Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-05-17 15:39:50 INFO
TEST-RUNNER
Test instance KVdZGOvzAmcvUup created
baseUrl
https://www.certification.openid.net/test/a/fintech
variant
{
  "client_auth_type": "mtls",
  "ciba_mode": "poll",
  "fapi_profile": "plain_fapi",
  "client_registration": "static_client"
}
alias
fintech
description
CIBA
planId
qTC63TUofVkTe
config
{
  "browser": [
    {
      "match": "https://{CURITY_HOST_FROM_DOCKER}:{CURITY_PORT}/dev/oauth/authorize*",
      "tasks": [
        {
          "task": "submit consent",
          "match": "https://{CURITY_HOST_FROM_DOCKER}:{CURITY_PORT}/dev/oauth/authorize*",
          "optional": true,
          "commands": [
            [
              "click",
              "name",
              "submit_consent"
            ]
          ]
        },
        {
          "task": "Complete with redirect to RP",
          "match": "https://{FAPI_HOST}:{FAPI_PORT}*"
        }
      ]
    }
  ],
  "server": {
    "discoveryUrl": "https://oidc-test.curity.io/dev/oauth/anonymous/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "client-one",
    "client_secret": "0ne!Secret",
    "scope": "openid email address phone profile",
    "jwks": {
      "keys": [
        {
          "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q",
          "kty": "RSA",
          "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ",
          "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE",
          "e": "AQAB",
          "kid": "10001",
          "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA",
          "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ",
          "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ",
          "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE",
          "alg": "PS256"
        }
      ]
    },
    "hint_type": "login_hint",
    "hint_value": "larsdoe"
  },
  "tls": {
    "testHost": "{CURITY_HOST_FROM_DOCKER}",
    "testPort": "{CURITY_PORT}"
  },
  "alias": "fintech",
  "resource": {
    "resourceUrl": "https://oidc-test.curity.io:7777/fapi/rs",
    "institution_id": "foobar"
  },
  "client2": {
    "client_id": "client-two",
    "client_secret": "sEcrEt@3wo",
    "scope": "openid",
    "client_secret_jwt_alg": "RS256",
    "jwks": {
      "keys": [
        {
          "kid": "foo",
          "p": "-YTSnw-kdbuSWDG3LbFL7oYYkBsMTEbOE8ZhRQogy5lPVUiI-EJ0pQenvjVIlFEElo0liY2POGsDWu67qBdp6gwITYMgkxg4YLvvhe2mGpBL7OfULYUIJgQ-ZVGc_wKpjXzbx6An4EeS7GNXAoMMG1KPTv-iNs4jSQuDJBvQKo4MKLrBBdEXMYO4gMZMJDs2Rog_AKyAoR912U1Ad5U6HlkHxsGlxG-3_kb7bFHCtOaF5XRMI6Pqyfzf7t5XByz0spTqhTRA45LH4TOArGXFWm1_GB6uj-K7s8NkL5VmUC-jZeGxGFthSiQHjSGWNvgM-Ors_lUIVhf-EciLdOtd_Q",
          "kty": "RSA",
          "q": "4RuJTEJMhsi5jux5wZ_zvuFJiXgA51SujdFE0Gy_f8czCg15Csfqa5Ubew5aVA8HHUoteyVkui3jkp4UQH2zhwUbrY5NF81aB_jw-n7cu5MvJywe9QJ0x7x8Ku0trYruFj6jULLJGR_jbQh_8mNxviwlrm6pBvl9aLXLBP_TKXt9ir73WNcAEh3EJ26FJPr6AY4rWdapZhZigleVmA81967RoYWJeG1pLdDp2L7SPgaxhirvYXwsOgJc8iziEJ1QBBpFYvaBNWTTrgPMi6Mmcc8UqFE1GBHN0qf3ceTUYv-YsjZrzU2pgr5sAaguigZxtuQ-PPL0lFUdRJV7zQsT-w",
          "d": "LX9UHpMiMTUtzh2VP1wgf93xjaYEm6qTwOZQGl_hfwlO0rfF4u5L1RO_JPviFnkA7JRIqZXSLON17szVRLfbhe-EQkoJA6CIUKrpmgKSL6f0p1mCt1oC-Tafvw529IfWtupWcOcSZsk0B8WJ-hOM6zfpyzuua1hKHZ7HdTIWPK1_LCBmBLfDbPR7fnDP987EgqlIfgt4poxXRUPU5997IUPu52-82RUjUlTYzh8gjHLXme9f6n0cmyL-IRwiA-mxBlp0w5Xuwy281AXQFmnetcuMja9I5_Pwf6wHw2XNLp8CHGXFPyI0VJUw-tatkLD7Zk1WM7oXdFHzg1LY7_J4XtIQHYgREzWxc7M8SGSvy-HTz19vaztOT9OOfSUyBT0cbYzUAptwVEQsUnahxloT3eK8C-oZTjWd1AZD_X4rgQKdqQyuex5p35volI3CpIrizLc6a5ljF0HM832mSW4W5SUcd2oyr3Fd41RBaoIj7wQFKPxPsnF3VBeHVAdgUw8FNerob3mmRBIL12upK_iY_tv7TONBJXRx8dHonKt0ukoxW0VPmjlorGvH_GMX7HtpY9YHvGZXPsgVnMJHxmYz7J6jBGnaczlYgPjOEgsUa2mGH40-ZTF1kcWG8VJOYnnGdAItrPG1GBt3yOcdIb1BiYNC4LJdZQXsvFS-lasEohE",
          "e": "AQAB",
          "qi": "GxvAPQ5BUOcVWxj_OJmV803BhlJreMOlXAIHSi4RYWkF2kI7uv3ALxFkPLPoadX-TAahyyv_yIzYIPKriFEB-4wHTSQRg3FZfFKV-uCrIQr3teoRm9IqV9g3U2l-Fo25s4aGMOTuahesoV2vj8fEEd6xiR83nf7sppWino7PaQ-3nMkGrhQbC7TlP016JLoBS3OQPi1NXiRHnVpaz7NuUDDxSFHbH-CayTn_ByiWpi6KbAgM4J63-flYF_F6ejWr2x4MWk2ASWWRUMgag96h9c3fEUVkBIKzZm9oVEP41JfnxodvREgqXPw4JRI8ylPNVzQ8ZReWCfx0UcWELCgI9w",
          "dp": "ypMqSFbzx13Ef3PFawRRSFJ4KK68-kRV1LoviFSjsYhDX1LnWN7jQoSHjCZISZnJJs1rF1TlXQGMlMvTcLGpnImuR_fYf3OfefG6kboSK-jQq4K_wUELD4pMegebdXHc4_DlohmFplGVl_NC1dg9AQWzMYjbUrFi9k-xZaRrCdGPT5XnVeiecuWk6m-Tq6qi8vp0ZACo4abgD87nMu7lY3QWmyfmhCfLclaAkz2B3Up2lIYptpnC6cAysgSzFTFLbJz4FbMJp3koa85bfhuV8UeKcrOeN1T13QkaEoOxsBItD27_T24I-59qvgrxoKkcJw7b39R7UyJhdGCj0AWypQ",
          "dq": "iGIAix1X9AlEsxz-n5rjOHCR9yGnmoApyW5SfNyGIUp019BV13xLwKZ0IdgOTgNU0iAQ8h0zq8EFsdzodDI0RMeJf1tJxfP6af4fMgUOgu6nkNogX1z_l8vQhslv9UbI_N0yYUAQqpIxXevaaOZrEUb6BXayHbGmk3wg5oSAUQ-qfhc5ELAiMNer8h_5tu__7FVQWnu94kYJpOKflaMRlWBrTar0IOxY3xNFurXR9xZjE-CLa8qpmPO5kFg1Fs_YnMO16kFjAxB1V2ah1LAiKK3H3DpnKpAO3WQ6fNyg-OHWh5KFObulybrJAS_-Ek3ZM2-RbafdGsl-lADlItNlZQ",
          "n": "22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8",
          "alg": "PS256"
        }
      ]
    },
    "acr_value": "urn:mace:incommon:iap:silver"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\njfy5bGXkgEKWT0gVj+LTjFrVeMFrUUpMQbKMINlMe6QJ6MNnCQ\u003d\u003d\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\ncUDXkPraq2JbdXA3Cj5UcjW9fJDav+Q2AoA/surcDkx2lC1cUNpJIOY\u003d\n-----END RSA PRIVATE KEY-----\n",
    "ca": "-----BEGIN CERTIFICATE-----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\ntrijj+gVec5maJpF1GR1r9NM+pT5lw\u003d\u003d\n-----END CERTIFICATE-----\n"
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\nWLM\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----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\nu83fx03d+2/RuA//IL7WCQ\u003d\u003d\n-----END PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----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\nfP1+3+YMOs/LGA\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "description": "CIBA"
}
testName
fapi-ciba-id1-refresh-token
2021-05-17 15:39:50 SUCCESS
CreateCIBANotificationEndpointUri
Created ciba notification endpoint URI
notification_uri
https://www.certification.openid.net/test/a/fintech/ciba-notification-endpoint
2021-05-17 15:39:50
GetDynamicServerConfiguration
HTTP request
request_uri
https://oidc-test.curity.io/dev/oauth/anonymous/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-05-17 15:39:50 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Mon, 17 May 2021 15:39:50 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "cache-control": "public, max-age\u003d1200",
  "content-type": "application/json",
  "content-length": "5742"
}
response_body
{"introspection_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"request_parameter_supported":true,"claims_parameter_supported":true,"introspection_endpoint":"https://oidc-test.curity.io/introspection","backchannel_authentication_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"issuer":"https://oidc-test.curity.io/dev/oauth/anonymous","authorization_endpoint":"https://oidc-test.curity.io/dev/oauth/authorize","introspection_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"service_documentation":"https://localhost/developer-documentation-url","claims_supported":["sub","zoneinfo","birthdate","gender","purpose","amr","iss","preferred_username","locale","client_id","sid","acr","updated_at","azp","auth_time","scope","nickname","custom_auth_time","exp","iat","email","jti","website","address","email_verified","profile","phone_number_verified","dcrm_client","given_name","middle_name","nonce","picture","aud","delegation_id","nbf","name","phone_number","family_name"],"token_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"tls_client_certificate_bound_access_tokens":true,"backchannel_logout_session_supported":true,"response_modes_supported":["fragment","form_post","query"],"token_endpoint":"https://oidc-test.curity.io/dev/oauth/token","backchannel_authentication_request_signing_alg_values_supported":["RS256","PS256","PS384","PS512","ES256","ES384","ES512"],"response_types_supported":["code","code id_token","code id_token token","code token","id_token","id_token token","token"],"revocation_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"backchannel_token_delivery_modes_supported":["poll"],"revocation_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"request_uri_parameter_supported":true,"grant_types_supported":["refresh_token","implicit","client_credentials","password","https://curity.se/grant/accesstoken","authorization_code","urn:openid:params:grant-type:ciba"],"backchannel_authentication_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"ui_locales_supported":["sv","en"],"userinfo_endpoint":"https://oidc-test.curity.io/dev/oauth/userinfo","require_request_uri_registration":true,"code_challenge_methods_supported":["S256","plain"],"frontchannel_logout_session_supported":true,"claims_locales_supported":["sv","en"],"request_object_signing_alg_values_supported":["RS256","PS256","PS384","PS512","ES256","ES384","ES512","none"],"prefix_scopes_supported":[],"check_session_iframe":"https://oidc-test.curity.io/oauth/session","backchannel_logout_supported":true,"scopes_supported":["address","read","admin_read","phone","openid","profile","urn:se:curity:scopes:admin:api","admin_write","write","email","test_scope_1"],"acr_values_supported":["urn:se:curity:authentication:google:google1","urn:se:curity:authentication:totp:totp","urn:se:curity:authentication:html-form:phpass","urn:se:curity:authentication:sms:sms2fa","urn:se:curity:authentication:sms:sms1","urn:se:curity:authentication:twitter:twitter1","urn:se:curity:authentication:html-form:html2fa","urn:se:curity:authentication:sms:smsScim2","urn:se:curity:authentication:html-form:htmlSql","urn:se:curity:authentication:sms:sms3","urn:se:curity:authentication:email:email2","urn:se:curity:authentication:html-form:htmlLdap","urn:se:curity:authentication:email:email1","urn:se:curity:authentication:bankid:bankid1","urn:se:curity:authentication:test:testAuth-janedoe","urn:mace:incommon:iap:silver","urn:se:curity:authentication:html-form:htmlFormJson","urn:se:curity:authentication:duo:duo1","urn:se:curity:authentication:encap:encap1","loa1-alt","urn:se:curity:authentication:encap:encap2","urn:se:curity:authentication:html-form:htmlFormJsonOAuth","urn:se:curity:authentication:ping-idp-adapter:ping-idp-adapter","windows","urn:se:curity:authentication:html-form:htmlAd","urn:se:curity:authentication:html-form:htmlScimBisnode","urn:se:curity:authentication:pingfederate:ping1","urn:se:curity:authentication:html-form:htmlScimMock","urn:virtual:assertion-sig:saml","urn:se:curity:authentication:netidaccess:NetIdAccess","urn:se:curity:authentication:pingfederate:ping2bo","urn:se:curity:authentication:html-form:htmlOpenLdap","urn:se:curity:authentication:html-form:bcrypt","loa1","urn:se:curity:authentication:html-form:htmlScim2Curity","urn:se:curity:authentication:pingfederate:ping-fs01","urn:se:curity:authentication:sign-in-with-apple:apple1","urn:se:curity:authentication:oidc:oidc1","urn:se:curity:authentication:webauthn:webauthn","urn:se:curity:authentication:facebook:facebook1","urn:se:curity:authentication:html-form:htmlScim2Osiam","urn:se:curity:authentication:username:username"],"userinfo_signing_alg_values_supported":["PS256"],"claim_types_supported":["normal"],"end_session_endpoint":"https://oidc-test.curity.io/oauth/session/logout","revocation_endpoint":"https://oidc-test.curity.io/revoke","backchannel_authentication_endpoint":"https://oidc-test.curity.io/bc-auth","frontchannel_logout_supported":true,"token_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"jwks_uri":"https://oidc-test.curity.io/dev/oauth/anonymous/jwks","subject_types_supported":["public","pairwise"],"id_token_signing_alg_values_supported":["PS256"],"assisted_token_endpoint":"https://oidc-test.curity.io/assisted-token"}
2021-05-17 15:39:50
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{"introspection_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"request_parameter_supported":true,"claims_parameter_supported":true,"introspection_endpoint":"https://oidc-test.curity.io/introspection","backchannel_authentication_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"issuer":"https://oidc-test.curity.io/dev/oauth/anonymous","authorization_endpoint":"https://oidc-test.curity.io/dev/oauth/authorize","introspection_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"service_documentation":"https://localhost/developer-documentation-url","claims_supported":["sub","zoneinfo","birthdate","gender","purpose","amr","iss","preferred_username","locale","client_id","sid","acr","updated_at","azp","auth_time","scope","nickname","custom_auth_time","exp","iat","email","jti","website","address","email_verified","profile","phone_number_verified","dcrm_client","given_name","middle_name","nonce","picture","aud","delegation_id","nbf","name","phone_number","family_name"],"token_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"tls_client_certificate_bound_access_tokens":true,"backchannel_logout_session_supported":true,"response_modes_supported":["fragment","form_post","query"],"token_endpoint":"https://oidc-test.curity.io/dev/oauth/token","backchannel_authentication_request_signing_alg_values_supported":["RS256","PS256","PS384","PS512","ES256","ES384","ES512"],"response_types_supported":["code","code id_token","code id_token token","code token","id_token","id_token token","token"],"revocation_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"backchannel_token_delivery_modes_supported":["poll"],"revocation_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"request_uri_parameter_supported":true,"grant_types_supported":["refresh_token","implicit","client_credentials","password","https://curity.se/grant/accesstoken","authorization_code","urn:openid:params:grant-type:ciba"],"backchannel_authentication_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"ui_locales_supported":["sv","en"],"userinfo_endpoint":"https://oidc-test.curity.io/dev/oauth/userinfo","require_request_uri_registration":true,"code_challenge_methods_supported":["S256","plain"],"frontchannel_logout_session_supported":true,"claims_locales_supported":["sv","en"],"request_object_signing_alg_values_supported":["RS256","PS256","PS384","PS512","ES256","ES384","ES512","none"],"prefix_scopes_supported":[],"check_session_iframe":"https://oidc-test.curity.io/oauth/session","backchannel_logout_supported":true,"scopes_supported":["address","read","admin_read","phone","openid","profile","urn:se:curity:scopes:admin:api","admin_write","write","email","test_scope_1"],"acr_values_supported":["urn:se:curity:authentication:google:google1","urn:se:curity:authentication:totp:totp","urn:se:curity:authentication:html-form:phpass","urn:se:curity:authentication:sms:sms2fa","urn:se:curity:authentication:sms:sms1","urn:se:curity:authentication:twitter:twitter1","urn:se:curity:authentication:html-form:html2fa","urn:se:curity:authentication:sms:smsScim2","urn:se:curity:authentication:html-form:htmlSql","urn:se:curity:authentication:sms:sms3","urn:se:curity:authentication:email:email2","urn:se:curity:authentication:html-form:htmlLdap","urn:se:curity:authentication:email:email1","urn:se:curity:authentication:bankid:bankid1","urn:se:curity:authentication:test:testAuth-janedoe","urn:mace:incommon:iap:silver","urn:se:curity:authentication:html-form:htmlFormJson","urn:se:curity:authentication:duo:duo1","urn:se:curity:authentication:encap:encap1","loa1-alt","urn:se:curity:authentication:encap:encap2","urn:se:curity:authentication:html-form:htmlFormJsonOAuth","urn:se:curity:authentication:ping-idp-adapter:ping-idp-adapter","windows","urn:se:curity:authentication:html-form:htmlAd","urn:se:curity:authentication:html-form:htmlScimBisnode","urn:se:curity:authentication:pingfederate:ping1","urn:se:curity:authentication:html-form:htmlScimMock","urn:virtual:assertion-sig:saml","urn:se:curity:authentication:netidaccess:NetIdAccess","urn:se:curity:authentication:pingfederate:ping2bo","urn:se:curity:authentication:html-form:htmlOpenLdap","urn:se:curity:authentication:html-form:bcrypt","loa1","urn:se:curity:authentication:html-form:htmlScim2Curity","urn:se:curity:authentication:pingfederate:ping-fs01","urn:se:curity:authentication:sign-in-with-apple:apple1","urn:se:curity:authentication:oidc:oidc1","urn:se:curity:authentication:webauthn:webauthn","urn:se:curity:authentication:facebook:facebook1","urn:se:curity:authentication:html-form:htmlScim2Osiam","urn:se:curity:authentication:username:username"],"userinfo_signing_alg_values_supported":["PS256"],"claim_types_supported":["normal"],"end_session_endpoint":"https://oidc-test.curity.io/oauth/session/logout","revocation_endpoint":"https://oidc-test.curity.io/revoke","backchannel_authentication_endpoint":"https://oidc-test.curity.io/bc-auth","frontchannel_logout_supported":true,"token_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"jwks_uri":"https://oidc-test.curity.io/dev/oauth/anonymous/jwks","subject_types_supported":["public","pairwise"],"id_token_signing_alg_values_supported":["PS256"],"assisted_token_endpoint":"https://oidc-test.curity.io/assisted-token"}
2021-05-17 15:39:50 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
introspection_endpoint_auth_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "RS384",
  "ES256",
  "RS256",
  "ES512",
  "PS256",
  "PS512",
  "RS512"
]
request_parameter_supported
true
claims_parameter_supported
true
introspection_endpoint
https://oidc-test.curity.io/introspection
backchannel_authentication_endpoint_auth_methods_supported
[
  "client_secret_post",
  "client_secret_basic",
  "private_key_jwt",
  "tls_client_auth"
]
issuer
https://oidc-test.curity.io/dev/oauth/anonymous
authorization_endpoint
https://oidc-test.curity.io/dev/oauth/authorize
introspection_endpoint_auth_methods_supported
[
  "client_secret_post",
  "client_secret_basic",
  "private_key_jwt",
  "tls_client_auth"
]
service_documentation
https://localhost/developer-documentation-url
claims_supported
[
  "sub",
  "zoneinfo",
  "birthdate",
  "gender",
  "purpose",
  "amr",
  "iss",
  "preferred_username",
  "locale",
  "client_id",
  "sid",
  "acr",
  "updated_at",
  "azp",
  "auth_time",
  "scope",
  "nickname",
  "custom_auth_time",
  "exp",
  "iat",
  "email",
  "jti",
  "website",
  "address",
  "email_verified",
  "profile",
  "phone_number_verified",
  "dcrm_client",
  "given_name",
  "middle_name",
  "nonce",
  "picture",
  "aud",
  "delegation_id",
  "nbf",
  "name",
  "phone_number",
  "family_name"
]
token_endpoint_auth_methods_supported
[
  "client_secret_post",
  "client_secret_basic",
  "private_key_jwt",
  "tls_client_auth"
]
tls_client_certificate_bound_access_tokens
true
backchannel_logout_session_supported
true
response_modes_supported
[
  "fragment",
  "form_post",
  "query"
]
token_endpoint
https://oidc-test.curity.io/dev/oauth/token
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "PS256",
  "PS384",
  "PS512",
  "ES256",
  "ES384",
  "ES512"
]
response_types_supported
[
  "code",
  "code id_token",
  "code id_token token",
  "code token",
  "id_token",
  "id_token token",
  "token"
]
revocation_endpoint_auth_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "RS384",
  "ES256",
  "RS256",
  "ES512",
  "PS256",
  "PS512",
  "RS512"
]
backchannel_token_delivery_modes_supported
[
  "poll"
]
revocation_endpoint_auth_methods_supported
[
  "client_secret_post",
  "client_secret_basic",
  "private_key_jwt",
  "tls_client_auth"
]
request_uri_parameter_supported
true
grant_types_supported
[
  "refresh_token",
  "implicit",
  "client_credentials",
  "password",
  "https://curity.se/grant/accesstoken",
  "authorization_code",
  "urn:openid:params:grant-type:ciba"
]
backchannel_authentication_endpoint_auth_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "RS384",
  "ES256",
  "RS256",
  "ES512",
  "PS256",
  "PS512",
  "RS512"
]
ui_locales_supported
[
  "sv",
  "en"
]
userinfo_endpoint
https://oidc-test.curity.io/dev/oauth/userinfo
require_request_uri_registration
true
code_challenge_methods_supported
[
  "S256",
  "plain"
]
frontchannel_logout_session_supported
true
claims_locales_supported
[
  "sv",
  "en"
]
request_object_signing_alg_values_supported
[
  "RS256",
  "PS256",
  "PS384",
  "PS512",
  "ES256",
  "ES384",
  "ES512",
  "none"
]
prefix_scopes_supported
[]
check_session_iframe
https://oidc-test.curity.io/oauth/session
backchannel_logout_supported
true
scopes_supported
[
  "address",
  "read",
  "admin_read",
  "phone",
  "openid",
  "profile",
  "urn:se:curity:scopes:admin:api",
  "admin_write",
  "write",
  "email",
  "test_scope_1"
]
acr_values_supported
[
  "urn:se:curity:authentication:google:google1",
  "urn:se:curity:authentication:totp:totp",
  "urn:se:curity:authentication:html-form:phpass",
  "urn:se:curity:authentication:sms:sms2fa",
  "urn:se:curity:authentication:sms:sms1",
  "urn:se:curity:authentication:twitter:twitter1",
  "urn:se:curity:authentication:html-form:html2fa",
  "urn:se:curity:authentication:sms:smsScim2",
  "urn:se:curity:authentication:html-form:htmlSql",
  "urn:se:curity:authentication:sms:sms3",
  "urn:se:curity:authentication:email:email2",
  "urn:se:curity:authentication:html-form:htmlLdap",
  "urn:se:curity:authentication:email:email1",
  "urn:se:curity:authentication:bankid:bankid1",
  "urn:se:curity:authentication:test:testAuth-janedoe",
  "urn:mace:incommon:iap:silver",
  "urn:se:curity:authentication:html-form:htmlFormJson",
  "urn:se:curity:authentication:duo:duo1",
  "urn:se:curity:authentication:encap:encap1",
  "loa1-alt",
  "urn:se:curity:authentication:encap:encap2",
  "urn:se:curity:authentication:html-form:htmlFormJsonOAuth",
  "urn:se:curity:authentication:ping-idp-adapter:ping-idp-adapter",
  "windows",
  "urn:se:curity:authentication:html-form:htmlAd",
  "urn:se:curity:authentication:html-form:htmlScimBisnode",
  "urn:se:curity:authentication:pingfederate:ping1",
  "urn:se:curity:authentication:html-form:htmlScimMock",
  "urn:virtual:assertion-sig:saml",
  "urn:se:curity:authentication:netidaccess:NetIdAccess",
  "urn:se:curity:authentication:pingfederate:ping2bo",
  "urn:se:curity:authentication:html-form:htmlOpenLdap",
  "urn:se:curity:authentication:html-form:bcrypt",
  "loa1",
  "urn:se:curity:authentication:html-form:htmlScim2Curity",
  "urn:se:curity:authentication:pingfederate:ping-fs01",
  "urn:se:curity:authentication:sign-in-with-apple:apple1",
  "urn:se:curity:authentication:oidc:oidc1",
  "urn:se:curity:authentication:webauthn:webauthn",
  "urn:se:curity:authentication:facebook:facebook1",
  "urn:se:curity:authentication:html-form:htmlScim2Osiam",
  "urn:se:curity:authentication:username:username"
]
userinfo_signing_alg_values_supported
[
  "PS256"
]
claim_types_supported
[
  "normal"
]
end_session_endpoint
https://oidc-test.curity.io/oauth/session/logout
revocation_endpoint
https://oidc-test.curity.io/revoke
backchannel_authentication_endpoint
https://oidc-test.curity.io/bc-auth
frontchannel_logout_supported
true
token_endpoint_auth_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "RS384",
  "ES256",
  "RS256",
  "ES512",
  "PS256",
  "PS512",
  "RS512"
]
jwks_uri
https://oidc-test.curity.io/dev/oauth/anonymous/jwks
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "PS256"
]
assisted_token_endpoint
https://oidc-test.curity.io/assisted-token
2021-05-17 15:39:50 INFO
AddMTLSEndpointAliasesToEnvironment
The mtls_endpoint_aliases is not present in the server configuration
server
{
  "introspection_endpoint_auth_signing_alg_values_supported": [
    "PS384",
    "ES384",
    "RS384",
    "ES256",
    "RS256",
    "ES512",
    "PS256",
    "PS512",
    "RS512"
  ],
  "request_parameter_supported": true,
  "claims_parameter_supported": true,
  "introspection_endpoint": "https://oidc-test.curity.io/introspection",
  "backchannel_authentication_endpoint_auth_methods_supported": [
    "client_secret_post",
    "client_secret_basic",
    "private_key_jwt",
    "tls_client_auth"
  ],
  "issuer": "https://oidc-test.curity.io/dev/oauth/anonymous",
  "authorization_endpoint": "https://oidc-test.curity.io/dev/oauth/authorize",
  "introspection_endpoint_auth_methods_supported": [
    "client_secret_post",
    "client_secret_basic",
    "private_key_jwt",
    "tls_client_auth"
  ],
  "service_documentation": "https://localhost/developer-documentation-url",
  "claims_supported": [
    "sub",
    "zoneinfo",
    "birthdate",
    "gender",
    "purpose",
    "amr",
    "iss",
    "preferred_username",
    "locale",
    "client_id",
    "sid",
    "acr",
    "updated_at",
    "azp",
    "auth_time",
    "scope",
    "nickname",
    "custom_auth_time",
    "exp",
    "iat",
    "email",
    "jti",
    "website",
    "address",
    "email_verified",
    "profile",
    "phone_number_verified",
    "dcrm_client",
    "given_name",
    "middle_name",
    "nonce",
    "picture",
    "aud",
    "delegation_id",
    "nbf",
    "name",
    "phone_number",
    "family_name"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_post",
    "client_secret_basic",
    "private_key_jwt",
    "tls_client_auth"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "backchannel_logout_session_supported": true,
  "response_modes_supported": [
    "fragment",
    "form_post",
    "query"
  ],
  "token_endpoint": "https://oidc-test.curity.io/dev/oauth/token",
  "backchannel_authentication_request_signing_alg_values_supported": [
    "RS256",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES384",
    "ES512"
  ],
  "response_types_supported": [
    "code",
    "code id_token",
    "code id_token token",
    "code token",
    "id_token",
    "id_token token",
    "token"
  ],
  "revocation_endpoint_auth_signing_alg_values_supported": [
    "PS384",
    "ES384",
    "RS384",
    "ES256",
    "RS256",
    "ES512",
    "PS256",
    "PS512",
    "RS512"
  ],
  "backchannel_token_delivery_modes_supported": [
    "poll"
  ],
  "revocation_endpoint_auth_methods_supported": [
    "client_secret_post",
    "client_secret_basic",
    "private_key_jwt",
    "tls_client_auth"
  ],
  "request_uri_parameter_supported": true,
  "grant_types_supported": [
    "refresh_token",
    "implicit",
    "client_credentials",
    "password",
    "https://curity.se/grant/accesstoken",
    "authorization_code",
    "urn:openid:params:grant-type:ciba"
  ],
  "backchannel_authentication_endpoint_auth_signing_alg_values_supported": [
    "PS384",
    "ES384",
    "RS384",
    "ES256",
    "RS256",
    "ES512",
    "PS256",
    "PS512",
    "RS512"
  ],
  "ui_locales_supported": [
    "sv",
    "en"
  ],
  "userinfo_endpoint": "https://oidc-test.curity.io/dev/oauth/userinfo",
  "require_request_uri_registration": true,
  "code_challenge_methods_supported": [
    "S256",
    "plain"
  ],
  "frontchannel_logout_session_supported": true,
  "claims_locales_supported": [
    "sv",
    "en"
  ],
  "request_object_signing_alg_values_supported": [
    "RS256",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES384",
    "ES512",
    "none"
  ],
  "prefix_scopes_supported": [],
  "check_session_iframe": "https://oidc-test.curity.io/oauth/session",
  "backchannel_logout_supported": true,
  "scopes_supported": [
    "address",
    "read",
    "admin_read",
    "phone",
    "openid",
    "profile",
    "urn:se:curity:scopes:admin:api",
    "admin_write",
    "write",
    "email",
    "test_scope_1"
  ],
  "acr_values_supported": [
    "urn:se:curity:authentication:google:google1",
    "urn:se:curity:authentication:totp:totp",
    "urn:se:curity:authentication:html-form:phpass",
    "urn:se:curity:authentication:sms:sms2fa",
    "urn:se:curity:authentication:sms:sms1",
    "urn:se:curity:authentication:twitter:twitter1",
    "urn:se:curity:authentication:html-form:html2fa",
    "urn:se:curity:authentication:sms:smsScim2",
    "urn:se:curity:authentication:html-form:htmlSql",
    "urn:se:curity:authentication:sms:sms3",
    "urn:se:curity:authentication:email:email2",
    "urn:se:curity:authentication:html-form:htmlLdap",
    "urn:se:curity:authentication:email:email1",
    "urn:se:curity:authentication:bankid:bankid1",
    "urn:se:curity:authentication:test:testAuth-janedoe",
    "urn:mace:incommon:iap:silver",
    "urn:se:curity:authentication:html-form:htmlFormJson",
    "urn:se:curity:authentication:duo:duo1",
    "urn:se:curity:authentication:encap:encap1",
    "loa1-alt",
    "urn:se:curity:authentication:encap:encap2",
    "urn:se:curity:authentication:html-form:htmlFormJsonOAuth",
    "urn:se:curity:authentication:ping-idp-adapter:ping-idp-adapter",
    "windows",
    "urn:se:curity:authentication:html-form:htmlAd",
    "urn:se:curity:authentication:html-form:htmlScimBisnode",
    "urn:se:curity:authentication:pingfederate:ping1",
    "urn:se:curity:authentication:html-form:htmlScimMock",
    "urn:virtual:assertion-sig:saml",
    "urn:se:curity:authentication:netidaccess:NetIdAccess",
    "urn:se:curity:authentication:pingfederate:ping2bo",
    "urn:se:curity:authentication:html-form:htmlOpenLdap",
    "urn:se:curity:authentication:html-form:bcrypt",
    "loa1",
    "urn:se:curity:authentication:html-form:htmlScim2Curity",
    "urn:se:curity:authentication:pingfederate:ping-fs01",
    "urn:se:curity:authentication:sign-in-with-apple:apple1",
    "urn:se:curity:authentication:oidc:oidc1",
    "urn:se:curity:authentication:webauthn:webauthn",
    "urn:se:curity:authentication:facebook:facebook1",
    "urn:se:curity:authentication:html-form:htmlScim2Osiam",
    "urn:se:curity:authentication:username:username"
  ],
  "userinfo_signing_alg_values_supported": [
    "PS256"
  ],
  "claim_types_supported": [
    "normal"
  ],
  "end_session_endpoint": "https://oidc-test.curity.io/oauth/session/logout",
  "revocation_endpoint": "https://oidc-test.curity.io/revoke",
  "backchannel_authentication_endpoint": "https://oidc-test.curity.io/bc-auth",
  "frontchannel_logout_supported": true,
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS384",
    "ES384",
    "RS384",
    "ES256",
    "RS256",
    "ES512",
    "PS256",
    "PS512",
    "RS512"
  ],
  "jwks_uri": "https://oidc-test.curity.io/dev/oauth/anonymous/jwks",
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "assisted_token_endpoint": "https://oidc-test.curity.io/assisted-token"
}
2021-05-17 15:39:50 SUCCESS
CheckCIBAServerConfiguration
Found required server configuration keys
required
[
  "backchannel_authentication_endpoint",
  "token_endpoint",
  "issuer"
]
2021-05-17 15:39:50 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
authorization_endpoint
{
  "testHost": "oidc-test.curity.io",
  "testPort": 443
}
token_endpoint
{
  "testHost": "oidc-test.curity.io",
  "testPort": 443
}
userinfo_endpoint
{
  "testHost": "oidc-test.curity.io",
  "testPort": 443
}
2021-05-17 15:39:50
FetchServerKeys
Fetching server key
jwks_uri
https://oidc-test.curity.io/dev/oauth/anonymous/jwks
2021-05-17 15:39:50
FetchServerKeys
HTTP request
request_uri
https://oidc-test.curity.io/dev/oauth/anonymous/jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-05-17 15:39:50 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Mon, 17 May 2021 15:39:50 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "content-type": "application/json",
  "content-length": "920"
}
response_body
{"keys":[{"kty":"RSA","kid":"1593201964","use":"sig","alg":"PS256","n":"gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw","e":"AQAB","x5t":"sZDjlR6d0NJD4CbNiMbCV_k7h3A"},{"kty":"RSA","kid":"1593201964","use":"sig","alg":"RS256","n":"gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw","e":"AQAB","x5t":"sZDjlR6d0NJD4CbNiMbCV_k7h3A"}]}
2021-05-17 15:39:50
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","kid":"1593201964","use":"sig","alg":"PS256","n":"gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw","e":"AQAB","x5t":"sZDjlR6d0NJD4CbNiMbCV_k7h3A"},{"kty":"RSA","kid":"1593201964","use":"sig","alg":"RS256","n":"gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw","e":"AQAB","x5t":"sZDjlR6d0NJD4CbNiMbCV_k7h3A"}]}
2021-05-17 15:39:50 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "1593201964",
      "use": "sig",
      "alg": "PS256",
      "n": "gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw",
      "e": "AQAB",
      "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A"
    },
    {
      "kty": "RSA",
      "kid": "1593201964",
      "use": "sig",
      "alg": "RS256",
      "n": "gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw",
      "e": "AQAB",
      "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A"
    }
  ]
}
2021-05-17 15:39:50 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "1593201964",
      "use": "sig",
      "alg": "PS256",
      "n": "gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw",
      "e": "AQAB",
      "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A"
    },
    {
      "kty": "RSA",
      "kid": "1593201964",
      "use": "sig",
      "alg": "RS256",
      "n": "gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw",
      "e": "AQAB",
      "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A"
    }
  ]
}
2021-05-17 15:39:50 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-05-17 15:39:50 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2021-05-17 15:39:50 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-05-17 15:39:50 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "1593201964",
      "use": "sig",
      "alg": "PS256",
      "n": "gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw",
      "e": "AQAB",
      "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A"
    },
    {
      "kty": "RSA",
      "kid": "1593201964",
      "use": "sig",
      "alg": "RS256",
      "n": "gTE9I66jfc5htq5OperYCJE2olrL_KwPi16uMPez5BKL-b6rhrduso16NcpDzLRYTaSkFm3Q08Exm3WNP19SYnfnqXN0IvfjCRLIs27JbYrcACR2ZBSGxJiMBfTo9RclI-BECNGsnRBQ3qhz9YPvgxd7GcaxGvTksn0fBSRdznFKsaFxZOuX7lYPa-n5oh_KQcmpDqgrGDOcgR-LJ-JQxnA0ULRAYbTNzM-J8ig2h_xUQ1jcWanX2T8vtadSbGVv4xRixNEtTpRmcu-AIa_Q9kn_-427Kx-EBHPaYCMtHxPOEBgYka-07_mgi_44bIDGIVQMDog9lUj_9Q6cGdTCfw",
      "e": "AQAB",
      "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A"
    }
  ]
}
Verify First client: static client configuration
2021-05-17 15:39:50 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
client-one
client_secret
0ne!Secret
scope
openid email address phone profile
jwks
{
  "keys": [
    {
      "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q",
      "kty": "RSA",
      "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ",
      "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE",
      "e": "AQAB",
      "kid": "10001",
      "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA",
      "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ",
      "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ",
      "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE",
      "alg": "PS256"
    }
  ]
}
hint_type
login_hint
hint_value
larsdoe
2021-05-17 15:39:50 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-05-17 15:39:50 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q",
      "kty": "RSA",
      "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ",
      "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE",
      "e": "AQAB",
      "kid": "10001",
      "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA",
      "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ",
      "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ",
      "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE",
      "alg": "PS256"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "kid": "10001",
      "alg": "PS256",
      "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE"
    }
  ]
}
2021-05-17 15:39:50 SUCCESS
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
2021-05-17 15:39:50 SUCCESS
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
ca
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
2021-05-17 15:39:50 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-05-17 15:39:50 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-05-17 15:39:50 SUCCESS
FAPICheckKeyAlgInClientJWKs
Found a key with alg PS256 or ES256
2021-05-17 15:39:50 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q",
      "kty": "RSA",
      "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ",
      "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE",
      "e": "AQAB",
      "kid": "10001",
      "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA",
      "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ",
      "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ",
      "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE",
      "alg": "PS256"
    }
  ]
}
2021-05-17 15:39:50 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
Verify Second client: static client configuration
2021-05-17 15:39:50 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
client-two
client_secret
sEcrEt@3wo
scope
openid
client_secret_jwt_alg
RS256
jwks
{
  "keys": [
    {
      "kid": "foo",
      "p": "-YTSnw-kdbuSWDG3LbFL7oYYkBsMTEbOE8ZhRQogy5lPVUiI-EJ0pQenvjVIlFEElo0liY2POGsDWu67qBdp6gwITYMgkxg4YLvvhe2mGpBL7OfULYUIJgQ-ZVGc_wKpjXzbx6An4EeS7GNXAoMMG1KPTv-iNs4jSQuDJBvQKo4MKLrBBdEXMYO4gMZMJDs2Rog_AKyAoR912U1Ad5U6HlkHxsGlxG-3_kb7bFHCtOaF5XRMI6Pqyfzf7t5XByz0spTqhTRA45LH4TOArGXFWm1_GB6uj-K7s8NkL5VmUC-jZeGxGFthSiQHjSGWNvgM-Ors_lUIVhf-EciLdOtd_Q",
      "kty": "RSA",
      "q": "4RuJTEJMhsi5jux5wZ_zvuFJiXgA51SujdFE0Gy_f8czCg15Csfqa5Ubew5aVA8HHUoteyVkui3jkp4UQH2zhwUbrY5NF81aB_jw-n7cu5MvJywe9QJ0x7x8Ku0trYruFj6jULLJGR_jbQh_8mNxviwlrm6pBvl9aLXLBP_TKXt9ir73WNcAEh3EJ26FJPr6AY4rWdapZhZigleVmA81967RoYWJeG1pLdDp2L7SPgaxhirvYXwsOgJc8iziEJ1QBBpFYvaBNWTTrgPMi6Mmcc8UqFE1GBHN0qf3ceTUYv-YsjZrzU2pgr5sAaguigZxtuQ-PPL0lFUdRJV7zQsT-w",
      "d": "LX9UHpMiMTUtzh2VP1wgf93xjaYEm6qTwOZQGl_hfwlO0rfF4u5L1RO_JPviFnkA7JRIqZXSLON17szVRLfbhe-EQkoJA6CIUKrpmgKSL6f0p1mCt1oC-Tafvw529IfWtupWcOcSZsk0B8WJ-hOM6zfpyzuua1hKHZ7HdTIWPK1_LCBmBLfDbPR7fnDP987EgqlIfgt4poxXRUPU5997IUPu52-82RUjUlTYzh8gjHLXme9f6n0cmyL-IRwiA-mxBlp0w5Xuwy281AXQFmnetcuMja9I5_Pwf6wHw2XNLp8CHGXFPyI0VJUw-tatkLD7Zk1WM7oXdFHzg1LY7_J4XtIQHYgREzWxc7M8SGSvy-HTz19vaztOT9OOfSUyBT0cbYzUAptwVEQsUnahxloT3eK8C-oZTjWd1AZD_X4rgQKdqQyuex5p35volI3CpIrizLc6a5ljF0HM832mSW4W5SUcd2oyr3Fd41RBaoIj7wQFKPxPsnF3VBeHVAdgUw8FNerob3mmRBIL12upK_iY_tv7TONBJXRx8dHonKt0ukoxW0VPmjlorGvH_GMX7HtpY9YHvGZXPsgVnMJHxmYz7J6jBGnaczlYgPjOEgsUa2mGH40-ZTF1kcWG8VJOYnnGdAItrPG1GBt3yOcdIb1BiYNC4LJdZQXsvFS-lasEohE",
      "e": "AQAB",
      "qi": "GxvAPQ5BUOcVWxj_OJmV803BhlJreMOlXAIHSi4RYWkF2kI7uv3ALxFkPLPoadX-TAahyyv_yIzYIPKriFEB-4wHTSQRg3FZfFKV-uCrIQr3teoRm9IqV9g3U2l-Fo25s4aGMOTuahesoV2vj8fEEd6xiR83nf7sppWino7PaQ-3nMkGrhQbC7TlP016JLoBS3OQPi1NXiRHnVpaz7NuUDDxSFHbH-CayTn_ByiWpi6KbAgM4J63-flYF_F6ejWr2x4MWk2ASWWRUMgag96h9c3fEUVkBIKzZm9oVEP41JfnxodvREgqXPw4JRI8ylPNVzQ8ZReWCfx0UcWELCgI9w",
      "dp": "ypMqSFbzx13Ef3PFawRRSFJ4KK68-kRV1LoviFSjsYhDX1LnWN7jQoSHjCZISZnJJs1rF1TlXQGMlMvTcLGpnImuR_fYf3OfefG6kboSK-jQq4K_wUELD4pMegebdXHc4_DlohmFplGVl_NC1dg9AQWzMYjbUrFi9k-xZaRrCdGPT5XnVeiecuWk6m-Tq6qi8vp0ZACo4abgD87nMu7lY3QWmyfmhCfLclaAkz2B3Up2lIYptpnC6cAysgSzFTFLbJz4FbMJp3koa85bfhuV8UeKcrOeN1T13QkaEoOxsBItD27_T24I-59qvgrxoKkcJw7b39R7UyJhdGCj0AWypQ",
      "dq": "iGIAix1X9AlEsxz-n5rjOHCR9yGnmoApyW5SfNyGIUp019BV13xLwKZ0IdgOTgNU0iAQ8h0zq8EFsdzodDI0RMeJf1tJxfP6af4fMgUOgu6nkNogX1z_l8vQhslv9UbI_N0yYUAQqpIxXevaaOZrEUb6BXayHbGmk3wg5oSAUQ-qfhc5ELAiMNer8h_5tu__7FVQWnu94kYJpOKflaMRlWBrTar0IOxY3xNFurXR9xZjE-CLa8qpmPO5kFg1Fs_YnMO16kFjAxB1V2ah1LAiKK3H3DpnKpAO3WQ6fNyg-OHWh5KFObulybrJAS_-Ek3ZM2-RbafdGsl-lADlItNlZQ",
      "n": "22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8",
      "alg": "PS256"
    }
  ]
}
acr_value
urn:mace:incommon:iap:silver
2021-05-17 15:39:50 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-05-17 15:39:50 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kid": "foo",
      "p": "-YTSnw-kdbuSWDG3LbFL7oYYkBsMTEbOE8ZhRQogy5lPVUiI-EJ0pQenvjVIlFEElo0liY2POGsDWu67qBdp6gwITYMgkxg4YLvvhe2mGpBL7OfULYUIJgQ-ZVGc_wKpjXzbx6An4EeS7GNXAoMMG1KPTv-iNs4jSQuDJBvQKo4MKLrBBdEXMYO4gMZMJDs2Rog_AKyAoR912U1Ad5U6HlkHxsGlxG-3_kb7bFHCtOaF5XRMI6Pqyfzf7t5XByz0spTqhTRA45LH4TOArGXFWm1_GB6uj-K7s8NkL5VmUC-jZeGxGFthSiQHjSGWNvgM-Ors_lUIVhf-EciLdOtd_Q",
      "kty": "RSA",
      "q": "4RuJTEJMhsi5jux5wZ_zvuFJiXgA51SujdFE0Gy_f8czCg15Csfqa5Ubew5aVA8HHUoteyVkui3jkp4UQH2zhwUbrY5NF81aB_jw-n7cu5MvJywe9QJ0x7x8Ku0trYruFj6jULLJGR_jbQh_8mNxviwlrm6pBvl9aLXLBP_TKXt9ir73WNcAEh3EJ26FJPr6AY4rWdapZhZigleVmA81967RoYWJeG1pLdDp2L7SPgaxhirvYXwsOgJc8iziEJ1QBBpFYvaBNWTTrgPMi6Mmcc8UqFE1GBHN0qf3ceTUYv-YsjZrzU2pgr5sAaguigZxtuQ-PPL0lFUdRJV7zQsT-w",
      "d": "LX9UHpMiMTUtzh2VP1wgf93xjaYEm6qTwOZQGl_hfwlO0rfF4u5L1RO_JPviFnkA7JRIqZXSLON17szVRLfbhe-EQkoJA6CIUKrpmgKSL6f0p1mCt1oC-Tafvw529IfWtupWcOcSZsk0B8WJ-hOM6zfpyzuua1hKHZ7HdTIWPK1_LCBmBLfDbPR7fnDP987EgqlIfgt4poxXRUPU5997IUPu52-82RUjUlTYzh8gjHLXme9f6n0cmyL-IRwiA-mxBlp0w5Xuwy281AXQFmnetcuMja9I5_Pwf6wHw2XNLp8CHGXFPyI0VJUw-tatkLD7Zk1WM7oXdFHzg1LY7_J4XtIQHYgREzWxc7M8SGSvy-HTz19vaztOT9OOfSUyBT0cbYzUAptwVEQsUnahxloT3eK8C-oZTjWd1AZD_X4rgQKdqQyuex5p35volI3CpIrizLc6a5ljF0HM832mSW4W5SUcd2oyr3Fd41RBaoIj7wQFKPxPsnF3VBeHVAdgUw8FNerob3mmRBIL12upK_iY_tv7TONBJXRx8dHonKt0ukoxW0VPmjlorGvH_GMX7HtpY9YHvGZXPsgVnMJHxmYz7J6jBGnaczlYgPjOEgsUa2mGH40-ZTF1kcWG8VJOYnnGdAItrPG1GBt3yOcdIb1BiYNC4LJdZQXsvFS-lasEohE",
      "e": "AQAB",
      "qi": "GxvAPQ5BUOcVWxj_OJmV803BhlJreMOlXAIHSi4RYWkF2kI7uv3ALxFkPLPoadX-TAahyyv_yIzYIPKriFEB-4wHTSQRg3FZfFKV-uCrIQr3teoRm9IqV9g3U2l-Fo25s4aGMOTuahesoV2vj8fEEd6xiR83nf7sppWino7PaQ-3nMkGrhQbC7TlP016JLoBS3OQPi1NXiRHnVpaz7NuUDDxSFHbH-CayTn_ByiWpi6KbAgM4J63-flYF_F6ejWr2x4MWk2ASWWRUMgag96h9c3fEUVkBIKzZm9oVEP41JfnxodvREgqXPw4JRI8ylPNVzQ8ZReWCfx0UcWELCgI9w",
      "dp": "ypMqSFbzx13Ef3PFawRRSFJ4KK68-kRV1LoviFSjsYhDX1LnWN7jQoSHjCZISZnJJs1rF1TlXQGMlMvTcLGpnImuR_fYf3OfefG6kboSK-jQq4K_wUELD4pMegebdXHc4_DlohmFplGVl_NC1dg9AQWzMYjbUrFi9k-xZaRrCdGPT5XnVeiecuWk6m-Tq6qi8vp0ZACo4abgD87nMu7lY3QWmyfmhCfLclaAkz2B3Up2lIYptpnC6cAysgSzFTFLbJz4FbMJp3koa85bfhuV8UeKcrOeN1T13QkaEoOxsBItD27_T24I-59qvgrxoKkcJw7b39R7UyJhdGCj0AWypQ",
      "dq": "iGIAix1X9AlEsxz-n5rjOHCR9yGnmoApyW5SfNyGIUp019BV13xLwKZ0IdgOTgNU0iAQ8h0zq8EFsdzodDI0RMeJf1tJxfP6af4fMgUOgu6nkNogX1z_l8vQhslv9UbI_N0yYUAQqpIxXevaaOZrEUb6BXayHbGmk3wg5oSAUQ-qfhc5ELAiMNer8h_5tu__7FVQWnu94kYJpOKflaMRlWBrTar0IOxY3xNFurXR9xZjE-CLa8qpmPO5kFg1Fs_YnMO16kFjAxB1V2ah1LAiKK3H3DpnKpAO3WQ6fNyg-OHWh5KFObulybrJAS_-Ek3ZM2-RbafdGsl-lADlItNlZQ",
      "n": "22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8",
      "alg": "PS256"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "kid": "foo",
      "alg": "PS256",
      "n": "22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8"
    }
  ]
}
2021-05-17 15:39:50 SUCCESS
ValidateMTLSCertificates2Header
MTLS certificates header is valid
2021-05-17 15:39:50 SUCCESS
ExtractMTLSCertificates2FromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
ca
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
2021-05-17 15:39:50 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-05-17 15:39:50 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-05-17 15:39:50 SUCCESS
FAPICheckKeyAlgInClientJWKs
Found a key with alg PS256 or ES256
2021-05-17 15:39:50 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kid": "foo",
      "p": "-YTSnw-kdbuSWDG3LbFL7oYYkBsMTEbOE8ZhRQogy5lPVUiI-EJ0pQenvjVIlFEElo0liY2POGsDWu67qBdp6gwITYMgkxg4YLvvhe2mGpBL7OfULYUIJgQ-ZVGc_wKpjXzbx6An4EeS7GNXAoMMG1KPTv-iNs4jSQuDJBvQKo4MKLrBBdEXMYO4gMZMJDs2Rog_AKyAoR912U1Ad5U6HlkHxsGlxG-3_kb7bFHCtOaF5XRMI6Pqyfzf7t5XByz0spTqhTRA45LH4TOArGXFWm1_GB6uj-K7s8NkL5VmUC-jZeGxGFthSiQHjSGWNvgM-Ors_lUIVhf-EciLdOtd_Q",
      "kty": "RSA",
      "q": "4RuJTEJMhsi5jux5wZ_zvuFJiXgA51SujdFE0Gy_f8czCg15Csfqa5Ubew5aVA8HHUoteyVkui3jkp4UQH2zhwUbrY5NF81aB_jw-n7cu5MvJywe9QJ0x7x8Ku0trYruFj6jULLJGR_jbQh_8mNxviwlrm6pBvl9aLXLBP_TKXt9ir73WNcAEh3EJ26FJPr6AY4rWdapZhZigleVmA81967RoYWJeG1pLdDp2L7SPgaxhirvYXwsOgJc8iziEJ1QBBpFYvaBNWTTrgPMi6Mmcc8UqFE1GBHN0qf3ceTUYv-YsjZrzU2pgr5sAaguigZxtuQ-PPL0lFUdRJV7zQsT-w",
      "d": "LX9UHpMiMTUtzh2VP1wgf93xjaYEm6qTwOZQGl_hfwlO0rfF4u5L1RO_JPviFnkA7JRIqZXSLON17szVRLfbhe-EQkoJA6CIUKrpmgKSL6f0p1mCt1oC-Tafvw529IfWtupWcOcSZsk0B8WJ-hOM6zfpyzuua1hKHZ7HdTIWPK1_LCBmBLfDbPR7fnDP987EgqlIfgt4poxXRUPU5997IUPu52-82RUjUlTYzh8gjHLXme9f6n0cmyL-IRwiA-mxBlp0w5Xuwy281AXQFmnetcuMja9I5_Pwf6wHw2XNLp8CHGXFPyI0VJUw-tatkLD7Zk1WM7oXdFHzg1LY7_J4XtIQHYgREzWxc7M8SGSvy-HTz19vaztOT9OOfSUyBT0cbYzUAptwVEQsUnahxloT3eK8C-oZTjWd1AZD_X4rgQKdqQyuex5p35volI3CpIrizLc6a5ljF0HM832mSW4W5SUcd2oyr3Fd41RBaoIj7wQFKPxPsnF3VBeHVAdgUw8FNerob3mmRBIL12upK_iY_tv7TONBJXRx8dHonKt0ukoxW0VPmjlorGvH_GMX7HtpY9YHvGZXPsgVnMJHxmYz7J6jBGnaczlYgPjOEgsUa2mGH40-ZTF1kcWG8VJOYnnGdAItrPG1GBt3yOcdIb1BiYNC4LJdZQXsvFS-lasEohE",
      "e": "AQAB",
      "qi": "GxvAPQ5BUOcVWxj_OJmV803BhlJreMOlXAIHSi4RYWkF2kI7uv3ALxFkPLPoadX-TAahyyv_yIzYIPKriFEB-4wHTSQRg3FZfFKV-uCrIQr3teoRm9IqV9g3U2l-Fo25s4aGMOTuahesoV2vj8fEEd6xiR83nf7sppWino7PaQ-3nMkGrhQbC7TlP016JLoBS3OQPi1NXiRHnVpaz7NuUDDxSFHbH-CayTn_ByiWpi6KbAgM4J63-flYF_F6ejWr2x4MWk2ASWWRUMgag96h9c3fEUVkBIKzZm9oVEP41JfnxodvREgqXPw4JRI8ylPNVzQ8ZReWCfx0UcWELCgI9w",
      "dp": "ypMqSFbzx13Ef3PFawRRSFJ4KK68-kRV1LoviFSjsYhDX1LnWN7jQoSHjCZISZnJJs1rF1TlXQGMlMvTcLGpnImuR_fYf3OfefG6kboSK-jQq4K_wUELD4pMegebdXHc4_DlohmFplGVl_NC1dg9AQWzMYjbUrFi9k-xZaRrCdGPT5XnVeiecuWk6m-Tq6qi8vp0ZACo4abgD87nMu7lY3QWmyfmhCfLclaAkz2B3Up2lIYptpnC6cAysgSzFTFLbJz4FbMJp3koa85bfhuV8UeKcrOeN1T13QkaEoOxsBItD27_T24I-59qvgrxoKkcJw7b39R7UyJhdGCj0AWypQ",
      "dq": "iGIAix1X9AlEsxz-n5rjOHCR9yGnmoApyW5SfNyGIUp019BV13xLwKZ0IdgOTgNU0iAQ8h0zq8EFsdzodDI0RMeJf1tJxfP6af4fMgUOgu6nkNogX1z_l8vQhslv9UbI_N0yYUAQqpIxXevaaOZrEUb6BXayHbGmk3wg5oSAUQ-qfhc5ELAiMNer8h_5tu__7FVQWnu94kYJpOKflaMRlWBrTar0IOxY3xNFurXR9xZjE-CLa8qpmPO5kFg1Fs_YnMO16kFjAxB1V2ah1LAiKK3H3DpnKpAO3WQ6fNyg-OHWh5KFObulybrJAS_-Ek3ZM2-RbafdGsl-lADlItNlZQ",
      "n": "22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8",
      "alg": "PS256"
    }
  ]
}
2021-05-17 15:39:50 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2021-05-17 15:39:50 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://oidc-test.curity.io:7777/fapi/rs
institution_id
foobar
2021-05-17 15:39:50 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://oidc-test.curity.io:7777/fapi/rs
2021-05-17 15:39:50 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "oidc-test.curity.io",
  "testPort": 7777
}
2021-05-17 15:39:50 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "oidc-test.curity.io",
  "testPort": 7777
}
accounts_request_endpoint
{
  "testHost": "oidc-test.curity.io",
  "testPort": 7777
}
2021-05-17 15:39:50
fapi-ciba-id1-refresh-token
Setup Done
Call backchannel authentication endpoint
2021-05-17 15:39:50 SUCCESS
CreateEmptyAuthorizationEndpointRequest
Created empty authorization endpoint request
2021-05-17 15:39:50 SUCCESS
AddScopeToAuthorizationEndpointRequest
Added scope of 'openid email address phone profile' to authorization endpoint request
scope
openid email address phone profile
2021-05-17 15:39:50 SUCCESS
AddHintToAuthorizationEndpointRequest
Added hint to authorization endpoint request
login_hint
larsdoe
2021-05-17 15:39:50 SUCCESS
AddBindingMessageToAuthorizationEndpointRequest
Added binding message to authorization endpoint request
binding_message
1234
2021-05-17 15:39:50 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "scope": "openid email address phone profile",
  "login_hint": "larsdoe",
  "binding_message": "1234"
}
2021-05-17 15:39:50 SUCCESS
AddIatToRequestObject
Added iat to request object claims
iat
1.62126599E9
2021-05-17 15:39:50 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.62126629E9
2021-05-17 15:39:50 SUCCESS
AddNbfToRequestObject
Added nbf to request object claims
nbf
1.62126599E9
2021-05-17 15:39:50 SUCCESS
AddJtiToRequestObject
Added jti to request object claims
jti
2W6LEKAQvwDZeAyNHr4P
2021-05-17 15:39:50 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://oidc-test.curity.io/dev/oauth/anonymous
2021-05-17 15:39:50 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
client-one
2021-05-17 15:39:50 SUCCESS
SignRequestObject
Signed the request object
claims
{"aud":"https:\/\/oidc-test.curity.io\/dev\/oauth\/anonymous","login_hint":"larsdoe","nbf":1621265990,"scope":"openid email address phone profile","iss":"client-one","binding_message":"1234","exp":1621266290,"iat":1621265990,"jti":"2W6LEKAQvwDZeAyNHr4P"}
header
{"kid":"10001","alg":"PS256"}
request_object
eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJhdWQiOiJodHRwczpcL1wvb2lkYy10ZXN0LmN1cml0eS5pb1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibG9naW5faGludCI6ImxhcnNkb2UiLCJuYmYiOjE2MjEyNjU5OTAsInNjb3BlIjoib3BlbmlkIGVtYWlsIGFkZHJlc3MgcGhvbmUgcHJvZmlsZSIsImlzcyI6ImNsaWVudC1vbmUiLCJiaW5kaW5nX21lc3NhZ2UiOiIxMjM0IiwiZXhwIjoxNjIxMjY2MjkwLCJpYXQiOjE2MjEyNjU5OTAsImp0aSI6IjJXNkxFS0FRdndEWmVBeU5IcjRQIn0.FxezwcF0SDs5W9BersboSU0-xdsnm3qBpupKHgyairzD_ONNF2A6S8I5UN5CD3jcIlmji13ako9TiPGDMVF58ZV9zNQzgJ-ARRYOfcEsIfMxYGsHeuGSuhXIrxOgAK0hlVSBkHrodRFeEbkwGLmw08GgMB-EeruAk6TB8kQa18zFHULwXPvROP0Puh9p6sb2GxutCqpQ6gJ1Y2U6YpW3CJoSpOlpcmdzxJa4Xw7x6-59CQ6nJNheuABU1S5qP4Udxb2SCkaiB5GWMHbXTYSxOjs97DXiPhPMUMu3bJz_wfT2siZUSrg6xpOSMIFPGbAhoQ4b5z3z_-_2vvR9tqEC9EekMyrH-FnxdBOqYRzVPCKZmcCKH2EMMbdCPLhJqNmvaBiToyoi6a3Ctg4voPFGmoyeO8_rtPZ2up-UdS6DCFAx6h-snh_9D2G_b4VP8cUlpcUi7vdHCu10U6XkXPalafynN6TBZjEHC4IAVy0RGrjHNP0wRpX8dMIUDXy0hRYfw42XhihduwsZU5VZs_22tngdP_RTBDv3AGv1oAjaL4r_4J49WVvkix2lORVjmR5F25JfTACtjzC2SmFdFvl2Pj_EiSmft6HAtbbPPkysP5efWLwepVWA0pC_9gB8_mD4PDS7CLZ1OpGux3QcUwMrAYtZExoPa2bPDs-azrVyea0
key
{"p":"_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q","kty":"RSA","q":"rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ","d":"j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE","e":"AQAB","kid":"10001","qi":"Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA","dp":"DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ","alg":"PS256","dq":"lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ","n":"rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE"}
2021-05-17 15:39:50 SUCCESS
CreateBackchannelAuthenticationEndpointRequest
Created backchannel authentication endpoint request
2021-05-17 15:39:50
AddRequestToBackchannelAuthenticationEndpointRequest
request
eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJhdWQiOiJodHRwczpcL1wvb2lkYy10ZXN0LmN1cml0eS5pb1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibG9naW5faGludCI6ImxhcnNkb2UiLCJuYmYiOjE2MjEyNjU5OTAsInNjb3BlIjoib3BlbmlkIGVtYWlsIGFkZHJlc3MgcGhvbmUgcHJvZmlsZSIsImlzcyI6ImNsaWVudC1vbmUiLCJiaW5kaW5nX21lc3NhZ2UiOiIxMjM0IiwiZXhwIjoxNjIxMjY2MjkwLCJpYXQiOjE2MjEyNjU5OTAsImp0aSI6IjJXNkxFS0FRdndEWmVBeU5IcjRQIn0.FxezwcF0SDs5W9BersboSU0-xdsnm3qBpupKHgyairzD_ONNF2A6S8I5UN5CD3jcIlmji13ako9TiPGDMVF58ZV9zNQzgJ-ARRYOfcEsIfMxYGsHeuGSuhXIrxOgAK0hlVSBkHrodRFeEbkwGLmw08GgMB-EeruAk6TB8kQa18zFHULwXPvROP0Puh9p6sb2GxutCqpQ6gJ1Y2U6YpW3CJoSpOlpcmdzxJa4Xw7x6-59CQ6nJNheuABU1S5qP4Udxb2SCkaiB5GWMHbXTYSxOjs97DXiPhPMUMu3bJz_wfT2siZUSrg6xpOSMIFPGbAhoQ4b5z3z_-_2vvR9tqEC9EekMyrH-FnxdBOqYRzVPCKZmcCKH2EMMbdCPLhJqNmvaBiToyoi6a3Ctg4voPFGmoyeO8_rtPZ2up-UdS6DCFAx6h-snh_9D2G_b4VP8cUlpcUi7vdHCu10U6XkXPalafynN6TBZjEHC4IAVy0RGrjHNP0wRpX8dMIUDXy0hRYfw42XhihduwsZU5VZs_22tngdP_RTBDv3AGv1oAjaL4r_4J49WVvkix2lORVjmR5F25JfTACtjzC2SmFdFvl2Pj_EiSmft6HAtbbPPkysP5efWLwepVWA0pC_9gB8_mD4PDS7CLZ1OpGux3QcUwMrAYtZExoPa2bPDs-azrVyea0
2021-05-17 15:39:50 SUCCESS
EnsureServerConfigurationSupportsMTLS
Found supported MTLS method
method
tls_client_auth
2021-05-17 15:39:50
AddClientIdToBackchannelAuthenticationEndpointRequest
request
eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJhdWQiOiJodHRwczpcL1wvb2lkYy10ZXN0LmN1cml0eS5pb1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibG9naW5faGludCI6ImxhcnNkb2UiLCJuYmYiOjE2MjEyNjU5OTAsInNjb3BlIjoib3BlbmlkIGVtYWlsIGFkZHJlc3MgcGhvbmUgcHJvZmlsZSIsImlzcyI6ImNsaWVudC1vbmUiLCJiaW5kaW5nX21lc3NhZ2UiOiIxMjM0IiwiZXhwIjoxNjIxMjY2MjkwLCJpYXQiOjE2MjEyNjU5OTAsImp0aSI6IjJXNkxFS0FRdndEWmVBeU5IcjRQIn0.FxezwcF0SDs5W9BersboSU0-xdsnm3qBpupKHgyairzD_ONNF2A6S8I5UN5CD3jcIlmji13ako9TiPGDMVF58ZV9zNQzgJ-ARRYOfcEsIfMxYGsHeuGSuhXIrxOgAK0hlVSBkHrodRFeEbkwGLmw08GgMB-EeruAk6TB8kQa18zFHULwXPvROP0Puh9p6sb2GxutCqpQ6gJ1Y2U6YpW3CJoSpOlpcmdzxJa4Xw7x6-59CQ6nJNheuABU1S5qP4Udxb2SCkaiB5GWMHbXTYSxOjs97DXiPhPMUMu3bJz_wfT2siZUSrg6xpOSMIFPGbAhoQ4b5z3z_-_2vvR9tqEC9EekMyrH-FnxdBOqYRzVPCKZmcCKH2EMMbdCPLhJqNmvaBiToyoi6a3Ctg4voPFGmoyeO8_rtPZ2up-UdS6DCFAx6h-snh_9D2G_b4VP8cUlpcUi7vdHCu10U6XkXPalafynN6TBZjEHC4IAVy0RGrjHNP0wRpX8dMIUDXy0hRYfw42XhihduwsZU5VZs_22tngdP_RTBDv3AGv1oAjaL4r_4J49WVvkix2lORVjmR5F25JfTACtjzC2SmFdFvl2Pj_EiSmft6HAtbbPPkysP5efWLwepVWA0pC_9gB8_mD4PDS7CLZ1OpGux3QcUwMrAYtZExoPa2bPDs-azrVyea0
client_id
client-one
2021-05-17 15:39:50
CallBackchannelAuthenticationEndpoint
HTTP request
request_uri
https://oidc-test.curity.io/bc-auth
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "1092"
}
request_body
request=eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJhdWQiOiJodHRwczpcL1wvb2lkYy10ZXN0LmN1cml0eS5pb1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibG9naW5faGludCI6ImxhcnNkb2UiLCJuYmYiOjE2MjEyNjU5OTAsInNjb3BlIjoib3BlbmlkIGVtYWlsIGFkZHJlc3MgcGhvbmUgcHJvZmlsZSIsImlzcyI6ImNsaWVudC1vbmUiLCJiaW5kaW5nX21lc3NhZ2UiOiIxMjM0IiwiZXhwIjoxNjIxMjY2MjkwLCJpYXQiOjE2MjEyNjU5OTAsImp0aSI6IjJXNkxFS0FRdndEWmVBeU5IcjRQIn0.FxezwcF0SDs5W9BersboSU0-xdsnm3qBpupKHgyairzD_ONNF2A6S8I5UN5CD3jcIlmji13ako9TiPGDMVF58ZV9zNQzgJ-ARRYOfcEsIfMxYGsHeuGSuhXIrxOgAK0hlVSBkHrodRFeEbkwGLmw08GgMB-EeruAk6TB8kQa18zFHULwXPvROP0Puh9p6sb2GxutCqpQ6gJ1Y2U6YpW3CJoSpOlpcmdzxJa4Xw7x6-59CQ6nJNheuABU1S5qP4Udxb2SCkaiB5GWMHbXTYSxOjs97DXiPhPMUMu3bJz_wfT2siZUSrg6xpOSMIFPGbAhoQ4b5z3z_-_2vvR9tqEC9EekMyrH-FnxdBOqYRzVPCKZmcCKH2EMMbdCPLhJqNmvaBiToyoi6a3Ctg4voPFGmoyeO8_rtPZ2up-UdS6DCFAx6h-snh_9D2G_b4VP8cUlpcUi7vdHCu10U6XkXPalafynN6TBZjEHC4IAVy0RGrjHNP0wRpX8dMIUDXy0hRYfw42XhihduwsZU5VZs_22tngdP_RTBDv3AGv1oAjaL4r_4J49WVvkix2lORVjmR5F25JfTACtjzC2SmFdFvl2Pj_EiSmft6HAtbbPPkysP5efWLwepVWA0pC_9gB8_mD4PDS7CLZ1OpGux3QcUwMrAYtZExoPa2bPDs-azrVyea0&client_id=client-one
request_mutual_tls
{
  "cert": "MIIDUTCCAjkCCQCjBUJdz/MY8DANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJTRTETMBEGA1UECBMKU29tZS1TdGF0ZTESMBAGA1UEBxMJU3RvY2tob2xtMQ8wDQYDVQQKEwZDdXJpdHkxDTALBgNVBAsTBExhYnMxCzAJBgNVBAMTAmNhMB4XDTE4MTAxMjEwMTYyNVoXDTI4MTAwOTEwMTYyNVowcjELMAkGA1UEBhMCU0UxEzARBgNVBAgTClNvbWUtU3RhdGUxEjAQBgNVBAcTCVN0b2NraG9sbTEPMA0GA1UEChMGQ3VyaXR5MQ0wCwYDVQQLEwRMYWJzMRowGAYDVQQDFBFtdXR1YWxfdGxzX2NsaWVudDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMSeFZrx9D7RmyMfnaqYR8/UVxR76K5PlUddQHI27hlCcftcSlxthuqJkskzj1XhXL+Vv08nOGPNtDF0sm1Ot+9IUS0Kf3+XYZP8ErOAkbKlsllV/Q07nuk6UQmeJ8dwwlohlDg6/WqD2V9sOVYFCLIfxRU/6O9rrY/jqRSK289NSs1HtK18YM4ZoVbHLjqKfpzseSTXah9q5HXKtbwPpRPjSqOW9Poe4/BDUEwV8PlKtA5WuTMPTxnANl6He27H78q7RBLxDFRIExtEpLc65m+oGspojzD8xZb+6sWQKHIdNp8LAmB81jKAi+Y5aPPKmV2SL/FLwNfDcqm0WFLsPXsCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEACeGDaWeGhYXTocm8N1iU+TGbi16Cije8kcE+Qmr4nF1PIqnPhyOBkyeP4X1+qb8BNSH10qMtRhUVYuFd7HNOPW4DgmC5OiNpuaROBBmQ4ZyTxcmUper+ARDJckx+VzoqBAHaUSvBPMJk1eciyzQc/e4pwk4jzwAEtUREyYZg/hwKqGpwnGC7RGcyR28bV7s6K2KqB1MHMTR7uEtJadDQq+k/Ri3bu4b3PZFg9QQ5q00GMYQebn0IojWjktbNmhOr/8xr3o+UGj6AjoWKYc6XpyIg5nMuU3zbto2kjfy5bGXkgEKWT0gVj+LTjFrVeMFrUUpMQbKMINlMe6QJ6MNnCQ\u003d\u003d",
  "key": "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\u003d",
  "ca": "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\u003d\u003d"
}
2021-05-17 15:39:51 RESPONSE
CallBackchannelAuthenticationEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Mon, 17 May 2021 15:39:51 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "content-type": "application/json",
  "content-length": "88"
}
response_body
{"auth_req_id":"AbkMlXmZrsD7vFYqISk0WfQamT1m1S2CH0Lf6TO2","interval":5,"expires_in":900}
2021-05-17 15:39:51
CallBackchannelAuthenticationEndpoint
Backchannel Authentication endpoint response
backchannel_authentication_endpoint_response
{"auth_req_id":"AbkMlXmZrsD7vFYqISk0WfQamT1m1S2CH0Lf6TO2","interval":5,"expires_in":900}
2021-05-17 15:39:51 SUCCESS
CallBackchannelAuthenticationEndpoint
Parsed backchannel authentication endpoint response
auth_req_id
AbkMlXmZrsD7vFYqISk0WfQamT1m1S2CH0Lf6TO2
interval
5
expires_in
900
2021-05-17 15:39:51 SUCCESS
CheckBackchannelAuthenticationEndpointHttpStatus200
Backchannel authentication endpoint http status code was 200
2021-05-17 15:39:51 SUCCESS
CheckBackchannelAuthenticationEndpointContentType
Backchannel authentication endpoint Content-Type: header is application/json
2021-05-17 15:39:51 SUCCESS
CheckIfBackchannelAuthenticationEndpointResponseError
No error from Backchannel authentication endpoint
2021-05-17 15:39:51 SUCCESS
ValidateAuthenticationRequestId
auth_req_id passed all validation checks
2021-05-17 15:39:51 SUCCESS
EnsureMinimumAuthenticationRequestIdLength
auth_req_id is of sufficient length
actual
320
required
128
2021-05-17 15:39:51 SUCCESS
EnsureMinimumAuthenticationRequestIdEntropy
Calculated shannon entropy seems sufficient
actual
194.122236293331
expected
96.0
2021-05-17 15:39:51 SUCCESS
EnsureRecommendedAuthenticationRequestIdEntropy
Calculated entropy
actual
194.122236293331
recommended
160.0
2021-05-17 15:39:51 SUCCESS
ValidateAuthenticationRequestIdExpiresIn
expires_in passed all validation checks
expires_in
900
2021-05-17 15:39:51 SUCCESS
ValidateAuthenticationRequestIdInterval
interval passed all validation checks
interval
5
Call token endpoint expecting pending
2021-05-17 15:39:51 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-17 15:39:51
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
AbkMlXmZrsD7vFYqISk0WfQamT1m1S2CH0Lf6TO2
2021-05-17 15:39:51 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
AbkMlXmZrsD7vFYqISk0WfQamT1m1S2CH0Lf6TO2
client_id
client-one
2021-05-17 15:39:51
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://oidc-test.curity.io/dev/oauth/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "126"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=AbkMlXmZrsD7vFYqISk0WfQamT1m1S2CH0Lf6TO2&client_id=client-one
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d",
  "ca": "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\u003d\u003d"
}
2021-05-17 15:39:51 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "date": "Mon, 17 May 2021 15:39:51 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json",
  "content-length": "87"
}
response_body
{"error":"authorization_pending","error_description":"Authentication request pending."}
2021-05-17 15:39:51 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
Authentication request pending.
2021-05-17 15:39:51 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response is pending or slow_down
2021-05-17 15:39:51 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-17 15:39:51 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-17 15:39:51 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
Authentication request pending.
2021-05-17 15:39:51 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
Authentication request pending.
2021-05-17 15:39:51 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-17 15:39:51 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Call token endpoint expecting pending (second time)
2021-05-17 15:39:56 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-17 15:39:56
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
AbkMlXmZrsD7vFYqISk0WfQamT1m1S2CH0Lf6TO2
2021-05-17 15:39:56 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
AbkMlXmZrsD7vFYqISk0WfQamT1m1S2CH0Lf6TO2
client_id
client-one
2021-05-17 15:39:56
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://oidc-test.curity.io/dev/oauth/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "126"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=AbkMlXmZrsD7vFYqISk0WfQamT1m1S2CH0Lf6TO2&client_id=client-one
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d",
  "ca": "MIIDQjCCAioCCQDSZMWEy1bkajANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJTRTETMBEGA1UECBMKU29tZS1TdGF0ZTESMBAGA1UEBxMJU3RvY2tob2xtMQ8wDQYDVQQKEwZDdXJpdHkxDTALBgNVBAsTBExhYnMxCzAJBgNVBAMTAmNhMB4XDTE4MTAxMTEyNTQyMFoXDTI4MTAwODEyNTQyMFowYzELMAkGA1UEBhMCU0UxEzARBgNVBAgTClNvbWUtU3RhdGUxEjAQBgNVBAcTCVN0b2NraG9sbTEPMA0GA1UEChMGQ3VyaXR5MQ0wCwYDVQQLEwRMYWJzMQswCQYDVQQDEwJjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANd1cvikCUYy0ERhbjKaRrcyS/fNDU7DEzmS16cPlG8o3D2H+30yANfPSRGG9CqampFS5SsWgnNiwxH+DQ5+W66i/sZhZ2m+mIj4ecYRbcbH8YkIRuKmX9PYNT95Nqe5OGdvRpTsrXSF84Pqkbnn2EPq5tGgsWyUNTpNEzVYI27hS8L9eN3PdCTt9GCTIrGNxt0+lCISbBuf+o/8xseJKIjkrv2Pr9Ow4L9GovxGpBgd0y6ty85vcjWzwgsuioYtpcUnRAszOxjyVATxbzYDYvcHypvCMTysHe0q+kX32/snCkpPMY5TbZHp+G/5TwriLwR2FfTshaiyKbgS+HDckosCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEAyXa8QR6ClNDC+Ei+VK1JpHh/9Wh0WxPrL2h9Uiomwkz2nVCONCvSAqT1YF91Rr0ae/ehMbl9aoAR1/t+qUQGqL1Nj2bKKI8zGXmG1cQ2kv7dejVq1WUESmjGC+P3Tb+tifQC+lIJGElbFNtrLF6mMjF7KVMXMynNLbij0T4+Mb/HbrD/udDzdtXiVizqPVQLPMTXz1EWXlF/GYtRv676V+sUnwHTtre04Km1+6/7OpoeVFdNBaJ5WUW4lQsOtFk46tVfygBkSOqS3+M8T/gA1Xcdd0qDIAL6+QMLqtha6H+BOYAyblJ/euSptrijj+gVec5maJpF1GR1r9NM+pT5lw\u003d\u003d"
}
2021-05-17 15:39:56 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "date": "Mon, 17 May 2021 15:39:56 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json",
  "content-length": "87"
}
response_body
{"error":"authorization_pending","error_description":"Authentication request pending."}
2021-05-17 15:39:56 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
Authentication request pending.
2021-05-17 15:39:56 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response is pending or slow_down
2021-05-17 15:39:56 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-17 15:39:56 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-17 15:39:56 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
Authentication request pending.
2021-05-17 15:39:56 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
Authentication request pending.
2021-05-17 15:39:56 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-17 15:39:56 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
2021-05-17 15:39:56
CallAutomatedCibaApprovalEndpoint
If your server supports automated testing, you can set 'automated_ciba_approval_url' in your configuration to a url like https://cibasim.example.com/action?token={auth_req_id}&type={action} (auth_req_id will be automatically substituted for the current auth_req_id by the conformance suite, action will be allow or deny depending on the test)
Polling token endpoint waiting for user to authenticate
2021-05-17 15:40:01 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-17 15:40:01
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
AbkMlXmZrsD7vFYqISk0WfQamT1m1S2CH0Lf6TO2
2021-05-17 15:40:01 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
AbkMlXmZrsD7vFYqISk0WfQamT1m1S2CH0Lf6TO2
client_id
client-one
2021-05-17 15:40:01
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://oidc-test.curity.io/dev/oauth/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "126"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=AbkMlXmZrsD7vFYqISk0WfQamT1m1S2CH0Lf6TO2&client_id=client-one
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEpQIBAAKCAQEAxJ4VmvH0PtGbIx+dqphHz9RXFHvork+VR11AcjbuGUJx+1xKXG2G6omSyTOPVeFcv5W/Tyc4Y820MXSybU6370hRLQp/f5dhk/wSs4CRsqWyWVX9DTue6TpRCZ4nx3DCWiGUODr9aoPZX2w5VgUIsh/FFT/o72utj+OpFIrbz01KzUe0rXxgzhmhVscuOop+nOx5JNdqH2rkdcq1vA+lE+NKo5b0+h7j8ENQTBXw+Uq0Dla5Mw9PGcA2Xod7bsfvyrtEEvEMVEgTG0Sktzrmb6gaymiPMPzFlv7qxZAoch02nwsCYHzWMoCL5jlo88qZXZIv8UvA18NyqbRYUuw9ewIDAQABAoIBAQC0ml1QKWXoehLdzYG/HQgBsJOYfkT6MKH3noG/KBPHYhBfCqRHiFgAggQyCslj4pGWbg//vg//JQma0A3BeChehHgEPntlEQGRtF7dQYETrz5G70R1bkmHBIlBo2P4v+vWbLfAevciayA1layJBjC5pZMb9MubeLZB0KYT94T3QfR+QY9Okt0im9RhtjXDctKbAHHglEbEKzvBn3lmVkx7I71JD1QSaq7RyMGPGX+TiCBFU2u4RqVix1+6kNr8gf+2dr1uiTFYVnbQQXkFmEodQb7ujB3FzdDH1qmF88Lx1EKYiJ8O/+FG4PW/itR7/tKEx/CM68OVkdbgnW9YKmMRAoGBAOv47vzTyJYfT5iLQTIiogNUf8TK5dusi74cwRkktWtI16nBbWG6kgB189nXwY9wbODOI7g+0m92kBQ82g1yJdDa6MHMCoxGpEG/Wzmog3NBVm0WBuSATycqi5SdCOdOt6uWMLrnUus6GLvZpTwL3HMBYVIpaX0OiFvzOEloDa2TAoGBANVOElk/UQo7JkBPVmjIJhnZVJn7KWzVpnNhG6EzqTE+XqZAQ8ZQaJZ0ELBuIiWYOl/ipf9ABFMPBohYrXhFslW96qNsrFnmutLStuNYXYsiH5DHBkg2wk0CgkHbtF/j6d0w0lH0BlgP9Z7G3TV0UZ12nC/UkEtkeRoYj2P93eF5AoGBAMeQKoWVkmErr8QhmQyOb5gDYV8L/SMwJKquZLwf6HIIE6PUGu54u7s6BfWo22C0ws/IZjsOnid4DNegswSGEec1C33CUvVZVNbpv3vewPS7QB1XcJLU1JwaBhu0RvBgCUNK7IFU2zJmWr6bjXtfyJtWgnja3wTNQpMI+gRSxKaTAoGAOpkcCVCPntPpCjnBbz+s1+UQjMym8LMw6vl+caaTkGel8N4uwEhOsyZnf1CCKPnM75KAL8MSbQ7vqH1UCnp7J3ro/sRYBMqSAGDKxWH9ML/LFCbY3vXMIwPRbO5CeyVNlepXnRQAuiiIPXo8QvcVhMCU377xdQTBEB43Ji0Ty2ECgYEAv2enN3V2MRjCW/HGM03ROLNWTPQ3nMswwoq5uscszRxQ0NDhFAYferPdu02pTyde5oIOey31Vjvfwh9kXQWqeBuh+TRFC2Hoy3s1aJpxp8qTW4t0lRJjcUDXkPraq2JbdXA3Cj5UcjW9fJDav+Q2AoA/surcDkx2lC1cUNpJIOY\u003d",
  "ca": "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\u003d\u003d"
}
2021-05-17 15:40:01 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Mon, 17 May 2021 15:40:01 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json",
  "content-length": "2295"
}
response_body
{"id_token":"eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.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.C6C5cjo_7xJQUDEQ7mzAUYj14U5JOlli9TpgIzQIvMn8KBgjjvM75Y_S-8uicvnK1W8vts9OjeGTWAPmxMslIh-8AsM4IeZT2YyOSzXCMdGZksgR1txyBi2xKe1z1B6g-0nmdyMr3NaGpz2ryCWt3hGXyYTu7QACDJIgbZy_aK5mjmR0QAr-nU6WtgmQe8bAmybCJPqWPfsoMf48M3o8VWlvpFQGv130CU1xOg5nqbRhlHMAVdKDnVjQgeM8Se4MrXh89GDHr6hgyc75gfmJS_aUYds7UaGExCr4MbgLnxYa4p0KlxqXcDKPmfmfH2feTT_cXkwMsB0D8BX4MoKgYw","token_type":"bearer","access_token":"eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI2ZDg2NjUwNy1mYjZmLTQ5NGYtYmEwNy1kOGI0N2Q3ODYyZTIiLCJkZWxlZ2F0aW9uSWQiOiJlZWExZmI1ZS00N2Q5LTQ0MjAtYTQ3NS01YjYyMWU1N2M2NGUiLCJleHAiOjE2MjEyNjYzMDEsIm5iZiI6MTYyMTI2NjAwMSwic2NvcGUiOiJvcGVuaWQgZW1haWwgYWRkcmVzcyBwaG9uZSBwcm9maWxlIiwiaXNzIjoiaHR0cHM6Ly9vaWRjLXRlc3QuY3VyaXR5LmlvL2Rldi9vYXV0aC9hbm9ueW1vdXMiLCJzdWIiOiJsYXJzZG9lIiwiYXVkIjpbImNsaWVudC1vbmUiLCJhdWRpZW5jZTIiXSwiaWF0IjoxNjIxMjY2MDAxLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIn0.V81ChS-J6R4Ues0x7sv-U5C5DMezhUA1tQ8y-SIv0DB3MXM-kalEP1Y07D63GFm-bQjUUpEwQE9v9G39AIuaMScx9dpb3fKBmPMzfvHvwF9OOYWh4MWI3fIND72umc0PEbz---ZuaTprYuD7V2r3q6_JRHaXI3HVJQrzM88csgxr0ul_BnTuLqC8gys-HzJBFlfQVVsArExJ_pa4Q9QVo6HXDTF6rDTb2J6yqxBw3Fq8njt0vi6CiyQPAuFF_R4ALhxn83XxBOK6Gqg9kV5WKZRD9qoy19brLec0UyP3r6kNNcylEH182-UOCw8yMcUJ-R-gtRXmnwttjs3_HwbKfg","refresh_token":"9e159682-1e9a-4724-8d3e-a7935c73ec11","scope":"openid email address phone profile","expires_in":300}
2021-05-17 15:40:01 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
id_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.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.C6C5cjo_7xJQUDEQ7mzAUYj14U5JOlli9TpgIzQIvMn8KBgjjvM75Y_S-8uicvnK1W8vts9OjeGTWAPmxMslIh-8AsM4IeZT2YyOSzXCMdGZksgR1txyBi2xKe1z1B6g-0nmdyMr3NaGpz2ryCWt3hGXyYTu7QACDJIgbZy_aK5mjmR0QAr-nU6WtgmQe8bAmybCJPqWPfsoMf48M3o8VWlvpFQGv130CU1xOg5nqbRhlHMAVdKDnVjQgeM8Se4MrXh89GDHr6hgyc75gfmJS_aUYds7UaGExCr4MbgLnxYa4p0KlxqXcDKPmfmfH2feTT_cXkwMsB0D8BX4MoKgYw
token_type
bearer
access_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI2ZDg2NjUwNy1mYjZmLTQ5NGYtYmEwNy1kOGI0N2Q3ODYyZTIiLCJkZWxlZ2F0aW9uSWQiOiJlZWExZmI1ZS00N2Q5LTQ0MjAtYTQ3NS01YjYyMWU1N2M2NGUiLCJleHAiOjE2MjEyNjYzMDEsIm5iZiI6MTYyMTI2NjAwMSwic2NvcGUiOiJvcGVuaWQgZW1haWwgYWRkcmVzcyBwaG9uZSBwcm9maWxlIiwiaXNzIjoiaHR0cHM6Ly9vaWRjLXRlc3QuY3VyaXR5LmlvL2Rldi9vYXV0aC9hbm9ueW1vdXMiLCJzdWIiOiJsYXJzZG9lIiwiYXVkIjpbImNsaWVudC1vbmUiLCJhdWRpZW5jZTIiXSwiaWF0IjoxNjIxMjY2MDAxLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIn0.V81ChS-J6R4Ues0x7sv-U5C5DMezhUA1tQ8y-SIv0DB3MXM-kalEP1Y07D63GFm-bQjUUpEwQE9v9G39AIuaMScx9dpb3fKBmPMzfvHvwF9OOYWh4MWI3fIND72umc0PEbz---ZuaTprYuD7V2r3q6_JRHaXI3HVJQrzM88csgxr0ul_BnTuLqC8gys-HzJBFlfQVVsArExJ_pa4Q9QVo6HXDTF6rDTb2J6yqxBw3Fq8njt0vi6CiyQPAuFF_R4ALhxn83XxBOK6Gqg9kV5WKZRD9qoy19brLec0UyP3r6kNNcylEH182-UOCw8yMcUJ-R-gtRXmnwttjs3_HwbKfg
refresh_token
9e159682-1e9a-4724-8d3e-a7935c73ec11
scope
openid email address phone profile
expires_in
300
2021-05-17 15:40:01 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response
2021-05-17 15:40:01 SUCCESS
CheckTokenEndpointHttpStatus200
Token endpoint http status code was 200
2021-05-17 15:40:01 SUCCESS
CheckTokenEndpointCacheHeaders
'pragma' and 'cache-control' headers in token endpoint response contain expected values.
cache_control_header
no-cache, no-store
pragma_header
no-cache
2021-05-17 15:40:01 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2021-05-17 15:40:01 SUCCESS
CheckForAccessTokenValue
Found an access token
access_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI2ZDg2NjUwNy1mYjZmLTQ5NGYtYmEwNy1kOGI0N2Q3ODYyZTIiLCJkZWxlZ2F0aW9uSWQiOiJlZWExZmI1ZS00N2Q5LTQ0MjAtYTQ3NS01YjYyMWU1N2M2NGUiLCJleHAiOjE2MjEyNjYzMDEsIm5iZiI6MTYyMTI2NjAwMSwic2NvcGUiOiJvcGVuaWQgZW1haWwgYWRkcmVzcyBwaG9uZSBwcm9maWxlIiwiaXNzIjoiaHR0cHM6Ly9vaWRjLXRlc3QuY3VyaXR5LmlvL2Rldi9vYXV0aC9hbm9ueW1vdXMiLCJzdWIiOiJsYXJzZG9lIiwiYXVkIjpbImNsaWVudC1vbmUiLCJhdWRpZW5jZTIiXSwiaWF0IjoxNjIxMjY2MDAxLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIn0.V81ChS-J6R4Ues0x7sv-U5C5DMezhUA1tQ8y-SIv0DB3MXM-kalEP1Y07D63GFm-bQjUUpEwQE9v9G39AIuaMScx9dpb3fKBmPMzfvHvwF9OOYWh4MWI3fIND72umc0PEbz---ZuaTprYuD7V2r3q6_JRHaXI3HVJQrzM88csgxr0ul_BnTuLqC8gys-HzJBFlfQVVsArExJ_pa4Q9QVo6HXDTF6rDTb2J6yqxBw3Fq8njt0vi6CiyQPAuFF_R4ALhxn83XxBOK6Gqg9kV5WKZRD9qoy19brLec0UyP3r6kNNcylEH182-UOCw8yMcUJ-R-gtRXmnwttjs3_HwbKfg
2021-05-17 15:40:01 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI2ZDg2NjUwNy1mYjZmLTQ5NGYtYmEwNy1kOGI0N2Q3ODYyZTIiLCJkZWxlZ2F0aW9uSWQiOiJlZWExZmI1ZS00N2Q5LTQ0MjAtYTQ3NS01YjYyMWU1N2M2NGUiLCJleHAiOjE2MjEyNjYzMDEsIm5iZiI6MTYyMTI2NjAwMSwic2NvcGUiOiJvcGVuaWQgZW1haWwgYWRkcmVzcyBwaG9uZSBwcm9maWxlIiwiaXNzIjoiaHR0cHM6Ly9vaWRjLXRlc3QuY3VyaXR5LmlvL2Rldi9vYXV0aC9hbm9ueW1vdXMiLCJzdWIiOiJsYXJzZG9lIiwiYXVkIjpbImNsaWVudC1vbmUiLCJhdWRpZW5jZTIiXSwiaWF0IjoxNjIxMjY2MDAxLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIn0.V81ChS-J6R4Ues0x7sv-U5C5DMezhUA1tQ8y-SIv0DB3MXM-kalEP1Y07D63GFm-bQjUUpEwQE9v9G39AIuaMScx9dpb3fKBmPMzfvHvwF9OOYWh4MWI3fIND72umc0PEbz---ZuaTprYuD7V2r3q6_JRHaXI3HVJQrzM88csgxr0ul_BnTuLqC8gys-HzJBFlfQVVsArExJ_pa4Q9QVo6HXDTF6rDTb2J6yqxBw3Fq8njt0vi6CiyQPAuFF_R4ALhxn83XxBOK6Gqg9kV5WKZRD9qoy19brLec0UyP3r6kNNcylEH182-UOCw8yMcUJ-R-gtRXmnwttjs3_HwbKfg
type
bearer
2021-05-17 15:40:01 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
300
2021-05-17 15:40:01 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
300
2021-05-17 15:40:01 SUCCESS
CheckForRefreshTokenValue
Found a refresh token
refresh_token
9e159682-1e9a-4724-8d3e-a7935c73ec11
2021-05-17 15:40:01 SUCCESS
EnsureMinimumRefreshTokenLength
Refresh token is of sufficient length
actual
288
required
128
2021-05-17 15:40:01 SUCCESS
EnsureMinimumRefreshTokenEntropy
Calculated shannon entropy seems sufficient
actual
132.60752504759628
expected
96.0
2021-05-17 15:40:01 SUCCESS
EnsureMinimumAccessTokenLength
Access token is of sufficient length
actual
6984
required
128
2021-05-17 15:40:01 SUCCESS
EnsureMinimumAccessTokenEntropy
Calculated shannon entropy seems sufficient
actual
5106.770195413188
expected
96.0
2021-05-17 15:40:01 SUCCESS
ExtractIdTokenFromTokenResponse
Found and parsed the id_token from token_endpoint_response
value
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJleHAiOjE2MjEyNjk2MDEsIm5iZiI6MTYyMTI2NjAwMSwianRpIjoiNzZiMzhmM2QtNjlmNi00NDhmLThhNWYtMTMxYTFiM2QzNWExIiwiaXNzIjoiaHR0cHM6Ly9vaWRjLXRlc3QuY3VyaXR5LmlvL2Rldi9vYXV0aC9hbm9ueW1vdXMiLCJhdWQiOiJjbGllbnQtb25lIiwic3ViIjoibGFyc2RvZSIsImF1dGhfdGltZSI6MTYyMTI2NjAwMSwiaWF0IjoxNjIxMjY2MDAxLCJwdXJwb3NlIjoiaWQiLCJhdF9oYXNoIjoiS1ktczFXNXVYc0pESjZpMmFZQ19mdyIsImVtYWlsX3ZlcmlmaWVkIjpmYWxzZSwiYW1yIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsInBob25lX251bWJlcl92ZXJpZmllZCI6ZmFsc2UsInByZWZlcnJlZF91c2VybmFtZSI6ImxhcnNkb2UiLCJnaXZlbl9uYW1lIjoiTGFycyIsImRlbGVnYXRpb25faWQiOiJlZWExZmI1ZS00N2Q5LTQ0MjAtYTQ3NS01YjYyMWU1N2M2NGUiLCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwidXBkYXRlZF9hdCI6MTYyMTI2NTQ3NSwiYXpwIjoiY2xpZW50LW9uZSIsInBob25lX251bWJlciI6IjU2NyIsImZhbWlseV9uYW1lIjoiRG9lIiwiZW1haWwiOiJsYXJzLmRvZUBleGFtcGxlLmNvbSJ9.C6C5cjo_7xJQUDEQ7mzAUYj14U5JOlli9TpgIzQIvMn8KBgjjvM75Y_S-8uicvnK1W8vts9OjeGTWAPmxMslIh-8AsM4IeZT2YyOSzXCMdGZksgR1txyBi2xKe1z1B6g-0nmdyMr3NaGpz2ryCWt3hGXyYTu7QACDJIgbZy_aK5mjmR0QAr-nU6WtgmQe8bAmybCJPqWPfsoMf48M3o8VWlvpFQGv130CU1xOg5nqbRhlHMAVdKDnVjQgeM8Se4MrXh89GDHr6hgyc75gfmJS_aUYds7UaGExCr4MbgLnxYa4p0KlxqXcDKPmfmfH2feTT_cXkwMsB0D8BX4MoKgYw
header
{
  "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A",
  "kid": "1593201964",
  "alg": "PS256"
}
claims
{
  "at_hash": "KY-s1W5uXsJDJ6i2aYC_fw",
  "sub": "larsdoe",
  "email_verified": false,
  "purpose": "id",
  "amr": "urn:mace:incommon:iap:silver",
  "iss": "https://oidc-test.curity.io/dev/oauth/anonymous",
  "phone_number_verified": false,
  "preferred_username": "larsdoe",
  "given_name": "Lars",
  "aud": "client-one",
  "delegation_id": "eea1fb5e-47d9-4420-a475-5b621e57c64e",
  "acr": "urn:mace:incommon:iap:silver",
  "nbf": 1621266001,
  "updated_at": 1621265475,
  "azp": "client-one",
  "auth_time": 1621266001,
  "phone_number": "567",
  "exp": 1621269601,
  "iat": 1621266001,
  "family_name": "Doe",
  "jti": "76b38f3d-69f6-448f-8a5f-131a1b3d35a1",
  "email": "lars.doe@example.com"
}
2021-05-17 15:40:01 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-05-17 15:40:01 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
1593201964
2021-05-17 15:40:01 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.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.C6C5cjo_7xJQUDEQ7mzAUYj14U5JOlli9TpgIzQIvMn8KBgjjvM75Y_S-8uicvnK1W8vts9OjeGTWAPmxMslIh-8AsM4IeZT2YyOSzXCMdGZksgR1txyBi2xKe1z1B6g-0nmdyMr3NaGpz2ryCWt3hGXyYTu7QACDJIgbZy_aK5mjmR0QAr-nU6WtgmQe8bAmybCJPqWPfsoMf48M3o8VWlvpFQGv130CU1xOg5nqbRhlHMAVdKDnVjQgeM8Se4MrXh89GDHr6hgyc75gfmJS_aUYds7UaGExCr4MbgLnxYa4p0KlxqXcDKPmfmfH2feTT_cXkwMsB0D8BX4MoKgYw
2021-05-17 15:40:01 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.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.C6C5cjo_7xJQUDEQ7mzAUYj14U5JOlli9TpgIzQIvMn8KBgjjvM75Y_S-8uicvnK1W8vts9OjeGTWAPmxMslIh-8AsM4IeZT2YyOSzXCMdGZksgR1txyBi2xKe1z1B6g-0nmdyMr3NaGpz2ryCWt3hGXyYTu7QACDJIgbZy_aK5mjmR0QAr-nU6WtgmQe8bAmybCJPqWPfsoMf48M3o8VWlvpFQGv130CU1xOg5nqbRhlHMAVdKDnVjQgeM8Se4MrXh89GDHr6hgyc75gfmJS_aUYds7UaGExCr4MbgLnxYa4p0KlxqXcDKPmfmfH2feTT_cXkwMsB0D8BX4MoKgYw
2021-05-17 15:40:01 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
larsdoe
2021-05-17 15:40:01 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
alg
PS256
2021-05-17 15:40:01 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-05-17 15:40:01 INFO
FAPIValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-05-17 15:40:01 INFO
FAPICIBAValidateIdTokenAuthRequestIdClaims
Skipped evaluation due to missing required element: id_token claims.urn:openid:params:jwt:claim:auth_req_id
path
claims.urn:openid:params:jwt:claim:auth_req_id
mapped
object
id_token
2021-05-17 15:40:01 SUCCESS
ValidateIdTokenNotIncludeCHashAndSHash
id_token claims correctly does not contain 'c_hash' and 's_hash'
claims
{
  "at_hash": "KY-s1W5uXsJDJ6i2aYC_fw",
  "sub": "larsdoe",
  "email_verified": false,
  "purpose": "id",
  "amr": "urn:mace:incommon:iap:silver",
  "iss": "https://oidc-test.curity.io/dev/oauth/anonymous",
  "phone_number_verified": false,
  "preferred_username": "larsdoe",
  "given_name": "Lars",
  "aud": "client-one",
  "delegation_id": "eea1fb5e-47d9-4420-a475-5b621e57c64e",
  "acr": "urn:mace:incommon:iap:silver",
  "nbf": 1621266001,
  "updated_at": 1621265475,
  "azp": "client-one",
  "auth_time": 1621266001,
  "phone_number": "567",
  "exp": 1621269601,
  "iat": 1621266001,
  "family_name": "Doe",
  "jti": "76b38f3d-69f6-448f-8a5f-131a1b3d35a1",
  "email": "lars.doe@example.com"
}
2021-05-17 15:40:01 SUCCESS
ExtractAtHash
Extracted at_hash from ID Token
at_hash
KY-s1W5uXsJDJ6i2aYC_fw
alg
PS256
2021-05-17 15:40:01 INFO
ExtractRtHash
Couldn't find urn:openid:params:jwt:claim:rt_hash claim in the ID token
2021-05-17 15:40:01 INFO
FAPICIBAValidateRtHash
Skipped evaluation due to missing required object: rt_hash
expected
rt_hash
mapped
2021-05-17 15:40:01 SUCCESS
ValidateAtHash
at_hash validated successfully
expected_hash
KY-s1W5uXsJDJ6i2aYC_fw
unhashed_value
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI2ZDg2NjUwNy1mYjZmLTQ5NGYtYmEwNy1kOGI0N2Q3ODYyZTIiLCJkZWxlZ2F0aW9uSWQiOiJlZWExZmI1ZS00N2Q5LTQ0MjAtYTQ3NS01YjYyMWU1N2M2NGUiLCJleHAiOjE2MjEyNjYzMDEsIm5iZiI6MTYyMTI2NjAwMSwic2NvcGUiOiJvcGVuaWQgZW1haWwgYWRkcmVzcyBwaG9uZSBwcm9maWxlIiwiaXNzIjoiaHR0cHM6Ly9vaWRjLXRlc3QuY3VyaXR5LmlvL2Rldi9vYXV0aC9hbm9ueW1vdXMiLCJzdWIiOiJsYXJzZG9lIiwiYXVkIjpbImNsaWVudC1vbmUiLCJhdWRpZW5jZTIiXSwiaWF0IjoxNjIxMjY2MDAxLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIn0.V81ChS-J6R4Ues0x7sv-U5C5DMezhUA1tQ8y-SIv0DB3MXM-kalEP1Y07D63GFm-bQjUUpEwQE9v9G39AIuaMScx9dpb3fKBmPMzfvHvwF9OOYWh4MWI3fIND72umc0PEbz---ZuaTprYuD7V2r3q6_JRHaXI3HVJQrzM88csgxr0ul_BnTuLqC8gys-HzJBFlfQVVsArExJ_pa4Q9QVo6HXDTF6rDTb2J6yqxBw3Fq8njt0vi6CiyQPAuFF_R4ALhxn83XxBOK6Gqg9kV5WKZRD9qoy19brLec0UyP3r6kNNcylEH182-UOCw8yMcUJ-R-gtRXmnwttjs3_HwbKfg
id_token_hash
KY-s1W5uXsJDJ6i2aYC_fw
Check for refresh token
2021-05-17 15:40:01 SUCCESS
ExtractRefreshTokenFromTokenResponse
Extracted refresh token from response
refresh_token
9e159682-1e9a-4724-8d3e-a7935c73ec11
2021-05-17 15:40:01 SUCCESS
EnsureServerConfigurationSupportsRefreshToken
The server configuration indicates support for refresh tokens
supported_grant_types
[
  "refresh_token",
  "implicit",
  "client_credentials",
  "password",
  "https://curity.se/grant/accesstoken",
  "authorization_code",
  "urn:openid:params:grant-type:ciba"
]
2021-05-17 15:40:01 SUCCESS
EnsureRefreshTokenContainsAllowedCharactersOnly
Refresh token does not contain any illegal characters
Refresh Token Request
2021-05-17 15:40:01 SUCCESS
CreateRefreshTokenRequest
Created token endpoint request parameters
grant_type
refresh_token
refresh_token
9e159682-1e9a-4724-8d3e-a7935c73ec11
2021-05-17 15:40:01 SUCCESS
AddScopeToTokenEndpointRequest
Added scope of 'openid email address phone profile' to token endpoint request
grant_type
refresh_token
refresh_token
9e159682-1e9a-4724-8d3e-a7935c73ec11
scope
openid email address phone profile
2021-05-17 15:40:01 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
refresh_token
refresh_token
9e159682-1e9a-4724-8d3e-a7935c73ec11
scope
openid email address phone profile
client_id
client-one
2021-05-17 15:40:01 SUCCESS
WaitForOneSecond
Pausing for 1 seconds
2021-05-17 15:40:02 SUCCESS
WaitForOneSecond
Woke up after 1 seconds sleep
2021-05-17 15:40:02
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://oidc-test.curity.io/dev/oauth/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "137"
}
request_body
grant_type=refresh_token&refresh_token=9e159682-1e9a-4724-8d3e-a7935c73ec11&scope=openid+email+address+phone+profile&client_id=client-one
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d",
  "ca": "MIIDQjCCAioCCQDSZMWEy1bkajANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJTRTETMBEGA1UECBMKU29tZS1TdGF0ZTESMBAGA1UEBxMJU3RvY2tob2xtMQ8wDQYDVQQKEwZDdXJpdHkxDTALBgNVBAsTBExhYnMxCzAJBgNVBAMTAmNhMB4XDTE4MTAxMTEyNTQyMFoXDTI4MTAwODEyNTQyMFowYzELMAkGA1UEBhMCU0UxEzARBgNVBAgTClNvbWUtU3RhdGUxEjAQBgNVBAcTCVN0b2NraG9sbTEPMA0GA1UEChMGQ3VyaXR5MQ0wCwYDVQQLEwRMYWJzMQswCQYDVQQDEwJjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANd1cvikCUYy0ERhbjKaRrcyS/fNDU7DEzmS16cPlG8o3D2H+30yANfPSRGG9CqampFS5SsWgnNiwxH+DQ5+W66i/sZhZ2m+mIj4ecYRbcbH8YkIRuKmX9PYNT95Nqe5OGdvRpTsrXSF84Pqkbnn2EPq5tGgsWyUNTpNEzVYI27hS8L9eN3PdCTt9GCTIrGNxt0+lCISbBuf+o/8xseJKIjkrv2Pr9Ow4L9GovxGpBgd0y6ty85vcjWzwgsuioYtpcUnRAszOxjyVATxbzYDYvcHypvCMTysHe0q+kX32/snCkpPMY5TbZHp+G/5TwriLwR2FfTshaiyKbgS+HDckosCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEAyXa8QR6ClNDC+Ei+VK1JpHh/9Wh0WxPrL2h9Uiomwkz2nVCONCvSAqT1YF91Rr0ae/ehMbl9aoAR1/t+qUQGqL1Nj2bKKI8zGXmG1cQ2kv7dejVq1WUESmjGC+P3Tb+tifQC+lIJGElbFNtrLF6mMjF7KVMXMynNLbij0T4+Mb/HbrD/udDzdtXiVizqPVQLPMTXz1EWXlF/GYtRv676V+sUnwHTtre04Km1+6/7OpoeVFdNBaJ5WUW4lQsOtFk46tVfygBkSOqS3+M8T/gA1Xcdd0qDIAL6+QMLqtha6H+BOYAyblJ/euSptrijj+gVec5maJpF1GR1r9NM+pT5lw\u003d\u003d"
}
2021-05-17 15:40:02 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Mon, 17 May 2021 15:40:02 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json",
  "content-length": "1118"
}
response_body
{"token_type":"bearer","access_token":"eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.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.d65bPghalDLAMP-4BFAbYHFuDEwpqwpU4F75hZQ2TlYQCwrW4h6kOF-r1wUG7IrNAmgDc_Cl7eiwIJzhzU-HHw8H4w1EdXFXkZ8egnbqjHv2gqH50TiCRSkt73ebuMdJ7JzfplbYUI0Mia-eDQbjtsGi1fKwU6Qc5-qU9ghwN-sDeZPydCB5-FseBO1nBfRxPm7WPU5c0HYwPZdg0mYtsKYEaEcDLLjEPiaq1tzU25qx9eWJEFuISDnZWcOxBxZaeSFEvvhAwc_1OQ1YIVX4KLSAkH1B8xIYuc937xu0mCS3dXwaN8_3W20zemRKwJmJrjAJ-FXS_GOvFEDb-LlSpg","refresh_token":"57165db7-afb2-4fd5-9820-8c3cf9583cef","scope":"address phone openid profile email","expires_in":300}
2021-05-17 15:40:02 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
token_type
bearer
access_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI4MzRhNmQ1MS05MDdkLTQ2OTQtYTlhMi0yMWZjNmUxYTBjNDciLCJkZWxlZ2F0aW9uSWQiOiJlZWExZmI1ZS00N2Q5LTQ0MjAtYTQ3NS01YjYyMWU1N2M2NGUiLCJleHAiOjE2MjEyNjYzMDIsIm5iZiI6MTYyMTI2NjAwMiwic2NvcGUiOiJhZGRyZXNzIHBob25lIG9wZW5pZCBwcm9maWxlIGVtYWlsIiwiaXNzIjoiaHR0cHM6Ly9vaWRjLXRlc3QuY3VyaXR5LmlvL2Rldi9vYXV0aC9hbm9ueW1vdXMiLCJzdWIiOiJsYXJzZG9lIiwiYXVkIjpbImNsaWVudC1vbmUiLCJhdWRpZW5jZTIiXSwiaWF0IjoxNjIxMjY2MDAyLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIiwiY25mIjp7Ing1dCNTMjU2IjoiRmplSGN2SndpSFhscjhkZ25QN1V2TFE3ZExMTVRlXzNTZ01ZTXVFcGVrYyJ9fQ.d65bPghalDLAMP-4BFAbYHFuDEwpqwpU4F75hZQ2TlYQCwrW4h6kOF-r1wUG7IrNAmgDc_Cl7eiwIJzhzU-HHw8H4w1EdXFXkZ8egnbqjHv2gqH50TiCRSkt73ebuMdJ7JzfplbYUI0Mia-eDQbjtsGi1fKwU6Qc5-qU9ghwN-sDeZPydCB5-FseBO1nBfRxPm7WPU5c0HYwPZdg0mYtsKYEaEcDLLjEPiaq1tzU25qx9eWJEFuISDnZWcOxBxZaeSFEvvhAwc_1OQ1YIVX4KLSAkH1B8xIYuc937xu0mCS3dXwaN8_3W20zemRKwJmJrjAJ-FXS_GOvFEDb-LlSpg
refresh_token
57165db7-afb2-4fd5-9820-8c3cf9583cef
scope
address phone openid profile email
expires_in
300
2021-05-17 15:40:02 SUCCESS
CheckTokenEndpointHttpStatus200
Token endpoint http status code was 200
2021-05-17 15:40:02 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-17 15:40:02 SUCCESS
CheckTokenEndpointCacheHeaders
'pragma' and 'cache-control' headers in token endpoint response contain expected values.
cache_control_header
no-cache, no-store
pragma_header
no-cache
2021-05-17 15:40:02 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2021-05-17 15:40:02 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.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.d65bPghalDLAMP-4BFAbYHFuDEwpqwpU4F75hZQ2TlYQCwrW4h6kOF-r1wUG7IrNAmgDc_Cl7eiwIJzhzU-HHw8H4w1EdXFXkZ8egnbqjHv2gqH50TiCRSkt73ebuMdJ7JzfplbYUI0Mia-eDQbjtsGi1fKwU6Qc5-qU9ghwN-sDeZPydCB5-FseBO1nBfRxPm7WPU5c0HYwPZdg0mYtsKYEaEcDLLjEPiaq1tzU25qx9eWJEFuISDnZWcOxBxZaeSFEvvhAwc_1OQ1YIVX4KLSAkH1B8xIYuc937xu0mCS3dXwaN8_3W20zemRKwJmJrjAJ-FXS_GOvFEDb-LlSpg
type
bearer
2021-05-17 15:40:02 SUCCESS
CheckTokenTypeIsBearer
Token type is bearer
2021-05-17 15:40:02 SUCCESS
EnsureMinimumAccessTokenEntropy
Calculated shannon entropy seems sufficient
actual
5590.651543509545
expected
96.0
2021-05-17 15:40:02 SUCCESS
EnsureAccessTokenContainsAllowedCharactersOnly
Access token does not contain any illegal characters
2021-05-17 15:40:02 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
300
2021-05-17 15:40:02 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
300
2021-05-17 15:40:02 SUCCESS
EnsureAccessTokenValuesAreDifferent
Access token values are not the same
first_access_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI2ZDg2NjUwNy1mYjZmLTQ5NGYtYmEwNy1kOGI0N2Q3ODYyZTIiLCJkZWxlZ2F0aW9uSWQiOiJlZWExZmI1ZS00N2Q5LTQ0MjAtYTQ3NS01YjYyMWU1N2M2NGUiLCJleHAiOjE2MjEyNjYzMDEsIm5iZiI6MTYyMTI2NjAwMSwic2NvcGUiOiJvcGVuaWQgZW1haWwgYWRkcmVzcyBwaG9uZSBwcm9maWxlIiwiaXNzIjoiaHR0cHM6Ly9vaWRjLXRlc3QuY3VyaXR5LmlvL2Rldi9vYXV0aC9hbm9ueW1vdXMiLCJzdWIiOiJsYXJzZG9lIiwiYXVkIjpbImNsaWVudC1vbmUiLCJhdWRpZW5jZTIiXSwiaWF0IjoxNjIxMjY2MDAxLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIn0.V81ChS-J6R4Ues0x7sv-U5C5DMezhUA1tQ8y-SIv0DB3MXM-kalEP1Y07D63GFm-bQjUUpEwQE9v9G39AIuaMScx9dpb3fKBmPMzfvHvwF9OOYWh4MWI3fIND72umc0PEbz---ZuaTprYuD7V2r3q6_JRHaXI3HVJQrzM88csgxr0ul_BnTuLqC8gys-HzJBFlfQVVsArExJ_pa4Q9QVo6HXDTF6rDTb2J6yqxBw3Fq8njt0vi6CiyQPAuFF_R4ALhxn83XxBOK6Gqg9kV5WKZRD9qoy19brLec0UyP3r6kNNcylEH182-UOCw8yMcUJ-R-gtRXmnwttjs3_HwbKfg
second_access_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI4MzRhNmQ1MS05MDdkLTQ2OTQtYTlhMi0yMWZjNmUxYTBjNDciLCJkZWxlZ2F0aW9uSWQiOiJlZWExZmI1ZS00N2Q5LTQ0MjAtYTQ3NS01YjYyMWU1N2M2NGUiLCJleHAiOjE2MjEyNjYzMDIsIm5iZiI6MTYyMTI2NjAwMiwic2NvcGUiOiJhZGRyZXNzIHBob25lIG9wZW5pZCBwcm9maWxlIGVtYWlsIiwiaXNzIjoiaHR0cHM6Ly9vaWRjLXRlc3QuY3VyaXR5LmlvL2Rldi9vYXV0aC9hbm9ueW1vdXMiLCJzdWIiOiJsYXJzZG9lIiwiYXVkIjpbImNsaWVudC1vbmUiLCJhdWRpZW5jZTIiXSwiaWF0IjoxNjIxMjY2MDAyLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIiwiY25mIjp7Ing1dCNTMjU2IjoiRmplSGN2SndpSFhscjhkZ25QN1V2TFE3ZExMTVRlXzNTZ01ZTXVFcGVrYyJ9fQ.d65bPghalDLAMP-4BFAbYHFuDEwpqwpU4F75hZQ2TlYQCwrW4h6kOF-r1wUG7IrNAmgDc_Cl7eiwIJzhzU-HHw8H4w1EdXFXkZ8egnbqjHv2gqH50TiCRSkt73ebuMdJ7JzfplbYUI0Mia-eDQbjtsGi1fKwU6Qc5-qU9ghwN-sDeZPydCB5-FseBO1nBfRxPm7WPU5c0HYwPZdg0mYtsKYEaEcDLLjEPiaq1tzU25qx9eWJEFuISDnZWcOxBxZaeSFEvvhAwc_1OQ1YIVX4KLSAkH1B8xIYuc937xu0mCS3dXwaN8_3W20zemRKwJmJrjAJ-FXS_GOvFEDb-LlSpg
2021-05-17 15:40:02 INFO
ExtractIdTokenFromTokenResponse
Couldn't find id_token in token_endpoint_response
2021-05-17 15:40:02 SUCCESS
ExtractRefreshTokenFromTokenResponse
Extracted refresh token from response
refresh_token
57165db7-afb2-4fd5-9820-8c3cf9583cef
2021-05-17 15:40:02 SUCCESS
EnsureMinimumRefreshTokenLength
Refresh token is of sufficient length
actual
288
required
128
2021-05-17 15:40:02 SUCCESS
EnsureMinimumRefreshTokenEntropy
Calculated shannon entropy seems sufficient
actual
140.60752504759628
expected
96.0
2021-05-17 15:40:02 INFO
CompareIdTokenClaims
Skipped evaluation due to missing required object: second_id_token
expected
second_id_token
mapped
second_id_token
Resource server endpoint tests
2021-05-17 15:40:02
CreateEmptyResourceEndpointRequestHeaders
Created empty headers
resource_endpoint_request_headers
{}
2021-05-17 15:40:02 SUCCESS
AddFAPIAuthDateToResourceEndpointRequest
Added x-fapi-auth-date to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Mon, 17 May 2021 15:40:02 GMT"
}
2021-05-17 15:40:02
CreateRandomFAPIInteractionId
Created interaction ID
fapi_interaction_id
60f9b072-1ca5-4f0d-84d7-bce324d32a9f
2021-05-17 15:40:02
AddFAPIInteractionIdToResourceEndpointRequest
Condition ran but did not log anything
2021-05-17 15:40:02
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP request
request_uri
https://oidc-test.curity.io:7777/fapi/rs
request_method
GET
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "x-fapi-auth-date": "Mon, 17 May 2021 15:40:02 GMT",
  "x-fapi-interaction-id": "60f9b072-1ca5-4f0d-84d7-bce324d32a9f",
  "authorization": "Bearer eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.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.d65bPghalDLAMP-4BFAbYHFuDEwpqwpU4F75hZQ2TlYQCwrW4h6kOF-r1wUG7IrNAmgDc_Cl7eiwIJzhzU-HHw8H4w1EdXFXkZ8egnbqjHv2gqH50TiCRSkt73ebuMdJ7JzfplbYUI0Mia-eDQbjtsGi1fKwU6Qc5-qU9ghwN-sDeZPydCB5-FseBO1nBfRxPm7WPU5c0HYwPZdg0mYtsKYEaEcDLLjEPiaq1tzU25qx9eWJEFuISDnZWcOxBxZaeSFEvvhAwc_1OQ1YIVX4KLSAkH1B8xIYuc937xu0mCS3dXwaN8_3W20zemRKwJmJrjAJ-FXS_GOvFEDb-LlSpg",
  "accept-charset": "utf-8",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d",
  "ca": "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\u003d\u003d"
}
2021-05-17 15:40:03 RESPONSE
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Mon, 17 May 2021 15:40:03 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "x-fapi-interaction-id": "60f9b072-1ca5-4f0d-84d7-bce324d32a9f",
  "transfer-encoding": "chunked"
}
response_body
{"result":"OK (with certificate)"}
2021-05-17 15:40:03 SUCCESS
CallProtectedResourceWithBearerTokenAndCustomHeaders
Got a response from the resource endpoint
headers
{
  "date": "Mon, 17 May 2021 15:40:03 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "x-fapi-interaction-id": "60f9b072-1ca5-4f0d-84d7-bce324d32a9f",
  "transfer-encoding": "chunked"
}
status_code
{
  "code": 200
}
body
{"result":"OK (with certificate)"}
2021-05-17 15:40:03 SUCCESS
CheckForDateHeaderInResourceResponse
Date header present and validated
date
Mon, 17 May 2021 15:40:03 GMT
skew
124
2021-05-17 15:40:03 SUCCESS
CheckForFAPIInteractionIdInResourceResponse
Found x-fapi-interaction-id
interaction_id
60f9b072-1ca5-4f0d-84d7-bce324d32a9f
2021-05-17 15:40:03 SUCCESS
EnsureMatchingFAPIInteractionId
Interaction ID matched
fapi_interaction_id
60f9b072-1ca5-4f0d-84d7-bce324d32a9f
2021-05-17 15:40:03 SUCCESS
EnsureResourceResponseReturnedJsonContentType
Response content type is JSON
content_type
application/json;charset=utf-8
Second client: Call backchannel authentication endpoint
2021-05-17 15:40:03 SUCCESS
CreateEmptyAuthorizationEndpointRequest
Created empty authorization endpoint request
2021-05-17 15:40:03 SUCCESS
AddScopeToAuthorizationEndpointRequest
Added scope of 'openid' to authorization endpoint request
scope
openid
2021-05-17 15:40:03 SUCCESS
AddHintToAuthorizationEndpointRequest
Added hint to authorization endpoint request
login_hint
larsdoe
2021-05-17 15:40:03 SUCCESS
AddBindingMessageToAuthorizationEndpointRequest
Added binding message to authorization endpoint request
binding_message
1234
2021-05-17 15:40:03 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "scope": "openid",
  "login_hint": "larsdoe",
  "binding_message": "1234"
}
2021-05-17 15:40:03 SUCCESS
AddIatToRequestObject
Added iat to request object claims
iat
1.621266003E9
2021-05-17 15:40:03 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.621266303E9
2021-05-17 15:40:03 SUCCESS
AddNbfToRequestObject
Added nbf to request object claims
nbf
1.621266003E9
2021-05-17 15:40:03 SUCCESS
AddJtiToRequestObject
Added jti to request object claims
jti
T0XXHY9bCPVRDUtr9bpc
2021-05-17 15:40:03 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://oidc-test.curity.io/dev/oauth/anonymous
2021-05-17 15:40:03 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
client-two
2021-05-17 15:40:03 SUCCESS
SignRequestObject
Signed the request object
claims
{"aud":"https:\/\/oidc-test.curity.io\/dev\/oauth\/anonymous","login_hint":"larsdoe","nbf":1621266003,"scope":"openid","iss":"client-two","binding_message":"1234","exp":1621266303,"iat":1621266003,"jti":"T0XXHY9bCPVRDUtr9bpc"}
header
{"kid":"foo","alg":"PS256"}
request_object
eyJraWQiOiJmb28iLCJhbGciOiJQUzI1NiJ9.eyJhdWQiOiJodHRwczpcL1wvb2lkYy10ZXN0LmN1cml0eS5pb1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibG9naW5faGludCI6ImxhcnNkb2UiLCJuYmYiOjE2MjEyNjYwMDMsInNjb3BlIjoib3BlbmlkIiwiaXNzIjoiY2xpZW50LXR3byIsImJpbmRpbmdfbWVzc2FnZSI6IjEyMzQiLCJleHAiOjE2MjEyNjYzMDMsImlhdCI6MTYyMTI2NjAwMywianRpIjoiVDBYWEhZOWJDUFZSRFV0cjlicGMifQ.vVhrN_GxWeR1x0qRpN50pfQXuhJIRWzr-4TvTn3AWUDQYx-q9NtbpcDry62Eve69fl2gIJuyaNp5841j0fRzZiTscmQuF4l0e6RkVIy9LD3fjAmbdhilnsvdfUbpmbfJ6_8fLXj0cJCwI_JhxcspZT4cO3covLlko9wSzLwjcHWlVkKljZWNBn_lac-3iAP7ZqTyUOd8gwp5brV5yutld2TpEgygUBfbmTnSjkQP7xCX7kF9m4G-0Mgnv-qL3wlQ3xWz9nieFzaR6uaF2DcaW_-sH8YzTTzQ_px6f6zjnvTg7faGHVGl_CCOBHyIkRXeLUJFWWtLe1zqPeHyFXS85kZ-y955cTBOoUuShurJB-msQiBJSrpjGzNuLc-qLu9i6_4ddZNdj1n_Sc5gurIFTkNpiVwQsCy7nJWi4ueqVNUv-QMpTjS_pkbCe5H_54Z52WrU1PYttMtJuVCr3PhOKqog0lRGH7UO6PqsW4vpksZj6K1LsrXfIrMvRS5YkGc7v9c2hJUJ9puYvvUB914KyiW23fw4UfxTSxxqz_PHFlpw7TN0CdZBEQLT0jKt8xSgQIJb2Qs20ELQIet1lSYlP9b9fo57h5GXyR4DX3upUIuhcOiRflszZ-ZxVfiGOjvmwA1TpIdEJNoO-HMca0ySNoB0zcDHWzuu3YAIVE9o4F8
key
{"p":"-YTSnw-kdbuSWDG3LbFL7oYYkBsMTEbOE8ZhRQogy5lPVUiI-EJ0pQenvjVIlFEElo0liY2POGsDWu67qBdp6gwITYMgkxg4YLvvhe2mGpBL7OfULYUIJgQ-ZVGc_wKpjXzbx6An4EeS7GNXAoMMG1KPTv-iNs4jSQuDJBvQKo4MKLrBBdEXMYO4gMZMJDs2Rog_AKyAoR912U1Ad5U6HlkHxsGlxG-3_kb7bFHCtOaF5XRMI6Pqyfzf7t5XByz0spTqhTRA45LH4TOArGXFWm1_GB6uj-K7s8NkL5VmUC-jZeGxGFthSiQHjSGWNvgM-Ors_lUIVhf-EciLdOtd_Q","kty":"RSA","q":"4RuJTEJMhsi5jux5wZ_zvuFJiXgA51SujdFE0Gy_f8czCg15Csfqa5Ubew5aVA8HHUoteyVkui3jkp4UQH2zhwUbrY5NF81aB_jw-n7cu5MvJywe9QJ0x7x8Ku0trYruFj6jULLJGR_jbQh_8mNxviwlrm6pBvl9aLXLBP_TKXt9ir73WNcAEh3EJ26FJPr6AY4rWdapZhZigleVmA81967RoYWJeG1pLdDp2L7SPgaxhirvYXwsOgJc8iziEJ1QBBpFYvaBNWTTrgPMi6Mmcc8UqFE1GBHN0qf3ceTUYv-YsjZrzU2pgr5sAaguigZxtuQ-PPL0lFUdRJV7zQsT-w","d":"LX9UHpMiMTUtzh2VP1wgf93xjaYEm6qTwOZQGl_hfwlO0rfF4u5L1RO_JPviFnkA7JRIqZXSLON17szVRLfbhe-EQkoJA6CIUKrpmgKSL6f0p1mCt1oC-Tafvw529IfWtupWcOcSZsk0B8WJ-hOM6zfpyzuua1hKHZ7HdTIWPK1_LCBmBLfDbPR7fnDP987EgqlIfgt4poxXRUPU5997IUPu52-82RUjUlTYzh8gjHLXme9f6n0cmyL-IRwiA-mxBlp0w5Xuwy281AXQFmnetcuMja9I5_Pwf6wHw2XNLp8CHGXFPyI0VJUw-tatkLD7Zk1WM7oXdFHzg1LY7_J4XtIQHYgREzWxc7M8SGSvy-HTz19vaztOT9OOfSUyBT0cbYzUAptwVEQsUnahxloT3eK8C-oZTjWd1AZD_X4rgQKdqQyuex5p35volI3CpIrizLc6a5ljF0HM832mSW4W5SUcd2oyr3Fd41RBaoIj7wQFKPxPsnF3VBeHVAdgUw8FNerob3mmRBIL12upK_iY_tv7TONBJXRx8dHonKt0ukoxW0VPmjlorGvH_GMX7HtpY9YHvGZXPsgVnMJHxmYz7J6jBGnaczlYgPjOEgsUa2mGH40-ZTF1kcWG8VJOYnnGdAItrPG1GBt3yOcdIb1BiYNC4LJdZQXsvFS-lasEohE","e":"AQAB","kid":"foo","qi":"GxvAPQ5BUOcVWxj_OJmV803BhlJreMOlXAIHSi4RYWkF2kI7uv3ALxFkPLPoadX-TAahyyv_yIzYIPKriFEB-4wHTSQRg3FZfFKV-uCrIQr3teoRm9IqV9g3U2l-Fo25s4aGMOTuahesoV2vj8fEEd6xiR83nf7sppWino7PaQ-3nMkGrhQbC7TlP016JLoBS3OQPi1NXiRHnVpaz7NuUDDxSFHbH-CayTn_ByiWpi6KbAgM4J63-flYF_F6ejWr2x4MWk2ASWWRUMgag96h9c3fEUVkBIKzZm9oVEP41JfnxodvREgqXPw4JRI8ylPNVzQ8ZReWCfx0UcWELCgI9w","dp":"ypMqSFbzx13Ef3PFawRRSFJ4KK68-kRV1LoviFSjsYhDX1LnWN7jQoSHjCZISZnJJs1rF1TlXQGMlMvTcLGpnImuR_fYf3OfefG6kboSK-jQq4K_wUELD4pMegebdXHc4_DlohmFplGVl_NC1dg9AQWzMYjbUrFi9k-xZaRrCdGPT5XnVeiecuWk6m-Tq6qi8vp0ZACo4abgD87nMu7lY3QWmyfmhCfLclaAkz2B3Up2lIYptpnC6cAysgSzFTFLbJz4FbMJp3koa85bfhuV8UeKcrOeN1T13QkaEoOxsBItD27_T24I-59qvgrxoKkcJw7b39R7UyJhdGCj0AWypQ","alg":"PS256","dq":"iGIAix1X9AlEsxz-n5rjOHCR9yGnmoApyW5SfNyGIUp019BV13xLwKZ0IdgOTgNU0iAQ8h0zq8EFsdzodDI0RMeJf1tJxfP6af4fMgUOgu6nkNogX1z_l8vQhslv9UbI_N0yYUAQqpIxXevaaOZrEUb6BXayHbGmk3wg5oSAUQ-qfhc5ELAiMNer8h_5tu__7FVQWnu94kYJpOKflaMRlWBrTar0IOxY3xNFurXR9xZjE-CLa8qpmPO5kFg1Fs_YnMO16kFjAxB1V2ah1LAiKK3H3DpnKpAO3WQ6fNyg-OHWh5KFObulybrJAS_-Ek3ZM2-RbafdGsl-lADlItNlZQ","n":"22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8"}
2021-05-17 15:40:03 SUCCESS
CreateBackchannelAuthenticationEndpointRequest
Created backchannel authentication endpoint request
2021-05-17 15:40:03
AddRequestToBackchannelAuthenticationEndpointRequest
request
eyJraWQiOiJmb28iLCJhbGciOiJQUzI1NiJ9.eyJhdWQiOiJodHRwczpcL1wvb2lkYy10ZXN0LmN1cml0eS5pb1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibG9naW5faGludCI6ImxhcnNkb2UiLCJuYmYiOjE2MjEyNjYwMDMsInNjb3BlIjoib3BlbmlkIiwiaXNzIjoiY2xpZW50LXR3byIsImJpbmRpbmdfbWVzc2FnZSI6IjEyMzQiLCJleHAiOjE2MjEyNjYzMDMsImlhdCI6MTYyMTI2NjAwMywianRpIjoiVDBYWEhZOWJDUFZSRFV0cjlicGMifQ.vVhrN_GxWeR1x0qRpN50pfQXuhJIRWzr-4TvTn3AWUDQYx-q9NtbpcDry62Eve69fl2gIJuyaNp5841j0fRzZiTscmQuF4l0e6RkVIy9LD3fjAmbdhilnsvdfUbpmbfJ6_8fLXj0cJCwI_JhxcspZT4cO3covLlko9wSzLwjcHWlVkKljZWNBn_lac-3iAP7ZqTyUOd8gwp5brV5yutld2TpEgygUBfbmTnSjkQP7xCX7kF9m4G-0Mgnv-qL3wlQ3xWz9nieFzaR6uaF2DcaW_-sH8YzTTzQ_px6f6zjnvTg7faGHVGl_CCOBHyIkRXeLUJFWWtLe1zqPeHyFXS85kZ-y955cTBOoUuShurJB-msQiBJSrpjGzNuLc-qLu9i6_4ddZNdj1n_Sc5gurIFTkNpiVwQsCy7nJWi4ueqVNUv-QMpTjS_pkbCe5H_54Z52WrU1PYttMtJuVCr3PhOKqog0lRGH7UO6PqsW4vpksZj6K1LsrXfIrMvRS5YkGc7v9c2hJUJ9puYvvUB914KyiW23fw4UfxTSxxqz_PHFlpw7TN0CdZBEQLT0jKt8xSgQIJb2Qs20ELQIet1lSYlP9b9fo57h5GXyR4DX3upUIuhcOiRflszZ-ZxVfiGOjvmwA1TpIdEJNoO-HMca0ySNoB0zcDHWzuu3YAIVE9o4F8
2021-05-17 15:40:03 SUCCESS
EnsureServerConfigurationSupportsMTLS
Found supported MTLS method
method
tls_client_auth
2021-05-17 15:40:03
AddClientIdToBackchannelAuthenticationEndpointRequest
request
eyJraWQiOiJmb28iLCJhbGciOiJQUzI1NiJ9.eyJhdWQiOiJodHRwczpcL1wvb2lkYy10ZXN0LmN1cml0eS5pb1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibG9naW5faGludCI6ImxhcnNkb2UiLCJuYmYiOjE2MjEyNjYwMDMsInNjb3BlIjoib3BlbmlkIiwiaXNzIjoiY2xpZW50LXR3byIsImJpbmRpbmdfbWVzc2FnZSI6IjEyMzQiLCJleHAiOjE2MjEyNjYzMDMsImlhdCI6MTYyMTI2NjAwMywianRpIjoiVDBYWEhZOWJDUFZSRFV0cjlicGMifQ.vVhrN_GxWeR1x0qRpN50pfQXuhJIRWzr-4TvTn3AWUDQYx-q9NtbpcDry62Eve69fl2gIJuyaNp5841j0fRzZiTscmQuF4l0e6RkVIy9LD3fjAmbdhilnsvdfUbpmbfJ6_8fLXj0cJCwI_JhxcspZT4cO3covLlko9wSzLwjcHWlVkKljZWNBn_lac-3iAP7ZqTyUOd8gwp5brV5yutld2TpEgygUBfbmTnSjkQP7xCX7kF9m4G-0Mgnv-qL3wlQ3xWz9nieFzaR6uaF2DcaW_-sH8YzTTzQ_px6f6zjnvTg7faGHVGl_CCOBHyIkRXeLUJFWWtLe1zqPeHyFXS85kZ-y955cTBOoUuShurJB-msQiBJSrpjGzNuLc-qLu9i6_4ddZNdj1n_Sc5gurIFTkNpiVwQsCy7nJWi4ueqVNUv-QMpTjS_pkbCe5H_54Z52WrU1PYttMtJuVCr3PhOKqog0lRGH7UO6PqsW4vpksZj6K1LsrXfIrMvRS5YkGc7v9c2hJUJ9puYvvUB914KyiW23fw4UfxTSxxqz_PHFlpw7TN0CdZBEQLT0jKt8xSgQIJb2Qs20ELQIet1lSYlP9b9fo57h5GXyR4DX3upUIuhcOiRflszZ-ZxVfiGOjvmwA1TpIdEJNoO-HMca0ySNoB0zcDHWzuu3YAIVE9o4F8
client_id
client-two
2021-05-17 15:40:03
CallBackchannelAuthenticationEndpoint
HTTP request
request_uri
https://oidc-test.curity.io/bc-auth
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "1052"
}
request_body
request=eyJraWQiOiJmb28iLCJhbGciOiJQUzI1NiJ9.eyJhdWQiOiJodHRwczpcL1wvb2lkYy10ZXN0LmN1cml0eS5pb1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibG9naW5faGludCI6ImxhcnNkb2UiLCJuYmYiOjE2MjEyNjYwMDMsInNjb3BlIjoib3BlbmlkIiwiaXNzIjoiY2xpZW50LXR3byIsImJpbmRpbmdfbWVzc2FnZSI6IjEyMzQiLCJleHAiOjE2MjEyNjYzMDMsImlhdCI6MTYyMTI2NjAwMywianRpIjoiVDBYWEhZOWJDUFZSRFV0cjlicGMifQ.vVhrN_GxWeR1x0qRpN50pfQXuhJIRWzr-4TvTn3AWUDQYx-q9NtbpcDry62Eve69fl2gIJuyaNp5841j0fRzZiTscmQuF4l0e6RkVIy9LD3fjAmbdhilnsvdfUbpmbfJ6_8fLXj0cJCwI_JhxcspZT4cO3covLlko9wSzLwjcHWlVkKljZWNBn_lac-3iAP7ZqTyUOd8gwp5brV5yutld2TpEgygUBfbmTnSjkQP7xCX7kF9m4G-0Mgnv-qL3wlQ3xWz9nieFzaR6uaF2DcaW_-sH8YzTTzQ_px6f6zjnvTg7faGHVGl_CCOBHyIkRXeLUJFWWtLe1zqPeHyFXS85kZ-y955cTBOoUuShurJB-msQiBJSrpjGzNuLc-qLu9i6_4ddZNdj1n_Sc5gurIFTkNpiVwQsCy7nJWi4ueqVNUv-QMpTjS_pkbCe5H_54Z52WrU1PYttMtJuVCr3PhOKqog0lRGH7UO6PqsW4vpksZj6K1LsrXfIrMvRS5YkGc7v9c2hJUJ9puYvvUB914KyiW23fw4UfxTSxxqz_PHFlpw7TN0CdZBEQLT0jKt8xSgQIJb2Qs20ELQIet1lSYlP9b9fo57h5GXyR4DX3upUIuhcOiRflszZ-ZxVfiGOjvmwA1TpIdEJNoO-HMca0ySNoB0zcDHWzuu3YAIVE9o4F8&client_id=client-two
request_mutual_tls
{
  "cert": "MIIEfjCCAmYCCQCgulKwv5kBqjANBgkqhkiG9w0BAQUFADCBjzELMAkGA1UEBhMCU0UxEjAQBgNVBAgMCVN0b2NraG9sbTESMBAGA1UEBwwJU3RvY2tob2xtMRIwEAYDVQQKDAlDdXJpdHkgQUIxKDAmBgNVBAsMH0N1cml0eSBBQiBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxGjAYBgNVBAMMEUN1cml0eSBBQiBSb290IENBMB4XDTE4MTAyNjEwNTkzNloXDTI4MTAyMzEwNTkzNlowcjELMAkGA1UEBhMCU0UxEzARBgNVBAgMClNvbWUtU3RhdGUxEjAQBgNVBAcMCVN0b2NraG9sbTEPMA0GA1UECgwGQ3VyaXR5MQ0wCwYDVQQLDARMYWJzMRowGAYDVQQDDBFtdXR1YWxfdGxzX2NsaWVudDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO7GqKLZDGAzko7Qbi208uK4uj63E/Tv8M0mqPJ6CJi4N/qSdLn2/CpzwPbhfrZjy+qJs5OAGKF/AjOZbxB7Kv+Y/HVCaBYeKLU0Arza3YtmoKtazYp/Cn78EXJPNj5VBGo3gPa4Xz4HgYK5kdUQoEm+OTCv1AK1rMk9xJ8potM/1VmHh8c8cVJmzwg92mIyuFheVAZtR/xkcYYb2Y3CQg+VpdBZfvoS6U5pyGMqefSgct0Mzu2e4LEaQGRzSikw9eI2fqouC5kKxSEg/U8Ojk08MBtMCT82nTrTq6G0MkGeszjJiBdJfUF0WVc5cKY/Z4TLduM9EVS2O4ThpDLZDhcCAwEAATANBgkqhkiG9w0BAQUFAAOCAgEAe1dMHiODHQYa9D77OMYhrvrRBFqs0HpxpVsTHM2X8OGwJeSOp5G6X1jcXGX4gKyCIXKZBLqVFjQiTGHw0YATWkMx7P6nXJXuOYM4Qw3nMc/M/SjZbh+mDRCL2ekfIJRd5MkIRk4zYk2AUJdY2DaB/0yP4upePuBN6PAmd30XP4BySJQteGrx0LzD/Tl5Z20o5ac8FZqniXe4d8/vX7IekqLIXbOUmGiCyWBXRG8JPAtsnNpqyoeWrGQQBz6E2YSDdg3d/eT564n9JRZN53/XQgI3l5c04I++4zueC89nyrY5afE0YtjRc3V1kYkQgmxyWCIXSN8gjxU1SL9XtwqwQ2pWZJn6QUAH3caKOPxnaYx2TyjaP3ZkafDA5Zl/OCbS+HhlfAXCahT18oLPr80vf9cNG/+Cl2j1PAm9olODbWZFgyteI6fGKi/1LXSR1h7fuR40x0su2jWa7bqh0kXP/yFOzTW7z/S5kkxTIqPvG/W7ctqvsWiaEAlToWSndug+gehG16IqMW5NPi3NSrK8ocF5lx0C+Si+1WcPFp9CLvZbt15sWgZI8yrH6Dk43X+tPjvVZc+LDC86zflmjPyWyE3VOIkq/trSfRp4vnpN8K+tN6Bq7W1K4Uq9xGBAmcfylVVMIso90p8y+EmAddHEdeiqa8vxK1K3vxmbBr2tWLM\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2021-05-17 15:40:03 RESPONSE
CallBackchannelAuthenticationEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Mon, 17 May 2021 15:40:03 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "content-type": "application/json",
  "content-length": "88"
}
response_body
{"auth_req_id":"Sv9ecs1A6Iw9ukhGb6fPfE1XylworQpSJ782cZIM","interval":5,"expires_in":900}
2021-05-17 15:40:03
CallBackchannelAuthenticationEndpoint
Backchannel Authentication endpoint response
backchannel_authentication_endpoint_response
{"auth_req_id":"Sv9ecs1A6Iw9ukhGb6fPfE1XylworQpSJ782cZIM","interval":5,"expires_in":900}
2021-05-17 15:40:03 SUCCESS
CallBackchannelAuthenticationEndpoint
Parsed backchannel authentication endpoint response
auth_req_id
Sv9ecs1A6Iw9ukhGb6fPfE1XylworQpSJ782cZIM
interval
5
expires_in
900
2021-05-17 15:40:03 SUCCESS
CheckBackchannelAuthenticationEndpointHttpStatus200
Backchannel authentication endpoint http status code was 200
2021-05-17 15:40:03 SUCCESS
CheckBackchannelAuthenticationEndpointContentType
Backchannel authentication endpoint Content-Type: header is application/json
2021-05-17 15:40:03 SUCCESS
CheckIfBackchannelAuthenticationEndpointResponseError
No error from Backchannel authentication endpoint
2021-05-17 15:40:03 SUCCESS
ValidateAuthenticationRequestId
auth_req_id passed all validation checks
2021-05-17 15:40:03 SUCCESS
EnsureMinimumAuthenticationRequestIdLength
auth_req_id is of sufficient length
actual
320
required
128
2021-05-17 15:40:03 SUCCESS
EnsureMinimumAuthenticationRequestIdEntropy
Calculated shannon entropy seems sufficient
actual
196.8771237954945
expected
96.0
2021-05-17 15:40:03 SUCCESS
EnsureRecommendedAuthenticationRequestIdEntropy
Calculated entropy
actual
196.8771237954945
recommended
160.0
2021-05-17 15:40:03 SUCCESS
ValidateAuthenticationRequestIdExpiresIn
expires_in passed all validation checks
expires_in
900
2021-05-17 15:40:03 SUCCESS
ValidateAuthenticationRequestIdInterval
interval passed all validation checks
interval
5
Second client: Call token endpoint expecting pending
2021-05-17 15:40:03 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-17 15:40:03
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
Sv9ecs1A6Iw9ukhGb6fPfE1XylworQpSJ782cZIM
2021-05-17 15:40:03 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
Sv9ecs1A6Iw9ukhGb6fPfE1XylworQpSJ782cZIM
client_id
client-two
2021-05-17 15:40:03
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://oidc-test.curity.io/dev/oauth/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "126"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=Sv9ecs1A6Iw9ukhGb6fPfE1XylworQpSJ782cZIM&client_id=client-two
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2021-05-17 15:40:03 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "date": "Mon, 17 May 2021 15:40:03 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json",
  "content-length": "87"
}
response_body
{"error":"authorization_pending","error_description":"Authentication request pending."}
2021-05-17 15:40:03 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
Authentication request pending.
2021-05-17 15:40:03 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Second client: Verify token endpoint response is pending or slow_down
2021-05-17 15:40:03 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-17 15:40:03 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-17 15:40:03 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
Authentication request pending.
2021-05-17 15:40:03 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
Authentication request pending.
2021-05-17 15:40:03 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-17 15:40:03 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Second client: Call token endpoint expecting pending (second time)
2021-05-17 15:40:08 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-17 15:40:08
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
Sv9ecs1A6Iw9ukhGb6fPfE1XylworQpSJ782cZIM
2021-05-17 15:40:08 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
Sv9ecs1A6Iw9ukhGb6fPfE1XylworQpSJ782cZIM
client_id
client-two
2021-05-17 15:40:08
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://oidc-test.curity.io/dev/oauth/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "126"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=Sv9ecs1A6Iw9ukhGb6fPfE1XylworQpSJ782cZIM&client_id=client-two
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2021-05-17 15:40:08 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "date": "Mon, 17 May 2021 15:40:08 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json",
  "content-length": "87"
}
response_body
{"error":"authorization_pending","error_description":"Authentication request pending."}
2021-05-17 15:40:08 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
Authentication request pending.
2021-05-17 15:40:08 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Second client: Verify token endpoint response is pending or slow_down
2021-05-17 15:40:08 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-17 15:40:08 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-17 15:40:08 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
Authentication request pending.
2021-05-17 15:40:08 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
Authentication request pending.
2021-05-17 15:40:08 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-17 15:40:08 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
2021-05-17 15:40:08
CallAutomatedCibaApprovalEndpoint
If your server supports automated testing, you can set 'automated_ciba_approval_url' in your configuration to a url like https://cibasim.example.com/action?token={auth_req_id}&type={action} (auth_req_id will be automatically substituted for the current auth_req_id by the conformance suite, action will be allow or deny depending on the test)
Second client: Polling token endpoint waiting for user to authenticate
2021-05-17 15:40:13 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-17 15:40:13
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
Sv9ecs1A6Iw9ukhGb6fPfE1XylworQpSJ782cZIM
2021-05-17 15:40:13 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
Sv9ecs1A6Iw9ukhGb6fPfE1XylworQpSJ782cZIM
client_id
client-two
2021-05-17 15:40:13
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://oidc-test.curity.io/dev/oauth/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "126"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=Sv9ecs1A6Iw9ukhGb6fPfE1XylworQpSJ782cZIM&client_id=client-two
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2021-05-17 15:40:13 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Mon, 17 May 2021 15:40:13 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json",
  "content-length": "1945"
}
response_body
{"id_token":"eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.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.U3QFMxVB-MRlz6yUsAJYLcS_KgDJ6AYeeEcya4dHa5V_KE0misD58ZPJ93ZvTb9k1Pe1TyW7VyGnfwMGzMlCLwC_b89knJsUAXSySjSJM452JCFoemTmWNib1Gq-SS8Rz8B2TcfFE8Bwkvifc7YcLf5h0TJZSxVlJGTNMHcBMK4bskV1L4J4wDjv261Ll8RBnQORae19eYDGl2XUzaAeOi--wwsDrsacrQivSGlLY_Xee4sz2AM5IyYllqzAz-66sHvvq9oce0DrYfxBeaElgBJO-C3ckYZBb-8TMtnNMNvz-zgR_V1fiTBM6__HJj6H9jQx2m-N76KBACNd0V1g6w","token_type":"bearer","access_token":"eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI1OGUyYjI5Zi0yMGM2LTQ3MGUtYjZjMC0yZGUzM2QzMTU1ZjMiLCJkZWxlZ2F0aW9uSWQiOiJlOTRjMjYzNy04OGQyLTQ3MTUtODYxNi1kMWIyZWE2NzljNmEiLCJleHAiOjE2MjEyNjYzMTMsIm5iZiI6MTYyMTI2NjAxMywic2NvcGUiOiJvcGVuaWQiLCJpc3MiOiJodHRwczovL29pZGMtdGVzdC5jdXJpdHkuaW8vZGV2L29hdXRoL2Fub255bW91cyIsInN1YiI6ImxhcnNkb2UiLCJhdWQiOiJjbGllbnQtdHdvIiwiaWF0IjoxNjIxMjY2MDEzLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIn0.K34dRpcehu1K7qbok8uNOfBw9d4Az_shmZFFDtr_dRsewIZi5diWIlgFxkxr6R-iV8xSTwMZb5Tqdo_QQAQrPVPxnM852haOKeGgumQaYK-5lfswq_tSeYKD0urDK5Iu2gGRvgNzBvQytJhJacX9x_vbBPuWtFL7ZaHnTeXbw6IXry2ldf-8fNd9COMbD-jzf9WemAtlhU0HIyqx-UfOTvazPEUy9ObaXySFRsBdmZ62fmDGydb-Lp7OvVN6N-DUMNo-bSYNBhAwy3rNckIGR6mLEQaJ9LYdXS_tSuoqhG8dLdZawFbyApty8NX0Lb73C-BOmHZeRXFnEdJcbqryMQ","refresh_token":"bf3585b4-5bf4-4922-bd47-fa7b5bc32e66","scope":"openid","expires_in":300}
2021-05-17 15:40:13 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
id_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.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.U3QFMxVB-MRlz6yUsAJYLcS_KgDJ6AYeeEcya4dHa5V_KE0misD58ZPJ93ZvTb9k1Pe1TyW7VyGnfwMGzMlCLwC_b89knJsUAXSySjSJM452JCFoemTmWNib1Gq-SS8Rz8B2TcfFE8Bwkvifc7YcLf5h0TJZSxVlJGTNMHcBMK4bskV1L4J4wDjv261Ll8RBnQORae19eYDGl2XUzaAeOi--wwsDrsacrQivSGlLY_Xee4sz2AM5IyYllqzAz-66sHvvq9oce0DrYfxBeaElgBJO-C3ckYZBb-8TMtnNMNvz-zgR_V1fiTBM6__HJj6H9jQx2m-N76KBACNd0V1g6w
token_type
bearer
access_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI1OGUyYjI5Zi0yMGM2LTQ3MGUtYjZjMC0yZGUzM2QzMTU1ZjMiLCJkZWxlZ2F0aW9uSWQiOiJlOTRjMjYzNy04OGQyLTQ3MTUtODYxNi1kMWIyZWE2NzljNmEiLCJleHAiOjE2MjEyNjYzMTMsIm5iZiI6MTYyMTI2NjAxMywic2NvcGUiOiJvcGVuaWQiLCJpc3MiOiJodHRwczovL29pZGMtdGVzdC5jdXJpdHkuaW8vZGV2L29hdXRoL2Fub255bW91cyIsInN1YiI6ImxhcnNkb2UiLCJhdWQiOiJjbGllbnQtdHdvIiwiaWF0IjoxNjIxMjY2MDEzLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIn0.K34dRpcehu1K7qbok8uNOfBw9d4Az_shmZFFDtr_dRsewIZi5diWIlgFxkxr6R-iV8xSTwMZb5Tqdo_QQAQrPVPxnM852haOKeGgumQaYK-5lfswq_tSeYKD0urDK5Iu2gGRvgNzBvQytJhJacX9x_vbBPuWtFL7ZaHnTeXbw6IXry2ldf-8fNd9COMbD-jzf9WemAtlhU0HIyqx-UfOTvazPEUy9ObaXySFRsBdmZ62fmDGydb-Lp7OvVN6N-DUMNo-bSYNBhAwy3rNckIGR6mLEQaJ9LYdXS_tSuoqhG8dLdZawFbyApty8NX0Lb73C-BOmHZeRXFnEdJcbqryMQ
refresh_token
bf3585b4-5bf4-4922-bd47-fa7b5bc32e66
scope
openid
expires_in
300
2021-05-17 15:40:13 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Second client: Verify token endpoint response
2021-05-17 15:40:13 SUCCESS
CheckTokenEndpointHttpStatus200
Token endpoint http status code was 200
2021-05-17 15:40:13 SUCCESS
CheckTokenEndpointCacheHeaders
'pragma' and 'cache-control' headers in token endpoint response contain expected values.
cache_control_header
no-cache, no-store
pragma_header
no-cache
2021-05-17 15:40:13 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2021-05-17 15:40:13 SUCCESS
CheckForAccessTokenValue
Found an access token
access_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI1OGUyYjI5Zi0yMGM2LTQ3MGUtYjZjMC0yZGUzM2QzMTU1ZjMiLCJkZWxlZ2F0aW9uSWQiOiJlOTRjMjYzNy04OGQyLTQ3MTUtODYxNi1kMWIyZWE2NzljNmEiLCJleHAiOjE2MjEyNjYzMTMsIm5iZiI6MTYyMTI2NjAxMywic2NvcGUiOiJvcGVuaWQiLCJpc3MiOiJodHRwczovL29pZGMtdGVzdC5jdXJpdHkuaW8vZGV2L29hdXRoL2Fub255bW91cyIsInN1YiI6ImxhcnNkb2UiLCJhdWQiOiJjbGllbnQtdHdvIiwiaWF0IjoxNjIxMjY2MDEzLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIn0.K34dRpcehu1K7qbok8uNOfBw9d4Az_shmZFFDtr_dRsewIZi5diWIlgFxkxr6R-iV8xSTwMZb5Tqdo_QQAQrPVPxnM852haOKeGgumQaYK-5lfswq_tSeYKD0urDK5Iu2gGRvgNzBvQytJhJacX9x_vbBPuWtFL7ZaHnTeXbw6IXry2ldf-8fNd9COMbD-jzf9WemAtlhU0HIyqx-UfOTvazPEUy9ObaXySFRsBdmZ62fmDGydb-Lp7OvVN6N-DUMNo-bSYNBhAwy3rNckIGR6mLEQaJ9LYdXS_tSuoqhG8dLdZawFbyApty8NX0Lb73C-BOmHZeRXFnEdJcbqryMQ
2021-05-17 15:40:13 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI1OGUyYjI5Zi0yMGM2LTQ3MGUtYjZjMC0yZGUzM2QzMTU1ZjMiLCJkZWxlZ2F0aW9uSWQiOiJlOTRjMjYzNy04OGQyLTQ3MTUtODYxNi1kMWIyZWE2NzljNmEiLCJleHAiOjE2MjEyNjYzMTMsIm5iZiI6MTYyMTI2NjAxMywic2NvcGUiOiJvcGVuaWQiLCJpc3MiOiJodHRwczovL29pZGMtdGVzdC5jdXJpdHkuaW8vZGV2L29hdXRoL2Fub255bW91cyIsInN1YiI6ImxhcnNkb2UiLCJhdWQiOiJjbGllbnQtdHdvIiwiaWF0IjoxNjIxMjY2MDEzLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIn0.K34dRpcehu1K7qbok8uNOfBw9d4Az_shmZFFDtr_dRsewIZi5diWIlgFxkxr6R-iV8xSTwMZb5Tqdo_QQAQrPVPxnM852haOKeGgumQaYK-5lfswq_tSeYKD0urDK5Iu2gGRvgNzBvQytJhJacX9x_vbBPuWtFL7ZaHnTeXbw6IXry2ldf-8fNd9COMbD-jzf9WemAtlhU0HIyqx-UfOTvazPEUy9ObaXySFRsBdmZ62fmDGydb-Lp7OvVN6N-DUMNo-bSYNBhAwy3rNckIGR6mLEQaJ9LYdXS_tSuoqhG8dLdZawFbyApty8NX0Lb73C-BOmHZeRXFnEdJcbqryMQ
type
bearer
2021-05-17 15:40:13 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
300
2021-05-17 15:40:13 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
300
2021-05-17 15:40:13 SUCCESS
CheckForRefreshTokenValue
Found a refresh token
refresh_token
bf3585b4-5bf4-4922-bd47-fa7b5bc32e66
2021-05-17 15:40:13 SUCCESS
EnsureMinimumRefreshTokenLength
Refresh token is of sufficient length
actual
288
required
128
2021-05-17 15:40:13 SUCCESS
EnsureMinimumRefreshTokenEntropy
Calculated shannon entropy seems sufficient
actual
131.09775004326937
expected
96.0
2021-05-17 15:40:13 SUCCESS
EnsureMinimumAccessTokenLength
Access token is of sufficient length
actual
6536
required
128
2021-05-17 15:40:13 SUCCESS
EnsureMinimumAccessTokenEntropy
Calculated shannon entropy seems sufficient
actual
4766.409361998755
expected
96.0
2021-05-17 15:40:13 SUCCESS
ExtractIdTokenFromTokenResponse
Found and parsed the id_token from token_endpoint_response
value
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.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.U3QFMxVB-MRlz6yUsAJYLcS_KgDJ6AYeeEcya4dHa5V_KE0misD58ZPJ93ZvTb9k1Pe1TyW7VyGnfwMGzMlCLwC_b89knJsUAXSySjSJM452JCFoemTmWNib1Gq-SS8Rz8B2TcfFE8Bwkvifc7YcLf5h0TJZSxVlJGTNMHcBMK4bskV1L4J4wDjv261Ll8RBnQORae19eYDGl2XUzaAeOi--wwsDrsacrQivSGlLY_Xee4sz2AM5IyYllqzAz-66sHvvq9oce0DrYfxBeaElgBJO-C3ckYZBb-8TMtnNMNvz-zgR_V1fiTBM6__HJj6H9jQx2m-N76KBACNd0V1g6w
header
{
  "x5t": "sZDjlR6d0NJD4CbNiMbCV_k7h3A",
  "kid": "1593201964",
  "alg": "PS256"
}
claims
{
  "at_hash": "ly8WfnOQGaRg51meZqvxEg",
  "sub": "larsdoe",
  "purpose": "id",
  "amr": "urn:mace:incommon:iap:silver",
  "iss": "https://oidc-test.curity.io/dev/oauth/anonymous",
  "aud": "client-two",
  "delegation_id": "e94c2637-88d2-4715-8616-d1b2ea679c6a",
  "acr": "urn:mace:incommon:iap:silver",
  "nbf": 1621266013,
  "azp": "client-two",
  "auth_time": 1621266013,
  "exp": 1621267813,
  "iat": 1621266013,
  "jti": "7a7c2d9e-ab62-4e33-86ac-3143bc345f35"
}
2021-05-17 15:40:13 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-05-17 15:40:13 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
1593201964
2021-05-17 15:40:13 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJleHAiOjE2MjEyNjc4MTMsIm5iZiI6MTYyMTI2NjAxMywianRpIjoiN2E3YzJkOWUtYWI2Mi00ZTMzLTg2YWMtMzE0M2JjMzQ1ZjM1IiwiaXNzIjoiaHR0cHM6Ly9vaWRjLXRlc3QuY3VyaXR5LmlvL2Rldi9vYXV0aC9hbm9ueW1vdXMiLCJhdWQiOiJjbGllbnQtdHdvIiwic3ViIjoibGFyc2RvZSIsImF1dGhfdGltZSI6MTYyMTI2NjAxMywiaWF0IjoxNjIxMjY2MDEzLCJwdXJwb3NlIjoiaWQiLCJhdF9oYXNoIjoibHk4V2ZuT1FHYVJnNTFtZVpxdnhFZyIsImRlbGVnYXRpb25faWQiOiJlOTRjMjYzNy04OGQyLTQ3MTUtODYxNi1kMWIyZWE2NzljNmEiLCJhY3IiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiYXpwIjoiY2xpZW50LXR3byIsImFtciI6InVybjptYWNlOmluY29tbW9uOmlhcDpzaWx2ZXIifQ.U3QFMxVB-MRlz6yUsAJYLcS_KgDJ6AYeeEcya4dHa5V_KE0misD58ZPJ93ZvTb9k1Pe1TyW7VyGnfwMGzMlCLwC_b89knJsUAXSySjSJM452JCFoemTmWNib1Gq-SS8Rz8B2TcfFE8Bwkvifc7YcLf5h0TJZSxVlJGTNMHcBMK4bskV1L4J4wDjv261Ll8RBnQORae19eYDGl2XUzaAeOi--wwsDrsacrQivSGlLY_Xee4sz2AM5IyYllqzAz-66sHvvq9oce0DrYfxBeaElgBJO-C3ckYZBb-8TMtnNMNvz-zgR_V1fiTBM6__HJj6H9jQx2m-N76KBACNd0V1g6w
2021-05-17 15:40:13 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.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.U3QFMxVB-MRlz6yUsAJYLcS_KgDJ6AYeeEcya4dHa5V_KE0misD58ZPJ93ZvTb9k1Pe1TyW7VyGnfwMGzMlCLwC_b89knJsUAXSySjSJM452JCFoemTmWNib1Gq-SS8Rz8B2TcfFE8Bwkvifc7YcLf5h0TJZSxVlJGTNMHcBMK4bskV1L4J4wDjv261Ll8RBnQORae19eYDGl2XUzaAeOi--wwsDrsacrQivSGlLY_Xee4sz2AM5IyYllqzAz-66sHvvq9oce0DrYfxBeaElgBJO-C3ckYZBb-8TMtnNMNvz-zgR_V1fiTBM6__HJj6H9jQx2m-N76KBACNd0V1g6w
2021-05-17 15:40:13 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
larsdoe
2021-05-17 15:40:13 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
alg
PS256
2021-05-17 15:40:13 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-05-17 15:40:13 INFO
FAPIValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-05-17 15:40:13 INFO
FAPICIBAValidateIdTokenAuthRequestIdClaims
Skipped evaluation due to missing required element: id_token claims.urn:openid:params:jwt:claim:auth_req_id
path
claims.urn:openid:params:jwt:claim:auth_req_id
mapped
object
id_token
2021-05-17 15:40:13 SUCCESS
ValidateIdTokenNotIncludeCHashAndSHash
id_token claims correctly does not contain 'c_hash' and 's_hash'
claims
{
  "at_hash": "ly8WfnOQGaRg51meZqvxEg",
  "sub": "larsdoe",
  "purpose": "id",
  "amr": "urn:mace:incommon:iap:silver",
  "iss": "https://oidc-test.curity.io/dev/oauth/anonymous",
  "aud": "client-two",
  "delegation_id": "e94c2637-88d2-4715-8616-d1b2ea679c6a",
  "acr": "urn:mace:incommon:iap:silver",
  "nbf": 1621266013,
  "azp": "client-two",
  "auth_time": 1621266013,
  "exp": 1621267813,
  "iat": 1621266013,
  "jti": "7a7c2d9e-ab62-4e33-86ac-3143bc345f35"
}
2021-05-17 15:40:13 SUCCESS
ExtractAtHash
Extracted at_hash from ID Token
at_hash
ly8WfnOQGaRg51meZqvxEg
alg
PS256
2021-05-17 15:40:13 INFO
ExtractRtHash
Couldn't find urn:openid:params:jwt:claim:rt_hash claim in the ID token
2021-05-17 15:40:13 INFO
FAPICIBAValidateRtHash
Skipped evaluation due to missing required object: rt_hash
expected
rt_hash
mapped
2021-05-17 15:40:13 SUCCESS
ValidateAtHash
at_hash validated successfully
expected_hash
ly8WfnOQGaRg51meZqvxEg
unhashed_value
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI1OGUyYjI5Zi0yMGM2LTQ3MGUtYjZjMC0yZGUzM2QzMTU1ZjMiLCJkZWxlZ2F0aW9uSWQiOiJlOTRjMjYzNy04OGQyLTQ3MTUtODYxNi1kMWIyZWE2NzljNmEiLCJleHAiOjE2MjEyNjYzMTMsIm5iZiI6MTYyMTI2NjAxMywic2NvcGUiOiJvcGVuaWQiLCJpc3MiOiJodHRwczovL29pZGMtdGVzdC5jdXJpdHkuaW8vZGV2L29hdXRoL2Fub255bW91cyIsInN1YiI6ImxhcnNkb2UiLCJhdWQiOiJjbGllbnQtdHdvIiwiaWF0IjoxNjIxMjY2MDEzLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIn0.K34dRpcehu1K7qbok8uNOfBw9d4Az_shmZFFDtr_dRsewIZi5diWIlgFxkxr6R-iV8xSTwMZb5Tqdo_QQAQrPVPxnM852haOKeGgumQaYK-5lfswq_tSeYKD0urDK5Iu2gGRvgNzBvQytJhJacX9x_vbBPuWtFL7ZaHnTeXbw6IXry2ldf-8fNd9COMbD-jzf9WemAtlhU0HIyqx-UfOTvazPEUy9ObaXySFRsBdmZ62fmDGydb-Lp7OvVN6N-DUMNo-bSYNBhAwy3rNckIGR6mLEQaJ9LYdXS_tSuoqhG8dLdZawFbyApty8NX0Lb73C-BOmHZeRXFnEdJcbqryMQ
id_token_hash
ly8WfnOQGaRg51meZqvxEg
Second client: Check for refresh token
2021-05-17 15:40:13 SUCCESS
ExtractRefreshTokenFromTokenResponse
Extracted refresh token from response
refresh_token
bf3585b4-5bf4-4922-bd47-fa7b5bc32e66
2021-05-17 15:40:13 SUCCESS
EnsureServerConfigurationSupportsRefreshToken
The server configuration indicates support for refresh tokens
supported_grant_types
[
  "refresh_token",
  "implicit",
  "client_credentials",
  "password",
  "https://curity.se/grant/accesstoken",
  "authorization_code",
  "urn:openid:params:grant-type:ciba"
]
2021-05-17 15:40:13 SUCCESS
EnsureRefreshTokenContainsAllowedCharactersOnly
Refresh token does not contain any illegal characters
Second client: Refresh Token Request
2021-05-17 15:40:13 SUCCESS
CreateRefreshTokenRequest
Created token endpoint request parameters
grant_type
refresh_token
refresh_token
bf3585b4-5bf4-4922-bd47-fa7b5bc32e66
2021-05-17 15:40:13 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
refresh_token
refresh_token
bf3585b4-5bf4-4922-bd47-fa7b5bc32e66
client_id
client-two
2021-05-17 15:40:13 SUCCESS
WaitForOneSecond
Pausing for 1 seconds
2021-05-17 15:40:14 SUCCESS
WaitForOneSecond
Woke up after 1 seconds sleep
2021-05-17 15:40:14
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://oidc-test.curity.io/dev/oauth/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "96"
}
request_body
grant_type=refresh_token&refresh_token=bf3585b4-5bf4-4922-bd47-fa7b5bc32e66&client_id=client-two
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2021-05-17 15:40:15 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Mon, 17 May 2021 15:40:14 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json",
  "content-length": "1034"
}
response_body
{"token_type":"bearer","access_token":"eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiJmMTRmYzFiNS02NmJhLTRjNjEtOGRmYS05OTEwMzY0ODgyYzkiLCJkZWxlZ2F0aW9uSWQiOiJlOTRjMjYzNy04OGQyLTQ3MTUtODYxNi1kMWIyZWE2NzljNmEiLCJleHAiOjE2MjEyNjYzMTUsIm5iZiI6MTYyMTI2NjAxNSwic2NvcGUiOiJvcGVuaWQiLCJpc3MiOiJodHRwczovL29pZGMtdGVzdC5jdXJpdHkuaW8vZGV2L29hdXRoL2Fub255bW91cyIsInN1YiI6ImxhcnNkb2UiLCJhdWQiOiJjbGllbnQtdHdvIiwiaWF0IjoxNjIxMjY2MDE1LCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIiwiY25mIjp7Ing1dCNTMjU2IjoieExYZi1qb2N5bzdtQ184TGtPZWpFbXBmTlNLNWVBdFZZN0NhWlZWZGl0cyJ9fQ.NAM0qr_mhWunv_Z85BNCmCCnVgGFnCS3rlCt50LZOB1wobxaXU53Z7XI0kwDERquLICMupUhW5yzwfJHb1BOKu5CqK7NTN0aLShI96CF7_lolHyNtLiSLG4vaPtzAO6ioKSlDHwWYEtz_ztrd0DKXJ67auNnTUk7fZHeQTK7-z-tIZQcCeeLH_ZPdHXOQlfuWkJsS1KAadNonr8GFtcuEb93WZpQ1oHeJcpKrwoCe3eKJDAz2f0vmk6gtThXENulIckUEVcUic9hnswg2Pa8r71U2wv9OXNe7WYAjfmBhQP9UU76gZ_Ndorlk6DnI8WOcOJtn-owRJIwKsNmGP8tcQ","refresh_token":"8a235498-c985-43b5-9599-cf2b6a8d87fd","scope":"openid","expires_in":300}
2021-05-17 15:40:15 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
token_type
bearer
access_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiJmMTRmYzFiNS02NmJhLTRjNjEtOGRmYS05OTEwMzY0ODgyYzkiLCJkZWxlZ2F0aW9uSWQiOiJlOTRjMjYzNy04OGQyLTQ3MTUtODYxNi1kMWIyZWE2NzljNmEiLCJleHAiOjE2MjEyNjYzMTUsIm5iZiI6MTYyMTI2NjAxNSwic2NvcGUiOiJvcGVuaWQiLCJpc3MiOiJodHRwczovL29pZGMtdGVzdC5jdXJpdHkuaW8vZGV2L29hdXRoL2Fub255bW91cyIsInN1YiI6ImxhcnNkb2UiLCJhdWQiOiJjbGllbnQtdHdvIiwiaWF0IjoxNjIxMjY2MDE1LCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIiwiY25mIjp7Ing1dCNTMjU2IjoieExYZi1qb2N5bzdtQ184TGtPZWpFbXBmTlNLNWVBdFZZN0NhWlZWZGl0cyJ9fQ.NAM0qr_mhWunv_Z85BNCmCCnVgGFnCS3rlCt50LZOB1wobxaXU53Z7XI0kwDERquLICMupUhW5yzwfJHb1BOKu5CqK7NTN0aLShI96CF7_lolHyNtLiSLG4vaPtzAO6ioKSlDHwWYEtz_ztrd0DKXJ67auNnTUk7fZHeQTK7-z-tIZQcCeeLH_ZPdHXOQlfuWkJsS1KAadNonr8GFtcuEb93WZpQ1oHeJcpKrwoCe3eKJDAz2f0vmk6gtThXENulIckUEVcUic9hnswg2Pa8r71U2wv9OXNe7WYAjfmBhQP9UU76gZ_Ndorlk6DnI8WOcOJtn-owRJIwKsNmGP8tcQ
refresh_token
8a235498-c985-43b5-9599-cf2b6a8d87fd
scope
openid
expires_in
300
2021-05-17 15:40:15 SUCCESS
CheckTokenEndpointHttpStatus200
Token endpoint http status code was 200
2021-05-17 15:40:15 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-17 15:40:15 SUCCESS
CheckTokenEndpointCacheHeaders
'pragma' and 'cache-control' headers in token endpoint response contain expected values.
cache_control_header
no-cache, no-store
pragma_header
no-cache
2021-05-17 15:40:15 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2021-05-17 15:40:15 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiJmMTRmYzFiNS02NmJhLTRjNjEtOGRmYS05OTEwMzY0ODgyYzkiLCJkZWxlZ2F0aW9uSWQiOiJlOTRjMjYzNy04OGQyLTQ3MTUtODYxNi1kMWIyZWE2NzljNmEiLCJleHAiOjE2MjEyNjYzMTUsIm5iZiI6MTYyMTI2NjAxNSwic2NvcGUiOiJvcGVuaWQiLCJpc3MiOiJodHRwczovL29pZGMtdGVzdC5jdXJpdHkuaW8vZGV2L29hdXRoL2Fub255bW91cyIsInN1YiI6ImxhcnNkb2UiLCJhdWQiOiJjbGllbnQtdHdvIiwiaWF0IjoxNjIxMjY2MDE1LCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIiwiY25mIjp7Ing1dCNTMjU2IjoieExYZi1qb2N5bzdtQ184TGtPZWpFbXBmTlNLNWVBdFZZN0NhWlZWZGl0cyJ9fQ.NAM0qr_mhWunv_Z85BNCmCCnVgGFnCS3rlCt50LZOB1wobxaXU53Z7XI0kwDERquLICMupUhW5yzwfJHb1BOKu5CqK7NTN0aLShI96CF7_lolHyNtLiSLG4vaPtzAO6ioKSlDHwWYEtz_ztrd0DKXJ67auNnTUk7fZHeQTK7-z-tIZQcCeeLH_ZPdHXOQlfuWkJsS1KAadNonr8GFtcuEb93WZpQ1oHeJcpKrwoCe3eKJDAz2f0vmk6gtThXENulIckUEVcUic9hnswg2Pa8r71U2wv9OXNe7WYAjfmBhQP9UU76gZ_Ndorlk6DnI8WOcOJtn-owRJIwKsNmGP8tcQ
type
bearer
2021-05-17 15:40:15 SUCCESS
CheckTokenTypeIsBearer
Token type is bearer
2021-05-17 15:40:15 SUCCESS
EnsureMinimumAccessTokenEntropy
Calculated shannon entropy seems sufficient
actual
5273.28271307697
expected
96.0
2021-05-17 15:40:15 SUCCESS
EnsureAccessTokenContainsAllowedCharactersOnly
Access token does not contain any illegal characters
2021-05-17 15:40:15 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
300
2021-05-17 15:40:15 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
300
2021-05-17 15:40:15 SUCCESS
EnsureAccessTokenValuesAreDifferent
Access token values are not the same
first_access_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiI1OGUyYjI5Zi0yMGM2LTQ3MGUtYjZjMC0yZGUzM2QzMTU1ZjMiLCJkZWxlZ2F0aW9uSWQiOiJlOTRjMjYzNy04OGQyLTQ3MTUtODYxNi1kMWIyZWE2NzljNmEiLCJleHAiOjE2MjEyNjYzMTMsIm5iZiI6MTYyMTI2NjAxMywic2NvcGUiOiJvcGVuaWQiLCJpc3MiOiJodHRwczovL29pZGMtdGVzdC5jdXJpdHkuaW8vZGV2L29hdXRoL2Fub255bW91cyIsInN1YiI6ImxhcnNkb2UiLCJhdWQiOiJjbGllbnQtdHdvIiwiaWF0IjoxNjIxMjY2MDEzLCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIn0.K34dRpcehu1K7qbok8uNOfBw9d4Az_shmZFFDtr_dRsewIZi5diWIlgFxkxr6R-iV8xSTwMZb5Tqdo_QQAQrPVPxnM852haOKeGgumQaYK-5lfswq_tSeYKD0urDK5Iu2gGRvgNzBvQytJhJacX9x_vbBPuWtFL7ZaHnTeXbw6IXry2ldf-8fNd9COMbD-jzf9WemAtlhU0HIyqx-UfOTvazPEUy9ObaXySFRsBdmZ62fmDGydb-Lp7OvVN6N-DUMNo-bSYNBhAwy3rNckIGR6mLEQaJ9LYdXS_tSuoqhG8dLdZawFbyApty8NX0Lb73C-BOmHZeRXFnEdJcbqryMQ
second_access_token
eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiJmMTRmYzFiNS02NmJhLTRjNjEtOGRmYS05OTEwMzY0ODgyYzkiLCJkZWxlZ2F0aW9uSWQiOiJlOTRjMjYzNy04OGQyLTQ3MTUtODYxNi1kMWIyZWE2NzljNmEiLCJleHAiOjE2MjEyNjYzMTUsIm5iZiI6MTYyMTI2NjAxNSwic2NvcGUiOiJvcGVuaWQiLCJpc3MiOiJodHRwczovL29pZGMtdGVzdC5jdXJpdHkuaW8vZGV2L29hdXRoL2Fub255bW91cyIsInN1YiI6ImxhcnNkb2UiLCJhdWQiOiJjbGllbnQtdHdvIiwiaWF0IjoxNjIxMjY2MDE1LCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIiwiY25mIjp7Ing1dCNTMjU2IjoieExYZi1qb2N5bzdtQ184TGtPZWpFbXBmTlNLNWVBdFZZN0NhWlZWZGl0cyJ9fQ.NAM0qr_mhWunv_Z85BNCmCCnVgGFnCS3rlCt50LZOB1wobxaXU53Z7XI0kwDERquLICMupUhW5yzwfJHb1BOKu5CqK7NTN0aLShI96CF7_lolHyNtLiSLG4vaPtzAO6ioKSlDHwWYEtz_ztrd0DKXJ67auNnTUk7fZHeQTK7-z-tIZQcCeeLH_ZPdHXOQlfuWkJsS1KAadNonr8GFtcuEb93WZpQ1oHeJcpKrwoCe3eKJDAz2f0vmk6gtThXENulIckUEVcUic9hnswg2Pa8r71U2wv9OXNe7WYAjfmBhQP9UU76gZ_Ndorlk6DnI8WOcOJtn-owRJIwKsNmGP8tcQ
2021-05-17 15:40:15 INFO
ExtractIdTokenFromTokenResponse
Couldn't find id_token in token_endpoint_response
2021-05-17 15:40:15 SUCCESS
ExtractRefreshTokenFromTokenResponse
Extracted refresh token from response
refresh_token
8a235498-c985-43b5-9599-cf2b6a8d87fd
2021-05-17 15:40:15 SUCCESS
EnsureMinimumRefreshTokenLength
Refresh token is of sufficient length
actual
288
required
128
2021-05-17 15:40:15 SUCCESS
EnsureMinimumRefreshTokenEntropy
Calculated shannon entropy seems sufficient
actual
130.89801910304962
expected
96.0
2021-05-17 15:40:15 INFO
CompareIdTokenClaims
Skipped evaluation due to missing required object: second_id_token
expected
second_id_token
mapped
second_id_token
Second client: Resource server endpoint tests
2021-05-17 15:40:15
CreateEmptyResourceEndpointRequestHeaders
Created empty headers
resource_endpoint_request_headers
{}
2021-05-17 15:40:15
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP request
request_uri
https://oidc-test.curity.io:7777/fapi/rs
request_method
GET
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "authorization": "Bearer eyJraWQiOiIxNTkzMjAxOTY0IiwieDV0Ijoic1pEamxSNmQwTkpENENiTmlNYkNWX2s3aDNBIiwiYWxnIjoiUFMyNTYifQ.eyJqdGkiOiJmMTRmYzFiNS02NmJhLTRjNjEtOGRmYS05OTEwMzY0ODgyYzkiLCJkZWxlZ2F0aW9uSWQiOiJlOTRjMjYzNy04OGQyLTQ3MTUtODYxNi1kMWIyZWE2NzljNmEiLCJleHAiOjE2MjEyNjYzMTUsIm5iZiI6MTYyMTI2NjAxNSwic2NvcGUiOiJvcGVuaWQiLCJpc3MiOiJodHRwczovL29pZGMtdGVzdC5jdXJpdHkuaW8vZGV2L29hdXRoL2Fub255bW91cyIsInN1YiI6ImxhcnNkb2UiLCJhdWQiOiJjbGllbnQtdHdvIiwiaWF0IjoxNjIxMjY2MDE1LCJwdXJwb3NlIjoiYWNjZXNzX3Rva2VuIiwiY25mIjp7Ing1dCNTMjU2IjoieExYZi1qb2N5bzdtQ184TGtPZWpFbXBmTlNLNWVBdFZZN0NhWlZWZGl0cyJ9fQ.NAM0qr_mhWunv_Z85BNCmCCnVgGFnCS3rlCt50LZOB1wobxaXU53Z7XI0kwDERquLICMupUhW5yzwfJHb1BOKu5CqK7NTN0aLShI96CF7_lolHyNtLiSLG4vaPtzAO6ioKSlDHwWYEtz_ztrd0DKXJ67auNnTUk7fZHeQTK7-z-tIZQcCeeLH_ZPdHXOQlfuWkJsS1KAadNonr8GFtcuEb93WZpQ1oHeJcpKrwoCe3eKJDAz2f0vmk6gtThXENulIckUEVcUic9hnswg2Pa8r71U2wv9OXNe7WYAjfmBhQP9UU76gZ_Ndorlk6DnI8WOcOJtn-owRJIwKsNmGP8tcQ",
  "accept-charset": "utf-8",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2021-05-17 15:40:15 RESPONSE
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Mon, 17 May 2021 15:40:15 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "x-fapi-interaction-id": "21290080-8b9a-4562-b493-6c550f21cb19",
  "transfer-encoding": "chunked"
}
response_body
{"result":"OK (no certificate)"}
2021-05-17 15:40:15 SUCCESS
CallProtectedResourceWithBearerTokenAndCustomHeaders
Got a response from the resource endpoint
headers
{
  "date": "Mon, 17 May 2021 15:40:15 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "x-fapi-interaction-id": "21290080-8b9a-4562-b493-6c550f21cb19",
  "transfer-encoding": "chunked"
}
status_code
{
  "code": 200
}
body
{"result":"OK (no certificate)"}
2021-05-17 15:40:15 SUCCESS
CheckForDateHeaderInResourceResponse
Date header present and validated
date
Mon, 17 May 2021 15:40:15 GMT
skew
192
2021-05-17 15:40:15 SUCCESS
CheckForFAPIInteractionIdInResourceResponse
Found x-fapi-interaction-id
interaction_id
21290080-8b9a-4562-b493-6c550f21cb19
2021-05-17 15:40:15 SUCCESS
EnsureResourceResponseReturnedJsonContentType
Response content type is JSON
content_type
application/json;charset=utf-8
Attempting to use refresh_token issued to client 2 with client 1
2021-05-17 15:40:15 SUCCESS
CreateRefreshTokenRequest
Created token endpoint request parameters
grant_type
refresh_token
refresh_token
8a235498-c985-43b5-9599-cf2b6a8d87fd
2021-05-17 15:40:15 SUCCESS
AddScopeToTokenEndpointRequest
Added scope of 'openid email address phone profile' to token endpoint request
grant_type
refresh_token
refresh_token
8a235498-c985-43b5-9599-cf2b6a8d87fd
scope
openid email address phone profile
2021-05-17 15:40:15 SUCCESS
AddClientIdToTokenEndpointRequest
grant_type
refresh_token
refresh_token
8a235498-c985-43b5-9599-cf2b6a8d87fd
scope
openid email address phone profile
client_id
client-one
2021-05-17 15:40:15
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://oidc-test.curity.io/dev/oauth/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "137"
}
request_body
grant_type=refresh_token&refresh_token=8a235498-c985-43b5-9599-cf2b6a8d87fd&scope=openid+email+address+phone+profile&client_id=client-one
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d",
  "ca": "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\u003d\u003d"
}
2021-05-17 15:40:15 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "date": "Mon, 17 May 2021 15:40:15 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json",
  "content-length": "114"
}
response_body
{"error":"invalid_grant","error_description":"Provided refresh token was not issued to the authenticated client."}
2021-05-17 15:40:15 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
invalid_grant
error_description
Provided refresh token was not issued to the authenticated client.
2021-05-17 15:40:15 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
invalid_grant
2021-05-17 15:40:15 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-17 15:40:15 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-17 15:40:15 SUCCESS
CheckErrorFromTokenEndpointResponseErrorInvalidGrant
Token Endpoint response error returned expected 'error' of 'invalid_grant'
error
invalid_grant
2021-05-17 15:40:15 FINISHED
fapi-ciba-id1-refresh-token
Test has run to completion
testmodule_result
PASSED
Unregister dynamically registered client
2021-05-17 15:40:15 INFO
UnregisterDynamicallyRegisteredClient
Skipped evaluation due to missing required string: registration_client_uri
expected
registration_client_uri
Unregister dynamically registered client2
2021-05-17 15:40:15 INFO
UnregisterDynamicallyRegisteredClient
Skipped evaluation due to missing required string: registration_client_uri
expected
registration_client_uri
2021-05-17 15:40:21
TEST-RUNNER
Alias has now been claimed by another test
alias
fintech
new_test_id
Waxs1OFc7cHPwN0
Test Results