Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-06-15 16:07:55 INFO
TEST-RUNNER
Test instance 5Qwo7MMf0uQE7hu created
baseUrl
https://www.certification.openid.net/test/a/pi
variant
{
  "client_auth_type": "mtls",
  "fapi_auth_request_method": "pushed",
  "fapi_profile": "plain_fapi",
  "fapi_response_mode": "plain_response"
}
alias
pi
description
fapi-mtls-par
planId
uKAD4JxFp1hHg
config
{
  "alias": "pi",
  "description": "fapi-mtls-par",
  "server": {
    "discoveryUrl": "https://par-what-is-it-good-for.ping-eng.com:9032/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "c__fapi-mtls-par1",
    "scope": "openid other",
    "hint_type": "login_hint",
    "hint_value": "cheba-hut@ping-eng.com",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "kid": "NjSdpg",
          "use": "sig",
          "alg": "PS256",
          "n": "pAHkPUm8SY4OdllzAU3NlWN1lOufCQ1mRkkrEfkXtiVcekY5yOM54PIxWtRtSkaJvv8RynyoQA-P_WiPRkjpUcHAFEhk3xi-nrihUhsfOlU7fFxfZqCcS36rUG9WGPKjWBsBiE3qOWb_NqVkzdzGu5Q-mhizoDTxpe77v6eg4c_meLs_Mu-Qa3V_IOZ-_lvDdKmUeKzNgs0vm0KbiaiAW9jY0Gg7Wzb44CdGeSJASe41KRP1dM-yByVESLm2IAk-KnGaKzfa-mZcrdrW-I15CGWNh2tYe_e4aNX85cEA1qj5OdAp9abr5v09sHERCkVg4X9fzdircHDAHi7EQpqhWQ",
          "e": "AQAB",
          "d": "L2rslluvOIT94XHTMllQSxTKdhf5jyB0pXWaIkQmet8qcZ_ELTSlE0hyxJQOVR83zCTq--Q2sO7O7rFAW03RR3YBFtwnbek1k6ZF3ftBeBgUbsw2OPHOvnUNCuBlwCjG2T5VnxcH1TjWKPKAxpRCURF3WA40QOmNxC_oUW0hsqd2lyf2Qa-OmllDFyOUuaIjSx5AZ36j4GWuCs_khvhGmQIcFG9ASn_8_yQqzBnQ7wCQ_SFgINvUP6cY5PRdAi_TjEYjckBmX8SqYZgQmVgtxxxDn11jayWnTa8Lu13ubJBQdhGOrU85Mg4x3eMKXGVVkSvjbaZFSStmBEdwimao0Q",
          "p": "1xM-aLtcc_MAfwfqu1MPR_vcWWlUsAdAgpj3K1HhpXpR_DI4V-sMbX8_x0iKWCjoZDVGW5JjNK3ho6V0h5Oi995ZJ2MgB8uA0BtceCV2jOL-lVJYaZwoESl_3KwfidiU3oe3oWoEJeOrWc0CY76mVv93mKuDzj2vsAPYzexuR3c",
          "q": "wzcH0PyMkXJ1yqTdH73L9NWuG8y499PxN1n60M60_-_WqwbExB-xYzySaFN_JCjI2zKRmMX_eH3p9p5xhjmmISspJr0EMvHJlHxpQ59AjBFg_On-vNLTkLh34ibNKT7Wsq95ec6ff0D9o4XDoO1f_5S60CNxhWLzcQ9KmitGMa8",
          "dp": "hDfHWRk9l-ZeermCO1Cvh0A1UR4ouuJqbR7ebFo1Dsao2hKBgsLz6-iba8aTjejwHJKHw0m2BS-UFEdl4OcI-7pMMqOEkGYxtT3s1cuqGqh9e4yY36vpEcviV-XUqahktHzYjbmf_S7-KwGWI32Tws3gVxGxwLs5Y0qqIMXlcbc",
          "dq": "JZRKZOi5BqbKFiB2kM2wnYkk4yUd1lducAFaTyf7n-lDodjDuB2BwGDArmSkbQmM4OVzMb2r2D4k89y8beJbILd2TIbGcCgrbfIlMWdOvaf6y7Uf3KmZIJriOR7PD8mQ-wTclZ45Bf401W3CoxAPEtxGuhqYl9zckD8pVVRPRvE",
          "qi": "0ULXUQ6d4nnxE4_9V2mCqkqMM-q0isgDzac57c3p6lia-Om1wZzZt6lMxYQfOmYPtm5KD9Pvx3LIraF4U0M-Mc3MtMxPvizG3HGkiqrzN3aZIOFYzm0Jb0IdBST_U4QZGBGwXOUCEymkhthuHT9UtH5vfG5pq2ahEM-Wc2uBHUs"
        }
      ]
    }
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----\nMIICsjCCAlegAwIBAgIBDTAKBggqhkjOPQQDAjA6MRswGQYDVQQKDBJMZXQncyBB\ndXRoZW50aWNhdGUxGzAZBgNVBAMMEkxBIEludGVybWVkaWF0ZSBDQTAeFw0yMTA2\nMTQxNzM1NDBaFw0yMjA2MjQxNzM1NDBaMEsxCzAJBgNVBAYTAlVTMQswCQYDVQQI\nDAJDTzEPMA0GA1UEBwwGRGVudmVyMR4wHAYDVQQDDBV1bmNvbW1vbiB0ZXN0IGNs\naWVudCAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiTHom8Sxa0cjg\nUSNnXGnZx/gm+93ip+7HQQPM4zHSK/LQeZSbCdiADTT0pDv0hzW4udhwSNBKVPcP\n+ermuzAliIn5MVSEZgfe9i7qWpdnLARsX+FS0VRQzEDp7uhS2NvGnnLQhgHfcc8C\n+A4nK/MWEJFGGE/Y7AmRKRZHjq9sUs6N+ExiDnARxCrzj/SFRY3NMXIVC9J5HaCp\nx2ld6YfPP0Hi/HZq5PsvN3hYYxvaRAgY9VUQSttz/d0JJu+aIjEuirpxVLp2BANJ\nvUv1J9hTpVQGbOYaZBGaxWJefOLcHWKsi1HYK69mMEWrKOxBoMxAk50SgxIsvk7V\nw/kPQJDVAgMBAAGjcjBwMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUZt1oy2t/JWxG\nArogj3LdGWkhA9gwDgYDVR0PAQH/BAQDAgbAMBMGA1UdJQQMMAoGCCsGAQUFBwMC\nMB0GA1UdEQEB/wQTMBGBD2JkY0BleGFtcGxlLmNvbTAKBggqhkjOPQQDAgNJADBG\nAiEAi//EFm4lAJSDTFvhl9gWOjS/sk74D0AcJDw37M9QDVUCIQCLTLeFZhuNYEKN\ndElnrKUuAXiZGrMh9B1php83AQlk9A\u003d\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\n+EAPeU8ELXYaPlE3NkwLP9QoEXD5IyjIASih2u8XJMk097IrS9M/rg\u003d\u003d\n-----END RSA PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----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\nRX5gP7kuu2KGMg\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "resource": {
    "resourceUrl": "https://par-what-is-it-good-for.ping-eng.com:3000/get"
  },
  "client2": {
    "client_id": "c__fapi-mtls-par2",
    "scope": "openid",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "kid": "LG7PuQ",
          "use": "sig",
          "alg": "PS256",
          "n": "hfCAETIrxp4a_4ObLtexDJFx5E6MSoJ6adImX9goGGQ8SjBb-syIlkCRvYvH7fSTR7IJ_a3kSOLKFa1v9GYftjIh8JdeV4aI6igbu7D7qsiMe8FUSqoKfMLlOtuOBULU2mqkMJ8LmXh6NwR2ZkznDRoTE1N-drB4RQc5FeEqpO2OYZMUAkH3fR01SY9NGPdKFjWnweGA2FDzfmL6kju79qlofn1CWtXoUTSv9S8jGzw258WruTqsFjbL4LeccEsQMhg1eBjLlnDQEVHqPbI6mUdvA5HwUlQQLli1_5Za8ONoBW9FwFOsZgLIAdB8JNgfzVE1ignKMALdzHnU4z641w",
          "e": "AQAB",
          "d": "GVDKs_VaptDNY4wZcbIc6bY346IhDBg7UPMCg80UTv_rEU6wo-eyzUtpAH2CDWzTxZJWJxeN9WTAM3azmWsQBVzWY2YI09w-1ps8Gq6p8q6zNtTkvLQFBW3E6-oBnubx2lKbtADrrVdDKlDynAVfCm_qORXn6kESimGCHauQZtmlMe43xLRrsjVLWztoyVYaYCjepvQ9Lsbirq_vFlu9AqYUqHSoKP9pHCsKVNFONictRHD5aQQZT1WocLj9XAwSs9SxtGMVP9XEo4qldkvMMakIe3kvEQsChfjkDoQrO6f1ti7tAP3AV3qLcxO0WSdr0YOSPe1T4SraMDIH1Pb_qQ",
          "p": "0ShCrAFdoYwMZodMjmyFH6U9hUCcmHmU9hSg1EzbEopRf9uJuxJejnOMw98un4pEFkTfEtkDzodyBd7gp_4Ao_sPCwC8rmThGE4J9BLDWIg8evcziH3TemKrPwAdxsIsCOraLjK5FpGuMSwSVHmciBBIKovgcOe3nNCPfc3ELoM",
          "q": "o--7TSNhhu4B1UyhRkYgdIF6HMNidVvcOHzcyy-uVz5ww7wzG4iK0SSPi7LkMyRl-9DhJOoaa9G1i_I6Mf3S_onBxYccwc57-KEsyN4BfmbTewiX-OLID1u3giECNFVWrznmbsofEswGU0215m03Zd7mc6OrnaNWPcJP-qQqfB0",
          "dp": "faGGMpT7bZ6WkDsyo9XRPInfYxvFM9zLuef4Fq03ZXKJs5flqeVFwKDta3WyJohBj3K83zBVFgfLWHVgUefC8LxLc9t0efgEMLonRmDCz3m9gkrbvF9_2GJN5CCowgs9sfmHJfq3rDPDAqwrMmx9tki5YDz2ijrU0i-AERu4fAs",
          "dq": "bNKGkv4Zj2gO73ie1fdXM_9-__jzMtR3q0e3iWltYZyhXk1f37cT7yFF6IYn1Ysj57UQv2BniYr76Joy51yG41CuwGCgRka7JKBZCj3U4AOB_voFZ8Gi7A8GEeu3euXrVQYqYQDq_59P05ySUxPM4mLEt56-HTZ_2R9T2B2B1kE",
          "qi": "RtUzv_tHGTpn2kyMQqo63soTlkV1yk0Ww3efYizZKvKsB3HDWm4D5xlBYXo9odTzLGu5yHMDcPJ4GntfFErjUMWWCxKf5xi6pMk1dH8FEm9rfxn0z3i83iaLRcdf_tVNHwJjuBBF0Q4tjpu8XolWHcrsgvkaHigPcpYMCe9xiJ0"
        }
      ]
    }
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\nJLjx36xJmOBNKZqeMU3LMya7P9vl7A\u003d\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----\nMIIEowIBAAKCAQEAugc8a7Ulmo7Tm/B4DvZfFzfh6NrOC1rk+rQfZqZhur/WJ6Kq\nVKtWOB+7WiHYm6EXs7fYvcEvd3TyqSYcGp7oiKzAou5+bPe9w8AeBX+7hcij1AU9\ni9ieN+u8JyPsNSNEo8y0yJCva5q8GmzKc3NMZ/3REX4iibpec8691DhV2fWAJQMX\narxR+Tc7gK+Cmlji8Gh8b0DG6/He3WFnThGU1kwJpA/gE3/WbKii6xOsK9IYBI56\nyTanVl0vY2npATUzMsv/rFHxiqbBx68RXhYMX4nCuQWdXTEDRVzVfBbqPNzpr7A/\n8OBpIbK64pjiXGI/oFQG2hHIyaqCqp7txtPxWQIDAQABAoIBAHuO3NHJQo2yudhE\nUunVN/mK83CfC+W83IOr6YNblWPdkRdIUovkNWMXqG/INT/BMqX6wWnfi3Bza81v\nc5E25MoKu/Q8JhqoPhFrZEVQvrOwPShQxr1BBm2sFI+Gq5frseZ9y8G/X9Q/tRp0\nEc+20BPuINPWjIggEiYnNixjspoN9MaFSAzPEkcMKVGq7UYdmuOSNxS1v8wyCECx\n3/XCXRjPtCSeA/eMtA6zfA9QatiybVTfbqN3QK3HXYcrtvIHwikB4+6CmoWSqt2F\nUsHyzAz4CwdG3QhAXboI8ryeZ5oLCkKwj4MB0vVa8Y9ARM+dM+f8uhQTKgGwif1e\nuKP9ytUCgYEA21Clfueat18qAF2A9NyAw3MbkJOrfiFFcfgMwsNAw0/dcJWBs0kD\n/toXhndTYGYXkLY6U+JImLdIp7vXRjPccQ1qx2PP4vuH8wVkfbWHJt+Q2T6Izvml\namPpuDlQg5atusj0x5ZWKjHfT24kVGA6l4mssDOzFhUK1V7BJaoBmxcCgYEA2SU1\nFskcNdzycLWvdnC1PG90poOCG92zNCT7PuCPjmuae7JDArbHK4R6c9jW1mJb/TWQ\njFiteDkQ1DBEQeHrsQuIKMK0AVNR4HpLF7rBzblNE7WC4S2r95OMz3G2JmysvmKO\nCAJEoAoJ5a/zK1RgtNl060p4R9EXUx2T3hSP3Q8CgYB+3rBeMWz3Fz4c5/pprAVx\nC22uvT4/wM+DlpMLOBiG4/Sd5F8bb+m3zEI/r1e0NFr9g+1KCWUlsyF8ptVp7yZe\n3/wdTEg+bnO+yifP8Os2Oa55fgt2cESYvyO9Rqqk9M2beBTiQL2nuyILuRObG+/J\nKgOUCtRWueWCeUYSm75CEQKBgEEdCyJeA/uS2ZA6qvbVLUOGGHCmFqnMfSQxwrVE\nGUgXtCdLeRSjQm4mN6Htb96xd+wh18p9/OaEFivKnW00FbztPFMcr2WGWpL5mPLw\nqZTK7/XtA+YKD/sZX6wE6R30kIg2fWihZXqoB/e8HyrrDmSsoIa9ufuvE1N1FxYN\nDGa5AoGBAJMEsPXmWfoGMukKnGhgQGy4UvKfzn1ruXGvVbMOrBpQzjaDPd7sMNrz\n8bHJERKhyoi5zJDbn0tVC9I9Z4VPUo2mwyfJvqNYrfBOb/lqe5QKFbx/dp5lA6DV\nIVIFUQH18LsQb1f3HdB4yJXvf5a0jJ0l3oizOnFQDlDbK9Xhla9i\n-----END RSA PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----\nMIIB5jCCAYugAwIBAgIBFjAKBggqhkjOPQQDAjBWMQswCQYDVQQGEwJVUzEbMBkG\nA1UECgwSTGV0J3MgQXV0aGVudGljYXRlMSowKAYDVQQDDCFMZXQncyBBdXRoZW50\naWNhdGUgUm9vdCBBdXRob3JpdHkwHhcNMjAwMTE0MjEzMjMwWhcNMzAwMTExMjEz\nMjMwWjA6MRswGQYDVQQKDBJMZXQncyBBdXRoZW50aWNhdGUxGzAZBgNVBAMMEkxB\nIEludGVybWVkaWF0ZSBDQTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJf+aA54\nRC5pyLAR5yfXVYmNpgd+CGUTDp2KOGhc0gK91zxhHesEYkdXkpS2UN8Kati+yHtW\nCV3kkhCngGyv7RqjZjBkMB0GA1UdDgQWBBRm3WjLa38lbEYCuiCPct0ZaSED2DAf\nBgNVHSMEGDAWgBTEA2Q6eecKu9g9yb5glbkhhVINGDASBgNVHRMBAf8ECDAGAQH/\nAgEAMA4GA1UdDwEB/wQEAwIBhjAKBggqhkjOPQQDAgNJADBGAiEA5pLvaFwRRkxo\nmIAtDIwg9D7gC1xzxBl4r28EzmSO1pcCIQCJUShpSXO9HDIQMUgH69fNDEMHXD3R\nRX5gP7kuu2KGMg\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "automated_ciba_approval_url": "https://cheba-hut.ping-eng.com:9031/ext/fake/{action}/oob?v\u003d{auth_req_id}"
}
testName
fapi-rw-id2-state-only-outside-request-object-not-used
2021-06-15 16:07:55 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
2021-06-15 16:07:55
GetDynamicServerConfiguration
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9032/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-06-15 16:07:55 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Tue, 15 Jun 2021 16:07:55 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003d2WWEjf0aY8EH946s1d6uig;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "content-length": "3666"
}
response_body
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/device_authz.oauth2",
  "scopes_supported": [ "other", "openid" ],
  "claims_supported": [ "acr", "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "token_endpoint_auth_methods_supported": ["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "tls_client_certificate_bound_access_tokens": true,
  "code_challenge_methods_supported": [ "plain", "S256" ]
}
2021-06-15 16:07:55
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/device_authz.oauth2",
  "scopes_supported": [ "other", "openid" ],
  "claims_supported": [ "acr", "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "token_endpoint_auth_methods_supported": ["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "tls_client_certificate_bound_access_tokens": true,
  "code_challenge_methods_supported": [ "plain", "S256" ]
}
2021-06-15 16:07:55 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://par-what-is-it-good-for.ping-eng.com:9032
authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2
token_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
revocation_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/revoke_token.oauth2
userinfo_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/idp/userinfo.openid
introspection_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/introspect.oauth2
jwks_uri
https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS
registration_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/clients.oauth2
ping_revoked_sris_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/revokedSris
ping_session_management_sris_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/sessions
ping_end_session_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/idp/startSLO.ping
device_authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/device_authz.oauth2
scopes_supported
[
  "other",
  "openid"
]
claims_supported
[
  "acr",
  "sub"
]
response_types_supported
[
  "code",
  "token",
  "id_token",
  "code token",
  "code id_token",
  "token id_token",
  "code token id_token"
]
response_modes_supported
[
  "fragment",
  "query",
  "form_post"
]
grant_types_supported
[
  "implicit",
  "authorization_code",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
  "urn:ietf:params:oauth:grant-type:jwt-bearer",
  "urn:ietf:params:oauth:grant-type:saml2-bearer",
  "urn:ietf:params:oauth:grant-type:device_code",
  "urn:ietf:params:oauth:grant-type:token-exchange",
  "urn:openid:params:grant-type:ciba"
]
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "none",
  "HS256",
  "HS384",
  "HS512",
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
token_endpoint_auth_methods_supported
[
  "client_secret_basic",
  "client_secret_post",
  "private_key_jwt",
  "tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
claim_types_supported
[
  "normal"
]
claims_parameter_supported
false
request_parameter_supported
true
request_uri_parameter_supported
false
request_object_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
id_token_encryption_alg_values_supported
[
  "dir",
  "A128KW",
  "A192KW",
  "A256KW",
  "A128GCMKW",
  "A192GCMKW",
  "A256GCMKW",
  "ECDH-ES",
  "ECDH-ES+A128KW",
  "ECDH-ES+A192KW",
  "ECDH-ES+A256KW",
  "RSA-OAEP"
]
id_token_encryption_enc_values_supported
[
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256CBC-HS512",
  "A128GCM",
  "A192GCM",
  "A256GCM"
]
pushed_authorization_request_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2
require_pushed_authorization_requests
false
backchannel_authentication_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/bc-auth.ciba
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
backchannel_user_code_parameter_supported
false
tls_client_certificate_bound_access_tokens
true
code_challenge_methods_supported
[
  "plain",
  "S256"
]
2021-06-15 16:07:55 INFO
AddMTLSEndpointAliasesToEnvironment
The mtls_endpoint_aliases is not present in the server configuration
server
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/device_authz.oauth2",
  "scopes_supported": [
    "other",
    "openid"
  ],
  "claims_supported": [
    "acr",
    "sub"
  ],
  "response_types_supported": [
    "code",
    "token",
    "id_token",
    "code token",
    "code id_token",
    "token id_token",
    "code token id_token"
  ],
  "response_modes_supported": [
    "fragment",
    "query",
    "form_post"
  ],
  "grant_types_supported": [
    "implicit",
    "authorization_code",
    "refresh_token",
    "password",
    "client_credentials",
    "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
    "urn:ietf:params:oauth:grant-type:jwt-bearer",
    "urn:ietf:params:oauth:grant-type:saml2-bearer",
    "urn:ietf:params:oauth:grant-type:device_code",
    "urn:ietf:params:oauth:grant-type:token-exchange",
    "urn:openid:params:grant-type:ciba"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "HS256",
    "HS384",
    "HS512",
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "private_key_jwt",
    "tls_client_auth"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "claim_types_supported": [
    "normal"
  ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "id_token_encryption_alg_values_supported": [
    "dir",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "RSA-OAEP"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [
    "poll",
    "ping"
  ],
  "backchannel_authentication_request_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "backchannel_user_code_parameter_supported": false,
  "tls_client_certificate_bound_access_tokens": true,
  "code_challenge_methods_supported": [
    "plain",
    "S256"
  ]
}
2021-06-15 16:07:55 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2021-06-15 16:07:55 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9032
}
authorization_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9031
}
token_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9032
}
userinfo_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9032
}
2021-06-15 16:07:55
FetchServerKeys
Fetching server key
jwks_uri
https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS
2021-06-15 16:07:55
FetchServerKeys
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-06-15 16:07:56 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Tue, 15 Jun 2021 16:07:56 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dSfZ3o7VW82ROO6MzY5Zyag;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"keys":[{"kty":"EC","kid":"5QadRhn8CbPcH87TPn44jtdjEb0","use":"sig","x":"NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY","y":"gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI","crv":"P-256"},{"kty":"RSA","kid":"E7i-dwTdrPHhrxA87ERbRd3SMTw","use":"sig","n":"gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw","e":"AQAB"},{"kty":"EC","kid":"NJ-xeJ1prPqxexh2SKij5J2P4uo","use":"sig","x":"H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ","y":"r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-","crv":"P-384"},{"kty":"EC","kid":"_jjw9ffzGB6Z4kAQAO_NV0B7sEU","use":"sig","x":"AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E","y":"AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12","crv":"P-521"},{"kty":"EC","kid":"SN6UlUJWv_KKF_mHImCtTOmUD2M","use":"sig","x":"gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ","y":"y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60","crv":"P-256"},{"kty":"RSA","kid":"ZH2y4AetHTynvUgDK_YxYbB5yLQ","use":"sig","n":"mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ","e":"AQAB"},{"kty":"EC","kid":"dsh6NHxZgjoeBgIu0XsECIIbtL8","use":"sig","x":"37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV","y":"jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F","crv":"P-384"},{"kty":"EC","kid":"qrrYthgG0KN3BK0QKR5GVxPIKhA","use":"sig","x":"AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS","y":"AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj","crv":"P-521"},{"kty":"EC","kid":"5MwmNtztM_lf-V-GNg1yUkl07HA","use":"enc","x":"_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0","y":"YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g","crv":"P-256"},{"kty":"RSA","kid":"KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM","use":"enc","n":"r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw","e":"AQAB"},{"kty":"EC","kid":"tTz8_Iu7CET43WmjZANNqOkoSpg","use":"enc","x":"CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ","y":"pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL","crv":"P-384"},{"kty":"EC","kid":"yJTeSKJRk14clH6IWD7NKszzrbQ","use":"enc","x":"AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI","y":"AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p","crv":"P-521"}]}
2021-06-15 16:07:56
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"EC","kid":"5QadRhn8CbPcH87TPn44jtdjEb0","use":"sig","x":"NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY","y":"gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI","crv":"P-256"},{"kty":"RSA","kid":"E7i-dwTdrPHhrxA87ERbRd3SMTw","use":"sig","n":"gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw","e":"AQAB"},{"kty":"EC","kid":"NJ-xeJ1prPqxexh2SKij5J2P4uo","use":"sig","x":"H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ","y":"r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-","crv":"P-384"},{"kty":"EC","kid":"_jjw9ffzGB6Z4kAQAO_NV0B7sEU","use":"sig","x":"AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E","y":"AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12","crv":"P-521"},{"kty":"EC","kid":"SN6UlUJWv_KKF_mHImCtTOmUD2M","use":"sig","x":"gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ","y":"y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60","crv":"P-256"},{"kty":"RSA","kid":"ZH2y4AetHTynvUgDK_YxYbB5yLQ","use":"sig","n":"mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ","e":"AQAB"},{"kty":"EC","kid":"dsh6NHxZgjoeBgIu0XsECIIbtL8","use":"sig","x":"37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV","y":"jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F","crv":"P-384"},{"kty":"EC","kid":"qrrYthgG0KN3BK0QKR5GVxPIKhA","use":"sig","x":"AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS","y":"AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj","crv":"P-521"},{"kty":"EC","kid":"5MwmNtztM_lf-V-GNg1yUkl07HA","use":"enc","x":"_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0","y":"YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g","crv":"P-256"},{"kty":"RSA","kid":"KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM","use":"enc","n":"r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw","e":"AQAB"},{"kty":"EC","kid":"tTz8_Iu7CET43WmjZANNqOkoSpg","use":"enc","x":"CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ","y":"pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL","crv":"P-384"},{"kty":"EC","kid":"yJTeSKJRk14clH6IWD7NKszzrbQ","use":"enc","x":"AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI","y":"AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p","crv":"P-521"}]}
2021-06-15 16:07:56 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "kid": "5QadRhn8CbPcH87TPn44jtdjEb0",
      "use": "sig",
      "x": "NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY",
      "y": "gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "E7i-dwTdrPHhrxA87ERbRd3SMTw",
      "use": "sig",
      "n": "gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "NJ-xeJ1prPqxexh2SKij5J2P4uo",
      "use": "sig",
      "x": "H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ",
      "y": "r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "_jjw9ffzGB6Z4kAQAO_NV0B7sEU",
      "use": "sig",
      "x": "AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E",
      "y": "AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "SN6UlUJWv_KKF_mHImCtTOmUD2M",
      "use": "sig",
      "x": "gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ",
      "y": "y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
      "use": "sig",
      "n": "mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "dsh6NHxZgjoeBgIu0XsECIIbtL8",
      "use": "sig",
      "x": "37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV",
      "y": "jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "qrrYthgG0KN3BK0QKR5GVxPIKhA",
      "use": "sig",
      "x": "AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS",
      "y": "AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "5MwmNtztM_lf-V-GNg1yUkl07HA",
      "use": "enc",
      "x": "_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0",
      "y": "YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM",
      "use": "enc",
      "n": "r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "tTz8_Iu7CET43WmjZANNqOkoSpg",
      "use": "enc",
      "x": "CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ",
      "y": "pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "yJTeSKJRk14clH6IWD7NKszzrbQ",
      "use": "enc",
      "x": "AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI",
      "y": "AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p",
      "crv": "P-521"
    }
  ]
}
2021-06-15 16:07:56 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "kid": "5QadRhn8CbPcH87TPn44jtdjEb0",
      "use": "sig",
      "x": "NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY",
      "y": "gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "E7i-dwTdrPHhrxA87ERbRd3SMTw",
      "use": "sig",
      "n": "gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "NJ-xeJ1prPqxexh2SKij5J2P4uo",
      "use": "sig",
      "x": "H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ",
      "y": "r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "_jjw9ffzGB6Z4kAQAO_NV0B7sEU",
      "use": "sig",
      "x": "AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E",
      "y": "AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "SN6UlUJWv_KKF_mHImCtTOmUD2M",
      "use": "sig",
      "x": "gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ",
      "y": "y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
      "use": "sig",
      "n": "mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "dsh6NHxZgjoeBgIu0XsECIIbtL8",
      "use": "sig",
      "x": "37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV",
      "y": "jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "qrrYthgG0KN3BK0QKR5GVxPIKhA",
      "use": "sig",
      "x": "AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS",
      "y": "AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "5MwmNtztM_lf-V-GNg1yUkl07HA",
      "use": "enc",
      "x": "_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0",
      "y": "YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM",
      "use": "enc",
      "n": "r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "tTz8_Iu7CET43WmjZANNqOkoSpg",
      "use": "enc",
      "x": "CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ",
      "y": "pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "yJTeSKJRk14clH6IWD7NKszzrbQ",
      "use": "enc",
      "x": "AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI",
      "y": "AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p",
      "crv": "P-521"
    }
  ]
}
2021-06-15 16:07:56 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-06-15 16:07:56 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2021-06-15 16:07:56 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-06-15 16:07:56 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "kid": "5QadRhn8CbPcH87TPn44jtdjEb0",
      "use": "sig",
      "x": "NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY",
      "y": "gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "E7i-dwTdrPHhrxA87ERbRd3SMTw",
      "use": "sig",
      "n": "gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "NJ-xeJ1prPqxexh2SKij5J2P4uo",
      "use": "sig",
      "x": "H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ",
      "y": "r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "_jjw9ffzGB6Z4kAQAO_NV0B7sEU",
      "use": "sig",
      "x": "AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E",
      "y": "AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "SN6UlUJWv_KKF_mHImCtTOmUD2M",
      "use": "sig",
      "x": "gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ",
      "y": "y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
      "use": "sig",
      "n": "mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "dsh6NHxZgjoeBgIu0XsECIIbtL8",
      "use": "sig",
      "x": "37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV",
      "y": "jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "qrrYthgG0KN3BK0QKR5GVxPIKhA",
      "use": "sig",
      "x": "AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS",
      "y": "AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "5MwmNtztM_lf-V-GNg1yUkl07HA",
      "use": "enc",
      "x": "_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0",
      "y": "YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM",
      "use": "enc",
      "n": "r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "tTz8_Iu7CET43WmjZANNqOkoSpg",
      "use": "enc",
      "x": "CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ",
      "y": "pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "yJTeSKJRk14clH6IWD7NKszzrbQ",
      "use": "enc",
      "x": "AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI",
      "y": "AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p",
      "crv": "P-521"
    }
  ]
}
2021-06-15 16:07:56 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
c__fapi-mtls-par1
scope
openid other
hint_type
login_hint
hint_value
cheba-hut@ping-eng.com
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "NjSdpg",
      "use": "sig",
      "alg": "PS256",
      "n": "pAHkPUm8SY4OdllzAU3NlWN1lOufCQ1mRkkrEfkXtiVcekY5yOM54PIxWtRtSkaJvv8RynyoQA-P_WiPRkjpUcHAFEhk3xi-nrihUhsfOlU7fFxfZqCcS36rUG9WGPKjWBsBiE3qOWb_NqVkzdzGu5Q-mhizoDTxpe77v6eg4c_meLs_Mu-Qa3V_IOZ-_lvDdKmUeKzNgs0vm0KbiaiAW9jY0Gg7Wzb44CdGeSJASe41KRP1dM-yByVESLm2IAk-KnGaKzfa-mZcrdrW-I15CGWNh2tYe_e4aNX85cEA1qj5OdAp9abr5v09sHERCkVg4X9fzdircHDAHi7EQpqhWQ",
      "e": "AQAB",
      "d": "L2rslluvOIT94XHTMllQSxTKdhf5jyB0pXWaIkQmet8qcZ_ELTSlE0hyxJQOVR83zCTq--Q2sO7O7rFAW03RR3YBFtwnbek1k6ZF3ftBeBgUbsw2OPHOvnUNCuBlwCjG2T5VnxcH1TjWKPKAxpRCURF3WA40QOmNxC_oUW0hsqd2lyf2Qa-OmllDFyOUuaIjSx5AZ36j4GWuCs_khvhGmQIcFG9ASn_8_yQqzBnQ7wCQ_SFgINvUP6cY5PRdAi_TjEYjckBmX8SqYZgQmVgtxxxDn11jayWnTa8Lu13ubJBQdhGOrU85Mg4x3eMKXGVVkSvjbaZFSStmBEdwimao0Q",
      "p": "1xM-aLtcc_MAfwfqu1MPR_vcWWlUsAdAgpj3K1HhpXpR_DI4V-sMbX8_x0iKWCjoZDVGW5JjNK3ho6V0h5Oi995ZJ2MgB8uA0BtceCV2jOL-lVJYaZwoESl_3KwfidiU3oe3oWoEJeOrWc0CY76mVv93mKuDzj2vsAPYzexuR3c",
      "q": "wzcH0PyMkXJ1yqTdH73L9NWuG8y499PxN1n60M60_-_WqwbExB-xYzySaFN_JCjI2zKRmMX_eH3p9p5xhjmmISspJr0EMvHJlHxpQ59AjBFg_On-vNLTkLh34ibNKT7Wsq95ec6ff0D9o4XDoO1f_5S60CNxhWLzcQ9KmitGMa8",
      "dp": "hDfHWRk9l-ZeermCO1Cvh0A1UR4ouuJqbR7ebFo1Dsao2hKBgsLz6-iba8aTjejwHJKHw0m2BS-UFEdl4OcI-7pMMqOEkGYxtT3s1cuqGqh9e4yY36vpEcviV-XUqahktHzYjbmf_S7-KwGWI32Tws3gVxGxwLs5Y0qqIMXlcbc",
      "dq": "JZRKZOi5BqbKFiB2kM2wnYkk4yUd1lducAFaTyf7n-lDodjDuB2BwGDArmSkbQmM4OVzMb2r2D4k89y8beJbILd2TIbGcCgrbfIlMWdOvaf6y7Uf3KmZIJriOR7PD8mQ-wTclZ45Bf401W3CoxAPEtxGuhqYl9zckD8pVVRPRvE",
      "qi": "0ULXUQ6d4nnxE4_9V2mCqkqMM-q0isgDzac57c3p6lia-Om1wZzZt6lMxYQfOmYPtm5KD9Pvx3LIraF4U0M-Mc3MtMxPvizG3HGkiqrzN3aZIOFYzm0Jb0IdBST_U4QZGBGwXOUCEymkhthuHT9UtH5vfG5pq2ahEM-Wc2uBHUs"
    }
  ]
}
2021-06-15 16:07:56 SUCCESS
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
2021-06-15 16:07:56 SUCCESS
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
cert
MIICsjCCAlegAwIBAgIBDTAKBggqhkjOPQQDAjA6MRswGQYDVQQKDBJMZXQncyBBdXRoZW50aWNhdGUxGzAZBgNVBAMMEkxBIEludGVybWVkaWF0ZSBDQTAeFw0yMTA2MTQxNzM1NDBaFw0yMjA2MjQxNzM1NDBaMEsxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDTzEPMA0GA1UEBwwGRGVudmVyMR4wHAYDVQQDDBV1bmNvbW1vbiB0ZXN0IGNsaWVudCAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiTHom8Sxa0cjgUSNnXGnZx/gm+93ip+7HQQPM4zHSK/LQeZSbCdiADTT0pDv0hzW4udhwSNBKVPcP+ermuzAliIn5MVSEZgfe9i7qWpdnLARsX+FS0VRQzEDp7uhS2NvGnnLQhgHfcc8C+A4nK/MWEJFGGE/Y7AmRKRZHjq9sUs6N+ExiDnARxCrzj/SFRY3NMXIVC9J5HaCpx2ld6YfPP0Hi/HZq5PsvN3hYYxvaRAgY9VUQSttz/d0JJu+aIjEuirpxVLp2BANJvUv1J9hTpVQGbOYaZBGaxWJefOLcHWKsi1HYK69mMEWrKOxBoMxAk50SgxIsvk7Vw/kPQJDVAgMBAAGjcjBwMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUZt1oy2t/JWxGArogj3LdGWkhA9gwDgYDVR0PAQH/BAQDAgbAMBMGA1UdJQQMMAoGCCsGAQUFBwMCMB0GA1UdEQEB/wQTMBGBD2JkY0BleGFtcGxlLmNvbTAKBggqhkjOPQQDAgNJADBGAiEAi//EFm4lAJSDTFvhl9gWOjS/sk74D0AcJDw37M9QDVUCIQCLTLeFZhuNYEKNdElnrKUuAXiZGrMh9B1php83AQlk9A==
key
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
ca
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
2021-06-15 16:07:56 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-06-15 16:07:56 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "NjSdpg",
      "use": "sig",
      "alg": "PS256",
      "n": "pAHkPUm8SY4OdllzAU3NlWN1lOufCQ1mRkkrEfkXtiVcekY5yOM54PIxWtRtSkaJvv8RynyoQA-P_WiPRkjpUcHAFEhk3xi-nrihUhsfOlU7fFxfZqCcS36rUG9WGPKjWBsBiE3qOWb_NqVkzdzGu5Q-mhizoDTxpe77v6eg4c_meLs_Mu-Qa3V_IOZ-_lvDdKmUeKzNgs0vm0KbiaiAW9jY0Gg7Wzb44CdGeSJASe41KRP1dM-yByVESLm2IAk-KnGaKzfa-mZcrdrW-I15CGWNh2tYe_e4aNX85cEA1qj5OdAp9abr5v09sHERCkVg4X9fzdircHDAHi7EQpqhWQ",
      "e": "AQAB",
      "d": "L2rslluvOIT94XHTMllQSxTKdhf5jyB0pXWaIkQmet8qcZ_ELTSlE0hyxJQOVR83zCTq--Q2sO7O7rFAW03RR3YBFtwnbek1k6ZF3ftBeBgUbsw2OPHOvnUNCuBlwCjG2T5VnxcH1TjWKPKAxpRCURF3WA40QOmNxC_oUW0hsqd2lyf2Qa-OmllDFyOUuaIjSx5AZ36j4GWuCs_khvhGmQIcFG9ASn_8_yQqzBnQ7wCQ_SFgINvUP6cY5PRdAi_TjEYjckBmX8SqYZgQmVgtxxxDn11jayWnTa8Lu13ubJBQdhGOrU85Mg4x3eMKXGVVkSvjbaZFSStmBEdwimao0Q",
      "p": "1xM-aLtcc_MAfwfqu1MPR_vcWWlUsAdAgpj3K1HhpXpR_DI4V-sMbX8_x0iKWCjoZDVGW5JjNK3ho6V0h5Oi995ZJ2MgB8uA0BtceCV2jOL-lVJYaZwoESl_3KwfidiU3oe3oWoEJeOrWc0CY76mVv93mKuDzj2vsAPYzexuR3c",
      "q": "wzcH0PyMkXJ1yqTdH73L9NWuG8y499PxN1n60M60_-_WqwbExB-xYzySaFN_JCjI2zKRmMX_eH3p9p5xhjmmISspJr0EMvHJlHxpQ59AjBFg_On-vNLTkLh34ibNKT7Wsq95ec6ff0D9o4XDoO1f_5S60CNxhWLzcQ9KmitGMa8",
      "dp": "hDfHWRk9l-ZeermCO1Cvh0A1UR4ouuJqbR7ebFo1Dsao2hKBgsLz6-iba8aTjejwHJKHw0m2BS-UFEdl4OcI-7pMMqOEkGYxtT3s1cuqGqh9e4yY36vpEcviV-XUqahktHzYjbmf_S7-KwGWI32Tws3gVxGxwLs5Y0qqIMXlcbc",
      "dq": "JZRKZOi5BqbKFiB2kM2wnYkk4yUd1lducAFaTyf7n-lDodjDuB2BwGDArmSkbQmM4OVzMb2r2D4k89y8beJbILd2TIbGcCgrbfIlMWdOvaf6y7Uf3KmZIJriOR7PD8mQ-wTclZ45Bf401W3CoxAPEtxGuhqYl9zckD8pVVRPRvE",
      "qi": "0ULXUQ6d4nnxE4_9V2mCqkqMM-q0isgDzac57c3p6lia-Om1wZzZt6lMxYQfOmYPtm5KD9Pvx3LIraF4U0M-Mc3MtMxPvizG3HGkiqrzN3aZIOFYzm0Jb0IdBST_U4QZGBGwXOUCEymkhthuHT9UtH5vfG5pq2ahEM-Wc2uBHUs"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "NjSdpg",
      "alg": "PS256",
      "n": "pAHkPUm8SY4OdllzAU3NlWN1lOufCQ1mRkkrEfkXtiVcekY5yOM54PIxWtRtSkaJvv8RynyoQA-P_WiPRkjpUcHAFEhk3xi-nrihUhsfOlU7fFxfZqCcS36rUG9WGPKjWBsBiE3qOWb_NqVkzdzGu5Q-mhizoDTxpe77v6eg4c_meLs_Mu-Qa3V_IOZ-_lvDdKmUeKzNgs0vm0KbiaiAW9jY0Gg7Wzb44CdGeSJASe41KRP1dM-yByVESLm2IAk-KnGaKzfa-mZcrdrW-I15CGWNh2tYe_e4aNX85cEA1qj5OdAp9abr5v09sHERCkVg4X9fzdircHDAHi7EQpqhWQ"
    }
  ]
}
2021-06-15 16:07:56 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-06-15 16:07:56 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-06-15 16:07:56 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "PS256",
  "ES256"
]
2021-06-15 16:07:56 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "NjSdpg",
      "use": "sig",
      "alg": "PS256",
      "n": "pAHkPUm8SY4OdllzAU3NlWN1lOufCQ1mRkkrEfkXtiVcekY5yOM54PIxWtRtSkaJvv8RynyoQA-P_WiPRkjpUcHAFEhk3xi-nrihUhsfOlU7fFxfZqCcS36rUG9WGPKjWBsBiE3qOWb_NqVkzdzGu5Q-mhizoDTxpe77v6eg4c_meLs_Mu-Qa3V_IOZ-_lvDdKmUeKzNgs0vm0KbiaiAW9jY0Gg7Wzb44CdGeSJASe41KRP1dM-yByVESLm2IAk-KnGaKzfa-mZcrdrW-I15CGWNh2tYe_e4aNX85cEA1qj5OdAp9abr5v09sHERCkVg4X9fzdircHDAHi7EQpqhWQ",
      "e": "AQAB",
      "d": "L2rslluvOIT94XHTMllQSxTKdhf5jyB0pXWaIkQmet8qcZ_ELTSlE0hyxJQOVR83zCTq--Q2sO7O7rFAW03RR3YBFtwnbek1k6ZF3ftBeBgUbsw2OPHOvnUNCuBlwCjG2T5VnxcH1TjWKPKAxpRCURF3WA40QOmNxC_oUW0hsqd2lyf2Qa-OmllDFyOUuaIjSx5AZ36j4GWuCs_khvhGmQIcFG9ASn_8_yQqzBnQ7wCQ_SFgINvUP6cY5PRdAi_TjEYjckBmX8SqYZgQmVgtxxxDn11jayWnTa8Lu13ubJBQdhGOrU85Mg4x3eMKXGVVkSvjbaZFSStmBEdwimao0Q",
      "p": "1xM-aLtcc_MAfwfqu1MPR_vcWWlUsAdAgpj3K1HhpXpR_DI4V-sMbX8_x0iKWCjoZDVGW5JjNK3ho6V0h5Oi995ZJ2MgB8uA0BtceCV2jOL-lVJYaZwoESl_3KwfidiU3oe3oWoEJeOrWc0CY76mVv93mKuDzj2vsAPYzexuR3c",
      "q": "wzcH0PyMkXJ1yqTdH73L9NWuG8y499PxN1n60M60_-_WqwbExB-xYzySaFN_JCjI2zKRmMX_eH3p9p5xhjmmISspJr0EMvHJlHxpQ59AjBFg_On-vNLTkLh34ibNKT7Wsq95ec6ff0D9o4XDoO1f_5S60CNxhWLzcQ9KmitGMa8",
      "dp": "hDfHWRk9l-ZeermCO1Cvh0A1UR4ouuJqbR7ebFo1Dsao2hKBgsLz6-iba8aTjejwHJKHw0m2BS-UFEdl4OcI-7pMMqOEkGYxtT3s1cuqGqh9e4yY36vpEcviV-XUqahktHzYjbmf_S7-KwGWI32Tws3gVxGxwLs5Y0qqIMXlcbc",
      "dq": "JZRKZOi5BqbKFiB2kM2wnYkk4yUd1lducAFaTyf7n-lDodjDuB2BwGDArmSkbQmM4OVzMb2r2D4k89y8beJbILd2TIbGcCgrbfIlMWdOvaf6y7Uf3KmZIJriOR7PD8mQ-wTclZ45Bf401W3CoxAPEtxGuhqYl9zckD8pVVRPRvE",
      "qi": "0ULXUQ6d4nnxE4_9V2mCqkqMM-q0isgDzac57c3p6lia-Om1wZzZt6lMxYQfOmYPtm5KD9Pvx3LIraF4U0M-Mc3MtMxPvizG3HGkiqrzN3aZIOFYzm0Jb0IdBST_U4QZGBGwXOUCEymkhthuHT9UtH5vfG5pq2ahEM-Wc2uBHUs"
    }
  ]
}
2021-06-15 16:07:56 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
Verify configuration of second client
2021-06-15 16:07:56 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
c__fapi-mtls-par2
scope
openid
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "LG7PuQ",
      "use": "sig",
      "alg": "PS256",
      "n": "hfCAETIrxp4a_4ObLtexDJFx5E6MSoJ6adImX9goGGQ8SjBb-syIlkCRvYvH7fSTR7IJ_a3kSOLKFa1v9GYftjIh8JdeV4aI6igbu7D7qsiMe8FUSqoKfMLlOtuOBULU2mqkMJ8LmXh6NwR2ZkznDRoTE1N-drB4RQc5FeEqpO2OYZMUAkH3fR01SY9NGPdKFjWnweGA2FDzfmL6kju79qlofn1CWtXoUTSv9S8jGzw258WruTqsFjbL4LeccEsQMhg1eBjLlnDQEVHqPbI6mUdvA5HwUlQQLli1_5Za8ONoBW9FwFOsZgLIAdB8JNgfzVE1ignKMALdzHnU4z641w",
      "e": "AQAB",
      "d": "GVDKs_VaptDNY4wZcbIc6bY346IhDBg7UPMCg80UTv_rEU6wo-eyzUtpAH2CDWzTxZJWJxeN9WTAM3azmWsQBVzWY2YI09w-1ps8Gq6p8q6zNtTkvLQFBW3E6-oBnubx2lKbtADrrVdDKlDynAVfCm_qORXn6kESimGCHauQZtmlMe43xLRrsjVLWztoyVYaYCjepvQ9Lsbirq_vFlu9AqYUqHSoKP9pHCsKVNFONictRHD5aQQZT1WocLj9XAwSs9SxtGMVP9XEo4qldkvMMakIe3kvEQsChfjkDoQrO6f1ti7tAP3AV3qLcxO0WSdr0YOSPe1T4SraMDIH1Pb_qQ",
      "p": "0ShCrAFdoYwMZodMjmyFH6U9hUCcmHmU9hSg1EzbEopRf9uJuxJejnOMw98un4pEFkTfEtkDzodyBd7gp_4Ao_sPCwC8rmThGE4J9BLDWIg8evcziH3TemKrPwAdxsIsCOraLjK5FpGuMSwSVHmciBBIKovgcOe3nNCPfc3ELoM",
      "q": "o--7TSNhhu4B1UyhRkYgdIF6HMNidVvcOHzcyy-uVz5ww7wzG4iK0SSPi7LkMyRl-9DhJOoaa9G1i_I6Mf3S_onBxYccwc57-KEsyN4BfmbTewiX-OLID1u3giECNFVWrznmbsofEswGU0215m03Zd7mc6OrnaNWPcJP-qQqfB0",
      "dp": "faGGMpT7bZ6WkDsyo9XRPInfYxvFM9zLuef4Fq03ZXKJs5flqeVFwKDta3WyJohBj3K83zBVFgfLWHVgUefC8LxLc9t0efgEMLonRmDCz3m9gkrbvF9_2GJN5CCowgs9sfmHJfq3rDPDAqwrMmx9tki5YDz2ijrU0i-AERu4fAs",
      "dq": "bNKGkv4Zj2gO73ie1fdXM_9-__jzMtR3q0e3iWltYZyhXk1f37cT7yFF6IYn1Ysj57UQv2BniYr76Joy51yG41CuwGCgRka7JKBZCj3U4AOB_voFZ8Gi7A8GEeu3euXrVQYqYQDq_59P05ySUxPM4mLEt56-HTZ_2R9T2B2B1kE",
      "qi": "RtUzv_tHGTpn2kyMQqo63soTlkV1yk0Ww3efYizZKvKsB3HDWm4D5xlBYXo9odTzLGu5yHMDcPJ4GntfFErjUMWWCxKf5xi6pMk1dH8FEm9rfxn0z3i83iaLRcdf_tVNHwJjuBBF0Q4tjpu8XolWHcrsgvkaHigPcpYMCe9xiJ0"
    }
  ]
}
2021-06-15 16:07:56 SUCCESS
ValidateMTLSCertificates2Header
MTLS certificates header is valid
2021-06-15 16:07:56 SUCCESS
ExtractMTLSCertificates2FromConfiguration
Mutual TLS authentication credentials loaded
cert
MIICsjCCAlegAwIBAgIBDzAKBggqhkjOPQQDAjA6MRswGQYDVQQKDBJMZXQncyBBdXRoZW50aWNhdGUxGzAZBgNVBAMMEkxBIEludGVybWVkaWF0ZSBDQTAeFw0yMTA2MTQxODAzMjdaFw0yMjA2MjQxODAzMjdaMEsxCzAJBgNVBAYTAkNBMQswCQYDVQQIDAJCQzESMBAGA1UEBwwJVmFuY291dmVyMRswGQYDVQQDDBJ0aGUgbmFtZSBnb2VzIGhlcmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BzxrtSWajtOb8HgO9l8XN+Ho2s4LWuT6tB9mpmG6v9YnoqpUq1Y4H7taIdiboRezt9i9wS93dPKpJhwanuiIrMCi7n5s973DwB4Ff7uFyKPUBT2L2J4367wnI+w1I0SjzLTIkK9rmrwabMpzc0xn/dERfiKJul5zzr3UOFXZ9YAlAxdqvFH5NzuAr4KaWOLwaHxvQMbr8d7dYWdOEZTWTAmkD+ATf9ZsqKLrE6wr0hgEjnrJNqdWXS9jaekBNTMyy/+sUfGKpsHHrxFeFgxficK5BZ1dMQNFXNV8Fuo83OmvsD/w4GkhsrrimOJcYj+gVAbaEcjJqoKqnu3G0/FZAgMBAAGjcjBwMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUZt1oy2t/JWxGArogj3LdGWkhA9gwDgYDVR0PAQH/BAQDAgbAMBMGA1UdJQQMMAoGCCsGAQUFBwMCMB0GA1UdEQEB/wQTMBGBD2JkY0BleGFtcGxlLmNvbTAKBggqhkjOPQQDAgNJADBGAiEA6tI9+IS2SInpF7NWfhWVVaETmBeVD9YTXMVWEVp6EVYCIQD0vGsjcpoOPw2fJLjx36xJmOBNKZqeMU3LMya7P9vl7A==
key
MIIEowIBAAKCAQEAugc8a7Ulmo7Tm/B4DvZfFzfh6NrOC1rk+rQfZqZhur/WJ6KqVKtWOB+7WiHYm6EXs7fYvcEvd3TyqSYcGp7oiKzAou5+bPe9w8AeBX+7hcij1AU9i9ieN+u8JyPsNSNEo8y0yJCva5q8GmzKc3NMZ/3REX4iibpec8691DhV2fWAJQMXarxR+Tc7gK+Cmlji8Gh8b0DG6/He3WFnThGU1kwJpA/gE3/WbKii6xOsK9IYBI56yTanVl0vY2npATUzMsv/rFHxiqbBx68RXhYMX4nCuQWdXTEDRVzVfBbqPNzpr7A/8OBpIbK64pjiXGI/oFQG2hHIyaqCqp7txtPxWQIDAQABAoIBAHuO3NHJQo2yudhEUunVN/mK83CfC+W83IOr6YNblWPdkRdIUovkNWMXqG/INT/BMqX6wWnfi3Bza81vc5E25MoKu/Q8JhqoPhFrZEVQvrOwPShQxr1BBm2sFI+Gq5frseZ9y8G/X9Q/tRp0Ec+20BPuINPWjIggEiYnNixjspoN9MaFSAzPEkcMKVGq7UYdmuOSNxS1v8wyCECx3/XCXRjPtCSeA/eMtA6zfA9QatiybVTfbqN3QK3HXYcrtvIHwikB4+6CmoWSqt2FUsHyzAz4CwdG3QhAXboI8ryeZ5oLCkKwj4MB0vVa8Y9ARM+dM+f8uhQTKgGwif1euKP9ytUCgYEA21Clfueat18qAF2A9NyAw3MbkJOrfiFFcfgMwsNAw0/dcJWBs0kD/toXhndTYGYXkLY6U+JImLdIp7vXRjPccQ1qx2PP4vuH8wVkfbWHJt+Q2T6IzvmlamPpuDlQg5atusj0x5ZWKjHfT24kVGA6l4mssDOzFhUK1V7BJaoBmxcCgYEA2SU1FskcNdzycLWvdnC1PG90poOCG92zNCT7PuCPjmuae7JDArbHK4R6c9jW1mJb/TWQjFiteDkQ1DBEQeHrsQuIKMK0AVNR4HpLF7rBzblNE7WC4S2r95OMz3G2JmysvmKOCAJEoAoJ5a/zK1RgtNl060p4R9EXUx2T3hSP3Q8CgYB+3rBeMWz3Fz4c5/pprAVxC22uvT4/wM+DlpMLOBiG4/Sd5F8bb+m3zEI/r1e0NFr9g+1KCWUlsyF8ptVp7yZe3/wdTEg+bnO+yifP8Os2Oa55fgt2cESYvyO9Rqqk9M2beBTiQL2nuyILuRObG+/JKgOUCtRWueWCeUYSm75CEQKBgEEdCyJeA/uS2ZA6qvbVLUOGGHCmFqnMfSQxwrVEGUgXtCdLeRSjQm4mN6Htb96xd+wh18p9/OaEFivKnW00FbztPFMcr2WGWpL5mPLwqZTK7/XtA+YKD/sZX6wE6R30kIg2fWihZXqoB/e8HyrrDmSsoIa9ufuvE1N1FxYNDGa5AoGBAJMEsPXmWfoGMukKnGhgQGy4UvKfzn1ruXGvVbMOrBpQzjaDPd7sMNrz8bHJERKhyoi5zJDbn0tVC9I9Z4VPUo2mwyfJvqNYrfBOb/lqe5QKFbx/dp5lA6DVIVIFUQH18LsQb1f3HdB4yJXvf5a0jJ0l3oizOnFQDlDbK9Xhla9i
ca
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
2021-06-15 16:07:56 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-06-15 16:07:56 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "LG7PuQ",
      "use": "sig",
      "alg": "PS256",
      "n": "hfCAETIrxp4a_4ObLtexDJFx5E6MSoJ6adImX9goGGQ8SjBb-syIlkCRvYvH7fSTR7IJ_a3kSOLKFa1v9GYftjIh8JdeV4aI6igbu7D7qsiMe8FUSqoKfMLlOtuOBULU2mqkMJ8LmXh6NwR2ZkznDRoTE1N-drB4RQc5FeEqpO2OYZMUAkH3fR01SY9NGPdKFjWnweGA2FDzfmL6kju79qlofn1CWtXoUTSv9S8jGzw258WruTqsFjbL4LeccEsQMhg1eBjLlnDQEVHqPbI6mUdvA5HwUlQQLli1_5Za8ONoBW9FwFOsZgLIAdB8JNgfzVE1ignKMALdzHnU4z641w",
      "e": "AQAB",
      "d": "GVDKs_VaptDNY4wZcbIc6bY346IhDBg7UPMCg80UTv_rEU6wo-eyzUtpAH2CDWzTxZJWJxeN9WTAM3azmWsQBVzWY2YI09w-1ps8Gq6p8q6zNtTkvLQFBW3E6-oBnubx2lKbtADrrVdDKlDynAVfCm_qORXn6kESimGCHauQZtmlMe43xLRrsjVLWztoyVYaYCjepvQ9Lsbirq_vFlu9AqYUqHSoKP9pHCsKVNFONictRHD5aQQZT1WocLj9XAwSs9SxtGMVP9XEo4qldkvMMakIe3kvEQsChfjkDoQrO6f1ti7tAP3AV3qLcxO0WSdr0YOSPe1T4SraMDIH1Pb_qQ",
      "p": "0ShCrAFdoYwMZodMjmyFH6U9hUCcmHmU9hSg1EzbEopRf9uJuxJejnOMw98un4pEFkTfEtkDzodyBd7gp_4Ao_sPCwC8rmThGE4J9BLDWIg8evcziH3TemKrPwAdxsIsCOraLjK5FpGuMSwSVHmciBBIKovgcOe3nNCPfc3ELoM",
      "q": "o--7TSNhhu4B1UyhRkYgdIF6HMNidVvcOHzcyy-uVz5ww7wzG4iK0SSPi7LkMyRl-9DhJOoaa9G1i_I6Mf3S_onBxYccwc57-KEsyN4BfmbTewiX-OLID1u3giECNFVWrznmbsofEswGU0215m03Zd7mc6OrnaNWPcJP-qQqfB0",
      "dp": "faGGMpT7bZ6WkDsyo9XRPInfYxvFM9zLuef4Fq03ZXKJs5flqeVFwKDta3WyJohBj3K83zBVFgfLWHVgUefC8LxLc9t0efgEMLonRmDCz3m9gkrbvF9_2GJN5CCowgs9sfmHJfq3rDPDAqwrMmx9tki5YDz2ijrU0i-AERu4fAs",
      "dq": "bNKGkv4Zj2gO73ie1fdXM_9-__jzMtR3q0e3iWltYZyhXk1f37cT7yFF6IYn1Ysj57UQv2BniYr76Joy51yG41CuwGCgRka7JKBZCj3U4AOB_voFZ8Gi7A8GEeu3euXrVQYqYQDq_59P05ySUxPM4mLEt56-HTZ_2R9T2B2B1kE",
      "qi": "RtUzv_tHGTpn2kyMQqo63soTlkV1yk0Ww3efYizZKvKsB3HDWm4D5xlBYXo9odTzLGu5yHMDcPJ4GntfFErjUMWWCxKf5xi6pMk1dH8FEm9rfxn0z3i83iaLRcdf_tVNHwJjuBBF0Q4tjpu8XolWHcrsgvkaHigPcpYMCe9xiJ0"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "LG7PuQ",
      "alg": "PS256",
      "n": "hfCAETIrxp4a_4ObLtexDJFx5E6MSoJ6adImX9goGGQ8SjBb-syIlkCRvYvH7fSTR7IJ_a3kSOLKFa1v9GYftjIh8JdeV4aI6igbu7D7qsiMe8FUSqoKfMLlOtuOBULU2mqkMJ8LmXh6NwR2ZkznDRoTE1N-drB4RQc5FeEqpO2OYZMUAkH3fR01SY9NGPdKFjWnweGA2FDzfmL6kju79qlofn1CWtXoUTSv9S8jGzw258WruTqsFjbL4LeccEsQMhg1eBjLlnDQEVHqPbI6mUdvA5HwUlQQLli1_5Za8ONoBW9FwFOsZgLIAdB8JNgfzVE1ignKMALdzHnU4z641w"
    }
  ]
}
2021-06-15 16:07:56 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-06-15 16:07:56 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-06-15 16:07:56 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "PS256",
  "ES256"
]
2021-06-15 16:07:56 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "LG7PuQ",
      "use": "sig",
      "alg": "PS256",
      "n": "hfCAETIrxp4a_4ObLtexDJFx5E6MSoJ6adImX9goGGQ8SjBb-syIlkCRvYvH7fSTR7IJ_a3kSOLKFa1v9GYftjIh8JdeV4aI6igbu7D7qsiMe8FUSqoKfMLlOtuOBULU2mqkMJ8LmXh6NwR2ZkznDRoTE1N-drB4RQc5FeEqpO2OYZMUAkH3fR01SY9NGPdKFjWnweGA2FDzfmL6kju79qlofn1CWtXoUTSv9S8jGzw258WruTqsFjbL4LeccEsQMhg1eBjLlnDQEVHqPbI6mUdvA5HwUlQQLli1_5Za8ONoBW9FwFOsZgLIAdB8JNgfzVE1ignKMALdzHnU4z641w",
      "e": "AQAB",
      "d": "GVDKs_VaptDNY4wZcbIc6bY346IhDBg7UPMCg80UTv_rEU6wo-eyzUtpAH2CDWzTxZJWJxeN9WTAM3azmWsQBVzWY2YI09w-1ps8Gq6p8q6zNtTkvLQFBW3E6-oBnubx2lKbtADrrVdDKlDynAVfCm_qORXn6kESimGCHauQZtmlMe43xLRrsjVLWztoyVYaYCjepvQ9Lsbirq_vFlu9AqYUqHSoKP9pHCsKVNFONictRHD5aQQZT1WocLj9XAwSs9SxtGMVP9XEo4qldkvMMakIe3kvEQsChfjkDoQrO6f1ti7tAP3AV3qLcxO0WSdr0YOSPe1T4SraMDIH1Pb_qQ",
      "p": "0ShCrAFdoYwMZodMjmyFH6U9hUCcmHmU9hSg1EzbEopRf9uJuxJejnOMw98un4pEFkTfEtkDzodyBd7gp_4Ao_sPCwC8rmThGE4J9BLDWIg8evcziH3TemKrPwAdxsIsCOraLjK5FpGuMSwSVHmciBBIKovgcOe3nNCPfc3ELoM",
      "q": "o--7TSNhhu4B1UyhRkYgdIF6HMNidVvcOHzcyy-uVz5ww7wzG4iK0SSPi7LkMyRl-9DhJOoaa9G1i_I6Mf3S_onBxYccwc57-KEsyN4BfmbTewiX-OLID1u3giECNFVWrznmbsofEswGU0215m03Zd7mc6OrnaNWPcJP-qQqfB0",
      "dp": "faGGMpT7bZ6WkDsyo9XRPInfYxvFM9zLuef4Fq03ZXKJs5flqeVFwKDta3WyJohBj3K83zBVFgfLWHVgUefC8LxLc9t0efgEMLonRmDCz3m9gkrbvF9_2GJN5CCowgs9sfmHJfq3rDPDAqwrMmx9tki5YDz2ijrU0i-AERu4fAs",
      "dq": "bNKGkv4Zj2gO73ie1fdXM_9-__jzMtR3q0e3iWltYZyhXk1f37cT7yFF6IYn1Ysj57UQv2BniYr76Joy51yG41CuwGCgRka7JKBZCj3U4AOB_voFZ8Gi7A8GEeu3euXrVQYqYQDq_59P05ySUxPM4mLEt56-HTZ_2R9T2B2B1kE",
      "qi": "RtUzv_tHGTpn2kyMQqo63soTlkV1yk0Ww3efYizZKvKsB3HDWm4D5xlBYXo9odTzLGu5yHMDcPJ4GntfFErjUMWWCxKf5xi6pMk1dH8FEm9rfxn0z3i83iaLRcdf_tVNHwJjuBBF0Q4tjpu8XolWHcrsgvkaHigPcpYMCe9xiJ0"
    }
  ]
}
2021-06-15 16:07:56 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2021-06-15 16:07:56 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://par-what-is-it-good-for.ping-eng.com:3000/get
2021-06-15 16:07:56 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://par-what-is-it-good-for.ping-eng.com:3000/get
2021-06-15 16:07:56 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
2021-06-15 16:07:56 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
accounts_request_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
2021-06-15 16:07:56
fapi-rw-id2-state-only-outside-request-object-not-used
Setup Done
Make request to authorization endpoint
2021-06-15 16:07:56 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
c__fapi-mtls-par1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
2021-06-15 16:07:56 SUCCESS
AddAcrClaimToAuthorizationEndpointRequest
Added acr claim to authorization_endpoint_request
authorization_endpoint_request
{
  "client_id": "c__fapi-mtls-par1",
  "redirect_uri": "https://www.certification.openid.net/test/a/pi/callback",
  "scope": "openid other",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  }
}
2021-06-15 16:07:56
CreateRandomStateValue
Created state value
requested_state_length
10
state
hpSKMgr24c
2021-06-15 16:07:56
AddStateToAuthorizationEndpointRequest
NOT adding state to request object
2021-06-15 16:07:56
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
w8TsTlxOgE
2021-06-15 16:07:56 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
c__fapi-mtls-par1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
nonce
w8TsTlxOgE
2021-06-15 16:07:56 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToCodeIdtoken
Added response_type parameter to request
client_id
c__fapi-mtls-par1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
nonce
w8TsTlxOgE
response_type
code id_token
2021-06-15 16:07:56 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "client_id": "c__fapi-mtls-par1",
  "redirect_uri": "https://www.certification.openid.net/test/a/pi/callback",
  "scope": "openid other",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  },
  "nonce": "w8TsTlxOgE",
  "response_type": "code id_token"
}
2021-06-15 16:07:56 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.623773576E9
2021-06-15 16:07:56 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://par-what-is-it-good-for.ping-eng.com:9032
2021-06-15 16:07:56 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
c__fapi-mtls-par1
2021-06-15 16:07:56 SUCCESS
AddClientIdToRequestObject
Added client_id to request object claims
client_id
c__fapi-mtls-par1
2021-06-15 16:07:56 SUCCESS
SignRequestObject
Signed the request object
claims
{"aud":"https:\/\/par-what-is-it-good-for.ping-eng.com:9032","scope":"openid other","claims":{"id_token":{"acr":{"value":"urn:mace:incommon:iap:silver","essential":true}}},"iss":"c__fapi-mtls-par1","response_type":"code id_token","redirect_uri":"https:\/\/www.certification.openid.net\/test\/a\/pi\/callback","exp":1623773576,"nonce":"w8TsTlxOgE","client_id":"c__fapi-mtls-par1"}
header
{"kid":"NjSdpg","alg":"PS256"}
request_object
eyJraWQiOiJOalNkcGciLCJhbGciOiJQUzI1NiJ9.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.mfDVucnF3E7oxIMMnG06iNSOEclAIUfB0jXCu4Be7_Pd5g-3-qVRF9b97mJ6qCwtbtj1msDCDImV5o3Pyc8jKAYwUJoYXs9HP709KzLm_oQ4367jkJiigH2IloM0FyzLNxHXPsvLDC_RbeDcB4EEWTBCkYD8AfHOtdLq2IcpLxK7cnVOfitBmREh77bxSTvk9x7B3IqZeRjCpbLvH4wOZaGhLCLFcwOlInLy4klXYER_m9PWLOrHS4CgMLgIdtkcQgruZPtXkEKLfOSkyvytZSRpnoXYksSjjLxlaKNnW6PVJpB_vVQcEQjldmyCh75ekhwcJ5O0gIm211BWHJupqw
key
{"p":"1xM-aLtcc_MAfwfqu1MPR_vcWWlUsAdAgpj3K1HhpXpR_DI4V-sMbX8_x0iKWCjoZDVGW5JjNK3ho6V0h5Oi995ZJ2MgB8uA0BtceCV2jOL-lVJYaZwoESl_3KwfidiU3oe3oWoEJeOrWc0CY76mVv93mKuDzj2vsAPYzexuR3c","kty":"RSA","q":"wzcH0PyMkXJ1yqTdH73L9NWuG8y499PxN1n60M60_-_WqwbExB-xYzySaFN_JCjI2zKRmMX_eH3p9p5xhjmmISspJr0EMvHJlHxpQ59AjBFg_On-vNLTkLh34ibNKT7Wsq95ec6ff0D9o4XDoO1f_5S60CNxhWLzcQ9KmitGMa8","d":"L2rslluvOIT94XHTMllQSxTKdhf5jyB0pXWaIkQmet8qcZ_ELTSlE0hyxJQOVR83zCTq--Q2sO7O7rFAW03RR3YBFtwnbek1k6ZF3ftBeBgUbsw2OPHOvnUNCuBlwCjG2T5VnxcH1TjWKPKAxpRCURF3WA40QOmNxC_oUW0hsqd2lyf2Qa-OmllDFyOUuaIjSx5AZ36j4GWuCs_khvhGmQIcFG9ASn_8_yQqzBnQ7wCQ_SFgINvUP6cY5PRdAi_TjEYjckBmX8SqYZgQmVgtxxxDn11jayWnTa8Lu13ubJBQdhGOrU85Mg4x3eMKXGVVkSvjbaZFSStmBEdwimao0Q","e":"AQAB","use":"sig","kid":"NjSdpg","qi":"0ULXUQ6d4nnxE4_9V2mCqkqMM-q0isgDzac57c3p6lia-Om1wZzZt6lMxYQfOmYPtm5KD9Pvx3LIraF4U0M-Mc3MtMxPvizG3HGkiqrzN3aZIOFYzm0Jb0IdBST_U4QZGBGwXOUCEymkhthuHT9UtH5vfG5pq2ahEM-Wc2uBHUs","dp":"hDfHWRk9l-ZeermCO1Cvh0A1UR4ouuJqbR7ebFo1Dsao2hKBgsLz6-iba8aTjejwHJKHw0m2BS-UFEdl4OcI-7pMMqOEkGYxtT3s1cuqGqh9e4yY36vpEcviV-XUqahktHzYjbmf_S7-KwGWI32Tws3gVxGxwLs5Y0qqIMXlcbc","alg":"PS256","dq":"JZRKZOi5BqbKFiB2kM2wnYkk4yUd1lducAFaTyf7n-lDodjDuB2BwGDArmSkbQmM4OVzMb2r2D4k89y8beJbILd2TIbGcCgrbfIlMWdOvaf6y7Uf3KmZIJriOR7PD8mQ-wTclZ45Bf401W3CoxAPEtxGuhqYl9zckD8pVVRPRvE","n":"pAHkPUm8SY4OdllzAU3NlWN1lOufCQ1mRkkrEfkXtiVcekY5yOM54PIxWtRtSkaJvv8RynyoQA-P_WiPRkjpUcHAFEhk3xi-nrihUhsfOlU7fFxfZqCcS36rUG9WGPKjWBsBiE3qOWb_NqVkzdzGu5Q-mhizoDTxpe77v6eg4c_meLs_Mu-Qa3V_IOZ-_lvDdKmUeKzNgs0vm0KbiaiAW9jY0Gg7Wzb44CdGeSJASe41KRP1dM-yByVESLm2IAk-KnGaKzfa-mZcrdrW-I15CGWNh2tYe_e4aNX85cEA1qj5OdAp9abr5v09sHERCkVg4X9fzdircHDAHi7EQpqhWQ"}
2021-06-15 16:07:56 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
c__fapi-mtls-par1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
nonce
w8TsTlxOgE
response_type
code id_token
state
hpSKMgr24c
2021-06-15 16:07:56 SUCCESS
BuildRequestObjectPostToPAREndpoint
request
eyJraWQiOiJOalNkcGciLCJhbGciOiJQUzI1NiJ9.eyJhdWQiOiJodHRwczpcL1wvcGFyLXdoYXQtaXMtaXQtZ29vZC1mb3IucGluZy1lbmcuY29tOjkwMzIiLCJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsYWltcyI6eyJpZF90b2tlbiI6eyJhY3IiOnsidmFsdWUiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiZXNzZW50aWFsIjp0cnVlfX19LCJpc3MiOiJjX19mYXBpLW10bHMtcGFyMSIsInJlc3BvbnNlX3R5cGUiOiJjb2RlIGlkX3Rva2VuIiwicmVkaXJlY3RfdXJpIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3BpXC9jYWxsYmFjayIsImV4cCI6MTYyMzc3MzU3Niwibm9uY2UiOiJ3OFRzVGx4T2dFIiwiY2xpZW50X2lkIjoiY19fZmFwaS1tdGxzLXBhcjEifQ.mfDVucnF3E7oxIMMnG06iNSOEclAIUfB0jXCu4Be7_Pd5g-3-qVRF9b97mJ6qCwtbtj1msDCDImV5o3Pyc8jKAYwUJoYXs9HP709KzLm_oQ4367jkJiigH2IloM0FyzLNxHXPsvLDC_RbeDcB4EEWTBCkYD8AfHOtdLq2IcpLxK7cnVOfitBmREh77bxSTvk9x7B3IqZeRjCpbLvH4wOZaGhLCLFcwOlInLy4klXYER_m9PWLOrHS4CgMLgIdtkcQgruZPtXkEKLfOSkyvytZSRpnoXYksSjjLxlaKNnW6PVJpB_vVQcEQjldmyCh75ekhwcJ5O0gIm211BWHJupqw
2021-06-15 16:07:56 SUCCESS
AddClientIdToPAREndpointRequest
request
eyJraWQiOiJOalNkcGciLCJhbGciOiJQUzI1NiJ9.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.mfDVucnF3E7oxIMMnG06iNSOEclAIUfB0jXCu4Be7_Pd5g-3-qVRF9b97mJ6qCwtbtj1msDCDImV5o3Pyc8jKAYwUJoYXs9HP709KzLm_oQ4367jkJiigH2IloM0FyzLNxHXPsvLDC_RbeDcB4EEWTBCkYD8AfHOtdLq2IcpLxK7cnVOfitBmREh77bxSTvk9x7B3IqZeRjCpbLvH4wOZaGhLCLFcwOlInLy4klXYER_m9PWLOrHS4CgMLgIdtkcQgruZPtXkEKLfOSkyvytZSRpnoXYksSjjLxlaKNnW6PVJpB_vVQcEQjldmyCh75ekhwcJ5O0gIm211BWHJupqw
client_id
c__fapi-mtls-par1
2021-06-15 16:07:56
CallPAREndpoint
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-length": "926"
}
request_body
request=eyJraWQiOiJOalNkcGciLCJhbGciOiJQUzI1NiJ9.eyJhdWQiOiJodHRwczpcL1wvcGFyLXdoYXQtaXMtaXQtZ29vZC1mb3IucGluZy1lbmcuY29tOjkwMzIiLCJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsYWltcyI6eyJpZF90b2tlbiI6eyJhY3IiOnsidmFsdWUiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiZXNzZW50aWFsIjp0cnVlfX19LCJpc3MiOiJjX19mYXBpLW10bHMtcGFyMSIsInJlc3BvbnNlX3R5cGUiOiJjb2RlIGlkX3Rva2VuIiwicmVkaXJlY3RfdXJpIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3BpXC9jYWxsYmFjayIsImV4cCI6MTYyMzc3MzU3Niwibm9uY2UiOiJ3OFRzVGx4T2dFIiwiY2xpZW50X2lkIjoiY19fZmFwaS1tdGxzLXBhcjEifQ.mfDVucnF3E7oxIMMnG06iNSOEclAIUfB0jXCu4Be7_Pd5g-3-qVRF9b97mJ6qCwtbtj1msDCDImV5o3Pyc8jKAYwUJoYXs9HP709KzLm_oQ4367jkJiigH2IloM0FyzLNxHXPsvLDC_RbeDcB4EEWTBCkYD8AfHOtdLq2IcpLxK7cnVOfitBmREh77bxSTvk9x7B3IqZeRjCpbLvH4wOZaGhLCLFcwOlInLy4klXYER_m9PWLOrHS4CgMLgIdtkcQgruZPtXkEKLfOSkyvytZSRpnoXYksSjjLxlaKNnW6PVJpB_vVQcEQjldmyCh75ekhwcJ5O0gIm211BWHJupqw&client_id=c__fapi-mtls-par1
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEpAIBAAKCAQEAokx6JvEsWtHI4FEjZ1xp2cf4Jvvd4qfux0EDzOMx0ivy0HmUmwnYgA009KQ79Ic1uLnYcEjQSlT3D/nq5rswJYiJ+TFUhGYH3vYu6lqXZywEbF/hUtFUUMxA6e7oUtjbxp5y0IYB33HPAvgOJyvzFhCRRhhP2OwJkSkWR46vbFLOjfhMYg5wEcQq84/0hUWNzTFyFQvSeR2gqcdpXemHzz9B4vx2auT7Lzd4WGMb2kQIGPVVEErbc/3dCSbvmiIxLoq6cVS6dgQDSb1L9SfYU6VUBmzmGmQRmsViXnzi3B1irItR2CuvZjBFqyjsQaDMQJOdEoMSLL5O1cP5D0CQ1QIDAQABAoIBAQCftz8mf4Q0w+o4xeBfYVRRmzabtpT+7mBO+a4xvQtUVyeW/W6+vAuwyE5qygyucTju1wUmSqGf5MlVkY4XDfMtnJabAm639GiehApbWldQksKvnBNzmsis0rS3AgLjNMHjTh6TEq1ZJPihZVcYOWn5NsigAGDjijVIAvUH6mS75ZfEfBvIvgrBKkdhvXzLc5Hof8t7RVusPl1fPIiYy1r3RfhuSDWQLNysyXeCA3a5FEdMq0N+ZPiNejNsFIzO75QmJyXmVe38BERNVD0wMAlnHyYQKn5EPmWhhxncQkhzuyK8MqqNkH/ho6Rg5swlzJLXMYVKecjca9XYGZGAnsOpAoGBANfN36Ptfh6kxLX7ULHUbo1E7gYY27+FS9GAkuw8jFSxU/+3zTrls3Quw7q+LGCVZo6MBJPvWY9KKpYm8WtlOzL6yp47Ni2+yutjvevlBSuw/tSEKJftDJlwrzpXf8I4TMcwK492xw3Z/kEB5+LcACjDaAZ9uQFYjvs7X2OT6OFXAoGBAMCHUa5JcwCa0vNES+/AT5wVVe1TlPSgyc763fkm14tWYB4eMbfKobziHiDWp8aorsMJGY8NdYdwps775hwbtAm24IooJdoeVIU3XACRAgANBOaSc6BbGQw2xQyBnBb0YPB/D0oXjQR8xbfT+cAxD/X3G4zRDELt51A4sYD3p2ezAoGBAKk3gH6tEjD7KFg+WVcn6QwTGcVkJqO15O7BL/PXwn4Ckog42s+tIBshNE8xIeEWJVXvSwOpMgPetygIH1QEC/h8mPacHW6fZcRP8LORYI2S+y8u9hmzQibrKivIQqDLvsCN8ApNq+YbonfdA7RqqCFOoDo+yRvaEjvDoZeWeox/AoGAJQAcl4UwH9ahYfUnLt1jr1h+WgztHJJmFmwqCr8HP5ULBd7BqVO8/6LpLWBzf/9dDsiJ6+8nPi9NL4xDrfU5BYDq6EJM+/1GOw/nk4hKvR3DaliM9i1rw+gmuH+UMukmVDHnC1M5W7pq+Sg44FHNgnTKC6cFVzuHb+hlXKa7uncCgYAby+y2VVsqd16KcURYSBx02wuVNcgL6dSjZ855cBGLgg8jiTScfRYkZf3t3HoxC2tFv0eE8+tbcXh9SnuhQOyq7poeYhSKzarOLpk/w9f5hpQD7JVLcm+Q+EAPeU8ELXYaPlE3NkwLP9QoEXD5IyjIASih2u8XJMk097IrS9M/rg\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2021-06-15 16:07:56 RESPONSE
CallPAREndpoint
HTTP response
response_status_code
201 CREATED
response_status_text
Created
response_headers
{
  "date": "Tue, 15 Jun 2021 16:07:56 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dVbu4mEmzilxweu7r2pEtGG;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"expires_in":15,"request_uri":"urn:ietf:params:oauth:request_uri:goq1L5g1OgMYGGflyVJ8vB3vUOqigoAx"}
2021-06-15 16:07:56 SUCCESS
CallPAREndpoint
Storing pushed_authorization_endpoint_response_http_status 201
2021-06-15 16:07:56 SUCCESS
CallPAREndpoint
Parsed pushed authorization request endpoint response
expires_in
15
request_uri
urn:ietf:params:oauth:request_uri:goq1L5g1OgMYGGflyVJ8vB3vUOqigoAx
2021-06-15 16:07:56 SUCCESS
CheckIfPAREndpointResponseError
pushed authorization request endpoint correct response.
2021-06-15 16:07:56 SUCCESS
CheckForRequestUriValue
Found valid request_uri
request_uri
urn:ietf:params:oauth:request_uri:goq1L5g1OgMYGGflyVJ8vB3vUOqigoAx
2021-06-15 16:07:56 SUCCESS
CheckForPARResponseExpiresIn
Found expires_in
expires_in
15
2021-06-15 16:07:56 SUCCESS
ExtractRequestUriFromPARResponse
Extracted the request_uri: urn:ietf:params:oauth:request_uri:goq1L5g1OgMYGGflyVJ8vB3vUOqigoAx
2021-06-15 16:07:56 SUCCESS
EnsureMinimumRequestUriEntropy
Calculated shannon entropy seems sufficient
actual
322.7910463902404
expected
128.0
2021-06-15 16:07:56 SUCCESS
BuildRequestObjectByReferenceRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2?request_uri=urn:ietf:params:oauth:request_uri:goq1L5g1OgMYGGflyVJ8vB3vUOqigoAx&client_id=c__fapi-mtls-par1&redirect_uri=https://www.certification.openid.net/test/a/pi/callback&scope=openid%20other&response_type=code%20id_token&state=hpSKMgr24c
2021-06-15 16:07:56 REDIRECT
fapi-rw-id2-state-only-outside-request-object-not-used
Redirecting to authorization endpoint
redirect_to
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2?request_uri=urn:ietf:params:oauth:request_uri:goq1L5g1OgMYGGflyVJ8vB3vUOqigoAx&client_id=c__fapi-mtls-par1&redirect_uri=https://www.certification.openid.net/test/a/pi/callback&scope=openid%20other&response_type=code%20id_token&state=hpSKMgr24c
2021-06-15 16:07:56 REVIEW
ExpectRequestObjectMissingStateErrorPage
If the server does not return an invalid_request_object error back to the client, it must show an error page saying the request object is invalid as it is missing the 'state' claim - upload a screenshot of the error page.
image_no_longer_required
true
2021-06-15 16:08:07 INCOMING
fapi-rw-id2-state-only-outside-request-object-not-used
Incoming HTTP request to test instance 5Qwo7MMf0uQE7hu
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:88.0) Gecko/20100101 Firefox/88.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://par-what-is-it-good-for.ping-eng.com:9031/",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1623687574.1623770157.261; __utmz\u003d201319536.1623105741.257.63.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell; __utmc\u003d201319536; JSESSIONID\u003d9013661A0A3851129F3BCC0475BAB396",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
callback
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-06-15 16:08:07 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/tl2m9f4qLNIrJKY1KckN",
  "fullUrl": "https://www.certification.openid.net/test/a/pi/implicit/tl2m9f4qLNIrJKY1KckN"
}
2021-06-15 16:08:07 OUTGOING
fapi-rw-id2-state-only-outside-request-object-not-used
Response to HTTP request to test instance 5Qwo7MMf0uQE7hu
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/pi/implicit/tl2m9f4qLNIrJKY1KckN, returnUrl=/log-detail.html?log=5Qwo7MMf0uQE7hu}]
outgoing_path
callback
2021-06-15 16:08:08 INCOMING
fapi-rw-id2-state-only-outside-request-object-not-used
Incoming HTTP request to test instance 5Qwo7MMf0uQE7hu
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:88.0) Gecko/20100101 Firefox/88.0",
  "accept": "*/*",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "content-type": "text/plain",
  "x-requested-with": "XMLHttpRequest",
  "origin": "https://www.certification.openid.net",
  "referer": "https://www.certification.openid.net/test/a/pi/callback",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1623687574.1623770157.261; __utmz\u003d201319536.1623105741.257.63.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell; __utmc\u003d201319536; JSESSIONID\u003d9013661A0A3851129F3BCC0475BAB396",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "907",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
implicit/tl2m9f4qLNIrJKY1KckN
incoming_body_form_params
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
#code=gM5P5r6ZI1f31b3lUZJMjvzigPES5OQKC14EM06Y&id_token=eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A
2021-06-15 16:08:08 OUTGOING
fapi-rw-id2-state-only-outside-request-object-not-used
Response to HTTP request to test instance 5Qwo7MMf0uQE7hu
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/tl2m9f4qLNIrJKY1KckN
2021-06-15 16:08:08
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "code",
    "value": "gM5P5r6ZI1f31b3lUZJMjvzigPES5OQKC14EM06Y"
  },
  {
    "name": "id_token",
    "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A"
  }
]
2021-06-15 16:08:08 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
code
gM5P5r6ZI1f31b3lUZJMjvzigPES5OQKC14EM06Y
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A
2021-06-15 16:08:08 REDIRECT-IN
fapi-rw-id2-state-only-outside-request-object-not-used
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:88.0) Gecko/20100101 Firefox/88.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://par-what-is-it-good-for.ping-eng.com:9031/",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1623687574.1623770157.261; __utmz\u003d201319536.1623105741.257.63.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell; __utmc\u003d201319536; JSESSIONID\u003d9013661A0A3851129F3BCC0475BAB396",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "code": "gM5P5r6ZI1f31b3lUZJMjvzigPES5OQKC14EM06Y",
  "id_token": "eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A"
}
post_body
Verify authorization endpoint response
2021-06-15 16:08:08 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2021-06-15 16:08:08 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2021-06-15 16:08:08 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2021-06-15 16:08:08 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2021-06-15 16:08:08 SUCCESS
VerifyNoStateInAuthorizationResponse
Authorization endpoint response is correctly missing 'state'
2021-06-15 16:08:08 SUCCESS
ExtractAuthorizationCodeFromAuthorizationResponse
Found authorization code
code
gM5P5r6ZI1f31b3lUZJMjvzigPES5OQKC14EM06Y
2021-06-15 16:08:08 SUCCESS
EnsureMinimumAuthorizationCodeLength
Authorization code is of sufficient length
actual
320
required
128
2021-06-15 16:08:08 SUCCESS
EnsureMinimumAuthorizationCodeEntropy
Calculated shannon entropy seems sufficient
actual
186.61246128900405
expected
96.0
2021-06-15 16:08:08 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A
header
{
  "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
  "alg": "PS256"
}
claims
{
  "sub": "9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4",
  "aud": "c__fapi-mtls-par1",
  "acr": "urn:mace:incommon:iap:silver",
  "c_hash": "dNEPoIXwKfvk9C986yjVyA",
  "auth_time": 1623773146,
  "iss": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "exp": 1623773587,
  "iat": 1623773287,
  "nonce": "w8TsTlxOgE",
  "jti": "ZiPNaQqacQNIzUu8R5ETcS"
}
2021-06-15 16:08:08 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-06-15 16:08:08 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
ZH2y4AetHTynvUgDK_YxYbB5yLQ
2021-06-15 16:08:08 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
w8TsTlxOgE
2021-06-15 16:08:08 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
acr value in id_token is (one of) the requested values
actual
urn:mace:incommon:iap:silver
requested
[
  "urn:mace:incommon:iap:silver"
]
2021-06-15 16:08:08 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A
2021-06-15 16:08:08 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A
2021-06-15 16:08:08 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4
2021-06-15 16:08:08 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "PS256",
  "ES256"
]
alg
PS256
2021-06-15 16:08:08 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-06-15 16:08:08 INFO
FAPIValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-06-15 16:08:08 SUCCESS
VerifyNoSHash
ID Token is correctly missing s_hash
2021-06-15 16:08:08 SUCCESS
ExtractCHash
Extracted c_hash from ID Token
c_hash
dNEPoIXwKfvk9C986yjVyA
alg
PS256
2021-06-15 16:08:08 SUCCESS
ValidateCHash
c_hash validated successfully
expected_hash
dNEPoIXwKfvk9C986yjVyA
unhashed_value
gM5P5r6ZI1f31b3lUZJMjvzigPES5OQKC14EM06Y
id_token_hash
dNEPoIXwKfvk9C986yjVyA
Call token endpoint
2021-06-15 16:08:08 SUCCESS
CreateTokenEndpointRequestForAuthorizationCodeGrant
grant_type
authorization_code
code
gM5P5r6ZI1f31b3lUZJMjvzigPES5OQKC14EM06Y
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
2021-06-15 16:08:08 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
authorization_code
code
gM5P5r6ZI1f31b3lUZJMjvzigPES5OQKC14EM06Y
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
client_id
c__fapi-mtls-par1
2021-06-15 16:08:08
CallTokenEndpoint
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "186"
}
request_body
grant_type=authorization_code&code=gM5P5r6ZI1f31b3lUZJMjvzigPES5OQKC14EM06Y&redirect_uri=https%3A%2F%2Fwww.certification.openid.net%2Ftest%2Fa%2Fpi%2Fcallback&client_id=c__fapi-mtls-par1
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2021-06-15 16:08:08 RESPONSE
CallTokenEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Tue, 15 Jun 2021 16:08:08 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dG3GUtRI79wfwzn7ibyCq05;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"access_token":"eyJhbGciOiJFUzI1NiIsImtpZCI6IlNONlVsVUpXdl9LS0ZfbUhJbUN0VE9tVUQyTSIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktbXRscy1wYXIxIiwic3ViIjoiam9lIiwiY25mIjp7Ing1dCNTMjU2IjoiTFk1VHNWU0QxMmt2RGczUThGaUFQa3VOTllWdHVqUHllWTZ4aGE1NVhQayJ9LCJleHAiOjE2MjM3NzY4ODh9.mKYbcuMCoVAT6akhaPHEFgV8uomrvRKbTARqCRc4Y3fwqnn-sSMryk7eIuQVxKejieP8f_DrjdhUxKXJeCWWtg","refresh_token":"pPgVYVj0iA19zKeAGiKlTYsF7n3VyqlfMX3zNm1pO8","id_token":"eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A","token_type":"Bearer","expires_in":3599}
2021-06-15 16:08:08
CallTokenEndpoint
Token endpoint response
token_endpoint_response
{"access_token":"eyJhbGciOiJFUzI1NiIsImtpZCI6IlNONlVsVUpXdl9LS0ZfbUhJbUN0VE9tVUQyTSIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktbXRscy1wYXIxIiwic3ViIjoiam9lIiwiY25mIjp7Ing1dCNTMjU2IjoiTFk1VHNWU0QxMmt2RGczUThGaUFQa3VOTllWdHVqUHllWTZ4aGE1NVhQayJ9LCJleHAiOjE2MjM3NzY4ODh9.mKYbcuMCoVAT6akhaPHEFgV8uomrvRKbTARqCRc4Y3fwqnn-sSMryk7eIuQVxKejieP8f_DrjdhUxKXJeCWWtg","refresh_token":"pPgVYVj0iA19zKeAGiKlTYsF7n3VyqlfMX3zNm1pO8","id_token":"eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A","token_type":"Bearer","expires_in":3599}
2021-06-15 16:08:08 SUCCESS
CallTokenEndpoint
Parsed token endpoint response
access_token
eyJhbGciOiJFUzI1NiIsImtpZCI6IlNONlVsVUpXdl9LS0ZfbUhJbUN0VE9tVUQyTSIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktbXRscy1wYXIxIiwic3ViIjoiam9lIiwiY25mIjp7Ing1dCNTMjU2IjoiTFk1VHNWU0QxMmt2RGczUThGaUFQa3VOTllWdHVqUHllWTZ4aGE1NVhQayJ9LCJleHAiOjE2MjM3NzY4ODh9.mKYbcuMCoVAT6akhaPHEFgV8uomrvRKbTARqCRc4Y3fwqnn-sSMryk7eIuQVxKejieP8f_DrjdhUxKXJeCWWtg
refresh_token
pPgVYVj0iA19zKeAGiKlTYsF7n3VyqlfMX3zNm1pO8
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A
token_type
Bearer
expires_in
3599
Verify token endpoint response
2021-06-15 16:08:08 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2021-06-15 16:08:08 SUCCESS
CheckForAccessTokenValue
Found an access token
access_token
eyJhbGciOiJFUzI1NiIsImtpZCI6IlNONlVsVUpXdl9LS0ZfbUhJbUN0VE9tVUQyTSIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktbXRscy1wYXIxIiwic3ViIjoiam9lIiwiY25mIjp7Ing1dCNTMjU2IjoiTFk1VHNWU0QxMmt2RGczUThGaUFQa3VOTllWdHVqUHllWTZ4aGE1NVhQayJ9LCJleHAiOjE2MjM3NzY4ODh9.mKYbcuMCoVAT6akhaPHEFgV8uomrvRKbTARqCRc4Y3fwqnn-sSMryk7eIuQVxKejieP8f_DrjdhUxKXJeCWWtg
2021-06-15 16:08:08 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
eyJhbGciOiJFUzI1NiIsImtpZCI6IlNONlVsVUpXdl9LS0ZfbUhJbUN0VE9tVUQyTSIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktbXRscy1wYXIxIiwic3ViIjoiam9lIiwiY25mIjp7Ing1dCNTMjU2IjoiTFk1VHNWU0QxMmt2RGczUThGaUFQa3VOTllWdHVqUHllWTZ4aGE1NVhQayJ9LCJleHAiOjE2MjM3NzY4ODh9.mKYbcuMCoVAT6akhaPHEFgV8uomrvRKbTARqCRc4Y3fwqnn-sSMryk7eIuQVxKejieP8f_DrjdhUxKXJeCWWtg
type
Bearer
2021-06-15 16:08:08 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
3599
2021-06-15 16:08:08 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
3599
2021-06-15 16:08:08 SUCCESS
CheckForRefreshTokenValue
Found a refresh token
refresh_token
pPgVYVj0iA19zKeAGiKlTYsF7n3VyqlfMX3zNm1pO8
2021-06-15 16:08:08 SUCCESS
EnsureMinimumRefreshTokenLength
Refresh token is of sufficient length
actual
336
required
128
2021-06-15 16:08:08 SUCCESS
EnsureMinimumRefreshTokenEntropy
Calculated shannon entropy seems sufficient
actual
203.7224442545445
expected
96.0
2021-06-15 16:08:08 SUCCESS
EnsureMinimumAccessTokenLength
Access token is of sufficient length
actual
3024
required
128
2021-06-15 16:08:08 SUCCESS
EnsureMinimumAccessTokenEntropy
Calculated shannon entropy seems sufficient
actual
2188.894250894166
expected
96.0
2021-06-15 16:08:08 SUCCESS
ExtractIdTokenFromTokenResponse
Found and parsed the id_token from token_endpoint_response
value
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A
header
{
  "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
  "alg": "PS256"
}
claims
{
  "sub": "9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4",
  "aud": "c__fapi-mtls-par1",
  "acr": "urn:mace:incommon:iap:silver",
  "c_hash": "dNEPoIXwKfvk9C986yjVyA",
  "auth_time": 1623773146,
  "iss": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "exp": 1623773587,
  "iat": 1623773287,
  "nonce": "w8TsTlxOgE",
  "jti": "ZiPNaQqacQNIzUu8R5ETcS"
}
2021-06-15 16:08:08 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-06-15 16:08:08 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
ZH2y4AetHTynvUgDK_YxYbB5yLQ
2021-06-15 16:08:08 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
w8TsTlxOgE
2021-06-15 16:08:08 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
acr value in id_token is (one of) the requested values
actual
urn:mace:incommon:iap:silver
requested
[
  "urn:mace:incommon:iap:silver"
]
2021-06-15 16:08:08 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A
2021-06-15 16:08:08 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1tdGxzLXBhcjEiLCJqdGkiOiJaaVBOYVFxYWNRTkl6VXU4UjVFVGNTIiwiaXNzIjoiaHR0cHM6Ly9wYXItd2hhdC1pcy1pdC1nb29kLWZvci5waW5nLWVuZy5jb206OTAzMiIsImlhdCI6MTYyMzc3MzI4NywiZXhwIjoxNjIzNzczNTg3LCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXV0aF90aW1lIjoxNjIzNzczMTQ2LCJub25jZSI6Inc4VHNUbHhPZ0UiLCJjX2hhc2giOiJkTkVQb0lYd0tmdms5Qzk4NnlqVnlBIn0.Kb_MzT5fZyQk5DqIxn7PCCcBTaP1VlXtHSLRZkVtXgKrbb1_zkfPwdXj8RpPrPJtXxY9H4316oiCQpuOz0No5BPeZR18_dwBk0DNCYMCogarYJXxQnsKsw9FVb7wvk7Potp1f8S012fThdA0cTSCJisme0g7Hl2nTty-HOa1huPNaqMRKT3zr0vtRZIMlghY7JOBtoFr6f1SknGv86bInCEzhPBCO72hthrQ_OxUyULNpMMqvHUiCF1q4LuKAptqlPxXHM9S9QuzMGZW3O2d_0FzGIjCOwckNwK1WqgrUNqotiFd7OlsY395lu_L2l6pg5CVvmbHL2Q23QVjgHTh6A
2021-06-15 16:08:08 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4
2021-06-15 16:08:08 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "PS256",
  "ES256"
]
alg
PS256
2021-06-15 16:08:08 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-06-15 16:08:08 INFO
FAPIValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-06-15 16:08:08 SUCCESS
ExtractCHash
Extracted c_hash from ID Token
c_hash
dNEPoIXwKfvk9C986yjVyA
alg
PS256
2021-06-15 16:08:08 INFO
ExtractSHash
Couldn't find s_hash in ID token
2021-06-15 16:08:08 INFO
ExtractAtHash
Couldn't find at_hash in ID token
2021-06-15 16:08:08 SUCCESS
ValidateCHash
c_hash validated successfully
expected_hash
dNEPoIXwKfvk9C986yjVyA
unhashed_value
gM5P5r6ZI1f31b3lUZJMjvzigPES5OQKC14EM06Y
id_token_hash
dNEPoIXwKfvk9C986yjVyA
2021-06-15 16:08:08 INFO
ValidateSHash
Skipped evaluation due to missing required object: s_hash
expected
s_hash
mapped
2021-06-15 16:08:08 INFO
ValidateAtHash
Skipped evaluation due to missing required object: at_hash
expected
at_hash
mapped
Verify at_hash in the authorization endpoint id_token
2021-06-15 16:08:08 INFO
ExtractAtHash
Couldn't find at_hash in ID token
2021-06-15 16:08:08 INFO
ValidateAtHash
Skipped evaluation due to missing required object: at_hash
expected
at_hash
mapped
Resource server endpoint tests
2021-06-15 16:08:08
CreateEmptyResourceEndpointRequestHeaders
Created empty headers
resource_endpoint_request_headers
{}
2021-06-15 16:08:08 SUCCESS
AddFAPIAuthDateToResourceEndpointRequest
Added x-fapi-auth-date to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Tue, 15 Jun 2021 16:08:08 GMT"
}
2021-06-15 16:08:08
AddIpV4FapiCustomerIpAddressToResourceEndpointRequest
Added x-fapi-customer-ip-address containing IPv4 address to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Tue, 15 Jun 2021 16:08:08 GMT",
  "x-fapi-customer-ip-address": "198.51.100.119"
}
2021-06-15 16:08:08
CreateRandomFAPIInteractionId
Created interaction ID
fapi_interaction_id
665f3293-dab3-4d83-8179-2cd39ca9291b
2021-06-15 16:08:08 SUCCESS
AddFAPIInteractionIdToResourceEndpointRequest
Added x-fapi-interaction-id to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Tue, 15 Jun 2021 16:08:08 GMT",
  "x-fapi-customer-ip-address": "198.51.100.119",
  "x-fapi-interaction-id": "665f3293-dab3-4d83-8179-2cd39ca9291b"
}
2021-06-15 16:08:08
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:3000/get
request_method
GET
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "x-fapi-auth-date": "Tue, 15 Jun 2021 16:08:08 GMT",
  "x-fapi-customer-ip-address": "198.51.100.119",
  "x-fapi-interaction-id": "665f3293-dab3-4d83-8179-2cd39ca9291b",
  "authorization": "Bearer eyJhbGciOiJFUzI1NiIsImtpZCI6IlNONlVsVUpXdl9LS0ZfbUhJbUN0VE9tVUQyTSIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktbXRscy1wYXIxIiwic3ViIjoiam9lIiwiY25mIjp7Ing1dCNTMjU2IjoiTFk1VHNWU0QxMmt2RGczUThGaUFQa3VOTllWdHVqUHllWTZ4aGE1NVhQayJ9LCJleHAiOjE2MjM3NzY4ODh9.mKYbcuMCoVAT6akhaPHEFgV8uomrvRKbTARqCRc4Y3fwqnn-sSMryk7eIuQVxKejieP8f_DrjdhUxKXJeCWWtg",
  "accept-charset": "utf-8",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2021-06-15 16:08:09 RESPONSE
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Tue, 15 Jun 2021 16:08:09 GMT",
  "content-type": "application/json",
  "content-length": "1038",
  "server": "gunicorn/19.9.0",
  "access-control-allow-origin": "*",
  "access-control-allow-credentials": "true",
  "x-fapi-interaction-id": "665f3293-dab3-4d83-8179-2cd39ca9291b"
}
response_body
{
  "args": {}, 
  "headers": {
    "Accept": "application/json;charset=UTF-8", 
    "Accept-Charset": "utf-8", 
    "Accept-Encoding": "gzip,deflate", 
    "Authorization": "Bearer eyJhbGciOiJFUzI1NiIsImtpZCI6IlNONlVsVUpXdl9LS0ZfbUhJbUN0VE9tVUQyTSIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktbXRscy1wYXIxIiwic3ViIjoiam9lIiwiY25mIjp7Ing1dCNTMjU2IjoiTFk1VHNWU0QxMmt2RGczUThGaUFQa3VOTllWdHVqUHllWTZ4aGE1NVhQayJ9LCJleHAiOjE2MjM3NzY4ODh9.mKYbcuMCoVAT6akhaPHEFgV8uomrvRKbTARqCRc4Y3fwqnn-sSMryk7eIuQVxKejieP8f_DrjdhUxKXJeCWWtg", 
    "Host": "par-what-is-it-good-for.ping-eng.com", 
    "User-Agent": "Apache-HttpClient/4.5.13 (Java/11.0.11)", 
    "X-Amzn-Trace-Id": "Root=1-60c8d069-5194e973199829212f4ff1c8", 
    "X-Fapi-Auth-Date": "Tue, 15 Jun 2021 16:08:08 GMT", 
    "X-Fapi-Customer-Ip-Address": "198.51.100.119", 
    "X-Fapi-Interaction-Id": "665f3293-dab3-4d83-8179-2cd39ca9291b"
  }, 
  "origin": "35.196.44.185, 52.32.184.72", 
  "url": "https://par-what-is-it-good-for.ping-eng.com/get"
}
2021-06-15 16:08:09 SUCCESS
CallProtectedResourceWithBearerTokenAndCustomHeaders
Got a response from the resource endpoint
headers
{
  "date": "Tue, 15 Jun 2021 16:08:09 GMT",
  "content-type": "application/json",
  "content-length": "1038",
  "server": "gunicorn/19.9.0",
  "access-control-allow-origin": "*",
  "access-control-allow-credentials": "true",
  "x-fapi-interaction-id": "665f3293-dab3-4d83-8179-2cd39ca9291b"
}
status_code
{
  "code": 200
}
body
{
  "args": {}, 
  "headers": {
    "Accept": "application/json;charset=UTF-8", 
    "Accept-Charset": "utf-8", 
    "Accept-Encoding": "gzip,deflate", 
    "Authorization": "Bearer eyJhbGciOiJFUzI1NiIsImtpZCI6IlNONlVsVUpXdl9LS0ZfbUhJbUN0VE9tVUQyTSIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktbXRscy1wYXIxIiwic3ViIjoiam9lIiwiY25mIjp7Ing1dCNTMjU2IjoiTFk1VHNWU0QxMmt2RGczUThGaUFQa3VOTllWdHVqUHllWTZ4aGE1NVhQayJ9LCJleHAiOjE2MjM3NzY4ODh9.mKYbcuMCoVAT6akhaPHEFgV8uomrvRKbTARqCRc4Y3fwqnn-sSMryk7eIuQVxKejieP8f_DrjdhUxKXJeCWWtg", 
    "Host": "par-what-is-it-good-for.ping-eng.com", 
    "User-Agent": "Apache-HttpClient/4.5.13 (Java/11.0.11)", 
    "X-Amzn-Trace-Id": "Root=1-60c8d069-5194e973199829212f4ff1c8", 
    "X-Fapi-Auth-Date": "Tue, 15 Jun 2021 16:08:08 GMT", 
    "X-Fapi-Customer-Ip-Address": "198.51.100.119", 
    "X-Fapi-Interaction-Id": "665f3293-dab3-4d83-8179-2cd39ca9291b"
  }, 
  "origin": "35.196.44.185, 52.32.184.72", 
  "url": "https://par-what-is-it-good-for.ping-eng.com/get"
}
2021-06-15 16:08:09 SUCCESS
CheckForDateHeaderInResourceResponse
Date header present and validated
date
Tue, 15 Jun 2021 16:08:09 GMT
skew
603
2021-06-15 16:08:09 SUCCESS
CheckForFAPIInteractionIdInResourceResponse
Found x-fapi-interaction-id
interaction_id
665f3293-dab3-4d83-8179-2cd39ca9291b
2021-06-15 16:08:09 SUCCESS
EnsureMatchingFAPIInteractionId
Interaction ID matched
fapi_interaction_id
665f3293-dab3-4d83-8179-2cd39ca9291b
2021-06-15 16:08:09 SUCCESS
EnsureResourceResponseReturnedJsonContentType
Response content type is JSON
content_type
application/json
2021-06-15 16:08:09 FINISHED
fapi-rw-id2-state-only-outside-request-object-not-used
Test has run to completion
testmodule_result
PASSED
2021-06-15 16:08:11
TEST-RUNNER
Alias has now been claimed by another test
alias
pi
new_test_id
17zXBvjs7I0dpbd
Test Results