Repository navigation
chore(oidc): apply for the OpenID Foundation open source fee waiver and certify #412
Description
Why
The Foundation waives fees for open source projects that meet its policy.
What
- Confirm eligibility against the open source certification policy
- Apply for the waiver, then submit results
Done when
Seamless Auth is listed as an OpenID Certified provider, or the blocker is recorded.
Activity
Bccorb commentedon Nov 1, 2026
v0.21 certification profiles
The v0.21 target is four OP profiles. All four run in the OpenID conformance workflow of fells-code/seamless-auth-oidc-provider (suite release-v5.3.4) against API main and edge main.
pkceRequired: falseandnonceRequired: falseopt-outs, because the OIDCC plans send nocode_challengeand one module sends nononce. Remaining results are WARNINGs (email in the ID token forscope=emailby design, no phone on the test account, the claims parameter off) and REVIEW screenshots.response_mode=form_postgets its error by GET: fells-code/seamless-auth-oidc-provider#30.A client that keeps the PKCE requirement (
conformance-pkce) is checked on every run to still refuse a request withoutcode_challenge.Also from these runs: fells-code/seamless-auth-oidc-provider#32 (the provider's own error pages are the library default, not the hosted UI; certification reviewers see them in the screenshots).
Bccorb commentedon Nov 1, 2026
The four v0.21 target profiles pass in the conformance workflow (Basic OP, Config OP, RP-Initiated OP, Back-Channel OP); Form Post OP waits on seamless-auth-oidc-provider#30. The fee waiver application and the submission have not been made. Moving to v0.22 with the Form Post fix (seamless-auth-oidc-provider#30) and the hosted error pages (seamless-auth-oidc-provider#32) as prerequisites for the screenshots reviewers see.