{"repo":"w3c-fedid/FedCM","summary":{"retrieved":"2026-05-16T07:40:29Z","triageViolations":30,"urgentViolations":0,"soonViolations":0,"agendaViolations":0,"needsEditsViolations":0,"needTriage":0,"urgent":0,"soon":0,"agenda":3,"needsEdits":0,"other":122},"triage":[{"number":5,"url":"https://github.com/w3c-fedid/FedCM/issues/5","title":"Conceptual Scope w.r.t. OpenID Connect/OAuth 2.0","author":"achimschloss","createdAt":"2020-04-09T07:19:59Z","labels":["design"],"sloTimeUsed":"P2228DT20M30S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true},{"number":244,"url":"https://github.com/w3c-fedid/FedCM/issues/244","title":"Resource Access 1.1.5 interaction model is vague","author":"dickhardt","createdAt":"2022-04-09T19:10:18Z","labels":["feature request"],"sloTimeUsed":"P1497DT12H30M11S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true},{"number":294,"url":"https://github.com/w3c-fedid/FedCM/issues/294","title":"[Technical] Better specify AbortController support","author":"nsatragno","createdAt":"2022-06-30T18:57:33Z","labels":["editorial","design"],"sloTimeUsed":"P1415DT12H42M56S","whichSlo":"triage","stats":{"numTimelineItems":2,"numComments":0,"numLabels":2},"outOfSlo":true},{"number":312,"url":"https://github.com/w3c-fedid/FedCM/issues/312","title":"Add note about PP / TOS","author":"npm1","createdAt":"2022-07-11T20:18:50Z","labels":["editorial"],"sloTimeUsed":"P1404DT11H21M39S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true},{"number":336,"url":"https://github.com/w3c-fedid/FedCM/issues/336","title":"Validate that account_ids are unique","author":"npm1","createdAt":"2022-08-24T13:58:18Z","labels":["editorial","compatibility risk"],"sloTimeUsed":"P1360DT17H42M11S","whichSlo":"triage","stats":{"numTimelineItems":2,"numComments":1,"numLabels":2},"outOfSlo":true},{"number":371,"url":"https://github.com/w3c-fedid/FedCM/issues/371","title":"API should be disabled in Fenced Frames","author":"npm1","createdAt":"2022-10-27T15:42:57Z","labels":["editorial"],"sloTimeUsed":"P1296DT15H57M32S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true},{"number":384,"url":"https://github.com/w3c-fedid/FedCM/issues/384","title":"Add non-normative note about compromised renderer","author":"npm1","createdAt":"2022-12-06T16:41:43Z","labels":["editorial"],"sloTimeUsed":"P1256DT14H58M46S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true},{"number":386,"url":"https://github.com/w3c-fedid/FedCM/issues/386","title":"FedCM issues","author":"Tim-Cowen","createdAt":"2022-12-21T12:47:10Z","labels":[],"sloTimeUsed":"P1241DT18H53M19S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":387,"url":"https://github.com/w3c-fedid/FedCM/issues/387","title":"Remove language referring to sign-up and sign-in, amplify in browser state machine","author":"judielaine","createdAt":"2022-12-30T14:56:35Z","labels":["editorial"],"sloTimeUsed":"P1232DT16H43M54S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":1,"numLabels":1},"outOfSlo":true},{"number":469,"url":"https://github.com/w3c-fedid/FedCM/issues/469","title":"Align on user flow for initial and returning FedCM prompts","author":"npm1","createdAt":"2023-05-09T15:27:44Z","labels":[],"sloTimeUsed":"P1102DT16H12M45S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":487,"url":"https://github.com/w3c-fedid/FedCM/issues/487","title":"Erroneous link to JSON object in automation section of spec","author":"johnivdel","createdAt":"2023-07-10T18:10:34Z","labels":["editorial","P2"],"sloTimeUsed":"P1040DT13H29M55S","whichSlo":"triage","stats":{"numTimelineItems":2,"numComments":0,"numLabels":2},"outOfSlo":true},{"number":493,"url":"https://github.com/w3c-fedid/FedCM/issues/493","title":"Should clearing IDP state also clear RP state?","author":"cbiesinger","createdAt":"2023-08-11T21:11:57Z","labels":[],"sloTimeUsed":"P1008DT10H28M32S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":495,"url":"https://github.com/w3c-fedid/FedCM/issues/495","title":"Should getUserInfo() use an IdentityProviderConfig?","author":"npm1","createdAt":"2023-08-23T19:07:57Z","labels":[],"sloTimeUsed":"P996DT12H32M32S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":499,"url":"https://github.com/w3c-fedid/FedCM/issues/499","title":"Validate urls once the config fetch occurs","author":"npm1","createdAt":"2023-09-01T15:50:45Z","labels":[],"sloTimeUsed":"P987DT15H49M44S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":540,"url":"https://github.com/w3c-fedid/FedCM/issues/540","title":"Evaluate string types in the spec","author":"npm1","createdAt":"2024-01-26T18:52:28Z","labels":[],"sloTimeUsed":"P840DT12H48M1S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":565,"url":"https://github.com/w3c-fedid/FedCM/issues/565","title":"FedCM 4 R&E: Technical Considerations","author":"ekupris","createdAt":"2024-04-30T07:52:19Z","labels":[],"sloTimeUsed":"P745DT23H48M10S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":611,"url":"https://github.com/w3c-fedid/FedCM/issues/611","title":"Move the WPTs out of the credential-manager directory","author":"samuelgoto","createdAt":"2024-06-03T16:45:14Z","labels":[],"sloTimeUsed":"P711DT14H55M15S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":615,"url":"https://github.com/w3c-fedid/FedCM/issues/615","title":"In addition to \"use\", \"continue\", \"signin\" and \"signup\", consider adding \"pay\" or \"checkout\"","author":"samuelgoto","createdAt":"2024-06-12T20:04:27Z","labels":["venky"],"sloTimeUsed":"P702DT11H36M2S","whichSlo":"triage","stats":{"numTimelineItems":1,"numComments":0,"numLabels":1},"outOfSlo":true},{"number":625,"url":"https://github.com/w3c-fedid/FedCM/issues/625","title":"Returning accounts go first in getUserInfo","author":"npm1","createdAt":"2024-08-01T21:16:02Z","labels":["chrome","FPWD","non-core"],"sloTimeUsed":"P652DT10H24M27S","whichSlo":"triage","stats":{"numTimelineItems":3,"numComments":0,"numLabels":3},"outOfSlo":true},{"number":645,"url":"https://github.com/w3c-fedid/FedCM/issues/645","title":"User Info API vs. preventSilentAccess","author":"johannhof","createdAt":"2024-09-04T19:23:48Z","labels":[],"sloTimeUsed":"P618DT12H16M41S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0},"outOfSlo":true},{"number":665,"url":"https://github.com/w3c-fedid/FedCM/issues/665","title":"Thoughts on FedCM full vs FedCM lite","author":"cbiesinger","createdAt":"2024-10-24T16:23:51Z","labels":[],"sloTimeUsed":"P568DT15H16M38S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":688,"url":"https://github.com/w3c-fedid/FedCM/issues/688","title":"Missing tasks in parallel steps in Federated Credential Management API","author":"dontcallmedom-bot","createdAt":"2025-01-07T10:59:32Z","labels":[],"sloTimeUsed":"P493DT20H40M57S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":702,"url":"https://github.com/w3c-fedid/FedCM/issues/702","title":"Skip accounts_endpoint call when there's no chance of success","author":"ekovac","createdAt":"2025-02-25T17:14:05Z","labels":[],"sloTimeUsed":"P444DT14H26M24S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":726,"url":"https://github.com/w3c-fedid/FedCM/issues/726","title":"getUserInfo definition bug: the connected account set computation uses the iframe's global to compute the connected account set key where it should use the top frame's global","author":"bvandersloot-mozilla","createdAt":"2025-05-14T17:11:01Z","labels":[],"sloTimeUsed":"P366DT14H29M28S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":745,"url":"https://github.com/w3c-fedid/FedCM/issues/745","title":"Add status checks to fetches","author":"npm1","createdAt":"2025-06-17T16:18:43Z","labels":[],"sloTimeUsed":"P332DT15H21M46S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":746,"url":"https://github.com/w3c-fedid/FedCM/issues/746","title":"Potential issue with Clear-Site-Data and unknown login status","author":"npm1","createdAt":"2025-06-17T19:33:08Z","labels":[],"sloTimeUsed":"P332DT12H7M21S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":763,"url":"https://github.com/w3c-fedid/FedCM/issues/763","title":"Define \"params\" and \"fields\" semantics in Section 2.4","author":"togamid","createdAt":"2025-07-17T14:24:11Z","labels":[],"sloTimeUsed":"P302DT17H16M18S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true},{"number":794,"url":"https://github.com/w3c-fedid/FedCM/issues/794","title":"Allow IdPs to initiate a FedCM flow in top level redirects without requiring changes to Relying Parties","author":"samuelgoto","createdAt":"2025-11-10T07:32:14Z","labels":[],"sloTimeUsed":"P187DT8M15S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0},"outOfSlo":true},{"number":823,"url":"https://github.com/w3c-fedid/FedCM/pull/823","title":"Allow IDPs to host well-known file at web-identity. subdomain","author":"will-bartlett","createdAt":"2026-04-13T22:10:16Z","pull_request":{"draft":false},"labels":[],"sloTimeUsed":"P32DT9H30M13S","whichSlo":"triage","stats":{"numTimelineItems":6,"numComments":6,"numLabels":0},"outOfSlo":true},{"number":825,"url":"https://github.com/w3c-fedid/FedCM/issues/825","title":"Cookie headers in examples are incorrect","author":"ThisIsMissEm","createdAt":"2026-04-21T16:10:01Z","labels":[],"sloTimeUsed":"P24DT15H30M28S","whichSlo":"triage","stats":{"numTimelineItems":0,"numComments":0,"numLabels":0},"outOfSlo":true}],"urgent":[],"soon":[],"agenda":[{"number":821,"url":"https://github.com/w3c-fedid/FedCM/pull/821","title":"Allow IDPs to delegate well-known file hosting via DNS TXT record","author":"will-bartlett","createdAt":"2026-03-25T23:19:24Z","pull_request":{"draft":false},"labels":["agenda+"],"sloTimeUsed":"PT0S","whichSlo":"none","onAgendaFor":"P28DT12H30M54S","stats":{"numTimelineItems":68,"numComments":68,"numLabels":1}},{"number":827,"url":"https://github.com/w3c-fedid/FedCM/issues/827","title":"FedCM facilitates vendor lock-in","author":"will-bartlett","createdAt":"2026-04-27T16:18:09Z","labels":["agenda+"],"sloTimeUsed":"PT0S","whichSlo":"none","onAgendaFor":"P10DT15H59M44S","stats":{"numTimelineItems":1,"numComments":18,"numLabels":1}},{"number":815,"url":"https://github.com/w3c-fedid/FedCM/pull/815","title":"Enabling IDP Interception in FedCM Request","author":"pottis","createdAt":"2026-02-28T06:31:33Z","pull_request":{"draft":false},"labels":["agenda+"],"sloTimeUsed":"PT0S","whichSlo":"none","onAgendaFor":"PT13H19M16S","stats":{"numTimelineItems":296,"numComments":296,"numLabels":1}}],"needsEdits":[],"other":[{"number":14,"url":"https://github.com/w3c-fedid/FedCM/issues/14","title":"Additional Use-Cases: Active Session Discovery, Auto Sign-On ","author":"achimschloss","createdAt":"2020-06-24T08:13:50Z","labels":["design"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":9,"numLabels":1}},{"number":26,"url":"https://github.com/w3c-fedid/FedCM/issues/26","title":"First party consumer SSO","author":"gffletch","createdAt":"2020-07-24T15:18:08Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":7,"numLabels":0}},{"number":29,"url":"https://github.com/w3c-fedid/FedCM/issues/29","title":"Academic Identity Federations","author":"hlflanagan","createdAt":"2020-07-27T17:50:02Z","labels":["design","CR Blocker"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":3,"numLabels":2}},{"number":33,"url":"https://github.com/w3c-fedid/FedCM/issues/33","title":"Authentication-only proposal - AcctAuthn","author":"pierogitus","createdAt":"2020-08-30T22:09:15Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":9,"numLabels":0}},{"number":42,"url":"https://github.com/w3c-fedid/FedCM/issues/42","title":"Privacy of Directed Identifiers and Competitive consequences of centralized IDPs","author":"dialtone","createdAt":"2020-10-30T19:00:33Z","labels":["design"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":1,"numLabels":1}},{"number":44,"url":"https://github.com/w3c-fedid/FedCM/issues/44","title":"Nested Frame Support","author":"timcappalli","createdAt":"2020-12-07T15:18:19Z","labels":["design"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":11,"numLabels":1}},{"number":50,"url":"https://github.com/w3c-fedid/FedCM/issues/50","title":"Extend WebID for parity or improved device compliance and SSO support","author":"timcappalli","createdAt":"2020-12-07T16:49:07Z","labels":["feature request"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":3,"numLabels":1}},{"number":51,"url":"https://github.com/w3c-fedid/FedCM/issues/51","title":"Extend support for identities known by the User Agent and Host OS","author":"HowardWolosky","createdAt":"2020-12-08T00:19:33Z","labels":["feature request"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":6,"numLabels":1}},{"number":56,"url":"https://github.com/w3c-fedid/FedCM/issues/56","title":"Directed identifiers problematic for efforts around portable identities","author":"tplooker","createdAt":"2021-03-05T01:28:02Z","labels":["design"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":8,"numLabels":1}},{"number":58,"url":"https://github.com/w3c-fedid/FedCM/issues/58","title":"Leverage users' prior relationships with their IdPs","author":"dhwalker","createdAt":"2021-03-22T18:19:00Z","labels":["design"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":8,"numLabels":1}},{"number":64,"url":"https://github.com/w3c-fedid/FedCM/issues/64","title":"login mediation: why contact the IDP to get the account list? (and related questions)","author":"jeremyroman","createdAt":"2021-04-29T22:14:10Z","labels":["design"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":2,"numLabels":1}},{"number":80,"url":"https://github.com/w3c-fedid/FedCM/issues/80","title":"Authentication methods on id assertion endpoint too limited (only cookies, which are bearer tokens) - service-worker mode = \"all\"?","author":"will-bartlett","createdAt":"2021-06-15T23:22:09Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":28,"numLabels":0}},{"number":153,"url":"https://github.com/w3c-fedid/FedCM/issues/153","title":"Multi-tenant considerations with endpoint metadata","author":"hpsin","createdAt":"2021-11-23T01:47:26Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":218,"url":"https://github.com/w3c-fedid/FedCM/issues/218","title":"Clarify the IDP API response when the user is not signed in.","author":"dj2","createdAt":"2022-03-03T16:36:16Z","labels":["editorial"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":16,"numLabels":1}},{"number":230,"url":"https://github.com/w3c-fedid/FedCM/issues/230","title":"User identity associated with the RP should not be sent to the IDP before explicit consent is gathered","author":"bvandersloot-mozilla","createdAt":"2022-03-14T12:51:27Z","labels":["design","compatibility risk"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":4,"numComments":45,"numLabels":2}},{"number":237,"url":"https://github.com/w3c-fedid/FedCM/issues/237","title":"Should FederatedCredential be FederatedCredential2?","author":"dj2","createdAt":"2022-03-30T14:52:55Z","labels":["editorial"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":4,"numLabels":1}},{"number":241,"url":"https://github.com/w3c-fedid/FedCM/issues/241","title":"Support classic websites (non-javascript applications)","author":"will-bartlett","createdAt":"2022-03-31T18:18:21Z","labels":["feature request"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":5,"numLabels":1}},{"number":242,"url":"https://github.com/w3c-fedid/FedCM/issues/242","title":"Privacy unfriendly account chooser","author":"dickhardt","createdAt":"2022-04-08T10:21:36Z","labels":["feature request","needs resolution"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":4,"numComments":9,"numLabels":2}},{"number":246,"url":"https://github.com/w3c-fedid/FedCM/issues/246","title":"Branding JSON - dark mode vs light","author":"dickhardt","createdAt":"2022-04-09T19:23:55Z","labels":["feature request"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":1,"numLabels":1}},{"number":253,"url":"https://github.com/w3c-fedid/FedCM/issues/253","title":"Missing use cases","author":"gffletch","createdAt":"2022-04-15T18:20:25Z","labels":["documentation","editorial"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":3,"numLabels":2}},{"number":260,"url":"https://github.com/w3c-fedid/FedCM/issues/260","title":"Processing model unclear","author":"annevk","createdAt":"2022-05-19T07:07:58Z","labels":["editorial"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":2,"numLabels":1}},{"number":264,"url":"https://github.com/w3c-fedid/FedCM/issues/264","title":"Support for cascaded/staged federation scenarios","author":"achimschloss","createdAt":"2022-05-31T09:01:59Z","labels":["feature request"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":6,"numLabels":1}},{"number":266,"url":"https://github.com/w3c-fedid/FedCM/issues/266","title":"manifest relative URL issue","author":"dickhardt","createdAt":"2022-06-03T17:38:56Z","labels":["design"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":8,"numLabels":1}},{"number":267,"url":"https://github.com/w3c-fedid/FedCM/issues/267","title":"Value of Sec-FedCM-CSRF header in discovery call?","author":"dickhardt","createdAt":"2022-06-03T17:42:11Z","labels":["design","needs resolution","compatibility risk"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":7,"numComments":15,"numLabels":3}},{"number":293,"url":"https://github.com/w3c-fedid/FedCM/issues/293","title":"[Technical] Manifest fetching should happen sequentially","author":"nsatragno","createdAt":"2022-06-30T18:52:00Z","labels":["editorial","design"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":4,"numLabels":2}},{"number":315,"url":"https://github.com/w3c-fedid/FedCM/issues/315","title":"The UA should not implicitly link different RPs and should rather rely upon user consent for each origin","author":"kdenhartog","createdAt":"2022-07-14T22:45:10Z","labels":["needs resolution"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":14,"numLabels":1}},{"number":332,"url":"https://github.com/w3c-fedid/FedCM/issues/332","title":"ASCII art?","author":"martinthomson","createdAt":"2022-08-23T01:18:25Z","labels":["editorial"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":9,"numLabels":1}},{"number":348,"url":"https://github.com/w3c-fedid/FedCM/issues/348","title":"Support for RP controls to support meaningful integration into their user flows","author":"achimschloss","createdAt":"2022-09-12T10:53:44Z","labels":["design"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":4,"numLabels":1}},{"number":352,"url":"https://github.com/w3c-fedid/FedCM/issues/352","title":"Share performance measurement with IDP","author":"yi-gu","createdAt":"2022-09-26T21:18:14Z","labels":["chrome","FPWD","non-core"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":5,"numComments":3,"numLabels":3}},{"number":364,"url":"https://github.com/w3c-fedid/FedCM/issues/364","title":"spec mentions that 'nonce' is always included in token POST parameters","author":"pkotwicz2","createdAt":"2022-10-13T03:36:27Z","labels":["editorial"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":1,"numLabels":1}},{"number":366,"url":"https://github.com/w3c-fedid/FedCM/issues/366","title":"Reject simultaneous caller in the iframe case","author":"npm1","createdAt":"2022-10-17T21:39:55Z","labels":["spec review"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":1,"numLabels":1}},{"number":377,"url":"https://github.com/w3c-fedid/FedCM/issues/377","title":"IdP requires knowlege of RP to allow a session","author":"hlflanagan","createdAt":"2022-11-22T22:16:19Z","labels":["design"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":6,"numLabels":1}},{"number":380,"url":"https://github.com/w3c-fedid/FedCM/issues/380","title":"Clarify use case of not-yet-logged-in user","author":"bvandersloot-mozilla","createdAt":"2022-11-28T14:00:34Z","labels":["editorial"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":3,"numLabels":1}},{"number":407,"url":"https://github.com/w3c-fedid/FedCM/issues/407","title":"[Context API] - Authz / relation to ability to specificy scope","author":"achimschloss","createdAt":"2023-01-25T15:46:04Z","labels":["FPWD","non-core"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":4,"numComments":1,"numLabels":2}},{"number":416,"url":"https://github.com/w3c-fedid/FedCM/issues/416","title":"Editorial suggestions for spec/index.bs","author":"bvandersloot-mozilla","createdAt":"2023-02-01T19:36:57Z","labels":["editorial"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":8,"numLabels":1}},{"number":437,"url":"https://github.com/w3c-fedid/FedCM/issues/437","title":"This spec could use fewer pictures of Sam","author":"martinthomson","createdAt":"2023-02-14T21:21:02Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":441,"url":"https://github.com/w3c-fedid/FedCM/issues/441","title":"The IDP has to support additional infrastructure to support FedCM","author":"bvandersloot-mozilla","createdAt":"2023-02-16T13:16:13Z","labels":["mozilla","FPWD","non-core"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":7,"numComments":6,"numLabels":3}},{"number":450,"url":"https://github.com/w3c-fedid/FedCM/issues/450","title":"Contextualize account selection ","author":"kajohnston","createdAt":"2023-03-28T14:47:01Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":2,"numLabels":0}},{"number":471,"url":"https://github.com/w3c-fedid/FedCM/issues/471","title":"Should FedCM spec have conformance requirements over IDPs","author":"npm1","createdAt":"2023-05-20T01:15:32Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":4,"numLabels":0}},{"number":472,"url":"https://github.com/w3c-fedid/FedCM/issues/472","title":"Autoreauthentication does not work with \"silent\" mediation value","author":"bvandersloot-mozilla","createdAt":"2023-05-22T16:47:38Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":475,"url":"https://github.com/w3c-fedid/FedCM/issues/475","title":"What is disclosure_text_shown?","author":"martinthomson","createdAt":"2023-06-07T01:46:21Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":479,"url":"https://github.com/w3c-fedid/FedCM/issues/479","title":"Support for SAML","author":"spencer-strider","createdAt":"2023-06-20T21:27:41Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":2,"numLabels":0}},{"number":485,"url":"https://github.com/w3c-fedid/FedCM/issues/485","title":"WebDriver capability might have an invalid name","author":"rakuco","createdAt":"2023-07-06T16:45:14Z","labels":["question","P2"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":4,"numLabels":2}},{"number":491,"url":"https://github.com/w3c-fedid/FedCM/issues/491","title":"localhost flag needed for testing","author":"hlflanagan","createdAt":"2023-07-27T15:24:01Z","labels":["specification","P2"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":10,"numComments":20,"numLabels":2}},{"number":501,"url":"https://github.com/w3c-fedid/FedCM/issues/501","title":"FedCM vs Storage Access API use case","author":"egor-limenko","createdAt":"2023-09-06T08:41:46Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":14,"numLabels":0}},{"number":514,"url":"https://github.com/w3c-fedid/FedCM/issues/514","title":"OAuth draft for browser based apps and Access Tokens in JavaScript ","author":"obfuscoder","createdAt":"2023-11-16T13:42:48Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":13,"numLabels":0}},{"number":517,"url":"https://github.com/w3c-fedid/FedCM/issues/517","title":"Allow user agents to use \"Connected Accounts Set\" with flexibility","author":"yi-gu","createdAt":"2023-11-21T16:07:40Z","labels":["chrome","FPWD","non-core"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":7,"numComments":2,"numLabels":3}},{"number":527,"url":"https://github.com/w3c-fedid/FedCM/issues/527","title":"Needing RP's identity to be able to provide account list","author":"mitar","createdAt":"2023-12-06T16:52:03Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":8,"numLabels":0}},{"number":536,"url":"https://github.com/w3c-fedid/FedCM/issues/536","title":"FedCM lacks a OAuth/SAML Binding Profile","author":"samuelgoto","createdAt":"2024-01-16T18:22:24Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":2,"numLabels":0}},{"number":557,"url":"https://github.com/w3c-fedid/FedCM/issues/557","title":"Demo for use of FedCM as an \"account picker\" in an open banking context","author":"michielbdejong","createdAt":"2024-04-12T17:06:26Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":2,"numLabels":0}},{"number":562,"url":"https://github.com/w3c-fedid/FedCM/issues/562","title":"Add \"filter\" mode to FedCM enabling dynamic OP discovery based on criteria","author":"yaron-zehavi","createdAt":"2024-04-26T20:25:53Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":16,"numLabels":0}},{"number":564,"url":"https://github.com/w3c-fedid/FedCM/issues/564","title":"FedCM 4 R&E: Filtering IdPs","author":"tobiaspc","createdAt":"2024-04-30T07:51:22Z","labels":["CR Blocker"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":1,"numLabels":1}},{"number":566,"url":"https://github.com/w3c-fedid/FedCM/issues/566","title":"FedCM 4 R&E: Organization Chooser / WAYF","author":"tobiaspc","createdAt":"2024-04-30T07:52:26Z","labels":["CR Blocker"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":2,"numLabels":1}},{"number":571,"url":"https://github.com/w3c-fedid/FedCM/issues/571","title":"configURL on different subdomain than other endpoints","author":"obfuscoder","createdAt":"2024-05-06T13:19:47Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":2,"numLabels":0}},{"number":587,"url":"https://github.com/w3c-fedid/FedCM/issues/587","title":"Why must SameSite=none?","author":"anderspitman","createdAt":"2024-05-17T17:42:35Z","labels":["chrome","FPWD"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":4,"numComments":72,"numLabels":2}},{"number":590,"url":"https://github.com/w3c-fedid/FedCM/issues/590","title":"Add `interaction_required` error response","author":"aaronpk","createdAt":"2024-05-17T21:58:44Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":17,"numLabels":0}},{"number":592,"url":"https://github.com/w3c-fedid/FedCM/issues/592","title":"Send `Accept-Language` in the HTTP requests","author":"samuelgoto","createdAt":"2024-05-21T14:17:25Z","labels":["venky"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":9,"numLabels":1}},{"number":598,"url":"https://github.com/w3c-fedid/FedCM/issues/598","title":"Client authentication and consent creation","author":"yaron-zehavi","createdAt":"2024-05-22T20:29:21Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":12,"numLabels":0}},{"number":599,"url":"https://github.com/w3c-fedid/FedCM/issues/599","title":"OAuth profile for FedCM","author":"aaronpk","createdAt":"2024-05-23T01:04:24Z","labels":["chrome","FPWD","non-core"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":18,"numLabels":3}},{"number":600,"url":"https://github.com/w3c-fedid/FedCM/issues/600","title":"Account picture formats","author":"obfuscoder","createdAt":"2024-05-23T07:05:01Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":601,"url":"https://github.com/w3c-fedid/FedCM/issues/601","title":"FedCM IdP error responses","author":"panva","createdAt":"2024-05-24T09:07:13Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":5,"numLabels":0}},{"number":602,"url":"https://github.com/w3c-fedid/FedCM/issues/602","title":"`login_url` lacks a mode hint","author":"panva","createdAt":"2024-05-24T10:00:01Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":3,"numLabels":0}},{"number":603,"url":"https://github.com/w3c-fedid/FedCM/issues/603","title":"is `IdentityCredentialRequestOptionsContext` for FedCM UI only?","author":"panva","createdAt":"2024-05-24T10:23:20Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":5,"numLabels":0}},{"number":604,"url":"https://github.com/w3c-fedid/FedCM/issues/604","title":"infinite `login_url` loop when hints are not met","author":"panva","createdAt":"2024-05-24T10:32:42Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":8,"numLabels":0}},{"number":607,"url":"https://github.com/w3c-fedid/FedCM/issues/607","title":"Validate email addresses before displaying them","author":"samuelgoto","createdAt":"2024-05-29T18:53:21Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":2,"numLabels":0}},{"number":608,"url":"https://github.com/w3c-fedid/FedCM/issues/608","title":"Error fetching the accounts list from localhost","author":"samuelgoto","createdAt":"2024-05-30T13:55:11Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":2,"numLabels":0}},{"number":617,"url":"https://github.com/w3c-fedid/FedCM/issues/617","title":"Support signing in with an IdP using a redirection","author":"embesozzi","createdAt":"2024-06-18T12:54:17Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":2,"numLabels":0}},{"number":619,"url":"https://github.com/w3c-fedid/FedCM/issues/619","title":"Make it clearer that IdP needs to check Sec-Fetch-Dest","author":"npm1","createdAt":"2024-06-20T21:44:36Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":5,"numLabels":0}},{"number":627,"url":"https://github.com/w3c-fedid/FedCM/issues/627","title":"Add webdriver command to open PP/TOS","author":"npm1","createdAt":"2024-08-01T21:24:42Z","labels":["chrome","FPWD","non-core"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":1,"numLabels":3}},{"number":628,"url":"https://github.com/w3c-fedid/FedCM/issues/628","title":"Providers list constraint violations should not result in a NetworkError","author":"timcappalli","createdAt":"2024-08-02T18:56:20Z","labels":["specification"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":1,"numLabels":1}},{"number":632,"url":"https://github.com/w3c-fedid/FedCM/issues/632","title":"Specification Metadata outdated?","author":"lukewarlow","createdAt":"2024-08-16T01:06:51Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":652,"url":"https://github.com/w3c-fedid/FedCM/issues/652","title":"Horizontal Review preparation","author":"wseltzer","createdAt":"2024-09-16T21:08:46Z","labels":["CR Blocker"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":5,"numComments":23,"numLabels":1}},{"number":659,"url":"https://github.com/w3c-fedid/FedCM/issues/659","title":"Potential creation of (client_id, user) pairs through manipulated client_metadata links","author":"togamid","createdAt":"2024-09-28T09:23:31Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":664,"url":"https://github.com/w3c-fedid/FedCM/issues/664","title":"Clarify the necessity to protect against device exfil attacks ","author":"gioele-antoci","createdAt":"2024-10-24T14:01:49Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":5,"numLabels":0}},{"number":671,"url":"https://github.com/w3c-fedid/FedCM/issues/671","title":"Auto-grant a passkey `conditional` create","author":"samuelgoto","createdAt":"2024-10-30T18:39:14Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":12,"numLabels":0}},{"number":673,"url":"https://github.com/w3c-fedid/FedCM/issues/673","title":"Horizontal Review - i18n","author":"hlflanagan","createdAt":"2024-10-30T21:17:18Z","labels":["i18n-tracker"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":4,"numLabels":1}},{"number":675,"url":"https://github.com/w3c-fedid/FedCM/issues/675","title":"In passive mode, clarify in the spec that the engine can make choices of what and whether to render prompts","author":"samuelgoto","createdAt":"2024-11-01T20:14:54Z","labels":["editorial"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":1,"numComments":1,"numLabels":1}},{"number":679,"url":"https://github.com/w3c-fedid/FedCM/issues/679","title":"`IdentityProviderBranding` field `name` should provide lang and direction","author":"aphillips","createdAt":"2024-11-07T20:15:52Z","labels":["i18n-needs-resolution"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":7,"numLabels":1}},{"number":681,"url":"https://github.com/w3c-fedid/FedCM/issues/681","title":"Allow for language negotiation or localization of privacy policy and TOS?","author":"aphillips","createdAt":"2024-11-07T20:18:28Z","labels":["i18n-needs-resolution"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":2,"numLabels":1}},{"number":682,"url":"https://github.com/w3c-fedid/FedCM/issues/682","title":"`Get Title` doesn't have language or direction metadata","author":"aphillips","createdAt":"2024-11-07T20:20:21Z","labels":["i18n-needs-resolution"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":2,"numLabels":1}},{"number":687,"url":"https://github.com/w3c-fedid/FedCM/issues/687","title":"Consider adding an IDP chooser for unconnected IDPs ","author":"bvandersloot-mozilla","createdAt":"2024-12-17T13:21:49Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":8,"numLabels":0}},{"number":694,"url":"https://github.com/w3c-fedid/FedCM/issues/694","title":"Augment autofill with a `conditional` get","author":"samuelgoto","createdAt":"2025-01-16T21:49:16Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":14,"numLabels":0}},{"number":698,"url":"https://github.com/w3c-fedid/FedCM/issues/698","title":"If an RP page has an XSS risk, how can we avoid token leakage in the FedCM login process?","author":"Yekongs","createdAt":"2025-02-10T04:03:30Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":18,"numLabels":0}},{"number":703,"url":"https://github.com/w3c-fedid/FedCM/issues/703","title":"FedCM \"core\": move \"extensions\" out of the current spec into an independent spec","author":"samuelgoto","createdAt":"2025-03-06T19:35:07Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":6,"numComments":12,"numLabels":0}},{"number":704,"url":"https://github.com/w3c-fedid/FedCM/issues/704","title":"FedCM \"core\": break Web Platform tests between \"core\" and \"extensions\"","author":"samuelgoto","createdAt":"2025-03-06T19:44:21Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":4,"numComments":1,"numLabels":0}},{"number":713,"url":"https://github.com/w3c-fedid/FedCM/issues/713","title":"Does \"core\" need to introduce feature detection for features in \"extensions\"?","author":"samuelgoto","createdAt":"2025-04-11T16:40:20Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":3,"numLabels":0}},{"number":714,"url":"https://github.com/w3c-fedid/FedCM/issues/714","title":"Is the current the definition of \"core\" backwards incompatible?","author":"samuelgoto","createdAt":"2025-04-11T17:08:18Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":715,"url":"https://github.com/w3c-fedid/FedCM/issues/715","title":"Enterprise Scenarios: admin consent for users","author":"EmLauber","createdAt":"2025-04-11T21:32:10Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":5,"numLabels":0}},{"number":722,"url":"https://github.com/w3c-fedid/FedCM/issues/722","title":"Decide on a format for phone numbers","author":"cbiesinger","createdAt":"2025-04-23T16:13:39Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":4,"numComments":9,"numLabels":0}},{"number":729,"url":"https://github.com/w3c-fedid/FedCM/issues/729","title":"`globalObject`s should be the top level window, rather than the cross site iframe when Permissions Policy is used","author":"bvandersloot-mozilla","createdAt":"2025-05-21T12:23:54Z","labels":["CR Blocker"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":14,"numLabels":1}},{"number":741,"url":"https://github.com/w3c-fedid/FedCM/issues/741","title":"Accessibility review","author":"wseltzer","createdAt":"2025-06-16T18:41:45Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":3,"numLabels":0}},{"number":749,"url":"https://github.com/w3c-fedid/FedCM/issues/749","title":"Architecture (TAG) review","author":"wseltzer","createdAt":"2025-06-18T18:12:14Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":2,"numLabels":0}},{"number":750,"url":"https://github.com/w3c-fedid/FedCM/issues/750","title":"Inconsistency between `getUserInfo` and UI hints from `IdentityProviderAccount`","author":"bvandersloot-mozilla","createdAt":"2025-06-23T15:31:05Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":3,"numLabels":0}},{"number":758,"url":"https://github.com/w3c-fedid/FedCM/issues/758","title":"Allow IDPs to block invalid client IDs","author":"cbiesinger","createdAt":"2025-07-08T20:09:24Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":4,"numLabels":0}},{"number":764,"url":"https://github.com/w3c-fedid/FedCM/issues/764","title":"Specify the border between FedCM and protocols building on it","author":"togamid","createdAt":"2025-07-17T14:53:42Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":6,"numLabels":0}},{"number":773,"url":"https://github.com/w3c-fedid/FedCM/issues/773","title":"Extension to FedCM API to allow SAML or OIDC frontchannel logout","author":"huebnd","createdAt":"2025-08-12T15:38:29Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":10,"numLabels":0}},{"number":776,"url":"https://github.com/w3c-fedid/FedCM/issues/776","title":"Manifest fingerprinting via subdomains and public suffix list","author":"will-bartlett","createdAt":"2025-08-29T02:15:51Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":4,"numLabels":0}},{"number":777,"url":"https://github.com/w3c-fedid/FedCM/issues/777","title":"Manifest fingerprinting wording describes mitigation imprecisely","author":"will-bartlett","createdAt":"2025-08-29T02:20:31Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":3,"numLabels":0}},{"number":778,"url":"https://github.com/w3c-fedid/FedCM/issues/778","title":"Lack of generic params on login_url is limiting, unclear privacy value","author":"will-bartlett","createdAt":"2025-08-29T05:57:14Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":9,"numLabels":0}},{"number":779,"url":"https://github.com/w3c-fedid/FedCM/issues/779","title":"Make it clear image fetches in the spec are uncredentialed","author":"npm1","createdAt":"2025-08-29T17:49:53Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":781,"url":"https://github.com/w3c-fedid/FedCM/issues/781","title":"Say something about caching","author":"will-bartlett","createdAt":"2025-09-04T00:48:24Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":4,"numLabels":0}},{"number":782,"url":"https://github.com/w3c-fedid/FedCM/issues/782","title":"Lock subframes to same identity as parent frames","author":"will-bartlett","createdAt":"2025-09-04T01:21:15Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":12,"numLabels":0}},{"number":793,"url":"https://github.com/w3c-fedid/FedCM/issues/793","title":"Incremental authentication/authorization","author":"stianst","createdAt":"2025-10-28T07:47:44Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":809,"url":"https://github.com/w3c-fedid/FedCM/issues/809","title":"Use of apex domain is hard for organizations with different services owning different subdomains","author":"will-bartlett","createdAt":"2026-02-02T21:58:36Z","labels":["CR Blocker"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":11,"numLabels":1}},{"number":810,"url":"https://github.com/w3c-fedid/FedCM/issues/810","title":"Discovery of Token Validation Metadata and Protocol Binding","author":"oroka750","createdAt":"2026-02-04T10:21:21Z","labels":["CR Blocker"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":3,"numComments":11,"numLabels":1}},{"number":817,"url":"https://github.com/w3c-fedid/FedCM/issues/817","title":"Cross-device/System-level FedCM Flows?","author":"ThisIsMissEm","createdAt":"2026-03-09T16:53:55Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":2,"numComments":11,"numLabels":0}},{"number":819,"url":"https://github.com/w3c-fedid/FedCM/issues/819","title":"Usability/UX/Accessability Research?","author":"blaine","createdAt":"2026-03-10T20:34:45Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":4,"numLabels":0}},{"number":820,"url":"https://github.com/w3c-fedid/FedCM/issues/820","title":"DPoP for FedCM (natively)","author":"ThisIsMissEm","createdAt":"2026-03-24T15:48:46Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":3,"numLabels":0}},{"number":824,"url":"https://github.com/w3c-fedid/FedCM/issues/824","title":"Which cookies are sent with FedCM requests?","author":"ThisIsMissEm","createdAt":"2026-04-21T16:08:13Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":3,"numLabels":0}},{"number":826,"url":"https://github.com/w3c-fedid/FedCM/issues/826","title":"Support moving endpoints gradually","author":"will-bartlett","createdAt":"2026-04-23T23:48:00Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":1,"numLabels":0}},{"number":827,"url":"https://github.com/w3c-fedid/FedCM/issues/827","title":"FedCM facilitates vendor lock-in","author":"will-bartlett","createdAt":"2026-04-27T16:18:09Z","labels":["agenda+"],"sloTimeUsed":"PT0S","whichSlo":"none","onAgendaFor":"P10DT15H59M44S","stats":{"numTimelineItems":1,"numComments":18,"numLabels":1}},{"number":829,"url":"https://github.com/w3c-fedid/FedCM/issues/829","title":"Standards compliance concerns raised by Dominic in Spec","author":"pottis","createdAt":"2026-05-09T00:23:26Z","labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":0,"numComments":2,"numLabels":0}},{"number":439,"url":"https://github.com/w3c-fedid/FedCM/pull/439","title":"Make IdentityCredential Storable and Collectable","author":"bvandersloot-mozilla","createdAt":"2023-02-15T14:31:01Z","pull_request":{"draft":true},"labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":6,"numComments":6,"numLabels":0}},{"number":483,"url":"https://github.com/w3c-fedid/FedCM/pull/483","title":"Returning accounts go first in getUserInfo","author":"npm1","createdAt":"2023-06-23T18:00:29Z","pull_request":{"draft":false},"labels":["chrome"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":25,"numComments":25,"numLabels":1}},{"number":523,"url":"https://github.com/w3c-fedid/FedCM/pull/523","title":"Add third party cookie relaxations for FedCM","author":"npm1","createdAt":"2023-11-29T22:33:11Z","pull_request":{"draft":false},"labels":["chrome"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":25,"numComments":25,"numLabels":1}},{"number":610,"url":"https://github.com/w3c-fedid/FedCM/pull/610","title":"Specify the webdriver command to open terms of service and privacy po…","author":"cbiesinger","createdAt":"2024-05-30T21:02:11Z","pull_request":{"draft":false},"labels":["chrome"],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":27,"numComments":27,"numLabels":1}},{"number":711,"url":"https://github.com/w3c-fedid/FedCM/pull/711","title":"Set limit on size of `providers`","author":"npm1","createdAt":"2025-03-31T15:40:36Z","pull_request":{"draft":false},"labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":40,"numComments":40,"numLabels":0}},{"number":752,"url":"https://github.com/w3c-fedid/FedCM/pull/752","title":"Document the webdriver command to use another account.","author":"cbiesinger","createdAt":"2025-06-24T20:38:58Z","pull_request":{"draft":false},"labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":7,"numComments":7,"numLabels":0}},{"number":766,"url":"https://github.com/w3c-fedid/FedCM/pull/766","title":"feat: Add support for passing arbitrary parameters to the ID assertio…","author":"tylorjohnson09","createdAt":"2025-07-24T03:30:51Z","pull_request":{"draft":false},"labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":8,"numComments":8,"numLabels":0}},{"number":792,"url":"https://github.com/w3c-fedid/FedCM/pull/792","title":"Revamp intro","author":"npm1","createdAt":"2025-10-27T19:37:10Z","pull_request":{"draft":false},"labels":[],"sloTimeUsed":"PT0S","whichSlo":"none","stats":{"numTimelineItems":22,"numComments":22,"numLabels":0}},{"number":815,"url":"https://github.com/w3c-fedid/FedCM/pull/815","title":"Enabling IDP Interception in FedCM Request","author":"pottis","createdAt":"2026-02-28T06:31:33Z","pull_request":{"draft":false},"labels":["agenda+"],"sloTimeUsed":"PT0S","whichSlo":"none","onAgendaFor":"PT13H19M16S","stats":{"numTimelineItems":296,"numComments":296,"numLabels":1}},{"number":821,"url":"https://github.com/w3c-fedid/FedCM/pull/821","title":"Allow IDPs to delegate well-known file hosting via DNS TXT record","author":"will-bartlett","createdAt":"2026-03-25T23:19:24Z","pull_request":{"draft":false},"labels":["agenda+"],"sloTimeUsed":"PT0S","whichSlo":"none","onAgendaFor":"P28DT12H30M54S","stats":{"numTimelineItems":68,"numComments":68,"numLabels":1}}]}