Test Info

Issuerhttps://isamfed.com:30443/test
Profile[]
Test IDOP-UserInfo-RS256
Test descriptionRP registers userinfo_signed_response_alg to signal that it wants signed UserInfo returned
Timestamp2019-06-17T15:18:38Z

Conditions


asym-signed-userinfo: status=OK [Verifies that the UserInfo was signed with a RSA key]
verify-response: status=OK [Checks that the last response was one of a possible set of OpenID Connect Responses]
Done: status=OK

Trace Output

0phase<--<-- 0 --- Webfinger -->-->
0not expected to doWebFinger
0phase<--<-- 1 --- Discovery -->-->
0provider_config
kwargs:{'issuer': 'https://isamfed.com:30443/test'}
0http response
url:https://isamfed.com:30443/test/.well-known/openid-configuration status_code:200
0ProviderConfigurationResponse
{
    "authorization_endpoint": "https://isamfed.com:30443/mga/sps/oauth/oauth20/authorize",
    "claims_parameter_supported": false,
    "claims_supported": [
        "realmName",
        "preferred_username",
        "given_name",
        "uid",
        "upn",
        "groupIds",
        "employee_id",
        "name",
        "tenantId",
        "mobile_number",
        "department",
        "job_title",
        "family_name",
        "email"
    ],
    "device_authorize_endpoint": "https://isamfed.com:30443/mga/sps/oauth/oauth20/device_authorize",
    "grant_types_supported": [
        "urn:ietf:params:oauth:grant-type:jwt-bearer",
        "implicit",
        "urn:ietf:params:oauth:grant-type:saml2-bearer",
        "urn:ietf:params:oauth:grant-type:device_code",
        "client_credentials",
        "password",
        "authorization_code",
        "refresh_token"
    ],
    "id_token_encryption_alg_values_supported": [
        "RSA-OAEP-256"
    ],
    "id_token_encryption_enc_values_supported": [
        "A128CBC-HS256"
    ],
    "id_token_signing_alg_values_supported": [
        "RS256"
    ],
    "introspect_endpoint": "https://isamfed.com:30443/mga/sps/oauth/oauth20/introspect",
    "issuer": "https://isamfed.com:30443/test",
    "jwks_uri": "https://isamfed.com:30443/mga/sps/jwks",
    "name": "OIDCDefinition",
    "poc": "https://isamfed.com:30443/mga/",
    "registration_endpoint": "https://isamfed.com:30443/mga/sps/oauth/oauth20/register/OIDCDefinition",
    "request_parameter_supported": true,
    "request_uri_parameter_supported": true,
    "require_request_uri_registration": false,
    "response_modes_supported": [
        "fragment",
        "form_post"
    ],
    "response_types_supported": [
        "token",
        "id_token",
        "token id_token",
        "code",
        "code id_token",
        "code token id_token",
        "code token",
        "none"
    ],
    "revocation_endpoint": "https://isamfed.com:30443/mga/sps/oauth/oauth20/revoke",
    "subject_types_supported": [
        "public"
    ],
    "token_endpoint": "https://isamfed.com:30443/mga/sps/oauth/oauth20/token",
    "token_endpoint_auth_methods_supported": [
        "private_key_jwt",
        "client_secret_post",
        "client_secret_basic"
    ],
    "user_authorize_endpoint": "https://isamfed.com:30443/mga/sps/oauth/oauth20/user_authorize",
    "userinfo_endpoint": "https://isamfed.com:30443/mga/sps/oauth/oauth20/userinfo",
    "userinfo_signing_alg_values_supported": [
        "RS256"
    ],
    "version": "3.0"
}
0phase<--<-- 2 --- Registration -->-->
0register
kwargs:{'response_types': ['code id_token'], 'grant_types': ['authorization_code', 'implicit'], 'application_name': 'OIC test tool', 'application_type': 'web', 'redirect_uris': ['https://op.certification.openid.net:61716/authz_cb'], 'contacts': ['roland@example.com'], 'post_logout_redirect_uris': ['https://op.certification.openid.net:61716/logout'], 'url': 'https://isamfed.com:30443/mga/sps/oauth/oauth20/register/OIDCDefinition', 'jwks_uri': 'https://op.certification.openid.net:61716/static/jwks_61716.json', 'token_endpoint_auth_method': 'private_key_jwt', 'userinfo_signed_response_alg': 'RS256'}
0RegistrationRequest
{
    "application_type": "web",
    "contacts": [
        "roland@example.com"
    ],
    "grant_types": [
        "implicit",
        "authorization_code"
    ],
    "jwks_uri": "https://op.certification.openid.net:61716/static/jwks_61716.json",
    "post_logout_redirect_uris": [
        "https://op.certification.openid.net:61716/logout"
    ],
    "redirect_uris": [
        "https://op.certification.openid.net:61716/authz_cb"
    ],
    "response_types": [
        "code id_token"
    ],
    "token_endpoint_auth_method": "private_key_jwt",
    "userinfo_signed_response_alg": "RS256"
}
0http response
url:https://isamfed.com:30443/mga/sps/oauth/oauth20/register/OIDCDefinition status_code:200
0RegistrationResponse
{
    "application_type": "web",
    "client_id": "bBY7aVpwKdNtNRlVfKgJ",
    "client_id_issued_at": 1560784715,
    "client_secret": "6Iz61X16d9KoBnmbzxMM",
    "client_secret_expires_at": 0,
    "contacts": [
        "roland@example.com"
    ],
    "grant_types": [
        "implicit",
        "authorization_code"
    ],
    "jwks_uri": "https://op.certification.openid.net:61716/static/jwks_61716.json",
    "post_logout_redirect_uris": [
        "https://op.certification.openid.net:61716/logout"
    ],
    "redirect_uris": [
        "https://op.certification.openid.net:61716/authz_cb"
    ],
    "registration_access_token": "CXd2ly9WodZ6dSuZl495",
    "registration_client_uri": "https://isamfed.com:30443/mga/sps/oauth/oauth20/register/OIDCDefinition?client_id=bBY7aVpwKdNtNRlVfKgJ",
    "response_types": [
        "code",
        "id_token"
    ],
    "token_endpoint_auth_method": "private_key_jwt",
    "userinfo_signed_response_alg": "RS256"
}
0phase<--<-- 3 --- AsyncAuthn -->-->
0AuthorizationRequest
{
    "client_id": "bBY7aVpwKdNtNRlVfKgJ",
    "nonce": "95G15VUM2E2TgARQ",
    "redirect_uri": "https://op.certification.openid.net:61716/authz_cb",
    "response_type": "code id_token",
    "scope": "openid",
    "state": "axSUWUS1XhMom11P"
}
0redirect urlhttps://isamfed.com:30443/mga/sps/oauth/oauth20/authorize?state=axSUWUS1XhMom11P&nonce=95G15VUM2E2TgARQ&response_type=code+id_token&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61716%2Fauthz_cb&client_id=bBY7aVpwKdNtNRlVfKgJ
0redirecthttps://isamfed.com:30443/mga/sps/oauth/oauth20/authorize?state=axSUWUS1XhMom11P&nonce=95G15VUM2E2TgARQ&response_type=code+id_token&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61716%2Fauthz_cb&client_id=bBY7aVpwKdNtNRlVfKgJ
1http args{}
1responseURL with fragment
1responseid_token=eyJhbGciOiJSU0EtT0FFUC0yNTYiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2Iiwia2lkIjoiZ3RINHYzWXIyUXFMcmVCU3owQnlRUTh2a2Y4ZUZvMUtJaXQzcy0zQmJ3dyIsImN0eSI6IkpXVCJ9.Syp8t3rmXzN7PdFgKHh0r34vP9_IvD2_DCaUDv1yA1O75vNNbyfB7C-EvX-HHis2Q8wslTp6pinGw16AEoE2jFcgqDWAPgqem3I6LZxDheaFVYKNvMklM0gfSDCzUbxdSprq0Ig9joJD3vSvs2Ty4RjABP_mc-XUS79BNeuodyBFhcST8_ozS8DJEIjSCiNM5Xx_LALDfjqZZDXl8ceJqk8WGnRku4ZGNtUqnJlV7PiON2o5hOIoWJaL99z9XsQm3pubFAyKiT9LnQi8FBuA3F7bgpf0Hc38u3VEY2XCb1gvMAZtIbJ0zsJEDlGY1By8-XRxwbVWi6YcUceBGNhISg.fZ3h_PaRAR_b29ajxl4K7A.pF57YOJ2kGX-T_jZLejvYlnhrsJn35W9PP4fJvrE7POLRQ1RBjTr4pNDycz-l_C52nPFdVLcjNr0aK6XsZ1J-WeH0mDFGGN7ymVIGVZsioAev24uJ7bJpb0DPyaQWQ2e6F-dGzGHq9WBHJAoEy1Dk1BU-JMKZAnhafqlvQoUS5Wb1v_sC8adCe9ykqBmMr21nG2aat-JUou3PKYhKI2uaRcCs_jGJBW5kQzdJPWW5hpbpCZ4XFJvH7RS5ns0DFEQnL8zKG90Jpcmwg4kS34IM1cky7so38Z4GmQAevnzCYQFJG0beto9T4hewDV3FMzH4VypPi0p-nZT05KDBtmbMwala1fbzjHU1XhiOFtEDJIXq0lL32tT23ztMvDUHGcAjU-ANttPy5vFih21ESJavFITGTZqsoUv02LVexNFBf8AyIBWGS1KQLNQla0UwAKofBbIJKABXQdQ2_WcbgK8ecaUEdwryvxD0g_bc05tuoU9iKkHlqpxJUtcGJYnE3HVqfP3_lr32rX2XG3GS2fGE8kabz6PX94rXHBS5dL2VDGsXfw44pceNzZsL_S4XtNYv1VbHYiBTQJ9kLbOE7TBRyedTZQw2AEpAeHCyVeENRVorSNG3r3slRf41eLi1JKBqcl_A0GzCfR23NbrbXkK0XanY3fwZxPPm3RzE5ilBl1gf-N2WV59VaukxYtFHqvqkaLW8UQ4ewYpVUI_i6qXsp43nDnQFPf3CKVrRFD1VBIcNkJo7rnjKy2j-rsgHVFYB_mRWg9x-3awVJGcx-Kf0U5UR1nGNVdfvOaPyBRPbezNlwTHs_p3QDaUSjyAmmi-6VprwkT_1m995Ya3oOhsh38yDXjf3sMaMdGjjQyDVcaBFV0XUK8bQjaLiTJ-8w5sqK1AIkfzlhM_SD1zKvx4lg.I_LhPMQC9_MlCi3VRbMHEA&state=axSUWUS1XhMom11P&code=CS4q6peaKSpDpXBz8SMoLrNUwBiopu
1response{'id_token': 'eyJhbGciOiJSU0EtT0FFUC0yNTYiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2Iiwia2lkIjoiZ3RINHYzWXIyUXFMcmVCU3owQnlRUTh2a2Y4ZUZvMUtJaXQzcy0zQmJ3dyIsImN0eSI6IkpXVCJ9.Syp8t3rmXzN7PdFgKHh0r34vP9_IvD2_DCaUDv1yA1O75vNNbyfB7C-EvX-HHis2Q8wslTp6pinGw16AEoE2jFcgqDWAPgqem3I6LZxDheaFVYKNvMklM0gfSDCzUbxdSprq0Ig9joJD3vSvs2Ty4RjABP_mc-XUS79BNeuodyBFhcST8_ozS8DJEIjSCiNM5Xx_LALDfjqZZDXl8ceJqk8WGnRku4ZGNtUqnJlV7PiON2o5hOIoWJaL99z9XsQm3pubFAyKiT9LnQi8FBuA3F7bgpf0Hc38u3VEY2XCb1gvMAZtIbJ0zsJEDlGY1By8-XRxwbVWi6YcUceBGNhISg.fZ3h_PaRAR_b29ajxl4K7A.pF57YOJ2kGX-T_jZLejvYlnhrsJn35W9PP4fJvrE7POLRQ1RBjTr4pNDycz-l_C52nPFdVLcjNr0aK6XsZ1J-WeH0mDFGGN7ymVIGVZsioAev24uJ7bJpb0DPyaQWQ2e6F-dGzGHq9WBHJAoEy1Dk1BU-JMKZAnhafqlvQoUS5Wb1v_sC8adCe9ykqBmMr21nG2aat-JUou3PKYhKI2uaRcCs_jGJBW5kQzdJPWW5hpbpCZ4XFJvH7RS5ns0DFEQnL8zKG90Jpcmwg4kS34IM1cky7so38Z4GmQAevnzCYQFJG0beto9T4hewDV3FMzH4VypPi0p-nZT05KDBtmbMwala1fbzjHU1XhiOFtEDJIXq0lL32tT23ztMvDUHGcAjU-ANttPy5vFih21ESJavFITGTZqsoUv02LVexNFBf8AyIBWGS1KQLNQla0UwAKofBbIJKABXQdQ2_WcbgK8ecaUEdwryvxD0g_bc05tuoU9iKkHlqpxJUtcGJYnE3HVqfP3_lr32rX2XG3GS2fGE8kabz6PX94rXHBS5dL2VDGsXfw44pceNzZsL_S4XtNYv1VbHYiBTQJ9kLbOE7TBRyedTZQw2AEpAeHCyVeENRVorSNG3r3slRf41eLi1JKBqcl_A0GzCfR23NbrbXkK0XanY3fwZxPPm3RzE5ilBl1gf-N2WV59VaukxYtFHqvqkaLW8UQ4ewYpVUI_i6qXsp43nDnQFPf3CKVrRFD1VBIcNkJo7rnjKy2j-rsgHVFYB_mRWg9x-3awVJGcx-Kf0U5UR1nGNVdfvOaPyBRPbezNlwTHs_p3QDaUSjyAmmi-6VprwkT_1m995Ya3oOhsh38yDXjf3sMaMdGjjQyDVcaBFV0XUK8bQjaLiTJ-8w5sqK1AIkfzlhM_SD1zKvx4lg.I_LhPMQC9_MlCi3VRbMHEA', 'state': 'axSUWUS1XhMom11P', 'code': 'CS4q6peaKSpDpXBz8SMoLrNUwBiopu'}
2AuthorizationResponse
{
    "code": "CS4q6peaKSpDpXBz8SMoLrNUwBiopu",
    "id_token": {
        "aud": [
            "bBY7aVpwKdNtNRlVfKgJ"
        ],
        "c_hash": "XwPgz9c6DUhrWzLG4Mj06g",
        "exp": 1560788136,
        "iat": 1560784716,
        "iss": "https://isamfed.com:30443/test",
        "nonce": "95G15VUM2E2TgARQ",
        "sub": "testuser"
    },
    "state": "axSUWUS1XhMom11P"
}
2phase<--<-- 4 --- AccessToken -->-->
2requestop_args: {'state': 'axSUWUS1XhMom11P'}, req_args: {'redirect_uri': 'https://op.certification.openid.net:61716/authz_cb'}
2do_access_token_request
kwargs:{'request_args': {'redirect_uri': 'https://op.certification.openid.net:61716/authz_cb', 'code': 'CS4q6peaKSpDpXBz8SMoLrNUwBiopu', 'state': 'axSUWUS1XhMom11P', 'grant_type': 'authorization_code', 'client_id': 'bBY7aVpwKdNtNRlVfKgJ'}, 'state': 'axSUWUS1XhMom11P', 'authn_method': 'private_key_jwt'}
2AccessTokenRequest
{
    "client_assertion": "eyJhbGciOiJSUzI1NiIsImtpZCI6Ind0MjVPZ3lSX256RzNPb1E3ZGFhMnJMNi1nTW5GZGZSekJqaFVWUHU4UlEifQ.eyJpc3MiOiAiYkJZN2FWcHdLZE50TlJsVmZLZ0oiLCAic3ViIjogImJCWTdhVnB3S2ROdE5SbFZmS2dKIiwgImF1ZCI6IFsiaHR0cHM6Ly9pc2FtZmVkLmNvbTozMDQ0My9tZ2Evc3BzL29hdXRoL29hdXRoMjAvdG9rZW4iXSwgImp0aSI6ICJKaEhLSWI0S0RsNmVqSkVRbGpPaVpxM3I1Vzg2TWttayIsICJleHAiOiAxNTYwNzg1MzE3LCAiaWF0IjogMTU2MDc4NDcxN30.aRN9ag35YgD5ZG6-a-MDE1qQWV8K-elm0p9j-XIw9qO-7vwOLbdUm-Ez-MFYThjmdZKUWuvq9Ougd1bnO4Y0utFQ-_2O0AvwkX-BLeAs5_gRa9sOSv7KOfyfEeSA0OqJMIvEW-HXZnndnYkXBU734_j5YvmRxHdaql9zZz6sg0pKCoVdavnL7kt_9PtQXgxokFfJ_VFSsD_0VSjE8YvItEEwQ6DGExk8Z17G2wpdfweYhdd3krFUvIw6HYe4LlRz07v1NDiBpNSERfswiqpjYKnKeNgxY3zfg5UEjb9cd6n-0AqdImWFOJbE8cDgDtzSv5vELvW2olui_h8Q1cq1VA",
    "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
    "code": "CS4q6peaKSpDpXBz8SMoLrNUwBiopu",
    "grant_type": "authorization_code",
    "redirect_uri": "https://op.certification.openid.net:61716/authz_cb",
    "state": "axSUWUS1XhMom11P"
}
2request_urlhttps://isamfed.com:30443/mga/sps/oauth/oauth20/token
2request_http_args{'headers': {'Content-Type': 'application/x-www-form-urlencoded'}}
2requestgrant_type=authorization_code&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61716%2Fauthz_cb&code=CS4q6peaKSpDpXBz8SMoLrNUwBiopu&state=axSUWUS1XhMom11P&client_assertion=eyJhbGciOiJSUzI1NiIsImtpZCI6Ind0MjVPZ3lSX256RzNPb1E3ZGFhMnJMNi1nTW5GZGZSekJqaFVWUHU4UlEifQ.eyJpc3MiOiAiYkJZN2FWcHdLZE50TlJsVmZLZ0oiLCAic3ViIjogImJCWTdhVnB3S2ROdE5SbFZmS2dKIiwgImF1ZCI6IFsiaHR0cHM6Ly9pc2FtZmVkLmNvbTozMDQ0My9tZ2Evc3BzL29hdXRoL29hdXRoMjAvdG9rZW4iXSwgImp0aSI6ICJKaEhLSWI0S0RsNmVqSkVRbGpPaVpxM3I1Vzg2TWttayIsICJleHAiOiAxNTYwNzg1MzE3LCAiaWF0IjogMTU2MDc4NDcxN30.aRN9ag35YgD5ZG6-a-MDE1qQWV8K-elm0p9j-XIw9qO-7vwOLbdUm-Ez-MFYThjmdZKUWuvq9Ougd1bnO4Y0utFQ-_2O0AvwkX-BLeAs5_gRa9sOSv7KOfyfEeSA0OqJMIvEW-HXZnndnYkXBU734_j5YvmRxHdaql9zZz6sg0pKCoVdavnL7kt_9PtQXgxokFfJ_VFSsD_0VSjE8YvItEEwQ6DGExk8Z17G2wpdfweYhdd3krFUvIw6HYe4LlRz07v1NDiBpNSERfswiqpjYKnKeNgxY3zfg5UEjb9cd6n-0AqdImWFOJbE8cDgDtzSv5vELvW2olui_h8Q1cq1VA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2http response
url:https://isamfed.com:30443/mga/sps/oauth/oauth20/token status_code:200
2response{'access_token': 'RbeHwo5Q8ni1wxoJsRL0', 'refresh_token': 'lKX7flmNl5KHsYKdZ79cbnnKl0m4qCzPT03tFIiE', 'scope': 'openid', 'id_token': 'eyJhbGciOiJSU0EtT0FFUC0yNTYiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2Iiwia2lkIjoiZ3RINHYzWXIyUXFMcmVCU3owQnlRUTh2a2Y4ZUZvMUtJaXQzcy0zQmJ3dyIsImN0eSI6IkpXVCJ9.TFXlfOjHsvI1d4kJ82EUoqOw7iXiwKVlumN1iGO3XS0r6PmEPWS8Aeiwtme7ZukiLheJW9FCTjJUYqIEvXJf-KohaZtouBMivlXie95UDitJcp_K9_rc9ITuyKLTBlm6KUWB4U_3_vkL6D-I9Awo1l80KcbI0eZBX3PhC76CEfJ0KDfTtQ_GUVPSAAOMn2nxdyErnEhgZEeA8Q5knqJBpMCzIL028xr06SFSo_T7WIf8cNdB4TtvcWS01ANcIxk80EzF5LUoP6gmvS3tJKG3X7V6JlcXb_fT5CxoqaYcvle5mbfBoGZW1Eb766gvu10T7raDy1w0fPMFfRMdAJYdTg.YLGnVLaJ4OeS7vNLv0sStw.WUJtqCHekp7-K3NoLldW9Cf2gFATvGKOAW6BThaKQdeTi9zt12N-oug14Jat97daBKhBNHPJzYnthnI5HjhEkhmwJuMGEV8j0nuuUdMAn5XTNgk7UHqAsCkrHOVGCjUC47vwH0rEAgvJD7RwYbMXmjTOckcBbVp69u8VAGxUeVowl9nc36BYSad1Hq-uLN74PEo56RbOldJPfJZX_gEKaR6gyGhLHqNBA_Lm1d9LWmjx9TQ_-aoiLkWQBOBUSs3oYo_t3p5h-eS3cfxgiAbwy2L5dIZwlcVj6pjhs4x4ua7SlmjfAEuo-WurLgN6zpavTLPLz7HNTWntTbexe_MxHzYVfJ_2zIP5FrBgAOcT8LI7DD-5OS5pCHkmnrpF_-LdTo67d8SPtKAgN8ju3IkaXxR6yQHkLAxGlj6K0G0o1tPm6I8e781wyMP9dw_HOsBviZUgCUM4nBeuN90aI4AYTbbccmpavuYjKigVBbwRjgNPi9bYIdmVlKrepwzROjQJpu6Gkjt8h-oyudGrOjoxj6blBMjcu7R4oQMgxcnH-pM1IVeGixHJE6EEFvw4TSj0yGnof4JbaTjXIn6dd9FoJ-ZrtJrlKcRMjMlRX1DNAddHLxL_ISK_eiIH_m-NL6rV7yPO-MKUE6O9hFNU6c8m8BHNz2ucROdMIwchDom-L-xtrRUQTG67B_UlwxIz_u5KxIf4_3mGgIdlLFMUEKnk8msKWyoRI_DtkOebq9kJg26kIfNyqRtXrilzfS-d-I7QhkGOth3NTyONkcRoWuv5Vy8j9kx-X-Mi_wzSHRtaIPjGC03kBd-AxhlXLlJwJHDK7h1uD--UOgIgyVd95xe_BtQ8RQqUPrTAyGyQP1sM1YaAGHVwc3WzjzKhTiEJ0b_pQkm9kWWyjG9cWw2ee-luYuy006ulkylV4qTeIXVavWZyQwLPKyUOpMRzwLyjC3bEDAoKYTgahH4grMDZFoTpDA.y2IHdH5nVGDCrqF5u6VSzQ', 'token_type': 'bearer', 'expires_in': 3599}
2AccessTokenResponse
{
    "access_token": "RbeHwo5Q8ni1wxoJsRL0",
    "expires_in": 3599,
    "id_token": {
        "at_hash": "JvLTuao60QsNstiJd-nJrA",
        "aud": [
            "bBY7aVpwKdNtNRlVfKgJ"
        ],
        "exp": 1560788137,
        "iat": 1560784717,
        "iss": "https://isamfed.com:30443/test",
        "nonce": "95G15VUM2E2TgARQ",
        "rt_hash": "fmimlROySe3IuCVksqYweQ",
        "sub": "testuser"
    },
    "refresh_token": "lKX7flmNl5KHsYKdZ79cbnnKl0m4qCzPT03tFIiE",
    "scope": "openid",
    "token_type": "bearer"
}
2jws header{'kid': '_uhPdeGrTWxobFeH0XbzjJpRrzp3CB9nknx1yFV1G-0', 'alg': 'RS256'}
2jwe header{'alg': 'RSA-OAEP-256', 'enc': 'A128CBC-HS256', 'kid': 'gtH4v3Yr2QqLreBSz0ByQQ8vkf8eFo1KIit3s-3Bbww', 'cty': 'JWT'}
2phase<--<-- 5 --- UserInfo -->-->
2do_user_info_request
kwargs:{'state': 'axSUWUS1XhMom11P', 'method': 'GET', 'authn_method': 'bearer_header', 'ctype': 'jwt'}
2request{'body': None}
2request_urlhttps://isamfed.com:30443/mga/sps/oauth/oauth20/userinfo
2request_http_args{'headers': {'Authorization': 'Bearer RbeHwo5Q8ni1wxoJsRL0'}}
3http response
url:https://isamfed.com:30443/mga/sps/oauth/oauth20/userinfo status_code:200
3OpenIDSchema
{
    "aud": "bBY7aVpwKdNtNRlVfKgJ",
    "iss": "https://isamfed.com:30443/test",
    "sub": "testuser"
}
3OpenIDSchema
{
    "aud": "bBY7aVpwKdNtNRlVfKgJ",
    "iss": "https://isamfed.com:30443/test",
    "sub": "testuser"
}
3jws header{'kid': '_uhPdeGrTWxobFeH0XbzjJpRrzp3CB9nknx1yFV1G-0', 'alg': 'RS256'}
3jwe header{'alg': 'RSA-OAEP-256', 'enc': 'A128CBC-HS256', 'kid': 'gtH4v3Yr2QqLreBSz0ByQQ8vkf8eFo1KIit3s-3Bbww', 'cty': 'JWT'}
3phase<--<-- 6 --- Done -->-->
3end
3assertionCheckAsymSignedUserInfo
3conditionasym-signed-userinfo: status=OK [Verifies that the UserInfo was signed with a RSA key]
3assertionVerifyResponse
3conditionverify-response: status=OK [Checks that the last response was one of a possible set of OpenID Connect Responses]
3conditionDone: status=OK

Result

PASSED