Test Summary

Test Results

Expand All Collapse All
All times are UTC
2020-09-17 12:37:54 INFO
TEST-RUNNER
Test instance FW646RmzAA6Z35A created
baseUrl
https://www.certification.openid.net/test/a/gluu-oxd-test
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_profile": "plain_fapi"
}
alias
gluu-oxd-test
description
Gluu oxd test
planId
o0kXWA8V1sL6p
config
{
  "alias": "gluu-oxd-test",
  "description": "Gluu oxd test",
  "server": {
    "jwks": {
      "keys": [
        {
          "p": "_aYTyJg7xpmEUcdL8is5KiFC6HRAwCF-CcA4GxvZXNaj7CnWQOlYQp-fg2-Nk0hQGGkOmhaFb35DTHr_Fa6ShoUjoeD0cORAy6PaEF1m6URs02s00OFDoYBudK-oUDNiPWQFJ8hrv4z1s2HmfB0x2e7QV_8dxW7xw1i7LTGk1fc",
          "kty": "RSA",
          "alg": "PS256",
          "q": "veBnKgi99Hoqamh7_KPW3ipY4PJ18tyyLi33vI1y_g2Cs7swmNeAHYtc6b4A6Oz29D7cpuLzbSdMlPJoyFy8eq3T6bAoZnczq0JEFpvkeyme8HTEgRyVLLd82vGt68sIG32exWWMgOU-RuFzdJqP6bQtq5LwzqyVooIc1jna96E",
          "d": "DKBgwNmfjt9Ukk9RME3wB7TcUx3mGguBzhyA6lhKClAgtok9xJ7J0JfQ89Yg0uU5Pi3l-J0Qt9poPSCQYolt3AHxrrcI5YhPlbPeqpsHrAMSFK5SbB9zGo3zvfBlgpLvyqKQnrt7L-tKbmAhiUy0r9YmEfyACYzkaAyNR2F5OvGSGw0JrB8jhtYmgduN2VyYxNUlmFPqxYc7XdxWb0My0VwN4UJg4OPqlrkIaYKyovFbHbmgpP89IAabLhoIkmLeyyigVLFvjecvUliCyBJJpUH-QiLcgAU0CBKgjz9_2e8hkjGgqNv-W8kt1tlSzdgenZbgYqdvf6rf3Si0OedWYQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "d15d02ac-b432-45ef-8c09-bde3811d0c9b",
          "qi": "j9oCr752UnXnC9lD-dlufwTJpSs4xGYthpvd0TwXd604VBeGeZ-3gPM1l4k6HqQ2QQ_s5d8116rBBWnAtNG5t1_dzUdIznv26ErNPeXZiQ8GvD1ai_yA7d8aR6sOUyTLVXAQnNZTYmHdhZf2Lc3rEFGpBefXMBY0i6eWwtFQVpA",
          "dp": "XPz3n8B_mY1KPxjLNNq3uEQ9XS7RVh5xMG3xo66P_0MJEVk9HMru-m2-ctcAlhAanPhWzBKZlIg7b9xfi7lWKk7BA2WO95wWTRGirgEv6zCUnOVelX0f6CNHWyvSjqRnzY3PfggxyCWLJdosPzAMyJKOetQiO_EyXKU46ZabkX0",
          "dq": "KGM3DmXVoc7qfr_Cv7ZJ2e-___kSxZnT_Kaib2TW9NsC1iAW8ivEgIRIOx_DKchdrw4_-O-FP86AJ554U0YGgUHANZDWxxTL1L2_pd969gegWx07PwtJX72XvSpzCBijnNVXlD1JaZFZcdI6sK6_tcIxhLE4r31eRrbOU3Ly9IE",
          "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw"
        }
      ]
    }
  },
  "client": {
    "client_id": "test-client-id-346334adgdsfgdfg3425",
    "client_secret": "test-client-secret-452wf246w3g324t34",
    "scope": "openid accounts",
    "redirect_uri": "https://www.gluu.org",
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIDZjCCAhqgAwIBAgIhAJZt5gX62poPeFj5+i2q9ozjpIKLoLQNw3zy8134lfRY MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAICBQChHDAaBgkqhkiG9w0BAQgw DQYJYIZIAWUDBAICBQCiAwIBMDAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNh dGVzMB4XDTIwMDgyNzEzMjg1OFoXDTIwMTIwNTEzMjkwNVowHjEcMBoGA1UEAwwT b3hkIENBIENlcnRpZmljYXRlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIo79ge2mJ055DBIQJ9Up6ODBC4ch72nQU6ZNLx/1JgpSokj2bXgDSxUN2rd SiFEWGv/u5CUKDpavYSMONIPGX+DH2rN10oZN/WFqP1ZSp/GzQbnf4SWn3rUtU8w p5bj+8XB+b1CtNbz2AMO11XnSoD2tWV5waS2fR4HBqct3Smo3Ek7Gno9oXEITGU2 94dEO3AXkoHLMZf+z6BTnQdPBWncHVYjz43YMxLr0hVidHQxTYzoU0RID6bRTug7 bfW8a6yrT2/hF1MCrCIe3Jd7HJrgV3sLIZFUX9p69v1Ghuu+lAVXiOYCkgQ5ab6T K6Oxq8okOOh74AaSUBzlW0ijoV0CAwEAAaMnMCUwIwYDVR0lBBwwGgYIKwYBBQUH AwEGCCsGAQUFBwMCBgRVHSUAMEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIC BQChHDAaBgkqhkiG9w0BAQgwDQYJYIZIAWUDBAICBQCiAwIBMAOCAQEANbRPGBNr Nn+SeQdTeQQ6Gmp5tFTjs/hwshJ4YZCE5j3f6W8o2cN91TFK8lHTIK7zRj1c/yJf Xf27BPTFZOTvYzlHBkRKUptc7aCJgC5awwdalPxU7NEs2T6R8OaNWeuUtT9T6Oze si3Rx0hHmieqsYgnW+uHgLokI8vFickzXdTDiib1hE44+hQAwkRQ2IO8anjSGTAt LUF59D0O5XdJ0PVgq7I0tpNdKM5LcztY1mrq2B4fRLnVJsoz54qCuBNQG1i/MNYD 8Cx5ZxlehAtexm3rVMKuVy3wOpYId8feVPsqk+oXVgkiuV47McvD8NAzY3PXqB19 rXRsjI7iPJRkQQ\u003d\u003d\n-----END CERTIFICATE-----\n",
    "jwks": {
      "keys": [
        {
          "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
          "kty": "RSA",
          "use": "sig",
          "alg": "PS256",
          "exp": 1607326752998,
          "x5c": [
            "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"
          ],
          "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw",
          "e": "AQAB"
        },
        {
          "kid": "1ae82071-038b-4e4b-8a2b-b2a8a196a350_enc_rsa1_5",
          "kty": "RSA",
          "use": "enc",
          "alg": "RSA1_5",
          "exp": 1607326752998,
          "x5c": [
            "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\u003d"
          ],
          "n": "woTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V_mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F_2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e_Cmp3-ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4_uUcryeAvspz5tQpPJclgzXgK_Q3G072JU-LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV_Aw",
          "e": "AQAB"
        }
      ]
    }
  }
}
testName
fapi-rw-id2-client-test
2020-09-17 12:37:54 SUCCESS
GenerateServerConfigurationMTLS
Created server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/gluu-oxd-test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/gluu-oxd-test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/userinfo"
}
issuer
https://www.certification.openid.net/test/a/gluu-oxd-test/
discoveryUrl
https://www.certification.openid.net/test/a/gluu-oxd-test/.well-known/openid-configuration
2020-09-17 12:37:54
SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly
Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration
server_configuration
{
  "issuer": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/gluu-oxd-test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/gluu-oxd-test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/userinfo",
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ]
}
2020-09-17 12:37:54 SUCCESS
AddResponseTypeCodeIdTokenToServerConfiguration
Added code id_token as response type supported
response_types_supported
[
  "code id_token"
]
2020-09-17 12:37:54 SUCCESS
AddTokenEndpointSigningAlg
Set 'PS256' for token_endpoint_auth_signing_alg
2020-09-17 12:37:54 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2020-09-17 12:37:54 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_jwks
{
  "customMembers": {},
  "keys": [
    {
      "kid": "d15d02ac-b432-45ef-8c09-bde3811d0c9b",
      "alg": {
        "name": "PS256"
      },
      "use": {
        "identifier": "sig"
      },
      "kty": {
        "requirement": "REQUIRED",
        "value": "RSA"
      },
      "oth": [],
      "qi": {
        "value": "j9oCr752UnXnC9lD-dlufwTJpSs4xGYthpvd0TwXd604VBeGeZ-3gPM1l4k6HqQ2QQ_s5d8116rBBWnAtNG5t1_dzUdIznv26ErNPeXZiQ8GvD1ai_yA7d8aR6sOUyTLVXAQnNZTYmHdhZf2Lc3rEFGpBefXMBY0i6eWwtFQVpA"
      },
      "dq": {
        "value": "KGM3DmXVoc7qfr_Cv7ZJ2e-___kSxZnT_Kaib2TW9NsC1iAW8ivEgIRIOx_DKchdrw4_-O-FP86AJ554U0YGgUHANZDWxxTL1L2_pd969gegWx07PwtJX72XvSpzCBijnNVXlD1JaZFZcdI6sK6_tcIxhLE4r31eRrbOU3Ly9IE"
      },
      "dp": {
        "value": "XPz3n8B_mY1KPxjLNNq3uEQ9XS7RVh5xMG3xo66P_0MJEVk9HMru-m2-ctcAlhAanPhWzBKZlIg7b9xfi7lWKk7BA2WO95wWTRGirgEv6zCUnOVelX0f6CNHWyvSjqRnzY3PfggxyCWLJdosPzAMyJKOetQiO_EyXKU46ZabkX0"
      },
      "q": {
        "value": "veBnKgi99Hoqamh7_KPW3ipY4PJ18tyyLi33vI1y_g2Cs7swmNeAHYtc6b4A6Oz29D7cpuLzbSdMlPJoyFy8eq3T6bAoZnczq0JEFpvkeyme8HTEgRyVLLd82vGt68sIG32exWWMgOU-RuFzdJqP6bQtq5LwzqyVooIc1jna96E"
      },
      "p": {
        "value": "_aYTyJg7xpmEUcdL8is5KiFC6HRAwCF-CcA4GxvZXNaj7CnWQOlYQp-fg2-Nk0hQGGkOmhaFb35DTHr_Fa6ShoUjoeD0cORAy6PaEF1m6URs02s00OFDoYBudK-oUDNiPWQFJ8hrv4z1s2HmfB0x2e7QV_8dxW7xw1i7LTGk1fc"
      },
      "d": {
        "value": "DKBgwNmfjt9Ukk9RME3wB7TcUx3mGguBzhyA6lhKClAgtok9xJ7J0JfQ89Yg0uU5Pi3l-J0Qt9poPSCQYolt3AHxrrcI5YhPlbPeqpsHrAMSFK5SbB9zGo3zvfBlgpLvyqKQnrt7L-tKbmAhiUy0r9YmEfyACYzkaAyNR2F5OvGSGw0JrB8jhtYmgduN2VyYxNUlmFPqxYc7XdxWb0My0VwN4UJg4OPqlrkIaYKyovFbHbmgpP89IAabLhoIkmLeyyigVLFvjecvUliCyBJJpUH-QiLcgAU0CBKgjz9_2e8hkjGgqNv-W8kt1tlSzdgenZbgYqdvf6rf3Si0OedWYQ"
      },
      "e": {
        "value": "AQAB"
      },
      "n": {
        "value": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw"
      }
    }
  ]
}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "d15d02ac-b432-45ef-8c09-bde3811d0c9b",
      "alg": "PS256",
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw"
    }
  ]
}
2020-09-17 12:37:54 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2020-09-17 12:37:54 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "p": "_aYTyJg7xpmEUcdL8is5KiFC6HRAwCF-CcA4GxvZXNaj7CnWQOlYQp-fg2-Nk0hQGGkOmhaFb35DTHr_Fa6ShoUjoeD0cORAy6PaEF1m6URs02s00OFDoYBudK-oUDNiPWQFJ8hrv4z1s2HmfB0x2e7QV_8dxW7xw1i7LTGk1fc",
      "kty": "RSA",
      "q": "veBnKgi99Hoqamh7_KPW3ipY4PJ18tyyLi33vI1y_g2Cs7swmNeAHYtc6b4A6Oz29D7cpuLzbSdMlPJoyFy8eq3T6bAoZnczq0JEFpvkeyme8HTEgRyVLLd82vGt68sIG32exWWMgOU-RuFzdJqP6bQtq5LwzqyVooIc1jna96E",
      "d": "DKBgwNmfjt9Ukk9RME3wB7TcUx3mGguBzhyA6lhKClAgtok9xJ7J0JfQ89Yg0uU5Pi3l-J0Qt9poPSCQYolt3AHxrrcI5YhPlbPeqpsHrAMSFK5SbB9zGo3zvfBlgpLvyqKQnrt7L-tKbmAhiUy0r9YmEfyACYzkaAyNR2F5OvGSGw0JrB8jhtYmgduN2VyYxNUlmFPqxYc7XdxWb0My0VwN4UJg4OPqlrkIaYKyovFbHbmgpP89IAabLhoIkmLeyyigVLFvjecvUliCyBJJpUH-QiLcgAU0CBKgjz9_2e8hkjGgqNv-W8kt1tlSzdgenZbgYqdvf6rf3Si0OedWYQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "d15d02ac-b432-45ef-8c09-bde3811d0c9b",
      "qi": "j9oCr752UnXnC9lD-dlufwTJpSs4xGYthpvd0TwXd604VBeGeZ-3gPM1l4k6HqQ2QQ_s5d8116rBBWnAtNG5t1_dzUdIznv26ErNPeXZiQ8GvD1ai_yA7d8aR6sOUyTLVXAQnNZTYmHdhZf2Lc3rEFGpBefXMBY0i6eWwtFQVpA",
      "dp": "XPz3n8B_mY1KPxjLNNq3uEQ9XS7RVh5xMG3xo66P_0MJEVk9HMru-m2-ctcAlhAanPhWzBKZlIg7b9xfi7lWKk7BA2WO95wWTRGirgEv6zCUnOVelX0f6CNHWyvSjqRnzY3PfggxyCWLJdosPzAMyJKOetQiO_EyXKU46ZabkX0",
      "alg": "PS256",
      "dq": "KGM3DmXVoc7qfr_Cv7ZJ2e-___kSxZnT_Kaib2TW9NsC1iAW8ivEgIRIOx_DKchdrw4_-O-FP86AJ554U0YGgUHANZDWxxTL1L2_pd969gegWx07PwtJX72XvSpzCBijnNVXlD1JaZFZcdI6sK6_tcIxhLE4r31eRrbOU3Ly9IE",
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw"
    }
  ]
}
2020-09-17 12:37:54 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
2020-09-17 12:37:54 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
test-client-id-346334adgdsfgdfg3425
client_secret
test-client-secret-452wf246w3g324t34
scope
openid accounts
redirect_uri
https://www.gluu.org
certificate
-----BEGIN CERTIFICATE-----
MIIDZjCCAhqgAwIBAgIhAJZt5gX62poPeFj5+i2q9ozjpIKLoLQNw3zy8134lfRY MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAICBQChHDAaBgkqhkiG9w0BAQgw DQYJYIZIAWUDBAICBQCiAwIBMDAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNh dGVzMB4XDTIwMDgyNzEzMjg1OFoXDTIwMTIwNTEzMjkwNVowHjEcMBoGA1UEAwwT b3hkIENBIENlcnRpZmljYXRlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIo79ge2mJ055DBIQJ9Up6ODBC4ch72nQU6ZNLx/1JgpSokj2bXgDSxUN2rd SiFEWGv/u5CUKDpavYSMONIPGX+DH2rN10oZN/WFqP1ZSp/GzQbnf4SWn3rUtU8w p5bj+8XB+b1CtNbz2AMO11XnSoD2tWV5waS2fR4HBqct3Smo3Ek7Gno9oXEITGU2 94dEO3AXkoHLMZf+z6BTnQdPBWncHVYjz43YMxLr0hVidHQxTYzoU0RID6bRTug7 bfW8a6yrT2/hF1MCrCIe3Jd7HJrgV3sLIZFUX9p69v1Ghuu+lAVXiOYCkgQ5ab6T K6Oxq8okOOh74AaSUBzlW0ijoV0CAwEAAaMnMCUwIwYDVR0lBBwwGgYIKwYBBQUH AwEGCCsGAQUFBwMCBgRVHSUAMEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIC BQChHDAaBgkqhkiG9w0BAQgwDQYJYIZIAWUDBAICBQCiAwIBMAOCAQEANbRPGBNr Nn+SeQdTeQQ6Gmp5tFTjs/hwshJ4YZCE5j3f6W8o2cN91TFK8lHTIK7zRj1c/yJf Xf27BPTFZOTvYzlHBkRKUptc7aCJgC5awwdalPxU7NEs2T6R8OaNWeuUtT9T6Oze si3Rx0hHmieqsYgnW+uHgLokI8vFickzXdTDiib1hE44+hQAwkRQ2IO8anjSGTAt LUF59D0O5XdJ0PVgq7I0tpNdKM5LcztY1mrq2B4fRLnVJsoz54qCuBNQG1i/MNYD 8Cx5ZxlehAtexm3rVMKuVy3wOpYId8feVPsqk+oXVgkiuV47McvD8NAzY3PXqB19 rXRsjI7iPJRkQQ==
-----END CERTIFICATE-----
jwks
{
  "keys": [
    {
      "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "exp": 1607326752998,
      "x5c": [
        "MIIDZTCCAhmgAwIBAgIgEzTfHCIizrfsOo9Q6szuD1oAomyy45mEGT9D4+TE4nQwQQYJKoZIhvcNAQEKMDSgDzANBglghkgBZQMEAgEFAKEcMBoGCSqGSIb3DQEBCDANBglghkgBZQMEAgEFAKIDAgEgMB4xHDAaBgNVBAMME294ZCBDQSBDZXJ0aWZpY2F0ZXMwHhcNMjAwODI5MDczOTAzWhcNMjAxMjA3MDczOTEyWjAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNhdGVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCH0I9/HsIxZnA+vbUfteJ3YPzhSpKE1uh4mZ36U+RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K+NZ0OMZaS+7WWpkh5XHx3pphq8X7RLY3GEhPXdO/OKKq0IYi03npqG2y7v52DWaTbVGb/Z4nJ+D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk+HXKrgUUAMmN49r+2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh/bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVwIDAQABoycwJTAjBgNVHSUEHDAaBggrBgEFBQcDAQYIKwYBBQUHAwIGBFUdJQAwQQYJKoZIhvcNAQEKMDSgDzANBglghkgBZQMEAgEFAKEcMBoGCSqGSIb3DQEBCDANBglghkgBZQMEAgEFAKIDAgEgA4IBAQB+cMDR+ceVqlnvMTlzoX5LJBRfvVWs0Z5qTDlJj87HWOC8AUTBVz8YPUvt4kcocZY5RdswVTVmBvnTTj4VbJF0EMwSFauZEfPisNgodgPBFPk9+DkFdPhezvQpc9pR99aOv1D5QbtBqDxnOSwEKy9m+CtrFwVaFRI5HE8Waut8GAyKKMVPkm4TXipwFmmBnisdMEr0ThEg9Vr/mU3uQFMZukU3jJoNcxlq6FepzSjQS5iuPeNDnTwqoGJTVyFC0Xm6+Xg48uuR5qYk9HpbRaBLIAnDt76CxnIDEWcGwR8iUvER/fFOwKlXiX+UhXfglPehdh/LWk2OZ7lCJILON9zQ"
      ],
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw",
      "e": "AQAB"
    },
    {
      "kid": "1ae82071-038b-4e4b-8a2b-b2a8a196a350_enc_rsa1_5",
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA1_5",
      "exp": 1607326752998,
      "x5c": [
        "MIIC/jCCAeagAwIBAgIhAOW7o23N2ByVGsbVMP40zO8bWFZn3197iWzq8GlEg+liMA0GCSqGSIb3DQEBCwUAMB4xHDAaBgNVBAMME294ZCBDQSBDZXJ0aWZpY2F0ZXMwHhcNMjAwODI5MDczOTA0WhcNMjAxMjA3MDczOTEyWjAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNhdGVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V/mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F/2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e/Cmp3+ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4/uUcryeAvspz5tQpPJclgzXgK/Q3G072JU+LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV/AwIDAQABoycwJTAjBgNVHSUEHDAaBggrBgEFBQcDAQYIKwYBBQUHAwIGBFUdJQAwDQYJKoZIhvcNAQELBQADggEBAHnZKla/EfTowH5fk+gWRw9Xce+ncM85fAGJr1nTvV3Kq1k0wOs4di30JyKKFYLOMvRrhCHbMOaLSUnj+V2nFDIJQ3a84ZLKjOuUMLw28CnK4xlbNgqPXrrMNgxwls0QcUBuFPQUlIZ8KMLA4UN8qbu4qg2ntGmyTj7mPlHzGDtR9yviMDzk+LcR0Znl8cxe2lnIRv4ZG9sx+dA7SrwyTdxWDh7UZ+AL/RJK/rojh0R95rjxr1KdXqf0+Wk22ozhIzm8mSoJVQbVosNLxKaGmbUiXaboDkfc7zzavm0u3TP1SUhizJHu4gjKXAi+7zOFQ6h+wnjpjb9/NYHCLRUrifY\u003d"
      ],
      "n": "woTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V_mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F_2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e_Cmp3-ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4_uUcryeAvspz5tQpPJclgzXgK_Q3G072JU-LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV_Aw",
      "e": "AQAB"
    }
  ]
}
2020-09-17 12:37:54 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2020-09-17 12:37:54 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "exp": 1607326752998,
      "x5c": [
        "MIIDZTCCAhmgAwIBAgIgEzTfHCIizrfsOo9Q6szuD1oAomyy45mEGT9D4+TE4nQwQQYJKoZIhvcNAQEKMDSgDzANBglghkgBZQMEAgEFAKEcMBoGCSqGSIb3DQEBCDANBglghkgBZQMEAgEFAKIDAgEgMB4xHDAaBgNVBAMME294ZCBDQSBDZXJ0aWZpY2F0ZXMwHhcNMjAwODI5MDczOTAzWhcNMjAxMjA3MDczOTEyWjAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNhdGVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCH0I9/HsIxZnA+vbUfteJ3YPzhSpKE1uh4mZ36U+RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K+NZ0OMZaS+7WWpkh5XHx3pphq8X7RLY3GEhPXdO/OKKq0IYi03npqG2y7v52DWaTbVGb/Z4nJ+D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk+HXKrgUUAMmN49r+2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh/bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVwIDAQABoycwJTAjBgNVHSUEHDAaBggrBgEFBQcDAQYIKwYBBQUHAwIGBFUdJQAwQQYJKoZIhvcNAQEKMDSgDzANBglghkgBZQMEAgEFAKEcMBoGCSqGSIb3DQEBCDANBglghkgBZQMEAgEFAKIDAgEgA4IBAQB+cMDR+ceVqlnvMTlzoX5LJBRfvVWs0Z5qTDlJj87HWOC8AUTBVz8YPUvt4kcocZY5RdswVTVmBvnTTj4VbJF0EMwSFauZEfPisNgodgPBFPk9+DkFdPhezvQpc9pR99aOv1D5QbtBqDxnOSwEKy9m+CtrFwVaFRI5HE8Waut8GAyKKMVPkm4TXipwFmmBnisdMEr0ThEg9Vr/mU3uQFMZukU3jJoNcxlq6FepzSjQS5iuPeNDnTwqoGJTVyFC0Xm6+Xg48uuR5qYk9HpbRaBLIAnDt76CxnIDEWcGwR8iUvER/fFOwKlXiX+UhXfglPehdh/LWk2OZ7lCJILON9zQ"
      ],
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw",
      "e": "AQAB"
    },
    {
      "kid": "1ae82071-038b-4e4b-8a2b-b2a8a196a350_enc_rsa1_5",
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA1_5",
      "exp": 1607326752998,
      "x5c": [
        "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\u003d"
      ],
      "n": "woTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V_mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F_2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e_Cmp3-ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4_uUcryeAvspz5tQpPJclgzXgK_Q3G072JU-LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV_Aw",
      "e": "AQAB"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "1ae82071-038b-4e4b-8a2b-b2a8a196a350_enc_rsa1_5",
      "x5c": [
        "MIIC/jCCAeagAwIBAgIhAOW7o23N2ByVGsbVMP40zO8bWFZn3197iWzq8GlEg+liMA0GCSqGSIb3DQEBCwUAMB4xHDAaBgNVBAMME294ZCBDQSBDZXJ0aWZpY2F0ZXMwHhcNMjAwODI5MDczOTA0WhcNMjAxMjA3MDczOTEyWjAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNhdGVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V/mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F/2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e/Cmp3+ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4/uUcryeAvspz5tQpPJclgzXgK/Q3G072JU+LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV/AwIDAQABoycwJTAjBgNVHSUEHDAaBggrBgEFBQcDAQYIKwYBBQUHAwIGBFUdJQAwDQYJKoZIhvcNAQELBQADggEBAHnZKla/EfTowH5fk+gWRw9Xce+ncM85fAGJr1nTvV3Kq1k0wOs4di30JyKKFYLOMvRrhCHbMOaLSUnj+V2nFDIJQ3a84ZLKjOuUMLw28CnK4xlbNgqPXrrMNgxwls0QcUBuFPQUlIZ8KMLA4UN8qbu4qg2ntGmyTj7mPlHzGDtR9yviMDzk+LcR0Znl8cxe2lnIRv4ZG9sx+dA7SrwyTdxWDh7UZ+AL/RJK/rojh0R95rjxr1KdXqf0+Wk22ozhIzm8mSoJVQbVosNLxKaGmbUiXaboDkfc7zzavm0u3TP1SUhizJHu4gjKXAi+7zOFQ6h+wnjpjb9/NYHCLRUrifY\u003d"
      ],
      "alg": "RSA1_5",
      "n": "woTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V_mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F_2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e_Cmp3-ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4_uUcryeAvspz5tQpPJclgzXgK_Q3G072JU-LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV_Aw"
    }
  ]
}
2020-09-17 12:37:54 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2020-09-17 12:37:54 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2020-09-17 12:37:54 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "exp": 1607326752998,
      "x5c": [
        "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"
      ],
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw",
      "e": "AQAB"
    },
    {
      "kid": "1ae82071-038b-4e4b-8a2b-b2a8a196a350_enc_rsa1_5",
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA1_5",
      "exp": 1607326752998,
      "x5c": [
        "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\u003d"
      ],
      "n": "woTz8lj4vH7xVLBrINlqrA8bSk7qSnE6rdaOsdkxnu7R2rmxVA0IpR0UVTOe7V_mQ6RCanjebS29EYR4fXf1t0TO862NUdHu7F_2Qf1NKTb1ZnwihwNbiJnytpoOA5iI2jXvfNIDX55KEIM4IcV0e_Cmp3-ynb2IVzluzkB3RFKShtYiIXLoGeMCCxS4_uUcryeAvspz5tQpPJclgzXgK_Q3G072JU-LIlKHKYkSVzZCWiymTYpkTOOKAZYNKfYClaCOngFqS1BBkdslzOXWxSjwajWPGy1KZmzNi7DkyDK5zXdf8iaS5Z2PW1TREAmLgvmQDOzW9rCZkEQqTjV_Aw",
      "e": "AQAB"
    }
  ]
}
2020-09-17 12:37:54
fapi-rw-id2-client-test
Setup Done
2020-09-17 13:31:17 INCOMING
fapi-rw-id2-client-test
Incoming HTTP request to test instance FW646RmzAA6Z35A
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "text/plain,application/json",
  "user-agent": "Apache-HttpClient/4.5.3 (Java/1.8.0_231)",
  "accept-encoding": "gzip,deflate",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2020-09-17 13:31:17 SUCCESS
EnsureIncomingTls12
Found TLS 1.2 connection
2020-09-17 13:31:17 SUCCESS
EnsureIncomingTlsSecureCipher
TLS cipher is allowed
actual
ECDHE-RSA-AES256-GCM-SHA384
expected
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2020-09-17 13:31:17 OUTGOING
fapi-rw-id2-client-test
Response to HTTP request to test instance FW646RmzAA6Z35A
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/gluu-oxd-test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/gluu-oxd-test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/gluu-oxd-test/userinfo",
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2020-09-17 13:31:19 INCOMING
fapi-rw-id2-client-test
Incoming HTTP request to test instance FW646RmzAA6Z35A
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Apache-HttpClient/4.5.3 (Java/1.8.0_161)",
  "accept-encoding": "gzip,deflate",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
authorize
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{
  "response_type": "code id_token",
  "client_id": "test-client-id-346334adgdsfgdfg3425",
  "redirect_uri": "https://www.gluu.org",
  "scope": "openid accounts",
  "state": "ebpif554b163v7mrur7jrtc5b3",
  "nonce": "3dl43320b34pasqhcm1n9oskf6",
  "request": "eyJraWQiOiJlZmU3MTJkYy03ODIwLTRmMzYtOTBhZS1iNmU2Yjg0OTBjMGRfc2lnX3BzMjU2IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.uGhmnMAfBtMVhGDtmseGB6hQ-8Qja9wmCqKXWjjLOf8gtGTUV_WecuZCXH1_7WAvSwoa1xtMNUvd6qsSN1A8QhMYycwPwsFz1xj8SzodeLlOkto0tQ5Hvs71C4hpuWOOUgK1nXAiz-UUx9Y4WpVeONWyaulkLa2J6HNV1TaxxZCdc0V2UC5xIXucRgzhCdBaXLqPNM8ztqnhCwtTbx7QmruY14S_3_wooeXRsx5Oi0QDj5BKUsqYbkd-DATMsUCg4qdRj_uTjmEsYm_hxj_5E5p3gY2abfURtpS5kXhs73jAjxwXozJwunvEAasHPLJacrcdaykyko9qgozI5Llt4Q"
}
incoming_body
2020-09-17 13:31:19 SUCCESS
EnsureIncomingTls12
Found TLS 1.2 connection
2020-09-17 13:31:19 SUCCESS
EnsureIncomingTlsSecureCipher
TLS cipher is allowed
actual
ECDHE-RSA-AES256-GCM-SHA384
expected
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Authorization endpoint
2020-09-17 13:31:19 SUCCESS
ExtractRequestObject
Parsed request object
request_object
{
  "value": "eyJraWQiOiJlZmU3MTJkYy03ODIwLTRmMzYtOTBhZS1iNmU2Yjg0OTBjMGRfc2lnX3BzMjU2IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.uGhmnMAfBtMVhGDtmseGB6hQ-8Qja9wmCqKXWjjLOf8gtGTUV_WecuZCXH1_7WAvSwoa1xtMNUvd6qsSN1A8QhMYycwPwsFz1xj8SzodeLlOkto0tQ5Hvs71C4hpuWOOUgK1nXAiz-UUx9Y4WpVeONWyaulkLa2J6HNV1TaxxZCdc0V2UC5xIXucRgzhCdBaXLqPNM8ztqnhCwtTbx7QmruY14S_3_wooeXRsx5Oi0QDj5BKUsqYbkd-DATMsUCg4qdRj_uTjmEsYm_hxj_5E5p3gY2abfURtpS5kXhs73jAjxwXozJwunvEAasHPLJacrcdaykyko9qgozI5Llt4Q",
  "header": {
    "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "iss": "test-client-id-346334adgdsfgdfg3425",
    "response_type": "code id_token",
    "oxd_id": "4054c486-236d-4ac7-8e07-b4d6a4db114a",
    "nonce": "3dl43320b34pasqhcm1n9oskf6",
    "client_id": "test-client-id-346334adgdsfgdfg3425",
    "aud": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
    "scope": "openid accounts",
    "claims": {
      "id_token": {
        "acr": {
          "values": [
            "urn:openbanking:psd2:sca",
            "urn:openbanking:psd2:ca"
          ],
          "essential": true
        }
      }
    },
    "redirect_uri": "https://www.gluu.org",
    "state": "ebpif554b163v7mrur7jrtc5b3",
    "exp": 1600349771,
    "iat": 1600349471,
    "prompt": "none",
    "jti": "c85bfe93-e308-446f-9f2f-ed9b30c510ad"
  }
}
2020-09-17 13:31:19 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "response_type": "code id_token",
  "client_id": "test-client-id-346334adgdsfgdfg3425",
  "redirect_uri": "https://www.gluu.org",
  "scope": "openid accounts",
  "state": "ebpif554b163v7mrur7jrtc5b3",
  "nonce": "3dl43320b34pasqhcm1n9oskf6",
  "request": "eyJraWQiOiJlZmU3MTJkYy03ODIwLTRmMzYtOTBhZS1iNmU2Yjg0OTBjMGRfc2lnX3BzMjU2IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.uGhmnMAfBtMVhGDtmseGB6hQ-8Qja9wmCqKXWjjLOf8gtGTUV_WecuZCXH1_7WAvSwoa1xtMNUvd6qsSN1A8QhMYycwPwsFz1xj8SzodeLlOkto0tQ5Hvs71C4hpuWOOUgK1nXAiz-UUx9Y4WpVeONWyaulkLa2J6HNV1TaxxZCdc0V2UC5xIXucRgzhCdBaXLqPNM8ztqnhCwtTbx7QmruY14S_3_wooeXRsx5Oi0QDj5BKUsqYbkd-DATMsUCg4qdRj_uTjmEsYm_hxj_5E5p3gY2abfURtpS5kXhs73jAjxwXozJwunvEAasHPLJacrcdaykyko9qgozI5Llt4Q",
  "iss": "test-client-id-346334adgdsfgdfg3425",
  "oxd_id": "4054c486-236d-4ac7-8e07-b4d6a4db114a",
  "aud": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "claims": {
    "id_token": {
      "acr": {
        "values": [
          "urn:openbanking:psd2:sca",
          "urn:openbanking:psd2:ca"
        ],
        "essential": true
      }
    }
  },
  "exp": 1600349771,
  "iat": 1600349471,
  "prompt": "none",
  "jti": "c85bfe93-e308-446f-9f2f-ed9b30c510ad"
}
2020-09-17 13:31:19 SUCCESS
EnsureAuthorizationParametersMatchRequestObject
All claims in the query parameters exist in the request object
claims
[
  "response_type",
  "client_id",
  "redirect_uri",
  "scope",
  "state",
  "nonce",
  "request"
]
2020-09-17 13:31:19 SUCCESS
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
alg
PS256
2020-09-17 13:31:19 SUCCESS
FAPIValidateRequestObjectIdTokenACRClaims
Acr value in request object is as expected
received
[
  "urn:openbanking:psd2:sca",
  "urn:openbanking:psd2:ca"
]
2020-09-17 13:31:19 SUCCESS
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Sep 17, 2020, 1:36:11 PM"
2020-09-17 13:31:19
ValidateRequestObjectClaims
Request object does not contain a max_age claim
2020-09-17 13:31:19 SUCCESS
ValidateRequestObjectClaims
Request object claims passed all validation checks
2020-09-17 13:31:19 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2020-09-17 13:31:19 SUCCESS
EnsureMatchingRedirectUriInRequestObject
Redirect URI matched
actual
https://www.gluu.org
2020-09-17 13:31:19 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2020-09-17 13:31:19 SUCCESS
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
request_object
eyJraWQiOiJlZmU3MTJkYy03ODIwLTRmMzYtOTBhZS1iNmU2Yjg0OTBjMGRfc2lnX3BzMjU2IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.uGhmnMAfBtMVhGDtmseGB6hQ-8Qja9wmCqKXWjjLOf8gtGTUV_WecuZCXH1_7WAvSwoa1xtMNUvd6qsSN1A8QhMYycwPwsFz1xj8SzodeLlOkto0tQ5Hvs71C4hpuWOOUgK1nXAiz-UUx9Y4WpVeONWyaulkLa2J6HNV1TaxxZCdc0V2UC5xIXucRgzhCdBaXLqPNM8ztqnhCwtTbx7QmruY14S_3_wooeXRsx5Oi0QDj5BKUsqYbkd-DATMsUCg4qdRj_uTjmEsYm_hxj_5E5p3gY2abfURtpS5kXhs73jAjxwXozJwunvEAasHPLJacrcdaykyko9qgozI5Llt4Q
request_object_signing_alg
PS256
jwk
Sun RSA public key, 2048 bits
  params: null
  modulus: 23749544513504322484726380149595024192823796240263136516370361517564548990666205309795095009167419366599947928955190184045405779071955015745945771756234605739168630804144306988956786411335944808921728753501432468320528697690834571570359554543784876974125729864159582066448414619850969422459605885233025240850426082403588898070004431793210503140520993148883714988319305115367615640122716373852629981559998987788804701093260880494687381836374670807228033317476969296824306173630205108913450832493298553573937422720632829195881815344735704319716421079026153333329945415085253428160565922016050576554905600927052290187607
  public exponent: 65537
2020-09-17 13:31:19 SUCCESS
EnsureResponseTypeIsCodeIdToken
Response type is expected value
expected
code id_token
2020-09-17 13:31:19 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
test-client-id-346334adgdsfgdfg3425
2020-09-17 13:31:19 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid accounts
2020-09-17 13:31:19 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid",
  "accounts"
]
expected
openid
2020-09-17 13:31:19 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
3dl43320b34pasqhcm1n9oskf6
2020-09-17 13:31:19 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
jf6pHZmZKw
2020-09-17 13:31:19 SUCCESS
ExtractServerSigningAlg
Successfully extracted algorithm
signing_algorithm
PS256
2020-09-17 13:31:19 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash
WhNGYU4-Yp32H6lX0Ih26g
2020-09-17 13:31:19 SUCCESS
CalculateSHash
Successful s_hash encoding
s_hash
KWpujJ1MqJxDKr3hr-Ltcg
2020-09-17 13:31:19 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
hk8E2E5IEjKtLUIhVCvqiD26N1OORGQW0qbq8jEnInSRXkM0Aw
2020-09-17 13:31:19 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
4sbEpH7OYs3SFwPFb7qVRQ
2020-09-17 13:31:19 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/gluu-oxd-test/
sub
user-subject-1234531
aud
test-client-id-346334adgdsfgdfg3425
nonce
3dl43320b34pasqhcm1n9oskf6
iat
1600349479
exp
1600349779
2020-09-17 13:31:19 SUCCESS
AddCHashToIdTokenClaims
Added c_hash to ID token claims
c_hash
WhNGYU4-Yp32H6lX0Ih26g
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "sub": "user-subject-1234531",
  "aud": "test-client-id-346334adgdsfgdfg3425",
  "nonce": "3dl43320b34pasqhcm1n9oskf6",
  "iat": 1600349479,
  "exp": 1600349779,
  "c_hash": "WhNGYU4-Yp32H6lX0Ih26g"
}
2020-09-17 13:31:19 SUCCESS
AddSHashToIdTokenClaims
Added s_hash to ID token claims
s_hash
KWpujJ1MqJxDKr3hr-Ltcg
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "sub": "user-subject-1234531",
  "aud": "test-client-id-346334adgdsfgdfg3425",
  "nonce": "3dl43320b34pasqhcm1n9oskf6",
  "iat": 1600349479,
  "exp": 1600349779,
  "c_hash": "WhNGYU4-Yp32H6lX0Ih26g",
  "s_hash": "KWpujJ1MqJxDKr3hr-Ltcg"
}
2020-09-17 13:31:19 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
4sbEpH7OYs3SFwPFb7qVRQ
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "sub": "user-subject-1234531",
  "aud": "test-client-id-346334adgdsfgdfg3425",
  "nonce": "3dl43320b34pasqhcm1n9oskf6",
  "iat": 1600349479,
  "exp": 1600349779,
  "c_hash": "WhNGYU4-Yp32H6lX0Ih26g",
  "s_hash": "KWpujJ1MqJxDKr3hr-Ltcg",
  "at_hash": "4sbEpH7OYs3SFwPFb7qVRQ"
}
2020-09-17 13:31:19 SUCCESS
AddACRClaimToIdTokenClaims
Added acr value to id_token_claims
acr_value
urn:openbanking:psd2:sca
claims
{
  "iss": "https://www.certification.openid.net/test/a/gluu-oxd-test/",
  "sub": "user-subject-1234531",
  "aud": "test-client-id-346334adgdsfgdfg3425",
  "nonce": "3dl43320b34pasqhcm1n9oskf6",
  "iat": 1600349479,
  "exp": 1600349779,
  "c_hash": "WhNGYU4-Yp32H6lX0Ih26g",
  "s_hash": "KWpujJ1MqJxDKr3hr-Ltcg",
  "at_hash": "4sbEpH7OYs3SFwPFb7qVRQ",
  "acr": "urn:openbanking:psd2:sca"
}
2020-09-17 13:31:19 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJkMTVkMDJhYy1iNDMyLTQ1ZWYtOGMwOS1iZGUzODExZDBjOWIiLCJhbGciOiJQUzI1NiJ9.eyJhdF9oYXNoIjoiNHNiRXBIN09ZczNTRndQRmI3cVZSUSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidGVzdC1jbGllbnQtaWQtMzQ2MzM0YWRnZHNmZ2RmZzM0MjUiLCJjX2hhc2giOiJXaE5HWVU0LVlwMzJINmxYMEloMjZnIiwiYWNyIjoidXJuOm9wZW5iYW5raW5nOnBzZDI6c2NhIiwic19oYXNoIjoiS1dwdWpKMU1xSnhES3IzaHItTHRjZyIsImlzcyI6Imh0dHBzOlwvXC93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0XC90ZXN0XC9hXC9nbHV1LW94ZC10ZXN0XC8iLCJleHAiOjE2MDAzNDk3NzksIm5vbmNlIjoiM2RsNDMzMjBiMzRwYXNxaGNtMW45b3NrZjYiLCJpYXQiOjE2MDAzNDk0Nzl9.ZBNdQ7Ynnj1Gqxl9kpSKbufNsJEVuOj2CfVP-9HlMxdnH6kzRAEJqi2giBaMtDPHhKH4U4L7BlZbjkopAkZ63q0yKbhKeb9kJFrDSwTcxVCyr2Fup5kD5p2cVz4rJaAvXFJPy6gVh4xjn6F9MSwwdZNXLNxKIU8UEZfwOn78TTpqu3tbU3zwSdkardX7fzCeYYx33gEs23g236TiDF1vG1_RGbBNwuc3O80uiR_FDMrr1elSYmTkDqzjw4wxNWYuTC_5zCSPKYTCkMIDMkvjvZWvAcVxnEcLm9esct9kiOcFwbR1p5F9DPMSGcX71VA_lQ71XGd-hsjVlsrgF2Sa-A
2020-09-17 13:31:19 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://www.gluu.org",
  "state": "ebpif554b163v7mrur7jrtc5b3"
}
2020-09-17 13:31:19 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://www.gluu.org",
  "state": "ebpif554b163v7mrur7jrtc5b3",
  "code": "jf6pHZmZKw"
}
2020-09-17 13:31:19 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://www.gluu.org",
  "state": "ebpif554b163v7mrur7jrtc5b3",
  "code": "jf6pHZmZKw",
  "id_token": "eyJraWQiOiJkMTVkMDJhYy1iNDMyLTQ1ZWYtOGMwOS1iZGUzODExZDBjOWIiLCJhbGciOiJQUzI1NiJ9.eyJhdF9oYXNoIjoiNHNiRXBIN09ZczNTRndQRmI3cVZSUSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidGVzdC1jbGllbnQtaWQtMzQ2MzM0YWRnZHNmZ2RmZzM0MjUiLCJjX2hhc2giOiJXaE5HWVU0LVlwMzJINmxYMEloMjZnIiwiYWNyIjoidXJuOm9wZW5iYW5raW5nOnBzZDI6c2NhIiwic19oYXNoIjoiS1dwdWpKMU1xSnhES3IzaHItTHRjZyIsImlzcyI6Imh0dHBzOlwvXC93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0XC90ZXN0XC9hXC9nbHV1LW94ZC10ZXN0XC8iLCJleHAiOjE2MDAzNDk3NzksIm5vbmNlIjoiM2RsNDMzMjBiMzRwYXNxaGNtMW45b3NrZjYiLCJpYXQiOjE2MDAzNDk0Nzl9.ZBNdQ7Ynnj1Gqxl9kpSKbufNsJEVuOj2CfVP-9HlMxdnH6kzRAEJqi2giBaMtDPHhKH4U4L7BlZbjkopAkZ63q0yKbhKeb9kJFrDSwTcxVCyr2Fup5kD5p2cVz4rJaAvXFJPy6gVh4xjn6F9MSwwdZNXLNxKIU8UEZfwOn78TTpqu3tbU3zwSdkardX7fzCeYYx33gEs23g236TiDF1vG1_RGbBNwuc3O80uiR_FDMrr1elSYmTkDqzjw4wxNWYuTC_5zCSPKYTCkMIDMkvjvZWvAcVxnEcLm9esct9kiOcFwbR1p5F9DPMSGcX71VA_lQ71XGd-hsjVlsrgF2Sa-A"
}
2020-09-17 13:31:19
SendAuthorizationResponseWithResponseModeFragment
Redirecting back to client
uri
https://www.gluu.org#state=ebpif554b163v7mrur7jrtc5b3&code=jf6pHZmZKw&id_token=eyJraWQiOiJkMTVkMDJhYy1iNDMyLTQ1ZWYtOGMwOS1iZGUzODExZDBjOWIiLCJhbGciOiJQUzI1NiJ9.eyJhdF9oYXNoIjoiNHNiRXBIN09ZczNTRndQRmI3cVZSUSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidGVzdC1jbGllbnQtaWQtMzQ2MzM0YWRnZHNmZ2RmZzM0MjUiLCJjX2hhc2giOiJXaE5HWVU0LVlwMzJINmxYMEloMjZnIiwiYWNyIjoidXJuOm9wZW5iYW5raW5nOnBzZDI6c2NhIiwic19oYXNoIjoiS1dwdWpKMU1xSnhES3IzaHItTHRjZyIsImlzcyI6Imh0dHBzOlwvXC93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0XC90ZXN0XC9hXC9nbHV1LW94ZC10ZXN0XC8iLCJleHAiOjE2MDAzNDk3NzksIm5vbmNlIjoiM2RsNDMzMjBiMzRwYXNxaGNtMW45b3NrZjYiLCJpYXQiOjE2MDAzNDk0Nzl9.ZBNdQ7Ynnj1Gqxl9kpSKbufNsJEVuOj2CfVP-9HlMxdnH6kzRAEJqi2giBaMtDPHhKH4U4L7BlZbjkopAkZ63q0yKbhKeb9kJFrDSwTcxVCyr2Fup5kD5p2cVz4rJaAvXFJPy6gVh4xjn6F9MSwwdZNXLNxKIU8UEZfwOn78TTpqu3tbU3zwSdkardX7fzCeYYx33gEs23g236TiDF1vG1_RGbBNwuc3O80uiR_FDMrr1elSYmTkDqzjw4wxNWYuTC_5zCSPKYTCkMIDMkvjvZWvAcVxnEcLm9esct9kiOcFwbR1p5F9DPMSGcX71VA_lQ71XGd-hsjVlsrgF2Sa-A
2020-09-17 13:31:19 OUTGOING
fapi-rw-id2-client-test
Response to HTTP request to test instance FW646RmzAA6Z35A
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://www.gluu.org#state=ebpif554b163v7mrur7jrtc5b3&code=jf6pHZmZKw&id_token=eyJraWQiOiJkMTVkMDJhYy1iNDMyLTQ1ZWYtOGMwOS1iZGUzODExZDBjOWIiLCJhbGciOiJQUzI1NiJ9.eyJhdF9oYXNoIjoiNHNiRXBIN09ZczNTRndQRmI3cVZSUSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidGVzdC1jbGllbnQtaWQtMzQ2MzM0YWRnZHNmZ2RmZzM0MjUiLCJjX2hhc2giOiJXaE5HWVU0LVlwMzJINmxYMEloMjZnIiwiYWNyIjoidXJuOm9wZW5iYW5raW5nOnBzZDI6c2NhIiwic19oYXNoIjoiS1dwdWpKMU1xSnhES3IzaHItTHRjZyIsImlzcyI6Imh0dHBzOlwvXC93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0XC90ZXN0XC9hXC9nbHV1LW94ZC10ZXN0XC8iLCJleHAiOjE2MDAzNDk3NzksIm5vbmNlIjoiM2RsNDMzMjBiMzRwYXNxaGNtMW45b3NrZjYiLCJpYXQiOjE2MDAzNDk0Nzl9.ZBNdQ7Ynnj1Gqxl9kpSKbufNsJEVuOj2CfVP-9HlMxdnH6kzRAEJqi2giBaMtDPHhKH4U4L7BlZbjkopAkZ63q0yKbhKeb9kJFrDSwTcxVCyr2Fup5kD5p2cVz4rJaAvXFJPy6gVh4xjn6F9MSwwdZNXLNxKIU8UEZfwOn78TTpqu3tbU3zwSdkardX7fzCeYYx33gEs23g236TiDF1vG1_RGbBNwuc3O80uiR_FDMrr1elSYmTkDqzjw4wxNWYuTC_5zCSPKYTCkMIDMkvjvZWvAcVxnEcLm9esct9kiOcFwbR1p5F9DPMSGcX71VA_lQ71XGd-hsjVlsrgF2Sa-A]
outgoing_path
authorize
2020-09-17 13:31:23 INCOMING
fapi-rw-id2-client-test
Incoming HTTP request to test instance FW646RmzAA6Z35A
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/x-www-form-urlencoded",
  "user-agent": "Apache-HttpClient/4.5.3 (Java/1.8.0_231)",
  "accept-encoding": "gzip,deflate",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "x-ssl-cert": "-----BEGIN CERTIFICATE----- MIIDZjCCAhqgAwIBAgIhAJZt5gX62poPeFj5+i2q9ozjpIKLoLQNw3zy8134lfRY MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAICBQChHDAaBgkqhkiG9w0BAQgw DQYJYIZIAWUDBAICBQCiAwIBMDAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNh dGVzMB4XDTIwMDgyNzEzMjg1OFoXDTIwMTIwNTEzMjkwNVowHjEcMBoGA1UEAwwT b3hkIENBIENlcnRpZmljYXRlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIo79ge2mJ055DBIQJ9Up6ODBC4ch72nQU6ZNLx/1JgpSokj2bXgDSxUN2rd SiFEWGv/u5CUKDpavYSMONIPGX+DH2rN10oZN/WFqP1ZSp/GzQbnf4SWn3rUtU8w p5bj+8XB+b1CtNbz2AMO11XnSoD2tWV5waS2fR4HBqct3Smo3Ek7Gno9oXEITGU2 94dEO3AXkoHLMZf+z6BTnQdPBWncHVYjz43YMxLr0hVidHQxTYzoU0RID6bRTug7 bfW8a6yrT2/hF1MCrCIe3Jd7HJrgV3sLIZFUX9p69v1Ghuu+lAVXiOYCkgQ5ab6T K6Oxq8okOOh74AaSUBzlW0ijoV0CAwEAAaMnMCUwIwYDVR0lBBwwGgYIKwYBBQUH AwEGCCsGAQUFBwMCBgRVHSUAMEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIC BQChHDAaBgkqhkiG9w0BAQgwDQYJYIZIAWUDBAICBQCiAwIBMAOCAQEANbRPGBNr Nn+SeQdTeQQ6Gmp5tFTjs/hwshJ4YZCE5j3f6W8o2cN91TFK8lHTIK7zRj1c/yJf Xf27BPTFZOTvYzlHBkRKUptc7aCJgC5awwdalPxU7NEs2T6R8OaNWeuUtT9T6Oze si3Rx0hHmieqsYgnW+uHgLokI8vFickzXdTDiib1hE44+hQAwkRQ2IO8anjSGTAt LUF59D0O5XdJ0PVgq7I0tpNdKM5LcztY1mrq2B4fRLnVJsoz54qCuBNQG1i/MNYD 8Cx5ZxlehAtexm3rVMKuVy3wOpYId8feVPsqk+oXVgkiuV47McvD8NAzY3PXqB19 rXRsjI7iPJRkQQ\u003d\u003d -----END CERTIFICATE-----",
  "x-ssl-verify": "FAILED:self signed certificate",
  "content-length": "1017",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
token
incoming_body_form_params
{
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
  "code": "jf6pHZmZKw",
  "grant_type": "authorization_code",
  "redirect_uri": "https://www.gluu.org",
  "client_assertion": "eyJraWQiOiJlZmU3MTJkYy03ODIwLTRmMzYtOTBhZS1iNmU2Yjg0OTBjMGRfc2lnX3BzMjU2IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ0ZXN0LWNsaWVudC1pZC0zNDYzMzRhZGdkc2ZnZGZnMzQyNSIsImF1ZCI6Imh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0LW10bHMvYS9nbHV1LW94ZC10ZXN0L3Rva2VuIiwiaXNzIjoidGVzdC1jbGllbnQtaWQtMzQ2MzM0YWRnZHNmZ2RmZzM0MjUiLCJleHAiOjE2MDAzNDk3NzUsImlhdCI6MTYwMDM0OTQ3NSwianRpIjoiODljMjU2MjAtZmU1NC00MzA5LTlkZWEtZjNiMDc0ODk3NTcyIn0.dTCJS0AG0TlRWUkLVY4JQ15Av8zXwl3NW9UNtxEjYWGrXgAYflB73f6K448ByceYrrrblwnubb1MMPEKt3-guJjXMKBIOIDZoh_XVYMeLv0fzTYJB5ryr85E4uR6KQ1_TsgYIQWoVb1xCRKJFNzA50tw3l3d3p_bAUgIZuwtuk49oaDnpZIsPfEEaBZtOQWpawEq2LJxDoG0pXUzNPz6ushf1ya3qr_HfD9TJArgCNRT9uglVsBZWE4rdzyZSi-r5gwTd7j9O6BkEVhWEaL2rZT9CAECT2BmZk2bGz_ZgDjQU6sPCPImxUp4JU6fyobTmnkPgMUVAy9x6QZL2uL2hg",
  "client_id": "test-client-id-346334adgdsfgdfg3425"
}
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&code=jf6pHZmZKw&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fwww.gluu.org&client_assertion=eyJraWQiOiJlZmU3MTJkYy03ODIwLTRmMzYtOTBhZS1iNmU2Yjg0OTBjMGRfc2lnX3BzMjU2IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ0ZXN0LWNsaWVudC1pZC0zNDYzMzRhZGdkc2ZnZGZnMzQyNSIsImF1ZCI6Imh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0LW10bHMvYS9nbHV1LW94ZC10ZXN0L3Rva2VuIiwiaXNzIjoidGVzdC1jbGllbnQtaWQtMzQ2MzM0YWRnZHNmZ2RmZzM0MjUiLCJleHAiOjE2MDAzNDk3NzUsImlhdCI6MTYwMDM0OTQ3NSwianRpIjoiODljMjU2MjAtZmU1NC00MzA5LTlkZWEtZjNiMDc0ODk3NTcyIn0.dTCJS0AG0TlRWUkLVY4JQ15Av8zXwl3NW9UNtxEjYWGrXgAYflB73f6K448ByceYrrrblwnubb1MMPEKt3-guJjXMKBIOIDZoh_XVYMeLv0fzTYJB5ryr85E4uR6KQ1_TsgYIQWoVb1xCRKJFNzA50tw3l3d3p_bAUgIZuwtuk49oaDnpZIsPfEEaBZtOQWpawEq2LJxDoG0pXUzNPz6ushf1ya3qr_HfD9TJArgCNRT9uglVsBZWE4rdzyZSi-r5gwTd7j9O6BkEVhWEaL2rZT9CAECT2BmZk2bGz_ZgDjQU6sPCPImxUp4JU6fyobTmnkPgMUVAy9x6QZL2uL2hg&client_id=test-client-id-346334adgdsfgdfg3425
2020-09-17 13:31:23 SUCCESS
EnsureIncomingTls12
Found TLS 1.2 connection
2020-09-17 13:31:23 SUCCESS
EnsureIncomingTlsSecureCipher
TLS cipher is allowed
actual
ECDHE-RSA-AES256-GCM-SHA384
expected
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2020-09-17 13:31:23 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIDZjCCAhqgAwIBAgIhAJZt5gX62poPeFj5+i2q9ozjpIKLoLQNw3zy8134lfRY MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAICBQChHDAaBgkqhkiG9w0BAQgw DQYJYIZIAWUDBAICBQCiAwIBMDAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNh dGVzMB4XDTIwMDgyNzEzMjg1OFoXDTIwMTIwNTEzMjkwNVowHjEcMBoGA1UEAwwT b3hkIENBIENlcnRpZmljYXRlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIo79ge2mJ055DBIQJ9Up6ODBC4ch72nQU6ZNLx/1JgpSokj2bXgDSxUN2rd SiFEWGv/u5CUKDpavYSMONIPGX+DH2rN10oZN/WFqP1ZSp/GzQbnf4SWn3rUtU8w p5bj+8XB+b1CtNbz2AMO11XnSoD2tWV5waS2fR4HBqct3Smo3Ek7Gno9oXEITGU2 94dEO3AXkoHLMZf+z6BTnQdPBWncHVYjz43YMxLr0hVidHQxTYzoU0RID6bRTug7 bfW8a6yrT2/hF1MCrCIe3Jd7HJrgV3sLIZFUX9p69v1Ghuu+lAVXiOYCkgQ5ab6T K6Oxq8okOOh74AaSUBzlW0ijoV0CAwEAAaMnMCUwIwYDVR0lBBwwGgYIKwYBBQUH AwEGCCsGAQUFBwMCBgRVHSUAMEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIC BQChHDAaBgkqhkiG9w0BAQgwDQYJYIZIAWUDBAICBQCiAwIBMAOCAQEANbRPGBNr Nn+SeQdTeQQ6Gmp5tFTjs/hwshJ4YZCE5j3f6W8o2cN91TFK8lHTIK7zRj1c/yJf Xf27BPTFZOTvYzlHBkRKUptc7aCJgC5awwdalPxU7NEs2T6R8OaNWeuUtT9T6Oze si3Rx0hHmieqsYgnW+uHgLokI8vFickzXdTDiib1hE44+hQAwkRQ2IO8anjSGTAt LUF59D0O5XdJ0PVgq7I0tpNdKM5LcztY1mrq2B4fRLnVJsoz54qCuBNQG1i/MNYD 8Cx5ZxlehAtexm3rVMKuVy3wOpYId8feVPsqk+oXVgkiuV47McvD8NAzY3PXqB19 rXRsjI7iPJRkQQ\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nrXRsjI7iPJRkQQ\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "CN\u003doxd CA Certificates"
  },
  "sanDnsNames": [],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2020-09-17 13:31:23 SUCCESS
CheckForClientCertificate
Found client certificate
2020-09-17 13:31:23 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2020-09-17 13:31:23 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJraWQiOiJlZmU3MTJkYy03ODIwLTRmMzYtOTBhZS1iNmU2Yjg0OTBjMGRfc2lnX3BzMjU2IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ0ZXN0LWNsaWVudC1pZC0zNDYzMzRhZGdkc2ZnZGZnMzQyNSIsImF1ZCI6Imh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0LW10bHMvYS9nbHV1LW94ZC10ZXN0L3Rva2VuIiwiaXNzIjoidGVzdC1jbGllbnQtaWQtMzQ2MzM0YWRnZHNmZ2RmZzM0MjUiLCJleHAiOjE2MDAzNDk3NzUsImlhdCI6MTYwMDM0OTQ3NSwianRpIjoiODljMjU2MjAtZmU1NC00MzA5LTlkZWEtZjNiMDc0ODk3NTcyIn0.dTCJS0AG0TlRWUkLVY4JQ15Av8zXwl3NW9UNtxEjYWGrXgAYflB73f6K448ByceYrrrblwnubb1MMPEKt3-guJjXMKBIOIDZoh_XVYMeLv0fzTYJB5ryr85E4uR6KQ1_TsgYIQWoVb1xCRKJFNzA50tw3l3d3p_bAUgIZuwtuk49oaDnpZIsPfEEaBZtOQWpawEq2LJxDoG0pXUzNPz6ushf1ya3qr_HfD9TJArgCNRT9uglVsBZWE4rdzyZSi-r5gwTd7j9O6BkEVhWEaL2rZT9CAECT2BmZk2bGz_ZgDjQU6sPCPImxUp4JU6fyobTmnkPgMUVAy9x6QZL2uL2hg",
  "header": {
    "kid": "efe712dc-7820-4f36-90ae-b6e6b8490c0d_sig_ps256",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "test-client-id-346334adgdsfgdfg3425",
    "aud": "https://www.certification.openid.net/test-mtls/a/gluu-oxd-test/token",
    "iss": "test-client-id-346334adgdsfgdfg3425",
    "exp": 1600349775,
    "iat": 1600349475,
    "jti": "89c25620-fe54-4309-9dea-f3b074897572"
  }
}
2020-09-17 13:31:23
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2020-09-17 13:31:23 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJraWQiOiJlZmU3MTJkYy03ODIwLTRmMzYtOTBhZS1iNmU2Yjg0OTBjMGRfc2lnX3BzMjU2IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ0ZXN0LWNsaWVudC1pZC0zNDYzMzRhZGdkc2ZnZGZnMzQyNSIsImF1ZCI6Imh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0LW10bHMvYS9nbHV1LW94ZC10ZXN0L3Rva2VuIiwiaXNzIjoidGVzdC1jbGllbnQtaWQtMzQ2MzM0YWRnZHNmZ2RmZzM0MjUiLCJleHAiOjE2MDAzNDk3NzUsImlhdCI6MTYwMDM0OTQ3NSwianRpIjoiODljMjU2MjAtZmU1NC00MzA5LTlkZWEtZjNiMDc0ODk3NTcyIn0.dTCJS0AG0TlRWUkLVY4JQ15Av8zXwl3NW9UNtxEjYWGrXgAYflB73f6K448ByceYrrrblwnubb1MMPEKt3-guJjXMKBIOIDZoh_XVYMeLv0fzTYJB5ryr85E4uR6KQ1_TsgYIQWoVb1xCRKJFNzA50tw3l3d3p_bAUgIZuwtuk49oaDnpZIsPfEEaBZtOQWpawEq2LJxDoG0pXUzNPz6ushf1ya3qr_HfD9TJArgCNRT9uglVsBZWE4rdzyZSi-r5gwTd7j9O6BkEVhWEaL2rZT9CAECT2BmZk2bGz_ZgDjQU6sPCPImxUp4JU6fyobTmnkPgMUVAy9x6QZL2uL2hg
2020-09-17 13:31:23 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2020-09-17 13:31:23 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2020-09-17 13:31:23 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
jf6pHZmZKw
2020-09-17 13:31:23 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
https://www.gluu.org
2020-09-17 13:31:23 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
p8a7qMsTFbn2pezmAXUISDfnhOhxq3XtyzpFey6bhoNFKG88v1
2020-09-17 13:31:23 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/gluu-oxd-test/
sub
user-subject-1234531
aud
test-client-id-346334adgdsfgdfg3425
nonce
3dl43320b34pasqhcm1n9oskf6
iat
1600349483
exp
1600349783
2020-09-17 13:31:23 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJkMTVkMDJhYy1iNDMyLTQ1ZWYtOGMwOS1iZGUzODExZDBjOWIiLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6InRlc3QtY2xpZW50LWlkLTM0NjMzNGFkZ2RzZmdkZmczNDI1IiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2dsdXUtb3hkLXRlc3RcLyIsImV4cCI6MTYwMDM0OTc4Mywibm9uY2UiOiIzZGw0MzMyMGIzNHBhc3FoY20xbjlvc2tmNiIsImlhdCI6MTYwMDM0OTQ4M30.V-1TRhdQKALHPNNLkmLw_2Cljvux2SKI7AWtHOpowuH0E3nxJ3pTLOX65rCq6npvkB1sg_9fZ_U91wq10oHfvdUQw0gKSzAgtjb7zmj51SNFC0-nLi6P7TmfXhCjd0L6bTzXBed4ATjUvA-H2yo4EGZEhh1d9IsAzuKcuRU4oFG4XorbJlfOKVJZCxq5BHMBjoOrxC_UyMOYHkqt_pE258X7gXL_E1-uX4wykdMBCAhMe1QPNFOxNnl6PMetX2DbSH6jVWrmzpSbHJ49W-s0ANpPta59HbkgGqL2kwGz-oF-sZ-ZMWo0zAou46WzoHtzxTtRG2eDbHWKCmQ_CNskbQ
2020-09-17 13:31:23 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
p8a7qMsTFbn2pezmAXUISDfnhOhxq3XtyzpFey6bhoNFKG88v1
token_type
Bearer
id_token
eyJraWQiOiJkMTVkMDJhYy1iNDMyLTQ1ZWYtOGMwOS1iZGUzODExZDBjOWIiLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6InRlc3QtY2xpZW50LWlkLTM0NjMzNGFkZ2RzZmdkZmczNDI1IiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2dsdXUtb3hkLXRlc3RcLyIsImV4cCI6MTYwMDM0OTc4Mywibm9uY2UiOiIzZGw0MzMyMGIzNHBhc3FoY20xbjlvc2tmNiIsImlhdCI6MTYwMDM0OTQ4M30.V-1TRhdQKALHPNNLkmLw_2Cljvux2SKI7AWtHOpowuH0E3nxJ3pTLOX65rCq6npvkB1sg_9fZ_U91wq10oHfvdUQw0gKSzAgtjb7zmj51SNFC0-nLi6P7TmfXhCjd0L6bTzXBed4ATjUvA-H2yo4EGZEhh1d9IsAzuKcuRU4oFG4XorbJlfOKVJZCxq5BHMBjoOrxC_UyMOYHkqt_pE258X7gXL_E1-uX4wykdMBCAhMe1QPNFOxNnl6PMetX2DbSH6jVWrmzpSbHJ49W-s0ANpPta59HbkgGqL2kwGz-oF-sZ-ZMWo0zAou46WzoHtzxTtRG2eDbHWKCmQ_CNskbQ
scope
openid accounts
2020-09-17 13:31:23 OUTGOING
fapi-rw-id2-client-test
Response to HTTP request to test instance FW646RmzAA6Z35A
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "p8a7qMsTFbn2pezmAXUISDfnhOhxq3XtyzpFey6bhoNFKG88v1",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiJkMTVkMDJhYy1iNDMyLTQ1ZWYtOGMwOS1iZGUzODExZDBjOWIiLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6InRlc3QtY2xpZW50LWlkLTM0NjMzNGFkZ2RzZmdkZmczNDI1IiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2dsdXUtb3hkLXRlc3RcLyIsImV4cCI6MTYwMDM0OTc4Mywibm9uY2UiOiIzZGw0MzMyMGIzNHBhc3FoY20xbjlvc2tmNiIsImlhdCI6MTYwMDM0OTQ4M30.V-1TRhdQKALHPNNLkmLw_2Cljvux2SKI7AWtHOpowuH0E3nxJ3pTLOX65rCq6npvkB1sg_9fZ_U91wq10oHfvdUQw0gKSzAgtjb7zmj51SNFC0-nLi6P7TmfXhCjd0L6bTzXBed4ATjUvA-H2yo4EGZEhh1d9IsAzuKcuRU4oFG4XorbJlfOKVJZCxq5BHMBjoOrxC_UyMOYHkqt_pE258X7gXL_E1-uX4wykdMBCAhMe1QPNFOxNnl6PMetX2DbSH6jVWrmzpSbHJ49W-s0ANpPta59HbkgGqL2kwGz-oF-sZ-ZMWo0zAou46WzoHtzxTtRG2eDbHWKCmQ_CNskbQ",
  "scope": "openid accounts"
}
outgoing_path
token
2020-09-17 13:31:24 INCOMING
fapi-rw-id2-client-test
Incoming HTTP request to test instance FW646RmzAA6Z35A
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json",
  "user-agent": "Apache-HttpClient/4.5.3 (Java/1.8.0_231)",
  "accept-encoding": "gzip,deflate",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
jwks
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2020-09-17 13:31:24 SUCCESS
EnsureIncomingTls12
Found TLS 1.2 connection
2020-09-17 13:31:24 SUCCESS
EnsureIncomingTlsSecureCipher
TLS cipher is allowed
actual
ECDHE-RSA-AES256-GCM-SHA384
expected
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2020-09-17 13:31:24 OUTGOING
fapi-rw-id2-client-test
Response to HTTP request to test instance FW646RmzAA6Z35A
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "d15d02ac-b432-45ef-8c09-bde3811d0c9b",
      "alg": "PS256",
      "n": "vCH0I9_HsIxZnA-vbUfteJ3YPzhSpKE1uh4mZ36U-RzmDTWIvJsTFU83EVHXQp1Tvx0FtFcH4a8pynFoGXtD3AUajJlH0yN7EXU15K-NZ0OMZaS-7WWpkh5XHx3pphq8X7RLY3GEhPXdO_OKKq0IYi03npqG2y7v52DWaTbVGb_Z4nJ-D2b0buUWG9JGknFEEHiDJn0kvrDHor2Fv5Fx8USVUfdZDlQrW6ZTMYVMQhTam3LqDrzvk-HXKrgUUAMmN49r-2AUHEMJBBT2urtTpC57vdEGCBK4HiyXh_bgcFCmxi5DZ5G2jbScTFLoJI95wwgjuo4Mj9ZokCzOdnHhVw"
    }
  ]
}
outgoing_path
jwks
2020-09-17 13:31:26 INCOMING
fapi-rw-id2-client-test
Incoming HTTP request to test instance FW646RmzAA6Z35A
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer p8a7qMsTFbn2pezmAXUISDfnhOhxq3XtyzpFey6bhoNFKG88v1",
  "accept": "application/json; charset\u003dutf-8",
  "content-type": "application/json; charset\u003dutf-8",
  "user-agent": "Apache-HttpClient/4.5.3 (Java/1.8.0_161)",
  "accept-encoding": "gzip,deflate",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "x-ssl-cert": "-----BEGIN CERTIFICATE----- MIIDZjCCAhqgAwIBAgIhAJZt5gX62poPeFj5+i2q9ozjpIKLoLQNw3zy8134lfRY MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAICBQChHDAaBgkqhkiG9w0BAQgw DQYJYIZIAWUDBAICBQCiAwIBMDAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNh dGVzMB4XDTIwMDgyNzEzMjg1OFoXDTIwMTIwNTEzMjkwNVowHjEcMBoGA1UEAwwT b3hkIENBIENlcnRpZmljYXRlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIo79ge2mJ055DBIQJ9Up6ODBC4ch72nQU6ZNLx/1JgpSokj2bXgDSxUN2rd SiFEWGv/u5CUKDpavYSMONIPGX+DH2rN10oZN/WFqP1ZSp/GzQbnf4SWn3rUtU8w p5bj+8XB+b1CtNbz2AMO11XnSoD2tWV5waS2fR4HBqct3Smo3Ek7Gno9oXEITGU2 94dEO3AXkoHLMZf+z6BTnQdPBWncHVYjz43YMxLr0hVidHQxTYzoU0RID6bRTug7 bfW8a6yrT2/hF1MCrCIe3Jd7HJrgV3sLIZFUX9p69v1Ghuu+lAVXiOYCkgQ5ab6T K6Oxq8okOOh74AaSUBzlW0ijoV0CAwEAAaMnMCUwIwYDVR0lBBwwGgYIKwYBBQUH AwEGCCsGAQUFBwMCBgRVHSUAMEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIC BQChHDAaBgkqhkiG9w0BAQgwDQYJYIZIAWUDBAICBQCiAwIBMAOCAQEANbRPGBNr Nn+SeQdTeQQ6Gmp5tFTjs/hwshJ4YZCE5j3f6W8o2cN91TFK8lHTIK7zRj1c/yJf Xf27BPTFZOTvYzlHBkRKUptc7aCJgC5awwdalPxU7NEs2T6R8OaNWeuUtT9T6Oze si3Rx0hHmieqsYgnW+uHgLokI8vFickzXdTDiib1hE44+hQAwkRQ2IO8anjSGTAt LUF59D0O5XdJ0PVgq7I0tpNdKM5LcztY1mrq2B4fRLnVJsoz54qCuBNQG1i/MNYD 8Cx5ZxlehAtexm3rVMKuVy3wOpYId8feVPsqk+oXVgkiuV47McvD8NAzY3PXqB19 rXRsjI7iPJRkQQ\u003d\u003d -----END CERTIFICATE-----",
  "x-ssl-verify": "FAILED:self signed certificate",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
open-banking/v1.1/accounts
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2020-09-17 13:31:26 SUCCESS
EnsureIncomingTls12
Found TLS 1.2 connection
2020-09-17 13:31:26 SUCCESS
EnsureIncomingTlsSecureCipher
TLS cipher is allowed
actual
ECDHE-RSA-AES256-GCM-SHA384
expected
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Accounts endpoint
2020-09-17 13:31:26 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIDZjCCAhqgAwIBAgIhAJZt5gX62poPeFj5+i2q9ozjpIKLoLQNw3zy8134lfRY MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAICBQChHDAaBgkqhkiG9w0BAQgw DQYJYIZIAWUDBAICBQCiAwIBMDAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNh dGVzMB4XDTIwMDgyNzEzMjg1OFoXDTIwMTIwNTEzMjkwNVowHjEcMBoGA1UEAwwT b3hkIENBIENlcnRpZmljYXRlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIo79ge2mJ055DBIQJ9Up6ODBC4ch72nQU6ZNLx/1JgpSokj2bXgDSxUN2rd SiFEWGv/u5CUKDpavYSMONIPGX+DH2rN10oZN/WFqP1ZSp/GzQbnf4SWn3rUtU8w p5bj+8XB+b1CtNbz2AMO11XnSoD2tWV5waS2fR4HBqct3Smo3Ek7Gno9oXEITGU2 94dEO3AXkoHLMZf+z6BTnQdPBWncHVYjz43YMxLr0hVidHQxTYzoU0RID6bRTug7 bfW8a6yrT2/hF1MCrCIe3Jd7HJrgV3sLIZFUX9p69v1Ghuu+lAVXiOYCkgQ5ab6T K6Oxq8okOOh74AaSUBzlW0ijoV0CAwEAAaMnMCUwIwYDVR0lBBwwGgYIKwYBBQUH AwEGCCsGAQUFBwMCBgRVHSUAMEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIC BQChHDAaBgkqhkiG9w0BAQgwDQYJYIZIAWUDBAICBQCiAwIBMAOCAQEANbRPGBNr Nn+SeQdTeQQ6Gmp5tFTjs/hwshJ4YZCE5j3f6W8o2cN91TFK8lHTIK7zRj1c/yJf Xf27BPTFZOTvYzlHBkRKUptc7aCJgC5awwdalPxU7NEs2T6R8OaNWeuUtT9T6Oze si3Rx0hHmieqsYgnW+uHgLokI8vFickzXdTDiib1hE44+hQAwkRQ2IO8anjSGTAt LUF59D0O5XdJ0PVgq7I0tpNdKM5LcztY1mrq2B4fRLnVJsoz54qCuBNQG1i/MNYD 8Cx5ZxlehAtexm3rVMKuVy3wOpYId8feVPsqk+oXVgkiuV47McvD8NAzY3PXqB19 rXRsjI7iPJRkQQ\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----\nMIIDZjCCAhqgAwIBAgIhAJZt5gX62poPeFj5+i2q9ozjpIKLoLQNw3zy8134lfRY\nMEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAICBQChHDAaBgkqhkiG9w0BAQgw\nDQYJYIZIAWUDBAICBQCiAwIBMDAeMRwwGgYDVQQDDBNveGQgQ0EgQ2VydGlmaWNh\ndGVzMB4XDTIwMDgyNzEzMjg1OFoXDTIwMTIwNTEzMjkwNVowHjEcMBoGA1UEAwwT\nb3hkIENBIENlcnRpZmljYXRlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC\nggEBAIo79ge2mJ055DBIQJ9Up6ODBC4ch72nQU6ZNLx/1JgpSokj2bXgDSxUN2rd\nSiFEWGv/u5CUKDpavYSMONIPGX+DH2rN10oZN/WFqP1ZSp/GzQbnf4SWn3rUtU8w\np5bj+8XB+b1CtNbz2AMO11XnSoD2tWV5waS2fR4HBqct3Smo3Ek7Gno9oXEITGU2\n94dEO3AXkoHLMZf+z6BTnQdPBWncHVYjz43YMxLr0hVidHQxTYzoU0RID6bRTug7\nbfW8a6yrT2/hF1MCrCIe3Jd7HJrgV3sLIZFUX9p69v1Ghuu+lAVXiOYCkgQ5ab6T\nK6Oxq8okOOh74AaSUBzlW0ijoV0CAwEAAaMnMCUwIwYDVR0lBBwwGgYIKwYBBQUH\nAwEGCCsGAQUFBwMCBgRVHSUAMEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIC\nBQChHDAaBgkqhkiG9w0BAQgwDQYJYIZIAWUDBAICBQCiAwIBMAOCAQEANbRPGBNr\nNn+SeQdTeQQ6Gmp5tFTjs/hwshJ4YZCE5j3f6W8o2cN91TFK8lHTIK7zRj1c/yJf\nXf27BPTFZOTvYzlHBkRKUptc7aCJgC5awwdalPxU7NEs2T6R8OaNWeuUtT9T6Oze\nsi3Rx0hHmieqsYgnW+uHgLokI8vFickzXdTDiib1hE44+hQAwkRQ2IO8anjSGTAt\nLUF59D0O5XdJ0PVgq7I0tpNdKM5LcztY1mrq2B4fRLnVJsoz54qCuBNQG1i/MNYD\n8Cx5ZxlehAtexm3rVMKuVy3wOpYId8feVPsqk+oXVgkiuV47McvD8NAzY3PXqB19\nrXRsjI7iPJRkQQ\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "CN\u003doxd CA Certificates"
  },
  "sanDnsNames": [],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2020-09-17 13:31:26 SUCCESS
CheckForClientCertificate
Found client certificate
2020-09-17 13:31:26 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2020-09-17 13:31:26 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2020-09-17 13:31:26 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
p8a7qMsTFbn2pezmAXUISDfnhOhxq3XtyzpFey6bhoNFKG88v1
2020-09-17 13:31:26 SUCCESS
RequireBearerAccessToken
Found access token in request
actual
p8a7qMsTFbn2pezmAXUISDfnhOhxq3XtyzpFey6bhoNFKG88v1
2020-09-17 13:31:26 INFO
ExtractFapiDateHeader
Couldn't find FAPI auth date header
2020-09-17 13:31:26 INFO
ExtractFapiIpAddressHeader
Couldn't find FAPI ip address header
2020-09-17 13:31:26 INFO
ExtractFapiInteractionIdHeader
Couldn't find FAPI interaction ID header
2020-09-17 13:31:26 SUCCESS
CreateFapiInteractionIdIfNeeded
Created new FAPI interaction ID
fapi_interaction_id
e39d86b3-f4d8-4dfe-b05c-a9e66fc6a32c
2020-09-17 13:31:26 SUCCESS
CreateFAPIAccountEndpointResponse
Created account response object
accounts_endpoint_response
{
  "conformance-test-finished": "true"
}
accounts_endpoint_response_headers
{
  "x-fapi-interaction-id": "e39d86b3-f4d8-4dfe-b05c-a9e66fc6a32c",
  "content-type": "application/json; charset\u003dUTF-8"
}
2020-09-17 13:31:26
ClearAccessTokenFromRequest
Condition ran but did not log anything
2020-09-17 13:31:26 OUTGOING
fapi-rw-id2-client-test
Response to HTTP request to test instance FW646RmzAA6Z35A
outgoing_status_code
200
outgoing_headers
{
  "x-fapi-interaction-id": [
    "e39d86b3-f4d8-4dfe-b05c-a9e66fc6a32c"
  ],
  "content-type": [
    "application/json; charset\u003dUTF-8"
  ]
}
outgoing_body
{
  "conformance-test-finished": "true"
}
outgoing_path
open-banking/v1.1/accounts
2020-09-17 13:31:26 FINISHED
fapi-rw-id2-client-test
Test has run to completion
testmodule_result
PASSED
2020-09-17 13:32:31
TEST-RUNNER
Alias has now been claimed by another test
alias
gluu-oxd-test
new_test_id
lngGSwJF7Ptz9oR
Test Results