Test detail

Test Name	fapi-ciba-id1-ensure-request-object-exp-is-70-minutes-in-future-fails
Variant	client_auth_type=private_key_jwt, ciba_mode=poll, fapi_profile=plain_fapi, client_registration=static_client
Test ID	BiUPGBhOP7agWtv https://www.certification.openid.net/log-detail.html?public=true&log=BiUPGBhOP7agWtv
Created	2021-05-17T19:18:33.420780Z
Description	CIBA
Test Version	4.1.10
Test Owner	104503787072729162830 https://accounts.google.com
Plan ID	wm6JJOmkXcpj4 https://www.certification.openid.net/plan-detail.html?public=true&plan=wm6JJOmkXcpj4
Exported From	https://www.certification.openid.net
Exported By	104503787072729162830 https://accounts.google.com
Suite Version	4.1.10
Exported	2021-05-18 07:01:11 (UTC)

2021-05-17 19:18:33

(7) More

INFO

TEST-RUNNER

Test instance BiUPGBhOP7agWtv created

baseUrl	https://www.certification.openid.net/test/a/fintech
variant	{ "client_auth_type": "private_key_jwt", "ciba_mode": "poll", "fapi_profile": "plain_fapi", "client_registration": "static_client" }
alias	fintech
description	CIBA
planId	wm6JJOmkXcpj4
config	{ "browser": [ { "match": "https://{CURITY_HOST_FROM_DOCKER}:{CURITY_PORT}/dev/oauth/authorize", "tasks": [ { "task": "submit consent", "match": "https://{CURITY_HOST_FROM_DOCKER}:{CURITY_PORT}/dev/oauth/authorize", "optional": true, "commands": [ [ "click", "name", "submit_consent" ] ] }, { "task": "Complete with redirect to RP", "match": "https://{FAPI_HOST}:{FAPI_PORT}*" } ] } ], "server": { "discoveryUrl": "https://oidc-test.curity.io/dev/oauth/anonymous/.well-known/openid-configuration" }, "client": { "client_id": "client-one", "client_secret": "0ne!Secret", "scope": "openid email address phone profile", "jwks": { "keys": [ { "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q", "kty": "RSA", "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ", "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE", "e": "AQAB", "kid": "10001", "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA", "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ", "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ", "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE", "alg": "PS256" } ] }, "hint_type": "login_hint", "hint_value": "larsdoe" }, "tls": { "testHost": "{CURITY_HOST_FROM_DOCKER}", "testPort": "{CURITY_PORT}" }, "alias": "fintech", "resource": { "resourceUrl": "https://oidc-test.curity.io:7777/fapi/rs", "institution_id": "foobar" }, "client2": { "client_id": "client-two", "client_secret": "sEcrEt@3wo", "scope": "openid", "client_secret_jwt_alg": "RS256", "jwks": { "keys": [ { "kid": "foo", "p": "-YTSnw-kdbuSWDG3LbFL7oYYkBsMTEbOE8ZhRQogy5lPVUiI-EJ0pQenvjVIlFEElo0liY2POGsDWu67qBdp6gwITYMgkxg4YLvvhe2mGpBL7OfULYUIJgQ-ZVGc_wKpjXzbx6An4EeS7GNXAoMMG1KPTv-iNs4jSQuDJBvQKo4MKLrBBdEXMYO4gMZMJDs2Rog_AKyAoR912U1Ad5U6HlkHxsGlxG-3_kb7bFHCtOaF5XRMI6Pqyfzf7t5XByz0spTqhTRA45LH4TOArGXFWm1_GB6uj-K7s8NkL5VmUC-jZeGxGFthSiQHjSGWNvgM-Ors_lUIVhf-EciLdOtd_Q", "kty": "RSA", "q": "4RuJTEJMhsi5jux5wZ_zvuFJiXgA51SujdFE0Gy_f8czCg15Csfqa5Ubew5aVA8HHUoteyVkui3jkp4UQH2zhwUbrY5NF81aB_jw-n7cu5MvJywe9QJ0x7x8Ku0trYruFj6jULLJGR_jbQh_8mNxviwlrm6pBvl9aLXLBP_TKXt9ir73WNcAEh3EJ26FJPr6AY4rWdapZhZigleVmA81967RoYWJeG1pLdDp2L7SPgaxhirvYXwsOgJc8iziEJ1QBBpFYvaBNWTTrgPMi6Mmcc8UqFE1GBHN0qf3ceTUYv-YsjZrzU2pgr5sAaguigZxtuQ-PPL0lFUdRJV7zQsT-w", "d": "LX9UHpMiMTUtzh2VP1wgf93xjaYEm6qTwOZQGl_hfwlO0rfF4u5L1RO_JPviFnkA7JRIqZXSLON17szVRLfbhe-EQkoJA6CIUKrpmgKSL6f0p1mCt1oC-Tafvw529IfWtupWcOcSZsk0B8WJ-hOM6zfpyzuua1hKHZ7HdTIWPK1_LCBmBLfDbPR7fnDP987EgqlIfgt4poxXRUPU5997IUPu52-82RUjUlTYzh8gjHLXme9f6n0cmyL-IRwiA-mxBlp0w5Xuwy281AXQFmnetcuMja9I5_Pwf6wHw2XNLp8CHGXFPyI0VJUw-tatkLD7Zk1WM7oXdFHzg1LY7_J4XtIQHYgREzWxc7M8SGSvy-HTz19vaztOT9OOfSUyBT0cbYzUAptwVEQsUnahxloT3eK8C-oZTjWd1AZD_X4rgQKdqQyuex5p35volI3CpIrizLc6a5ljF0HM832mSW4W5SUcd2oyr3Fd41RBaoIj7wQFKPxPsnF3VBeHVAdgUw8FNerob3mmRBIL12upK_iY_tv7TONBJXRx8dHonKt0ukoxW0VPmjlorGvH_GMX7HtpY9YHvGZXPsgVnMJHxmYz7J6jBGnaczlYgPjOEgsUa2mGH40-ZTF1kcWG8VJOYnnGdAItrPG1GBt3yOcdIb1BiYNC4LJdZQXsvFS-lasEohE", "e": "AQAB", "qi": "GxvAPQ5BUOcVWxj_OJmV803BhlJreMOlXAIHSi4RYWkF2kI7uv3ALxFkPLPoadX-TAahyyv_yIzYIPKriFEB-4wHTSQRg3FZfFKV-uCrIQr3teoRm9IqV9g3U2l-Fo25s4aGMOTuahesoV2vj8fEEd6xiR83nf7sppWino7PaQ-3nMkGrhQbC7TlP016JLoBS3OQPi1NXiRHnVpaz7NuUDDxSFHbH-CayTn_ByiWpi6KbAgM4J63-flYF_F6ejWr2x4MWk2ASWWRUMgag96h9c3fEUVkBIKzZm9oVEP41JfnxodvREgqXPw4JRI8ylPNVzQ8ZReWCfx0UcWELCgI9w", "dp": "ypMqSFbzx13Ef3PFawRRSFJ4KK68-kRV1LoviFSjsYhDX1LnWN7jQoSHjCZISZnJJs1rF1TlXQGMlMvTcLGpnImuR_fYf3OfefG6kboSK-jQq4K_wUELD4pMegebdXHc4_DlohmFplGVl_NC1dg9AQWzMYjbUrFi9k-xZaRrCdGPT5XnVeiecuWk6m-Tq6qi8vp0ZACo4abgD87nMu7lY3QWmyfmhCfLclaAkz2B3Up2lIYptpnC6cAysgSzFTFLbJz4FbMJp3koa85bfhuV8UeKcrOeN1T13QkaEoOxsBItD27_T24I-59qvgrxoKkcJw7b39R7UyJhdGCj0AWypQ", "dq": "iGIAix1X9AlEsxz-n5rjOHCR9yGnmoApyW5SfNyGIUp019BV13xLwKZ0IdgOTgNU0iAQ8h0zq8EFsdzodDI0RMeJf1tJxfP6af4fMgUOgu6nkNogX1z_l8vQhslv9UbI_N0yYUAQqpIxXevaaOZrEUb6BXayHbGmk3wg5oSAUQ-qfhc5ELAiMNer8h_5tu__7FVQWnu94kYJpOKflaMRlWBrTar0IOxY3xNFurXR9xZjE-CLa8qpmPO5kFg1Fs_YnMO16kFjAxB1V2ah1LAiKK3H3DpnKpAO3WQ6fNyg-OHWh5KFObulybrJAS_-Ek3ZM2-RbafdGsl-lADlItNlZQ", "n": "22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8", "alg": "PS256" } ] }, "acr_value": "urn:mace:incommon:iap:silver" }, "mtls": { "cert": "-----BEGIN CERTIFICATE-----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\njfy5bGXkgEKWT0gVj+LTjFrVeMFrUUpMQbKMINlMe6QJ6MNnCQ\u003d\u003d\n-----END CERTIFICATE-----\n", "key": "-----BEGIN RSA PRIVATE KEY-----\nMIIEpQIBAAKCAQEAxJ4VmvH0PtGbIx+dqphHz9RXFHvork+VR11AcjbuGUJx+1xK\nXG2G6omSyTOPVeFcv5W/Tyc4Y820MXSybU6370hRLQp/f5dhk/wSs4CRsqWyWVX9\nDTue6TpRCZ4nx3DCWiGUODr9aoPZX2w5VgUIsh/FFT/o72utj+OpFIrbz01KzUe0\nrXxgzhmhVscuOop+nOx5JNdqH2rkdcq1vA+lE+NKo5b0+h7j8ENQTBXw+Uq0Dla5\nMw9PGcA2Xod7bsfvyrtEEvEMVEgTG0Sktzrmb6gaymiPMPzFlv7qxZAoch02nwsC\nYHzWMoCL5jlo88qZXZIv8UvA18NyqbRYUuw9ewIDAQABAoIBAQC0ml1QKWXoehLd\nzYG/HQgBsJOYfkT6MKH3noG/KBPHYhBfCqRHiFgAggQyCslj4pGWbg//vg//JQma\n0A3BeChehHgEPntlEQGRtF7dQYETrz5G70R1bkmHBIlBo2P4v+vWbLfAevciayA1\nlayJBjC5pZMb9MubeLZB0KYT94T3QfR+QY9Okt0im9RhtjXDctKbAHHglEbEKzvB\nn3lmVkx7I71JD1QSaq7RyMGPGX+TiCBFU2u4RqVix1+6kNr8gf+2dr1uiTFYVnbQ\nQXkFmEodQb7ujB3FzdDH1qmF88Lx1EKYiJ8O/+FG4PW/itR7/tKEx/CM68OVkdbg\nnW9YKmMRAoGBAOv47vzTyJYfT5iLQTIiogNUf8TK5dusi74cwRkktWtI16nBbWG6\nkgB189nXwY9wbODOI7g+0m92kBQ82g1yJdDa6MHMCoxGpEG/Wzmog3NBVm0WBuSA\nTycqi5SdCOdOt6uWMLrnUus6GLvZpTwL3HMBYVIpaX0OiFvzOEloDa2TAoGBANVO\nElk/UQo7JkBPVmjIJhnZVJn7KWzVpnNhG6EzqTE+XqZAQ8ZQaJZ0ELBuIiWYOl/i\npf9ABFMPBohYrXhFslW96qNsrFnmutLStuNYXYsiH5DHBkg2wk0CgkHbtF/j6d0w\n0lH0BlgP9Z7G3TV0UZ12nC/UkEtkeRoYj2P93eF5AoGBAMeQKoWVkmErr8QhmQyO\nb5gDYV8L/SMwJKquZLwf6HIIE6PUGu54u7s6BfWo22C0ws/IZjsOnid4DNegswSG\nEec1C33CUvVZVNbpv3vewPS7QB1XcJLU1JwaBhu0RvBgCUNK7IFU2zJmWr6bjXtf\nyJtWgnja3wTNQpMI+gRSxKaTAoGAOpkcCVCPntPpCjnBbz+s1+UQjMym8LMw6vl+\ncaaTkGel8N4uwEhOsyZnf1CCKPnM75KAL8MSbQ7vqH1UCnp7J3ro/sRYBMqSAGDK\nxWH9ML/LFCbY3vXMIwPRbO5CeyVNlepXnRQAuiiIPXo8QvcVhMCU377xdQTBEB43\nJi0Ty2ECgYEAv2enN3V2MRjCW/HGM03ROLNWTPQ3nMswwoq5uscszRxQ0NDhFAYf\nerPdu02pTyde5oIOey31Vjvfwh9kXQWqeBuh+TRFC2Hoy3s1aJpxp8qTW4t0lRJj\ncUDXkPraq2JbdXA3Cj5UcjW9fJDav+Q2AoA/surcDkx2lC1cUNpJIOY\u003d\n-----END RSA PRIVATE KEY-----\n", "ca": "-----BEGIN CERTIFICATE-----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\ntrijj+gVec5maJpF1GR1r9NM+pT5lw\u003d\u003d\n-----END CERTIFICATE-----\n" }, "mtls2": { "cert": "-----BEGIN CERTIFICATE-----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\nWLM\u003d\n-----END CERTIFICATE-----", "key": "-----BEGIN PRIVATE KEY-----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\nu83fx03d+2/RuA//IL7WCQ\u003d\u003d\n-----END PRIVATE KEY-----", "ca": "-----BEGIN CERTIFICATE-----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\nfP1+3+YMOs/LGA\u003d\u003d\n-----END CERTIFICATE-----" }, "description": "CIBA" }
testName	fapi-ciba-id1-ensure-request-object-exp-is-70-minutes-in-future-fails

2021-05-17 19:18:33

(1) More

SUCCESS

CreateCIBANotificationEndpointUri

Created ciba notification endpoint URI

notification_uri

https://www.certification.openid.net/test/a/fintech/ciba-notification-endpoint

2021-05-17 19:18:33

(4) More

GetDynamicServerConfiguration

HTTP request

request_uri	https://oidc-test.curity.io/dev/oauth/anonymous/.well-known/openid-configuration
request_method	GET
request_headers	{ "accept": "text/plain, application/json, application/cbor, application/+json, /*", "content-length": "0" }
request_body

2021-05-17 19:18:33

(4) More

RESPONSE

GetDynamicServerConfiguration

HTTP response

response_status_code	200 OK
response_status_text	OK
response_headers	{ "date": "Mon, 17 May 2021 19:18:33 GMT", "x-content-type-options": "nosniff", "x-xss-protection": "1; mode\u003dblock", "content-security-policy": "frame-ancestors \u0027none\u0027", "x-frame-options": "DENY", "cache-control": "public, max-age\u003d1200", "content-type": "application/json", "content-length": "5726" }
response_body	{"introspection_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"request_parameter_supported":true,"claims_parameter_supported":true,"introspection_endpoint":"https://oidc-test.curity.io/introspection","backchannel_authentication_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"issuer":"https://oidc-test.curity.io/dev/oauth/anonymous","authorization_endpoint":"https://oidc-test.curity.io/dev/oauth/authorize","introspection_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"service_documentation":"https://localhost/developer-documentation-url","claims_supported":["sub","zoneinfo","birthdate","gender","purpose","amr","iss","preferred_username","locale","client_id","sid","acr","updated_at","azp","auth_time","scope","nickname","custom_auth_time","exp","iat","email","jti","website","address","email_verified","profile","phone_number_verified","dcrm_client","given_name","middle_name","nonce","picture","aud","delegation_id","nbf","name","phone_number","family_name"],"token_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"tls_client_certificate_bound_access_tokens":true,"backchannel_logout_session_supported":true,"response_modes_supported":["fragment","form_post","query"],"token_endpoint":"https://oidc-test.curity.io/dev/oauth/token","backchannel_authentication_request_signing_alg_values_supported":["PS256","PS384","PS512","ES256","ES384","ES512"],"response_types_supported":["code","code id_token","code id_token token","code token","id_token","id_token token","token"],"revocation_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"backchannel_token_delivery_modes_supported":["poll"],"revocation_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"request_uri_parameter_supported":true,"grant_types_supported":["refresh_token","implicit","client_credentials","password","https://curity.se/grant/accesstoken","authorization_code","urn:openid:params:grant-type:ciba"],"backchannel_authentication_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"ui_locales_supported":["sv","en"],"userinfo_endpoint":"https://oidc-test.curity.io/dev/oauth/userinfo","require_request_uri_registration":true,"code_challenge_methods_supported":["S256","plain"],"frontchannel_logout_session_supported":true,"claims_locales_supported":["sv","en"],"request_object_signing_alg_values_supported":["PS256","PS384","PS512","ES256","ES384","ES512","none"],"prefix_scopes_supported":[],"check_session_iframe":"https://oidc-test.curity.io/oauth/session","backchannel_logout_supported":true,"scopes_supported":["address","read","admin_read","phone","openid","profile","urn:se:curity:scopes:admin:api","admin_write","write","email","test_scope_1"],"acr_values_supported":["urn:se:curity:authentication:google:google1","urn:se:curity:authentication:totp:totp","urn:se:curity:authentication:html-form:phpass","urn:se:curity:authentication:sms:sms2fa","urn:se:curity:authentication:sms:sms1","urn:se:curity:authentication:twitter:twitter1","urn:se:curity:authentication:html-form:html2fa","urn:se:curity:authentication:sms:smsScim2","urn:se:curity:authentication:html-form:htmlSql","urn:se:curity:authentication:sms:sms3","urn:se:curity:authentication:email:email2","urn:se:curity:authentication:html-form:htmlLdap","urn:se:curity:authentication:email:email1","urn:se:curity:authentication:bankid:bankid1","urn:se:curity:authentication:test:testAuth-janedoe","urn:mace:incommon:iap:silver","urn:se:curity:authentication:html-form:htmlFormJson","urn:se:curity:authentication:duo:duo1","urn:se:curity:authentication:encap:encap1","loa1-alt","urn:se:curity:authentication:encap:encap2","urn:se:curity:authentication:html-form:htmlFormJsonOAuth","urn:se:curity:authentication:ping-idp-adapter:ping-idp-adapter","windows","urn:se:curity:authentication:html-form:htmlAd","urn:se:curity:authentication:html-form:htmlScimBisnode","urn:se:curity:authentication:pingfederate:ping1","urn:se:curity:authentication:html-form:htmlScimMock","urn:virtual:assertion-sig:saml","urn:se:curity:authentication:netidaccess:NetIdAccess","urn:se:curity:authentication:pingfederate:ping2bo","urn:se:curity:authentication:html-form:htmlOpenLdap","urn:se:curity:authentication:html-form:bcrypt","loa1","urn:se:curity:authentication:html-form:htmlScim2Curity","urn:se:curity:authentication:pingfederate:ping-fs01","urn:se:curity:authentication:sign-in-with-apple:apple1","urn:se:curity:authentication:oidc:oidc1","urn:se:curity:authentication:webauthn:webauthn","urn:se:curity:authentication:facebook:facebook1","urn:se:curity:authentication:html-form:htmlScim2Osiam","urn:se:curity:authentication:username:username"],"userinfo_signing_alg_values_supported":["PS256"],"claim_types_supported":["normal"],"end_session_endpoint":"https://oidc-test.curity.io/oauth/session/logout","revocation_endpoint":"https://oidc-test.curity.io/revoke","backchannel_authentication_endpoint":"https://oidc-test.curity.io/bc-auth","frontchannel_logout_supported":true,"token_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"jwks_uri":"https://oidc-test.curity.io/dev/oauth/anonymous/jwks","subject_types_supported":["public","pairwise"],"id_token_signing_alg_values_supported":["PS256"],"assisted_token_endpoint":"https://oidc-test.curity.io/assisted-token"}

2021-05-17 19:18:33

(1) More

GetDynamicServerConfiguration

Downloaded server configuration

server_config_string

{"introspection_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"request_parameter_supported":true,"claims_parameter_supported":true,"introspection_endpoint":"https://oidc-test.curity.io/introspection","backchannel_authentication_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"issuer":"https://oidc-test.curity.io/dev/oauth/anonymous","authorization_endpoint":"https://oidc-test.curity.io/dev/oauth/authorize","introspection_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"service_documentation":"https://localhost/developer-documentation-url","claims_supported":["sub","zoneinfo","birthdate","gender","purpose","amr","iss","preferred_username","locale","client_id","sid","acr","updated_at","azp","auth_time","scope","nickname","custom_auth_time","exp","iat","email","jti","website","address","email_verified","profile","phone_number_verified","dcrm_client","given_name","middle_name","nonce","picture","aud","delegation_id","nbf","name","phone_number","family_name"],"token_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"tls_client_certificate_bound_access_tokens":true,"backchannel_logout_session_supported":true,"response_modes_supported":["fragment","form_post","query"],"token_endpoint":"https://oidc-test.curity.io/dev/oauth/token","backchannel_authentication_request_signing_alg_values_supported":["PS256","PS384","PS512","ES256","ES384","ES512"],"response_types_supported":["code","code id_token","code id_token token","code token","id_token","id_token token","token"],"revocation_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"backchannel_token_delivery_modes_supported":["poll"],"revocation_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"request_uri_parameter_supported":true,"grant_types_supported":["refresh_token","implicit","client_credentials","password","https://curity.se/grant/accesstoken","authorization_code","urn:openid:params:grant-type:ciba"],"backchannel_authentication_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"ui_locales_supported":["sv","en"],"userinfo_endpoint":"https://oidc-test.curity.io/dev/oauth/userinfo","require_request_uri_registration":true,"code_challenge_methods_supported":["S256","plain"],"frontchannel_logout_session_supported":true,"claims_locales_supported":["sv","en"],"request_object_signing_alg_values_supported":["PS256","PS384","PS512","ES256","ES384","ES512","none"],"prefix_scopes_supported":[],"check_session_iframe":"https://oidc-test.curity.io/oauth/session","backchannel_logout_supported":true,"scopes_supported":["address","read","admin_read","phone","openid","profile","urn:se:curity:scopes:admin:api","admin_write","write","email","test_scope_1"],"acr_values_supported":["urn:se:curity:authentication:google:google1","urn:se:curity:authentication:totp:totp","urn:se:curity:authentication:html-form:phpass","urn:se:curity:authentication:sms:sms2fa","urn:se:curity:authentication:sms:sms1","urn:se:curity:authentication:twitter:twitter1","urn:se:curity:authentication:html-form:html2fa","urn:se:curity:authentication:sms:smsScim2","urn:se:curity:authentication:html-form:htmlSql","urn:se:curity:authentication:sms:sms3","urn:se:curity:authentication:email:email2","urn:se:curity:authentication:html-form:htmlLdap","urn:se:curity:authentication:email:email1","urn:se:curity:authentication:bankid:bankid1","urn:se:curity:authentication:test:testAuth-janedoe","urn:mace:incommon:iap:silver","urn:se:curity:authentication:html-form:htmlFormJson","urn:se:curity:authentication:duo:duo1","urn:se:curity:authentication:encap:encap1","loa1-alt","urn:se:curity:authentication:encap:encap2","urn:se:curity:authentication:html-form:htmlFormJsonOAuth","urn:se:curity:authentication:ping-idp-adapter:ping-idp-adapter","windows","urn:se:curity:authentication:html-form:htmlAd","urn:se:curity:authentication:html-form:htmlScimBisnode","urn:se:curity:authentication:pingfederate:ping1","urn:se:curity:authentication:html-form:htmlScimMock","urn:virtual:assertion-sig:saml","urn:se:curity:authentication:netidaccess:NetIdAccess","urn:se:curity:authentication:pingfederate:ping2bo","urn:se:curity:authentication:html-form:htmlOpenLdap","urn:se:curity:authentication:html-form:bcrypt","loa1","urn:se:curity:authentication:html-form:htmlScim2Curity","urn:se:curity:authentication:pingfederate:ping-fs01","urn:se:curity:authentication:sign-in-with-apple:apple1","urn:se:curity:authentication:oidc:oidc1","urn:se:curity:authentication:webauthn:webauthn","urn:se:curity:authentication:facebook:facebook1","urn:se:curity:authentication:html-form:htmlScim2Osiam","urn:se:curity:authentication:username:username"],"userinfo_signing_alg_values_supported":["PS256"],"claim_types_supported":["normal"],"end_session_endpoint":"https://oidc-test.curity.io/oauth/session/logout","revocation_endpoint":"https://oidc-test.curity.io/revoke","backchannel_authentication_endpoint":"https://oidc-test.curity.io/bc-auth","frontchannel_logout_supported":true,"token_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"jwks_uri":"https://oidc-test.curity.io/dev/oauth/anonymous/jwks","subject_types_supported":["public","pairwise"],"id_token_signing_alg_values_supported":["PS256"],"assisted_token_endpoint":"https://oidc-test.curity.io/assisted-token"}

2021-05-17 19:18:33

(46) More

SUCCESS

GetDynamicServerConfiguration

Successfully parsed server configuration

introspection_endpoint_auth_signing_alg_values_supported	[ "PS384", "ES384", "RS384", "ES256", "RS256", "ES512", "PS256", "PS512", "RS512" ]
request_parameter_supported	true
claims_parameter_supported	true
introspection_endpoint	https://oidc-test.curity.io/introspection
backchannel_authentication_endpoint_auth_methods_supported	[ "client_secret_post", "client_secret_basic", "private_key_jwt", "tls_client_auth" ]
issuer	https://oidc-test.curity.io/dev/oauth/anonymous
authorization_endpoint	https://oidc-test.curity.io/dev/oauth/authorize
introspection_endpoint_auth_methods_supported	[ "client_secret_post", "client_secret_basic", "private_key_jwt", "tls_client_auth" ]
service_documentation	https://localhost/developer-documentation-url
claims_supported	[ "sub", "zoneinfo", "birthdate", "gender", "purpose", "amr", "iss", "preferred_username", "locale", "client_id", "sid", "acr", "updated_at", "azp", "auth_time", "scope", "nickname", "custom_auth_time", "exp", "iat", "email", "jti", "website", "address", "email_verified", "profile", "phone_number_verified", "dcrm_client", "given_name", "middle_name", "nonce", "picture", "aud", "delegation_id", "nbf", "name", "phone_number", "family_name" ]
token_endpoint_auth_methods_supported	[ "client_secret_post", "client_secret_basic", "private_key_jwt", "tls_client_auth" ]
tls_client_certificate_bound_access_tokens	true
backchannel_logout_session_supported	true
response_modes_supported	[ "fragment", "form_post", "query" ]
token_endpoint	https://oidc-test.curity.io/dev/oauth/token
backchannel_authentication_request_signing_alg_values_supported	[ "PS256", "PS384", "PS512", "ES256", "ES384", "ES512" ]
response_types_supported	[ "code", "code id_token", "code id_token token", "code token", "id_token", "id_token token", "token" ]
revocation_endpoint_auth_signing_alg_values_supported	[ "PS384", "ES384", "RS384", "ES256", "RS256", "ES512", "PS256", "PS512", "RS512" ]
backchannel_token_delivery_modes_supported	[ "poll" ]
revocation_endpoint_auth_methods_supported	[ "client_secret_post", "client_secret_basic", "private_key_jwt", "tls_client_auth" ]
request_uri_parameter_supported	true
grant_types_supported	[ "refresh_token", "implicit", "client_credentials", "password", "https://curity.se/grant/accesstoken", "authorization_code", "urn:openid:params:grant-type:ciba" ]
backchannel_authentication_endpoint_auth_signing_alg_values_supported	[ "PS384", "ES384", "RS384", "ES256", "RS256", "ES512", "PS256", "PS512", "RS512" ]
ui_locales_supported	[ "sv", "en" ]
userinfo_endpoint	https://oidc-test.curity.io/dev/oauth/userinfo
require_request_uri_registration	true
code_challenge_methods_supported	[ "S256", "plain" ]
frontchannel_logout_session_supported	true
claims_locales_supported	[ "sv", "en" ]
request_object_signing_alg_values_supported	[ "PS256", "PS384", "PS512", "ES256", "ES384", "ES512", "none" ]
prefix_scopes_supported	[]
check_session_iframe	https://oidc-test.curity.io/oauth/session
backchannel_logout_supported	true
scopes_supported	[ "address", "read", "admin_read", "phone", "openid", "profile", "urn:se:curity:scopes:admin:api", "admin_write", "write", "email", "test_scope_1" ]
acr_values_supported	[ "urn:se:curity:authentication:google:google1", "urn:se:curity:authentication:totp:totp", "urn:se:curity:authentication:html-form:phpass", "urn:se:curity:authentication:sms:sms2fa", "urn:se:curity:authentication:sms:sms1", "urn:se:curity:authentication:twitter:twitter1", "urn:se:curity:authentication:html-form:html2fa", "urn:se:curity:authentication:sms:smsScim2", "urn:se:curity:authentication:html-form:htmlSql", "urn:se:curity:authentication:sms:sms3", "urn:se:curity:authentication:email:email2", "urn:se:curity:authentication:html-form:htmlLdap", "urn:se:curity:authentication:email:email1", "urn:se:curity:authentication:bankid:bankid1", "urn:se:curity:authentication:test:testAuth-janedoe", "urn:mace:incommon:iap:silver", "urn:se:curity:authentication:html-form:htmlFormJson", "urn:se:curity:authentication:duo:duo1", "urn:se:curity:authentication:encap:encap1", "loa1-alt", "urn:se:curity:authentication:encap:encap2", "urn:se:curity:authentication:html-form:htmlFormJsonOAuth", "urn:se:curity:authentication:ping-idp-adapter:ping-idp-adapter", "windows", "urn:se:curity:authentication:html-form:htmlAd", "urn:se:curity:authentication:html-form:htmlScimBisnode", "urn:se:curity:authentication:pingfederate:ping1", "urn:se:curity:authentication:html-form:htmlScimMock", "urn:virtual:assertion-sig:saml", "urn:se:curity:authentication:netidaccess:NetIdAccess", "urn:se:curity:authentication:pingfederate:ping2bo", "urn:se:curity:authentication:html-form:htmlOpenLdap", "urn:se:curity:authentication:html-form:bcrypt", "loa1", "urn:se:curity:authentication:html-form:htmlScim2Curity", "urn:se:curity:authentication:pingfederate:ping-fs01", "urn:se:curity:authentication:sign-in-with-apple:apple1", "urn:se:curity:authentication:oidc:oidc1", "urn:se:curity:authentication:webauthn:webauthn", "urn:se:curity:authentication:facebook:facebook1", "urn:se:curity:authentication:html-form:htmlScim2Osiam", "urn:se:curity:authentication:username:username" ]
userinfo_signing_alg_values_supported	[ "PS256" ]
claim_types_supported	[ "normal" ]
end_session_endpoint	https://oidc-test.curity.io/oauth/session/logout
revocation_endpoint	https://oidc-test.curity.io/revoke
backchannel_authentication_endpoint	https://oidc-test.curity.io/bc-auth
frontchannel_logout_supported	true
token_endpoint_auth_signing_alg_values_supported	[ "PS384", "ES384", "RS384", "ES256", "RS256", "ES512", "PS256", "PS512", "RS512" ]
jwks_uri	https://oidc-test.curity.io/dev/oauth/anonymous/jwks
subject_types_supported	[ "public", "pairwise" ]
id_token_signing_alg_values_supported	[ "PS256" ]
assisted_token_endpoint	https://oidc-test.curity.io/assisted-token

2021-05-17 19:18:33

(1) More

INFO

MTLS-5

AddMTLSEndpointAliasesToEnvironment

The mtls_endpoint_aliases is not present in the server configuration

server

{
  "introspection_endpoint_auth_signing_alg_values_supported": [
    "PS384",
    "ES384",
    "RS384",
    "ES256",
    "RS256",
    "ES512",
    "PS256",
    "PS512",
    "RS512"
  ],
  "request_parameter_supported": true,
  "claims_parameter_supported": true,
  "introspection_endpoint": "https://oidc-test.curity.io/introspection",
  "backchannel_authentication_endpoint_auth_methods_supported": [
    "client_secret_post",
    "client_secret_basic",
    "private_key_jwt",
    "tls_client_auth"
  ],
  "issuer": "https://oidc-test.curity.io/dev/oauth/anonymous",
  "authorization_endpoint": "https://oidc-test.curity.io/dev/oauth/authorize",
  "introspection_endpoint_auth_methods_supported": [
    "client_secret_post",
    "client_secret_basic",
    "private_key_jwt",
    "tls_client_auth"
  ],
  "service_documentation": "https://localhost/developer-documentation-url",
  "claims_supported": [
    "sub",
    "zoneinfo",
    "birthdate",
    "gender",
    "purpose",
    "amr",
    "iss",
    "preferred_username",
    "locale",
    "client_id",
    "sid",
    "acr",
    "updated_at",
    "azp",
    "auth_time",
    "scope",
    "nickname",
    "custom_auth_time",
    "exp",
    "iat",
    "email",
    "jti",
    "website",
    "address",
    "email_verified",
    "profile",
    "phone_number_verified",
    "dcrm_client",
    "given_name",
    "middle_name",
    "nonce",
    "picture",
    "aud",
    "delegation_id",
    "nbf",
    "name",
    "phone_number",
    "family_name"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_post",
    "client_secret_basic",
    "private_key_jwt",
    "tls_client_auth"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "backchannel_logout_session_supported": true,
  "response_modes_supported": [
    "fragment",
    "form_post",
    "query"
  ],
  "token_endpoint": "https://oidc-test.curity.io/dev/oauth/token",
  "backchannel_authentication_request_signing_alg_values_supported": [
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES384",
    "ES512"
  ],
  "response_types_supported": [
    "code",
    "code id_token",
    "code id_token token",
    "code token",
    "id_token",
    "id_token token",
    "token"
  ],
  "revocation_endpoint_auth_signing_alg_values_supported": [
    "PS384",
    "ES384",
    "RS384",
    "ES256",
    "RS256",
    "ES512",
    "PS256",
    "PS512",
    "RS512"
  ],
  "backchannel_token_delivery_modes_supported": [
    "poll"
  ],
  "revocation_endpoint_auth_methods_supported": [
    "client_secret_post",
    "client_secret_basic",
    "private_key_jwt",
    "tls_client_auth"
  ],
  "request_uri_parameter_supported": true,
  "grant_types_supported": [
    "refresh_token",
    "implicit",
    "client_credentials",
    "password",
    "https://curity.se/grant/accesstoken",
    "authorization_code",
    "urn:openid:params:grant-type:ciba"
  ],
  "backchannel_authentication_endpoint_auth_signing_alg_values_supported": [
    "PS384",
    "ES384",
    "RS384",
    "ES256",
    "RS256",
    "ES512",
    "PS256",
    "PS512",
    "RS512"
  ],
  "ui_locales_supported": [
    "sv",
    "en"
  ],
  "userinfo_endpoint": "https://oidc-test.curity.io/dev/oauth/userinfo",
  "require_request_uri_registration": true,
  "code_challenge_methods_supported": [
    "S256",
    "plain"
  ],
  "frontchannel_logout_session_supported": true,
  "claims_locales_supported": [
    "sv",
    "en"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES384",
    "ES512",
    "none"
  ],
  "prefix_scopes_supported": [],
  "check_session_iframe": "https://oidc-test.curity.io/oauth/session",
  "backchannel_logout_supported": true,
  "scopes_supported": [
    "address",
    "read",
    "admin_read",
    "phone",
    "openid",
    "profile",
    "urn:se:curity:scopes:admin:api",
    "admin_write",
    "write",
    "email",
    "test_scope_1"
  ],
  "acr_values_supported": [
    "urn:se:curity:authentication:google:google1",
    "urn:se:curity:authentication:totp:totp",
    "urn:se:curity:authentication:html-form:phpass",
    "urn:se:curity:authentication:sms:sms2fa",
    "urn:se:curity:authentication:sms:sms1",
    "urn:se:curity:authentication:twitter:twitter1",
    "urn:se:curity:authentication:html-form:html2fa",
    "urn:se:curity:authentication:sms:smsScim2",
    "urn:se:curity:authentication:html-form:htmlSql",
    "urn:se:curity:authentication:sms:sms3",
    "urn:se:curity:authentication:email:email2",
    "urn:se:curity:authentication:html-form:htmlLdap",
    "urn:se:curity:authentication:email:email1",
    "urn:se:curity:authentication:bankid:bankid1",
    "urn:se:curity:authentication:test:testAuth-janedoe",
    "urn:mace:incommon:iap:silver",
    "urn:se:curity:authentication:html-form:htmlFormJson",
    "urn:se:curity:authentication:duo:duo1",
    "urn:se:curity:authentication:encap:encap1",
    "loa1-alt",
    "urn:se:curity:authentication:encap:encap2",
    "urn:se:curity:authentication:html-form:htmlFormJsonOAuth",
    "urn:se:curity:authentication:ping-idp-adapter:ping-idp-adapter",
    "windows",
    "urn:se:curity:authentication:html-form:htmlAd",
    "urn:se:curity:authentication:html-form:htmlScimBisnode",
    "urn:se:curity:authentication:pingfederate:ping1",
    "urn:se:curity:authentication:html-form:htmlScimMock",
    "urn:virtual:assertion-sig:saml",
    "urn:se:curity:authentication:netidaccess:NetIdAccess",
    "urn:se:curity:authentication:pingfederate:ping2bo",
    "urn:se:curity:authentication:html-form:htmlOpenLdap",
    "urn:se:curity:authentication:html-form:bcrypt",
    "loa1",
    "urn:se:curity:authentication:html-form:htmlScim2Curity",
    "urn:se:curity:authentication:pingfederate:ping-fs01",
    "urn:se:curity:authentication:sign-in-with-apple:apple1",
    "urn:se:curity:authentication:oidc:oidc1",
    "urn:se:curity:authentication:webauthn:webauthn",
    "urn:se:curity:authentication:facebook:facebook1",
    "urn:se:curity:authentication:html-form:htmlScim2Osiam",
    "urn:se:curity:authentication:username:username"
  ],
  "userinfo_signing_alg_values_supported": [
    "PS256"
  ],
  "claim_types_supported": [
    "normal"
  ],
  "end_session_endpoint": "https://oidc-test.curity.io/oauth/session/logout",
  "revocation_endpoint": "https://oidc-test.curity.io/revoke",
  "backchannel_authentication_endpoint": "https://oidc-test.curity.io/bc-auth",
  "frontchannel_logout_supported": true,
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS384",
    "ES384",
    "RS384",
    "ES256",
    "RS256",
    "ES512",
    "PS256",
    "PS512",
    "RS512"
  ],
  "jwks_uri": "https://oidc-test.curity.io/dev/oauth/anonymous/jwks",
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "assisted_token_endpoint": "https://oidc-test.curity.io/assisted-token"
}

2021-05-17 19:18:33

(1) More

SUCCESS

CheckCIBAServerConfiguration

Found required server configuration keys

required

[
  "backchannel_authentication_endpoint",
  "token_endpoint",
  "issuer"
]

2021-05-17 19:18:33

(4) More

SUCCESS

ExtractTLSTestValuesFromServerConfiguration

Extracted TLS information from authorization server configuration

registration_endpoint
authorization_endpoint	{ "testHost": "oidc-test.curity.io", "testPort": 443 }
token_endpoint	{ "testHost": "oidc-test.curity.io", "testPort": 443 }
userinfo_endpoint	{ "testHost": "oidc-test.curity.io", "testPort": 443 }

2021-05-17 19:18:33

(1) More

FetchServerKeys

Fetching server key

jwks_uri

https://oidc-test.curity.io/dev/oauth/anonymous/jwks

2021-05-17 19:18:33

(4) More

FetchServerKeys

HTTP request

request_uri	https://oidc-test.curity.io/dev/oauth/anonymous/jwks
request_method	GET
request_headers	{ "accept": "text/plain, application/json, application/cbor, application/+json, /*", "content-length": "0" }
request_body

2021-05-17 19:18:34

(4) More

RESPONSE

FetchServerKeys

HTTP response

response_status_code	200 OK
response_status_text	OK
response_headers	{ "date": "Mon, 17 May 2021 19:18:34 GMT", "x-content-type-options": "nosniff", "x-xss-protection": "1; mode\u003dblock", "content-security-policy": "frame-ancestors \u0027none\u0027", "x-frame-options": "DENY", "content-type": "application/json", "content-length": "920" }
response_body	{"keys":[{"kty":"RSA","kid":"1593201964","use":"sig","alg":"PS256","n":"gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw","e":"AQAB","x5t":"sZDjlR6d0NJD4CbNiMbCV_k7h3A"},{"kty":"RSA","kid":"1593201964","use":"sig","alg":"RS256","n":"gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw","e":"AQAB","x5t":"sZDjlR6d0NJD4CbNiMbCV_k7h3A"}]}

2021-05-17 19:18:34

(1) More

FetchServerKeys

Found JWK set string

jwk_string

{"keys":[{"kty":"RSA","kid":"1593201964","use":"sig","alg":"PS256","n":"gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw","e":"AQAB","x5t":"sZDjlR6d0NJD4CbNiMbCV_k7h3A"},{"kty":"RSA","kid":"1593201964","use":"sig","alg":"RS256","n":"gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw","e":"AQAB","x5t":"sZDjlR6d0NJD4CbNiMbCV_k7h3A"}]}

2021-05-17 19:18:34

(1) More

SUCCESS

FetchServerKeys

Found server JWK set

server_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "kid": "1593201964",
      "use": "sig",
      "alg": "PS256",
      "n": "gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw",
      "e": "AQAB",
      "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A"
    },
    {
      "kty": "RSA",
      "kid": "1593201964",
      "use": "sig",
      "alg": "RS256",
      "n": "gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw",
      "e": "AQAB",
      "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A"
    }
  ]
}

2021-05-17 19:18:34

(1) More

SUCCESS

CheckServerKeysIsValid

Server JWKs is valid

server_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "kid": "1593201964",
      "use": "sig",
      "alg": "PS256",
      "n": "gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw",
      "e": "AQAB",
      "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A"
    },
    {
      "kty": "RSA",
      "kid": "1593201964",
      "use": "sig",
      "alg": "RS256",
      "n": "gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw",
      "e": "AQAB",
      "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A"
    }
  ]
}

2021-05-17 19:18:34	SUCCESS RFC7517-1.1	ValidateServerJWKs Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url

2021-05-17 19:18:34	SUCCESS OIDCC-10.1	CheckForKeyIdInServerJWKs All keys contain kids

2021-05-17 19:18:34	SUCCESS RFC7518-6.3.2.1	EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys Jwks does not contain any private or symmetric keys

2021-05-17 19:18:34

(1) More

SUCCESS

FAPI-R-5.2.2-5 FAPI-R-5.2.2-6

FAPIEnsureMinimumServerKeyLength

Validated minimum key lengths for server_jwks

server_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "kid": "1593201964",
      "use": "sig",
      "alg": "PS256",
      "n": "gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw",
      "e": "AQAB",
      "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A"
    },
    {
      "kty": "RSA",
      "kid": "1593201964",
      "use": "sig",
      "alg": "RS256",
      "n": "gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw",
      "e": "AQAB",
      "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A"
    }
  ]
}

Verify First client: static client configuration

2021-05-17 19:18:34

(6) More

SUCCESS

GetStaticClientConfiguration

Found a static client object

client_id	client-one
client_secret	0ne!Secret
scope	openid email address phone profile
jwks	{ "keys": [ { "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q", "kty": "RSA", "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ", "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE", "e": "AQAB", "kid": "10001", "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA", "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ", "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ", "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE", "alg": "PS256" } ] }
hint_type	login_hint
hint_value	larsdoe

2021-05-17 19:18:34	SUCCESS RFC7517-1.1	ValidateClientJWKsPrivatePart Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url

2021-05-17 19:18:34

(2) More

SUCCESS

ExtractJWKsFromStaticClientConfiguration

Extracted client JWK

client_jwks

{
  "keys": [
    {
      "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q",
      "kty": "RSA",
      "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ",
      "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE",
      "e": "AQAB",
      "kid": "10001",
      "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA",
      "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ",
      "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ",
      "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE",
      "alg": "PS256"
    }
  ]
}

public_client_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "kid": "10001",
      "alg": "PS256",
      "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE"
    }
  ]
}

2021-05-17 19:18:34	SUCCESS	ValidateMTLSCertificatesHeader MTLS certificates header is valid

2021-05-17 19:18:34

(3) More

SUCCESS

ExtractMTLSCertificatesFromConfiguration

Mutual TLS authentication credentials loaded

cert

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

key

MIIEpQIBAAKCAQEAxJ4VmvH0PtGbIx+dqphHz9RXFHvork+VR11AcjbuGUJx+1xKXG2G6omSyTOPVeFcv5W/Tyc4Y820MXSybU6370hRLQp/f5dhk/wSs4CRsqWyWVX9DTue6TpRCZ4nx3DCWiGUODr9aoPZX2w5VgUIsh/FFT/o72utj+OpFIrbz01KzUe0rXxgzhmhVscuOop+nOx5JNdqH2rkdcq1vA+lE+NKo5b0+h7j8ENQTBXw+Uq0Dla5Mw9PGcA2Xod7bsfvyrtEEvEMVEgTG0Sktzrmb6gaymiPMPzFlv7qxZAoch02nwsCYHzWMoCL5jlo88qZXZIv8UvA18NyqbRYUuw9ewIDAQABAoIBAQC0ml1QKWXoehLdzYG/HQgBsJOYfkT6MKH3noG/KBPHYhBfCqRHiFgAggQyCslj4pGWbg//vg//JQma0A3BeChehHgEPntlEQGRtF7dQYETrz5G70R1bkmHBIlBo2P4v+vWbLfAevciayA1layJBjC5pZMb9MubeLZB0KYT94T3QfR+QY9Okt0im9RhtjXDctKbAHHglEbEKzvBn3lmVkx7I71JD1QSaq7RyMGPGX+TiCBFU2u4RqVix1+6kNr8gf+2dr1uiTFYVnbQQXkFmEodQb7ujB3FzdDH1qmF88Lx1EKYiJ8O/+FG4PW/itR7/tKEx/CM68OVkdbgnW9YKmMRAoGBAOv47vzTyJYfT5iLQTIiogNUf8TK5dusi74cwRkktWtI16nBbWG6kgB189nXwY9wbODOI7g+0m92kBQ82g1yJdDa6MHMCoxGpEG/Wzmog3NBVm0WBuSATycqi5SdCOdOt6uWMLrnUus6GLvZpTwL3HMBYVIpaX0OiFvzOEloDa2TAoGBANVOElk/UQo7JkBPVmjIJhnZVJn7KWzVpnNhG6EzqTE+XqZAQ8ZQaJZ0ELBuIiWYOl/ipf9ABFMPBohYrXhFslW96qNsrFnmutLStuNYXYsiH5DHBkg2wk0CgkHbtF/j6d0w0lH0BlgP9Z7G3TV0UZ12nC/UkEtkeRoYj2P93eF5AoGBAMeQKoWVkmErr8QhmQyOb5gDYV8L/SMwJKquZLwf6HIIE6PUGu54u7s6BfWo22C0ws/IZjsOnid4DNegswSGEec1C33CUvVZVNbpv3vewPS7QB1XcJLU1JwaBhu0RvBgCUNK7IFU2zJmWr6bjXtfyJtWgnja3wTNQpMI+gRSxKaTAoGAOpkcCVCPntPpCjnBbz+s1+UQjMym8LMw6vl+caaTkGel8N4uwEhOsyZnf1CCKPnM75KAL8MSbQ7vqH1UCnp7J3ro/sRYBMqSAGDKxWH9ML/LFCbY3vXMIwPRbO5CeyVNlepXnRQAuiiIPXo8QvcVhMCU377xdQTBEB43Ji0Ty2ECgYEAv2enN3V2MRjCW/HGM03ROLNWTPQ3nMswwoq5uscszRxQ0NDhFAYferPdu02pTyde5oIOey31Vjvfwh9kXQWqeBuh+TRFC2Hoy3s1aJpxp8qTW4t0lRJjcUDXkPraq2JbdXA3Cj5UcjW9fJDav+Q2AoA/surcDkx2lC1cUNpJIOY=

ca

MIIDQjCCAioCCQDSZMWEy1bkajANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJTRTETMBEGA1UECBMKU29tZS1TdGF0ZTESMBAGA1UEBxMJU3RvY2tob2xtMQ8wDQYDVQQKEwZDdXJpdHkxDTALBgNVBAsTBExhYnMxCzAJBgNVBAMTAmNhMB4XDTE4MTAxMTEyNTQyMFoXDTI4MTAwODEyNTQyMFowYzELMAkGA1UEBhMCU0UxEzARBgNVBAgTClNvbWUtU3RhdGUxEjAQBgNVBAcTCVN0b2NraG9sbTEPMA0GA1UEChMGQ3VyaXR5MQ0wCwYDVQQLEwRMYWJzMQswCQYDVQQDEwJjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANd1cvikCUYy0ERhbjKaRrcyS/fNDU7DEzmS16cPlG8o3D2H+30yANfPSRGG9CqampFS5SsWgnNiwxH+DQ5+W66i/sZhZ2m+mIj4ecYRbcbH8YkIRuKmX9PYNT95Nqe5OGdvRpTsrXSF84Pqkbnn2EPq5tGgsWyUNTpNEzVYI27hS8L9eN3PdCTt9GCTIrGNxt0+lCISbBuf+o/8xseJKIjkrv2Pr9Ow4L9GovxGpBgd0y6ty85vcjWzwgsuioYtpcUnRAszOxjyVATxbzYDYvcHypvCMTysHe0q+kX32/snCkpPMY5TbZHp+G/5TwriLwR2FfTshaiyKbgS+HDckosCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEAyXa8QR6ClNDC+Ei+VK1JpHh/9Wh0WxPrL2h9Uiomwkz2nVCONCvSAqT1YF91Rr0ae/ehMbl9aoAR1/t+qUQGqL1Nj2bKKI8zGXmG1cQ2kv7dejVq1WUESmjGC+P3Tb+tifQC+lIJGElbFNtrLF6mMjF7KVMXMynNLbij0T4+Mb/HbrD/udDzdtXiVizqPVQLPMTXz1EWXlF/GYtRv676V+sUnwHTtre04Km1+6/7OpoeVFdNBaJ5WUW4lQsOtFk46tVfygBkSOqS3+M8T/gA1Xcdd0qDIAL6+QMLqtha6H+BOYAyblJ/euSptrijj+gVec5maJpF1GR1r9NM+pT5lw==

2021-05-17 19:18:34	SUCCESS OIDCC-10.1	CheckForKeyIdInClientJWKs All keys contain kids

2021-05-17 19:18:34

(1) More

SUCCESS

RFC7517-4.5

CheckDistinctKeyIdValueInClientJWKs

Distinct 'kid' value in all keys of client_jwks

see	https://bitbucket.org/openid/connect/issues/1127

2021-05-17 19:18:34	SUCCESS FAPI-RW-8.6	FAPICheckKeyAlgInClientJWKs Found a key with alg PS256 or ES256

2021-05-17 19:18:34

(1) More

SUCCESS

FAPI-R-5.2.2-5 FAPI-R-5.2.2-6

FAPIEnsureMinimumClientKeyLength

Validated minimum key lengths for client_jwks

client_jwks

{
  "keys": [
    {
      "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q",
      "kty": "RSA",
      "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ",
      "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE",
      "e": "AQAB",
      "kid": "10001",
      "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA",
      "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ",
      "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ",
      "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE",
      "alg": "PS256"
    }
  ]
}

2021-05-17 19:18:34	SUCCESS	ValidateMTLSCertificatesAsX509 Mutual TLS authentication cert validated as X.509

2021-05-17 19:18:34

(2) More

SUCCESS

GetResourceEndpointConfiguration

Found a resource endpoint object

resourceUrl	https://oidc-test.curity.io:7777/fapi/rs
institution_id	foobar

2021-05-17 19:18:34

(1) More

SUCCESS

SetProtectedResourceUrlToSingleResourceEndpoint

Set protected resource URL

protected_resource_url

https://oidc-test.curity.io:7777/fapi/rs

2021-05-17 19:18:34

(1) More

SUCCESS

ExtractTLSTestValuesFromResourceConfiguration

Extracted TLS information from resource endpoint

resource_endpoint

{
  "testHost": "oidc-test.curity.io",
  "testPort": 7777
}

2021-05-17 19:18:34

(2) More

SUCCESS

ExtractTLSTestValuesFromOBResourceConfiguration

Extracted TLS information from resource endpoint

accounts_resource_endpoint	{ "testHost": "oidc-test.curity.io", "testPort": 7777 }
accounts_request_endpoint	{ "testHost": "oidc-test.curity.io", "testPort": 7777 }

2021-05-17 19:18:34		fapi-ciba-id1-ensure-request-object-exp-is-70-minutes-in-future-fails Setup Done

Call backchannel authentication endpoint

2021-05-17 19:18:34	SUCCESS	CreateEmptyAuthorizationEndpointRequest Created empty authorization endpoint request

2021-05-17 19:18:34

(1) More

SUCCESS

CIBA-7.1

AddScopeToAuthorizationEndpointRequest

Added scope of 'openid email address phone profile' to authorization endpoint request

scope

openid email address phone profile

2021-05-17 19:18:34

(1) More

SUCCESS

CIBA-7.1

AddHintToAuthorizationEndpointRequest

Added hint to authorization endpoint request

login_hint

larsdoe

2021-05-17 19:18:34

(1) More

SUCCESS

FAPI-CIBA-5.2.2-2

AddBindingMessageToAuthorizationEndpointRequest

Added binding message to authorization endpoint request

binding_message

2021-05-17 19:18:34

(1) More

SUCCESS

ConvertAuthorizationEndpointRequestToRequestObject

Created request object claims

request_object_claims

{
  "scope": "openid email address phone profile",
  "login_hint": "larsdoe",
  "binding_message": "1234"
}

2021-05-17 19:18:34

(1) More

SUCCESS

CIBA-7.1.1

AddIatToRequestObject

Added iat to request object claims

iat	1.621279114E9

2021-05-17 19:18:34

(1) More

SUCCESS

CIBA-7.1.1

AddExpToRequestObject

Added exp to request object claims

exp	1.621279414E9

2021-05-17 19:18:34

(1) More

SUCCESS

CIBA-7.1.1

AddNbfToRequestObject

Added nbf to request object claims

nbf	1.621279114E9

2021-05-17 19:18:34

(1) More

SUCCESS

CIBA-7.1.1

AddJtiToRequestObject

Added jti to request object claims

jti	kAXwyJUM1DuImBcXWSdj

2021-05-17 19:18:34

(1) More

SUCCESS

CIBA-7.1.1

AddAudToRequestObject

Added aud to request object claims

aud	https://oidc-test.curity.io/dev/oauth/anonymous

2021-05-17 19:18:34

(1) More

SUCCESS

CIBA-7.1.1

AddIssToRequestObject

Added iss to request object claims

iss	client-one

2021-05-17 19:18:34

(2) More

SUCCESS

FAPI-CIBA-5.2.2-9

AddExpValueIs70MinutesInFutureToRequestObject

Added invalid exp value to request object which is 70 minutes in the future

iat_is_70_minutes_in_the_future

"May 17, 2021, 8:28:34 PM"

request_object_claims

{
  "scope": "openid email address phone profile",
  "login_hint": "larsdoe",
  "binding_message": "1234",
  "iat": 1621279114,
  "exp": 1621283314,
  "nbf": 1621279114,
  "jti": "kAXwyJUM1DuImBcXWSdj",
  "aud": "https://oidc-test.curity.io/dev/oauth/anonymous",
  "iss": "client-one"
}

2021-05-17 19:18:34

(4) More

SUCCESS

CIBA-7.1.1

SignRequestObject

Signed the request object

claims	{"aud":"https:\/\/oidc-test.curity.io\/dev\/oauth\/anonymous","login_hint":"larsdoe","nbf":1621279114,"scope":"openid email address phone profile","iss":"client-one","binding_message":"1234","exp":1621283314,"iat":1621279114,"jti":"kAXwyJUM1DuImBcXWSdj"}
header	{"kid":"10001","alg":"PS256"}
request_object	eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJhdWQiOiJodHRwczpcL1wvb2lkYy10ZXN0LmN1cml0eS5pb1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibG9naW5faGludCI6ImxhcnNkb2UiLCJuYmYiOjE2MjEyNzkxMTQsInNjb3BlIjoib3BlbmlkIGVtYWlsIGFkZHJlc3MgcGhvbmUgcHJvZmlsZSIsImlzcyI6ImNsaWVudC1vbmUiLCJiaW5kaW5nX21lc3NhZ2UiOiIxMjM0IiwiZXhwIjoxNjIxMjgzMzE0LCJpYXQiOjE2MjEyNzkxMTQsImp0aSI6ImtBWHd5SlVNMUR1SW1CY1hXU2RqIn0.Wn8EQqvq3Pf2jQNgAbdjiS--_ytMcfy_CwKlpHiTP_fCnYZ-PRQxrnCsvVG6GY4ZATAoItZLYirXt7mUFv_ytUVArJOf_1N1L1YrhwDr4vOSmNQxa_WQL2G12xdgjlVNPqt6kS78-tvHEC9OX0NLFHnY3KJC6Ado1IC0l-YWDSMicoXFQzDBRDJDThk7cVH8d_u-IzmybdnQ3Eb0Z0wCbP5r4BL-Ai71A0MNxlo2DSgmji_B-LdqepkhscAIenTdR_besFwgdDKmLbSWtilIo9QU2Cz3bLl5HkVe_VEuwGVx2dhfdsrA9mWbZjjKBwo1L_W2T7_ALQnoXDoDPUdaxUNw5K2k6CQu1DRoSCcauyOoctVWiRJbyflSV3iPTIvNumm0X0sKWS4Vc4scmN4u8X_OllyptdFI2JhYEZ_wAPkG2dcP5s5g9-z4D3_4zZqj4V_nZ9jYj4OlRbG75WoGEkcfK8VGWpFkGWetTG7pOwjlxk56WWYxUUZjmZZ4XSFDEUsuLJN9mY_mBWZ8WSuUWvAqxDR7-sdr17nT61hvixGNnrx_mcC3nnWs6sMxYxdK_U9bd99w0WTaaMZ7u1XRRpQRkEEC-iw7_fXS2PQSTrRGjBDQJ9HJOodRX6Fx_4xsIQMUxbdYaUYiG4_yKMAJdNx6HGEqyNok5bnkZ97_MQc
key	{"p":"_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q","kty":"RSA","q":"rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ","d":"j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE","e":"AQAB","kid":"10001","qi":"Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA","dp":"DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ","alg":"PS256","dq":"lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ","n":"rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE"}

2021-05-17 19:18:34	SUCCESS CIBA-7.1	CreateBackchannelAuthenticationEndpointRequest Created backchannel authentication endpoint request

2021-05-17 19:18:34

(1) More

AddRequestToBackchannelAuthenticationEndpointRequest

request

eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJhdWQiOiJodHRwczpcL1wvb2lkYy10ZXN0LmN1cml0eS5pb1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibG9naW5faGludCI6ImxhcnNkb2UiLCJuYmYiOjE2MjEyNzkxMTQsInNjb3BlIjoib3BlbmlkIGVtYWlsIGFkZHJlc3MgcGhvbmUgcHJvZmlsZSIsImlzcyI6ImNsaWVudC1vbmUiLCJiaW5kaW5nX21lc3NhZ2UiOiIxMjM0IiwiZXhwIjoxNjIxMjgzMzE0LCJpYXQiOjE2MjEyNzkxMTQsImp0aSI6ImtBWHd5SlVNMUR1SW1CY1hXU2RqIn0.Wn8EQqvq3Pf2jQNgAbdjiS--_ytMcfy_CwKlpHiTP_fCnYZ-PRQxrnCsvVG6GY4ZATAoItZLYirXt7mUFv_ytUVArJOf_1N1L1YrhwDr4vOSmNQxa_WQL2G12xdgjlVNPqt6kS78-tvHEC9OX0NLFHnY3KJC6Ado1IC0l-YWDSMicoXFQzDBRDJDThk7cVH8d_u-IzmybdnQ3Eb0Z0wCbP5r4BL-Ai71A0MNxlo2DSgmji_B-LdqepkhscAIenTdR_besFwgdDKmLbSWtilIo9QU2Cz3bLl5HkVe_VEuwGVx2dhfdsrA9mWbZjjKBwo1L_W2T7_ALQnoXDoDPUdaxUNw5K2k6CQu1DRoSCcauyOoctVWiRJbyflSV3iPTIvNumm0X0sKWS4Vc4scmN4u8X_OllyptdFI2JhYEZ_wAPkG2dcP5s5g9-z4D3_4zZqj4V_nZ9jYj4OlRbG75WoGEkcfK8VGWpFkGWetTG7pOwjlxk56WWYxUUZjmZZ4XSFDEUsuLJN9mY_mBWZ8WSuUWvAqxDR7-sdr17nT61hvixGNnrx_mcC3nnWs6sMxYxdK_U9bd99w0WTaaMZ7u1XRRpQRkEEC-iw7_fXS2PQSTrRGjBDQJ9HJOodRX6Fx_4xsIQMUxbdYaUYiG4_yKMAJdNx6HGEqyNok5bnkZ97_MQc

2021-05-17 19:18:34

(6) More

SUCCESS

CreateClientAuthenticationAssertionClaims

Created client assertion claims

iss	client-one
sub	client-one
aud	https://oidc-test.curity.io/dev/oauth/token
jti	0t3yL3bvc1BBMqsTfiKk
iat	1621279114
exp	1621279174

2021-05-17 19:18:34

(6) More

SUCCESS

SetClientAuthenticationAudToBackchannelAuthenticationEndpoint

Add backchannel_authentication_endpoint as aud value to client_assertion_claims

iss	client-one
sub	client-one
aud	https://oidc-test.curity.io/bc-auth
jti	0t3yL3bvc1BBMqsTfiKk
iat	1621279114
exp	1621279174

2021-05-17 19:18:34

(1) More

SUCCESS

SignClientAuthenticationAssertion

Signed the client assertion

client_assertion

eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJzdWIiOiJjbGllbnQtb25lIiwiYXVkIjoiaHR0cHM6XC9cL29pZGMtdGVzdC5jdXJpdHkuaW9cL2JjLWF1dGgiLCJpc3MiOiJjbGllbnQtb25lIiwiZXhwIjoxNjIxMjc5MTc0LCJpYXQiOjE2MjEyNzkxMTQsImp0aSI6IjB0M3lMM2J2YzFCQk1xc1RmaUtrIn0.L_8N6lrI2RslI0PbBqqxXSJeg7bJKBNu-5tANQd4ipJKFX3XLW2Acy_YzQo-3s1hDO_yTumqkEyo97xqRPCcP_XzuP5JzVUpeJjT-uQFieQWA-scMx42qGpaktF2A__jOiV7WLrCyB6HLF5kFpsoC4fYlf5883EvXCfeKJOzY5FWvBOott_g89zkvff5ka7wpsNUe3B2uqhDn3z-ZNir8bpaBqKzHTbmB9gv9cLjTHZeussSU7VSo0QYn5WwAnnnBoZgUnc2L18rnEvuhd_5aBAgEyyBcHDFVb22ejJf7msYy1w5ioeyGr7c-i0EaVsfHCeb75-PuyKD9JJbpaOwQRDVu7MDnn3YaXc52Pf36pTF37Sp-yluVsabQB7TqnN_4-JVlffkXdtTDw0WTo6lnwa1ZcOB3eRwc9SldjwuQA7D3egqBRsOPSpBy_t6GMPP4lEhJ0HB_3GD4bKf14SW1Ueqq51os4XVbocsL01X5Qj2RkVA26e-ufNWd8PD6ezsvls321iji7L0VbyXY87ihORC85y6HGK7sADp68mvue3JqRQPEDB_Ss1AtKHpCmetSg33mG1Ww5nu6MaJMn3YH4hMv60c7JSCmOKuDxxtHp0QT7WaX5QM1ZzqV9r5Zdhg7EptwE-OmMYr1AjIymmwdiEqITK3GvOejPOhqqRW0KI

2021-05-17 19:18:34

(3) More

AddClientAssertionToBackchannelAuthenticationEndpoint

Added client assertion

request	eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJhdWQiOiJodHRwczpcL1wvb2lkYy10ZXN0LmN1cml0eS5pb1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibG9naW5faGludCI6ImxhcnNkb2UiLCJuYmYiOjE2MjEyNzkxMTQsInNjb3BlIjoib3BlbmlkIGVtYWlsIGFkZHJlc3MgcGhvbmUgcHJvZmlsZSIsImlzcyI6ImNsaWVudC1vbmUiLCJiaW5kaW5nX21lc3NhZ2UiOiIxMjM0IiwiZXhwIjoxNjIxMjgzMzE0LCJpYXQiOjE2MjEyNzkxMTQsImp0aSI6ImtBWHd5SlVNMUR1SW1CY1hXU2RqIn0.Wn8EQqvq3Pf2jQNgAbdjiS--_ytMcfy_CwKlpHiTP_fCnYZ-PRQxrnCsvVG6GY4ZATAoItZLYirXt7mUFv_ytUVArJOf_1N1L1YrhwDr4vOSmNQxa_WQL2G12xdgjlVNPqt6kS78-tvHEC9OX0NLFHnY3KJC6Ado1IC0l-YWDSMicoXFQzDBRDJDThk7cVH8d_u-IzmybdnQ3Eb0Z0wCbP5r4BL-Ai71A0MNxlo2DSgmji_B-LdqepkhscAIenTdR_besFwgdDKmLbSWtilIo9QU2Cz3bLl5HkVe_VEuwGVx2dhfdsrA9mWbZjjKBwo1L_W2T7_ALQnoXDoDPUdaxUNw5K2k6CQu1DRoSCcauyOoctVWiRJbyflSV3iPTIvNumm0X0sKWS4Vc4scmN4u8X_OllyptdFI2JhYEZ_wAPkG2dcP5s5g9-z4D3_4zZqj4V_nZ9jYj4OlRbG75WoGEkcfK8VGWpFkGWetTG7pOwjlxk56WWYxUUZjmZZ4XSFDEUsuLJN9mY_mBWZ8WSuUWvAqxDR7-sdr17nT61hvixGNnrx_mcC3nnWs6sMxYxdK_U9bd99w0WTaaMZ7u1XRRpQRkEEC-iw7_fXS2PQSTrRGjBDQJ9HJOodRX6Fx_4xsIQMUxbdYaUYiG4_yKMAJdNx6HGEqyNok5bnkZ97_MQc
client_assertion	eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJzdWIiOiJjbGllbnQtb25lIiwiYXVkIjoiaHR0cHM6XC9cL29pZGMtdGVzdC5jdXJpdHkuaW9cL2JjLWF1dGgiLCJpc3MiOiJjbGllbnQtb25lIiwiZXhwIjoxNjIxMjc5MTc0LCJpYXQiOjE2MjEyNzkxMTQsImp0aSI6IjB0M3lMM2J2YzFCQk1xc1RmaUtrIn0.L_8N6lrI2RslI0PbBqqxXSJeg7bJKBNu-5tANQd4ipJKFX3XLW2Acy_YzQo-3s1hDO_yTumqkEyo97xqRPCcP_XzuP5JzVUpeJjT-uQFieQWA-scMx42qGpaktF2A__jOiV7WLrCyB6HLF5kFpsoC4fYlf5883EvXCfeKJOzY5FWvBOott_g89zkvff5ka7wpsNUe3B2uqhDn3z-ZNir8bpaBqKzHTbmB9gv9cLjTHZeussSU7VSo0QYn5WwAnnnBoZgUnc2L18rnEvuhd_5aBAgEyyBcHDFVb22ejJf7msYy1w5ioeyGr7c-i0EaVsfHCeb75-PuyKD9JJbpaOwQRDVu7MDnn3YaXc52Pf36pTF37Sp-yluVsabQB7TqnN_4-JVlffkXdtTDw0WTo6lnwa1ZcOB3eRwc9SldjwuQA7D3egqBRsOPSpBy_t6GMPP4lEhJ0HB_3GD4bKf14SW1Ueqq51os4XVbocsL01X5Qj2RkVA26e-ufNWd8PD6ezsvls321iji7L0VbyXY87ihORC85y6HGK7sADp68mvue3JqRQPEDB_Ss1AtKHpCmetSg33mG1Ww5nu6MaJMn3YH4hMv60c7JSCmOKuDxxtHp0QT7WaX5QM1ZzqV9r5Zdhg7EptwE-OmMYr1AjIymmwdiEqITK3GvOejPOhqqRW0KI
client_assertion_type	urn:ietf:params:oauth:client-assertion-type:jwt-bearer

2021-05-17 19:18:34

(5) More

CallBackchannelAuthenticationEndpoint

HTTP request

request_uri	https://oidc-test.curity.io/bc-auth
request_method	POST
request_headers	{ "accept": "application/json;charset\u003dUTF-8", "accept-charset": "utf-8", "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8", "content-length": "2099" }
request_body	request=eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJhdWQiOiJodHRwczpcL1wvb2lkYy10ZXN0LmN1cml0eS5pb1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibG9naW5faGludCI6ImxhcnNkb2UiLCJuYmYiOjE2MjEyNzkxMTQsInNjb3BlIjoib3BlbmlkIGVtYWlsIGFkZHJlc3MgcGhvbmUgcHJvZmlsZSIsImlzcyI6ImNsaWVudC1vbmUiLCJiaW5kaW5nX21lc3NhZ2UiOiIxMjM0IiwiZXhwIjoxNjIxMjgzMzE0LCJpYXQiOjE2MjEyNzkxMTQsImp0aSI6ImtBWHd5SlVNMUR1SW1CY1hXU2RqIn0.Wn8EQqvq3Pf2jQNgAbdjiS--_ytMcfy_CwKlpHiTP_fCnYZ-PRQxrnCsvVG6GY4ZATAoItZLYirXt7mUFv_ytUVArJOf_1N1L1YrhwDr4vOSmNQxa_WQL2G12xdgjlVNPqt6kS78-tvHEC9OX0NLFHnY3KJC6Ado1IC0l-YWDSMicoXFQzDBRDJDThk7cVH8d_u-IzmybdnQ3Eb0Z0wCbP5r4BL-Ai71A0MNxlo2DSgmji_B-LdqepkhscAIenTdR_besFwgdDKmLbSWtilIo9QU2Cz3bLl5HkVe_VEuwGVx2dhfdsrA9mWbZjjKBwo1L_W2T7_ALQnoXDoDPUdaxUNw5K2k6CQu1DRoSCcauyOoctVWiRJbyflSV3iPTIvNumm0X0sKWS4Vc4scmN4u8X_OllyptdFI2JhYEZ_wAPkG2dcP5s5g9-z4D3_4zZqj4V_nZ9jYj4OlRbG75WoGEkcfK8VGWpFkGWetTG7pOwjlxk56WWYxUUZjmZZ4XSFDEUsuLJN9mY_mBWZ8WSuUWvAqxDR7-sdr17nT61hvixGNnrx_mcC3nnWs6sMxYxdK_U9bd99w0WTaaMZ7u1XRRpQRkEEC-iw7_fXS2PQSTrRGjBDQJ9HJOodRX6Fx_4xsIQMUxbdYaUYiG4_yKMAJdNx6HGEqyNok5bnkZ97_MQc&client_assertion=eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJzdWIiOiJjbGllbnQtb25lIiwiYXVkIjoiaHR0cHM6XC9cL29pZGMtdGVzdC5jdXJpdHkuaW9cL2JjLWF1dGgiLCJpc3MiOiJjbGllbnQtb25lIiwiZXhwIjoxNjIxMjc5MTc0LCJpYXQiOjE2MjEyNzkxMTQsImp0aSI6IjB0M3lMM2J2YzFCQk1xc1RmaUtrIn0.L_8N6lrI2RslI0PbBqqxXSJeg7bJKBNu-5tANQd4ipJKFX3XLW2Acy_YzQo-3s1hDO_yTumqkEyo97xqRPCcP_XzuP5JzVUpeJjT-uQFieQWA-scMx42qGpaktF2A__jOiV7WLrCyB6HLF5kFpsoC4fYlf5883EvXCfeKJOzY5FWvBOott_g89zkvff5ka7wpsNUe3B2uqhDn3z-ZNir8bpaBqKzHTbmB9gv9cLjTHZeussSU7VSo0QYn5WwAnnnBoZgUnc2L18rnEvuhd_5aBAgEyyBcHDFVb22ejJf7msYy1w5ioeyGr7c-i0EaVsfHCeb75-PuyKD9JJbpaOwQRDVu7MDnn3YaXc52Pf36pTF37Sp-yluVsabQB7TqnN_4-JVlffkXdtTDw0WTo6lnwa1ZcOB3eRwc9SldjwuQA7D3egqBRsOPSpBy_t6GMPP4lEhJ0HB_3GD4bKf14SW1Ueqq51os4XVbocsL01X5Qj2RkVA26e-ufNWd8PD6ezsvls321iji7L0VbyXY87ihORC85y6HGK7sADp68mvue3JqRQPEDB_Ss1AtKHpCmetSg33mG1Ww5nu6MaJMn3YH4hMv60c7JSCmOKuDxxtHp0QT7WaX5QM1ZzqV9r5Zdhg7EptwE-OmMYr1AjIymmwdiEqITK3GvOejPOhqqRW0KI&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls	{ "cert": "MIIDUTCCAjkCCQCjBUJdz/MY8DANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJTRTETMBEGA1UECBMKU29tZS1TdGF0ZTESMBAGA1UEBxMJU3RvY2tob2xtMQ8wDQYDVQQKEwZDdXJpdHkxDTALBgNVBAsTBExhYnMxCzAJBgNVBAMTAmNhMB4XDTE4MTAxMjEwMTYyNVoXDTI4MTAwOTEwMTYyNVowcjELMAkGA1UEBhMCU0UxEzARBgNVBAgTClNvbWUtU3RhdGUxEjAQBgNVBAcTCVN0b2NraG9sbTEPMA0GA1UEChMGQ3VyaXR5MQ0wCwYDVQQLEwRMYWJzMRowGAYDVQQDFBFtdXR1YWxfdGxzX2NsaWVudDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMSeFZrx9D7RmyMfnaqYR8/UVxR76K5PlUddQHI27hlCcftcSlxthuqJkskzj1XhXL+Vv08nOGPNtDF0sm1Ot+9IUS0Kf3+XYZP8ErOAkbKlsllV/Q07nuk6UQmeJ8dwwlohlDg6/WqD2V9sOVYFCLIfxRU/6O9rrY/jqRSK289NSs1HtK18YM4ZoVbHLjqKfpzseSTXah9q5HXKtbwPpRPjSqOW9Poe4/BDUEwV8PlKtA5WuTMPTxnANl6He27H78q7RBLxDFRIExtEpLc65m+oGspojzD8xZb+6sWQKHIdNp8LAmB81jKAi+Y5aPPKmV2SL/FLwNfDcqm0WFLsPXsCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEACeGDaWeGhYXTocm8N1iU+TGbi16Cije8kcE+Qmr4nF1PIqnPhyOBkyeP4X1+qb8BNSH10qMtRhUVYuFd7HNOPW4DgmC5OiNpuaROBBmQ4ZyTxcmUper+ARDJckx+VzoqBAHaUSvBPMJk1eciyzQc/e4pwk4jzwAEtUREyYZg/hwKqGpwnGC7RGcyR28bV7s6K2KqB1MHMTR7uEtJadDQq+k/Ri3bu4b3PZFg9QQ5q00GMYQebn0IojWjktbNmhOr/8xr3o+UGj6AjoWKYc6XpyIg5nMuU3zbto2kjfy5bGXkgEKWT0gVj+LTjFrVeMFrUUpMQbKMINlMe6QJ6MNnCQ\u003d\u003d", "key": "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\u003d", "ca": "MIIDQjCCAioCCQDSZMWEy1bkajANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJTRTETMBEGA1UECBMKU29tZS1TdGF0ZTESMBAGA1UEBxMJU3RvY2tob2xtMQ8wDQYDVQQKEwZDdXJpdHkxDTALBgNVBAsTBExhYnMxCzAJBgNVBAMTAmNhMB4XDTE4MTAxMTEyNTQyMFoXDTI4MTAwODEyNTQyMFowYzELMAkGA1UEBhMCU0UxEzARBgNVBAgTClNvbWUtU3RhdGUxEjAQBgNVBAcTCVN0b2NraG9sbTEPMA0GA1UEChMGQ3VyaXR5MQ0wCwYDVQQLEwRMYWJzMQswCQYDVQQDEwJjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANd1cvikCUYy0ERhbjKaRrcyS/fNDU7DEzmS16cPlG8o3D2H+30yANfPSRGG9CqampFS5SsWgnNiwxH+DQ5+W66i/sZhZ2m+mIj4ecYRbcbH8YkIRuKmX9PYNT95Nqe5OGdvRpTsrXSF84Pqkbnn2EPq5tGgsWyUNTpNEzVYI27hS8L9eN3PdCTt9GCTIrGNxt0+lCISbBuf+o/8xseJKIjkrv2Pr9Ow4L9GovxGpBgd0y6ty85vcjWzwgsuioYtpcUnRAszOxjyVATxbzYDYvcHypvCMTysHe0q+kX32/snCkpPMY5TbZHp+G/5TwriLwR2FfTshaiyKbgS+HDckosCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEAyXa8QR6ClNDC+Ei+VK1JpHh/9Wh0WxPrL2h9Uiomwkz2nVCONCvSAqT1YF91Rr0ae/ehMbl9aoAR1/t+qUQGqL1Nj2bKKI8zGXmG1cQ2kv7dejVq1WUESmjGC+P3Tb+tifQC+lIJGElbFNtrLF6mMjF7KVMXMynNLbij0T4+Mb/HbrD/udDzdtXiVizqPVQLPMTXz1EWXlF/GYtRv676V+sUnwHTtre04Km1+6/7OpoeVFdNBaJ5WUW4lQsOtFk46tVfygBkSOqS3+M8T/gA1Xcdd0qDIAL6+QMLqtha6H+BOYAyblJ/euSptrijj+gVec5maJpF1GR1r9NM+pT5lw\u003d\u003d" }

2021-05-17 19:18:34

(4) More

RESPONSE

CallBackchannelAuthenticationEndpoint

HTTP response

response_status_code	400 BAD_REQUEST
response_status_text	Bad Request
response_headers	{ "date": "Mon, 17 May 2021 19:18:34 GMT", "x-content-type-options": "nosniff", "x-xss-protection": "1; mode\u003dblock", "content-security-policy": "frame-ancestors \u0027none\u0027", "x-frame-options": "DENY", "content-type": "application/json", "content-length": "88" }
response_body	{"error":"invalid_request","error_description":"token lifetime exceeds 60-minute limit"}

2021-05-17 19:18:34

(1) More

CallBackchannelAuthenticationEndpoint

Backchannel Authentication endpoint response

backchannel_authentication_endpoint_response

{"error":"invalid_request","error_description":"token lifetime exceeds 60-minute limit"}

2021-05-17 19:18:34

(2) More

SUCCESS

CallBackchannelAuthenticationEndpoint

Parsed backchannel authentication endpoint response

error	invalid_request
error_description	token lifetime exceeds 60-minute limit

2021-05-17 19:18:34

(2) More

SUCCESS

CIBA-13

ValidateErrorResponseFromBackchannelAuthenticationEndpoint

error response includes only expected parameters

error	invalid_request
error_description	token lifetime exceeds 60-minute limit

2021-05-17 19:18:34	SUCCESS CIBA-13	ValidateErrorUriFromBackchannelAuthenticationEndpoint backchannel_authentication_endpoint_response did not include optional 'error_uri' field

2021-05-17 19:18:34

(1) More

SUCCESS

RFC6749-5.2

CheckErrorDescriptionFromBackchannelAuthenticationEndpointContainsCRLFTAB

backchannel_authentication_endpoint_response 'error_description' field does not include CR/LF/TAB

error_description

token lifetime exceeds 60-minute limit

2021-05-17 19:18:34

(1) More

SUCCESS

CIBA-13

ValidateErrorDescriptionFromBackchannelAuthenticationEndpoint

backchannel_authentication_endpoint_response error returned valid 'error_description' field

error_description

token lifetime exceeds 60-minute limit

2021-05-17 19:18:34	SUCCESS CIBA-13	CheckBackchannelAuthenticationEndpointHttpStatus400 Backchannel authentication endpoint http status code was 400

2021-05-17 19:18:34

(1) More

SUCCESS

CIBA-13

CheckErrorFromBackchannelAuthenticationEndpointErrorInvalidRequest

Token Endpoint response error returned expected 'error' of 'invalid_request'

error

invalid_request

2021-05-17 19:18:34

(1) More

FINISHED

fapi-ciba-id1-ensure-request-object-exp-is-70-minutes-in-future-fails

Test has run to completion

testmodule_result

PASSED

Unregister dynamically registered client

2021-05-17 19:18:34

(1) More

INFO

UnregisterDynamicallyRegisteredClient

Skipped evaluation due to missing required string: registration_client_uri

expected

registration_client_uri

2021-05-17 19:18:37

(2) More

TEST-RUNNER

Alias has now been claimed by another test

alias	fintech
new_test_id	g77GUGyNkuocdOQ

Test Summary

Test Results