Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-06-14 18:19:02 INFO
TEST-RUNNER
Test instance CmbsNGPWcDoGovU created
baseUrl
https://www.certification.openid.net/test/a/ForgeRockAM
variant
{
  "client_auth_type": "client_secret_basic",
  "response_type": "id_token",
  "server_metadata": "discovery",
  "response_mode": "default",
  "client_registration": "static_client"
}
alias
ForgeRockAM
description
OP Implicit Conformance for ForgeRock Identity Platform
planId
Td2oBhuaVmMWz
config
{
  "alias": "ForgeRockAM",
  "server": {
    "discoveryUrl": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/.well-known/openid-configuration",
    "login_hint": "e8a0914a-be03-11eb-8529-0242ac130003"
  },
  "client": {
    "client_id": "implicitClient1",
    "scope": "openid test",
    "jwks": {
      "keys": [
        {
          "p": "3VzCiRV5-lxEkAMXWrUCWTIh6u2V7Qe6zKAxp-HTE-w5_PZO5yTEls5Ou3aSRk-B3zjYqWyut9kzFUlTolRSmZoCv_zUTHHs3k4jiAvSTLKXOXPqOV621OMrbCxZQuVgA5w-e9-o5oDC6Zlo2tF9ElPCxHh6l2TbbSM6YSdcmN0",
          "kty": "RSA",
          "q": "quzG4ij7S43qxK1VHBe3oA01ARXileIvQTbOyF7Gm17DOne9S-eewAgOAYDmZfwdVjlVh5MGrckXFJKFeyW403sbQN98EzOKoUmlaKpgN5ke2YlfigmYDI8LBcqbOqyjPTHfmXHLTX1XWwFzLsMNaPqpFMfSb1yDi4Ggnzx1H6s",
          "d": "hkq4xawZl39zontdf6muqy-AHbwcO8yUcNPyRQIGLTl12xxiHs_MSxn1I0p30AL6zXKsSKeimimBa4tO-Mv7l2PRAVrZvnfwM01UfYOcRAtBZICq_4bm-iBfZoywnomjNn9NUMKhMEEZ6bj5H--p0AM9xPO6zQLFBVLHD443juUbWrB3CNFhqbIGzJlWjEnmA9V6oGhEZWQN6LeXeDtYt5Q1XXCpps8TmC1bxzYQmTJTY9gJTgPei7rZuNg4Tm7VRH9KVzt4gvUTAdVq62tJLkXLO8HFCn9gdxhS5FEDgH8x6ZMY8t2ul7mV1NZ5n3kSpovBAYdM7KrEc7V4CUv2oQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "itssCibaClient1",
          "x5c": [
            "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\u003d\u003d"
          ],
          "qi": "nd7bietAFh-d2vZj1zw8A2Ka9hvmZpUiuMa_nQnEtcGeo53_AF-hpvaM7_GFkA_LbTSFIy87zmYw66YrZyc6gGHr5NShqX_yJhPFyaGohJYAJiRyOGIHx2dyYsUMXDbUMKrIV7DsrMKgBy_jdMSO3oj1kyBzNi7bNQfeTYaSRys",
          "dp": "l9YdldwGXAVX_hQwu8Y3AymQ_EzVLs3DgsJK7SXIG_1H1Uy52HBu7CY8-Pce5F167rtWWfgza-Xu1SYD2O_P7I4oXro0gO8QE3gzhQjeyj8h3YW13n4qGKJt0XgmDe25yyAr99n1R46Ao6zXsGhLSvvrN8qQBDJpFFY6oBNYv30",
          "alg": "PS256",
          "dq": "E9ZDBsBm2c_wrT7In-gIwaSGwEd_8pE7lr_7o7mMJ0AKPGDlMUgCXpsQtQ_2rWNjLDyfNorTvZuW-CZBI5evKawh75eAWOIkdq-LaOhNHmbA89JDqkuOv_Zh-xwWg-rBTzrYjoBsbePcHY2_hm_QwJxGv0ipnY8JHUnAEHr9xN0",
          "n": "k8xWq6xsWgJrwoCGPyQWcd2NkISXXFR4BLajF80CfX8Td_QFACm7OkU7pE7gCvuyIywvPC-3XvU7voC1DzJrxBX6fCxYXBwyMUYS2_lwTpWqMJr4WTjch1TV4cCTqRmc2OOxuR3ybWmCESyaHcmHqNZBWK_zWMYKUXC9cYjt-7FN9PKmYyOwECK1_yGfWvm2cpUCxbJ7tzRfggqryO1DLPxX9Hqp-aFOt7A1V7WUyPXhVNvB-MQwK1Crf-zuHNH9TeJhDMNzFqi48AVAKWviy65XpLKT4NaSTXe_a03gKakWKW8JZHeQCGL_WVfgv2NnX9EmS7QK0EL2pIUSKl3enw"
        }
      ]
    },
    "acr_value": "poll",
    "hint_type": "login_hint",
    "hint_value": "demo",
    "client_secret": "Passw0rd",
    "redirect_uri": "https://www.certification.openid.net/test/a/ForgeRockAM/callback"
  },
  "resource": {
    "resourceUrl": "https://ec2-18-211-177-234.compute-1.amazonaws.com:38180/openig/protectedResource",
    "institution_id": "0015800001041REAAY"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----\nMIICsjCCAZqgAwIBAgIGAXj7G/7oMA0GCSqGSIb3DQEBCwUAMBoxGDAWBgNVBAMM\nD2l0c3NDaWJhQ2xpZW50MTAeFw0yMTA0MjIxOTQzMzlaFw0yMjAyMTYxOTQzMzla\nMBoxGDAWBgNVBAMMD2l0c3NDaWJhQ2xpZW50MTCCASIwDQYJKoZIhvcNAQEBBQAD\nggEPADCCAQoCggEBAJPMVqusbFoCa8KAhj8kFnHdjZCEl1xUeAS2oxfNAn1/E3f0\nBQApuzpFO6RO4Ar7siMsLzwvt171O76AtQ8ya8QV+nwsWFwcMjFGEtv5cE6VqjCa\n+Fk43IdU1eHAk6kZnNjjsbkd8m1pghEsmh3Jh6jWQViv81jGClFwvXGI7fuxTfTy\npmMjsBAitf8hn1r5tnKVAsWye7c0X4IKq8jtQyz8V/R6qfmhTrewNVe1lMj14VTb\nwfjEMCtQq3/s7hzR/U3iYQzDcxaouPAFQClr4suuV6Syk+DWkk13v2tN4CmpFilv\nCWR3kAhi/1lX4L9jZ1/RJku0CtBC9qSFEipd3p8CAwEAATANBgkqhkiG9w0BAQsF\nAAOCAQEAEh4LQqoxyRqHU25oKFRvY0KfGU1TbKsiuUfnDB9QarL0Vs9+AolhQma2\nIC960vr/pOT12824sGSQOjQ9Ab4AMoy4Ef0qeEVQyeUdpK2dkD7TGYLvj8bF47LG\nIND1AM59LHvNOKqoxqpwwRBnP8PyzcNaRQ616Jizl6D9J2KoiwJCcr+MgxWx2I4r\nRU7yfp5jxGWtm0WdpvVluhhZHaw+E+r4O/J4w2T+n4Smx3fPWc1r4nPlM0OK2DYK\nAl9HA0GTrPqRHmlpphn7ujorJnhwW/gKuuY1VciaDwjALNNejIOPyZVBuUeksINd\nCF7A+SyTVce3hWc6S33NlDIWG0gKVw\u003d\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----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\nxI7eiPWTIHM2Lts1B95NhpJHKw\u003d\u003d\n-----END PRIVATE KEY-----"
  },
  "description": "OP Implicit Conformance for ForgeRock Identity Platform",
  "client2": {
    "client_id": "itssCibaClient2_jwt",
    "scope": "openid test",
    "jwks": {
      "keys": [
        {
          "p": "_-0wOGxFMnjxBs702FJLkEGmz-To8hIwExXE79iSU2Gh0B_abw3-Nng9ttF1xBtGmsorHL1nj-CHAohgKp0fBSr4ARFnn2Xe8MVacku3_weoU84U7nTcoapC3Gez3AxMoA-3nOTiBb9_mH-1sMO50nNRmspk3Roml16l2eyY0ic",
          "kty": "RSA",
          "q": "sD-grUUHskBE3DXwcKMGfjMpjQXd4mUL-1NFeVwlxdpZEY28O9TWb-0pD6DLjmBFwcH9A2k9lfoIKg8CSptROfvNn8rgH7hNObsUL9UnKst6vVZdmAAbkEII68U7-xuNk9lbRp4AUBIjL2vHJf21WQrqKx8yIxJVKO7kFlpu6qU",
          "d": "QVFX_UOanD4BJdkaoyDITamSGSHVksjzoRG-UuOccq7lE3J6oMjvaHu5E7lp0dQ_LjY8YlYMxOjG8IqturzyIYhlNCKYOrhMusB6i9p98prDQLWW1XMpPoJ2nMvhybBCtJ_tzPevIP_waOoB9dv9EUKm0o-pzWq0lvdZHyzacJgf5853pd2NwEwOhTwZoTY6G939I7EfyXQdcsxxsthF6o7fKaqmHyUqpLzDQOorF53Gqd6x3m8miFN01UdcaoQYEwBGsEDaCxXwk_wg4nx16WqWHCxyXDJ-eHjg9V8gj5KMf5AFPvZr_8WSqOcstqOqIXJR6UkKko99MM_1q-mjaQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "itssCibaClient4",
          "x5c": [
            "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\u003d\u003d"
          ],
          "qi": "nk7dK1j2CyrqK4RWBMmEUdDh8LtvYldsACPDjTWvG9UZ7eoUm-WqC0awZM6CVWFPjAVijspowOZpREDE_ewQ5XxErRWAGxJClpwpUH42BzL3iM12vfrk7mLqUKi0k9-QCS6LTeg3oEZNX6j2CHZhHXqcKiKBhSwk9bYFq-JMNug",
          "dp": "0Bzjwm4g0wtQDJZMuoApXFRWvuXJm9e4ajygmd2GF_HjsKfGa9p4J3kdzkWEO4Vmo8bUyhknVvNhNmkJsn10VTJ82_l4R0GCyk3h3-G87NEgS43grYwwQfJ_TlWyB7WkteAyEo55Ue1IaA0qBWUT_ZOy_2moHbf_O8ZGnfDs0K8",
          "alg": "PS256",
          "dq": "rUYwwoheM6mpyVGiTCqKpKHKFOISrZQoPnM0l0a3wBeVf4N37t6l364qszmjRhtyGTaNd8AMkxkY07ijyRN_vODI3HNI-wZnrf01sHz_n7witGhnZZudfareOGVVPd9txlBnwzptFktumh180eXnV146sCBgW0iXvsF2Ll_EMh0",
          "n": "sDKtJx7BsTWuKr3Hdcnlc3mrf94ZURbBCm-KM4wK0HBdmDRUCVo15uQwFfGJyUq1XsaGsRzqQDrLsmvnO0dQZJfZGjmOyBsjTMwDSoTkdPhGVyatU3GQ71vX0xiME4lQUBwuSeGMdPPYLbbsbl2UYwELRujajUQvmnagzWkwM5-dGiM33WEe6HUAnEoU-KYVQ6i-TEz-c6wIlRW2RxXIJi_cARU6GtP-lJoEaXClBI-5ztxUQi3LEhm34Q1Fum4ac5oeAVWl7vSUOwq9Yko8S4ooTO0pg_kOOQqwHzKE0LNlLDuEl6ugPqt1Im_n4GLGmeCOiRx5JYTc-kafMVkZIw"
        }
      ]
    },
    "acr_value": "poll"
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\nPikXXeKft94i6Yvschh5rBWxrO9Wig\u003d\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----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\ndmEdepwqIoGFLCT1tgWr4kw26A\u003d\u003d\n-----END PRIVATE KEY-----"
  }
}
testName
oidcc-max-age-10000
2021-06-14 18:19:02 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/ForgeRockAM/callback
2021-06-14 18:19:02
GetDynamicServerConfiguration
HTTP request
request_uri
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-06-14 18:19:02 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "server": "nginx/1.19.2",
  "date": "Mon, 14 Jun 2021 18:19:02 GMT",
  "content-type": "application/json; charset\u003dUTF-8",
  "transfer-encoding": "chunked",
  "connection": "keep-alive",
  "vary": "Accept-Encoding",
  "strict-transport-security": "max-age\u003d15724800; includeSubDomains"
}
response_body
{"request_parameter_supported":true,"introspection_signing_alg_values_supported":["ES384","PS384","ES256","PS256","PS512","EdDSA","HS512","RS384","RS256","RS512","HS256","ES512","HS384"],"introspection_encryption_alg_values_supported":["RSA-OAEP-256","ECDH-ES+A256KW","A128KW","A192KW","RSA-OAEP","ECDH-ES+A192KW","A256KW","ECDH-ES","ECDH-ES+A128KW","dir"],"claims_parameter_supported":true,"introspection_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/introspect","check_session_iframe":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/connect/checkSession","scopes_supported":["address","updated_at","test","phone","openid","profile","offline_access","email"],"backchannel_logout_supported":true,"issuer":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid","id_token_encryption_enc_values_supported":["A256GCM","A128GCM","A256CBC-HS512","A128CBC-HS256","A192CBC-HS384","A192GCM"],"acr_values_supported":["default"],"userinfo_encryption_enc_values_supported":["A256GCM","A128CBC-HS256","A192CBC-HS384","A192GCM","A128GCM","A256CBC-HS512"],"authorization_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/authorize","request_object_encryption_enc_values_supported":["A128GCM","A256GCM","A192CBC-HS384","A256CBC-HS512","A128CBC-HS256","A192GCM"],"introspection_encryption_enc_values_supported":["A128CBC-HS256","A192CBC-HS384","A256GCM","A256CBC-HS512","A128GCM","A192GCM"],"rcs_request_encryption_alg_values_supported":["dir","A192KW","RSA-OAEP-256","ECDH-ES+A256KW","RSA-OAEP","ECDH-ES","A256KW","A128KW","ECDH-ES+A128KW","ECDH-ES+A192KW"],"claims_supported":["website","zoneinfo","email_verified","birthdate","gender","phone_number_verified","preferred_username","given_name","middle_name","locale","picture","updated_at","name","nickname","phone_number","family_name","email"],"userinfo_signing_alg_values_supported":["ES256","HS512","ES512","HS384","RS256","ES384","HS256"],"rcs_request_signing_alg_values_supported":["RS512","PS384","PS256","HS256","HS384","ES512","RS256","RS384","HS512","ES384","ES256","PS512"],"token_endpoint_auth_methods_supported":["client_secret_post","private_key_jwt","self_signed_tls_client_auth","tls_client_auth","none","client_secret_basic"],"tls_client_certificate_bound_access_tokens":true,"backchannel_logout_session_supported":true,"token_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/access_token","response_types_supported":["code token id_token","code","code id_token","device_code","id_token","code token","token","token id_token"],"revocation_endpoint_auth_methods_supported":["client_secret_post","private_key_jwt","self_signed_tls_client_auth","tls_client_auth","none","client_secret_basic"],"request_uri_parameter_supported":true,"rcs_response_encryption_enc_values_supported":["A256CBC-HS512","A192CBC-HS384","A256GCM","A128GCM","A192GCM","A128CBC-HS256"],"userinfo_encryption_alg_values_supported":["RSA-OAEP","dir","A256KW","ECDH-ES+A256KW","ECDH-ES","RSA-OAEP-256","A128KW","ECDH-ES+A192KW","A192KW","ECDH-ES+A128KW"],"grant_types_supported":["implicit","urn:ietf:params:oauth:grant-type:saml2-bearer","refresh_token","password","client_credentials","urn:ietf:params:oauth:grant-type:device_code","authorization_code","urn:openid:params:grant-type:ciba","urn:ietf:params:oauth:grant-type:uma-ticket","idm_delegation","urn:ietf:params:oauth:grant-type:jwt-bearer"],"end_session_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/connect/endSession","rcs_request_encryption_enc_values_supported":["A256GCM","A256CBC-HS512","A192GCM","A128CBC-HS256","A128GCM","A192CBC-HS384"],"revocation_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/token/revoke","version":"3.0","rcs_response_encryption_alg_values_supported":["ECDH-ES+A256KW","dir","A256KW","ECDH-ES+A192KW","RSA-OAEP-256","ECDH-ES","ECDH-ES+A128KW","A128KW","A192KW","RSA-OAEP"],"userinfo_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/userinfo","token_endpoint_auth_signing_alg_values_supported":["RS512","RS384","RS256","ES512","HS256","HS384","PS512","ES384","PS256","ES256","HS512","PS384"],"require_request_uri_registration":true,"id_token_encryption_alg_values_supported":["A128KW","A192KW","ECDH-ES+A256KW","RSA-OAEP-256","RSA-OAEP","A256KW","ECDH-ES+A128KW","ECDH-ES+A192KW","ECDH-ES","dir"],"jwks_uri":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/connect/jwk_uri","subject_types_supported":["public","pairwise"],"id_token_signing_alg_values_supported":["RS384","RS256","PS512","ES512","HS384","HS256","PS256","ES256","PS384","ES384","RS512","HS512"],"registration_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/register","request_object_signing_alg_values_supported":["RS256","ES512","PS512","RS384","HS512","ES256","ES384","HS256","HS384","PS384","RS512","PS256"],"request_object_encryption_alg_values_supported":["RSA-OAEP-256","ECDH-ES","ECDH-ES+A192KW","ECDH-ES+A128KW","A256KW","RSA-OAEP","dir","A128KW","ECDH-ES+A256KW","A192KW"],"rcs_response_signing_alg_values_supported":["PS256","ES384","RS512","ES256","HS512","PS384","RS256","ES512","PS512","HS384","HS256","RS384"],"backchannel_authentication_endpoint":"https://frfapi.catalyst.forgerock.org/ig/oauth2/realms/root/realms/ciba-poll/bc-authorize","backchannel_authentication_request_signing_alg_values_supported":["RS256","RS384","RS512","ES256","ES384","ES512","PS256","PS384","PS512"],"backchannel_token_delivery_modes_supported":["poll","ping"]}
2021-06-14 18:19:02
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{"request_parameter_supported":true,"introspection_signing_alg_values_supported":["ES384","PS384","ES256","PS256","PS512","EdDSA","HS512","RS384","RS256","RS512","HS256","ES512","HS384"],"introspection_encryption_alg_values_supported":["RSA-OAEP-256","ECDH-ES+A256KW","A128KW","A192KW","RSA-OAEP","ECDH-ES+A192KW","A256KW","ECDH-ES","ECDH-ES+A128KW","dir"],"claims_parameter_supported":true,"introspection_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/introspect","check_session_iframe":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/connect/checkSession","scopes_supported":["address","updated_at","test","phone","openid","profile","offline_access","email"],"backchannel_logout_supported":true,"issuer":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid","id_token_encryption_enc_values_supported":["A256GCM","A128GCM","A256CBC-HS512","A128CBC-HS256","A192CBC-HS384","A192GCM"],"acr_values_supported":["default"],"userinfo_encryption_enc_values_supported":["A256GCM","A128CBC-HS256","A192CBC-HS384","A192GCM","A128GCM","A256CBC-HS512"],"authorization_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/authorize","request_object_encryption_enc_values_supported":["A128GCM","A256GCM","A192CBC-HS384","A256CBC-HS512","A128CBC-HS256","A192GCM"],"introspection_encryption_enc_values_supported":["A128CBC-HS256","A192CBC-HS384","A256GCM","A256CBC-HS512","A128GCM","A192GCM"],"rcs_request_encryption_alg_values_supported":["dir","A192KW","RSA-OAEP-256","ECDH-ES+A256KW","RSA-OAEP","ECDH-ES","A256KW","A128KW","ECDH-ES+A128KW","ECDH-ES+A192KW"],"claims_supported":["website","zoneinfo","email_verified","birthdate","gender","phone_number_verified","preferred_username","given_name","middle_name","locale","picture","updated_at","name","nickname","phone_number","family_name","email"],"userinfo_signing_alg_values_supported":["ES256","HS512","ES512","HS384","RS256","ES384","HS256"],"rcs_request_signing_alg_values_supported":["RS512","PS384","PS256","HS256","HS384","ES512","RS256","RS384","HS512","ES384","ES256","PS512"],"token_endpoint_auth_methods_supported":["client_secret_post","private_key_jwt","self_signed_tls_client_auth","tls_client_auth","none","client_secret_basic"],"tls_client_certificate_bound_access_tokens":true,"backchannel_logout_session_supported":true,"token_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/access_token","response_types_supported":["code token id_token","code","code id_token","device_code","id_token","code token","token","token id_token"],"revocation_endpoint_auth_methods_supported":["client_secret_post","private_key_jwt","self_signed_tls_client_auth","tls_client_auth","none","client_secret_basic"],"request_uri_parameter_supported":true,"rcs_response_encryption_enc_values_supported":["A256CBC-HS512","A192CBC-HS384","A256GCM","A128GCM","A192GCM","A128CBC-HS256"],"userinfo_encryption_alg_values_supported":["RSA-OAEP","dir","A256KW","ECDH-ES+A256KW","ECDH-ES","RSA-OAEP-256","A128KW","ECDH-ES+A192KW","A192KW","ECDH-ES+A128KW"],"grant_types_supported":["implicit","urn:ietf:params:oauth:grant-type:saml2-bearer","refresh_token","password","client_credentials","urn:ietf:params:oauth:grant-type:device_code","authorization_code","urn:openid:params:grant-type:ciba","urn:ietf:params:oauth:grant-type:uma-ticket","idm_delegation","urn:ietf:params:oauth:grant-type:jwt-bearer"],"end_session_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/connect/endSession","rcs_request_encryption_enc_values_supported":["A256GCM","A256CBC-HS512","A192GCM","A128CBC-HS256","A128GCM","A192CBC-HS384"],"revocation_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/token/revoke","version":"3.0","rcs_response_encryption_alg_values_supported":["ECDH-ES+A256KW","dir","A256KW","ECDH-ES+A192KW","RSA-OAEP-256","ECDH-ES","ECDH-ES+A128KW","A128KW","A192KW","RSA-OAEP"],"userinfo_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/userinfo","token_endpoint_auth_signing_alg_values_supported":["RS512","RS384","RS256","ES512","HS256","HS384","PS512","ES384","PS256","ES256","HS512","PS384"],"require_request_uri_registration":true,"id_token_encryption_alg_values_supported":["A128KW","A192KW","ECDH-ES+A256KW","RSA-OAEP-256","RSA-OAEP","A256KW","ECDH-ES+A128KW","ECDH-ES+A192KW","ECDH-ES","dir"],"jwks_uri":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/connect/jwk_uri","subject_types_supported":["public","pairwise"],"id_token_signing_alg_values_supported":["RS384","RS256","PS512","ES512","HS384","HS256","PS256","ES256","PS384","ES384","RS512","HS512"],"registration_endpoint":"https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/register","request_object_signing_alg_values_supported":["RS256","ES512","PS512","RS384","HS512","ES256","ES384","HS256","HS384","PS384","RS512","PS256"],"request_object_encryption_alg_values_supported":["RSA-OAEP-256","ECDH-ES","ECDH-ES+A192KW","ECDH-ES+A128KW","A256KW","RSA-OAEP","dir","A128KW","ECDH-ES+A256KW","A192KW"],"rcs_response_signing_alg_values_supported":["PS256","ES384","RS512","ES256","HS512","PS384","RS256","ES512","PS512","HS384","HS256","RS384"],"backchannel_authentication_endpoint":"https://frfapi.catalyst.forgerock.org/ig/oauth2/realms/root/realms/ciba-poll/bc-authorize","backchannel_authentication_request_signing_alg_values_supported":["RS256","RS384","RS512","ES256","ES384","ES512","PS256","PS384","PS512"],"backchannel_token_delivery_modes_supported":["poll","ping"]}
2021-06-14 18:19:02 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
request_parameter_supported
true
introspection_signing_alg_values_supported
[
  "ES384",
  "PS384",
  "ES256",
  "PS256",
  "PS512",
  "EdDSA",
  "HS512",
  "RS384",
  "RS256",
  "RS512",
  "HS256",
  "ES512",
  "HS384"
]
introspection_encryption_alg_values_supported
[
  "RSA-OAEP-256",
  "ECDH-ES+A256KW",
  "A128KW",
  "A192KW",
  "RSA-OAEP",
  "ECDH-ES+A192KW",
  "A256KW",
  "ECDH-ES",
  "ECDH-ES+A128KW",
  "dir"
]
claims_parameter_supported
true
introspection_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/introspect
check_session_iframe
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/connect/checkSession
scopes_supported
[
  "address",
  "updated_at",
  "test",
  "phone",
  "openid",
  "profile",
  "offline_access",
  "email"
]
backchannel_logout_supported
true
issuer
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid
id_token_encryption_enc_values_supported
[
  "A256GCM",
  "A128GCM",
  "A256CBC-HS512",
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A192GCM"
]
acr_values_supported
[
  "default"
]
userinfo_encryption_enc_values_supported
[
  "A256GCM",
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A192GCM",
  "A128GCM",
  "A256CBC-HS512"
]
authorization_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/authorize
request_object_encryption_enc_values_supported
[
  "A128GCM",
  "A256GCM",
  "A192CBC-HS384",
  "A256CBC-HS512",
  "A128CBC-HS256",
  "A192GCM"
]
introspection_encryption_enc_values_supported
[
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256GCM",
  "A256CBC-HS512",
  "A128GCM",
  "A192GCM"
]
rcs_request_encryption_alg_values_supported
[
  "dir",
  "A192KW",
  "RSA-OAEP-256",
  "ECDH-ES+A256KW",
  "RSA-OAEP",
  "ECDH-ES",
  "A256KW",
  "A128KW",
  "ECDH-ES+A128KW",
  "ECDH-ES+A192KW"
]
claims_supported
[
  "website",
  "zoneinfo",
  "email_verified",
  "birthdate",
  "gender",
  "phone_number_verified",
  "preferred_username",
  "given_name",
  "middle_name",
  "locale",
  "picture",
  "updated_at",
  "name",
  "nickname",
  "phone_number",
  "family_name",
  "email"
]
userinfo_signing_alg_values_supported
[
  "ES256",
  "HS512",
  "ES512",
  "HS384",
  "RS256",
  "ES384",
  "HS256"
]
rcs_request_signing_alg_values_supported
[
  "RS512",
  "PS384",
  "PS256",
  "HS256",
  "HS384",
  "ES512",
  "RS256",
  "RS384",
  "HS512",
  "ES384",
  "ES256",
  "PS512"
]
token_endpoint_auth_methods_supported
[
  "client_secret_post",
  "private_key_jwt",
  "self_signed_tls_client_auth",
  "tls_client_auth",
  "none",
  "client_secret_basic"
]
tls_client_certificate_bound_access_tokens
true
backchannel_logout_session_supported
true
token_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/access_token
response_types_supported
[
  "code token id_token",
  "code",
  "code id_token",
  "device_code",
  "id_token",
  "code token",
  "token",
  "token id_token"
]
revocation_endpoint_auth_methods_supported
[
  "client_secret_post",
  "private_key_jwt",
  "self_signed_tls_client_auth",
  "tls_client_auth",
  "none",
  "client_secret_basic"
]
request_uri_parameter_supported
true
rcs_response_encryption_enc_values_supported
[
  "A256CBC-HS512",
  "A192CBC-HS384",
  "A256GCM",
  "A128GCM",
  "A192GCM",
  "A128CBC-HS256"
]
userinfo_encryption_alg_values_supported
[
  "RSA-OAEP",
  "dir",
  "A256KW",
  "ECDH-ES+A256KW",
  "ECDH-ES",
  "RSA-OAEP-256",
  "A128KW",
  "ECDH-ES+A192KW",
  "A192KW",
  "ECDH-ES+A128KW"
]
grant_types_supported
[
  "implicit",
  "urn:ietf:params:oauth:grant-type:saml2-bearer",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:ietf:params:oauth:grant-type:device_code",
  "authorization_code",
  "urn:openid:params:grant-type:ciba",
  "urn:ietf:params:oauth:grant-type:uma-ticket",
  "idm_delegation",
  "urn:ietf:params:oauth:grant-type:jwt-bearer"
]
end_session_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/connect/endSession
rcs_request_encryption_enc_values_supported
[
  "A256GCM",
  "A256CBC-HS512",
  "A192GCM",
  "A128CBC-HS256",
  "A128GCM",
  "A192CBC-HS384"
]
revocation_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/token/revoke
version
3.0
rcs_response_encryption_alg_values_supported
[
  "ECDH-ES+A256KW",
  "dir",
  "A256KW",
  "ECDH-ES+A192KW",
  "RSA-OAEP-256",
  "ECDH-ES",
  "ECDH-ES+A128KW",
  "A128KW",
  "A192KW",
  "RSA-OAEP"
]
userinfo_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/userinfo
token_endpoint_auth_signing_alg_values_supported
[
  "RS512",
  "RS384",
  "RS256",
  "ES512",
  "HS256",
  "HS384",
  "PS512",
  "ES384",
  "PS256",
  "ES256",
  "HS512",
  "PS384"
]
require_request_uri_registration
true
id_token_encryption_alg_values_supported
[
  "A128KW",
  "A192KW",
  "ECDH-ES+A256KW",
  "RSA-OAEP-256",
  "RSA-OAEP",
  "A256KW",
  "ECDH-ES+A128KW",
  "ECDH-ES+A192KW",
  "ECDH-ES",
  "dir"
]
jwks_uri
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/connect/jwk_uri
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "RS384",
  "RS256",
  "PS512",
  "ES512",
  "HS384",
  "HS256",
  "PS256",
  "ES256",
  "PS384",
  "ES384",
  "RS512",
  "HS512"
]
registration_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/register
request_object_signing_alg_values_supported
[
  "RS256",
  "ES512",
  "PS512",
  "RS384",
  "HS512",
  "ES256",
  "ES384",
  "HS256",
  "HS384",
  "PS384",
  "RS512",
  "PS256"
]
request_object_encryption_alg_values_supported
[
  "RSA-OAEP-256",
  "ECDH-ES",
  "ECDH-ES+A192KW",
  "ECDH-ES+A128KW",
  "A256KW",
  "RSA-OAEP",
  "dir",
  "A128KW",
  "ECDH-ES+A256KW",
  "A192KW"
]
rcs_response_signing_alg_values_supported
[
  "PS256",
  "ES384",
  "RS512",
  "ES256",
  "HS512",
  "PS384",
  "RS256",
  "ES512",
  "PS512",
  "HS384",
  "HS256",
  "RS384"
]
backchannel_authentication_endpoint
https://frfapi.catalyst.forgerock.org/ig/oauth2/realms/root/realms/ciba-poll/bc-authorize
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
2021-06-14 18:19:02 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2021-06-14 18:19:02 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
{
  "testHost": "frfapi.catalyst.forgerock.org",
  "testPort": 443
}
authorization_endpoint
{
  "testHost": "frfapi.catalyst.forgerock.org",
  "testPort": 443
}
token_endpoint
{
  "testHost": "frfapi.catalyst.forgerock.org",
  "testPort": 443
}
userinfo_endpoint
{
  "testHost": "frfapi.catalyst.forgerock.org",
  "testPort": 443
}
2021-06-14 18:19:02
FetchServerKeys
Fetching server key
jwks_uri
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/connect/jwk_uri
2021-06-14 18:19:02
FetchServerKeys
HTTP request
request_uri
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/connect/jwk_uri
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-06-14 18:19:02 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "server": "nginx/1.19.2",
  "date": "Mon, 14 Jun 2021 18:19:02 GMT",
  "content-type": "application/json; charset\u003dUTF-8",
  "transfer-encoding": "chunked",
  "connection": "keep-alive",
  "vary": "Accept-Encoding",
  "x-content-type-options": "nosniff",
  "x-frame-options": "SAMEORIGIN",
  "strict-transport-security": "max-age\u003d15724800; includeSubDomains"
}
response_body
{"keys":[{"kty":"EC","kid":"prUONCz76/VCTu+VkSvCh2ynJ/c=","use":"sig","x5t":"_Lz4wvOq3ZiTRtckg_8iRrU-DgY","x5c":["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"],"x":"BtHwBMaPo7ThwmdzF7BQzxsTa8SpWZDTQeibXUcwbNc","y":"PXOrBNTE0Q254hRw_9Ti4UGXSHPX5MGO5TkbonxjFHw","crv":"P-256"},{"kty":"EC","kid":"WLaIuAS5X5GaASKlxK8tRejySXI=","use":"sig","x5t":"acMZxc4tDd_2m4FrEhZBe4aIzB8","x5c":["MIICUTCCAbCgAwIBAgIEUNPeoTAMBggqhkjOPQQDAgUAMFkxCzAJBgNVBAYTAlVLMRAwDgYDVQQIEwdCcmlzdG9sMRAwDgYDVQQHEwdCcmlzdG9sMRIwEAYDVQQKEwlGb3JnZVJvY2sxEjAQBgNVBAMTCWVzNTEydGVzdDAeFw0yMTA2MTAwMzUxMTlaFw0zMTA2MDgwMzUxMTlaMFkxCzAJBgNVBAYTAlVLMRAwDgYDVQQIEwdCcmlzdG9sMRAwDgYDVQQHEwdCcmlzdG9sMRIwEAYDVQQKEwlGb3JnZVJvY2sxEjAQBgNVBAMTCWVzNTEydGVzdDCBmzAQBgcqhkjOPQIBBgUrgQQAIwOBhgAEAadyoo/S4lojzPemvLbL2HLWFhzzFzwPmNE3er9qEtMKtkFoIXdo1Yo658hk3qtydtZSIpJTtKI7rIN6ZrPvaTGkAYhwi0Ye/NbarpZYhqULDHpMaXq0UO2NOZ3XCQoxkSADgSLA6XXjC3/1fFnmeRPSTh1s5GwsrUibcMTXWbChwVcioyEwHzAdBgNVHQ4EFgQUjREV5uAYegn7SoqRJoW0/inrlowwDAYIKoZIzj0EAwIFAAOBjAAwgYgCQgHn53875ZgU/np3jhmwdUHCmzaMSHt/4KlVjAx6x9pqJ43I2q+dn3hxXaVz5J2t6Stn/FQEJWUSDqkwinDlCGSHaQJCAQfBeaMmdIDG+BTP4MCCrj1HD+GVRFIXZf3sOC55PLMZ46f/b9941fh4rtjhovHOiq0A6uSP1QsQ/ZFTL5jOuajs"],"x":"Aadyoo_S4lojzPemvLbL2HLWFhzzFzwPmNE3er9qEtMKtkFoIXdo1Yo658hk3qtydtZSIpJTtKI7rIN6ZrPvaTGk","y":"AYhwi0Ye_NbarpZYhqULDHpMaXq0UO2NOZ3XCQoxkSADgSLA6XXjC3_1fFnmeRPSTh1s5GwsrUibcMTXWbChwVci","crv":"P-521"},{"kty":"RSA","kid":"On37/qEMHibbWiYelZGpIwaWs/U=","use":"enc","x5t":"jptVrwY-pWuH0Vd4Fw52bOBsi3o","x5c":["MIIDRzCCAi+gAwIBAgIEeepYrDANBgkqhkiG9w0BAQsFADBUMQswCQYDVQQGEwJVSzEQMA4GA1UECBMHQnJpc3RvbDEQMA4GA1UEBxMHQnJpc3RvbDESMBAGA1UEChMJRm9yZ2VSb2NrMQ0wCwYDVQQDEwR0ZXN0MB4XDTIxMDYxMDAzNTEyMVoXDTMxMDYwODAzNTEyMVowVDELMAkGA1UEBhMCVUsxEDAOBgNVBAgTB0JyaXN0b2wxEDAOBgNVBAcTB0JyaXN0b2wxEjAQBgNVBAoTCUZvcmdlUm9jazENMAsGA1UEAxMEdGVzdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8tY0IUPaA/CKhapXL05wIlgc0M9UudT6ggNgKDy1fNKf1u9TVXupIzzKbh/zPr1TAGfZINLierEvWB3jFUYl4Dj0wxb/XE51EYC+jKy9bJr3afYMJkWs0T4wyWOzsm48JKxoxEvVJeRNh72sPAQ/re4fl+c0KxkZtuJpDIko4CxZL+9D6jxgLx+o85oALbszzisY+BC0RK/mxuPQdr9P9zUMcQhDcmOaBViJW8TG384myVExKYJLS4x30nAwUcZRZWdvKHkb2bJj/F6ChYcc3F/ArlbO5PXh7H2CDcWQ81hPM38KWWvrsqvfEnqFUJ+7GvK/q93t0g/1HOTYRd/JcCAwEAAaMhMB8wHQYDVR0OBBYEFM99yNIL/cPmYafI0lbhyJd46Sw1MA0GCSqGSIb3DQEBCwUAA4IBAQBG7rgrZuPG2x5/QZeH9ZxDHTTA9y7VoVDZeVzDXfB7ZjVnh24m9cbS51rAqfxsMg14RX2+O2ec5m0ntR6N7cc3c/XJZrDhgNyX1lIsM8FWS9PhQQClQaY2RMB5564nzyR1UTnYnoe7Alt1wvk7PxafMNMx5xPoBoxc9GVtqIP83+eFqDZiNGzY//1S9QxAqfmFd7y+3FJY+KIWre1N74XCrBfc8Be6wKoTfxFciypPPXIqqhAzQjnc1uR5gNK+gnrLKi2j6d701XmHsq+ZEGxxUN0fnjlWlhb8T25qg52IS3UsxzZlKIW0oaq6lUTkfsxOQp+I9YNkwJYGomKqPs1C"],"n":"ry1jQhQ9oD8IqFqlcvTnAiWBzQz1S51PqCA2AoPLV80p_W71NVe6kjPMpuH_M-vVMAZ9kg0uJ6sS9YHeMVRiXgOPTDFv9cTnURgL6MrL1smvdp9gwmRazRPjDJY7OybjwkrGjES9Ul5E2Hvaw8BD-t7h-X5zQrGRm24mkMiSjgLFkv70PqPGAvH6jzmgAtuzPOKxj4ELREr-bG49B2v0_3NQxxCENyY5oFWIlbxMbfzibJUTEpgktLjHfScDBRxlFlZ28oeRvZsmP8XoKFhxzcX8CuVs7k9eHsfYINxZDzWE8zfwpZa-uyq98SeoVQn7sa8r-r3e3SD_Uc5NhF38lw","e":"AQAB"},{"kty":"EC","kid":"XiA5Mm/O9Dl7ocI1xNQ/YTT/Ox4=","use":"sig","x5t":"LKQ4biAMbCHAkFoTnn0omGX3DxA","x5c":["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"],"x":"VR5d6axG7J9ERqsJK8K3FDUHj1xVl1Wynf-pT26tUGngxTNecxNph7yw2uqWdKvm","y":"Uw-eW6rOxpvXH2dBYtGFHaB3qB2ovQQ6YSSsPzHMqkgWn1XZEzWVuUc3-t3-W7jt","crv":"P-384"},{"kty":"RSA","kid":"+rbU0bNIibHu1OASgWihDV88A8Q=","use":"sig","x5t":"EtthAaAjIOh6sez6TqjvQk18YVA","x5c":["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"],"n":"kZ4G3mL-M4Bao3BLnvHjcRhrsa1bfbOHkhYQ4EG3SMSuq48aDudGsa3blbo2G0-8TgQdO9SN0fJB_2rKENOU-ye5UvrUtCmeYQWE87KXfbZ5EOu1pwTqHhXkiCOooa3yqaeDXVjIcngDx85NkbQ9vVinroVpWKFRGLjXHX31B_qxtjzvCfD4AN7R0j2X5v2jHpQWrJAilQAQaDeHD65kflnot8tLg7AgntyBiF-6FmKrdN7JZLPWfRrr4IPsORLgapfrkaaEU5BBcRlhKcRMztoRdQGEc6a3AOZ4D82oWjxS89lxs6vHGgVlBA3Pddd7TvHVNhucTt3goOjUoJ5wYQ","e":"AQAB"}]}
2021-06-14 18:19:02
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"EC","kid":"prUONCz76/VCTu+VkSvCh2ynJ/c=","use":"sig","x5t":"_Lz4wvOq3ZiTRtckg_8iRrU-DgY","x5c":["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"],"x":"BtHwBMaPo7ThwmdzF7BQzxsTa8SpWZDTQeibXUcwbNc","y":"PXOrBNTE0Q254hRw_9Ti4UGXSHPX5MGO5TkbonxjFHw","crv":"P-256"},{"kty":"EC","kid":"WLaIuAS5X5GaASKlxK8tRejySXI=","use":"sig","x5t":"acMZxc4tDd_2m4FrEhZBe4aIzB8","x5c":["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"],"x":"Aadyoo_S4lojzPemvLbL2HLWFhzzFzwPmNE3er9qEtMKtkFoIXdo1Yo658hk3qtydtZSIpJTtKI7rIN6ZrPvaTGk","y":"AYhwi0Ye_NbarpZYhqULDHpMaXq0UO2NOZ3XCQoxkSADgSLA6XXjC3_1fFnmeRPSTh1s5GwsrUibcMTXWbChwVci","crv":"P-521"},{"kty":"RSA","kid":"On37/qEMHibbWiYelZGpIwaWs/U=","use":"enc","x5t":"jptVrwY-pWuH0Vd4Fw52bOBsi3o","x5c":["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"],"n":"ry1jQhQ9oD8IqFqlcvTnAiWBzQz1S51PqCA2AoPLV80p_W71NVe6kjPMpuH_M-vVMAZ9kg0uJ6sS9YHeMVRiXgOPTDFv9cTnURgL6MrL1smvdp9gwmRazRPjDJY7OybjwkrGjES9Ul5E2Hvaw8BD-t7h-X5zQrGRm24mkMiSjgLFkv70PqPGAvH6jzmgAtuzPOKxj4ELREr-bG49B2v0_3NQxxCENyY5oFWIlbxMbfzibJUTEpgktLjHfScDBRxlFlZ28oeRvZsmP8XoKFhxzcX8CuVs7k9eHsfYINxZDzWE8zfwpZa-uyq98SeoVQn7sa8r-r3e3SD_Uc5NhF38lw","e":"AQAB"},{"kty":"EC","kid":"XiA5Mm/O9Dl7ocI1xNQ/YTT/Ox4=","use":"sig","x5t":"LKQ4biAMbCHAkFoTnn0omGX3DxA","x5c":["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"],"x":"VR5d6axG7J9ERqsJK8K3FDUHj1xVl1Wynf-pT26tUGngxTNecxNph7yw2uqWdKvm","y":"Uw-eW6rOxpvXH2dBYtGFHaB3qB2ovQQ6YSSsPzHMqkgWn1XZEzWVuUc3-t3-W7jt","crv":"P-384"},{"kty":"RSA","kid":"+rbU0bNIibHu1OASgWihDV88A8Q=","use":"sig","x5t":"EtthAaAjIOh6sez6TqjvQk18YVA","x5c":["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"],"n":"kZ4G3mL-M4Bao3BLnvHjcRhrsa1bfbOHkhYQ4EG3SMSuq48aDudGsa3blbo2G0-8TgQdO9SN0fJB_2rKENOU-ye5UvrUtCmeYQWE87KXfbZ5EOu1pwTqHhXkiCOooa3yqaeDXVjIcngDx85NkbQ9vVinroVpWKFRGLjXHX31B_qxtjzvCfD4AN7R0j2X5v2jHpQWrJAilQAQaDeHD65kflnot8tLg7AgntyBiF-6FmKrdN7JZLPWfRrr4IPsORLgapfrkaaEU5BBcRlhKcRMztoRdQGEc6a3AOZ4D82oWjxS89lxs6vHGgVlBA3Pddd7TvHVNhucTt3goOjUoJ5wYQ","e":"AQAB"}]}
2021-06-14 18:19:02 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "kid": "prUONCz76/VCTu+VkSvCh2ynJ/c\u003d",
      "use": "sig",
      "x5t": "_Lz4wvOq3ZiTRtckg_8iRrU-DgY",
      "x5c": [
        "MIIByjCCAW2gAwIBAgIEIZkEmzAMBggqhkjOPQQDAgUAMFkxCzAJBgNVBAYTAlVLMRAwDgYDVQQIEwdCcmlzdG9sMRAwDgYDVQQHEwdCcmlzdG9sMRIwEAYDVQQKEwlGb3JnZVJvY2sxEjAQBgNVBAMTCWVzMjU2dGVzdDAeFw0yMTA2MTAwMzUxMThaFw0zMTA2MDgwMzUxMThaMFkxCzAJBgNVBAYTAlVLMRAwDgYDVQQIEwdCcmlzdG9sMRAwDgYDVQQHEwdCcmlzdG9sMRIwEAYDVQQKEwlGb3JnZVJvY2sxEjAQBgNVBAMTCWVzMjU2dGVzdDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABAbR8ATGj6O04cJncxewUM8bE2vEqVmQ00Hom11HMGzXPXOrBNTE0Q254hRw/9Ti4UGXSHPX5MGO5TkbonxjFHyjITAfMB0GA1UdDgQWBBQzLq7rNXiId2GBqNSjF82mScxL6DAMBggqhkjOPQQDAgUAA0kAMEYCIQC3PNY49Uqbmm9lcQIhtoOdOk4JUKa2JjWU8BDW9kaTsAIhAIzcrAgy/uWvaGpemTm7wGz+JA90bc3ZAgFVN7lncCEm"
      ],
      "x": "BtHwBMaPo7ThwmdzF7BQzxsTa8SpWZDTQeibXUcwbNc",
      "y": "PXOrBNTE0Q254hRw_9Ti4UGXSHPX5MGO5TkbonxjFHw",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "WLaIuAS5X5GaASKlxK8tRejySXI\u003d",
      "use": "sig",
      "x5t": "acMZxc4tDd_2m4FrEhZBe4aIzB8",
      "x5c": [
        "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"
      ],
      "x": "Aadyoo_S4lojzPemvLbL2HLWFhzzFzwPmNE3er9qEtMKtkFoIXdo1Yo658hk3qtydtZSIpJTtKI7rIN6ZrPvaTGk",
      "y": "AYhwi0Ye_NbarpZYhqULDHpMaXq0UO2NOZ3XCQoxkSADgSLA6XXjC3_1fFnmeRPSTh1s5GwsrUibcMTXWbChwVci",
      "crv": "P-521"
    },
    {
      "kty": "RSA",
      "kid": "On37/qEMHibbWiYelZGpIwaWs/U\u003d",
      "use": "enc",
      "x5t": "jptVrwY-pWuH0Vd4Fw52bOBsi3o",
      "x5c": [
        "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"
      ],
      "n": "ry1jQhQ9oD8IqFqlcvTnAiWBzQz1S51PqCA2AoPLV80p_W71NVe6kjPMpuH_M-vVMAZ9kg0uJ6sS9YHeMVRiXgOPTDFv9cTnURgL6MrL1smvdp9gwmRazRPjDJY7OybjwkrGjES9Ul5E2Hvaw8BD-t7h-X5zQrGRm24mkMiSjgLFkv70PqPGAvH6jzmgAtuzPOKxj4ELREr-bG49B2v0_3NQxxCENyY5oFWIlbxMbfzibJUTEpgktLjHfScDBRxlFlZ28oeRvZsmP8XoKFhxzcX8CuVs7k9eHsfYINxZDzWE8zfwpZa-uyq98SeoVQn7sa8r-r3e3SD_Uc5NhF38lw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "XiA5Mm/O9Dl7ocI1xNQ/YTT/Ox4\u003d",
      "use": "sig",
      "x5t": "LKQ4biAMbCHAkFoTnn0omGX3DxA",
      "x5c": [
        "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\u003d"
      ],
      "x": "VR5d6axG7J9ERqsJK8K3FDUHj1xVl1Wynf-pT26tUGngxTNecxNph7yw2uqWdKvm",
      "y": "Uw-eW6rOxpvXH2dBYtGFHaB3qB2ovQQ6YSSsPzHMqkgWn1XZEzWVuUc3-t3-W7jt",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "+rbU0bNIibHu1OASgWihDV88A8Q\u003d",
      "use": "sig",
      "x5t": "EtthAaAjIOh6sez6TqjvQk18YVA",
      "x5c": [
        "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"
      ],
      "n": "kZ4G3mL-M4Bao3BLnvHjcRhrsa1bfbOHkhYQ4EG3SMSuq48aDudGsa3blbo2G0-8TgQdO9SN0fJB_2rKENOU-ye5UvrUtCmeYQWE87KXfbZ5EOu1pwTqHhXkiCOooa3yqaeDXVjIcngDx85NkbQ9vVinroVpWKFRGLjXHX31B_qxtjzvCfD4AN7R0j2X5v2jHpQWrJAilQAQaDeHD65kflnot8tLg7AgntyBiF-6FmKrdN7JZLPWfRrr4IPsORLgapfrkaaEU5BBcRlhKcRMztoRdQGEc6a3AOZ4D82oWjxS89lxs6vHGgVlBA3Pddd7TvHVNhucTt3goOjUoJ5wYQ",
      "e": "AQAB"
    }
  ]
}
2021-06-14 18:19:02 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "kid": "prUONCz76/VCTu+VkSvCh2ynJ/c\u003d",
      "use": "sig",
      "x5t": "_Lz4wvOq3ZiTRtckg_8iRrU-DgY",
      "x5c": [
        "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"
      ],
      "x": "BtHwBMaPo7ThwmdzF7BQzxsTa8SpWZDTQeibXUcwbNc",
      "y": "PXOrBNTE0Q254hRw_9Ti4UGXSHPX5MGO5TkbonxjFHw",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "WLaIuAS5X5GaASKlxK8tRejySXI\u003d",
      "use": "sig",
      "x5t": "acMZxc4tDd_2m4FrEhZBe4aIzB8",
      "x5c": [
        "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"
      ],
      "x": "Aadyoo_S4lojzPemvLbL2HLWFhzzFzwPmNE3er9qEtMKtkFoIXdo1Yo658hk3qtydtZSIpJTtKI7rIN6ZrPvaTGk",
      "y": "AYhwi0Ye_NbarpZYhqULDHpMaXq0UO2NOZ3XCQoxkSADgSLA6XXjC3_1fFnmeRPSTh1s5GwsrUibcMTXWbChwVci",
      "crv": "P-521"
    },
    {
      "kty": "RSA",
      "kid": "On37/qEMHibbWiYelZGpIwaWs/U\u003d",
      "use": "enc",
      "x5t": "jptVrwY-pWuH0Vd4Fw52bOBsi3o",
      "x5c": [
        "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"
      ],
      "n": "ry1jQhQ9oD8IqFqlcvTnAiWBzQz1S51PqCA2AoPLV80p_W71NVe6kjPMpuH_M-vVMAZ9kg0uJ6sS9YHeMVRiXgOPTDFv9cTnURgL6MrL1smvdp9gwmRazRPjDJY7OybjwkrGjES9Ul5E2Hvaw8BD-t7h-X5zQrGRm24mkMiSjgLFkv70PqPGAvH6jzmgAtuzPOKxj4ELREr-bG49B2v0_3NQxxCENyY5oFWIlbxMbfzibJUTEpgktLjHfScDBRxlFlZ28oeRvZsmP8XoKFhxzcX8CuVs7k9eHsfYINxZDzWE8zfwpZa-uyq98SeoVQn7sa8r-r3e3SD_Uc5NhF38lw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "XiA5Mm/O9Dl7ocI1xNQ/YTT/Ox4\u003d",
      "use": "sig",
      "x5t": "LKQ4biAMbCHAkFoTnn0omGX3DxA",
      "x5c": [
        "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\u003d"
      ],
      "x": "VR5d6axG7J9ERqsJK8K3FDUHj1xVl1Wynf-pT26tUGngxTNecxNph7yw2uqWdKvm",
      "y": "Uw-eW6rOxpvXH2dBYtGFHaB3qB2ovQQ6YSSsPzHMqkgWn1XZEzWVuUc3-t3-W7jt",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "+rbU0bNIibHu1OASgWihDV88A8Q\u003d",
      "use": "sig",
      "x5t": "EtthAaAjIOh6sez6TqjvQk18YVA",
      "x5c": [
        "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"
      ],
      "n": "kZ4G3mL-M4Bao3BLnvHjcRhrsa1bfbOHkhYQ4EG3SMSuq48aDudGsa3blbo2G0-8TgQdO9SN0fJB_2rKENOU-ye5UvrUtCmeYQWE87KXfbZ5EOu1pwTqHhXkiCOooa3yqaeDXVjIcngDx85NkbQ9vVinroVpWKFRGLjXHX31B_qxtjzvCfD4AN7R0j2X5v2jHpQWrJAilQAQaDeHD65kflnot8tLg7AgntyBiF-6FmKrdN7JZLPWfRrr4IPsORLgapfrkaaEU5BBcRlhKcRMztoRdQGEc6a3AOZ4D82oWjxS89lxs6vHGgVlBA3Pddd7TvHVNhucTt3goOjUoJ5wYQ",
      "e": "AQAB"
    }
  ]
}
2021-06-14 18:19:02 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-06-14 18:19:02 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2021-06-14 18:19:02 SUCCESS
CheckDistinctKeyIdValueInServerJWKs
Distinct 'kid' value in all keys of server_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-06-14 18:19:02 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-06-14 18:19:02 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
implicitClient1
scope
openid test
jwks
{
  "keys": [
    {
      "p": "3VzCiRV5-lxEkAMXWrUCWTIh6u2V7Qe6zKAxp-HTE-w5_PZO5yTEls5Ou3aSRk-B3zjYqWyut9kzFUlTolRSmZoCv_zUTHHs3k4jiAvSTLKXOXPqOV621OMrbCxZQuVgA5w-e9-o5oDC6Zlo2tF9ElPCxHh6l2TbbSM6YSdcmN0",
      "kty": "RSA",
      "q": "quzG4ij7S43qxK1VHBe3oA01ARXileIvQTbOyF7Gm17DOne9S-eewAgOAYDmZfwdVjlVh5MGrckXFJKFeyW403sbQN98EzOKoUmlaKpgN5ke2YlfigmYDI8LBcqbOqyjPTHfmXHLTX1XWwFzLsMNaPqpFMfSb1yDi4Ggnzx1H6s",
      "d": "hkq4xawZl39zontdf6muqy-AHbwcO8yUcNPyRQIGLTl12xxiHs_MSxn1I0p30AL6zXKsSKeimimBa4tO-Mv7l2PRAVrZvnfwM01UfYOcRAtBZICq_4bm-iBfZoywnomjNn9NUMKhMEEZ6bj5H--p0AM9xPO6zQLFBVLHD443juUbWrB3CNFhqbIGzJlWjEnmA9V6oGhEZWQN6LeXeDtYt5Q1XXCpps8TmC1bxzYQmTJTY9gJTgPei7rZuNg4Tm7VRH9KVzt4gvUTAdVq62tJLkXLO8HFCn9gdxhS5FEDgH8x6ZMY8t2ul7mV1NZ5n3kSpovBAYdM7KrEc7V4CUv2oQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "itssCibaClient1",
      "x5c": [
        "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\u003d\u003d"
      ],
      "qi": "nd7bietAFh-d2vZj1zw8A2Ka9hvmZpUiuMa_nQnEtcGeo53_AF-hpvaM7_GFkA_LbTSFIy87zmYw66YrZyc6gGHr5NShqX_yJhPFyaGohJYAJiRyOGIHx2dyYsUMXDbUMKrIV7DsrMKgBy_jdMSO3oj1kyBzNi7bNQfeTYaSRys",
      "dp": "l9YdldwGXAVX_hQwu8Y3AymQ_EzVLs3DgsJK7SXIG_1H1Uy52HBu7CY8-Pce5F167rtWWfgza-Xu1SYD2O_P7I4oXro0gO8QE3gzhQjeyj8h3YW13n4qGKJt0XgmDe25yyAr99n1R46Ao6zXsGhLSvvrN8qQBDJpFFY6oBNYv30",
      "alg": "PS256",
      "dq": "E9ZDBsBm2c_wrT7In-gIwaSGwEd_8pE7lr_7o7mMJ0AKPGDlMUgCXpsQtQ_2rWNjLDyfNorTvZuW-CZBI5evKawh75eAWOIkdq-LaOhNHmbA89JDqkuOv_Zh-xwWg-rBTzrYjoBsbePcHY2_hm_QwJxGv0ipnY8JHUnAEHr9xN0",
      "n": "k8xWq6xsWgJrwoCGPyQWcd2NkISXXFR4BLajF80CfX8Td_QFACm7OkU7pE7gCvuyIywvPC-3XvU7voC1DzJrxBX6fCxYXBwyMUYS2_lwTpWqMJr4WTjch1TV4cCTqRmc2OOxuR3ybWmCESyaHcmHqNZBWK_zWMYKUXC9cYjt-7FN9PKmYyOwECK1_yGfWvm2cpUCxbJ7tzRfggqryO1DLPxX9Hqp-aFOt7A1V7WUyPXhVNvB-MQwK1Crf-zuHNH9TeJhDMNzFqi48AVAKWviy65XpLKT4NaSTXe_a03gKakWKW8JZHeQCGL_WVfgv2NnX9EmS7QK0EL2pIUSKl3enw"
    }
  ]
}
acr_value
poll
hint_type
login_hint
hint_value
demo
client_secret
Passw0rd
redirect_uri
https://www.certification.openid.net/test/a/ForgeRockAM/callback
2021-06-14 18:19:02
SetScopeInClientConfigurationToOpenId
Set scope in client configuration to "openid"
scope
openid
2021-06-14 18:19:02 SUCCESS
EnsureServerConfigurationSupportsClientSecretBasic
Contents of 'token_endpoint_auth_methods_supported' in discovery document matches expectations.
actual
[
  "client_secret_post",
  "private_key_jwt",
  "self_signed_tls_client_auth",
  "tls_client_auth",
  "none",
  "client_secret_basic"
]
expected
[
  "client_secret_basic"
]
minimum_matches_required
1
2021-06-14 18:19:02 SUCCESS
SetProtectedResourceUrlToUserInfoEndpoint
userinfo_endpoint will be used to test access token. The user info is not a mandatory to implement feature in the OpenID Connect specification, but is mandatory for certification.
protected_resource_url
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/userinfo
2021-06-14 18:19:02
oidcc-max-age-10000
Setup Done
Make request to authorization endpoint
2021-06-14 18:19:02 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
implicitClient1
redirect_uri
https://www.certification.openid.net/test/a/ForgeRockAM/callback
scope
openid
2021-06-14 18:19:02
CreateRandomStateValue
Created state value
requested_state_length
10
state
sGvb9IlArg
2021-06-14 18:19:02 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
implicitClient1
redirect_uri
https://www.certification.openid.net/test/a/ForgeRockAM/callback
scope
openid
state
sGvb9IlArg
2021-06-14 18:19:02
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
zKMZWtP05m
2021-06-14 18:19:02 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
implicitClient1
redirect_uri
https://www.certification.openid.net/test/a/ForgeRockAM/callback
scope
openid
state
sGvb9IlArg
nonce
zKMZWtP05m
2021-06-14 18:19:02 SUCCESS
SetAuthorizationEndpointRequestResponseTypeFromEnvironment
Added response_type parameter to request
client_id
implicitClient1
redirect_uri
https://www.certification.openid.net/test/a/ForgeRockAM/callback
scope
openid
state
sGvb9IlArg
nonce
zKMZWtP05m
response_type
id_token
2021-06-14 18:19:02 SUCCESS
AddMaxAge15000ToAuthorizationEndpointRequest
Added max_age=15000 to authorization endpoint request
client_id
implicitClient1
redirect_uri
https://www.certification.openid.net/test/a/ForgeRockAM/callback
scope
openid
state
sGvb9IlArg
nonce
zKMZWtP05m
response_type
id_token
max_age
15000
2021-06-14 18:19:02 SUCCESS
BuildPlainRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/authorize?client_id=implicitClient1&redirect_uri=https://www.certification.openid.net/test/a/ForgeRockAM/callback&scope=openid&state=sGvb9IlArg&nonce=zKMZWtP05m&response_type=id_token&max_age=15000
2021-06-14 18:19:02 REDIRECT
oidcc-max-age-10000
Redirecting to authorization endpoint
redirect_to
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/authorize?client_id=implicitClient1&redirect_uri=https://www.certification.openid.net/test/a/ForgeRockAM/callback&scope=openid&state=sGvb9IlArg&nonce=zKMZWtP05m&response_type=id_token&max_age=15000
2021-06-14 18:19:12 INCOMING
oidcc-max-age-10000
Incoming HTTP request to test instance CmbsNGPWcDoGovU
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://www.certification.openid.net/",
  "cookie": "__utma\u003d201319536.27704524.1614774355.1623688507.1623694273.35; __utmz\u003d201319536.1623688507.34.14.utmcsr\u003dcertification.openid.net|utmccn\u003d(referral)|utmcmd\u003dreferral|utmcct\u003d/; _ga\u003dGA1.2.27704524.1614774355; __utmc\u003d201319536; JSESSIONID\u003d11566D27593CFCF174027613F1D8ED75",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
callback
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-06-14 18:19:13 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/0tN1bbOj8WOcMmlfi2bo",
  "fullUrl": "https://www.certification.openid.net/test/a/ForgeRockAM/implicit/0tN1bbOj8WOcMmlfi2bo"
}
2021-06-14 18:19:13 OUTGOING
oidcc-max-age-10000
Response to HTTP request to test instance CmbsNGPWcDoGovU
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/ForgeRockAM/implicit/0tN1bbOj8WOcMmlfi2bo, returnUrl=/log-detail.html?log=CmbsNGPWcDoGovU}]
outgoing_path
callback
2021-06-14 18:19:13 INCOMING
oidcc-max-age-10000
Incoming HTTP request to test instance CmbsNGPWcDoGovU
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0",
  "accept": "*/*",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "content-type": "text/plain",
  "x-requested-with": "XMLHttpRequest",
  "origin": "https://www.certification.openid.net",
  "referer": "https://www.certification.openid.net/test/a/ForgeRockAM/callback",
  "cookie": "__utma\u003d201319536.27704524.1614774355.1623688507.1623694273.35; __utmz\u003d201319536.1623688507.34.14.utmcsr\u003dcertification.openid.net|utmccn\u003d(referral)|utmcmd\u003dreferral|utmcct\u003d/; _ga\u003dGA1.2.27704524.1614774355; __utmc\u003d201319536; JSESSIONID\u003d11566D27593CFCF174027613F1D8ED75",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "1281",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
implicit/0tN1bbOj8WOcMmlfi2bo
incoming_body_form_params
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
#id_token=eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.A3qTi6zISVUwrfFu2XKAnU2cmcyRD6ijBxg5s3_rRHeaYuW1Q_OjXhLWa1h-l0Mk49yro9T4rv3ZXbVbhCA6H1k_Yux4omXgLpO0CrbemKMYWqTbmeRDWDB6mogvF4hpIm69OYLPt5bQ071ZA6Oi_qkI6wggVq75rEhtja-fCmi0_Pr5J09OJwNWpw8CrkY7TdmUNewC89DbSHedHwSCm3KIvfFfE6n0JGiRm77yajXKRUPKyEmUaZVN8v88KdBwrtFq2jlicGSpH5J8UUMoWRpawiVuE_p-v9Pdz_P9t1llUOSvdqGHjGR0DLu6g_Mnb27uxo1PPTbv11xPnmaoSQ&state=sGvb9IlArg
2021-06-14 18:19:13 OUTGOING
oidcc-max-age-10000
Response to HTTP request to test instance CmbsNGPWcDoGovU
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/0tN1bbOj8WOcMmlfi2bo
2021-06-14 18:19:13
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "id_token",
    "value": "eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.A3qTi6zISVUwrfFu2XKAnU2cmcyRD6ijBxg5s3_rRHeaYuW1Q_OjXhLWa1h-l0Mk49yro9T4rv3ZXbVbhCA6H1k_Yux4omXgLpO0CrbemKMYWqTbmeRDWDB6mogvF4hpIm69OYLPt5bQ071ZA6Oi_qkI6wggVq75rEhtja-fCmi0_Pr5J09OJwNWpw8CrkY7TdmUNewC89DbSHedHwSCm3KIvfFfE6n0JGiRm77yajXKRUPKyEmUaZVN8v88KdBwrtFq2jlicGSpH5J8UUMoWRpawiVuE_p-v9Pdz_P9t1llUOSvdqGHjGR0DLu6g_Mnb27uxo1PPTbv11xPnmaoSQ"
  },
  {
    "name": "state",
    "value": "sGvb9IlArg"
  }
]
2021-06-14 18:19:13 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
id_token
eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.A3qTi6zISVUwrfFu2XKAnU2cmcyRD6ijBxg5s3_rRHeaYuW1Q_OjXhLWa1h-l0Mk49yro9T4rv3ZXbVbhCA6H1k_Yux4omXgLpO0CrbemKMYWqTbmeRDWDB6mogvF4hpIm69OYLPt5bQ071ZA6Oi_qkI6wggVq75rEhtja-fCmi0_Pr5J09OJwNWpw8CrkY7TdmUNewC89DbSHedHwSCm3KIvfFfE6n0JGiRm77yajXKRUPKyEmUaZVN8v88KdBwrtFq2jlicGSpH5J8UUMoWRpawiVuE_p-v9Pdz_P9t1llUOSvdqGHjGR0DLu6g_Mnb27uxo1PPTbv11xPnmaoSQ
state
sGvb9IlArg
2021-06-14 18:19:13 REDIRECT-IN
oidcc-max-age-10000
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://www.certification.openid.net/",
  "cookie": "__utma\u003d201319536.27704524.1614774355.1623688507.1623694273.35; __utmz\u003d201319536.1623688507.34.14.utmcsr\u003dcertification.openid.net|utmccn\u003d(referral)|utmcmd\u003dreferral|utmcct\u003d/; _ga\u003dGA1.2.27704524.1614774355; __utmc\u003d201319536; JSESSIONID\u003d11566D27593CFCF174027613F1D8ED75",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "id_token": "eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.A3qTi6zISVUwrfFu2XKAnU2cmcyRD6ijBxg5s3_rRHeaYuW1Q_OjXhLWa1h-l0Mk49yro9T4rv3ZXbVbhCA6H1k_Yux4omXgLpO0CrbemKMYWqTbmeRDWDB6mogvF4hpIm69OYLPt5bQ071ZA6Oi_qkI6wggVq75rEhtja-fCmi0_Pr5J09OJwNWpw8CrkY7TdmUNewC89DbSHedHwSCm3KIvfFfE6n0JGiRm77yajXKRUPKyEmUaZVN8v88KdBwrtFq2jlicGSpH5J8UUMoWRpawiVuE_p-v9Pdz_P9t1llUOSvdqGHjGR0DLu6g_Mnb27uxo1PPTbv11xPnmaoSQ",
  "state": "sGvb9IlArg"
}
post_body
Verify authorization endpoint response
2021-06-14 18:19:13 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2021-06-14 18:19:13 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2021-06-14 18:19:13 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2021-06-14 18:19:13
ValidateIssInAuthorizationResponse
No 'iss' value in authorization response.
2021-06-14 18:19:13 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2021-06-14 18:19:13 SUCCESS
CheckStateInAuthorizationResponse
State in response correctly returned
state
sGvb9IlArg
2021-06-14 18:19:13 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.A3qTi6zISVUwrfFu2XKAnU2cmcyRD6ijBxg5s3_rRHeaYuW1Q_OjXhLWa1h-l0Mk49yro9T4rv3ZXbVbhCA6H1k_Yux4omXgLpO0CrbemKMYWqTbmeRDWDB6mogvF4hpIm69OYLPt5bQ071ZA6Oi_qkI6wggVq75rEhtja-fCmi0_Pr5J09OJwNWpw8CrkY7TdmUNewC89DbSHedHwSCm3KIvfFfE6n0JGiRm77yajXKRUPKyEmUaZVN8v88KdBwrtFq2jlicGSpH5J8UUMoWRpawiVuE_p-v9Pdz_P9t1llUOSvdqGHjGR0DLu6g_Mnb27uxo1PPTbv11xPnmaoSQ
header
{
  "kid": "+rbU0bNIibHu1OASgWihDV88A8Q\u003d",
  "typ": "JWT",
  "alg": "RS256"
}
claims
{
  "sub": "e8a0914a-be03-11eb-8529-0242ac130003",
  "auditTrackingId": "105f8328-808b-4707-950f-381268526312-26644",
  "subname": "e8a0914a-be03-11eb-8529-0242ac130003",
  "iss": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid",
  "tokenName": "id_token",
  "nonce": "zKMZWtP05m",
  "sid": "YecSInqLCRX3ijjzSEhl2crVmZAjw7rJRUxnkHGbAsc\u003d",
  "aud": "implicitClient1",
  "acr": "default",
  "org.forgerock.openidconnect.ops": "8jP4gFHV96FvVj6EkwXn6eFJSmU",
  "s_hash": "bZewndstb8MjGlJ1t6SXqw",
  "updated_at": 1623673750,
  "azp": "implicitClient1",
  "auth_time": 1623694735,
  "realm": "/openid",
  "exp": 1623698352,
  "tokenType": "JWTToken",
  "iat": 1623694752
}
2021-06-14 18:19:13 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-06-14 18:19:13 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
zKMZWtP05m
2021-06-14 18:19:13 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
Nothing to check; the conformance suite did not request an acr claim in request object
2021-06-14 18:19:13 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.A3qTi6zISVUwrfFu2XKAnU2cmcyRD6ijBxg5s3_rRHeaYuW1Q_OjXhLWa1h-l0Mk49yro9T4rv3ZXbVbhCA6H1k_Yux4omXgLpO0CrbemKMYWqTbmeRDWDB6mogvF4hpIm69OYLPt5bQ071ZA6Oi_qkI6wggVq75rEhtja-fCmi0_Pr5J09OJwNWpw8CrkY7TdmUNewC89DbSHedHwSCm3KIvfFfE6n0JGiRm77yajXKRUPKyEmUaZVN8v88KdBwrtFq2jlicGSpH5J8UUMoWRpawiVuE_p-v9Pdz_P9t1llUOSvdqGHjGR0DLu6g_Mnb27uxo1PPTbv11xPnmaoSQ
2021-06-14 18:19:13 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.A3qTi6zISVUwrfFu2XKAnU2cmcyRD6ijBxg5s3_rRHeaYuW1Q_OjXhLWa1h-l0Mk49yro9T4rv3ZXbVbhCA6H1k_Yux4omXgLpO0CrbemKMYWqTbmeRDWDB6mogvF4hpIm69OYLPt5bQ071ZA6Oi_qkI6wggVq75rEhtja-fCmi0_Pr5J09OJwNWpw8CrkY7TdmUNewC89DbSHedHwSCm3KIvfFfE6n0JGiRm77yajXKRUPKyEmUaZVN8v88KdBwrtFq2jlicGSpH5J8UUMoWRpawiVuE_p-v9Pdz_P9t1llUOSvdqGHjGR0DLu6g_Mnb27uxo1PPTbv11xPnmaoSQ
2021-06-14 18:19:13 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
e8a0914a-be03-11eb-8529-0242ac130003
2021-06-14 18:19:13 SUCCESS
CheckIdTokenAuthTimeClaimPresentDueToMaxAge
auth_time is present in the id_token, as required for a authentication where the max_age parameter was used
id_token
{
  "sub": "e8a0914a-be03-11eb-8529-0242ac130003",
  "auditTrackingId": "105f8328-808b-4707-950f-381268526312-26644",
  "subname": "e8a0914a-be03-11eb-8529-0242ac130003",
  "iss": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid",
  "tokenName": "id_token",
  "nonce": "zKMZWtP05m",
  "sid": "YecSInqLCRX3ijjzSEhl2crVmZAjw7rJRUxnkHGbAsc\u003d",
  "aud": "implicitClient1",
  "acr": "default",
  "org.forgerock.openidconnect.ops": "8jP4gFHV96FvVj6EkwXn6eFJSmU",
  "s_hash": "bZewndstb8MjGlJ1t6SXqw",
  "updated_at": 1623673750,
  "azp": "implicitClient1",
  "auth_time": 1623694735,
  "realm": "/openid",
  "exp": 1623698352,
  "tokenType": "JWTToken",
  "iat": 1623694752
}
Second authorization: Make request to authorization endpoint
2021-06-14 18:19:13 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
implicitClient1
redirect_uri
https://www.certification.openid.net/test/a/ForgeRockAM/callback
scope
openid
2021-06-14 18:19:13
CreateRandomStateValue
Created state value
requested_state_length
10
state
rzZbnxdIzu
2021-06-14 18:19:13 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
implicitClient1
redirect_uri
https://www.certification.openid.net/test/a/ForgeRockAM/callback
scope
openid
state
rzZbnxdIzu
2021-06-14 18:19:13
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
vi8Bqa4Wef
2021-06-14 18:19:13 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
implicitClient1
redirect_uri
https://www.certification.openid.net/test/a/ForgeRockAM/callback
scope
openid
state
rzZbnxdIzu
nonce
vi8Bqa4Wef
2021-06-14 18:19:13 SUCCESS
SetAuthorizationEndpointRequestResponseTypeFromEnvironment
Added response_type parameter to request
client_id
implicitClient1
redirect_uri
https://www.certification.openid.net/test/a/ForgeRockAM/callback
scope
openid
state
rzZbnxdIzu
nonce
vi8Bqa4Wef
response_type
id_token
2021-06-14 18:19:13 SUCCESS
AddMaxAge10000ToAuthorizationEndpointRequest
Added max_age=10000 to authorization endpoint request
client_id
implicitClient1
redirect_uri
https://www.certification.openid.net/test/a/ForgeRockAM/callback
scope
openid
state
rzZbnxdIzu
nonce
vi8Bqa4Wef
response_type
id_token
max_age
10000
2021-06-14 18:19:13 SUCCESS
BuildPlainRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/authorize?client_id=implicitClient1&redirect_uri=https://www.certification.openid.net/test/a/ForgeRockAM/callback&scope=openid&state=rzZbnxdIzu&nonce=vi8Bqa4Wef&response_type=id_token&max_age=10000
2021-06-14 18:19:13 REDIRECT
oidcc-max-age-10000
Redirecting to authorization endpoint
redirect_to
https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid/authorize?client_id=implicitClient1&redirect_uri=https://www.certification.openid.net/test/a/ForgeRockAM/callback&scope=openid&state=rzZbnxdIzu&nonce=vi8Bqa4Wef&response_type=id_token&max_age=10000
2021-06-14 18:19:20 INCOMING
oidcc-max-age-10000
Incoming HTTP request to test instance CmbsNGPWcDoGovU
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://www.certification.openid.net/",
  "cookie": "__utma\u003d201319536.27704524.1614774355.1623688507.1623694273.35; __utmz\u003d201319536.1623688507.34.14.utmcsr\u003dcertification.openid.net|utmccn\u003d(referral)|utmcmd\u003dreferral|utmcct\u003d/; _ga\u003dGA1.2.27704524.1614774355; __utmc\u003d201319536; JSESSIONID\u003d11566D27593CFCF174027613F1D8ED75",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
callback
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-06-14 18:19:21 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/seW4kpuj4bG1wDYlr0Zn",
  "fullUrl": "https://www.certification.openid.net/test/a/ForgeRockAM/implicit/seW4kpuj4bG1wDYlr0Zn"
}
2021-06-14 18:19:21 OUTGOING
oidcc-max-age-10000
Response to HTTP request to test instance CmbsNGPWcDoGovU
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/ForgeRockAM/implicit/seW4kpuj4bG1wDYlr0Zn, returnUrl=/log-detail.html?log=CmbsNGPWcDoGovU}]
outgoing_path
callback
2021-06-14 18:19:21 INCOMING
oidcc-max-age-10000
Incoming HTTP request to test instance CmbsNGPWcDoGovU
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0",
  "accept": "*/*",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "content-type": "text/plain",
  "x-requested-with": "XMLHttpRequest",
  "origin": "https://www.certification.openid.net",
  "referer": "https://www.certification.openid.net/test/a/ForgeRockAM/callback",
  "cookie": "__utma\u003d201319536.27704524.1614774355.1623688507.1623694273.35; __utmz\u003d201319536.1623688507.34.14.utmcsr\u003dcertification.openid.net|utmccn\u003d(referral)|utmcmd\u003dreferral|utmcct\u003d/; _ga\u003dGA1.2.27704524.1614774355; __utmc\u003d201319536; JSESSIONID\u003d11566D27593CFCF174027613F1D8ED75",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "1281",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
implicit/seW4kpuj4bG1wDYlr0Zn
incoming_body_form_params
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
#id_token=eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.NiUDtJ2R2zXMPbp_sdicHb-s_iIDQ6KUmx1RWOUA3w_vA8ngocW4vcSceccUpLbRkWk_U-XTJmbbHyGNJXewWUqdCLH-3NsxgOQZzH0i_Z1qlruOSzJaQau-MdmCBRIHMd-RfXzQebuE5Mr88_9W-rRpYsA9dh_Xzdo7rX1s5NGnJSposCDWLIP3p3qSwxoBd6gIbFumllUyNJlcaStyxHclFPTPvJNeRSnxxxlpYoJBTwDjg4fBw7Cain1HDVLkKPgd7B9VHpG8aUhDD4M1pxCeSGVlfHrZBlpssqlAvNkuJdKfQD-G-ohxJuIqmQqi2CbWBopZrhUSwEmcGMGXQQ&state=rzZbnxdIzu
2021-06-14 18:19:21 OUTGOING
oidcc-max-age-10000
Response to HTTP request to test instance CmbsNGPWcDoGovU
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/seW4kpuj4bG1wDYlr0Zn
2021-06-14 18:19:21
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "id_token",
    "value": "eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.NiUDtJ2R2zXMPbp_sdicHb-s_iIDQ6KUmx1RWOUA3w_vA8ngocW4vcSceccUpLbRkWk_U-XTJmbbHyGNJXewWUqdCLH-3NsxgOQZzH0i_Z1qlruOSzJaQau-MdmCBRIHMd-RfXzQebuE5Mr88_9W-rRpYsA9dh_Xzdo7rX1s5NGnJSposCDWLIP3p3qSwxoBd6gIbFumllUyNJlcaStyxHclFPTPvJNeRSnxxxlpYoJBTwDjg4fBw7Cain1HDVLkKPgd7B9VHpG8aUhDD4M1pxCeSGVlfHrZBlpssqlAvNkuJdKfQD-G-ohxJuIqmQqi2CbWBopZrhUSwEmcGMGXQQ"
  },
  {
    "name": "state",
    "value": "rzZbnxdIzu"
  }
]
2021-06-14 18:19:21 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
id_token
eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.NiUDtJ2R2zXMPbp_sdicHb-s_iIDQ6KUmx1RWOUA3w_vA8ngocW4vcSceccUpLbRkWk_U-XTJmbbHyGNJXewWUqdCLH-3NsxgOQZzH0i_Z1qlruOSzJaQau-MdmCBRIHMd-RfXzQebuE5Mr88_9W-rRpYsA9dh_Xzdo7rX1s5NGnJSposCDWLIP3p3qSwxoBd6gIbFumllUyNJlcaStyxHclFPTPvJNeRSnxxxlpYoJBTwDjg4fBw7Cain1HDVLkKPgd7B9VHpG8aUhDD4M1pxCeSGVlfHrZBlpssqlAvNkuJdKfQD-G-ohxJuIqmQqi2CbWBopZrhUSwEmcGMGXQQ
state
rzZbnxdIzu
2021-06-14 18:19:21 REDIRECT-IN
oidcc-max-age-10000
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://www.certification.openid.net/",
  "cookie": "__utma\u003d201319536.27704524.1614774355.1623688507.1623694273.35; __utmz\u003d201319536.1623688507.34.14.utmcsr\u003dcertification.openid.net|utmccn\u003d(referral)|utmcmd\u003dreferral|utmcct\u003d/; _ga\u003dGA1.2.27704524.1614774355; __utmc\u003d201319536; JSESSIONID\u003d11566D27593CFCF174027613F1D8ED75",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "id_token": "eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.NiUDtJ2R2zXMPbp_sdicHb-s_iIDQ6KUmx1RWOUA3w_vA8ngocW4vcSceccUpLbRkWk_U-XTJmbbHyGNJXewWUqdCLH-3NsxgOQZzH0i_Z1qlruOSzJaQau-MdmCBRIHMd-RfXzQebuE5Mr88_9W-rRpYsA9dh_Xzdo7rX1s5NGnJSposCDWLIP3p3qSwxoBd6gIbFumllUyNJlcaStyxHclFPTPvJNeRSnxxxlpYoJBTwDjg4fBw7Cain1HDVLkKPgd7B9VHpG8aUhDD4M1pxCeSGVlfHrZBlpssqlAvNkuJdKfQD-G-ohxJuIqmQqi2CbWBopZrhUSwEmcGMGXQQ",
  "state": "rzZbnxdIzu"
}
post_body
Second authorization: Verify authorization endpoint response
2021-06-14 18:19:21 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2021-06-14 18:19:21 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2021-06-14 18:19:21 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2021-06-14 18:19:21
ValidateIssInAuthorizationResponse
No 'iss' value in authorization response.
2021-06-14 18:19:21 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2021-06-14 18:19:21 SUCCESS
CheckStateInAuthorizationResponse
State in response correctly returned
state
rzZbnxdIzu
2021-06-14 18:19:21 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.NiUDtJ2R2zXMPbp_sdicHb-s_iIDQ6KUmx1RWOUA3w_vA8ngocW4vcSceccUpLbRkWk_U-XTJmbbHyGNJXewWUqdCLH-3NsxgOQZzH0i_Z1qlruOSzJaQau-MdmCBRIHMd-RfXzQebuE5Mr88_9W-rRpYsA9dh_Xzdo7rX1s5NGnJSposCDWLIP3p3qSwxoBd6gIbFumllUyNJlcaStyxHclFPTPvJNeRSnxxxlpYoJBTwDjg4fBw7Cain1HDVLkKPgd7B9VHpG8aUhDD4M1pxCeSGVlfHrZBlpssqlAvNkuJdKfQD-G-ohxJuIqmQqi2CbWBopZrhUSwEmcGMGXQQ
header
{
  "kid": "+rbU0bNIibHu1OASgWihDV88A8Q\u003d",
  "typ": "JWT",
  "alg": "RS256"
}
claims
{
  "sub": "e8a0914a-be03-11eb-8529-0242ac130003",
  "auditTrackingId": "105f8328-808b-4707-950f-381268526312-26652",
  "subname": "e8a0914a-be03-11eb-8529-0242ac130003",
  "iss": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid",
  "tokenName": "id_token",
  "nonce": "vi8Bqa4Wef",
  "sid": "YecSInqLCRX3ijjzSEhl2crVmZAjw7rJRUxnkHGbAsc\u003d",
  "aud": "implicitClient1",
  "acr": "default",
  "org.forgerock.openidconnect.ops": "oy8vDmcSkZGkO-ISepIj00qtsh8",
  "s_hash": "8HmnZWK3_pifxRkmDz2Hwg",
  "updated_at": 1623673750,
  "azp": "implicitClient1",
  "auth_time": 1623694735,
  "realm": "/openid",
  "exp": 1623698360,
  "tokenType": "JWTToken",
  "iat": 1623694760
}
2021-06-14 18:19:21 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-06-14 18:19:21 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
vi8Bqa4Wef
2021-06-14 18:19:21 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
Nothing to check; the conformance suite did not request an acr claim in request object
2021-06-14 18:19:21 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.NiUDtJ2R2zXMPbp_sdicHb-s_iIDQ6KUmx1RWOUA3w_vA8ngocW4vcSceccUpLbRkWk_U-XTJmbbHyGNJXewWUqdCLH-3NsxgOQZzH0i_Z1qlruOSzJaQau-MdmCBRIHMd-RfXzQebuE5Mr88_9W-rRpYsA9dh_Xzdo7rX1s5NGnJSposCDWLIP3p3qSwxoBd6gIbFumllUyNJlcaStyxHclFPTPvJNeRSnxxxlpYoJBTwDjg4fBw7Cain1HDVLkKPgd7B9VHpG8aUhDD4M1pxCeSGVlfHrZBlpssqlAvNkuJdKfQD-G-ohxJuIqmQqi2CbWBopZrhUSwEmcGMGXQQ
2021-06-14 18:19:21 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJ0eXAiOiJKV1QiLCJraWQiOiIrcmJVMGJOSWliSHUxT0FTZ1dpaERWODhBOFE9IiwiYWxnIjoiUlMyNTYifQ.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.NiUDtJ2R2zXMPbp_sdicHb-s_iIDQ6KUmx1RWOUA3w_vA8ngocW4vcSceccUpLbRkWk_U-XTJmbbHyGNJXewWUqdCLH-3NsxgOQZzH0i_Z1qlruOSzJaQau-MdmCBRIHMd-RfXzQebuE5Mr88_9W-rRpYsA9dh_Xzdo7rX1s5NGnJSposCDWLIP3p3qSwxoBd6gIbFumllUyNJlcaStyxHclFPTPvJNeRSnxxxlpYoJBTwDjg4fBw7Cain1HDVLkKPgd7B9VHpG8aUhDD4M1pxCeSGVlfHrZBlpssqlAvNkuJdKfQD-G-ohxJuIqmQqi2CbWBopZrhUSwEmcGMGXQQ
2021-06-14 18:19:21 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
e8a0914a-be03-11eb-8529-0242ac130003
2021-06-14 18:19:21 SUCCESS
CheckIdTokenAuthTimeClaimPresentDueToMaxAge
auth_time is present in the id_token, as required for a authentication where the max_age parameter was used
id_token
{
  "sub": "e8a0914a-be03-11eb-8529-0242ac130003",
  "auditTrackingId": "105f8328-808b-4707-950f-381268526312-26652",
  "subname": "e8a0914a-be03-11eb-8529-0242ac130003",
  "iss": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid",
  "tokenName": "id_token",
  "nonce": "vi8Bqa4Wef",
  "sid": "YecSInqLCRX3ijjzSEhl2crVmZAjw7rJRUxnkHGbAsc\u003d",
  "aud": "implicitClient1",
  "acr": "default",
  "org.forgerock.openidconnect.ops": "oy8vDmcSkZGkO-ISepIj00qtsh8",
  "s_hash": "8HmnZWK3_pifxRkmDz2Hwg",
  "updated_at": 1623673750,
  "azp": "implicitClient1",
  "auth_time": 1623694735,
  "realm": "/openid",
  "exp": 1623698360,
  "tokenType": "JWTToken",
  "iat": 1623694760
}
2021-06-14 18:19:21 SUCCESS
CheckIdTokenAuthTimeClaimsSameIfPresent
auth_time is the same in the second id_token
first_id_token
{
  "sub": "e8a0914a-be03-11eb-8529-0242ac130003",
  "auditTrackingId": "105f8328-808b-4707-950f-381268526312-26644",
  "subname": "e8a0914a-be03-11eb-8529-0242ac130003",
  "iss": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid",
  "tokenName": "id_token",
  "nonce": "zKMZWtP05m",
  "sid": "YecSInqLCRX3ijjzSEhl2crVmZAjw7rJRUxnkHGbAsc\u003d",
  "aud": "implicitClient1",
  "acr": "default",
  "org.forgerock.openidconnect.ops": "8jP4gFHV96FvVj6EkwXn6eFJSmU",
  "s_hash": "bZewndstb8MjGlJ1t6SXqw",
  "updated_at": 1623673750,
  "azp": "implicitClient1",
  "auth_time": 1623694735,
  "realm": "/openid",
  "exp": 1623698352,
  "tokenType": "JWTToken",
  "iat": 1623694752
}
second_id_token
{
  "sub": "e8a0914a-be03-11eb-8529-0242ac130003",
  "auditTrackingId": "105f8328-808b-4707-950f-381268526312-26652",
  "subname": "e8a0914a-be03-11eb-8529-0242ac130003",
  "iss": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid",
  "tokenName": "id_token",
  "nonce": "vi8Bqa4Wef",
  "sid": "YecSInqLCRX3ijjzSEhl2crVmZAjw7rJRUxnkHGbAsc\u003d",
  "aud": "implicitClient1",
  "acr": "default",
  "org.forgerock.openidconnect.ops": "oy8vDmcSkZGkO-ISepIj00qtsh8",
  "s_hash": "8HmnZWK3_pifxRkmDz2Hwg",
  "updated_at": 1623673750,
  "azp": "implicitClient1",
  "auth_time": 1623694735,
  "realm": "/openid",
  "exp": 1623698360,
  "tokenType": "JWTToken",
  "iat": 1623694760
}
2021-06-14 18:19:21 SUCCESS
CheckIdTokenSubConsistentForSecondAuthorization
sub is the same in the second id_token
first_id_token
{
  "sub": "e8a0914a-be03-11eb-8529-0242ac130003",
  "auditTrackingId": "105f8328-808b-4707-950f-381268526312-26644",
  "subname": "e8a0914a-be03-11eb-8529-0242ac130003",
  "iss": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid",
  "tokenName": "id_token",
  "nonce": "zKMZWtP05m",
  "sid": "YecSInqLCRX3ijjzSEhl2crVmZAjw7rJRUxnkHGbAsc\u003d",
  "aud": "implicitClient1",
  "acr": "default",
  "org.forgerock.openidconnect.ops": "8jP4gFHV96FvVj6EkwXn6eFJSmU",
  "s_hash": "bZewndstb8MjGlJ1t6SXqw",
  "updated_at": 1623673750,
  "azp": "implicitClient1",
  "auth_time": 1623694735,
  "realm": "/openid",
  "exp": 1623698352,
  "tokenType": "JWTToken",
  "iat": 1623694752
}
second_id_token
{
  "sub": "e8a0914a-be03-11eb-8529-0242ac130003",
  "auditTrackingId": "105f8328-808b-4707-950f-381268526312-26652",
  "subname": "e8a0914a-be03-11eb-8529-0242ac130003",
  "iss": "https://frfapi.catalyst.forgerock.org/oauth2/realms/root/realms/openid",
  "tokenName": "id_token",
  "nonce": "vi8Bqa4Wef",
  "sid": "YecSInqLCRX3ijjzSEhl2crVmZAjw7rJRUxnkHGbAsc\u003d",
  "aud": "implicitClient1",
  "acr": "default",
  "org.forgerock.openidconnect.ops": "oy8vDmcSkZGkO-ISepIj00qtsh8",
  "s_hash": "8HmnZWK3_pifxRkmDz2Hwg",
  "updated_at": 1623673750,
  "azp": "implicitClient1",
  "auth_time": 1623694735,
  "realm": "/openid",
  "exp": 1623698360,
  "tokenType": "JWTToken",
  "iat": 1623694760
}
2021-06-14 18:19:21 FINISHED
oidcc-max-age-10000
Test has run to completion
testmodule_result
PASSED
Unregister dynamically registered client
2021-06-14 18:19:21 INFO
UnregisterDynamicallyRegisteredClient
Skipped evaluation due to missing required string: registration_client_uri
expected
registration_client_uri
2021-06-14 18:19:25
TEST-RUNNER
Alias has now been claimed by another test
alias
ForgeRockAM
new_test_id
0fDEiKxPDCgyy9V
Test Results