Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-01-21 15:31:30 INFO
TEST-RUNNER
Test instance fMsdCRSuR3UqLAH created
baseUrl
https://www.certification.openid.net/test/a/roboot-fapi-ciba-poll-mtls-v1-final
variant
{
  "client_auth_type": "mtls",
  "ciba_mode": "poll",
  "fapi_profile": "plain_fapi",
  "client_registration": "static_client"
}
alias
roboot-fapi-ciba-poll-mtls-v1-final
description
FAPI CIBA MTLS Poll
planId
xPBU37aQKJBbJ
config
{
  "alias": "roboot-fapi-ciba-poll-mtls-v1-final",
  "description": "FAPI CIBA MTLS Poll",
  "server": {
    "discoveryUrl": "https://emea-conformance.ping-eng.com:9031/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "conformance1",
    "scope": "openid test",
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "d": "QPg1PBy12DhqqGeiuWBoIdhrfbOutP8nfSND46mdTgU",
          "use": "sig",
          "crv": "P-256",
          "kid": "2HKyz2Uc4F8hRcwyuPgA5Eg_salnEe7pfujUkvj2yew",
          "x": "NK3-2enqupOW-PGDSp2X2vrtqFIVnsVMciZdVwa7p8Q",
          "y": "Yrp1yMUYXZcWbHRzsXlH94v2SJZs0lxRbbCpvo1kcUw",
          "alg": "ES256"
        }
      ]
    },
    "hint_type": "login_hint",
    "hint_value": "patrick"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\nG9y5Fqs\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\nZqGxA6UIIzOV0LbnnpFhYNgmH0AJS17V9sIIGtYXNArjzw4Kin4P\n-----END RSA PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----\nMIIDYDCCAkgCCQCSYQOG55YnujANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJH\nQjESMBAGA1UECAwJTWlkZGxlc2V4MQ8wDQYDVQQHDAZMb25kb24xFjAUBgNVBAoM\nDVBpbmcgSWRlbnRpdHkxDDAKBgNVBAsMA1JTQTEYMBYGA1UEAwwPUGluZyBVSyBE\nZW1vIENBMB4XDTE5MDEwNzEwNTk1NVoXDTIxMTAyNzEwNTk1NVowcjELMAkGA1UE\nBhMCR0IxEjAQBgNVBAgMCU1pZGRsZXNleDEPMA0GA1UEBwwGTG9uZG9uMRYwFAYD\nVQQKDA1QaW5nIElkZW50aXR5MQwwCgYDVQQLDANSU0ExGDAWBgNVBAMMD1Bpbmcg\nVUsgRGVtbyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMHte48\n3946bvKmpt1nuj1+IMWoywAGOj8UQcPDrkKuBOQL5Sv8o4ScYjjN5jgryjwRx3YM\niVpCTOLB1GXrj55lZO2RRxMURwCSwaHnaLiM4cVcqSF8dq8LOlsR6bXSjJnvB2HW\nS1CYQaJdF21m0pxKcH9NUsdq5aYCkP52xyYel+XOxszQX1FkvrpD3VXII5xCiGGS\n6eEb/Mo2+nwgyN+A/M1yaeN65ah8HZFngR85oElYx7fFOkm9VubhCt2ePEvkanuW\npgp5VrI2ruVQr1tvToL2ydzEmBPzGkh/UtACsucXXwSE7fvw50dgbhrXtmJnWA6h\nP2Wm3Ifok0ViKc0CAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAN5fn4Ke+4nhe5r+6\naewM8lJ+sY25ing1ByAj7m5tJcsh68irJIjpAm3kJz20DVZ+2JguB1HZUHUTYo/W\nCmwMzatLN2rv9in3uRS4d0FaIfKxFHjRFs1T1APXz7lMP5t3j1/uZwbmmTGqvKTY\nlocLQJpqnJURiuNrxw7mZcZ3KTVx5WCdk7caYvSgUTbs9ec+JzQG0keHinrHu0mA\nXDxxCWXsx/rQ4PTBI808iBiHR2MbTOXONN5jid4gk9/T8KKfOFG1AbaEhsGdkChP\nNQO4M12Q5TWwtWutjx/PdPaGKvSoquZkXk1L4meO3ADLngHX7lb2oRkfF0wIZMNC\n/Eat5g\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "client2": {
    "client_id": "conformance2",
    "scope": "openid test",
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "d": "MTbmR5F_tN0zlvVrwESkMNHB-ZLoRpk3dlxHYged3Ik",
          "use": "sig",
          "crv": "P-256",
          "kid": "6waBCAJKuKMvSU3k540XHPx_4gJx01tmQh8giaYjj1k",
          "x": "XW7xFTCnyPLhhWb_dE0fIIavYTbilf3HDsUELAC5SwI",
          "y": "sm9SrdwPWJ_oQ5tbsDMi6xnsaoLWZLTFyy0L2q5vURE",
          "alg": "ES256"
        }
      ]
    },
    "acr_value": "high"
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\nvmmVwUw\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\n6M0VjCsshxg+dh8CEfrMAeZ36SXKIqdjXfLQ8yeeQF+fJNHzeXPB\n-----END RSA PRIVATE KEY-----\n",
    "ca": "-----BEGIN CERTIFICATE-----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\n/Eat5g\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "resource": {
    "resourceUrl": "https://emea-conformance.ping-eng.com:3000/get"
  }
}
testName
fapi-ciba-id1-ensure-authorization-request-with-binding-message-succeeds
2021-01-21 15:31:31 SUCCESS
CreateCIBANotificationEndpointUri
Created ciba notification endpoint URI
notification_uri
https://www.certification.openid.net/test/a/roboot-fapi-ciba-poll-mtls-v1-final/ciba-notification-endpoint
2021-01-21 15:31:31
GetDynamicServerConfiguration
HTTP request
request_uri
https://emea-conformance.ping-eng.com:9031/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-01-21 15:31:31 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Thu, 21 Jan 2021 15:31:31 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dnw5dFta8PkVONdi79WbIo2;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "content-length": "3631"
}
response_body
{
  "issuer": "https://emea-conformance.ping-eng.com:9031",
  "authorization_endpoint": "https://emea-conformance.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://emea-conformance.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://emea-conformance.ping-eng.com:9031/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://emea-conformance.ping-eng.com:9031/idp/userinfo.openid",
  "introspection_endpoint": "https://emea-conformance.ping-eng.com:9031/as/introspect.oauth2",
  "jwks_uri": "https://emea-conformance.ping-eng.com:9031/pf/JWKS",
  "registration_endpoint": "https://emea-conformance.ping-eng.com:9031/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://emea-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://emea-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://emea-conformance.ping-eng.com:9031/idp/startSLO.ping",
  "device_authorization_endpoint": "https://emea-conformance.ping-eng.com:9031/as/device_authz.oauth2",
  "scopes_supported": [ "test", "openid" ],
  "claims_supported": [ "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
    "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "private_key_jwt" , "tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "backchannel_authentication_endpoint": "https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "code_challenge_methods_supported": [ "plain", "S256" ],
  "tls_client_certificate_bound_access_tokens": true,
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://emea-conformance.ping-eng.com:9032/as/token.oauth2",
  "backchannel_authentication_endpoint": "https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba"}
}
2021-01-21 15:31:31
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{
  "issuer": "https://emea-conformance.ping-eng.com:9031",
  "authorization_endpoint": "https://emea-conformance.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://emea-conformance.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://emea-conformance.ping-eng.com:9031/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://emea-conformance.ping-eng.com:9031/idp/userinfo.openid",
  "introspection_endpoint": "https://emea-conformance.ping-eng.com:9031/as/introspect.oauth2",
  "jwks_uri": "https://emea-conformance.ping-eng.com:9031/pf/JWKS",
  "registration_endpoint": "https://emea-conformance.ping-eng.com:9031/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://emea-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://emea-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions",
  "ping_end_session_endpoint": "https://emea-conformance.ping-eng.com:9031/idp/startSLO.ping",
  "device_authorization_endpoint": "https://emea-conformance.ping-eng.com:9031/as/device_authz.oauth2",
  "scopes_supported": [ "test", "openid" ],
  "claims_supported": [ "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
    "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "private_key_jwt" , "tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "backchannel_authentication_endpoint": "https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "code_challenge_methods_supported": [ "plain", "S256" ],
  "tls_client_certificate_bound_access_tokens": true,
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://emea-conformance.ping-eng.com:9032/as/token.oauth2",
  "backchannel_authentication_endpoint": "https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba"}
}
2021-01-21 15:31:31 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://emea-conformance.ping-eng.com:9031
authorization_endpoint
https://emea-conformance.ping-eng.com:9031/as/authorization.oauth2
token_endpoint
https://emea-conformance.ping-eng.com:9032/as/token.oauth2
revocation_endpoint
https://emea-conformance.ping-eng.com:9031/as/revoke_token.oauth2
userinfo_endpoint
https://emea-conformance.ping-eng.com:9031/idp/userinfo.openid
introspection_endpoint
https://emea-conformance.ping-eng.com:9031/as/introspect.oauth2
jwks_uri
https://emea-conformance.ping-eng.com:9031/pf/JWKS
registration_endpoint
https://emea-conformance.ping-eng.com:9031/as/clients.oauth2
ping_revoked_sris_endpoint
https://emea-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris
ping_session_management_sris_endpoint
https://emea-conformance.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions
ping_end_session_endpoint
https://emea-conformance.ping-eng.com:9031/idp/startSLO.ping
device_authorization_endpoint
https://emea-conformance.ping-eng.com:9031/as/device_authz.oauth2
scopes_supported
[
  "test",
  "openid"
]
claims_supported
[
  "sub"
]
response_types_supported
[
  "code",
  "token",
  "id_token",
  "code token",
  "code id_token",
  "token id_token",
  "code token id_token"
]
response_modes_supported
[
  "fragment",
  "query",
  "form_post"
]
grant_types_supported
[
  "implicit",
  "authorization_code",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
  "urn:ietf:params:oauth:grant-type:jwt-bearer",
  "urn:ietf:params:oauth:grant-type:saml2-bearer",
  "urn:ietf:params:oauth:grant-type:device_code",
  "urn:ietf:params:oauth:grant-type:token-exchange",
  "urn:openid:params:grant-type:ciba"
]
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "none",
  "HS256",
  "HS384",
  "HS512",
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
token_endpoint_auth_methods_supported
[
  "client_secret_basic",
  "client_secret_post",
  "private_key_jwt",
  "tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
claim_types_supported
[
  "normal"
]
claims_parameter_supported
false
request_parameter_supported
true
request_uri_parameter_supported
false
request_object_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
id_token_encryption_alg_values_supported
[
  "dir",
  "A128KW",
  "A192KW",
  "A256KW",
  "A128GCMKW",
  "A192GCMKW",
  "A256GCMKW",
  "ECDH-ES",
  "ECDH-ES+A128KW",
  "ECDH-ES+A192KW",
  "ECDH-ES+A256KW",
  "RSA-OAEP"
]
id_token_encryption_enc_values_supported
[
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256CBC-HS512",
  "A128GCM",
  "A192GCM",
  "A256GCM"
]
backchannel_authentication_endpoint
https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
backchannel_user_code_parameter_supported
false
code_challenge_methods_supported
[
  "plain",
  "S256"
]
tls_client_certificate_bound_access_tokens
true
mtls_endpoint_aliases
{
  "token_endpoint": "https://emea-conformance.ping-eng.com:9032/as/token.oauth2",
  "backchannel_authentication_endpoint": "https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba"
}
2021-01-21 15:31:31 SUCCESS
AddMTLSEndpointAliasesToEnvironment
Added mtls_endpoint_aliases to environment
mtls_endpoint_aliases
{
  "token_endpoint": "https://emea-conformance.ping-eng.com:9032/as/token.oauth2",
  "backchannel_authentication_endpoint": "https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba"
}
2021-01-21 15:31:31 SUCCESS
CheckCIBAServerConfiguration
Found required server configuration keys
required
[
  "backchannel_authentication_endpoint",
  "token_endpoint",
  "issuer"
]
2021-01-21 15:31:31 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
{
  "testHost": "emea-conformance.ping-eng.com",
  "testPort": 9031
}
authorization_endpoint
{
  "testHost": "emea-conformance.ping-eng.com",
  "testPort": 9031
}
token_endpoint
{
  "testHost": "emea-conformance.ping-eng.com",
  "testPort": 9032
}
userinfo_endpoint
{
  "testHost": "emea-conformance.ping-eng.com",
  "testPort": 9031
}
2021-01-21 15:31:31
FetchServerKeys
Fetching server key
jwks_uri
https://emea-conformance.ping-eng.com:9031/pf/JWKS
2021-01-21 15:31:31
FetchServerKeys
HTTP request
request_uri
https://emea-conformance.ping-eng.com:9031/pf/JWKS
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-01-21 15:31:31 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Thu, 21 Jan 2021 15:31:31 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dEXmJSNvBiXmZGnEYZ22QOM;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"keys":[{"kty":"RSA","kid":"9L0wcTYZyg4MVfIZ4eh9NXAJx-s","use":"sig","n":"sQJrT-2-R0CAi9-aLYM4NUVECMNEV-tBVFx_SJ2KdXnfAkAIJVW1bcBjMXtqXZZ9l6rJFsqlcNgIy8l9cpv_O-Zx7RGnzgwS8TDZhpidnaKUI52tgfxUs9CiCaor91E5EL2FGeGxABGQZKx28iZCcCpv5ca1-nyjLmdM2pRUXi1ygVYbp9eXXhqRmlVFtPHLY0FZoP2UJ5RJiLS1wxJmYyeoyc5HYbU55MbDMPDwT8S5UrwymROn0VN3H_n7WIS_D17DpPDgtXJk6i2Ib1nFMaLZfuUKS2feDeolqYMerGaY6SBdIbxH8-gobbLTwSRCG4ONwA46csQ53oLABnc-zw","e":"AQAB"},{"kty":"EC","kid":"QriKw4RH6fiUbFYjb-hTAHKuNNo","use":"sig","x":"MxKx2jj2sJClMhxS2K-THnoqmPVG5xgCyjcBTrzbCoU","y":"8GR_nTiOvZr1eA3Ql08AyfEhTgyuyAOdXKahmRrrTjg","crv":"P-256"},{"kty":"EC","kid":"YA-k4CTT3-Lm8XBisZQqXtJyq2c","use":"sig","x":"ADgkM0k87XQztrF6zLInMlSxkdzM30aV1I8NNA7ZQhE_AiKyx2MRBnqxTzoqetCli2ws73k6NfpaHPJOhN842bHK","y":"AVKwgRD0TysDMJvyz4woV4X-iuRbBMK7vjWhiT0U8HZfBqTxux6XrAvgmurvSJAv4k-b5lv3E2lIYwM0YrXUDwJn","crv":"P-521"},{"kty":"EC","kid":"h7wsd-n1EzoJKfKyN247N-aHNyg","use":"sig","x":"KWoU4JZ2MUKHTD-Q_yFK_MWYtKi5hR4ZZnAcsnOxsdNn2dKgHr9ikraoVujQsFFM","y":"SYVsYnLY8F5AIvbc-mLJG5R-DQhya5gEKjTcvChYXoH-yfUIhVY0vMM2VSa8TTZx","crv":"P-384"},{"kty":"EC","kid":"BsJf1IUZHT0xLGlMZD9hDGP5eBc","use":"sig","x":"AYtW5y1L8wE14DPgeoJ2LxcWq5tcrKQq_zu5Mg69dC3XtFCSfItICXMyJjuyN_FbxbxwVQv9-AQevw-KBocRmY9A","y":"ARVM2xpy_kMNMAGkW0te7p5t1rnBfMPiLeyUCbPDvIbwXW4riXVpaMxL_-eivGXNOSBMGwrFyEklZkMT_eMcP3W6","crv":"P-521"},{"kty":"EC","kid":"Divt3ihznjyqn103YPRHurEtVV8","use":"sig","x":"nGOboXUmQxl2yXHtu89rxqxDBUDVxFfD5cToTjYCz3w","y":"aX_bEEaJd4UArqjB2wVBC3LwKHGpkGCuiYytgdIHjN8","crv":"P-256"},{"kty":"RSA","kid":"fYi11Pe9VGa_pECsGlegEq14bSA","use":"sig","n":"lFDfDve2PM4-G2AAteOd5KcBZ14FvZCuYug4-qptOR8rHN4ZOoHiIoqgCtpMOCj0N3aOpnutJunBsZ0b3HHt6YkDEsn-7kfDS6z4M1HYf4uSIn0szp0-663pPsQn5qtDIhcNNvft6B78DQYozkdkCxDuYn5T8D75kbYspA4ZDvfmYvgkEPjfv8KNeGG_1aC426ZbDGEVI13Umf0R4q51ZQW22Z4JNA30EeC3Yn87wE3-ofDlJGc92TlOsYCrJOH10d9pLs1YKx9ukec6vfD7sCxz_xx423mphPXl9SQzs81MA6fMyBDZ8NI171q_LowFgrJvgTT-9T-prAruA-NY6Q","e":"AQAB"},{"kty":"EC","kid":"qJ2VZwelis7Xwx5HL2JvaNUJFYI","use":"sig","x":"rzyyXb9ynwp45MZCR6LM5VdV7qzG83-3jPic8ezikK83oiPZdSEi2CLwlrALsWWr","y":"1KbyG2xiNdPoaKlgGp6Pd-AYLJQKqnOvIUCkvBj_SVHR9sQNWtIvowi-Gio-TFn_","crv":"P-384"},{"kty":"EC","kid":"HiCMrcQkZCIeBlI2Fx0AL-Vrj1E","use":"enc","x":"fo8jZV5shU4kNSbB9gna2-XfmHUd2GFrjw3HgeRGQ1CsAYrj6HQSzblsA94E22Il","y":"OBsyvLoFFJktGjUEK6hqJ2_7gIViwMOI9pQCOQq4m8S6vYyLx-G46CVE4IPbN-pC","crv":"P-384"},{"kty":"RSA","kid":"YaMNTwynx94W_3iOG0RYiXpNTlc","use":"enc","n":"mGwfrzYbPAlJaLukm8zVHN5pSPlaxcxQ2vDTdz-LUBUFilJ1CT3au5X23iQrMmeOcRm_BzyVJvwPaFq1oi4absNpbxcp72YGPYtXxdAVOl6sLslKazeGiTg4UKmtcTALECMeKIYqTDNRsHaznqtYkG7f3hy_RSxIL5kcKggC40YUtR_Glj4cMSjfTTDVRKbbOgPTYHN0aIlLP2B8lZ30pMT7oGN5Y26PG23Kb2QNy32I57KeE-nc0ORWBACsTsulqwT5n_-4zjFAXWQgR3dtxP5kQo_bwTjEYFG30E5BOP-8Ixy_j_X6vTfx2_M2I1PBntCMbIuLeFamOZfVgYQY6Q","e":"AQAB"},{"kty":"EC","kid":"hlENXhq_iQMlKScWmSvgCYacW3w","use":"enc","x":"3vmQR5lBRBiOhw4bNx1lfnrAEa-jsFXnEw9U6oaQ4iM","y":"-YtKcvDteD7-HgUXMWasGtFRCDWYLKyVF3BbeJj-quE","crv":"P-256"},{"kty":"EC","kid":"mzNT8qops5RAepkRhQaVmdBnEUE","use":"enc","x":"ADKcSWSjYwYIVkOsyH9s5tp-kqvu7wfFDF7A-5J6S1-V7ZAkiFGbqszyyl_6w-D-oh7wsf4xqauroqWG0tY_whRk","y":"AQtZtZIjo_3_Fr7k9kGZTTAldDCkBbBKBQCP3njUr_5s8SB6NpvK9Dqq2PbsuYzFw1D41_JPO1-ILqfvI5H-tPem","crv":"P-521"}]}
2021-01-21 15:31:31
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","kid":"9L0wcTYZyg4MVfIZ4eh9NXAJx-s","use":"sig","n":"sQJrT-2-R0CAi9-aLYM4NUVECMNEV-tBVFx_SJ2KdXnfAkAIJVW1bcBjMXtqXZZ9l6rJFsqlcNgIy8l9cpv_O-Zx7RGnzgwS8TDZhpidnaKUI52tgfxUs9CiCaor91E5EL2FGeGxABGQZKx28iZCcCpv5ca1-nyjLmdM2pRUXi1ygVYbp9eXXhqRmlVFtPHLY0FZoP2UJ5RJiLS1wxJmYyeoyc5HYbU55MbDMPDwT8S5UrwymROn0VN3H_n7WIS_D17DpPDgtXJk6i2Ib1nFMaLZfuUKS2feDeolqYMerGaY6SBdIbxH8-gobbLTwSRCG4ONwA46csQ53oLABnc-zw","e":"AQAB"},{"kty":"EC","kid":"QriKw4RH6fiUbFYjb-hTAHKuNNo","use":"sig","x":"MxKx2jj2sJClMhxS2K-THnoqmPVG5xgCyjcBTrzbCoU","y":"8GR_nTiOvZr1eA3Ql08AyfEhTgyuyAOdXKahmRrrTjg","crv":"P-256"},{"kty":"EC","kid":"YA-k4CTT3-Lm8XBisZQqXtJyq2c","use":"sig","x":"ADgkM0k87XQztrF6zLInMlSxkdzM30aV1I8NNA7ZQhE_AiKyx2MRBnqxTzoqetCli2ws73k6NfpaHPJOhN842bHK","y":"AVKwgRD0TysDMJvyz4woV4X-iuRbBMK7vjWhiT0U8HZfBqTxux6XrAvgmurvSJAv4k-b5lv3E2lIYwM0YrXUDwJn","crv":"P-521"},{"kty":"EC","kid":"h7wsd-n1EzoJKfKyN247N-aHNyg","use":"sig","x":"KWoU4JZ2MUKHTD-Q_yFK_MWYtKi5hR4ZZnAcsnOxsdNn2dKgHr9ikraoVujQsFFM","y":"SYVsYnLY8F5AIvbc-mLJG5R-DQhya5gEKjTcvChYXoH-yfUIhVY0vMM2VSa8TTZx","crv":"P-384"},{"kty":"EC","kid":"BsJf1IUZHT0xLGlMZD9hDGP5eBc","use":"sig","x":"AYtW5y1L8wE14DPgeoJ2LxcWq5tcrKQq_zu5Mg69dC3XtFCSfItICXMyJjuyN_FbxbxwVQv9-AQevw-KBocRmY9A","y":"ARVM2xpy_kMNMAGkW0te7p5t1rnBfMPiLeyUCbPDvIbwXW4riXVpaMxL_-eivGXNOSBMGwrFyEklZkMT_eMcP3W6","crv":"P-521"},{"kty":"EC","kid":"Divt3ihznjyqn103YPRHurEtVV8","use":"sig","x":"nGOboXUmQxl2yXHtu89rxqxDBUDVxFfD5cToTjYCz3w","y":"aX_bEEaJd4UArqjB2wVBC3LwKHGpkGCuiYytgdIHjN8","crv":"P-256"},{"kty":"RSA","kid":"fYi11Pe9VGa_pECsGlegEq14bSA","use":"sig","n":"lFDfDve2PM4-G2AAteOd5KcBZ14FvZCuYug4-qptOR8rHN4ZOoHiIoqgCtpMOCj0N3aOpnutJunBsZ0b3HHt6YkDEsn-7kfDS6z4M1HYf4uSIn0szp0-663pPsQn5qtDIhcNNvft6B78DQYozkdkCxDuYn5T8D75kbYspA4ZDvfmYvgkEPjfv8KNeGG_1aC426ZbDGEVI13Umf0R4q51ZQW22Z4JNA30EeC3Yn87wE3-ofDlJGc92TlOsYCrJOH10d9pLs1YKx9ukec6vfD7sCxz_xx423mphPXl9SQzs81MA6fMyBDZ8NI171q_LowFgrJvgTT-9T-prAruA-NY6Q","e":"AQAB"},{"kty":"EC","kid":"qJ2VZwelis7Xwx5HL2JvaNUJFYI","use":"sig","x":"rzyyXb9ynwp45MZCR6LM5VdV7qzG83-3jPic8ezikK83oiPZdSEi2CLwlrALsWWr","y":"1KbyG2xiNdPoaKlgGp6Pd-AYLJQKqnOvIUCkvBj_SVHR9sQNWtIvowi-Gio-TFn_","crv":"P-384"},{"kty":"EC","kid":"HiCMrcQkZCIeBlI2Fx0AL-Vrj1E","use":"enc","x":"fo8jZV5shU4kNSbB9gna2-XfmHUd2GFrjw3HgeRGQ1CsAYrj6HQSzblsA94E22Il","y":"OBsyvLoFFJktGjUEK6hqJ2_7gIViwMOI9pQCOQq4m8S6vYyLx-G46CVE4IPbN-pC","crv":"P-384"},{"kty":"RSA","kid":"YaMNTwynx94W_3iOG0RYiXpNTlc","use":"enc","n":"mGwfrzYbPAlJaLukm8zVHN5pSPlaxcxQ2vDTdz-LUBUFilJ1CT3au5X23iQrMmeOcRm_BzyVJvwPaFq1oi4absNpbxcp72YGPYtXxdAVOl6sLslKazeGiTg4UKmtcTALECMeKIYqTDNRsHaznqtYkG7f3hy_RSxIL5kcKggC40YUtR_Glj4cMSjfTTDVRKbbOgPTYHN0aIlLP2B8lZ30pMT7oGN5Y26PG23Kb2QNy32I57KeE-nc0ORWBACsTsulqwT5n_-4zjFAXWQgR3dtxP5kQo_bwTjEYFG30E5BOP-8Ixy_j_X6vTfx2_M2I1PBntCMbIuLeFamOZfVgYQY6Q","e":"AQAB"},{"kty":"EC","kid":"hlENXhq_iQMlKScWmSvgCYacW3w","use":"enc","x":"3vmQR5lBRBiOhw4bNx1lfnrAEa-jsFXnEw9U6oaQ4iM","y":"-YtKcvDteD7-HgUXMWasGtFRCDWYLKyVF3BbeJj-quE","crv":"P-256"},{"kty":"EC","kid":"mzNT8qops5RAepkRhQaVmdBnEUE","use":"enc","x":"ADKcSWSjYwYIVkOsyH9s5tp-kqvu7wfFDF7A-5J6S1-V7ZAkiFGbqszyyl_6w-D-oh7wsf4xqauroqWG0tY_whRk","y":"AQtZtZIjo_3_Fr7k9kGZTTAldDCkBbBKBQCP3njUr_5s8SB6NpvK9Dqq2PbsuYzFw1D41_JPO1-ILqfvI5H-tPem","crv":"P-521"}]}
2021-01-21 15:31:31 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "9L0wcTYZyg4MVfIZ4eh9NXAJx-s",
      "use": "sig",
      "n": "sQJrT-2-R0CAi9-aLYM4NUVECMNEV-tBVFx_SJ2KdXnfAkAIJVW1bcBjMXtqXZZ9l6rJFsqlcNgIy8l9cpv_O-Zx7RGnzgwS8TDZhpidnaKUI52tgfxUs9CiCaor91E5EL2FGeGxABGQZKx28iZCcCpv5ca1-nyjLmdM2pRUXi1ygVYbp9eXXhqRmlVFtPHLY0FZoP2UJ5RJiLS1wxJmYyeoyc5HYbU55MbDMPDwT8S5UrwymROn0VN3H_n7WIS_D17DpPDgtXJk6i2Ib1nFMaLZfuUKS2feDeolqYMerGaY6SBdIbxH8-gobbLTwSRCG4ONwA46csQ53oLABnc-zw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "QriKw4RH6fiUbFYjb-hTAHKuNNo",
      "use": "sig",
      "x": "MxKx2jj2sJClMhxS2K-THnoqmPVG5xgCyjcBTrzbCoU",
      "y": "8GR_nTiOvZr1eA3Ql08AyfEhTgyuyAOdXKahmRrrTjg",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "YA-k4CTT3-Lm8XBisZQqXtJyq2c",
      "use": "sig",
      "x": "ADgkM0k87XQztrF6zLInMlSxkdzM30aV1I8NNA7ZQhE_AiKyx2MRBnqxTzoqetCli2ws73k6NfpaHPJOhN842bHK",
      "y": "AVKwgRD0TysDMJvyz4woV4X-iuRbBMK7vjWhiT0U8HZfBqTxux6XrAvgmurvSJAv4k-b5lv3E2lIYwM0YrXUDwJn",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "h7wsd-n1EzoJKfKyN247N-aHNyg",
      "use": "sig",
      "x": "KWoU4JZ2MUKHTD-Q_yFK_MWYtKi5hR4ZZnAcsnOxsdNn2dKgHr9ikraoVujQsFFM",
      "y": "SYVsYnLY8F5AIvbc-mLJG5R-DQhya5gEKjTcvChYXoH-yfUIhVY0vMM2VSa8TTZx",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "BsJf1IUZHT0xLGlMZD9hDGP5eBc",
      "use": "sig",
      "x": "AYtW5y1L8wE14DPgeoJ2LxcWq5tcrKQq_zu5Mg69dC3XtFCSfItICXMyJjuyN_FbxbxwVQv9-AQevw-KBocRmY9A",
      "y": "ARVM2xpy_kMNMAGkW0te7p5t1rnBfMPiLeyUCbPDvIbwXW4riXVpaMxL_-eivGXNOSBMGwrFyEklZkMT_eMcP3W6",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "Divt3ihznjyqn103YPRHurEtVV8",
      "use": "sig",
      "x": "nGOboXUmQxl2yXHtu89rxqxDBUDVxFfD5cToTjYCz3w",
      "y": "aX_bEEaJd4UArqjB2wVBC3LwKHGpkGCuiYytgdIHjN8",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "fYi11Pe9VGa_pECsGlegEq14bSA",
      "use": "sig",
      "n": "lFDfDve2PM4-G2AAteOd5KcBZ14FvZCuYug4-qptOR8rHN4ZOoHiIoqgCtpMOCj0N3aOpnutJunBsZ0b3HHt6YkDEsn-7kfDS6z4M1HYf4uSIn0szp0-663pPsQn5qtDIhcNNvft6B78DQYozkdkCxDuYn5T8D75kbYspA4ZDvfmYvgkEPjfv8KNeGG_1aC426ZbDGEVI13Umf0R4q51ZQW22Z4JNA30EeC3Yn87wE3-ofDlJGc92TlOsYCrJOH10d9pLs1YKx9ukec6vfD7sCxz_xx423mphPXl9SQzs81MA6fMyBDZ8NI171q_LowFgrJvgTT-9T-prAruA-NY6Q",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "qJ2VZwelis7Xwx5HL2JvaNUJFYI",
      "use": "sig",
      "x": "rzyyXb9ynwp45MZCR6LM5VdV7qzG83-3jPic8ezikK83oiPZdSEi2CLwlrALsWWr",
      "y": "1KbyG2xiNdPoaKlgGp6Pd-AYLJQKqnOvIUCkvBj_SVHR9sQNWtIvowi-Gio-TFn_",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "HiCMrcQkZCIeBlI2Fx0AL-Vrj1E",
      "use": "enc",
      "x": "fo8jZV5shU4kNSbB9gna2-XfmHUd2GFrjw3HgeRGQ1CsAYrj6HQSzblsA94E22Il",
      "y": "OBsyvLoFFJktGjUEK6hqJ2_7gIViwMOI9pQCOQq4m8S6vYyLx-G46CVE4IPbN-pC",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "YaMNTwynx94W_3iOG0RYiXpNTlc",
      "use": "enc",
      "n": "mGwfrzYbPAlJaLukm8zVHN5pSPlaxcxQ2vDTdz-LUBUFilJ1CT3au5X23iQrMmeOcRm_BzyVJvwPaFq1oi4absNpbxcp72YGPYtXxdAVOl6sLslKazeGiTg4UKmtcTALECMeKIYqTDNRsHaznqtYkG7f3hy_RSxIL5kcKggC40YUtR_Glj4cMSjfTTDVRKbbOgPTYHN0aIlLP2B8lZ30pMT7oGN5Y26PG23Kb2QNy32I57KeE-nc0ORWBACsTsulqwT5n_-4zjFAXWQgR3dtxP5kQo_bwTjEYFG30E5BOP-8Ixy_j_X6vTfx2_M2I1PBntCMbIuLeFamOZfVgYQY6Q",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "hlENXhq_iQMlKScWmSvgCYacW3w",
      "use": "enc",
      "x": "3vmQR5lBRBiOhw4bNx1lfnrAEa-jsFXnEw9U6oaQ4iM",
      "y": "-YtKcvDteD7-HgUXMWasGtFRCDWYLKyVF3BbeJj-quE",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "mzNT8qops5RAepkRhQaVmdBnEUE",
      "use": "enc",
      "x": "ADKcSWSjYwYIVkOsyH9s5tp-kqvu7wfFDF7A-5J6S1-V7ZAkiFGbqszyyl_6w-D-oh7wsf4xqauroqWG0tY_whRk",
      "y": "AQtZtZIjo_3_Fr7k9kGZTTAldDCkBbBKBQCP3njUr_5s8SB6NpvK9Dqq2PbsuYzFw1D41_JPO1-ILqfvI5H-tPem",
      "crv": "P-521"
    }
  ]
}
2021-01-21 15:31:31 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "9L0wcTYZyg4MVfIZ4eh9NXAJx-s",
      "use": "sig",
      "n": "sQJrT-2-R0CAi9-aLYM4NUVECMNEV-tBVFx_SJ2KdXnfAkAIJVW1bcBjMXtqXZZ9l6rJFsqlcNgIy8l9cpv_O-Zx7RGnzgwS8TDZhpidnaKUI52tgfxUs9CiCaor91E5EL2FGeGxABGQZKx28iZCcCpv5ca1-nyjLmdM2pRUXi1ygVYbp9eXXhqRmlVFtPHLY0FZoP2UJ5RJiLS1wxJmYyeoyc5HYbU55MbDMPDwT8S5UrwymROn0VN3H_n7WIS_D17DpPDgtXJk6i2Ib1nFMaLZfuUKS2feDeolqYMerGaY6SBdIbxH8-gobbLTwSRCG4ONwA46csQ53oLABnc-zw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "QriKw4RH6fiUbFYjb-hTAHKuNNo",
      "use": "sig",
      "x": "MxKx2jj2sJClMhxS2K-THnoqmPVG5xgCyjcBTrzbCoU",
      "y": "8GR_nTiOvZr1eA3Ql08AyfEhTgyuyAOdXKahmRrrTjg",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "YA-k4CTT3-Lm8XBisZQqXtJyq2c",
      "use": "sig",
      "x": "ADgkM0k87XQztrF6zLInMlSxkdzM30aV1I8NNA7ZQhE_AiKyx2MRBnqxTzoqetCli2ws73k6NfpaHPJOhN842bHK",
      "y": "AVKwgRD0TysDMJvyz4woV4X-iuRbBMK7vjWhiT0U8HZfBqTxux6XrAvgmurvSJAv4k-b5lv3E2lIYwM0YrXUDwJn",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "h7wsd-n1EzoJKfKyN247N-aHNyg",
      "use": "sig",
      "x": "KWoU4JZ2MUKHTD-Q_yFK_MWYtKi5hR4ZZnAcsnOxsdNn2dKgHr9ikraoVujQsFFM",
      "y": "SYVsYnLY8F5AIvbc-mLJG5R-DQhya5gEKjTcvChYXoH-yfUIhVY0vMM2VSa8TTZx",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "BsJf1IUZHT0xLGlMZD9hDGP5eBc",
      "use": "sig",
      "x": "AYtW5y1L8wE14DPgeoJ2LxcWq5tcrKQq_zu5Mg69dC3XtFCSfItICXMyJjuyN_FbxbxwVQv9-AQevw-KBocRmY9A",
      "y": "ARVM2xpy_kMNMAGkW0te7p5t1rnBfMPiLeyUCbPDvIbwXW4riXVpaMxL_-eivGXNOSBMGwrFyEklZkMT_eMcP3W6",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "Divt3ihznjyqn103YPRHurEtVV8",
      "use": "sig",
      "x": "nGOboXUmQxl2yXHtu89rxqxDBUDVxFfD5cToTjYCz3w",
      "y": "aX_bEEaJd4UArqjB2wVBC3LwKHGpkGCuiYytgdIHjN8",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "fYi11Pe9VGa_pECsGlegEq14bSA",
      "use": "sig",
      "n": "lFDfDve2PM4-G2AAteOd5KcBZ14FvZCuYug4-qptOR8rHN4ZOoHiIoqgCtpMOCj0N3aOpnutJunBsZ0b3HHt6YkDEsn-7kfDS6z4M1HYf4uSIn0szp0-663pPsQn5qtDIhcNNvft6B78DQYozkdkCxDuYn5T8D75kbYspA4ZDvfmYvgkEPjfv8KNeGG_1aC426ZbDGEVI13Umf0R4q51ZQW22Z4JNA30EeC3Yn87wE3-ofDlJGc92TlOsYCrJOH10d9pLs1YKx9ukec6vfD7sCxz_xx423mphPXl9SQzs81MA6fMyBDZ8NI171q_LowFgrJvgTT-9T-prAruA-NY6Q",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "qJ2VZwelis7Xwx5HL2JvaNUJFYI",
      "use": "sig",
      "x": "rzyyXb9ynwp45MZCR6LM5VdV7qzG83-3jPic8ezikK83oiPZdSEi2CLwlrALsWWr",
      "y": "1KbyG2xiNdPoaKlgGp6Pd-AYLJQKqnOvIUCkvBj_SVHR9sQNWtIvowi-Gio-TFn_",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "HiCMrcQkZCIeBlI2Fx0AL-Vrj1E",
      "use": "enc",
      "x": "fo8jZV5shU4kNSbB9gna2-XfmHUd2GFrjw3HgeRGQ1CsAYrj6HQSzblsA94E22Il",
      "y": "OBsyvLoFFJktGjUEK6hqJ2_7gIViwMOI9pQCOQq4m8S6vYyLx-G46CVE4IPbN-pC",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "YaMNTwynx94W_3iOG0RYiXpNTlc",
      "use": "enc",
      "n": "mGwfrzYbPAlJaLukm8zVHN5pSPlaxcxQ2vDTdz-LUBUFilJ1CT3au5X23iQrMmeOcRm_BzyVJvwPaFq1oi4absNpbxcp72YGPYtXxdAVOl6sLslKazeGiTg4UKmtcTALECMeKIYqTDNRsHaznqtYkG7f3hy_RSxIL5kcKggC40YUtR_Glj4cMSjfTTDVRKbbOgPTYHN0aIlLP2B8lZ30pMT7oGN5Y26PG23Kb2QNy32I57KeE-nc0ORWBACsTsulqwT5n_-4zjFAXWQgR3dtxP5kQo_bwTjEYFG30E5BOP-8Ixy_j_X6vTfx2_M2I1PBntCMbIuLeFamOZfVgYQY6Q",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "hlENXhq_iQMlKScWmSvgCYacW3w",
      "use": "enc",
      "x": "3vmQR5lBRBiOhw4bNx1lfnrAEa-jsFXnEw9U6oaQ4iM",
      "y": "-YtKcvDteD7-HgUXMWasGtFRCDWYLKyVF3BbeJj-quE",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "mzNT8qops5RAepkRhQaVmdBnEUE",
      "use": "enc",
      "x": "ADKcSWSjYwYIVkOsyH9s5tp-kqvu7wfFDF7A-5J6S1-V7ZAkiFGbqszyyl_6w-D-oh7wsf4xqauroqWG0tY_whRk",
      "y": "AQtZtZIjo_3_Fr7k9kGZTTAldDCkBbBKBQCP3njUr_5s8SB6NpvK9Dqq2PbsuYzFw1D41_JPO1-ILqfvI5H-tPem",
      "crv": "P-521"
    }
  ]
}
2021-01-21 15:31:31 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-01-21 15:31:31 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2021-01-21 15:31:31 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-01-21 15:31:31 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "9L0wcTYZyg4MVfIZ4eh9NXAJx-s",
      "use": "sig",
      "n": "sQJrT-2-R0CAi9-aLYM4NUVECMNEV-tBVFx_SJ2KdXnfAkAIJVW1bcBjMXtqXZZ9l6rJFsqlcNgIy8l9cpv_O-Zx7RGnzgwS8TDZhpidnaKUI52tgfxUs9CiCaor91E5EL2FGeGxABGQZKx28iZCcCpv5ca1-nyjLmdM2pRUXi1ygVYbp9eXXhqRmlVFtPHLY0FZoP2UJ5RJiLS1wxJmYyeoyc5HYbU55MbDMPDwT8S5UrwymROn0VN3H_n7WIS_D17DpPDgtXJk6i2Ib1nFMaLZfuUKS2feDeolqYMerGaY6SBdIbxH8-gobbLTwSRCG4ONwA46csQ53oLABnc-zw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "QriKw4RH6fiUbFYjb-hTAHKuNNo",
      "use": "sig",
      "x": "MxKx2jj2sJClMhxS2K-THnoqmPVG5xgCyjcBTrzbCoU",
      "y": "8GR_nTiOvZr1eA3Ql08AyfEhTgyuyAOdXKahmRrrTjg",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "YA-k4CTT3-Lm8XBisZQqXtJyq2c",
      "use": "sig",
      "x": "ADgkM0k87XQztrF6zLInMlSxkdzM30aV1I8NNA7ZQhE_AiKyx2MRBnqxTzoqetCli2ws73k6NfpaHPJOhN842bHK",
      "y": "AVKwgRD0TysDMJvyz4woV4X-iuRbBMK7vjWhiT0U8HZfBqTxux6XrAvgmurvSJAv4k-b5lv3E2lIYwM0YrXUDwJn",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "h7wsd-n1EzoJKfKyN247N-aHNyg",
      "use": "sig",
      "x": "KWoU4JZ2MUKHTD-Q_yFK_MWYtKi5hR4ZZnAcsnOxsdNn2dKgHr9ikraoVujQsFFM",
      "y": "SYVsYnLY8F5AIvbc-mLJG5R-DQhya5gEKjTcvChYXoH-yfUIhVY0vMM2VSa8TTZx",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "BsJf1IUZHT0xLGlMZD9hDGP5eBc",
      "use": "sig",
      "x": "AYtW5y1L8wE14DPgeoJ2LxcWq5tcrKQq_zu5Mg69dC3XtFCSfItICXMyJjuyN_FbxbxwVQv9-AQevw-KBocRmY9A",
      "y": "ARVM2xpy_kMNMAGkW0te7p5t1rnBfMPiLeyUCbPDvIbwXW4riXVpaMxL_-eivGXNOSBMGwrFyEklZkMT_eMcP3W6",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "Divt3ihznjyqn103YPRHurEtVV8",
      "use": "sig",
      "x": "nGOboXUmQxl2yXHtu89rxqxDBUDVxFfD5cToTjYCz3w",
      "y": "aX_bEEaJd4UArqjB2wVBC3LwKHGpkGCuiYytgdIHjN8",
      "crv": "P-256"
    },
    {
      "kty": "RSA",
      "kid": "fYi11Pe9VGa_pECsGlegEq14bSA",
      "use": "sig",
      "n": "lFDfDve2PM4-G2AAteOd5KcBZ14FvZCuYug4-qptOR8rHN4ZOoHiIoqgCtpMOCj0N3aOpnutJunBsZ0b3HHt6YkDEsn-7kfDS6z4M1HYf4uSIn0szp0-663pPsQn5qtDIhcNNvft6B78DQYozkdkCxDuYn5T8D75kbYspA4ZDvfmYvgkEPjfv8KNeGG_1aC426ZbDGEVI13Umf0R4q51ZQW22Z4JNA30EeC3Yn87wE3-ofDlJGc92TlOsYCrJOH10d9pLs1YKx9ukec6vfD7sCxz_xx423mphPXl9SQzs81MA6fMyBDZ8NI171q_LowFgrJvgTT-9T-prAruA-NY6Q",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "qJ2VZwelis7Xwx5HL2JvaNUJFYI",
      "use": "sig",
      "x": "rzyyXb9ynwp45MZCR6LM5VdV7qzG83-3jPic8ezikK83oiPZdSEi2CLwlrALsWWr",
      "y": "1KbyG2xiNdPoaKlgGp6Pd-AYLJQKqnOvIUCkvBj_SVHR9sQNWtIvowi-Gio-TFn_",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "HiCMrcQkZCIeBlI2Fx0AL-Vrj1E",
      "use": "enc",
      "x": "fo8jZV5shU4kNSbB9gna2-XfmHUd2GFrjw3HgeRGQ1CsAYrj6HQSzblsA94E22Il",
      "y": "OBsyvLoFFJktGjUEK6hqJ2_7gIViwMOI9pQCOQq4m8S6vYyLx-G46CVE4IPbN-pC",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "YaMNTwynx94W_3iOG0RYiXpNTlc",
      "use": "enc",
      "n": "mGwfrzYbPAlJaLukm8zVHN5pSPlaxcxQ2vDTdz-LUBUFilJ1CT3au5X23iQrMmeOcRm_BzyVJvwPaFq1oi4absNpbxcp72YGPYtXxdAVOl6sLslKazeGiTg4UKmtcTALECMeKIYqTDNRsHaznqtYkG7f3hy_RSxIL5kcKggC40YUtR_Glj4cMSjfTTDVRKbbOgPTYHN0aIlLP2B8lZ30pMT7oGN5Y26PG23Kb2QNy32I57KeE-nc0ORWBACsTsulqwT5n_-4zjFAXWQgR3dtxP5kQo_bwTjEYFG30E5BOP-8Ixy_j_X6vTfx2_M2I1PBntCMbIuLeFamOZfVgYQY6Q",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "hlENXhq_iQMlKScWmSvgCYacW3w",
      "use": "enc",
      "x": "3vmQR5lBRBiOhw4bNx1lfnrAEa-jsFXnEw9U6oaQ4iM",
      "y": "-YtKcvDteD7-HgUXMWasGtFRCDWYLKyVF3BbeJj-quE",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "mzNT8qops5RAepkRhQaVmdBnEUE",
      "use": "enc",
      "x": "ADKcSWSjYwYIVkOsyH9s5tp-kqvu7wfFDF7A-5J6S1-V7ZAkiFGbqszyyl_6w-D-oh7wsf4xqauroqWG0tY_whRk",
      "y": "AQtZtZIjo_3_Fr7k9kGZTTAldDCkBbBKBQCP3njUr_5s8SB6NpvK9Dqq2PbsuYzFw1D41_JPO1-ILqfvI5H-tPem",
      "crv": "P-521"
    }
  ]
}
Verify First client: static client configuration
2021-01-21 15:31:31 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
conformance1
scope
openid test
jwks
{
  "keys": [
    {
      "kty": "EC",
      "d": "QPg1PBy12DhqqGeiuWBoIdhrfbOutP8nfSND46mdTgU",
      "use": "sig",
      "crv": "P-256",
      "kid": "2HKyz2Uc4F8hRcwyuPgA5Eg_salnEe7pfujUkvj2yew",
      "x": "NK3-2enqupOW-PGDSp2X2vrtqFIVnsVMciZdVwa7p8Q",
      "y": "Yrp1yMUYXZcWbHRzsXlH94v2SJZs0lxRbbCpvo1kcUw",
      "alg": "ES256"
    }
  ]
}
hint_type
login_hint
hint_value
patrick
2021-01-21 15:31:31 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-01-21 15:31:31 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "EC",
      "d": "QPg1PBy12DhqqGeiuWBoIdhrfbOutP8nfSND46mdTgU",
      "use": "sig",
      "crv": "P-256",
      "kid": "2HKyz2Uc4F8hRcwyuPgA5Eg_salnEe7pfujUkvj2yew",
      "x": "NK3-2enqupOW-PGDSp2X2vrtqFIVnsVMciZdVwa7p8Q",
      "y": "Yrp1yMUYXZcWbHRzsXlH94v2SJZs0lxRbbCpvo1kcUw",
      "alg": "ES256"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "2HKyz2Uc4F8hRcwyuPgA5Eg_salnEe7pfujUkvj2yew",
      "x": "NK3-2enqupOW-PGDSp2X2vrtqFIVnsVMciZdVwa7p8Q",
      "y": "Yrp1yMUYXZcWbHRzsXlH94v2SJZs0lxRbbCpvo1kcUw",
      "alg": "ES256"
    }
  ]
}
2021-01-21 15:31:31 SUCCESS
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
2021-01-21 15:31:31 SUCCESS
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
ca
MIIDYDCCAkgCCQCSYQOG55YnujANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjESMBAGA1UECAwJTWlkZGxlc2V4MQ8wDQYDVQQHDAZMb25kb24xFjAUBgNVBAoMDVBpbmcgSWRlbnRpdHkxDDAKBgNVBAsMA1JTQTEYMBYGA1UEAwwPUGluZyBVSyBEZW1vIENBMB4XDTE5MDEwNzEwNTk1NVoXDTIxMTAyNzEwNTk1NVowcjELMAkGA1UEBhMCR0IxEjAQBgNVBAgMCU1pZGRsZXNleDEPMA0GA1UEBwwGTG9uZG9uMRYwFAYDVQQKDA1QaW5nIElkZW50aXR5MQwwCgYDVQQLDANSU0ExGDAWBgNVBAMMD1BpbmcgVUsgRGVtbyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMHte483946bvKmpt1nuj1+IMWoywAGOj8UQcPDrkKuBOQL5Sv8o4ScYjjN5jgryjwRx3YMiVpCTOLB1GXrj55lZO2RRxMURwCSwaHnaLiM4cVcqSF8dq8LOlsR6bXSjJnvB2HWS1CYQaJdF21m0pxKcH9NUsdq5aYCkP52xyYel+XOxszQX1FkvrpD3VXII5xCiGGS6eEb/Mo2+nwgyN+A/M1yaeN65ah8HZFngR85oElYx7fFOkm9VubhCt2ePEvkanuWpgp5VrI2ruVQr1tvToL2ydzEmBPzGkh/UtACsucXXwSE7fvw50dgbhrXtmJnWA6hP2Wm3Ifok0ViKc0CAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAN5fn4Ke+4nhe5r+6aewM8lJ+sY25ing1ByAj7m5tJcsh68irJIjpAm3kJz20DVZ+2JguB1HZUHUTYo/WCmwMzatLN2rv9in3uRS4d0FaIfKxFHjRFs1T1APXz7lMP5t3j1/uZwbmmTGqvKTYlocLQJpqnJURiuNrxw7mZcZ3KTVx5WCdk7caYvSgUTbs9ec+JzQG0keHinrHu0mAXDxxCWXsx/rQ4PTBI808iBiHR2MbTOXONN5jid4gk9/T8KKfOFG1AbaEhsGdkChPNQO4M12Q5TWwtWutjx/PdPaGKvSoquZkXk1L4meO3ADLngHX7lb2oRkfF0wIZMNC/Eat5g==
2021-01-21 15:31:31 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-01-21 15:31:31 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-01-21 15:31:31 SUCCESS
FAPICheckKeyAlgInClientJWKs
Found a key with alg PS256 or ES256
2021-01-21 15:31:31 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "EC",
      "d": "QPg1PBy12DhqqGeiuWBoIdhrfbOutP8nfSND46mdTgU",
      "use": "sig",
      "crv": "P-256",
      "kid": "2HKyz2Uc4F8hRcwyuPgA5Eg_salnEe7pfujUkvj2yew",
      "x": "NK3-2enqupOW-PGDSp2X2vrtqFIVnsVMciZdVwa7p8Q",
      "y": "Yrp1yMUYXZcWbHRzsXlH94v2SJZs0lxRbbCpvo1kcUw",
      "alg": "ES256"
    }
  ]
}
2021-01-21 15:31:31 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2021-01-21 15:31:31 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://emea-conformance.ping-eng.com:3000/get
2021-01-21 15:31:31 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://emea-conformance.ping-eng.com:3000/get
2021-01-21 15:31:31 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "emea-conformance.ping-eng.com",
  "testPort": 3000
}
2021-01-21 15:31:31 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "emea-conformance.ping-eng.com",
  "testPort": 3000
}
accounts_request_endpoint
{
  "testHost": "emea-conformance.ping-eng.com",
  "testPort": 3000
}
2021-01-21 15:31:31
fapi-ciba-id1-ensure-authorization-request-with-binding-message-succeeds
Setup Done
Call backchannel authentication endpoint
2021-01-21 15:31:31 SUCCESS
CreateEmptyAuthorizationEndpointRequest
Created empty authorization endpoint request
2021-01-21 15:31:31 SUCCESS
AddScopeToAuthorizationEndpointRequest
Added scope of 'openid test' to authorization endpoint request
scope
openid test
2021-01-21 15:31:31 SUCCESS
AddHintToAuthorizationEndpointRequest
Added hint to authorization endpoint request
login_hint
patrick
2021-01-21 15:31:31 SUCCESS
AddBindingMessageToAuthorizationEndpointRequest
Added binding message to authorization endpoint request
binding_message
1234
2021-01-21 15:31:31 SUCCESS
AddBindingMessageToAuthorizationEndpointRequest
Added binding message to authorization endpoint request
binding_message
1234
2021-01-21 15:31:31 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "scope": "openid test",
  "login_hint": "patrick",
  "binding_message": "1234"
}
2021-01-21 15:31:31 SUCCESS
AddIatToRequestObject
Added iat to request object claims
iat
1.611243091E9
2021-01-21 15:31:31 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.611243391E9
2021-01-21 15:31:31 SUCCESS
AddNbfToRequestObject
Added nbf to request object claims
nbf
1.611243091E9
2021-01-21 15:31:31 SUCCESS
AddJtiToRequestObject
Added jti to request object claims
jti
rP7Oqa1WUoO5oDeCc3K3
2021-01-21 15:31:31 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://emea-conformance.ping-eng.com:9031
2021-01-21 15:31:31 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
conformance1
2021-01-21 15:31:31 SUCCESS
SignRequestObject
Signed the request object
claims
{"aud":"https:\/\/emea-conformance.ping-eng.com:9031","login_hint":"patrick","nbf":1611243091,"scope":"openid test","iss":"conformance1","binding_message":"1234","exp":1611243391,"iat":1611243091,"jti":"rP7Oqa1WUoO5oDeCc3K3"}
header
{"kid":"2HKyz2Uc4F8hRcwyuPgA5Eg_salnEe7pfujUkvj2yew","alg":"ES256"}
request_object
eyJraWQiOiIySEt5ejJVYzRGOGhSY3d5dVBnQTVFZ19zYWxuRWU3cGZ1alVrdmoyeWV3IiwiYWxnIjoiRVMyNTYifQ.eyJhdWQiOiJodHRwczpcL1wvZW1lYS1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImxvZ2luX2hpbnQiOiJwYXRyaWNrIiwibmJmIjoxNjExMjQzMDkxLCJzY29wZSI6Im9wZW5pZCB0ZXN0IiwiaXNzIjoiY29uZm9ybWFuY2UxIiwiYmluZGluZ19tZXNzYWdlIjoiMTIzNCIsImV4cCI6MTYxMTI0MzM5MSwiaWF0IjoxNjExMjQzMDkxLCJqdGkiOiJyUDdPcWExV1VvTzVvRGVDYzNLMyJ9.E0EJxda4O5BVt2cM8cPQREsnpKpv506spva9iKduOZU-p6X79mHQb-BqmSNihdAZVjmhrod2r2iJ3cqjcCW0pQ
key
{"kty":"EC","d":"QPg1PBy12DhqqGeiuWBoIdhrfbOutP8nfSND46mdTgU","use":"sig","crv":"P-256","kid":"2HKyz2Uc4F8hRcwyuPgA5Eg_salnEe7pfujUkvj2yew","x":"NK3-2enqupOW-PGDSp2X2vrtqFIVnsVMciZdVwa7p8Q","y":"Yrp1yMUYXZcWbHRzsXlH94v2SJZs0lxRbbCpvo1kcUw","alg":"ES256"}
2021-01-21 15:31:31 SUCCESS
CreateBackchannelAuthenticationEndpointRequest
Created backchannel authentication endpoint request
2021-01-21 15:31:31
AddRequestToBackchannelAuthenticationEndpointRequest
request
eyJraWQiOiIySEt5ejJVYzRGOGhSY3d5dVBnQTVFZ19zYWxuRWU3cGZ1alVrdmoyeWV3IiwiYWxnIjoiRVMyNTYifQ.eyJhdWQiOiJodHRwczpcL1wvZW1lYS1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImxvZ2luX2hpbnQiOiJwYXRyaWNrIiwibmJmIjoxNjExMjQzMDkxLCJzY29wZSI6Im9wZW5pZCB0ZXN0IiwiaXNzIjoiY29uZm9ybWFuY2UxIiwiYmluZGluZ19tZXNzYWdlIjoiMTIzNCIsImV4cCI6MTYxMTI0MzM5MSwiaWF0IjoxNjExMjQzMDkxLCJqdGkiOiJyUDdPcWExV1VvTzVvRGVDYzNLMyJ9.E0EJxda4O5BVt2cM8cPQREsnpKpv506spva9iKduOZU-p6X79mHQb-BqmSNihdAZVjmhrod2r2iJ3cqjcCW0pQ
2021-01-21 15:31:31 SUCCESS
EnsureServerConfigurationSupportsMTLS
Found supported MTLS method
method
tls_client_auth
2021-01-21 15:31:31
AddClientIdToBackchannelAuthenticationEndpointRequest
request
eyJraWQiOiIySEt5ejJVYzRGOGhSY3d5dVBnQTVFZ19zYWxuRWU3cGZ1alVrdmoyeWV3IiwiYWxnIjoiRVMyNTYifQ.eyJhdWQiOiJodHRwczpcL1wvZW1lYS1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImxvZ2luX2hpbnQiOiJwYXRyaWNrIiwibmJmIjoxNjExMjQzMDkxLCJzY29wZSI6Im9wZW5pZCB0ZXN0IiwiaXNzIjoiY29uZm9ybWFuY2UxIiwiYmluZGluZ19tZXNzYWdlIjoiMTIzNCIsImV4cCI6MTYxMTI0MzM5MSwiaWF0IjoxNjExMjQzMDkxLCJqdGkiOiJyUDdPcWExV1VvTzVvRGVDYzNLMyJ9.E0EJxda4O5BVt2cM8cPQREsnpKpv506spva9iKduOZU-p6X79mHQb-BqmSNihdAZVjmhrod2r2iJ3cqjcCW0pQ
client_id
conformance1
2021-01-21 15:31:31
CallBackchannelAuthenticationEndpoint
HTTP request
request_uri
https://emea-conformance.ping-eng.com:9032/as/bc-auth.ciba
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "509"
}
request_body
request=eyJraWQiOiIySEt5ejJVYzRGOGhSY3d5dVBnQTVFZ19zYWxuRWU3cGZ1alVrdmoyeWV3IiwiYWxnIjoiRVMyNTYifQ.eyJhdWQiOiJodHRwczpcL1wvZW1lYS1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImxvZ2luX2hpbnQiOiJwYXRyaWNrIiwibmJmIjoxNjExMjQzMDkxLCJzY29wZSI6Im9wZW5pZCB0ZXN0IiwiaXNzIjoiY29uZm9ybWFuY2UxIiwiYmluZGluZ19tZXNzYWdlIjoiMTIzNCIsImV4cCI6MTYxMTI0MzM5MSwiaWF0IjoxNjExMjQzMDkxLCJqdGkiOiJyUDdPcWExV1VvTzVvRGVDYzNLMyJ9.E0EJxda4O5BVt2cM8cPQREsnpKpv506spva9iKduOZU-p6X79mHQb-BqmSNihdAZVjmhrod2r2iJ3cqjcCW0pQ&client_id=conformance1
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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",
  "ca": "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\u003d\u003d"
}
2021-01-21 15:31:32 RESPONSE
CallBackchannelAuthenticationEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Thu, 21 Jan 2021 15:31:32 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003de4BEmFIJ9t64QdhAezomgl;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"auth_req_id":"aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ","interval":3,"expires_in":120}
2021-01-21 15:31:32
CallBackchannelAuthenticationEndpoint
Backchannel Authentication endpoint response
backchannel_authentication_endpoint_response
{"auth_req_id":"aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ","interval":3,"expires_in":120}
2021-01-21 15:31:32 SUCCESS
CallBackchannelAuthenticationEndpoint
Parsed backchannel authentication endpoint response
auth_req_id
aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ
interval
3
expires_in
120
2021-01-21 15:31:32 SUCCESS
CheckBackchannelAuthenticationEndpointHttpStatus200
Backchannel authentication endpoint http status code was 200
2021-01-21 15:31:32 SUCCESS
CheckBackchannelAuthenticationEndpointContentType
Backchannel authentication endpoint Content-Type: header is application/json
2021-01-21 15:31:32 SUCCESS
CheckIfBackchannelAuthenticationEndpointResponseError
No error from Backchannel authentication endpoint
2021-01-21 15:31:32 SUCCESS
ValidateAuthenticationRequestId
auth_req_id passed all validation checks
2021-01-21 15:31:32 SUCCESS
EnsureMinimumAuthenticationRequestIdLength
auth_req_id is of sufficient length
actual
464
required
128
2021-01-21 15:31:32 SUCCESS
EnsureMinimumAuthenticationRequestIdEntropy
Calculated shannon entropy seems sufficient
actual
283.98846020658186
expected
96.0
2021-01-21 15:31:32 SUCCESS
EnsureRecommendedAuthenticationRequestIdEntropy
Calculated entropy
actual
283.98846020658186
recommended
160.0
2021-01-21 15:31:32 SUCCESS
ValidateAuthenticationRequestIdExpiresIn
expires_in passed all validation checks
expires_in
120
2021-01-21 15:31:32 SUCCESS
ValidateAuthenticationRequestIdInterval
interval passed all validation checks
interval
3
Call token endpoint expecting pending
2021-01-21 15:31:32 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-01-21 15:31:32
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ
2021-01-21 15:31:32 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ
client_id
conformance1
2021-01-21 15:31:32
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://emea-conformance.ping-eng.com:9032/as/token.oauth2
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "146"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ&client_id=conformance1
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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",
  "ca": "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\u003d\u003d"
}
2021-01-21 15:31:32 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "date": "Thu, 21 Jan 2021 15:31:32 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003d3zyAekzox5AWL9Thd3dSWZ;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"error_description":"Pending user authorization","error":"authorization_pending"}
2021-01-21 15:31:32 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error_description
Pending user authorization
error
authorization_pending
2021-01-21 15:31:32 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response is pending or slow_down
2021-01-21 15:31:32 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-01-21 15:31:32 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-01-21 15:31:32 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
Pending user authorization
2021-01-21 15:31:32 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
Pending user authorization
2021-01-21 15:31:32 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-01-21 15:31:32 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Call token endpoint expecting pending (second time)
2021-01-21 15:31:37 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-01-21 15:31:37
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ
2021-01-21 15:31:37 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ
client_id
conformance1
2021-01-21 15:31:37
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://emea-conformance.ping-eng.com:9032/as/token.oauth2
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "146"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ&client_id=conformance1
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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",
  "ca": "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\u003d\u003d"
}
2021-01-21 15:31:38 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "date": "Thu, 21 Jan 2021 15:31:38 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003d6NX8vNmPDyBzlPGYqwBXCt;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"error_description":"Pending user authorization","error":"authorization_pending"}
2021-01-21 15:31:38 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error_description
Pending user authorization
error
authorization_pending
2021-01-21 15:31:38 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response is pending or slow_down
2021-01-21 15:31:38 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-01-21 15:31:38 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-01-21 15:31:38 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
Pending user authorization
2021-01-21 15:31:38 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
Pending user authorization
2021-01-21 15:31:38 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-01-21 15:31:38 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
2021-01-21 15:31:38
CallAutomatedCibaApprovalEndpoint
If your server supports automated testing, you can set 'automated_ciba_approval_url' in your configuration to a url like https://cibasim.example.com/action?token={auth_req_id}&type={action} (auth_req_id will be automatically substituted for the current auth_req_id by the conformance suite, action will be allow or deny depending on the test)
Polling token endpoint waiting for user to authenticate
2021-01-21 15:31:43 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-01-21 15:31:43
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ
2021-01-21 15:31:43 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ
client_id
conformance1
2021-01-21 15:31:43
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://emea-conformance.ping-eng.com:9032/as/token.oauth2
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "146"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ&client_id=conformance1
request_mutual_tls
{
  "cert": "MIIDkTCCAnmgAwIBAgIJAOLiBx6+gpncMA0GCSqGSIb3DQEBCwUAMHIxCzAJBgNVBAYTAkdCMRIwEAYDVQQIDAlNaWRkbGVzZXgxDzANBgNVBAcMBkxvbmRvbjEWMBQGA1UECgwNUGluZyBJZGVudGl0eTEMMAoGA1UECwwDUlNBMRgwFgYDVQQDDA9QaW5nIFVLIERlbW8gQ0EwHhcNMjAwOTIzMTQwNjU0WhcNMjIwMjA1MTQwNjU0WjBaMSQwIgYDVQQDDBttdGxzLXBvbGwtZmFwaS1jaWJhLWNsaWVudDExDTALBgNVBAsMBERlbW8xFjAUBgNVBAoMDVBpbmcgSWRlbnRpdHkxCzAJBgNVBAYTAkdCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqADFJnt3i/xbJupaTpc4P8oYrZINQ07zEhdf8Osr/+XGp/az202QtoMFyRqNcYZS9/U0ce+Vz/pcaleqUlaAVfgW2o3Dp4z1d8WjDDar86agcqwl+aI2rhKh3aQIEiOwHmaPvYlRmWZTotMdyxUvJLlMJq+m4fZ33nphW9gT+AhEM+fyegVPX+jgj8dk6CaqCcRr7050irHOWfotCZxq79PBCFi8NOKjBn/uHPibKVN+PGgptqPmkdGFrkg1+gnWjmtxROJlCjNgrRJxmgD3/DbvqvTen/aL42+JJRGA8dXwCYTgjhvdTrE9OlBiIPB+EAlYxk6g+3kMqg+cJ5WP1QIDAQABo0IwQDAJBgNVHRMEAjAAMAsGA1UdDwQEAwIF4DAmBgNVHREEHzAdghttdGxzLXBvbGwtZmFwaS1jaWJhLWNsaWVudDEwDQYJKoZIhvcNAQELBQADggEBACZ7/UyxTg6hsUEmIjJKln/USY5sLq6MsrQgaqDwNuJ2BAyyrbIhldbNKBvC+swQjfbnisVYEKmmCAABPhV58U2YaEHOxfjzmfQ55duco0P4HulMhOvA/0jd+e0GFLF7eusEE4dw/RmiYjxNUpDjF9IgybjQkYPXLw+hfyhGsoKW38H1+x6ha7VTyJKp5W9AVj8/00vNswwvv3Xjs7C2mlogCEPFLPjc7jEQ4BRzkqBqQyi6MlNdgva3C6jDkSnXksdI9dZkrb4gNhusexwkbHkyet+unXxur9evqIISJsxELCMTxMocE++7XMJsPUT5FnomlXRK0jRztTmFG9y5Fqs\u003d",
  "key": "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",
  "ca": "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\u003d\u003d"
}
2021-01-21 15:31:43 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "date": "Thu, 21 Jan 2021 15:31:43 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dPhdecWszr9YzkZyn93Yw2H;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"error_description":"Pending user authorization","error":"authorization_pending"}
2021-01-21 15:31:43 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error_description
Pending user authorization
error
authorization_pending
2021-01-21 15:31:43 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response is pending or slow_down
2021-01-21 15:31:43 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-01-21 15:31:43 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-01-21 15:31:43 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
Pending user authorization
2021-01-21 15:31:43 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
Pending user authorization
2021-01-21 15:31:43 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-01-21 15:31:43 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Polling token endpoint waiting for user to authenticate
2021-01-21 15:31:50 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-01-21 15:31:50
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ
2021-01-21 15:31:50 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ
client_id
conformance1
2021-01-21 15:31:50
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://emea-conformance.ping-eng.com:9032/as/token.oauth2
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "146"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=aAcdGO1Trya5Qpxhff5YrQ7l-a0G9ABgCZ7MnCY7P8wdrqQrdUlZYuTBAQ&client_id=conformance1
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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",
  "ca": "MIIDYDCCAkgCCQCSYQOG55YnujANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjESMBAGA1UECAwJTWlkZGxlc2V4MQ8wDQYDVQQHDAZMb25kb24xFjAUBgNVBAoMDVBpbmcgSWRlbnRpdHkxDDAKBgNVBAsMA1JTQTEYMBYGA1UEAwwPUGluZyBVSyBEZW1vIENBMB4XDTE5MDEwNzEwNTk1NVoXDTIxMTAyNzEwNTk1NVowcjELMAkGA1UEBhMCR0IxEjAQBgNVBAgMCU1pZGRsZXNleDEPMA0GA1UEBwwGTG9uZG9uMRYwFAYDVQQKDA1QaW5nIElkZW50aXR5MQwwCgYDVQQLDANSU0ExGDAWBgNVBAMMD1BpbmcgVUsgRGVtbyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMHte483946bvKmpt1nuj1+IMWoywAGOj8UQcPDrkKuBOQL5Sv8o4ScYjjN5jgryjwRx3YMiVpCTOLB1GXrj55lZO2RRxMURwCSwaHnaLiM4cVcqSF8dq8LOlsR6bXSjJnvB2HWS1CYQaJdF21m0pxKcH9NUsdq5aYCkP52xyYel+XOxszQX1FkvrpD3VXII5xCiGGS6eEb/Mo2+nwgyN+A/M1yaeN65ah8HZFngR85oElYx7fFOkm9VubhCt2ePEvkanuWpgp5VrI2ruVQr1tvToL2ydzEmBPzGkh/UtACsucXXwSE7fvw50dgbhrXtmJnWA6hP2Wm3Ifok0ViKc0CAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAN5fn4Ke+4nhe5r+6aewM8lJ+sY25ing1ByAj7m5tJcsh68irJIjpAm3kJz20DVZ+2JguB1HZUHUTYo/WCmwMzatLN2rv9in3uRS4d0FaIfKxFHjRFs1T1APXz7lMP5t3j1/uZwbmmTGqvKTYlocLQJpqnJURiuNrxw7mZcZ3KTVx5WCdk7caYvSgUTbs9ec+JzQG0keHinrHu0mAXDxxCWXsx/rQ4PTBI808iBiHR2MbTOXONN5jid4gk9/T8KKfOFG1AbaEhsGdkChPNQO4M12Q5TWwtWutjx/PdPaGKvSoquZkXk1L4meO3ADLngHX7lb2oRkfF0wIZMNC/Eat5g\u003d\u003d"
}
2021-01-21 15:31:51 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Thu, 21 Jan 2021 15:31:51 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dNSUzxo23p0Hj3ASN4dpnf3;Path\u003d/;Secure;HttpOnly;SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"access_token":"eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIiwicGkuYXRtIjoicTVqdSJ9.eyJzY29wZSI6Im9wZW5pZCB0ZXN0IiwiY2xpZW50X2lkIjoiY29uZm9ybWFuY2UxIiwic3ViIjoicGF0cmljayIsImNuZiI6eyJ4NXQjUzI1NiI6Ilk3UFRxeE9rZzhjY2xrTm5MaEJsYURzZzNfbTAwMkF2bkc4c2VGQ3c2OTAifSwiZXhwIjoxNjExMjUwMzExfQ.g0-khWXbvV1sMZknyhyHrmpn8rKDM2QnbSnH8whDVnYRi_m9BVEicw8sZxJeFP5gGjrLkqXVlz2g7iywHyYiWz45L9qnZTyKwj1fd97RRkvWHESCGMrnXfWpRL7VL_QsRtEKgZLCfmZ-XGQLoIz_Hi5aKeIGOIDfEQHrAGLCCf1W7pYE-dIo1H5OaLC9ecHaYOS5LLafHUY_Lq2T-fCkNgYIkVS6k_8BTbzGj7SaRAsHsrKxPVc0V2_0h0hM8EcNGNE1L692FL7PvGR7EKngZ3t5bE4TzNA7Jd9z5nu0crEr_HvroLvhGko5y770GvmP6G2IWM-vGA3j2POLokd8Ng","refresh_token":"PpIVrRnDfxBBQ2gzgQXF1sBisBlk4c6tw0eemq9scH","scope":"openid test","id_token":"eyJhbGciOiJFUzI1NiIsImtpZCI6IkRpdnQzaWh6bmp5cW4xMDNZUFJIdXJFdFZWOCJ9.eyJzdWIiOiJwYXRyaWNrIiwiYXVkIjoiY29uZm9ybWFuY2UxIiwianRpIjoieWxEaWdJekNPMHFoeXNDaDZFN284diIsImlzcyI6Imh0dHBzOi8vZW1lYS1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTYxMTI0MzExMSwiZXhwIjoxNjExMjQzNDExfQ.U7mL73gBoGL1JooojaUCVB6DUgQZ1ZPa-TBak_ushxixBTu2Suq3eVE5sxOgWRn_els5pTbdi2cdFNNB0k8mYg","token_type":"Bearer","expires_in":7199}
2021-01-21 15:31:51 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
access_token
eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIiwicGkuYXRtIjoicTVqdSJ9.eyJzY29wZSI6Im9wZW5pZCB0ZXN0IiwiY2xpZW50X2lkIjoiY29uZm9ybWFuY2UxIiwic3ViIjoicGF0cmljayIsImNuZiI6eyJ4NXQjUzI1NiI6Ilk3UFRxeE9rZzhjY2xrTm5MaEJsYURzZzNfbTAwMkF2bkc4c2VGQ3c2OTAifSwiZXhwIjoxNjExMjUwMzExfQ.g0-khWXbvV1sMZknyhyHrmpn8rKDM2QnbSnH8whDVnYRi_m9BVEicw8sZxJeFP5gGjrLkqXVlz2g7iywHyYiWz45L9qnZTyKwj1fd97RRkvWHESCGMrnXfWpRL7VL_QsRtEKgZLCfmZ-XGQLoIz_Hi5aKeIGOIDfEQHrAGLCCf1W7pYE-dIo1H5OaLC9ecHaYOS5LLafHUY_Lq2T-fCkNgYIkVS6k_8BTbzGj7SaRAsHsrKxPVc0V2_0h0hM8EcNGNE1L692FL7PvGR7EKngZ3t5bE4TzNA7Jd9z5nu0crEr_HvroLvhGko5y770GvmP6G2IWM-vGA3j2POLokd8Ng
refresh_token
PpIVrRnDfxBBQ2gzgQXF1sBisBlk4c6tw0eemq9scH
scope
openid test
id_token
eyJhbGciOiJFUzI1NiIsImtpZCI6IkRpdnQzaWh6bmp5cW4xMDNZUFJIdXJFdFZWOCJ9.eyJzdWIiOiJwYXRyaWNrIiwiYXVkIjoiY29uZm9ybWFuY2UxIiwianRpIjoieWxEaWdJekNPMHFoeXNDaDZFN284diIsImlzcyI6Imh0dHBzOi8vZW1lYS1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTYxMTI0MzExMSwiZXhwIjoxNjExMjQzNDExfQ.U7mL73gBoGL1JooojaUCVB6DUgQZ1ZPa-TBak_ushxixBTu2Suq3eVE5sxOgWRn_els5pTbdi2cdFNNB0k8mYg
token_type
Bearer
expires_in
7199
2021-01-21 15:31:51 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response
2021-01-21 15:31:51 SUCCESS
CheckTokenEndpointHttpStatus200
Token endpoint http status code was 200
2021-01-21 15:31:51 SUCCESS
CheckTokenEndpointCacheHeaders
'pragma' and 'cache-control' headers in token endpoint response contain expected values.
cache_control_header
no-cache, no-store
pragma_header
no-cache
2021-01-21 15:31:51 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2021-01-21 15:31:51 SUCCESS
CheckForAccessTokenValue
Found an access token
access_token
eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIiwicGkuYXRtIjoicTVqdSJ9.eyJzY29wZSI6Im9wZW5pZCB0ZXN0IiwiY2xpZW50X2lkIjoiY29uZm9ybWFuY2UxIiwic3ViIjoicGF0cmljayIsImNuZiI6eyJ4NXQjUzI1NiI6Ilk3UFRxeE9rZzhjY2xrTm5MaEJsYURzZzNfbTAwMkF2bkc4c2VGQ3c2OTAifSwiZXhwIjoxNjExMjUwMzExfQ.g0-khWXbvV1sMZknyhyHrmpn8rKDM2QnbSnH8whDVnYRi_m9BVEicw8sZxJeFP5gGjrLkqXVlz2g7iywHyYiWz45L9qnZTyKwj1fd97RRkvWHESCGMrnXfWpRL7VL_QsRtEKgZLCfmZ-XGQLoIz_Hi5aKeIGOIDfEQHrAGLCCf1W7pYE-dIo1H5OaLC9ecHaYOS5LLafHUY_Lq2T-fCkNgYIkVS6k_8BTbzGj7SaRAsHsrKxPVc0V2_0h0hM8EcNGNE1L692FL7PvGR7EKngZ3t5bE4TzNA7Jd9z5nu0crEr_HvroLvhGko5y770GvmP6G2IWM-vGA3j2POLokd8Ng
2021-01-21 15:31:51 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIiwicGkuYXRtIjoicTVqdSJ9.eyJzY29wZSI6Im9wZW5pZCB0ZXN0IiwiY2xpZW50X2lkIjoiY29uZm9ybWFuY2UxIiwic3ViIjoicGF0cmljayIsImNuZiI6eyJ4NXQjUzI1NiI6Ilk3UFRxeE9rZzhjY2xrTm5MaEJsYURzZzNfbTAwMkF2bkc4c2VGQ3c2OTAifSwiZXhwIjoxNjExMjUwMzExfQ.g0-khWXbvV1sMZknyhyHrmpn8rKDM2QnbSnH8whDVnYRi_m9BVEicw8sZxJeFP5gGjrLkqXVlz2g7iywHyYiWz45L9qnZTyKwj1fd97RRkvWHESCGMrnXfWpRL7VL_QsRtEKgZLCfmZ-XGQLoIz_Hi5aKeIGOIDfEQHrAGLCCf1W7pYE-dIo1H5OaLC9ecHaYOS5LLafHUY_Lq2T-fCkNgYIkVS6k_8BTbzGj7SaRAsHsrKxPVc0V2_0h0hM8EcNGNE1L692FL7PvGR7EKngZ3t5bE4TzNA7Jd9z5nu0crEr_HvroLvhGko5y770GvmP6G2IWM-vGA3j2POLokd8Ng
type
Bearer
2021-01-21 15:31:51 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
7199
2021-01-21 15:31:51 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
7199
2021-01-21 15:31:51 SUCCESS
CheckForRefreshTokenValue
Found a refresh token
refresh_token
PpIVrRnDfxBBQ2gzgQXF1sBisBlk4c6tw0eemq9scH
2021-01-21 15:31:51 SUCCESS
EnsureMinimumRefreshTokenLength
Refresh token is of sufficient length
actual
336
required
128
2021-01-21 15:31:51 SUCCESS
EnsureMinimumRefreshTokenEntropy
Calculated shannon entropy seems sufficient
actual
205.72244425454454
expected
96.0
2021-01-21 15:31:51 SUCCESS
EnsureMinimumAccessTokenLength
Access token is of sufficient length
actual
4784
required
128
2021-01-21 15:31:51 SUCCESS
EnsureMinimumAccessTokenEntropy
Calculated shannon entropy seems sufficient
actual
3511.0394943959523
expected
96.0
2021-01-21 15:31:51 SUCCESS
ExtractIdTokenFromTokenResponse
Found and parsed the id_token from token_endpoint_response
value
eyJhbGciOiJFUzI1NiIsImtpZCI6IkRpdnQzaWh6bmp5cW4xMDNZUFJIdXJFdFZWOCJ9.eyJzdWIiOiJwYXRyaWNrIiwiYXVkIjoiY29uZm9ybWFuY2UxIiwianRpIjoieWxEaWdJekNPMHFoeXNDaDZFN284diIsImlzcyI6Imh0dHBzOi8vZW1lYS1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTYxMTI0MzExMSwiZXhwIjoxNjExMjQzNDExfQ.U7mL73gBoGL1JooojaUCVB6DUgQZ1ZPa-TBak_ushxixBTu2Suq3eVE5sxOgWRn_els5pTbdi2cdFNNB0k8mYg
header
{
  "kid": "Divt3ihznjyqn103YPRHurEtVV8",
  "alg": "ES256"
}
claims
{
  "sub": "patrick",
  "aud": "conformance1",
  "iss": "https://emea-conformance.ping-eng.com:9031",
  "exp": 1611243411,
  "iat": 1611243111,
  "jti": "ylDigIzCO0qhysCh6E7o8v"
}
2021-01-21 15:31:51 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-01-21 15:31:51 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
Divt3ihznjyqn103YPRHurEtVV8
2021-01-21 15:31:51 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJFUzI1NiIsImtpZCI6IkRpdnQzaWh6bmp5cW4xMDNZUFJIdXJFdFZWOCJ9.eyJzdWIiOiJwYXRyaWNrIiwiYXVkIjoiY29uZm9ybWFuY2UxIiwianRpIjoieWxEaWdJekNPMHFoeXNDaDZFN284diIsImlzcyI6Imh0dHBzOi8vZW1lYS1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTYxMTI0MzExMSwiZXhwIjoxNjExMjQzNDExfQ.U7mL73gBoGL1JooojaUCVB6DUgQZ1ZPa-TBak_ushxixBTu2Suq3eVE5sxOgWRn_els5pTbdi2cdFNNB0k8mYg
2021-01-21 15:31:51 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJFUzI1NiIsImtpZCI6IkRpdnQzaWh6bmp5cW4xMDNZUFJIdXJFdFZWOCJ9.eyJzdWIiOiJwYXRyaWNrIiwiYXVkIjoiY29uZm9ybWFuY2UxIiwianRpIjoieWxEaWdJekNPMHFoeXNDaDZFN284diIsImlzcyI6Imh0dHBzOi8vZW1lYS1jb25mb3JtYW5jZS5waW5nLWVuZy5jb206OTAzMSIsImlhdCI6MTYxMTI0MzExMSwiZXhwIjoxNjExMjQzNDExfQ.U7mL73gBoGL1JooojaUCVB6DUgQZ1ZPa-TBak_ushxixBTu2Suq3eVE5sxOgWRn_els5pTbdi2cdFNNB0k8mYg
2021-01-21 15:31:51 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
patrick
2021-01-21 15:31:51 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
alg
ES256
2021-01-21 15:31:51 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-01-21 15:31:51 INFO
FAPIValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-01-21 15:31:51 INFO
FAPICIBAValidateIdTokenAuthRequestIdClaims
Skipped evaluation due to missing required element: id_token claims.urn:openid:params:jwt:claim:auth_req_id
path
claims.urn:openid:params:jwt:claim:auth_req_id
mapped
object
id_token
2021-01-21 15:31:51 SUCCESS
ValidateIdTokenNotIncludeCHashAndSHash
id_token claims correctly does not contain 'c_hash' and 's_hash'
claims
{
  "sub": "patrick",
  "aud": "conformance1",
  "iss": "https://emea-conformance.ping-eng.com:9031",
  "exp": 1611243411,
  "iat": 1611243111,
  "jti": "ylDigIzCO0qhysCh6E7o8v"
}
2021-01-21 15:31:51 INFO
ExtractAtHash
Couldn't find at_hash in ID token
2021-01-21 15:31:51 INFO
ExtractRtHash
Couldn't find urn:openid:params:jwt:claim:rt_hash claim in the ID token
2021-01-21 15:31:51 INFO
FAPICIBAValidateRtHash
Skipped evaluation due to missing required object: rt_hash
expected
rt_hash
mapped
2021-01-21 15:31:51 INFO
ValidateAtHash
Skipped evaluation due to missing required object: at_hash
expected
at_hash
mapped
Resource server endpoint tests
2021-01-21 15:31:51
CreateEmptyResourceEndpointRequestHeaders
Created empty headers
resource_endpoint_request_headers
{}
2021-01-21 15:31:51 SUCCESS
AddFAPIAuthDateToResourceEndpointRequest
Added x-fapi-auth-date to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Thu, 21 Jan 2021 15:31:51 GMT"
}
2021-01-21 15:31:51
CreateRandomFAPIInteractionId
Created interaction ID
fapi_interaction_id
57c5a00f-8e32-4981-aae2-5bb075d595f9
2021-01-21 15:31:51
AddFAPIInteractionIdToResourceEndpointRequest
Condition ran but did not log anything
2021-01-21 15:31:51
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP request
request_uri
https://emea-conformance.ping-eng.com:3000/get
request_method
GET
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "x-fapi-auth-date": "Thu, 21 Jan 2021 15:31:51 GMT",
  "x-fapi-interaction-id": "57c5a00f-8e32-4981-aae2-5bb075d595f9",
  "authorization": "Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIiwicGkuYXRtIjoicTVqdSJ9.eyJzY29wZSI6Im9wZW5pZCB0ZXN0IiwiY2xpZW50X2lkIjoiY29uZm9ybWFuY2UxIiwic3ViIjoicGF0cmljayIsImNuZiI6eyJ4NXQjUzI1NiI6Ilk3UFRxeE9rZzhjY2xrTm5MaEJsYURzZzNfbTAwMkF2bkc4c2VGQ3c2OTAifSwiZXhwIjoxNjExMjUwMzExfQ.g0-khWXbvV1sMZknyhyHrmpn8rKDM2QnbSnH8whDVnYRi_m9BVEicw8sZxJeFP5gGjrLkqXVlz2g7iywHyYiWz45L9qnZTyKwj1fd97RRkvWHESCGMrnXfWpRL7VL_QsRtEKgZLCfmZ-XGQLoIz_Hi5aKeIGOIDfEQHrAGLCCf1W7pYE-dIo1H5OaLC9ecHaYOS5LLafHUY_Lq2T-fCkNgYIkVS6k_8BTbzGj7SaRAsHsrKxPVc0V2_0h0hM8EcNGNE1L692FL7PvGR7EKngZ3t5bE4TzNA7Jd9z5nu0crEr_HvroLvhGko5y770GvmP6G2IWM-vGA3j2POLokd8Ng",
  "accept-charset": "utf-8",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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",
  "ca": "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\u003d\u003d"
}
2021-01-21 15:31:52 RESPONSE
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Thu, 21 Jan 2021 15:31:52 GMT",
  "content-type": "application/json",
  "content-length": "1190",
  "server": "gunicorn/19.9.0",
  "access-control-allow-origin": "*",
  "access-control-allow-credentials": "true",
  "x-fapi-interaction-id": "57c5a00f-8e32-4981-aae2-5bb075d595f9"
}
response_body
{
  "args": {}, 
  "headers": {
    "Accept": "application/json;charset=UTF-8", 
    "Accept-Charset": "utf-8", 
    "Accept-Encoding": "gzip,deflate", 
    "Authorization": "Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIiwicGkuYXRtIjoicTVqdSJ9.eyJzY29wZSI6Im9wZW5pZCB0ZXN0IiwiY2xpZW50X2lkIjoiY29uZm9ybWFuY2UxIiwic3ViIjoicGF0cmljayIsImNuZiI6eyJ4NXQjUzI1NiI6Ilk3UFRxeE9rZzhjY2xrTm5MaEJsYURzZzNfbTAwMkF2bkc4c2VGQ3c2OTAifSwiZXhwIjoxNjExMjUwMzExfQ.g0-khWXbvV1sMZknyhyHrmpn8rKDM2QnbSnH8whDVnYRi_m9BVEicw8sZxJeFP5gGjrLkqXVlz2g7iywHyYiWz45L9qnZTyKwj1fd97RRkvWHESCGMrnXfWpRL7VL_QsRtEKgZLCfmZ-XGQLoIz_Hi5aKeIGOIDfEQHrAGLCCf1W7pYE-dIo1H5OaLC9ecHaYOS5LLafHUY_Lq2T-fCkNgYIkVS6k_8BTbzGj7SaRAsHsrKxPVc0V2_0h0hM8EcNGNE1L692FL7PvGR7EKngZ3t5bE4TzNA7Jd9z5nu0crEr_HvroLvhGko5y770GvmP6G2IWM-vGA3j2POLokd8Ng", 
    "Host": "emea-conformance.ping-eng.com", 
    "User-Agent": "Apache-HttpClient/4.5.5 (Java/11.0.9.1)", 
    "X-Amzn-Trace-Id": "Root=1-60099e68-5a2b2c221636a2f40dca971d", 
    "X-Fapi-Auth-Date": "Thu, 21 Jan 2021 15:31:51 GMT", 
    "X-Fapi-Interaction-Id": "57c5a00f-8e32-4981-aae2-5bb075d595f9"
  }, 
  "origin": "35.185.61.217, 54.74.38.30", 
  "url": "https://emea-conformance.ping-eng.com/get"
}
2021-01-21 15:31:52 SUCCESS
CallProtectedResourceWithBearerTokenAndCustomHeaders
Got a response from the resource endpoint
headers
{
  "date": "Thu, 21 Jan 2021 15:31:52 GMT",
  "content-type": "application/json",
  "content-length": "1190",
  "server": "gunicorn/19.9.0",
  "access-control-allow-origin": "*",
  "access-control-allow-credentials": "true",
  "x-fapi-interaction-id": "57c5a00f-8e32-4981-aae2-5bb075d595f9"
}
status_code
{
  "code": 200
}
body
{
  "args": {}, 
  "headers": {
    "Accept": "application/json;charset=UTF-8", 
    "Accept-Charset": "utf-8", 
    "Accept-Encoding": "gzip,deflate", 
    "Authorization": "Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6ImsxIiwicGkuYXRtIjoicTVqdSJ9.eyJzY29wZSI6Im9wZW5pZCB0ZXN0IiwiY2xpZW50X2lkIjoiY29uZm9ybWFuY2UxIiwic3ViIjoicGF0cmljayIsImNuZiI6eyJ4NXQjUzI1NiI6Ilk3UFRxeE9rZzhjY2xrTm5MaEJsYURzZzNfbTAwMkF2bkc4c2VGQ3c2OTAifSwiZXhwIjoxNjExMjUwMzExfQ.g0-khWXbvV1sMZknyhyHrmpn8rKDM2QnbSnH8whDVnYRi_m9BVEicw8sZxJeFP5gGjrLkqXVlz2g7iywHyYiWz45L9qnZTyKwj1fd97RRkvWHESCGMrnXfWpRL7VL_QsRtEKgZLCfmZ-XGQLoIz_Hi5aKeIGOIDfEQHrAGLCCf1W7pYE-dIo1H5OaLC9ecHaYOS5LLafHUY_Lq2T-fCkNgYIkVS6k_8BTbzGj7SaRAsHsrKxPVc0V2_0h0hM8EcNGNE1L692FL7PvGR7EKngZ3t5bE4TzNA7Jd9z5nu0crEr_HvroLvhGko5y770GvmP6G2IWM-vGA3j2POLokd8Ng", 
    "Host": "emea-conformance.ping-eng.com", 
    "User-Agent": "Apache-HttpClient/4.5.5 (Java/11.0.9.1)", 
    "X-Amzn-Trace-Id": "Root=1-60099e68-5a2b2c221636a2f40dca971d", 
    "X-Fapi-Auth-Date": "Thu, 21 Jan 2021 15:31:51 GMT", 
    "X-Fapi-Interaction-Id": "57c5a00f-8e32-4981-aae2-5bb075d595f9"
  }, 
  "origin": "35.185.61.217, 54.74.38.30", 
  "url": "https://emea-conformance.ping-eng.com/get"
}
2021-01-21 15:31:52 SUCCESS
CheckForDateHeaderInResourceResponse
Date header present and validated
date
Thu, 21 Jan 2021 15:31:52 GMT
skew
606
2021-01-21 15:31:52 SUCCESS
CheckForFAPIInteractionIdInResourceResponse
Found x-fapi-interaction-id
interaction_id
57c5a00f-8e32-4981-aae2-5bb075d595f9
2021-01-21 15:31:52 SUCCESS
EnsureMatchingFAPIInteractionId
Interaction ID matched
fapi_interaction_id
57c5a00f-8e32-4981-aae2-5bb075d595f9
2021-01-21 15:31:52 SUCCESS
EnsureResourceResponseReturnedJsonContentType
Response content type is JSON
content_type
application/json
2021-01-21 15:31:52 FINISHED
fapi-ciba-id1-ensure-authorization-request-with-binding-message-succeeds
Test has run to completion
testmodule_result
PASSED
Unregister dynamically registered client
2021-01-21 15:31:52 INFO
UnregisterDynamicallyRegisteredClient
Skipped evaluation due to missing required string: registration_client_uri
expected
registration_client_uri
2021-01-21 15:31:56
TEST-RUNNER
Alias has now been claimed by another test
alias
roboot-fapi-ciba-poll-mtls-v1-final
new_test_id
2G29kyatb2RIrTD
Test Results