0 | phase | <--<-- 0 --- Webfinger -->--> |
0 | not expected to do | WebFinger |
0 | phase | <--<-- 1 --- Discovery -->--> |
0 | provider_config | kwargs:{'issuer': 'https://cloud-api.loginradius.com/sso/oidc/v2/internal-mayank/oidctest'}
|
0 | http response | url:https://cloud-api.loginradius.com/sso/oidc/v2/internal-mayank/oidctest/.well-known/openid-configuration status_code:200
|
0 | ProviderConfigurationResponse | {
"acr_values_supported": [
"loginradius:nist:level:1:re-auth"
],
"authorization_endpoint": "https://cloud-api.loginradius.com/sso/oidc/v2/oidctest/authorize",
"backchannel_logout_session_supported": false,
"backchannel_logout_supported": false,
"claims_parameter_supported": false,
"claims_supported": [
"middle_name",
"profile",
"nickname",
"picture",
"birthdate",
"Country",
"Favicon",
"phone_number_verified",
"name",
"given_name",
"address",
"preferred_username",
"LastName",
"email_verified",
"auth_time",
"UserName",
"FirstName",
"email",
"phone_number",
"website",
"gender",
"zoneinfo",
"acr",
"CustomFields.customerid",
"Uid",
"family_name",
"locale",
"updated_at"
],
"frontchannel_logout_session_supported": false,
"frontchannel_logout_supported": false,
"grant_types_supported": [
"authorization_code",
"refresh_token"
],
"id_token_signing_alg_values_supported": [
"RS256"
],
"issuer": "https://cloud-api.loginradius.com/sso/oidc/v2/internal-mayank/oidctest",
"jwks_uri": "https://cloud-api.loginradius.com/sso/oidc/v2/internal-mayank/oidctest/jwks",
"request_parameter_supported": false,
"request_uri_parameter_supported": true,
"require_request_uri_registration": false,
"response_modes_supported": [
"query",
"form_post",
"fragment"
],
"response_types_supported": [
"code",
"token",
"id_token",
"code token",
"code id_token",
"token id_token",
"code token id_token"
],
"revocation_endpoint": "https://cloud-api.loginradius.com/sso/oidc/v2/oidctest/revoke",
"scopes_supported": [
"openid",
"email",
"phone",
"profile",
"address"
],
"subject_types_supported": [
"public"
],
"token_endpoint": "https://cloud-api.loginradius.com/sso/oidc/v2/oidctest/token",
"token_endpoint_auth_methods_supported": [
"client_secret_post",
"client_secret_basic"
],
"userinfo_endpoint": "https://cloud-api.loginradius.com/sso/oidc/v2/internal-mayank/oidctest/userinfo",
"version": "3.0"
}
|
0 | phase | <--<-- 2 --- Registration -->--> |
0 | not expected to do | Dynamic registration |
0 | phase | <--<-- 3 --- AsyncAuthn -->--> |
0 | AuthorizationRequest | {
"client_id": "112563f6-1480-40b8-8e28-e072ca212c82",
"nonce": "7vkkooW0dyyOudsj",
"redirect_uri": "https://op.certification.openid.net:61909/authz_cb",
"response_type": "code id_token token",
"scope": "openid phone",
"state": "EYtXSttYCWyFB7BN"
}
|
0 | redirect url | https://cloud-api.loginradius.com/sso/oidc/v2/oidctest/authorize?state=EYtXSttYCWyFB7BN&nonce=7vkkooW0dyyOudsj&response_type=code+id_token+token&scope=openid+phone&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61909%2Fauthz_cb&client_id=112563f6-1480-40b8-8e28-e072ca212c82 |
0 | redirect | https://cloud-api.loginradius.com/sso/oidc/v2/oidctest/authorize?state=EYtXSttYCWyFB7BN&nonce=7vkkooW0dyyOudsj&response_type=code+id_token+token&scope=openid+phone&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61909%2Fauthz_cb&client_id=112563f6-1480-40b8-8e28-e072ca212c82 |
13 | http args | {} |
13 | response | URL with fragment |
13 | response | state=EYtXSttYCWyFB7BN&code=bfff33d39827ba63e0a2d20e926b5927%3A7e80151a7677b5be418403698f6c010b40bf553ba327a09b558e1e2bf798af5237caca22361c3f63eb89564a736787383f7e4bf510506c79476da2662c550e87d59b2f03c971add5c7dcc10e0ca25f5a0f4d71c0bd9edf485888a40d3dea1b8df58d86360b5bc1011b85355ffe9d732e&access_token=c6cd4c79-f71f-471d-ae8b-9bcf6f107965&token_type=Bearer&expires_in=895&id_token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjIwMSIsInR5cCI6IkpXVCJ9.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.Bo6NYxZHYOKPJBatzE4_UzeVDA__WSOkDjg6EerBLfkX1GozFdRCi1ImAOJqFIFNRmYdw4_Jxn9KftSk2NVFo7wdSHoT0c2DKR9TfaKmOYYZc8kDEvIUIyBeJCHcHWSYSgt2IWhIfyT2Dr7VxRxsdJNwO1EPDVGUSOLp_yhcOvWMisJi1ypEKmP9VLZjmRiQVs0EngI9X2I7m-fZ1g_aB-Dl0SnCv3YdKQ-YaPN22WcCxdHZ1sY5K32JESRTCq-o6TEMWmjcptNRafTovQSeV5b7n4dvdUgLTUWiRiA63wvq4A29QWC-IKpvI9eBXGPSaP8QcYiCNDTJjSBEjFR5kQ |
13 | response | {'state': 'EYtXSttYCWyFB7BN', 'code': 'bfff33d39827ba63e0a2d20e926b5927:7e80151a7677b5be418403698f6c010b40bf553ba327a09b558e1e2bf798af5237caca22361c3f63eb89564a736787383f7e4bf510506c79476da2662c550e87d59b2f03c971add5c7dcc10e0ca25f5a0f4d71c0bd9edf485888a40d3dea1b8df58d86360b5bc1011b85355ffe9d732e', 'access_token': 'c6cd4c79-f71f-471d-ae8b-9bcf6f107965', 'token_type': 'Bearer', 'expires_in': 895, 'id_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6IjIwMSIsInR5cCI6IkpXVCJ9.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.Bo6NYxZHYOKPJBatzE4_UzeVDA__WSOkDjg6EerBLfkX1GozFdRCi1ImAOJqFIFNRmYdw4_Jxn9KftSk2NVFo7wdSHoT0c2DKR9TfaKmOYYZc8kDEvIUIyBeJCHcHWSYSgt2IWhIfyT2Dr7VxRxsdJNwO1EPDVGUSOLp_yhcOvWMisJi1ypEKmP9VLZjmRiQVs0EngI9X2I7m-fZ1g_aB-Dl0SnCv3YdKQ-YaPN22WcCxdHZ1sY5K32JESRTCq-o6TEMWmjcptNRafTovQSeV5b7n4dvdUgLTUWiRiA63wvq4A29QWC-IKpvI9eBXGPSaP8QcYiCNDTJjSBEjFR5kQ'} |
13 | AuthorizationResponse | {
"access_token": "c6cd4c79-f71f-471d-ae8b-9bcf6f107965",
"code": "bfff33d39827ba63e0a2d20e926b5927:7e80151a7677b5be418403698f6c010b40bf553ba327a09b558e1e2bf798af5237caca22361c3f63eb89564a736787383f7e4bf510506c79476da2662c550e87d59b2f03c971add5c7dcc10e0ca25f5a0f4d71c0bd9edf485888a40d3dea1b8df58d86360b5bc1011b85355ffe9d732e",
"expires_in": 895,
"id_token": {
"address": {},
"at_hash": "1qdPIPTrytmDS9I_py3Bgw",
"aud": [
"112563f6-1480-40b8-8e28-e072ca212c82"
],
"auth_time": 1594286992,
"c_hash": "TNJrXon7WDQFissyrjy8Pg",
"country": null,
"email": {
"Type": "Primary",
"Value": "cloudssotest@mailazy.com"
},
"exp": 1594287597,
"favicon1": null,
"fname": "cloudssot",
"iat": 1594286997,
"iss": "https://cloud-api.loginradius.com/sso/oidc/v2/internal-mayank/oidctest",
"jti": "31bc9f1a-fce8-4bea-b453-39d57791c765",
"lname": "tesrt",
"nbf": 1594286997,
"nonce": "7vkkooW0dyyOudsj",
"phone_number": "+19029095714",
"phone_number_verified": true,
"sub": "0b7f945b8c5f4a36a35bf49f7239bfa4",
"uid": "0b7f945b8c5f4a36a35bf49f7239bfa4",
"username": "cloudssotest"
},
"state": "EYtXSttYCWyFB7BN",
"token_type": "Bearer"
}
|
13 | phase | <--<-- 4 --- AccessToken -->--> |
13 | request | op_args: {'state': 'EYtXSttYCWyFB7BN'}, req_args: {'redirect_uri': 'https://op.certification.openid.net:61909/authz_cb'} |
13 | do_access_token_request | kwargs:{'request_args': {'redirect_uri': 'https://op.certification.openid.net:61909/authz_cb', 'code': 'bfff33d39827ba63e0a2d20e926b5927:7e80151a7677b5be418403698f6c010b40bf553ba327a09b558e1e2bf798af5237caca22361c3f63eb89564a736787383f7e4bf510506c79476da2662c550e87d59b2f03c971add5c7dcc10e0ca25f5a0f4d71c0bd9edf485888a40d3dea1b8df58d86360b5bc1011b85355ffe9d732e', 'state': 'EYtXSttYCWyFB7BN', 'grant_type': 'authorization_code', 'client_id': '112563f6-1480-40b8-8e28-e072ca212c82'}, 'state': 'EYtXSttYCWyFB7BN', 'authn_method': 'client_secret_basic'}
|
13 | AccessTokenRequest | {
"code": "bfff33d39827ba63e0a2d20e926b5927:7e80151a7677b5be418403698f6c010b40bf553ba327a09b558e1e2bf798af5237caca22361c3f63eb89564a736787383f7e4bf510506c79476da2662c550e87d59b2f03c971add5c7dcc10e0ca25f5a0f4d71c0bd9edf485888a40d3dea1b8df58d86360b5bc1011b85355ffe9d732e",
"grant_type": "authorization_code",
"redirect_uri": "https://op.certification.openid.net:61909/authz_cb",
"state": "EYtXSttYCWyFB7BN"
}
|
13 | request_url | https://cloud-api.loginradius.com/sso/oidc/v2/oidctest/token |
13 | request_http_args | {'headers': {'Authorization': 'Basic MTEyNTYzZjYtMTQ4MC00MGI4LThlMjgtZTA3MmNhMjEyYzgyOjc4ZDNkYmUzLTEwZDEtNDk3Yi05MzU3LThlZWQ0NTkzMzYzZA==', 'Content-Type': 'application/x-www-form-urlencoded'}} |
13 | request | grant_type=authorization_code&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61909%2Fauthz_cb&code=bfff33d39827ba63e0a2d20e926b5927%3A7e80151a7677b5be418403698f6c010b40bf553ba327a09b558e1e2bf798af5237caca22361c3f63eb89564a736787383f7e4bf510506c79476da2662c550e87d59b2f03c971add5c7dcc10e0ca25f5a0f4d71c0bd9edf485888a40d3dea1b8df58d86360b5bc1011b85355ffe9d732e&state=EYtXSttYCWyFB7BN |
13 | http response | url:https://cloud-api.loginradius.com/sso/oidc/v2/oidctest/token status_code:200
|
13 | response | {'access_token': 'c6cd4c79-f71f-471d-ae8b-9bcf6f107965', 'token_type': 'Bearer', 'refresh_token': '492a454b-39dd-4ddf-9326-298d4b780901', 'expires_in': 893, 'id_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6IjIwMSIsInR5cCI6IkpXVCJ9.eyJhZGRyZXNzIjp7fSwiYXNkZmdoIjoiIiwiYXRfaGFzaCI6IjFxZFBJUFRyeXRtRFM5SV9weTNCZ3ciLCJhdWQiOiIxMTI1NjNmNi0xNDgwLTQwYjgtOGUyOC1lMDcyY2EyMTJjODIiLCJhdXRoX3RpbWUiOjE1OTQyODY5OTIsImNfaGFzaCI6IlROSnJYb243V0RRRmlzc3lyank4UGciLCJjb3VudHJ5IjpudWxsLCJlbWFpbCI6W3siVHlwZSI6IlByaW1hcnkiLCJWYWx1ZSI6ImNsb3Vkc3NvdGVzdEBtYWlsYXp5LmNvbSJ9XSwiZXhwIjoxNTk0Mjg3NTk4LCJmYXZpY29uMSI6bnVsbCwiZm5hbWUiOiJjbG91ZHNzb3QiLCJpYXQiOjE1OTQyODY5OTgsImlzcyI6Imh0dHBzOi8vY2xvdWQtYXBpLmxvZ2lucmFkaXVzLmNvbS9zc28vb2lkYy92Mi9pbnRlcm5hbC1tYXlhbmsvb2lkY3Rlc3QiLCJqdGkiOiJkNjI4MjYyZS0xZGY5LTQ2MzUtOTgwNy05Nzg0Yzc2NDlhNDAiLCJsbmFtZSI6InRlc3J0IiwibmJmIjoxNTk0Mjg2OTk4LCJub25jZSI6Ijd2a2tvb1cwZHl5T3Vkc2oiLCJwaG9uZV9udW1iZXIiOiIrMTkwMjkwOTU3MTQiLCJwaG9uZV9udW1iZXJfdmVyaWZpZWQiOnRydWUsInN1YiI6IjBiN2Y5NDViOGM1ZjRhMzZhMzViZjQ5ZjcyMzliZmE0IiwidWlkIjoiMGI3Zjk0NWI4YzVmNGEzNmEzNWJmNDlmNzIzOWJmYTQiLCJ1c2VybmFtZSI6ImNsb3Vkc3NvdGVzdCJ9.k0EbcYtuphcSqUZb6eDxi-R6sn27HywDFDcpQ8kZcCQTPfmXz6hhsMzJ9hXa9KBvJaKQhiCqtfVg-pHnw9O4KGr1OsLzgthVQ3jWOptlj5Nro9tUP13WhthtzuLpx6WfFTJ3sCFH9kXaA96fYlQpQRPlAJ-XtAk2aB0dLcmFWEMXDd8uR5Bj-TpQtNxX1YOUk9mstCpzi-uNFZn-Ss5hb7i2o8f02Z9RvVm5Mam1kDH_8DQ-zrsiDOLB93B3wt0QFJN26Sf_OGVpFVruOX6KnPIHDwI6ITzNlIz8l3kQHytyF6sOcu3xcTI3Gq8VHdfnSnERl6wVTFA1tWHifq1SuA'} |
13 | AccessTokenResponse | {
"access_token": "c6cd4c79-f71f-471d-ae8b-9bcf6f107965",
"expires_in": 893,
"id_token": {
"address": {},
"at_hash": "1qdPIPTrytmDS9I_py3Bgw",
"aud": [
"112563f6-1480-40b8-8e28-e072ca212c82"
],
"auth_time": 1594286992,
"c_hash": "TNJrXon7WDQFissyrjy8Pg",
"country": null,
"email": {
"Type": "Primary",
"Value": "cloudssotest@mailazy.com"
},
"exp": 1594287598,
"favicon1": null,
"fname": "cloudssot",
"iat": 1594286998,
"iss": "https://cloud-api.loginradius.com/sso/oidc/v2/internal-mayank/oidctest",
"jti": "d628262e-1df9-4635-9807-9784c7649a40",
"lname": "tesrt",
"nbf": 1594286998,
"nonce": "7vkkooW0dyyOudsj",
"phone_number": "+19029095714",
"phone_number_verified": true,
"sub": "0b7f945b8c5f4a36a35bf49f7239bfa4",
"uid": "0b7f945b8c5f4a36a35bf49f7239bfa4",
"username": "cloudssotest"
},
"refresh_token": "492a454b-39dd-4ddf-9326-298d4b780901",
"token_type": "Bearer"
}
|
13 | jws header | {'alg': 'RS256', 'kid': '201', 'typ': 'JWT'} |
13 | phase | <--<-- 5 --- UserInfo -->--> |
13 | do_user_info_request | kwargs:{'state': 'EYtXSttYCWyFB7BN', 'method': 'GET', 'authn_method': 'bearer_header'}
|
13 | request | {'body': None} |
13 | request_url | https://cloud-api.loginradius.com/sso/oidc/v2/internal-mayank/oidctest/userinfo |
13 | request_http_args | {'headers': {'Authorization': 'Bearer c6cd4c79-f71f-471d-ae8b-9bcf6f107965'}} |
13 | http response | url:https://cloud-api.loginradius.com/sso/oidc/v2/internal-mayank/oidctest/userinfo status_code:200
|
13 | OpenIDSchema | {
"address": {},
"aud": "112563f6-1480-40b8-8e28-e072ca212c82",
"country": null,
"email": {
"Type": "Primary",
"Value": "cloudssotest@mailazy.com"
},
"exp": 1594287598,
"favicon1": null,
"fname": "cloudssot",
"iat": 1594286998,
"iss": "https://cloud-api.loginradius.com/sso/oidc/v2/internal-mayank/oidctest",
"jti": "9d0eb01a-c492-4a9c-a601-84510769ecf0",
"lname": "tesrt",
"nbf": 1594286998,
"nonce": "7vkkooW0dyyOudsj",
"phone_number": "+19029095714",
"phone_number_verified": true,
"sub": "0b7f945b8c5f4a36a35bf49f7239bfa4",
"uid": "0b7f945b8c5f4a36a35bf49f7239bfa4",
"username": "cloudssotest"
}
|
13 | OpenIDSchema | {
"address": {},
"aud": "112563f6-1480-40b8-8e28-e072ca212c82",
"country": null,
"email": {
"Type": "Primary",
"Value": "cloudssotest@mailazy.com"
},
"exp": 1594287598,
"favicon1": null,
"fname": "cloudssot",
"iat": 1594286998,
"iss": "https://cloud-api.loginradius.com/sso/oidc/v2/internal-mayank/oidctest",
"jti": "9d0eb01a-c492-4a9c-a601-84510769ecf0",
"lname": "tesrt",
"nbf": 1594286998,
"nonce": "7vkkooW0dyyOudsj",
"phone_number": "+19029095714",
"phone_number_verified": true,
"sub": "0b7f945b8c5f4a36a35bf49f7239bfa4",
"uid": "0b7f945b8c5f4a36a35bf49f7239bfa4",
"username": "cloudssotest"
}
|
13 | jws header | {'alg': 'RS256', 'kid': '201', 'typ': 'JWT'} |
13 | phase | <--<-- 6 --- Done -->--> |
13 | end | |
13 | assertion | VerifyScopes |
13 | condition | verify-scopes: status=OK [Verifies that the claims corresponding to the requested scopes are returned] |
13 | assertion | CheckHTTPResponse |
13 | condition | check-http-response: status=OK [Checks that the HTTP response status is within the 200 or 300 range. Also does some extra JSON checks] |
13 | assertion | VerifyResponse |
13 | condition | verify-response: status=OK [Checks that the last response was one of a possible set of OpenID Connect Responses] |
13 | condition | Done: status=OK |