Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-04-20 02:40:26 INFO
TEST-RUNNER
Test instance rAspUC91sESzD84 created
baseUrl
https://www.certification.openid.net/test/a/IPv280-2
variant
{
  "server_metadata": "discovery",
  "client_registration": "static_client"
}
alias
IPv280-2
description
planId
Zid0yqNZHsLWe
config
{
  "alias": "IPv280-2",
  "server": {
    "discoveryUrl": "https://v280-oidc4.ipdev.themistruct.com/oauth/v2/.well-known/openid-configuration"
  }
}
testName
oidcc-discovery-endpoint-verification
2021-04-20 02:40:26
GetDynamicServerConfiguration
HTTP request
request_uri
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-04-20 02:40:27 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-type": "application/json; charset\u003dutf-8",
  "content-length": "2518",
  "connection": "keep-alive",
  "date": "Tue, 20 Apr 2021 02:40:27 GMT",
  "x-amzn-requestid": "05c19b34-ab74-4322-87f9-7ae5b7c35bb0",
  "x-amzn-remapped-content-length": "2518",
  "x-amzn-remapped-connection": "close",
  "x-amz-apigw-id": "eD7MNFmFNjMFejg\u003d",
  "cache-control": "no-cache, no-store",
  "x-amzn-trace-id": "Root\u003d1-607e3f1a-174c9c6c457c642a15b921fb;Sampled\u003d0",
  "pragma": "no-cache",
  "x-amzn-remapped-date": "Tue, 20 Apr 2021 02:40:27 GMT",
  "access-control-allow-credentials": "true",
  "via": "1.1 a4cae74c829bc214e4183c38164a2c0a.cloudfront.net (CloudFront), 1.1 0b03db44a4f3db5d63a11240f3fe13b1.cloudfront.net (CloudFront)",
  "x-amz-cf-pop": [
    "IAD89-C3",
    "MIA3-C5"
  ],
  "x-cache": "Miss from cloudfront",
  "x-amz-cf-id": "apSLNfWrdiVNShS92XdDwRQohQ7LO1QuCHbXgbGPOXq0VhvnYi3pCQ\u003d\u003d"
}
response_body
{"issuer":"https://v280-oidc4.ipdev.themistruct.com/oauth/v2","response_types_supported":["code","id_token","id_token token","code id_token","code token","code id_token token"],"subject_types_supported":["public","pairwise"],"id_token_signing_alg_values_supported":["RS256"],"scopes_supported":["address","email","openid","phone","profile","tsipaccount:all","tsipaccount:create","tsipaccount:delete","tsipaccount:fido:u2f:all","tsipaccount:me:all","tsipaccount:me:delete","tsipaccount:me:fido:u2f:all","tsipaccount:me:password:update","tsipaccount:me:read","tsipaccount:me:social:all","tsipaccount:me:social:read","tsipaccount:me:totp:all","tsipaccount:me:update","tsipaccount:password:update","tsipaccount:read","tsipaccount:schema:read","tsipaccount:social:all","tsipaccount:social:link","tsipaccount:social:read","tsipaccount:social:regist","tsipaccount:totp:all","tsipaccount:unlock","tsipaccount:update","tsipclient:add","tsipclient:all","tsipclient:delete","tsipclient:read","tsipclient:update","tsipclient:write","tsipexp:add","tsipexp:all","tsipexp:delete","tsipexp:read","tsipexp:update","tsipexp:write","tsipscope:add","tsipscope:all","tsipscope:delete","tsipscope:read","tsipscope:update","tsipscope:write","tsiptoken:all","tsiptoken:revoke","tsiptoken:search"],"token_endpoint_auth_methods_supported":["client_secret_basic","client_secret_post","client_secret_jwt","private_key_jwt"],"claims_supported":["birthdate","email","email_verified","family_name","gender","given_name","locale","middle_name","name","nickname","phone_number","phone_number_verified","picture","preferred_username","profile","role","updated_at","website","zoneinfo"],"acr_values_supported":["default","Privilege"],"code_challenge_methods_supported":["plain","S256"],"grant_types_supported":["authorization_code","implicit","password","client_credentials","refresh_token"],"request_parameter_supported":true,"request_uri_parameter_supported":false,"request_object_signing_alg_values_supported":["RS256"],"token_endpoint_auth_signing_alg_values_supported":["RS256"],"backchannel_logout_supported":true,"backchannel_logout_session_supported":true,"authorization_endpoint":"https://v280-oidc4.ipdev.themistruct.com/oauth/v2/authz","end_session_endpoint":"https://v280-oidc4.ipdev.themistruct.com/authn/v1/signout","jwks_uri":"https://v280-oidc4.ipdev.themistruct.com/oauth/v2/jwk","token_endpoint":"https://v280-oidc4.ipdev.themistruct.com/oauth/v2/token","userinfo_endpoint":"https://v280-oidc4.ipdev.themistruct.com/oauth/v2/userinfo"}
2021-04-20 02:40:27
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{"issuer":"https://v280-oidc4.ipdev.themistruct.com/oauth/v2","response_types_supported":["code","id_token","id_token token","code id_token","code token","code id_token token"],"subject_types_supported":["public","pairwise"],"id_token_signing_alg_values_supported":["RS256"],"scopes_supported":["address","email","openid","phone","profile","tsipaccount:all","tsipaccount:create","tsipaccount:delete","tsipaccount:fido:u2f:all","tsipaccount:me:all","tsipaccount:me:delete","tsipaccount:me:fido:u2f:all","tsipaccount:me:password:update","tsipaccount:me:read","tsipaccount:me:social:all","tsipaccount:me:social:read","tsipaccount:me:totp:all","tsipaccount:me:update","tsipaccount:password:update","tsipaccount:read","tsipaccount:schema:read","tsipaccount:social:all","tsipaccount:social:link","tsipaccount:social:read","tsipaccount:social:regist","tsipaccount:totp:all","tsipaccount:unlock","tsipaccount:update","tsipclient:add","tsipclient:all","tsipclient:delete","tsipclient:read","tsipclient:update","tsipclient:write","tsipexp:add","tsipexp:all","tsipexp:delete","tsipexp:read","tsipexp:update","tsipexp:write","tsipscope:add","tsipscope:all","tsipscope:delete","tsipscope:read","tsipscope:update","tsipscope:write","tsiptoken:all","tsiptoken:revoke","tsiptoken:search"],"token_endpoint_auth_methods_supported":["client_secret_basic","client_secret_post","client_secret_jwt","private_key_jwt"],"claims_supported":["birthdate","email","email_verified","family_name","gender","given_name","locale","middle_name","name","nickname","phone_number","phone_number_verified","picture","preferred_username","profile","role","updated_at","website","zoneinfo"],"acr_values_supported":["default","Privilege"],"code_challenge_methods_supported":["plain","S256"],"grant_types_supported":["authorization_code","implicit","password","client_credentials","refresh_token"],"request_parameter_supported":true,"request_uri_parameter_supported":false,"request_object_signing_alg_values_supported":["RS256"],"token_endpoint_auth_signing_alg_values_supported":["RS256"],"backchannel_logout_supported":true,"backchannel_logout_session_supported":true,"authorization_endpoint":"https://v280-oidc4.ipdev.themistruct.com/oauth/v2/authz","end_session_endpoint":"https://v280-oidc4.ipdev.themistruct.com/authn/v1/signout","jwks_uri":"https://v280-oidc4.ipdev.themistruct.com/oauth/v2/jwk","token_endpoint":"https://v280-oidc4.ipdev.themistruct.com/oauth/v2/token","userinfo_endpoint":"https://v280-oidc4.ipdev.themistruct.com/oauth/v2/userinfo"}
2021-04-20 02:40:27 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://v280-oidc4.ipdev.themistruct.com/oauth/v2
response_types_supported
[
  "code",
  "id_token",
  "id_token token",
  "code id_token",
  "code token",
  "code id_token token"
]
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "RS256"
]
scopes_supported
[
  "address",
  "email",
  "openid",
  "phone",
  "profile",
  "tsipaccount:all",
  "tsipaccount:create",
  "tsipaccount:delete",
  "tsipaccount:fido:u2f:all",
  "tsipaccount:me:all",
  "tsipaccount:me:delete",
  "tsipaccount:me:fido:u2f:all",
  "tsipaccount:me:password:update",
  "tsipaccount:me:read",
  "tsipaccount:me:social:all",
  "tsipaccount:me:social:read",
  "tsipaccount:me:totp:all",
  "tsipaccount:me:update",
  "tsipaccount:password:update",
  "tsipaccount:read",
  "tsipaccount:schema:read",
  "tsipaccount:social:all",
  "tsipaccount:social:link",
  "tsipaccount:social:read",
  "tsipaccount:social:regist",
  "tsipaccount:totp:all",
  "tsipaccount:unlock",
  "tsipaccount:update",
  "tsipclient:add",
  "tsipclient:all",
  "tsipclient:delete",
  "tsipclient:read",
  "tsipclient:update",
  "tsipclient:write",
  "tsipexp:add",
  "tsipexp:all",
  "tsipexp:delete",
  "tsipexp:read",
  "tsipexp:update",
  "tsipexp:write",
  "tsipscope:add",
  "tsipscope:all",
  "tsipscope:delete",
  "tsipscope:read",
  "tsipscope:update",
  "tsipscope:write",
  "tsiptoken:all",
  "tsiptoken:revoke",
  "tsiptoken:search"
]
token_endpoint_auth_methods_supported
[
  "client_secret_basic",
  "client_secret_post",
  "client_secret_jwt",
  "private_key_jwt"
]
claims_supported
[
  "birthdate",
  "email",
  "email_verified",
  "family_name",
  "gender",
  "given_name",
  "locale",
  "middle_name",
  "name",
  "nickname",
  "phone_number",
  "phone_number_verified",
  "picture",
  "preferred_username",
  "profile",
  "role",
  "updated_at",
  "website",
  "zoneinfo"
]
acr_values_supported
[
  "default",
  "Privilege"
]
code_challenge_methods_supported
[
  "plain",
  "S256"
]
grant_types_supported
[
  "authorization_code",
  "implicit",
  "password",
  "client_credentials",
  "refresh_token"
]
request_parameter_supported
true
request_uri_parameter_supported
false
request_object_signing_alg_values_supported
[
  "RS256"
]
token_endpoint_auth_signing_alg_values_supported
[
  "RS256"
]
backchannel_logout_supported
true
backchannel_logout_session_supported
true
authorization_endpoint
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/authz
end_session_endpoint
https://v280-oidc4.ipdev.themistruct.com/authn/v1/signout
jwks_uri
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/jwk
token_endpoint
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/token
userinfo_endpoint
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/userinfo
2021-04-20 02:40:27
oidcc-discovery-endpoint-verification
Setup Done
2021-04-20 02:40:27 SUCCESS
OIDCCCheckDiscEndpointResponseTypesSupported
Contents of 'response_types_supported' in discovery document matches expectations.
actual
[
  "code",
  "id_token",
  "id_token token",
  "code id_token",
  "code token",
  "code id_token token"
]
expected
[
  "code",
  "code id_token",
  "id_token",
  "token id_token",
  "code id_token token",
  "code token"
]
minimum_matches_required
1
2021-04-20 02:40:27 SUCCESS
CheckDiscEndpointDiscoveryUrl
discoveryUrl
actual
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/.well-known/openid-configuration
2021-04-20 02:40:27 SUCCESS
CheckDiscEndpointIssuer
issuer is consistent with the discovery endpoint
2021-04-20 02:40:27 SUCCESS
OIDCCCheckDiscEndpointSubjectTypesSupported
Contents of 'subject_types_supported' in discovery document matches expectations.
actual
[
  "public",
  "pairwise"
]
expected
[
  "public",
  "pairwise"
]
minimum_matches_required
1
2021-04-20 02:40:27 SUCCESS
OIDCCCheckDiscEndpointIdTokenSigningAlgValuesSupported
Contents of 'id_token_signing_alg_values_supported' in discovery document matches expectations.
actual
[
  "RS256"
]
expected
[
  "RS256"
]
minimum_matches_required
1
2021-04-20 02:40:27 INFO
OIDCCCheckDiscEndpointUserinfoSigningAlgValuesSupported
Skipped evaluation due to missing required element: server userinfo_signing_alg_values_supported
path
userinfo_signing_alg_values_supported
mapped
object
server
2021-04-20 02:40:27 SUCCESS
CheckDiscEndpointAuthorizationEndpoint
authorization_endpoint
actual
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/authz
2021-04-20 02:40:27 SUCCESS
CheckDiscEndpointTokenEndpoint
token_endpoint
actual
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/token
2021-04-20 02:40:27 SUCCESS
CheckDiscEndpointUserinfoEndpoint
userinfo_endpoint
actual
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/userinfo
2021-04-20 02:40:27 INFO
CheckDiscEndpointRegistrationEndpoint
Skipped evaluation due to missing required element: server registration_endpoint
path
registration_endpoint
mapped
object
server
2021-04-20 02:40:27 SUCCESS
CheckJwksUri
jwks_uri
actual
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/jwk
2021-04-20 02:40:27
FetchServerKeys
Fetching server key
jwks_uri
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/jwk
2021-04-20 02:40:27
FetchServerKeys
HTTP request
request_uri
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/jwk
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-04-20 02:40:28 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-type": "application/json; charset\u003dutf-8",
  "content-length": "462",
  "connection": "keep-alive",
  "date": "Tue, 20 Apr 2021 02:40:28 GMT",
  "x-amzn-requestid": "7c79be9a-b7c5-4bbb-9984-adad603a596f",
  "x-amzn-remapped-content-length": "462",
  "x-amzn-remapped-connection": "close",
  "x-amz-apigw-id": "eD7MYGZEtjMFeDQ\u003d",
  "cache-control": "no-cache, no-store",
  "x-amzn-trace-id": "Root\u003d1-607e3f1b-41e3230e775efd4a4474689f;Sampled\u003d0",
  "pragma": "no-cache",
  "x-amzn-remapped-date": "Tue, 20 Apr 2021 02:40:28 GMT",
  "access-control-allow-credentials": "true",
  "via": "1.1 c3fb36940fb36cf227975bfb7c09ea6d.cloudfront.net (CloudFront), 1.1 62223de0c21500c1b860f7e075e09f40.cloudfront.net (CloudFront)",
  "x-amz-cf-pop": [
    "MIA3-C2",
    "MIA3-C5"
  ],
  "x-cache": "Miss from cloudfront",
  "x-amz-cf-id": "RLB4L6UkTOqH_2GgX4JCDLR8r-1W5x_3G9nmjnI0OmBqXkjgnJy6ZA\u003d\u003d"
}
response_body
{"keys":[{"kty":"RSA","n":"jLZco5YAJ5O-C9xmLpHwApw1Undb1h6lw3RWjHtIBlXbTBNIJnShFZjzzEeaj_61dbKanNajaBWhw7GR7qpMY3Rdmpa53YctVqQpsFjsc4Y7pkVs5ntY_abbG-AVQnc2SnB4cGTOBFCsczHutFZ8tmSrgTBw9vYR1LAXeHQub0idF3_X_xy3V3OzpfCg5aRbfVGhwC1H2mC3Ls3G0iCmDGVYcaMqO-HCVK9xoEo76KtvjP-o9nIeIR2UHRQDUyv87NmGY7q-kI30MpAww2DuQKcYImMXxe-r8VC-MEwmbvXueQC4Pk7SBKBps8hDBYBayBY2hQ2JXg41QY34lbgrTQ","e":"AQAB","alg":"RS256","use":"sig","kid":"N6juwc4ZaH0TL+KQUdymKdFk4sSVi6FB1fQTOjPwaI8"}]}
2021-04-20 02:40:28
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","n":"jLZco5YAJ5O-C9xmLpHwApw1Undb1h6lw3RWjHtIBlXbTBNIJnShFZjzzEeaj_61dbKanNajaBWhw7GR7qpMY3Rdmpa53YctVqQpsFjsc4Y7pkVs5ntY_abbG-AVQnc2SnB4cGTOBFCsczHutFZ8tmSrgTBw9vYR1LAXeHQub0idF3_X_xy3V3OzpfCg5aRbfVGhwC1H2mC3Ls3G0iCmDGVYcaMqO-HCVK9xoEo76KtvjP-o9nIeIR2UHRQDUyv87NmGY7q-kI30MpAww2DuQKcYImMXxe-r8VC-MEwmbvXueQC4Pk7SBKBps8hDBYBayBY2hQ2JXg41QY34lbgrTQ","e":"AQAB","alg":"RS256","use":"sig","kid":"N6juwc4ZaH0TL+KQUdymKdFk4sSVi6FB1fQTOjPwaI8"}]}
2021-04-20 02:40:28 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "n": "jLZco5YAJ5O-C9xmLpHwApw1Undb1h6lw3RWjHtIBlXbTBNIJnShFZjzzEeaj_61dbKanNajaBWhw7GR7qpMY3Rdmpa53YctVqQpsFjsc4Y7pkVs5ntY_abbG-AVQnc2SnB4cGTOBFCsczHutFZ8tmSrgTBw9vYR1LAXeHQub0idF3_X_xy3V3OzpfCg5aRbfVGhwC1H2mC3Ls3G0iCmDGVYcaMqO-HCVK9xoEo76KtvjP-o9nIeIR2UHRQDUyv87NmGY7q-kI30MpAww2DuQKcYImMXxe-r8VC-MEwmbvXueQC4Pk7SBKBps8hDBYBayBY2hQ2JXg41QY34lbgrTQ",
      "e": "AQAB",
      "alg": "RS256",
      "use": "sig",
      "kid": "N6juwc4ZaH0TL+KQUdymKdFk4sSVi6FB1fQTOjPwaI8"
    }
  ]
}
2021-04-20 02:40:28 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-04-20 02:40:28 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-04-20 02:40:28 SUCCESS
CheckDiscEndpointRequestParameterSupported
request_parameter_supported has correct value
request_parameter_supported
true
2021-04-20 02:40:28 INFO
CheckDiscEndpointRequestUriParameterSupported
request_uri_parameter_supported must be: true
discovery_metadata_key
request_uri_parameter_supported
actual
false
expected
true
2021-04-20 02:40:28 SUCCESS
CheckDiscEndpointRequestObjectSigningAlgValuesSupportedIncludesRS256
Contents of 'request_object_signing_alg_values_supported' in discovery document matches expectations.
actual
[
  "RS256"
]
expected
[
  "RS256"
]
minimum_matches_required
1
2021-04-20 02:40:28 INFO
CheckDiscEndpointClaimsParameterSupported
'claims_parameter_supported' should be 'true', but is absent and the default value is 'false'.
discovery_metadata_key
claims_parameter_supported
actual
expected
true
2021-04-20 02:40:28 SUCCESS
OIDCCCheckDiscEndpointClaimsSupported
Contents of 'claims_supported' in discovery document matches expectations.
actual
[
  "birthdate",
  "email",
  "email_verified",
  "family_name",
  "gender",
  "given_name",
  "locale",
  "middle_name",
  "name",
  "nickname",
  "phone_number",
  "phone_number_verified",
  "picture",
  "preferred_username",
  "profile",
  "role",
  "updated_at",
  "website",
  "zoneinfo"
]
expected
[]
minimum_matches_required
0
2021-04-20 02:40:28 SUCCESS
OIDCCCheckDiscEndpointGrantTypesSupported
grant_types_supported is a non-empty array.
grant_types_supported
[
  "authorization_code",
  "implicit",
  "password",
  "client_credentials",
  "refresh_token"
]
2021-04-20 02:40:28 SUCCESS
OIDCCCheckDiscEndpointScopesSupported
Contents of 'scopes_supported' in discovery document matches expectations.
actual
[
  "address",
  "email",
  "openid",
  "phone",
  "profile",
  "tsipaccount:all",
  "tsipaccount:create",
  "tsipaccount:delete",
  "tsipaccount:fido:u2f:all",
  "tsipaccount:me:all",
  "tsipaccount:me:delete",
  "tsipaccount:me:fido:u2f:all",
  "tsipaccount:me:password:update",
  "tsipaccount:me:read",
  "tsipaccount:me:social:all",
  "tsipaccount:me:social:read",
  "tsipaccount:me:totp:all",
  "tsipaccount:me:update",
  "tsipaccount:password:update",
  "tsipaccount:read",
  "tsipaccount:schema:read",
  "tsipaccount:social:all",
  "tsipaccount:social:link",
  "tsipaccount:social:read",
  "tsipaccount:social:regist",
  "tsipaccount:totp:all",
  "tsipaccount:unlock",
  "tsipaccount:update",
  "tsipclient:add",
  "tsipclient:all",
  "tsipclient:delete",
  "tsipclient:read",
  "tsipclient:update",
  "tsipclient:write",
  "tsipexp:add",
  "tsipexp:all",
  "tsipexp:delete",
  "tsipexp:read",
  "tsipexp:update",
  "tsipexp:write",
  "tsipscope:add",
  "tsipscope:all",
  "tsipscope:delete",
  "tsipscope:read",
  "tsipscope:update",
  "tsipscope:write",
  "tsiptoken:all",
  "tsiptoken:revoke",
  "tsiptoken:search"
]
expected
[
  "openid"
]
minimum_matches_required
1
2021-04-20 02:40:28 SUCCESS
CheckDiscEndpointAllEndpointsAreHttps
authorization_endpoint
actual
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/authz
2021-04-20 02:40:28 SUCCESS
CheckDiscEndpointAllEndpointsAreHttps
end_session_endpoint
actual
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/authz
2021-04-20 02:40:28 SUCCESS
CheckDiscEndpointAllEndpointsAreHttps
token_endpoint
actual
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/authz
2021-04-20 02:40:28 SUCCESS
CheckDiscEndpointAllEndpointsAreHttps
userinfo_endpoint
actual
https://v280-oidc4.ipdev.themistruct.com/oauth/v2/authz
2021-04-20 02:40:28 FINISHED
oidcc-discovery-endpoint-verification
Test has run to completion
testmodule_result
PASSED
2021-04-20 02:41:45
TEST-RUNNER
Alias has now been claimed by another test
alias
IPv280-2
new_test_id
vDvHtTkwhLHLw8G
Test Results