Test info
Profile: {'openid-configuration': 'config', 'response_type': 'id_token+token', 'crypto': 'encrypt+none+sign', 'registration': 'static'}
Timestamp: 2016-02-01T23:37:04Z
Test description: Using prompt=none with user hint through id_token_hint [Basic, Implicit, Hybrid]
Test ID: OP-Req-id_token_hint
Issuer: https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth
Test output
__AuthorizationRequest:pre__
[check-response-type]
status: OK
description: Checks that the asked for response type are among the supported
[check-endpoint]
status: OK
description: Checks that the necessary endpoint exists at a server
__AuthorizationRequest:pre__
[check-response-type]
status: OK
description: Checks that the asked for response type are among the supported
[check-endpoint]
status: OK
description: Checks that the necessary endpoint exists at a server
__After completing the test flow:__
[verify-response]
status: OK
description: Checks that the last response was one of a possible set of OpenID Connect Responses
[same-authn]
status: OK
description: Verifies that the same authentication was used twice in the flow.
__X:==== END ====__
Trace output
0.000317 ------------ DiscoveryRequest ------------
0.000333 Provider info discover from 'https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth'
0.000340 --> URL: https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth/.well-known/openid-configuration
0.919725 ProviderConfigurationResponse: {
"account_endpoint": "https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth/account",
"authorization_endpoint": "https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth/authorise",
"claims_parameter_supported": false,
"claims_supported": [
"address",
"email",
"family_name",
"given_name",
"name",
"phone_number",
"preferred_username",
"sub",
"updated_at"
],
"display_values_supported": [
"page",
"popup",
"touch",
"wap"
],
"grant_types_supported": [
"authorization_code",
"implicit"
],
"id_token_signing_alg_values_supported": [
"RS256"
],
"issuer": "https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth",
"jwks_uri": "https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth/keys",
"request_parameter_supported": false,
"request_uri_parameter_supported": true,
"require_request_uri_registration": true,
"response_types_supported": [
"code",
"token",
"id_token",
"token id_token"
],
"revocation_endpoint": "https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth/revoke",
"scopes_supported": [
"openid",
"address",
"profile",
"email",
"phone"
],
"subject_types_supported": [
"public"
],
"token_endpoint": "https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth/token",
"token_endpoint_auth_methods_supported": [
"client_secret_basic",
"client_secret_post"
],
"userinfo_endpoint": "https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth/userinfo",
"version": "3.0"
}
1.840959 JWKS: {
"keys": [
{
"alg": "RS256",
"e": "AQAB",
"kid": "468b1763-142a-43da-96e0-53f2b6e1a7ac",
"kty": "RSA",
"n": "AM_U2ExHALTmiq8KLBZC7pKylVyr-r6oZrnwaUxQEMxZ6W8D0j_ijYmtj33qFqLCZ7iiAXC5DFDe96UxqxzAAsXUrqEHkhp2KWOZeXiyi0d-94jhZRLdpv9f_imWH-61d_Wj51XkXBSwUIZiwMYjP9ZeMK0gU5fU4fONBCnrIG6y-fbNSFsTiM-QvWG-KMU88o26XQNK924678_sgpVLYoeuKcEtEdvpNCGamttMMhi2B_vzVxn_dIbpsAGf5GbxCfyKw1w4Y9-bYX7YbV0GW25tjnh2Setfoo0EjImMeSQpXO-FYZgI39tSSF2Gm1d1aFu7bBlGYT9W1HUG3rRgUxs",
"use": "sig"
}
]
}
1.849756 ------------ AuthorizationRequest ------------
1.850239 --> URL: https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth/authorise?nonce=24qHRqXRUTcQ&state=VbmBj5m92kGTPxic&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60441%2Fauthz_cb&response_type=id_token+token&client_id=403a008d-5a9b-46f3-873e-e683435a249b&scope=openid
1.850249 --> BODY: None
2.247004 QUERY_STRING:
3.622734 <-- access_token=T1lYK2QRQbKrUbx7I5HC-g&id_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjQ2OGIxNzYzLTE0MmEtNDNkYS05NmUwLTUzZjJiNmUxYTdhYyJ9.eyJpc3MiOiJodHRwczovL2VjMi01NC0xNTMtMTY5LTE1MS5hcC1zb3V0aGVhc3QtMi5jb21wdXRlLmFtYXpvbmF3cy5jb20vb2F1dGgiLCJhdWQiOiI0MDNhMDA4ZC01YTliLTQ2ZjMtODczZS1lNjgzNDM1YTI0OWIiLCJleHAiOiIxNDU0MzczNDMyIiwiaWF0IjoiMTQ1NDM2OTgzMiIsImF1dGhfdGltZSI6IjE0NTQzNjk3MzEiLCJub25jZSI6IjI0cUhScVhSVVRjUSIsImF1dGhfbW9kZSI6InNpbXBsZSIsInN1YiI6IjRkMjVjYjQ3LWEwNjMtNDJjMS05ZmU0LWQxMDBmYjEwMDk4YyIsImF0X2hhc2giOiJrZlIzWElKR1YzYWNJQWpXRVhmS0VBIn0.wr7sgQ0a3JySJarkXQpeZSSnpk5o9ruag3K_UPtYA9hh16yylBkLXCY8LsAHK7ENxqX16fHlBJBdCZoQng8Vbyg36PUf7hfEeu6QmKP8vONGwsiKKlNhZIUXFBufW-e1q5qiRG6aTexvvbBqJk28WSlzxvOQXxMkFwaUaNqcgiAJzdNcLcaN77zuZIIsBG6Yz8SERmLpfNWBeISFp-7pKY4dNjIDrLObPdBqkQAWNo8xFuPWvRPWQ501HvfxTwSlkuZYPNOtYu9CBBVnJfhUyfC_ZNZQ5NmHXa4TKNxSnm51N0d_DWSWJpGO6273gXSUCyMKyP7F2Y-DFhrFct1-Kg&state=VbmBj5m92kGTPxic
4.555570 AuthorizationResponse: {
"access_token": "T1lYK2QRQbKrUbx7I5HC-g",
"id_token": {
"claims": {
"at_hash": "kfR3XIJGV3acIAjWEXfKEA",
"aud": [
"403a008d-5a9b-46f3-873e-e683435a249b"
],
"auth_mode": "simple",
"auth_time": "1454369731",
"exp": "1454373432",
"iat": "1454369832",
"iss": "https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth",
"nonce": "24qHRqXRUTcQ",
"sub": "4d25cb47-a063-42c1-9fe4-d100fb10098c"
},
"jws header parameters": {
"alg": "RS256",
"kid": "468b1763-142a-43da-96e0-53f2b6e1a7ac",
"typ": "JWT"
}
},
"state": "VbmBj5m92kGTPxic"
}
4.556364 ------------ AuthorizationRequest ------------
4.556886 --> URL: https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth/authorise?nonce=AYErLvDxDAxE&prompt=none&id_token_hint=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjQ2OGIxNzYzLTE0MmEtNDNkYS05NmUwLTUzZjJiNmUxYTdhYyJ9.eyJpc3MiOiJodHRwczovL2VjMi01NC0xNTMtMTY5LTE1MS5hcC1zb3V0aGVhc3QtMi5jb21wdXRlLmFtYXpvbmF3cy5jb20vb2F1dGgiLCJhdWQiOiI0MDNhMDA4ZC01YTliLTQ2ZjMtODczZS1lNjgzNDM1YTI0OWIiLCJleHAiOiIxNDU0MzczNDMyIiwiaWF0IjoiMTQ1NDM2OTgzMiIsImF1dGhfdGltZSI6IjE0NTQzNjk3MzEiLCJub25jZSI6IjI0cUhScVhSVVRjUSIsImF1dGhfbW9kZSI6InNpbXBsZSIsInN1YiI6IjRkMjVjYjQ3LWEwNjMtNDJjMS05ZmU0LWQxMDBmYjEwMDk4YyIsImF0X2hhc2giOiJrZlIzWElKR1YzYWNJQWpXRVhmS0VBIn0.wr7sgQ0a3JySJarkXQpeZSSnpk5o9ruag3K_UPtYA9hh16yylBkLXCY8LsAHK7ENxqX16fHlBJBdCZoQng8Vbyg36PUf7hfEeu6QmKP8vONGwsiKKlNhZIUXFBufW-e1q5qiRG6aTexvvbBqJk28WSlzxvOQXxMkFwaUaNqcgiAJzdNcLcaN77zuZIIsBG6Yz8SERmLpfNWBeISFp-7pKY4dNjIDrLObPdBqkQAWNo8xFuPWvRPWQ501HvfxTwSlkuZYPNOtYu9CBBVnJfhUyfC_ZNZQ5NmHXa4TKNxSnm51N0d_DWSWJpGO6273gXSUCyMKyP7F2Y-DFhrFct1-Kg&state=HYd854YE6YP3SY24&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60441%2Fauthz_cb&response_type=id_token+token&client_id=403a008d-5a9b-46f3-873e-e683435a249b&scope=openid
4.556897 --> BODY: None
4.968873 QUERY_STRING:
7.895688 <-- access_token=3gbLnpMhR5qz5gxzFC1BaA&id_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjQ2OGIxNzYzLTE0MmEtNDNkYS05NmUwLTUzZjJiNmUxYTdhYyJ9.eyJpc3MiOiJodHRwczovL2VjMi01NC0xNTMtMTY5LTE1MS5hcC1zb3V0aGVhc3QtMi5jb21wdXRlLmFtYXpvbmF3cy5jb20vb2F1dGgiLCJhdWQiOiI0MDNhMDA4ZC01YTliLTQ2ZjMtODczZS1lNjgzNDM1YTI0OWIiLCJleHAiOiIxNDU0MzczNDM1IiwiaWF0IjoiMTQ1NDM2OTgzNSIsImF1dGhfdGltZSI6IjE0NTQzNjk3MzEiLCJub25jZSI6IkFZRXJMdkR4REF4RSIsImF1dGhfbW9kZSI6InNpbXBsZSIsInN1YiI6IjRkMjVjYjQ3LWEwNjMtNDJjMS05ZmU0LWQxMDBmYjEwMDk4YyIsImF0X2hhc2giOiJfd21jSWFnU2ttVHJpcE83UGNiUWhRIn0.gav2kEP3kDV8xkCVe87jt9oyToQHfSAo9UMcZxlYVgCA1YbYkuzstU-dib42kJwV3950InmlOfCatug20S0y5SEJ-C6doCbVfMjG-EPxqkbz7JZTZ-tHf0GJUErG9W2BDgxqVJDaWEHrTPGWY0fEf9nbWw2-EyfJEj3TQ6F2BrTZ9Lyi2LJXeletBZO7SPEkTi-O9upinGTxm8dniVKJeVZxVQsu7_suzYImiXaQvQ54EFHsSn1ZI-GvjFMofHXGUUlvGs85MHlLFrWI1c8qFHBkhKs8UJ8QjL0C_r7XMZbMMcoqbtpIcJXkqWfxlAI6RqXL2WOZpVTRnXnUufww0Q&state=HYd854YE6YP3SY24
7.904784 AuthorizationResponse: {
"access_token": "3gbLnpMhR5qz5gxzFC1BaA",
"id_token": {
"claims": {
"at_hash": "_wmcIagSkmTripO7PcbQhQ",
"aud": [
"403a008d-5a9b-46f3-873e-e683435a249b"
],
"auth_mode": "simple",
"auth_time": "1454369731",
"exp": "1454373435",
"iat": "1454369835",
"iss": "https://ec2-54-153-169-151.ap-southeast-2.compute.amazonaws.com/oauth",
"nonce": "AYErLvDxDAxE",
"sub": "4d25cb47-a063-42c1-9fe4-d100fb10098c"
},
"jws header parameters": {
"alg": "RS256",
"kid": "468b1763-142a-43da-96e0-53f2b6e1a7ac",
"typ": "JWT"
}
},
"state": "HYd854YE6YP3SY24"
}
7.905462 ==== END ====
Result
PASSED