Test info
Profile: {'openid-configuration': 'config', 'response_type': 'code', 'crypto': 'sign', 'registration': 'static'}
Timestamp: 2016-10-13T15:54:21Z
Test description: Claims request with essential name claim [Basic, Implicit, Hybrid]
Test ID: OP-claims-essential
Issuer: https://login-int.norton.com/sso/oidc1/token
Test output
__AuthorizationRequest:pre__
[check-response-type]
status: OK
description: Checks that the asked for response type are among the supported
[check-endpoint]
status: OK
description: Checks that the necessary endpoint exists at a server
__After completing the test flow:__
[check-http-response]
status: OK
description: Checks that the HTTP response status is within the 200 or 300 range
[verify-claims]
status: WARNING
description: Verifies that the UserInfo returned is consistent with what was asked for
info: Missing required claim: name, Unexpected claims in response: [u'iss', u'exp', u'azp', u'iat', u'nbf', u'aud']
__X:==== END ====__
Trace output
0.004619 ------------ DiscoveryRequest ------------
0.004639 Provider info discover from 'https://login-int.norton.com/sso/oidc1/token'
0.004646 --> URL: https://login-int.norton.com/sso/oidc1/token/.well-known/openid-configuration
0.454881 ProviderConfigurationResponse: {
"authorization_endpoint": "https://login-int.norton.com/sso/idp/OIDC",
"claim_types_supported": [
"normal",
"aggregated"
],
"claims_parameter_supported": false,
"claims_supported": [
"birthdate",
"email_verified",
"address",
"gender",
"given_name",
"middle_name",
"locale",
"IdPData",
"SSN",
"LinkChildGUIDS",
"CustomAttributes",
"NortonGUID",
"updated_at",
"UserId",
"name",
"phone_number",
"PartnerUserId",
"family_name",
"email",
"VipTokenId"
],
"display_values_supported": [
"page"
],
"grant_types_supported": [
"authorization_code",
"refresh_token",
"symc_fed_idp_authorization_code",
"symc_fed_idp_access_token"
],
"id_token_signing_alg_values_supported": [
"RS256",
"RS384",
"RS512"
],
"issuer": "https://login-int.norton.com/sso/oidc1/token",
"jwks_uri": "https://login-int.norton.com/sso/oidc1/token/jwks",
"request_parameter_supported": false,
"request_uri_parameter_supported": false,
"require_request_uri_registration": false,
"response_modes_supported": [
"query"
],
"response_types_supported": [
"code"
],
"scopes_supported": [
"idsc_write",
"address",
"phone",
"openid",
"profile",
"nms_device_locate",
"idsc_read",
"nms_device_lock",
"email"
],
"subject_types_supported": [
"pairwise"
],
"token_endpoint": "https://login-int.norton.com/sso/oidc1/tokens",
"token_endpoint_auth_methods_supported": [
"client_secret_post",
"client_secret_basic"
],
"userinfo_endpoint": "https://login-int.norton.com/sso/oidc1/userinfo",
"userinfo_signing_alg_values_supported": [
"RS256",
"RS384",
"RS512"
],
"version": "3.0"
}
0.883291 JWKS: {
"keys": [
{
"alg": "RS256",
"e": "AQAB",
"kid": "02d6d7a957e734b7a4bd23dcfe595245a4d251765e802b4978821002a51620a3",
"kty": "RSA",
"n": "gbJV5FqqKDWQSx5Jt9_-EYpwYZc-qcTxsdYLI-Y3qTj4fXHtxBWa9-Q_yf2AiJXOhCtly18DMvS3TmeBUDVad2pdowYyTCpwXlYdsYzcFybQSpQ3objr7yRFCIfKl9BM8dliLLsJxt_sjj7fvA9jl21QUtXjL1-Rbls9lI0Z-SnY43AjITAXwg3yPdJxDrwLQa7mQjrIsYtiQc_NmBnAtfJD5FMz4GmoTS_PN5giFp5pHYM9PFrETIAHrC3Wx1IxDwTI3SGiypMtyObaKnNuMFu1W6XeZuBTyTKKE4rIiV9YwlOGa2O1Cg-kCzmJyFjnf-BYp3-sQhUtnxgz4j0Q0w",
"use": "sig"
}
]
}
0.901700 ------------ AuthorizationRequest ------------
0.902395 --> URL: https://login-int.norton.com/sso/idp/OIDC?state=t7dykcL1m2Uvrte7&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60671%2Fauthz_cb&response_type=code&client_id=oidc-conformance-client-id&claims=%7B%22userinfo%22%3A+%7B%22name%22%3A+%7B%22essential%22%3A+true%7D%7D%7D&scope=openid
0.902404 --> BODY: None
1.268699 <-- code=AC-JpoGVS_T1yHnocwaEIa0cFDLAWD-lhKueOpdA5gyXA4-157bec05c04-int&state=t7dykcL1m2Uvrte7
1.269087 AuthorizationResponse: {
"code": "AC-JpoGVS_T1yHnocwaEIa0cFDLAWD-lhKueOpdA5gyXA4-157bec05c04-int",
"state": "t7dykcL1m2Uvrte7"
}
1.269418 ------------ AccessTokenRequest ------------
1.269779 --> URL: https://login-int.norton.com/sso/oidc1/tokens
1.269785 --> BODY: code=AC-JpoGVS_T1yHnocwaEIa0cFDLAWD-lhKueOpdA5gyXA4-157bec05c04-int&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60671%2Fauthz_cb
1.269797 --> HEADERS: {'Content-Type': 'application/x-www-form-urlencoded', 'Authorization': u'Basic b2lkYy1jb25mb3JtYW5jZS1jbGllbnQtaWQ6b2lkYy1jb25mb3JtYW5jZS1jbGllbnQtc2VjcmV0'}
1.731442 <-- STATUS: 200
1.731524 <-- BODY: {"access_token":"eyJraWQiOiIwMmQ2ZDdhOTU3ZTczNGI3YTRiZDIzZGNmZTU5NTI0NWE0ZDI1MTc2NWU4MDJiNDk3ODgyMTAwMmE1MTYyMGEzIiwiYWxnIjoiUlMyNTYifQ.eyJzdWIiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJuYmYiOjE0NzYzNzQwNjAsIk5vcnRvbkdVSUQiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJhenAiOiJvaWRjLWNvbmZvcm1hbmNlLWNsaWVudC1pZCIsImF1dGhfdGltZSI6MTQ3NjM3MzcyMSwic2NvcGUiOiIiLCJpc3MiOiJodHRwczpcL1wvbG9naW4taW50Lm5vcnRvbi5jb21cL3Nzb1wvb2lkYzFcL3Rva2VuIiwiZXhwIjoxNDc2Mzc1ODYwLCJpYXQiOjE0NzYzNzQwNjAsImp0aSI6ImJiNWViNzBiLTBjNWQtNDgwMy1hYmQ1LTYwN2YwOGEyN2M5NSJ9.VfWMQJbhxPVx64RcXt7I6wDc8KE-tWVEzTGHD-S3K14p199YFRKFix-K4-sq2JCO_A-D1SS5g-dgjFPK-SV6sITnkZBjfAgnyp3Eskzeja3H8yULWhPl0_5Tt2EqnNsp77kTVMvIh7nEnGw1egwJn5NWbIIbIkAVWxX9TP6Yo50Od3-qLQJYtnTePld0Nd9oY0wumf8I8aHlrzPNJrNcJ18pV8WHWLEjD1PUTqzNWUGxLaLHRUBL75j3iGoOcNEEQKqILfmNCMxviTFPJoCwjcXEI3VhnNFPMtLWnE66ua_UiQcQccYQJLQ7f_UKWir5Ou1-m7umXqJcduWBZgEj2g","id_token":"eyJraWQiOiIwMmQ2ZDdhOTU3ZTczNGI3YTRiZDIzZGNmZTU5NTI0NWE0ZDI1MTc2NWU4MDJiNDk3ODgyMTAwMmE1MTYyMGEzIiwiYWxnIjoiUlMyNTYifQ.eyJzdWIiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJhdWQiOiJvaWRjLWNvbmZvcm1hbmNlLWNsaWVudC1pZCIsIm5iZiI6MTQ3NjM3NDA2MCwiYXpwIjoib2lkYy1jb25mb3JtYW5jZS1jbGllbnQtaWQiLCJhdXRoX3RpbWUiOjE0NzYzNzM3MjEsImlzcyI6Imh0dHBzOlwvXC9sb2dpbi1pbnQubm9ydG9uLmNvbVwvc3NvXC9vaWRjMVwvdG9rZW4iLCJleHAiOjE0NzYzNzU4NjAsImlhdCI6MTQ3NjM3NDA2MCwibm9uY2UiOiI5MDVkNWZhYi01MDQ2LTQ1ZmEtYjQ2Yi00NjdhOTU4YWE0MzgiLCJqdGkiOiI1MzQyMmIwOC04OTM5LTRhMzItOWVlZC0zNDNlMWI2NzhiNGYifQ.UIpWrRY2W5jUMbskEeOExBx4O91zgpkqNBojLnZzmmWlLKoEv-AG9KChzhMVH6pb_bvIIc1rIRUGFGi_NC6Vo0cizFgIuYUIZPIwUWqxs5fsIA2lutGH4C-tMJTWI3GV42Ndq8icXH_LbYHUKR-vpU40C-jr9DYOsIuhNLjsNXqto4agBTkop8qh8RUSu9XRSB_EtAvQwOfUSwSilA2oD1KvAPLogT3EprqnRyjix3lM6LhKpwDQ6KsdtXUEbKXe56ZL-CWwD4JwWHGKYfNgq41LkGRRm98mF3YYwc_2JeiL4X9AM2nLA8Cq-IxWH-6EzEQreMAECqmsS-QRIZGoCg","token_type":"Bearer","expires_in":1800}
2.201999 AccessTokenResponse: {
"access_token": "eyJraWQiOiIwMmQ2ZDdhOTU3ZTczNGI3YTRiZDIzZGNmZTU5NTI0NWE0ZDI1MTc2NWU4MDJiNDk3ODgyMTAwMmE1MTYyMGEzIiwiYWxnIjoiUlMyNTYifQ.eyJzdWIiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJuYmYiOjE0NzYzNzQwNjAsIk5vcnRvbkdVSUQiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJhenAiOiJvaWRjLWNvbmZvcm1hbmNlLWNsaWVudC1pZCIsImF1dGhfdGltZSI6MTQ3NjM3MzcyMSwic2NvcGUiOiIiLCJpc3MiOiJodHRwczpcL1wvbG9naW4taW50Lm5vcnRvbi5jb21cL3Nzb1wvb2lkYzFcL3Rva2VuIiwiZXhwIjoxNDc2Mzc1ODYwLCJpYXQiOjE0NzYzNzQwNjAsImp0aSI6ImJiNWViNzBiLTBjNWQtNDgwMy1hYmQ1LTYwN2YwOGEyN2M5NSJ9.VfWMQJbhxPVx64RcXt7I6wDc8KE-tWVEzTGHD-S3K14p199YFRKFix-K4-sq2JCO_A-D1SS5g-dgjFPK-SV6sITnkZBjfAgnyp3Eskzeja3H8yULWhPl0_5Tt2EqnNsp77kTVMvIh7nEnGw1egwJn5NWbIIbIkAVWxX9TP6Yo50Od3-qLQJYtnTePld0Nd9oY0wumf8I8aHlrzPNJrNcJ18pV8WHWLEjD1PUTqzNWUGxLaLHRUBL75j3iGoOcNEEQKqILfmNCMxviTFPJoCwjcXEI3VhnNFPMtLWnE66ua_UiQcQccYQJLQ7f_UKWir5Ou1-m7umXqJcduWBZgEj2g",
"expires_in": 1800,
"id_token": {
"claims": {
"aud": [
"oidc-conformance-client-id"
],
"auth_time": 1476373721,
"azp": "oidc-conformance-client-id",
"exp": 1476375860,
"iat": 1476374060,
"iss": "https://login-int.norton.com/sso/oidc1/token",
"jti": "53422b08-8939-4a32-9eed-343e1b678b4f",
"nbf": 1476374060,
"nonce": "905d5fab-5046-45fa-b46b-467a958aa438",
"sub": "503371910290583957085147024123389456"
},
"jws header parameters": {
"alg": "RS256",
"kid": "02d6d7a957e734b7a4bd23dcfe595245a4d251765e802b4978821002a51620a3"
}
},
"token_type": "Bearer"
}
2.214598 ------------ UserInfoRequest ------------
2.214923 --> URL: https://login-int.norton.com/sso/oidc1/userinfo
2.214930 --> BODY: None
2.214948 --> HEADERS: {'Authorization': u'Bearer eyJraWQiOiIwMmQ2ZDdhOTU3ZTczNGI3YTRiZDIzZGNmZTU5NTI0NWE0ZDI1MTc2NWU4MDJiNDk3ODgyMTAwMmE1MTYyMGEzIiwiYWxnIjoiUlMyNTYifQ.eyJzdWIiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJuYmYiOjE0NzYzNzQwNjAsIk5vcnRvbkdVSUQiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJhenAiOiJvaWRjLWNvbmZvcm1hbmNlLWNsaWVudC1pZCIsImF1dGhfdGltZSI6MTQ3NjM3MzcyMSwic2NvcGUiOiIiLCJpc3MiOiJodHRwczpcL1wvbG9naW4taW50Lm5vcnRvbi5jb21cL3Nzb1wvb2lkYzFcL3Rva2VuIiwiZXhwIjoxNDc2Mzc1ODYwLCJpYXQiOjE0NzYzNzQwNjAsImp0aSI6ImJiNWViNzBiLTBjNWQtNDgwMy1hYmQ1LTYwN2YwOGEyN2M5NSJ9.VfWMQJbhxPVx64RcXt7I6wDc8KE-tWVEzTGHD-S3K14p199YFRKFix-K4-sq2JCO_A-D1SS5g-dgjFPK-SV6sITnkZBjfAgnyp3Eskzeja3H8yULWhPl0_5Tt2EqnNsp77kTVMvIh7nEnGw1egwJn5NWbIIbIkAVWxX9TP6Yo50Od3-qLQJYtnTePld0Nd9oY0wumf8I8aHlrzPNJrNcJ18pV8WHWLEjD1PUTqzNWUGxLaLHRUBL75j3iGoOcNEEQKqILfmNCMxviTFPJoCwjcXEI3VhnNFPMtLWnE66ua_UiQcQccYQJLQ7f_UKWir5Ou1-m7umXqJcduWBZgEj2g'}
2.601485 <-- STATUS: 200
2.601549 Available verification keys: [(u'02d6d7a957e734b7a4bd23dcfe595245a4d251765e802b4978821002a51620a3', u'RSA')]
2.601581 Available decryption keys: [('a0', 'RSA'), ('a3', 'EC')]
2.601635 <-- BODY: eyJraWQiOiIwMmQ2ZDdhOTU3ZTczNGI3YTRiZDIzZGNmZTU5NTI0NWE0ZDI1MTc2NWU4MDJiNDk3ODgyMTAwMmE1MTYyMGEzIiwiYWxnIjoiUlMyNTYifQ.eyJzdWIiOiI1MDMzNzE5MTAyOTA1ODM5NTcwODUxNDcwMjQxMjMzODk0NTYiLCJhdWQiOiJvaWRjLWNvbmZvcm1hbmNlLWNsaWVudC1pZCIsIm5iZiI6MTQ3NjM3NDA2MSwiYXpwIjoib2lkYy1jb25mb3JtYW5jZS1jbGllbnQtaWQiLCJpc3MiOiJodHRwczpcL1wvbG9naW4taW50Lm5vcnRvbi5jb21cL3Nzb1wvb2lkYzFcL3Rva2VuIiwiZXhwIjoxNDc2Mzc1ODYxLCJpYXQiOjE0NzYzNzQwNjF9.b6DduoVwTWvjggx6uqoQiP2P-xTAacb2B_7l_vC8YCyeysozXcki36gdcf5q9zotFdCX-GTJashjnvOkcZgyQ2X_gwo495OvLnzO7UQCASnKMh2JJVG7OdkyfozG3BIheHMN6VMYTe46iy5oaY90bTu4_WTxYnIPJXUlGO2uUvbeA26yQl-iKfOEIXqbg1CSgRWUxGzampyJe-e2Iy6b-lco_VJ6emwzlvloK6-qCvuHG1HChMEN_Dfmupy2nvZVZejxtsIqC_j9s4IIrtUKJ6zGSnUOkOcf5T44ivxHV4UICm4Qt1uKrXNDpIRnUoD8bZ0lxGSEuQ27XuLf0MoH8g
2.608420 JWT header:
2.608437 UserInfo: {
"claims": {
"aud": "oidc-conformance-client-id",
"azp": "oidc-conformance-client-id",
"exp": 1476375861,
"iat": 1476374061,
"iss": "https://login-int.norton.com/sso/oidc1/token",
"nbf": 1476374061,
"sub": "503371910290583957085147024123389456"
},
"jws header parameters": {
"alg": "RS256",
"kid": "02d6d7a957e734b7a4bd23dcfe595245a4d251765e802b4978821002a51620a3"
}
}
2.620765 ==== END ====
Result
WARNING
Warnings:
Missing required claim: name, Unexpected claims in response: [u'iss', u'exp', u'azp', u'iat', u'nbf', u'aud']