Issues

• Pending signin redirect can navigate or stop a newer sign-out; request-scoped cancellation needed

  authts/oidc-client-ts#2477 · Filter by author clemlesne opened on Oct 2, 2026

• HTTP request timeout ends at headers and leaves stalled response bodies unbounded

  authts/oidc-client-ts#2476 · Filter by author clemlesne opened on Oct 2, 2026

• [Security] Missing iss, aud, exp claim validation in _validateIdTokenAttributes (CWE-863)

  authts/oidc-client-ts#2475 · Filter by author jayantkamble10000 opened on Aug 8, 2026

• OIDC errors in iframe URL not detected immediately - users wait for full timeout

  authts/oidc-client-ts#2473 · Filter by author sacrosanctic opened on Jun 28, 2026

• getUser() and refresh-token silent renew lose custom state and url_state

  help wanted
  authts/oidc-client-ts#2457 · Filter by author MN755 opened on May 21, 2026

• Private security contact request

  authts/oidc-client-ts#2455 · Filter by author yetingli opened on May 5, 2026

• signinRedirect does not redirect on Chrome v.147

  authts/oidc-client-ts#2448 · Filter by author here-nerd opened on Apr 9, 2026
  2

• Client Credentials Flow & UserManager.signinResourceOwnerCredentials()

  authts/oidc-client-ts#2393 · Filter by author roubert opened on Mar 4, 2026

• Error in signinresponse not managed

  authts/oidc-client-ts#2345 · Filter by author gogolander opened on Jan 28, 2026

• resource parameter not included in token request per RFC 8707

  authts/oidc-client-ts#2333 · Filter by author DibyodyutiMondal opened on Jan 16, 2026
  2

• Proposal: Setting to disable IFrame silent sign in?

  question
  authts/oidc-client-ts#2296 · Filter by author mcrio opened on Dec 16, 2025
  6

• Session Monitor initialization fails intermittently due to race condition with querySessionStatus and signinSilent calls

  help wanted
  authts/oidc-client-ts#2279 · Filter by author rogeriobatista-hotmart opened on Nov 28, 2025

• Chrome(PNA) /local development / iframe

  authts/oidc-client-ts#2273 · Filter by author zakhar-samakhval-devreon opened on Nov 21, 2025
  2

• Revoke endpoint content type is causing failure even though the status code is 200

  authts/oidc-client-ts#2272 · Filter by author pratik1701 opened on Nov 21, 2025

• How to implement the impersonate feature from OAuth 2.0?

  question
  authts/oidc-client-ts#2240 · Filter by author johannchopin-buyco opened on Oct 22, 2025
  1

• AWS Cognito Sign *Up*

  Amazon Cognito
  authts/oidc-client-ts#2231 · Filter by author resistdesign opened on Oct 17, 2025

• Confusing error message when popup blocked

  authts/oidc-client-ts#2205 · Filter by author NullDivision opened on Oct 6, 2025
  4

• design defect: minimum _expiringTimer forced to five seconds

  help wanted
  authts/oidc-client-ts#2204 · Filter by author garretwilson opened on Oct 5, 2025
  7

• IframeWindow Close function optimize

  authts/oidc-client-ts#2192 · Filter by author xplloveyxl opened on Sep 30, 2025
  3

• UserInfo doesn't support dpop

  authts/oidc-client-ts#2182 · Filter by author indiealexh opened on Sep 22, 2025

• Confusion over extraTokenParams and signinResourceOwnerCredentials method

  authts/oidc-client-ts#2156 · Filter by author evoactivity opened on Sep 9, 2025

• signinSilent allows unsupported arguments

  bughelp wanted
  authts/oidc-client-ts#2140 · Filter by author pimlie opened on Aug 29, 2025
  1

• Error thrown on auth time when reauthentication

  authts/oidc-client-ts#2107 · Filter by author qiandongqiu opened on Aug 5, 2025
  1

• samples/Parcel, wtf is going on with this example?!

  authts/oidc-client-ts#2093 · Filter by author karmakaze opened on Jul 25, 2025
  1

• Problem(s) running sample/Parcel on Mac (Apple Silicon, M3)

  authts/oidc-client-ts#2091 · Filter by author karmakaze opened on Jul 25, 2025