Test info

Profile: {'openid-configuration': 'config', 'response_type': 'code', 'crypto': 'sign', 'registration': 'static'}
Timestamp: 2016-10-13T15:51:46Z
Test description: Trying to use authorization code twice with 30 seconds in between uses must result in an error [Basic, Hybrid]
Test ID: OP-OAuth-2nd-30s
Issuer: https://login-int.norton.com/sso/oidc1/token

Test output


__AuthorizationRequest:pre__
[check-response-type]
	status: OK
	description: Checks that the asked for response type are among the supported
[check-endpoint]
	status: OK
	description: Checks that the necessary endpoint exists at a server
__After completing the test flow:__
[verify-response]
	status: OK
	description: Checks that the last response was one of a possible set of OpenID Connect Responses
__X:==== END ====__

Trace output


2.107714 ------------ DiscoveryRequest ------------
2.107733 Provider info discover from 'https://login-int.norton.com/sso/oidc1/token'
2.107740 --> URL: https://login-int.norton.com/sso/oidc1/token/.well-known/openid-configuration
2.455226 ProviderConfigurationResponse: {
  "authorization_endpoint": "https://login-int.norton.com/sso/idp/OIDC",
  "claim_types_supported": [
    "normal",
    "aggregated"
  ],
  "claims_parameter_supported": false,
  "claims_supported": [
    "birthdate",
    "email_verified",
    "address",
    "gender",
    "given_name",
    "middle_name",
    "locale",
    "IdPData",
    "SSN",
    "LinkChildGUIDS",
    "CustomAttributes",
    "NortonGUID",
    "updated_at",
    "UserId",
    "name",
    "phone_number",
    "PartnerUserId",
    "family_name",
    "email",
    "VipTokenId"
  ],
  "display_values_supported": [
    "page"
  ],
  "grant_types_supported": [
    "authorization_code",
    "refresh_token",
    "symc_fed_idp_authorization_code",
    "symc_fed_idp_access_token"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512"
  ],
  "issuer": "https://login-int.norton.com/sso/oidc1/token",
  "jwks_uri": "https://login-int.norton.com/sso/oidc1/token/jwks",
  "request_parameter_supported": false,
  "request_uri_parameter_supported": false,
  "require_request_uri_registration": false,
  "response_modes_supported": [
    "query"
  ],
  "response_types_supported": [
    "code"
  ],
  "scopes_supported": [
    "idsc_write",
    "address",
    "phone",
    "openid",
    "profile",
    "nms_device_locate",
    "idsc_read",
    "nms_device_lock",
    "email"
  ],
  "subject_types_supported": [
    "pairwise"
  ],
  "token_endpoint": "https://login-int.norton.com/sso/oidc1/tokens",
  "token_endpoint_auth_methods_supported": [
    "client_secret_post",
    "client_secret_basic"
  ],
  "userinfo_endpoint": "https://login-int.norton.com/sso/oidc1/userinfo",
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512"
  ],
  "version": "3.0"
}
2.740393 JWKS: {
  "keys": [
    {
      "alg": "RS256",
      "e": "AQAB",
      "kid": "02d6d7a957e734b7a4bd23dcfe595245a4d251765e802b4978821002a51620a3",
      "kty": "RSA",
      "n": "gbJV5FqqKDWQSx5Jt9_-EYpwYZc-qcTxsdYLI-Y3qTj4fXHtxBWa9-Q_yf2AiJXOhCtly18DMvS3TmeBUDVad2pdowYyTCpwXlYdsYzcFybQSpQ3objr7yRFCIfKl9BM8dliLLsJxt_sjj7fvA9jl21QUtXjL1-Rbls9lI0Z-SnY43AjITAXwg3yPdJxDrwLQa7mQjrIsYtiQc_NmBnAtfJD5FMz4GmoTS_PN5giFp5pHYM9PFrETIAHrC3Wx1IxDwTI3SGiypMtyObaKnNuMFu1W6XeZuBTyTKKE4rIiV9YwlOGa2O1Cg-kCzmJyFjnf-BYp3-sQhUtnxgz4j0Q0w",
      "use": "sig"
    }
  ]
}
2.753226 ------------ AuthorizationRequest ------------
2.753692 --> URL: https://login-int.norton.com/sso/idp/OIDC?scope=openid&state=pwKwsqmBuszdEYar&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60671%2Fauthz_cb&response_type=code&client_id=oidc-conformance-client-id
2.753700 --> BODY: None
3.090068 <-- code=AC-0gcNDrNvlaEIPLsV0qRu6Ggmv2F2jn8-AG96w38AirQ-157bebd8a29-int&state=pwKwsqmBuszdEYar
3.090488 AuthorizationResponse: {
  "code": "AC-0gcNDrNvlaEIPLsV0qRu6Ggmv2F2jn8-AG96w38AirQ-157bebd8a29-int",
  "state": "pwKwsqmBuszdEYar"
}
3.090891 ------------ AccessTokenRequest ------------
3.091273 --> URL: https://login-int.norton.com/sso/oidc1/tokens
3.091280 --> BODY: code=AC-0gcNDrNvlaEIPLsV0qRu6Ggmv2F2jn8-AG96w38AirQ-157bebd8a29-int&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60671%2Fauthz_cb
3.091293 --> HEADERS: {'Content-Type': 'application/x-www-form-urlencoded', 'Authorization': u'Basic b2lkYy1jb25mb3JtYW5jZS1jbGllbnQtaWQ6b2lkYy1jb25mb3JtYW5jZS1jbGllbnQtc2VjcmV0'}
3.516521 <-- STATUS: 200
3.516594 <-- BODY: {"access_token":"eyJraWQiOiIwMmQ2ZDdhOTU3ZTczNGI3YTRiZDIzZGNmZTU5NTI0NWE0ZDI1MTc2NWU4MDJiNDk3ODgyMTAwMmE1MTYyMGEzIiwiYWxnIjoiUlMyNTYifQ.eyJzdWIiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJuYmYiOjE0NzYzNzM4NzUsIk5vcnRvbkdVSUQiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJhenAiOiJvaWRjLWNvbmZvcm1hbmNlLWNsaWVudC1pZCIsImF1dGhfdGltZSI6MTQ3NjM3MzcyMSwic2NvcGUiOiIiLCJpc3MiOiJodHRwczpcL1wvbG9naW4taW50Lm5vcnRvbi5jb21cL3Nzb1wvb2lkYzFcL3Rva2VuIiwiZXhwIjoxNDc2Mzc1Njc1LCJpYXQiOjE0NzYzNzM4NzUsImp0aSI6Ijc3MGU0NTdkLTUwNjktNDg5NC1hMzAyLTk5N2NiNzYzOTZlNSJ9.XMhLzj4-ELE56Ph14PwvWjfWVDm4IxI8t73TIH43Vo7a6dbcobtmJ2Sxb04AHak2dgiTFZffna7xew-8_uXFBW041GKTwzK-4CnyM_WozAafyFM5be7NtZP2bwzhNnJV6QkQUMx_wxnBj6NpahEe-WeoDAGNe3KB3-zYehIzufJlnHX2effwstvMDcR_B7tm2gkdcMHBOmsN_v1BquDy_ZzaA73zTSPooZHm9_Z2AiP5O2WRcjsX_pl74lt0lAaqSm4mR3Kn6OuKOyL6yEbNPUV5CV8G-9a48aYj3MdAfoNy_ebLcD1CRUf5JEmrlSoOdHOSVLcBOFP7FK6F1xDfag","id_token":"eyJraWQiOiIwMmQ2ZDdhOTU3ZTczNGI3YTRiZDIzZGNmZTU5NTI0NWE0ZDI1MTc2NWU4MDJiNDk3ODgyMTAwMmE1MTYyMGEzIiwiYWxnIjoiUlMyNTYifQ.eyJzdWIiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJhdWQiOiJvaWRjLWNvbmZvcm1hbmNlLWNsaWVudC1pZCIsIm5iZiI6MTQ3NjM3Mzg3NSwiYXpwIjoib2lkYy1jb25mb3JtYW5jZS1jbGllbnQtaWQiLCJhdXRoX3RpbWUiOjE0NzYzNzM3MjEsImlzcyI6Imh0dHBzOlwvXC9sb2dpbi1pbnQubm9ydG9uLmNvbVwvc3NvXC9vaWRjMVwvdG9rZW4iLCJleHAiOjE0NzYzNzU2NzUsImlhdCI6MTQ3NjM3Mzg3NSwibm9uY2UiOiJjNDJhNGUxYi0wMzg0LTQzNTUtYjY3Mi0zNWY4YWQzOWU0ZmEiLCJqdGkiOiI0ZGQ4NjM2OS1mY2YwLTQ3ZTktYWIzYS05ZjJmOGU0YTNkODQifQ.e1gKE_Ud8_ttLF7OEaJXp_XPhG6pr1iA18dk8udIoj5sRezcBqu13VSlDI1pAFDKz1zhnHGEyfc9YAE24tQClw500pIG_XEHBZjMqG6giWvt8etKJN4MURz9NlO-mb9iza1bHv8Hg1nMyYrb0K1fi38WE_seYcAlfKSMObuKUKmvQ7kiTSQaPCvUrvtmiIlrURtZMcZE7GtI7Ut1qljshVAg4ZxmtBDtaen9fp_oi4mW78ltwCwAiP1SlpUdGga2U5lT6XBM_oQJARTNP8x8GMXg-NAbhs1zgJUygHYv_cnye3LD3VGMRlSc2exVphvGkOybNdSLVun3iVHFddyZKg","token_type":"Bearer","expires_in":1800}
3.890266 AccessTokenResponse: {
  "access_token": "eyJraWQiOiIwMmQ2ZDdhOTU3ZTczNGI3YTRiZDIzZGNmZTU5NTI0NWE0ZDI1MTc2NWU4MDJiNDk3ODgyMTAwMmE1MTYyMGEzIiwiYWxnIjoiUlMyNTYifQ.eyJzdWIiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJuYmYiOjE0NzYzNzM4NzUsIk5vcnRvbkdVSUQiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJhenAiOiJvaWRjLWNvbmZvcm1hbmNlLWNsaWVudC1pZCIsImF1dGhfdGltZSI6MTQ3NjM3MzcyMSwic2NvcGUiOiIiLCJpc3MiOiJodHRwczpcL1wvbG9naW4taW50Lm5vcnRvbi5jb21cL3Nzb1wvb2lkYzFcL3Rva2VuIiwiZXhwIjoxNDc2Mzc1Njc1LCJpYXQiOjE0NzYzNzM4NzUsImp0aSI6Ijc3MGU0NTdkLTUwNjktNDg5NC1hMzAyLTk5N2NiNzYzOTZlNSJ9.XMhLzj4-ELE56Ph14PwvWjfWVDm4IxI8t73TIH43Vo7a6dbcobtmJ2Sxb04AHak2dgiTFZffna7xew-8_uXFBW041GKTwzK-4CnyM_WozAafyFM5be7NtZP2bwzhNnJV6QkQUMx_wxnBj6NpahEe-WeoDAGNe3KB3-zYehIzufJlnHX2effwstvMDcR_B7tm2gkdcMHBOmsN_v1BquDy_ZzaA73zTSPooZHm9_Z2AiP5O2WRcjsX_pl74lt0lAaqSm4mR3Kn6OuKOyL6yEbNPUV5CV8G-9a48aYj3MdAfoNy_ebLcD1CRUf5JEmrlSoOdHOSVLcBOFP7FK6F1xDfag",
  "expires_in": 1800,
  "id_token": {
    "claims": {
      "aud": [
        "oidc-conformance-client-id"
      ],
      "auth_time": 1476373721,
      "azp": "oidc-conformance-client-id",
      "exp": 1476375675,
      "iat": 1476373875,
      "iss": "https://login-int.norton.com/sso/oidc1/token",
      "jti": "4dd86369-fcf0-47e9-ab3a-9f2f8e4a3d84",
      "nbf": 1476373875,
      "nonce": "c42a4e1b-0384-4355-b672-35f8ad39e4fa",
      "sub": "503371910290583957085147024123389456"
    },
    "jws header parameters": {
      "alg": "RS256",
      "kid": "02d6d7a957e734b7a4bd23dcfe595245a4d251765e802b4978821002a51620a3"
    }
  },
  "token_type": "Bearer"
}
33.957186 ------------ AccessTokenRequest ------------
33.957597 --> URL: https://login-int.norton.com/sso/oidc1/tokens
33.957603 --> BODY: code=AC-0gcNDrNvlaEIPLsV0qRu6Ggmv2F2jn8-AG96w38AirQ-157bebd8a29-int&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60671%2Fauthz_cb
33.957616 --> HEADERS: {'Content-Type': 'application/x-www-form-urlencoded', 'Authorization': u'Basic b2lkYy1jb25mb3JtYW5jZS1jbGllbnQtaWQ6b2lkYy1jb25mb3JtYW5jZS1jbGllbnQtc2VjcmV0'}
34.354637 <-- STATUS: 400
34.354761 ErrorResponse: {
  "error": "invalid_grant",
  "error_description": "Expired code or token"
}
34.366630 ==== END ====

Result

PASSED