Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-06-15 17:21:25 INFO
TEST-RUNNER
Test instance yRFwlYN7BQhjtdT created
baseUrl
https://www.certification.openid.net/test/a/pi
variant
{
  "client_auth_type": "mtls",
  "fapi_auth_request_method": "by_value",
  "fapi_profile": "plain_fapi",
  "fapi_response_mode": "plain_response"
}
alias
pi
description
fapi-mtls-jar
planId
JYNtwjKhgrJrI
config
{
  "alias": "pi",
  "description": "fapi-mtls-jar",
  "server": {
    "discoveryUrl": "https://par-what-is-it-good-for.ping-eng.com:9032/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "c__fapi-mtls-jar1",
    "scope": "openid other",
    "hint_type": "login_hint",
    "hint_value": "cheba-hut@ping-eng.com",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "kid": "-WBaQw",
          "use": "sig",
          "alg": "PS256",
          "n": "5DDi1k_FDcYRRGdp2J-ofDpQIVgbYNY3Bi9-QbL0rq2tDEI34DmrSmDNWLdBS3j06gYF3uHMQXw1N9JfYNrEDFGriQxXgLrX_4p6PZ-qvxgRaFK4A_3NyZRD-KPSnDNs6PPDwlFxwTwXDMFerXlSxNyw3QBPDHZu56X-fIajKBovMbQvlYo_iveRp9oixw2kRWE0r2AvpzqdXguUwtZlCUnE9mCWhvAFCDLSycbUspmiw8-4M8UumS8U9NQBxM4eEZ3WSFv8ooJRvEHVvGcL5ITUdgOqiD6xRQIEVuYEo-lZx8AwuPvcrEBjQZ31_g9vUmG4tJQlffEaF8ZNRVlXyw",
          "e": "AQAB",
          "d": "RJGACCAOOXZUB_b_Mk2_hhzLqUldaLrV6_Dngnxw0_ByOGXJfoI1u3LdIZRndXNSPOQ0bWXyR5c4Mp7vdB4onP8JiXQA8zix4SLOWqgY2bU0veFlVCW26aS4zAUGK1O0nUdqgoCQqx0QXA_bEEuNmIQsTSxjlH4eE1Oo5ehbLJgoZpHYQloK4Fgby3qTddmIeXJ7LCxbvTYK-uAL-5vfyLgrkjIckVIDfG92x-FrUDyr1qoLtRHrMuuDMQG-zQms0HyNNXfjBfq9oIDLB9h7mPTguYBoS8k63D6ogpD7UYJUOFUgAm_y-DZUib9YBEXxMJmO2peVL08sF25XKf1XEQ",
          "p": "8t4drc_3MIo_j8tEjnFqyUoxYPRNcyoQSk6lJLr9ILhnBiiXfZZHUOP2f3Jmcr4zaj-D_gSq41CiGrBAhuGG0TnFLeGjBwDUyhRxUyj41k0edvD31HPmeJ2No7aeYOoCIBw5SwjthVHnsNQGWtc6rfd0kpuEsbaEmE9RahBL1RM",
          "q": "8Ieb4MHC_CYAbQkGYJPqw8BTUh3m3SzlX1UxwJfir7k1KJ2JDT90ZWJtFYLRgIwNWttyPXcCDzbwqBqgnLB_AVBO7n6Z9lKALftEHv24mZdXeNOqbuzy_EcvrZSZkG2xBUyc3__mVhpVNA77qqbxLeTyHyrMjzxFqLwdSfOKoWk",
          "dp": "pPi1xkw-x60Q8fcMMYnfFK4eDpLETVckS6VSTjnqGaDI8oj-JmO_O7YtyXKHHqgOOry8Rv8aqWArTN-uZTCqqFKKmtjrKaWp5T6vn-Jz7PXjnL2gSqMTyZiUDsHMoV4zZWZmkI6W8Pmq3RWY33nVtTgi6jdTkne9Z8xxLA-3wxs",
          "dq": "nSA5V-27rnQ0uwW2QMjgB9hPlckq0zlM7aX9xk5yK1DVxR6ENT9KjiBqGi9HJK5Y2w2X50ci9UVymJ4sZa92iCkqJupVMXBbg64spgIg4VTYM3oyUBxB70OhhccZOhwuE8Qkhr_ofD7fgg53oNdFnjF9aZbP4pIA_2VDzNdnrGE",
          "qi": "3MZv7p5pyEFFotF6QUgK8qErkI3Y15rerOd61tyctGFOxqduTdCTpcR6ZDsWiBK_FOubhih9c-3Kw74-T3EHC_ZzL-yMDLGnxtOkdMB0eY60TOfqLOUeckw2JFC7s-HssIDrOmnk98FW6gE1HuDilj0rhIaOXH1gBKwkgVEkr2A"
        }
      ]
    }
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----\nMIIEpAIBAAKCAQEA3Pt72R4KBHrCSJIakTM0/P4CZyVKSEFB0eBs2g7+Eoq3nv80\nTRG7K2zURIOmZLr1HgFxwoNk4UPY+wX4PLDKQjxb86KmAM/seOli7JaA0h0xUeMV\nxS0gutzea3SIAFH2x+7xTCeq9JXqLszFq6jO/oLfOnuI+YGWOIXM6TC50HGIGbmb\nBki0zA9ulx2pr0QQ+5vvj/MWArGESn/S2hW5WDsZlW3vq4JCt2XNG28o6W0qLu+j\nFe0I3SGnTXa1WAlvO9A95ImsdUk3WMfRupsRVWyWOjr/PlSvr/4z60TqzjdYhtO2\nAwfV+geaHCmI5rEYY9xEy/GN9VUl1Kwv3g/L0QIDAQABAoIBAQC/Yy9IQ7P5XTiX\nEbLgvrDNzFDYdHt5SMtwsiaUVRfHh0yw7+akOQ8Z9Q+Cp2KdKy7P5gBYruPYFaL/\nBZSRO6xw4UXiJKQRYAM2VSvQLCk10QK+ISbhtsv6CwC3oB2J6XMKhe+GPXTakFxa\nXA93NKTR2Rbs18EyFwG7wmZOMF0+IPnEDUY+qY9DP2aDkLQiqrH+RF1i0eJXLkhh\nL2UFNCDpW7f5iR6y2RUtpq4rHO9aDrGS7W+tzIZEfQpP+x6dEBg9SrHqE7zwaWIX\nuTlwypVRbZRuQqbFQzFAAJPIBWylSs/oypYhPJvhHAG9yCQR79exARbuWXdJyCYa\nGTxc+5ABAoGBAPV33BO7fZeISXdYKwDBKCKfVI9q4ssps/TYpCEKXQ8omrdYJrsD\ncv9rRCJedb250AW3hLJ/18JXjgnFq+o919fe60HE+b833NzzeMs26AFmvsuWvV1y\nXvSIwbMp6LhrzUmrsOdIrhbk8V2tIOpfySrWQUt6LS2jpeEXZSW5XKyhAoGBAOZ2\nrgjYDek2kss/tYnrsmg0RYTX9dI4tmi7P92YCsJfRQTMznBj1HxP8FNyxrZ1AgK5\nBNESgpW3dnd6RekfG04OecDkQSDtJiBxhoOQj//SYLHMDP+JmMFPD/YErulFQz8n\nOJsT5KNYhi9T9sAcFhrwrqzBp6E3KsbgR5+10iExAoGBAJssAvaCXnltUSvdk4mt\nkUaZvCXRZr8RhM4yKUctuvg7LdrbIdi07HxkfbTQS9P843DJu1vvjyAuov6wc+Xm\n5Ex1gfiYoVxs3vTaALFN60n/fntKtjiddUNWNESjKJd0plh87Z63hj24yo/yQs2G\nca/fs3UYLfkc616ooGtBi0EhAoGAIhQsmfww2mqKfGmYU6O5xvTrzsAMhqCCQKxn\nvkHMXX+u+g26/R2V/yfm9sADKFnXCUYIs03UZ4UwjGxVSCqkY/95+48FHnRS7fs7\nk9rdoEugpsnwphzXrMYfKxb4MmBemEkZcr0XUxw1A2ycET5V+nfarIsaWZmJxszF\napV9VBECgYBBrwBJdKtYQTh8+mJJtt5Cv+f6Ynw4QIG8HYssMq1CkFV3gcJFMgIh\nbdyI6yXnwhsk1EtgZYSvOkMym/mJNhyojvzsjUg7bkTivVFeMUy5n89i6T/KqqGH\n8zabTXrA/W3fAj6r58+93+20ZRqVFrhFVxHq9/2rq58b83CRxsHB1w\u003d\u003d\n-----END RSA PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----\nMIIB5jCCAYugAwIBAgIBFjAKBggqhkjOPQQDAjBWMQswCQYDVQQGEwJVUzEbMBkG\nA1UECgwSTGV0J3MgQXV0aGVudGljYXRlMSowKAYDVQQDDCFMZXQncyBBdXRoZW50\naWNhdGUgUm9vdCBBdXRob3JpdHkwHhcNMjAwMTE0MjEzMjMwWhcNMzAwMTExMjEz\nMjMwWjA6MRswGQYDVQQKDBJMZXQncyBBdXRoZW50aWNhdGUxGzAZBgNVBAMMEkxB\nIEludGVybWVkaWF0ZSBDQTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJf+aA54\nRC5pyLAR5yfXVYmNpgd+CGUTDp2KOGhc0gK91zxhHesEYkdXkpS2UN8Kati+yHtW\nCV3kkhCngGyv7RqjZjBkMB0GA1UdDgQWBBRm3WjLa38lbEYCuiCPct0ZaSED2DAf\nBgNVHSMEGDAWgBTEA2Q6eecKu9g9yb5glbkhhVINGDASBgNVHRMBAf8ECDAGAQH/\nAgEAMA4GA1UdDwEB/wQEAwIBhjAKBggqhkjOPQQDAgNJADBGAiEA5pLvaFwRRkxo\nmIAtDIwg9D7gC1xzxBl4r28EzmSO1pcCIQCJUShpSXO9HDIQMUgH69fNDEMHXD3R\nRX5gP7kuu2KGMg\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "resource": {
    "resourceUrl": "https://par-what-is-it-good-for.ping-eng.com:3000/get"
  },
  "client2": {
    "client_id": "c__fapi-mtls-jar2",
    "scope": "openid",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "kid": "8hTzUQ",
          "use": "sig",
          "alg": "PS256",
          "n": "gBTXpS-lCNO2uy-WjHx2hXBhECLWk75N0CCGU3iRfxi6fmE1sOcxtmDZfNVxcM7l04xY9KiD7cLsd4OAIduAwiSe142jLoONhziaoCoT60ghZQSi1X4IdfHAcvKScah-f7u2MayZBJSOydi-NltbbhKIttiZRcyx7-Yl4Q2m52L7ARYhTjidGuHGTRRS6NlxDVUBIX6j4jc3Pk99ZU7a5Zk6wWM12GBhHdojFOvbABA6w7CxjC48u9TEh0L5d9hz3aCFqcAII8XB0VY5M5_yj03oFfNbrNUd__GYlRcN3tycHTFvTdWtV7wq-v8f6nbWK3sW1Gllt83b6o5G42LFQQ",
          "e": "AQAB",
          "d": "QqGVJfxJUPRDBdJV8bP2PKkf9bMKCkZgWLvy5Y29s2775i9QLT25IPX1bvnjUBpyecFzraPVLmXPesVQbUyyCU3fzKeEkvghMo2B83ywbCBULydgRsyQPjuMMMB86uALHwxaVjFCUZ2vQtac7c5NHFBMC0NXSXaZwwHqBtCBWbHp2Je531wEfeb8uzrfJpU1Of7bLGfjKaQTwnxs3v9iUng2uR143LTQd1bPL14vJjutnFGoDb4-CE80g_QLqtW7J1gDRRgxHzwnP9nmSjPpGpPK5u1zpQcpXGbi7QTUbqp13cSqq4pLpj2Dib90waoGZ6iicmcIC_zXy0VADcA_OQ",
          "p": "vosG_MYCvuS6CynUB_CKpqqggnbSDh_iikepagNOQOD-T4BQAYVsQRMyaVzzFJrx3bK3QhFMKbSb7MZOWG2ZpqDUqrML7SlMIxQt6feLWAlVAdSv_RXxWULQoS6dowUfQsfk0OV3x4qMFpmLV3gTAMmJ0-ZuoEDY-72Tj3T-PFc",
          "q": "rBS8NrHiX3dRtvI81gTvRFUCNzCbBJr54rDv4CXqi9uWwA3wi2xOJSV3bQYgZtoNWaCa-UxfTimG_JUdqMCXB0lMBf62OKB7V-rRA0qZyEMrJrgEcVPQ_nQc3ym_Av6hZdNs9ne1DJZSI_lj0NkeE985V_24vKRRME6j6-yYjCc",
          "dp": "K-Mr1dbp1Pwr2dxliPqfhOnyFHq3wScY7863t8JRKOJp0Pf19ZO8rnR0fQ46svlJUk4SpbYEO-rsqym16-o6pMWQlkytJ5AGiGHifWxV_Q4RNV2-t2VxdKTOFwH8rwrD-4a9LlxcLWq8_4uYK6ptfhXtmBAQVPr6v2kX7sf8svs",
          "dq": "EqfY09ErKpBkAoJ2h_lW-0CAEf2qALDQgHwQNWvG5syypjWcq3Ddc_eA4Af3AU-IfPwFcRuPhYjJAp8j7QScGwUeQdQgazkyxhBGAqZWz7hAeF0g1ixxDvUFoEgFVkzGsKRgPsQxk6DEXPQPlzfCpALiU6DFI2ZpCuSrrssiqqc",
          "qi": "m1eGh0la4w5XdSgLO5v1ToXnuVWHQf-7gHuNGHXdkVfMmIEMoJyiWswSawB71DSmYrr8x29n3IrgErysXLulbnLVr36y7gyfaNo8QGa7IuzDtYBBo6l7nenHqRJkagWgS7sZDaBYqM9_vkT61_kt3fjARBaqA0C_YBuVB5qb_DM"
        }
      ]
    }
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\nAJ3lQYMTZm1UjLE34Vz0nrPCJa9k60E\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\n0qHzMEMtvif0Urt6gN5ZCGdpjl0Fxb0k+3XvWc1lqwAx1CFKDpoF\n-----END RSA PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----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\nRX5gP7kuu2KGMg\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "automated_ciba_approval_url": "https://cheba-hut.ping-eng.com:9031/ext/fake/{action}/oob?v\u003d{auth_req_id}"
}
testName
fapi-rw-id2-ensure-client-id-in-token-endpoint
2021-06-15 17:21:25 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
2021-06-15 17:21:25
GetDynamicServerConfiguration
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9032/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-06-15 17:21:26 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Tue, 15 Jun 2021 17:21:26 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dOr79eQnr1VKZ8aDEo9sSvP;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "content-length": "3666"
}
response_body
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/device_authz.oauth2",
  "scopes_supported": [ "other", "openid" ],
  "claims_supported": [ "acr", "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "token_endpoint_auth_methods_supported": ["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "tls_client_certificate_bound_access_tokens": true,
  "code_challenge_methods_supported": [ "plain", "S256" ]
}
2021-06-15 17:21:26
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/device_authz.oauth2",
  "scopes_supported": [ "other", "openid" ],
  "claims_supported": [ "acr", "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "token_endpoint_auth_methods_supported": ["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "tls_client_certificate_bound_access_tokens": true,
  "code_challenge_methods_supported": [ "plain", "S256" ]
}
2021-06-15 17:21:26 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://par-what-is-it-good-for.ping-eng.com:9032
authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2
token_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
revocation_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/revoke_token.oauth2
userinfo_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/idp/userinfo.openid
introspection_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/introspect.oauth2
jwks_uri
https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS
registration_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/clients.oauth2
ping_revoked_sris_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/revokedSris
ping_session_management_sris_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/sessions
ping_end_session_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/idp/startSLO.ping
device_authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/device_authz.oauth2
scopes_supported
[
  "other",
  "openid"
]
claims_supported
[
  "acr",
  "sub"
]
response_types_supported
[
  "code",
  "token",
  "id_token",
  "code token",
  "code id_token",
  "token id_token",
  "code token id_token"
]
response_modes_supported
[
  "fragment",
  "query",
  "form_post"
]
grant_types_supported
[
  "implicit",
  "authorization_code",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
  "urn:ietf:params:oauth:grant-type:jwt-bearer",
  "urn:ietf:params:oauth:grant-type:saml2-bearer",
  "urn:ietf:params:oauth:grant-type:device_code",
  "urn:ietf:params:oauth:grant-type:token-exchange",
  "urn:openid:params:grant-type:ciba"
]
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "none",
  "HS256",
  "HS384",
  "HS512",
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
token_endpoint_auth_methods_supported
[
  "client_secret_basic",
  "client_secret_post",
  "private_key_jwt",
  "tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
claim_types_supported
[
  "normal"
]
claims_parameter_supported
false
request_parameter_supported
true
request_uri_parameter_supported
false
request_object_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
id_token_encryption_alg_values_supported
[
  "dir",
  "A128KW",
  "A192KW",
  "A256KW",
  "A128GCMKW",
  "A192GCMKW",
  "A256GCMKW",
  "ECDH-ES",
  "ECDH-ES+A128KW",
  "ECDH-ES+A192KW",
  "ECDH-ES+A256KW",
  "RSA-OAEP"
]
id_token_encryption_enc_values_supported
[
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256CBC-HS512",
  "A128GCM",
  "A192GCM",
  "A256GCM"
]
pushed_authorization_request_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2
require_pushed_authorization_requests
false
backchannel_authentication_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/bc-auth.ciba
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
backchannel_user_code_parameter_supported
false
tls_client_certificate_bound_access_tokens
true
code_challenge_methods_supported
[
  "plain",
  "S256"
]
2021-06-15 17:21:26 INFO
AddMTLSEndpointAliasesToEnvironment
The mtls_endpoint_aliases is not present in the server configuration
server
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/device_authz.oauth2",
  "scopes_supported": [
    "other",
    "openid"
  ],
  "claims_supported": [
    "acr",
    "sub"
  ],
  "response_types_supported": [
    "code",
    "token",
    "id_token",
    "code token",
    "code id_token",
    "token id_token",
    "code token id_token"
  ],
  "response_modes_supported": [
    "fragment",
    "query",
    "form_post"
  ],
  "grant_types_supported": [
    "implicit",
    "authorization_code",
    "refresh_token",
    "password",
    "client_credentials",
    "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
    "urn:ietf:params:oauth:grant-type:jwt-bearer",
    "urn:ietf:params:oauth:grant-type:saml2-bearer",
    "urn:ietf:params:oauth:grant-type:device_code",
    "urn:ietf:params:oauth:grant-type:token-exchange",
    "urn:openid:params:grant-type:ciba"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "HS256",
    "HS384",
    "HS512",
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "private_key_jwt",
    "tls_client_auth"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "claim_types_supported": [
    "normal"
  ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "id_token_encryption_alg_values_supported": [
    "dir",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "RSA-OAEP"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [
    "poll",
    "ping"
  ],
  "backchannel_authentication_request_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "backchannel_user_code_parameter_supported": false,
  "tls_client_certificate_bound_access_tokens": true,
  "code_challenge_methods_supported": [
    "plain",
    "S256"
  ]
}
2021-06-15 17:21:26 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2021-06-15 17:21:26 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9032
}
authorization_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9031
}
token_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9032
}
userinfo_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9032
}
2021-06-15 17:21:26
FetchServerKeys
Fetching server key
jwks_uri
https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS
2021-06-15 17:21:26
FetchServerKeys
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-06-15 17:21:26 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Tue, 15 Jun 2021 17:21:26 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dlBxzOXewsFlFFTWdbOW9Bm;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"keys":[{"kty":"EC","kid":"5QadRhn8CbPcH87TPn44jtdjEb0","use":"sig","x":"NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY","y":"gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI","crv":"P-256"},{"kty":"RSA","kid":"E7i-dwTdrPHhrxA87ERbRd3SMTw","use":"sig","n":"gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw","e":"AQAB"},{"kty":"EC","kid":"NJ-xeJ1prPqxexh2SKij5J2P4uo","use":"sig","x":"H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ","y":"r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-","crv":"P-384"},{"kty":"EC","kid":"_jjw9ffzGB6Z4kAQAO_NV0B7sEU","use":"sig","x":"AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E","y":"AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12","crv":"P-521"},{"kty":"EC","kid":"SN6UlUJWv_KKF_mHImCtTOmUD2M","use":"sig","x":"gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ","y":"y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60","crv":"P-256"},{"kty":"RSA","kid":"ZH2y4AetHTynvUgDK_YxYbB5yLQ","use":"sig","n":"mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ","e":"AQAB"},{"kty":"EC","kid":"dsh6NHxZgjoeBgIu0XsECIIbtL8","use":"sig","x":"37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV","y":"jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F","crv":"P-384"},{"kty":"EC","kid":"qrrYthgG0KN3BK0QKR5GVxPIKhA","use":"sig","x":"AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS","y":"AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj","crv":"P-521"},{"kty":"EC","kid":"5MwmNtztM_lf-V-GNg1yUkl07HA","use":"enc","x":"_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0","y":"YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g","crv":"P-256"},{"kty":"RSA","kid":"KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM","use":"enc","n":"r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw","e":"AQAB"},{"kty":"EC","kid":"tTz8_Iu7CET43WmjZANNqOkoSpg","use":"enc","x":"CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ","y":"pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL","crv":"P-384"},{"kty":"EC","kid":"yJTeSKJRk14clH6IWD7NKszzrbQ","use":"enc","x":"AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI","y":"AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p","crv":"P-521"}]}
2021-06-15 17:21:26
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"EC","kid":"5QadRhn8CbPcH87TPn44jtdjEb0","use":"sig","x":"NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY","y":"gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI","crv":"P-256"},{"kty":"RSA","kid":"E7i-dwTdrPHhrxA87ERbRd3SMTw","use":"sig","n":"gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw","e":"AQAB"},{"kty":"EC","kid":"NJ-xeJ1prPqxexh2SKij5J2P4uo","use":"sig","x":"H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ","y":"r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-","crv":"P-384"},{"kty":"EC","kid":"_jjw9ffzGB6Z4kAQAO_NV0B7sEU","use":"sig","x":"AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E","y":"AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12","crv":"P-521"},{"kty":"EC","kid":"SN6UlUJWv_KKF_mHImCtTOmUD2M","use":"sig","x":"gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ","y":"y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60","crv":"P-256"},{"kty":"RSA","kid":"ZH2y4AetHTynvUgDK_YxYbB5yLQ","use":"sig","n":"mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ","e":"AQAB"},{"kty":"EC","kid":"dsh6NHxZgjoeBgIu0XsECIIbtL8","use":"sig","x":"37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV","y":"jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F","crv":"P-384"},{"kty":"EC","kid":"qrrYthgG0KN3BK0QKR5GVxPIKhA","use":"sig","x":"AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS","y":"AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj","crv":"P-521"},{"kty":"EC","kid":"5MwmNtztM_lf-V-GNg1yUkl07HA","use":"enc","x":"_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0","y":"YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g","crv":"P-256"},{"kty":"RSA","kid":"KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM","use":"enc","n":"r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw","e":"AQAB"},{"kty":"EC","kid":"tTz8_Iu7CET43WmjZANNqOkoSpg","use":"enc","x":"CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ","y":"pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL","crv":"P-384"},{"kty":"EC","kid":"yJTeSKJRk14clH6IWD7NKszzrbQ","use":"enc","x":"AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI","y":"AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p","crv":"P-521"}]}
2021-06-15 17:21:26 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "kid": "5QadRhn8CbPcH87TPn44jtdjEb0",
      "use": "sig",
      "x": "NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY",
      "y": "gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "E7i-dwTdrPHhrxA87ERbRd3SMTw",
      "use": "sig",
      "n": "gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "NJ-xeJ1prPqxexh2SKij5J2P4uo",
      "use": "sig",
      "x": "H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ",
      "y": "r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "_jjw9ffzGB6Z4kAQAO_NV0B7sEU",
      "use": "sig",
      "x": "AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E",
      "y": "AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "SN6UlUJWv_KKF_mHImCtTOmUD2M",
      "use": "sig",
      "x": "gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ",
      "y": "y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
      "use": "sig",
      "n": "mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "dsh6NHxZgjoeBgIu0XsECIIbtL8",
      "use": "sig",
      "x": "37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV",
      "y": "jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "qrrYthgG0KN3BK0QKR5GVxPIKhA",
      "use": "sig",
      "x": "AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS",
      "y": "AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "5MwmNtztM_lf-V-GNg1yUkl07HA",
      "use": "enc",
      "x": "_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0",
      "y": "YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM",
      "use": "enc",
      "n": "r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "tTz8_Iu7CET43WmjZANNqOkoSpg",
      "use": "enc",
      "x": "CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ",
      "y": "pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "yJTeSKJRk14clH6IWD7NKszzrbQ",
      "use": "enc",
      "x": "AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI",
      "y": "AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p",
      "crv": "P-521"
    }
  ]
}
2021-06-15 17:21:26 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "kid": "5QadRhn8CbPcH87TPn44jtdjEb0",
      "use": "sig",
      "x": "NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY",
      "y": "gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "E7i-dwTdrPHhrxA87ERbRd3SMTw",
      "use": "sig",
      "n": "gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "NJ-xeJ1prPqxexh2SKij5J2P4uo",
      "use": "sig",
      "x": "H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ",
      "y": "r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "_jjw9ffzGB6Z4kAQAO_NV0B7sEU",
      "use": "sig",
      "x": "AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E",
      "y": "AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "SN6UlUJWv_KKF_mHImCtTOmUD2M",
      "use": "sig",
      "x": "gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ",
      "y": "y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
      "use": "sig",
      "n": "mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "dsh6NHxZgjoeBgIu0XsECIIbtL8",
      "use": "sig",
      "x": "37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV",
      "y": "jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "qrrYthgG0KN3BK0QKR5GVxPIKhA",
      "use": "sig",
      "x": "AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS",
      "y": "AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "5MwmNtztM_lf-V-GNg1yUkl07HA",
      "use": "enc",
      "x": "_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0",
      "y": "YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM",
      "use": "enc",
      "n": "r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "tTz8_Iu7CET43WmjZANNqOkoSpg",
      "use": "enc",
      "x": "CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ",
      "y": "pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "yJTeSKJRk14clH6IWD7NKszzrbQ",
      "use": "enc",
      "x": "AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI",
      "y": "AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p",
      "crv": "P-521"
    }
  ]
}
2021-06-15 17:21:26 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-06-15 17:21:26 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2021-06-15 17:21:26 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-06-15 17:21:26 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "kid": "5QadRhn8CbPcH87TPn44jtdjEb0",
      "use": "sig",
      "x": "NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY",
      "y": "gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "E7i-dwTdrPHhrxA87ERbRd3SMTw",
      "use": "sig",
      "n": "gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "NJ-xeJ1prPqxexh2SKij5J2P4uo",
      "use": "sig",
      "x": "H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ",
      "y": "r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "_jjw9ffzGB6Z4kAQAO_NV0B7sEU",
      "use": "sig",
      "x": "AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E",
      "y": "AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "SN6UlUJWv_KKF_mHImCtTOmUD2M",
      "use": "sig",
      "x": "gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ",
      "y": "y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
      "use": "sig",
      "n": "mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "dsh6NHxZgjoeBgIu0XsECIIbtL8",
      "use": "sig",
      "x": "37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV",
      "y": "jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "qrrYthgG0KN3BK0QKR5GVxPIKhA",
      "use": "sig",
      "x": "AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS",
      "y": "AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "5MwmNtztM_lf-V-GNg1yUkl07HA",
      "use": "enc",
      "x": "_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0",
      "y": "YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM",
      "use": "enc",
      "n": "r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "tTz8_Iu7CET43WmjZANNqOkoSpg",
      "use": "enc",
      "x": "CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ",
      "y": "pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "yJTeSKJRk14clH6IWD7NKszzrbQ",
      "use": "enc",
      "x": "AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI",
      "y": "AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p",
      "crv": "P-521"
    }
  ]
}
2021-06-15 17:21:26 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
c__fapi-mtls-jar1
scope
openid other
hint_type
login_hint
hint_value
cheba-hut@ping-eng.com
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "-WBaQw",
      "use": "sig",
      "alg": "PS256",
      "n": "5DDi1k_FDcYRRGdp2J-ofDpQIVgbYNY3Bi9-QbL0rq2tDEI34DmrSmDNWLdBS3j06gYF3uHMQXw1N9JfYNrEDFGriQxXgLrX_4p6PZ-qvxgRaFK4A_3NyZRD-KPSnDNs6PPDwlFxwTwXDMFerXlSxNyw3QBPDHZu56X-fIajKBovMbQvlYo_iveRp9oixw2kRWE0r2AvpzqdXguUwtZlCUnE9mCWhvAFCDLSycbUspmiw8-4M8UumS8U9NQBxM4eEZ3WSFv8ooJRvEHVvGcL5ITUdgOqiD6xRQIEVuYEo-lZx8AwuPvcrEBjQZ31_g9vUmG4tJQlffEaF8ZNRVlXyw",
      "e": "AQAB",
      "d": "RJGACCAOOXZUB_b_Mk2_hhzLqUldaLrV6_Dngnxw0_ByOGXJfoI1u3LdIZRndXNSPOQ0bWXyR5c4Mp7vdB4onP8JiXQA8zix4SLOWqgY2bU0veFlVCW26aS4zAUGK1O0nUdqgoCQqx0QXA_bEEuNmIQsTSxjlH4eE1Oo5ehbLJgoZpHYQloK4Fgby3qTddmIeXJ7LCxbvTYK-uAL-5vfyLgrkjIckVIDfG92x-FrUDyr1qoLtRHrMuuDMQG-zQms0HyNNXfjBfq9oIDLB9h7mPTguYBoS8k63D6ogpD7UYJUOFUgAm_y-DZUib9YBEXxMJmO2peVL08sF25XKf1XEQ",
      "p": "8t4drc_3MIo_j8tEjnFqyUoxYPRNcyoQSk6lJLr9ILhnBiiXfZZHUOP2f3Jmcr4zaj-D_gSq41CiGrBAhuGG0TnFLeGjBwDUyhRxUyj41k0edvD31HPmeJ2No7aeYOoCIBw5SwjthVHnsNQGWtc6rfd0kpuEsbaEmE9RahBL1RM",
      "q": "8Ieb4MHC_CYAbQkGYJPqw8BTUh3m3SzlX1UxwJfir7k1KJ2JDT90ZWJtFYLRgIwNWttyPXcCDzbwqBqgnLB_AVBO7n6Z9lKALftEHv24mZdXeNOqbuzy_EcvrZSZkG2xBUyc3__mVhpVNA77qqbxLeTyHyrMjzxFqLwdSfOKoWk",
      "dp": "pPi1xkw-x60Q8fcMMYnfFK4eDpLETVckS6VSTjnqGaDI8oj-JmO_O7YtyXKHHqgOOry8Rv8aqWArTN-uZTCqqFKKmtjrKaWp5T6vn-Jz7PXjnL2gSqMTyZiUDsHMoV4zZWZmkI6W8Pmq3RWY33nVtTgi6jdTkne9Z8xxLA-3wxs",
      "dq": "nSA5V-27rnQ0uwW2QMjgB9hPlckq0zlM7aX9xk5yK1DVxR6ENT9KjiBqGi9HJK5Y2w2X50ci9UVymJ4sZa92iCkqJupVMXBbg64spgIg4VTYM3oyUBxB70OhhccZOhwuE8Qkhr_ofD7fgg53oNdFnjF9aZbP4pIA_2VDzNdnrGE",
      "qi": "3MZv7p5pyEFFotF6QUgK8qErkI3Y15rerOd61tyctGFOxqduTdCTpcR6ZDsWiBK_FOubhih9c-3Kw74-T3EHC_ZzL-yMDLGnxtOkdMB0eY60TOfqLOUeckw2JFC7s-HssIDrOmnk98FW6gE1HuDilj0rhIaOXH1gBKwkgVEkr2A"
    }
  ]
}
2021-06-15 17:21:26 SUCCESS
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
2021-06-15 17:21:26 SUCCESS
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
ca
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
2021-06-15 17:21:26 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-06-15 17:21:26 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "-WBaQw",
      "use": "sig",
      "alg": "PS256",
      "n": "5DDi1k_FDcYRRGdp2J-ofDpQIVgbYNY3Bi9-QbL0rq2tDEI34DmrSmDNWLdBS3j06gYF3uHMQXw1N9JfYNrEDFGriQxXgLrX_4p6PZ-qvxgRaFK4A_3NyZRD-KPSnDNs6PPDwlFxwTwXDMFerXlSxNyw3QBPDHZu56X-fIajKBovMbQvlYo_iveRp9oixw2kRWE0r2AvpzqdXguUwtZlCUnE9mCWhvAFCDLSycbUspmiw8-4M8UumS8U9NQBxM4eEZ3WSFv8ooJRvEHVvGcL5ITUdgOqiD6xRQIEVuYEo-lZx8AwuPvcrEBjQZ31_g9vUmG4tJQlffEaF8ZNRVlXyw",
      "e": "AQAB",
      "d": "RJGACCAOOXZUB_b_Mk2_hhzLqUldaLrV6_Dngnxw0_ByOGXJfoI1u3LdIZRndXNSPOQ0bWXyR5c4Mp7vdB4onP8JiXQA8zix4SLOWqgY2bU0veFlVCW26aS4zAUGK1O0nUdqgoCQqx0QXA_bEEuNmIQsTSxjlH4eE1Oo5ehbLJgoZpHYQloK4Fgby3qTddmIeXJ7LCxbvTYK-uAL-5vfyLgrkjIckVIDfG92x-FrUDyr1qoLtRHrMuuDMQG-zQms0HyNNXfjBfq9oIDLB9h7mPTguYBoS8k63D6ogpD7UYJUOFUgAm_y-DZUib9YBEXxMJmO2peVL08sF25XKf1XEQ",
      "p": "8t4drc_3MIo_j8tEjnFqyUoxYPRNcyoQSk6lJLr9ILhnBiiXfZZHUOP2f3Jmcr4zaj-D_gSq41CiGrBAhuGG0TnFLeGjBwDUyhRxUyj41k0edvD31HPmeJ2No7aeYOoCIBw5SwjthVHnsNQGWtc6rfd0kpuEsbaEmE9RahBL1RM",
      "q": "8Ieb4MHC_CYAbQkGYJPqw8BTUh3m3SzlX1UxwJfir7k1KJ2JDT90ZWJtFYLRgIwNWttyPXcCDzbwqBqgnLB_AVBO7n6Z9lKALftEHv24mZdXeNOqbuzy_EcvrZSZkG2xBUyc3__mVhpVNA77qqbxLeTyHyrMjzxFqLwdSfOKoWk",
      "dp": "pPi1xkw-x60Q8fcMMYnfFK4eDpLETVckS6VSTjnqGaDI8oj-JmO_O7YtyXKHHqgOOry8Rv8aqWArTN-uZTCqqFKKmtjrKaWp5T6vn-Jz7PXjnL2gSqMTyZiUDsHMoV4zZWZmkI6W8Pmq3RWY33nVtTgi6jdTkne9Z8xxLA-3wxs",
      "dq": "nSA5V-27rnQ0uwW2QMjgB9hPlckq0zlM7aX9xk5yK1DVxR6ENT9KjiBqGi9HJK5Y2w2X50ci9UVymJ4sZa92iCkqJupVMXBbg64spgIg4VTYM3oyUBxB70OhhccZOhwuE8Qkhr_ofD7fgg53oNdFnjF9aZbP4pIA_2VDzNdnrGE",
      "qi": "3MZv7p5pyEFFotF6QUgK8qErkI3Y15rerOd61tyctGFOxqduTdCTpcR6ZDsWiBK_FOubhih9c-3Kw74-T3EHC_ZzL-yMDLGnxtOkdMB0eY60TOfqLOUeckw2JFC7s-HssIDrOmnk98FW6gE1HuDilj0rhIaOXH1gBKwkgVEkr2A"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "-WBaQw",
      "alg": "PS256",
      "n": "5DDi1k_FDcYRRGdp2J-ofDpQIVgbYNY3Bi9-QbL0rq2tDEI34DmrSmDNWLdBS3j06gYF3uHMQXw1N9JfYNrEDFGriQxXgLrX_4p6PZ-qvxgRaFK4A_3NyZRD-KPSnDNs6PPDwlFxwTwXDMFerXlSxNyw3QBPDHZu56X-fIajKBovMbQvlYo_iveRp9oixw2kRWE0r2AvpzqdXguUwtZlCUnE9mCWhvAFCDLSycbUspmiw8-4M8UumS8U9NQBxM4eEZ3WSFv8ooJRvEHVvGcL5ITUdgOqiD6xRQIEVuYEo-lZx8AwuPvcrEBjQZ31_g9vUmG4tJQlffEaF8ZNRVlXyw"
    }
  ]
}
2021-06-15 17:21:26 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-06-15 17:21:26 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-06-15 17:21:26 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "PS256",
  "ES256"
]
2021-06-15 17:21:26 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "-WBaQw",
      "use": "sig",
      "alg": "PS256",
      "n": "5DDi1k_FDcYRRGdp2J-ofDpQIVgbYNY3Bi9-QbL0rq2tDEI34DmrSmDNWLdBS3j06gYF3uHMQXw1N9JfYNrEDFGriQxXgLrX_4p6PZ-qvxgRaFK4A_3NyZRD-KPSnDNs6PPDwlFxwTwXDMFerXlSxNyw3QBPDHZu56X-fIajKBovMbQvlYo_iveRp9oixw2kRWE0r2AvpzqdXguUwtZlCUnE9mCWhvAFCDLSycbUspmiw8-4M8UumS8U9NQBxM4eEZ3WSFv8ooJRvEHVvGcL5ITUdgOqiD6xRQIEVuYEo-lZx8AwuPvcrEBjQZ31_g9vUmG4tJQlffEaF8ZNRVlXyw",
      "e": "AQAB",
      "d": "RJGACCAOOXZUB_b_Mk2_hhzLqUldaLrV6_Dngnxw0_ByOGXJfoI1u3LdIZRndXNSPOQ0bWXyR5c4Mp7vdB4onP8JiXQA8zix4SLOWqgY2bU0veFlVCW26aS4zAUGK1O0nUdqgoCQqx0QXA_bEEuNmIQsTSxjlH4eE1Oo5ehbLJgoZpHYQloK4Fgby3qTddmIeXJ7LCxbvTYK-uAL-5vfyLgrkjIckVIDfG92x-FrUDyr1qoLtRHrMuuDMQG-zQms0HyNNXfjBfq9oIDLB9h7mPTguYBoS8k63D6ogpD7UYJUOFUgAm_y-DZUib9YBEXxMJmO2peVL08sF25XKf1XEQ",
      "p": "8t4drc_3MIo_j8tEjnFqyUoxYPRNcyoQSk6lJLr9ILhnBiiXfZZHUOP2f3Jmcr4zaj-D_gSq41CiGrBAhuGG0TnFLeGjBwDUyhRxUyj41k0edvD31HPmeJ2No7aeYOoCIBw5SwjthVHnsNQGWtc6rfd0kpuEsbaEmE9RahBL1RM",
      "q": "8Ieb4MHC_CYAbQkGYJPqw8BTUh3m3SzlX1UxwJfir7k1KJ2JDT90ZWJtFYLRgIwNWttyPXcCDzbwqBqgnLB_AVBO7n6Z9lKALftEHv24mZdXeNOqbuzy_EcvrZSZkG2xBUyc3__mVhpVNA77qqbxLeTyHyrMjzxFqLwdSfOKoWk",
      "dp": "pPi1xkw-x60Q8fcMMYnfFK4eDpLETVckS6VSTjnqGaDI8oj-JmO_O7YtyXKHHqgOOry8Rv8aqWArTN-uZTCqqFKKmtjrKaWp5T6vn-Jz7PXjnL2gSqMTyZiUDsHMoV4zZWZmkI6W8Pmq3RWY33nVtTgi6jdTkne9Z8xxLA-3wxs",
      "dq": "nSA5V-27rnQ0uwW2QMjgB9hPlckq0zlM7aX9xk5yK1DVxR6ENT9KjiBqGi9HJK5Y2w2X50ci9UVymJ4sZa92iCkqJupVMXBbg64spgIg4VTYM3oyUBxB70OhhccZOhwuE8Qkhr_ofD7fgg53oNdFnjF9aZbP4pIA_2VDzNdnrGE",
      "qi": "3MZv7p5pyEFFotF6QUgK8qErkI3Y15rerOd61tyctGFOxqduTdCTpcR6ZDsWiBK_FOubhih9c-3Kw74-T3EHC_ZzL-yMDLGnxtOkdMB0eY60TOfqLOUeckw2JFC7s-HssIDrOmnk98FW6gE1HuDilj0rhIaOXH1gBKwkgVEkr2A"
    }
  ]
}
2021-06-15 17:21:26 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
Verify configuration of second client
2021-06-15 17:21:26 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
c__fapi-mtls-jar2
scope
openid
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "8hTzUQ",
      "use": "sig",
      "alg": "PS256",
      "n": "gBTXpS-lCNO2uy-WjHx2hXBhECLWk75N0CCGU3iRfxi6fmE1sOcxtmDZfNVxcM7l04xY9KiD7cLsd4OAIduAwiSe142jLoONhziaoCoT60ghZQSi1X4IdfHAcvKScah-f7u2MayZBJSOydi-NltbbhKIttiZRcyx7-Yl4Q2m52L7ARYhTjidGuHGTRRS6NlxDVUBIX6j4jc3Pk99ZU7a5Zk6wWM12GBhHdojFOvbABA6w7CxjC48u9TEh0L5d9hz3aCFqcAII8XB0VY5M5_yj03oFfNbrNUd__GYlRcN3tycHTFvTdWtV7wq-v8f6nbWK3sW1Gllt83b6o5G42LFQQ",
      "e": "AQAB",
      "d": "QqGVJfxJUPRDBdJV8bP2PKkf9bMKCkZgWLvy5Y29s2775i9QLT25IPX1bvnjUBpyecFzraPVLmXPesVQbUyyCU3fzKeEkvghMo2B83ywbCBULydgRsyQPjuMMMB86uALHwxaVjFCUZ2vQtac7c5NHFBMC0NXSXaZwwHqBtCBWbHp2Je531wEfeb8uzrfJpU1Of7bLGfjKaQTwnxs3v9iUng2uR143LTQd1bPL14vJjutnFGoDb4-CE80g_QLqtW7J1gDRRgxHzwnP9nmSjPpGpPK5u1zpQcpXGbi7QTUbqp13cSqq4pLpj2Dib90waoGZ6iicmcIC_zXy0VADcA_OQ",
      "p": "vosG_MYCvuS6CynUB_CKpqqggnbSDh_iikepagNOQOD-T4BQAYVsQRMyaVzzFJrx3bK3QhFMKbSb7MZOWG2ZpqDUqrML7SlMIxQt6feLWAlVAdSv_RXxWULQoS6dowUfQsfk0OV3x4qMFpmLV3gTAMmJ0-ZuoEDY-72Tj3T-PFc",
      "q": "rBS8NrHiX3dRtvI81gTvRFUCNzCbBJr54rDv4CXqi9uWwA3wi2xOJSV3bQYgZtoNWaCa-UxfTimG_JUdqMCXB0lMBf62OKB7V-rRA0qZyEMrJrgEcVPQ_nQc3ym_Av6hZdNs9ne1DJZSI_lj0NkeE985V_24vKRRME6j6-yYjCc",
      "dp": "K-Mr1dbp1Pwr2dxliPqfhOnyFHq3wScY7863t8JRKOJp0Pf19ZO8rnR0fQ46svlJUk4SpbYEO-rsqym16-o6pMWQlkytJ5AGiGHifWxV_Q4RNV2-t2VxdKTOFwH8rwrD-4a9LlxcLWq8_4uYK6ptfhXtmBAQVPr6v2kX7sf8svs",
      "dq": "EqfY09ErKpBkAoJ2h_lW-0CAEf2qALDQgHwQNWvG5syypjWcq3Ddc_eA4Af3AU-IfPwFcRuPhYjJAp8j7QScGwUeQdQgazkyxhBGAqZWz7hAeF0g1ixxDvUFoEgFVkzGsKRgPsQxk6DEXPQPlzfCpALiU6DFI2ZpCuSrrssiqqc",
      "qi": "m1eGh0la4w5XdSgLO5v1ToXnuVWHQf-7gHuNGHXdkVfMmIEMoJyiWswSawB71DSmYrr8x29n3IrgErysXLulbnLVr36y7gyfaNo8QGa7IuzDtYBBo6l7nenHqRJkagWgS7sZDaBYqM9_vkT61_kt3fjARBaqA0C_YBuVB5qb_DM"
    }
  ]
}
2021-06-15 17:21:26 SUCCESS
ValidateMTLSCertificates2Header
MTLS certificates header is valid
2021-06-15 17:21:26 SUCCESS
ExtractMTLSCertificates2FromConfiguration
Mutual TLS authentication credentials loaded
cert
MIICszCCAligAwIBAgIBETAKBggqhkjOPQQDAjA6MRswGQYDVQQKDBJMZXQncyBBdXRoZW50aWNhdGUxGzAZBgNVBAMMEkxBIEludGVybWVkaWF0ZSBDQTAeFw0yMTA2MTQxODU2NTlaFw0yMjA2MjQxODU2NTlaMEwxCzAJBgNVBAYTAkNBMQswCQYDVQQIDAJCQzEQMA4GA1UECgwHY29tcGFueTEeMBwGA1UEAwwVc28gYmFzaWMgdG8gYmUgY29tbW9uMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgQ0drcANY/fodhD3TMdA/6eOymGLsj61q9plDAHGzTGVpOrlSlIdHVBVwrd6A0KOtDkLIgAPnLJs6XlLpqE5ejv+FhdQz1wB99SirYSmc0BT5hGmomOukQkgNofGk2DA7aKzQeRwslu1NEEbJT9tTFwNMGlMkMMtEU6k71ddmWzxJdP04UsJBgTtKr98jmiQp585YkIYMJPruYt96Kw7XFnGetdbzDzqnscmeYhLTKWPs0xi5m3rq4+2AW9AgHoZJSLUmlshB75l+GIlDzVhC/2VsQ+e3Gr1nX/06yKV5efF6N1bVFvIPh8tTAChos6Ka36domMZRAA7AyRey7mJQIDAQABo3IwcDAJBgNVHRMEAjAAMB8GA1UdIwQYMBaAFGbdaMtrfyVsRgK6II9y3RlpIQPYMA4GA1UdDwEB/wQEAwIGwDATBgNVHSUEDDAKBggrBgEFBQcDAjAdBgNVHREBAf8EEzARgQ9iZGNAZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSQAwRgIhAPZd2ZQh32SKQJosVPloqCMTelYAopCcMJUyAtu1c6LkAiEAlgnUYDodv0JGAJ3lQYMTZm1UjLE34Vz0nrPCJa9k60E=
key
MIIEowIBAAKCAQEAmgQ0drcANY/fodhD3TMdA/6eOymGLsj61q9plDAHGzTGVpOrlSlIdHVBVwrd6A0KOtDkLIgAPnLJs6XlLpqE5ejv+FhdQz1wB99SirYSmc0BT5hGmomOukQkgNofGk2DA7aKzQeRwslu1NEEbJT9tTFwNMGlMkMMtEU6k71ddmWzxJdP04UsJBgTtKr98jmiQp585YkIYMJPruYt96Kw7XFnGetdbzDzqnscmeYhLTKWPs0xi5m3rq4+2AW9AgHoZJSLUmlshB75l+GIlDzVhC/2VsQ+e3Gr1nX/06yKV5efF6N1bVFvIPh8tTAChos6Ka36domMZRAA7AyRey7mJQIDAQABAoIBAEe7xaO1QEeyJvp+e70+3TjLEm+Du5d2zD3JnWcDp4uoXOheBwCGJdT39+LOkORPjoAuYtfK0DJFzGP71G6MUXGzuHD21xlGODOydANfIfK4ZO/pgJjhkLR4oHfTH8FkcKz+DE/KQr1yjEhawbDBBBmsWRJ5TrPGPtiHlezRugI2Syo8hj8F6EUKWG2K8mKRXxDnQ3m+M2plqPmgvv8B/VV5BxxyrqBCMdLiCxx1f3EMHZpWtl9XqLRNzatsBTgdQjqb9K5HjzAMS09Y9b7Ng0YUcj7Bdp2OYszeUwTHaqhRpIC3TAI6ueGoWgIPR7tHyyPBl5wCKKt3f1v+oZnf0YECgYEAy4PMiOK9JEEjwbL9X5a9sGWTJnTvJEhanEOZ5Er8YYCf5uDg5UDqq0pdaeH/syWqwnmopuoX1t2PCOPKS5piUTrZ8KiCsbbZVmtrJRG9SE4qVrgkhELkidoEDVU7If/KkSQOHKgD8EBDo+aV/CLO5YxfuywXG94e48FtJJj69nkCgYEAwbx73qD4i9ZRkdkf6kMqE1Mci1Xquv6qTDMop75JjITz4cy8JOQ6hg9eXFiwBEzgb+mbKLjwniABGiqhwdETV8JzqEx4R4lPNCseSL2umeU1bQDaY+lnlxsy2Hf7QisUb7jpJFte5+C4o/u2SlXIsG/6HaEeXTlHPWjnTdCC8g0CgYAoAMYpefgXsj4nCtnG+kha7fxYqM+A4D//S0Jqn1qwh6nmpflO1s3J0Zo+/89VFWhVRbii5oy9DVvaMXxIFBaTRPAl39mguQJLfF3ZMX11QvgLh7KV1Ng7SIFXZZN0AWV91gp4E4aCqP8irmZ44xasBEWk8uuv7J9BwXmEohVicQKBgQCsIgDZBKLw9AJTmNvvc6+Nrfmdnz/I136N56KGr95/WJ2sERFVoeaRuFP5rt7tYzTCmoe+fdtkU0FHc3t3ToFmJyJF9XOk884IpwroTIg2ul1mtSxVO0tMCeF6TdhTqR0mSt/y6q//TD4hjQMhNujyQvuymbX11G+Ek5F4JPxDfQKBgCuRsiZo/lAWpWcVWCN8ceVLDpd2APneyU70Aqq0gRRixi8LEWzs/7GDhKf0/Aw4IKyh6d0Ao80zcRNOtC9KpbNhzPID6M8ZXdeMWPrhgjSoex1loW79210o0qHzMEMtvif0Urt6gN5ZCGdpjl0Fxb0k+3XvWc1lqwAx1CFKDpoF
ca
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
2021-06-15 17:21:26 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-06-15 17:21:26 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "8hTzUQ",
      "use": "sig",
      "alg": "PS256",
      "n": "gBTXpS-lCNO2uy-WjHx2hXBhECLWk75N0CCGU3iRfxi6fmE1sOcxtmDZfNVxcM7l04xY9KiD7cLsd4OAIduAwiSe142jLoONhziaoCoT60ghZQSi1X4IdfHAcvKScah-f7u2MayZBJSOydi-NltbbhKIttiZRcyx7-Yl4Q2m52L7ARYhTjidGuHGTRRS6NlxDVUBIX6j4jc3Pk99ZU7a5Zk6wWM12GBhHdojFOvbABA6w7CxjC48u9TEh0L5d9hz3aCFqcAII8XB0VY5M5_yj03oFfNbrNUd__GYlRcN3tycHTFvTdWtV7wq-v8f6nbWK3sW1Gllt83b6o5G42LFQQ",
      "e": "AQAB",
      "d": "QqGVJfxJUPRDBdJV8bP2PKkf9bMKCkZgWLvy5Y29s2775i9QLT25IPX1bvnjUBpyecFzraPVLmXPesVQbUyyCU3fzKeEkvghMo2B83ywbCBULydgRsyQPjuMMMB86uALHwxaVjFCUZ2vQtac7c5NHFBMC0NXSXaZwwHqBtCBWbHp2Je531wEfeb8uzrfJpU1Of7bLGfjKaQTwnxs3v9iUng2uR143LTQd1bPL14vJjutnFGoDb4-CE80g_QLqtW7J1gDRRgxHzwnP9nmSjPpGpPK5u1zpQcpXGbi7QTUbqp13cSqq4pLpj2Dib90waoGZ6iicmcIC_zXy0VADcA_OQ",
      "p": "vosG_MYCvuS6CynUB_CKpqqggnbSDh_iikepagNOQOD-T4BQAYVsQRMyaVzzFJrx3bK3QhFMKbSb7MZOWG2ZpqDUqrML7SlMIxQt6feLWAlVAdSv_RXxWULQoS6dowUfQsfk0OV3x4qMFpmLV3gTAMmJ0-ZuoEDY-72Tj3T-PFc",
      "q": "rBS8NrHiX3dRtvI81gTvRFUCNzCbBJr54rDv4CXqi9uWwA3wi2xOJSV3bQYgZtoNWaCa-UxfTimG_JUdqMCXB0lMBf62OKB7V-rRA0qZyEMrJrgEcVPQ_nQc3ym_Av6hZdNs9ne1DJZSI_lj0NkeE985V_24vKRRME6j6-yYjCc",
      "dp": "K-Mr1dbp1Pwr2dxliPqfhOnyFHq3wScY7863t8JRKOJp0Pf19ZO8rnR0fQ46svlJUk4SpbYEO-rsqym16-o6pMWQlkytJ5AGiGHifWxV_Q4RNV2-t2VxdKTOFwH8rwrD-4a9LlxcLWq8_4uYK6ptfhXtmBAQVPr6v2kX7sf8svs",
      "dq": "EqfY09ErKpBkAoJ2h_lW-0CAEf2qALDQgHwQNWvG5syypjWcq3Ddc_eA4Af3AU-IfPwFcRuPhYjJAp8j7QScGwUeQdQgazkyxhBGAqZWz7hAeF0g1ixxDvUFoEgFVkzGsKRgPsQxk6DEXPQPlzfCpALiU6DFI2ZpCuSrrssiqqc",
      "qi": "m1eGh0la4w5XdSgLO5v1ToXnuVWHQf-7gHuNGHXdkVfMmIEMoJyiWswSawB71DSmYrr8x29n3IrgErysXLulbnLVr36y7gyfaNo8QGa7IuzDtYBBo6l7nenHqRJkagWgS7sZDaBYqM9_vkT61_kt3fjARBaqA0C_YBuVB5qb_DM"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "8hTzUQ",
      "alg": "PS256",
      "n": "gBTXpS-lCNO2uy-WjHx2hXBhECLWk75N0CCGU3iRfxi6fmE1sOcxtmDZfNVxcM7l04xY9KiD7cLsd4OAIduAwiSe142jLoONhziaoCoT60ghZQSi1X4IdfHAcvKScah-f7u2MayZBJSOydi-NltbbhKIttiZRcyx7-Yl4Q2m52L7ARYhTjidGuHGTRRS6NlxDVUBIX6j4jc3Pk99ZU7a5Zk6wWM12GBhHdojFOvbABA6w7CxjC48u9TEh0L5d9hz3aCFqcAII8XB0VY5M5_yj03oFfNbrNUd__GYlRcN3tycHTFvTdWtV7wq-v8f6nbWK3sW1Gllt83b6o5G42LFQQ"
    }
  ]
}
2021-06-15 17:21:26 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-06-15 17:21:26 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-06-15 17:21:26 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "PS256",
  "ES256"
]
2021-06-15 17:21:26 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "8hTzUQ",
      "use": "sig",
      "alg": "PS256",
      "n": "gBTXpS-lCNO2uy-WjHx2hXBhECLWk75N0CCGU3iRfxi6fmE1sOcxtmDZfNVxcM7l04xY9KiD7cLsd4OAIduAwiSe142jLoONhziaoCoT60ghZQSi1X4IdfHAcvKScah-f7u2MayZBJSOydi-NltbbhKIttiZRcyx7-Yl4Q2m52L7ARYhTjidGuHGTRRS6NlxDVUBIX6j4jc3Pk99ZU7a5Zk6wWM12GBhHdojFOvbABA6w7CxjC48u9TEh0L5d9hz3aCFqcAII8XB0VY5M5_yj03oFfNbrNUd__GYlRcN3tycHTFvTdWtV7wq-v8f6nbWK3sW1Gllt83b6o5G42LFQQ",
      "e": "AQAB",
      "d": "QqGVJfxJUPRDBdJV8bP2PKkf9bMKCkZgWLvy5Y29s2775i9QLT25IPX1bvnjUBpyecFzraPVLmXPesVQbUyyCU3fzKeEkvghMo2B83ywbCBULydgRsyQPjuMMMB86uALHwxaVjFCUZ2vQtac7c5NHFBMC0NXSXaZwwHqBtCBWbHp2Je531wEfeb8uzrfJpU1Of7bLGfjKaQTwnxs3v9iUng2uR143LTQd1bPL14vJjutnFGoDb4-CE80g_QLqtW7J1gDRRgxHzwnP9nmSjPpGpPK5u1zpQcpXGbi7QTUbqp13cSqq4pLpj2Dib90waoGZ6iicmcIC_zXy0VADcA_OQ",
      "p": "vosG_MYCvuS6CynUB_CKpqqggnbSDh_iikepagNOQOD-T4BQAYVsQRMyaVzzFJrx3bK3QhFMKbSb7MZOWG2ZpqDUqrML7SlMIxQt6feLWAlVAdSv_RXxWULQoS6dowUfQsfk0OV3x4qMFpmLV3gTAMmJ0-ZuoEDY-72Tj3T-PFc",
      "q": "rBS8NrHiX3dRtvI81gTvRFUCNzCbBJr54rDv4CXqi9uWwA3wi2xOJSV3bQYgZtoNWaCa-UxfTimG_JUdqMCXB0lMBf62OKB7V-rRA0qZyEMrJrgEcVPQ_nQc3ym_Av6hZdNs9ne1DJZSI_lj0NkeE985V_24vKRRME6j6-yYjCc",
      "dp": "K-Mr1dbp1Pwr2dxliPqfhOnyFHq3wScY7863t8JRKOJp0Pf19ZO8rnR0fQ46svlJUk4SpbYEO-rsqym16-o6pMWQlkytJ5AGiGHifWxV_Q4RNV2-t2VxdKTOFwH8rwrD-4a9LlxcLWq8_4uYK6ptfhXtmBAQVPr6v2kX7sf8svs",
      "dq": "EqfY09ErKpBkAoJ2h_lW-0CAEf2qALDQgHwQNWvG5syypjWcq3Ddc_eA4Af3AU-IfPwFcRuPhYjJAp8j7QScGwUeQdQgazkyxhBGAqZWz7hAeF0g1ixxDvUFoEgFVkzGsKRgPsQxk6DEXPQPlzfCpALiU6DFI2ZpCuSrrssiqqc",
      "qi": "m1eGh0la4w5XdSgLO5v1ToXnuVWHQf-7gHuNGHXdkVfMmIEMoJyiWswSawB71DSmYrr8x29n3IrgErysXLulbnLVr36y7gyfaNo8QGa7IuzDtYBBo6l7nenHqRJkagWgS7sZDaBYqM9_vkT61_kt3fjARBaqA0C_YBuVB5qb_DM"
    }
  ]
}
2021-06-15 17:21:26 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2021-06-15 17:21:26 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://par-what-is-it-good-for.ping-eng.com:3000/get
2021-06-15 17:21:26 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://par-what-is-it-good-for.ping-eng.com:3000/get
2021-06-15 17:21:26 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
2021-06-15 17:21:26 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
accounts_request_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
2021-06-15 17:21:26
fapi-rw-id2-ensure-client-id-in-token-endpoint
Setup Done
Make request to authorization endpoint
2021-06-15 17:21:26 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
c__fapi-mtls-jar1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
2021-06-15 17:21:26 SUCCESS
AddAcrClaimToAuthorizationEndpointRequest
Added acr claim to authorization_endpoint_request
authorization_endpoint_request
{
  "client_id": "c__fapi-mtls-jar1",
  "redirect_uri": "https://www.certification.openid.net/test/a/pi/callback",
  "scope": "openid other",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  }
}
2021-06-15 17:21:26
CreateRandomStateValue
Created state value
requested_state_length
10
state
7dcaa5gHt5
2021-06-15 17:21:26 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
c__fapi-mtls-jar1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
7dcaa5gHt5
2021-06-15 17:21:26
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
hgMw3vBfm7
2021-06-15 17:21:26 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
c__fapi-mtls-jar1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
7dcaa5gHt5
nonce
hgMw3vBfm7
2021-06-15 17:21:26 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToCodeIdtoken
Added response_type parameter to request
client_id
c__fapi-mtls-jar1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
7dcaa5gHt5
nonce
hgMw3vBfm7
response_type
code id_token
2021-06-15 17:21:26 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "client_id": "c__fapi-mtls-jar1",
  "redirect_uri": "https://www.certification.openid.net/test/a/pi/callback",
  "scope": "openid other",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  },
  "state": "7dcaa5gHt5",
  "nonce": "hgMw3vBfm7",
  "response_type": "code id_token"
}
2021-06-15 17:21:26 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.623777986E9
2021-06-15 17:21:26 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://par-what-is-it-good-for.ping-eng.com:9032
2021-06-15 17:21:26 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
c__fapi-mtls-jar1
2021-06-15 17:21:26 SUCCESS
AddClientIdToRequestObject
Added client_id to request object claims
client_id
c__fapi-mtls-jar1
2021-06-15 17:21:26 SUCCESS
SignRequestObject
Signed the request object
claims
{"aud":"https:\/\/par-what-is-it-good-for.ping-eng.com:9032","scope":"openid other","claims":{"id_token":{"acr":{"value":"urn:mace:incommon:iap:silver","essential":true}}},"iss":"c__fapi-mtls-jar1","response_type":"code id_token","redirect_uri":"https:\/\/www.certification.openid.net\/test\/a\/pi\/callback","state":"7dcaa5gHt5","exp":1623777986,"nonce":"hgMw3vBfm7","client_id":"c__fapi-mtls-jar1"}
header
{"kid":"-WBaQw","alg":"PS256"}
request_object
eyJraWQiOiItV0JhUXciLCJhbGciOiJQUzI1NiJ9.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.d9FmWwJOxRh-H96HCQoH1Mu6L0Wf2N8o-OC4LfnhN6w3lWtpMBdjpWNj8f7xTPdznCT31B4v26OkE85zu5CDqfWHExNgKBAPy9bE65M_aeYiZjT30zppjTI3CCYfg44ToIwuKiqe4UFxKNfTjkNP1K9nRithtGsUy0CnVMoIU8DNK013JfVb7U_9JKqvwHFHkl6v-lOHzLn1fPTjs-03ddei8cp37DMFnsquJNRZy0ZWghQW7X537VgN5F7ZbDIo2KSsHH-OUfaBq1EN4j2O-d-6koq8N4_l9ELCC6Pw7r5VawS1owBH2_6H0XQfiITMAjj3QhkOBWR6rlq430G6kQ
key
{"p":"8t4drc_3MIo_j8tEjnFqyUoxYPRNcyoQSk6lJLr9ILhnBiiXfZZHUOP2f3Jmcr4zaj-D_gSq41CiGrBAhuGG0TnFLeGjBwDUyhRxUyj41k0edvD31HPmeJ2No7aeYOoCIBw5SwjthVHnsNQGWtc6rfd0kpuEsbaEmE9RahBL1RM","kty":"RSA","q":"8Ieb4MHC_CYAbQkGYJPqw8BTUh3m3SzlX1UxwJfir7k1KJ2JDT90ZWJtFYLRgIwNWttyPXcCDzbwqBqgnLB_AVBO7n6Z9lKALftEHv24mZdXeNOqbuzy_EcvrZSZkG2xBUyc3__mVhpVNA77qqbxLeTyHyrMjzxFqLwdSfOKoWk","d":"RJGACCAOOXZUB_b_Mk2_hhzLqUldaLrV6_Dngnxw0_ByOGXJfoI1u3LdIZRndXNSPOQ0bWXyR5c4Mp7vdB4onP8JiXQA8zix4SLOWqgY2bU0veFlVCW26aS4zAUGK1O0nUdqgoCQqx0QXA_bEEuNmIQsTSxjlH4eE1Oo5ehbLJgoZpHYQloK4Fgby3qTddmIeXJ7LCxbvTYK-uAL-5vfyLgrkjIckVIDfG92x-FrUDyr1qoLtRHrMuuDMQG-zQms0HyNNXfjBfq9oIDLB9h7mPTguYBoS8k63D6ogpD7UYJUOFUgAm_y-DZUib9YBEXxMJmO2peVL08sF25XKf1XEQ","e":"AQAB","use":"sig","kid":"-WBaQw","qi":"3MZv7p5pyEFFotF6QUgK8qErkI3Y15rerOd61tyctGFOxqduTdCTpcR6ZDsWiBK_FOubhih9c-3Kw74-T3EHC_ZzL-yMDLGnxtOkdMB0eY60TOfqLOUeckw2JFC7s-HssIDrOmnk98FW6gE1HuDilj0rhIaOXH1gBKwkgVEkr2A","dp":"pPi1xkw-x60Q8fcMMYnfFK4eDpLETVckS6VSTjnqGaDI8oj-JmO_O7YtyXKHHqgOOry8Rv8aqWArTN-uZTCqqFKKmtjrKaWp5T6vn-Jz7PXjnL2gSqMTyZiUDsHMoV4zZWZmkI6W8Pmq3RWY33nVtTgi6jdTkne9Z8xxLA-3wxs","alg":"PS256","dq":"nSA5V-27rnQ0uwW2QMjgB9hPlckq0zlM7aX9xk5yK1DVxR6ENT9KjiBqGi9HJK5Y2w2X50ci9UVymJ4sZa92iCkqJupVMXBbg64spgIg4VTYM3oyUBxB70OhhccZOhwuE8Qkhr_ofD7fgg53oNdFnjF9aZbP4pIA_2VDzNdnrGE","n":"5DDi1k_FDcYRRGdp2J-ofDpQIVgbYNY3Bi9-QbL0rq2tDEI34DmrSmDNWLdBS3j06gYF3uHMQXw1N9JfYNrEDFGriQxXgLrX_4p6PZ-qvxgRaFK4A_3NyZRD-KPSnDNs6PPDwlFxwTwXDMFerXlSxNyw3QBPDHZu56X-fIajKBovMbQvlYo_iveRp9oixw2kRWE0r2AvpzqdXguUwtZlCUnE9mCWhvAFCDLSycbUspmiw8-4M8UumS8U9NQBxM4eEZ3WSFv8ooJRvEHVvGcL5ITUdgOqiD6xRQIEVuYEo-lZx8AwuPvcrEBjQZ31_g9vUmG4tJQlffEaF8ZNRVlXyw"}
2021-06-15 17:21:26 SUCCESS
BuildRequestObjectByValueRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiItV0JhUXciLCJhbGciOiJQUzI1NiJ9.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.d9FmWwJOxRh-H96HCQoH1Mu6L0Wf2N8o-OC4LfnhN6w3lWtpMBdjpWNj8f7xTPdznCT31B4v26OkE85zu5CDqfWHExNgKBAPy9bE65M_aeYiZjT30zppjTI3CCYfg44ToIwuKiqe4UFxKNfTjkNP1K9nRithtGsUy0CnVMoIU8DNK013JfVb7U_9JKqvwHFHkl6v-lOHzLn1fPTjs-03ddei8cp37DMFnsquJNRZy0ZWghQW7X537VgN5F7ZbDIo2KSsHH-OUfaBq1EN4j2O-d-6koq8N4_l9ELCC6Pw7r5VawS1owBH2_6H0XQfiITMAjj3QhkOBWR6rlq430G6kQ&client_id=c__fapi-mtls-jar1&redirect_uri=https://www.certification.openid.net/test/a/pi/callback&scope=openid%20other&response_type=code%20id_token
2021-06-15 17:21:26 REDIRECT
fapi-rw-id2-ensure-client-id-in-token-endpoint
Redirecting to authorization endpoint
redirect_to
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiItV0JhUXciLCJhbGciOiJQUzI1NiJ9.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.d9FmWwJOxRh-H96HCQoH1Mu6L0Wf2N8o-OC4LfnhN6w3lWtpMBdjpWNj8f7xTPdznCT31B4v26OkE85zu5CDqfWHExNgKBAPy9bE65M_aeYiZjT30zppjTI3CCYfg44ToIwuKiqe4UFxKNfTjkNP1K9nRithtGsUy0CnVMoIU8DNK013JfVb7U_9JKqvwHFHkl6v-lOHzLn1fPTjs-03ddei8cp37DMFnsquJNRZy0ZWghQW7X537VgN5F7ZbDIo2KSsHH-OUfaBq1EN4j2O-d-6koq8N4_l9ELCC6Pw7r5VawS1owBH2_6H0XQfiITMAjj3QhkOBWR6rlq430G6kQ&client_id=c__fapi-mtls-jar1&redirect_uri=https://www.certification.openid.net/test/a/pi/callback&scope=openid%20other&response_type=code%20id_token
2021-06-15 17:21:30 INCOMING
fapi-rw-id2-ensure-client-id-in-token-endpoint
Incoming HTTP request to test instance yRFwlYN7BQhjtdT
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:88.0) Gecko/20100101 Firefox/88.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://par-what-is-it-good-for.ping-eng.com:9031/",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1623687574.1623770157.261; __utmz\u003d201319536.1623105741.257.63.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell; __utmc\u003d201319536; JSESSIONID\u003d8E4228CB2127BE6740BAB32DB395005E",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
callback
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-06-15 17:21:30 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/Xq0jAzYihUSt5S4xVOQF",
  "fullUrl": "https://www.certification.openid.net/test/a/pi/implicit/Xq0jAzYihUSt5S4xVOQF"
}
2021-06-15 17:21:30 OUTGOING
fapi-rw-id2-ensure-client-id-in-token-endpoint
Response to HTTP request to test instance yRFwlYN7BQhjtdT
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/pi/implicit/Xq0jAzYihUSt5S4xVOQF, returnUrl=/log-detail.html?log=yRFwlYN7BQhjtdT}]
outgoing_path
callback
2021-06-15 17:21:30 INCOMING
fapi-rw-id2-ensure-client-id-in-token-endpoint
Incoming HTTP request to test instance yRFwlYN7BQhjtdT
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:88.0) Gecko/20100101 Firefox/88.0",
  "accept": "*/*",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "content-type": "text/plain",
  "x-requested-with": "XMLHttpRequest",
  "origin": "https://www.certification.openid.net",
  "referer": "https://www.certification.openid.net/test/a/pi/callback",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1623687574.1623770157.261; __utmz\u003d201319536.1623105741.257.63.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell; __utmc\u003d201319536; JSESSIONID\u003d8E4228CB2127BE6740BAB32DB395005E",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "969",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
implicit/Xq0jAzYihUSt5S4xVOQF
incoming_body_form_params
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
#code=WnGplmte3dcSFbYc_O9P-mb6AzaqiwRK3llpBX75&id_token=eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLWphcjEiLCJqdGkiOiJobzhGRWRySWViOVBwV0tHWU1XTUFRIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3NzY5MCwiZXhwIjoxNjIzNzc3OTkwLCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzc2NTM1LCJub25jZSI6ImhnTXczdkJmbTciLCJjX2hhc2giOiJ1Ql9DUmpVbm9FZk9hRmx6RnltSm9BIiwic19oYXNoIjoiUXRTdzhUTUh4S0tHSjRGMjVFYTFiQSJ9.kjMgQopdZB1Zxs1WGwYInYv4hOBoVdv3h0AAQ_HrfnEKSzIF50s3weXS-nrahOqoquMxKuxNK97aFrZnW5Ex0Miy0-yCG0CQPAlwXoxUsrfxinsyl6LYfW-48pjtAOxUb_xGR-3tR6Hl3UvXqvDe5DQ0xs0vl2I7-MRTP72E5ahmBlwOrwRcoMpe__cWEu2t9WS_cxZLYzAUTXNblYRedl0M8MeRYKaOPI3aakj-zkvGLB51hYPKEgTOq5M_BOvw5aYJm-e0-g836f28Iy9LI7QqLuDkcuAR7bN14SPnAlQpeMXEqVco0ln0mMyviDpVVThVBKUUUP4p6OkNbHLt3Q&state=7dcaa5gHt5
2021-06-15 17:21:30 OUTGOING
fapi-rw-id2-ensure-client-id-in-token-endpoint
Response to HTTP request to test instance yRFwlYN7BQhjtdT
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/Xq0jAzYihUSt5S4xVOQF
2021-06-15 17:21:30
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "code",
    "value": "WnGplmte3dcSFbYc_O9P-mb6AzaqiwRK3llpBX75"
  },
  {
    "name": "id_token",
    "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLWphcjEiLCJqdGkiOiJobzhGRWRySWViOVBwV0tHWU1XTUFRIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3NzY5MCwiZXhwIjoxNjIzNzc3OTkwLCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzc2NTM1LCJub25jZSI6ImhnTXczdkJmbTciLCJjX2hhc2giOiJ1Ql9DUmpVbm9FZk9hRmx6RnltSm9BIiwic19oYXNoIjoiUXRTdzhUTUh4S0tHSjRGMjVFYTFiQSJ9.kjMgQopdZB1Zxs1WGwYInYv4hOBoVdv3h0AAQ_HrfnEKSzIF50s3weXS-nrahOqoquMxKuxNK97aFrZnW5Ex0Miy0-yCG0CQPAlwXoxUsrfxinsyl6LYfW-48pjtAOxUb_xGR-3tR6Hl3UvXqvDe5DQ0xs0vl2I7-MRTP72E5ahmBlwOrwRcoMpe__cWEu2t9WS_cxZLYzAUTXNblYRedl0M8MeRYKaOPI3aakj-zkvGLB51hYPKEgTOq5M_BOvw5aYJm-e0-g836f28Iy9LI7QqLuDkcuAR7bN14SPnAlQpeMXEqVco0ln0mMyviDpVVThVBKUUUP4p6OkNbHLt3Q"
  },
  {
    "name": "state",
    "value": "7dcaa5gHt5"
  }
]
2021-06-15 17:21:30 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
code
WnGplmte3dcSFbYc_O9P-mb6AzaqiwRK3llpBX75
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLWphcjEiLCJqdGkiOiJobzhGRWRySWViOVBwV0tHWU1XTUFRIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3NzY5MCwiZXhwIjoxNjIzNzc3OTkwLCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzc2NTM1LCJub25jZSI6ImhnTXczdkJmbTciLCJjX2hhc2giOiJ1Ql9DUmpVbm9FZk9hRmx6RnltSm9BIiwic19oYXNoIjoiUXRTdzhUTUh4S0tHSjRGMjVFYTFiQSJ9.kjMgQopdZB1Zxs1WGwYInYv4hOBoVdv3h0AAQ_HrfnEKSzIF50s3weXS-nrahOqoquMxKuxNK97aFrZnW5Ex0Miy0-yCG0CQPAlwXoxUsrfxinsyl6LYfW-48pjtAOxUb_xGR-3tR6Hl3UvXqvDe5DQ0xs0vl2I7-MRTP72E5ahmBlwOrwRcoMpe__cWEu2t9WS_cxZLYzAUTXNblYRedl0M8MeRYKaOPI3aakj-zkvGLB51hYPKEgTOq5M_BOvw5aYJm-e0-g836f28Iy9LI7QqLuDkcuAR7bN14SPnAlQpeMXEqVco0ln0mMyviDpVVThVBKUUUP4p6OkNbHLt3Q
state
7dcaa5gHt5
2021-06-15 17:21:30 REDIRECT-IN
fapi-rw-id2-ensure-client-id-in-token-endpoint
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:88.0) Gecko/20100101 Firefox/88.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://par-what-is-it-good-for.ping-eng.com:9031/",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1623687574.1623770157.261; __utmz\u003d201319536.1623105741.257.63.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell; __utmc\u003d201319536; JSESSIONID\u003d8E4228CB2127BE6740BAB32DB395005E",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "code": "WnGplmte3dcSFbYc_O9P-mb6AzaqiwRK3llpBX75",
  "id_token": "eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLWphcjEiLCJqdGkiOiJobzhGRWRySWViOVBwV0tHWU1XTUFRIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3NzY5MCwiZXhwIjoxNjIzNzc3OTkwLCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzc2NTM1LCJub25jZSI6ImhnTXczdkJmbTciLCJjX2hhc2giOiJ1Ql9DUmpVbm9FZk9hRmx6RnltSm9BIiwic19oYXNoIjoiUXRTdzhUTUh4S0tHSjRGMjVFYTFiQSJ9.kjMgQopdZB1Zxs1WGwYInYv4hOBoVdv3h0AAQ_HrfnEKSzIF50s3weXS-nrahOqoquMxKuxNK97aFrZnW5Ex0Miy0-yCG0CQPAlwXoxUsrfxinsyl6LYfW-48pjtAOxUb_xGR-3tR6Hl3UvXqvDe5DQ0xs0vl2I7-MRTP72E5ahmBlwOrwRcoMpe__cWEu2t9WS_cxZLYzAUTXNblYRedl0M8MeRYKaOPI3aakj-zkvGLB51hYPKEgTOq5M_BOvw5aYJm-e0-g836f28Iy9LI7QqLuDkcuAR7bN14SPnAlQpeMXEqVco0ln0mMyviDpVVThVBKUUUP4p6OkNbHLt3Q",
  "state": "7dcaa5gHt5"
}
post_body
Verify authorization endpoint response
2021-06-15 17:21:30 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2021-06-15 17:21:30 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2021-06-15 17:21:30 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2021-06-15 17:21:30 SUCCESS
RejectStateInUrlQueryForHybridFlow
state is correctly not present in URL query returned from authorization endpoint (as in the hybrid flow it must be returned in the URL fragment/hash only)
2021-06-15 17:21:30 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2021-06-15 17:21:30 SUCCESS
ValidateSuccessfulHybridResponseFromAuthorizationEndpoint
authorization endpoint response does not include unexpected parameters
code
WnGplmte3dcSFbYc_O9P-mb6AzaqiwRK3llpBX75
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLWphcjEiLCJqdGkiOiJobzhGRWRySWViOVBwV0tHWU1XTUFRIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3NzY5MCwiZXhwIjoxNjIzNzc3OTkwLCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzc2NTM1LCJub25jZSI6ImhnTXczdkJmbTciLCJjX2hhc2giOiJ1Ql9DUmpVbm9FZk9hRmx6RnltSm9BIiwic19oYXNoIjoiUXRTdzhUTUh4S0tHSjRGMjVFYTFiQSJ9.kjMgQopdZB1Zxs1WGwYInYv4hOBoVdv3h0AAQ_HrfnEKSzIF50s3weXS-nrahOqoquMxKuxNK97aFrZnW5Ex0Miy0-yCG0CQPAlwXoxUsrfxinsyl6LYfW-48pjtAOxUb_xGR-3tR6Hl3UvXqvDe5DQ0xs0vl2I7-MRTP72E5ahmBlwOrwRcoMpe__cWEu2t9WS_cxZLYzAUTXNblYRedl0M8MeRYKaOPI3aakj-zkvGLB51hYPKEgTOq5M_BOvw5aYJm-e0-g836f28Iy9LI7QqLuDkcuAR7bN14SPnAlQpeMXEqVco0ln0mMyviDpVVThVBKUUUP4p6OkNbHLt3Q
state
7dcaa5gHt5
2021-06-15 17:21:30 SUCCESS
CheckStateInAuthorizationResponse
State in response correctly returned
state
7dcaa5gHt5
2021-06-15 17:21:30
ValidateIssInAuthorizationResponse
No 'iss' value in authorization response.
2021-06-15 17:21:30 SUCCESS
ExtractAuthorizationCodeFromAuthorizationResponse
Found authorization code
code
WnGplmte3dcSFbYc_O9P-mb6AzaqiwRK3llpBX75
2021-06-15 17:21:30 SUCCESS
EnsureMinimumAuthorizationCodeLength
Authorization code is of sufficient length
actual
320
required
128
2021-06-15 17:21:30 SUCCESS
EnsureMinimumAuthorizationCodeEntropy
Calculated shannon entropy seems sufficient
actual
198.12223629333107
expected
96.0
2021-06-15 17:21:30 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLWphcjEiLCJqdGkiOiJobzhGRWRySWViOVBwV0tHWU1XTUFRIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3NzY5MCwiZXhwIjoxNjIzNzc3OTkwLCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzc2NTM1LCJub25jZSI6ImhnTXczdkJmbTciLCJjX2hhc2giOiJ1Ql9DUmpVbm9FZk9hRmx6RnltSm9BIiwic19oYXNoIjoiUXRTdzhUTUh4S0tHSjRGMjVFYTFiQSJ9.kjMgQopdZB1Zxs1WGwYInYv4hOBoVdv3h0AAQ_HrfnEKSzIF50s3weXS-nrahOqoquMxKuxNK97aFrZnW5Ex0Miy0-yCG0CQPAlwXoxUsrfxinsyl6LYfW-48pjtAOxUb_xGR-3tR6Hl3UvXqvDe5DQ0xs0vl2I7-MRTP72E5ahmBlwOrwRcoMpe__cWEu2t9WS_cxZLYzAUTXNblYRedl0M8MeRYKaOPI3aakj-zkvGLB51hYPKEgTOq5M_BOvw5aYJm-e0-g836f28Iy9LI7QqLuDkcuAR7bN14SPnAlQpeMXEqVco0ln0mMyviDpVVThVBKUUUP4p6OkNbHLt3Q
header
{
  "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
  "alg": "PS256"
}
claims
{
  "sub": "9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4",
  "aud": "c__fapi-mtls-jar1",
  "acr": "urn:mace:incommon:iap:silver",
  "c_hash": "uB_CRjUnoEfOaFlzFymJoA",
  "s_hash": "QtSw8TMHxKKGJ4F25Ea1bA",
  "auth_time": 1623776535,
  "iss": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "exp": 1623777990,
  "iat": 1623777690,
  "nonce": "hgMw3vBfm7",
  "jti": "ho8FEdrIeb9PpWKGYMWMAQ"
}
2021-06-15 17:21:30 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-06-15 17:21:30 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
ZH2y4AetHTynvUgDK_YxYbB5yLQ
2021-06-15 17:21:30 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
hgMw3vBfm7
2021-06-15 17:21:30 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
acr value in id_token is (one of) the requested values
actual
urn:mace:incommon:iap:silver
requested
[
  "urn:mace:incommon:iap:silver"
]
2021-06-15 17:21:30 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLWphcjEiLCJqdGkiOiJobzhGRWRySWViOVBwV0tHWU1XTUFRIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3NzY5MCwiZXhwIjoxNjIzNzc3OTkwLCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzc2NTM1LCJub25jZSI6ImhnTXczdkJmbTciLCJjX2hhc2giOiJ1Ql9DUmpVbm9FZk9hRmx6RnltSm9BIiwic19oYXNoIjoiUXRTdzhUTUh4S0tHSjRGMjVFYTFiQSJ9.kjMgQopdZB1Zxs1WGwYInYv4hOBoVdv3h0AAQ_HrfnEKSzIF50s3weXS-nrahOqoquMxKuxNK97aFrZnW5Ex0Miy0-yCG0CQPAlwXoxUsrfxinsyl6LYfW-48pjtAOxUb_xGR-3tR6Hl3UvXqvDe5DQ0xs0vl2I7-MRTP72E5ahmBlwOrwRcoMpe__cWEu2t9WS_cxZLYzAUTXNblYRedl0M8MeRYKaOPI3aakj-zkvGLB51hYPKEgTOq5M_BOvw5aYJm-e0-g836f28Iy9LI7QqLuDkcuAR7bN14SPnAlQpeMXEqVco0ln0mMyviDpVVThVBKUUUP4p6OkNbHLt3Q
2021-06-15 17:21:30 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLWphcjEiLCJqdGkiOiJobzhGRWRySWViOVBwV0tHWU1XTUFRIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3NzY5MCwiZXhwIjoxNjIzNzc3OTkwLCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzc2NTM1LCJub25jZSI6ImhnTXczdkJmbTciLCJjX2hhc2giOiJ1Ql9DUmpVbm9FZk9hRmx6RnltSm9BIiwic19oYXNoIjoiUXRTdzhUTUh4S0tHSjRGMjVFYTFiQSJ9.kjMgQopdZB1Zxs1WGwYInYv4hOBoVdv3h0AAQ_HrfnEKSzIF50s3weXS-nrahOqoquMxKuxNK97aFrZnW5Ex0Miy0-yCG0CQPAlwXoxUsrfxinsyl6LYfW-48pjtAOxUb_xGR-3tR6Hl3UvXqvDe5DQ0xs0vl2I7-MRTP72E5ahmBlwOrwRcoMpe__cWEu2t9WS_cxZLYzAUTXNblYRedl0M8MeRYKaOPI3aakj-zkvGLB51hYPKEgTOq5M_BOvw5aYJm-e0-g836f28Iy9LI7QqLuDkcuAR7bN14SPnAlQpeMXEqVco0ln0mMyviDpVVThVBKUUUP4p6OkNbHLt3Q
2021-06-15 17:21:30 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4
2021-06-15 17:21:30 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "PS256",
  "ES256"
]
alg
PS256
2021-06-15 17:21:30 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-06-15 17:21:30 INFO
FAPIValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-06-15 17:21:30 SUCCESS
ExtractSHash
Extracted s_hash from ID Token
s_hash
QtSw8TMHxKKGJ4F25Ea1bA
alg
PS256
2021-06-15 17:21:30 SUCCESS
ValidateSHash
s_hash validated successfully
expected_hash
QtSw8TMHxKKGJ4F25Ea1bA
unhashed_value
7dcaa5gHt5
id_token_hash
QtSw8TMHxKKGJ4F25Ea1bA
2021-06-15 17:21:30 SUCCESS
ExtractCHash
Extracted c_hash from ID Token
c_hash
uB_CRjUnoEfOaFlzFymJoA
alg
PS256
2021-06-15 17:21:30 SUCCESS
ValidateCHash
c_hash validated successfully
expected_hash
uB_CRjUnoEfOaFlzFymJoA
unhashed_value
WnGplmte3dcSFbYc_O9P-mb6AzaqiwRK3llpBX75
id_token_hash
uB_CRjUnoEfOaFlzFymJoA
2021-06-15 17:21:30 SUCCESS
CreateTokenEndpointRequestForAuthorizationCodeGrant
grant_type
authorization_code
code
WnGplmte3dcSFbYc_O9P-mb6AzaqiwRK3llpBX75
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
Swapping to Client2
2021-06-15 17:21:30 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
authorization_code
code
WnGplmte3dcSFbYc_O9P-mb6AzaqiwRK3llpBX75
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
client_id
c__fapi-mtls-jar2
2021-06-15 17:21:30
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "186"
}
request_body
grant_type=authorization_code&code=WnGplmte3dcSFbYc_O9P-mb6AzaqiwRK3llpBX75&redirect_uri=https%3A%2F%2Fwww.certification.openid.net%2Ftest%2Fa%2Fpi%2Fcallback&client_id=c__fapi-mtls-jar2
request_mutual_tls
{
  "cert": "MIICmzCCAkGgAwIBAgIBEDAKBggqhkjOPQQDAjA6MRswGQYDVQQKDBJMZXQncyBBdXRoZW50aWNhdGUxGzAZBgNVBAMMEkxBIEludGVybWVkaWF0ZSBDQTAeFw0yMTA2MTQxODUyNDlaFw0yMjA2MjQxODUyNDlaMDUxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDTzEZMBcGA1UEAwwQcGFzc3dvcmQxIGlzIGZ1bjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANz7e9keCgR6wkiSGpEzNPz+AmclSkhBQdHgbNoO/hKKt57/NE0Ruyts1ESDpmS69R4BccKDZOFD2PsF+DywykI8W/OipgDP7HjpYuyWgNIdMVHjFcUtILrc3mt0iABR9sfu8UwnqvSV6i7Mxauozv6C3zp7iPmBljiFzOkwudBxiBm5mwZItMwPbpcdqa9EEPub74/zFgKxhEp/0toVuVg7GZVt76uCQrdlzRtvKOltKi7voxXtCN0hp012tVgJbzvQPeSJrHVJN1jH0bqbEVVsljo6/z5Ur6/+M+tE6s43WIbTtgMH1foHmhwpiOaxGGPcRMvxjfVVJdSsL94Py9ECAwEAAaNyMHAwCQYDVR0TBAIwADAfBgNVHSMEGDAWgBRm3WjLa38lbEYCuiCPct0ZaSED2DAOBgNVHQ8BAf8EBAMCBsAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwHQYDVR0RAQH/BBMwEYEPYmRjQGV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0gAMEUCIQCSPVITgusQsgLb5rVZPxIdBuAJ2cwPet4GcIXROebbLAIgb0Sq197/+QZkXNl9uUt8VwiA6UX5eZ2bgIbNQizr5BA\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2021-06-15 17:21:31 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
401 UNAUTHORIZED
response_status_text
Unauthorized
response_headers
{
  "date": "Tue, 15 Jun 2021 17:21:30 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "www-authenticate": "basic realm\u003d\"PF AS Token Endpoints\"",
  "set-cookie": "PF\u003dBWBqEH7rFHnBnRrmmoip65;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"error_description":"The subject DN configured for c__fapi-mtls-jar2 does not match the subject DN of the client certificate in the request","error":"invalid_client"}
2021-06-15 17:21:31 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error_description
The subject DN configured for c__fapi-mtls-jar2 does not match the subject DN of the client certificate in the request
error
invalid_client
2021-06-15 17:21:31 SUCCESS
CheckTokenEndpointHttpStatusForInvalidRequestOrInvalidClientError
Token endpoint http status code was 401 for error 'invalid_client'
2021-06-15 17:21:31 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-06-15 17:21:31 SUCCESS
CheckErrorFromTokenEndpointResponseErrorInvalidClient
Token Endpoint response error returned expected 'error' of 'invalid_client'
error
invalid_client
2021-06-15 17:21:31 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
invalid_client
2021-06-15 17:21:31 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
The subject DN configured for c__fapi-mtls-jar2 does not match the subject DN of the client certificate in the request
2021-06-15 17:21:31 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
The subject DN configured for c__fapi-mtls-jar2 does not match the subject DN of the client certificate in the request
2021-06-15 17:21:31 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-06-15 17:21:31 FINISHED
fapi-rw-id2-ensure-client-id-in-token-endpoint
Test has run to completion
testmodule_result
PASSED
2021-06-15 17:21:33
TEST-RUNNER
Alias has now been claimed by another test
alias
pi
new_test_id
c1DyKfPiToEpBvA
Test Results