Test Summary

Test Results

Expand All Collapse All
All times are UTC
2020-09-01 12:51:55 INFO
TEST-RUNNER
Test instance THNSYyIUBFnifpf created
baseUrl
https://www.certification.openid.net/test/THNSYyIUBFnifpf
variant
{
  "client_auth_type": "client_secret_basic",
  "response_type": "id_token token",
  "request_type": "plain_http_request",
  "response_mode": "form_post",
  "client_registration": "dynamic_client"
}
alias

                                
description
test suite runner for openid-client
planId
2AWaC6uTX8byR
config
{
  "description": "test suite runner for openid-client",
  "waitTimeoutSeconds": 2
}
testName
oidcc-client-test-kid-absent-multiple-jwks
2020-09-01 12:51:55 SUCCESS
OIDCCGenerateServerConfiguration
Generated default server configuration
server_configuration
{
  "issuer": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/",
  "authorization_endpoint": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/token",
  "jwks_uri": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/jwks",
  "userinfo_endpoint": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/userinfo",
  "registration_endpoint": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "gender",
    "birthdate",
    "preferred_username",
    "profile",
    "website",
    "locale",
    "updated_at",
    "address",
    "zoneinfo",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ]
}
2020-09-01 12:51:55
SetTokenEndpointAuthMethodsSupportedToClientSecretBasicOnly
Changed token_endpoint_auth_methods_supported to client_secret_basic only in server configuration
server_configuration
{
  "issuer": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/",
  "authorization_endpoint": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/token",
  "jwks_uri": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/jwks",
  "userinfo_endpoint": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/userinfo",
  "registration_endpoint": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "gender",
    "birthdate",
    "preferred_username",
    "profile",
    "website",
    "locale",
    "updated_at",
    "address",
    "zoneinfo",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ]
}
2020-09-01 12:51:55
OIDCCGenerateServerJWKsMultipleSigningsKeyWithNoKeyIds
Generated server public private JWK sets
server_jwks
{
  "keys": [
    {
      "p": "67EauN5q6QUXXd8WZ1pNZA7xnUAEGTxIcaGQW_X5qx_37RWlPU6VB4uhK3j9V6mQId--zT0UKvbySzvsKseO4inpuDA0pPmpF4K2vAWdGFYBdBJtHe-tagpYZ8CLZHRUizviYi149atQKHeZ_xd81sflQpIsIBg90TO7A06MLOU",
      "kty": "RSA",
      "q": "0v23yQfs4_7To7u_FU3bmT17dJclikCIWBgVV4-qAYN5PGqhtT4cKTXNxlj5-2O6I-Nkgf32l2OWz6pTxYGV6XWQp652Xi71Sd9-3w8CgPxpuyo0kzET41bsyPARCZoA3coYhwSrRYUumP_WRe2jSosHwnsoucJhMf0fALg-H5M",
      "d": "VDhICDVNw3Vl2_2nThueHIyMCiNBYdI_EljNcG4fJIZVL0N1QEue3OZT1pZhazBZJq5gbhciYlTLJaob4Jd_tJCAlFcS0ePonzbaloFZPvi8eYgtPiBznlLpgYCZR0MpPmu6AFHBiVe9f40dDTKYgs6V-eDze89GiXSsTSte1yo-FbFHTZrjlFrTRJlYvWDxq-6nbZHdX6MbjvWNUdi17_4lX-PkdvXPhwlXkdNkQNCjrPVXr7ubNFqAhDGMzoI40Bn4JPmPgXBvQADBYw5VylT12dDslgj5fhwf-4kEIPRyA64sSU2Z8ktLwVL7h2ygFFJv6cGOvCnAgaL7WUoL8Q",
      "e": "AQAB",
      "use": "sig",
      "qi": "adILvcZd_7AAK79lJ2cqwFbTgKclnIjo3tWzx4CjKo8nHtm3l3fwCC724D1yGPJPse_6965oqUnda3C_oe1U5-fy4p2KqU0_lVABKS6tBpx05nnaNy-ppDJsxvf0cRU3hNokHQDZq0xxsBDATtAVWM9beLwiXdM_UlvPlnx53E0",
      "dp": "ysoDN_UG_59Fz5rW5-4mkGTbNnWSETRxEHP2hWlKfBZxdygcmHc4etmEvqbHM9nNDZg5ztUyuRTovBq-xMAXDDkLw1KWuSumdXgeSgB6finh7kC8afmCt65XCk38oV4GMBZCXj7JyHax7V-avIU1AIfVlkW2eZbh-VINInc-3JE",
      "dq": "0E2I6sIWUCm_TIEI78GEMlAO2FZ4y3tWoJJ2T5IYZ5IjWVB1Afil2NGzrEUf197nYJMZIXVXxLKfq7ofJnj_RhO5krKdTfLSW_J40UOCV1HcGNpcOY1UczfYYbERQQd4H39so7AqX2JTVN4P783jTq7gJFNvK6YKS035E77SJl0",
      "n": "wkDfJ76bldvdfNCxam4ix1pxsJnFswSsz2_YAh9QTL1KPF7SdonpewdEtz12vkN3nw1O6SEtgwv_A1hKVft_c3ORZ7vhKN_SebKRwJJQeh3Vv0fU9GSQNyAy7R3iDPpUF50voBljS9GSZnsvbffxWE3sJZ1WspiSihe6raq7moguE9nHNbzYfJ1k0Fa3HjOcvbdbgV3QHemOqJfPlzVbvPnjAozLHPBjc5RyvZzsIKs9HAANMxtve4tUTA8v_AMu7h8JdTLPXLrbageiEgIU-e7H8HP7CJ-Q3zi9XQdROZErwkiJpyPGIp0L7YaMlAmxEoL12HVFqS48XEqgi2OCfw"
    },
    {
      "kty": "EC",
      "d": "OaE2bxZHDismUsvEPsdUOJOetD4zDWMcxRdxlgIHWX0",
      "use": "sig",
      "crv": "P-256",
      "x": "cer89mJLlwh5U8sQUR8R3co3EVvMGdhx6wqTISsYoew",
      "y": "5VlPCSt-FDJQ1TeSKmEArTiYJHXMAtx5WZ-Vta7Pv6w"
    },
    {
      "kty": "EC",
      "d": "ehpptYeyu_wH95vD9okY_jf9yL0SHa-Grx9dRHlzHfc",
      "use": "sig",
      "crv": "secp256k1",
      "x": "xOl5kgyyFzrKHm8jFxjruagENK4DaNe3CjSy1VKXbAc",
      "y": "mJ3i36hu_2yQoifuGQeUqJTZPTXtVEpB-VxajgzT32E"
    },
    {
      "kty": "OKP",
      "d": "qqvuEPyW10NcdCVKeRh7ZYVHNu_GwT0D65Il8BFG7cs",
      "use": "sig",
      "crv": "Ed25519",
      "x": "4TQoAO2Z4yoypwI10EUcow_qTRDs3rzqyjatALy0Lg0"
    }
  ]
}
server_encryption_keys
{
  "keys": [
    {
      "p": "-7lVRyI8rj8oaRTWpRfwcXPJ7_s_9j2QA-N7MrpQs-r8fb4BorDRmclHphRNo6Y8na3eLyyfsjaC7HZD85RKG098HcmZgoGkI9145GqQXy31pO3go7edLyDvXC-lL1VRXwIgAVYiPTwVfQo9QRLukX0_D86UWQlMVoUGPMZ04V0",
      "kty": "RSA",
      "q": "54Xk1JOKKqLkqbUQsMsawMX-W8CEeglKkRWbIpItDdMaeu5zC58CQ6PTpzK1TiYtxBKh841vHl_84HKVffcnI4--I-anZzPECQhPsdJL4EmGMdjup2gg11gJZF7_wffVufoERdXN9ImIuZqkPdumBY816-BXJKIFCf_8az7d2X0",
      "d": "aOKHI9XR5zmNwOHsVIq4ewOjVOkI0muDSgTbdDRhFORXHwHgmTJSh8cEYRwKyqxNc2sJa9ep4av9_0In0O_2ZFoXq8YNpOV1Ewj4L_ETeHf57GMqVcK5Cs4RTDxyGBC3BbsXm_Zhc9ygRTFMU4V2S6ZHfkF_gb_3cvpq6tU2TZ6vv3rqcm3PFdwRUmSpoX2MXeI0umgeKLf3IWI88R90s3BsNc7kBVULrS7Vr0M6sfuuuXSLzy3raQBzjtmr7ZjvpARvkBQ0ESbvpphqFj_vhYF95kSThA9Te_GGo-Nk4lAQBLtEpPWgiRjMqkpOXUJDq76bB9QwzCxRWYOPn9dgIQ",
      "e": "AQAB",
      "use": "enc",
      "qi": "IjxYgSNxBomG6I3QXoxGHYRrm0nGjEPbj_RXMmxLYmyZD24Ptwz9gpqO7W2PiLVNYzV9rvEo-FeFQKNsLaq6fZb_WfcDC15efAwBVfzrG0FjFxJIk9KerCwDq561ln1MaaX5R6PWJfYOXcW7IRYXdNWeof4tottqDo1tdaYi9vg",
      "dp": "3wsrKuqFRggkcGfMgWCi5oQojIHd_PwznZ51TU-VrrYqn-g6XsO6FUAqQlh_KuBjmXu0AazSnAB9JbTtJOlieKyHV4WIhgEFRdo6AnsCDbQVktxMTgSmPFo8fTyiazx3621gmo6NrCCPEcp-2ChER5noxMLQ48u_XnJkQnm-muk",
      "alg": "RSA-OAEP",
      "dq": "lClna3KPtQFRfBlXeQxBLqSGRolJPh-8DGTbRqBtHK-__nOiRAmaFVc-F32n8T8Vgqi543bbaYDb_3bUnCwSa_uNHsR41N6X0X_0IEQIMpxauIOvForYmXbJa-Yvnh3QNJf_LAHLL3bkfIKuILfz4xLm2vBSVCsrNl8PVkKBDrE",
      "n": "46fkPpRay_RO1jttenjyMdrIRFcBEExsO43kTR57jz94X06O-UJIWz3pUAYR3J63-zA3RTX0clcN8wMhE0_pp0BIwusjUAM0YmbjeBVTsimh_lBDfytqsIPTHguvqXmoqIC3D1Q8yv44e3XY3sMwy3SBHX8kQ8F5A2Po6kd3axlrLQD6vXXflAZRS8-p6QFx1_ZW3MoxGh9OspdyVzp4Steq-oSrf7TO6bYKvSijvRtIi-kgkifdhFZLXnlAxSeG6dfiqm9xtyDLDTnh59I1GextsSSI1gDdr0smt935vlTzwQpcxtwc8BtNpaKbmkIv1NcetARwoeHdGe9ADWLfaQ"
    },
    {
      "kty": "EC",
      "d": "i1qQTduYRIXUC5SXoGNcDVqjKkgZED6ChjbfDyhjPsE",
      "use": "enc",
      "crv": "P-256",
      "x": "Gk1etv9HhwuDz7m7DQsyx41s30XCaxDoi96RcS-1iC4",
      "y": "_4g5vgHtGFkEJrALxyFytqQ-MbKhjcR9yd8zukDCtp8",
      "alg": "ECDH-ES"
    }
  ]
}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "n": "vmF54m9zUC49cmFxkWE86u4qnVCwxJmBLK48jcLh1ndIjkuP3luq6kJoZbDxqoSolluIdKWKjQPW3R55DITq7WUzxCEKO2Ud2kSzezJdP2sOIglTk6jhA_rz3gwJYzFxeBusVuw84sTiIs8X7MwGqS7-p_EXU29g8kKOOnrZGOp6VwSeJEbOA2-Li9ixe-1RGioG3OMgq5W4R6f_ojt_2hOLSeUGlr5IqaJw1i3oT1Mj4aieGu6J-wK2VNQ2m7Y3VQHqkWqQFwc934Kz7g27Aa3sL0sVO_Vltp77-RivTI69syuI5KHU7plMnnzX3nfpUocSROoBOD4qjAfRn3ssiQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "n": "wkDfJ76bldvdfNCxam4ix1pxsJnFswSsz2_YAh9QTL1KPF7SdonpewdEtz12vkN3nw1O6SEtgwv_A1hKVft_c3ORZ7vhKN_SebKRwJJQeh3Vv0fU9GSQNyAy7R3iDPpUF50voBljS9GSZnsvbffxWE3sJZ1WspiSihe6raq7moguE9nHNbzYfJ1k0Fa3HjOcvbdbgV3QHemOqJfPlzVbvPnjAozLHPBjc5RyvZzsIKs9HAANMxtve4tUTA8v_AMu7h8JdTLPXLrbageiEgIU-e7H8HP7CJ-Q3zi9XQdROZErwkiJpyPGIp0L7YaMlAmxEoL12HVFqS48XEqgi2OCfw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "n": "h2L5FiHlxGPCmlZ5T7yhZWY_g4M973XOgqFRKqELQo5mhGndgslBg9td-_h7O5XbCABjtBZ4RfYOaVOPVeFpPq1E0YzaZ51bykORUUArAL1X5Ii4xPylGmCBmEnMRIv4DB5mJT_VNB-EqBa05wLS4yFAe3tdGVbHlNaGVX8NiAyZdX-TBuI-u4491cR6aTnnKJzXPZwZNQUfm_Ybj0jIfRA8edgljkyqwt5iIY4mmLf0O9x7gF8_s9U1CjT2oHjEO4PWQTYkwETmcbzC5DtHRnBPKlxvWGi8xj3hUuQ-x3v1hi1WRknZwTbKn6_YKBXIqNNJNaNhGI73L0IYUUCOJQ"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "x": "X5ZzwKqn_CuL8SfSJkhBdB9oMfNdW5GuTvyS9Vei6TM",
      "y": "cKedwjTG3i-43lyzvNNHkR1S7ClPnFSr0pSTDoLDRJM"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "x": "cer89mJLlwh5U8sQUR8R3co3EVvMGdhx6wqTISsYoew",
      "y": "5VlPCSt-FDJQ1TeSKmEArTiYJHXMAtx5WZ-Vta7Pv6w"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "x": "Cp5THcmFNhdRFn8dDmY9fx_HBYYsdG_a3WOkbbvA80k",
      "y": "Fko8PU7YUkmNOusuT6jbAR73P6sriVagol7edApsZOo"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "secp256k1",
      "x": "xOl5kgyyFzrKHm8jFxjruagENK4DaNe3CjSy1VKXbAc",
      "y": "mJ3i36hu_2yQoifuGQeUqJTZPTXtVEpB-VxajgzT32E"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "secp256k1",
      "x": "YHXPo46sAvWe8ugkuXWShy07_VJCVAZf2FO8dno94kE",
      "y": "jHQlyZCroOEKK05F8mf98fljj76f4jgt-8pcrD2_VXs"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "secp256k1",
      "x": "eG48UWAjP1-PfmsfJVRvHRkju05zq9FzqNb9d7vlTkU",
      "y": "oEJlECZFJ9j4K6Y74D1nPMovagrW9QZgq4SXo9Qy5_s"
    },
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "x": "4TQoAO2Z4yoypwI10EUcow_qTRDs3rzqyjatALy0Lg0"
    },
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "x": "doK_dGldAKIpEn74itkuOKXOuwVpeVNRrtLfFUu3CHg"
    },
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "x": "yvD0bnno0yDaWGZqFhKUpVLxfqJao6QAQ5tfBLBIwrE"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "46fkPpRay_RO1jttenjyMdrIRFcBEExsO43kTR57jz94X06O-UJIWz3pUAYR3J63-zA3RTX0clcN8wMhE0_pp0BIwusjUAM0YmbjeBVTsimh_lBDfytqsIPTHguvqXmoqIC3D1Q8yv44e3XY3sMwy3SBHX8kQ8F5A2Po6kd3axlrLQD6vXXflAZRS8-p6QFx1_ZW3MoxGh9OspdyVzp4Steq-oSrf7TO6bYKvSijvRtIi-kgkifdhFZLXnlAxSeG6dfiqm9xtyDLDTnh59I1GextsSSI1gDdr0smt935vlTzwQpcxtwc8BtNpaKbmkIv1NcetARwoeHdGe9ADWLfaQ"
    },
    {
      "kty": "EC",
      "use": "enc",
      "crv": "P-256",
      "x": "Gk1etv9HhwuDz7m7DQsyx41s30XCaxDoi96RcS-1iC4",
      "y": "_4g5vgHtGFkEJrALxyFytqQ-MbKhjcR9yd8zukDCtp8",
      "alg": "ECDH-ES"
    }
  ]
}
2020-09-01 12:51:55 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2020-09-01 12:51:55 SUCCESS
OIDCCLoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "given_name": "Demo",
  "family_name": "User",
  "middle_name": "Theresa",
  "nickname": "Dee",
  "preferred_username": "d.tu",
  "gender": "female",
  "birthdate": "2000-02-03",
  "address": {
    "street_address": "100 Universal City Plaza",
    "locality": "Hollywood",
    "region": "CA",
    "postal_code": "91608",
    "country": "USA"
  },
  "zoneinfo": "America/Los_Angeles",
  "locale": "en-US",
  "phone_number": "+1 555 5550000",
  "phone_number_verified": false,
  "email": "user@example.com",
  "email_verified": false,
  "website": "https://openid.net/",
  "updated_at": "1580000000"
}
2020-09-01 12:51:55 SUCCESS
GetDynamicClientConfiguration
No client details on configuration, created an empty dynamic_client_registration_template object.
2020-09-01 12:51:55
oidcc-client-test-kid-absent-multiple-jwks
Setup Done
2020-09-01 12:51:58 INCOMING
oidcc-client-test-kid-absent-multiple-jwks
Incoming HTTP request to test instance THNSYyIUBFnifpf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/3.15.9 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
Discovery endpoint
2020-09-01 12:51:58 OUTGOING
oidcc-client-test-kid-absent-multiple-jwks
Response to HTTP request to test instance THNSYyIUBFnifpf
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/",
  "authorization_endpoint": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/token",
  "jwks_uri": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/jwks",
  "userinfo_endpoint": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/userinfo",
  "registration_endpoint": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "gender",
    "birthdate",
    "preferred_username",
    "profile",
    "website",
    "locale",
    "updated_at",
    "address",
    "zoneinfo",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ]
}
outgoing_path
.well-known/openid-configuration
2020-09-01 12:51:58 INCOMING
oidcc-client-test-kid-absent-multiple-jwks
Incoming HTTP request to test instance THNSYyIUBFnifpf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/3.15.9 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate",
  "content-type": "application/json",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "161",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
register
incoming_body_form_params
incoming_method
POST
incoming_body_json
{
  "token_endpoint_auth_method": "client_secret_basic",
  "response_types": [
    "id_token token"
  ],
  "grant_types": [
    "implicit"
  ],
  "redirect_uris": [
    "https://rp.example.com/cb"
  ]
}
incoming_query_string_params
{}
incoming_body
{"token_endpoint_auth_method":"client_secret_basic","response_types":["id_token token"],"grant_types":["implicit"],"redirect_uris":["https://rp.example.com/cb"]}
Registration endpoint
2020-09-01 12:51:58 SUCCESS
OIDCCExtractDynamicRegistrationRequest
Extracted dynamic client registration request
request
{
  "token_endpoint_auth_method": "client_secret_basic",
  "response_types": [
    "id_token token"
  ],
  "grant_types": [
    "implicit"
  ],
  "redirect_uris": [
    "https://rp.example.com/cb"
  ]
}
2020-09-01 12:51:58 INFO
EnsureRegistrationRequestContainsAtLeastOneContact
This application requires that registration requests contain at least one contact.
2020-09-01 12:51:58 SUCCESS
ValidateClientGrantTypes
grant_types match response_types
grant_types
[
  "implicit"
]
response_types
[
  "id_token token"
]
2020-09-01 12:51:58 SUCCESS
OIDCCValidateClientRedirectUris
Valid redirect_uri(s) provided in registration request
redirect_uris
[
  "https://rp.example.com/cb"
]
2020-09-01 12:51:58 SUCCESS
ValidateClientLogoUris
Client does not contain any logo_uri
2020-09-01 12:51:58 SUCCESS
ValidateClientUris
Client does not contain any client_uri
2020-09-01 12:51:58 SUCCESS
ValidateClientPolicyUris
Client does not contain any policy_uri
2020-09-01 12:51:58 SUCCESS
ValidateClientTosUris
Client does not contain any tos_uri
2020-09-01 12:51:58 SUCCESS
ValidateClientSubjectType
A subject_type was not provided
2020-09-01 12:51:58 INFO
ValidateIdTokenSignedResponseAlg
Skipped evaluation due to missing required element: client id_token_signed_response_alg
path
id_token_signed_response_alg
mapped
object
client
2020-09-01 12:51:58 SUCCESS
EnsureIdTokenEncryptedResponseAlgIsSetIfEncIsSet
id_token_encrypted_response_enc is not set
2020-09-01 12:51:58 INFO
ValidateUserinfoSignedResponseAlg
Skipped evaluation due to missing required element: client userinfo_signed_response_alg
path
userinfo_signed_response_alg
mapped
object
client
2020-09-01 12:51:58 SUCCESS
EnsureUserinfoEncryptedResponseAlgIsSetIfEncIsSet
userinfo_encrypted_response_enc is not set
2020-09-01 12:51:58 INFO
ValidateRequestObjectSigningAlg
Skipped evaluation due to missing required element: client request_object_signing_alg
path
request_object_signing_alg
mapped
object
client
2020-09-01 12:51:58 SUCCESS
EnsureRequestObjectEncryptionAlgIsSetIfEncIsSet
request_object_encryption_enc is not set
2020-09-01 12:51:58 INFO
ValidateTokenEndpointAuthSigningAlg
Skipped evaluation due to missing required element: client token_endpoint_auth_signing_alg
path
token_endpoint_auth_signing_alg
mapped
object
client
2020-09-01 12:51:58 SUCCESS
ValidateDefaultMaxAge
default_max_age is not set
2020-09-01 12:51:58 INFO
ValidateRequireAuthTime
Skipped evaluation due to missing required element: client require_auth_time
path
require_auth_time
mapped
object
client
2020-09-01 12:51:58 INFO
ValidateDefaultAcrValues
Skipped evaluation due to missing required element: client default_acr_values
path
default_acr_values
mapped
object
client
2020-09-01 12:51:58 INFO
ValidateInitiateLoginUri
Skipped evaluation due to missing required element: client initiate_login_uri
path
initiate_login_uri
mapped
object
client
2020-09-01 12:51:58 INFO
ValidateRequestUris
Skipped evaluation due to missing required element: client request_uris
path
request_uris
mapped
object
client
2020-09-01 12:51:58 SUCCESS
ValidateClientRegistrationRequestSectorIdentifierUri
A sector_identifier_uri was not provided
2020-09-01 12:51:58 SUCCESS
OIDCCRegisterClient
Registered client
client
{
  "token_endpoint_auth_method": "client_secret_basic",
  "response_types": [
    "id_token token"
  ],
  "grant_types": [
    "implicit"
  ],
  "redirect_uris": [
    "https://rp.example.com/cb"
  ],
  "client_id": "client_RKMUWbZQFuYYiQG43378_,.\u003c*"
}
2020-09-01 12:51:58
OIDCCCreateClientSecretForDynamicClient
Set the secret for registered client
client_secret
secret_jFAgGBUDVuhfJeOEqwLAhLFyRxcjTqRbRcEbKyITzCrYlcGXaH7648185532!),$(
2020-09-01 12:51:58 SUCCESS
EnsureTokenEndPointAuthMethodIsClientSecretBasic
token_endpoint_auth_method is 'client_secret_basic' as expected
2020-09-01 12:51:58 SUCCESS
EnsureClientDoesNotHaveBothJwksAndJwksUri
Client does not have both jwks and jwks_uri set
client
{
  "token_endpoint_auth_method": "client_secret_basic",
  "response_types": [
    "id_token token"
  ],
  "grant_types": [
    "implicit"
  ],
  "redirect_uris": [
    "https://rp.example.com/cb"
  ],
  "client_id": "client_RKMUWbZQFuYYiQG43378_,.\u003c*",
  "client_secret": "secret_jFAgGBUDVuhfJeOEqwLAhLFyRxcjTqRbRcEbKyITzCrYlcGXaH7648185532!),$("
}
2020-09-01 12:51:58 INFO
FetchClientKeys
Skipped evaluation due to missing required element: client jwks_uri
path
jwks_uri
mapped
object
client
2020-09-01 12:51:58
SetServerSigningAlgToRS256
Successfully set signing algorithm to RS256
2020-09-01 12:51:58
SetClientIdTokenSignedResponseAlgToServerSigningAlg
Set id_token_signed_response_alg for the registered client
id_token_signed_response_alg
RS256
2020-09-01 12:51:58 OUTGOING
oidcc-client-test-kid-absent-multiple-jwks
Response to HTTP request to test instance THNSYyIUBFnifpf
outgoing_status_code
201
outgoing_headers
{}
outgoing_body
{
  "token_endpoint_auth_method": "client_secret_basic",
  "response_types": [
    "id_token token"
  ],
  "grant_types": [
    "implicit"
  ],
  "redirect_uris": [
    "https://rp.example.com/cb"
  ],
  "client_id": "client_RKMUWbZQFuYYiQG43378_,.\u003c*",
  "client_secret": "secret_jFAgGBUDVuhfJeOEqwLAhLFyRxcjTqRbRcEbKyITzCrYlcGXaH7648185532!),$(",
  "id_token_signed_response_alg": "RS256"
}
outgoing_path
register
2020-09-01 12:51:59 INCOMING
oidcc-client-test-kid-absent-multiple-jwks
Incoming HTTP request to test instance THNSYyIUBFnifpf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "got/9.6.0 (https://github.com/sindresorhus/got)",
  "accept-encoding": "gzip, deflate",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
authorize
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{
  "client_id": "client_RKMUWbZQFuYYiQG43378_,.\u003c*",
  "scope": "openid",
  "response_type": "id_token token",
  "redirect_uri": "https://rp.example.com/cb",
  "state": "lxohuqZbDVusSp4r3_--JgzQedJ2xkb3eqM_3_ybRd8",
  "nonce": "vv8mTQLDFWBwceq5k3BoowAqfAQuKrn6wC6F4xYuoyo",
  "response_mode": "form_post"
}
incoming_body
Authorization endpoint
2020-09-01 12:51:59 SUCCESS
EnsureRequestDoesNotContainRequestObject
Request does not contain a request parameter
2020-09-01 12:51:59 SUCCESS
OIDCCEnsureAuthorizationHttpRequestContainsOpenIDScope
Found 'openid' in scope http request parameter
actual
[
  "openid"
]
expected
openid
2020-09-01 12:51:59 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "client_RKMUWbZQFuYYiQG43378_,.\u003c*",
  "scope": "openid",
  "response_type": "id_token token",
  "redirect_uri": "https://rp.example.com/cb",
  "state": "lxohuqZbDVusSp4r3_--JgzQedJ2xkb3eqM_3_ybRd8",
  "nonce": "vv8mTQLDFWBwceq5k3BoowAqfAQuKrn6wC6F4xYuoyo",
  "response_mode": "form_post"
}
2020-09-01 12:51:59 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid
2020-09-01 12:51:59 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
vv8mTQLDFWBwceq5k3BoowAqfAQuKrn6wC6F4xYuoyo
2020-09-01 12:51:59 SUCCESS
EnsureResponseTypeIsIdTokenToken
Response type is expected value
expected
id_token token
2020-09-01 12:51:59 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
client_RKMUWbZQFuYYiQG43378_,.<*
2020-09-01 12:51:59 SUCCESS
EnsureValidRedirectUriForAuthorizationEndpointRequest
redirect_uri is one of the allowed redirect uris
actual
https://rp.example.com/cb
expected
[
  "https://rp.example.com/cb"
]
2020-09-01 12:51:59 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid"
]
expected
openid
2020-09-01 12:51:59 SUCCESS
DisallowMaxAgeEqualsZeroAndPromptNone
The client did not send max_age=0 and prompt=none parameters as expected
2020-09-01 12:51:59 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
4D8pQckiuJLmC891TqtWIEqWCiGNJ3rxNaEDQjhofjQNg5wToJ
2020-09-01 12:51:59 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
duXh9LTTsvI3n4uAaM9qQw
2020-09-01 12:51:59 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/THNSYyIUBFnifpf/
sub
user-subject-1234531
aud
client_RKMUWbZQFuYYiQG43378_,.<*
nonce
vv8mTQLDFWBwceq5k3BoowAqfAQuKrn6wC6F4xYuoyo
iat
1598964719
exp
1598965019
2020-09-01 12:51:59 INFO
AddCHashToIdTokenClaims
Skipped evaluation due to missing required string: c_hash
expected
c_hash
2020-09-01 12:51:59 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
duXh9LTTsvI3n4uAaM9qQw
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/THNSYyIUBFnifpf/",
  "sub": "user-subject-1234531",
  "aud": "client_RKMUWbZQFuYYiQG43378_,.\u003c*",
  "nonce": "vv8mTQLDFWBwceq5k3BoowAqfAQuKrn6wC6F4xYuoyo",
  "iat": 1598964719,
  "exp": 1598965019,
  "at_hash": "duXh9LTTsvI3n4uAaM9qQw"
}
2020-09-01 12:51:59 SUCCESS
OIDCCSignIdToken
Signed the ID token
id_token
eyJhbGciOiJSUzI1NiJ9.eyJhdF9oYXNoIjoiZHVYaDlMVFRzdkkzbjR1QWFNOXFRdyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiY2xpZW50X1JLTVVXYlpRRnVZWWlRRzQzMzc4XywuPCoiLCJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvVEhOU1l5SVVCRm5pZnBmXC8iLCJleHAiOjE1OTg5NjUwMTksIm5vbmNlIjoidnY4bVRRTERGV0J3Y2VxNWszQm9vd0FxZkFRdUtybjZ3QzZGNHhZdW95byIsImlhdCI6MTU5ODk2NDcxOX0.QwiVlOHHVHJDJm7QNdGYGS6zBV9smyEQYZ1Ldka3GYSWjsEAS4y9MheKJCuE3XrB0x8QISoCDQkSRpzqNX7vrzxkaNWx_JkrI8zWy1vqP_vtzrb9PfryuQDDr-71mjXJEtD1i_-BrGU8nOALSZHtY4fSh4_aGEBorR4f-xdk-LQZxZOxpwzoQ4HAk8-QBx7yV_uDlmBCSgPthya_wWDAN8wf_aw7tU-lnykRZV8YjgXHLQ1KvpZuuavTpAr9PIvSp4JBkDDdconK2YwPtj86fc4kovlCEDCD3nJAJtpijctTT6LTFKnrOpvY8fuvrHaEmh0KwXbC39PnwzKOtCeXjg
key
{"p":"67EauN5q6QUXXd8WZ1pNZA7xnUAEGTxIcaGQW_X5qx_37RWlPU6VB4uhK3j9V6mQId--zT0UKvbySzvsKseO4inpuDA0pPmpF4K2vAWdGFYBdBJtHe-tagpYZ8CLZHRUizviYi149atQKHeZ_xd81sflQpIsIBg90TO7A06MLOU","kty":"RSA","q":"0v23yQfs4_7To7u_FU3bmT17dJclikCIWBgVV4-qAYN5PGqhtT4cKTXNxlj5-2O6I-Nkgf32l2OWz6pTxYGV6XWQp652Xi71Sd9-3w8CgPxpuyo0kzET41bsyPARCZoA3coYhwSrRYUumP_WRe2jSosHwnsoucJhMf0fALg-H5M","d":"VDhICDVNw3Vl2_2nThueHIyMCiNBYdI_EljNcG4fJIZVL0N1QEue3OZT1pZhazBZJq5gbhciYlTLJaob4Jd_tJCAlFcS0ePonzbaloFZPvi8eYgtPiBznlLpgYCZR0MpPmu6AFHBiVe9f40dDTKYgs6V-eDze89GiXSsTSte1yo-FbFHTZrjlFrTRJlYvWDxq-6nbZHdX6MbjvWNUdi17_4lX-PkdvXPhwlXkdNkQNCjrPVXr7ubNFqAhDGMzoI40Bn4JPmPgXBvQADBYw5VylT12dDslgj5fhwf-4kEIPRyA64sSU2Z8ktLwVL7h2ygFFJv6cGOvCnAgaL7WUoL8Q","e":"AQAB","use":"sig","qi":"adILvcZd_7AAK79lJ2cqwFbTgKclnIjo3tWzx4CjKo8nHtm3l3fwCC724D1yGPJPse_6965oqUnda3C_oe1U5-fy4p2KqU0_lVABKS6tBpx05nnaNy-ppDJsxvf0cRU3hNokHQDZq0xxsBDATtAVWM9beLwiXdM_UlvPlnx53E0","dp":"ysoDN_UG_59Fz5rW5-4mkGTbNnWSETRxEHP2hWlKfBZxdygcmHc4etmEvqbHM9nNDZg5ztUyuRTovBq-xMAXDDkLw1KWuSumdXgeSgB6finh7kC8afmCt65XCk38oV4GMBZCXj7JyHax7V-avIU1AIfVlkW2eZbh-VINInc-3JE","dq":"0E2I6sIWUCm_TIEI78GEMlAO2FZ4y3tWoJJ2T5IYZ5IjWVB1Afil2NGzrEUf197nYJMZIXVXxLKfq7ofJnj_RhO5krKdTfLSW_J40UOCV1HcGNpcOY1UczfYYbERQQd4H39so7AqX2JTVN4P783jTq7gJFNvK6YKS035E77SJl0","n":"wkDfJ76bldvdfNCxam4ix1pxsJnFswSsz2_YAh9QTL1KPF7SdonpewdEtz12vkN3nw1O6SEtgwv_A1hKVft_c3ORZ7vhKN_SebKRwJJQeh3Vv0fU9GSQNyAy7R3iDPpUF50voBljS9GSZnsvbffxWE3sJZ1WspiSihe6raq7moguE9nHNbzYfJ1k0Fa3HjOcvbdbgV3QHemOqJfPlzVbvPnjAozLHPBjc5RyvZzsIKs9HAANMxtve4tUTA8v_AMu7h8JdTLPXLrbageiEgIU-e7H8HP7CJ-Q3zi9XQdROZErwkiJpyPGIp0L7YaMlAmxEoL12HVFqS48XEqgi2OCfw"}
algorithm
RS256
2020-09-01 12:51:59 INFO
EncryptIdToken
Skipped evaluation due to missing required element: client id_token_encrypted_response_alg
path
id_token_encrypted_response_alg
mapped
object
client
2020-09-01 12:51:59 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://rp.example.com/cb",
  "state": "lxohuqZbDVusSp4r3_--JgzQedJ2xkb3eqM_3_ybRd8"
}
2020-09-01 12:51:59 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://rp.example.com/cb",
  "state": "lxohuqZbDVusSp4r3_--JgzQedJ2xkb3eqM_3_ybRd8",
  "id_token": "eyJhbGciOiJSUzI1NiJ9.eyJhdF9oYXNoIjoiZHVYaDlMVFRzdkkzbjR1QWFNOXFRdyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiY2xpZW50X1JLTVVXYlpRRnVZWWlRRzQzMzc4XywuPCoiLCJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvVEhOU1l5SVVCRm5pZnBmXC8iLCJleHAiOjE1OTg5NjUwMTksIm5vbmNlIjoidnY4bVRRTERGV0J3Y2VxNWszQm9vd0FxZkFRdUtybjZ3QzZGNHhZdW95byIsImlhdCI6MTU5ODk2NDcxOX0.QwiVlOHHVHJDJm7QNdGYGS6zBV9smyEQYZ1Ldka3GYSWjsEAS4y9MheKJCuE3XrB0x8QISoCDQkSRpzqNX7vrzxkaNWx_JkrI8zWy1vqP_vtzrb9PfryuQDDr-71mjXJEtD1i_-BrGU8nOALSZHtY4fSh4_aGEBorR4f-xdk-LQZxZOxpwzoQ4HAk8-QBx7yV_uDlmBCSgPthya_wWDAN8wf_aw7tU-lnykRZV8YjgXHLQ1KvpZuuavTpAr9PIvSp4JBkDDdconK2YwPtj86fc4kovlCEDCD3nJAJtpijctTT6LTFKnrOpvY8fuvrHaEmh0KwXbC39PnwzKOtCeXjg"
}
2020-09-01 12:51:59
AddTokenToAuthorizationEndpointResponseParams
Added token and token_type to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://rp.example.com/cb",
  "state": "lxohuqZbDVusSp4r3_--JgzQedJ2xkb3eqM_3_ybRd8",
  "id_token": "eyJhbGciOiJSUzI1NiJ9.eyJhdF9oYXNoIjoiZHVYaDlMVFRzdkkzbjR1QWFNOXFRdyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiY2xpZW50X1JLTVVXYlpRRnVZWWlRRzQzMzc4XywuPCoiLCJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvVEhOU1l5SVVCRm5pZnBmXC8iLCJleHAiOjE1OTg5NjUwMTksIm5vbmNlIjoidnY4bVRRTERGV0J3Y2VxNWszQm9vd0FxZkFRdUtybjZ3QzZGNHhZdW95byIsImlhdCI6MTU5ODk2NDcxOX0.QwiVlOHHVHJDJm7QNdGYGS6zBV9smyEQYZ1Ldka3GYSWjsEAS4y9MheKJCuE3XrB0x8QISoCDQkSRpzqNX7vrzxkaNWx_JkrI8zWy1vqP_vtzrb9PfryuQDDr-71mjXJEtD1i_-BrGU8nOALSZHtY4fSh4_aGEBorR4f-xdk-LQZxZOxpwzoQ4HAk8-QBx7yV_uDlmBCSgPthya_wWDAN8wf_aw7tU-lnykRZV8YjgXHLQ1KvpZuuavTpAr9PIvSp4JBkDDdconK2YwPtj86fc4kovlCEDCD3nJAJtpijctTT6LTFKnrOpvY8fuvrHaEmh0KwXbC39PnwzKOtCeXjg",
  "access_token": "4D8pQckiuJLmC891TqtWIEqWCiGNJ3rxNaEDQjhofjQNg5wToJ",
  "token_type": "Bearer"
}
2020-09-01 12:51:59 OUTGOING
oidcc-client-test-kid-absent-multiple-jwks
Response to HTTP request to test instance THNSYyIUBFnifpf
outgoing
ModelAndView [view="formPostResponseMode"; model={formAction=https://rp.example.com/cb, formParameters={"state":"lxohuqZbDVusSp4r3_--JgzQedJ2xkb3eqM_3_ybRd8","id_token":"eyJhbGciOiJSUzI1NiJ9.eyJhdF9oYXNoIjoiZHVYaDlMVFRzdkkzbjR1QWFNOXFRdyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiY2xpZW50X1JLTVVXYlpRRnVZWWlRRzQzMzc4XywuPCoiLCJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvVEhOU1l5SVVCRm5pZnBmXC8iLCJleHAiOjE1OTg5NjUwMTksIm5vbmNlIjoidnY4bVRRTERGV0J3Y2VxNWszQm9vd0FxZkFRdUtybjZ3QzZGNHhZdW95byIsImlhdCI6MTU5ODk2NDcxOX0.QwiVlOHHVHJDJm7QNdGYGS6zBV9smyEQYZ1Ldka3GYSWjsEAS4y9MheKJCuE3XrB0x8QISoCDQkSRpzqNX7vrzxkaNWx_JkrI8zWy1vqP_vtzrb9PfryuQDDr-71mjXJEtD1i_-BrGU8nOALSZHtY4fSh4_aGEBorR4f-xdk-LQZxZOxpwzoQ4HAk8-QBx7yV_uDlmBCSgPthya_wWDAN8wf_aw7tU-lnykRZV8YjgXHLQ1KvpZuuavTpAr9PIvSp4JBkDDdconK2YwPtj86fc4kovlCEDCD3nJAJtpijctTT6LTFKnrOpvY8fuvrHaEmh0KwXbC39PnwzKOtCeXjg","access_token":"4D8pQckiuJLmC891TqtWIEqWCiGNJ3rxNaEDQjhofjQNg5wToJ","token_type":"Bearer"}}]
outgoing_path
authorize
2020-09-01 12:51:59 INCOMING
oidcc-client-test-kid-absent-multiple-jwks
Incoming HTTP request to test instance THNSYyIUBFnifpf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/3.15.9 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
jwks
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
Jwks endpoint
2020-09-01 12:51:59 OUTGOING
oidcc-client-test-kid-absent-multiple-jwks
Response to HTTP request to test instance THNSYyIUBFnifpf
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "n": "vmF54m9zUC49cmFxkWE86u4qnVCwxJmBLK48jcLh1ndIjkuP3luq6kJoZbDxqoSolluIdKWKjQPW3R55DITq7WUzxCEKO2Ud2kSzezJdP2sOIglTk6jhA_rz3gwJYzFxeBusVuw84sTiIs8X7MwGqS7-p_EXU29g8kKOOnrZGOp6VwSeJEbOA2-Li9ixe-1RGioG3OMgq5W4R6f_ojt_2hOLSeUGlr5IqaJw1i3oT1Mj4aieGu6J-wK2VNQ2m7Y3VQHqkWqQFwc934Kz7g27Aa3sL0sVO_Vltp77-RivTI69syuI5KHU7plMnnzX3nfpUocSROoBOD4qjAfRn3ssiQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "n": "wkDfJ76bldvdfNCxam4ix1pxsJnFswSsz2_YAh9QTL1KPF7SdonpewdEtz12vkN3nw1O6SEtgwv_A1hKVft_c3ORZ7vhKN_SebKRwJJQeh3Vv0fU9GSQNyAy7R3iDPpUF50voBljS9GSZnsvbffxWE3sJZ1WspiSihe6raq7moguE9nHNbzYfJ1k0Fa3HjOcvbdbgV3QHemOqJfPlzVbvPnjAozLHPBjc5RyvZzsIKs9HAANMxtve4tUTA8v_AMu7h8JdTLPXLrbageiEgIU-e7H8HP7CJ-Q3zi9XQdROZErwkiJpyPGIp0L7YaMlAmxEoL12HVFqS48XEqgi2OCfw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "n": "h2L5FiHlxGPCmlZ5T7yhZWY_g4M973XOgqFRKqELQo5mhGndgslBg9td-_h7O5XbCABjtBZ4RfYOaVOPVeFpPq1E0YzaZ51bykORUUArAL1X5Ii4xPylGmCBmEnMRIv4DB5mJT_VNB-EqBa05wLS4yFAe3tdGVbHlNaGVX8NiAyZdX-TBuI-u4491cR6aTnnKJzXPZwZNQUfm_Ybj0jIfRA8edgljkyqwt5iIY4mmLf0O9x7gF8_s9U1CjT2oHjEO4PWQTYkwETmcbzC5DtHRnBPKlxvWGi8xj3hUuQ-x3v1hi1WRknZwTbKn6_YKBXIqNNJNaNhGI73L0IYUUCOJQ"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "x": "X5ZzwKqn_CuL8SfSJkhBdB9oMfNdW5GuTvyS9Vei6TM",
      "y": "cKedwjTG3i-43lyzvNNHkR1S7ClPnFSr0pSTDoLDRJM"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "x": "cer89mJLlwh5U8sQUR8R3co3EVvMGdhx6wqTISsYoew",
      "y": "5VlPCSt-FDJQ1TeSKmEArTiYJHXMAtx5WZ-Vta7Pv6w"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "x": "Cp5THcmFNhdRFn8dDmY9fx_HBYYsdG_a3WOkbbvA80k",
      "y": "Fko8PU7YUkmNOusuT6jbAR73P6sriVagol7edApsZOo"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "secp256k1",
      "x": "xOl5kgyyFzrKHm8jFxjruagENK4DaNe3CjSy1VKXbAc",
      "y": "mJ3i36hu_2yQoifuGQeUqJTZPTXtVEpB-VxajgzT32E"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "secp256k1",
      "x": "YHXPo46sAvWe8ugkuXWShy07_VJCVAZf2FO8dno94kE",
      "y": "jHQlyZCroOEKK05F8mf98fljj76f4jgt-8pcrD2_VXs"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "secp256k1",
      "x": "eG48UWAjP1-PfmsfJVRvHRkju05zq9FzqNb9d7vlTkU",
      "y": "oEJlECZFJ9j4K6Y74D1nPMovagrW9QZgq4SXo9Qy5_s"
    },
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "x": "4TQoAO2Z4yoypwI10EUcow_qTRDs3rzqyjatALy0Lg0"
    },
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "x": "doK_dGldAKIpEn74itkuOKXOuwVpeVNRrtLfFUu3CHg"
    },
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "x": "yvD0bnno0yDaWGZqFhKUpVLxfqJao6QAQ5tfBLBIwrE"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "46fkPpRay_RO1jttenjyMdrIRFcBEExsO43kTR57jz94X06O-UJIWz3pUAYR3J63-zA3RTX0clcN8wMhE0_pp0BIwusjUAM0YmbjeBVTsimh_lBDfytqsIPTHguvqXmoqIC3D1Q8yv44e3XY3sMwy3SBHX8kQ8F5A2Po6kd3axlrLQD6vXXflAZRS8-p6QFx1_ZW3MoxGh9OspdyVzp4Steq-oSrf7TO6bYKvSijvRtIi-kgkifdhFZLXnlAxSeG6dfiqm9xtyDLDTnh59I1GextsSSI1gDdr0smt935vlTzwQpcxtwc8BtNpaKbmkIv1NcetARwoeHdGe9ADWLfaQ"
    },
    {
      "kty": "EC",
      "use": "enc",
      "crv": "P-256",
      "x": "Gk1etv9HhwuDz7m7DQsyx41s30XCaxDoi96RcS-1iC4",
      "y": "_4g5vgHtGFkEJrALxyFytqQ-MbKhjcR9yd8zukDCtp8",
      "alg": "ECDH-ES"
    }
  ]
}
outgoing_path
jwks
2020-09-01 12:52:01 FINISHED
oidcc-client-test-kid-absent-multiple-jwks
Test has run to completion
testmodule_result
PASSED
Test Results