0.0 | phase | <--<-- 0 --- Webfinger -->--> |
0.0 | not expected to do | WebFinger |
0.0 | phase | <--<-- 1 --- Discovery -->--> |
0.0 | not expected to do | Dynamic discovery |
0.0 | phase | <--<-- 2 --- Registration -->--> |
0.001 | not expected to do | Dynamic registration |
0.001 | phase | <--<-- 3 --- AsyncAuthn -->--> |
0.001 | AuthorizationRequest | {
"client_id": "https://op.certification.openid.net/",
"nonce": "oCwIRRdvKYkIPSFN",
"redirect_uri": "https://op.certification.openid.net:60044/authz_cb",
"response_type": "code",
"scope": "openid address",
"state": "7N0eJUBhbOT0puB6"
}
|
0.001 | redirect url | https://ofis.theoptimalcloud.com/odn/?client_id=https%3A%2F%2Fop.certification.openid.net%2F&scope=openid+address&nonce=oCwIRRdvKYkIPSFN&state=7N0eJUBhbOT0puB6&response_type=code&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60044%2Fauthz_cb |
0.001 | redirect | https://ofis.theoptimalcloud.com/odn/?client_id=https%3A%2F%2Fop.certification.openid.net%2F&scope=openid+address&nonce=oCwIRRdvKYkIPSFN&state=7N0eJUBhbOT0puB6&response_type=code&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60044%2Fauthz_cb |
0.121 | response | {'state': '7N0eJUBhbOT0puB6', 'code': 'lK76kDJ2EsCkHriyiSfPk2BOHY0RDo8e5/hGYD/9R/6K9lUPBSdxrfZxGXeTwnv+Vewp3fLFQBCbhRwuM20dA+d2fpRKFA+d84aoFF5TtaHTatYo0c2yJf5qOc7JH0aheH6c8AbZmehJv2SZLFGF4IxDwoIev/Daq+ECgF5O9DAskxF67S8BiSn3x3aYhN2dAnHJyDN21FUlyPLEiCkkoxgz+3p9XBvRS3gzx6jTSuDuFe1rcLNkt+JmEf9sTNanF+TAVuS7cIxQcGgOvozmbORcYzJFiEo48pmoXKM3gXM='} |
0.122 | response | {'state': '7N0eJUBhbOT0puB6', 'code': 'lK76kDJ2EsCkHriyiSfPk2BOHY0RDo8e5/hGYD/9R/6K9lUPBSdxrfZxGXeTwnv+Vewp3fLFQBCbhRwuM20dA+d2fpRKFA+d84aoFF5TtaHTatYo0c2yJf5qOc7JH0aheH6c8AbZmehJv2SZLFGF4IxDwoIev/Daq+ECgF5O9DAskxF67S8BiSn3x3aYhN2dAnHJyDN21FUlyPLEiCkkoxgz+3p9XBvRS3gzx6jTSuDuFe1rcLNkt+JmEf9sTNanF+TAVuS7cIxQcGgOvozmbORcYzJFiEo48pmoXKM3gXM='} |
0.122 | AuthorizationResponse | {
"code": "lK76kDJ2EsCkHriyiSfPk2BOHY0RDo8e5/hGYD/9R/6K9lUPBSdxrfZxGXeTwnv+Vewp3fLFQBCbhRwuM20dA+d2fpRKFA+d84aoFF5TtaHTatYo0c2yJf5qOc7JH0aheH6c8AbZmehJv2SZLFGF4IxDwoIev/Daq+ECgF5O9DAskxF67S8BiSn3x3aYhN2dAnHJyDN21FUlyPLEiCkkoxgz+3p9XBvRS3gzx6jTSuDuFe1rcLNkt+JmEf9sTNanF+TAVuS7cIxQcGgOvozmbORcYzJFiEo48pmoXKM3gXM=",
"state": "7N0eJUBhbOT0puB6"
}
|
0.122 | phase | <--<-- 4 --- AccessToken -->--> |
0.122 | request | op_args: {'state': '7N0eJUBhbOT0puB6'}, req_args: {'redirect_uri': 'https://op.certification.openid.net:60044/authz_cb'} |
0.122 | do_access_token_request | kwargs:{'state': '7N0eJUBhbOT0puB6', 'request_args': {'state': '7N0eJUBhbOT0puB6', 'client_id': 'https://op.certification.openid.net/', 'grant_type': 'authorization_code', 'code': 'lK76kDJ2EsCkHriyiSfPk2BOHY0RDo8e5/hGYD/9R/6K9lUPBSdxrfZxGXeTwnv+Vewp3fLFQBCbhRwuM20dA+d2fpRKFA+d84aoFF5TtaHTatYo0c2yJf5qOc7JH0aheH6c8AbZmehJv2SZLFGF4IxDwoIev/Daq+ECgF5O9DAskxF67S8BiSn3x3aYhN2dAnHJyDN21FUlyPLEiCkkoxgz+3p9XBvRS3gzx6jTSuDuFe1rcLNkt+JmEf9sTNanF+TAVuS7cIxQcGgOvozmbORcYzJFiEo48pmoXKM3gXM=', 'redirect_uri': 'https://op.certification.openid.net:60044/authz_cb'}}
|
0.123 | AccessTokenRequest | {
"client_id": "https://op.certification.openid.net/",
"code": "lK76kDJ2EsCkHriyiSfPk2BOHY0RDo8e5/hGYD/9R/6K9lUPBSdxrfZxGXeTwnv+Vewp3fLFQBCbhRwuM20dA+d2fpRKFA+d84aoFF5TtaHTatYo0c2yJf5qOc7JH0aheH6c8AbZmehJv2SZLFGF4IxDwoIev/Daq+ECgF5O9DAskxF67S8BiSn3x3aYhN2dAnHJyDN21FUlyPLEiCkkoxgz+3p9XBvRS3gzx6jTSuDuFe1rcLNkt+JmEf9sTNanF+TAVuS7cIxQcGgOvozmbORcYzJFiEo48pmoXKM3gXM=",
"grant_type": "authorization_code",
"redirect_uri": "https://op.certification.openid.net:60044/authz_cb",
"state": "7N0eJUBhbOT0puB6"
}
|
0.123 | request_url | https://ofis.theoptimalcloud.com/odn.id/api/access |
0.123 | request_http_args | {'headers': {'Authorization': 'Basic aHR0cHM6Ly9vcC5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvOjh1VzhRR0puMk5oOHl0NA==', 'Content-Type': 'application/x-www-form-urlencoded'}} |
0.123 | request | client_id=https%3A%2F%2Fop.certification.openid.net%2F&grant_type=authorization_code&code=lK76kDJ2EsCkHriyiSfPk2BOHY0RDo8e5%2FhGYD%2F9R%2F6K9lUPBSdxrfZxGXeTwnv%2BVewp3fLFQBCbhRwuM20dA%2Bd2fpRKFA%2Bd84aoFF5TtaHTatYo0c2yJf5qOc7JH0aheH6c8AbZmehJv2SZLFGF4IxDwoIev%2FDaq%2BECgF5O9DAskxF67S8BiSn3x3aYhN2dAnHJyDN21FUlyPLEiCkkoxgz%2B3p9XBvRS3gzx6jTSuDuFe1rcLNkt%2BJmEf9sTNanF%2BTAVuS7cIxQcGgOvozmbORcYzJFiEo48pmoXKM3gXM%3D&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A60044%2Fauthz_cb&state=7N0eJUBhbOT0puB6 |
1.288 | http response | url:https://ofis.theoptimalcloud.com/odn.id/api/access status_code:200
|
1.289 | response | {'access_token': 'vEeUdXxV3f5P4EYtO1YDe4kw_ujFuw7YKo0gdvrBZQWurbLV07WAx7nogE0wIS_AF7_p44Z7hH_kovZLjL6V3yrLkP67poA13wCwS4rozBQfM-TnqMgFlwXe3wOAjSKzaRlTuIrr8GRalDPtwUHxq0EDFJg3ooYXI2AyZR-OIxq052Jthcsd9sKzm2lCvzcpzrqSXE5lEY9F-tzmv0gp1JdjFlYTniu9ggPqy5AK4MAQvDkl_9MDpBg5kcZL5V34AoKgEngW1wKc20TWWNcFBQ', 'id_token': 'eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6Il9zZnJweWVzUFVyQTl5TkhXYXBOZXYwOVlYQSJ9.eyJzdWIiOiJqQnJEYWJVVTdFR1V5QXhEQjZLekNnPT0iLCJlbWFpbCI6ImplZmYuYm9ocmVuQG9wdGltYWxpZG0uY29tIiwiZ2l2ZW5fbmFtZSI6IkplZmZyZXkiLCJmYW1pbHlfbmFtZSI6IkJvaHJlbiIsIm5hbWUiOiJKZWZmcmV5IEJvaHJlbiIsIm1pZGRsZV9uYW1lIjoiU2NvdHQiLCJwcmVmZXJyZWRfdXNlcm5hbWUiOiJqZWZmLmJvaHJlbkBvcHRpbWFsaWRtLmNvbSIsInBob25lX251bWJlciI6IjU1NS0xMjEyIiwibmlja25hbWUiOiJKZWZmcmV5IiwicHJvZmlsZSI6Imh0dHBzOi8vb3B0aW1hbGlkbS5jb20iLCJwaWN0dXJlIjoiaHR0cHM6Ly9vcHRpbWFsaWRtLmNvbSIsIndlYnNpdGUiOiJodHRwOi8vb3B0aW1hbGlkbS5jb20iLCJnZW5kZXIiOiJtYWxlIiwiYmlydGhkYXRlIjoiMTk3Mi0wMS0wMSIsInpvbmVpbmZvIjoiRWFzdCBVUyIsImxvY2FsZSI6ImVuLVVTIiwibm9uY2UiOiJvQ3dJUlJkdktZa0lQU0ZOIiwiYXRfaGFzaCI6IjloaXp4bEhENU9mWmFoeHB3eVRFemciLCJjX2hhc2giOiJDcEY1MlZ1bFFGY3pwallja0Z3ZV9RIiwiaWF0IjoxNTA3ODM4NzY3LCJpc3MiOiJodHRwczovL29maXMudGhlb3B0aW1hbGNsb3VkLmNvbS9vZG4vIiwiYXVkIjoiaHR0cHM6Ly9vcC5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvIiwiZXhwIjoxNTA3ODM5MzY3LCJuYmYiOjE1MDc4Mzg3NjV9.sXIVCHYItGS0lZES3DdRnun8mpyRxi7KKGvShSKbzJS6Q226c0XorI_XW-mB3qgZ4J0bQGtKa_FDncZ4DrDH5f56qGklWsR4J-t5m6l8tWt8VOXC2lNjZbtCw0581gmksDjptA6m9oE7_JuQqMQdZWhFqH6MeQWOABTr7elMSiGALpkVnkZ-4snrGCT_Lapxnnio7n2MVobN0dxqLHdgH-pbrrunU6p5Xd5_U5k9QXGsNWtMKy3lSvDuY6e42gMgnHYZ9sne1Iz6ZSqZP2xDJHFcnNjqj1TCXGsE7HS3OHWldyLbZ3MSZAsBxsAHATZLdT2g_D8Zee6g2zQJRSV82w', 'token_type': 'Bearer', 'expires_in': 36000} |
1.414 | AccessTokenResponse | {
"access_token": "vEeUdXxV3f5P4EYtO1YDe4kw_ujFuw7YKo0gdvrBZQWurbLV07WAx7nogE0wIS_AF7_p44Z7hH_kovZLjL6V3yrLkP67poA13wCwS4rozBQfM-TnqMgFlwXe3wOAjSKzaRlTuIrr8GRalDPtwUHxq0EDFJg3ooYXI2AyZR-OIxq052Jthcsd9sKzm2lCvzcpzrqSXE5lEY9F-tzmv0gp1JdjFlYTniu9ggPqy5AK4MAQvDkl_9MDpBg5kcZL5V34AoKgEngW1wKc20TWWNcFBQ",
"expires_in": 36000,
"id_token": {
"at_hash": "9hizxlHD5OfZahxpwyTEzg",
"aud": [
"https://op.certification.openid.net/"
],
"birthdate": "1972-01-01",
"c_hash": "CpF52VulQFczpjYckFwe_Q",
"email": "jeff.bohren@optimalidm.com",
"exp": 1507839367,
"family_name": "Bohren",
"gender": "male",
"given_name": "Jeffrey",
"iat": 1507838767,
"iss": "https://ofis.theoptimalcloud.com/odn/",
"locale": "en-US",
"middle_name": "Scott",
"name": "Jeffrey Bohren",
"nbf": 1507838765,
"nickname": "Jeffrey",
"nonce": "oCwIRRdvKYkIPSFN",
"phone_number": "555-1212",
"picture": "https://optimalidm.com",
"preferred_username": "jeff.bohren@optimalidm.com",
"profile": "https://optimalidm.com",
"sub": "jBrDabUU7EGUyAxDB6KzCg==",
"website": "http://optimalidm.com",
"zoneinfo": "East US"
},
"token_type": "Bearer"
}
|
1.414 | phase | <--<-- 5 --- UserInfo -->--> |
1.414 | do_user_info_request | kwargs:{'state': '7N0eJUBhbOT0puB6', 'method': 'GET', 'authn_method': 'bearer_header'}
|
1.415 | request | {'body': None} |
1.415 | request_url | https://ofis.theoptimalcloud.com/odn.id/api/userprofile |
1.415 | request_http_args | {'headers': {'Authorization': 'Bearer vEeUdXxV3f5P4EYtO1YDe4kw_ujFuw7YKo0gdvrBZQWurbLV07WAx7nogE0wIS_AF7_p44Z7hH_kovZLjL6V3yrLkP67poA13wCwS4rozBQfM-TnqMgFlwXe3wOAjSKzaRlTuIrr8GRalDPtwUHxq0EDFJg3ooYXI2AyZR-OIxq052Jthcsd9sKzm2lCvzcpzrqSXE5lEY9F-tzmv0gp1JdjFlYTniu9ggPqy5AK4MAQvDkl_9MDpBg5kcZL5V34AoKgEngW1wKc20TWWNcFBQ'}} |
1.5 | http response | url:https://ofis.theoptimalcloud.com/odn.id/api/userprofile status_code:200
|
1.5 | OpenIDSchema | {
"address": {},
"birthdate": "1972-01-01",
"email": "jeff.bohren@optimalidm.com",
"email_verified": false,
"family_name": "Bohren",
"gender": "male",
"given_name": "Jeffrey",
"locale": "en-US",
"middle_name": "Scott",
"name": "Jeffrey Bohren",
"nickname": "Jeffrey",
"phone_number": "555-1212",
"phone_number_verified": false,
"picture": "https://optimalidm.com",
"preferred_username": "jeff.bohren@optimalidm.com",
"profile": "https://optimalidm.com",
"sub": "jBrDabUU7EGUyAxDB6KzCg==",
"updated_at": 0,
"website": "http://optimalidm.com",
"zoneinfo": "East US"
}
|
1.5 | OpenIDSchema | {
"address": {},
"birthdate": "1972-01-01",
"email": "jeff.bohren@optimalidm.com",
"email_verified": false,
"family_name": "Bohren",
"gender": "male",
"given_name": "Jeffrey",
"locale": "en-US",
"middle_name": "Scott",
"name": "Jeffrey Bohren",
"nickname": "Jeffrey",
"phone_number": "555-1212",
"phone_number_verified": false,
"picture": "https://optimalidm.com",
"preferred_username": "jeff.bohren@optimalidm.com",
"profile": "https://optimalidm.com",
"sub": "jBrDabUU7EGUyAxDB6KzCg==",
"updated_at": 0,
"website": "http://optimalidm.com",
"zoneinfo": "East US"
}
|
1.5 | phase | <--<-- 6 --- Done -->--> |
1.5 | end | |
1.501 | assertion | CheckHTTPResponse |
1.501 | condition | check-http-response: status=OK [Checks that the HTTP response status is within the 200 or 300 range. Also does some extra JSON checks] |
1.502 | assertion | VerifyResponse |
1.502 | condition | verify-response: status=OK [Checks that the last response was one of a possible set of OpenID Connect Responses] |
1.502 | assertion | VerifyScopes |
1.502 | condition | verify-scopes: status=OK [Verifies that the claims corresponding to the requested scopes are returned] |
1.502 | condition | Done: status=OK |