All issues

Search results

[Bug]: JWT-profile assertion with iss != sub returns 500 server_error instead of 400 invalid_grant

Status: Open.

Bug

#945 In zitadel/oidc;

· aymkhalil opened on Aug 13, 2026

Proposal: single config-struct constructor for RelyingParty (and ResourceServer) client construction

Status: Open.

Enhancement

#944 In zitadel/oidc;

· muhlemmer opened on Aug 13, 2026

Make discovery grant and response types configurable

Status: Open.

#924 In zitadel/oidc;

· ryanio opened on Jul 20, 2026

[Bug]: client.CallRevokeEndpoint mutates httpClient

Status: Open.

Bug

#911 In zitadel/oidc;

· jkroepke opened on Jul 5, 2026

Make package usable for Telegram OP

Status: Open.

Enhancement

#908 In zitadel/oidc;

· ulibaysya opened on Jul 3, 2026

[Bug]: rp.RefreshTokens drops extra token response fields such as refresh_expires_in

Status: Open.

Bug

#907 In zitadel/oidc;

· mf-gdi opened on Jul 2, 2026

Support private_key_jwt client authentication for client_credentials grant

Status: Open.

Enhancement

#890 In zitadel/oidc;

· nurazon59 opened on May 9, 2026

[Bug]: Client Certificate authentication against Entra ID failes with AADSTS5002741

Status: Open.

Bug

#887 In zitadel/oidc;

· jkroepke opened on Apr 28, 2026

[Bug]: Cannot supply multiple client credentials on Okta

Status: Open.

Bug

#857 In zitadel/oidc;

· suqin-haha opened on Mar 12, 2026

Userinfo endpoint discards JWT claims

Status: Open.

#849 In zitadel/oidc;

· mohammadlashkari opened on Feb 14, 2026

Cookie handler (v4)

Status: Open.

Enhancement

#847 In zitadel/oidc;

· nickheyer opened on Feb 11, 2026

rp.AuthURLHandler state function should accept http.Request

Status: Open.

Enhancement

#838 In zitadel/oidc;

· CharlesPhilippeLabbe opened on Jan 15, 2026