Test Summary

Test Results

Expand All Collapse All
All times are UTC
2020-11-03 10:48:08 INFO
TEST-RUNNER
Test instance qwKwL578hJXQzWi created
baseUrl
https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid
variant
{
  "client_auth_type": "client_secret_basic",
  "response_type": "id_token",
  "server_metadata": "static",
  "response_mode": "default",
  "client_registration": "static_client"
}
alias
oam_ps4_op_implicit_openid
description
For Implicit flows
planId
no171YPam1FCG
config
{
  "alias": "oam_ps4_op_implicit_openid",
  "server": {
    "issuer": "http://150.136.116.143:7777/oauth2",
    "jwks_uri": "http://150.136.116.143:7777/oauth2/rest/security",
    "authorization_endpoint": "http://150.136.116.143:7777/oauth2/rest/authorize",
    "token_endpoint": "http://150.136.116.143:7777/oauth2/rest/token",
    "userinfo_endpoint": "http://150.136.116.143:7777/oauth2/rest/userinfo"
  },
  "client": {
    "client_id": "OIDCClient",
    "client_secret": "welcome1"
  },
  "client_secret_post": {
    "client_id": "OIDCClient",
    "client_secret": "welcome1"
  },
  "client2": {
    "client_id": "OIDCClient",
    "client_secret": "welcome1"
  },
  "description": "For Implicit flows"
}
testName
oidcc-id-token-hint
2020-11-03 10:48:08 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback
2020-11-03 10:48:08 SUCCESS
GetStaticServerConfiguration
Found a static server object
issuer
http://150.136.116.143:7777/oauth2
jwks_uri
http://150.136.116.143:7777/oauth2/rest/security
authorization_endpoint
http://150.136.116.143:7777/oauth2/rest/authorize
token_endpoint
http://150.136.116.143:7777/oauth2/rest/token
userinfo_endpoint
http://150.136.116.143:7777/oauth2/rest/userinfo
2020-11-03 10:48:08 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2020-11-03 10:48:08 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
authorization_endpoint
{
  "testHost": "150.136.116.143",
  "testPort": 7777
}
token_endpoint
{
  "testHost": "150.136.116.143",
  "testPort": 7777
}
userinfo_endpoint
{
  "testHost": "150.136.116.143",
  "testPort": 7777
}
2020-11-03 10:48:08
FetchServerKeys
Fetching server key
jwks_uri
http://150.136.116.143:7777/oauth2/rest/security
2020-11-03 10:48:08
FetchServerKeys
HTTP request
request_uri
http://150.136.116.143:7777/oauth2/rest/security
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2020-11-03 10:48:08 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Tue, 03 Nov 2020 10:48:08 GMT",
  "referrer-policy": "same-origin",
  "x-content-type-options": "nosniff",
  "content-length": "2369",
  "x-oracle-dms-ecid": "005gn6PCtqeFw005zzp2iW0005LX00009z",
  "x-oracle-dms-rid": "0:3",
  "x-xss-protection": "1; mode\u003dblock",
  "keep-alive": "timeout\u003d5, max\u003d100",
  "connection": "Keep-Alive",
  "content-type": "application/json"
}
response_body
{"keys":[{"kty":"RSA","x5t#S256":"gOJ2KX4YVSR-y9VoqaFKGIGAmOprukhsGNYhRoUqtMU=","e":"AQAB","x5t":"En1dewmONzyRjmViuNsuz_E_04g=","kid":"OIDCDomain","x5c":["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","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"],"key_ops":["sign"],"alg":"RS256","n":"hNWJnaSAlpGCE-Dg7-xcmKT3TU5tMEjZb9J4U2BUnBEsROml-3747JaBa-6CEWytufeojNBe6QnoAnnU2GKV-ljP2DEtTTX-khxVibtcXsKO4PMkT2yEmFuF-Gca-Kj9xqaM68fxIvZbOZ-Orj8vTckWeB15ZZG1yyz7ThnWKiFa2eXoowu8vaj6bBdfyosxNOwENdy5wOopvPTk40btPsUYt_J5svaICIEaXHdMxcH8pf5LKH_3eJpyWYZ_PtsspIcwbN24vubbr2cGrMaT8xqmJhVsAngNK7AWSQ8MHCusfe2dreN57GofmmxtcLgEkAwLrVlLIKO44yLTj7xPfw"}]}
2020-11-03 10:48:08
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","x5t#S256":"gOJ2KX4YVSR-y9VoqaFKGIGAmOprukhsGNYhRoUqtMU=","e":"AQAB","x5t":"En1dewmONzyRjmViuNsuz_E_04g=","kid":"OIDCDomain","x5c":["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","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"],"key_ops":["sign"],"alg":"RS256","n":"hNWJnaSAlpGCE-Dg7-xcmKT3TU5tMEjZb9J4U2BUnBEsROml-3747JaBa-6CEWytufeojNBe6QnoAnnU2GKV-ljP2DEtTTX-khxVibtcXsKO4PMkT2yEmFuF-Gca-Kj9xqaM68fxIvZbOZ-Orj8vTckWeB15ZZG1yyz7ThnWKiFa2eXoowu8vaj6bBdfyosxNOwENdy5wOopvPTk40btPsUYt_J5svaICIEaXHdMxcH8pf5LKH_3eJpyWYZ_PtsspIcwbN24vubbr2cGrMaT8xqmJhVsAngNK7AWSQ8MHCusfe2dreN57GofmmxtcLgEkAwLrVlLIKO44yLTj7xPfw"}]}
2020-11-03 10:48:08 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "x5t#S256": "gOJ2KX4YVSR-y9VoqaFKGIGAmOprukhsGNYhRoUqtMU\u003d",
      "e": "AQAB",
      "x5t": "En1dewmONzyRjmViuNsuz_E_04g\u003d",
      "kid": "OIDCDomain",
      "x5c": [
        "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\u003d",
        "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\u003d"
      ],
      "key_ops": [
        "sign"
      ],
      "alg": "RS256",
      "n": "hNWJnaSAlpGCE-Dg7-xcmKT3TU5tMEjZb9J4U2BUnBEsROml-3747JaBa-6CEWytufeojNBe6QnoAnnU2GKV-ljP2DEtTTX-khxVibtcXsKO4PMkT2yEmFuF-Gca-Kj9xqaM68fxIvZbOZ-Orj8vTckWeB15ZZG1yyz7ThnWKiFa2eXoowu8vaj6bBdfyosxNOwENdy5wOopvPTk40btPsUYt_J5svaICIEaXHdMxcH8pf5LKH_3eJpyWYZ_PtsspIcwbN24vubbr2cGrMaT8xqmJhVsAngNK7AWSQ8MHCusfe2dreN57GofmmxtcLgEkAwLrVlLIKO44yLTj7xPfw"
    }
  ]
}
2020-11-03 10:48:08 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "x5t#S256": "gOJ2KX4YVSR-y9VoqaFKGIGAmOprukhsGNYhRoUqtMU\u003d",
      "e": "AQAB",
      "x5t": "En1dewmONzyRjmViuNsuz_E_04g\u003d",
      "kid": "OIDCDomain",
      "x5c": [
        "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\u003d",
        "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\u003d"
      ],
      "key_ops": [
        "sign"
      ],
      "alg": "RS256",
      "n": "hNWJnaSAlpGCE-Dg7-xcmKT3TU5tMEjZb9J4U2BUnBEsROml-3747JaBa-6CEWytufeojNBe6QnoAnnU2GKV-ljP2DEtTTX-khxVibtcXsKO4PMkT2yEmFuF-Gca-Kj9xqaM68fxIvZbOZ-Orj8vTckWeB15ZZG1yyz7ThnWKiFa2eXoowu8vaj6bBdfyosxNOwENdy5wOopvPTk40btPsUYt_J5svaICIEaXHdMxcH8pf5LKH_3eJpyWYZ_PtsspIcwbN24vubbr2cGrMaT8xqmJhVsAngNK7AWSQ8MHCusfe2dreN57GofmmxtcLgEkAwLrVlLIKO44yLTj7xPfw"
    }
  ]
}
2020-11-03 10:48:08 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2020-11-03 10:48:08 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2020-11-03 10:48:08 SUCCESS
CheckDistinctKeyIdValueInServerJWKs
Distinct 'kid' value in all keys of server_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2020-11-03 10:48:08 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2020-11-03 10:48:08 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
OIDCClient
client_secret
welcome1
2020-11-03 10:48:08
SetScopeInClientConfigurationToOpenId
Set scope in client configuration to "openid"
scope
openid
2020-11-03 10:48:08 SUCCESS
SetProtectedResourceUrlToUserInfoEndpoint
userinfo_endpoint will be used to test access token. The user info is not a mandatory to implement feature in the OpenID Connect specification, but is mandatory for certification.
protected_resource_url
http://150.136.116.143:7777/oauth2/rest/userinfo
2020-11-03 10:48:08
oidcc-id-token-hint
Setup Done
Make request to authorization endpoint
2020-11-03 10:48:08 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
OIDCClient
redirect_uri
https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback
scope
openid
2020-11-03 10:48:08
CreateRandomStateValue
Created state value
requested_state_length
10
state
Yl3sjVuJZx
2020-11-03 10:48:08 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
OIDCClient
redirect_uri
https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback
scope
openid
state
Yl3sjVuJZx
2020-11-03 10:48:08
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
bwspeSnVB5
2020-11-03 10:48:08 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
OIDCClient
redirect_uri
https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback
scope
openid
state
Yl3sjVuJZx
nonce
bwspeSnVB5
2020-11-03 10:48:08 SUCCESS
SetAuthorizationEndpointRequestResponseTypeFromEnvironment
Added response_type parameter to request
client_id
OIDCClient
redirect_uri
https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback
scope
openid
state
Yl3sjVuJZx
nonce
bwspeSnVB5
response_type
id_token
2020-11-03 10:48:08 SUCCESS
BuildPlainRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
http://150.136.116.143:7777/oauth2/rest/authorize?client_id=OIDCClient&redirect_uri=https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback&scope=openid&state=Yl3sjVuJZx&nonce=bwspeSnVB5&response_type=id_token
2020-11-03 10:48:08 REDIRECT
oidcc-id-token-hint
Redirecting to authorization endpoint
redirect_to
http://150.136.116.143:7777/oauth2/rest/authorize?client_id=OIDCClient&redirect_uri=https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback&scope=openid&state=Yl3sjVuJZx&nonce=bwspeSnVB5&response_type=id_token
2020-11-03 10:48:15 INCOMING
oidcc-id-token-hint
Incoming HTTP request to test instance qwKwL578hJXQzWi
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "dnt": "1",
  "cookie": "JSESSIONID\u003d033F82E8777A0E2D73120EF9B2FFB960",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
callback
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2020-11-03 10:48:15 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/LFJ8f6IQZgFFt5ZeimLD",
  "fullUrl": "https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/implicit/LFJ8f6IQZgFFt5ZeimLD"
}
2020-11-03 10:48:15 OUTGOING
oidcc-id-token-hint
Response to HTTP request to test instance qwKwL578hJXQzWi
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/implicit/LFJ8f6IQZgFFt5ZeimLD, returnUrl=/log-detail.html?log=qwKwL578hJXQzWi}]
outgoing_path
callback
2020-11-03 10:48:16 INCOMING
oidcc-id-token-hint
Incoming HTTP request to test instance qwKwL578hJXQzWi
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0",
  "accept": "*/*",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "content-type": "text/plain",
  "x-requested-with": "XMLHttpRequest",
  "origin": "https://www.certification.openid.net",
  "dnt": "1",
  "referer": "https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback",
  "cookie": "JSESSIONID\u003d033F82E8777A0E2D73120EF9B2FFB960",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "1044",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
implicit/LFJ8f6IQZgFFt5ZeimLD
incoming_body_form_params
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
#id_token=eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDA5NSwiaWF0IjoxNjA0NDAwNDk1LCJub25jZSI6ImJ3c3BlU25WQjUiLCJqdGkiOiIxSFM5LXdrTkxHS3EzTjdrZ3NRS3d3IiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJteDJxRTNQYzZZZEk2OGd6b2hUYkx3PT1-NnZ5aHJSdk05K0xFT3ppZW5CNGZYQ3FYU2tNNU9McDhiZWF5Y1VYZWxNa3Q3ak1RSkFDUDZZVjhzd1VpUWxwQmpHaEpaMEVIYzFpMHpVV2JhVWN6VGYvREFqR2dJaTBDWmRVYWRpbGJDRGhNdi9kbkkreTFaUStEQkh6ZDU5UjciLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.CQvDbarYJmVPpWYNfB5utYByKT2U8QRhb2tdxLdd9v3JvVz8Zry28wSzxrsuBitFAsbyrfVoFBzYsob0qHYjKCBE5vSv5vUIbkcywYCJ16qRHeXLLIX4RqyoE_N63mBhvLhPt3EJY9VKmLuDUBWzwY09bUokAnfj3i9dcFZGVQgacHH4Tdt-UidyCy7uus1rZm7-vMfZWuh4gQyYBhGpOp_02LtLvtYufy_vQm_BIkQkQPvBP42umR2u7VW6ZvEBYeHaMwRjxLc5CSW6-srpPTaR4CWeBdCaN8BjQOLqN0LoaeUd_t_mfvfUmRm3MnhArp2jD22LoWXVk4OJ4d66tw&state=Yl3sjVuJZx
2020-11-03 10:48:16 OUTGOING
oidcc-id-token-hint
Response to HTTP request to test instance qwKwL578hJXQzWi
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/LFJ8f6IQZgFFt5ZeimLD
2020-11-03 10:48:16
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "id_token",
    "value": "eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDA5NSwiaWF0IjoxNjA0NDAwNDk1LCJub25jZSI6ImJ3c3BlU25WQjUiLCJqdGkiOiIxSFM5LXdrTkxHS3EzTjdrZ3NRS3d3IiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJteDJxRTNQYzZZZEk2OGd6b2hUYkx3PT1-NnZ5aHJSdk05K0xFT3ppZW5CNGZYQ3FYU2tNNU9McDhiZWF5Y1VYZWxNa3Q3ak1RSkFDUDZZVjhzd1VpUWxwQmpHaEpaMEVIYzFpMHpVV2JhVWN6VGYvREFqR2dJaTBDWmRVYWRpbGJDRGhNdi9kbkkreTFaUStEQkh6ZDU5UjciLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.CQvDbarYJmVPpWYNfB5utYByKT2U8QRhb2tdxLdd9v3JvVz8Zry28wSzxrsuBitFAsbyrfVoFBzYsob0qHYjKCBE5vSv5vUIbkcywYCJ16qRHeXLLIX4RqyoE_N63mBhvLhPt3EJY9VKmLuDUBWzwY09bUokAnfj3i9dcFZGVQgacHH4Tdt-UidyCy7uus1rZm7-vMfZWuh4gQyYBhGpOp_02LtLvtYufy_vQm_BIkQkQPvBP42umR2u7VW6ZvEBYeHaMwRjxLc5CSW6-srpPTaR4CWeBdCaN8BjQOLqN0LoaeUd_t_mfvfUmRm3MnhArp2jD22LoWXVk4OJ4d66tw"
  },
  {
    "name": "state",
    "value": "Yl3sjVuJZx"
  }
]
2020-11-03 10:48:16 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
id_token
eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDA5NSwiaWF0IjoxNjA0NDAwNDk1LCJub25jZSI6ImJ3c3BlU25WQjUiLCJqdGkiOiIxSFM5LXdrTkxHS3EzTjdrZ3NRS3d3IiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJteDJxRTNQYzZZZEk2OGd6b2hUYkx3PT1-NnZ5aHJSdk05K0xFT3ppZW5CNGZYQ3FYU2tNNU9McDhiZWF5Y1VYZWxNa3Q3ak1RSkFDUDZZVjhzd1VpUWxwQmpHaEpaMEVIYzFpMHpVV2JhVWN6VGYvREFqR2dJaTBDWmRVYWRpbGJDRGhNdi9kbkkreTFaUStEQkh6ZDU5UjciLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.CQvDbarYJmVPpWYNfB5utYByKT2U8QRhb2tdxLdd9v3JvVz8Zry28wSzxrsuBitFAsbyrfVoFBzYsob0qHYjKCBE5vSv5vUIbkcywYCJ16qRHeXLLIX4RqyoE_N63mBhvLhPt3EJY9VKmLuDUBWzwY09bUokAnfj3i9dcFZGVQgacHH4Tdt-UidyCy7uus1rZm7-vMfZWuh4gQyYBhGpOp_02LtLvtYufy_vQm_BIkQkQPvBP42umR2u7VW6ZvEBYeHaMwRjxLc5CSW6-srpPTaR4CWeBdCaN8BjQOLqN0LoaeUd_t_mfvfUmRm3MnhArp2jD22LoWXVk4OJ4d66tw
state
Yl3sjVuJZx
2020-11-03 10:48:16 REDIRECT-IN
oidcc-id-token-hint
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "dnt": "1",
  "cookie": "JSESSIONID\u003d033F82E8777A0E2D73120EF9B2FFB960",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "id_token": "eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDA5NSwiaWF0IjoxNjA0NDAwNDk1LCJub25jZSI6ImJ3c3BlU25WQjUiLCJqdGkiOiIxSFM5LXdrTkxHS3EzTjdrZ3NRS3d3IiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJteDJxRTNQYzZZZEk2OGd6b2hUYkx3PT1-NnZ5aHJSdk05K0xFT3ppZW5CNGZYQ3FYU2tNNU9McDhiZWF5Y1VYZWxNa3Q3ak1RSkFDUDZZVjhzd1VpUWxwQmpHaEpaMEVIYzFpMHpVV2JhVWN6VGYvREFqR2dJaTBDWmRVYWRpbGJDRGhNdi9kbkkreTFaUStEQkh6ZDU5UjciLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.CQvDbarYJmVPpWYNfB5utYByKT2U8QRhb2tdxLdd9v3JvVz8Zry28wSzxrsuBitFAsbyrfVoFBzYsob0qHYjKCBE5vSv5vUIbkcywYCJ16qRHeXLLIX4RqyoE_N63mBhvLhPt3EJY9VKmLuDUBWzwY09bUokAnfj3i9dcFZGVQgacHH4Tdt-UidyCy7uus1rZm7-vMfZWuh4gQyYBhGpOp_02LtLvtYufy_vQm_BIkQkQPvBP42umR2u7VW6ZvEBYeHaMwRjxLc5CSW6-srpPTaR4CWeBdCaN8BjQOLqN0LoaeUd_t_mfvfUmRm3MnhArp2jD22LoWXVk4OJ4d66tw",
  "state": "Yl3sjVuJZx"
}
post_body
Verify authorization endpoint response
2020-11-03 10:48:16 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2020-11-03 10:48:16 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2020-11-03 10:48:16 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2020-11-03 10:48:16 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2020-11-03 10:48:16 SUCCESS
CheckMatchingStateParameter
State parameter correctly returned
state
Yl3sjVuJZx
2020-11-03 10:48:16 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDA5NSwiaWF0IjoxNjA0NDAwNDk1LCJub25jZSI6ImJ3c3BlU25WQjUiLCJqdGkiOiIxSFM5LXdrTkxHS3EzTjdrZ3NRS3d3IiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJteDJxRTNQYzZZZEk2OGd6b2hUYkx3PT1-NnZ5aHJSdk05K0xFT3ppZW5CNGZYQ3FYU2tNNU9McDhiZWF5Y1VYZWxNa3Q3ak1RSkFDUDZZVjhzd1VpUWxwQmpHaEpaMEVIYzFpMHpVV2JhVWN6VGYvREFqR2dJaTBDWmRVYWRpbGJDRGhNdi9kbkkreTFaUStEQkh6ZDU5UjciLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.CQvDbarYJmVPpWYNfB5utYByKT2U8QRhb2tdxLdd9v3JvVz8Zry28wSzxrsuBitFAsbyrfVoFBzYsob0qHYjKCBE5vSv5vUIbkcywYCJ16qRHeXLLIX4RqyoE_N63mBhvLhPt3EJY9VKmLuDUBWzwY09bUokAnfj3i9dcFZGVQgacHH4Tdt-UidyCy7uus1rZm7-vMfZWuh4gQyYBhGpOp_02LtLvtYufy_vQm_BIkQkQPvBP42umR2u7VW6ZvEBYeHaMwRjxLc5CSW6-srpPTaR4CWeBdCaN8BjQOLqN0LoaeUd_t_mfvfUmRm3MnhArp2jD22LoWXVk4OJ4d66tw
header
{
  "x5t": "En1dewmONzyRjmViuNsuz_E_04g",
  "kid": "OIDCDomain",
  "alg": "RS256"
}
claims
{
  "sub": "testuser1",
  "aud": [
    "OIDCClient",
    "http://150.136.116.143:7777/oauth2"
  ],
  "acr": "2",
  "azp": "OIDCClient",
  "auth_time": 1604400407,
  "amr": [
    "pwd"
  ],
  "iss": "http://150.136.116.143:7777/oauth2",
  "exp": 1604404095,
  "iat": 1604400495,
  "nonce": "bwspeSnVB5",
  "jti": "1HS9-wkNLGKq3N7kgsQKww",
  "sid": "mx2qE3Pc6YdI68gzohTbLw\u003d\u003d~6vyhrRvM9+LEOzienB4fXCqXSkM5OLp8beaycUXelMkt7jMQJACP6YV8swUiQlpBjGhJZ0EHc1i0zUWbaUczTf/DAjGgIi0CZdUadilbCDhMv/dnI+y1ZQ+DBHzd59R7"
}
2020-11-03 10:48:16 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2020-11-03 10:48:16 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
bwspeSnVB5
2020-11-03 10:48:16 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
Nothing to check; the conformance suite did not request an acr claim in request object
2020-11-03 10:48:16 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDA5NSwiaWF0IjoxNjA0NDAwNDk1LCJub25jZSI6ImJ3c3BlU25WQjUiLCJqdGkiOiIxSFM5LXdrTkxHS3EzTjdrZ3NRS3d3IiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJteDJxRTNQYzZZZEk2OGd6b2hUYkx3PT1-NnZ5aHJSdk05K0xFT3ppZW5CNGZYQ3FYU2tNNU9McDhiZWF5Y1VYZWxNa3Q3ak1RSkFDUDZZVjhzd1VpUWxwQmpHaEpaMEVIYzFpMHpVV2JhVWN6VGYvREFqR2dJaTBDWmRVYWRpbGJDRGhNdi9kbkkreTFaUStEQkh6ZDU5UjciLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.CQvDbarYJmVPpWYNfB5utYByKT2U8QRhb2tdxLdd9v3JvVz8Zry28wSzxrsuBitFAsbyrfVoFBzYsob0qHYjKCBE5vSv5vUIbkcywYCJ16qRHeXLLIX4RqyoE_N63mBhvLhPt3EJY9VKmLuDUBWzwY09bUokAnfj3i9dcFZGVQgacHH4Tdt-UidyCy7uus1rZm7-vMfZWuh4gQyYBhGpOp_02LtLvtYufy_vQm_BIkQkQPvBP42umR2u7VW6ZvEBYeHaMwRjxLc5CSW6-srpPTaR4CWeBdCaN8BjQOLqN0LoaeUd_t_mfvfUmRm3MnhArp2jD22LoWXVk4OJ4d66tw
2020-11-03 10:48:16 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDA5NSwiaWF0IjoxNjA0NDAwNDk1LCJub25jZSI6ImJ3c3BlU25WQjUiLCJqdGkiOiIxSFM5LXdrTkxHS3EzTjdrZ3NRS3d3IiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJteDJxRTNQYzZZZEk2OGd6b2hUYkx3PT1-NnZ5aHJSdk05K0xFT3ppZW5CNGZYQ3FYU2tNNU9McDhiZWF5Y1VYZWxNa3Q3ak1RSkFDUDZZVjhzd1VpUWxwQmpHaEpaMEVIYzFpMHpVV2JhVWN6VGYvREFqR2dJaTBDWmRVYWRpbGJDRGhNdi9kbkkreTFaUStEQkh6ZDU5UjciLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.CQvDbarYJmVPpWYNfB5utYByKT2U8QRhb2tdxLdd9v3JvVz8Zry28wSzxrsuBitFAsbyrfVoFBzYsob0qHYjKCBE5vSv5vUIbkcywYCJ16qRHeXLLIX4RqyoE_N63mBhvLhPt3EJY9VKmLuDUBWzwY09bUokAnfj3i9dcFZGVQgacHH4Tdt-UidyCy7uus1rZm7-vMfZWuh4gQyYBhGpOp_02LtLvtYufy_vQm_BIkQkQPvBP42umR2u7VW6ZvEBYeHaMwRjxLc5CSW6-srpPTaR4CWeBdCaN8BjQOLqN0LoaeUd_t_mfvfUmRm3MnhArp2jD22LoWXVk4OJ4d66tw
2020-11-03 10:48:16 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
testuser1
Second authorization: Make request to authorization endpoint
2020-11-03 10:48:16 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
OIDCClient
redirect_uri
https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback
scope
openid
2020-11-03 10:48:16
CreateRandomStateValue
Created state value
requested_state_length
10
state
cesTZ0xDXj
2020-11-03 10:48:16 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
OIDCClient
redirect_uri
https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback
scope
openid
state
cesTZ0xDXj
2020-11-03 10:48:16
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
9QSMvBYL0Q
2020-11-03 10:48:16 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
OIDCClient
redirect_uri
https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback
scope
openid
state
cesTZ0xDXj
nonce
9QSMvBYL0Q
2020-11-03 10:48:16 SUCCESS
SetAuthorizationEndpointRequestResponseTypeFromEnvironment
Added response_type parameter to request
client_id
OIDCClient
redirect_uri
https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback
scope
openid
state
cesTZ0xDXj
nonce
9QSMvBYL0Q
response_type
id_token
2020-11-03 10:48:16 SUCCESS
AddPromptNoneToAuthorizationEndpointRequest
Added prompt=none to authorization endpoint request
client_id
OIDCClient
redirect_uri
https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback
scope
openid
state
cesTZ0xDXj
nonce
9QSMvBYL0Q
response_type
id_token
prompt
none
2020-11-03 10:48:16 SUCCESS
AddIdTokenHintFromFirstLoginToAuthorizationEndpointRequest
Added id_token_hint to authorization endpoint request
client_id
OIDCClient
redirect_uri
https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback
scope
openid
state
cesTZ0xDXj
nonce
9QSMvBYL0Q
response_type
id_token
prompt
none
id_token_hint
eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDA5NSwiaWF0IjoxNjA0NDAwNDk1LCJub25jZSI6ImJ3c3BlU25WQjUiLCJqdGkiOiIxSFM5LXdrTkxHS3EzTjdrZ3NRS3d3IiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJteDJxRTNQYzZZZEk2OGd6b2hUYkx3PT1-NnZ5aHJSdk05K0xFT3ppZW5CNGZYQ3FYU2tNNU9McDhiZWF5Y1VYZWxNa3Q3ak1RSkFDUDZZVjhzd1VpUWxwQmpHaEpaMEVIYzFpMHpVV2JhVWN6VGYvREFqR2dJaTBDWmRVYWRpbGJDRGhNdi9kbkkreTFaUStEQkh6ZDU5UjciLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.CQvDbarYJmVPpWYNfB5utYByKT2U8QRhb2tdxLdd9v3JvVz8Zry28wSzxrsuBitFAsbyrfVoFBzYsob0qHYjKCBE5vSv5vUIbkcywYCJ16qRHeXLLIX4RqyoE_N63mBhvLhPt3EJY9VKmLuDUBWzwY09bUokAnfj3i9dcFZGVQgacHH4Tdt-UidyCy7uus1rZm7-vMfZWuh4gQyYBhGpOp_02LtLvtYufy_vQm_BIkQkQPvBP42umR2u7VW6ZvEBYeHaMwRjxLc5CSW6-srpPTaR4CWeBdCaN8BjQOLqN0LoaeUd_t_mfvfUmRm3MnhArp2jD22LoWXVk4OJ4d66tw
2020-11-03 10:48:16 SUCCESS
BuildPlainRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
http://150.136.116.143:7777/oauth2/rest/authorize?client_id=OIDCClient&redirect_uri=https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback&scope=openid&state=cesTZ0xDXj&nonce=9QSMvBYL0Q&response_type=id_token&prompt=none&id_token_hint=eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDA5NSwiaWF0IjoxNjA0NDAwNDk1LCJub25jZSI6ImJ3c3BlU25WQjUiLCJqdGkiOiIxSFM5LXdrTkxHS3EzTjdrZ3NRS3d3IiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJteDJxRTNQYzZZZEk2OGd6b2hUYkx3PT1-NnZ5aHJSdk05K0xFT3ppZW5CNGZYQ3FYU2tNNU9McDhiZWF5Y1VYZWxNa3Q3ak1RSkFDUDZZVjhzd1VpUWxwQmpHaEpaMEVIYzFpMHpVV2JhVWN6VGYvREFqR2dJaTBDWmRVYWRpbGJDRGhNdi9kbkkreTFaUStEQkh6ZDU5UjciLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.CQvDbarYJmVPpWYNfB5utYByKT2U8QRhb2tdxLdd9v3JvVz8Zry28wSzxrsuBitFAsbyrfVoFBzYsob0qHYjKCBE5vSv5vUIbkcywYCJ16qRHeXLLIX4RqyoE_N63mBhvLhPt3EJY9VKmLuDUBWzwY09bUokAnfj3i9dcFZGVQgacHH4Tdt-UidyCy7uus1rZm7-vMfZWuh4gQyYBhGpOp_02LtLvtYufy_vQm_BIkQkQPvBP42umR2u7VW6ZvEBYeHaMwRjxLc5CSW6-srpPTaR4CWeBdCaN8BjQOLqN0LoaeUd_t_mfvfUmRm3MnhArp2jD22LoWXVk4OJ4d66tw
2020-11-03 10:48:16 REDIRECT
oidcc-id-token-hint
Redirecting to authorization endpoint
redirect_to
http://150.136.116.143:7777/oauth2/rest/authorize?client_id=OIDCClient&redirect_uri=https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback&scope=openid&state=cesTZ0xDXj&nonce=9QSMvBYL0Q&response_type=id_token&prompt=none&id_token_hint=eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDA5NSwiaWF0IjoxNjA0NDAwNDk1LCJub25jZSI6ImJ3c3BlU25WQjUiLCJqdGkiOiIxSFM5LXdrTkxHS3EzTjdrZ3NRS3d3IiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJteDJxRTNQYzZZZEk2OGd6b2hUYkx3PT1-NnZ5aHJSdk05K0xFT3ppZW5CNGZYQ3FYU2tNNU9McDhiZWF5Y1VYZWxNa3Q3ak1RSkFDUDZZVjhzd1VpUWxwQmpHaEpaMEVIYzFpMHpVV2JhVWN6VGYvREFqR2dJaTBDWmRVYWRpbGJDRGhNdi9kbkkreTFaUStEQkh6ZDU5UjciLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.CQvDbarYJmVPpWYNfB5utYByKT2U8QRhb2tdxLdd9v3JvVz8Zry28wSzxrsuBitFAsbyrfVoFBzYsob0qHYjKCBE5vSv5vUIbkcywYCJ16qRHeXLLIX4RqyoE_N63mBhvLhPt3EJY9VKmLuDUBWzwY09bUokAnfj3i9dcFZGVQgacHH4Tdt-UidyCy7uus1rZm7-vMfZWuh4gQyYBhGpOp_02LtLvtYufy_vQm_BIkQkQPvBP42umR2u7VW6ZvEBYeHaMwRjxLc5CSW6-srpPTaR4CWeBdCaN8BjQOLqN0LoaeUd_t_mfvfUmRm3MnhArp2jD22LoWXVk4OJ4d66tw
2020-11-03 10:48:25 INCOMING
oidcc-id-token-hint
Incoming HTTP request to test instance qwKwL578hJXQzWi
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "dnt": "1",
  "cookie": "JSESSIONID\u003d033F82E8777A0E2D73120EF9B2FFB960",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
callback
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2020-11-03 10:48:25 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/qD17sED02lRa4WOPBtdR",
  "fullUrl": "https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/implicit/qD17sED02lRa4WOPBtdR"
}
2020-11-03 10:48:25 OUTGOING
oidcc-id-token-hint
Response to HTTP request to test instance qwKwL578hJXQzWi
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/implicit/qD17sED02lRa4WOPBtdR, returnUrl=/log-detail.html?log=qwKwL578hJXQzWi}]
outgoing_path
callback
2020-11-03 10:48:25 INCOMING
oidcc-id-token-hint
Incoming HTTP request to test instance qwKwL578hJXQzWi
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0",
  "accept": "*/*",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "content-type": "text/plain",
  "x-requested-with": "XMLHttpRequest",
  "origin": "https://www.certification.openid.net",
  "dnt": "1",
  "referer": "https://www.certification.openid.net/test/a/oam_ps4_op_implicit_openid/callback",
  "cookie": "JSESSIONID\u003d033F82E8777A0E2D73120EF9B2FFB960",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "1044",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
implicit/qD17sED02lRa4WOPBtdR
incoming_body_form_params
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
#id_token=eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDEwNCwiaWF0IjoxNjA0NDAwNTA0LCJub25jZSI6IjlRU012QllMMFEiLCJqdGkiOiJSNG1DNzJERkdEQm9fUWdvc1NidmFRIiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJTMHB2bXJhOGFwTzJJS0E3UnFIRDhBPT1-cDhlSUs2Q0JYeFNoNWc1Qnd3cmZuMHhNd1lGV3NNS2pWRTJvZzB3SzJlUWZvT0NQSXRtWGFjUnNWL0VkUmFKWDFYQStVVG9Qa1VxcS9JL1RnNWVKcmlvZ2xqcUZWRU9QZVNKTVFtbG01aHFya2t6MWpMcm5yaGs2Q0QrNlBJM04iLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.UNuImEhHBbxmd5fCqTGvCtoIQlOH7fSK_qokJAsDA2F1dQebgaTIfY2dLmiw0L-LRWFZOfvwDsAqVEZjwuzGZAGQAzzc6P_0CRcf9hDEDsPaLOuwB-VQ3qnerNBk_ahraFN2cVJ4seK1-20Pft1w3-Ty9A_96Is6q8T8cikMdtVbRikwJG0rIKbBNshKFfzcrrEMv9q-4VxrLz2rmfm0LG_WkBjY8cYMRJ-vqaxHJjnD7X07_OJLCj9VR-oHM9NBqAhDPzFtEZLTQLm2fWf9lNueWr2_tbt5mjuSB9b0bHghka3W1oCTZ_P_jN5Fl6V2-7-JqBO9LR5iypP94ES7dg&state=cesTZ0xDXj
2020-11-03 10:48:25 OUTGOING
oidcc-id-token-hint
Response to HTTP request to test instance qwKwL578hJXQzWi
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/qD17sED02lRa4WOPBtdR
2020-11-03 10:48:25
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "id_token",
    "value": "eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDEwNCwiaWF0IjoxNjA0NDAwNTA0LCJub25jZSI6IjlRU012QllMMFEiLCJqdGkiOiJSNG1DNzJERkdEQm9fUWdvc1NidmFRIiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJTMHB2bXJhOGFwTzJJS0E3UnFIRDhBPT1-cDhlSUs2Q0JYeFNoNWc1Qnd3cmZuMHhNd1lGV3NNS2pWRTJvZzB3SzJlUWZvT0NQSXRtWGFjUnNWL0VkUmFKWDFYQStVVG9Qa1VxcS9JL1RnNWVKcmlvZ2xqcUZWRU9QZVNKTVFtbG01aHFya2t6MWpMcm5yaGs2Q0QrNlBJM04iLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.UNuImEhHBbxmd5fCqTGvCtoIQlOH7fSK_qokJAsDA2F1dQebgaTIfY2dLmiw0L-LRWFZOfvwDsAqVEZjwuzGZAGQAzzc6P_0CRcf9hDEDsPaLOuwB-VQ3qnerNBk_ahraFN2cVJ4seK1-20Pft1w3-Ty9A_96Is6q8T8cikMdtVbRikwJG0rIKbBNshKFfzcrrEMv9q-4VxrLz2rmfm0LG_WkBjY8cYMRJ-vqaxHJjnD7X07_OJLCj9VR-oHM9NBqAhDPzFtEZLTQLm2fWf9lNueWr2_tbt5mjuSB9b0bHghka3W1oCTZ_P_jN5Fl6V2-7-JqBO9LR5iypP94ES7dg"
  },
  {
    "name": "state",
    "value": "cesTZ0xDXj"
  }
]
2020-11-03 10:48:25 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
id_token
eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDEwNCwiaWF0IjoxNjA0NDAwNTA0LCJub25jZSI6IjlRU012QllMMFEiLCJqdGkiOiJSNG1DNzJERkdEQm9fUWdvc1NidmFRIiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJTMHB2bXJhOGFwTzJJS0E3UnFIRDhBPT1-cDhlSUs2Q0JYeFNoNWc1Qnd3cmZuMHhNd1lGV3NNS2pWRTJvZzB3SzJlUWZvT0NQSXRtWGFjUnNWL0VkUmFKWDFYQStVVG9Qa1VxcS9JL1RnNWVKcmlvZ2xqcUZWRU9QZVNKTVFtbG01aHFya2t6MWpMcm5yaGs2Q0QrNlBJM04iLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.UNuImEhHBbxmd5fCqTGvCtoIQlOH7fSK_qokJAsDA2F1dQebgaTIfY2dLmiw0L-LRWFZOfvwDsAqVEZjwuzGZAGQAzzc6P_0CRcf9hDEDsPaLOuwB-VQ3qnerNBk_ahraFN2cVJ4seK1-20Pft1w3-Ty9A_96Is6q8T8cikMdtVbRikwJG0rIKbBNshKFfzcrrEMv9q-4VxrLz2rmfm0LG_WkBjY8cYMRJ-vqaxHJjnD7X07_OJLCj9VR-oHM9NBqAhDPzFtEZLTQLm2fWf9lNueWr2_tbt5mjuSB9b0bHghka3W1oCTZ_P_jN5Fl6V2-7-JqBO9LR5iypP94ES7dg
state
cesTZ0xDXj
2020-11-03 10:48:25 REDIRECT-IN
oidcc-id-token-hint
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "dnt": "1",
  "cookie": "JSESSIONID\u003d033F82E8777A0E2D73120EF9B2FFB960",
  "upgrade-insecure-requests": "1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "id_token": "eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDEwNCwiaWF0IjoxNjA0NDAwNTA0LCJub25jZSI6IjlRU012QllMMFEiLCJqdGkiOiJSNG1DNzJERkdEQm9fUWdvc1NidmFRIiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJTMHB2bXJhOGFwTzJJS0E3UnFIRDhBPT1-cDhlSUs2Q0JYeFNoNWc1Qnd3cmZuMHhNd1lGV3NNS2pWRTJvZzB3SzJlUWZvT0NQSXRtWGFjUnNWL0VkUmFKWDFYQStVVG9Qa1VxcS9JL1RnNWVKcmlvZ2xqcUZWRU9QZVNKTVFtbG01aHFya2t6MWpMcm5yaGs2Q0QrNlBJM04iLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.UNuImEhHBbxmd5fCqTGvCtoIQlOH7fSK_qokJAsDA2F1dQebgaTIfY2dLmiw0L-LRWFZOfvwDsAqVEZjwuzGZAGQAzzc6P_0CRcf9hDEDsPaLOuwB-VQ3qnerNBk_ahraFN2cVJ4seK1-20Pft1w3-Ty9A_96Is6q8T8cikMdtVbRikwJG0rIKbBNshKFfzcrrEMv9q-4VxrLz2rmfm0LG_WkBjY8cYMRJ-vqaxHJjnD7X07_OJLCj9VR-oHM9NBqAhDPzFtEZLTQLm2fWf9lNueWr2_tbt5mjuSB9b0bHghka3W1oCTZ_P_jN5Fl6V2-7-JqBO9LR5iypP94ES7dg",
  "state": "cesTZ0xDXj"
}
post_body
Second authorization: Verify authorization endpoint response
2020-11-03 10:48:25 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2020-11-03 10:48:25 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2020-11-03 10:48:25 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2020-11-03 10:48:25 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2020-11-03 10:48:25 SUCCESS
CheckMatchingStateParameter
State parameter correctly returned
state
cesTZ0xDXj
2020-11-03 10:48:25 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDEwNCwiaWF0IjoxNjA0NDAwNTA0LCJub25jZSI6IjlRU012QllMMFEiLCJqdGkiOiJSNG1DNzJERkdEQm9fUWdvc1NidmFRIiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJTMHB2bXJhOGFwTzJJS0E3UnFIRDhBPT1-cDhlSUs2Q0JYeFNoNWc1Qnd3cmZuMHhNd1lGV3NNS2pWRTJvZzB3SzJlUWZvT0NQSXRtWGFjUnNWL0VkUmFKWDFYQStVVG9Qa1VxcS9JL1RnNWVKcmlvZ2xqcUZWRU9QZVNKTVFtbG01aHFya2t6MWpMcm5yaGs2Q0QrNlBJM04iLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.UNuImEhHBbxmd5fCqTGvCtoIQlOH7fSK_qokJAsDA2F1dQebgaTIfY2dLmiw0L-LRWFZOfvwDsAqVEZjwuzGZAGQAzzc6P_0CRcf9hDEDsPaLOuwB-VQ3qnerNBk_ahraFN2cVJ4seK1-20Pft1w3-Ty9A_96Is6q8T8cikMdtVbRikwJG0rIKbBNshKFfzcrrEMv9q-4VxrLz2rmfm0LG_WkBjY8cYMRJ-vqaxHJjnD7X07_OJLCj9VR-oHM9NBqAhDPzFtEZLTQLm2fWf9lNueWr2_tbt5mjuSB9b0bHghka3W1oCTZ_P_jN5Fl6V2-7-JqBO9LR5iypP94ES7dg
header
{
  "x5t": "En1dewmONzyRjmViuNsuz_E_04g",
  "kid": "OIDCDomain",
  "alg": "RS256"
}
claims
{
  "sub": "testuser1",
  "aud": [
    "OIDCClient",
    "http://150.136.116.143:7777/oauth2"
  ],
  "acr": "2",
  "azp": "OIDCClient",
  "auth_time": 1604400407,
  "amr": [
    "pwd"
  ],
  "iss": "http://150.136.116.143:7777/oauth2",
  "exp": 1604404104,
  "iat": 1604400504,
  "nonce": "9QSMvBYL0Q",
  "jti": "R4mC72DFGDBo_QgosSbvaQ",
  "sid": "S0pvmra8apO2IKA7RqHD8A\u003d\u003d~p8eIK6CBXxSh5g5Bwwrfn0xMwYFWsMKjVE2og0wK2eQfoOCPItmXacRsV/EdRaJX1XA+UToPkUqq/I/Tg5eJriogljqFVEOPeSJMQmlm5hqrkkz1jLrnrhk6CD+6PI3N"
}
2020-11-03 10:48:25 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2020-11-03 10:48:25 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
9QSMvBYL0Q
2020-11-03 10:48:25 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
Nothing to check; the conformance suite did not request an acr claim in request object
2020-11-03 10:48:25 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDEwNCwiaWF0IjoxNjA0NDAwNTA0LCJub25jZSI6IjlRU012QllMMFEiLCJqdGkiOiJSNG1DNzJERkdEQm9fUWdvc1NidmFRIiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJTMHB2bXJhOGFwTzJJS0E3UnFIRDhBPT1-cDhlSUs2Q0JYeFNoNWc1Qnd3cmZuMHhNd1lGV3NNS2pWRTJvZzB3SzJlUWZvT0NQSXRtWGFjUnNWL0VkUmFKWDFYQStVVG9Qa1VxcS9JL1RnNWVKcmlvZ2xqcUZWRU9QZVNKTVFtbG01aHFya2t6MWpMcm5yaGs2Q0QrNlBJM04iLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.UNuImEhHBbxmd5fCqTGvCtoIQlOH7fSK_qokJAsDA2F1dQebgaTIfY2dLmiw0L-LRWFZOfvwDsAqVEZjwuzGZAGQAzzc6P_0CRcf9hDEDsPaLOuwB-VQ3qnerNBk_ahraFN2cVJ4seK1-20Pft1w3-Ty9A_96Is6q8T8cikMdtVbRikwJG0rIKbBNshKFfzcrrEMv9q-4VxrLz2rmfm0LG_WkBjY8cYMRJ-vqaxHJjnD7X07_OJLCj9VR-oHM9NBqAhDPzFtEZLTQLm2fWf9lNueWr2_tbt5mjuSB9b0bHghka3W1oCTZ_P_jN5Fl6V2-7-JqBO9LR5iypP94ES7dg
2020-11-03 10:48:25 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJraWQiOiJPSURDRG9tYWluIiwieDV0IjoiRW4xZGV3bU9OenlSam1WaXVOc3V6X0VfMDRnIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIiwic3ViIjoidGVzdHVzZXIxIiwiYXVkIjpbIk9JRENDbGllbnQiLCJodHRwOi8vMTUwLjEzNi4xMTYuMTQzOjc3Nzcvb2F1dGgyIl0sImV4cCI6MTYwNDQwNDEwNCwiaWF0IjoxNjA0NDAwNTA0LCJub25jZSI6IjlRU012QllMMFEiLCJqdGkiOiJSNG1DNzJERkdEQm9fUWdvc1NidmFRIiwiYXpwIjoiT0lEQ0NsaWVudCIsImFjciI6IjIiLCJzaWQiOiJTMHB2bXJhOGFwTzJJS0E3UnFIRDhBPT1-cDhlSUs2Q0JYeFNoNWc1Qnd3cmZuMHhNd1lGV3NNS2pWRTJvZzB3SzJlUWZvT0NQSXRtWGFjUnNWL0VkUmFKWDFYQStVVG9Qa1VxcS9JL1RnNWVKcmlvZ2xqcUZWRU9QZVNKTVFtbG01aHFya2t6MWpMcm5yaGs2Q0QrNlBJM04iLCJhdXRoX3RpbWUiOjE2MDQ0MDA0MDcsImFtciI6WyJwd2QiXX0.UNuImEhHBbxmd5fCqTGvCtoIQlOH7fSK_qokJAsDA2F1dQebgaTIfY2dLmiw0L-LRWFZOfvwDsAqVEZjwuzGZAGQAzzc6P_0CRcf9hDEDsPaLOuwB-VQ3qnerNBk_ahraFN2cVJ4seK1-20Pft1w3-Ty9A_96Is6q8T8cikMdtVbRikwJG0rIKbBNshKFfzcrrEMv9q-4VxrLz2rmfm0LG_WkBjY8cYMRJ-vqaxHJjnD7X07_OJLCj9VR-oHM9NBqAhDPzFtEZLTQLm2fWf9lNueWr2_tbt5mjuSB9b0bHghka3W1oCTZ_P_jN5Fl6V2-7-JqBO9LR5iypP94ES7dg
2020-11-03 10:48:25 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
testuser1
2020-11-03 10:48:25 SUCCESS
CheckIdTokenAuthTimeClaimsSameIfPresent
auth_time is the same in the second id_token
first_id_token
{
  "sub": "testuser1",
  "aud": [
    "OIDCClient",
    "http://150.136.116.143:7777/oauth2"
  ],
  "acr": "2",
  "azp": "OIDCClient",
  "auth_time": 1604400407,
  "amr": [
    "pwd"
  ],
  "iss": "http://150.136.116.143:7777/oauth2",
  "exp": 1604404095,
  "iat": 1604400495,
  "nonce": "bwspeSnVB5",
  "jti": "1HS9-wkNLGKq3N7kgsQKww",
  "sid": "mx2qE3Pc6YdI68gzohTbLw\u003d\u003d~6vyhrRvM9+LEOzienB4fXCqXSkM5OLp8beaycUXelMkt7jMQJACP6YV8swUiQlpBjGhJZ0EHc1i0zUWbaUczTf/DAjGgIi0CZdUadilbCDhMv/dnI+y1ZQ+DBHzd59R7"
}
second_id_token
{
  "sub": "testuser1",
  "aud": [
    "OIDCClient",
    "http://150.136.116.143:7777/oauth2"
  ],
  "acr": "2",
  "azp": "OIDCClient",
  "auth_time": 1604400407,
  "amr": [
    "pwd"
  ],
  "iss": "http://150.136.116.143:7777/oauth2",
  "exp": 1604404104,
  "iat": 1604400504,
  "nonce": "9QSMvBYL0Q",
  "jti": "R4mC72DFGDBo_QgosSbvaQ",
  "sid": "S0pvmra8apO2IKA7RqHD8A\u003d\u003d~p8eIK6CBXxSh5g5Bwwrfn0xMwYFWsMKjVE2og0wK2eQfoOCPItmXacRsV/EdRaJX1XA+UToPkUqq/I/Tg5eJriogljqFVEOPeSJMQmlm5hqrkkz1jLrnrhk6CD+6PI3N"
}
2020-11-03 10:48:25 SUCCESS
CheckIdTokenSubConsistentForSecondAuthorization
sub is the same in the second id_token
first_id_token
{
  "sub": "testuser1",
  "aud": [
    "OIDCClient",
    "http://150.136.116.143:7777/oauth2"
  ],
  "acr": "2",
  "azp": "OIDCClient",
  "auth_time": 1604400407,
  "amr": [
    "pwd"
  ],
  "iss": "http://150.136.116.143:7777/oauth2",
  "exp": 1604404095,
  "iat": 1604400495,
  "nonce": "bwspeSnVB5",
  "jti": "1HS9-wkNLGKq3N7kgsQKww",
  "sid": "mx2qE3Pc6YdI68gzohTbLw\u003d\u003d~6vyhrRvM9+LEOzienB4fXCqXSkM5OLp8beaycUXelMkt7jMQJACP6YV8swUiQlpBjGhJZ0EHc1i0zUWbaUczTf/DAjGgIi0CZdUadilbCDhMv/dnI+y1ZQ+DBHzd59R7"
}
second_id_token
{
  "sub": "testuser1",
  "aud": [
    "OIDCClient",
    "http://150.136.116.143:7777/oauth2"
  ],
  "acr": "2",
  "azp": "OIDCClient",
  "auth_time": 1604400407,
  "amr": [
    "pwd"
  ],
  "iss": "http://150.136.116.143:7777/oauth2",
  "exp": 1604404104,
  "iat": 1604400504,
  "nonce": "9QSMvBYL0Q",
  "jti": "R4mC72DFGDBo_QgosSbvaQ",
  "sid": "S0pvmra8apO2IKA7RqHD8A\u003d\u003d~p8eIK6CBXxSh5g5Bwwrfn0xMwYFWsMKjVE2og0wK2eQfoOCPItmXacRsV/EdRaJX1XA+UToPkUqq/I/Tg5eJriogljqFVEOPeSJMQmlm5hqrkkz1jLrnrhk6CD+6PI3N"
}
2020-11-03 10:48:25 FINISHED
oidcc-id-token-hint
Test has run to completion
testmodule_result
PASSED
Unregister dynamically registered client
2020-11-03 10:48:25 INFO
UnregisterDynamicallyRegisteredClient
Skipped evaluation due to missing required string: registration_client_uri
expected
registration_client_uri
2020-11-03 10:48:33
TEST-RUNNER
Alias has now been claimed by another test
alias
oam_ps4_op_implicit_openid
new_test_id
EdDbOHgk6j1IxGD
Test Results