0.0 | phase | <--<-- 0 --- Webfinger -->--> |
0.0 | not expected to do | WebFinger |
0.0 | phase | <--<-- 1 --- Discovery -->--> |
0.0 | not expected to do | Dynamic discovery |
0.0 | phase | <--<-- 2 --- Registration -->--> |
0.001 | register | kwargs:{'response_types': ['id_token token'], 'grant_types': ['implicit'], 'application_name': 'OIC test tool', 'application_type': 'web', 'redirect_uris': ['https://op.certification.openid.net:61401/authz_cb'], 'contacts': ['roland@example.com'], 'post_logout_redirect_uris': ['https://op.certification.openid.net:61401/logout'], 'url': 'https://oidc-conformance.ping-eng.com:9031/as/clients.oauth2', 'jwks_uri': 'https://op.certification.openid.net:61401/static/jwks_61401.json'}
|
0.001 | RegistrationRequest | {
"application_type": "web",
"contacts": [
"roland@example.com"
],
"grant_types": [
"implicit"
],
"jwks_uri": "https://op.certification.openid.net:61401/static/jwks_61401.json",
"post_logout_redirect_uris": [
"https://op.certification.openid.net:61401/logout"
],
"redirect_uris": [
"https://op.certification.openid.net:61401/authz_cb"
],
"request_uris": [
"https://op.certification.openid.net:61401/requests/876669ef2b3891075309a06e00b98e6ace4cfca108af01becb9a804fff95d8c4#sfLLtw7Nz6ZqtGCs"
],
"response_types": [
"id_token token"
]
}
|
0.352 | http response | url:https://oidc-conformance.ping-eng.com:9031/as/clients.oauth2 status_code:201
|
0.353 | RegistrationResponse | {
"client_id": "dc-37Z5drdEwHe1DTpqlUr7Mw",
"client_name": "dc-37Z5drdEwHe1DTpqlUr7Mw",
"client_secret": "BufJGqJJaDO5qKU0OfOAXy",
"client_secret_expires_at": 0,
"grant_access_session_revocation_api": false,
"grant_types": [
"implicit"
],
"jwks_uri": "https://op.certification.openid.net:61401/static/jwks_61401.json",
"persistent_grant_expiration_type": "server_default",
"pingaccess_logout_capable": false,
"redirect_uris": [
"https://op.certification.openid.net:61401/authz_cb"
],
"refresh_token_rolling_policy": "server_default",
"response_types": [
"id_token token"
],
"scope": "address phone edit openid profile admin email",
"token_endpoint_auth_method": "client_secret_basic",
"validate_using_all_eligible_atms": false
}
|
0.353 | phase | <--<-- 3 --- AsyncAuthn -->--> |
0.353 | AuthorizationRequest | {
"client_id": "dc-37Z5drdEwHe1DTpqlUr7Mw",
"nonce": "6YdotomghYs5R2sA",
"redirect_uri": "https://op.certification.openid.net:61401/authz_cb",
"response_type": "id_token token",
"scope": "openid",
"state": "dNPRxuOmxHxoksme"
}
|
0.353 | redirect url | https://oidc-conformance.ping-eng.com:9031/as/authorization.oauth2?state=dNPRxuOmxHxoksme&nonce=6YdotomghYs5R2sA&response_type=id_token+token&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61401%2Fauthz_cb&client_id=dc-37Z5drdEwHe1DTpqlUr7Mw |
0.353 | redirect | https://oidc-conformance.ping-eng.com:9031/as/authorization.oauth2?state=dNPRxuOmxHxoksme&nonce=6YdotomghYs5R2sA&response_type=id_token+token&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61401%2Fauthz_cb&client_id=dc-37Z5drdEwHe1DTpqlUr7Mw |
2.069 | http args | {} |
2.39 | response | URL with fragment |
2.39 | response | access_token=eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIn0.eyJzY29wZSI6WyJvcGVuaWQiXSwiY2xpZW50X2lkX25hbWUiOiJkYy0zN1o1ZHJkRXdIZTFEVHBxbFVyN013IiwiYWdpZCI6Ijd3WXFudW1SUkk3YzFobDhvaUlJNTM4TmJ0WnFiUUdLIiwiVXNlcm5hbWUiOiJqb2UiLCJPcmdOYW1lIjoiUGluZyBJZGVudGl0eSBDb3Jwb3JhdGlvbiIsImV4cCI6MTUzNzQ5MjE4Mn0.kvfG3fjQBQnZ8vzh7YDZTCU1FEZfthMoPaLe4NjpMJJid8ZjFVPVWCasca2XR2jS6fOZv1QPfL-D3ujD4MVpxpjxLBURYdSqSvmVHn_sQydnMDYpH3fWnsXnVQSrJEuw_9n4zX6lMtf6ME3RSDc9x4b_QdzQgyJwsLOOtESo4VRN7rqJGA4hKSF-pNUtSiKxZO2Ul0aT-6yRvseOhvf2Smtb8l-4KY88YSZOOjfoqTNBySg1lve4O9L2e8kC3nWR2-VKyP2cu5wTVWH870HPuCkFwG-hmyy8TPO6VDyef4wX_GqtpbvTOQf_33YHo8l6ZTT_ZUl4LvIZIlDMBYQIDw&id_token=eyJhbGciOiJSUzI1NiIsImtpZCI6IlJvMmxnRXNPdFdJMlJiRUxLRV85amZvSVRxWSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJkYy0zN1o1ZHJkRXdIZTFEVHBxbFVyN013IiwianRpIjoiTXVid0NrTjA3T1ZXME9NZk5UbWFsWiIsImlzcyI6Imh0dHBzOi8vb2lkYy1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTUzNzQ4NDk4MiwiZXhwIjoxNTM3NDg1MjgyLCJwaS5zcmkiOiJVcG1wMFNqdXE2ME9mWXVXNUpSSlU5c1pYRUEiLCJub25jZSI6IjZZZG90b21naFlzNVIyc0EiLCJhdXRoX3RpbWUiOjE1Mzc0ODQ5NjcsImF0X2hhc2giOiJjNEthUThEcHJtUjE3MWtxMGczME5RIiwic19oYXNoIjoibEJaM0lCQ2EwTWJpemZEMHpiVHVtdyJ9.k497dNJHMKtpfaxwNVvq5Y7Funml657HqDaobdh0Dw-0Zv6n1d32IVrzv3-KR7PH2k4MrRsqnngkXMVV2NHCRae0RHcX-Uv_Uk7kLodPcCiXrkGCp7C4tSwz5Iae30GPwigBDypXaBlwm8zQc9FVw64Dzpqoc-gG-Kj1PFjBnTe9l52zNCKcewDRbmrc4BAQjvN1EmMYwk7NcfDhxU3Og_68fLZk2vazkwEXOPs7jn0-q-DUIXY-4vGUhqE2A3RfJWBLKWVsuyiWAd-bZon52xYOQIH8SiSaYK32cEcunJP2hKytzWSD03-3t3YkendNvdnEqBG75K7IdEJpCPL7xA&state=dNPRxuOmxHxoksme&token_type=Bearer&expires_in=7199 |
2.39 | response | {'access_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIn0.eyJzY29wZSI6WyJvcGVuaWQiXSwiY2xpZW50X2lkX25hbWUiOiJkYy0zN1o1ZHJkRXdIZTFEVHBxbFVyN013IiwiYWdpZCI6Ijd3WXFudW1SUkk3YzFobDhvaUlJNTM4TmJ0WnFiUUdLIiwiVXNlcm5hbWUiOiJqb2UiLCJPcmdOYW1lIjoiUGluZyBJZGVudGl0eSBDb3Jwb3JhdGlvbiIsImV4cCI6MTUzNzQ5MjE4Mn0.kvfG3fjQBQnZ8vzh7YDZTCU1FEZfthMoPaLe4NjpMJJid8ZjFVPVWCasca2XR2jS6fOZv1QPfL-D3ujD4MVpxpjxLBURYdSqSvmVHn_sQydnMDYpH3fWnsXnVQSrJEuw_9n4zX6lMtf6ME3RSDc9x4b_QdzQgyJwsLOOtESo4VRN7rqJGA4hKSF-pNUtSiKxZO2Ul0aT-6yRvseOhvf2Smtb8l-4KY88YSZOOjfoqTNBySg1lve4O9L2e8kC3nWR2-VKyP2cu5wTVWH870HPuCkFwG-hmyy8TPO6VDyef4wX_GqtpbvTOQf_33YHo8l6ZTT_ZUl4LvIZIlDMBYQIDw', 'id_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6IlJvMmxnRXNPdFdJMlJiRUxLRV85amZvSVRxWSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJkYy0zN1o1ZHJkRXdIZTFEVHBxbFVyN013IiwianRpIjoiTXVid0NrTjA3T1ZXME9NZk5UbWFsWiIsImlzcyI6Imh0dHBzOi8vb2lkYy1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTUzNzQ4NDk4MiwiZXhwIjoxNTM3NDg1MjgyLCJwaS5zcmkiOiJVcG1wMFNqdXE2ME9mWXVXNUpSSlU5c1pYRUEiLCJub25jZSI6IjZZZG90b21naFlzNVIyc0EiLCJhdXRoX3RpbWUiOjE1Mzc0ODQ5NjcsImF0X2hhc2giOiJjNEthUThEcHJtUjE3MWtxMGczME5RIiwic19oYXNoIjoibEJaM0lCQ2EwTWJpemZEMHpiVHVtdyJ9.k497dNJHMKtpfaxwNVvq5Y7Funml657HqDaobdh0Dw-0Zv6n1d32IVrzv3-KR7PH2k4MrRsqnngkXMVV2NHCRae0RHcX-Uv_Uk7kLodPcCiXrkGCp7C4tSwz5Iae30GPwigBDypXaBlwm8zQc9FVw64Dzpqoc-gG-Kj1PFjBnTe9l52zNCKcewDRbmrc4BAQjvN1EmMYwk7NcfDhxU3Og_68fLZk2vazkwEXOPs7jn0-q-DUIXY-4vGUhqE2A3RfJWBLKWVsuyiWAd-bZon52xYOQIH8SiSaYK32cEcunJP2hKytzWSD03-3t3YkendNvdnEqBG75K7IdEJpCPL7xA', 'state': 'dNPRxuOmxHxoksme', 'token_type': 'Bearer', 'expires_in': 7199} |
2.693 | AuthorizationResponse | {
"access_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIn0.eyJzY29wZSI6WyJvcGVuaWQiXSwiY2xpZW50X2lkX25hbWUiOiJkYy0zN1o1ZHJkRXdIZTFEVHBxbFVyN013IiwiYWdpZCI6Ijd3WXFudW1SUkk3YzFobDhvaUlJNTM4TmJ0WnFiUUdLIiwiVXNlcm5hbWUiOiJqb2UiLCJPcmdOYW1lIjoiUGluZyBJZGVudGl0eSBDb3Jwb3JhdGlvbiIsImV4cCI6MTUzNzQ5MjE4Mn0.kvfG3fjQBQnZ8vzh7YDZTCU1FEZfthMoPaLe4NjpMJJid8ZjFVPVWCasca2XR2jS6fOZv1QPfL-D3ujD4MVpxpjxLBURYdSqSvmVHn_sQydnMDYpH3fWnsXnVQSrJEuw_9n4zX6lMtf6ME3RSDc9x4b_QdzQgyJwsLOOtESo4VRN7rqJGA4hKSF-pNUtSiKxZO2Ul0aT-6yRvseOhvf2Smtb8l-4KY88YSZOOjfoqTNBySg1lve4O9L2e8kC3nWR2-VKyP2cu5wTVWH870HPuCkFwG-hmyy8TPO6VDyef4wX_GqtpbvTOQf_33YHo8l6ZTT_ZUl4LvIZIlDMBYQIDw",
"expires_in": 7199,
"id_token": {
"at_hash": "c4KaQ8DprmR171kq0g30NQ",
"aud": [
"dc-37Z5drdEwHe1DTpqlUr7Mw"
],
"auth_time": 1537484967,
"exp": 1537485282,
"iat": 1537484982,
"iss": "https://oidc-conformance.ping-eng.com:9031",
"jti": "MubwCkN07OVW0OMfNTmalZ",
"nonce": "6YdotomghYs5R2sA",
"pi.sri": "Upmp0Sjuq60OfYuW5JRJU9sZXEA",
"s_hash": "lBZ3IBCa0MbizfD0zbTumw",
"sub": "joe"
},
"state": "dNPRxuOmxHxoksme",
"token_type": "Bearer"
}
|
2.693 | phase | <--<-- 4 --- AccessToken -->--> |
2.693 | phase | <--<-- 5 --- AsyncAuthn -->--> |
2.694 | AuthorizationRequest | {
"client_id": "dc-37Z5drdEwHe1DTpqlUr7Mw",
"max_age": 10000,
"nonce": "LisvoFjpgcAlOZdi",
"redirect_uri": "https://op.certification.openid.net:61401/authz_cb",
"response_type": "id_token token",
"scope": "openid",
"state": "TWp71YhnedVIwQOq"
}
|
2.697 | redirect url | https://oidc-conformance.ping-eng.com:9031/as/authorization.oauth2?state=TWp71YhnedVIwQOq&nonce=LisvoFjpgcAlOZdi&response_type=id_token+token&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61401%2Fauthz_cb&max_age=10000&client_id=dc-37Z5drdEwHe1DTpqlUr7Mw |
2.697 | redirect | https://oidc-conformance.ping-eng.com:9031/as/authorization.oauth2?state=TWp71YhnedVIwQOq&nonce=LisvoFjpgcAlOZdi&response_type=id_token+token&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61401%2Fauthz_cb&max_age=10000&client_id=dc-37Z5drdEwHe1DTpqlUr7Mw |
3.242 | http args | {} |
3.412 | response | URL with fragment |
3.413 | response | access_token=eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIn0.eyJzY29wZSI6WyJvcGVuaWQiXSwiY2xpZW50X2lkX25hbWUiOiJkYy0zN1o1ZHJkRXdIZTFEVHBxbFVyN013IiwiYWdpZCI6Ijd3WXFudW1SUkk3YzFobDhvaUlJNTM4TmJ0WnFiUUdLIiwiVXNlcm5hbWUiOiJqb2UiLCJPcmdOYW1lIjoiUGluZyBJZGVudGl0eSBDb3Jwb3JhdGlvbiIsImV4cCI6MTUzNzQ5MjE4M30.t7f-UeNQuIoF6YVXJbCj9NrTNOv0oaRXqhRCopYyQLc-VouHvyR8VX79DHZ57pR_Tim5kf7ZO5Z5-ZNIOqp18ei91oOMzIHmPtYbUyuL-9aDchVWapKi_50L_ImOaulatSGP77RLPAfnpT1r-iSvGIV9GDwgYwqFDntAfE7rLBpPMvtv15cvpoB7s87DlwrzPJDWzmPEVQcJsYQFmUKTj0EsAGUx6Utu2v3b-FV9HnP2rknwYGeU4PPhsHfnFl9xf6pCA2r4K55dySMJFneHzSL1OaVkuEVaIRtSutAsmQb1TdGjUecyqJAJyHdG8IxMY9pSB1x75me-JYOOqxXMvw&scope=openid&id_token=eyJhbGciOiJSUzI1NiIsImtpZCI6IlJvMmxnRXNPdFdJMlJiRUxLRV85amZvSVRxWSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJkYy0zN1o1ZHJkRXdIZTFEVHBxbFVyN013IiwianRpIjoiRGVSbzJPQ3VFQTR3cjBtOXFueDRSdSIsImlzcyI6Imh0dHBzOi8vb2lkYy1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTUzNzQ4NDk4MywiZXhwIjoxNTM3NDg1MjgzLCJwaS5zcmkiOiJVcG1wMFNqdXE2ME9mWXVXNUpSSlU5c1pYRUEiLCJub25jZSI6Ikxpc3ZvRmpwZ2NBbE9aZGkiLCJhdXRoX3RpbWUiOjE1Mzc0ODQ5NjcsImF0X2hhc2giOiJvdHJ4OWx6b0I0LXBRRTNNYUYwaFR3Iiwic19oYXNoIjoiekVJdW5sbktidE45OVdVWWVhMENkUSJ9.UDc4Th9_rn2ZkvpgG_0jyh3hKM2-ftm-aTaFLwF7xXOE69T_1QF15l0n_hx2eaYCjc5MlcpSL3p-js9r4DSG-zSzo8fUu-MI1xLV-3ba-VVQHEtzPnxyi3dmWC7DT18Ii52JJdKM0GJMmiPisZJM-McvMJCZX4s4gw5ubX6KxzXS4b2xhSy5kOGimrgaz_yYibFNugUoWKm9DeMYDfv5V_s6bLjvlYPYZe8p4Dk-my7D4rOVgPL251ZPVCYYe16RT9zoAt-a_FpJvgii7l9kB_HtK7ZFfCSFTkaCbWh25n7yNi2P3GyIWsMiKtWmRJb4Da4EfrAqhXPowDFpUnZXUg&state=TWp71YhnedVIwQOq&token_type=Bearer&expires_in=7199 |
3.413 | response | {'access_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIn0.eyJzY29wZSI6WyJvcGVuaWQiXSwiY2xpZW50X2lkX25hbWUiOiJkYy0zN1o1ZHJkRXdIZTFEVHBxbFVyN013IiwiYWdpZCI6Ijd3WXFudW1SUkk3YzFobDhvaUlJNTM4TmJ0WnFiUUdLIiwiVXNlcm5hbWUiOiJqb2UiLCJPcmdOYW1lIjoiUGluZyBJZGVudGl0eSBDb3Jwb3JhdGlvbiIsImV4cCI6MTUzNzQ5MjE4M30.t7f-UeNQuIoF6YVXJbCj9NrTNOv0oaRXqhRCopYyQLc-VouHvyR8VX79DHZ57pR_Tim5kf7ZO5Z5-ZNIOqp18ei91oOMzIHmPtYbUyuL-9aDchVWapKi_50L_ImOaulatSGP77RLPAfnpT1r-iSvGIV9GDwgYwqFDntAfE7rLBpPMvtv15cvpoB7s87DlwrzPJDWzmPEVQcJsYQFmUKTj0EsAGUx6Utu2v3b-FV9HnP2rknwYGeU4PPhsHfnFl9xf6pCA2r4K55dySMJFneHzSL1OaVkuEVaIRtSutAsmQb1TdGjUecyqJAJyHdG8IxMY9pSB1x75me-JYOOqxXMvw', 'scope': 'openid', 'id_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6IlJvMmxnRXNPdFdJMlJiRUxLRV85amZvSVRxWSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJkYy0zN1o1ZHJkRXdIZTFEVHBxbFVyN013IiwianRpIjoiRGVSbzJPQ3VFQTR3cjBtOXFueDRSdSIsImlzcyI6Imh0dHBzOi8vb2lkYy1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTUzNzQ4NDk4MywiZXhwIjoxNTM3NDg1MjgzLCJwaS5zcmkiOiJVcG1wMFNqdXE2ME9mWXVXNUpSSlU5c1pYRUEiLCJub25jZSI6Ikxpc3ZvRmpwZ2NBbE9aZGkiLCJhdXRoX3RpbWUiOjE1Mzc0ODQ5NjcsImF0X2hhc2giOiJvdHJ4OWx6b0I0LXBRRTNNYUYwaFR3Iiwic19oYXNoIjoiekVJdW5sbktidE45OVdVWWVhMENkUSJ9.UDc4Th9_rn2ZkvpgG_0jyh3hKM2-ftm-aTaFLwF7xXOE69T_1QF15l0n_hx2eaYCjc5MlcpSL3p-js9r4DSG-zSzo8fUu-MI1xLV-3ba-VVQHEtzPnxyi3dmWC7DT18Ii52JJdKM0GJMmiPisZJM-McvMJCZX4s4gw5ubX6KxzXS4b2xhSy5kOGimrgaz_yYibFNugUoWKm9DeMYDfv5V_s6bLjvlYPYZe8p4Dk-my7D4rOVgPL251ZPVCYYe16RT9zoAt-a_FpJvgii7l9kB_HtK7ZFfCSFTkaCbWh25n7yNi2P3GyIWsMiKtWmRJb4Da4EfrAqhXPowDFpUnZXUg', 'state': 'TWp71YhnedVIwQOq', 'token_type': 'Bearer', 'expires_in': 7199} |
3.416 | AuthorizationResponse | {
"access_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIn0.eyJzY29wZSI6WyJvcGVuaWQiXSwiY2xpZW50X2lkX25hbWUiOiJkYy0zN1o1ZHJkRXdIZTFEVHBxbFVyN013IiwiYWdpZCI6Ijd3WXFudW1SUkk3YzFobDhvaUlJNTM4TmJ0WnFiUUdLIiwiVXNlcm5hbWUiOiJqb2UiLCJPcmdOYW1lIjoiUGluZyBJZGVudGl0eSBDb3Jwb3JhdGlvbiIsImV4cCI6MTUzNzQ5MjE4M30.t7f-UeNQuIoF6YVXJbCj9NrTNOv0oaRXqhRCopYyQLc-VouHvyR8VX79DHZ57pR_Tim5kf7ZO5Z5-ZNIOqp18ei91oOMzIHmPtYbUyuL-9aDchVWapKi_50L_ImOaulatSGP77RLPAfnpT1r-iSvGIV9GDwgYwqFDntAfE7rLBpPMvtv15cvpoB7s87DlwrzPJDWzmPEVQcJsYQFmUKTj0EsAGUx6Utu2v3b-FV9HnP2rknwYGeU4PPhsHfnFl9xf6pCA2r4K55dySMJFneHzSL1OaVkuEVaIRtSutAsmQb1TdGjUecyqJAJyHdG8IxMY9pSB1x75me-JYOOqxXMvw",
"expires_in": 7199,
"id_token": {
"at_hash": "otrx9lzoB4-pQE3MaF0hTw",
"aud": [
"dc-37Z5drdEwHe1DTpqlUr7Mw"
],
"auth_time": 1537484967,
"exp": 1537485283,
"iat": 1537484983,
"iss": "https://oidc-conformance.ping-eng.com:9031",
"jti": "DeRo2OCuEA4wr0m9qnx4Ru",
"nonce": "LisvoFjpgcAlOZdi",
"pi.sri": "Upmp0Sjuq60OfYuW5JRJU9sZXEA",
"s_hash": "zEIunlnKbtN99WUYea0CdQ",
"sub": "joe"
},
"scope": "openid",
"state": "TWp71YhnedVIwQOq",
"token_type": "Bearer"
}
|
3.416 | phase | <--<-- 6 --- AccessToken -->--> |
3.416 | phase | <--<-- 7 --- Done -->--> |
3.416 | end | |
3.416 | assertion | ClaimsCheck |
3.416 | condition | claims-check: status=OK [Checks if specific claims is present or not] |
3.417 | assertion | SameAuthn |
3.417 | condition | same-authn: status=OK [Verifies that the same authentication was used twice in the flow.] |
3.417 | assertion | AuthTimeCheck |
3.417 | condition | auth_time-check: status=OK [Check that the auth_time returned in the ID Token is in the expected range.] |
3.418 | assertion | VerifyResponse |
3.418 | condition | verify-response: status=OK [Checks that the last response was one of a possible set of OpenID Connect Responses] |
3.418 | condition | Done: status=OK |