Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-05-21 16:04:28 INFO
TEST-RUNNER
Test instance x2tna3whbSxEMmR created
baseUrl
https://www.certification.openid.net/test/x2tna3whbSxEMmR
variant
{
  "client_auth_type": "private_key_jwt",
  "ciba_mode": "ping",
  "fapi_profile": "plain_fapi",
  "client_registration": "dynamic_client"
}
alias

                                
description
planId
TBpeA4jiB1Yen
config
{
  "automated_ciba_approval_url": "https://fapi.panva.cz/ciba-sim?authReqId\u003d{auth_req_id}\u0026action\u003d{action}",
  "server": {
    "discoveryUrl": "https://fapi.panva.cz/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "pkjwt-one",
    "client_name": "pkjwt-one",
    "scope": "openid offline_access",
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw",
          "d": "dxzWeLBYGwOgNb-S-4RCDxz7U6lUPPZaIkrbmkpLsdDdZOkMXGg_jk2LIJ3tYgAvZkWm87ZQqKjN2ADzJmpHvu-vCLuh8ccpwaiTXfWTOjjii0-Cfq0-fT6aQpIglbwubVKi1Tqxz-AglrMnCkNICm-e0GsotXFskxhwybp8IAZP__Up1pg-G9Dg_Timtepw55HjO4xDhzY70zV2NqSDEIvKOleyIZj4JP5kCkwP4_FJw_KynXwlxKvCshtFC3U2IEWWUaUQmM8Yy1Hz2x3TqImLQTWs3EMm6oRuhS0Y4tg9VlzJqnetdd6Ulh-DFzSB37KnBZS1qvnGGG4Cri9IkQ",
          "p": "5SLM2g4Uv3Q1-PGqwKPQ8h8Onp674FTxxYAHCh8mivgCGx7uIjVaOxCKvCimi8NCgtON0a1QdGY-BT3NsewJUvaniWyb5BZo-kpdkSzXCvQpWuWT_iSorgEgl4anJ59JZH_QW7wtjRnF8jWnw-_nkNv4HIIVd7fdKKCkpGi1Drk",
          "q": "xgyjgfZdlfpne27vdlxi5VGmNnBnLRAe_a7Wgo6JdmKPMPa1qugxVM5tUhoYjUuUpHxi8gDSxb0-N_kIqTu7zp2Ly9iB8wQIyyYmdxN7J_B5bSn5rfTcu_Uz-EuYVEGfj0hk5_aNQc0y02Di1L4QrnMNRGBo3jWCCRZrjqyHfqc",
          "dp": "tc9sHeUoX1V1cedHpn0VUNiFwCSRTIn6IMzaSRS4f3IUMbLUHv6Ybt9MRco3hBRV1PrJv8K2YPWzZnNIoFF6gILIIsmz1EJX36lcHtIme0GLAt3BFNm_ofmxA6pLPawtDvo_uFpTBm-Z2frq-BSGeDGh5_Tr1cdlS1RT70RJzbk",
          "dq": "FXlVWUgfSZ3HDqkuqcTGrFq4DPsPFOHEmnkUpT9TRFTXddWqSQe4IZvoWpidxORHD7a0-8x_DhXA40zLVZ42dOa8O7QUEweC9JQEY7DnD6ORZvbALc55CKBDrE52C9y5sk2FM2mWU2YudqDwt2SMZn3vGFTjygQ_P0EBFI08e80",
          "qi": "nmJaonUO_d62824V6YmWuEX7imXdgHKRi-tY4IUDJbrm7lKEfcn_xazqilECh1xm7O8b4bj0th3JrRcs1Al0sWP1FwVHjzzmg5oqq26PvHjmtVIHn3cXGT6AmY8-eUPkYgPBc61Ej58Usazm1iuRIe-wNIBeL244kFTQK7zJfnE",
          "kty": "RSA",
          "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
          "alg": "PS256",
          "use": "sig"
        }
      ]
    },
    "hint_type": "login_hint",
    "hint_value": "panva"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\nTfkwHHtW2BegWR/q3+q9gs7uehc\u003d\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN PRIVATE KEY-----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\nKuUEGLKAzDf1JIzseUr8jdvw\n-----END PRIVATE KEY-----\n"
  },
  "client2": {
    "client_id": "pkjwt-two",
    "client_name": "pkjwt-two",
    "scope": "openid offline_access",
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "5xcUf9SqYSEQHDyQft6iabfz5WvuZyjFLTj9x_R8ARdBDyVE42vkWnf6jOZoeMZ_WjtYGLF0nwnuEVBoCVxP4Nu1UUQq8OTigmk2f4IyPT-79pvW9b7EGQDdTsBIrrb2AKktwDJe16uK64kDNO0Ay3U_nShIPgMVbmGd_K6__OwwhhrLwKv_OSbvU8ZlPI24jy1Yxfq175F_1ZQBRjm0jAMf6PBt8cgxQclgbpP-7OBUQHBzpfudD1U9W6V8hqKKjDldlI9Zg6xBa8MpC6JuQdgwkcugWdwyG69p2kq_pyl735C8yj9Bif7Vok1d4E81cSh8Jy1wGNfAmlz8ncJSRw",
          "d": "ttJDnX4Z7Q3DORORHU31H74wbmidC2_tzoEwBWkeUZ6cEediQKmy1v_kcGQ4cpRXXINmhuKdaNTqSzhZlk45w6MOJ2TOtBXgPVwPiYDvThWGFuvjfDeX3FAaxZrJ5a9Jn-w4Db3L2sQT-5NBvjViU5RG54Ze4PB_m_wOiUGXEfgonv64APPBkodIz_26lJ-r4447tcdMkDw4p6xTP-y33sPB4ZOhQ5ezE4FzQlpq0K98ysKLwo8wvhQ8stxqL46avBnflgDhTsb-1I54aU3ROjThU5tkeAkudzg4lFKdd4WmVneVMD-FJ2wrkjwztqHSBCP8G9IAXBdXRxRzdJIOAQ",
          "p": "_WOUrDYt1uay8XtnaNgutctzdI6XJaf5XrGv6wE_ZoVbqEKWTnBbVfqbwkWf58CeH32tt3hUjBFicG-XAlYI8TW5Lf6H78Fmt2y3fdowLzzWLwNDoLWo1_rOGxneL-vYM1MekZyUN-uDARdEeOL9yRPFKOZm7eWSUc_Sdlu9yuc",
          "q": "6XitRdF0tFu7O7S1rQZZjqhrza53f-Ox1vCYY_Hy4Tm_1fMc7GV0VCHoQwO3ZJPlPEE0JahnfpQkhHGj67GGO40lZYEXdBwNxtktp1zdmEokbsWmacz57SVPg4pzgS9kketf-wdUbT5VgBmNWS9MPt7rKiyFbmuPcHU99fWEsaE",
          "dp": "e_5s1FC24cCGtFCU6-NOCDwExXa5U_38s2_0C-XSZpK_pXjgIIYuy8YUzl5Pv5KsTfCsP2msxdYD-80_ci8ztQV7FpzFXHehkgSrTfSlO5hjnyHTyCLc-sOKdAyWg5C_fW4hOVQL28ltk-0U3qsFUY5RHpCQsb1zeoFeFfkSyOU",
          "dq": "2tyhsh2UBa8oaeQRm02kjrMbvAidRWoxwIhykt6xDKmSSAJLTuAcmPHgRVIqjUKHVmDZfaPMwUAmq3HMdJpKd3DtaaYGUnYqBAp7XbUUljqKxLzML8pTUBf13h3gAW5oHNJFe5F3d6FDjX5mnwBTvWxDj5mEy-pQ4N9HYlbyOYE",
          "qi": "rbxxLBMPxBVpoyNfpjYtXEuem0HHvemHiGklhCbJO_N3vRu8lEarlZ_IPLrRmq7he0cNHcd4j_yhge1-0RR0LzJ4l_Wg-B1Jc0fKJrSItp8pmjmaVHbp_ToYqVlJh_AfU5tru86zSCvVycV79BvkvLl6IusDAuRK8eD1h7dU59g",
          "kty": "RSA",
          "kid": "NriyGITqpt6QdRBXz6k_qjup6vO_81Namq05CX4hij0",
          "alg": "PS256",
          "use": "sig"
        }
      ]
    },
    "acr_value": "urn:mace:incommon:iap:silver"
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\nAWzRJlZD89KZAQgjj4Z215QeLxA\u003d\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN PRIVATE KEY-----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\nlGAIorVbtD1xAn2WaYuEb5Q\u003d\n-----END PRIVATE KEY-----\n  \n"
  },
  "resource": {
    "resourceUrl": "https://mtls.fapi.panva.cz/accounts",
    "institution_id": "xxxxx"
  },
  "browser": [
    {
      "match": "https://fapi.panva.cz/auth*",
      "tasks": [
        {
          "task": "Login",
          "optional": true,
          "match": "https://fapi.panva.cz/interaction*",
          "commands": [
            [
              "text",
              "name",
              "login",
              "foo",
              "optional"
            ],
            [
              "text",
              "name",
              "password",
              "bar",
              "optional"
            ],
            [
              "click",
              "class",
              "login-submit"
            ]
          ]
        },
        {
          "task": "Consent",
          "optional": true,
          "match": "https://fapi.panva.cz/interaction*",
          "commands": [
            [
              "click",
              "class",
              "login-submit"
            ]
          ]
        },
        {
          "task": "Verify Complete",
          "match": "https://*/test/a/*/callback*",
          "commands": [
            [
              "wait",
              "id",
              "submission_complete",
              10
            ]
          ]
        }
      ]
    }
  ]
}
testName
fapi-ciba-id1-ping-backchannel-notification-endpoint-response-has-body
2021-05-21 16:04:28 SUCCESS
CreateCIBANotificationEndpointUri
Created ciba notification endpoint URI
notification_uri
https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint
2021-05-21 16:04:28
GetDynamicServerConfiguration
HTTP request
request_uri
https://fapi.panva.cz/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-05-21 16:04:28 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "1746",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:28 GMT",
  "expect-ct": "max-age\u003d0",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"acr_values_supported":["urn:mace:incommon:iap:silver"],"authorization_endpoint":"https://fapi.panva.cz/auth","claims_parameter_supported":true,"claims_supported":["sub","acr","sid","auth_time","iss"],"code_challenge_methods_supported":["S256"],"end_session_endpoint":"https://fapi.panva.cz/session/end","grant_types_supported":["implicit","authorization_code","refresh_token","urn:openid:params:grant-type:ciba"],"id_token_signing_alg_values_supported":["PS256"],"issuer":"https://fapi.panva.cz","jwks_uri":"https://fapi.panva.cz/jwks","registration_endpoint":"https://fapi.panva.cz/reg","response_modes_supported":["form_post","fragment","query","jwt","query.jwt","fragment.jwt","form_post.jwt"],"response_types_supported":["code id_token","code"],"scopes_supported":["openid","offline_access"],"subject_types_supported":["public"],"token_endpoint_auth_methods_supported":["private_key_jwt","self_signed_tls_client_auth"],"token_endpoint_auth_signing_alg_values_supported":["PS256"],"token_endpoint":"https://mtls.fapi.panva.cz/token","pushed_authorization_request_endpoint":"https://mtls.fapi.panva.cz/request","request_object_signing_alg_values_supported":["PS256"],"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_signed_request_object":true,"userinfo_endpoint":"https://mtls.fapi.panva.cz/accounts","authorization_signing_alg_values_supported":["PS256"],"tls_client_certificate_bound_access_tokens":true,"backchannel_authentication_endpoint":"https://mtls.fapi.panva.cz/backchannel","backchannel_token_delivery_modes_supported":["poll","ping"],"backchannel_user_code_parameter_supported":true,"backchannel_authentication_request_signing_alg_values_supported":["PS256"],"claim_types_supported":["normal"]}
2021-05-21 16:04:28
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{"acr_values_supported":["urn:mace:incommon:iap:silver"],"authorization_endpoint":"https://fapi.panva.cz/auth","claims_parameter_supported":true,"claims_supported":["sub","acr","sid","auth_time","iss"],"code_challenge_methods_supported":["S256"],"end_session_endpoint":"https://fapi.panva.cz/session/end","grant_types_supported":["implicit","authorization_code","refresh_token","urn:openid:params:grant-type:ciba"],"id_token_signing_alg_values_supported":["PS256"],"issuer":"https://fapi.panva.cz","jwks_uri":"https://fapi.panva.cz/jwks","registration_endpoint":"https://fapi.panva.cz/reg","response_modes_supported":["form_post","fragment","query","jwt","query.jwt","fragment.jwt","form_post.jwt"],"response_types_supported":["code id_token","code"],"scopes_supported":["openid","offline_access"],"subject_types_supported":["public"],"token_endpoint_auth_methods_supported":["private_key_jwt","self_signed_tls_client_auth"],"token_endpoint_auth_signing_alg_values_supported":["PS256"],"token_endpoint":"https://mtls.fapi.panva.cz/token","pushed_authorization_request_endpoint":"https://mtls.fapi.panva.cz/request","request_object_signing_alg_values_supported":["PS256"],"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_signed_request_object":true,"userinfo_endpoint":"https://mtls.fapi.panva.cz/accounts","authorization_signing_alg_values_supported":["PS256"],"tls_client_certificate_bound_access_tokens":true,"backchannel_authentication_endpoint":"https://mtls.fapi.panva.cz/backchannel","backchannel_token_delivery_modes_supported":["poll","ping"],"backchannel_user_code_parameter_supported":true,"backchannel_authentication_request_signing_alg_values_supported":["PS256"],"claim_types_supported":["normal"]}
2021-05-21 16:04:28 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
acr_values_supported
[
  "urn:mace:incommon:iap:silver"
]
authorization_endpoint
https://fapi.panva.cz/auth
claims_parameter_supported
true
claims_supported
[
  "sub",
  "acr",
  "sid",
  "auth_time",
  "iss"
]
code_challenge_methods_supported
[
  "S256"
]
end_session_endpoint
https://fapi.panva.cz/session/end
grant_types_supported
[
  "implicit",
  "authorization_code",
  "refresh_token",
  "urn:openid:params:grant-type:ciba"
]
id_token_signing_alg_values_supported
[
  "PS256"
]
issuer
https://fapi.panva.cz
jwks_uri
https://fapi.panva.cz/jwks
registration_endpoint
https://fapi.panva.cz/reg
response_modes_supported
[
  "form_post",
  "fragment",
  "query",
  "jwt",
  "query.jwt",
  "fragment.jwt",
  "form_post.jwt"
]
response_types_supported
[
  "code id_token",
  "code"
]
scopes_supported
[
  "openid",
  "offline_access"
]
subject_types_supported
[
  "public"
]
token_endpoint_auth_methods_supported
[
  "private_key_jwt",
  "self_signed_tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "PS256"
]
token_endpoint
https://mtls.fapi.panva.cz/token
pushed_authorization_request_endpoint
https://mtls.fapi.panva.cz/request
request_object_signing_alg_values_supported
[
  "PS256"
]
request_parameter_supported
true
request_uri_parameter_supported
false
require_signed_request_object
true
userinfo_endpoint
https://mtls.fapi.panva.cz/accounts
authorization_signing_alg_values_supported
[
  "PS256"
]
tls_client_certificate_bound_access_tokens
true
backchannel_authentication_endpoint
https://mtls.fapi.panva.cz/backchannel
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_user_code_parameter_supported
true
backchannel_authentication_request_signing_alg_values_supported
[
  "PS256"
]
claim_types_supported
[
  "normal"
]
2021-05-21 16:04:28 INFO
AddMTLSEndpointAliasesToEnvironment
The mtls_endpoint_aliases is not present in the server configuration
server
{
  "acr_values_supported": [
    "urn:mace:incommon:iap:silver"
  ],
  "authorization_endpoint": "https://fapi.panva.cz/auth",
  "claims_parameter_supported": true,
  "claims_supported": [
    "sub",
    "acr",
    "sid",
    "auth_time",
    "iss"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ],
  "end_session_endpoint": "https://fapi.panva.cz/session/end",
  "grant_types_supported": [
    "implicit",
    "authorization_code",
    "refresh_token",
    "urn:openid:params:grant-type:ciba"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "issuer": "https://fapi.panva.cz",
  "jwks_uri": "https://fapi.panva.cz/jwks",
  "registration_endpoint": "https://fapi.panva.cz/reg",
  "response_modes_supported": [
    "form_post",
    "fragment",
    "query",
    "jwt",
    "query.jwt",
    "fragment.jwt",
    "form_post.jwt"
  ],
  "response_types_supported": [
    "code id_token",
    "code"
  ],
  "scopes_supported": [
    "openid",
    "offline_access"
  ],
  "subject_types_supported": [
    "public"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt",
    "self_signed_tls_client_auth"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ],
  "token_endpoint": "https://mtls.fapi.panva.cz/token",
  "pushed_authorization_request_endpoint": "https://mtls.fapi.panva.cz/request",
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "require_signed_request_object": true,
  "userinfo_endpoint": "https://mtls.fapi.panva.cz/accounts",
  "authorization_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "backchannel_authentication_endpoint": "https://mtls.fapi.panva.cz/backchannel",
  "backchannel_token_delivery_modes_supported": [
    "poll",
    "ping"
  ],
  "backchannel_user_code_parameter_supported": true,
  "backchannel_authentication_request_signing_alg_values_supported": [
    "PS256"
  ],
  "claim_types_supported": [
    "normal"
  ]
}
2021-05-21 16:04:28 SUCCESS
CheckCIBAServerConfiguration
Found required server configuration keys
required
[
  "backchannel_authentication_endpoint",
  "token_endpoint",
  "issuer"
]
2021-05-21 16:04:28 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
{
  "testHost": "fapi.panva.cz",
  "testPort": 443
}
authorization_endpoint
{
  "testHost": "fapi.panva.cz",
  "testPort": 443
}
token_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
userinfo_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
2021-05-21 16:04:28
FetchServerKeys
Fetching server key
jwks_uri
https://fapi.panva.cz/jwks
2021-05-21 16:04:28
FetchServerKeys
HTTP request
request_uri
https://fapi.panva.cz/jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-05-21 16:04:29 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "462",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/jwk-set+json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:29 GMT",
  "expect-ct": "max-age\u003d0",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"keys":[{"kty":"RSA","use":"sig","kid":"EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M","alg":"PS256","e":"AQAB","n":"sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"}]}
2021-05-21 16:04:29
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","use":"sig","kid":"EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M","alg":"PS256","e":"AQAB","n":"sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"}]}
2021-05-21 16:04:29 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
      "alg": "PS256",
      "e": "AQAB",
      "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"
    }
  ]
}
2021-05-21 16:04:29 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
      "alg": "PS256",
      "e": "AQAB",
      "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"
    }
  ]
}
2021-05-21 16:04:29 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-05-21 16:04:29 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2021-05-21 16:04:29 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-05-21 16:04:29 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
      "alg": "PS256",
      "e": "AQAB",
      "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"
    }
  ]
}
First client: registering client using dynamic client registration
2021-05-21 16:04:29 SUCCESS
GetDynamicClientConfiguration
Created dynamic_client_registration_template object from the client configuration.
client_id
pkjwt-one
client_name
pkjwt-one
scope
openid offline_access
jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw",
      "d": "dxzWeLBYGwOgNb-S-4RCDxz7U6lUPPZaIkrbmkpLsdDdZOkMXGg_jk2LIJ3tYgAvZkWm87ZQqKjN2ADzJmpHvu-vCLuh8ccpwaiTXfWTOjjii0-Cfq0-fT6aQpIglbwubVKi1Tqxz-AglrMnCkNICm-e0GsotXFskxhwybp8IAZP__Up1pg-G9Dg_Timtepw55HjO4xDhzY70zV2NqSDEIvKOleyIZj4JP5kCkwP4_FJw_KynXwlxKvCshtFC3U2IEWWUaUQmM8Yy1Hz2x3TqImLQTWs3EMm6oRuhS0Y4tg9VlzJqnetdd6Ulh-DFzSB37KnBZS1qvnGGG4Cri9IkQ",
      "p": "5SLM2g4Uv3Q1-PGqwKPQ8h8Onp674FTxxYAHCh8mivgCGx7uIjVaOxCKvCimi8NCgtON0a1QdGY-BT3NsewJUvaniWyb5BZo-kpdkSzXCvQpWuWT_iSorgEgl4anJ59JZH_QW7wtjRnF8jWnw-_nkNv4HIIVd7fdKKCkpGi1Drk",
      "q": "xgyjgfZdlfpne27vdlxi5VGmNnBnLRAe_a7Wgo6JdmKPMPa1qugxVM5tUhoYjUuUpHxi8gDSxb0-N_kIqTu7zp2Ly9iB8wQIyyYmdxN7J_B5bSn5rfTcu_Uz-EuYVEGfj0hk5_aNQc0y02Di1L4QrnMNRGBo3jWCCRZrjqyHfqc",
      "dp": "tc9sHeUoX1V1cedHpn0VUNiFwCSRTIn6IMzaSRS4f3IUMbLUHv6Ybt9MRco3hBRV1PrJv8K2YPWzZnNIoFF6gILIIsmz1EJX36lcHtIme0GLAt3BFNm_ofmxA6pLPawtDvo_uFpTBm-Z2frq-BSGeDGh5_Tr1cdlS1RT70RJzbk",
      "dq": "FXlVWUgfSZ3HDqkuqcTGrFq4DPsPFOHEmnkUpT9TRFTXddWqSQe4IZvoWpidxORHD7a0-8x_DhXA40zLVZ42dOa8O7QUEweC9JQEY7DnD6ORZvbALc55CKBDrE52C9y5sk2FM2mWU2YudqDwt2SMZn3vGFTjygQ_P0EBFI08e80",
      "qi": "nmJaonUO_d62824V6YmWuEX7imXdgHKRi-tY4IUDJbrm7lKEfcn_xazqilECh1xm7O8b4bj0th3JrRcs1Al0sWP1FwVHjzzmg5oqq26PvHjmtVIHn3cXGT6AmY8-eUPkYgPBc61Ej58Usazm1iuRIe-wNIBeL244kFTQK7zJfnE",
      "kty": "RSA",
      "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
      "alg": "PS256",
      "use": "sig"
    }
  ]
}
hint_type
login_hint
hint_value
panva
2021-05-21 16:04:29 SUCCESS
GeneratePS256ClientJWKsWithKeyID
Generated client JWKs
client_jwks
{
  "keys": [
    {
      "p": "9rX21gaPqTs9LlP5-Phow16GNEzxc6cv4wRmVYt2c1djxJyDPa11DcXgaxoAf-RoOzaIVd_0JQecfPtjKI44TXXgQZPzP11FTN4ZDrAIaxnWU7NqaHFaA2bwRkbTjGlQ6SITtDTVjVwXZKuMn3L11bOZM8jk1XYkrJYMPiOq5rs",
      "kty": "RSA",
      "q": "x0USVqk-Y0GnFHRU1tV8accY8V2oJn1f_P-GYtXH-TKKt11Hy8SJape2OOHYhqKY5DeLvDij5yfvpRvo60tBt1QRB0T2GtN86PSd6MvP0IUIXac5KTymrKEUpSkXu0IXc2d7WBrVPm532jBlQIY4GRrrRf1PqsrvdFeolCCAeTE",
      "d": "cP-ze8ZK5dIA83hprHLQuEC1NZjQa1VQx1C23g_oVewrvo97_zGXlio1Q5Mrlf_uyHA6UgV55RZGjYJXLcZhEGOEUTR3e33l2Guqvhf_O-KcJ2aFM7wWtOqawH41sk4ZTxfzJw0TxXwHFLZ2An71OAFimsrQx28ZSfe_AcJjHNclfAOw3fPYuGu19e43yo7yF6pwAHmajjx3yiFiOFfscAJsfYXlizvU8eZ2-e5v7G5LjxvID5cTPV7v3SckBU5RDHc-PcdR61B-rxH7m5D5nHkr0H-N3hjWxAit2xsiVbjT_QK1jIhQm3pTlOZEyXuIZq47RSC1CobdpEZAubHSoQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
      "qi": "nGZBupCMnbLiTa931Maow-6D6AE2fQR-K6LVQFDrgpkkz0oMuljur92SBfAjElxI5HKQUZW9eg4ZE_QV5rB9l8JO_zibI_B4eZyjkeFwymDbFR7O0p3u6hwiiUIhkNRiVxS8uH9szJwqYZzVQ3rxWeIL4RBypVNP9hvqhx7DNaw",
      "dp": "fmUrWOtznpgi-CE96DgcNDuxNgpViZMWDZCrfRg-T0lua8Rj2K2NUskV-MkRiHRUkkGWB6j9RBtqKP4CBz0Vy1mg0vghn00BvCftXoEBTx2lmKxKz8eC_ks2vkp7B2zNbyNuRNzsq8eKlKDvIqGbISkqTEWYN2SX1XPqQcu0OxE",
      "alg": "PS256",
      "dq": "j1qObc_FdQxnEVz7J65fmY1E0WcKL95kLpL476NSAGEuz-kIXHwgS5Gm4tb-uSTCDvQyz46DwyjEyyf_8T2roiKVOYCP-A6LPt-ztiThdOYvdYh2o8bhNTGQs5yTWQCb9EbOwjxTil1YVZwZS0kDlHP8K9am-HyTtUPWn_Gd2xE",
      "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
      "alg": "PS256",
      "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw"
    }
  ]
}
2021-05-21 16:04:29 SUCCESS
GenerateMTLSCertificateFromJWKs
Generated client MTLS certificate
mutual_tls_authentication
{
  "cert": "MIICuzCCAaOgAwIBAgIGAXmPq8VcMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjExNjA0MjlaFw0yMjA1MjExNjA0MjlaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMAKA5g2X6lOrYbNtTChUrCAFFQ+GLWdLiKR43x4W8GMaI+gDQ5G0xbJ32PrM+M2WsAmrk1B4u1ahtOFfBFFOZ7bMbvT85laAcEyWO12r1/x7Tn3EY98d8qioKHTfzCxI4sykSaJttj7+WSabeZeW4mxYLehR3puzRi1bE27kB+DyR1KpjBIxbd6qjv4rqFZZpLtifCvwUTdc910r3gdSH99AmDTM+LRT0qeTPFLmSMyOJDklH+T5AoDuiIEs6CqrK5vP3efIBg5vHf6R2NkcF3I4yP5M4srKOW9s4UQBTDXo/kYvZ0QfD9dAYBJRm/PsuA4SsT9dmCww84FJ1hEjMsCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAJLBW1KHaZSXlzDXygQiAKFjQ/amjD2C05+Q60hVtSqwvsRCyBfRdkOfXWMHbIs6zIXY20gB+pgm7yyfoC845dwBO6jXRG7/8H9K/GWAr0Qi9lquZEq1gfiQAqf/VFWcQmBK5G861SI0EElqVyt+9MflEu9/lyqtBI9GBzD4UxQ8b5PaeyAfDVfnZ2o2IJTZFqOYZY2IfAjPMIL32eKoMVDgvDlnShWzjfDhdapVsE6fq4UdmCVsnz6gpM3tITxkSnZhvwRkQuyrEexdNqHLtxsGuq+3SdCPacqvm4ubrn6HVzhuXjHTaC1DqQykjHYVEui1rmameqxfgl4rEoJEjlg\u003d\u003d",
  "key": "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"
}
2021-05-21 16:04:29 SUCCESS
AddClientX509CertificateClaimToPublicJWKs
Added x5c claim to public JWKs
client_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
      "alg": "PS256",
      "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
      "x5c": [
        "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\u003d\u003d"
      ]
    }
  ]
}
2021-05-21 16:04:29 SUCCESS
CreateDynamicRegistrationRequest
Created dynamic registration request
client_name
pkjwt-one x2tna3whbSxEMmR
2021-05-21 16:04:29
AddCibaGrantTypeToDynamicRegistrationRequest
Added 'urn:openid:params:grant-type:ciba' to 'grant_types'
grant_types
[
  "urn:openid:params:grant-type:ciba"
]
2021-05-21 16:04:29
AddPublicJwksToDynamicRegistrationRequest
Added client public JWKS to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one x2tna3whbSxEMmR",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
        "alg": "PS256",
        "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  }
}
2021-05-21 16:04:29
AddCibaUserCodeFalseToDynamicRegistrationRequest
Added CIBA backchannel_user_code_parameter: false to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one x2tna3whbSxEMmR",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
        "alg": "PS256",
        "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false
}
2021-05-21 16:04:29
AddCibaTokenDeliveryModePingToDynamicRegistrationRequest
Added CIBA token delivery mode ping to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one x2tna3whbSxEMmR",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
        "alg": "PS256",
        "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping"
}
2021-05-21 16:04:29
AddCIBANotificationEndpointToDynamicRegistrationRequest
Added 'https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint' to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one x2tna3whbSxEMmR",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
        "alg": "PS256",
        "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint"
}
2021-05-21 16:04:29
AddCibaRequestSigningPS256ToDynamicRegistrationRequest
Added CIBA request sign alg to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one x2tna3whbSxEMmR",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
        "alg": "PS256",
        "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256"
}
2021-05-21 16:04:29
AddIdTokenSigningAlgPS256ToDynamicRegistrationRequest
Added id_token_signed_response_alg to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one x2tna3whbSxEMmR",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
        "alg": "PS256",
        "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256"
}
2021-05-21 16:04:29
AddEmptyResponseTypesArrayToDynamicRegistrationRequest
Added empty response_types array to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one x2tna3whbSxEMmR",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
        "alg": "PS256",
        "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256",
  "response_types": []
}
2021-05-21 16:04:29
AddTokenEndpointAuthMethodPrivateKeyJwtToDynamicRegistrationRequest
Added private_key_jwt for token endpoint auth method to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one x2tna3whbSxEMmR",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
        "alg": "PS256",
        "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256",
  "response_types": [],
  "token_endpoint_auth_method": "private_key_jwt"
}
2021-05-21 16:04:29
AddTokenEndpointAuthSigningAlgPS256ToDynamicRegistrationRequest
Added PS256 for token endpoint auth signing alg to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one x2tna3whbSxEMmR",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
        "alg": "PS256",
        "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256",
  "response_types": [],
  "token_endpoint_auth_method": "private_key_jwt",
  "token_endpoint_auth_signing_alg": "PS256"
}
2021-05-21 16:04:29
AddTLSBoundAccessTokensTrueToDynamicRegistrationRequest
Added tls_client_certificate_bound_access_tokens to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one x2tna3whbSxEMmR",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
        "alg": "PS256",
        "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256",
  "response_types": [],
  "token_endpoint_auth_method": "private_key_jwt",
  "token_endpoint_auth_signing_alg": "PS256",
  "tls_client_certificate_bound_access_tokens": true
}
2021-05-21 16:04:29
CallDynamicRegistrationEndpoint
HTTP request
request_uri
https://fapi.panva.cz/reg
request_method
POST
request_headers
{
  "accept": "application/json",
  "accept-charset": "utf-8",
  "content-type": "application/json",
  "content-length": "1982"
}
request_body
{"client_name":"pkjwt-one x2tna3whbSxEMmR","grant_types":["urn:openid:params:grant-type:ciba"],"jwks":{"keys":[{"kty":"RSA","e":"AQAB","use":"sig","kid":"IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg","alg":"PS256","n":"wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw","x5c":["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"]}]},"backchannel_user_code_parameter":false,"backchannel_token_delivery_mode":"ping","backchannel_client_notification_endpoint":"https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint","backchannel_authentication_request_signing_alg":"PS256","id_token_signed_response_alg":"PS256","response_types":[],"token_endpoint_auth_method":"private_key_jwt","token_endpoint_auth_signing_alg":"PS256","tls_client_certificate_bound_access_tokens":true}
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDACgOYNl+pTq2GzbUwoVKwgBRUPhi1nS4ikeN8eFvBjGiPoA0ORtMWyd9j6zPjNlrAJq5NQeLtWobThXwRRTme2zG70/OZWgHBMljtdq9f8e059xGPfHfKoqCh038wsSOLMpEmibbY+/lkmm3mXluJsWC3oUd6bs0YtWxNu5Afg8kdSqYwSMW3eqo7+K6hWWaS7Ynwr8FE3XPddK94HUh/fQJg0zPi0U9KnkzxS5kjMjiQ5JR/k+QKA7oiBLOgqqyubz93nyAYObx3+kdjZHBdyOMj+TOLKyjlvbOFEAUw16P5GL2dEHw/XQGASUZvz7LgOErE/XZgsMPOBSdYRIzLAgMBAAECggEAcP+ze8ZK5dIA83hprHLQuEC1NZjQa1VQx1C23g/oVewrvo97/zGXlio1Q5Mrlf/uyHA6UgV55RZGjYJXLcZhEGOEUTR3e33l2Guqvhf/O+KcJ2aFM7wWtOqawH41sk4ZTxfzJw0TxXwHFLZ2An71OAFimsrQx28ZSfe/AcJjHNclfAOw3fPYuGu19e43yo7yF6pwAHmajjx3yiFiOFfscAJsfYXlizvU8eZ2+e5v7G5LjxvID5cTPV7v3SckBU5RDHc+PcdR61B+rxH7m5D5nHkr0H+N3hjWxAit2xsiVbjT/QK1jIhQm3pTlOZEyXuIZq47RSC1CobdpEZAubHSoQKBgQD2tfbWBo+pOz0uU/n4+GjDXoY0TPFzpy/jBGZVi3ZzV2PEnIM9rXUNxeBrGgB/5Gg7NohV3/QlB5x8+2MojjhNdeBBk/M/XUVM3hkOsAhrGdZTs2pocVoDZvBGRtOMaVDpIhO0NNWNXBdkq4yfcvXVs5kzyOTVdiSslgw+I6rmuwKBgQDHRRJWqT5jQacUdFTW1XxpxxjxXagmfV/8/4Zi1cf5Moq3XUfLxIlql7Y44diGopjkN4u8OKPnJ++lG+jrS0G3VBEHRPYa03zo9J3oy8/QhQhdpzkpPKasoRSlKRe7QhdzZ3tYGtU+bnfaMGVAhjgZGutF/U+qyu90V6iUIIB5MQKBgH5lK1jrc56YIvghPeg4HDQ7sTYKVYmTFg2Qq30YPk9JbmvEY9itjVLJFfjJEYh0VJJBlgeo/UQbaij+Agc9FctZoNL4IZ9NAbwn7V6BAU8dpZisSs/Hgv5LNr5KewdszW8jbkTc7KvHipSg7yKhmyEpKkxFmDdkl9Vz6kHLtDsRAoGBAI9ajm3PxXUMZxFc+yeuX5mNRNFnCi/eZC6S+O+jUgBhLs/pCFx8IEuRpuLW/rkkwg70Ms+Og8MoxMsn//E9q6IilTmAj/gOiz7fs7Yk4XTmL3WIdqPG4TUxkLOck1kAm/RGzsI8U4pdWFWcGUtJA5Rz/CvWpvh8k7VD1p/xndsRAoGBAJxmQbqQjJ2y4k2vd9TGqMPug+gBNn0Efiui1UBQ64KZJM9KDLpY7q/dkgXwIxJcSORykFGVvXoOGRP0FeawfZfCTv84myPweHmco5HhcMpg2xUeztKd7uocIolCIZDUYlcUvLh/bMycKmGc1UN68VniC+EQcqVTT/Yb6ocewzWs"
}
2021-05-21 16:04:30 RESPONSE
CallDynamicRegistrationEndpoint
HTTP response
response_status_code
201 CREATED
response_status_text
Created
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "2490",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:30 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"application_type":"web","grant_types":["urn:openid:params:grant-type:ciba"],"id_token_signed_response_alg":"PS256","post_logout_redirect_uris":[],"require_auth_time":false,"response_types":[],"subject_type":"public","token_endpoint_auth_method":"private_key_jwt","request_object_signing_alg":"PS256","require_signed_request_object":true,"require_pushed_authorization_requests":false,"authorization_signed_response_alg":"PS256","tls_client_certificate_bound_access_tokens":true,"backchannel_user_code_parameter":false,"client_id_issued_at":1621613070,"client_id":"XppzSuNHDHYHRltExhe6q","client_name":"pkjwt-one x2tna3whbSxEMmR","jwks":{"keys":[{"kty":"RSA","e":"AQAB","use":"sig","kid":"IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg","alg":"PS256","n":"wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw","x5c":["MIICuzCCAaOgAwIBAgIGAXmPq8VcMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjExNjA0MjlaFw0yMjA1MjExNjA0MjlaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMAKA5g2X6lOrYbNtTChUrCAFFQ+GLWdLiKR43x4W8GMaI+gDQ5G0xbJ32PrM+M2WsAmrk1B4u1ahtOFfBFFOZ7bMbvT85laAcEyWO12r1/x7Tn3EY98d8qioKHTfzCxI4sykSaJttj7+WSabeZeW4mxYLehR3puzRi1bE27kB+DyR1KpjBIxbd6qjv4rqFZZpLtifCvwUTdc910r3gdSH99AmDTM+LRT0qeTPFLmSMyOJDklH+T5AoDuiIEs6CqrK5vP3efIBg5vHf6R2NkcF3I4yP5M4srKOW9s4UQBTDXo/kYvZ0QfD9dAYBJRm/PsuA4SsT9dmCww84FJ1hEjMsCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAJLBW1KHaZSXlzDXygQiAKFjQ/amjD2C05+Q60hVtSqwvsRCyBfRdkOfXWMHbIs6zIXY20gB+pgm7yyfoC845dwBO6jXRG7/8H9K/GWAr0Qi9lquZEq1gfiQAqf/VFWcQmBK5G861SI0EElqVyt+9MflEu9/lyqtBI9GBzD4UxQ8b5PaeyAfDVfnZ2o2IJTZFqOYZY2IfAjPMIL32eKoMVDgvDlnShWzjfDhdapVsE6fq4UdmCVsnz6gpM3tITxkSnZhvwRkQuyrEexdNqHLtxsGuq+3SdCPacqvm4ubrn6HVzhuXjHTaC1DqQykjHYVEui1rmameqxfgl4rEoJEjlg=="]}]},"token_endpoint_auth_signing_alg":"PS256","backchannel_token_delivery_mode":"ping","backchannel_client_notification_endpoint":"https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint","backchannel_authentication_request_signing_alg":"PS256","redirect_uris":[],"registration_client_uri":"https://fapi.panva.cz/reg/XppzSuNHDHYHRltExhe6q","registration_access_token":"D_Yl3U_Hq48IC2tZe6aN9De6X4zd-szqrDKNPsLeKLq"}
2021-05-21 16:04:30
CallDynamicRegistrationEndpoint
Registration endpoint response
dynamic_registration_response
{"application_type":"web","grant_types":["urn:openid:params:grant-type:ciba"],"id_token_signed_response_alg":"PS256","post_logout_redirect_uris":[],"require_auth_time":false,"response_types":[],"subject_type":"public","token_endpoint_auth_method":"private_key_jwt","request_object_signing_alg":"PS256","require_signed_request_object":true,"require_pushed_authorization_requests":false,"authorization_signed_response_alg":"PS256","tls_client_certificate_bound_access_tokens":true,"backchannel_user_code_parameter":false,"client_id_issued_at":1621613070,"client_id":"XppzSuNHDHYHRltExhe6q","client_name":"pkjwt-one x2tna3whbSxEMmR","jwks":{"keys":[{"kty":"RSA","e":"AQAB","use":"sig","kid":"IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg","alg":"PS256","n":"wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw","x5c":["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"]}]},"token_endpoint_auth_signing_alg":"PS256","backchannel_token_delivery_mode":"ping","backchannel_client_notification_endpoint":"https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint","backchannel_authentication_request_signing_alg":"PS256","redirect_uris":[],"registration_client_uri":"https://fapi.panva.cz/reg/XppzSuNHDHYHRltExhe6q","registration_access_token":"D_Yl3U_Hq48IC2tZe6aN9De6X4zd-szqrDKNPsLeKLq"}
2021-05-21 16:04:30
CallDynamicRegistrationEndpoint
Parsed registration endpoint response
application_type
web
grant_types
[
  "urn:openid:params:grant-type:ciba"
]
id_token_signed_response_alg
PS256
post_logout_redirect_uris
[]
require_auth_time
false
response_types
[]
subject_type
public
token_endpoint_auth_method
private_key_jwt
request_object_signing_alg
PS256
require_signed_request_object
true
require_pushed_authorization_requests
false
authorization_signed_response_alg
PS256
tls_client_certificate_bound_access_tokens
true
backchannel_user_code_parameter
false
client_id_issued_at
1621613070
client_id
XppzSuNHDHYHRltExhe6q
client_name
pkjwt-one x2tna3whbSxEMmR
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
      "alg": "PS256",
      "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
      "x5c": [
        "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\u003d\u003d"
      ]
    }
  ]
}
token_endpoint_auth_signing_alg
PS256
backchannel_token_delivery_mode
ping
backchannel_client_notification_endpoint
https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint
backchannel_authentication_request_signing_alg
PS256
redirect_uris
[]
registration_client_uri
https://fapi.panva.cz/reg/XppzSuNHDHYHRltExhe6q
registration_access_token
D_Yl3U_Hq48IC2tZe6aN9De6X4zd-szqrDKNPsLeKLq
2021-05-21 16:04:30 SUCCESS
CallDynamicRegistrationEndpoint
Extracted dynamic registration management credentials
registration_client_uri
https://fapi.panva.cz/reg/XppzSuNHDHYHRltExhe6q
registration_access_token
D_Yl3U_Hq48IC2tZe6aN9De6X4zd-szqrDKNPsLeKLq
2021-05-21 16:04:30
CopyScopeFromDynamicRegistrationTemplateToClientConfiguration
Copied scope from dynamic_client_registration_template to client configuration
client
{
  "application_type": "web",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "id_token_signed_response_alg": "PS256",
  "post_logout_redirect_uris": [],
  "require_auth_time": false,
  "response_types": [],
  "subject_type": "public",
  "token_endpoint_auth_method": "private_key_jwt",
  "request_object_signing_alg": "PS256",
  "require_signed_request_object": true,
  "require_pushed_authorization_requests": false,
  "authorization_signed_response_alg": "PS256",
  "tls_client_certificate_bound_access_tokens": true,
  "backchannel_user_code_parameter": false,
  "client_id_issued_at": 1621613070,
  "client_id": "XppzSuNHDHYHRltExhe6q",
  "client_name": "pkjwt-one x2tna3whbSxEMmR",
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
        "alg": "PS256",
        "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "token_endpoint_auth_signing_alg": "PS256",
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/x2tna3whbSxEMmR/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256",
  "redirect_uris": [],
  "registration_client_uri": "https://fapi.panva.cz/reg/XppzSuNHDHYHRltExhe6q",
  "registration_access_token": "D_Yl3U_Hq48IC2tZe6aN9De6X4zd-szqrDKNPsLeKLq",
  "scope": "openid offline_access"
}
2021-05-21 16:04:30 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-05-21 16:04:30 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-05-21 16:04:30 SUCCESS
FAPICheckKeyAlgInClientJWKs
Found a key with alg PS256 or ES256
2021-05-21 16:04:30 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "9rX21gaPqTs9LlP5-Phow16GNEzxc6cv4wRmVYt2c1djxJyDPa11DcXgaxoAf-RoOzaIVd_0JQecfPtjKI44TXXgQZPzP11FTN4ZDrAIaxnWU7NqaHFaA2bwRkbTjGlQ6SITtDTVjVwXZKuMn3L11bOZM8jk1XYkrJYMPiOq5rs",
      "kty": "RSA",
      "q": "x0USVqk-Y0GnFHRU1tV8accY8V2oJn1f_P-GYtXH-TKKt11Hy8SJape2OOHYhqKY5DeLvDij5yfvpRvo60tBt1QRB0T2GtN86PSd6MvP0IUIXac5KTymrKEUpSkXu0IXc2d7WBrVPm532jBlQIY4GRrrRf1PqsrvdFeolCCAeTE",
      "d": "cP-ze8ZK5dIA83hprHLQuEC1NZjQa1VQx1C23g_oVewrvo97_zGXlio1Q5Mrlf_uyHA6UgV55RZGjYJXLcZhEGOEUTR3e33l2Guqvhf_O-KcJ2aFM7wWtOqawH41sk4ZTxfzJw0TxXwHFLZ2An71OAFimsrQx28ZSfe_AcJjHNclfAOw3fPYuGu19e43yo7yF6pwAHmajjx3yiFiOFfscAJsfYXlizvU8eZ2-e5v7G5LjxvID5cTPV7v3SckBU5RDHc-PcdR61B-rxH7m5D5nHkr0H-N3hjWxAit2xsiVbjT_QK1jIhQm3pTlOZEyXuIZq47RSC1CobdpEZAubHSoQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg",
      "qi": "nGZBupCMnbLiTa931Maow-6D6AE2fQR-K6LVQFDrgpkkz0oMuljur92SBfAjElxI5HKQUZW9eg4ZE_QV5rB9l8JO_zibI_B4eZyjkeFwymDbFR7O0p3u6hwiiUIhkNRiVxS8uH9szJwqYZzVQ3rxWeIL4RBypVNP9hvqhx7DNaw",
      "dp": "fmUrWOtznpgi-CE96DgcNDuxNgpViZMWDZCrfRg-T0lua8Rj2K2NUskV-MkRiHRUkkGWB6j9RBtqKP4CBz0Vy1mg0vghn00BvCftXoEBTx2lmKxKz8eC_ks2vkp7B2zNbyNuRNzsq8eKlKDvIqGbISkqTEWYN2SX1XPqQcu0OxE",
      "alg": "PS256",
      "dq": "j1qObc_FdQxnEVz7J65fmY1E0WcKL95kLpL476NSAGEuz-kIXHwgS5Gm4tb-uSTCDvQyz46DwyjEyyf_8T2roiKVOYCP-A6LPt-ztiThdOYvdYh2o8bhNTGQs5yTWQCb9EbOwjxTil1YVZwZS0kDlHP8K9am-HyTtUPWn_Gd2xE",
      "n": "wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw"
    }
  ]
}
2021-05-21 16:04:30 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2021-05-21 16:04:30 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://mtls.fapi.panva.cz/accounts
institution_id
xxxxx
2021-05-21 16:04:30 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://mtls.fapi.panva.cz/accounts
2021-05-21 16:04:30 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
2021-05-21 16:04:30 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
accounts_request_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
2021-05-21 16:04:30
fapi-ciba-id1-ping-backchannel-notification-endpoint-response-has-body
Setup Done
Call backchannel authentication endpoint
2021-05-21 16:04:30 SUCCESS
CreateEmptyAuthorizationEndpointRequest
Created empty authorization endpoint request
2021-05-21 16:04:30 SUCCESS
AddScopeToAuthorizationEndpointRequest
Added scope of 'openid offline_access' to authorization endpoint request
scope
openid offline_access
2021-05-21 16:04:30 SUCCESS
AddHintToAuthorizationEndpointRequest
Added hint to authorization endpoint request
login_hint
panva
2021-05-21 16:04:30 SUCCESS
AddBindingMessageToAuthorizationEndpointRequest
Added binding message to authorization endpoint request
binding_message
1234
2021-05-21 16:04:30
CreateRandomClientNotificationToken
Created token value
client_notification_token
2ssV-J6hCofiBjIyJ3fV=
requested_notification_token_length
21
2021-05-21 16:04:30 SUCCESS
AddClientNotificationTokenToAuthorizationEndpointRequest
Added client_notification_token '2ssV-J6hCofiBjIyJ3fV=' to authorization endpoint request
scope
openid offline_access
login_hint
panva
binding_message
1234
client_notification_token
2ssV-J6hCofiBjIyJ3fV=
2021-05-21 16:04:30 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "scope": "openid offline_access",
  "login_hint": "panva",
  "binding_message": "1234",
  "client_notification_token": "2ssV-J6hCofiBjIyJ3fV\u003d"
}
2021-05-21 16:04:30 SUCCESS
AddIatToRequestObject
Added iat to request object claims
iat
1.62161307E9
2021-05-21 16:04:30 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.62161337E9
2021-05-21 16:04:30 SUCCESS
AddNbfToRequestObject
Added nbf to request object claims
nbf
1.62161307E9
2021-05-21 16:04:30 SUCCESS
AddJtiToRequestObject
Added jti to request object claims
jti
FHyaCGSXa1KGeevIEl7j
2021-05-21 16:04:30 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://fapi.panva.cz
2021-05-21 16:04:30 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
XppzSuNHDHYHRltExhe6q
2021-05-21 16:04:30 SUCCESS
SignRequestObject
Signed the request object
claims
{"client_notification_token":"2ssV-J6hCofiBjIyJ3fV=","aud":"https:\/\/fapi.panva.cz","login_hint":"panva","nbf":1621613070,"scope":"openid offline_access","iss":"XppzSuNHDHYHRltExhe6q","binding_message":"1234","exp":1621613370,"iat":1621613070,"jti":"FHyaCGSXa1KGeevIEl7j"}
header
{"kid":"IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg","alg":"PS256"}
request_object
eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJjbGllbnRfbm90aWZpY2F0aW9uX3Rva2VuIjoiMnNzVi1KNmhDb2ZpQmpJeUozZlY9IiwiYXVkIjoiaHR0cHM6XC9cL2ZhcGkucGFudmEuY3oiLCJsb2dpbl9oaW50IjoicGFudmEiLCJuYmYiOjE2MjE2MTMwNzAsInNjb3BlIjoib3BlbmlkIG9mZmxpbmVfYWNjZXNzIiwiaXNzIjoiWHBwelN1TkhESFlIUmx0RXhoZTZxIiwiYmluZGluZ19tZXNzYWdlIjoiMTIzNCIsImV4cCI6MTYyMTYxMzM3MCwiaWF0IjoxNjIxNjEzMDcwLCJqdGkiOiJGSHlhQ0dTWGExS0dlZXZJRWw3aiJ9.fldoi8erJZkvHX1rw_kOPdQN612V9F-ZCq75KOgagXOvx2hzxhDzyr0i-vQeOJlFCM_cWprvT60wTnNwocTqgpAL35_SOZ_e1W9YuEIs5XmkSObFVEn47dErvG64LAJPBobGi490LGXg3MacF6dSIVzQoWKFxAwbFGECNyVX2geY9AXUq7LY4vO9xBNFjy-kkmrw93hZWqdEKOtgpAaCZEw1gcNJJLyUrv7ZaWz6iuru2lE_QajnmGQwTgU4teTybtGum9IW4KTXHOE-gsZ8rx-ozyVsCQ1N4iQZ4ZFb-TllHjwORd943oaGcNcx0_tUcpCOuCAzsFbNhJxLa-U_Ug
key
{"p":"9rX21gaPqTs9LlP5-Phow16GNEzxc6cv4wRmVYt2c1djxJyDPa11DcXgaxoAf-RoOzaIVd_0JQecfPtjKI44TXXgQZPzP11FTN4ZDrAIaxnWU7NqaHFaA2bwRkbTjGlQ6SITtDTVjVwXZKuMn3L11bOZM8jk1XYkrJYMPiOq5rs","kty":"RSA","q":"x0USVqk-Y0GnFHRU1tV8accY8V2oJn1f_P-GYtXH-TKKt11Hy8SJape2OOHYhqKY5DeLvDij5yfvpRvo60tBt1QRB0T2GtN86PSd6MvP0IUIXac5KTymrKEUpSkXu0IXc2d7WBrVPm532jBlQIY4GRrrRf1PqsrvdFeolCCAeTE","d":"cP-ze8ZK5dIA83hprHLQuEC1NZjQa1VQx1C23g_oVewrvo97_zGXlio1Q5Mrlf_uyHA6UgV55RZGjYJXLcZhEGOEUTR3e33l2Guqvhf_O-KcJ2aFM7wWtOqawH41sk4ZTxfzJw0TxXwHFLZ2An71OAFimsrQx28ZSfe_AcJjHNclfAOw3fPYuGu19e43yo7yF6pwAHmajjx3yiFiOFfscAJsfYXlizvU8eZ2-e5v7G5LjxvID5cTPV7v3SckBU5RDHc-PcdR61B-rxH7m5D5nHkr0H-N3hjWxAit2xsiVbjT_QK1jIhQm3pTlOZEyXuIZq47RSC1CobdpEZAubHSoQ","e":"AQAB","use":"sig","kid":"IfOIc3bDJwEK8rZO69jXPV4xQA5lqqFL5mlRYcX7Xzg","qi":"nGZBupCMnbLiTa931Maow-6D6AE2fQR-K6LVQFDrgpkkz0oMuljur92SBfAjElxI5HKQUZW9eg4ZE_QV5rB9l8JO_zibI_B4eZyjkeFwymDbFR7O0p3u6hwiiUIhkNRiVxS8uH9szJwqYZzVQ3rxWeIL4RBypVNP9hvqhx7DNaw","dp":"fmUrWOtznpgi-CE96DgcNDuxNgpViZMWDZCrfRg-T0lua8Rj2K2NUskV-MkRiHRUkkGWB6j9RBtqKP4CBz0Vy1mg0vghn00BvCftXoEBTx2lmKxKz8eC_ks2vkp7B2zNbyNuRNzsq8eKlKDvIqGbISkqTEWYN2SX1XPqQcu0OxE","alg":"PS256","dq":"j1qObc_FdQxnEVz7J65fmY1E0WcKL95kLpL476NSAGEuz-kIXHwgS5Gm4tb-uSTCDvQyz46DwyjEyyf_8T2roiKVOYCP-A6LPt-ztiThdOYvdYh2o8bhNTGQs5yTWQCb9EbOwjxTil1YVZwZS0kDlHP8K9am-HyTtUPWn_Gd2xE","n":"wAoDmDZfqU6ths21MKFSsIAUVD4YtZ0uIpHjfHhbwYxoj6ANDkbTFsnfY-sz4zZawCauTUHi7VqG04V8EUU5ntsxu9PzmVoBwTJY7XavX_HtOfcRj3x3yqKgodN_MLEjizKRJom22Pv5ZJpt5l5bibFgt6FHem7NGLVsTbuQH4PJHUqmMEjFt3qqO_iuoVlmku2J8K_BRN1z3XSveB1If30CYNMz4tFPSp5M8UuZIzI4kOSUf5PkCgO6IgSzoKqsrm8_d58gGDm8d_pHY2RwXcjjI_kziyso5b2zhRAFMNej-Ri9nRB8P10BgElGb8-y4DhKxP12YLDDzgUnWESMyw"}
2021-05-21 16:04:30 SUCCESS
CreateBackchannelAuthenticationEndpointRequest
Created backchannel authentication endpoint request
2021-05-21 16:04:30
AddRequestToBackchannelAuthenticationEndpointRequest
request
eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJjbGllbnRfbm90aWZpY2F0aW9uX3Rva2VuIjoiMnNzVi1KNmhDb2ZpQmpJeUozZlY9IiwiYXVkIjoiaHR0cHM6XC9cL2ZhcGkucGFudmEuY3oiLCJsb2dpbl9oaW50IjoicGFudmEiLCJuYmYiOjE2MjE2MTMwNzAsInNjb3BlIjoib3BlbmlkIG9mZmxpbmVfYWNjZXNzIiwiaXNzIjoiWHBwelN1TkhESFlIUmx0RXhoZTZxIiwiYmluZGluZ19tZXNzYWdlIjoiMTIzNCIsImV4cCI6MTYyMTYxMzM3MCwiaWF0IjoxNjIxNjEzMDcwLCJqdGkiOiJGSHlhQ0dTWGExS0dlZXZJRWw3aiJ9.fldoi8erJZkvHX1rw_kOPdQN612V9F-ZCq75KOgagXOvx2hzxhDzyr0i-vQeOJlFCM_cWprvT60wTnNwocTqgpAL35_SOZ_e1W9YuEIs5XmkSObFVEn47dErvG64LAJPBobGi490LGXg3MacF6dSIVzQoWKFxAwbFGECNyVX2geY9AXUq7LY4vO9xBNFjy-kkmrw93hZWqdEKOtgpAaCZEw1gcNJJLyUrv7ZaWz6iuru2lE_QajnmGQwTgU4teTybtGum9IW4KTXHOE-gsZ8rx-ozyVsCQ1N4iQZ4ZFb-TllHjwORd943oaGcNcx0_tUcpCOuCAzsFbNhJxLa-U_Ug
2021-05-21 16:04:30 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
XppzSuNHDHYHRltExhe6q
sub
XppzSuNHDHYHRltExhe6q
aud
https://mtls.fapi.panva.cz/token
jti
BN1w2zIW9sBzGu57Ovu6
iat
1621613070
exp
1621613130
2021-05-21 16:04:30 SUCCESS
SetClientAuthenticationAudToBackchannelAuthenticationEndpoint
Add backchannel_authentication_endpoint as aud value to client_assertion_claims
iss
XppzSuNHDHYHRltExhe6q
sub
XppzSuNHDHYHRltExhe6q
aud
https://mtls.fapi.panva.cz/backchannel
jti
BN1w2zIW9sBzGu57Ovu6
iat
1621613070
exp
1621613130
2021-05-21 16:04:30 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJYcHB6U3VOSERIWUhSbHRFeGhlNnEiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC9iYWNrY2hhbm5lbCIsImlzcyI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxMzEzMCwiaWF0IjoxNjIxNjEzMDcwLCJqdGkiOiJCTjF3MnpJVzlzQnpHdTU3T3Z1NiJ9.r6J1BD5g-tg-oQgqJXg2IRax9pThQjsHtD5cMCgKfMHMIoHpiWytfaYEYutlzpVeWecvCryiSGyjmYQZnyN8DBag5mz63vNwTBgQRNB2ZbpW_JGCRIQ_2BPnV7gOHfZedH2WoU_yiPMaf6erjoYswzPNoIGDGjsHr9IgkRcGpiXJcUbtcou3kVzajwzfxcSYIYdGF9M3td1Q5BY29i7ffnXLtH2vdXsS5bh2UX8e5TQg2sLJnnKO5ZotWeCV6QyM8jlLDMkwX9YM9JdFirfrlfHLjPNvp4jF4PHlWeyo0NI0xIBpJwK226yV_D9ZtECDYcbG2rOrBQOZgR72AUNpUQ
2021-05-21 16:04:30
AddClientAssertionToBackchannelAuthenticationEndpoint
Added client assertion
request
eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJjbGllbnRfbm90aWZpY2F0aW9uX3Rva2VuIjoiMnNzVi1KNmhDb2ZpQmpJeUozZlY9IiwiYXVkIjoiaHR0cHM6XC9cL2ZhcGkucGFudmEuY3oiLCJsb2dpbl9oaW50IjoicGFudmEiLCJuYmYiOjE2MjE2MTMwNzAsInNjb3BlIjoib3BlbmlkIG9mZmxpbmVfYWNjZXNzIiwiaXNzIjoiWHBwelN1TkhESFlIUmx0RXhoZTZxIiwiYmluZGluZ19tZXNzYWdlIjoiMTIzNCIsImV4cCI6MTYyMTYxMzM3MCwiaWF0IjoxNjIxNjEzMDcwLCJqdGkiOiJGSHlhQ0dTWGExS0dlZXZJRWw3aiJ9.fldoi8erJZkvHX1rw_kOPdQN612V9F-ZCq75KOgagXOvx2hzxhDzyr0i-vQeOJlFCM_cWprvT60wTnNwocTqgpAL35_SOZ_e1W9YuEIs5XmkSObFVEn47dErvG64LAJPBobGi490LGXg3MacF6dSIVzQoWKFxAwbFGECNyVX2geY9AXUq7LY4vO9xBNFjy-kkmrw93hZWqdEKOtgpAaCZEw1gcNJJLyUrv7ZaWz6iuru2lE_QajnmGQwTgU4teTybtGum9IW4KTXHOE-gsZ8rx-ozyVsCQ1N4iQZ4ZFb-TllHjwORd943oaGcNcx0_tUcpCOuCAzsFbNhJxLa-U_Ug
client_assertion
eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJYcHB6U3VOSERIWUhSbHRFeGhlNnEiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC9iYWNrY2hhbm5lbCIsImlzcyI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxMzEzMCwiaWF0IjoxNjIxNjEzMDcwLCJqdGkiOiJCTjF3MnpJVzlzQnpHdTU3T3Z1NiJ9.r6J1BD5g-tg-oQgqJXg2IRax9pThQjsHtD5cMCgKfMHMIoHpiWytfaYEYutlzpVeWecvCryiSGyjmYQZnyN8DBag5mz63vNwTBgQRNB2ZbpW_JGCRIQ_2BPnV7gOHfZedH2WoU_yiPMaf6erjoYswzPNoIGDGjsHr9IgkRcGpiXJcUbtcou3kVzajwzfxcSYIYdGF9M3td1Q5BY29i7ffnXLtH2vdXsS5bh2UX8e5TQg2sLJnnKO5ZotWeCV6QyM8jlLDMkwX9YM9JdFirfrlfHLjPNvp4jF4PHlWeyo0NI0xIBpJwK226yV_D9ZtECDYcbG2rOrBQOZgR72AUNpUQ
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:30
CallBackchannelAuthenticationEndpoint
HTTP request
request_uri
https://mtls.fapi.panva.cz/backchannel
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "1577"
}
request_body
request=eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJjbGllbnRfbm90aWZpY2F0aW9uX3Rva2VuIjoiMnNzVi1KNmhDb2ZpQmpJeUozZlY9IiwiYXVkIjoiaHR0cHM6XC9cL2ZhcGkucGFudmEuY3oiLCJsb2dpbl9oaW50IjoicGFudmEiLCJuYmYiOjE2MjE2MTMwNzAsInNjb3BlIjoib3BlbmlkIG9mZmxpbmVfYWNjZXNzIiwiaXNzIjoiWHBwelN1TkhESFlIUmx0RXhoZTZxIiwiYmluZGluZ19tZXNzYWdlIjoiMTIzNCIsImV4cCI6MTYyMTYxMzM3MCwiaWF0IjoxNjIxNjEzMDcwLCJqdGkiOiJGSHlhQ0dTWGExS0dlZXZJRWw3aiJ9.fldoi8erJZkvHX1rw_kOPdQN612V9F-ZCq75KOgagXOvx2hzxhDzyr0i-vQeOJlFCM_cWprvT60wTnNwocTqgpAL35_SOZ_e1W9YuEIs5XmkSObFVEn47dErvG64LAJPBobGi490LGXg3MacF6dSIVzQoWKFxAwbFGECNyVX2geY9AXUq7LY4vO9xBNFjy-kkmrw93hZWqdEKOtgpAaCZEw1gcNJJLyUrv7ZaWz6iuru2lE_QajnmGQwTgU4teTybtGum9IW4KTXHOE-gsZ8rx-ozyVsCQ1N4iQZ4ZFb-TllHjwORd943oaGcNcx0_tUcpCOuCAzsFbNhJxLa-U_Ug&client_assertion=eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJYcHB6U3VOSERIWUhSbHRFeGhlNnEiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC9iYWNrY2hhbm5lbCIsImlzcyI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxMzEzMCwiaWF0IjoxNjIxNjEzMDcwLCJqdGkiOiJCTjF3MnpJVzlzQnpHdTU3T3Z1NiJ9.r6J1BD5g-tg-oQgqJXg2IRax9pThQjsHtD5cMCgKfMHMIoHpiWytfaYEYutlzpVeWecvCryiSGyjmYQZnyN8DBag5mz63vNwTBgQRNB2ZbpW_JGCRIQ_2BPnV7gOHfZedH2WoU_yiPMaf6erjoYswzPNoIGDGjsHr9IgkRcGpiXJcUbtcou3kVzajwzfxcSYIYdGF9M3td1Q5BY29i7ffnXLtH2vdXsS5bh2UX8e5TQg2sLJnnKO5ZotWeCV6QyM8jlLDMkwX9YM9JdFirfrlfHLjPNvp4jF4PHlWeyo0NI0xIBpJwK226yV_D9ZtECDYcbG2rOrBQOZgR72AUNpUQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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"
}
2021-05-21 16:04:31 RESPONSE
CallBackchannelAuthenticationEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "78",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:31 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"expires_in":600,"auth_req_id":"7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI"}
2021-05-21 16:04:31
CallBackchannelAuthenticationEndpoint
Backchannel Authentication endpoint response
backchannel_authentication_endpoint_response
{"expires_in":600,"auth_req_id":"7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI"}
2021-05-21 16:04:31 SUCCESS
CallBackchannelAuthenticationEndpoint
Parsed backchannel authentication endpoint response
expires_in
600
auth_req_id
7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI
2021-05-21 16:04:31 SUCCESS
CheckBackchannelAuthenticationEndpointHttpStatus200
Backchannel authentication endpoint http status code was 200
2021-05-21 16:04:31 SUCCESS
CheckBackchannelAuthenticationEndpointContentType
Backchannel authentication endpoint Content-Type: header is application/json
2021-05-21 16:04:31 SUCCESS
CheckIfBackchannelAuthenticationEndpointResponseError
No error from Backchannel authentication endpoint
2021-05-21 16:04:31 SUCCESS
ValidateAuthenticationRequestId
auth_req_id passed all validation checks
2021-05-21 16:04:31 SUCCESS
EnsureMinimumAuthenticationRequestIdLength
auth_req_id is of sufficient length
actual
344
required
128
2021-05-21 16:04:31 SUCCESS
EnsureMinimumAuthenticationRequestIdEntropy
Calculated shannon entropy seems sufficient
actual
203.81960944786326
expected
96.0
2021-05-21 16:04:31 SUCCESS
EnsureRecommendedAuthenticationRequestIdEntropy
Calculated entropy
actual
203.81960944786326
recommended
160.0
2021-05-21 16:04:31 SUCCESS
ValidateAuthenticationRequestIdExpiresIn
expires_in passed all validation checks
expires_in
600
2021-05-21 16:04:31
ValidateAuthenticationRequestIdInterval
interval is empty.
Call token endpoint expecting pending
2021-05-21 16:04:31 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:31
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI
2021-05-21 16:04:31 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
XppzSuNHDHYHRltExhe6q
sub
XppzSuNHDHYHRltExhe6q
aud
https://mtls.fapi.panva.cz/token
jti
PTlqeIvBjpwFUJpDos7P
iat
1621613071
exp
1621613131
2021-05-21 16:04:31 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJYcHB6U3VOSERIWUhSbHRFeGhlNnEiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxMzEzMSwiaWF0IjoxNjIxNjEzMDcxLCJqdGkiOiJQVGxxZUl2Qmpwd0ZVSnBEb3M3UCJ9.AM4kcZLTlGe6MeUxFF_tlSycwwfHR0mOb0a_vF3zDmLOvuI6KPnkqtb-8xiYu_-tRMTFLCeafEow11GKEIXX6vNeZ6x4bCCb38v2JfA3LH0idNSeksrG8xTcMC0ccq1xLiTUJIvztsz4OhfJqQ2JdjB2_GvcHUD6rgD7pevzVRAVuRI_jAcBeFJ0BIe1dQu51jZxsFH8Q5knIWgWjrAts4BmhOsKdZmIT_jl5-Bx5ODBT5_bRDO8PX8k4oseTwrfUZVnFwt5OO0Kpuuncl6LwblfES4Ghs52A2MWYZxOerrtXivCx-wj8_7q_ZadWeTvUu2k9fJezi59Ei5mche7MA
2021-05-21 16:04:31
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI
client_assertion
eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJYcHB6U3VOSERIWUhSbHRFeGhlNnEiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxMzEzMSwiaWF0IjoxNjIxNjEzMDcxLCJqdGkiOiJQVGxxZUl2Qmpwd0ZVSnBEb3M3UCJ9.AM4kcZLTlGe6MeUxFF_tlSycwwfHR0mOb0a_vF3zDmLOvuI6KPnkqtb-8xiYu_-tRMTFLCeafEow11GKEIXX6vNeZ6x4bCCb38v2JfA3LH0idNSeksrG8xTcMC0ccq1xLiTUJIvztsz4OhfJqQ2JdjB2_GvcHUD6rgD7pevzVRAVuRI_jAcBeFJ0BIe1dQu51jZxsFH8Q5knIWgWjrAts4BmhOsKdZmIT_jl5-Bx5ODBT5_bRDO8PX8k4oseTwrfUZVnFwt5OO0Kpuuncl6LwblfES4Ghs52A2MWYZxOerrtXivCx-wj8_7q_ZadWeTvUu2k9fJezi59Ei5mche7MA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:31
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI&client_assertion=eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJYcHB6U3VOSERIWUhSbHRFeGhlNnEiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxMzEzMSwiaWF0IjoxNjIxNjEzMDcxLCJqdGkiOiJQVGxxZUl2Qmpwd0ZVSnBEb3M3UCJ9.AM4kcZLTlGe6MeUxFF_tlSycwwfHR0mOb0a_vF3zDmLOvuI6KPnkqtb-8xiYu_-tRMTFLCeafEow11GKEIXX6vNeZ6x4bCCb38v2JfA3LH0idNSeksrG8xTcMC0ccq1xLiTUJIvztsz4OhfJqQ2JdjB2_GvcHUD6rgD7pevzVRAVuRI_jAcBeFJ0BIe1dQu51jZxsFH8Q5knIWgWjrAts4BmhOsKdZmIT_jl5-Bx5ODBT5_bRDO8PX8k4oseTwrfUZVnFwt5OO0Kpuuncl6LwblfES4Ghs52A2MWYZxOerrtXivCx-wj8_7q_ZadWeTvUu2k9fJezi59Ei5mche7MA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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"
}
2021-05-21 16:04:32 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:31 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:32 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:32 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:32 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:32 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:32 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:32 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:32 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:32 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Call token endpoint expecting pending (second time)
2021-05-21 16:04:37 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:37
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI
2021-05-21 16:04:37 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
XppzSuNHDHYHRltExhe6q
sub
XppzSuNHDHYHRltExhe6q
aud
https://mtls.fapi.panva.cz/token
jti
JtNMi4Sl1RUVyNa2M99a
iat
1621613077
exp
1621613137
2021-05-21 16:04:37 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJYcHB6U3VOSERIWUhSbHRFeGhlNnEiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxMzEzNywiaWF0IjoxNjIxNjEzMDc3LCJqdGkiOiJKdE5NaTRTbDFSVVZ5TmEyTTk5YSJ9.QMuaZur5N2w3BK46WzhzmOc1acTwJ-06a5J5V1J6pkLESj2mafdM8yo2DrsgvQVzfdX5k-ZdUmTS5N_u2-fxa6uTLN6hsyH1slmMUlRMeVpjN00NQ3ZAgbh8oHOY-P0Pz6BWpjAeqEtf2g1COBwIFrs3lThcZQtRT7GfxBewwKPB2e13TTEEMCCzbd46D_IHGZ9vQrs2oCnjv4zTSA1_BReQdEOCIvDXWpEGBlzWBSGwTQkcKDXVvR-4XOIafe_xEYv3c2a73YvF5MdPdujT_-6V-5E6crFYkWDZX-EagXLUujOtzPBNNu1eBZiAdQOW8I27zNISnO5VKPjIFd7VTA
2021-05-21 16:04:37
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI
client_assertion
eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJYcHB6U3VOSERIWUhSbHRFeGhlNnEiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxMzEzNywiaWF0IjoxNjIxNjEzMDc3LCJqdGkiOiJKdE5NaTRTbDFSVVZ5TmEyTTk5YSJ9.QMuaZur5N2w3BK46WzhzmOc1acTwJ-06a5J5V1J6pkLESj2mafdM8yo2DrsgvQVzfdX5k-ZdUmTS5N_u2-fxa6uTLN6hsyH1slmMUlRMeVpjN00NQ3ZAgbh8oHOY-P0Pz6BWpjAeqEtf2g1COBwIFrs3lThcZQtRT7GfxBewwKPB2e13TTEEMCCzbd46D_IHGZ9vQrs2oCnjv4zTSA1_BReQdEOCIvDXWpEGBlzWBSGwTQkcKDXVvR-4XOIafe_xEYv3c2a73YvF5MdPdujT_-6V-5E6crFYkWDZX-EagXLUujOtzPBNNu1eBZiAdQOW8I27zNISnO5VKPjIFd7VTA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:37
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI&client_assertion=eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJYcHB6U3VOSERIWUhSbHRFeGhlNnEiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxMzEzNywiaWF0IjoxNjIxNjEzMDc3LCJqdGkiOiJKdE5NaTRTbDFSVVZ5TmEyTTk5YSJ9.QMuaZur5N2w3BK46WzhzmOc1acTwJ-06a5J5V1J6pkLESj2mafdM8yo2DrsgvQVzfdX5k-ZdUmTS5N_u2-fxa6uTLN6hsyH1slmMUlRMeVpjN00NQ3ZAgbh8oHOY-P0Pz6BWpjAeqEtf2g1COBwIFrs3lThcZQtRT7GfxBewwKPB2e13TTEEMCCzbd46D_IHGZ9vQrs2oCnjv4zTSA1_BReQdEOCIvDXWpEGBlzWBSGwTQkcKDXVvR-4XOIafe_xEYv3c2a73YvF5MdPdujT_-6V-5E6crFYkWDZX-EagXLUujOtzPBNNu1eBZiAdQOW8I27zNISnO5VKPjIFd7VTA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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"
}
2021-05-21 16:04:37 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:37 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:37 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:37 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:37 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:37 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:37 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:37 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:37 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:37 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
2021-05-21 16:04:37
CallAutomatedCibaApprovalEndpoint
HTTP request
request_uri
https://fapi.panva.cz/ciba-sim?authReqId=7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI&action=allow
request_method
POST
request_headers
{
  "accept": "application/json",
  "accept-charset": "utf-8",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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"
}
2021-05-21 16:04:38 INCOMING
fapi-ciba-id1-ping-backchannel-notification-endpoint-response-has-body
Incoming HTTP request to test instance x2tna3whbSxEMmR
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer 2ssV-J6hCofiBjIyJ3fV\u003d",
  "content-type": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "61",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
ciba-notification-endpoint
incoming_body_form_params
incoming_method
POST
incoming_body_json
{
  "auth_req_id": "7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI"
}
incoming_query_string_params
{}
incoming_body
{"auth_req_id":"7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI"}
2021-05-21 16:04:38 OUTGOING
fapi-ciba-id1-ping-backchannel-notification-endpoint-response-has-body
Response to HTTP request to test instance x2tna3whbSxEMmR
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
Backchannel Notification Endpoint returns a HTTP 200 OK response with a body.
outgoing_path
ciba-notification-endpoint
2021-05-21 16:04:38 RESPONSE
CallAutomatedCibaApprovalEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "13",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:38 GMT",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "via": "1.1 vegur"
}
response_body
{"done":true}
2021-05-21 16:04:38 SUCCESS
CallAutomatedCibaApprovalEndpoint
Successfully called automated_ciba_approval_url endpoint
response
{"done":true}
2021-05-21 16:04:38
TellUserToDoCIBAAuthentication
Please authenticate and authorize the request
Verify notification callback
2021-05-21 16:04:38 SUCCESS
EnsureIncomingTls12
Found TLS 1.2 connection
2021-05-21 16:04:38 SUCCESS
EnsureIncomingTlsSecureCipher
TLS cipher is allowed
actual
ECDHE-RSA-AES128-GCM-SHA256
expected
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2021-05-21 16:04:38 SUCCESS
CheckIncomingContentTypeIsApplicationJson
Incoming request Content-Type: header has the expected value
content_type
application/json
expected
application/json
2021-05-21 16:04:38 SUCCESS
VerifyBearerTokenHeaderCallback
'Authorization' header in notification callback contained client_notification_token.
2021-05-21 16:04:38
CheckAuthReqIdInCallback
notification_callback contents
headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer 2ssV-J6hCofiBjIyJ3fV\u003d",
  "content-type": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "61",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
query_string_params
{}
method
POST
body
{"auth_req_id":"7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI"}
body_json
{
  "auth_req_id": "7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI"
}
2021-05-21 16:04:38 SUCCESS
CheckAuthReqIdInCallback
auth_req_id valued received in callback is correct
2021-05-21 16:04:38 SUCCESS
CheckNotificationCallbackOnlyAuthReqId
body received in notification callback contained only auth_req_id
body
{
  "auth_req_id": "7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI"
}
Calling token endpoint after ping notification
2021-05-21 16:04:38 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:38
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI
2021-05-21 16:04:38 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
XppzSuNHDHYHRltExhe6q
sub
XppzSuNHDHYHRltExhe6q
aud
https://mtls.fapi.panva.cz/token
jti
8JVGliRCINw5ybmOqrHz
iat
1621613078
exp
1621613138
2021-05-21 16:04:38 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJYcHB6U3VOSERIWUhSbHRFeGhlNnEiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxMzEzOCwiaWF0IjoxNjIxNjEzMDc4LCJqdGkiOiI4SlZHbGlSQ0lOdzV5Ym1PcXJIeiJ9.jaayJwRk5nIrFMH_JhPvivkrFpRDuQO-2Njgy7GCJtLlDvgMnO70rdyO_y5b80ywPHLhWG2vKTg8jQr5QtpfBt7LLDB25S7DN7DScC22YtDVqxkfbO-pBUmeJk4cDGBeGjdFTVrnuYHx_YnFU9mKYmM4cB0nLrw35d9fNMXpHyg8rlE2GzDCVTD3Eap32WZO0SeWuPgjK7fm3UzL_DUtYrYmk0OWyv4t05IYKR_20bJWv7Iil0mIF_3sYcenwTrkT0sKr3BUiuA-ts59ZT5_2HvhyOEvGX3dZT_jWwi18f-0lJ-IUa8tzT4VBp9QMuoOuV6QcEuQOnUYUcf8E7agDQ
2021-05-21 16:04:38
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI
client_assertion
eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJYcHB6U3VOSERIWUhSbHRFeGhlNnEiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxMzEzOCwiaWF0IjoxNjIxNjEzMDc4LCJqdGkiOiI4SlZHbGlSQ0lOdzV5Ym1PcXJIeiJ9.jaayJwRk5nIrFMH_JhPvivkrFpRDuQO-2Njgy7GCJtLlDvgMnO70rdyO_y5b80ywPHLhWG2vKTg8jQr5QtpfBt7LLDB25S7DN7DScC22YtDVqxkfbO-pBUmeJk4cDGBeGjdFTVrnuYHx_YnFU9mKYmM4cB0nLrw35d9fNMXpHyg8rlE2GzDCVTD3Eap32WZO0SeWuPgjK7fm3UzL_DUtYrYmk0OWyv4t05IYKR_20bJWv7Iil0mIF_3sYcenwTrkT0sKr3BUiuA-ts59ZT5_2HvhyOEvGX3dZT_jWwi18f-0lJ-IUa8tzT4VBp9QMuoOuV6QcEuQOnUYUcf8E7agDQ
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:38
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI&client_assertion=eyJraWQiOiJJZk9JYzNiREp3RUs4clpPNjlqWFBWNHhRQTVscXFGTDVtbFJZY1g3WHpnIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJYcHB6U3VOSERIWUhSbHRFeGhlNnEiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxMzEzOCwiaWF0IjoxNjIxNjEzMDc4LCJqdGkiOiI4SlZHbGlSQ0lOdzV5Ym1PcXJIeiJ9.jaayJwRk5nIrFMH_JhPvivkrFpRDuQO-2Njgy7GCJtLlDvgMnO70rdyO_y5b80ywPHLhWG2vKTg8jQr5QtpfBt7LLDB25S7DN7DScC22YtDVqxkfbO-pBUmeJk4cDGBeGjdFTVrnuYHx_YnFU9mKYmM4cB0nLrw35d9fNMXpHyg8rlE2GzDCVTD3Eap32WZO0SeWuPgjK7fm3UzL_DUtYrYmk0OWyv4t05IYKR_20bJWv7Iil0mIF_3sYcenwTrkT0sKr3BUiuA-ts59ZT5_2HvhyOEvGX3dZT_jWwi18f-0lJ-IUa8tzT4VBp9QMuoOuV6QcEuQOnUYUcf8E7agDQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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"
}
2021-05-21 16:04:39 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "893",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:39 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"access_token":"6miikux6dhBwG_jQWbLlLV3efVpwDQ73OoL6gUJwCjc","expires_in":3600,"id_token":"eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IkVVc01MRndYejV6TWhrSm9vMWxjbklNMnBBcExjM2tjXzJXVjhZS1lDM00ifQ.eyJzdWIiOiJwYW52YSIsImF0X2hhc2giOiJnVDJjYzZ3ZFhJZlBRQ3pKNWRGTGVnIiwidXJuOm9wZW5pZDpwYXJhbXM6and0OmNsYWltOmF1dGhfcmVxX2lkIjoiN2dnV3ZOdUYyMmhNak1uMGNuN3U4blJ6OERWMHYxeEZCWF93OE9OcVJmSSIsImF1ZCI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxNjY3OSwiaWF0IjoxNjIxNjEzMDc5LCJpc3MiOiJodHRwczovL2ZhcGkucGFudmEuY3oifQ.UJJbVfTE6lNd1V4qEK2rZLvwihj6wRgCIuQ1UcbwYiIOzkrjK4epSd8SAVXGaM7xCLZKHHkXy0RRk58dhUjdNdBEQYvwewDLd532J33-Waprpz7_nVDNAIeu2QniiFOR50CKQC2PG7ZEwhPiNV-Fzu1JBO-dB_MTbnhsC9J8--w0t-j08RKMDkmgLcgIXPpp4XdgX1AoOPlkwC2IcDeoukHPlT7v2hM20tsgra38sT4SBfF09kdR8_7AUNfOehTQp_gREbJmXNx7I04xRahj0deqzaBzpgv3FCtfJB_LvjeQM9ulQ36T6T0u1KcvYl6Bf4SGRTvZ-aOkeDm1C4s-FA","scope":"openid","token_type":"Bearer"}
2021-05-21 16:04:39 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
access_token
6miikux6dhBwG_jQWbLlLV3efVpwDQ73OoL6gUJwCjc
expires_in
3600
id_token
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IkVVc01MRndYejV6TWhrSm9vMWxjbklNMnBBcExjM2tjXzJXVjhZS1lDM00ifQ.eyJzdWIiOiJwYW52YSIsImF0X2hhc2giOiJnVDJjYzZ3ZFhJZlBRQ3pKNWRGTGVnIiwidXJuOm9wZW5pZDpwYXJhbXM6and0OmNsYWltOmF1dGhfcmVxX2lkIjoiN2dnV3ZOdUYyMmhNak1uMGNuN3U4blJ6OERWMHYxeEZCWF93OE9OcVJmSSIsImF1ZCI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxNjY3OSwiaWF0IjoxNjIxNjEzMDc5LCJpc3MiOiJodHRwczovL2ZhcGkucGFudmEuY3oifQ.UJJbVfTE6lNd1V4qEK2rZLvwihj6wRgCIuQ1UcbwYiIOzkrjK4epSd8SAVXGaM7xCLZKHHkXy0RRk58dhUjdNdBEQYvwewDLd532J33-Waprpz7_nVDNAIeu2QniiFOR50CKQC2PG7ZEwhPiNV-Fzu1JBO-dB_MTbnhsC9J8--w0t-j08RKMDkmgLcgIXPpp4XdgX1AoOPlkwC2IcDeoukHPlT7v2hM20tsgra38sT4SBfF09kdR8_7AUNfOehTQp_gREbJmXNx7I04xRahj0deqzaBzpgv3FCtfJB_LvjeQM9ulQ36T6T0u1KcvYl6Bf4SGRTvZ-aOkeDm1C4s-FA
scope
openid
token_type
Bearer
2021-05-21 16:04:39 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response
2021-05-21 16:04:39 SUCCESS
CheckTokenEndpointHttpStatus200
Token endpoint http status code was 200
2021-05-21 16:04:39 SUCCESS
CheckTokenEndpointCacheHeaders
'pragma' and 'cache-control' headers in token endpoint response contain expected values.
cache_control_header
no-cache, no-store
pragma_header
no-cache
2021-05-21 16:04:39 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2021-05-21 16:04:39 SUCCESS
CheckForAccessTokenValue
Found an access token
access_token
6miikux6dhBwG_jQWbLlLV3efVpwDQ73OoL6gUJwCjc
2021-05-21 16:04:39 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
6miikux6dhBwG_jQWbLlLV3efVpwDQ73OoL6gUJwCjc
type
Bearer
2021-05-21 16:04:39 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
3600
2021-05-21 16:04:39 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
3600
2021-05-21 16:04:39 INFO
CheckForRefreshTokenValue
Couldn't find refresh token
2021-05-21 16:04:39 INFO
EnsureMinimumRefreshTokenLength
Skipped evaluation due to missing required element: token_endpoint_response refresh_token
path
refresh_token
mapped
object
token_endpoint_response
2021-05-21 16:04:39 INFO
EnsureMinimumRefreshTokenEntropy
Skipped evaluation due to missing required element: token_endpoint_response refresh_token
path
refresh_token
mapped
object
token_endpoint_response
2021-05-21 16:04:39 SUCCESS
EnsureMinimumAccessTokenLength
Access token is of sufficient length
actual
344
required
128
2021-05-21 16:04:39 SUCCESS
EnsureMinimumAccessTokenEntropy
Calculated shannon entropy seems sufficient
actual
209.06472194569977
expected
96.0
2021-05-21 16:04:39 SUCCESS
ExtractIdTokenFromTokenResponse
Found and parsed the id_token from token_endpoint_response
value
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IkVVc01MRndYejV6TWhrSm9vMWxjbklNMnBBcExjM2tjXzJXVjhZS1lDM00ifQ.eyJzdWIiOiJwYW52YSIsImF0X2hhc2giOiJnVDJjYzZ3ZFhJZlBRQ3pKNWRGTGVnIiwidXJuOm9wZW5pZDpwYXJhbXM6and0OmNsYWltOmF1dGhfcmVxX2lkIjoiN2dnV3ZOdUYyMmhNak1uMGNuN3U4blJ6OERWMHYxeEZCWF93OE9OcVJmSSIsImF1ZCI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxNjY3OSwiaWF0IjoxNjIxNjEzMDc5LCJpc3MiOiJodHRwczovL2ZhcGkucGFudmEuY3oifQ.UJJbVfTE6lNd1V4qEK2rZLvwihj6wRgCIuQ1UcbwYiIOzkrjK4epSd8SAVXGaM7xCLZKHHkXy0RRk58dhUjdNdBEQYvwewDLd532J33-Waprpz7_nVDNAIeu2QniiFOR50CKQC2PG7ZEwhPiNV-Fzu1JBO-dB_MTbnhsC9J8--w0t-j08RKMDkmgLcgIXPpp4XdgX1AoOPlkwC2IcDeoukHPlT7v2hM20tsgra38sT4SBfF09kdR8_7AUNfOehTQp_gREbJmXNx7I04xRahj0deqzaBzpgv3FCtfJB_LvjeQM9ulQ36T6T0u1KcvYl6Bf4SGRTvZ-aOkeDm1C4s-FA
header
{
  "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
  "typ": "JWT",
  "alg": "PS256"
}
claims
{
  "at_hash": "gT2cc6wdXIfPQCzJ5dFLeg",
  "sub": "panva",
  "aud": "XppzSuNHDHYHRltExhe6q",
  "urn:openid:params:jwt:claim:auth_req_id": "7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI",
  "iss": "https://fapi.panva.cz",
  "exp": 1621616679,
  "iat": 1621613079
}
2021-05-21 16:04:39 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-05-21 16:04:39 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M
2021-05-21 16:04:39 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IkVVc01MRndYejV6TWhrSm9vMWxjbklNMnBBcExjM2tjXzJXVjhZS1lDM00ifQ.eyJzdWIiOiJwYW52YSIsImF0X2hhc2giOiJnVDJjYzZ3ZFhJZlBRQ3pKNWRGTGVnIiwidXJuOm9wZW5pZDpwYXJhbXM6and0OmNsYWltOmF1dGhfcmVxX2lkIjoiN2dnV3ZOdUYyMmhNak1uMGNuN3U4blJ6OERWMHYxeEZCWF93OE9OcVJmSSIsImF1ZCI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxNjY3OSwiaWF0IjoxNjIxNjEzMDc5LCJpc3MiOiJodHRwczovL2ZhcGkucGFudmEuY3oifQ.UJJbVfTE6lNd1V4qEK2rZLvwihj6wRgCIuQ1UcbwYiIOzkrjK4epSd8SAVXGaM7xCLZKHHkXy0RRk58dhUjdNdBEQYvwewDLd532J33-Waprpz7_nVDNAIeu2QniiFOR50CKQC2PG7ZEwhPiNV-Fzu1JBO-dB_MTbnhsC9J8--w0t-j08RKMDkmgLcgIXPpp4XdgX1AoOPlkwC2IcDeoukHPlT7v2hM20tsgra38sT4SBfF09kdR8_7AUNfOehTQp_gREbJmXNx7I04xRahj0deqzaBzpgv3FCtfJB_LvjeQM9ulQ36T6T0u1KcvYl6Bf4SGRTvZ-aOkeDm1C4s-FA
2021-05-21 16:04:39 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IkVVc01MRndYejV6TWhrSm9vMWxjbklNMnBBcExjM2tjXzJXVjhZS1lDM00ifQ.eyJzdWIiOiJwYW52YSIsImF0X2hhc2giOiJnVDJjYzZ3ZFhJZlBRQ3pKNWRGTGVnIiwidXJuOm9wZW5pZDpwYXJhbXM6and0OmNsYWltOmF1dGhfcmVxX2lkIjoiN2dnV3ZOdUYyMmhNak1uMGNuN3U4blJ6OERWMHYxeEZCWF93OE9OcVJmSSIsImF1ZCI6IlhwcHpTdU5IREhZSFJsdEV4aGU2cSIsImV4cCI6MTYyMTYxNjY3OSwiaWF0IjoxNjIxNjEzMDc5LCJpc3MiOiJodHRwczovL2ZhcGkucGFudmEuY3oifQ.UJJbVfTE6lNd1V4qEK2rZLvwihj6wRgCIuQ1UcbwYiIOzkrjK4epSd8SAVXGaM7xCLZKHHkXy0RRk58dhUjdNdBEQYvwewDLd532J33-Waprpz7_nVDNAIeu2QniiFOR50CKQC2PG7ZEwhPiNV-Fzu1JBO-dB_MTbnhsC9J8--w0t-j08RKMDkmgLcgIXPpp4XdgX1AoOPlkwC2IcDeoukHPlT7v2hM20tsgra38sT4SBfF09kdR8_7AUNfOehTQp_gREbJmXNx7I04xRahj0deqzaBzpgv3FCtfJB_LvjeQM9ulQ36T6T0u1KcvYl6Bf4SGRTvZ-aOkeDm1C4s-FA
2021-05-21 16:04:39 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
panva
2021-05-21 16:04:39 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
alg
PS256
2021-05-21 16:04:39 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-05-21 16:04:39 INFO
FAPIValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-05-21 16:04:39 SUCCESS
FAPICIBAValidateIdTokenAuthRequestIdClaims
urn:openid:params:jwt:claim:auth_req_id claim in the ID Token matched the auth_req_id in the request.
2021-05-21 16:04:39 SUCCESS
ValidateIdTokenNotIncludeCHashAndSHash
id_token claims correctly does not contain 'c_hash' and 's_hash'
claims
{
  "at_hash": "gT2cc6wdXIfPQCzJ5dFLeg",
  "sub": "panva",
  "aud": "XppzSuNHDHYHRltExhe6q",
  "urn:openid:params:jwt:claim:auth_req_id": "7ggWvNuF22hMjMn0cn7u8nRz8DV0v1xFBX_w8ONqRfI",
  "iss": "https://fapi.panva.cz",
  "exp": 1621616679,
  "iat": 1621613079
}
2021-05-21 16:04:39 SUCCESS
ExtractAtHash
Extracted at_hash from ID Token
at_hash
gT2cc6wdXIfPQCzJ5dFLeg
alg
PS256
2021-05-21 16:04:39 INFO
ExtractRtHash
Couldn't find urn:openid:params:jwt:claim:rt_hash claim in the ID token
2021-05-21 16:04:39 INFO
FAPICIBAValidateRtHash
Skipped evaluation due to missing required object: rt_hash
expected
rt_hash
mapped
2021-05-21 16:04:39 SUCCESS
ValidateAtHash
at_hash validated successfully
expected_hash
gT2cc6wdXIfPQCzJ5dFLeg
unhashed_value
6miikux6dhBwG_jQWbLlLV3efVpwDQ73OoL6gUJwCjc
id_token_hash
gT2cc6wdXIfPQCzJ5dFLeg
Resource server endpoint tests
2021-05-21 16:04:39
CreateEmptyResourceEndpointRequestHeaders
Created empty headers
resource_endpoint_request_headers
{}
2021-05-21 16:04:39 SUCCESS
AddFAPIAuthDateToResourceEndpointRequest
Added x-fapi-auth-date to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Fri, 21 May 2021 16:04:39 GMT"
}
2021-05-21 16:04:39
CreateRandomFAPIInteractionId
Created interaction ID
fapi_interaction_id
051a992d-d918-4c59-9763-bc7b4e5fff89
2021-05-21 16:04:39
AddFAPIInteractionIdToResourceEndpointRequest
Condition ran but did not log anything
2021-05-21 16:04:39
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP request
request_uri
https://mtls.fapi.panva.cz/accounts
request_method
GET
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "x-fapi-auth-date": "Fri, 21 May 2021 16:04:39 GMT",
  "x-fapi-interaction-id": "051a992d-d918-4c59-9763-bc7b4e5fff89",
  "authorization": "Bearer 6miikux6dhBwG_jQWbLlLV3efVpwDQ73OoL6gUJwCjc",
  "accept-charset": "utf-8",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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"
}
2021-05-21 16:04:40 RESPONSE
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "15",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:40 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-fapi-interaction-id": "051a992d-d918-4c59-9763-bc7b4e5fff89",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"sub":"panva"}
2021-05-21 16:04:40 SUCCESS
CallProtectedResourceWithBearerTokenAndCustomHeaders
Got a response from the resource endpoint
headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "15",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:40 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-fapi-interaction-id": "051a992d-d918-4c59-9763-bc7b4e5fff89",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
status_code
{
  "code": 200
}
body
{"sub":"panva"}
2021-05-21 16:04:40 SUCCESS
CheckForDateHeaderInResourceResponse
Date header present and validated
date
Fri, 21 May 2021 16:04:40 GMT
skew
300
2021-05-21 16:04:40 SUCCESS
CheckForFAPIInteractionIdInResourceResponse
Found x-fapi-interaction-id
interaction_id
051a992d-d918-4c59-9763-bc7b4e5fff89
2021-05-21 16:04:40 SUCCESS
EnsureMatchingFAPIInteractionId
Interaction ID matched
fapi_interaction_id
051a992d-d918-4c59-9763-bc7b4e5fff89
2021-05-21 16:04:40 SUCCESS
EnsureResourceResponseReturnedJsonContentType
Response content type is JSON
content_type
application/json; charset=utf-8
2021-05-21 16:04:40 FINISHED
fapi-ciba-id1-ping-backchannel-notification-endpoint-response-has-body
Test has run to completion
testmodule_result
PASSED
Unregister dynamically registered client
2021-05-21 16:04:40
UnregisterDynamicallyRegisteredClient
HTTP request
request_uri
https://fapi.panva.cz/reg/XppzSuNHDHYHRltExhe6q
request_method
DELETE
request_headers
{
  "accept": "application/json",
  "accept-charset": "utf-8",
  "authorization": "Bearer D_Yl3U_Hq48IC2tZe6aN9De6X4zd-szqrDKNPsLeKLq",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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"
}
2021-05-21 16:04:40 RESPONSE
UnregisterDynamicallyRegisteredClient
HTTP response
response_status_code
204 NO_CONTENT
response_status_text
No Content
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "date": "Fri, 21 May 2021 16:04:40 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body

                                
2021-05-21 16:04:40 SUCCESS
UnregisterDynamicallyRegisteredClient
Client successfully unregistered
Test Results