Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-06-15 17:56:03 INFO
TEST-RUNNER
Test instance hGYVUi26jQy62cB created
baseUrl
https://www.certification.openid.net/test/a/pi
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "by_value",
  "fapi_profile": "plain_fapi",
  "fapi_response_mode": "plain_response"
}
alias
pi
description
fapi-jwt-jar
planId
EVkOawIN7ZQke
config
{
  "alias": "pi",
  "description": "fapi-jwt-jar",
  "server": {
    "discoveryUrl": "https://par-what-is-it-good-for.ping-eng.com:9032/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "c__fapi-jwt-jar1",
    "scope": "openid other",
    "hint_type": "login_hint",
    "hint_value": "cheba-hut@ping-eng.com",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "kid": "fmzJBg",
          "use": "sig",
          "alg": "PS256",
          "n": "mMnnzXsk2aFQA5wl_FmzRdL7-XGUqcSV6gd0GRhxlyoR4HECV74eedAZmD3a54bIKPUlkk2qklpOAtcm7Xp_oPlEkmkvIAd-KtdOfFHN_iW5FeIiu4gPJXJyelBv49Kf-FfGfh2_Jy4jraUX_3_9YwXCuVgkUggH1hCv8ia2MECPHRu-XmrvgHA1J8YkAc4NLpXG60_JwIQqQwpbowfh22lbffx2qPMqAh5Untcfexpc9_xg3kqxwjVjaqP0nc9EOzu41tBJw7xQEWUl47_vVfDKLqMZzq6Q-H1TJZuq5ecpyFsFmIpwS-KAI_ccbvY0iNMc7xl88XM2lE-_fiOWLw",
          "e": "AQAB",
          "d": "MGOhun5JyXNBeCM4FJgEIxUTIIlMYAgWwqvhpSEMuKdmSgMAjvFzjXjO4lyUu8cAFZiucYuPfhKDqnqhpYyqZz0K7qPJfQdiegb-oHj4GImx-LBJ98K7qUx53SskhK7sYybJgp_BLpN6UUB8PTs38OieJz03I5PPh4h5cOO5x8XtP46wMRCQmrQsPKVdGfGTPhrbnHVt81p-52PxdqyMJPD10T3A7bQy0l5HQPgcDewp_JRWobbEFtMXckmdRimgxMmbIJxoIb-RvyWch4u89ep5jx9qbkDDfBOXPpiICRm-RarkBNDJ8ptgo2AvyRG7BHDQyxiqZdBGUw00Uuk-AQ",
          "p": "yjTNjtpFbhdrWZDWh8588XUoViHHKU7PDDALOjAziA9oHeEyJNNwi8Rw5EA9zePOxFSJ1U9H1HTZ-zhUcBIL0h8YIw7zcOJuz4XgH43WgTA_PBaUtr4LOnASPQIDROYD-Bwj57yLwUeESKN9_iWh89fIna1uCp0Yi8yGBDvZIUE",
          "q": "wW-Ipp0_ro-W5x-4-YBxp6SIZ92y7TMxwm-DomDYwZRj-b_fdSonySF-Wmy3cynEw7Lo9Y31OckyxrSkFWWK0nshEe4Nx0pKpZyMVJEcVn7MvsSeU-YFvXwlL91xigsdK6k9qEwfp5_Og0vF5OTp1fPxBmLz82iyVX0Ac6wYa28",
          "dp": "W7Dx_XMwxKlN_oFVJqQVuBAeSGBsxWh9LtOiY7Jzy6Dg35u8d0KB6H8digMvg2tn2VNUZSvcMJUEO4zhjShBv_hlo5AmB-xFv0i_xs80k8RjCEZdDTjEMq2bN5rwDJAZAKsSBQVUgkKB08Z_XX2HIOGakRWRrrJp7QrDQqw424E",
          "dq": "mP_cSVUlsq_WfzdjOs3yl9QXJHiB9wZAPHex2bTanbr-nOO8HtNaJsd8Ro-pRsjp3pTbmKZRKgTPScZF5rqrZDKKBMGTWmeTxYyenqEslemzjsy8IsZVEfxo-YQhMzv5NbimkUCs5QwM72L2w0ahAl7x7MhGBuhv7hhyTAv6QLc",
          "qi": "eq8KkKza25CFTfe9oMs1L0JxNy7TqpBFuHo4_DSXg6Z2lObefpixYTBtCbdPOCUNA7bjhFN94btd-r08NWGmULj_3-5f3WX1xlcHLrr2HLSl0IxyEcO7cHomtGCxErxXUsR9h--Bb-3AW237DIEbmBCVhX-DOTQeX5mtYF1iJE8"
        }
      ]
    }
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\nboAwUi7aTGa4/t9IdxJl\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\nZl3SyKWQOxikzuDJ599TjUw1NmvfR0RehncxCZUT/uP0xaPgkAJ3pA4\u003d\n-----END RSA PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----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\nRX5gP7kuu2KGMg\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "resource": {
    "resourceUrl": "https://par-what-is-it-good-for.ping-eng.com:3000/get"
  },
  "client2": {
    "client_id": "c__fapi-jwt-jar2",
    "scope": "openid",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "kid": "55zSYQ",
          "use": "sig",
          "alg": "PS256",
          "n": "1Ju18TJ6X9RzfOCYfRZcXLAKhkyV5H3OkuLGBm0D5XL7r1XigsfE_L3a4zcBPuSPO1xhFF1pTGsqGGqTHF82zuqZPLKEO6aGGyoDlLQTKmjh17uYvF1JNUu5goW1mjYe2WuZX8SWIhVl7HzMqCCiK3ji2JiqLuYGtP73iEVWf869MPBH3OGvQphnbdzziQCaqWbv0ipPkKIdl8v1A-3MAmZftYe33mMhe9D1qP7fe3QtfVQ4sHi5z_2wXf1W2JakOYb6rbG0EblHCBmF_zuRX5rKWzG3uYHiyObYyAHqtWETKMN53DdqjjC2l9x45OT1lRhNgLpg2hlBJnnur5UR4w",
          "e": "AQAB",
          "d": "Qp0_FoGQYjI4tSnR3W-CJPBre8THOj5I2TEAhsblb6DlRvyL6hoZmG8MBCEZ3NDUJ-8745uZAH6bQ-cwjLUwgQh0VtZAJEh6wEwbrx3021bdXDDFHE_GPlKpn0Gxss2-QLU76wu3VpqJwt0fapY--Yv415CN0f_0ngU9HY9MGOLli2rMBy_u3pGkotI_RLPmvpP61bA0xwaH17BkfDeDnjbFqaICddxDUTRMpogcTba7BbFWbK-W1M-OkC-wvcDPvZ7S_0WZE7E8gi4Fsgu86o6WHdK1yTTf1mwKhJBeXuWAp05Nzt7OQjyiZExR-wXnnkUGVyiXJjs6XPaA28njoQ",
          "p": "8k6JpkJMbBYBy0qBETA95c-MNRKuE6fRIGgU8ZUU6ICk_9d2uHLXV9bvCXjcCwFAQny0HHgq4gK4BQjIuoolvpfJou8CNf63ioqXURVXvXDl3E_m_nmg3VSySaMgZ12zWh-_Tku3GDSgPAiZjWzaZCMacrqO3XvwHvKRj3-B8Rk",
          "q": "4J-F4XxQN_9ThZEbxu6gNE8WFJC4eCkBea4tssNZc6e5sj7D-YMmVycRrGu4LP8DwsDW0ITtR1Ppi4UZ3pauXcJ4pCRo7Jd6g-v18_vmSMuuKg5GENg4FCYjPjmQtuQI_N8KPYCiqsD0ob6gq0vb9UFDFuNn__Q8OdAo7ch9Dls",
          "dp": "3883SYB3gmaZZaL9sFi0865PPT5x1-nsOlio77PaSh95SG9GU3yP96ypwkAGT4vqRP9Whe1g_r2wJ8ZDUjoEPxWIw5ysmB8cfTUiK1zhXDQJvQN4w5iow4dV3rp0VcWwwhAM7k71YcBKOOlgm8btugzKgypah63Qz2USmk8WQRE",
          "dq": "HbyAmM1AQWmHwRLovnkwtDwUDDzsbtve2iD448WAvhLiPnqYrxtxo_AEIvNPuoU4Fjw5M_mk_-BX9qR0PEduZfMszW4Uhd231mcSdG5Qmip8sAybsfct1V0HJWGxisS9e9x7GpFA96H7wL3fv02XnOw62XjZd8T5hB3OjUwRYik",
          "qi": "cBQVKSQjUdrCtMJdKGiCVeu_aUmFUQS0ytosgNO1LT0qyZdVNC2AtxgH9OIxKFNsSpZPeUBIWMvvmZk1NYBhUYaksK5Rqux5oM8yNneO9wvqnGipQjUg5I3L1yXTiNMoIVGhRBOwjDXC0qWfhXuzQ6cJJNRrCZEHlyC43TwyBF0"
        }
      ]
    }
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----\nMIICpzCCAk2gAwIBAgIBEzAKBggqhkjOPQQDAjA6MRswGQYDVQQKDBJMZXQncyBB\ndXRoZW50aWNhdGUxGzAZBgNVBAMMEkxBIEludGVybWVkaWF0ZSBDQTAeFw0yMTA2\nMTQxOTE1NTJaFw0yMjA2MjQxOTE1NTJaMEExCzAJBgNVBAYTAkNBMQswCQYDVQQI\nDAJCQzELMAkGA1UECgwCY28xGDAWBgNVBAMMD25vdCBhIGhvc3QgbmFtZTCCASIw\nDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrKvHoY40kTCBO1KBJafdtuqri1\n3luLWkRyCjaIogINrplT9roSv90FOg3JfaUTxNq3lMLQ6oIcVM2vYGpleRlZFw+b\nGoy3hJBWgAhorGBljiQ9RHPSIJ1hb36usLMeRfv541wOX5ESKkB7EltFDAns7M6N\nxJxFQFT+Xh4DZBWW6EyAy9EfiEq+A7ARiuWeBwun2Qv4P+hIS0Ee6hZfskYZYt0W\nOZSnLJSpTS5lIzG7XSkyyswZtJalkraHaxAWLy+EC3x3IPcLW2oQ/UFQK41R/CET\nDb8UILReWIqbE37QtbziqMlO97zdzb4RvARm6azjGUjiLHrkFZ88e6MGWxECAwEA\nAaNyMHAwCQYDVR0TBAIwADAfBgNVHSMEGDAWgBRm3WjLa38lbEYCuiCPct0ZaSED\n2DAOBgNVHQ8BAf8EBAMCBsAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwHQYDVR0RAQH/\nBBMwEYEPYmRjQGV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0gAMEUCIQCihD6Rnr21\ntoww0MlLDKmo9Ty33uuBNR+pYW607Bax5gIgFUgyn2kTSLiCdMnFAsXRfVS3vWzX\n3ZIqsFoKqq4DsUU\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----\nMIIEowIBAAKCAQEAysq8ehjjSRMIE7UoElp9226quLXeW4taRHIKNoiiAg2umVP2\nuhK/3QU6Dcl9pRPE2reUwtDqghxUza9gamV5GVkXD5sajLeEkFaACGisYGWOJD1E\nc9IgnWFvfq6wsx5F+/njXA5fkRIqQHsSW0UMCezszo3EnEVAVP5eHgNkFZboTIDL\n0R+ISr4DsBGK5Z4HC6fZC/g/6EhLQR7qFl+yRhli3RY5lKcslKlNLmUjMbtdKTLK\nzBm0lqWStodrEBYvL4QLfHcg9wtbahD9QVArjVH8IRMNvxQgtF5YipsTftC1vOKo\nyU73vN3NvhG8BGbprOMZSOIseuQVnzx7owZbEQIDAQABAoIBAHv/lVmvKCMBkRnD\n1pnKXVS0iY1iH3GoduyNMrN/vlg1F4LHtYC3gDvcO1A82Sf8O41lXX/2EL64Jh6S\n0wibvX2DXTd8prJOcK91RNpfbq+OyWhdUiLj5G93KZ6zoHYV18MoXB5o54SkL9O3\nrVTDloXnKjFuvD61lY2i79e4SRVtVxi3BIjI/LydSL2hf5e9KP4b6TgwrqfIR9q6\nBxGZMtmNPca4BYpeHK5FUMcb+ZW4AhDvibO3CLo5cZYU08hhntTOmcqnDm4Q0fY2\ntk1hPmbm2MDgNN4bmBHLghXAaAO4aj/FpCGroPFhaU47lXtvY0kS5IgR91HNnYcH\nH55JNAECgYEA63Mk5UZbqZnGZISqy41/MOAXx/mdYBljcnMwlZCLqA7xUOzhHjOk\nzJdjV2C97mrOM4eDsr2nPXFAM+6ymbGS01+r0Nv7UegNG8oum+EXFytOnEJ8BvLk\nySBndtWK+KYm7BHYvdM5D0H41A+CJELllJgG3uJJJ3B6n1mUU9WlGNECgYEA3H3j\n1iNXRwwg9v87GC90L8IwDD3QxAQTyMuRa2BSFDpCu6As9CoxcaaSG+AIs1npdxPq\nmosHIc8YQ6B1E58QklIlFvcuR4XSM2QCKlvgGqyoy+EC6hyn6h4fEKqTlbZmWkX+\nu4G18ERzYt/kc3HF7P5IYP4z4iSD4CyFXeitrkECgYBT2+jyOEMBfyGoP5BNe5In\nqEkQEpm41pIS+2/8dUUokFnmxtfPV/mEXQ8m2fAL8MKMm+GOUfo06hdB5+x4zURM\nQLEDbLZwj8PLeBFtt5fvyp7vDMb7+pr9/6qaKqiasyL9xcV6praV9ptXfEaP/7uh\nVxxrWhFQGMGz68XmrhtlYQKBgBQMYlYLOplcMfcjd/UYA4GAL6w9Rqk8Eax1ThCs\nXmo2bfDvfIbq+znxQmHEeiYMq9zG89L/hzN8yCEGCv8wvGoBjBvNd+jK8zT3B/dg\nCT2Dq4l2OTSeTGpOONbkG61GO4JD0Qitn6RsJO29m+EfXDbTXDNtibwrQ85zXeEP\nEhPBAoGBAIbv6cbNbxKwS+ZXvsQBdttkKFkpCYbJ6paoSDkFYEKr1t+0UayBzBCz\nr26NF76Jg8bH5kbp/aQ+eq1wQC9sy0HHqOyEfkpu8QdJ1MXek2CUhUcYazXaBE4x\nkl47DFPrliIdQzAFsQaB+sQ+OvZg6LVScwU7jW33aUPzX6jjDCjh\n-----END RSA PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----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\nRX5gP7kuu2KGMg\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "automated_ciba_approval_url": "https://cheba-hut.ping-eng.com:9031/ext/fake/{action}/oob?v\u003d{auth_req_id}"
}
testName
fapi-rw-id2-ensure-client-id-in-token-endpoint
2021-06-15 17:56:03 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
2021-06-15 17:56:03
GetDynamicServerConfiguration
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9032/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-06-15 17:56:03 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Tue, 15 Jun 2021 17:56:03 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003duoUjJqjVfZwYqeB6PdXr5Q;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "content-length": "3666"
}
response_body
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/device_authz.oauth2",
  "scopes_supported": [ "other", "openid" ],
  "claims_supported": [ "acr", "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "token_endpoint_auth_methods_supported": ["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "tls_client_certificate_bound_access_tokens": true,
  "code_challenge_methods_supported": [ "plain", "S256" ]
}
2021-06-15 17:56:03
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/device_authz.oauth2",
  "scopes_supported": [ "other", "openid" ],
  "claims_supported": [ "acr", "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "token_endpoint_auth_methods_supported": ["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "tls_client_certificate_bound_access_tokens": true,
  "code_challenge_methods_supported": [ "plain", "S256" ]
}
2021-06-15 17:56:03 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://par-what-is-it-good-for.ping-eng.com:9032
authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2
token_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
revocation_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/revoke_token.oauth2
userinfo_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/idp/userinfo.openid
introspection_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/introspect.oauth2
jwks_uri
https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS
registration_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/clients.oauth2
ping_revoked_sris_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/revokedSris
ping_session_management_sris_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/sessions
ping_end_session_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/idp/startSLO.ping
device_authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/device_authz.oauth2
scopes_supported
[
  "other",
  "openid"
]
claims_supported
[
  "acr",
  "sub"
]
response_types_supported
[
  "code",
  "token",
  "id_token",
  "code token",
  "code id_token",
  "token id_token",
  "code token id_token"
]
response_modes_supported
[
  "fragment",
  "query",
  "form_post"
]
grant_types_supported
[
  "implicit",
  "authorization_code",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
  "urn:ietf:params:oauth:grant-type:jwt-bearer",
  "urn:ietf:params:oauth:grant-type:saml2-bearer",
  "urn:ietf:params:oauth:grant-type:device_code",
  "urn:ietf:params:oauth:grant-type:token-exchange",
  "urn:openid:params:grant-type:ciba"
]
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "none",
  "HS256",
  "HS384",
  "HS512",
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
token_endpoint_auth_methods_supported
[
  "client_secret_basic",
  "client_secret_post",
  "private_key_jwt",
  "tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
claim_types_supported
[
  "normal"
]
claims_parameter_supported
false
request_parameter_supported
true
request_uri_parameter_supported
false
request_object_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
id_token_encryption_alg_values_supported
[
  "dir",
  "A128KW",
  "A192KW",
  "A256KW",
  "A128GCMKW",
  "A192GCMKW",
  "A256GCMKW",
  "ECDH-ES",
  "ECDH-ES+A128KW",
  "ECDH-ES+A192KW",
  "ECDH-ES+A256KW",
  "RSA-OAEP"
]
id_token_encryption_enc_values_supported
[
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256CBC-HS512",
  "A128GCM",
  "A192GCM",
  "A256GCM"
]
pushed_authorization_request_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2
require_pushed_authorization_requests
false
backchannel_authentication_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/bc-auth.ciba
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
backchannel_user_code_parameter_supported
false
tls_client_certificate_bound_access_tokens
true
code_challenge_methods_supported
[
  "plain",
  "S256"
]
2021-06-15 17:56:03 INFO
AddMTLSEndpointAliasesToEnvironment
The mtls_endpoint_aliases is not present in the server configuration
server
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/device_authz.oauth2",
  "scopes_supported": [
    "other",
    "openid"
  ],
  "claims_supported": [
    "acr",
    "sub"
  ],
  "response_types_supported": [
    "code",
    "token",
    "id_token",
    "code token",
    "code id_token",
    "token id_token",
    "code token id_token"
  ],
  "response_modes_supported": [
    "fragment",
    "query",
    "form_post"
  ],
  "grant_types_supported": [
    "implicit",
    "authorization_code",
    "refresh_token",
    "password",
    "client_credentials",
    "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
    "urn:ietf:params:oauth:grant-type:jwt-bearer",
    "urn:ietf:params:oauth:grant-type:saml2-bearer",
    "urn:ietf:params:oauth:grant-type:device_code",
    "urn:ietf:params:oauth:grant-type:token-exchange",
    "urn:openid:params:grant-type:ciba"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "HS256",
    "HS384",
    "HS512",
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "private_key_jwt",
    "tls_client_auth"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "claim_types_supported": [
    "normal"
  ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "id_token_encryption_alg_values_supported": [
    "dir",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "RSA-OAEP"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [
    "poll",
    "ping"
  ],
  "backchannel_authentication_request_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "ES256",
    "ES384",
    "ES512",
    "PS256",
    "PS384",
    "PS512"
  ],
  "backchannel_user_code_parameter_supported": false,
  "tls_client_certificate_bound_access_tokens": true,
  "code_challenge_methods_supported": [
    "plain",
    "S256"
  ]
}
2021-06-15 17:56:03 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2021-06-15 17:56:03 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9032
}
authorization_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9031
}
token_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9032
}
userinfo_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9032
}
2021-06-15 17:56:03
FetchServerKeys
Fetching server key
jwks_uri
https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS
2021-06-15 17:56:04
FetchServerKeys
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9032/pf/JWKS
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-06-15 17:56:04 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Tue, 15 Jun 2021 17:56:04 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003d54xQQsjJ20lmhohakFMaUl;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"keys":[{"kty":"EC","kid":"5QadRhn8CbPcH87TPn44jtdjEb0","use":"sig","x":"NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY","y":"gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI","crv":"P-256"},{"kty":"RSA","kid":"E7i-dwTdrPHhrxA87ERbRd3SMTw","use":"sig","n":"gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw","e":"AQAB"},{"kty":"EC","kid":"NJ-xeJ1prPqxexh2SKij5J2P4uo","use":"sig","x":"H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ","y":"r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-","crv":"P-384"},{"kty":"EC","kid":"_jjw9ffzGB6Z4kAQAO_NV0B7sEU","use":"sig","x":"AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E","y":"AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12","crv":"P-521"},{"kty":"EC","kid":"SN6UlUJWv_KKF_mHImCtTOmUD2M","use":"sig","x":"gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ","y":"y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60","crv":"P-256"},{"kty":"RSA","kid":"ZH2y4AetHTynvUgDK_YxYbB5yLQ","use":"sig","n":"mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ","e":"AQAB"},{"kty":"EC","kid":"dsh6NHxZgjoeBgIu0XsECIIbtL8","use":"sig","x":"37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV","y":"jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F","crv":"P-384"},{"kty":"EC","kid":"qrrYthgG0KN3BK0QKR5GVxPIKhA","use":"sig","x":"AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS","y":"AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj","crv":"P-521"},{"kty":"EC","kid":"5MwmNtztM_lf-V-GNg1yUkl07HA","use":"enc","x":"_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0","y":"YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g","crv":"P-256"},{"kty":"RSA","kid":"KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM","use":"enc","n":"r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw","e":"AQAB"},{"kty":"EC","kid":"tTz8_Iu7CET43WmjZANNqOkoSpg","use":"enc","x":"CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ","y":"pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL","crv":"P-384"},{"kty":"EC","kid":"yJTeSKJRk14clH6IWD7NKszzrbQ","use":"enc","x":"AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI","y":"AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p","crv":"P-521"}]}
2021-06-15 17:56:04
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"EC","kid":"5QadRhn8CbPcH87TPn44jtdjEb0","use":"sig","x":"NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY","y":"gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI","crv":"P-256"},{"kty":"RSA","kid":"E7i-dwTdrPHhrxA87ERbRd3SMTw","use":"sig","n":"gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw","e":"AQAB"},{"kty":"EC","kid":"NJ-xeJ1prPqxexh2SKij5J2P4uo","use":"sig","x":"H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ","y":"r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-","crv":"P-384"},{"kty":"EC","kid":"_jjw9ffzGB6Z4kAQAO_NV0B7sEU","use":"sig","x":"AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E","y":"AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12","crv":"P-521"},{"kty":"EC","kid":"SN6UlUJWv_KKF_mHImCtTOmUD2M","use":"sig","x":"gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ","y":"y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60","crv":"P-256"},{"kty":"RSA","kid":"ZH2y4AetHTynvUgDK_YxYbB5yLQ","use":"sig","n":"mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ","e":"AQAB"},{"kty":"EC","kid":"dsh6NHxZgjoeBgIu0XsECIIbtL8","use":"sig","x":"37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV","y":"jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F","crv":"P-384"},{"kty":"EC","kid":"qrrYthgG0KN3BK0QKR5GVxPIKhA","use":"sig","x":"AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS","y":"AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj","crv":"P-521"},{"kty":"EC","kid":"5MwmNtztM_lf-V-GNg1yUkl07HA","use":"enc","x":"_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0","y":"YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g","crv":"P-256"},{"kty":"RSA","kid":"KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM","use":"enc","n":"r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw","e":"AQAB"},{"kty":"EC","kid":"tTz8_Iu7CET43WmjZANNqOkoSpg","use":"enc","x":"CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ","y":"pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL","crv":"P-384"},{"kty":"EC","kid":"yJTeSKJRk14clH6IWD7NKszzrbQ","use":"enc","x":"AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI","y":"AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p","crv":"P-521"}]}
2021-06-15 17:56:04 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "kid": "5QadRhn8CbPcH87TPn44jtdjEb0",
      "use": "sig",
      "x": "NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY",
      "y": "gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "E7i-dwTdrPHhrxA87ERbRd3SMTw",
      "use": "sig",
      "n": "gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "NJ-xeJ1prPqxexh2SKij5J2P4uo",
      "use": "sig",
      "x": "H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ",
      "y": "r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "_jjw9ffzGB6Z4kAQAO_NV0B7sEU",
      "use": "sig",
      "x": "AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E",
      "y": "AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "SN6UlUJWv_KKF_mHImCtTOmUD2M",
      "use": "sig",
      "x": "gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ",
      "y": "y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
      "use": "sig",
      "n": "mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "dsh6NHxZgjoeBgIu0XsECIIbtL8",
      "use": "sig",
      "x": "37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV",
      "y": "jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "qrrYthgG0KN3BK0QKR5GVxPIKhA",
      "use": "sig",
      "x": "AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS",
      "y": "AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "5MwmNtztM_lf-V-GNg1yUkl07HA",
      "use": "enc",
      "x": "_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0",
      "y": "YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM",
      "use": "enc",
      "n": "r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "tTz8_Iu7CET43WmjZANNqOkoSpg",
      "use": "enc",
      "x": "CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ",
      "y": "pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "yJTeSKJRk14clH6IWD7NKszzrbQ",
      "use": "enc",
      "x": "AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI",
      "y": "AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p",
      "crv": "P-521"
    }
  ]
}
2021-06-15 17:56:04 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "kid": "5QadRhn8CbPcH87TPn44jtdjEb0",
      "use": "sig",
      "x": "NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY",
      "y": "gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "E7i-dwTdrPHhrxA87ERbRd3SMTw",
      "use": "sig",
      "n": "gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "NJ-xeJ1prPqxexh2SKij5J2P4uo",
      "use": "sig",
      "x": "H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ",
      "y": "r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "_jjw9ffzGB6Z4kAQAO_NV0B7sEU",
      "use": "sig",
      "x": "AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E",
      "y": "AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "SN6UlUJWv_KKF_mHImCtTOmUD2M",
      "use": "sig",
      "x": "gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ",
      "y": "y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
      "use": "sig",
      "n": "mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "dsh6NHxZgjoeBgIu0XsECIIbtL8",
      "use": "sig",
      "x": "37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV",
      "y": "jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "qrrYthgG0KN3BK0QKR5GVxPIKhA",
      "use": "sig",
      "x": "AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS",
      "y": "AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "5MwmNtztM_lf-V-GNg1yUkl07HA",
      "use": "enc",
      "x": "_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0",
      "y": "YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM",
      "use": "enc",
      "n": "r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "tTz8_Iu7CET43WmjZANNqOkoSpg",
      "use": "enc",
      "x": "CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ",
      "y": "pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "yJTeSKJRk14clH6IWD7NKszzrbQ",
      "use": "enc",
      "x": "AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI",
      "y": "AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p",
      "crv": "P-521"
    }
  ]
}
2021-06-15 17:56:04 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-06-15 17:56:04 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2021-06-15 17:56:04 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-06-15 17:56:04 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "kid": "5QadRhn8CbPcH87TPn44jtdjEb0",
      "use": "sig",
      "x": "NqD3pkyW21AvgCu7ZqBJh4K8SOuWcIWEEKfN_pU52jY",
      "y": "gjZTZuUYqizpY-gjoVBfDRUiD6k_mv679L0KaDxlSPI",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "E7i-dwTdrPHhrxA87ERbRd3SMTw",
      "use": "sig",
      "n": "gyhVGIOSmrrL_jUQl1GZAmOMs_OJiY69_vLlMYPia_yafsBNYvpX9CF2iboE3NRVC-1m8bZuiINxIgNEqEvqUQDOLmw6ymNP7apGZV19OQndmfi746w7ONh1n48zFZEH4YvG4WOLLOqK4JuHHBu_TZaFve1DoRhEj4tZquJEM67Yl7GVlv89MnwUxOmi8L7Q9Er1ZaZoemwaiNwif1q_suyBSQbNgZ9GZIen9FTtR0p72KBrTuxULkhCoMw7OcKoTwd02iRxgaoxdbiS3g3XHQbPvBCzZ3U84frc7oK664JZ1KFWSGjvpaVwwtojGE3efpoi5-5QPPJOI9r7PvCALw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "NJ-xeJ1prPqxexh2SKij5J2P4uo",
      "use": "sig",
      "x": "H92ITt53QuWhi_qcEFk562XnIiX8BrRoMqMe74SoNTe7EuXNPUo2ttWqVjtrCOLQ",
      "y": "r-UM637j132U7n4V4d9XMnOdvoMtzFki-OcNPcDeB-_fijjyfI8dRniVX6WfOP5-",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "_jjw9ffzGB6Z4kAQAO_NV0B7sEU",
      "use": "sig",
      "x": "AbdbAgstypbQKRDhxw9nsfr9_ioGD0w8sWMwN3vD2LsXGW9RaQUh5RgBQ1g-V0I8ZhDPDhjaRneIS2xQ5-uLP70E",
      "y": "AR274LRg7ReUXW1SMQI3SU4wmKBdMoGUbTJq1gg4wAEQiwlNLbOBuEmiJGMcwYZgt1WiO2nmjwGNboSLmk6xab12",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "SN6UlUJWv_KKF_mHImCtTOmUD2M",
      "use": "sig",
      "x": "gYJHBD55iX9_exq0hGbhRXRVVqtFlgOsVwkn_A_h1AQ",
      "y": "y3wzQIoknL1wvd3XKpHaeDLp44yJ12wiIbQfBcKji60",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
      "use": "sig",
      "n": "mutK9ALOPwBn0Ma6EMzgNq45icxxZtsozOGgJhRv87q7_oaccs5E6LvyIAEYTe4tylKXkb5U36sXb3fB_ljVLUo8TzEvYk8p1AnzrDq17edRsBrK7rA55d1K8kvDXksT9aAAyHxsTvtnpEIPIMy-9zDBsu89nqzBvGBC4qfvonrUK7KAXmq7PsrQykuBD1dNg9DNZL3gWLVaZMEbnioe_f9miaXcUHbR37TEjaOjezBSakjRXqRDIB9bE5JWQvpNfyJDnN_P8EPZK8fq6yn_5kGzMPf-r86bjbz4oR-_HO2o4h5lrov0Hwjic20oeFV7jIx2f2qMuBdPz-x0J3lcjQ",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "dsh6NHxZgjoeBgIu0XsECIIbtL8",
      "use": "sig",
      "x": "37_BpW5YpwgG4z7GQWIaW8jViBJ0fRGnDsKpSkyoaiTEjymlR9sBI5tZ9oYFg4pV",
      "y": "jQbA_nqKFiBVfbxratx7YCQgqXr8Ew3GkYw_6vROZikjRPfAl70TLkzaHl2HZk-F",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "qrrYthgG0KN3BK0QKR5GVxPIKhA",
      "use": "sig",
      "x": "AJ2bpXuFGeOxaEBP4jU2Yb4etTEfY07rqI1PYQForVj_-lZ7eMDBqIsUJuPvYUulV-mUSDkzwuSRl8-qaQs_MLFS",
      "y": "AKZbW_cNCVuHC-lqWMckKOo7NG1Jtfoph8aUzvyjpAY6KDr1yVxDEPdnhgdeXq17atWu79GHG5LX_f9kqiOF7kKj",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "5MwmNtztM_lf-V-GNg1yUkl07HA",
      "use": "enc",
      "x": "_mUAKV1wWPtzvi0dIRLR9TUhNhC-wb14LgS8GZcTOk0",
      "y": "YjCcIQxF_JsLvbmIkak9wn6SR4E54Wqk4hawrmwDG4g",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "KiKQ8Y4fuTo7Q8TIXWyZPHaPDCM",
      "use": "enc",
      "n": "r10ldw2__6mJGjPMpAv_aNYT95bnrWMGiyg6G_3UMYPLbaGF-Nq7SostX8klpLNAWAanJMpdvUSB6X2d5IkQsAvaaLvmDW-jwADA_gSq9ACzPXs_IkL7WvulYhhCmTHtwQwjzbmqS5dDeQ9fYB07l3rEEUskf96-9R6uH1eWeMjle4MWVF-Ex0Sw1EVrOTFf1wjOePJJ2Xop8ZsHaqT52BliNd5gXdlUkdpcj0OfF9wvvAkUdgEXK336VCMeIRpT-NWItmYpGihaTxJaxYKg98REnMmEZ6wGLiJecJWU6Cwxvxd_asPggkxA4DLNtH-35KuQ6ZvTKqabKuka72WHnw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "tTz8_Iu7CET43WmjZANNqOkoSpg",
      "use": "enc",
      "x": "CDCpGMWM1jwborjr3hIFmAko4kgXVYo_CO06dKlxHhsycAIk3zdYf7r50m4nA1jQ",
      "y": "pWm_4nhohNpvwtzqMzAxq8PFNaor9wNSdhbQTAVFp3FUtAZ5lXuy6cqpUrCLA1YL",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "yJTeSKJRk14clH6IWD7NKszzrbQ",
      "use": "enc",
      "x": "AbXvCDr46z-ZHwpVoVgVcWHBUfvXsJ7ktit3z-egproYs6GOvKhyd19XlS3RMSs4FnQLdEEqh6zsOOMYxkY3eWTI",
      "y": "AZFW30tO1BFKv92Panabi-mkSY6mdCCbLcnJenpdX7r4lIGXVTvtXFf2wQDaxT-wlQy7SKHQ0xxg4Sc5Am8J0W5p",
      "crv": "P-521"
    }
  ]
}
2021-06-15 17:56:04 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
c__fapi-jwt-jar1
scope
openid other
hint_type
login_hint
hint_value
cheba-hut@ping-eng.com
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "fmzJBg",
      "use": "sig",
      "alg": "PS256",
      "n": "mMnnzXsk2aFQA5wl_FmzRdL7-XGUqcSV6gd0GRhxlyoR4HECV74eedAZmD3a54bIKPUlkk2qklpOAtcm7Xp_oPlEkmkvIAd-KtdOfFHN_iW5FeIiu4gPJXJyelBv49Kf-FfGfh2_Jy4jraUX_3_9YwXCuVgkUggH1hCv8ia2MECPHRu-XmrvgHA1J8YkAc4NLpXG60_JwIQqQwpbowfh22lbffx2qPMqAh5Untcfexpc9_xg3kqxwjVjaqP0nc9EOzu41tBJw7xQEWUl47_vVfDKLqMZzq6Q-H1TJZuq5ecpyFsFmIpwS-KAI_ccbvY0iNMc7xl88XM2lE-_fiOWLw",
      "e": "AQAB",
      "d": "MGOhun5JyXNBeCM4FJgEIxUTIIlMYAgWwqvhpSEMuKdmSgMAjvFzjXjO4lyUu8cAFZiucYuPfhKDqnqhpYyqZz0K7qPJfQdiegb-oHj4GImx-LBJ98K7qUx53SskhK7sYybJgp_BLpN6UUB8PTs38OieJz03I5PPh4h5cOO5x8XtP46wMRCQmrQsPKVdGfGTPhrbnHVt81p-52PxdqyMJPD10T3A7bQy0l5HQPgcDewp_JRWobbEFtMXckmdRimgxMmbIJxoIb-RvyWch4u89ep5jx9qbkDDfBOXPpiICRm-RarkBNDJ8ptgo2AvyRG7BHDQyxiqZdBGUw00Uuk-AQ",
      "p": "yjTNjtpFbhdrWZDWh8588XUoViHHKU7PDDALOjAziA9oHeEyJNNwi8Rw5EA9zePOxFSJ1U9H1HTZ-zhUcBIL0h8YIw7zcOJuz4XgH43WgTA_PBaUtr4LOnASPQIDROYD-Bwj57yLwUeESKN9_iWh89fIna1uCp0Yi8yGBDvZIUE",
      "q": "wW-Ipp0_ro-W5x-4-YBxp6SIZ92y7TMxwm-DomDYwZRj-b_fdSonySF-Wmy3cynEw7Lo9Y31OckyxrSkFWWK0nshEe4Nx0pKpZyMVJEcVn7MvsSeU-YFvXwlL91xigsdK6k9qEwfp5_Og0vF5OTp1fPxBmLz82iyVX0Ac6wYa28",
      "dp": "W7Dx_XMwxKlN_oFVJqQVuBAeSGBsxWh9LtOiY7Jzy6Dg35u8d0KB6H8digMvg2tn2VNUZSvcMJUEO4zhjShBv_hlo5AmB-xFv0i_xs80k8RjCEZdDTjEMq2bN5rwDJAZAKsSBQVUgkKB08Z_XX2HIOGakRWRrrJp7QrDQqw424E",
      "dq": "mP_cSVUlsq_WfzdjOs3yl9QXJHiB9wZAPHex2bTanbr-nOO8HtNaJsd8Ro-pRsjp3pTbmKZRKgTPScZF5rqrZDKKBMGTWmeTxYyenqEslemzjsy8IsZVEfxo-YQhMzv5NbimkUCs5QwM72L2w0ahAl7x7MhGBuhv7hhyTAv6QLc",
      "qi": "eq8KkKza25CFTfe9oMs1L0JxNy7TqpBFuHo4_DSXg6Z2lObefpixYTBtCbdPOCUNA7bjhFN94btd-r08NWGmULj_3-5f3WX1xlcHLrr2HLSl0IxyEcO7cHomtGCxErxXUsR9h--Bb-3AW237DIEbmBCVhX-DOTQeX5mtYF1iJE8"
    }
  ]
}
2021-06-15 17:56:04 SUCCESS
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
2021-06-15 17:56:04 SUCCESS
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
cert
MIICqzCCAlKgAwIBAgIBEjAKBggqhkjOPQQDAjA6MRswGQYDVQQKDBJMZXQncyBBdXRoZW50aWNhdGUxGzAZBgNVBAMMEkxBIEludGVybWVkaWF0ZSBDQTAeFw0yMTA2MTQxOTE1NDNaFw0yMjA2MjQxOTE1NDNaMEYxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDTzEPMA0GA1UEBwwGRC10b3duMRkwFwYDVQQDDBBjZXJ0eSBtY2NlcnRmYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H+LQGaKAcM3a3Psv0Pid0ElX9yRaTYnz6TMmxWhoov2z8Fbvqygy5LaJTdr5kyNgZzAuRq51e0iiPiSHSAkbrDRTpBDVLvjLHfkosPRMYkmeBWR8LjRqXbLHXc+h5D6uU3wwl3rgVsl70OHw/0/0QahTvnGCjpHuQ6yP787sMtsoiR/mGgFuviW+grawnmPJan8mG6bSnbZ7PaE0v4mv2z4+h3N720Wri7x9NuOIm82ffV0L7+EGruJ6wA8Xs1eQ9FHzNClmxZVdgtFYlChl7bpDAnzWFV4WpcZmbuVI5bX6pvHeCPCZJElDZGcy5ZIyRSvyzWanmmuit07RArvrQIDAQABo3IwcDAJBgNVHRMEAjAAMB8GA1UdIwQYMBaAFGbdaMtrfyVsRgK6II9y3RlpIQPYMA4GA1UdDwEB/wQEAwIGwDATBgNVHSUEDDAKBggrBgEFBQcDAjAdBgNVHREBAf8EEzARgQ9iZGNAZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDRwAwRAIgFRh2HtKY/xZCcmn3ThRLojgpkmEjzDp2iADLYXd+qdACIAd/RnFXPaLocBny1apx/g+9boAwUi7aTGa4/t9IdxJl
key
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
ca
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
2021-06-15 17:56:04 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-06-15 17:56:04 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "fmzJBg",
      "use": "sig",
      "alg": "PS256",
      "n": "mMnnzXsk2aFQA5wl_FmzRdL7-XGUqcSV6gd0GRhxlyoR4HECV74eedAZmD3a54bIKPUlkk2qklpOAtcm7Xp_oPlEkmkvIAd-KtdOfFHN_iW5FeIiu4gPJXJyelBv49Kf-FfGfh2_Jy4jraUX_3_9YwXCuVgkUggH1hCv8ia2MECPHRu-XmrvgHA1J8YkAc4NLpXG60_JwIQqQwpbowfh22lbffx2qPMqAh5Untcfexpc9_xg3kqxwjVjaqP0nc9EOzu41tBJw7xQEWUl47_vVfDKLqMZzq6Q-H1TJZuq5ecpyFsFmIpwS-KAI_ccbvY0iNMc7xl88XM2lE-_fiOWLw",
      "e": "AQAB",
      "d": "MGOhun5JyXNBeCM4FJgEIxUTIIlMYAgWwqvhpSEMuKdmSgMAjvFzjXjO4lyUu8cAFZiucYuPfhKDqnqhpYyqZz0K7qPJfQdiegb-oHj4GImx-LBJ98K7qUx53SskhK7sYybJgp_BLpN6UUB8PTs38OieJz03I5PPh4h5cOO5x8XtP46wMRCQmrQsPKVdGfGTPhrbnHVt81p-52PxdqyMJPD10T3A7bQy0l5HQPgcDewp_JRWobbEFtMXckmdRimgxMmbIJxoIb-RvyWch4u89ep5jx9qbkDDfBOXPpiICRm-RarkBNDJ8ptgo2AvyRG7BHDQyxiqZdBGUw00Uuk-AQ",
      "p": "yjTNjtpFbhdrWZDWh8588XUoViHHKU7PDDALOjAziA9oHeEyJNNwi8Rw5EA9zePOxFSJ1U9H1HTZ-zhUcBIL0h8YIw7zcOJuz4XgH43WgTA_PBaUtr4LOnASPQIDROYD-Bwj57yLwUeESKN9_iWh89fIna1uCp0Yi8yGBDvZIUE",
      "q": "wW-Ipp0_ro-W5x-4-YBxp6SIZ92y7TMxwm-DomDYwZRj-b_fdSonySF-Wmy3cynEw7Lo9Y31OckyxrSkFWWK0nshEe4Nx0pKpZyMVJEcVn7MvsSeU-YFvXwlL91xigsdK6k9qEwfp5_Og0vF5OTp1fPxBmLz82iyVX0Ac6wYa28",
      "dp": "W7Dx_XMwxKlN_oFVJqQVuBAeSGBsxWh9LtOiY7Jzy6Dg35u8d0KB6H8digMvg2tn2VNUZSvcMJUEO4zhjShBv_hlo5AmB-xFv0i_xs80k8RjCEZdDTjEMq2bN5rwDJAZAKsSBQVUgkKB08Z_XX2HIOGakRWRrrJp7QrDQqw424E",
      "dq": "mP_cSVUlsq_WfzdjOs3yl9QXJHiB9wZAPHex2bTanbr-nOO8HtNaJsd8Ro-pRsjp3pTbmKZRKgTPScZF5rqrZDKKBMGTWmeTxYyenqEslemzjsy8IsZVEfxo-YQhMzv5NbimkUCs5QwM72L2w0ahAl7x7MhGBuhv7hhyTAv6QLc",
      "qi": "eq8KkKza25CFTfe9oMs1L0JxNy7TqpBFuHo4_DSXg6Z2lObefpixYTBtCbdPOCUNA7bjhFN94btd-r08NWGmULj_3-5f3WX1xlcHLrr2HLSl0IxyEcO7cHomtGCxErxXUsR9h--Bb-3AW237DIEbmBCVhX-DOTQeX5mtYF1iJE8"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "fmzJBg",
      "alg": "PS256",
      "n": "mMnnzXsk2aFQA5wl_FmzRdL7-XGUqcSV6gd0GRhxlyoR4HECV74eedAZmD3a54bIKPUlkk2qklpOAtcm7Xp_oPlEkmkvIAd-KtdOfFHN_iW5FeIiu4gPJXJyelBv49Kf-FfGfh2_Jy4jraUX_3_9YwXCuVgkUggH1hCv8ia2MECPHRu-XmrvgHA1J8YkAc4NLpXG60_JwIQqQwpbowfh22lbffx2qPMqAh5Untcfexpc9_xg3kqxwjVjaqP0nc9EOzu41tBJw7xQEWUl47_vVfDKLqMZzq6Q-H1TJZuq5ecpyFsFmIpwS-KAI_ccbvY0iNMc7xl88XM2lE-_fiOWLw"
    }
  ]
}
2021-06-15 17:56:04 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-06-15 17:56:04 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-06-15 17:56:04 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "PS256",
  "ES256"
]
2021-06-15 17:56:04 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "fmzJBg",
      "use": "sig",
      "alg": "PS256",
      "n": "mMnnzXsk2aFQA5wl_FmzRdL7-XGUqcSV6gd0GRhxlyoR4HECV74eedAZmD3a54bIKPUlkk2qklpOAtcm7Xp_oPlEkmkvIAd-KtdOfFHN_iW5FeIiu4gPJXJyelBv49Kf-FfGfh2_Jy4jraUX_3_9YwXCuVgkUggH1hCv8ia2MECPHRu-XmrvgHA1J8YkAc4NLpXG60_JwIQqQwpbowfh22lbffx2qPMqAh5Untcfexpc9_xg3kqxwjVjaqP0nc9EOzu41tBJw7xQEWUl47_vVfDKLqMZzq6Q-H1TJZuq5ecpyFsFmIpwS-KAI_ccbvY0iNMc7xl88XM2lE-_fiOWLw",
      "e": "AQAB",
      "d": "MGOhun5JyXNBeCM4FJgEIxUTIIlMYAgWwqvhpSEMuKdmSgMAjvFzjXjO4lyUu8cAFZiucYuPfhKDqnqhpYyqZz0K7qPJfQdiegb-oHj4GImx-LBJ98K7qUx53SskhK7sYybJgp_BLpN6UUB8PTs38OieJz03I5PPh4h5cOO5x8XtP46wMRCQmrQsPKVdGfGTPhrbnHVt81p-52PxdqyMJPD10T3A7bQy0l5HQPgcDewp_JRWobbEFtMXckmdRimgxMmbIJxoIb-RvyWch4u89ep5jx9qbkDDfBOXPpiICRm-RarkBNDJ8ptgo2AvyRG7BHDQyxiqZdBGUw00Uuk-AQ",
      "p": "yjTNjtpFbhdrWZDWh8588XUoViHHKU7PDDALOjAziA9oHeEyJNNwi8Rw5EA9zePOxFSJ1U9H1HTZ-zhUcBIL0h8YIw7zcOJuz4XgH43WgTA_PBaUtr4LOnASPQIDROYD-Bwj57yLwUeESKN9_iWh89fIna1uCp0Yi8yGBDvZIUE",
      "q": "wW-Ipp0_ro-W5x-4-YBxp6SIZ92y7TMxwm-DomDYwZRj-b_fdSonySF-Wmy3cynEw7Lo9Y31OckyxrSkFWWK0nshEe4Nx0pKpZyMVJEcVn7MvsSeU-YFvXwlL91xigsdK6k9qEwfp5_Og0vF5OTp1fPxBmLz82iyVX0Ac6wYa28",
      "dp": "W7Dx_XMwxKlN_oFVJqQVuBAeSGBsxWh9LtOiY7Jzy6Dg35u8d0KB6H8digMvg2tn2VNUZSvcMJUEO4zhjShBv_hlo5AmB-xFv0i_xs80k8RjCEZdDTjEMq2bN5rwDJAZAKsSBQVUgkKB08Z_XX2HIOGakRWRrrJp7QrDQqw424E",
      "dq": "mP_cSVUlsq_WfzdjOs3yl9QXJHiB9wZAPHex2bTanbr-nOO8HtNaJsd8Ro-pRsjp3pTbmKZRKgTPScZF5rqrZDKKBMGTWmeTxYyenqEslemzjsy8IsZVEfxo-YQhMzv5NbimkUCs5QwM72L2w0ahAl7x7MhGBuhv7hhyTAv6QLc",
      "qi": "eq8KkKza25CFTfe9oMs1L0JxNy7TqpBFuHo4_DSXg6Z2lObefpixYTBtCbdPOCUNA7bjhFN94btd-r08NWGmULj_3-5f3WX1xlcHLrr2HLSl0IxyEcO7cHomtGCxErxXUsR9h--Bb-3AW237DIEbmBCVhX-DOTQeX5mtYF1iJE8"
    }
  ]
}
2021-06-15 17:56:04 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
Verify configuration of second client
2021-06-15 17:56:04 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
c__fapi-jwt-jar2
scope
openid
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "55zSYQ",
      "use": "sig",
      "alg": "PS256",
      "n": "1Ju18TJ6X9RzfOCYfRZcXLAKhkyV5H3OkuLGBm0D5XL7r1XigsfE_L3a4zcBPuSPO1xhFF1pTGsqGGqTHF82zuqZPLKEO6aGGyoDlLQTKmjh17uYvF1JNUu5goW1mjYe2WuZX8SWIhVl7HzMqCCiK3ji2JiqLuYGtP73iEVWf869MPBH3OGvQphnbdzziQCaqWbv0ipPkKIdl8v1A-3MAmZftYe33mMhe9D1qP7fe3QtfVQ4sHi5z_2wXf1W2JakOYb6rbG0EblHCBmF_zuRX5rKWzG3uYHiyObYyAHqtWETKMN53DdqjjC2l9x45OT1lRhNgLpg2hlBJnnur5UR4w",
      "e": "AQAB",
      "d": "Qp0_FoGQYjI4tSnR3W-CJPBre8THOj5I2TEAhsblb6DlRvyL6hoZmG8MBCEZ3NDUJ-8745uZAH6bQ-cwjLUwgQh0VtZAJEh6wEwbrx3021bdXDDFHE_GPlKpn0Gxss2-QLU76wu3VpqJwt0fapY--Yv415CN0f_0ngU9HY9MGOLli2rMBy_u3pGkotI_RLPmvpP61bA0xwaH17BkfDeDnjbFqaICddxDUTRMpogcTba7BbFWbK-W1M-OkC-wvcDPvZ7S_0WZE7E8gi4Fsgu86o6WHdK1yTTf1mwKhJBeXuWAp05Nzt7OQjyiZExR-wXnnkUGVyiXJjs6XPaA28njoQ",
      "p": "8k6JpkJMbBYBy0qBETA95c-MNRKuE6fRIGgU8ZUU6ICk_9d2uHLXV9bvCXjcCwFAQny0HHgq4gK4BQjIuoolvpfJou8CNf63ioqXURVXvXDl3E_m_nmg3VSySaMgZ12zWh-_Tku3GDSgPAiZjWzaZCMacrqO3XvwHvKRj3-B8Rk",
      "q": "4J-F4XxQN_9ThZEbxu6gNE8WFJC4eCkBea4tssNZc6e5sj7D-YMmVycRrGu4LP8DwsDW0ITtR1Ppi4UZ3pauXcJ4pCRo7Jd6g-v18_vmSMuuKg5GENg4FCYjPjmQtuQI_N8KPYCiqsD0ob6gq0vb9UFDFuNn__Q8OdAo7ch9Dls",
      "dp": "3883SYB3gmaZZaL9sFi0865PPT5x1-nsOlio77PaSh95SG9GU3yP96ypwkAGT4vqRP9Whe1g_r2wJ8ZDUjoEPxWIw5ysmB8cfTUiK1zhXDQJvQN4w5iow4dV3rp0VcWwwhAM7k71YcBKOOlgm8btugzKgypah63Qz2USmk8WQRE",
      "dq": "HbyAmM1AQWmHwRLovnkwtDwUDDzsbtve2iD448WAvhLiPnqYrxtxo_AEIvNPuoU4Fjw5M_mk_-BX9qR0PEduZfMszW4Uhd231mcSdG5Qmip8sAybsfct1V0HJWGxisS9e9x7GpFA96H7wL3fv02XnOw62XjZd8T5hB3OjUwRYik",
      "qi": "cBQVKSQjUdrCtMJdKGiCVeu_aUmFUQS0ytosgNO1LT0qyZdVNC2AtxgH9OIxKFNsSpZPeUBIWMvvmZk1NYBhUYaksK5Rqux5oM8yNneO9wvqnGipQjUg5I3L1yXTiNMoIVGhRBOwjDXC0qWfhXuzQ6cJJNRrCZEHlyC43TwyBF0"
    }
  ]
}
2021-06-15 17:56:04 SUCCESS
ValidateMTLSCertificates2Header
MTLS certificates header is valid
2021-06-15 17:56:04 SUCCESS
ExtractMTLSCertificates2FromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
ca
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
2021-06-15 17:56:04 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-06-15 17:56:04 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "55zSYQ",
      "use": "sig",
      "alg": "PS256",
      "n": "1Ju18TJ6X9RzfOCYfRZcXLAKhkyV5H3OkuLGBm0D5XL7r1XigsfE_L3a4zcBPuSPO1xhFF1pTGsqGGqTHF82zuqZPLKEO6aGGyoDlLQTKmjh17uYvF1JNUu5goW1mjYe2WuZX8SWIhVl7HzMqCCiK3ji2JiqLuYGtP73iEVWf869MPBH3OGvQphnbdzziQCaqWbv0ipPkKIdl8v1A-3MAmZftYe33mMhe9D1qP7fe3QtfVQ4sHi5z_2wXf1W2JakOYb6rbG0EblHCBmF_zuRX5rKWzG3uYHiyObYyAHqtWETKMN53DdqjjC2l9x45OT1lRhNgLpg2hlBJnnur5UR4w",
      "e": "AQAB",
      "d": "Qp0_FoGQYjI4tSnR3W-CJPBre8THOj5I2TEAhsblb6DlRvyL6hoZmG8MBCEZ3NDUJ-8745uZAH6bQ-cwjLUwgQh0VtZAJEh6wEwbrx3021bdXDDFHE_GPlKpn0Gxss2-QLU76wu3VpqJwt0fapY--Yv415CN0f_0ngU9HY9MGOLli2rMBy_u3pGkotI_RLPmvpP61bA0xwaH17BkfDeDnjbFqaICddxDUTRMpogcTba7BbFWbK-W1M-OkC-wvcDPvZ7S_0WZE7E8gi4Fsgu86o6WHdK1yTTf1mwKhJBeXuWAp05Nzt7OQjyiZExR-wXnnkUGVyiXJjs6XPaA28njoQ",
      "p": "8k6JpkJMbBYBy0qBETA95c-MNRKuE6fRIGgU8ZUU6ICk_9d2uHLXV9bvCXjcCwFAQny0HHgq4gK4BQjIuoolvpfJou8CNf63ioqXURVXvXDl3E_m_nmg3VSySaMgZ12zWh-_Tku3GDSgPAiZjWzaZCMacrqO3XvwHvKRj3-B8Rk",
      "q": "4J-F4XxQN_9ThZEbxu6gNE8WFJC4eCkBea4tssNZc6e5sj7D-YMmVycRrGu4LP8DwsDW0ITtR1Ppi4UZ3pauXcJ4pCRo7Jd6g-v18_vmSMuuKg5GENg4FCYjPjmQtuQI_N8KPYCiqsD0ob6gq0vb9UFDFuNn__Q8OdAo7ch9Dls",
      "dp": "3883SYB3gmaZZaL9sFi0865PPT5x1-nsOlio77PaSh95SG9GU3yP96ypwkAGT4vqRP9Whe1g_r2wJ8ZDUjoEPxWIw5ysmB8cfTUiK1zhXDQJvQN4w5iow4dV3rp0VcWwwhAM7k71YcBKOOlgm8btugzKgypah63Qz2USmk8WQRE",
      "dq": "HbyAmM1AQWmHwRLovnkwtDwUDDzsbtve2iD448WAvhLiPnqYrxtxo_AEIvNPuoU4Fjw5M_mk_-BX9qR0PEduZfMszW4Uhd231mcSdG5Qmip8sAybsfct1V0HJWGxisS9e9x7GpFA96H7wL3fv02XnOw62XjZd8T5hB3OjUwRYik",
      "qi": "cBQVKSQjUdrCtMJdKGiCVeu_aUmFUQS0ytosgNO1LT0qyZdVNC2AtxgH9OIxKFNsSpZPeUBIWMvvmZk1NYBhUYaksK5Rqux5oM8yNneO9wvqnGipQjUg5I3L1yXTiNMoIVGhRBOwjDXC0qWfhXuzQ6cJJNRrCZEHlyC43TwyBF0"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "55zSYQ",
      "alg": "PS256",
      "n": "1Ju18TJ6X9RzfOCYfRZcXLAKhkyV5H3OkuLGBm0D5XL7r1XigsfE_L3a4zcBPuSPO1xhFF1pTGsqGGqTHF82zuqZPLKEO6aGGyoDlLQTKmjh17uYvF1JNUu5goW1mjYe2WuZX8SWIhVl7HzMqCCiK3ji2JiqLuYGtP73iEVWf869MPBH3OGvQphnbdzziQCaqWbv0ipPkKIdl8v1A-3MAmZftYe33mMhe9D1qP7fe3QtfVQ4sHi5z_2wXf1W2JakOYb6rbG0EblHCBmF_zuRX5rKWzG3uYHiyObYyAHqtWETKMN53DdqjjC2l9x45OT1lRhNgLpg2hlBJnnur5UR4w"
    }
  ]
}
2021-06-15 17:56:04 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-06-15 17:56:04 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-06-15 17:56:04 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "PS256",
  "ES256"
]
2021-06-15 17:56:04 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "55zSYQ",
      "use": "sig",
      "alg": "PS256",
      "n": "1Ju18TJ6X9RzfOCYfRZcXLAKhkyV5H3OkuLGBm0D5XL7r1XigsfE_L3a4zcBPuSPO1xhFF1pTGsqGGqTHF82zuqZPLKEO6aGGyoDlLQTKmjh17uYvF1JNUu5goW1mjYe2WuZX8SWIhVl7HzMqCCiK3ji2JiqLuYGtP73iEVWf869MPBH3OGvQphnbdzziQCaqWbv0ipPkKIdl8v1A-3MAmZftYe33mMhe9D1qP7fe3QtfVQ4sHi5z_2wXf1W2JakOYb6rbG0EblHCBmF_zuRX5rKWzG3uYHiyObYyAHqtWETKMN53DdqjjC2l9x45OT1lRhNgLpg2hlBJnnur5UR4w",
      "e": "AQAB",
      "d": "Qp0_FoGQYjI4tSnR3W-CJPBre8THOj5I2TEAhsblb6DlRvyL6hoZmG8MBCEZ3NDUJ-8745uZAH6bQ-cwjLUwgQh0VtZAJEh6wEwbrx3021bdXDDFHE_GPlKpn0Gxss2-QLU76wu3VpqJwt0fapY--Yv415CN0f_0ngU9HY9MGOLli2rMBy_u3pGkotI_RLPmvpP61bA0xwaH17BkfDeDnjbFqaICddxDUTRMpogcTba7BbFWbK-W1M-OkC-wvcDPvZ7S_0WZE7E8gi4Fsgu86o6WHdK1yTTf1mwKhJBeXuWAp05Nzt7OQjyiZExR-wXnnkUGVyiXJjs6XPaA28njoQ",
      "p": "8k6JpkJMbBYBy0qBETA95c-MNRKuE6fRIGgU8ZUU6ICk_9d2uHLXV9bvCXjcCwFAQny0HHgq4gK4BQjIuoolvpfJou8CNf63ioqXURVXvXDl3E_m_nmg3VSySaMgZ12zWh-_Tku3GDSgPAiZjWzaZCMacrqO3XvwHvKRj3-B8Rk",
      "q": "4J-F4XxQN_9ThZEbxu6gNE8WFJC4eCkBea4tssNZc6e5sj7D-YMmVycRrGu4LP8DwsDW0ITtR1Ppi4UZ3pauXcJ4pCRo7Jd6g-v18_vmSMuuKg5GENg4FCYjPjmQtuQI_N8KPYCiqsD0ob6gq0vb9UFDFuNn__Q8OdAo7ch9Dls",
      "dp": "3883SYB3gmaZZaL9sFi0865PPT5x1-nsOlio77PaSh95SG9GU3yP96ypwkAGT4vqRP9Whe1g_r2wJ8ZDUjoEPxWIw5ysmB8cfTUiK1zhXDQJvQN4w5iow4dV3rp0VcWwwhAM7k71YcBKOOlgm8btugzKgypah63Qz2USmk8WQRE",
      "dq": "HbyAmM1AQWmHwRLovnkwtDwUDDzsbtve2iD448WAvhLiPnqYrxtxo_AEIvNPuoU4Fjw5M_mk_-BX9qR0PEduZfMszW4Uhd231mcSdG5Qmip8sAybsfct1V0HJWGxisS9e9x7GpFA96H7wL3fv02XnOw62XjZd8T5hB3OjUwRYik",
      "qi": "cBQVKSQjUdrCtMJdKGiCVeu_aUmFUQS0ytosgNO1LT0qyZdVNC2AtxgH9OIxKFNsSpZPeUBIWMvvmZk1NYBhUYaksK5Rqux5oM8yNneO9wvqnGipQjUg5I3L1yXTiNMoIVGhRBOwjDXC0qWfhXuzQ6cJJNRrCZEHlyC43TwyBF0"
    }
  ]
}
2021-06-15 17:56:04 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2021-06-15 17:56:04 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://par-what-is-it-good-for.ping-eng.com:3000/get
2021-06-15 17:56:04 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://par-what-is-it-good-for.ping-eng.com:3000/get
2021-06-15 17:56:04 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
2021-06-15 17:56:04 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
accounts_request_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
2021-06-15 17:56:04
fapi-rw-id2-ensure-client-id-in-token-endpoint
Setup Done
Make request to authorization endpoint
2021-06-15 17:56:04 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
c__fapi-jwt-jar1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
2021-06-15 17:56:04 SUCCESS
AddAcrClaimToAuthorizationEndpointRequest
Added acr claim to authorization_endpoint_request
authorization_endpoint_request
{
  "client_id": "c__fapi-jwt-jar1",
  "redirect_uri": "https://www.certification.openid.net/test/a/pi/callback",
  "scope": "openid other",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  }
}
2021-06-15 17:56:04
CreateRandomStateValue
Created state value
requested_state_length
10
state
fh5XEBxgAT
2021-06-15 17:56:04 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
c__fapi-jwt-jar1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
fh5XEBxgAT
2021-06-15 17:56:04
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
XRzO3Bx9F8
2021-06-15 17:56:04 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
c__fapi-jwt-jar1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
fh5XEBxgAT
nonce
XRzO3Bx9F8
2021-06-15 17:56:04 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToCodeIdtoken
Added response_type parameter to request
client_id
c__fapi-jwt-jar1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
fh5XEBxgAT
nonce
XRzO3Bx9F8
response_type
code id_token
2021-06-15 17:56:04 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "client_id": "c__fapi-jwt-jar1",
  "redirect_uri": "https://www.certification.openid.net/test/a/pi/callback",
  "scope": "openid other",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  },
  "state": "fh5XEBxgAT",
  "nonce": "XRzO3Bx9F8",
  "response_type": "code id_token"
}
2021-06-15 17:56:04 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.623780064E9
2021-06-15 17:56:04 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://par-what-is-it-good-for.ping-eng.com:9032
2021-06-15 17:56:04 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
c__fapi-jwt-jar1
2021-06-15 17:56:04 SUCCESS
AddClientIdToRequestObject
Added client_id to request object claims
client_id
c__fapi-jwt-jar1
2021-06-15 17:56:04 SUCCESS
SignRequestObject
Signed the request object
claims
{"aud":"https:\/\/par-what-is-it-good-for.ping-eng.com:9032","scope":"openid other","claims":{"id_token":{"acr":{"value":"urn:mace:incommon:iap:silver","essential":true}}},"iss":"c__fapi-jwt-jar1","response_type":"code id_token","redirect_uri":"https:\/\/www.certification.openid.net\/test\/a\/pi\/callback","state":"fh5XEBxgAT","exp":1623780064,"nonce":"XRzO3Bx9F8","client_id":"c__fapi-jwt-jar1"}
header
{"kid":"fmzJBg","alg":"PS256"}
request_object
eyJraWQiOiJmbXpKQmciLCJhbGciOiJQUzI1NiJ9.eyJhdWQiOiJodHRwczpcL1wvcGFyLXdoYXQtaXMtaXQtZ29vZC1mb3IucGluZy1lbmcuY29tOjkwMzIiLCJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsYWltcyI6eyJpZF90b2tlbiI6eyJhY3IiOnsidmFsdWUiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiZXNzZW50aWFsIjp0cnVlfX19LCJpc3MiOiJjX19mYXBpLWp3dC1qYXIxIiwicmVzcG9uc2VfdHlwZSI6ImNvZGUgaWRfdG9rZW4iLCJyZWRpcmVjdF91cmkiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvcGlcL2NhbGxiYWNrIiwic3RhdGUiOiJmaDVYRUJ4Z0FUIiwiZXhwIjoxNjIzNzgwMDY0LCJub25jZSI6IlhSek8zQng5RjgiLCJjbGllbnRfaWQiOiJjX19mYXBpLWp3dC1qYXIxIn0.fyoUefQP4CGvGoSF-uanfQ96vz4v7fVyib6rECvnxCnMvYIcXpJErJXsCr2i2zX9Wc785LtFem1ze4mRpALvKmoGqIQ6vuEnYWqx190BxJsjNe127VwrIQlldgdIWxbVgeB_ixw4bpgxEasxbUSPFbSTHDCglqsnuPBMgxNGertxpxbnXnu0bsVgpDROBlv2mm17aVDm1XgR16JUp4d635QDmzz5g7kdNShRlW_vvAnbg2e1ripBwahFi72j1v4rw1P43apKFCyETm5L5nrzIeQDPY5kInSk05fC6mFI-WOIO2nOxaH5o-DJiIPmXcsTYgc0ArkiqrkTOR1_ox8TRQ
key
{"p":"yjTNjtpFbhdrWZDWh8588XUoViHHKU7PDDALOjAziA9oHeEyJNNwi8Rw5EA9zePOxFSJ1U9H1HTZ-zhUcBIL0h8YIw7zcOJuz4XgH43WgTA_PBaUtr4LOnASPQIDROYD-Bwj57yLwUeESKN9_iWh89fIna1uCp0Yi8yGBDvZIUE","kty":"RSA","q":"wW-Ipp0_ro-W5x-4-YBxp6SIZ92y7TMxwm-DomDYwZRj-b_fdSonySF-Wmy3cynEw7Lo9Y31OckyxrSkFWWK0nshEe4Nx0pKpZyMVJEcVn7MvsSeU-YFvXwlL91xigsdK6k9qEwfp5_Og0vF5OTp1fPxBmLz82iyVX0Ac6wYa28","d":"MGOhun5JyXNBeCM4FJgEIxUTIIlMYAgWwqvhpSEMuKdmSgMAjvFzjXjO4lyUu8cAFZiucYuPfhKDqnqhpYyqZz0K7qPJfQdiegb-oHj4GImx-LBJ98K7qUx53SskhK7sYybJgp_BLpN6UUB8PTs38OieJz03I5PPh4h5cOO5x8XtP46wMRCQmrQsPKVdGfGTPhrbnHVt81p-52PxdqyMJPD10T3A7bQy0l5HQPgcDewp_JRWobbEFtMXckmdRimgxMmbIJxoIb-RvyWch4u89ep5jx9qbkDDfBOXPpiICRm-RarkBNDJ8ptgo2AvyRG7BHDQyxiqZdBGUw00Uuk-AQ","e":"AQAB","use":"sig","kid":"fmzJBg","qi":"eq8KkKza25CFTfe9oMs1L0JxNy7TqpBFuHo4_DSXg6Z2lObefpixYTBtCbdPOCUNA7bjhFN94btd-r08NWGmULj_3-5f3WX1xlcHLrr2HLSl0IxyEcO7cHomtGCxErxXUsR9h--Bb-3AW237DIEbmBCVhX-DOTQeX5mtYF1iJE8","dp":"W7Dx_XMwxKlN_oFVJqQVuBAeSGBsxWh9LtOiY7Jzy6Dg35u8d0KB6H8digMvg2tn2VNUZSvcMJUEO4zhjShBv_hlo5AmB-xFv0i_xs80k8RjCEZdDTjEMq2bN5rwDJAZAKsSBQVUgkKB08Z_XX2HIOGakRWRrrJp7QrDQqw424E","alg":"PS256","dq":"mP_cSVUlsq_WfzdjOs3yl9QXJHiB9wZAPHex2bTanbr-nOO8HtNaJsd8Ro-pRsjp3pTbmKZRKgTPScZF5rqrZDKKBMGTWmeTxYyenqEslemzjsy8IsZVEfxo-YQhMzv5NbimkUCs5QwM72L2w0ahAl7x7MhGBuhv7hhyTAv6QLc","n":"mMnnzXsk2aFQA5wl_FmzRdL7-XGUqcSV6gd0GRhxlyoR4HECV74eedAZmD3a54bIKPUlkk2qklpOAtcm7Xp_oPlEkmkvIAd-KtdOfFHN_iW5FeIiu4gPJXJyelBv49Kf-FfGfh2_Jy4jraUX_3_9YwXCuVgkUggH1hCv8ia2MECPHRu-XmrvgHA1J8YkAc4NLpXG60_JwIQqQwpbowfh22lbffx2qPMqAh5Untcfexpc9_xg3kqxwjVjaqP0nc9EOzu41tBJw7xQEWUl47_vVfDKLqMZzq6Q-H1TJZuq5ecpyFsFmIpwS-KAI_ccbvY0iNMc7xl88XM2lE-_fiOWLw"}
2021-06-15 17:56:04 SUCCESS
BuildRequestObjectByValueRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiJmbXpKQmciLCJhbGciOiJQUzI1NiJ9.eyJhdWQiOiJodHRwczpcL1wvcGFyLXdoYXQtaXMtaXQtZ29vZC1mb3IucGluZy1lbmcuY29tOjkwMzIiLCJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsYWltcyI6eyJpZF90b2tlbiI6eyJhY3IiOnsidmFsdWUiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiZXNzZW50aWFsIjp0cnVlfX19LCJpc3MiOiJjX19mYXBpLWp3dC1qYXIxIiwicmVzcG9uc2VfdHlwZSI6ImNvZGUgaWRfdG9rZW4iLCJyZWRpcmVjdF91cmkiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvcGlcL2NhbGxiYWNrIiwic3RhdGUiOiJmaDVYRUJ4Z0FUIiwiZXhwIjoxNjIzNzgwMDY0LCJub25jZSI6IlhSek8zQng5RjgiLCJjbGllbnRfaWQiOiJjX19mYXBpLWp3dC1qYXIxIn0.fyoUefQP4CGvGoSF-uanfQ96vz4v7fVyib6rECvnxCnMvYIcXpJErJXsCr2i2zX9Wc785LtFem1ze4mRpALvKmoGqIQ6vuEnYWqx190BxJsjNe127VwrIQlldgdIWxbVgeB_ixw4bpgxEasxbUSPFbSTHDCglqsnuPBMgxNGertxpxbnXnu0bsVgpDROBlv2mm17aVDm1XgR16JUp4d635QDmzz5g7kdNShRlW_vvAnbg2e1ripBwahFi72j1v4rw1P43apKFCyETm5L5nrzIeQDPY5kInSk05fC6mFI-WOIO2nOxaH5o-DJiIPmXcsTYgc0ArkiqrkTOR1_ox8TRQ&client_id=c__fapi-jwt-jar1&redirect_uri=https://www.certification.openid.net/test/a/pi/callback&scope=openid%20other&response_type=code%20id_token
2021-06-15 17:56:04 REDIRECT
fapi-rw-id2-ensure-client-id-in-token-endpoint
Redirecting to authorization endpoint
redirect_to
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiJmbXpKQmciLCJhbGciOiJQUzI1NiJ9.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.fyoUefQP4CGvGoSF-uanfQ96vz4v7fVyib6rECvnxCnMvYIcXpJErJXsCr2i2zX9Wc785LtFem1ze4mRpALvKmoGqIQ6vuEnYWqx190BxJsjNe127VwrIQlldgdIWxbVgeB_ixw4bpgxEasxbUSPFbSTHDCglqsnuPBMgxNGertxpxbnXnu0bsVgpDROBlv2mm17aVDm1XgR16JUp4d635QDmzz5g7kdNShRlW_vvAnbg2e1ripBwahFi72j1v4rw1P43apKFCyETm5L5nrzIeQDPY5kInSk05fC6mFI-WOIO2nOxaH5o-DJiIPmXcsTYgc0ArkiqrkTOR1_ox8TRQ&client_id=c__fapi-jwt-jar1&redirect_uri=https://www.certification.openid.net/test/a/pi/callback&scope=openid%20other&response_type=code%20id_token
2021-06-15 17:56:07 INCOMING
fapi-rw-id2-ensure-client-id-in-token-endpoint
Incoming HTTP request to test instance hGYVUi26jQy62cB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:88.0) Gecko/20100101 Firefox/88.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://par-what-is-it-good-for.ping-eng.com:9031/",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1623687574.1623770157.261; __utmz\u003d201319536.1623105741.257.63.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell; __utmc\u003d201319536; JSESSIONID\u003d8E4228CB2127BE6740BAB32DB395005E",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
callback
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-06-15 17:56:07 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/ptrqRRkjKT4Hs2NnT5PI",
  "fullUrl": "https://www.certification.openid.net/test/a/pi/implicit/ptrqRRkjKT4Hs2NnT5PI"
}
2021-06-15 17:56:07 OUTGOING
fapi-rw-id2-ensure-client-id-in-token-endpoint
Response to HTTP request to test instance hGYVUi26jQy62cB
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/pi/implicit/ptrqRRkjKT4Hs2NnT5PI, returnUrl=/log-detail.html?log=hGYVUi26jQy62cB}]
outgoing_path
callback
2021-06-15 17:56:07 INCOMING
fapi-rw-id2-ensure-client-id-in-token-endpoint
Incoming HTTP request to test instance hGYVUi26jQy62cB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:88.0) Gecko/20100101 Firefox/88.0",
  "accept": "*/*",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "content-type": "text/plain",
  "x-requested-with": "XMLHttpRequest",
  "origin": "https://www.certification.openid.net",
  "referer": "https://www.certification.openid.net/test/a/pi/callback",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1623687574.1623770157.261; __utmz\u003d201319536.1623105741.257.63.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell; __utmc\u003d201319536; JSESSIONID\u003d8E4228CB2127BE6740BAB32DB395005E",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "968",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
implicit/ptrqRRkjKT4Hs2NnT5PI
incoming_body_form_params
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
#code=SmZggl-BWXx88JjZ8Ma7ZjQ_5BVu3UClbfvFqLyJ&id_token=eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtamFyMSIsImp0aSI6IllyOVF4SjdOUjUzM1hDZUMycnd2bEIiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyIiwiaWF0IjoxNjIzNzc5NzY3LCJleHAiOjE2MjM3ODAwNjcsImFjciI6InVybjptYWNlOmluY29tbW9uOmlhcDpzaWx2ZXIiLCJhdXRoX3RpbWUiOjE2MjM3Nzg5MzUsIm5vbmNlIjoiWFJ6TzNCeDlGOCIsImNfaGFzaCI6IjM1UFhIaVZ2YzAyTGszX1ZFTGFMVEEiLCJzX2hhc2giOiJIYVF2UTFGbXNCNUFMYW5jWW1udE1nIn0.Wn3W0J-JQta-YKJ5MEYeIit_vIHvA9TtTFma1LzrIEeE_CVEB08R2eBjiA5w5I3_Ymddn_dPuL9hBZav1TDsvalPmGPPZNizLgrNPbDWCu8LEB1k1RKH4JHE5DGnEDPat9wUuHd6tOD3zxoqRRkfwBlP3PvMqk9MJ4244WKtCaQAfciyqAA06xVZydA5QkRRZeM963iI-goGis443Ntsxc5RB_YUKlDkHIj7ZynWmOmHEbtzy3Mqx_0e7ulcE6OTMUA9zUiExpMg6Kx7dwnkmW6q-Czlc7eGPGbVJmbII9nOC9Rk9PprpiqaCe7XIq6zn9uiiUwPhzGC9h5S1yV0XA&state=fh5XEBxgAT
2021-06-15 17:56:07 OUTGOING
fapi-rw-id2-ensure-client-id-in-token-endpoint
Response to HTTP request to test instance hGYVUi26jQy62cB
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/ptrqRRkjKT4Hs2NnT5PI
2021-06-15 17:56:08
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "code",
    "value": "SmZggl-BWXx88JjZ8Ma7ZjQ_5BVu3UClbfvFqLyJ"
  },
  {
    "name": "id_token",
    "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtamFyMSIsImp0aSI6IllyOVF4SjdOUjUzM1hDZUMycnd2bEIiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyIiwiaWF0IjoxNjIzNzc5NzY3LCJleHAiOjE2MjM3ODAwNjcsImFjciI6InVybjptYWNlOmluY29tbW9uOmlhcDpzaWx2ZXIiLCJhdXRoX3RpbWUiOjE2MjM3Nzg5MzUsIm5vbmNlIjoiWFJ6TzNCeDlGOCIsImNfaGFzaCI6IjM1UFhIaVZ2YzAyTGszX1ZFTGFMVEEiLCJzX2hhc2giOiJIYVF2UTFGbXNCNUFMYW5jWW1udE1nIn0.Wn3W0J-JQta-YKJ5MEYeIit_vIHvA9TtTFma1LzrIEeE_CVEB08R2eBjiA5w5I3_Ymddn_dPuL9hBZav1TDsvalPmGPPZNizLgrNPbDWCu8LEB1k1RKH4JHE5DGnEDPat9wUuHd6tOD3zxoqRRkfwBlP3PvMqk9MJ4244WKtCaQAfciyqAA06xVZydA5QkRRZeM963iI-goGis443Ntsxc5RB_YUKlDkHIj7ZynWmOmHEbtzy3Mqx_0e7ulcE6OTMUA9zUiExpMg6Kx7dwnkmW6q-Czlc7eGPGbVJmbII9nOC9Rk9PprpiqaCe7XIq6zn9uiiUwPhzGC9h5S1yV0XA"
  },
  {
    "name": "state",
    "value": "fh5XEBxgAT"
  }
]
2021-06-15 17:56:08 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
code
SmZggl-BWXx88JjZ8Ma7ZjQ_5BVu3UClbfvFqLyJ
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtamFyMSIsImp0aSI6IllyOVF4SjdOUjUzM1hDZUMycnd2bEIiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyIiwiaWF0IjoxNjIzNzc5NzY3LCJleHAiOjE2MjM3ODAwNjcsImFjciI6InVybjptYWNlOmluY29tbW9uOmlhcDpzaWx2ZXIiLCJhdXRoX3RpbWUiOjE2MjM3Nzg5MzUsIm5vbmNlIjoiWFJ6TzNCeDlGOCIsImNfaGFzaCI6IjM1UFhIaVZ2YzAyTGszX1ZFTGFMVEEiLCJzX2hhc2giOiJIYVF2UTFGbXNCNUFMYW5jWW1udE1nIn0.Wn3W0J-JQta-YKJ5MEYeIit_vIHvA9TtTFma1LzrIEeE_CVEB08R2eBjiA5w5I3_Ymddn_dPuL9hBZav1TDsvalPmGPPZNizLgrNPbDWCu8LEB1k1RKH4JHE5DGnEDPat9wUuHd6tOD3zxoqRRkfwBlP3PvMqk9MJ4244WKtCaQAfciyqAA06xVZydA5QkRRZeM963iI-goGis443Ntsxc5RB_YUKlDkHIj7ZynWmOmHEbtzy3Mqx_0e7ulcE6OTMUA9zUiExpMg6Kx7dwnkmW6q-Czlc7eGPGbVJmbII9nOC9Rk9PprpiqaCe7XIq6zn9uiiUwPhzGC9h5S1yV0XA
state
fh5XEBxgAT
2021-06-15 17:56:08 REDIRECT-IN
fapi-rw-id2-ensure-client-id-in-token-endpoint
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:88.0) Gecko/20100101 Firefox/88.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://par-what-is-it-good-for.ping-eng.com:9031/",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1623687574.1623770157.261; __utmz\u003d201319536.1623105741.257.63.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell; __utmc\u003d201319536; JSESSIONID\u003d8E4228CB2127BE6740BAB32DB395005E",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "code": "SmZggl-BWXx88JjZ8Ma7ZjQ_5BVu3UClbfvFqLyJ",
  "id_token": "eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtamFyMSIsImp0aSI6IllyOVF4SjdOUjUzM1hDZUMycnd2bEIiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyIiwiaWF0IjoxNjIzNzc5NzY3LCJleHAiOjE2MjM3ODAwNjcsImFjciI6InVybjptYWNlOmluY29tbW9uOmlhcDpzaWx2ZXIiLCJhdXRoX3RpbWUiOjE2MjM3Nzg5MzUsIm5vbmNlIjoiWFJ6TzNCeDlGOCIsImNfaGFzaCI6IjM1UFhIaVZ2YzAyTGszX1ZFTGFMVEEiLCJzX2hhc2giOiJIYVF2UTFGbXNCNUFMYW5jWW1udE1nIn0.Wn3W0J-JQta-YKJ5MEYeIit_vIHvA9TtTFma1LzrIEeE_CVEB08R2eBjiA5w5I3_Ymddn_dPuL9hBZav1TDsvalPmGPPZNizLgrNPbDWCu8LEB1k1RKH4JHE5DGnEDPat9wUuHd6tOD3zxoqRRkfwBlP3PvMqk9MJ4244WKtCaQAfciyqAA06xVZydA5QkRRZeM963iI-goGis443Ntsxc5RB_YUKlDkHIj7ZynWmOmHEbtzy3Mqx_0e7ulcE6OTMUA9zUiExpMg6Kx7dwnkmW6q-Czlc7eGPGbVJmbII9nOC9Rk9PprpiqaCe7XIq6zn9uiiUwPhzGC9h5S1yV0XA",
  "state": "fh5XEBxgAT"
}
post_body
Verify authorization endpoint response
2021-06-15 17:56:08 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2021-06-15 17:56:08 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2021-06-15 17:56:08 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2021-06-15 17:56:08 SUCCESS
RejectStateInUrlQueryForHybridFlow
state is correctly not present in URL query returned from authorization endpoint (as in the hybrid flow it must be returned in the URL fragment/hash only)
2021-06-15 17:56:08 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2021-06-15 17:56:08 SUCCESS
ValidateSuccessfulHybridResponseFromAuthorizationEndpoint
authorization endpoint response does not include unexpected parameters
code
SmZggl-BWXx88JjZ8Ma7ZjQ_5BVu3UClbfvFqLyJ
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtamFyMSIsImp0aSI6IllyOVF4SjdOUjUzM1hDZUMycnd2bEIiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyIiwiaWF0IjoxNjIzNzc5NzY3LCJleHAiOjE2MjM3ODAwNjcsImFjciI6InVybjptYWNlOmluY29tbW9uOmlhcDpzaWx2ZXIiLCJhdXRoX3RpbWUiOjE2MjM3Nzg5MzUsIm5vbmNlIjoiWFJ6TzNCeDlGOCIsImNfaGFzaCI6IjM1UFhIaVZ2YzAyTGszX1ZFTGFMVEEiLCJzX2hhc2giOiJIYVF2UTFGbXNCNUFMYW5jWW1udE1nIn0.Wn3W0J-JQta-YKJ5MEYeIit_vIHvA9TtTFma1LzrIEeE_CVEB08R2eBjiA5w5I3_Ymddn_dPuL9hBZav1TDsvalPmGPPZNizLgrNPbDWCu8LEB1k1RKH4JHE5DGnEDPat9wUuHd6tOD3zxoqRRkfwBlP3PvMqk9MJ4244WKtCaQAfciyqAA06xVZydA5QkRRZeM963iI-goGis443Ntsxc5RB_YUKlDkHIj7ZynWmOmHEbtzy3Mqx_0e7ulcE6OTMUA9zUiExpMg6Kx7dwnkmW6q-Czlc7eGPGbVJmbII9nOC9Rk9PprpiqaCe7XIq6zn9uiiUwPhzGC9h5S1yV0XA
state
fh5XEBxgAT
2021-06-15 17:56:08 SUCCESS
CheckStateInAuthorizationResponse
State in response correctly returned
state
fh5XEBxgAT
2021-06-15 17:56:08
ValidateIssInAuthorizationResponse
No 'iss' value in authorization response.
2021-06-15 17:56:08 SUCCESS
ExtractAuthorizationCodeFromAuthorizationResponse
Found authorization code
code
SmZggl-BWXx88JjZ8Ma7ZjQ_5BVu3UClbfvFqLyJ
2021-06-15 17:56:08 SUCCESS
EnsureMinimumAuthorizationCodeLength
Authorization code is of sufficient length
actual
320
required
128
2021-06-15 17:56:08 SUCCESS
EnsureMinimumAuthorizationCodeEntropy
Calculated shannon entropy seems sufficient
actual
193.3673487911676
expected
96.0
2021-06-15 17:56:08 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtamFyMSIsImp0aSI6IllyOVF4SjdOUjUzM1hDZUMycnd2bEIiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyIiwiaWF0IjoxNjIzNzc5NzY3LCJleHAiOjE2MjM3ODAwNjcsImFjciI6InVybjptYWNlOmluY29tbW9uOmlhcDpzaWx2ZXIiLCJhdXRoX3RpbWUiOjE2MjM3Nzg5MzUsIm5vbmNlIjoiWFJ6TzNCeDlGOCIsImNfaGFzaCI6IjM1UFhIaVZ2YzAyTGszX1ZFTGFMVEEiLCJzX2hhc2giOiJIYVF2UTFGbXNCNUFMYW5jWW1udE1nIn0.Wn3W0J-JQta-YKJ5MEYeIit_vIHvA9TtTFma1LzrIEeE_CVEB08R2eBjiA5w5I3_Ymddn_dPuL9hBZav1TDsvalPmGPPZNizLgrNPbDWCu8LEB1k1RKH4JHE5DGnEDPat9wUuHd6tOD3zxoqRRkfwBlP3PvMqk9MJ4244WKtCaQAfciyqAA06xVZydA5QkRRZeM963iI-goGis443Ntsxc5RB_YUKlDkHIj7ZynWmOmHEbtzy3Mqx_0e7ulcE6OTMUA9zUiExpMg6Kx7dwnkmW6q-Czlc7eGPGbVJmbII9nOC9Rk9PprpiqaCe7XIq6zn9uiiUwPhzGC9h5S1yV0XA
header
{
  "kid": "ZH2y4AetHTynvUgDK_YxYbB5yLQ",
  "alg": "PS256"
}
claims
{
  "sub": "9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4",
  "aud": "c__fapi-jwt-jar1",
  "acr": "urn:mace:incommon:iap:silver",
  "c_hash": "35PXHiVvc02Lk3_VELaLTA",
  "s_hash": "HaQvQ1FmsB5ALancYmntMg",
  "auth_time": 1623778935,
  "iss": "https://par-what-is-it-good-for.ping-eng.com:9032",
  "exp": 1623780067,
  "iat": 1623779767,
  "nonce": "XRzO3Bx9F8",
  "jti": "Yr9QxJ7NR533XCeC2rwvlB"
}
2021-06-15 17:56:08 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-06-15 17:56:08 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
ZH2y4AetHTynvUgDK_YxYbB5yLQ
2021-06-15 17:56:08 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
XRzO3Bx9F8
2021-06-15 17:56:08 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
acr value in id_token is (one of) the requested values
actual
urn:mace:incommon:iap:silver
requested
[
  "urn:mace:incommon:iap:silver"
]
2021-06-15 17:56:08 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtamFyMSIsImp0aSI6IllyOVF4SjdOUjUzM1hDZUMycnd2bEIiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyIiwiaWF0IjoxNjIzNzc5NzY3LCJleHAiOjE2MjM3ODAwNjcsImFjciI6InVybjptYWNlOmluY29tbW9uOmlhcDpzaWx2ZXIiLCJhdXRoX3RpbWUiOjE2MjM3Nzg5MzUsIm5vbmNlIjoiWFJ6TzNCeDlGOCIsImNfaGFzaCI6IjM1UFhIaVZ2YzAyTGszX1ZFTGFMVEEiLCJzX2hhc2giOiJIYVF2UTFGbXNCNUFMYW5jWW1udE1nIn0.Wn3W0J-JQta-YKJ5MEYeIit_vIHvA9TtTFma1LzrIEeE_CVEB08R2eBjiA5w5I3_Ymddn_dPuL9hBZav1TDsvalPmGPPZNizLgrNPbDWCu8LEB1k1RKH4JHE5DGnEDPat9wUuHd6tOD3zxoqRRkfwBlP3PvMqk9MJ4244WKtCaQAfciyqAA06xVZydA5QkRRZeM963iI-goGis443Ntsxc5RB_YUKlDkHIj7ZynWmOmHEbtzy3Mqx_0e7ulcE6OTMUA9zUiExpMg6Kx7dwnkmW6q-Czlc7eGPGbVJmbII9nOC9Rk9PprpiqaCe7XIq6zn9uiiUwPhzGC9h5S1yV0XA
2021-06-15 17:56:08 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IlpIMnk0QWV0SFR5bnZVZ0RLX1l4WWJCNXlMUSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtamFyMSIsImp0aSI6IllyOVF4SjdOUjUzM1hDZUMycnd2bEIiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyIiwiaWF0IjoxNjIzNzc5NzY3LCJleHAiOjE2MjM3ODAwNjcsImFjciI6InVybjptYWNlOmluY29tbW9uOmlhcDpzaWx2ZXIiLCJhdXRoX3RpbWUiOjE2MjM3Nzg5MzUsIm5vbmNlIjoiWFJ6TzNCeDlGOCIsImNfaGFzaCI6IjM1UFhIaVZ2YzAyTGszX1ZFTGFMVEEiLCJzX2hhc2giOiJIYVF2UTFGbXNCNUFMYW5jWW1udE1nIn0.Wn3W0J-JQta-YKJ5MEYeIit_vIHvA9TtTFma1LzrIEeE_CVEB08R2eBjiA5w5I3_Ymddn_dPuL9hBZav1TDsvalPmGPPZNizLgrNPbDWCu8LEB1k1RKH4JHE5DGnEDPat9wUuHd6tOD3zxoqRRkfwBlP3PvMqk9MJ4244WKtCaQAfciyqAA06xVZydA5QkRRZeM963iI-goGis443Ntsxc5RB_YUKlDkHIj7ZynWmOmHEbtzy3Mqx_0e7ulcE6OTMUA9zUiExpMg6Kx7dwnkmW6q-Czlc7eGPGbVJmbII9nOC9Rk9PprpiqaCe7XIq6zn9uiiUwPhzGC9h5S1yV0XA
2021-06-15 17:56:08 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4
2021-06-15 17:56:08 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "PS256",
  "ES256"
]
alg
PS256
2021-06-15 17:56:08 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-06-15 17:56:08 INFO
FAPIValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-06-15 17:56:08 SUCCESS
ExtractSHash
Extracted s_hash from ID Token
s_hash
HaQvQ1FmsB5ALancYmntMg
alg
PS256
2021-06-15 17:56:08 SUCCESS
ValidateSHash
s_hash validated successfully
expected_hash
HaQvQ1FmsB5ALancYmntMg
unhashed_value
fh5XEBxgAT
id_token_hash
HaQvQ1FmsB5ALancYmntMg
2021-06-15 17:56:08 SUCCESS
ExtractCHash
Extracted c_hash from ID Token
c_hash
35PXHiVvc02Lk3_VELaLTA
alg
PS256
2021-06-15 17:56:08 SUCCESS
ValidateCHash
c_hash validated successfully
expected_hash
35PXHiVvc02Lk3_VELaLTA
unhashed_value
SmZggl-BWXx88JjZ8Ma7ZjQ_5BVu3UClbfvFqLyJ
id_token_hash
35PXHiVvc02Lk3_VELaLTA
2021-06-15 17:56:08 SUCCESS
CreateTokenEndpointRequestForAuthorizationCodeGrant
grant_type
authorization_code
code
SmZggl-BWXx88JjZ8Ma7ZjQ_5BVu3UClbfvFqLyJ
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
Swapping to Client2
2021-06-15 17:56:08 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
authorization_code
code
SmZggl-BWXx88JjZ8Ma7ZjQ_5BVu3UClbfvFqLyJ
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
client_id
c__fapi-jwt-jar2
2021-06-15 17:56:08 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
c__fapi-jwt-jar2
sub
c__fapi-jwt-jar2
aud
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
jti
F6lI1XDBdOPuVUBNGJOp
iat
1623779768
exp
1623779828
2021-06-15 17:56:08 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJmbXpKQmciLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJjX19mYXBpLWp3dC1qYXIyIiwiYXVkIjoiaHR0cHM6XC9cL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyXC9hc1wvdG9rZW4ub2F1dGgyIiwiaXNzIjoiY19fZmFwaS1qd3QtamFyMiIsImV4cCI6MTYyMzc3OTgyOCwiaWF0IjoxNjIzNzc5NzY4LCJqdGkiOiJGNmxJMVhEQmRPUHVWVUJOR0pPcCJ9.c0vRNDr_ank07mfjE0Cp1BtVm8b5E3Vi-ZJMBT9rW2GV_rRNPxHhWrLXmtLflxAuFwoNn92_tn6gtpYvMDyXtDocy162o0uOj35cBou16_oFupgKqLt7I-zJD2YX_6z_blYWtE4BzgRfpN_h7s8ZeEhvDjMju1NOJZoihM5hb9V12WsKCXSY-GyfKp3L3v6RZbt3SV79XHIxrQQhUAW4wF8CUm_oT7qQ3yUZkHM7T6iFTyKyHoPYyL_7EjPPbmbgH_iPx74v6XfC4jNRjJEvh6_dP4Kq4Qrs1QKdkSbvk8gVmLdTzZUdqkJP2CwqJFQkLJeq43B9Q7im7L9RdRalEw
2021-06-15 17:56:08
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
authorization_code
code
SmZggl-BWXx88JjZ8Ma7ZjQ_5BVu3UClbfvFqLyJ
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
client_id
c__fapi-jwt-jar2
client_assertion
eyJraWQiOiJmbXpKQmciLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJjX19mYXBpLWp3dC1qYXIyIiwiYXVkIjoiaHR0cHM6XC9cL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyXC9hc1wvdG9rZW4ub2F1dGgyIiwiaXNzIjoiY19fZmFwaS1qd3QtamFyMiIsImV4cCI6MTYyMzc3OTgyOCwiaWF0IjoxNjIzNzc5NzY4LCJqdGkiOiJGNmxJMVhEQmRPUHVWVUJOR0pPcCJ9.c0vRNDr_ank07mfjE0Cp1BtVm8b5E3Vi-ZJMBT9rW2GV_rRNPxHhWrLXmtLflxAuFwoNn92_tn6gtpYvMDyXtDocy162o0uOj35cBou16_oFupgKqLt7I-zJD2YX_6z_blYWtE4BzgRfpN_h7s8ZeEhvDjMju1NOJZoihM5hb9V12WsKCXSY-GyfKp3L3v6RZbt3SV79XHIxrQQhUAW4wF8CUm_oT7qQ3yUZkHM7T6iFTyKyHoPYyL_7EjPPbmbgH_iPx74v6XfC4jNRjJEvh6_dP4Kq4Qrs1QKdkSbvk8gVmLdTzZUdqkJP2CwqJFQkLJeq43B9Q7im7L9RdRalEw
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-06-15 17:56:08
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "930"
}
request_body
grant_type=authorization_code&code=SmZggl-BWXx88JjZ8Ma7ZjQ_5BVu3UClbfvFqLyJ&redirect_uri=https%3A%2F%2Fwww.certification.openid.net%2Ftest%2Fa%2Fpi%2Fcallback&client_id=c__fapi-jwt-jar2&client_assertion=eyJraWQiOiJmbXpKQmciLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJjX19mYXBpLWp3dC1qYXIyIiwiYXVkIjoiaHR0cHM6XC9cL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyXC9hc1wvdG9rZW4ub2F1dGgyIiwiaXNzIjoiY19fZmFwaS1qd3QtamFyMiIsImV4cCI6MTYyMzc3OTgyOCwiaWF0IjoxNjIzNzc5NzY4LCJqdGkiOiJGNmxJMVhEQmRPUHVWVUJOR0pPcCJ9.c0vRNDr_ank07mfjE0Cp1BtVm8b5E3Vi-ZJMBT9rW2GV_rRNPxHhWrLXmtLflxAuFwoNn92_tn6gtpYvMDyXtDocy162o0uOj35cBou16_oFupgKqLt7I-zJD2YX_6z_blYWtE4BzgRfpN_h7s8ZeEhvDjMju1NOJZoihM5hb9V12WsKCXSY-GyfKp3L3v6RZbt3SV79XHIxrQQhUAW4wF8CUm_oT7qQ3yUZkHM7T6iFTyKyHoPYyL_7EjPPbmbgH_iPx74v6XfC4jNRjJEvh6_dP4Kq4Qrs1QKdkSbvk8gVmLdTzZUdqkJP2CwqJFQkLJeq43B9Q7im7L9RdRalEw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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",
  "key": "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\u003d",
  "ca": "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\u003d\u003d"
}
2021-06-15 17:56:08 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "date": "Tue, 15 Jun 2021 17:56:08 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dWexwKQJru5sxmNNLTL5LlC;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"error_description":"Invalid JWT token","error":"invalid_client"}
2021-06-15 17:56:08 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error_description
Invalid JWT token
error
invalid_client
2021-06-15 17:56:08 SUCCESS
CheckTokenEndpointHttpStatusForInvalidRequestOrInvalidClientError
Token endpoint http status code was 400 for error 'invalid_client'
2021-06-15 17:56:08 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-06-15 17:56:08 SUCCESS
CheckErrorFromTokenEndpointResponseErrorInvalidClient
Token Endpoint response error returned expected 'error' of 'invalid_client'
error
invalid_client
2021-06-15 17:56:08 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
invalid_client
2021-06-15 17:56:08 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
Invalid JWT token
2021-06-15 17:56:08 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
Invalid JWT token
2021-06-15 17:56:08 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-06-15 17:56:08 FINISHED
fapi-rw-id2-ensure-client-id-in-token-endpoint
Test has run to completion
testmodule_result
PASSED
2021-06-15 17:56:10
TEST-RUNNER
Alias has now been claimed by another test
alias
pi
new_test_id
PBCvmFpfCXc2THs
Test Results