[OAUTH-WG] Weekly github digest (OAuth Activity Summary)

[Repository Activity Summary Bot <[e-mail]>]

Events without label "editorial"

Issues
------
* oauth-wg/oauth-browser-based-apps (+2/-0/💬0)
  2 issues created:
  - Properly render sublists (by philippederyck)
    https://github.com/oauth-wg/oauth-browser-based-apps/issues/43 
  - Consistently use *applications* or *apps* (by philippederyck)
    https://github.com/oauth-wg/oauth-browser-based-apps/issues/42 

* oauth-wg/oauth-identity-chaining (+1/-0/💬0)
  1 issues created:
  - JWT Authorization Grant allows broadening the scope (by obfuscoder)
    https://github.com/oauth-wg/oauth-identity-chaining/issues/89 

* oauth-wg/oauth-transaction-tokens (+2/-1/💬7)
  2 issues created:
  - Section 2.2.2 - Needs tighter security controls on replacement tokens (by dhs-aws)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/74 
  - Add GitHub metadata to spec draft (by tulshi)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/72 

  5 issues received 7 new comments:
  - #69 Do we still need replacement transaction tokens. (1 by gffletch)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/69 
  - #62 Long-living Access Token needed for internal batch processes/offline tasks? (2 by gffletch, obfuscoder)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/62 
  - #53 Transaction Tokens for S2S calls (2 by gffletch, obfuscoder)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/53 
  - #50 Separate transaction tokens from JWT (1 by obfuscoder)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/50 
  - #44 It would be good to show how, in a replacement txn-token, the identity of the previous sub_id is preserved. The replacement token may have a new sub_id that represent the workload that requested the replacement token. (1 by gffletch)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/44 [pre-adoption] 

  1 issues closed:
  - Add GitHub metadata to spec draft https://github.com/oauth-wg/oauth-transaction-tokens/issues/72 

* oauth-wg/oauth-sd-jwt-vc (+0/-0/💬1)
  1 issues received 1 new comments:
  - #215 the wallet finding the user claims in the credential (1 by Sakurann)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/215 

* oauth-wg/oauth-selective-disclosure-jwt (+4/-0/💬6)
  4 issues created:
  - why can't cnf be the only way to bind to a holder public key? (by bc-pi)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/419 
  - Explicit clarification over correct formatting of objects with no disclosed elements (by MichaelFraser99)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/418 
  - state what salt does (by bc-pi)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/417 
  - Add Test suite for SD-JWT (by lukasjhan)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/416 

  3 issues received 6 new comments:
  - #419 why can't cnf be the only way to bind to a holder public key? (2 by bifurcation, selfissued)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/419 
  - #418 Explicit clarification over correct formatting of objects with no disclosed elements (1 by bc-pi)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/418 
  - #417 state what salt does (3 by bc-pi, larryzhu2018, selfissued)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/417 

* oauth-wg/oauth-v2-1 (+0/-1/💬11)
  1 issues received 11 new comments:
  - #128 Describe OAuth's use of application/x-www-form-urlencoded encoding (11 by aaronpk, jogu, panva, selfissued)
    https://github.com/oauth-wg/oauth-v2-1/issues/128 [help wanted] [ietf-117] 

  1 issues closed:
  - Ensure Security BCP recommendations are all incorporated into 2.1 https://github.com/oauth-wg/oauth-v2-1/issues/136 



Pull requests
-------------
* oauth-wg/oauth-browser-based-apps (+1/-0/💬2)
  1 pull requests submitted:
  - Add BFF advice for performance purposes (by emmanuelgautier)
    https://github.com/oauth-wg/oauth-browser-based-apps/pull/40 

  1 pull requests received 2 new comments:
  - #40 Add BFF advice for performance purposes (2 by emmanuelgautier, philippederyck)
    https://github.com/oauth-wg/oauth-browser-based-apps/pull/40 

* oauth-wg/oauth-transaction-tokens (+2/-1/💬0)
  2 pull requests submitted:
  - Section 6 - Cardinality of txn-token services (by dhs-aws)
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/75 
  - add link to github and editor's draft (by aaronpk)
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/73 

  1 pull requests merged:
  - add link to github and editor's draft
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/73 

* oauth-wg/oauth-selective-disclosure-jwt (+1/-0/💬3)
  1 pull requests submitted:
  - Add specificity around handling of disclosure resulting in an empty object (by MichaelFraser99)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/pull/420 

  2 pull requests received 3 new comments:
  - #420 Add specificity around handling of disclosure resulting in an empty object (1 by bc-pi)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/pull/420 
  - #394 Distinguish SD-JWT from SD-JWT+KB (2 by bc-pi, bifurcation)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/pull/394 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/oauth-wg/oauth-browser-based-apps
* https://github.com/oauth-wg/oauth-identity-chaining
* https://github.com/oauth-wg/oauth-transaction-tokens
* https://github.com/oauth-wg/oauth-sd-jwt-vc
* https://github.com/oauth-wg/draft-ietf-oauth-resource-metadata
* https://github.com/oauth-wg/oauth-cross-device-security
* https://github.com/oauth-wg/oauth-selective-disclosure-jwt
* https://github.com/oauth-wg/oauth-v2-1