0.0 | phase | <--<-- 0 --- Webfinger -->--> |
0.0 | not expected to do | WebFinger |
0.0 | phase | <--<-- 1 --- Discovery -->--> |
0.0 | not expected to do | Dynamic discovery |
0.0 | phase | <--<-- 2 --- Registration -->--> |
0.0 | register | kwargs:{'response_types': ['id_token'], 'grant_types': ['implicit'], 'application_name': 'OIC test tool', 'application_type': 'web', 'redirect_uris': ['https://op.certification.openid.net:61401/authz_cb'], 'contacts': ['roland@example.com'], 'post_logout_redirect_uris': ['https://op.certification.openid.net:61401/logout'], 'url': 'https://oidc-conformance.ping-eng.com:9031/as/clients.oauth2', 'jwks_uri': 'https://op.certification.openid.net:61401/static/jwks_61401.json'}
|
0.001 | RegistrationRequest | {
"application_type": "web",
"contacts": [
"roland@example.com"
],
"grant_types": [
"implicit"
],
"jwks_uri": "https://op.certification.openid.net:61401/static/jwks_61401.json",
"post_logout_redirect_uris": [
"https://op.certification.openid.net:61401/logout"
],
"redirect_uris": [
"https://op.certification.openid.net:61401/authz_cb"
],
"request_uris": [
"https://op.certification.openid.net:61401/requests/876669ef2b3891075309a06e00b98e6ace4cfca108af01becb9a804fff95d8c4#xtYaXGefheQJyeJH"
],
"response_types": [
"id_token"
]
}
|
0.474 | http response | url:https://oidc-conformance.ping-eng.com:9031/as/clients.oauth2 status_code:201
|
0.474 | RegistrationResponse | {
"client_id": "dc-IRPcXe7u8gyW7aN3vIKCQK",
"client_name": "dc-IRPcXe7u8gyW7aN3vIKCQK",
"client_secret": "RZNozVSRHehOYdZUR2IUk3",
"client_secret_expires_at": 0,
"grant_access_session_revocation_api": false,
"grant_types": [
"implicit"
],
"jwks_uri": "https://op.certification.openid.net:61401/static/jwks_61401.json",
"persistent_grant_expiration_type": "server_default",
"pingaccess_logout_capable": false,
"redirect_uris": [
"https://op.certification.openid.net:61401/authz_cb"
],
"refresh_token_rolling_policy": "server_default",
"response_types": [
"id_token"
],
"scope": "address phone edit openid profile admin email",
"token_endpoint_auth_method": "client_secret_basic",
"validate_using_all_eligible_atms": false
}
|
0.474 | phase | <--<-- 3 --- AsyncAuthn -->--> |
0.475 | AuthorizationRequest | {
"client_id": "dc-IRPcXe7u8gyW7aN3vIKCQK",
"nonce": "H3rOSZUFcNDptaum",
"redirect_uri": "https://op.certification.openid.net:61401/authz_cb",
"response_type": "id_token",
"scope": "openid",
"state": "MzNE4EjToRVECGot"
}
|
0.475 | redirect url | https://oidc-conformance.ping-eng.com:9031/as/authorization.oauth2?state=MzNE4EjToRVECGot&nonce=H3rOSZUFcNDptaum&response_type=id_token&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61401%2Fauthz_cb&client_id=dc-IRPcXe7u8gyW7aN3vIKCQK |
0.475 | redirect | https://oidc-conformance.ping-eng.com:9031/as/authorization.oauth2?state=MzNE4EjToRVECGot&nonce=H3rOSZUFcNDptaum&response_type=id_token&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61401%2Fauthz_cb&client_id=dc-IRPcXe7u8gyW7aN3vIKCQK |
2.338 | http args | {} |
2.678 | response | URL with fragment |
2.678 | response | id_token=eyJhbGciOiJSUzI1NiIsImtpZCI6IlJvMmxnRXNPdFdJMlJiRUxLRV85amZvSVRxWSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJkYy1JUlBjWGU3dThneVc3YU4zdklLQ1FLIiwianRpIjoiZXhTR2E5ckk2ZTZaQmtKdmJpQnR2eCIsImlzcyI6Imh0dHBzOi8vb2lkYy1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTUzNzQ4MDIyOSwiZXhwIjoxNTM3NDgwNTI5LCJwaS5zcmkiOiJUWEE2SzBreHpza2dtc01YLXIyWmYzbGczcEUiLCJub25jZSI6Ikgzck9TWlVGY05EcHRhdW0iLCJhdXRoX3RpbWUiOjE1Mzc0ODAyMTMsInNfaGFzaCI6InJWb3BRb3RlUnFwdFV0VzdqMkFueHcifQ.SAgJ2_OXrWRo48fBlKbWDz20MA3LVhT2uRpzON533PvCL9Mi4HhYezp13B7oD1IavNewFc89nOBdqs86LEpH1omHtxkHmCeLPzUJz2bPHNWrb8Np7wQYB48YyucJ58elNmX6bwVrKHKgrd9bFIFycxp9Ds6XmHuZ2URm-Pln0fZ1Basb1gFKAlsL0y4re5i_gHujM9EDvhZ4-816Wq_URhEWhMfV0O9iucn4CHuxRrnp4lsfiXSGiG9NhYWO_oa6zqUORXUlfH94uMo2t7WjwzPuOKVsHE8xLGBv6zERMOLM5ibyebtYk83kmefTvOO16OukykNMiOGzXMHAq8DYqw&state=MzNE4EjToRVECGot |
2.678 | response | {'id_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6IlJvMmxnRXNPdFdJMlJiRUxLRV85amZvSVRxWSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJkYy1JUlBjWGU3dThneVc3YU4zdklLQ1FLIiwianRpIjoiZXhTR2E5ckk2ZTZaQmtKdmJpQnR2eCIsImlzcyI6Imh0dHBzOi8vb2lkYy1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTUzNzQ4MDIyOSwiZXhwIjoxNTM3NDgwNTI5LCJwaS5zcmkiOiJUWEE2SzBreHpza2dtc01YLXIyWmYzbGczcEUiLCJub25jZSI6Ikgzck9TWlVGY05EcHRhdW0iLCJhdXRoX3RpbWUiOjE1Mzc0ODAyMTMsInNfaGFzaCI6InJWb3BRb3RlUnFwdFV0VzdqMkFueHcifQ.SAgJ2_OXrWRo48fBlKbWDz20MA3LVhT2uRpzON533PvCL9Mi4HhYezp13B7oD1IavNewFc89nOBdqs86LEpH1omHtxkHmCeLPzUJz2bPHNWrb8Np7wQYB48YyucJ58elNmX6bwVrKHKgrd9bFIFycxp9Ds6XmHuZ2URm-Pln0fZ1Basb1gFKAlsL0y4re5i_gHujM9EDvhZ4-816Wq_URhEWhMfV0O9iucn4CHuxRrnp4lsfiXSGiG9NhYWO_oa6zqUORXUlfH94uMo2t7WjwzPuOKVsHE8xLGBv6zERMOLM5ibyebtYk83kmefTvOO16OukykNMiOGzXMHAq8DYqw', 'state': 'MzNE4EjToRVECGot'} |
2.973 | AuthorizationResponse | {
"id_token": {
"aud": [
"dc-IRPcXe7u8gyW7aN3vIKCQK"
],
"auth_time": 1537480213,
"exp": 1537480529,
"iat": 1537480229,
"iss": "https://oidc-conformance.ping-eng.com:9031",
"jti": "exSGa9rI6e6ZBkJvbiBtvx",
"nonce": "H3rOSZUFcNDptaum",
"pi.sri": "TXA6K0kxzskgmsMX-r2Zf3lg3pE",
"s_hash": "rVopQoteRqptUtW7j2Anxw",
"sub": "joe"
},
"state": "MzNE4EjToRVECGot"
}
|
2.973 | phase | <--<-- 4 --- AccessToken -->--> |
2.973 | phase | <--<-- 5 --- AsyncAuthn -->--> |
2.974 | AuthorizationRequest | {
"client_id": "dc-IRPcXe7u8gyW7aN3vIKCQK",
"max_age": 10000,
"nonce": "HyyBtjOMmcovdBjm",
"redirect_uri": "https://op.certification.openid.net:61401/authz_cb",
"response_type": "id_token",
"scope": "openid",
"state": "4d1LSIrehgY2yVOD"
}
|
2.974 | redirect url | https://oidc-conformance.ping-eng.com:9031/as/authorization.oauth2?state=4d1LSIrehgY2yVOD&nonce=HyyBtjOMmcovdBjm&response_type=id_token&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61401%2Fauthz_cb&max_age=10000&client_id=dc-IRPcXe7u8gyW7aN3vIKCQK |
2.974 | redirect | https://oidc-conformance.ping-eng.com:9031/as/authorization.oauth2?state=4d1LSIrehgY2yVOD&nonce=HyyBtjOMmcovdBjm&response_type=id_token&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61401%2Fauthz_cb&max_age=10000&client_id=dc-IRPcXe7u8gyW7aN3vIKCQK |
3.286 | http args | {} |
3.489 | response | URL with fragment |
3.489 | response | id_token=eyJhbGciOiJSUzI1NiIsImtpZCI6IlJvMmxnRXNPdFdJMlJiRUxLRV85amZvSVRxWSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJkYy1JUlBjWGU3dThneVc3YU4zdklLQ1FLIiwianRpIjoiSEZJeTBxN0pPRW41RmJZQ1c1MkVpdSIsImlzcyI6Imh0dHBzOi8vb2lkYy1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTUzNzQ4MDIzMCwiZXhwIjoxNTM3NDgwNTMwLCJwaS5zcmkiOiJUWEE2SzBreHpza2dtc01YLXIyWmYzbGczcEUiLCJub25jZSI6Ikh5eUJ0ak9NbWNvdmRCam0iLCJhdXRoX3RpbWUiOjE1Mzc0ODAyMTMsInNfaGFzaCI6IkotOGhxZnlnQ00yQnpwbVBkTFpvWWcifQ.e8yo_dwmdKAxWqQwfxzKbR2yogBZtWPr103uLWWOqrzocBVo2T-OQ3nzJBRjXBgd40tUX8a8MYSRhOlxmrvFjFbDTNMxGDonjr_o_LoCd0zGTRjOITpOEgdnRmMYx7vJ4_Pl_1QhZo8Pxs_3hNfygKEIxZTuYN7pq5Gt_JuAjromDVuJzqUl4h5QW6gF9fOLBhT7s1rfjy3O76YXO1qZ02uXYCT8H7MU0oblAic-tUhanj8NpHqr2eI0B1bklbhtShctp_xGN4To2Lo1iuNAg2r-DCZle3_Q7YIdiMjhR0s3n8Uwiu2Qu9EuEGEaHDRe-A4pnr44lhl02OklXEd93w&state=4d1LSIrehgY2yVOD |
3.49 | response | {'id_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6IlJvMmxnRXNPdFdJMlJiRUxLRV85amZvSVRxWSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJkYy1JUlBjWGU3dThneVc3YU4zdklLQ1FLIiwianRpIjoiSEZJeTBxN0pPRW41RmJZQ1c1MkVpdSIsImlzcyI6Imh0dHBzOi8vb2lkYy1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTUzNzQ4MDIzMCwiZXhwIjoxNTM3NDgwNTMwLCJwaS5zcmkiOiJUWEE2SzBreHpza2dtc01YLXIyWmYzbGczcEUiLCJub25jZSI6Ikh5eUJ0ak9NbWNvdmRCam0iLCJhdXRoX3RpbWUiOjE1Mzc0ODAyMTMsInNfaGFzaCI6IkotOGhxZnlnQ00yQnpwbVBkTFpvWWcifQ.e8yo_dwmdKAxWqQwfxzKbR2yogBZtWPr103uLWWOqrzocBVo2T-OQ3nzJBRjXBgd40tUX8a8MYSRhOlxmrvFjFbDTNMxGDonjr_o_LoCd0zGTRjOITpOEgdnRmMYx7vJ4_Pl_1QhZo8Pxs_3hNfygKEIxZTuYN7pq5Gt_JuAjromDVuJzqUl4h5QW6gF9fOLBhT7s1rfjy3O76YXO1qZ02uXYCT8H7MU0oblAic-tUhanj8NpHqr2eI0B1bklbhtShctp_xGN4To2Lo1iuNAg2r-DCZle3_Q7YIdiMjhR0s3n8Uwiu2Qu9EuEGEaHDRe-A4pnr44lhl02OklXEd93w', 'state': '4d1LSIrehgY2yVOD'} |
3.492 | AuthorizationResponse | {
"id_token": {
"aud": [
"dc-IRPcXe7u8gyW7aN3vIKCQK"
],
"auth_time": 1537480213,
"exp": 1537480530,
"iat": 1537480230,
"iss": "https://oidc-conformance.ping-eng.com:9031",
"jti": "HFIy0q7JOEn5FbYCW52Eiu",
"nonce": "HyyBtjOMmcovdBjm",
"pi.sri": "TXA6K0kxzskgmsMX-r2Zf3lg3pE",
"s_hash": "J-8hqfygCM2BzpmPdLZoYg",
"sub": "joe"
},
"state": "4d1LSIrehgY2yVOD"
}
|
3.492 | phase | <--<-- 6 --- AccessToken -->--> |
3.493 | phase | <--<-- 7 --- Done -->--> |
3.493 | end | |
3.493 | assertion | ClaimsCheck |
3.493 | condition | claims-check: status=OK [Checks if specific claims is present or not] |
3.493 | assertion | SameAuthn |
3.493 | condition | same-authn: status=OK [Verifies that the same authentication was used twice in the flow.] |
3.494 | assertion | AuthTimeCheck |
3.494 | condition | auth_time-check: status=OK [Check that the auth_time returned in the ID Token is in the expected range.] |
3.494 | assertion | VerifyResponse |
3.494 | condition | verify-response: status=OK [Checks that the last response was one of a possible set of OpenID Connect Responses] |
3.494 | condition | Done: status=OK |