Test info

Profile: {'openid-configuration': 'config', 'response_type': 'code', 'crypto': 'none+sign', 'registration': 'static'}
Timestamp: 2016-12-21T07:43:00Z
Test description: Requesting ID Token with max_age=1 seconds restriction [Basic, Implicit, Hybrid]
Test ID: OP-Req-max_age=1
Issuer: https://auth.svcs.verizon.com:22790/vzconnect/

Test output


__AuthorizationRequest:pre__
[check-response-type]
	status: OK
	description: Checks that the asked for response type are among the supported
[check-endpoint]
	status: OK
	description: Checks that the necessary endpoint exists at a server
__AuthorizationRequest:pre__
[check-response-type]
	status: OK
	description: Checks that the asked for response type are among the supported
[check-endpoint]
	status: OK
	description: Checks that the necessary endpoint exists at a server
__After completing the test flow:__
[claims-check]
	status: OK
	description: Checks if specific claims is present or not
[verify-response]
	status: OK
	description: Checks that the last response was one of a possible set of OpenID Connect Responses
__X:==== END ====__

Trace output


0.000303 ------------ DiscoveryRequest ------------
0.000319 Provider info discover from 'https://auth.svcs.verizon.com:22790/vzconnect'
0.000326 --> URL: https://auth.svcs.verizon.com:22790/vzconnect/.well-known/openid-configuration
0.037788 ProviderConfigurationResponse: {
  "authorization_endpoint": "https://auth.svcs.verizon.com:22790/vzconnect/authorize",
  "claims_parameter_supported": false,
  "claims_supported": [
    "sub",
    "firstName",
    "lastName",
    "gender",
    "email",
    "mdn",
    "address1",
    "address2",
    "city",
    "state",
    "zip",
    "country",
    "image"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA-OAEP-256"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256",
    "none"
  ],
  "introspection_endpoint": "https://auth.svcs.verizon.com:22790/vzconnect/introspect",
  "issuer": "https://auth.svcs.verizon.com:22790/vzconnect/",
  "jwks_uri": "https://auth.svcs.verizon.com:22790/vzconnect/jwk",
  "request_object_signing_alg_values_supported": [
    "RS256",
    "none"
  ],
  "request_parameter_supported": true,
  "request_uri_parameter_supported": true,
  "require_request_uri_registration": true,
  "response_types_supported": [
    "code",
    "token",
    "id_token"
  ],
  "scopes_supported": [
    "openid",
    "profile",
    "email",
    "address",
    "phone",
    "ivrauthentication",
    "mobileperks",
    "cdi"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "token_endpoint": "https://auth.svcs.verizon.com:22790/vzconnect/token",
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256"
  ],
  "userinfo_endpoint": "https://api.yourmobileid.com/userinfo",
  "version": "3.0"
}
0.074378 JWKS: {
  "keys": [
    {
      "alg": "RS256",
      "e": "AQAB",
      "kid": "ab35126b-0e27-4cad-bea7-1dd2cdde59e0",
      "kty": "RSA",
      "n": "gWbqQJPPtvfBskxfiV8p2BMlyUQe0GSu-GJrUUaD7uRISqUYYSUy7kQotMMFkKiAl8AD_dmhXqehfj7knAyw67P577Ox-ffsLMVLiDArAly-cL2JyTWs5CQ0dREPMEZFIwYulotq3ylwek3d8aKuk9LoHzlUXo7fpaOPZLl3YYkUGgUdhTZ0L3UGbOAtfBjsge-oVJRKu4iO_HbBc9xVlrh8XEuJCqUGXI6akp-zQYnjZGd3-9zjmHKim1qY0WkP8_CfiQiDbuyrEP51LUH3YQycQQyXdaxARWSfjx_Iwzk48JuXeUZ7qOnkWi1sE39hYhKE3tmgD6ex-PytfMIwzw"
    },
    {
      "alg": "RS256",
      "e": "AQAB",
      "kid": "rsa1",
      "kty": "RSA",
      "n": "23zs5r8PQKpsKeoUd2Bjz3TJkUljWqMD8X98SaIb1LE7dCQzi9jwO58FGL0ieY1Dfnr9-g1iiY8sNzV-byawK98W9yFiopaghfoKtxXgUD8pi0fLPeWmAkntjn28Z_WZvvA265ELbBhphPXEJcFhdzUfgESHVuqFMEqp1pB-CP0"
    }
  ]
}
0.086640 ------------ AuthorizationRequest ------------
0.087031 --> URL: https://auth.svcs.verizon.com:22790/vzconnect/authorize?scope=openid&state=mBQLcyXbejjyEp1z&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60784%2Fauthz_cb&response_type=code&client_id=c2c0f88d-ec48-4a21-b2fe-0f265b317157
0.087039 --> BODY: None
0.932298 <-- code=bpXUUL&state=mBQLcyXbejjyEp1z
0.932750 AuthorizationResponse: {
  "code": "bpXUUL",
  "state": "mBQLcyXbejjyEp1z"
}
0.933109 ------------ AccessTokenRequest ------------
0.933491 --> URL: https://auth.svcs.verizon.com:22790/vzconnect/token
0.933498 --> BODY: code=bpXUUL&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60784%2Fauthz_cb
0.933511 --> HEADERS: {'Content-Type': 'application/x-www-form-urlencoded', 'Authorization': u'Basic YzJjMGY4OGQtZWM0OC00YTIxLWIyZmUtMGYyNjViMzE3MTU3OmFoamVpQ2tfMFhlaExYUlVUR3BaYlp0dFNxQlcyaWVVVTRNaVVDZy1TbUNYZm1IRU50em9Xc1B0al9CVUxTOWRtSHB5TmU3TkJCV3ZCcmw4bTF3cmln'}
1.084122 <-- STATUS: 200
1.084195 <-- BODY: {"access_token":"eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE0ODIzMDk3NDksImF1ZCI6WyJjMmMwZjg4ZC1lYzQ4LTRhMjEtYjJmZS0wZjI2NWIzMTcxNTciXSwiaXNzIjoiaHR0cHM6XC9cL2F1dGguc3Zjcy52ZXJpem9uLmNvbToyMjc5MFwvdnpjb25uZWN0XC8iLCJqdGkiOiIyZDQxODI2ZS04MmQ3LTQ5NjEtYWNiZC0wZThhMTU1YWJiNTkiLCJpYXQiOjE0ODIzMDYxNDl9.boZS8UYqlRlL6aXCUVz1jU-iRZOLHeFoEL6Q-UgNsLbBm3QUq2v1LQeqWyF5C1DqZDVbOo34K3wLB7BipkKsenFZJW6HmT4baiyXYcFqD4OLQItgqKRG_yJ-bPzg6rpRPBOsUjCelOBNcOt3iFphXRnasvPYb3evuKmrv2nZok8","token_type":"Bearer","expires_in":3599,"scope":"openid","id_token":"eyJhbGciOiJSUzI1NiIsImtpZCI6InJzYTEifQ.eyJleHAiOjE0ODIzMDY3NDksInN1YiI6IjljOTNhODBiLWE4NjUtNDBiZC05NGE4LThhNjgxMDBhNzY5MiIsImF1ZCI6WyJjMmMwZjg4ZC1lYzQ4LTRhMjEtYjJmZS0wZjI2NWIzMTcxNTciXSwiaXNzIjoiaHR0cHM6XC9cL2F1dGguc3Zjcy52ZXJpem9uLmNvbToyMjc5MFwvdnpjb25uZWN0XC8iLCJpYXQiOjE0ODIzMDYxNDksImtpZCI6InJzYTEifQ.QADtNropyfRGqrW2Vf0BGJzipKte7zHTz-2vxPBMYQYANFTnRTSXhtKezcG9S5zkm-9RTTwDqwgDMcRGfLaim3KA623SyYSLDhaXUA8C6fP96-gr3d9uxvJZwMd0hV5ktTn_lQBdKera7d1vsjRzEQU3yLs7B5oKGxbQjRQgQTs"}
1.127005 AccessTokenResponse: {
  "access_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE0ODIzMDk3NDksImF1ZCI6WyJjMmMwZjg4ZC1lYzQ4LTRhMjEtYjJmZS0wZjI2NWIzMTcxNTciXSwiaXNzIjoiaHR0cHM6XC9cL2F1dGguc3Zjcy52ZXJpem9uLmNvbToyMjc5MFwvdnpjb25uZWN0XC8iLCJqdGkiOiIyZDQxODI2ZS04MmQ3LTQ5NjEtYWNiZC0wZThhMTU1YWJiNTkiLCJpYXQiOjE0ODIzMDYxNDl9.boZS8UYqlRlL6aXCUVz1jU-iRZOLHeFoEL6Q-UgNsLbBm3QUq2v1LQeqWyF5C1DqZDVbOo34K3wLB7BipkKsenFZJW6HmT4baiyXYcFqD4OLQItgqKRG_yJ-bPzg6rpRPBOsUjCelOBNcOt3iFphXRnasvPYb3evuKmrv2nZok8",
  "expires_in": 3599,
  "id_token": {
    "claims": {
      "aud": [
        "c2c0f88d-ec48-4a21-b2fe-0f265b317157"
      ],
      "exp": 1482306749,
      "iat": 1482306149,
      "iss": "https://auth.svcs.verizon.com:22790/vzconnect/",
      "kid": "rsa1",
      "sub": "9c93a80b-a865-40bd-94a8-8a68100a7692"
    },
    "jws header parameters": {
      "alg": "RS256",
      "kid": "rsa1"
    }
  },
  "scope": "openid",
  "token_type": "Bearer"
}
5.483439 ------------ DiscoveryRequest ------------
5.483459 Provider info discover from 'https://auth.svcs.verizon.com:22790/vzconnect'
5.483465 --> URL: https://auth.svcs.verizon.com:22790/vzconnect/.well-known/openid-configuration
5.521777 ProviderConfigurationResponse: {
  "authorization_endpoint": "https://auth.svcs.verizon.com:22790/vzconnect/authorize",
  "claims_parameter_supported": false,
  "claims_supported": [
    "sub",
    "firstName",
    "lastName",
    "gender",
    "email",
    "mdn",
    "address1",
    "address2",
    "city",
    "state",
    "zip",
    "country",
    "image"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA-OAEP-256"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256",
    "none"
  ],
  "introspection_endpoint": "https://auth.svcs.verizon.com:22790/vzconnect/introspect",
  "issuer": "https://auth.svcs.verizon.com:22790/vzconnect/",
  "jwks_uri": "https://auth.svcs.verizon.com:22790/vzconnect/jwk",
  "request_object_signing_alg_values_supported": [
    "RS256",
    "none"
  ],
  "request_parameter_supported": true,
  "request_uri_parameter_supported": true,
  "require_request_uri_registration": true,
  "response_types_supported": [
    "code",
    "token",
    "id_token"
  ],
  "scopes_supported": [
    "openid",
    "profile",
    "email",
    "address",
    "phone",
    "ivrauthentication",
    "mobileperks",
    "cdi"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "token_endpoint": "https://auth.svcs.verizon.com:22790/vzconnect/token",
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256"
  ],
  "userinfo_endpoint": "https://api.yourmobileid.com/userinfo",
  "version": "3.0"
}
5.557747 JWKS: {
  "keys": [
    {
      "alg": "RS256",
      "e": "AQAB",
      "kid": "ab35126b-0e27-4cad-bea7-1dd2cdde59e0",
      "kty": "RSA",
      "n": "gWbqQJPPtvfBskxfiV8p2BMlyUQe0GSu-GJrUUaD7uRISqUYYSUy7kQotMMFkKiAl8AD_dmhXqehfj7knAyw67P577Ox-ffsLMVLiDArAly-cL2JyTWs5CQ0dREPMEZFIwYulotq3ylwek3d8aKuk9LoHzlUXo7fpaOPZLl3YYkUGgUdhTZ0L3UGbOAtfBjsge-oVJRKu4iO_HbBc9xVlrh8XEuJCqUGXI6akp-zQYnjZGd3-9zjmHKim1qY0WkP8_CfiQiDbuyrEP51LUH3YQycQQyXdaxARWSfjx_Iwzk48JuXeUZ7qOnkWi1sE39hYhKE3tmgD6ex-PytfMIwzw"
    },
    {
      "alg": "RS256",
      "e": "AQAB",
      "kid": "rsa1",
      "kty": "RSA",
      "n": "23zs5r8PQKpsKeoUd2Bjz3TJkUljWqMD8X98SaIb1LE7dCQzi9jwO58FGL0ieY1Dfnr9-g1iiY8sNzV-byawK98W9yFiopaghfoKtxXgUD8pi0fLPeWmAkntjn28Z_WZvvA265ELbBhphPXEJcFhdzUfgESHVuqFMEqp1pB-CP0"
    }
  ]
}
5.592230 JWKS: {
  "keys": [
    {
      "alg": "RS256",
      "e": "AQAB",
      "kid": "ab35126b-0e27-4cad-bea7-1dd2cdde59e0",
      "kty": "RSA",
      "n": "gWbqQJPPtvfBskxfiV8p2BMlyUQe0GSu-GJrUUaD7uRISqUYYSUy7kQotMMFkKiAl8AD_dmhXqehfj7knAyw67P577Ox-ffsLMVLiDArAly-cL2JyTWs5CQ0dREPMEZFIwYulotq3ylwek3d8aKuk9LoHzlUXo7fpaOPZLl3YYkUGgUdhTZ0L3UGbOAtfBjsge-oVJRKu4iO_HbBc9xVlrh8XEuJCqUGXI6akp-zQYnjZGd3-9zjmHKim1qY0WkP8_CfiQiDbuyrEP51LUH3YQycQQyXdaxARWSfjx_Iwzk48JuXeUZ7qOnkWi1sE39hYhKE3tmgD6ex-PytfMIwzw"
    },
    {
      "alg": "RS256",
      "e": "AQAB",
      "kid": "rsa1",
      "kty": "RSA",
      "n": "23zs5r8PQKpsKeoUd2Bjz3TJkUljWqMD8X98SaIb1LE7dCQzi9jwO58FGL0ieY1Dfnr9-g1iiY8sNzV-byawK98W9yFiopaghfoKtxXgUD8pi0fLPeWmAkntjn28Z_WZvvA265ELbBhphPXEJcFhdzUfgESHVuqFMEqp1pB-CP0"
    }
  ]
}
5.604998 ------------ AuthorizationRequest ------------
5.605428 --> URL: https://auth.svcs.verizon.com:22790/vzconnect/authorize?max_age=1&state=KnAF8UJNswDvGpKY&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60784%2Fauthz_cb&response_type=code&client_id=c2c0f88d-ec48-4a21-b2fe-0f265b317157&scope=openid
5.605436 --> BODY: None
30.786565 <-- code=AC5Wo5&state=KnAF8UJNswDvGpKY
30.786987 AuthorizationResponse: {
  "code": "AC5Wo5",
  "state": "KnAF8UJNswDvGpKY"
}
30.787352 ------------ AccessTokenRequest ------------
30.787757 --> URL: https://auth.svcs.verizon.com:22790/vzconnect/token
30.787763 --> BODY: code=AC5Wo5&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60784%2Fauthz_cb
30.787777 --> HEADERS: {'Content-Type': 'application/x-www-form-urlencoded', 'Authorization': u'Basic YzJjMGY4OGQtZWM0OC00YTIxLWIyZmUtMGYyNjViMzE3MTU3OmFoamVpQ2tfMFhlaExYUlVUR3BaYlp0dFNxQlcyaWVVVTRNaVVDZy1TbUNYZm1IRU50em9Xc1B0al9CVUxTOWRtSHB5TmU3TkJCV3ZCcmw4bTF3cmln'}
30.930197 <-- STATUS: 200
30.930266 <-- BODY: {"access_token":"eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE0ODIzMDk3NzksImF1ZCI6WyJjMmMwZjg4ZC1lYzQ4LTRhMjEtYjJmZS0wZjI2NWIzMTcxNTciXSwiaXNzIjoiaHR0cHM6XC9cL2F1dGguc3Zjcy52ZXJpem9uLmNvbToyMjc5MFwvdnpjb25uZWN0XC8iLCJqdGkiOiJmZWU5NDNjZi0zYjU2LTQyYjEtYmY4OC0wMGJlNzk3NTk0OTUiLCJpYXQiOjE0ODIzMDYxNzl9.QO9VLv1uVzA_xOU4JSe25Is4X3rhqwNZxePSGzIZlPqDLgols-NHgSS2RjmE0rWa27aKs9PUggHxlzf3K4Cib9B48elWsyAxtaKtKgXvuBXqtZGj7IGDYi8xGw6ANuHlQRC52yc0J3cjmr8uNt1H-OkeYrvlbRPGfWek1AUokgM","token_type":"Bearer","expires_in":3599,"scope":"openid","id_token":"eyJhbGciOiJSUzI1NiIsImtpZCI6InJzYTEifQ.eyJhdXRoX3RpbWUiOjE0ODIzMDYxNzYsImV4cCI6MTQ4MjMwNjc3OSwic3ViIjoiOWM5M2E4MGItYTg2NS00MGJkLTk0YTgtOGE2ODEwMGE3NjkyIiwiYXVkIjpbImMyYzBmODhkLWVjNDgtNGEyMS1iMmZlLTBmMjY1YjMxNzE1NyJdLCJpc3MiOiJodHRwczpcL1wvYXV0aC5zdmNzLnZlcml6b24uY29tOjIyNzkwXC92emNvbm5lY3RcLyIsImlhdCI6MTQ4MjMwNjE3OSwia2lkIjoicnNhMSJ9.AQIkM13nzOMJvElal7xBXbOm8QDjZDU6P6NwWOu97Bemn64f-qbkNHw9LlxA5b9c0yD_20CzNhTKVFmSpjuuQ3nMsXtr9pqxxYQmSDde5oA1rpVGmkWXXD0khwB2VKqGpoeQdvhTXsBWFOFyRsZ2FW1S4o-W5Y93Yd6JUaDOezM"}
30.975684 AccessTokenResponse: {
  "access_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE0ODIzMDk3NzksImF1ZCI6WyJjMmMwZjg4ZC1lYzQ4LTRhMjEtYjJmZS0wZjI2NWIzMTcxNTciXSwiaXNzIjoiaHR0cHM6XC9cL2F1dGguc3Zjcy52ZXJpem9uLmNvbToyMjc5MFwvdnpjb25uZWN0XC8iLCJqdGkiOiJmZWU5NDNjZi0zYjU2LTQyYjEtYmY4OC0wMGJlNzk3NTk0OTUiLCJpYXQiOjE0ODIzMDYxNzl9.QO9VLv1uVzA_xOU4JSe25Is4X3rhqwNZxePSGzIZlPqDLgols-NHgSS2RjmE0rWa27aKs9PUggHxlzf3K4Cib9B48elWsyAxtaKtKgXvuBXqtZGj7IGDYi8xGw6ANuHlQRC52yc0J3cjmr8uNt1H-OkeYrvlbRPGfWek1AUokgM",
  "expires_in": 3599,
  "id_token": {
    "claims": {
      "aud": [
        "c2c0f88d-ec48-4a21-b2fe-0f265b317157"
      ],
      "auth_time": 1482306176,
      "exp": 1482306779,
      "iat": 1482306179,
      "iss": "https://auth.svcs.verizon.com:22790/vzconnect/",
      "kid": "rsa1",
      "sub": "9c93a80b-a865-40bd-94a8-8a68100a7692"
    },
    "jws header parameters": {
      "alg": "RS256",
      "kid": "rsa1"
    }
  },
  "scope": "openid",
  "token_type": "Bearer"
}
30.988069 ==== END ====

Result

PASSED