Test Info

Issuerhttps://oidc-conformance.ping-eng.com:9031
Profile[]
Test IDOP-Discovery-jwks_uri
Test descriptionVerify that jwks_uri is published
Timestamp2018-09-21T20:30:42Z

Conditions


bare-keys: status=OK [Dynamic OPs MUST publish their public keys as bare JWK keys]
providerinfo-has-jwks_uri: status=OK [Check that the jwks_uri discovery metadata value is in the provider_info]
check-http-response: status=OK [Checks that the HTTP response status is within the 200 or 300 range. Also does some extra JSON checks]
Done: status=OK

Trace Output

0.0phase<--<-- 0 --- Webfinger -->-->
0.0not expected to doWebFinger
0.0phase<--<-- 1 --- Discovery -->-->
0.0provider_config
kwargs:{'issuer': 'https://oidc-conformance.ping-eng.com:9031'}
0.301http response
url:https://oidc-conformance.ping-eng.com:9031/.well-known/openid-configuration status_code:200
0.303ProviderConfigurationResponse
{
    "authorization_endpoint": "https://oidc-conformance.ping-eng.com:9031/as/authorization.oauth2",
    "claim_types_supported": [
        "normal"
    ],
    "claims_parameter_supported": false,
    "claims_supported": [
        "address",
        "birthdate",
        "email",
        "email_verified",
        "family_name",
        "gender",
        "given_name",
        "locale",
        "middle_name",
        "name",
        "nickname",
        "phone_number",
        "phone_number_verified",
        "pi.sri",
        "picture",
        "preferred_username",
        "profile",
        "sub",
        "updated_at",
        "website",
        "zoneinfo"
    ],
    "grant_types_supported": [
        "implicit",
        "authorization_code",
        "refresh_token",
        "password",
        "client_credentials",
        "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
        "urn:ietf:params:oauth:grant-type:jwt-bearer",
        "urn:ietf:params:oauth:grant-type:saml2-bearer"
    ],
    "id_token_signing_alg_values_supported": [
        "none",
        "HS256",
        "HS384",
        "HS512",
        "RS256",
        "RS384",
        "RS512",
        "ES256",
        "ES384",
        "ES512"
    ],
    "introspection_endpoint": "https://oidc-conformance.ping-eng.com:9031/as/introspect.oauth2",
    "issuer": "https://oidc-conformance.ping-eng.com:9031",
    "jwks_uri": "https://oidc-conformance.ping-eng.com:9031/pf/JWKS",
    "ping_end_session_endpoint": "https://oidc-conformance.ping-eng.com:9031/idp/startSLO.ping",
    "ping_revoked_sris_endpoint": "https://oidc-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris",
    "registration_endpoint": "https://oidc-conformance.ping-eng.com:9031/as/clients.oauth2",
    "request_object_signing_alg_values_supported": [
        "RS256",
        "RS384",
        "RS512",
        "ES256",
        "ES384",
        "ES512"
    ],
    "request_parameter_supported": true,
    "request_uri_parameter_supported": false,
    "require_request_uri_registration": true,
    "response_modes_supported": [
        "fragment",
        "query",
        "form_post"
    ],
    "response_types_supported": [
        "code",
        "token",
        "id_token",
        "code token",
        "code id_token",
        "token id_token",
        "code token id_token"
    ],
    "revocation_endpoint": "https://oidc-conformance.ping-eng.com:9031/as/revoke_token.oauth2",
    "scopes_supported": [
        "address",
        "phone",
        "edit",
        "openid",
        "profile",
        "admin",
        "email"
    ],
    "subject_types_supported": [
        "public"
    ],
    "token_endpoint": "https://oidc-conformance.ping-eng.com:9031/as/token.oauth2",
    "token_endpoint_auth_methods_supported": [
        "client_secret_basic",
        "client_secret_post",
        "private_key_jwt"
    ],
    "token_endpoint_auth_signing_alg_values_supported": [
        "RS256",
        "RS384",
        "RS512",
        "ES256",
        "ES384",
        "ES512"
    ],
    "userinfo_endpoint": "https://oidc-conformance.ping-eng.com:9031/idp/userinfo.openid",
    "version": "3.0"
}
0.303phase<--<-- 2 --- Done -->-->
0.303end
0.303assertionBareKeys
0.596http response
url:https://oidc-conformance.ping-eng.com:9031/pf/JWKS status_code:200
0.596jwks{'keys': [{'kty': 'EC', 'kid': '2OHYoC_hG8PFTda_warvEOWP-2M', 'use': 'sig', 'x': '92bd8jD9Dk7FMX09Vh-YUjHaWNqdWbRktjxw3Ab7t5o', 'y': 'fZf_cpSFUbV_Gd2FvhyQsxmateeSMkRwX7CAl2_FgKk', 'crv': 'P-256'}, {'kty': 'EC', 'kid': '4EPed64s2YWVuK6m8zPkGDSQ5kY', 'use': 'sig', 'x': 'R9A8SPCtHKRf9XK2obhd0Vs4m8WEymQ8vigE-YKEzAU4bbhiKIXLFnvhIBm97CKn', 'y': '702tmc0ItscC36_ZyFLUwJo5NJR_eMaGnWXt82I3a_yrZpNiE0DGrVYy8eSmMyrv', 'crv': 'P-384'}, {'kty': 'EC', 'kid': '4HzWg80J2VoC0wngCCbboEsdAJI', 'use': 'sig', 'x': 'Aecp0JULuGod1a0zPTU8EW7X0Jwa44Lnhv-uMcslx5_xlJwbABXevM6HWLf-w9KB0B4fre8UzB4EIK_uuipWdzJZ', 'y': 'AFdnGD_GCgbNUCECA7HtQBU6UrA_gL0F_c-IVi6yjJ0cF77PMOAsmjgHKELLkdEWi1NIhNNiMxDCFtDUxZlOYxSf', 'crv': 'P-521'}, {'kty': 'RSA', 'kid': 'irmcvcJkrr4qIwdQrhKf8lwJ4Sc', 'use': 'sig', 'n': 'iujylegGBc6Hk7YxG1VdfcCbUJMaHve7u6977vLbXfSsma_6Ruta1e5Hp_Jt4_smiCRBeeFscfcGk7XAYTYMFbzvqnZq7rikwrvnhCx-wHcjI-De4xN9utqVSntpomYt6ScHDofoVoqTZw5OZ_vqV7AhwNW8W55TC4Mk7vuqf1-Qr0cD6pVurfYzJuQivUv91ull48MkXBikR23v2ebggJ7ZLrNDFRkXw2Z3q3YuUFuSWu7V5QFRtSIuyCHfjkB3c6qFxLLo_U1y_Zu_QdePotZM2Xyqq1nBeEflDtRUSaZKEFa3SBsmUeuE5xwGJC8Atp--goNACVVQSL6S5TZwfw', 'e': 'AQAB'}, {'kty': 'EC', 'kid': '9Jwbt7UJ98_dO_SLWZF41rwPUks', 'use': 'sig', 'x': 'Qn5qgfSpQQrqmQdZoeDGcUDO5pPdbDzOjld2In8RY5M', 'y': 'wu-0Enh1JCOXlYrkYvjh7at3C05k-RQbBdjvll6EzzA', 'crv': 'P-256'}, {'kty': 'EC', 'kid': 'HmjnsEWh2zmYmcc3x5ZEOTEayew', 'use': 'sig', 'x': 'MUTLSZY003IOOCRkSnTDT46LuHa6TROcuzefVDJMvc9IQYuWsp-j1spbIz6bysSf', 'y': 'slxVq3X7Zog7_1EXZuEwJOGhXToYY-Ri4u9jpRM5rf510MrpuUG1c21C04zWSwdY', 'crv': 'P-384'}, {'kty': 'EC', 'kid': 'N-hwHMTKyRKJCx80qjpXKjvPX6M', 'use': 'sig', 'x': 'ACHbFjkph4SHcj7djHs-3bjDj3vavl-vplu3NONeDZPCh0yiTzCjQ_xnFklRrftMYnNmEjPMKvGGQy03ojr-Yvlw', 'y': 'ASqCodHOMO7V_oHbOwCQk7jRhQ69035nWDOYR2y-qALEQpMHJ10Q_U8_fhkjx0BVZzsBBYED_b7lDbc1UkoASW3V', 'crv': 'P-521'}, {'kty': 'RSA', 'kid': 'faCfqvkzCrgTHn17iAkAYC5RsbU', 'use': 'sig', 'n': '3W2mQuF8-ylU7cK4r11lVguJ4ZiERTSXW-DcXj8OF44Yf1-yCqqyZUgoEcFGGXGiRqebzE82Pa6zEOMGc7eOeLQfpGSEK1jw1xAUWUuD0H5V2opuCWF84HwmRKePG7_XKCNkk0yXPhkVO2-6-nQHUInXTZXddObOkncfG8QmTDG7plsOh3SCtcg-6SH4USYrPKKfLTRSi_BMl4oj1uNWIdHEK6gutnKEkO1i1n64ncFb21ZEIrd_c9ftu3pwkPZf9SY5aoQH1H33aO3o-hmMGUBmhg9ofSdVPbE2aPCtv0bvgLTcrcQwZu7gtJHi1yJHDJ0LpMoz0eGI__Pya-dBcw', 'e': 'AQAB'}, {'kty': 'EC', 'kid': '69ZvrZuH-_VNJUWG19oKymjAvd4', 'use': 'sig', 'x': 'APL9Ijb7HBG8TwG1UU8Eyt40laNbwiBcXec7N52kOe1dFX6VNMyFbYmnlkdScUlubphCcMP6MPNGd16yr7OlCuI5', 'y': 'AdJLHhVhxUidFvtUD4o03vpddG1pkpm877AcGMYi1uGVCgbWlx148FyOA_TK1dBFIt3_zK4lxi-_hw8Nfwd36evL', 'crv': 'P-521'}, {'kty': 'RSA', 'kid': 'q1k_VeoSqtJ_F5cfeEtQFBGqmK8', 'use': 'sig', 'n': 'qB3OhsbitHPAmWV6A69tt9LU3KeKjm7l_AMg0d2xQ-J-nDaLJZLmnOlJKw2aCO9lUcHyEoK40xAAvOKSo_Al1uQp-gFfRS8KtgbbSKYekw5fJltwFlXPAJu3uiIi_sQao4bWGH4Jg32h7NUDs6hDxTzAXXyXZ6e_BJYn9yHdtAdSra8iwvLCdihqxjkFfG9J0gXU5lbcx_hWJpxsPgz8w2NmmDxCXrB_KqjUsTPeI1OtHqlvEKg44NPeJTaPPP59FjG8trQDwtt5FWzaDpIwPRrqPl_7DeOWh0POyNHxVPh0qR6YD6pa_o9VVAoV-8Fo0oqE0deeoihDS7OO3REK7Q', 'e': 'AQAB'}, {'kty': 'EC', 'kid': 'qvX0QcvyZs9B-fZioovNxE0QyeM', 'use': 'sig', 'x': 'Ppx7f0kEr0pbZOp9luaT2j4ze6QQ0xghIgRNpHszvyg', 'y': 'fM655d7VLBeqAH7H130twVPVHUCsFFgxRBQww3jAI9E', 'crv': 'P-256'}, {'kty': 'EC', 'kid': 's9l0t98aWduomLcQ4U7du1BeQDk', 'use': 'sig', 'x': 'nMMX7Ld-xHsrxg_gAtw8JON-zcpvAr2UDsviUGbX3rJ-qvGKoHhe444n7YhBIiTp', 'y': 'yQyIsDG-myW_L7CvlICzKMZ2PidxWI0K250J2Q0lAVI_7C-xg7RQTnQ1vsAum1XN', 'crv': 'P-384'}]}
0.596conditionbare-keys: status=OK [Dynamic OPs MUST publish their public keys as bare JWK keys]
0.596assertionCheckHasJwksURI
0.596conditionproviderinfo-has-jwks_uri: status=OK [Check that the jwks_uri discovery metadata value is in the provider_info]
0.597assertionCheckHTTPResponse
0.597conditioncheck-http-response: status=OK [Checks that the HTTP response status is within the 200 or 300 range. Also does some extra JSON checks]
0.597conditionDone: status=OK

Result

PASSED