Test Summary

Test Results

Expand All Collapse All
All times are UTC
2020-09-17 12:26:33 INFO
TEST-RUNNER
Test instance HBwN7xtaqoR42pi created
baseUrl
https://www.certification.openid.net/test/a/gluu-oxd-test
variant
{
  "client_auth_type": "mtls",
  "fapi_profile": "plain_fapi"
}
alias
gluu-oxd-test
description
Gluu oxd test
planId
vKvdpYZacPHmV
config
{
  "alias": "gluu-oxd-test",
  "description": "Gluu oxd test",
  "server": {
    "jwks": {
      "keys": [
        {
          "p": "_aYTyJg7xpmEUcdL8is5KiFC6HRAwCF-CcA4GxvZXNaj7CnWQOlYQp-fg2-Nk0hQGGkOmhaFb35DTHr_Fa6ShoUjoeD0cORAy6PaEF1m6URs02s00OFDoYBudK-oUDNiPWQFJ8hrv4z1s2HmfB0x2e7QV_8dxW7xw1i7LTGk1fc",
          "kty": "RSA",
          "alg": "PS256",
          "q": "veBnKgi99Hoqamh7_KPW3ipY4PJ18tyyLi33vI1y_g2Cs7swmNeAHYtc6b4A6Oz29D7cpuLzbSdMlPJoyFy8eq3T6bAoZnczq0JEFpvkeyme8HTEgRyVLLd82vGt68sIG32exWWMgOU-RuFzdJqP6bQtq5LwzqyVooIc1jna96E",
          "d": "DKBgwNmfjt9Ukk9RME3wB7TcUx3mGguBzhyA6lhKClAgtok9xJ7J0JfQ89Yg0uU5Pi3l-J0Qt9poPSCQYolt3AHxrrcI5YhPlbPeqpsHrAMSFK5SbB9zGo3zvfBlgpLvyqKQnrt7L-tKbmAhiUy0r9YmEfyACYzkaAyNR2F5OvGSGw0JrB8jhtYmgduN2VyYxNUlmFPqxYc7XdxWb0My0VwN4UJg4OPqlrkIaYKyovFbHbmgpP89IAabLhoIkmLeyyigVLFvjecvUliCyBJJpUH-QiLcgAU0CBKgjz9_2e8hkjGgqNv-W8kt1tlSzdgenZbgYqdvf6rf3Si0OedWYQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "d15d02ac-b432-45ef-8c09-bde3811d0c9b",
          "qi": "j9oCr752UnXnC9lD-dlufwTJpSs4xGYthpvd0TwXd604VBeGeZ-3gPM1l4k6HqQ2QQ_s5d8116rBBWnAtNG5t1_dzUdIznv26ErNPeXZiQ8GvD1ai_yA7d8aR6sOUyTLVXAQnNZTYmHdhZf2Lc3rEFGpBefXMBY0i6eWwtFQVpA",
          "dp": "XPz3n8B_mY1KPxjLNNq3uEQ9XS7RVh5xMG3xo66P_0MJEVk9HMru-m2-ctcAlhAanPhWzBKZlIg7b9xfi7lWKk7BA2WO95wWTRGirgEv6zCUnOVelX0f6CNHWyvSjqRnzY3PfggxyCWLJdosPzAMyJKOetQiO_EyXKU46ZabkX0",
          "dq": "KGM3DmXVoc7qfr_Cv7ZJ2e-___kSxZnT_Kaib2TW9NsC1iAW8ivEgIRIOx_DKchdrw4_-O-FP86AJ554U0YGgUHANZDWxxTL1L2_pd969gegWx07PwtJX72XvSpzCBijnNVXlD1JaZFZcdI6sK6_tcIxhLE4r31eRrbOU3Ly9IE",
          "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw"
        }
      ]
    }
  },
  "client": {
    "client_id": "test-client-id-346334adgdsfgdfg3425",
    "client_secret": "test-client-secret-452wf246w3g324t34",
    "scope": "openid accounts",
    "redirect_uri": "https://www.gluu.org",
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIDZjCCAhqgAwIBAgIhAJZt5gX62poPeFj5+i2q9ozjpIKLoLQNw3zy8134lfRY MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAICBQChHDAaBgkqhkiG9w0BAQgw DQYJYIZIAWUDBAICBQCiAwIBMDAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNh dGVzMB4XDTIwMDgyNzEzMjg1OFoXDTIwMTIwNTEzMjkwNVowHjEcMBoGA1UEAwwT b3hkIENBIENlcnRpZmljYXRlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIo79ge2mJ055DBIQJ9Up6ODBC4ch72nQU6ZNLx/1JgpSokj2bXgDSxUN2rd SiFEWGv/u5CUKDpavYSMONIPGX+DH2rN10oZN/WFqP1ZSp/GzQbnf4SWn3rUtU8w p5bj+8XB+b1CtNbz2AMO11XnSoD2tWV5waS2fR4HBqct3Smo3Ek7Gno9oXEITGU2 94dEO3AXkoHLMZf+z6BTnQdPBWncHVYjz43YMxLr0hVidHQxTYzoU0RID6bRTug7 bfW8a6yrT2/hF1MCrCIe3Jd7HJrgV3sLIZFUX9p69v1Ghuu+lAVXiOYCkgQ5ab6T K6Oxq8okOOh74AaSUBzlW0ijoV0CAwEAAaMnMCUwIwYDVR0lBBwwGgYIKwYBBQUH AwEGCCsGAQUFBwMCBgRVHSUAMEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIC BQChHDAaBgkqhkiG9w0BAQgwDQYJYIZIAWUDBAICBQCiAwIBMAOCAQEANbRPGBNr Nn+SeQdTeQQ6Gmp5tFTjs/hwshJ4YZCE5j3f6W8o2cN91TFK8lHTIK7zRj1c/yJf Xf27BPTFZOTvYzlHBkRKUptc7aCJgC5awwdalPxU7NEs2T6R8OaNWeuUtT9T6Oze si3Rx0hHmieqsYgnW+uHgLokI8vFickzXdTDiib1hE44+hQAwkRQ2IO8anjSGTAt LUF59D0O5XdJ0PVgq7I0tpNdKM5LcztY1mrq2B4fRLnVJsoz54qCuBNQG1i/MNYD 8Cx5ZxlehAtexm3rVMKuVy3wOpYId8feVPsqk+oXVgkiuV47McvD8NAzY3PXqB19 rXRsjI7iPJRkQQ\u003d\u003d\n-----END CERTIFICATE-----\n",
    "jwks": {
      "keys": [
        {
          "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
          "kty": "RSA",
          "use": "sig",
          "alg": "PS256",
          "exp": 1607326752998,
          "x5c": [
            "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"
          ],
          "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw",
          "e": "AQAB"
        },
        {
          "kid": "1ae82071-038b-4e4b-8a2b-b2a8a196a350_enc_rsa1_5",
          "kty": "RSA",
          "use": "enc",
          "alg": "RSA1_5",
          "exp": 1607326752998,
          "x5c": [
            "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\u003d"
          ],
          "n": "woTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V_mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F_2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e_Cmp3-ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4_uUcryeAvspz5tQpPJclgzXgK_Q3G072JU-LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV_Aw",
          "e": "AQAB"
        }
      ]
    }
  }
}
testName
fapi-rw-id2-client-test-invalid-missing-iss
2020-09-17 12:26:33 SUCCESS
GenerateServerConfigurationMTLS
Created server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/gluu-oxd-test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/gluu-oxd-test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/userinfo"
}
issuer
https://www.certification.openid.net/test/a/gluu-oxd-test/
discoveryUrl
https://www.certification.openid.net/test/a/gluu-oxd-test/.well-known/openid-configuration
2020-09-17 12:26:33 SUCCESS
AddTLSClientAuthToServerConfiguration
Added tls_client_auth for token_endpoint_auth_methods_supported
2020-09-17 12:26:33 SUCCESS
AddResponseTypeCodeIdTokenToServerConfiguration
Added code id_token as response type supported
response_types_supported
[
  "code id_token"
]
2020-09-17 12:26:33 SUCCESS
AddTokenEndpointSigningAlg
Set 'PS256' for token_endpoint_auth_signing_alg
2020-09-17 12:26:33 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2020-09-17 12:26:33 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_jwks
{
  "customMembers": {},
  "keys": [
    {
      "kid": "d15d02ac-b432-45ef-8c09-bde3811d0c9b",
      "alg": {
        "name": "PS256"
      },
      "use": {
        "identifier": "sig"
      },
      "kty": {
        "requirement": "REQUIRED",
        "value": "RSA"
      },
      "oth": [],
      "qi": {
        "value": "j9oCr752UnXnC9lD-dlufwTJpSs4xGYthpvd0TwXd604VBeGeZ-3gPM1l4k6HqQ2QQ_s5d8116rBBWnAtNG5t1_dzUdIznv26ErNPeXZiQ8GvD1ai_yA7d8aR6sOUyTLVXAQnNZTYmHdhZf2Lc3rEFGpBefXMBY0i6eWwtFQVpA"
      },
      "dq": {
        "value": "KGM3DmXVoc7qfr_Cv7ZJ2e-___kSxZnT_Kaib2TW9NsC1iAW8ivEgIRIOx_DKchdrw4_-O-FP86AJ554U0YGgUHANZDWxxTL1L2_pd969gegWx07PwtJX72XvSpzCBijnNVXlD1JaZFZcdI6sK6_tcIxhLE4r31eRrbOU3Ly9IE"
      },
      "dp": {
        "value": "XPz3n8B_mY1KPxjLNNq3uEQ9XS7RVh5xMG3xo66P_0MJEVk9HMru-m2-ctcAlhAanPhWzBKZlIg7b9xfi7lWKk7BA2WO95wWTRGirgEv6zCUnOVelX0f6CNHWyvSjqRnzY3PfggxyCWLJdosPzAMyJKOetQiO_EyXKU46ZabkX0"
      },
      "q": {
        "value": "veBnKgi99Hoqamh7_KPW3ipY4PJ18tyyLi33vI1y_g2Cs7swmNeAHYtc6b4A6Oz29D7cpuLzbSdMlPJoyFy8eq3T6bAoZnczq0JEFpvkeyme8HTEgRyVLLd82vGt68sIG32exWWMgOU-RuFzdJqP6bQtq5LwzqyVooIc1jna96E"
      },
      "p": {
        "value": "_aYTyJg7xpmEUcdL8is5KiFC6HRAwCF-CcA4GxvZXNaj7CnWQOlYQp-fg2-Nk0hQGGkOmhaFb35DTHr_Fa6ShoUjoeD0cORAy6PaEF1m6URs02s00OFDoYBudK-oUDNiPWQFJ8hrv4z1s2HmfB0x2e7QV_8dxW7xw1i7LTGk1fc"
      },
      "d": {
        "value": "DKBgwNmfjt9Ukk9RME3wB7TcUx3mGguBzhyA6lhKClAgtok9xJ7J0JfQ89Yg0uU5Pi3l-J0Qt9poPSCQYolt3AHxrrcI5YhPlbPeqpsHrAMSFK5SbB9zGo3zvfBlgpLvyqKQnrt7L-tKbmAhiUy0r9YmEfyACYzkaAyNR2F5OvGSGw0JrB8jhtYmgduN2VyYxNUlmFPqxYc7XdxWb0My0VwN4UJg4OPqlrkIaYKyovFbHbmgpP89IAabLhoIkmLeyyigVLFvjecvUliCyBJJpUH-QiLcgAU0CBKgjz9_2e8hkjGgqNv-W8kt1tlSzdgenZbgYqdvf6rf3Si0OedWYQ"
      },
      "e": {
        "value": "AQAB"
      },
      "n": {
        "value": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw"
      }
    }
  ]
}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "d15d02ac-b432-45ef-8c09-bde3811d0c9b",
      "alg": "PS256",
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw"
    }
  ]
}
2020-09-17 12:26:33 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2020-09-17 12:26:33 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "p": "_aYTyJg7xpmEUcdL8is5KiFC6HRAwCF-CcA4GxvZXNaj7CnWQOlYQp-fg2-Nk0hQGGkOmhaFb35DTHr_Fa6ShoUjoeD0cORAy6PaEF1m6URs02s00OFDoYBudK-oUDNiPWQFJ8hrv4z1s2HmfB0x2e7QV_8dxW7xw1i7LTGk1fc",
      "kty": "RSA",
      "q": "veBnKgi99Hoqamh7_KPW3ipY4PJ18tyyLi33vI1y_g2Cs7swmNeAHYtc6b4A6Oz29D7cpuLzbSdMlPJoyFy8eq3T6bAoZnczq0JEFpvkeyme8HTEgRyVLLd82vGt68sIG32exWWMgOU-RuFzdJqP6bQtq5LwzqyVooIc1jna96E",
      "d": "DKBgwNmfjt9Ukk9RME3wB7TcUx3mGguBzhyA6lhKClAgtok9xJ7J0JfQ89Yg0uU5Pi3l-J0Qt9poPSCQYolt3AHxrrcI5YhPlbPeqpsHrAMSFK5SbB9zGo3zvfBlgpLvyqKQnrt7L-tKbmAhiUy0r9YmEfyACYzkaAyNR2F5OvGSGw0JrB8jhtYmgduN2VyYxNUlmFPqxYc7XdxWb0My0VwN4UJg4OPqlrkIaYKyovFbHbmgpP89IAabLhoIkmLeyyigVLFvjecvUliCyBJJpUH-QiLcgAU0CBKgjz9_2e8hkjGgqNv-W8kt1tlSzdgenZbgYqdvf6rf3Si0OedWYQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "d15d02ac-b432-45ef-8c09-bde3811d0c9b",
      "qi": "j9oCr752UnXnC9lD-dlufwTJpSs4xGYthpvd0TwXd604VBeGeZ-3gPM1l4k6HqQ2QQ_s5d8116rBBWnAtNG5t1_dzUdIznv26ErNPeXZiQ8GvD1ai_yA7d8aR6sOUyTLVXAQnNZTYmHdhZf2Lc3rEFGpBefXMBY0i6eWwtFQVpA",
      "dp": "XPz3n8B_mY1KPxjLNNq3uEQ9XS7RVh5xMG3xo66P_0MJEVk9HMru-m2-ctcAlhAanPhWzBKZlIg7b9xfi7lWKk7BA2WO95wWTRGirgEv6zCUnOVelX0f6CNHWyvSjqRnzY3PfggxyCWLJdosPzAMyJKOetQiO_EyXKU46ZabkX0",
      "alg": "PS256",
      "dq": "KGM3DmXVoc7qfr_Cv7ZJ2e-___kSxZnT_Kaib2TW9NsC1iAW8ivEgIRIOx_DKchdrw4_-O-FP86AJ554U0YGgUHANZDWxxTL1L2_pd969gegWx07PwtJX72XvSpzCBijnNVXlD1JaZFZcdI6sK6_tcIxhLE4r31eRrbOU3Ly9IE",
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw"
    }
  ]
}
2020-09-17 12:26:33 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
2020-09-17 12:26:33 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
test-client-id-346334adgdsfgdfg3425
client_secret
test-client-secret-452wf246w3g324t34
scope
openid accounts
redirect_uri
https://www.gluu.org
certificate
-----BEGIN CERTIFICATE-----
MIIDZjCCAhqgAwIBAgIhAJZt5gX62poPeFj5+i2q9ozjpIKLoLQNw3zy8134lfRY MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAICBQChHDAaBgkqhkiG9w0BAQgw DQYJYIZIAWUDBAICBQCiAwIBMDAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNh dGVzMB4XDTIwMDgyNzEzMjg1OFoXDTIwMTIwNTEzMjkwNVowHjEcMBoGA1UEAwwT b3hkIENBIENlcnRpZmljYXRlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIo79ge2mJ055DBIQJ9Up6ODBC4ch72nQU6ZNLx/1JgpSokj2bXgDSxUN2rd SiFEWGv/u5CUKDpavYSMONIPGX+DH2rN10oZN/WFqP1ZSp/GzQbnf4SWn3rUtU8w p5bj+8XB+b1CtNbz2AMO11XnSoD2tWV5waS2fR4HBqct3Smo3Ek7Gno9oXEITGU2 94dEO3AXkoHLMZf+z6BTnQdPBWncHVYjz43YMxLr0hVidHQxTYzoU0RID6bRTug7 bfW8a6yrT2/hF1MCrCIe3Jd7HJrgV3sLIZFUX9p69v1Ghuu+lAVXiOYCkgQ5ab6T K6Oxq8okOOh74AaSUBzlW0ijoV0CAwEAAaMnMCUwIwYDVR0lBBwwGgYIKwYBBQUH AwEGCCsGAQUFBwMCBgRVHSUAMEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIC BQChHDAaBgkqhkiG9w0BAQgwDQYJYIZIAWUDBAICBQCiAwIBMAOCAQEANbRPGBNr Nn+SeQdTeQQ6Gmp5tFTjs/hwshJ4YZCE5j3f6W8o2cN91TFK8lHTIK7zRj1c/yJf Xf27BPTFZOTvYzlHBkRKUptc7aCJgC5awwdalPxU7NEs2T6R8OaNWeuUtT9T6Oze si3Rx0hHmieqsYgnW+uHgLokI8vFickzXdTDiib1hE44+hQAwkRQ2IO8anjSGTAt LUF59D0O5XdJ0PVgq7I0tpNdKM5LcztY1mrq2B4fRLnVJsoz54qCuBNQG1i/MNYD 8Cx5ZxlehAtexm3rVMKuVy3wOpYId8feVPsqk+oXVgkiuV47McvD8NAzY3PXqB19 rXRsjI7iPJRkQQ==
-----END CERTIFICATE-----
jwks
{
  "keys": [
    {
      "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "exp": 1607326752998,
      "x5c": [
        "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"
      ],
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw",
      "e": "AQAB"
    },
    {
      "kid": "1ae82071-038b-4e4b-8a2b-b2a8a196a350_enc_rsa1_5",
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA1_5",
      "exp": 1607326752998,
      "x5c": [
        "MIIC/jCCAeagAwIBAgIhAOW7o23N2ByVGsbVMP40zO8bWFZn3197iWzq8GlEg+liMA0GCSqGSIb3DQEBCwUAMB4xHDAaBgNVBAMME294ZCBDQSBDZXJ0aWZpY2F0ZXMwHhcNMjAwODI5MDczOTA0WhcNMjAxMjA3MDczOTEyWjAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNhdGVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V/mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F/2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e/Cmp3+ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4/uUcryeAvspz5tQpPJclgzXgK/Q3G072JU+LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV/AwIDAQABoycwJTAjBgNVHSUEHDAaBggrBgEFBQcDAQYIKwYBBQUHAwIGBFUdJQAwDQYJKoZIhvcNAQELBQADggEBAHnZKla/EfTowH5fk+gWRw9Xce+ncM85fAGJr1nTvV3Kq1k0wOs4di30JyKKFYLOMvRrhCHbMOaLSUnj+V2nFDIJQ3a84ZLKjOuUMLw28CnK4xlbNgqPXrrMNgxwls0QcUBuFPQUlIZ8KMLA4UN8qbu4qg2ntGmyTj7mPlHzGDtR9yviMDzk+LcR0Znl8cxe2lnIRv4ZG9sx+dA7SrwyTdxWDh7UZ+AL/RJK/rojh0R95rjxr1KdXqf0+Wk22ozhIzm8mSoJVQbVosNLxKaGmbUiXaboDkfc7zzavm0u3TP1SUhizJHu4gjKXAi+7zOFQ6h+wnjpjb9/NYHCLRUrifY\u003d"
      ],
      "n": "woTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V_mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F_2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e_Cmp3-ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4_uUcryeAvspz5tQpPJclgzXgK_Q3G072JU-LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV_Aw",
      "e": "AQAB"
    }
  ]
}
2020-09-17 12:26:33 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2020-09-17 12:26:33 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "exp": 1607326752998,
      "x5c": [
        "MIIDZTCCAhmgAwIBAgIgEzTfHCIizrfsOo9Q6szuD1oAomyy45mEGT9D4+TE4nQwQQYJKoZIhvcNAQEKMDSgDzANBglghkgBZQMEAgEFAKEcMBoGCSqGSIb3DQEBCDANBglghkgBZQMEAgEFAKIDAgEgMB4xHDAaBgNVBAMME294ZCBDQSBDZXJ0aWZpY2F0ZXMwHhcNMjAwODI5MDczOTAzWhcNMjAxMjA3MDczOTEyWjAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNhdGVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCH0I9/HsIxZnA+vbUfteJ3YPzhSpKE1uh4mZ36U+RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K+NZ0OMZaS+7WWpkh5XHx3pphq8X7RLY3GEhPXdO/OKKq0IYi03npqG2y7v52DWaTbVGb/Z4nJ+D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk+HXKrgUUAMmN49r+2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh/bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVwIDAQABoycwJTAjBgNVHSUEHDAaBggrBgEFBQcDAQYIKwYBBQUHAwIGBFUdJQAwQQYJKoZIhvcNAQEKMDSgDzANBglghkgBZQMEAgEFAKEcMBoGCSqGSIb3DQEBCDANBglghkgBZQMEAgEFAKIDAgEgA4IBAQB+cMDR+ceVqlnvMTlzoX5LJBRfvVWs0Z5qTDlJj87HWOC8AUTBVz8YPUvt4kcocZY5RdswVTVmBvnTTj4VbJF0EMwSFauZEfPisNgodgPBFPk9+DkFdPhezvQpc9pR99aOv1D5QbtBqDxnOSwEKy9m+CtrFwVaFRI5HE8Waut8GAyKKMVPkm4TXipwFmmBnisdMEr0ThEg9Vr/mU3uQFMZukU3jJoNcxlq6FepzSjQS5iuPeNDnTwqoGJTVyFC0Xm6+Xg48uuR5qYk9HpbRaBLIAnDt76CxnIDEWcGwR8iUvER/fFOwKlXiX+UhXfglPehdh/LWk2OZ7lCJILON9zQ"
      ],
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw",
      "e": "AQAB"
    },
    {
      "kid": "1ae82071-038b-4e4b-8a2b-b2a8a196a350_enc_rsa1_5",
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA1_5",
      "exp": 1607326752998,
      "x5c": [
        "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\u003d"
      ],
      "n": "woTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V_mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F_2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e_Cmp3-ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4_uUcryeAvspz5tQpPJclgzXgK_Q3G072JU-LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV_Aw",
      "e": "AQAB"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "1ae82071-038b-4e4b-8a2b-b2a8a196a350_enc_rsa1_5",
      "x5c": [
        "MIIC/jCCAeagAwIBAgIhAOW7o23N2ByVGsbVMP40zO8bWFZn3197iWzq8GlEg+liMA0GCSqGSIb3DQEBCwUAMB4xHDAaBgNVBAMME294ZCBDQSBDZXJ0aWZpY2F0ZXMwHhcNMjAwODI5MDczOTA0WhcNMjAxMjA3MDczOTEyWjAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNhdGVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V/mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F/2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e/Cmp3+ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4/uUcryeAvspz5tQpPJclgzXgK/Q3G072JU+LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV/AwIDAQABoycwJTAjBgNVHSUEHDAaBggrBgEFBQcDAQYIKwYBBQUHAwIGBFUdJQAwDQYJKoZIhvcNAQELBQADggEBAHnZKla/EfTowH5fk+gWRw9Xce+ncM85fAGJr1nTvV3Kq1k0wOs4di30JyKKFYLOMvRrhCHbMOaLSUnj+V2nFDIJQ3a84ZLKjOuUMLw28CnK4xlbNgqPXrrMNgxwls0QcUBuFPQUlIZ8KMLA4UN8qbu4qg2ntGmyTj7mPlHzGDtR9yviMDzk+LcR0Znl8cxe2lnIRv4ZG9sx+dA7SrwyTdxWDh7UZ+AL/RJK/rojh0R95rjxr1KdXqf0+Wk22ozhIzm8mSoJVQbVosNLxKaGmbUiXaboDkfc7zzavm0u3TP1SUhizJHu4gjKXAi+7zOFQ6h+wnjpjb9/NYHCLRUrifY\u003d"
      ],
      "alg": "RSA1_5",
      "n": "woTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V_mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F_2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e_Cmp3-ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4_uUcryeAvspz5tQpPJclgzXgK_Q3G072JU-LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV_Aw"
    }
  ]
}
2020-09-17 12:26:33 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2020-09-17 12:26:33 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2020-09-17 12:26:33 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "exp": 1607326752998,
      "x5c": [
        "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"
      ],
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw",
      "e": "AQAB"
    },
    {
      "kid": "1ae82071-038b-4e4b-8a2b-b2a8a196a350_enc_rsa1_5",
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA1_5",
      "exp": 1607326752998,
      "x5c": [
        "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\u003d"
      ],
      "n": "woTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V_mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F_2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e_Cmp3-ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4_uUcryeAvspz5tQpPJclgzXgK_Q3G072JU-LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV_Aw",
      "e": "AQAB"
    }
  ]
}
2020-09-17 12:26:33
fapi-rw-id2-client-test-invalid-missing-iss
Setup Done
2020-09-17 12:26:53 INCOMING
fapi-rw-id2-client-test-invalid-missing-iss
Incoming HTTP request to test instance HBwN7xtaqoR42pi
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "text/plain,application/json",
  "user-agent": "Apache-HttpClient/4.5.3 (Java/1.8.0_231)",
  "accept-encoding": "gzip,deflate",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2020-09-17 12:26:53 SUCCESS
EnsureIncomingTls12
Found TLS 1.2 connection
2020-09-17 12:26:53 SUCCESS
EnsureIncomingTlsSecureCipher
TLS cipher is allowed
actual
ECDHE-RSA-AES256-GCM-SHA384
expected
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2020-09-17 12:26:53 OUTGOING
fapi-rw-id2-client-test-invalid-missing-iss
Response to HTTP request to test instance HBwN7xtaqoR42pi
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/gluu-oxd-test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/gluu-oxd-test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/userinfo",
  "token_endpoint_auth_methods_supported": [
    "tls_client_auth"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2020-09-17 12:26:55 INCOMING
fapi-rw-id2-client-test-invalid-missing-iss
Incoming HTTP request to test instance HBwN7xtaqoR42pi
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Apache-HttpClient/4.5.3 (Java/1.8.0_161)",
  "accept-encoding": "gzip,deflate",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
authorize
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{
  "response_type": "code id_token",
  "client_id": "test-client-id-346334adgdsfgdfg3425",
  "redirect_uri": "https://www.gluu.org",
  "scope": "openid accounts",
  "state": "ii924g271kvvdhtsjfts3vpbr6",
  "nonce": "39trcfgoq5ndfuu7cvh02rrfq8",
  "request": "eyJraWQiOiJlZmU3MTJkYy03ODIwLTRmMzYtOTBhZS1iNmU2Yjg0OTBjMGRfc2lnX3BzMjU2IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.aBakSGeRML9fhAFf5kEF9u0sDOayOCvKQk65Xy5HW8EDwYaBXEme8VF5aIQCR1WkClk_WnF8t8jMSClivrYIms2UCKfZKL3LDsS-bhiufMAaTV3bsA-SPwmZczz5bv3xhV44-Ob0khS07AvaWejPJDxMGTaheyTH9LdEt5dn1lkYcW6lg3uHYPY7jhbRHfQvIyDOs-zf9c6oyyYjcl_8NxBiMML3yvCLDOaB9AZ7ZY_UQvL3rewZq_CP-CvIFK8xdNd7pq4bXV5ue72-YoDSJiQXWT6KgKjP2ZKeNlKXfr8Zo0IVmaFtJPPlZHs69QJlNiJR_oWvM12-k0oG53MgcA"
}
incoming_body
2020-09-17 12:26:55 SUCCESS
EnsureIncomingTls12
Found TLS 1.2 connection
2020-09-17 12:26:55 SUCCESS
EnsureIncomingTlsSecureCipher
TLS cipher is allowed
actual
ECDHE-RSA-AES256-GCM-SHA384
expected
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Authorization endpoint
2020-09-17 12:26:55 SUCCESS
ExtractRequestObject
Parsed request object
request_object
{
  "value": "eyJraWQiOiJlZmU3MTJkYy03ODIwLTRmMzYtOTBhZS1iNmU2Yjg0OTBjMGRfc2lnX3BzMjU2IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.aBakSGeRML9fhAFf5kEF9u0sDOayOCvKQk65Xy5HW8EDwYaBXEme8VF5aIQCR1WkClk_WnF8t8jMSClivrYIms2UCKfZKL3LDsS-bhiufMAaTV3bsA-SPwmZczz5bv3xhV44-Ob0khS07AvaWejPJDxMGTaheyTH9LdEt5dn1lkYcW6lg3uHYPY7jhbRHfQvIyDOs-zf9c6oyyYjcl_8NxBiMML3yvCLDOaB9AZ7ZY_UQvL3rewZq_CP-CvIFK8xdNd7pq4bXV5ue72-YoDSJiQXWT6KgKjP2ZKeNlKXfr8Zo0IVmaFtJPPlZHs69QJlNiJR_oWvM12-k0oG53MgcA",
  "header": {
    "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "iss": "test-client-id-346334adgdsfgdfg3425",
    "response_type": "code id_token",
    "oxd_id": "6d6b4b57-201b-4613-9555-95be7d199584",
    "nonce": "39trcfgoq5ndfuu7cvh02rrfq8",
    "client_id": "test-client-id-346334adgdsfgdfg3425",
    "aud": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
    "scope": "openid accounts",
    "claims": {
      "id_token": {
        "acr": {
          "values": [
            "urn:openbanking:psd2:sca",
            "urn:openbanking:psd2:ca"
          ],
          "essential": true
        }
      }
    },
    "redirect_uri": "https://www.gluu.org",
    "state": "ii924g271kvvdhtsjfts3vpbr6",
    "exp": 1600345908,
    "iat": 1600345608,
    "prompt": "none",
    "jti": "c45848f0-0c66-41c6-b9ce-2602644dac4b"
  }
}
2020-09-17 12:26:55 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "response_type": "code id_token",
  "client_id": "test-client-id-346334adgdsfgdfg3425",
  "redirect_uri": "https://www.gluu.org",
  "scope": "openid accounts",
  "state": "ii924g271kvvdhtsjfts3vpbr6",
  "nonce": "39trcfgoq5ndfuu7cvh02rrfq8",
  "request": "eyJraWQiOiJlZmU3MTJkYy03ODIwLTRmMzYtOTBhZS1iNmU2Yjg0OTBjMGRfc2lnX3BzMjU2IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.aBakSGeRML9fhAFf5kEF9u0sDOayOCvKQk65Xy5HW8EDwYaBXEme8VF5aIQCR1WkClk_WnF8t8jMSClivrYIms2UCKfZKL3LDsS-bhiufMAaTV3bsA-SPwmZczz5bv3xhV44-Ob0khS07AvaWejPJDxMGTaheyTH9LdEt5dn1lkYcW6lg3uHYPY7jhbRHfQvIyDOs-zf9c6oyyYjcl_8NxBiMML3yvCLDOaB9AZ7ZY_UQvL3rewZq_CP-CvIFK8xdNd7pq4bXV5ue72-YoDSJiQXWT6KgKjP2ZKeNlKXfr8Zo0IVmaFtJPPlZHs69QJlNiJR_oWvM12-k0oG53MgcA",
  "iss": "test-client-id-346334adgdsfgdfg3425",
  "oxd_id": "6d6b4b57-201b-4613-9555-95be7d199584",
  "aud": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "claims": {
    "id_token": {
      "acr": {
        "values": [
          "urn:openbanking:psd2:sca",
          "urn:openbanking:psd2:ca"
        ],
        "essential": true
      }
    }
  },
  "exp": 1600345908,
  "iat": 1600345608,
  "prompt": "none",
  "jti": "c45848f0-0c66-41c6-b9ce-2602644dac4b"
}
2020-09-17 12:26:55 SUCCESS
EnsureAuthorizationParametersMatchRequestObject
All claims in the query parameters exist in the request object
claims
[
  "response_type",
  "client_id",
  "redirect_uri",
  "scope",
  "state",
  "nonce",
  "request"
]
2020-09-17 12:26:55 SUCCESS
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
alg
PS256
2020-09-17 12:26:55 SUCCESS
FAPIValidateRequestObjectIdTokenACRClaims
Acr value in request object is as expected
received
[
  "urn:openbanking:psd2:sca",
  "urn:openbanking:psd2:ca"
]
2020-09-17 12:26:55 SUCCESS
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Sep 17, 2020, 12:31:48 PM"
2020-09-17 12:26:55
ValidateRequestObjectClaims
Request object does not contain a max_age claim
2020-09-17 12:26:55 SUCCESS
ValidateRequestObjectClaims
Request object claims passed all validation checks
2020-09-17 12:26:55 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2020-09-17 12:26:55 SUCCESS
EnsureMatchingRedirectUriInRequestObject
Redirect URI matched
actual
https://www.gluu.org
2020-09-17 12:26:55 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2020-09-17 12:26:55 SUCCESS
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
request_object
eyJraWQiOiJlZmU3MTJkYy03ODIwLTRmMzYtOTBhZS1iNmU2Yjg0OTBjMGRfc2lnX3BzMjU2IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.aBakSGeRML9fhAFf5kEF9u0sDOayOCvKQk65Xy5HW8EDwYaBXEme8VF5aIQCR1WkClk_WnF8t8jMSClivrYIms2UCKfZKL3LDsS-bhiufMAaTV3bsA-SPwmZczz5bv3xhV44-Ob0khS07AvaWejPJDxMGTaheyTH9LdEt5dn1lkYcW6lg3uHYPY7jhbRHfQvIyDOs-zf9c6oyyYjcl_8NxBiMML3yvCLDOaB9AZ7ZY_UQvL3rewZq_CP-CvIFK8xdNd7pq4bXV5ue72-YoDSJiQXWT6KgKjP2ZKeNlKXfr8Zo0IVmaFtJPPlZHs69QJlNiJR_oWvM12-k0oG53MgcA
request_object_signing_alg
PS256
jwk
Sun RSA public key, 2048 bits
  params: null
  modulus: 23749544513504322484726380149595024192823796240263136516370361517564548990666205309795095009167419366599947928955190184045405779071955015745945771756234605739168630804144306988956786411335944808921728753501432468320528697690834571570359554543784876974125729864159582066448414619850969422459605885233025240850426082403588898070004431793210503140520993148883714988319305115367615640122716373852629981559998987788804701093260880494687381836374670807228033317476969296824306173630205108913450832493298553573937422720632829195881815344735704319716421079026153333329945415085253428160565922016050576554905600927052290187607
  public exponent: 65537
2020-09-17 12:26:55 SUCCESS
EnsureResponseTypeIsCodeIdToken
Response type is expected value
expected
code id_token
2020-09-17 12:26:55 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
test-client-id-346334adgdsfgdfg3425
2020-09-17 12:26:55 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid accounts
2020-09-17 12:26:55 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid",
  "accounts"
]
expected
openid
2020-09-17 12:26:55 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
39trcfgoq5ndfuu7cvh02rrfq8
2020-09-17 12:26:55 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
tPNAxgckdi
2020-09-17 12:26:55 SUCCESS
ExtractServerSigningAlg
Successfully extracted algorithm
signing_algorithm
PS256
2020-09-17 12:26:55 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash
KqS1y0mt8we4JX2-0M3Sbw
2020-09-17 12:26:55 SUCCESS
CalculateSHash
Successful s_hash encoding
s_hash
GjNu790jU0gtxx8HM6lNJg
2020-09-17 12:26:55 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
1ygTkLm4cGsRU0HUUgYNHrdLkXQD5rL9U20PfKZy0HTo50yZox
2020-09-17 12:26:55 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
GRw6v96-J7juHTX2xdd4zw
2020-09-17 12:26:55 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/gluu-oxd-test/
sub
user-subject-1234531
aud
test-client-id-346334adgdsfgdfg3425
nonce
39trcfgoq5ndfuu7cvh02rrfq8
iat
1600345615
exp
1600345915
2020-09-17 12:26:55 SUCCESS
AddCHashToIdTokenClaims
Added c_hash to ID token claims
c_hash
KqS1y0mt8we4JX2-0M3Sbw
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "sub": "user-subject-1234531",
  "aud": "test-client-id-346334adgdsfgdfg3425",
  "nonce": "39trcfgoq5ndfuu7cvh02rrfq8",
  "iat": 1600345615,
  "exp": 1600345915,
  "c_hash": "KqS1y0mt8we4JX2-0M3Sbw"
}
2020-09-17 12:26:55 SUCCESS
AddSHashToIdTokenClaims
Added s_hash to ID token claims
s_hash
GjNu790jU0gtxx8HM6lNJg
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "sub": "user-subject-1234531",
  "aud": "test-client-id-346334adgdsfgdfg3425",
  "nonce": "39trcfgoq5ndfuu7cvh02rrfq8",
  "iat": 1600345615,
  "exp": 1600345915,
  "c_hash": "KqS1y0mt8we4JX2-0M3Sbw",
  "s_hash": "GjNu790jU0gtxx8HM6lNJg"
}
2020-09-17 12:26:55 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
GRw6v96-J7juHTX2xdd4zw
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "sub": "user-subject-1234531",
  "aud": "test-client-id-346334adgdsfgdfg3425",
  "nonce": "39trcfgoq5ndfuu7cvh02rrfq8",
  "iat": 1600345615,
  "exp": 1600345915,
  "c_hash": "KqS1y0mt8we4JX2-0M3Sbw",
  "s_hash": "GjNu790jU0gtxx8HM6lNJg",
  "at_hash": "GRw6v96-J7juHTX2xdd4zw"
}
2020-09-17 12:26:55 SUCCESS
RemoveIssFromIdToken
Removed iss value from ID token claims
id_token_claims
{
  "sub": "user-subject-1234531",
  "aud": "test-client-id-346334adgdsfgdfg3425",
  "nonce": "39trcfgoq5ndfuu7cvh02rrfq8",
  "iat": 1600345615,
  "exp": 1600345915,
  "c_hash": "KqS1y0mt8we4JX2-0M3Sbw",
  "s_hash": "GjNu790jU0gtxx8HM6lNJg",
  "at_hash": "GRw6v96-J7juHTX2xdd4zw"
}
2020-09-17 12:26:55 SUCCESS
AddACRClaimToIdTokenClaims
Added acr value to id_token_claims
acr_value
urn:openbanking:psd2:sca
claims
{
  "sub": "user-subject-1234531",
  "aud": "test-client-id-346334adgdsfgdfg3425",
  "nonce": "39trcfgoq5ndfuu7cvh02rrfq8",
  "iat": 1600345615,
  "exp": 1600345915,
  "c_hash": "KqS1y0mt8we4JX2-0M3Sbw",
  "s_hash": "GjNu790jU0gtxx8HM6lNJg",
  "at_hash": "GRw6v96-J7juHTX2xdd4zw",
  "acr": "urn:openbanking:psd2:sca"
}
2020-09-17 12:26:55 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJkMTVkMDJhYy1iNDMyLTQ1ZWYtOGMwOS1iZGUzODExZDBjOWIiLCJhbGciOiJQUzI1NiJ9.eyJhdF9oYXNoIjoiR1J3NnY5Ni1KN2p1SFRYMnhkZDR6dyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidGVzdC1jbGllbnQtaWQtMzQ2MzM0YWRnZHNmZ2RmZzM0MjUiLCJjX2hhc2giOiJLcVMxeTBtdDh3ZTRKWDItME0zU2J3IiwiYWNyIjoidXJuOm9wZW5iYW5raW5nOnBzZDI6c2NhIiwic19oYXNoIjoiR2pOdTc5MGpVMGd0eHg4SE02bE5KZyIsImV4cCI6MTYwMDM0NTkxNSwibm9uY2UiOiIzOXRyY2Znb3E1bmRmdXU3Y3ZoMDJycmZxOCIsImlhdCI6MTYwMDM0NTYxNX0.cQRoluL2whDKj_VbaqEl92T25lFZ7jovJantZNlLfHUpQ-58JVBQHfceUf3u2VO1_9cV3Kl_kay55vw_aF6mmPWZFE9Cg9d-H65oKsDeNItskKpKwFCYrqCsALStUM4AvakjtilSXtBOd6kOnb3rlbDvklAzY2eYI5DQGUbA43DjTShWJcdyh_D_Lx-Msxfk2jsngE7FAUSpWPu8nBM3F0jKbAFujNkLT01qENVdJftDMUsHF688jAuPd6DMLXNB4sjHeV3W-B7IEKwciaf5R8hx44LIwK9Z7ysm1pKDtEVBCuw8tl2JltJJT1C7dtdJfn0F-yIQmBvlJLFBrprgyg
2020-09-17 12:26:55 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://www.gluu.org",
  "state": "ii924g271kvvdhtsjfts3vpbr6"
}
2020-09-17 12:26:55 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://www.gluu.org",
  "state": "ii924g271kvvdhtsjfts3vpbr6",
  "code": "tPNAxgckdi"
}
2020-09-17 12:26:55 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://www.gluu.org",
  "state": "ii924g271kvvdhtsjfts3vpbr6",
  "code": "tPNAxgckdi",
  "id_token": "eyJraWQiOiJkMTVkMDJhYy1iNDMyLTQ1ZWYtOGMwOS1iZGUzODExZDBjOWIiLCJhbGciOiJQUzI1NiJ9.eyJhdF9oYXNoIjoiR1J3NnY5Ni1KN2p1SFRYMnhkZDR6dyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidGVzdC1jbGllbnQtaWQtMzQ2MzM0YWRnZHNmZ2RmZzM0MjUiLCJjX2hhc2giOiJLcVMxeTBtdDh3ZTRKWDItME0zU2J3IiwiYWNyIjoidXJuOm9wZW5iYW5raW5nOnBzZDI6c2NhIiwic19oYXNoIjoiR2pOdTc5MGpVMGd0eHg4SE02bE5KZyIsImV4cCI6MTYwMDM0NTkxNSwibm9uY2UiOiIzOXRyY2Znb3E1bmRmdXU3Y3ZoMDJycmZxOCIsImlhdCI6MTYwMDM0NTYxNX0.cQRoluL2whDKj_VbaqEl92T25lFZ7jovJantZNlLfHUpQ-58JVBQHfceUf3u2VO1_9cV3Kl_kay55vw_aF6mmPWZFE9Cg9d-H65oKsDeNItskKpKwFCYrqCsALStUM4AvakjtilSXtBOd6kOnb3rlbDvklAzY2eYI5DQGUbA43DjTShWJcdyh_D_Lx-Msxfk2jsngE7FAUSpWPu8nBM3F0jKbAFujNkLT01qENVdJftDMUsHF688jAuPd6DMLXNB4sjHeV3W-B7IEKwciaf5R8hx44LIwK9Z7ysm1pKDtEVBCuw8tl2JltJJT1C7dtdJfn0F-yIQmBvlJLFBrprgyg"
}
2020-09-17 12:26:55
SendAuthorizationResponseWithResponseModeFragment
Redirecting back to client
uri
https://www.gluu.org#state=ii924g271kvvdhtsjfts3vpbr6&code=tPNAxgckdi&id_token=eyJraWQiOiJkMTVkMDJhYy1iNDMyLTQ1ZWYtOGMwOS1iZGUzODExZDBjOWIiLCJhbGciOiJQUzI1NiJ9.eyJhdF9oYXNoIjoiR1J3NnY5Ni1KN2p1SFRYMnhkZDR6dyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidGVzdC1jbGllbnQtaWQtMzQ2MzM0YWRnZHNmZ2RmZzM0MjUiLCJjX2hhc2giOiJLcVMxeTBtdDh3ZTRKWDItME0zU2J3IiwiYWNyIjoidXJuOm9wZW5iYW5raW5nOnBzZDI6c2NhIiwic19oYXNoIjoiR2pOdTc5MGpVMGd0eHg4SE02bE5KZyIsImV4cCI6MTYwMDM0NTkxNSwibm9uY2UiOiIzOXRyY2Znb3E1bmRmdXU3Y3ZoMDJycmZxOCIsImlhdCI6MTYwMDM0NTYxNX0.cQRoluL2whDKj_VbaqEl92T25lFZ7jovJantZNlLfHUpQ-58JVBQHfceUf3u2VO1_9cV3Kl_kay55vw_aF6mmPWZFE9Cg9d-H65oKsDeNItskKpKwFCYrqCsALStUM4AvakjtilSXtBOd6kOnb3rlbDvklAzY2eYI5DQGUbA43DjTShWJcdyh_D_Lx-Msxfk2jsngE7FAUSpWPu8nBM3F0jKbAFujNkLT01qENVdJftDMUsHF688jAuPd6DMLXNB4sjHeV3W-B7IEKwciaf5R8hx44LIwK9Z7ysm1pKDtEVBCuw8tl2JltJJT1C7dtdJfn0F-yIQmBvlJLFBrprgyg
2020-09-17 12:26:55 OUTGOING
fapi-rw-id2-client-test-invalid-missing-iss
Response to HTTP request to test instance HBwN7xtaqoR42pi
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://www.gluu.org#state=ii924g271kvvdhtsjfts3vpbr6&code=tPNAxgckdi&id_token=eyJraWQiOiJkMTVkMDJhYy1iNDMyLTQ1ZWYtOGMwOS1iZGUzODExZDBjOWIiLCJhbGciOiJQUzI1NiJ9.eyJhdF9oYXNoIjoiR1J3NnY5Ni1KN2p1SFRYMnhkZDR6dyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidGVzdC1jbGllbnQtaWQtMzQ2MzM0YWRnZHNmZ2RmZzM0MjUiLCJjX2hhc2giOiJLcVMxeTBtdDh3ZTRKWDItME0zU2J3IiwiYWNyIjoidXJuOm9wZW5iYW5raW5nOnBzZDI6c2NhIiwic19oYXNoIjoiR2pOdTc5MGpVMGd0eHg4SE02bE5KZyIsImV4cCI6MTYwMDM0NTkxNSwibm9uY2UiOiIzOXRyY2Znb3E1bmRmdXU3Y3ZoMDJycmZxOCIsImlhdCI6MTYwMDM0NTYxNX0.cQRoluL2whDKj_VbaqEl92T25lFZ7jovJantZNlLfHUpQ-58JVBQHfceUf3u2VO1_9cV3Kl_kay55vw_aF6mmPWZFE9Cg9d-H65oKsDeNItskKpKwFCYrqCsALStUM4AvakjtilSXtBOd6kOnb3rlbDvklAzY2eYI5DQGUbA43DjTShWJcdyh_D_Lx-Msxfk2jsngE7FAUSpWPu8nBM3F0jKbAFujNkLT01qENVdJftDMUsHF688jAuPd6DMLXNB4sjHeV3W-B7IEKwciaf5R8hx44LIwK9Z7ysm1pKDtEVBCuw8tl2JltJJT1C7dtdJfn0F-yIQmBvlJLFBrprgyg]
outgoing_path
authorize
2020-09-17 12:26:58 INCOMING
fapi-rw-id2-client-test-invalid-missing-iss
Incoming HTTP request to test instance HBwN7xtaqoR42pi
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json",
  "user-agent": "Apache-HttpClient/4.5.3 (Java/1.8.0_231)",
  "accept-encoding": "gzip,deflate",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
jwks
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2020-09-17 12:26:58 SUCCESS
EnsureIncomingTls12
Found TLS 1.2 connection
2020-09-17 12:26:58 SUCCESS
EnsureIncomingTlsSecureCipher
TLS cipher is allowed
actual
ECDHE-RSA-AES256-GCM-SHA384
expected
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2020-09-17 12:26:58 OUTGOING
fapi-rw-id2-client-test-invalid-missing-iss
Response to HTTP request to test instance HBwN7xtaqoR42pi
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "d15d02ac-b432-45ef-8c09-bde3811d0c9b",
      "alg": "PS256",
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw"
    }
  ]
}
outgoing_path
jwks
2020-09-17 12:27:00 FINISHED
fapi-rw-id2-client-test-invalid-missing-iss
Test has run to completion
testmodule_result
PASSED
2020-09-17 12:28:12
TEST-RUNNER
Alias has now been claimed by another test
alias
gluu-oxd-test
new_test_id
bLHYCQiqx6oqH9B
Test Results