Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-10-01 08:08:50 INFO
TEST-RUNNER
Test instance rDyaZwBkuiFgasN created
baseUrl
https://www.certification.openid.net/test/a/idpy
variant
{
  "client_auth_type": "client_secret_basic",
  "response_type": "code id_token",
  "request_type": "plain_http_request",
  "response_mode": "form_post",
  "client_registration": "dynamic_client"
}
alias
idpy
description
oidcrp
planId
eX84TaVxc9bEQ
config
{
  "alias": "idpy",
  "description": "oidcrp",
  "server": {
    "discoveryUrl": "https://89.45.234.133:4000/.well-known/openid-configuration",
    "login_hint": "roland@89.45.234.133:4000"
  },
  "client2": {
    "client_name": "Anything"
  }
}
testName
oidcc-client-test-invalid-sig-rs256
2021-10-01 08:08:50 SUCCESS
OIDCCGenerateServerConfigurationIdTokenSigningAlgRS256Only
Generated default server configuration
server_configuration
{
  "issuer": "https://www.certification.openid.net/test/a/idpy/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/idpy/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/idpy/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/idpy/jwks",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/idpy/userinfo",
  "registration_endpoint": "https://www.certification.openid.net/test/a/idpy/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "gender",
    "birthdate",
    "preferred_username",
    "profile",
    "website",
    "locale",
    "updated_at",
    "address",
    "zoneinfo",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ]
}
2021-10-01 08:08:50
SetTokenEndpointAuthMethodsSupportedToClientSecretBasicOnly
Changed token_endpoint_auth_methods_supported to client_secret_basic only in server configuration
server_configuration
{
  "issuer": "https://www.certification.openid.net/test/a/idpy/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/idpy/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/idpy/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/idpy/jwks",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/idpy/userinfo",
  "registration_endpoint": "https://www.certification.openid.net/test/a/idpy/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "gender",
    "birthdate",
    "preferred_username",
    "profile",
    "website",
    "locale",
    "updated_at",
    "address",
    "zoneinfo",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ]
}
2021-10-01 08:08:50
OIDCCGenerateServerJWKs
Generated server public private JWK sets
server_jwks
{
  "keys": [
    {
      "p": "8h_Wgm0BLmgCQR9QSAZK0_H8U7knYl_1YgQxojvO_X4ZRseHfLyqzwyKzkBabeyok30NXfz5XNjndWbLmpYvZ7NsV2bowGlQYCYFTXA0kFOeGlynKbiPOJtU25X01IR6m0cy9nNKpkLuU1H2rllOKpEM1LTRIVq1gy4-w3bx32k",
      "kty": "RSA",
      "q": "uZYNCBhZzOWQZT5ptxbvWKRxVkLUDAKtiQ6sIIPytk_xtM9dI-_lqDxgriaVL9ZYv5pZe4MBnLtySzSxGOobNi0s_pXyP9ZL0t9FiDMn18MqaqIvT5xfHHpl4hjXtP1Rq3Z2YjlS24wCl3L268N07KoDgUPiofC6-xTKDIc0mr0",
      "d": "Z27P23jDpjezQaj4bNe5HciLN9qz-MFBJTIJJQn2NUSv5iMThY89slh5lCl-yw6k8SQhPiXutVD9CWcXJyUOlx7xIotUz7vwZ_tsee_SGUM6s1w-ogOumlnZDVz5dkzfGmPgHtfFwc3ZBVr7u8c-1dB3Wf19IQ_t9VIswVXzoRlkYNCNiU9YC_wJmSIDQpmvJKhlU1e6RON4F5MYVo4QpX7QslepSlMX7G4DJ0N7X_BpazI7HApdP-NC_7MDDW3ZxKbYZ2ZAhUutr6CHxwdTWKqwp7B3oamb7G3TYM4JeNfxkIsvwCHMH0VwOA6Y-1xTHkl9SF-vSG8W7JRJZCxyIQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "055790e3-ead8-42d5-a395-8fdb8891cda5",
      "qi": "CorFcn4RMKHOAN5Rdkiyyupsl4mMkPYHPMgigTehCw1RFHeJf-9KfICWRT-VsnqAWwRdp5J2SDSAtOxNVMrPaKlwvs5haemTPn_jTQniVmbDNq1QvMEn3-cBt-4D9DMwIiez7B_8l4P3bZf4QEOov-WMcQMvPqPY6PRIvcSOGEo",
      "dp": "QjZWsQAiLJCg3TI1AB1IZUFtoW-mx446Sn2fHSCB8GyFeQejk4b8pvZlFxYeJKVtTDgMacF-Z9ehJEfiMfoUKKW2YQhxafzi0AhVtuGSXk2flNH1nMEt2WsQ_6O4ek1oQgJse1z38xOmnP5zGSau65ETEzAHaLmnnaIN4-IpLtE",
      "dq": "p5fQtuG-nqEkz7kYIIYuqL7_tqVs9leovN-qI0bk9SymmuC0PNLUcyPrLvmaufN4e7b4XeiFmTNRWIcB8vzejAMp4dIpTOrJ2GlWUlPYBCmz8U37KYqN_ZquzQogKcqlaRD2gWdA4xDB-mCQiYId4eb6eU6DqDhLspgoij3DDIU",
      "n": "r4bs_zcc988dg5qyxBHHQPDR5h7Ss462S_K0axA-CoGMh9u85MReU3H7luL6giJTAVOFAovw4ZdmHsWi9XfXZ_Gu8Fozhs2JEH-EDJ-R99QrcxA76dJpKRUAvmu826tfO2GWPBHtrM4fj7UFg31twtZl-z78_M4mrlprDYjA0GXveNtALxfd5koDwTCmLcXDVjmMO3QvxDs8cXl_pj6teKxAQJFaeyD6DkzoVcV-e6F8o3Xs-H8Hx7pH9jrLnq8lCwwxzWkR-JcAjPCtlWhrqyThrsZ0QUIUIrNSbOXIG_RzLxl9IOVQBPoFkP8VIxnul92CbiwKkalTJvS6EUsahQ"
    },
    {
      "kty": "EC",
      "d": "8PtybGgJhkGlPCQ1axWZhiy_WdyBuq9Wk54efHzj6Hs",
      "use": "sig",
      "crv": "P-256",
      "kid": "da21920b-db50-4b93-b65e-ba67abf75d5c",
      "x": "GCWvN097m_ciwrlOLPgCHAbqysWnO4QRbzj4_qZlJx0",
      "y": "4qRvMBNDQ3wX1aDXWf66yAfW9VRzQcRdDdNpLcZB81c"
    },
    {
      "kty": "EC",
      "d": "7SNsMIbU5-7cuOEoHCvRZAGsgjsIb7T7tHTHSc_Yi1M",
      "use": "sig",
      "crv": "secp256k1",
      "kid": "eb1de445-7ed2-4558-aaba-4875b4941b22",
      "x": "1yH96bUWBwBvvygttkYJbJFFhK52HbO8xVq4zWBZmh4",
      "y": "mDnEQnnIrzxQJ2Kby1yUsHJTAMA8bYTzGytxQ5KaHdA"
    },
    {
      "kty": "OKP",
      "d": "P_jXkIKwfwGSnNinn7GiQb0g3CNu1NHKA0QXvQuXTf0",
      "use": "sig",
      "crv": "Ed25519",
      "kid": "5932bf2b-d773-4886-a732-966b795d15b6",
      "x": "4VvwTuaHwRN_sKmkGdemd5rprt8EYo9gYMD_ySQQADE"
    }
  ]
}
server_encryption_keys
{
  "keys": [
    {
      "p": "6nvLkeJ3EAI_N-PHBnLMYX_E1-7QsoZUD7uTUq2dL_rG7D0jo-RcJwMpPtJG1QzVJMmSWgg42w2406VkvLbF6l6BSfaBS-KtZQVKH_9aDv28cax1yjBnphPijKUco4oWNs6_CJig0I0wRiajgEqbRr3YbZa3KGmhpAAc2ng6MKs",
      "kty": "RSA",
      "q": "kahby6VN3oRtBpyeFNJf8504KC9RRJ-oNVCNyR_kqM_CIILq5OeRcFg66E8hl5zg2ROmMGWB3Y8fFTHOxEn89PH1kUzgJbRm9j_sHn3bUBn6hg-N6gTYEKXlbAGBe6jf6rezV9iASGOz651xusP3u2LMyKax5xMjyIZl1z6VINc",
      "d": "U_J8Xdi2iud0OE1pkYRrMc5H_3qe_51SuqgDPcu7bJkVxnxP_RO_EKjyFMSHWGTFdPBQ1_Zqh-Ql1kv1lfXvPNgJtz1D7InesefPmRdzD0I6hqe8xRr_hb9gJHq9ev7z-OWoNo1eQyPZ4GSTB1SeVBMI9Qlpb1TpKsu8e6xuwLNhonycDr8vWmFcid-zSA7A8xisH1BMcc20lvKS60oWGPzYqUc85hswPNPRL7tMXbMOgjJRSP9DEM0wWdyqlmm-OX73bfYkUVA4qTpE5SiTia2Xigi5-kbBYiThlENoRxPYVJ_gQ0Uc_O0y6OvZ3wdjd2aTRDkU5tBiFt8Cs40kTQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "d0cf514d-6294-4a98-b97b-204bffba9ddc",
      "qi": "E2AI6Lhdx9NacpFqWIe6SiSybk1Owr6QOShN2uTZu0ca87iXlNVLFKVc8BfyxzVuaHAm9RugwF1LswTvfRZZpqtnk2MzTFV6OK-wWSi1psQMVwsXfQtCr05fAaMnkqFkw9kJb34Hc9EB5zaeE2KZzCqFbTzBsaM_ufnEOzhhIME",
      "dp": "GWcn-roKJBXaO3fVzAEL21Q4QxyAR5b97GZp438jlFsayeUlw0-uHBvfkAq_2bz2KnIcBNz3K-QkrekxLLCwaF-sqhKml04LcvJLwYOsggtDKx1_9VOhJwDofkw0-hKvrWhgkdHXOkDRhggRloh-of9XPygg16P5-wZ4GcMEqtk",
      "alg": "RSA-OAEP",
      "dq": "OXM3KZ58lSyUOAxkCYBkmhjDwo3PNwrl9IleMxriPHcdcWdRsJFpeu9B5Mj5Texxfw1R-jq_Ox0tPFXV4PPx0sbwfavdqOF7ztqtjeVEMFbeyiuuZMQeWIqmb7A0WwrjrpdgJGDfUC4LE_6YkfqjZoR0kxu0hZi1_2yLFJe5iCc",
      "n": "hWpTn8Hyc6SWdLu3m53EzT8HXg-_GlSHznPENzIAMDPDx5HV4Yq05EgBU6T3Yf6IsuBbPBhgMF1avs7v86fNzordSVdlwR-5c2EPK_pW15Zs1P-q2ydrKUUwCv5hJDOelTauT1xWPrOhCy71xlmkQyEp1hX0WJDS30IhKNkljAQbVrtkh2xRskngqzgmJr92Z-kWJMciaaXFB5rNtH7B9WH7BvB1Jn2-V-vZB-VeHH_wkwiy036dkik17p4xBPW7e63yK5uD5oIbn1IhmxjIGlKo8KEKPRzfTPmQv4fFKTczILk3OLm_ej0cXh74Q53-TVS3dveSkBRzjfLG_Hs_nQ"
    },
    {
      "kty": "EC",
      "d": "QvMLZJpYdw8TGIkEVbVNSmJBGsxwv6xBfxpewOOH4AI",
      "use": "enc",
      "crv": "P-256",
      "kid": "03daa9e7-6c91-4629-8e5c-6aee1a4b8abf",
      "x": "U_e0Nqzcyk5p9gk4HMel_7Mbi9fYVHxaaGTOBSsaDTg",
      "y": "LjP4VVNWTBAoqyQtDOMoJQ78ZhWTFvBKpOnf2ftOOIQ",
      "alg": "ECDH-ES"
    }
  ]
}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "055790e3-ead8-42d5-a395-8fdb8891cda5",
      "n": "r4bs_zcc988dg5qyxBHHQPDR5h7Ss462S_K0axA-CoGMh9u85MReU3H7luL6giJTAVOFAovw4ZdmHsWi9XfXZ_Gu8Fozhs2JEH-EDJ-R99QrcxA76dJpKRUAvmu826tfO2GWPBHtrM4fj7UFg31twtZl-z78_M4mrlprDYjA0GXveNtALxfd5koDwTCmLcXDVjmMO3QvxDs8cXl_pj6teKxAQJFaeyD6DkzoVcV-e6F8o3Xs-H8Hx7pH9jrLnq8lCwwxzWkR-JcAjPCtlWhrqyThrsZ0QUIUIrNSbOXIG_RzLxl9IOVQBPoFkP8VIxnul92CbiwKkalTJvS6EUsahQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "263a9ec4-91ba-4b82-ba5b-69ec6eb7bc01",
      "n": "nfC_H0OEioLyblhUmHRPI01XkupmUll9AIlM7JWQbshzQ58mwKm5U0eFu9fbE_xkrGLFerRCB-oxsuPkFv7AnSE5H0vg2q8ubwjmAr4WogQQ9LfuuIseJZJL9MX9Ahui1ArI2vA8knjp-7ZG_y4Apnn6VzvOarxSG3oyZXBVQ74ynw1FYVeI0NFQpye6ptS1g3DDqtCWki1Cnq3stAh5Co-bk6mUkK-myP_Ey7YFfDjUkx0ewi1z7fwxRveuehtv2XfKNQ7YIM225qtieBrJQ7tSBuilChkoFijy6ZXAoByPzZNJsCFyI-NRzAxaNUhwtlT9HGetaZYKPR5bgHlwyQ"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "da21920b-db50-4b93-b65e-ba67abf75d5c",
      "x": "GCWvN097m_ciwrlOLPgCHAbqysWnO4QRbzj4_qZlJx0",
      "y": "4qRvMBNDQ3wX1aDXWf66yAfW9VRzQcRdDdNpLcZB81c"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "afb45481-7ec5-499d-821d-eec73002e522",
      "x": "WoIbGXC0w_JTSC6xQd9UmvQznZv1EjZXB3ISQ8r1Ew0",
      "y": "qWPfwBoxmGbdWJLyUICpUNkQrEbOM_Ao112GYCUjbH0"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "secp256k1",
      "kid": "eb1de445-7ed2-4558-aaba-4875b4941b22",
      "x": "1yH96bUWBwBvvygttkYJbJFFhK52HbO8xVq4zWBZmh4",
      "y": "mDnEQnnIrzxQJ2Kby1yUsHJTAMA8bYTzGytxQ5KaHdA"
    },
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "kid": "5932bf2b-d773-4886-a732-966b795d15b6",
      "x": "4VvwTuaHwRN_sKmkGdemd5rprt8EYo9gYMD_ySQQADE"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "d0cf514d-6294-4a98-b97b-204bffba9ddc",
      "alg": "RSA-OAEP",
      "n": "hWpTn8Hyc6SWdLu3m53EzT8HXg-_GlSHznPENzIAMDPDx5HV4Yq05EgBU6T3Yf6IsuBbPBhgMF1avs7v86fNzordSVdlwR-5c2EPK_pW15Zs1P-q2ydrKUUwCv5hJDOelTauT1xWPrOhCy71xlmkQyEp1hX0WJDS30IhKNkljAQbVrtkh2xRskngqzgmJr92Z-kWJMciaaXFB5rNtH7B9WH7BvB1Jn2-V-vZB-VeHH_wkwiy036dkik17p4xBPW7e63yK5uD5oIbn1IhmxjIGlKo8KEKPRzfTPmQv4fFKTczILk3OLm_ej0cXh74Q53-TVS3dveSkBRzjfLG_Hs_nQ"
    },
    {
      "kty": "EC",
      "use": "enc",
      "crv": "P-256",
      "kid": "03daa9e7-6c91-4629-8e5c-6aee1a4b8abf",
      "x": "U_e0Nqzcyk5p9gk4HMel_7Mbi9fYVHxaaGTOBSsaDTg",
      "y": "LjP4VVNWTBAoqyQtDOMoJQ78ZhWTFvBKpOnf2ftOOIQ",
      "alg": "ECDH-ES"
    }
  ]
}
2021-10-01 08:08:50 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-10-01 08:08:50 SUCCESS
CheckDistinctKeyIdValueInServerJWKs
Distinct 'kid' value in all keys of server_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-10-01 08:08:50 SUCCESS
OIDCCLoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "given_name": "Demo",
  "family_name": "User",
  "middle_name": "Theresa",
  "nickname": "Dee",
  "preferred_username": "d.tu",
  "gender": "female",
  "birthdate": "2000-02-03",
  "address": {
    "street_address": "100 Universal City Plaza",
    "locality": "Hollywood",
    "region": "CA",
    "postal_code": "91608",
    "country": "USA"
  },
  "zoneinfo": "America/Los_Angeles",
  "locale": "en-US",
  "phone_number": "+1 555 5550000",
  "phone_number_verified": false,
  "email": "user@example.com",
  "email_verified": false,
  "website": "https://openid.net/",
  "updated_at": 1580000000
}
2021-10-01 08:08:50
StoreOriginalClientConfiguration
No client details on configuration, created an empty original_client_config object.
2021-10-01 08:08:50
ExtractClientNameFromStoredConfig
Extracted client_name from stored client configuration.
client_name
2021-10-01 08:08:50
oidcc-client-test-invalid-sig-rs256
Setup Done
2021-10-01 08:09:26 INCOMING
oidcc-client-test-invalid-sig-rs256
Incoming HTTP request to test instance rDyaZwBkuiFgasN
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "python-requests/2.25.1",
  "accept-encoding": "gzip, deflate",
  "accept": "*/*",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
Discovery endpoint
2021-10-01 08:09:26 OUTGOING
oidcc-client-test-invalid-sig-rs256
Response to HTTP request to test instance rDyaZwBkuiFgasN
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/idpy/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/idpy/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/idpy/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/idpy/jwks",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/idpy/userinfo",
  "registration_endpoint": "https://www.certification.openid.net/test/a/idpy/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "gender",
    "birthdate",
    "preferred_username",
    "profile",
    "website",
    "locale",
    "updated_at",
    "address",
    "zoneinfo",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ]
}
outgoing_path
.well-known/openid-configuration
2021-10-01 08:09:27 INCOMING
oidcc-client-test-invalid-sig-rs256
Incoming HTTP request to test instance rDyaZwBkuiFgasN
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "python-requests/2.25.1",
  "accept-encoding": "gzip, deflate",
  "accept": "*/*",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
jwks
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
Jwks endpoint
2021-10-01 08:09:27 OUTGOING
oidcc-client-test-invalid-sig-rs256
Response to HTTP request to test instance rDyaZwBkuiFgasN
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "055790e3-ead8-42d5-a395-8fdb8891cda5",
      "n": "r4bs_zcc988dg5qyxBHHQPDR5h7Ss462S_K0axA-CoGMh9u85MReU3H7luL6giJTAVOFAovw4ZdmHsWi9XfXZ_Gu8Fozhs2JEH-EDJ-R99QrcxA76dJpKRUAvmu826tfO2GWPBHtrM4fj7UFg31twtZl-z78_M4mrlprDYjA0GXveNtALxfd5koDwTCmLcXDVjmMO3QvxDs8cXl_pj6teKxAQJFaeyD6DkzoVcV-e6F8o3Xs-H8Hx7pH9jrLnq8lCwwxzWkR-JcAjPCtlWhrqyThrsZ0QUIUIrNSbOXIG_RzLxl9IOVQBPoFkP8VIxnul92CbiwKkalTJvS6EUsahQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "263a9ec4-91ba-4b82-ba5b-69ec6eb7bc01",
      "n": "nfC_H0OEioLyblhUmHRPI01XkupmUll9AIlM7JWQbshzQ58mwKm5U0eFu9fbE_xkrGLFerRCB-oxsuPkFv7AnSE5H0vg2q8ubwjmAr4WogQQ9LfuuIseJZJL9MX9Ahui1ArI2vA8knjp-7ZG_y4Apnn6VzvOarxSG3oyZXBVQ74ynw1FYVeI0NFQpye6ptS1g3DDqtCWki1Cnq3stAh5Co-bk6mUkK-myP_Ey7YFfDjUkx0ewi1z7fwxRveuehtv2XfKNQ7YIM225qtieBrJQ7tSBuilChkoFijy6ZXAoByPzZNJsCFyI-NRzAxaNUhwtlT9HGetaZYKPR5bgHlwyQ"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "da21920b-db50-4b93-b65e-ba67abf75d5c",
      "x": "GCWvN097m_ciwrlOLPgCHAbqysWnO4QRbzj4_qZlJx0",
      "y": "4qRvMBNDQ3wX1aDXWf66yAfW9VRzQcRdDdNpLcZB81c"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "afb45481-7ec5-499d-821d-eec73002e522",
      "x": "WoIbGXC0w_JTSC6xQd9UmvQznZv1EjZXB3ISQ8r1Ew0",
      "y": "qWPfwBoxmGbdWJLyUICpUNkQrEbOM_Ao112GYCUjbH0"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "secp256k1",
      "kid": "eb1de445-7ed2-4558-aaba-4875b4941b22",
      "x": "1yH96bUWBwBvvygttkYJbJFFhK52HbO8xVq4zWBZmh4",
      "y": "mDnEQnnIrzxQJ2Kby1yUsHJTAMA8bYTzGytxQ5KaHdA"
    },
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "kid": "5932bf2b-d773-4886-a732-966b795d15b6",
      "x": "4VvwTuaHwRN_sKmkGdemd5rprt8EYo9gYMD_ySQQADE"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "d0cf514d-6294-4a98-b97b-204bffba9ddc",
      "alg": "RSA-OAEP",
      "n": "hWpTn8Hyc6SWdLu3m53EzT8HXg-_GlSHznPENzIAMDPDx5HV4Yq05EgBU6T3Yf6IsuBbPBhgMF1avs7v86fNzordSVdlwR-5c2EPK_pW15Zs1P-q2ydrKUUwCv5hJDOelTauT1xWPrOhCy71xlmkQyEp1hX0WJDS30IhKNkljAQbVrtkh2xRskngqzgmJr92Z-kWJMciaaXFB5rNtH7B9WH7BvB1Jn2-V-vZB-VeHH_wkwiy036dkik17p4xBPW7e63yK5uD5oIbn1IhmxjIGlKo8KEKPRzfTPmQv4fFKTczILk3OLm_ej0cXh74Q53-TVS3dveSkBRzjfLG_Hs_nQ"
    },
    {
      "kty": "EC",
      "use": "enc",
      "crv": "P-256",
      "kid": "03daa9e7-6c91-4629-8e5c-6aee1a4b8abf",
      "x": "U_e0Nqzcyk5p9gk4HMel_7Mbi9fYVHxaaGTOBSsaDTg",
      "y": "LjP4VVNWTBAoqyQtDOMoJQ78ZhWTFvBKpOnf2ftOOIQ",
      "alg": "ECDH-ES"
    }
  ]
}
outgoing_path
jwks
2021-10-01 08:09:27 INCOMING
oidcc-client-test-invalid-sig-rs256
Incoming HTTP request to test instance rDyaZwBkuiFgasN
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "python-requests/2.25.1",
  "accept-encoding": "gzip, deflate",
  "accept": "*/*",
  "content-type": "application/json",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "703",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
register
incoming_body_form_params
incoming_method
POST
incoming_body_json
{
  "application_type": "web",
  "response_types": [
    "code",
    "id_token"
  ],
  "contacts": [
    "ops@example.com"
  ],
  "token_endpoint_auth_method": "client_secret_basic",
  "redirect_uris": [
    "https://89.45.234.133:8090/authz_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_im_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/req_uri/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6"
  ],
  "jwks_uri": "https://89.45.234.133:8090/static/jwks.json",
  "grant_types": [
    "authorization_code",
    "implicit"
  ]
}
incoming_query_string_params
{}
incoming_body
{"application_type": "web", "response_types": ["code", "id_token"], "contacts": ["ops@example.com"], "token_endpoint_auth_method": "client_secret_basic", "redirect_uris": ["https://89.45.234.133:8090/authz_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6", "https://89.45.234.133:8090/authz_im_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6", "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6", "https://89.45.234.133:8090/req_uri/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6"], "jwks_uri": "https://89.45.234.133:8090/static/jwks.json", "grant_types": ["authorization_code", "implicit"]}
Registration endpoint
2021-10-01 08:09:27 SUCCESS
OIDCCExtractDynamicRegistrationRequest
Extracted dynamic client registration request
request
{
  "application_type": "web",
  "response_types": [
    "code",
    "id_token"
  ],
  "contacts": [
    "ops@example.com"
  ],
  "token_endpoint_auth_method": "client_secret_basic",
  "redirect_uris": [
    "https://89.45.234.133:8090/authz_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_im_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/req_uri/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6"
  ],
  "jwks_uri": "https://89.45.234.133:8090/static/jwks.json",
  "grant_types": [
    "authorization_code",
    "implicit"
  ]
}
2021-10-01 08:09:27 SUCCESS
EnsureRegistrationRequestContainsAtLeastOneContact
Registration request contains valid contacts
contacts
[
  "ops@example.com"
]
2021-10-01 08:09:27 SUCCESS
ValidateClientGrantTypes
grant_types match response_types
grant_types
[
  "authorization_code",
  "implicit"
]
response_types
[
  "code",
  "id_token"
]
2021-10-01 08:09:27 SUCCESS
OIDCCValidateClientRedirectUris
Valid redirect_uri(s) provided in registration request
redirect_uris
[
  "https://89.45.234.133:8090/authz_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
  "https://89.45.234.133:8090/authz_im_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
  "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
  "https://89.45.234.133:8090/req_uri/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6"
]
2021-10-01 08:09:27 SUCCESS
ValidateClientLogoUris
Client does not contain any logo_uri
2021-10-01 08:09:27 SUCCESS
ValidateClientUris
Client does not contain any client_uri
2021-10-01 08:09:27 SUCCESS
ValidateClientPolicyUris
Client does not contain any policy_uri
2021-10-01 08:09:27 SUCCESS
ValidateClientTosUris
Client does not contain any tos_uri
2021-10-01 08:09:27 SUCCESS
ValidateClientSubjectType
A subject_type was not provided
2021-10-01 08:09:27 INFO
ValidateIdTokenSignedResponseAlg
Skipped evaluation due to missing required element: client id_token_signed_response_alg
path
id_token_signed_response_alg
mapped
object
client
2021-10-01 08:09:27 SUCCESS
EnsureIdTokenEncryptedResponseAlgIsSetIfEncIsSet
id_token_encrypted_response_enc is not set
2021-10-01 08:09:27 INFO
ValidateUserinfoSignedResponseAlg
Skipped evaluation due to missing required element: client userinfo_signed_response_alg
path
userinfo_signed_response_alg
mapped
object
client
2021-10-01 08:09:27 SUCCESS
EnsureUserinfoEncryptedResponseAlgIsSetIfEncIsSet
userinfo_encrypted_response_enc is not set
2021-10-01 08:09:27 INFO
ValidateRequestObjectSigningAlg
Skipped evaluation due to missing required element: client request_object_signing_alg
path
request_object_signing_alg
mapped
object
client
2021-10-01 08:09:27 SUCCESS
EnsureRequestObjectEncryptionAlgIsSetIfEncIsSet
request_object_encryption_enc is not set
2021-10-01 08:09:27 INFO
ValidateTokenEndpointAuthSigningAlg
Skipped evaluation due to missing required element: client token_endpoint_auth_signing_alg
path
token_endpoint_auth_signing_alg
mapped
object
client
2021-10-01 08:09:27 SUCCESS
ValidateDefaultMaxAge
default_max_age is not set
2021-10-01 08:09:27 INFO
ValidateRequireAuthTime
Skipped evaluation due to missing required element: client require_auth_time
path
require_auth_time
mapped
object
client
2021-10-01 08:09:27 INFO
ValidateDefaultAcrValues
Skipped evaluation due to missing required element: client default_acr_values
path
default_acr_values
mapped
object
client
2021-10-01 08:09:27 INFO
ValidateInitiateLoginUri
Skipped evaluation due to missing required element: client initiate_login_uri
path
initiate_login_uri
mapped
object
client
2021-10-01 08:09:27 INFO
ValidateRequestUris
Skipped evaluation due to missing required element: client request_uris
path
request_uris
mapped
object
client
2021-10-01 08:09:27 SUCCESS
ValidateClientRegistrationRequestSectorIdentifierUri
A sector_identifier_uri was not provided
2021-10-01 08:09:27 SUCCESS
OIDCCRegisterClient
Registered client
client
{
  "application_type": "web",
  "response_types": [
    "code",
    "id_token"
  ],
  "contacts": [
    "ops@example.com"
  ],
  "token_endpoint_auth_method": "client_secret_basic",
  "redirect_uris": [
    "https://89.45.234.133:8090/authz_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_im_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/req_uri/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6"
  ],
  "jwks_uri": "https://89.45.234.133:8090/static/jwks.json",
  "grant_types": [
    "authorization_code",
    "implicit"
  ],
  "client_id": "client_qEzwmqVSBMfnlxQ53343\u0026{?\u003c{"
}
2021-10-01 08:09:27
OIDCCCreateClientSecretForDynamicClient
Set the secret for registered client
client_secret
secret_VgvLgyhUjVLLSRTDMfmMCaWCZUyzzxENYBEAnYZYHXzVuWEmKE0460182920;/ }+
2021-10-01 08:09:27 SUCCESS
EnsureTokenEndPointAuthMethodIsClientSecretBasic
token_endpoint_auth_method is 'client_secret_basic' as expected
2021-10-01 08:09:27
SetClientIdTokenSignedResponseAlgToRS256
Set id_token_signed_response_alg to RS256 for the registered client
client
{
  "application_type": "web",
  "response_types": [
    "code",
    "id_token"
  ],
  "contacts": [
    "ops@example.com"
  ],
  "token_endpoint_auth_method": "client_secret_basic",
  "redirect_uris": [
    "https://89.45.234.133:8090/authz_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_im_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/req_uri/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6"
  ],
  "jwks_uri": "https://89.45.234.133:8090/static/jwks.json",
  "grant_types": [
    "authorization_code",
    "implicit"
  ],
  "client_id": "client_qEzwmqVSBMfnlxQ53343\u0026{?\u003c{",
  "client_secret": "secret_VgvLgyhUjVLLSRTDMfmMCaWCZUyzzxENYBEAnYZYHXzVuWEmKE0460182920;/ }+",
  "id_token_signed_response_alg": "RS256"
}
2021-10-01 08:09:27 SUCCESS
EnsureClientDoesNotHaveBothJwksAndJwksUri
Client does not have both jwks and jwks_uri set
client
{
  "application_type": "web",
  "response_types": [
    "code",
    "id_token"
  ],
  "contacts": [
    "ops@example.com"
  ],
  "token_endpoint_auth_method": "client_secret_basic",
  "redirect_uris": [
    "https://89.45.234.133:8090/authz_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_im_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/req_uri/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6"
  ],
  "jwks_uri": "https://89.45.234.133:8090/static/jwks.json",
  "grant_types": [
    "authorization_code",
    "implicit"
  ],
  "client_id": "client_qEzwmqVSBMfnlxQ53343\u0026{?\u003c{",
  "client_secret": "secret_VgvLgyhUjVLLSRTDMfmMCaWCZUyzzxENYBEAnYZYHXzVuWEmKE0460182920;/ }+",
  "id_token_signed_response_alg": "RS256"
}
2021-10-01 08:09:27
FetchClientKeys
Fetching client keys
jwks_uri
https://89.45.234.133:8090/static/jwks.json
2021-10-01 08:09:27
FetchClientKeys
HTTP request
request_uri
https://89.45.234.133:8090/static/jwks.json
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-10-01 08:09:28 RESPONSE
FetchClientKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "691",
  "content-type": "application/json",
  "last-modified": "Fri, 01 Oct 2021 08:09:26 GMT",
  "cache-control": "public, max-age\u003d43200",
  "expires": "Fri, 01 Oct 2021 20:09:28 GMT",
  "etag": "\"1633075766.4168236-691-625874018\"",
  "date": "Fri, 01 Oct 2021 08:09:28 GMT",
  "server": "Werkzeug/1.0.1 Python/3.8.10"
}
response_body
{"keys": [{"kty": "RSA", "use": "sig", "kid": "ZnM1b012dmhUSjh5X05VOUhpN0pXZVlSSEVjQ2J5dEkyQXEwTWQ2UjdhRQ", "n": "tkih6m_RcAr9RozD7IrHS0KjdLHSjMYuT2uRdtbTEJx1jBV6sDADoP3IskBFlwKssFAfZmtjSLETX7JUyIBkhUfTU0OKdVVrfTslfbUw4_m4OyaJmB6POycCH-zk-we9GnP1rjvfPIaaWLVtNM6r2wC-MTWv4MEL1sp-G0nj63oC53hc83q0pxaJqaDr7fMSZCUswL209DnSSn5aF80teBDUS-wOjLvihFIKSDZf0r3t9ObxYsT4tPbq7hQQc2K9XlYADfr-cmBQtwXg9h1jI31s5p-xI1SWzABQm2ZdCovcGjl9GopHsqtCINU7LCK7noRgwxHPERcJwDOX06IRmw", "e": "AQAB"}, {"kty": "EC", "use": "sig", "kid": "S0p4OFlHMzdtNzFjZlpoWkpKNnVmMHM1RHAyVlFtbXlrUjRhdjVpNXBLWQ", "crv": "P-256", "x": "MEFzjCvTrLMkOcRgdLWYpK4b_xrKOn5XAKJvOhYqZTM", "y": "-T_OakJ08j_rRP4Imn1p3L4rG60cQk72Nh4HX_tDDd0"}]}
2021-10-01 08:09:28
FetchClientKeys
Found JWK set string
jwk_string
{"keys": [{"kty": "RSA", "use": "sig", "kid": "ZnM1b012dmhUSjh5X05VOUhpN0pXZVlSSEVjQ2J5dEkyQXEwTWQ2UjdhRQ", "n": "tkih6m_RcAr9RozD7IrHS0KjdLHSjMYuT2uRdtbTEJx1jBV6sDADoP3IskBFlwKssFAfZmtjSLETX7JUyIBkhUfTU0OKdVVrfTslfbUw4_m4OyaJmB6POycCH-zk-we9GnP1rjvfPIaaWLVtNM6r2wC-MTWv4MEL1sp-G0nj63oC53hc83q0pxaJqaDr7fMSZCUswL209DnSSn5aF80teBDUS-wOjLvihFIKSDZf0r3t9ObxYsT4tPbq7hQQc2K9XlYADfr-cmBQtwXg9h1jI31s5p-xI1SWzABQm2ZdCovcGjl9GopHsqtCINU7LCK7noRgwxHPERcJwDOX06IRmw", "e": "AQAB"}, {"kty": "EC", "use": "sig", "kid": "S0p4OFlHMzdtNzFjZlpoWkpKNnVmMHM1RHAyVlFtbXlrUjRhdjVpNXBLWQ", "crv": "P-256", "x": "MEFzjCvTrLMkOcRgdLWYpK4b_xrKOn5XAKJvOhYqZTM", "y": "-T_OakJ08j_rRP4Imn1p3L4rG60cQk72Nh4HX_tDDd0"}]}
2021-10-01 08:09:28 SUCCESS
FetchClientKeys
Downloaded and added client JWK set to client
client
{
  "application_type": "web",
  "response_types": [
    "code",
    "id_token"
  ],
  "contacts": [
    "ops@example.com"
  ],
  "token_endpoint_auth_method": "client_secret_basic",
  "redirect_uris": [
    "https://89.45.234.133:8090/authz_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_im_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/req_uri/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6"
  ],
  "jwks_uri": "https://89.45.234.133:8090/static/jwks.json",
  "grant_types": [
    "authorization_code",
    "implicit"
  ],
  "client_id": "client_qEzwmqVSBMfnlxQ53343\u0026{?\u003c{",
  "client_secret": "secret_VgvLgyhUjVLLSRTDMfmMCaWCZUyzzxENYBEAnYZYHXzVuWEmKE0460182920;/ }+",
  "id_token_signed_response_alg": "RS256",
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "use": "sig",
        "kid": "ZnM1b012dmhUSjh5X05VOUhpN0pXZVlSSEVjQ2J5dEkyQXEwTWQ2UjdhRQ",
        "n": "tkih6m_RcAr9RozD7IrHS0KjdLHSjMYuT2uRdtbTEJx1jBV6sDADoP3IskBFlwKssFAfZmtjSLETX7JUyIBkhUfTU0OKdVVrfTslfbUw4_m4OyaJmB6POycCH-zk-we9GnP1rjvfPIaaWLVtNM6r2wC-MTWv4MEL1sp-G0nj63oC53hc83q0pxaJqaDr7fMSZCUswL209DnSSn5aF80teBDUS-wOjLvihFIKSDZf0r3t9ObxYsT4tPbq7hQQc2K9XlYADfr-cmBQtwXg9h1jI31s5p-xI1SWzABQm2ZdCovcGjl9GopHsqtCINU7LCK7noRgwxHPERcJwDOX06IRmw",
        "e": "AQAB"
      },
      {
        "kty": "EC",
        "use": "sig",
        "kid": "S0p4OFlHMzdtNzFjZlpoWkpKNnVmMHM1RHAyVlFtbXlrUjRhdjVpNXBLWQ",
        "crv": "P-256",
        "x": "MEFzjCvTrLMkOcRgdLWYpK4b_xrKOn5XAKJvOhYqZTM",
        "y": "-T_OakJ08j_rRP4Imn1p3L4rG60cQk72Nh4HX_tDDd0"
      }
    ]
  }
}
2021-10-01 08:09:28
SetServerSigningAlgToRS256
Successfully set signing algorithm to RS256
2021-10-01 08:09:28
SetClientIdTokenSignedResponseAlgToServerSigningAlg
Set id_token_signed_response_alg for the registered client
id_token_signed_response_alg
RS256
2021-10-01 08:09:28 OUTGOING
oidcc-client-test-invalid-sig-rs256
Response to HTTP request to test instance rDyaZwBkuiFgasN
outgoing_status_code
201
outgoing_headers
{}
outgoing_body
{
  "application_type": "web",
  "response_types": [
    "code",
    "id_token"
  ],
  "contacts": [
    "ops@example.com"
  ],
  "token_endpoint_auth_method": "client_secret_basic",
  "redirect_uris": [
    "https://89.45.234.133:8090/authz_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_im_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
    "https://89.45.234.133:8090/req_uri/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6"
  ],
  "jwks_uri": "https://89.45.234.133:8090/static/jwks.json",
  "grant_types": [
    "authorization_code",
    "implicit"
  ],
  "client_id": "client_qEzwmqVSBMfnlxQ53343\u0026{?\u003c{",
  "client_secret": "secret_VgvLgyhUjVLLSRTDMfmMCaWCZUyzzxENYBEAnYZYHXzVuWEmKE0460182920;/ }+",
  "id_token_signed_response_alg": "RS256",
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "use": "sig",
        "kid": "ZnM1b012dmhUSjh5X05VOUhpN0pXZVlSSEVjQ2J5dEkyQXEwTWQ2UjdhRQ",
        "n": "tkih6m_RcAr9RozD7IrHS0KjdLHSjMYuT2uRdtbTEJx1jBV6sDADoP3IskBFlwKssFAfZmtjSLETX7JUyIBkhUfTU0OKdVVrfTslfbUw4_m4OyaJmB6POycCH-zk-we9GnP1rjvfPIaaWLVtNM6r2wC-MTWv4MEL1sp-G0nj63oC53hc83q0pxaJqaDr7fMSZCUswL209DnSSn5aF80teBDUS-wOjLvihFIKSDZf0r3t9ObxYsT4tPbq7hQQc2K9XlYADfr-cmBQtwXg9h1jI31s5p-xI1SWzABQm2ZdCovcGjl9GopHsqtCINU7LCK7noRgwxHPERcJwDOX06IRmw",
        "e": "AQAB"
      },
      {
        "kty": "EC",
        "use": "sig",
        "kid": "S0p4OFlHMzdtNzFjZlpoWkpKNnVmMHM1RHAyVlFtbXlrUjRhdjVpNXBLWQ",
        "crv": "P-256",
        "x": "MEFzjCvTrLMkOcRgdLWYpK4b_xrKOn5XAKJvOhYqZTM",
        "y": "-T_OakJ08j_rRP4Imn1p3L4rG60cQk72Nh4HX_tDDd0"
      }
    ]
  }
}
outgoing_path
register
2021-10-01 08:09:28 INCOMING
oidcc-client-test-invalid-sig-rs256
Incoming HTTP request to test instance rDyaZwBkuiFgasN
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,*/*;q\u003d0.8",
  "cookie": "JSESSIONID\u003dC72C28B7C54F724771359E5F9D552F52; __utma\u003d201319536.1325286560.1632909994.1632989957.1631776378.4; __utmc\u003d201319536; __utmz\u003d201319536.1632985063.2.2.utmcsr\u003dt.co|utmccn\u003d(referral)|utmcmd\u003dreferral|utmcct\u003d/",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15",
  "accept-language": "en-us",
  "referer": "https://89.45.234.133:8090/authz_fp_cb/d86a8f853696931daeae59184f61f9f8bf66f4e31f4a7ff3c74b3f31fd283b57",
  "accept-encoding": "gzip, deflate, br",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
authorize
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{
  "redirect_uri": "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
  "scope": "openid profile email address phone",
  "response_type": "code id_token",
  "nonce": "Ucwn389QidhmdQYhEKFMdxhA",
  "response_mode": "form_post",
  "state": "nzezIJXVZo1Svf1S2RbyNmFeOT1xkJss",
  "client_id": "client_qEzwmqVSBMfnlxQ53343\u0026{?\u003c{"
}
incoming_body
Authorization endpoint
2021-10-01 08:09:28 SUCCESS
EnsureRequestDoesNotContainRequestObject
Request does not contain a request parameter
2021-10-01 08:09:28 SUCCESS
EnsureAuthorizationHttpRequestContainsOpenIDScope
Found 'openid' in scope http request parameter
actual
[
  "openid",
  "profile",
  "email",
  "address",
  "phone"
]
expected
openid
2021-10-01 08:09:28 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "redirect_uri": "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
  "scope": "openid profile email address phone",
  "response_type": "code id_token",
  "nonce": "Ucwn389QidhmdQYhEKFMdxhA",
  "response_mode": "form_post",
  "state": "nzezIJXVZo1Svf1S2RbyNmFeOT1xkJss",
  "client_id": "client_qEzwmqVSBMfnlxQ53343\u0026{?\u003c{"
}
2021-10-01 08:09:28 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid profile email address phone
2021-10-01 08:09:28 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
Ucwn389QidhmdQYhEKFMdxhA
2021-10-01 08:09:28 SUCCESS
EnsureResponseTypeIsCodeIdToken
Response type is expected value
expected
code id_token
2021-10-01 08:09:28 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
client_qEzwmqVSBMfnlxQ53343&{?<{
2021-10-01 08:09:28 SUCCESS
EnsureValidRedirectUriForAuthorizationEndpointRequest
redirect_uri is one of the allowed redirect uris
actual
https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6
expected
[
  "https://89.45.234.133:8090/authz_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
  "https://89.45.234.133:8090/authz_im_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
  "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
  "https://89.45.234.133:8090/req_uri/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6"
]
2021-10-01 08:09:28 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid",
  "profile",
  "email",
  "address",
  "phone"
]
expected
openid
2021-10-01 08:09:28 SUCCESS
DisallowMaxAgeEqualsZeroAndPromptNone
The client did not send max_age=0 and prompt=none parameters as expected
2021-10-01 08:09:28 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
KKEJHMBLmdzCkP7MxRW9e5mmLCTDvarJ
2021-10-01 08:09:28 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash
7JIXC7hysvUdRLteIvRYzQ
2021-10-01 08:09:28 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/idpy/
sub
user-subject-1234531
aud
client_qEzwmqVSBMfnlxQ53343&{?<{
nonce
Ucwn389QidhmdQYhEKFMdxhA
iat
1633075768
exp
1633076068
2021-10-01 08:09:28 SUCCESS
AddCHashToIdTokenClaims
Added c_hash to ID token claims
c_hash
7JIXC7hysvUdRLteIvRYzQ
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/idpy/",
  "sub": "user-subject-1234531",
  "aud": "client_qEzwmqVSBMfnlxQ53343\u0026{?\u003c{",
  "nonce": "Ucwn389QidhmdQYhEKFMdxhA",
  "iat": 1633075768,
  "exp": 1633076068,
  "c_hash": "7JIXC7hysvUdRLteIvRYzQ"
}
2021-10-01 08:09:28 INFO
AddAtHashToIdTokenClaims
Skipped evaluation due to missing required string: at_hash
expected
at_hash
2021-10-01 08:09:28 SUCCESS
OIDCCSignIdToken
Signed the ID token
id_token
eyJraWQiOiIwNTU3OTBlMy1lYWQ4LTQyZDUtYTM5NS04ZmRiODg5MWNkYTUiLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImNsaWVudF9xRXp3bXFWU0JNZm5seFE1MzM0MyZ7Pzx7IiwiY19oYXNoIjoiN0pJWEM3aHlzdlVkUkx0ZUl2Ull6USIsImlzcyI6Imh0dHBzOlwvXC93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0XC90ZXN0XC9hXC9pZHB5XC8iLCJleHAiOjE2MzMwNzYwNjgsIm5vbmNlIjoiVWN3bjM4OVFpZGhtZFFZaEVLRk1keGhBIiwiaWF0IjoxNjMzMDc1NzY4fQ.i0PG-tx0iUtfzrB18WeRDrd4HT46MJ8zk8wmBI9sBrz--Akzt3BTsfKs_rZLiag6mJjbDo-qXj8Wdjp4KtD-lwdtFHYZy65AC50AY8j_2rTZ69pEsZf1OKHSo6_jhwekkqlJhRgZydW29ZJF8VW30tJVCYiZlbQ8-uqmPGd5IXggXMrVnx5ltQxCMGki-7IfGcMLojrNwqthuRip_1OESSx8Fc3h2h9U88uA0_EG5jB8HdLxBR7ETxmeafVKOmxXz57PzyNAvvJhqN0VhLEYphy5slE2goKM0sy4T5MXON6-in4qhd4qxzM4TqIiQEKLLXb_5VamQAdLET-6wZqKJw
key
{"p":"8h_Wgm0BLmgCQR9QSAZK0_H8U7knYl_1YgQxojvO_X4ZRseHfLyqzwyKzkBabeyok30NXfz5XNjndWbLmpYvZ7NsV2bowGlQYCYFTXA0kFOeGlynKbiPOJtU25X01IR6m0cy9nNKpkLuU1H2rllOKpEM1LTRIVq1gy4-w3bx32k","kty":"RSA","q":"uZYNCBhZzOWQZT5ptxbvWKRxVkLUDAKtiQ6sIIPytk_xtM9dI-_lqDxgriaVL9ZYv5pZe4MBnLtySzSxGOobNi0s_pXyP9ZL0t9FiDMn18MqaqIvT5xfHHpl4hjXtP1Rq3Z2YjlS24wCl3L268N07KoDgUPiofC6-xTKDIc0mr0","d":"Z27P23jDpjezQaj4bNe5HciLN9qz-MFBJTIJJQn2NUSv5iMThY89slh5lCl-yw6k8SQhPiXutVD9CWcXJyUOlx7xIotUz7vwZ_tsee_SGUM6s1w-ogOumlnZDVz5dkzfGmPgHtfFwc3ZBVr7u8c-1dB3Wf19IQ_t9VIswVXzoRlkYNCNiU9YC_wJmSIDQpmvJKhlU1e6RON4F5MYVo4QpX7QslepSlMX7G4DJ0N7X_BpazI7HApdP-NC_7MDDW3ZxKbYZ2ZAhUutr6CHxwdTWKqwp7B3oamb7G3TYM4JeNfxkIsvwCHMH0VwOA6Y-1xTHkl9SF-vSG8W7JRJZCxyIQ","e":"AQAB","use":"sig","kid":"055790e3-ead8-42d5-a395-8fdb8891cda5","qi":"CorFcn4RMKHOAN5Rdkiyyupsl4mMkPYHPMgigTehCw1RFHeJf-9KfICWRT-VsnqAWwRdp5J2SDSAtOxNVMrPaKlwvs5haemTPn_jTQniVmbDNq1QvMEn3-cBt-4D9DMwIiez7B_8l4P3bZf4QEOov-WMcQMvPqPY6PRIvcSOGEo","dp":"QjZWsQAiLJCg3TI1AB1IZUFtoW-mx446Sn2fHSCB8GyFeQejk4b8pvZlFxYeJKVtTDgMacF-Z9ehJEfiMfoUKKW2YQhxafzi0AhVtuGSXk2flNH1nMEt2WsQ_6O4ek1oQgJse1z38xOmnP5zGSau65ETEzAHaLmnnaIN4-IpLtE","dq":"p5fQtuG-nqEkz7kYIIYuqL7_tqVs9leovN-qI0bk9SymmuC0PNLUcyPrLvmaufN4e7b4XeiFmTNRWIcB8vzejAMp4dIpTOrJ2GlWUlPYBCmz8U37KYqN_ZquzQogKcqlaRD2gWdA4xDB-mCQiYId4eb6eU6DqDhLspgoij3DDIU","n":"r4bs_zcc988dg5qyxBHHQPDR5h7Ss462S_K0axA-CoGMh9u85MReU3H7luL6giJTAVOFAovw4ZdmHsWi9XfXZ_Gu8Fozhs2JEH-EDJ-R99QrcxA76dJpKRUAvmu826tfO2GWPBHtrM4fj7UFg31twtZl-z78_M4mrlprDYjA0GXveNtALxfd5koDwTCmLcXDVjmMO3QvxDs8cXl_pj6teKxAQJFaeyD6DkzoVcV-e6F8o3Xs-H8Hx7pH9jrLnq8lCwwxzWkR-JcAjPCtlWhrqyThrsZ0QUIUIrNSbOXIG_RzLxl9IOVQBPoFkP8VIxnul92CbiwKkalTJvS6EUsahQ"}
algorithm
RS256
2021-10-01 08:09:28
InvalidateIdTokenSignature
Made the id_token signature invalid
id_token
eyJraWQiOiIwNTU3OTBlMy1lYWQ4LTQyZDUtYTM5NS04ZmRiODg5MWNkYTUiLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImNsaWVudF9xRXp3bXFWU0JNZm5seFE1MzM0MyZ7Pzx7IiwiY19oYXNoIjoiN0pJWEM3aHlzdlVkUkx0ZUl2Ull6USIsImlzcyI6Imh0dHBzOlwvXC93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0XC90ZXN0XC9hXC9pZHB5XC8iLCJleHAiOjE2MzMwNzYwNjgsIm5vbmNlIjoiVWN3bjM4OVFpZGhtZFFZaEVLRk1keGhBIiwiaWF0IjoxNjMzMDc1NzY4fQ.0RmcoIYu0xEFlOovqz3LVO0iR2RgasVpyZZ8XtU2XOakolNp7SoJ66j2pOwR0_JgwsKBVNXwBGVMLGAicIqkzV03TixDkfQaUcdaOZKlgO6DsYAe682vYvuI-fW53V3-yPMT30JDk4_sr8gfqw_tiIgPU9LDz-5moLD8Zj0jeyJ6BpCPxUQ_71YYajN4oehFQ5lR-GCXmPE740LzpQneE3YmT5e7gEUOqZHaiatcvGomR4irX0SeFUPEM68QYDYNlcSVlXka5Kg78odP3utC_Ebj6Ats2NjWiJbiFclNYoTk0CRw34RwnWliFPh4GhjRdyylvwz8Gl0RS2Xgm8DQfQ
2021-10-01 08:09:28 INFO
EncryptIdToken
Skipped evaluation due to missing required element: client id_token_encrypted_response_alg
path
id_token_encrypted_response_alg
mapped
object
client
2021-10-01 08:09:28 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
  "state": "nzezIJXVZo1Svf1S2RbyNmFeOT1xkJss"
}
2021-10-01 08:09:28 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
  "state": "nzezIJXVZo1Svf1S2RbyNmFeOT1xkJss",
  "code": "KKEJHMBLmdzCkP7MxRW9e5mmLCTDvarJ"
}
2021-10-01 08:09:28 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6",
  "state": "nzezIJXVZo1Svf1S2RbyNmFeOT1xkJss",
  "code": "KKEJHMBLmdzCkP7MxRW9e5mmLCTDvarJ",
  "id_token": "eyJraWQiOiIwNTU3OTBlMy1lYWQ4LTQyZDUtYTM5NS04ZmRiODg5MWNkYTUiLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImNsaWVudF9xRXp3bXFWU0JNZm5seFE1MzM0MyZ7Pzx7IiwiY19oYXNoIjoiN0pJWEM3aHlzdlVkUkx0ZUl2Ull6USIsImlzcyI6Imh0dHBzOlwvXC93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0XC90ZXN0XC9hXC9pZHB5XC8iLCJleHAiOjE2MzMwNzYwNjgsIm5vbmNlIjoiVWN3bjM4OVFpZGhtZFFZaEVLRk1keGhBIiwiaWF0IjoxNjMzMDc1NzY4fQ.0RmcoIYu0xEFlOovqz3LVO0iR2RgasVpyZZ8XtU2XOakolNp7SoJ66j2pOwR0_JgwsKBVNXwBGVMLGAicIqkzV03TixDkfQaUcdaOZKlgO6DsYAe682vYvuI-fW53V3-yPMT30JDk4_sr8gfqw_tiIgPU9LDz-5moLD8Zj0jeyJ6BpCPxUQ_71YYajN4oehFQ5lR-GCXmPE740LzpQneE3YmT5e7gEUOqZHaiatcvGomR4irX0SeFUPEM68QYDYNlcSVlXka5Kg78odP3utC_Ebj6Ats2NjWiJbiFclNYoTk0CRw34RwnWliFPh4GhjRdyylvwz8Gl0RS2Xgm8DQfQ"
}
2021-10-01 08:09:28 OUTGOING
oidcc-client-test-invalid-sig-rs256
Response to HTTP request to test instance rDyaZwBkuiFgasN
outgoing
ModelAndView [view="formPostResponseMode"; model={formAction=https://89.45.234.133:8090/authz_fp_cb/c650d21f34aba2789f4e6d3dce94cc865cab12110dd3280ea27b6e7ba890ebb6, formParameters={"state":"nzezIJXVZo1Svf1S2RbyNmFeOT1xkJss","code":"KKEJHMBLmdzCkP7MxRW9e5mmLCTDvarJ","id_token":"eyJraWQiOiIwNTU3OTBlMy1lYWQ4LTQyZDUtYTM5NS04ZmRiODg5MWNkYTUiLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImNsaWVudF9xRXp3bXFWU0JNZm5seFE1MzM0MyZ7Pzx7IiwiY19oYXNoIjoiN0pJWEM3aHlzdlVkUkx0ZUl2Ull6USIsImlzcyI6Imh0dHBzOlwvXC93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0XC90ZXN0XC9hXC9pZHB5XC8iLCJleHAiOjE2MzMwNzYwNjgsIm5vbmNlIjoiVWN3bjM4OVFpZGhtZFFZaEVLRk1keGhBIiwiaWF0IjoxNjMzMDc1NzY4fQ.0RmcoIYu0xEFlOovqz3LVO0iR2RgasVpyZZ8XtU2XOakolNp7SoJ66j2pOwR0_JgwsKBVNXwBGVMLGAicIqkzV03TixDkfQaUcdaOZKlgO6DsYAe682vYvuI-fW53V3-yPMT30JDk4_sr8gfqw_tiIgPU9LDz-5moLD8Zj0jeyJ6BpCPxUQ_71YYajN4oehFQ5lR-GCXmPE740LzpQneE3YmT5e7gEUOqZHaiatcvGomR4irX0SeFUPEM68QYDYNlcSVlXka5Kg78odP3utC_Ebj6Ats2NjWiJbiFclNYoTk0CRw34RwnWliFPh4GhjRdyylvwz8Gl0RS2Xgm8DQfQ"}}]
outgoing_path
authorize
2021-10-01 08:09:33 FINISHED
oidcc-client-test-invalid-sig-rs256
Test has run to completion
testmodule_result
PASSED
2021-10-01 08:09:37
TEST-RUNNER
Alias has now been claimed by another test
alias
idpy
new_test_id
fXqBQ8TRSyvghsz
Test Results