messagingengine.com>
Received: by mail.messagingengine.com (Postfix) with ESMTPA for <oauth@ietf.org>; Sun, 4 Jan 2026 02:44:00 -0500 (EST)
Content-Type: multipart/alternative; boundary="===============2944242058124438523=="
MIME-Version: 1.0
From: Repository Activity Summary Bot <do_not_reply@mnot.net>
To: oauth@ietf.org
Date: Sat, 03 Jan 2026 23:44:01 -0800
Message-ID-Hash: DVYQHO4XI6SXSB67NYKHC3RPCMLUF26S
X-Message-ID-Hash: DVYQHO4XI6SXSB67NYKHC3RPCMLUF26S
X-MailFrom: do_not_reply@mnot.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Weekly github digest (OAuth Activity Summary)
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/FFHZzXg78JTDR3Wau_4LnEitzMk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>



Events without label "editorial"

Issues
------
* oauth-wg/oauth-transaction-tokens (+1/-0/šŸ’¬2)
  1 issues created:
  - Assuring single use by preserving jti from request. (by tulshi)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/294 

  2 issues received 2 new comments:
  - #294 Assuring single use by preserving jti from request. (1 by gffletch)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/294 
  - #186 Proposal for Tx token initiation in agentic world (1 by ashayraut)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/186 

* oauth-wg/oauth-cross-device-security (+2/-4/šŸ’¬1)
  2 issues created:
  - Chapter Organisation (by PieterKas)
    https://github.com/oauth-wg/oauth-cross-device-security/issues/232 [OpsDir Review] 
  - Writing Nits (by PieterKas)
    https://github.com/oauth-wg/oauth-cross-device-security/issues/231 [OpsDir Review] 

  1 issues received 1 new comments:
  - #104 Consider fine-tuning the pattern descriptions and diagrams (1 by PieterKas)
    https://github.com/oauth-wg/oauth-cross-device-security/issues/104 

  4 issues closed:
  - Chapter Organisation https://github.com/oauth-wg/oauth-cross-device-security/issues/232 [OpsDir Review] 
  - Writing Nits https://github.com/oauth-wg/oauth-cross-device-security/issues/231 [OpsDir Review] 
  - Clarify Diagrams https://github.com/oauth-wg/oauth-cross-device-security/issues/208 [ART Review] 
  - Consider fine-tuning the pattern descriptions and diagrams https://github.com/oauth-wg/oauth-cross-device-security/issues/104 

* oauth-wg/draft-ietf-oauth-status-list (+4/-4/šŸ’¬2)
  4 issues created:
  - Mohamed Boucadair's feedback (by paulbastian)
    https://github.com/oauth-wg/draft-ietf-oauth-status-list/issues/333 
  - Typos "Reference Token" (by paulbastian)
    https://github.com/oauth-wg/draft-ietf-oauth-status-list/issues/329 
  - Ketan Talaulikar's review (by paulbastian)
    https://github.com/oauth-wg/draft-ietf-oauth-status-list/issues/328 
  - IANA review (by paulbastian)
    https://github.com/oauth-wg/draft-ietf-oauth-status-list/issues/327 

  2 issues received 2 new comments:
  - #328 Ketan Talaulikar's review (1 by paulbastian)
    https://github.com/oauth-wg/draft-ietf-oauth-status-list/issues/328 
  - #311 CWT CBOR Tag (1 by paulbastian)
    https://github.com/oauth-wg/draft-ietf-oauth-status-list/issues/311 

  4 issues closed:
  - Ketan Talaulikar's review https://github.com/oauth-wg/draft-ietf-oauth-status-list/issues/328 
  - IANA review https://github.com/oauth-wg/draft-ietf-oauth-status-list/issues/327 
  - Typos "Reference Token" https://github.com/oauth-wg/draft-ietf-oauth-status-list/issues/329 
  - Typos in draft-ietf-oauth-status-list-14 https://github.com/oauth-wg/draft-ietf-oauth-status-list/issues/325 



Pull requests
-------------
* oauth-wg/oauth-cross-device-security (+6/-0/šŸ’¬0)
  6 pull requests submitted:
  -  (by PieterKas)
     
  -  (by PieterKas)
     
  -  (by PieterKas)
     
  -  (by PieterKas)
     
  -  (by PieterKas)
     
  -  (by PieterKas)
     

* oauth-wg/draft-ietf-oauth-status-list (+3/-0/šŸ’¬1)
  3 pull requests submitted:
  -  (by c2bo)
     
  -  (by paulbastian)
     
  -  (by c2bo)
     

  1 pull requests received 1 new comments:
  - #326 fix typos (1 by paulbastian)
    https://github.com/oauth-wg/draft-ietf-oauth-status-list/pull/326 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/oauth-wg/oauth-browser-based-apps
* https://github.com/oauth-wg/oauth-identity-chaining
* https://github.com/oauth-wg/oauth-transaction-tokens
* https://github.com/oauth-wg/oauth-sd-jwt-vc
* https://github.com/oauth-wg/draft-ietf-oauth-resource-metadata
* https://github.com/oauth-wg/oauth-cross-device-security
* https://github.com/oauth-wg/oauth-selective-disclosure-jwt
* https://github.com/oauth-wg/oauth-v2-1
* https://github.com/oauth-wg/draft-ietf-oauth-status-list
* https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth
* https://github.com/oauth-wg/oauth-identity-assertion-authz-grant
* https://github.com/oauth-wg/draft-ietf-oauth-rfc8725bis
* https://github.com/oauth-wg/draft-ietf-oauth-rfc7523bis
* https://github.com/oauth-wg/oauth-first-party-apps
* https://github.com/oauth-wg/draft-ietf-oauth-client-id-metadata-document


-- 
To have a summary like this sent to your list, see: https://github.com/ietf-github-services/activity-summary