Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-05-21 16:04:06 INFO
TEST-RUNNER
Test instance uEselgGSQVYlrde created
baseUrl
https://www.certification.openid.net/test/uEselgGSQVYlrde
variant
{
  "client_auth_type": "private_key_jwt",
  "ciba_mode": "ping",
  "fapi_profile": "plain_fapi",
  "client_registration": "dynamic_client"
}
alias

                                
description
planId
TBpeA4jiB1Yen
config
{
  "automated_ciba_approval_url": "https://fapi.panva.cz/ciba-sim?authReqId\u003d{auth_req_id}\u0026action\u003d{action}",
  "server": {
    "discoveryUrl": "https://fapi.panva.cz/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "pkjwt-one",
    "client_name": "pkjwt-one",
    "scope": "openid offline_access",
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw",
          "d": "dxzWeLBYGwOgNb-S-4RCDxz7U6lUPPZaIkrbmkpLsdDdZOkMXGg_jk2LIJ3tYgAvZkWm87ZQqKjN2ADzJmpHvu-vCLuh8ccpwaiTXfWTOjjii0-Cfq0-fT6aQpIglbwubVKi1Tqxz-AglrMnCkNICm-e0GsotXFskxhwybp8IAZP__Up1pg-G9Dg_Timtepw55HjO4xDhzY70zV2NqSDEIvKOleyIZj4JP5kCkwP4_FJw_KynXwlxKvCshtFC3U2IEWWUaUQmM8Yy1Hz2x3TqImLQTWs3EMm6oRuhS0Y4tg9VlzJqnetdd6Ulh-DFzSB37KnBZS1qvnGGG4Cri9IkQ",
          "p": "5SLM2g4Uv3Q1-PGqwKPQ8h8Onp674FTxxYAHCh8mivgCGx7uIjVaOxCKvCimi8NCgtON0a1QdGY-BT3NsewJUvaniWyb5BZo-kpdkSzXCvQpWuWT_iSorgEgl4anJ59JZH_QW7wtjRnF8jWnw-_nkNv4HIIVd7fdKKCkpGi1Drk",
          "q": "xgyjgfZdlfpne27vdlxi5VGmNnBnLRAe_a7Wgo6JdmKPMPa1qugxVM5tUhoYjUuUpHxi8gDSxb0-N_kIqTu7zp2Ly9iB8wQIyyYmdxN7J_B5bSn5rfTcu_Uz-EuYVEGfj0hk5_aNQc0y02Di1L4QrnMNRGBo3jWCCRZrjqyHfqc",
          "dp": "tc9sHeUoX1V1cedHpn0VUNiFwCSRTIn6IMzaSRS4f3IUMbLUHv6Ybt9MRco3hBRV1PrJv8K2YPWzZnNIoFF6gILIIsmz1EJX36lcHtIme0GLAt3BFNm_ofmxA6pLPawtDvo_uFpTBm-Z2frq-BSGeDGh5_Tr1cdlS1RT70RJzbk",
          "dq": "FXlVWUgfSZ3HDqkuqcTGrFq4DPsPFOHEmnkUpT9TRFTXddWqSQe4IZvoWpidxORHD7a0-8x_DhXA40zLVZ42dOa8O7QUEweC9JQEY7DnD6ORZvbALc55CKBDrE52C9y5sk2FM2mWU2YudqDwt2SMZn3vGFTjygQ_P0EBFI08e80",
          "qi": "nmJaonUO_d62824V6YmWuEX7imXdgHKRi-tY4IUDJbrm7lKEfcn_xazqilECh1xm7O8b4bj0th3JrRcs1Al0sWP1FwVHjzzmg5oqq26PvHjmtVIHn3cXGT6AmY8-eUPkYgPBc61Ej58Usazm1iuRIe-wNIBeL244kFTQK7zJfnE",
          "kty": "RSA",
          "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
          "alg": "PS256",
          "use": "sig"
        }
      ]
    },
    "hint_type": "login_hint",
    "hint_value": "panva"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----\nMIIC4DCCAcgCCQDuBF1vmG5mlDANBgkqhkiG9w0BAQsFADAyMQswCQYDVQQGEwJD\nWjEPMA0GA1UEBwwGUHJhZ3VlMRIwEAYDVQQDDAlwa210bHNvbmUwHhcNMTkwNjE4\nMTIzMTA2WhcNMjAwNjE3MTIzMTA2WjAyMQswCQYDVQQGEwJDWjEPMA0GA1UEBwwG\nUHJhZ3VlMRIwEAYDVQQDDAlwa210bHNvbmUwggEiMA0GCSqGSIb3DQEBAQUAA4IB\nDwAwggEKAoIBAQDEEnW885Hp+2Q7l+KCtKPOwfPIVOLKshgygWIAXC8z5TKnA1N9\nqbB2BvpDpWUKdXrYuBzWcNH/PHwrJvX42AHGeXCZJDSXzuRH934/fjMQHTFJquoP\n4rziUlRJfT+pwJcuvgxgGLI5xgzNqD7gZZp/9LVm5OdXU1poQviUel+hwV5eiT1r\n1fOe5LOiXkLwp3kBLlqGrtRPFIIa+20qkvnFh5ZcnRmOmm2vcAnI7OaNc2rSLHVb\nvkFuY8mMEx8rtthq0dQyyy1Ucudi3cLCI2x8Px0qQFUqWH4LgNaj7VZjlU1NPE8L\njsSPLasZsMsn0wt22fo+v5bJbaZ3N3QQqM0VAgMBAAEwDQYJKoZIhvcNAQELBQAD\nggEBAFGKYDieCWZ63Fx9jMhtlPlHUgkR6bmKqGwvZuVAe9Zz+sHvbVtTk/4AEOjS\nozksxf070O1PnK3zY0SuZynhKJnTaFouN45iMnnNQS6XMKd9Tm5WpSRbxfaOeuIZ\nybvOmNy0nuxkvqcE5fXIyr9bDCO9WEArQIQqjGJ93zKJpV2nT9Q7heTK430z7Hp3\n+XxwGXoKsLW/jebr3ryWTMEv8ouEbXeCz2OH6Oup8UIwXDyjYxwhwS5FAcRQdh4K\nnhHOLGYVAuVR3wPewtrTioYznFdfwtDHGd9fZVxrXPlVqCksj0CTnPf7UgXtjm2h\nTfkwHHtW2BegWR/q3+q9gs7uehc\u003d\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN PRIVATE KEY-----\nMIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDEEnW885Hp+2Q7\nl+KCtKPOwfPIVOLKshgygWIAXC8z5TKnA1N9qbB2BvpDpWUKdXrYuBzWcNH/PHwr\nJvX42AHGeXCZJDSXzuRH934/fjMQHTFJquoP4rziUlRJfT+pwJcuvgxgGLI5xgzN\nqD7gZZp/9LVm5OdXU1poQviUel+hwV5eiT1r1fOe5LOiXkLwp3kBLlqGrtRPFIIa\n+20qkvnFh5ZcnRmOmm2vcAnI7OaNc2rSLHVbvkFuY8mMEx8rtthq0dQyyy1Ucudi\n3cLCI2x8Px0qQFUqWH4LgNaj7VZjlU1NPE8LjsSPLasZsMsn0wt22fo+v5bJbaZ3\nN3QQqM0VAgMBAAECggEBAKrgF6Hrd9+9yhWxgaM9gIDhQO73I4tY+IOThHAh5rVI\nawNof6vFZdcGr7aiftNFnSEgG2m7exgAg4or8zPCNJHfJgUgq4Eduo8JnwoAlsnV\nVy4HeOMNTGXFMFW3hPMQt/DxieF5xGFbO69DkECJ68LV5f3dQcw2BVVWAEON/qf9\nUhgEnx79OdiCYzyoHjxaHoXk9cVTUtXwmU0lphRFT14W2Py0KZ5vA8JEefoZl/qE\no42iR0KB4eDj/LiduWAMKDLN/u0Dmq3WxLvw7LHnlqENTEY56Lw1sbMQlmvl0zCD\n68BeMz+Mvlm7VRSCxR+3uX6Nli3eb2EsYziZIlt00iUCgYEA4ZNvp0u6vXQAf7IG\nESuhu3u4cD6K8iJ6BT+O64yHJzc17e9lt+p89GasTtkgeEH/lr+XxScVBYndi/8v\naqsA47bkIoWVvcXq7C4jkv0bPelpaI/KPGfoZC1etR102+dS1ZufxzwSo64drw+H\nPuwaIkXvmpK4MBI9jEYoOHh9KR8CgYEA3oRU/iCWvKOGHlR9BmcBysVGmkvBwj8X\nLTJGfxJkm3M9utLSg0uNo7vW0Zm88KdzdeaRBt6ltZAG3hBL0mHNwC0hYRv5fzO7\nyczWFLPXbUNVqC5OLI+wTL7+ikx040lL9IRRtgub47+9IvxxaGaIRzsFwa+15D7T\nCE7K8BydH0sCgYEAivnkC2VL2tcyS3op5MBF95Vk77qIrl9xX/RloFfHGPEaB8q7\nl5EfhRAQzs9VAuJejsjhv7SxbeUfmtYQp55NgP44FdDJjc73SqWugyvvcbhxmdsl\nFQxLkBSnydwpGCav0Sz9RqmLLk7iuO1PPQQHoeAGm+wTEILcaqT6uLf7HK8CgYBO\nlloWLphOI0q454oIetTNMoNO9zaFThb3ZWw0cOCLblX853xl1oc9rpeeCzgJnnpO\nx5Gs5XGNAEMMpqDAur4aA1Zon6KsZC8MhIWPZjzNYByee0wsvMq9MC9h1MLrivWC\ndEEPlGYIN62q75F2F9BFp/jOgSoyZGXP51QRHWn4pQKBgCEy7GsS3sAj3GiTmCkV\nvR3gKSlSKmJULmI+8EoT6tzYhMvyqoCHPtll2DHzBeqA6Il2DKz+gFbKln2+LrPU\nrb2rgK9e8qdZH9X36Ws8u9YA/VasGQRUFIAcFcNWoBBX79nBQ/89zrPubaN2Rh9B\nKuUEGLKAzDf1JIzseUr8jdvw\n-----END PRIVATE KEY-----\n"
  },
  "client2": {
    "client_id": "pkjwt-two",
    "client_name": "pkjwt-two",
    "scope": "openid offline_access",
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "5xcUf9SqYSEQHDyQft6iabfz5WvuZyjFLTj9x_R8ARdBDyVE42vkWnf6jOZoeMZ_WjtYGLF0nwnuEVBoCVxP4Nu1UUQq8OTigmk2f4IyPT-79pvW9b7EGQDdTsBIrrb2AKktwDJe16uK64kDNO0Ay3U_nShIPgMVbmGd_K6__OwwhhrLwKv_OSbvU8ZlPI24jy1Yxfq175F_1ZQBRjm0jAMf6PBt8cgxQclgbpP-7OBUQHBzpfudD1U9W6V8hqKKjDldlI9Zg6xBa8MpC6JuQdgwkcugWdwyG69p2kq_pyl735C8yj9Bif7Vok1d4E81cSh8Jy1wGNfAmlz8ncJSRw",
          "d": "ttJDnX4Z7Q3DORORHU31H74wbmidC2_tzoEwBWkeUZ6cEediQKmy1v_kcGQ4cpRXXINmhuKdaNTqSzhZlk45w6MOJ2TOtBXgPVwPiYDvThWGFuvjfDeX3FAaxZrJ5a9Jn-w4Db3L2sQT-5NBvjViU5RG54Ze4PB_m_wOiUGXEfgonv64APPBkodIz_26lJ-r4447tcdMkDw4p6xTP-y33sPB4ZOhQ5ezE4FzQlpq0K98ysKLwo8wvhQ8stxqL46avBnflgDhTsb-1I54aU3ROjThU5tkeAkudzg4lFKdd4WmVneVMD-FJ2wrkjwztqHSBCP8G9IAXBdXRxRzdJIOAQ",
          "p": "_WOUrDYt1uay8XtnaNgutctzdI6XJaf5XrGv6wE_ZoVbqEKWTnBbVfqbwkWf58CeH32tt3hUjBFicG-XAlYI8TW5Lf6H78Fmt2y3fdowLzzWLwNDoLWo1_rOGxneL-vYM1MekZyUN-uDARdEeOL9yRPFKOZm7eWSUc_Sdlu9yuc",
          "q": "6XitRdF0tFu7O7S1rQZZjqhrza53f-Ox1vCYY_Hy4Tm_1fMc7GV0VCHoQwO3ZJPlPEE0JahnfpQkhHGj67GGO40lZYEXdBwNxtktp1zdmEokbsWmacz57SVPg4pzgS9kketf-wdUbT5VgBmNWS9MPt7rKiyFbmuPcHU99fWEsaE",
          "dp": "e_5s1FC24cCGtFCU6-NOCDwExXa5U_38s2_0C-XSZpK_pXjgIIYuy8YUzl5Pv5KsTfCsP2msxdYD-80_ci8ztQV7FpzFXHehkgSrTfSlO5hjnyHTyCLc-sOKdAyWg5C_fW4hOVQL28ltk-0U3qsFUY5RHpCQsb1zeoFeFfkSyOU",
          "dq": "2tyhsh2UBa8oaeQRm02kjrMbvAidRWoxwIhykt6xDKmSSAJLTuAcmPHgRVIqjUKHVmDZfaPMwUAmq3HMdJpKd3DtaaYGUnYqBAp7XbUUljqKxLzML8pTUBf13h3gAW5oHNJFe5F3d6FDjX5mnwBTvWxDj5mEy-pQ4N9HYlbyOYE",
          "qi": "rbxxLBMPxBVpoyNfpjYtXEuem0HHvemHiGklhCbJO_N3vRu8lEarlZ_IPLrRmq7he0cNHcd4j_yhge1-0RR0LzJ4l_Wg-B1Jc0fKJrSItp8pmjmaVHbp_ToYqVlJh_AfU5tru86zSCvVycV79BvkvLl6IusDAuRK8eD1h7dU59g",
          "kty": "RSA",
          "kid": "NriyGITqpt6QdRBXz6k_qjup6vO_81Namq05CX4hij0",
          "alg": "PS256",
          "use": "sig"
        }
      ]
    },
    "acr_value": "urn:mace:incommon:iap:silver"
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\nAWzRJlZD89KZAQgjj4Z215QeLxA\u003d\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN PRIVATE KEY-----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\nlGAIorVbtD1xAn2WaYuEb5Q\u003d\n-----END PRIVATE KEY-----\n  \n"
  },
  "resource": {
    "resourceUrl": "https://mtls.fapi.panva.cz/accounts",
    "institution_id": "xxxxx"
  },
  "browser": [
    {
      "match": "https://fapi.panva.cz/auth*",
      "tasks": [
        {
          "task": "Login",
          "optional": true,
          "match": "https://fapi.panva.cz/interaction*",
          "commands": [
            [
              "text",
              "name",
              "login",
              "foo",
              "optional"
            ],
            [
              "text",
              "name",
              "password",
              "bar",
              "optional"
            ],
            [
              "click",
              "class",
              "login-submit"
            ]
          ]
        },
        {
          "task": "Consent",
          "optional": true,
          "match": "https://fapi.panva.cz/interaction*",
          "commands": [
            [
              "click",
              "class",
              "login-submit"
            ]
          ]
        },
        {
          "task": "Verify Complete",
          "match": "https://*/test/a/*/callback*",
          "commands": [
            [
              "wait",
              "id",
              "submission_complete",
              10
            ]
          ]
        }
      ]
    }
  ]
}
testName
fapi-ciba-id1-multiple-call-to-token-endpoint
2021-05-21 16:04:06 SUCCESS
CreateCIBANotificationEndpointUri
Created ciba notification endpoint URI
notification_uri
https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint
2021-05-21 16:04:06
GetDynamicServerConfiguration
HTTP request
request_uri
https://fapi.panva.cz/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-05-21 16:04:07 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "1746",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:07 GMT",
  "expect-ct": "max-age\u003d0",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"acr_values_supported":["urn:mace:incommon:iap:silver"],"authorization_endpoint":"https://fapi.panva.cz/auth","claims_parameter_supported":true,"claims_supported":["sub","acr","sid","auth_time","iss"],"code_challenge_methods_supported":["S256"],"end_session_endpoint":"https://fapi.panva.cz/session/end","grant_types_supported":["implicit","authorization_code","refresh_token","urn:openid:params:grant-type:ciba"],"id_token_signing_alg_values_supported":["PS256"],"issuer":"https://fapi.panva.cz","jwks_uri":"https://fapi.panva.cz/jwks","registration_endpoint":"https://fapi.panva.cz/reg","response_modes_supported":["form_post","fragment","query","jwt","query.jwt","fragment.jwt","form_post.jwt"],"response_types_supported":["code id_token","code"],"scopes_supported":["openid","offline_access"],"subject_types_supported":["public"],"token_endpoint_auth_methods_supported":["private_key_jwt","self_signed_tls_client_auth"],"token_endpoint_auth_signing_alg_values_supported":["PS256"],"token_endpoint":"https://mtls.fapi.panva.cz/token","pushed_authorization_request_endpoint":"https://mtls.fapi.panva.cz/request","request_object_signing_alg_values_supported":["PS256"],"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_signed_request_object":true,"userinfo_endpoint":"https://mtls.fapi.panva.cz/accounts","authorization_signing_alg_values_supported":["PS256"],"tls_client_certificate_bound_access_tokens":true,"backchannel_authentication_endpoint":"https://mtls.fapi.panva.cz/backchannel","backchannel_token_delivery_modes_supported":["poll","ping"],"backchannel_user_code_parameter_supported":true,"backchannel_authentication_request_signing_alg_values_supported":["PS256"],"claim_types_supported":["normal"]}
2021-05-21 16:04:07
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{"acr_values_supported":["urn:mace:incommon:iap:silver"],"authorization_endpoint":"https://fapi.panva.cz/auth","claims_parameter_supported":true,"claims_supported":["sub","acr","sid","auth_time","iss"],"code_challenge_methods_supported":["S256"],"end_session_endpoint":"https://fapi.panva.cz/session/end","grant_types_supported":["implicit","authorization_code","refresh_token","urn:openid:params:grant-type:ciba"],"id_token_signing_alg_values_supported":["PS256"],"issuer":"https://fapi.panva.cz","jwks_uri":"https://fapi.panva.cz/jwks","registration_endpoint":"https://fapi.panva.cz/reg","response_modes_supported":["form_post","fragment","query","jwt","query.jwt","fragment.jwt","form_post.jwt"],"response_types_supported":["code id_token","code"],"scopes_supported":["openid","offline_access"],"subject_types_supported":["public"],"token_endpoint_auth_methods_supported":["private_key_jwt","self_signed_tls_client_auth"],"token_endpoint_auth_signing_alg_values_supported":["PS256"],"token_endpoint":"https://mtls.fapi.panva.cz/token","pushed_authorization_request_endpoint":"https://mtls.fapi.panva.cz/request","request_object_signing_alg_values_supported":["PS256"],"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_signed_request_object":true,"userinfo_endpoint":"https://mtls.fapi.panva.cz/accounts","authorization_signing_alg_values_supported":["PS256"],"tls_client_certificate_bound_access_tokens":true,"backchannel_authentication_endpoint":"https://mtls.fapi.panva.cz/backchannel","backchannel_token_delivery_modes_supported":["poll","ping"],"backchannel_user_code_parameter_supported":true,"backchannel_authentication_request_signing_alg_values_supported":["PS256"],"claim_types_supported":["normal"]}
2021-05-21 16:04:07 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
acr_values_supported
[
  "urn:mace:incommon:iap:silver"
]
authorization_endpoint
https://fapi.panva.cz/auth
claims_parameter_supported
true
claims_supported
[
  "sub",
  "acr",
  "sid",
  "auth_time",
  "iss"
]
code_challenge_methods_supported
[
  "S256"
]
end_session_endpoint
https://fapi.panva.cz/session/end
grant_types_supported
[
  "implicit",
  "authorization_code",
  "refresh_token",
  "urn:openid:params:grant-type:ciba"
]
id_token_signing_alg_values_supported
[
  "PS256"
]
issuer
https://fapi.panva.cz
jwks_uri
https://fapi.panva.cz/jwks
registration_endpoint
https://fapi.panva.cz/reg
response_modes_supported
[
  "form_post",
  "fragment",
  "query",
  "jwt",
  "query.jwt",
  "fragment.jwt",
  "form_post.jwt"
]
response_types_supported
[
  "code id_token",
  "code"
]
scopes_supported
[
  "openid",
  "offline_access"
]
subject_types_supported
[
  "public"
]
token_endpoint_auth_methods_supported
[
  "private_key_jwt",
  "self_signed_tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "PS256"
]
token_endpoint
https://mtls.fapi.panva.cz/token
pushed_authorization_request_endpoint
https://mtls.fapi.panva.cz/request
request_object_signing_alg_values_supported
[
  "PS256"
]
request_parameter_supported
true
request_uri_parameter_supported
false
require_signed_request_object
true
userinfo_endpoint
https://mtls.fapi.panva.cz/accounts
authorization_signing_alg_values_supported
[
  "PS256"
]
tls_client_certificate_bound_access_tokens
true
backchannel_authentication_endpoint
https://mtls.fapi.panva.cz/backchannel
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_user_code_parameter_supported
true
backchannel_authentication_request_signing_alg_values_supported
[
  "PS256"
]
claim_types_supported
[
  "normal"
]
2021-05-21 16:04:07 INFO
AddMTLSEndpointAliasesToEnvironment
The mtls_endpoint_aliases is not present in the server configuration
server
{
  "acr_values_supported": [
    "urn:mace:incommon:iap:silver"
  ],
  "authorization_endpoint": "https://fapi.panva.cz/auth",
  "claims_parameter_supported": true,
  "claims_supported": [
    "sub",
    "acr",
    "sid",
    "auth_time",
    "iss"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ],
  "end_session_endpoint": "https://fapi.panva.cz/session/end",
  "grant_types_supported": [
    "implicit",
    "authorization_code",
    "refresh_token",
    "urn:openid:params:grant-type:ciba"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "issuer": "https://fapi.panva.cz",
  "jwks_uri": "https://fapi.panva.cz/jwks",
  "registration_endpoint": "https://fapi.panva.cz/reg",
  "response_modes_supported": [
    "form_post",
    "fragment",
    "query",
    "jwt",
    "query.jwt",
    "fragment.jwt",
    "form_post.jwt"
  ],
  "response_types_supported": [
    "code id_token",
    "code"
  ],
  "scopes_supported": [
    "openid",
    "offline_access"
  ],
  "subject_types_supported": [
    "public"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt",
    "self_signed_tls_client_auth"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ],
  "token_endpoint": "https://mtls.fapi.panva.cz/token",
  "pushed_authorization_request_endpoint": "https://mtls.fapi.panva.cz/request",
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "require_signed_request_object": true,
  "userinfo_endpoint": "https://mtls.fapi.panva.cz/accounts",
  "authorization_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "backchannel_authentication_endpoint": "https://mtls.fapi.panva.cz/backchannel",
  "backchannel_token_delivery_modes_supported": [
    "poll",
    "ping"
  ],
  "backchannel_user_code_parameter_supported": true,
  "backchannel_authentication_request_signing_alg_values_supported": [
    "PS256"
  ],
  "claim_types_supported": [
    "normal"
  ]
}
2021-05-21 16:04:07 SUCCESS
CheckCIBAServerConfiguration
Found required server configuration keys
required
[
  "backchannel_authentication_endpoint",
  "token_endpoint",
  "issuer"
]
2021-05-21 16:04:07 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
{
  "testHost": "fapi.panva.cz",
  "testPort": 443
}
authorization_endpoint
{
  "testHost": "fapi.panva.cz",
  "testPort": 443
}
token_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
userinfo_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
2021-05-21 16:04:07
FetchServerKeys
Fetching server key
jwks_uri
https://fapi.panva.cz/jwks
2021-05-21 16:04:07
FetchServerKeys
HTTP request
request_uri
https://fapi.panva.cz/jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-05-21 16:04:08 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "462",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/jwk-set+json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:07 GMT",
  "expect-ct": "max-age\u003d0",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"keys":[{"kty":"RSA","use":"sig","kid":"EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M","alg":"PS256","e":"AQAB","n":"sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"}]}
2021-05-21 16:04:08
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","use":"sig","kid":"EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M","alg":"PS256","e":"AQAB","n":"sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"}]}
2021-05-21 16:04:08 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
      "alg": "PS256",
      "e": "AQAB",
      "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"
    }
  ]
}
2021-05-21 16:04:08 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
      "alg": "PS256",
      "e": "AQAB",
      "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"
    }
  ]
}
2021-05-21 16:04:08 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-05-21 16:04:08 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2021-05-21 16:04:08 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-05-21 16:04:08 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
      "alg": "PS256",
      "e": "AQAB",
      "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"
    }
  ]
}
First client: registering client using dynamic client registration
2021-05-21 16:04:08 SUCCESS
GetDynamicClientConfiguration
Created dynamic_client_registration_template object from the client configuration.
client_id
pkjwt-one
client_name
pkjwt-one
scope
openid offline_access
jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw",
      "d": "dxzWeLBYGwOgNb-S-4RCDxz7U6lUPPZaIkrbmkpLsdDdZOkMXGg_jk2LIJ3tYgAvZkWm87ZQqKjN2ADzJmpHvu-vCLuh8ccpwaiTXfWTOjjii0-Cfq0-fT6aQpIglbwubVKi1Tqxz-AglrMnCkNICm-e0GsotXFskxhwybp8IAZP__Up1pg-G9Dg_Timtepw55HjO4xDhzY70zV2NqSDEIvKOleyIZj4JP5kCkwP4_FJw_KynXwlxKvCshtFC3U2IEWWUaUQmM8Yy1Hz2x3TqImLQTWs3EMm6oRuhS0Y4tg9VlzJqnetdd6Ulh-DFzSB37KnBZS1qvnGGG4Cri9IkQ",
      "p": "5SLM2g4Uv3Q1-PGqwKPQ8h8Onp674FTxxYAHCh8mivgCGx7uIjVaOxCKvCimi8NCgtON0a1QdGY-BT3NsewJUvaniWyb5BZo-kpdkSzXCvQpWuWT_iSorgEgl4anJ59JZH_QW7wtjRnF8jWnw-_nkNv4HIIVd7fdKKCkpGi1Drk",
      "q": "xgyjgfZdlfpne27vdlxi5VGmNnBnLRAe_a7Wgo6JdmKPMPa1qugxVM5tUhoYjUuUpHxi8gDSxb0-N_kIqTu7zp2Ly9iB8wQIyyYmdxN7J_B5bSn5rfTcu_Uz-EuYVEGfj0hk5_aNQc0y02Di1L4QrnMNRGBo3jWCCRZrjqyHfqc",
      "dp": "tc9sHeUoX1V1cedHpn0VUNiFwCSRTIn6IMzaSRS4f3IUMbLUHv6Ybt9MRco3hBRV1PrJv8K2YPWzZnNIoFF6gILIIsmz1EJX36lcHtIme0GLAt3BFNm_ofmxA6pLPawtDvo_uFpTBm-Z2frq-BSGeDGh5_Tr1cdlS1RT70RJzbk",
      "dq": "FXlVWUgfSZ3HDqkuqcTGrFq4DPsPFOHEmnkUpT9TRFTXddWqSQe4IZvoWpidxORHD7a0-8x_DhXA40zLVZ42dOa8O7QUEweC9JQEY7DnD6ORZvbALc55CKBDrE52C9y5sk2FM2mWU2YudqDwt2SMZn3vGFTjygQ_P0EBFI08e80",
      "qi": "nmJaonUO_d62824V6YmWuEX7imXdgHKRi-tY4IUDJbrm7lKEfcn_xazqilECh1xm7O8b4bj0th3JrRcs1Al0sWP1FwVHjzzmg5oqq26PvHjmtVIHn3cXGT6AmY8-eUPkYgPBc61Ej58Usazm1iuRIe-wNIBeL244kFTQK7zJfnE",
      "kty": "RSA",
      "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
      "alg": "PS256",
      "use": "sig"
    }
  ]
}
hint_type
login_hint
hint_value
panva
2021-05-21 16:04:09 SUCCESS
GeneratePS256ClientJWKsWithKeyID
Generated client JWKs
client_jwks
{
  "keys": [
    {
      "p": "0L67M6yvHUJQ-kSgryXNOpE0u-O5oVNw-sVyk8Qk9RQ29Xc_ME3ZcqsCacD0iU_J6515d2fSSrlXLR4vZITtE6ReJujbagUkKeH5Q_HRqwpTjhZIrBlRTMggbAdpktZI9Z_qJbQTcsrIxGY1Wr4-TkeTW766UT95-wWqu5HduM8",
      "kty": "RSA",
      "q": "yfQn06nDHyhMhEZGIqx-AjoiKSLfK7EKDWMA0abE0rgswbdiHeYk811k3P2KvA_FJeqQBYN-EBiSBi7FJgbqMBSNQN2DlquotejFtYxYQp8zXFN3xmKtVok2pFOXtoxHeD99EfvPme4qUE3MJlamIUloMM3n7BaeSxzrckwYpi0",
      "d": "PvSxKe0sP1vQkfHOOx2NbnITMc0mHPJXYw3Hx86mZmZQgPokd-8NymceimtMpaxp5TJgHFm992xh49RBCKMKROykSOzsVEEnWZpdwCMQGzlhZGLG8c-A_8Rq7NPLLgPUYGExR6lc2kuf1d9wnKmMBQ_qA1jbTXe_SMzEQE2fxi8KFFDRJZ3HAUuzw2TR2SgOYt1_QSts9OIt0m5Dv3SK5BEIPm6QY8Cjy-egXeee-2DVbkr1JX4_yiAz_2JKe50RXUfyenaiFit2aFDG9zxO6m6pjeejMuMa4pvLlTv4TO-1mkoYIwD8PdXaqlUvAI7GgkHzENIMb4jCigiOvHCLmQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
      "qi": "szQyRNc6qeU-I4IFOf9Nga3iNlKXJmCY_IojBKqq8x2lCzMG6VnMaRkGQEwKF9Tfr40MigMAtG4H_utENOiy2eMMEXp8eyGgqXZuZGEolW8NR2uuD8GrDPU8jQZFvrZVMScqIZodccD3OLOidUUfXHLhN0BFQYxb8JwNkUS8Y24",
      "dp": "DU0aAKDwR50CK_BTjNWLzj-SbKaGHZGDkXcjZecJs9Ql7F482IcdZAEhljuFWXqME0dlhgZHkBtfQrC5tF4D_Uxr827DDG5nb4PGrl2qTovJ5zPkTZMPayUVa8zNHV4qJ_yYnu5qjtX9FQauP6n_rl1BNodgt-yjiStDRdB1oGE",
      "alg": "PS256",
      "dq": "DRZUamQK7_71jnDbZK3W8KABzLakzbkIVLvAttVe1eT3iYovwo5CgL7hpWyMzAkdlopv0NunlLVy6RGo1wEFth3u1XBFccMoCLnP7ibtJUwZ0PbbwTBt2TjFILsGDt9iVkmO-lZeKrSDa3bPLwDYfTm7lcYSLHt-wJFcNKj3w_U",
      "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
      "alg": "PS256",
      "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw"
    }
  ]
}
2021-05-21 16:04:09 SUCCESS
GenerateMTLSCertificateFromJWKs
Generated client MTLS certificate
mutual_tls_authentication
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:09 SUCCESS
AddClientX509CertificateClaimToPublicJWKs
Added x5c claim to public JWKs
client_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
      "alg": "PS256",
      "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
      "x5c": [
        "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\u003d\u003d"
      ]
    }
  ]
}
2021-05-21 16:04:09 SUCCESS
CreateDynamicRegistrationRequest
Created dynamic registration request
client_name
pkjwt-one uEselgGSQVYlrde
2021-05-21 16:04:09
AddCibaGrantTypeToDynamicRegistrationRequest
Added 'urn:openid:params:grant-type:ciba' to 'grant_types'
grant_types
[
  "urn:openid:params:grant-type:ciba"
]
2021-05-21 16:04:09
AddPublicJwksToDynamicRegistrationRequest
Added client public JWKS to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one uEselgGSQVYlrde",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
        "alg": "PS256",
        "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  }
}
2021-05-21 16:04:09
AddCibaUserCodeFalseToDynamicRegistrationRequest
Added CIBA backchannel_user_code_parameter: false to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one uEselgGSQVYlrde",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
        "alg": "PS256",
        "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false
}
2021-05-21 16:04:09
AddCibaTokenDeliveryModePingToDynamicRegistrationRequest
Added CIBA token delivery mode ping to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one uEselgGSQVYlrde",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
        "alg": "PS256",
        "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping"
}
2021-05-21 16:04:09
AddCIBANotificationEndpointToDynamicRegistrationRequest
Added 'https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint' to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one uEselgGSQVYlrde",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
        "alg": "PS256",
        "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
        "x5c": [
          "MIICuzCCAaOgAwIBAgIGAXmPq3VTMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjExNjA0MDlaFw0yMjA1MjExNjA0MDlaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSs1z+l/EQMoM0HU+fNfXs6fduwwIT+83T4zh/CrTKdW+t4KaCAjdWGXB3QJusTPDU3MrzHBSa8+ew4aNdDdIKRnK5nrgbR7Nb0DJKb+7Due7YbziT99F1xiLFIBfxKh9V4Y7tTCwVuLUdnIWG2N02u4kUJ2JrD6x74RqzhEoW90u3uzdFFMXwF2072HiLJW56oMlk7oOlf+Q1yXbNWhNQqDRCuOpQW/2x/oz+v928bqN1JKwUodU6/oGYqMSmTCruJ1fb/V3dNO4sFbWFNVWiE0imZD0mtLno6M4uAxrEV/4X/LUbClLdBIJ5iUZPk0yLslWpydHIC1p50YzE3tmMCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEABQlQUM7hwUS/T0jzsne/BwVUA6cn/Qd1NRu5jLZFt7b10FQdW/DgeKvwNq2QawbLK3q3rd/ZZBtlKRWkROWfhVhI7rEG1wsxFVR4qe9+l+e7ltGSkapIS71U9qeXFNEgifhgTQQRKAbGztk5jjUl8krglAjQQJpai5hI48g0CKoIYQgFPVeD6UstVgOrFlz2ufghYfTja41X3yJqXg634xDXToUe36QYTsXSMWWroLhm+zEErAtBci92Pgtap0TwX3ZhPY+wySpW/kw5vq59JuGlaktnprbEIdFbeaF3BEKUwgUrGkyMJNnYEwpw1Neli1IEJbndA6S5efcREadFUA\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint"
}
2021-05-21 16:04:09
AddCibaRequestSigningPS256ToDynamicRegistrationRequest
Added CIBA request sign alg to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one uEselgGSQVYlrde",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
        "alg": "PS256",
        "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256"
}
2021-05-21 16:04:09
AddIdTokenSigningAlgPS256ToDynamicRegistrationRequest
Added id_token_signed_response_alg to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one uEselgGSQVYlrde",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
        "alg": "PS256",
        "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256"
}
2021-05-21 16:04:09
AddEmptyResponseTypesArrayToDynamicRegistrationRequest
Added empty response_types array to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one uEselgGSQVYlrde",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
        "alg": "PS256",
        "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256",
  "response_types": []
}
2021-05-21 16:04:09
AddTokenEndpointAuthMethodPrivateKeyJwtToDynamicRegistrationRequest
Added private_key_jwt for token endpoint auth method to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one uEselgGSQVYlrde",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
        "alg": "PS256",
        "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256",
  "response_types": [],
  "token_endpoint_auth_method": "private_key_jwt"
}
2021-05-21 16:04:09
AddTokenEndpointAuthSigningAlgPS256ToDynamicRegistrationRequest
Added PS256 for token endpoint auth signing alg to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one uEselgGSQVYlrde",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
        "alg": "PS256",
        "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256",
  "response_types": [],
  "token_endpoint_auth_method": "private_key_jwt",
  "token_endpoint_auth_signing_alg": "PS256"
}
2021-05-21 16:04:09
AddTLSBoundAccessTokensTrueToDynamicRegistrationRequest
Added tls_client_certificate_bound_access_tokens to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one uEselgGSQVYlrde",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
        "alg": "PS256",
        "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
        "x5c": [
          "MIICuzCCAaOgAwIBAgIGAXmPq3VTMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjExNjA0MDlaFw0yMjA1MjExNjA0MDlaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSs1z+l/EQMoM0HU+fNfXs6fduwwIT+83T4zh/CrTKdW+t4KaCAjdWGXB3QJusTPDU3MrzHBSa8+ew4aNdDdIKRnK5nrgbR7Nb0DJKb+7Due7YbziT99F1xiLFIBfxKh9V4Y7tTCwVuLUdnIWG2N02u4kUJ2JrD6x74RqzhEoW90u3uzdFFMXwF2072HiLJW56oMlk7oOlf+Q1yXbNWhNQqDRCuOpQW/2x/oz+v928bqN1JKwUodU6/oGYqMSmTCruJ1fb/V3dNO4sFbWFNVWiE0imZD0mtLno6M4uAxrEV/4X/LUbClLdBIJ5iUZPk0yLslWpydHIC1p50YzE3tmMCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEABQlQUM7hwUS/T0jzsne/BwVUA6cn/Qd1NRu5jLZFt7b10FQdW/DgeKvwNq2QawbLK3q3rd/ZZBtlKRWkROWfhVhI7rEG1wsxFVR4qe9+l+e7ltGSkapIS71U9qeXFNEgifhgTQQRKAbGztk5jjUl8krglAjQQJpai5hI48g0CKoIYQgFPVeD6UstVgOrFlz2ufghYfTja41X3yJqXg634xDXToUe36QYTsXSMWWroLhm+zEErAtBci92Pgtap0TwX3ZhPY+wySpW/kw5vq59JuGlaktnprbEIdFbeaF3BEKUwgUrGkyMJNnYEwpw1Neli1IEJbndA6S5efcREadFUA\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256",
  "response_types": [],
  "token_endpoint_auth_method": "private_key_jwt",
  "token_endpoint_auth_signing_alg": "PS256",
  "tls_client_certificate_bound_access_tokens": true
}
2021-05-21 16:04:09
CallDynamicRegistrationEndpoint
HTTP request
request_uri
https://fapi.panva.cz/reg
request_method
POST
request_headers
{
  "accept": "application/json",
  "accept-charset": "utf-8",
  "content-type": "application/json",
  "content-length": "1982"
}
request_body
{"client_name":"pkjwt-one uEselgGSQVYlrde","grant_types":["urn:openid:params:grant-type:ciba"],"jwks":{"keys":[{"kty":"RSA","e":"AQAB","use":"sig","kid":"JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84","alg":"PS256","n":"pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw","x5c":["MIICuzCCAaOgAwIBAgIGAXmPq3VTMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjExNjA0MDlaFw0yMjA1MjExNjA0MDlaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSs1z+l/EQMoM0HU+fNfXs6fduwwIT+83T4zh/CrTKdW+t4KaCAjdWGXB3QJusTPDU3MrzHBSa8+ew4aNdDdIKRnK5nrgbR7Nb0DJKb+7Due7YbziT99F1xiLFIBfxKh9V4Y7tTCwVuLUdnIWG2N02u4kUJ2JrD6x74RqzhEoW90u3uzdFFMXwF2072HiLJW56oMlk7oOlf+Q1yXbNWhNQqDRCuOpQW/2x/oz+v928bqN1JKwUodU6/oGYqMSmTCruJ1fb/V3dNO4sFbWFNVWiE0imZD0mtLno6M4uAxrEV/4X/LUbClLdBIJ5iUZPk0yLslWpydHIC1p50YzE3tmMCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEABQlQUM7hwUS/T0jzsne/BwVUA6cn/Qd1NRu5jLZFt7b10FQdW/DgeKvwNq2QawbLK3q3rd/ZZBtlKRWkROWfhVhI7rEG1wsxFVR4qe9+l+e7ltGSkapIS71U9qeXFNEgifhgTQQRKAbGztk5jjUl8krglAjQQJpai5hI48g0CKoIYQgFPVeD6UstVgOrFlz2ufghYfTja41X3yJqXg634xDXToUe36QYTsXSMWWroLhm+zEErAtBci92Pgtap0TwX3ZhPY+wySpW/kw5vq59JuGlaktnprbEIdFbeaF3BEKUwgUrGkyMJNnYEwpw1Neli1IEJbndA6S5efcREadFUA=="]}]},"backchannel_user_code_parameter":false,"backchannel_token_delivery_mode":"ping","backchannel_client_notification_endpoint":"https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint","backchannel_authentication_request_signing_alg":"PS256","id_token_signed_response_alg":"PS256","response_types":[],"token_endpoint_auth_method":"private_key_jwt","token_endpoint_auth_signing_alg":"PS256","tls_client_certificate_bound_access_tokens":true}
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCkrNc/pfxEDKDNB1PnzX17On3bsMCE/vN0+M4fwq0ynVvreCmggI3Vhlwd0CbrEzw1NzK8xwUmvPnsOGjXQ3SCkZyuZ64G0ezW9AySm/uw7nu2G84k/fRdcYixSAX8SofVeGO7UwsFbi1HZyFhtjdNruJFCdiaw+se+Eas4RKFvdLt7s3RRTF8BdtO9h4iyVueqDJZO6DpX/kNcl2zVoTUKg0QrjqUFv9sf6M/r/dvG6jdSSsFKHVOv6BmKjEpkwq7idX2/1d3TTuLBW1hTVVohNIpmQ9JrS56OjOLgMaxFf+F/y1GwpS3QSCeYlGT5NMi7JVqcnRyAtaedGMxN7ZjAgMBAAECggEAPvSxKe0sP1vQkfHOOx2NbnITMc0mHPJXYw3Hx86mZmZQgPokd+8NymceimtMpaxp5TJgHFm992xh49RBCKMKROykSOzsVEEnWZpdwCMQGzlhZGLG8c+A/8Rq7NPLLgPUYGExR6lc2kuf1d9wnKmMBQ/qA1jbTXe/SMzEQE2fxi8KFFDRJZ3HAUuzw2TR2SgOYt1/QSts9OIt0m5Dv3SK5BEIPm6QY8Cjy+egXeee+2DVbkr1JX4/yiAz/2JKe50RXUfyenaiFit2aFDG9zxO6m6pjeejMuMa4pvLlTv4TO+1mkoYIwD8PdXaqlUvAI7GgkHzENIMb4jCigiOvHCLmQKBgQDQvrszrK8dQlD6RKCvJc06kTS747mhU3D6xXKTxCT1FDb1dz8wTdlyqwJpwPSJT8nrnXl3Z9JKuVctHi9khO0TpF4m6NtqBSQp4flD8dGrClOOFkisGVFMyCBsB2mS1kj1n+oltBNyysjEZjVavj5OR5NbvrpRP3n7Baq7kd24zwKBgQDJ9CfTqcMfKEyERkYirH4COiIpIt8rsQoNYwDRpsTSuCzBt2Id5iTzXWTc/Yq8D8Ul6pAFg34QGJIGLsUmBuowFI1A3YOWq6i16MW1jFhCnzNcU3fGYq1WiTakU5e2jEd4P30R+8+Z7ipQTcwmVqYhSWgwzefsFp5LHOtyTBimLQKBgA1NGgCg8EedAivwU4zVi84/kmymhh2Rg5F3I2XnCbPUJexePNiHHWQBIZY7hVl6jBNHZYYGR5AbX0KwubReA/1Ma/NuwwxuZ2+Dxq5dqk6Lyecz5E2TD2slFWvMzR1eKif8mJ7uao7V/RUGrj+p/65dQTaHYLfso4krQ0XQdaBhAoGADRZUamQK7/71jnDbZK3W8KABzLakzbkIVLvAttVe1eT3iYovwo5CgL7hpWyMzAkdlopv0NunlLVy6RGo1wEFth3u1XBFccMoCLnP7ibtJUwZ0PbbwTBt2TjFILsGDt9iVkmO+lZeKrSDa3bPLwDYfTm7lcYSLHt+wJFcNKj3w/UCgYEAszQyRNc6qeU+I4IFOf9Nga3iNlKXJmCY/IojBKqq8x2lCzMG6VnMaRkGQEwKF9Tfr40MigMAtG4H/utENOiy2eMMEXp8eyGgqXZuZGEolW8NR2uuD8GrDPU8jQZFvrZVMScqIZodccD3OLOidUUfXHLhN0BFQYxb8JwNkUS8Y24\u003d"
}
2021-05-21 16:04:09 RESPONSE
CallDynamicRegistrationEndpoint
HTTP response
response_status_code
201 CREATED
response_status_text
Created
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "2490",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:09 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"application_type":"web","grant_types":["urn:openid:params:grant-type:ciba"],"id_token_signed_response_alg":"PS256","post_logout_redirect_uris":[],"require_auth_time":false,"response_types":[],"subject_type":"public","token_endpoint_auth_method":"private_key_jwt","request_object_signing_alg":"PS256","require_signed_request_object":true,"require_pushed_authorization_requests":false,"authorization_signed_response_alg":"PS256","tls_client_certificate_bound_access_tokens":true,"backchannel_user_code_parameter":false,"client_id_issued_at":1621613049,"client_id":"hVQpynuN9dHG9wFB2iblG","client_name":"pkjwt-one uEselgGSQVYlrde","jwks":{"keys":[{"kty":"RSA","e":"AQAB","use":"sig","kid":"JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84","alg":"PS256","n":"pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw","x5c":["MIICuzCCAaOgAwIBAgIGAXmPq3VTMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjExNjA0MDlaFw0yMjA1MjExNjA0MDlaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSs1z+l/EQMoM0HU+fNfXs6fduwwIT+83T4zh/CrTKdW+t4KaCAjdWGXB3QJusTPDU3MrzHBSa8+ew4aNdDdIKRnK5nrgbR7Nb0DJKb+7Due7YbziT99F1xiLFIBfxKh9V4Y7tTCwVuLUdnIWG2N02u4kUJ2JrD6x74RqzhEoW90u3uzdFFMXwF2072HiLJW56oMlk7oOlf+Q1yXbNWhNQqDRCuOpQW/2x/oz+v928bqN1JKwUodU6/oGYqMSmTCruJ1fb/V3dNO4sFbWFNVWiE0imZD0mtLno6M4uAxrEV/4X/LUbClLdBIJ5iUZPk0yLslWpydHIC1p50YzE3tmMCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEABQlQUM7hwUS/T0jzsne/BwVUA6cn/Qd1NRu5jLZFt7b10FQdW/DgeKvwNq2QawbLK3q3rd/ZZBtlKRWkROWfhVhI7rEG1wsxFVR4qe9+l+e7ltGSkapIS71U9qeXFNEgifhgTQQRKAbGztk5jjUl8krglAjQQJpai5hI48g0CKoIYQgFPVeD6UstVgOrFlz2ufghYfTja41X3yJqXg634xDXToUe36QYTsXSMWWroLhm+zEErAtBci92Pgtap0TwX3ZhPY+wySpW/kw5vq59JuGlaktnprbEIdFbeaF3BEKUwgUrGkyMJNnYEwpw1Neli1IEJbndA6S5efcREadFUA=="]}]},"token_endpoint_auth_signing_alg":"PS256","backchannel_token_delivery_mode":"ping","backchannel_client_notification_endpoint":"https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint","backchannel_authentication_request_signing_alg":"PS256","redirect_uris":[],"registration_client_uri":"https://fapi.panva.cz/reg/hVQpynuN9dHG9wFB2iblG","registration_access_token":"KxWKOauDpi9NLa6Lc_7YMXvurC6SzAbChuipAIMgFYW"}
2021-05-21 16:04:09
CallDynamicRegistrationEndpoint
Registration endpoint response
dynamic_registration_response
{"application_type":"web","grant_types":["urn:openid:params:grant-type:ciba"],"id_token_signed_response_alg":"PS256","post_logout_redirect_uris":[],"require_auth_time":false,"response_types":[],"subject_type":"public","token_endpoint_auth_method":"private_key_jwt","request_object_signing_alg":"PS256","require_signed_request_object":true,"require_pushed_authorization_requests":false,"authorization_signed_response_alg":"PS256","tls_client_certificate_bound_access_tokens":true,"backchannel_user_code_parameter":false,"client_id_issued_at":1621613049,"client_id":"hVQpynuN9dHG9wFB2iblG","client_name":"pkjwt-one uEselgGSQVYlrde","jwks":{"keys":[{"kty":"RSA","e":"AQAB","use":"sig","kid":"JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84","alg":"PS256","n":"pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw","x5c":["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"]}]},"token_endpoint_auth_signing_alg":"PS256","backchannel_token_delivery_mode":"ping","backchannel_client_notification_endpoint":"https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint","backchannel_authentication_request_signing_alg":"PS256","redirect_uris":[],"registration_client_uri":"https://fapi.panva.cz/reg/hVQpynuN9dHG9wFB2iblG","registration_access_token":"KxWKOauDpi9NLa6Lc_7YMXvurC6SzAbChuipAIMgFYW"}
2021-05-21 16:04:09
CallDynamicRegistrationEndpoint
Parsed registration endpoint response
application_type
web
grant_types
[
  "urn:openid:params:grant-type:ciba"
]
id_token_signed_response_alg
PS256
post_logout_redirect_uris
[]
require_auth_time
false
response_types
[]
subject_type
public
token_endpoint_auth_method
private_key_jwt
request_object_signing_alg
PS256
require_signed_request_object
true
require_pushed_authorization_requests
false
authorization_signed_response_alg
PS256
tls_client_certificate_bound_access_tokens
true
backchannel_user_code_parameter
false
client_id_issued_at
1621613049
client_id
hVQpynuN9dHG9wFB2iblG
client_name
pkjwt-one uEselgGSQVYlrde
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
      "alg": "PS256",
      "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
      "x5c": [
        "MIICuzCCAaOgAwIBAgIGAXmPq3VTMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjExNjA0MDlaFw0yMjA1MjExNjA0MDlaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSs1z+l/EQMoM0HU+fNfXs6fduwwIT+83T4zh/CrTKdW+t4KaCAjdWGXB3QJusTPDU3MrzHBSa8+ew4aNdDdIKRnK5nrgbR7Nb0DJKb+7Due7YbziT99F1xiLFIBfxKh9V4Y7tTCwVuLUdnIWG2N02u4kUJ2JrD6x74RqzhEoW90u3uzdFFMXwF2072HiLJW56oMlk7oOlf+Q1yXbNWhNQqDRCuOpQW/2x/oz+v928bqN1JKwUodU6/oGYqMSmTCruJ1fb/V3dNO4sFbWFNVWiE0imZD0mtLno6M4uAxrEV/4X/LUbClLdBIJ5iUZPk0yLslWpydHIC1p50YzE3tmMCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEABQlQUM7hwUS/T0jzsne/BwVUA6cn/Qd1NRu5jLZFt7b10FQdW/DgeKvwNq2QawbLK3q3rd/ZZBtlKRWkROWfhVhI7rEG1wsxFVR4qe9+l+e7ltGSkapIS71U9qeXFNEgifhgTQQRKAbGztk5jjUl8krglAjQQJpai5hI48g0CKoIYQgFPVeD6UstVgOrFlz2ufghYfTja41X3yJqXg634xDXToUe36QYTsXSMWWroLhm+zEErAtBci92Pgtap0TwX3ZhPY+wySpW/kw5vq59JuGlaktnprbEIdFbeaF3BEKUwgUrGkyMJNnYEwpw1Neli1IEJbndA6S5efcREadFUA\u003d\u003d"
      ]
    }
  ]
}
token_endpoint_auth_signing_alg
PS256
backchannel_token_delivery_mode
ping
backchannel_client_notification_endpoint
https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint
backchannel_authentication_request_signing_alg
PS256
redirect_uris
[]
registration_client_uri
https://fapi.panva.cz/reg/hVQpynuN9dHG9wFB2iblG
registration_access_token
KxWKOauDpi9NLa6Lc_7YMXvurC6SzAbChuipAIMgFYW
2021-05-21 16:04:09 SUCCESS
CallDynamicRegistrationEndpoint
Extracted dynamic registration management credentials
registration_client_uri
https://fapi.panva.cz/reg/hVQpynuN9dHG9wFB2iblG
registration_access_token
KxWKOauDpi9NLa6Lc_7YMXvurC6SzAbChuipAIMgFYW
2021-05-21 16:04:09
CopyScopeFromDynamicRegistrationTemplateToClientConfiguration
Copied scope from dynamic_client_registration_template to client configuration
client
{
  "application_type": "web",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "id_token_signed_response_alg": "PS256",
  "post_logout_redirect_uris": [],
  "require_auth_time": false,
  "response_types": [],
  "subject_type": "public",
  "token_endpoint_auth_method": "private_key_jwt",
  "request_object_signing_alg": "PS256",
  "require_signed_request_object": true,
  "require_pushed_authorization_requests": false,
  "authorization_signed_response_alg": "PS256",
  "tls_client_certificate_bound_access_tokens": true,
  "backchannel_user_code_parameter": false,
  "client_id_issued_at": 1621613049,
  "client_id": "hVQpynuN9dHG9wFB2iblG",
  "client_name": "pkjwt-one uEselgGSQVYlrde",
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
        "alg": "PS256",
        "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "token_endpoint_auth_signing_alg": "PS256",
  "backchannel_token_delivery_mode": "ping",
  "backchannel_client_notification_endpoint": "https://www.certification.openid.net/test/uEselgGSQVYlrde/ciba-notification-endpoint",
  "backchannel_authentication_request_signing_alg": "PS256",
  "redirect_uris": [],
  "registration_client_uri": "https://fapi.panva.cz/reg/hVQpynuN9dHG9wFB2iblG",
  "registration_access_token": "KxWKOauDpi9NLa6Lc_7YMXvurC6SzAbChuipAIMgFYW",
  "scope": "openid offline_access"
}
2021-05-21 16:04:09 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-05-21 16:04:09 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-05-21 16:04:09 SUCCESS
FAPICheckKeyAlgInClientJWKs
Found a key with alg PS256 or ES256
2021-05-21 16:04:09 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "0L67M6yvHUJQ-kSgryXNOpE0u-O5oVNw-sVyk8Qk9RQ29Xc_ME3ZcqsCacD0iU_J6515d2fSSrlXLR4vZITtE6ReJujbagUkKeH5Q_HRqwpTjhZIrBlRTMggbAdpktZI9Z_qJbQTcsrIxGY1Wr4-TkeTW766UT95-wWqu5HduM8",
      "kty": "RSA",
      "q": "yfQn06nDHyhMhEZGIqx-AjoiKSLfK7EKDWMA0abE0rgswbdiHeYk811k3P2KvA_FJeqQBYN-EBiSBi7FJgbqMBSNQN2DlquotejFtYxYQp8zXFN3xmKtVok2pFOXtoxHeD99EfvPme4qUE3MJlamIUloMM3n7BaeSxzrckwYpi0",
      "d": "PvSxKe0sP1vQkfHOOx2NbnITMc0mHPJXYw3Hx86mZmZQgPokd-8NymceimtMpaxp5TJgHFm992xh49RBCKMKROykSOzsVEEnWZpdwCMQGzlhZGLG8c-A_8Rq7NPLLgPUYGExR6lc2kuf1d9wnKmMBQ_qA1jbTXe_SMzEQE2fxi8KFFDRJZ3HAUuzw2TR2SgOYt1_QSts9OIt0m5Dv3SK5BEIPm6QY8Cjy-egXeee-2DVbkr1JX4_yiAz_2JKe50RXUfyenaiFit2aFDG9zxO6m6pjeejMuMa4pvLlTv4TO-1mkoYIwD8PdXaqlUvAI7GgkHzENIMb4jCigiOvHCLmQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84",
      "qi": "szQyRNc6qeU-I4IFOf9Nga3iNlKXJmCY_IojBKqq8x2lCzMG6VnMaRkGQEwKF9Tfr40MigMAtG4H_utENOiy2eMMEXp8eyGgqXZuZGEolW8NR2uuD8GrDPU8jQZFvrZVMScqIZodccD3OLOidUUfXHLhN0BFQYxb8JwNkUS8Y24",
      "dp": "DU0aAKDwR50CK_BTjNWLzj-SbKaGHZGDkXcjZecJs9Ql7F482IcdZAEhljuFWXqME0dlhgZHkBtfQrC5tF4D_Uxr827DDG5nb4PGrl2qTovJ5zPkTZMPayUVa8zNHV4qJ_yYnu5qjtX9FQauP6n_rl1BNodgt-yjiStDRdB1oGE",
      "alg": "PS256",
      "dq": "DRZUamQK7_71jnDbZK3W8KABzLakzbkIVLvAttVe1eT3iYovwo5CgL7hpWyMzAkdlopv0NunlLVy6RGo1wEFth3u1XBFccMoCLnP7ibtJUwZ0PbbwTBt2TjFILsGDt9iVkmO-lZeKrSDa3bPLwDYfTm7lcYSLHt-wJFcNKj3w_U",
      "n": "pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw"
    }
  ]
}
2021-05-21 16:04:09 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2021-05-21 16:04:09 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://mtls.fapi.panva.cz/accounts
institution_id
xxxxx
2021-05-21 16:04:09 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://mtls.fapi.panva.cz/accounts
2021-05-21 16:04:09 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
2021-05-21 16:04:09 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
accounts_request_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
2021-05-21 16:04:09
fapi-ciba-id1-multiple-call-to-token-endpoint
Setup Done
Call backchannel authentication endpoint
2021-05-21 16:04:09 SUCCESS
CreateEmptyAuthorizationEndpointRequest
Created empty authorization endpoint request
2021-05-21 16:04:09 SUCCESS
AddScopeToAuthorizationEndpointRequest
Added scope of 'openid offline_access' to authorization endpoint request
scope
openid offline_access
2021-05-21 16:04:09 SUCCESS
AddHintToAuthorizationEndpointRequest
Added hint to authorization endpoint request
login_hint
panva
2021-05-21 16:04:09 SUCCESS
AddBindingMessageToAuthorizationEndpointRequest
Added binding message to authorization endpoint request
binding_message
1234
2021-05-21 16:04:09
CreateRandomClientNotificationToken
Created token value
client_notification_token
+WwIi9WfG~S9bSJV2DZY=
requested_notification_token_length
21
2021-05-21 16:04:09 SUCCESS
AddClientNotificationTokenToAuthorizationEndpointRequest
Added client_notification_token '+WwIi9WfG~S9bSJV2DZY=' to authorization endpoint request
scope
openid offline_access
login_hint
panva
binding_message
1234
client_notification_token
+WwIi9WfG~S9bSJV2DZY=
2021-05-21 16:04:09 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "scope": "openid offline_access",
  "login_hint": "panva",
  "binding_message": "1234",
  "client_notification_token": "+WwIi9WfG~S9bSJV2DZY\u003d"
}
2021-05-21 16:04:09 SUCCESS
AddIatToRequestObject
Added iat to request object claims
iat
1.621613049E9
2021-05-21 16:04:09 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.621613349E9
2021-05-21 16:04:09 SUCCESS
AddNbfToRequestObject
Added nbf to request object claims
nbf
1.621613049E9
2021-05-21 16:04:09 SUCCESS
AddJtiToRequestObject
Added jti to request object claims
jti
dQUeowCgReEhL4OMb4oM
2021-05-21 16:04:09 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://fapi.panva.cz
2021-05-21 16:04:09 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
hVQpynuN9dHG9wFB2iblG
2021-05-21 16:04:09 SUCCESS
SignRequestObject
Signed the request object
claims
{"client_notification_token":"+WwIi9WfG~S9bSJV2DZY=","aud":"https:\/\/fapi.panva.cz","login_hint":"panva","nbf":1621613049,"scope":"openid offline_access","iss":"hVQpynuN9dHG9wFB2iblG","binding_message":"1234","exp":1621613349,"iat":1621613049,"jti":"dQUeowCgReEhL4OMb4oM"}
header
{"kid":"JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84","alg":"PS256"}
request_object
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJjbGllbnRfbm90aWZpY2F0aW9uX3Rva2VuIjoiK1d3SWk5V2ZHflM5YlNKVjJEWlk9IiwiYXVkIjoiaHR0cHM6XC9cL2ZhcGkucGFudmEuY3oiLCJsb2dpbl9oaW50IjoicGFudmEiLCJuYmYiOjE2MjE2MTMwNDksInNjb3BlIjoib3BlbmlkIG9mZmxpbmVfYWNjZXNzIiwiaXNzIjoiaFZRcHludU45ZEhHOXdGQjJpYmxHIiwiYmluZGluZ19tZXNzYWdlIjoiMTIzNCIsImV4cCI6MTYyMTYxMzM0OSwiaWF0IjoxNjIxNjEzMDQ5LCJqdGkiOiJkUVVlb3dDZ1JlRWhMNE9NYjRvTSJ9.coPyjUCCEI0a96gSE0KOXVEhMWmBJOHH7W4ijNalDrNF33icSNu2n5CwDwFicJAmxmQ0e7oWDgPcbduDhR7QnM3f0_AmezJ2NvrjYx7w5dDM3l1H8J_3KAttzc8uTPfkpPKnbLJk6PnRIdUFDXdIG35I3XJ-8sVRqz_ANy1Cq8RBmqAPCfjd4oywMLQOAfxkkWZ9Lct1P6Ql8tEpUUkFudcZDUTiHBmSI8lg4ExsCgPCpneskxFT0_M487ONAzFEmUHGfJMp0lT8XEof3yNmOGDb0TsmCsN3-iTSdykSRgRqSW6eEhQQr6o4NdVY4cmvkErSUpnwEx8T3KY7Nx8nZA
key
{"p":"0L67M6yvHUJQ-kSgryXNOpE0u-O5oVNw-sVyk8Qk9RQ29Xc_ME3ZcqsCacD0iU_J6515d2fSSrlXLR4vZITtE6ReJujbagUkKeH5Q_HRqwpTjhZIrBlRTMggbAdpktZI9Z_qJbQTcsrIxGY1Wr4-TkeTW766UT95-wWqu5HduM8","kty":"RSA","q":"yfQn06nDHyhMhEZGIqx-AjoiKSLfK7EKDWMA0abE0rgswbdiHeYk811k3P2KvA_FJeqQBYN-EBiSBi7FJgbqMBSNQN2DlquotejFtYxYQp8zXFN3xmKtVok2pFOXtoxHeD99EfvPme4qUE3MJlamIUloMM3n7BaeSxzrckwYpi0","d":"PvSxKe0sP1vQkfHOOx2NbnITMc0mHPJXYw3Hx86mZmZQgPokd-8NymceimtMpaxp5TJgHFm992xh49RBCKMKROykSOzsVEEnWZpdwCMQGzlhZGLG8c-A_8Rq7NPLLgPUYGExR6lc2kuf1d9wnKmMBQ_qA1jbTXe_SMzEQE2fxi8KFFDRJZ3HAUuzw2TR2SgOYt1_QSts9OIt0m5Dv3SK5BEIPm6QY8Cjy-egXeee-2DVbkr1JX4_yiAz_2JKe50RXUfyenaiFit2aFDG9zxO6m6pjeejMuMa4pvLlTv4TO-1mkoYIwD8PdXaqlUvAI7GgkHzENIMb4jCigiOvHCLmQ","e":"AQAB","use":"sig","kid":"JCkbvMMx6FPrGcRZn-J5STvvLOSjsVF_72vbBiDeo84","qi":"szQyRNc6qeU-I4IFOf9Nga3iNlKXJmCY_IojBKqq8x2lCzMG6VnMaRkGQEwKF9Tfr40MigMAtG4H_utENOiy2eMMEXp8eyGgqXZuZGEolW8NR2uuD8GrDPU8jQZFvrZVMScqIZodccD3OLOidUUfXHLhN0BFQYxb8JwNkUS8Y24","dp":"DU0aAKDwR50CK_BTjNWLzj-SbKaGHZGDkXcjZecJs9Ql7F482IcdZAEhljuFWXqME0dlhgZHkBtfQrC5tF4D_Uxr827DDG5nb4PGrl2qTovJ5zPkTZMPayUVa8zNHV4qJ_yYnu5qjtX9FQauP6n_rl1BNodgt-yjiStDRdB1oGE","alg":"PS256","dq":"DRZUamQK7_71jnDbZK3W8KABzLakzbkIVLvAttVe1eT3iYovwo5CgL7hpWyMzAkdlopv0NunlLVy6RGo1wEFth3u1XBFccMoCLnP7ibtJUwZ0PbbwTBt2TjFILsGDt9iVkmO-lZeKrSDa3bPLwDYfTm7lcYSLHt-wJFcNKj3w_U","n":"pKzXP6X8RAygzQdT5819ezp927DAhP7zdPjOH8KtMp1b63gpoICN1YZcHdAm6xM8NTcyvMcFJrz57Dho10N0gpGcrmeuBtHs1vQMkpv7sO57thvOJP30XXGIsUgF_EqH1Xhju1MLBW4tR2chYbY3Ta7iRQnYmsPrHvhGrOEShb3S7e7N0UUxfAXbTvYeIslbnqgyWTug6V_5DXJds1aE1CoNEK46lBb_bH-jP6_3bxuo3UkrBSh1Tr-gZioxKZMKu4nV9v9Xd007iwVtYU1VaITSKZkPSa0uejozi4DGsRX_hf8tRsKUt0EgnmJRk-TTIuyVanJ0cgLWnnRjMTe2Yw"}
2021-05-21 16:04:09 SUCCESS
CreateBackchannelAuthenticationEndpointRequest
Created backchannel authentication endpoint request
2021-05-21 16:04:09
AddRequestToBackchannelAuthenticationEndpointRequest
request
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJjbGllbnRfbm90aWZpY2F0aW9uX3Rva2VuIjoiK1d3SWk5V2ZHflM5YlNKVjJEWlk9IiwiYXVkIjoiaHR0cHM6XC9cL2ZhcGkucGFudmEuY3oiLCJsb2dpbl9oaW50IjoicGFudmEiLCJuYmYiOjE2MjE2MTMwNDksInNjb3BlIjoib3BlbmlkIG9mZmxpbmVfYWNjZXNzIiwiaXNzIjoiaFZRcHludU45ZEhHOXdGQjJpYmxHIiwiYmluZGluZ19tZXNzYWdlIjoiMTIzNCIsImV4cCI6MTYyMTYxMzM0OSwiaWF0IjoxNjIxNjEzMDQ5LCJqdGkiOiJkUVVlb3dDZ1JlRWhMNE9NYjRvTSJ9.coPyjUCCEI0a96gSE0KOXVEhMWmBJOHH7W4ijNalDrNF33icSNu2n5CwDwFicJAmxmQ0e7oWDgPcbduDhR7QnM3f0_AmezJ2NvrjYx7w5dDM3l1H8J_3KAttzc8uTPfkpPKnbLJk6PnRIdUFDXdIG35I3XJ-8sVRqz_ANy1Cq8RBmqAPCfjd4oywMLQOAfxkkWZ9Lct1P6Ql8tEpUUkFudcZDUTiHBmSI8lg4ExsCgPCpneskxFT0_M487ONAzFEmUHGfJMp0lT8XEof3yNmOGDb0TsmCsN3-iTSdykSRgRqSW6eEhQQr6o4NdVY4cmvkErSUpnwEx8T3KY7Nx8nZA
2021-05-21 16:04:09 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
MCz9buv7wFfTTzuzobeB
iat
1621613049
exp
1621613109
2021-05-21 16:04:09 SUCCESS
SetClientAuthenticationAudToBackchannelAuthenticationEndpoint
Add backchannel_authentication_endpoint as aud value to client_assertion_claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/backchannel
jti
MCz9buv7wFfTTzuzobeB
iat
1621613049
exp
1621613109
2021-05-21 16:04:09 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC9iYWNrY2hhbm5lbCIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEwOSwiaWF0IjoxNjIxNjEzMDQ5LCJqdGkiOiJNQ3o5YnV2N3dGZlRUenV6b2JlQiJ9.A1Nb85bvin_VY4Qx_II_nhsNSZ-Gikd4Sktyzua7OIL_bJch8gk6Bw9a2Cv8EZmryjmhOrBDAGGLGnxSincwDdKSim4oOQkdcPT6BxatYk4ycUIkFQO-rvgYfXxnlx71OkDT9z1IGs2liqx9u-Ny-L7S97R_OOnpSVQqjaoULA8PFN34T1_iv8DkU-_HgzsckvJrEmUF589heftd_jkUcpVz91WkwhexrWD9vGjUkyY-cc5iq0P3E5XV4CVAUWtN6NkPNw_qk8yFOnWajBEVDjVqm_3IrsEbVmEujWURvWs5vBgNBNbLUG3HueTVjQ6X922cfEUv7zKiBbf6riVnYQ
2021-05-21 16:04:09
AddClientAssertionToBackchannelAuthenticationEndpoint
Added client assertion
request
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJjbGllbnRfbm90aWZpY2F0aW9uX3Rva2VuIjoiK1d3SWk5V2ZHflM5YlNKVjJEWlk9IiwiYXVkIjoiaHR0cHM6XC9cL2ZhcGkucGFudmEuY3oiLCJsb2dpbl9oaW50IjoicGFudmEiLCJuYmYiOjE2MjE2MTMwNDksInNjb3BlIjoib3BlbmlkIG9mZmxpbmVfYWNjZXNzIiwiaXNzIjoiaFZRcHludU45ZEhHOXdGQjJpYmxHIiwiYmluZGluZ19tZXNzYWdlIjoiMTIzNCIsImV4cCI6MTYyMTYxMzM0OSwiaWF0IjoxNjIxNjEzMDQ5LCJqdGkiOiJkUVVlb3dDZ1JlRWhMNE9NYjRvTSJ9.coPyjUCCEI0a96gSE0KOXVEhMWmBJOHH7W4ijNalDrNF33icSNu2n5CwDwFicJAmxmQ0e7oWDgPcbduDhR7QnM3f0_AmezJ2NvrjYx7w5dDM3l1H8J_3KAttzc8uTPfkpPKnbLJk6PnRIdUFDXdIG35I3XJ-8sVRqz_ANy1Cq8RBmqAPCfjd4oywMLQOAfxkkWZ9Lct1P6Ql8tEpUUkFudcZDUTiHBmSI8lg4ExsCgPCpneskxFT0_M487ONAzFEmUHGfJMp0lT8XEof3yNmOGDb0TsmCsN3-iTSdykSRgRqSW6eEhQQr6o4NdVY4cmvkErSUpnwEx8T3KY7Nx8nZA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC9iYWNrY2hhbm5lbCIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEwOSwiaWF0IjoxNjIxNjEzMDQ5LCJqdGkiOiJNQ3o5YnV2N3dGZlRUenV6b2JlQiJ9.A1Nb85bvin_VY4Qx_II_nhsNSZ-Gikd4Sktyzua7OIL_bJch8gk6Bw9a2Cv8EZmryjmhOrBDAGGLGnxSincwDdKSim4oOQkdcPT6BxatYk4ycUIkFQO-rvgYfXxnlx71OkDT9z1IGs2liqx9u-Ny-L7S97R_OOnpSVQqjaoULA8PFN34T1_iv8DkU-_HgzsckvJrEmUF589heftd_jkUcpVz91WkwhexrWD9vGjUkyY-cc5iq0P3E5XV4CVAUWtN6NkPNw_qk8yFOnWajBEVDjVqm_3IrsEbVmEujWURvWs5vBgNBNbLUG3HueTVjQ6X922cfEUv7zKiBbf6riVnYQ
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:09
CallBackchannelAuthenticationEndpoint
HTTP request
request_uri
https://mtls.fapi.panva.cz/backchannel
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "1577"
}
request_body
request=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJjbGllbnRfbm90aWZpY2F0aW9uX3Rva2VuIjoiK1d3SWk5V2ZHflM5YlNKVjJEWlk9IiwiYXVkIjoiaHR0cHM6XC9cL2ZhcGkucGFudmEuY3oiLCJsb2dpbl9oaW50IjoicGFudmEiLCJuYmYiOjE2MjE2MTMwNDksInNjb3BlIjoib3BlbmlkIG9mZmxpbmVfYWNjZXNzIiwiaXNzIjoiaFZRcHludU45ZEhHOXdGQjJpYmxHIiwiYmluZGluZ19tZXNzYWdlIjoiMTIzNCIsImV4cCI6MTYyMTYxMzM0OSwiaWF0IjoxNjIxNjEzMDQ5LCJqdGkiOiJkUVVlb3dDZ1JlRWhMNE9NYjRvTSJ9.coPyjUCCEI0a96gSE0KOXVEhMWmBJOHH7W4ijNalDrNF33icSNu2n5CwDwFicJAmxmQ0e7oWDgPcbduDhR7QnM3f0_AmezJ2NvrjYx7w5dDM3l1H8J_3KAttzc8uTPfkpPKnbLJk6PnRIdUFDXdIG35I3XJ-8sVRqz_ANy1Cq8RBmqAPCfjd4oywMLQOAfxkkWZ9Lct1P6Ql8tEpUUkFudcZDUTiHBmSI8lg4ExsCgPCpneskxFT0_M487ONAzFEmUHGfJMp0lT8XEof3yNmOGDb0TsmCsN3-iTSdykSRgRqSW6eEhQQr6o4NdVY4cmvkErSUpnwEx8T3KY7Nx8nZA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC9iYWNrY2hhbm5lbCIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEwOSwiaWF0IjoxNjIxNjEzMDQ5LCJqdGkiOiJNQ3o5YnV2N3dGZlRUenV6b2JlQiJ9.A1Nb85bvin_VY4Qx_II_nhsNSZ-Gikd4Sktyzua7OIL_bJch8gk6Bw9a2Cv8EZmryjmhOrBDAGGLGnxSincwDdKSim4oOQkdcPT6BxatYk4ycUIkFQO-rvgYfXxnlx71OkDT9z1IGs2liqx9u-Ny-L7S97R_OOnpSVQqjaoULA8PFN34T1_iv8DkU-_HgzsckvJrEmUF589heftd_jkUcpVz91WkwhexrWD9vGjUkyY-cc5iq0P3E5XV4CVAUWtN6NkPNw_qk8yFOnWajBEVDjVqm_3IrsEbVmEujWURvWs5vBgNBNbLUG3HueTVjQ6X922cfEUv7zKiBbf6riVnYQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCkrNc/pfxEDKDNB1PnzX17On3bsMCE/vN0+M4fwq0ynVvreCmggI3Vhlwd0CbrEzw1NzK8xwUmvPnsOGjXQ3SCkZyuZ64G0ezW9AySm/uw7nu2G84k/fRdcYixSAX8SofVeGO7UwsFbi1HZyFhtjdNruJFCdiaw+se+Eas4RKFvdLt7s3RRTF8BdtO9h4iyVueqDJZO6DpX/kNcl2zVoTUKg0QrjqUFv9sf6M/r/dvG6jdSSsFKHVOv6BmKjEpkwq7idX2/1d3TTuLBW1hTVVohNIpmQ9JrS56OjOLgMaxFf+F/y1GwpS3QSCeYlGT5NMi7JVqcnRyAtaedGMxN7ZjAgMBAAECggEAPvSxKe0sP1vQkfHOOx2NbnITMc0mHPJXYw3Hx86mZmZQgPokd+8NymceimtMpaxp5TJgHFm992xh49RBCKMKROykSOzsVEEnWZpdwCMQGzlhZGLG8c+A/8Rq7NPLLgPUYGExR6lc2kuf1d9wnKmMBQ/qA1jbTXe/SMzEQE2fxi8KFFDRJZ3HAUuzw2TR2SgOYt1/QSts9OIt0m5Dv3SK5BEIPm6QY8Cjy+egXeee+2DVbkr1JX4/yiAz/2JKe50RXUfyenaiFit2aFDG9zxO6m6pjeejMuMa4pvLlTv4TO+1mkoYIwD8PdXaqlUvAI7GgkHzENIMb4jCigiOvHCLmQKBgQDQvrszrK8dQlD6RKCvJc06kTS747mhU3D6xXKTxCT1FDb1dz8wTdlyqwJpwPSJT8nrnXl3Z9JKuVctHi9khO0TpF4m6NtqBSQp4flD8dGrClOOFkisGVFMyCBsB2mS1kj1n+oltBNyysjEZjVavj5OR5NbvrpRP3n7Baq7kd24zwKBgQDJ9CfTqcMfKEyERkYirH4COiIpIt8rsQoNYwDRpsTSuCzBt2Id5iTzXWTc/Yq8D8Ul6pAFg34QGJIGLsUmBuowFI1A3YOWq6i16MW1jFhCnzNcU3fGYq1WiTakU5e2jEd4P30R+8+Z7ipQTcwmVqYhSWgwzefsFp5LHOtyTBimLQKBgA1NGgCg8EedAivwU4zVi84/kmymhh2Rg5F3I2XnCbPUJexePNiHHWQBIZY7hVl6jBNHZYYGR5AbX0KwubReA/1Ma/NuwwxuZ2+Dxq5dqk6Lyecz5E2TD2slFWvMzR1eKif8mJ7uao7V/RUGrj+p/65dQTaHYLfso4krQ0XQdaBhAoGADRZUamQK7/71jnDbZK3W8KABzLakzbkIVLvAttVe1eT3iYovwo5CgL7hpWyMzAkdlopv0NunlLVy6RGo1wEFth3u1XBFccMoCLnP7ibtJUwZ0PbbwTBt2TjFILsGDt9iVkmO+lZeKrSDa3bPLwDYfTm7lcYSLHt+wJFcNKj3w/UCgYEAszQyRNc6qeU+I4IFOf9Nga3iNlKXJmCY/IojBKqq8x2lCzMG6VnMaRkGQEwKF9Tfr40MigMAtG4H/utENOiy2eMMEXp8eyGgqXZuZGEolW8NR2uuD8GrDPU8jQZFvrZVMScqIZodccD3OLOidUUfXHLhN0BFQYxb8JwNkUS8Y24\u003d"
}
2021-05-21 16:04:10 RESPONSE
CallBackchannelAuthenticationEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "78",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:10 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"expires_in":600,"auth_req_id":"dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA"}
2021-05-21 16:04:10
CallBackchannelAuthenticationEndpoint
Backchannel Authentication endpoint response
backchannel_authentication_endpoint_response
{"expires_in":600,"auth_req_id":"dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA"}
2021-05-21 16:04:10 SUCCESS
CallBackchannelAuthenticationEndpoint
Parsed backchannel authentication endpoint response
expires_in
600
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:10 SUCCESS
CheckBackchannelAuthenticationEndpointHttpStatus200
Backchannel authentication endpoint http status code was 200
2021-05-21 16:04:10 SUCCESS
CheckBackchannelAuthenticationEndpointContentType
Backchannel authentication endpoint Content-Type: header is application/json
2021-05-21 16:04:10 SUCCESS
CheckIfBackchannelAuthenticationEndpointResponseError
No error from Backchannel authentication endpoint
2021-05-21 16:04:10 SUCCESS
ValidateAuthenticationRequestId
auth_req_id passed all validation checks
2021-05-21 16:04:10 SUCCESS
EnsureMinimumAuthenticationRequestIdLength
auth_req_id is of sufficient length
actual
344
required
128
2021-05-21 16:04:10 SUCCESS
EnsureMinimumAuthenticationRequestIdEntropy
Calculated shannon entropy seems sufficient
actual
217.81960944786326
expected
96.0
2021-05-21 16:04:10 SUCCESS
EnsureRecommendedAuthenticationRequestIdEntropy
Calculated entropy
actual
217.81960944786326
recommended
160.0
2021-05-21 16:04:10 SUCCESS
ValidateAuthenticationRequestIdExpiresIn
expires_in passed all validation checks
expires_in
600
2021-05-21 16:04:10
ValidateAuthenticationRequestIdInterval
interval is empty.
Call token endpoint expecting pending
2021-05-21 16:04:10 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:10
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:10 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
6p9WpgvBqUKjQbl8IzN7
iat
1621613050
exp
1621613110
2021-05-21 16:04:10 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExMCwiaWF0IjoxNjIxNjEzMDUwLCJqdGkiOiI2cDlXcGd2QnFVS2pRYmw4SXpONyJ9.e89SGL-TH92ocZP1Ox_Z6r52IUGyMfXAdJzkyLg75Y5ga0zwsvbKh9HVFdOiLeNec81-SdsQDRAjDpBUf5kN6dxpMgR08hTp-A9du4w2geGYr3r-Cd_m-69TE3BpVcgcqjJ9-DYQWuZZhd6ui5yiG81gliSuOI5-fBKshobQqvH-0x03xvHDluTDU2sFwAPz6BM-dpQkb3WGo7y4asOshJFoNBew05VFUgeFqXkePMQ7ZVCw0AtUnl_hQB-GvEASrHEWyppJAiW5I9Doq8fulKoJkW5nauFKHUv65tQKo1k5TP_WzpWTk9_8rx_72Q24mAzTRe75LnpQnHp2UBQLUA
2021-05-21 16:04:10
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExMCwiaWF0IjoxNjIxNjEzMDUwLCJqdGkiOiI2cDlXcGd2QnFVS2pRYmw4SXpONyJ9.e89SGL-TH92ocZP1Ox_Z6r52IUGyMfXAdJzkyLg75Y5ga0zwsvbKh9HVFdOiLeNec81-SdsQDRAjDpBUf5kN6dxpMgR08hTp-A9du4w2geGYr3r-Cd_m-69TE3BpVcgcqjJ9-DYQWuZZhd6ui5yiG81gliSuOI5-fBKshobQqvH-0x03xvHDluTDU2sFwAPz6BM-dpQkb3WGo7y4asOshJFoNBew05VFUgeFqXkePMQ7ZVCw0AtUnl_hQB-GvEASrHEWyppJAiW5I9Doq8fulKoJkW5nauFKHUv65tQKo1k5TP_WzpWTk9_8rx_72Q24mAzTRe75LnpQnHp2UBQLUA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:10
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExMCwiaWF0IjoxNjIxNjEzMDUwLCJqdGkiOiI2cDlXcGd2QnFVS2pRYmw4SXpONyJ9.e89SGL-TH92ocZP1Ox_Z6r52IUGyMfXAdJzkyLg75Y5ga0zwsvbKh9HVFdOiLeNec81-SdsQDRAjDpBUf5kN6dxpMgR08hTp-A9du4w2geGYr3r-Cd_m-69TE3BpVcgcqjJ9-DYQWuZZhd6ui5yiG81gliSuOI5-fBKshobQqvH-0x03xvHDluTDU2sFwAPz6BM-dpQkb3WGo7y4asOshJFoNBew05VFUgeFqXkePMQ7ZVCw0AtUnl_hQB-GvEASrHEWyppJAiW5I9Doq8fulKoJkW5nauFKHUv65tQKo1k5TP_WzpWTk9_8rx_72Q24mAzTRe75LnpQnHp2UBQLUA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:11 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:11 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:11 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:11 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:11 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:11 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:11 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:11 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:11 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:11 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Call token endpoint expecting pending (second time)
2021-05-21 16:04:16 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:16
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:16 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
lfUf5ara15Nvzj1X9CDb
iat
1621613056
exp
1621613116
2021-05-21 16:04:16 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExNiwiaWF0IjoxNjIxNjEzMDU2LCJqdGkiOiJsZlVmNWFyYTE1TnZ6ajFYOUNEYiJ9.cfdqLWqipUjll7gOUwVLDqEt64qXPhsTUyRyaa3QGBIaZ6-6o_AZcCmW-XuQ1V4rmlGPCFdu71IiYwt8OV_pvRAkHpxkCa-weQDDAlhLJoWiDjnpLyb6TT_DYwiwW7govEmCE1hwDZchwJr7EU7cZZCEq8mBC8LyI5Bu_2FUZCEDk7kMwDrVi-V3ihus3EReWQb8St34chhpxUzWnre18JqvesfG15t-Vonwur9CbHyy-4vOdYC8HO2KOlrEi7Vf4gXJzyQevXXwolqIr_RWumBhxT1pLz7SDZ9z3sMJH-dvt_iuw8SU9CTvKYIeHYs5IwIf5nKJ9Bd62-vd7HtGcg
2021-05-21 16:04:16
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExNiwiaWF0IjoxNjIxNjEzMDU2LCJqdGkiOiJsZlVmNWFyYTE1TnZ6ajFYOUNEYiJ9.cfdqLWqipUjll7gOUwVLDqEt64qXPhsTUyRyaa3QGBIaZ6-6o_AZcCmW-XuQ1V4rmlGPCFdu71IiYwt8OV_pvRAkHpxkCa-weQDDAlhLJoWiDjnpLyb6TT_DYwiwW7govEmCE1hwDZchwJr7EU7cZZCEq8mBC8LyI5Bu_2FUZCEDk7kMwDrVi-V3ihus3EReWQb8St34chhpxUzWnre18JqvesfG15t-Vonwur9CbHyy-4vOdYC8HO2KOlrEi7Vf4gXJzyQevXXwolqIr_RWumBhxT1pLz7SDZ9z3sMJH-dvt_iuw8SU9CTvKYIeHYs5IwIf5nKJ9Bd62-vd7HtGcg
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:16
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExNiwiaWF0IjoxNjIxNjEzMDU2LCJqdGkiOiJsZlVmNWFyYTE1TnZ6ajFYOUNEYiJ9.cfdqLWqipUjll7gOUwVLDqEt64qXPhsTUyRyaa3QGBIaZ6-6o_AZcCmW-XuQ1V4rmlGPCFdu71IiYwt8OV_pvRAkHpxkCa-weQDDAlhLJoWiDjnpLyb6TT_DYwiwW7govEmCE1hwDZchwJr7EU7cZZCEq8mBC8LyI5Bu_2FUZCEDk7kMwDrVi-V3ihus3EReWQb8St34chhpxUzWnre18JqvesfG15t-Vonwur9CbHyy-4vOdYC8HO2KOlrEi7Vf4gXJzyQevXXwolqIr_RWumBhxT1pLz7SDZ9z3sMJH-dvt_iuw8SU9CTvKYIeHYs5IwIf5nKJ9Bd62-vd7HtGcg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:17 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:17 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:17 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:17 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:17 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:17 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:17 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:17 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:17 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:17 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:17 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:17
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:17 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
lJ9UW3b4t59E3L7gkQ52
iat
1621613057
exp
1621613117
2021-05-21 16:04:17 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExNywiaWF0IjoxNjIxNjEzMDU3LCJqdGkiOiJsSjlVVzNiNHQ1OUUzTDdna1E1MiJ9.G7W5EVBw2yXuIsP9Z3zAlVj3gOPKG1gp7cnMMOiLJtcuVB4edp2Iy5lCoiwKVRi0kacvhqxpqnr-P_kJH_dAH-RHeJEeAxVBk1LQZQwBRbKLuzYodoR8BksTew8z8AKqKNPMowk9mRM6Dp_-jn_4nGxt6hZcwuxtfMC0cx82Boh31eWAFJN6sSD5Ej8FeGP_n6BhUQk-cCOmnqXApMN3lpyOqSK8-PeXC1MPStenMn6HhpLXaVrjfqXTpZoEaZS1AJ_8iDTXaLoeavbpESHR6P-v_aQ1_Oo1esCndfpznFUtia7zFCKhf5bgxepI7siRMF81O1OctPfvZUWA9Z47KQ
2021-05-21 16:04:17
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExNywiaWF0IjoxNjIxNjEzMDU3LCJqdGkiOiJsSjlVVzNiNHQ1OUUzTDdna1E1MiJ9.G7W5EVBw2yXuIsP9Z3zAlVj3gOPKG1gp7cnMMOiLJtcuVB4edp2Iy5lCoiwKVRi0kacvhqxpqnr-P_kJH_dAH-RHeJEeAxVBk1LQZQwBRbKLuzYodoR8BksTew8z8AKqKNPMowk9mRM6Dp_-jn_4nGxt6hZcwuxtfMC0cx82Boh31eWAFJN6sSD5Ej8FeGP_n6BhUQk-cCOmnqXApMN3lpyOqSK8-PeXC1MPStenMn6HhpLXaVrjfqXTpZoEaZS1AJ_8iDTXaLoeavbpESHR6P-v_aQ1_Oo1esCndfpznFUtia7zFCKhf5bgxepI7siRMF81O1OctPfvZUWA9Z47KQ
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:17
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExNywiaWF0IjoxNjIxNjEzMDU3LCJqdGkiOiJsSjlVVzNiNHQ1OUUzTDdna1E1MiJ9.G7W5EVBw2yXuIsP9Z3zAlVj3gOPKG1gp7cnMMOiLJtcuVB4edp2Iy5lCoiwKVRi0kacvhqxpqnr-P_kJH_dAH-RHeJEeAxVBk1LQZQwBRbKLuzYodoR8BksTew8z8AKqKNPMowk9mRM6Dp_-jn_4nGxt6hZcwuxtfMC0cx82Boh31eWAFJN6sSD5Ej8FeGP_n6BhUQk-cCOmnqXApMN3lpyOqSK8-PeXC1MPStenMn6HhpLXaVrjfqXTpZoEaZS1AJ_8iDTXaLoeavbpESHR6P-v_aQ1_Oo1esCndfpznFUtia7zFCKhf5bgxepI7siRMF81O1OctPfvZUWA9Z47KQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCkrNc/pfxEDKDNB1PnzX17On3bsMCE/vN0+M4fwq0ynVvreCmggI3Vhlwd0CbrEzw1NzK8xwUmvPnsOGjXQ3SCkZyuZ64G0ezW9AySm/uw7nu2G84k/fRdcYixSAX8SofVeGO7UwsFbi1HZyFhtjdNruJFCdiaw+se+Eas4RKFvdLt7s3RRTF8BdtO9h4iyVueqDJZO6DpX/kNcl2zVoTUKg0QrjqUFv9sf6M/r/dvG6jdSSsFKHVOv6BmKjEpkwq7idX2/1d3TTuLBW1hTVVohNIpmQ9JrS56OjOLgMaxFf+F/y1GwpS3QSCeYlGT5NMi7JVqcnRyAtaedGMxN7ZjAgMBAAECggEAPvSxKe0sP1vQkfHOOx2NbnITMc0mHPJXYw3Hx86mZmZQgPokd+8NymceimtMpaxp5TJgHFm992xh49RBCKMKROykSOzsVEEnWZpdwCMQGzlhZGLG8c+A/8Rq7NPLLgPUYGExR6lc2kuf1d9wnKmMBQ/qA1jbTXe/SMzEQE2fxi8KFFDRJZ3HAUuzw2TR2SgOYt1/QSts9OIt0m5Dv3SK5BEIPm6QY8Cjy+egXeee+2DVbkr1JX4/yiAz/2JKe50RXUfyenaiFit2aFDG9zxO6m6pjeejMuMa4pvLlTv4TO+1mkoYIwD8PdXaqlUvAI7GgkHzENIMb4jCigiOvHCLmQKBgQDQvrszrK8dQlD6RKCvJc06kTS747mhU3D6xXKTxCT1FDb1dz8wTdlyqwJpwPSJT8nrnXl3Z9JKuVctHi9khO0TpF4m6NtqBSQp4flD8dGrClOOFkisGVFMyCBsB2mS1kj1n+oltBNyysjEZjVavj5OR5NbvrpRP3n7Baq7kd24zwKBgQDJ9CfTqcMfKEyERkYirH4COiIpIt8rsQoNYwDRpsTSuCzBt2Id5iTzXWTc/Yq8D8Ul6pAFg34QGJIGLsUmBuowFI1A3YOWq6i16MW1jFhCnzNcU3fGYq1WiTakU5e2jEd4P30R+8+Z7ipQTcwmVqYhSWgwzefsFp5LHOtyTBimLQKBgA1NGgCg8EedAivwU4zVi84/kmymhh2Rg5F3I2XnCbPUJexePNiHHWQBIZY7hVl6jBNHZYYGR5AbX0KwubReA/1Ma/NuwwxuZ2+Dxq5dqk6Lyecz5E2TD2slFWvMzR1eKif8mJ7uao7V/RUGrj+p/65dQTaHYLfso4krQ0XQdaBhAoGADRZUamQK7/71jnDbZK3W8KABzLakzbkIVLvAttVe1eT3iYovwo5CgL7hpWyMzAkdlopv0NunlLVy6RGo1wEFth3u1XBFccMoCLnP7ibtJUwZ0PbbwTBt2TjFILsGDt9iVkmO+lZeKrSDa3bPLwDYfTm7lcYSLHt+wJFcNKj3w/UCgYEAszQyRNc6qeU+I4IFOf9Nga3iNlKXJmCY/IojBKqq8x2lCzMG6VnMaRkGQEwKF9Tfr40MigMAtG4H/utENOiy2eMMEXp8eyGgqXZuZGEolW8NR2uuD8GrDPU8jQZFvrZVMScqIZodccD3OLOidUUfXHLhN0BFQYxb8JwNkUS8Y24\u003d"
}
2021-05-21 16:04:18 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:18 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:18 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:18 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:18
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:18 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:18 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:18 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:18 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:18 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:18 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:18 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:18
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:18 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
byp7CNSEVy1NgR0wygeu
iat
1621613058
exp
1621613118
2021-05-21 16:04:18 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExOCwiaWF0IjoxNjIxNjEzMDU4LCJqdGkiOiJieXA3Q05TRVZ5MU5nUjB3eWdldSJ9.EESBA7kFagGSUB5JBi4uVNaOknsM81hHs5tCU0W5rkm4r3McVlI3RGYtIEwLZftovzhx5G2k8GoSMqezaCwCZlN5dYe2SJffUFarR5ucPek7kfVLKYARuAOu63gInpl8afEC_S4ypc08tl90EPDryoJH91CEH8zkojGTMisyjbx7lPygtzXMnMb-8YuJWCOe51zDnM8PFK81BDZP9Dq1gzYmZvv11WeJGvSBrVnDcVfUkCkpO0roFHsXG6dS2sa7iIPRbj8sfEHeSJoX5cSw01dMEp4MlhQKdIkw5WXTvNJW_D_WY5seZRUu7kz3SC7SUk8BbTbKkshNFw5wqFVEzg
2021-05-21 16:04:18
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExOCwiaWF0IjoxNjIxNjEzMDU4LCJqdGkiOiJieXA3Q05TRVZ5MU5nUjB3eWdldSJ9.EESBA7kFagGSUB5JBi4uVNaOknsM81hHs5tCU0W5rkm4r3McVlI3RGYtIEwLZftovzhx5G2k8GoSMqezaCwCZlN5dYe2SJffUFarR5ucPek7kfVLKYARuAOu63gInpl8afEC_S4ypc08tl90EPDryoJH91CEH8zkojGTMisyjbx7lPygtzXMnMb-8YuJWCOe51zDnM8PFK81BDZP9Dq1gzYmZvv11WeJGvSBrVnDcVfUkCkpO0roFHsXG6dS2sa7iIPRbj8sfEHeSJoX5cSw01dMEp4MlhQKdIkw5WXTvNJW_D_WY5seZRUu7kz3SC7SUk8BbTbKkshNFw5wqFVEzg
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:18
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExOCwiaWF0IjoxNjIxNjEzMDU4LCJqdGkiOiJieXA3Q05TRVZ5MU5nUjB3eWdldSJ9.EESBA7kFagGSUB5JBi4uVNaOknsM81hHs5tCU0W5rkm4r3McVlI3RGYtIEwLZftovzhx5G2k8GoSMqezaCwCZlN5dYe2SJffUFarR5ucPek7kfVLKYARuAOu63gInpl8afEC_S4ypc08tl90EPDryoJH91CEH8zkojGTMisyjbx7lPygtzXMnMb-8YuJWCOe51zDnM8PFK81BDZP9Dq1gzYmZvv11WeJGvSBrVnDcVfUkCkpO0roFHsXG6dS2sa7iIPRbj8sfEHeSJoX5cSw01dMEp4MlhQKdIkw5WXTvNJW_D_WY5seZRUu7kz3SC7SUk8BbTbKkshNFw5wqFVEzg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "MIICuzCCAaOgAwIBAgIGAXmPq3VTMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjExNjA0MDlaFw0yMjA1MjExNjA0MDlaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSs1z+l/EQMoM0HU+fNfXs6fduwwIT+83T4zh/CrTKdW+t4KaCAjdWGXB3QJusTPDU3MrzHBSa8+ew4aNdDdIKRnK5nrgbR7Nb0DJKb+7Due7YbziT99F1xiLFIBfxKh9V4Y7tTCwVuLUdnIWG2N02u4kUJ2JrD6x74RqzhEoW90u3uzdFFMXwF2072HiLJW56oMlk7oOlf+Q1yXbNWhNQqDRCuOpQW/2x/oz+v928bqN1JKwUodU6/oGYqMSmTCruJ1fb/V3dNO4sFbWFNVWiE0imZD0mtLno6M4uAxrEV/4X/LUbClLdBIJ5iUZPk0yLslWpydHIC1p50YzE3tmMCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEABQlQUM7hwUS/T0jzsne/BwVUA6cn/Qd1NRu5jLZFt7b10FQdW/DgeKvwNq2QawbLK3q3rd/ZZBtlKRWkROWfhVhI7rEG1wsxFVR4qe9+l+e7ltGSkapIS71U9qeXFNEgifhgTQQRKAbGztk5jjUl8krglAjQQJpai5hI48g0CKoIYQgFPVeD6UstVgOrFlz2ufghYfTja41X3yJqXg634xDXToUe36QYTsXSMWWroLhm+zEErAtBci92Pgtap0TwX3ZhPY+wySpW/kw5vq59JuGlaktnprbEIdFbeaF3BEKUwgUrGkyMJNnYEwpw1Neli1IEJbndA6S5efcREadFUA\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:19 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:18 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:19 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:19 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:19
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:19 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:19 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:19 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:19 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:19 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:19 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:19 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:19
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:19 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
zaKqRvXaHESCfsTiuuDg
iat
1621613059
exp
1621613119
2021-05-21 16:04:19 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExOSwiaWF0IjoxNjIxNjEzMDU5LCJqdGkiOiJ6YUtxUnZYYUhFU0Nmc1RpdXVEZyJ9.XVPqUJ5nphQgScg6uB3iSgE6U1_OvgYpw0dD2YBMhp1DtxxUFSNGGYltf_U2R_PunhHa3cbbsAsnlOklZMyCCLlC8Qqb0pIEzhg9sQe3vWapygv0zV_Q68ndxhAnc4tPH77napxtr0vVawaHq2n2uNv1b71SpjcRcdTqCupffoi632t4hBAPw-YhSK54_CLWkJf9tIC5cnU_WmJYYWcZbTrjgM91BCmVd3qrAeeqK1uv-I-CaavaAe6Ys41UkEhxSnGZSI-6m2ErkuEkh0DOYhyLFsv0RlmxskYJMRvxlmwhjSsvBI0mppYZSI5X167sRZKvOVfthxrJk-0gv6kNgA
2021-05-21 16:04:19
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExOSwiaWF0IjoxNjIxNjEzMDU5LCJqdGkiOiJ6YUtxUnZYYUhFU0Nmc1RpdXVEZyJ9.XVPqUJ5nphQgScg6uB3iSgE6U1_OvgYpw0dD2YBMhp1DtxxUFSNGGYltf_U2R_PunhHa3cbbsAsnlOklZMyCCLlC8Qqb0pIEzhg9sQe3vWapygv0zV_Q68ndxhAnc4tPH77napxtr0vVawaHq2n2uNv1b71SpjcRcdTqCupffoi632t4hBAPw-YhSK54_CLWkJf9tIC5cnU_WmJYYWcZbTrjgM91BCmVd3qrAeeqK1uv-I-CaavaAe6Ys41UkEhxSnGZSI-6m2ErkuEkh0DOYhyLFsv0RlmxskYJMRvxlmwhjSsvBI0mppYZSI5X167sRZKvOVfthxrJk-0gv6kNgA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:19
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExOSwiaWF0IjoxNjIxNjEzMDU5LCJqdGkiOiJ6YUtxUnZYYUhFU0Nmc1RpdXVEZyJ9.XVPqUJ5nphQgScg6uB3iSgE6U1_OvgYpw0dD2YBMhp1DtxxUFSNGGYltf_U2R_PunhHa3cbbsAsnlOklZMyCCLlC8Qqb0pIEzhg9sQe3vWapygv0zV_Q68ndxhAnc4tPH77napxtr0vVawaHq2n2uNv1b71SpjcRcdTqCupffoi632t4hBAPw-YhSK54_CLWkJf9tIC5cnU_WmJYYWcZbTrjgM91BCmVd3qrAeeqK1uv-I-CaavaAe6Ys41UkEhxSnGZSI-6m2ErkuEkh0DOYhyLFsv0RlmxskYJMRvxlmwhjSsvBI0mppYZSI5X167sRZKvOVfthxrJk-0gv6kNgA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:19 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:19 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:19 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:19 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:19
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:19 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:19 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:19 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:19 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:19 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:19 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:19 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:19
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:19 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
csVUO7Ohalpkxp4FJsYc
iat
1621613059
exp
1621613119
2021-05-21 16:04:19 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExOSwiaWF0IjoxNjIxNjEzMDU5LCJqdGkiOiJjc1ZVTzdPaGFscGt4cDRGSnNZYyJ9.ab_g3DIieHOp1XQXvb79fg0w5fAsf0Bf2Q9Zlmv1wzMyjFI-3XBzeLF-fS87tgW8508xQb0b7iJnEnCwO9ErWvxGXrHNmPRDzGQukPOx3dGJDXr6U-eV1cjFsPy3pm_lV6tKCdK2ASCKSdh0jXVR3bo9bqaRDrwbqtYvtateV3L0Yq9fFopyJ9iWPOZwyHcMwKLwu-_f2BMINpdKvWkQx4NrxgHuiIideVDXWFJfLTderOL4yf-9dvlMjMoVpjdN4mtxZrrjXfuZkpBuYb_y2jG3XYVObSnXldM3n3nBLPfL8IujYqZs2zYHzR61c096NVcGKrCHOcuT_Jry4FUQOQ
2021-05-21 16:04:19
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExOSwiaWF0IjoxNjIxNjEzMDU5LCJqdGkiOiJjc1ZVTzdPaGFscGt4cDRGSnNZYyJ9.ab_g3DIieHOp1XQXvb79fg0w5fAsf0Bf2Q9Zlmv1wzMyjFI-3XBzeLF-fS87tgW8508xQb0b7iJnEnCwO9ErWvxGXrHNmPRDzGQukPOx3dGJDXr6U-eV1cjFsPy3pm_lV6tKCdK2ASCKSdh0jXVR3bo9bqaRDrwbqtYvtateV3L0Yq9fFopyJ9iWPOZwyHcMwKLwu-_f2BMINpdKvWkQx4NrxgHuiIideVDXWFJfLTderOL4yf-9dvlMjMoVpjdN4mtxZrrjXfuZkpBuYb_y2jG3XYVObSnXldM3n3nBLPfL8IujYqZs2zYHzR61c096NVcGKrCHOcuT_Jry4FUQOQ
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:19
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzExOSwiaWF0IjoxNjIxNjEzMDU5LCJqdGkiOiJjc1ZVTzdPaGFscGt4cDRGSnNZYyJ9.ab_g3DIieHOp1XQXvb79fg0w5fAsf0Bf2Q9Zlmv1wzMyjFI-3XBzeLF-fS87tgW8508xQb0b7iJnEnCwO9ErWvxGXrHNmPRDzGQukPOx3dGJDXr6U-eV1cjFsPy3pm_lV6tKCdK2ASCKSdh0jXVR3bo9bqaRDrwbqtYvtateV3L0Yq9fFopyJ9iWPOZwyHcMwKLwu-_f2BMINpdKvWkQx4NrxgHuiIideVDXWFJfLTderOL4yf-9dvlMjMoVpjdN4mtxZrrjXfuZkpBuYb_y2jG3XYVObSnXldM3n3nBLPfL8IujYqZs2zYHzR61c096NVcGKrCHOcuT_Jry4FUQOQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCkrNc/pfxEDKDNB1PnzX17On3bsMCE/vN0+M4fwq0ynVvreCmggI3Vhlwd0CbrEzw1NzK8xwUmvPnsOGjXQ3SCkZyuZ64G0ezW9AySm/uw7nu2G84k/fRdcYixSAX8SofVeGO7UwsFbi1HZyFhtjdNruJFCdiaw+se+Eas4RKFvdLt7s3RRTF8BdtO9h4iyVueqDJZO6DpX/kNcl2zVoTUKg0QrjqUFv9sf6M/r/dvG6jdSSsFKHVOv6BmKjEpkwq7idX2/1d3TTuLBW1hTVVohNIpmQ9JrS56OjOLgMaxFf+F/y1GwpS3QSCeYlGT5NMi7JVqcnRyAtaedGMxN7ZjAgMBAAECggEAPvSxKe0sP1vQkfHOOx2NbnITMc0mHPJXYw3Hx86mZmZQgPokd+8NymceimtMpaxp5TJgHFm992xh49RBCKMKROykSOzsVEEnWZpdwCMQGzlhZGLG8c+A/8Rq7NPLLgPUYGExR6lc2kuf1d9wnKmMBQ/qA1jbTXe/SMzEQE2fxi8KFFDRJZ3HAUuzw2TR2SgOYt1/QSts9OIt0m5Dv3SK5BEIPm6QY8Cjy+egXeee+2DVbkr1JX4/yiAz/2JKe50RXUfyenaiFit2aFDG9zxO6m6pjeejMuMa4pvLlTv4TO+1mkoYIwD8PdXaqlUvAI7GgkHzENIMb4jCigiOvHCLmQKBgQDQvrszrK8dQlD6RKCvJc06kTS747mhU3D6xXKTxCT1FDb1dz8wTdlyqwJpwPSJT8nrnXl3Z9JKuVctHi9khO0TpF4m6NtqBSQp4flD8dGrClOOFkisGVFMyCBsB2mS1kj1n+oltBNyysjEZjVavj5OR5NbvrpRP3n7Baq7kd24zwKBgQDJ9CfTqcMfKEyERkYirH4COiIpIt8rsQoNYwDRpsTSuCzBt2Id5iTzXWTc/Yq8D8Ul6pAFg34QGJIGLsUmBuowFI1A3YOWq6i16MW1jFhCnzNcU3fGYq1WiTakU5e2jEd4P30R+8+Z7ipQTcwmVqYhSWgwzefsFp5LHOtyTBimLQKBgA1NGgCg8EedAivwU4zVi84/kmymhh2Rg5F3I2XnCbPUJexePNiHHWQBIZY7hVl6jBNHZYYGR5AbX0KwubReA/1Ma/NuwwxuZ2+Dxq5dqk6Lyecz5E2TD2slFWvMzR1eKif8mJ7uao7V/RUGrj+p/65dQTaHYLfso4krQ0XQdaBhAoGADRZUamQK7/71jnDbZK3W8KABzLakzbkIVLvAttVe1eT3iYovwo5CgL7hpWyMzAkdlopv0NunlLVy6RGo1wEFth3u1XBFccMoCLnP7ibtJUwZ0PbbwTBt2TjFILsGDt9iVkmO+lZeKrSDa3bPLwDYfTm7lcYSLHt+wJFcNKj3w/UCgYEAszQyRNc6qeU+I4IFOf9Nga3iNlKXJmCY/IojBKqq8x2lCzMG6VnMaRkGQEwKF9Tfr40MigMAtG4H/utENOiy2eMMEXp8eyGgqXZuZGEolW8NR2uuD8GrDPU8jQZFvrZVMScqIZodccD3OLOidUUfXHLhN0BFQYxb8JwNkUS8Y24\u003d"
}
2021-05-21 16:04:20 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:20 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:20 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:20 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:20
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:20 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:20 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:20 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:20 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:20 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:20 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:20 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:20
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:20 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
curAmakXvsTJToUTCnLZ
iat
1621613060
exp
1621613120
2021-05-21 16:04:20 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyMCwiaWF0IjoxNjIxNjEzMDYwLCJqdGkiOiJjdXJBbWFrWHZzVEpUb1VUQ25MWiJ9.TN21eH4mG2-3uigEnmcXP5Ep4Tete900tyeL1kxgd03R8n8g6PJkBjeRHqBvWoOlK6gUdoT76d_qRNJgRAt6ldGpjQOq4m7PRcWvtSm86r_g4TEgmC3IB-pjXsiqEYOsSAWx7RrZiQSIxNDq9jHpJq0jYRjZhkvSMcoAbv-GbiEEe-mrr5xVFuEWmJZOGO2Z7Rv2asyhdz7cOkynzmUeawFsOc72AHQw65ah1-I0YZo-uvYehOoW0eYr1Oc5fVNDxdhzqTaAv5JAV20McZvl2VPusEHz7LUncVAetkaFZWUtkvriWjAz3sJFw02PJcc1mV53qq-zeGddQ2zcLBVfEQ
2021-05-21 16:04:20
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyMCwiaWF0IjoxNjIxNjEzMDYwLCJqdGkiOiJjdXJBbWFrWHZzVEpUb1VUQ25MWiJ9.TN21eH4mG2-3uigEnmcXP5Ep4Tete900tyeL1kxgd03R8n8g6PJkBjeRHqBvWoOlK6gUdoT76d_qRNJgRAt6ldGpjQOq4m7PRcWvtSm86r_g4TEgmC3IB-pjXsiqEYOsSAWx7RrZiQSIxNDq9jHpJq0jYRjZhkvSMcoAbv-GbiEEe-mrr5xVFuEWmJZOGO2Z7Rv2asyhdz7cOkynzmUeawFsOc72AHQw65ah1-I0YZo-uvYehOoW0eYr1Oc5fVNDxdhzqTaAv5JAV20McZvl2VPusEHz7LUncVAetkaFZWUtkvriWjAz3sJFw02PJcc1mV53qq-zeGddQ2zcLBVfEQ
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:20
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyMCwiaWF0IjoxNjIxNjEzMDYwLCJqdGkiOiJjdXJBbWFrWHZzVEpUb1VUQ25MWiJ9.TN21eH4mG2-3uigEnmcXP5Ep4Tete900tyeL1kxgd03R8n8g6PJkBjeRHqBvWoOlK6gUdoT76d_qRNJgRAt6ldGpjQOq4m7PRcWvtSm86r_g4TEgmC3IB-pjXsiqEYOsSAWx7RrZiQSIxNDq9jHpJq0jYRjZhkvSMcoAbv-GbiEEe-mrr5xVFuEWmJZOGO2Z7Rv2asyhdz7cOkynzmUeawFsOc72AHQw65ah1-I0YZo-uvYehOoW0eYr1Oc5fVNDxdhzqTaAv5JAV20McZvl2VPusEHz7LUncVAetkaFZWUtkvriWjAz3sJFw02PJcc1mV53qq-zeGddQ2zcLBVfEQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:21 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:21 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:21 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:21 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:21
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:21 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:21 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:21 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:21 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:21 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:21 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:21 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:21
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:21 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
vUPwxbaiA6kWxIWrxcNl
iat
1621613061
exp
1621613121
2021-05-21 16:04:21 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyMSwiaWF0IjoxNjIxNjEzMDYxLCJqdGkiOiJ2VVB3eGJhaUE2a1d4SVdyeGNObCJ9.Z1PXapsNwvu9QZr2F0hxlxRmilK0-qdwDCi_NkCl7Fte7Bw5oT95SLoYYe9pL07V93pq1F9i4NspRtCRVKURCzIvBPt94zVxpPqikJ-UI1DLl9_5SdMNZgDsgbz25PJ1-4skDqK8iRSXOvFXYblUU5C0IzlHYOr_6qB9Yvau3wb_GsfwdoZnEEJrlk--_io2BtCERClCzYx4cqHmVI77GiUn8TKnu5yDX-JHFCvP5qc1XncvaYO3h_heZY5B5kkt1UqYe2zB-AC2kOapCPawYt40p5pFRh3jOktkzK1gJoHWJ7anvgZZTAGSrMyMf1vbGwDLEfJ3dmSvv-2dGW0_lw
2021-05-21 16:04:21
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyMSwiaWF0IjoxNjIxNjEzMDYxLCJqdGkiOiJ2VVB3eGJhaUE2a1d4SVdyeGNObCJ9.Z1PXapsNwvu9QZr2F0hxlxRmilK0-qdwDCi_NkCl7Fte7Bw5oT95SLoYYe9pL07V93pq1F9i4NspRtCRVKURCzIvBPt94zVxpPqikJ-UI1DLl9_5SdMNZgDsgbz25PJ1-4skDqK8iRSXOvFXYblUU5C0IzlHYOr_6qB9Yvau3wb_GsfwdoZnEEJrlk--_io2BtCERClCzYx4cqHmVI77GiUn8TKnu5yDX-JHFCvP5qc1XncvaYO3h_heZY5B5kkt1UqYe2zB-AC2kOapCPawYt40p5pFRh3jOktkzK1gJoHWJ7anvgZZTAGSrMyMf1vbGwDLEfJ3dmSvv-2dGW0_lw
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:21
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyMSwiaWF0IjoxNjIxNjEzMDYxLCJqdGkiOiJ2VVB3eGJhaUE2a1d4SVdyeGNObCJ9.Z1PXapsNwvu9QZr2F0hxlxRmilK0-qdwDCi_NkCl7Fte7Bw5oT95SLoYYe9pL07V93pq1F9i4NspRtCRVKURCzIvBPt94zVxpPqikJ-UI1DLl9_5SdMNZgDsgbz25PJ1-4skDqK8iRSXOvFXYblUU5C0IzlHYOr_6qB9Yvau3wb_GsfwdoZnEEJrlk--_io2BtCERClCzYx4cqHmVI77GiUn8TKnu5yDX-JHFCvP5qc1XncvaYO3h_heZY5B5kkt1UqYe2zB-AC2kOapCPawYt40p5pFRh3jOktkzK1gJoHWJ7anvgZZTAGSrMyMf1vbGwDLEfJ3dmSvv-2dGW0_lw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:22 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:22 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:22 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:22 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:22
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:22 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:22 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:22 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:22 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:22 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:22 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:22 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:22
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:22 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
AqV26v4X6GMYZHxobg0A
iat
1621613062
exp
1621613122
2021-05-21 16:04:22 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyMiwiaWF0IjoxNjIxNjEzMDYyLCJqdGkiOiJBcVYyNnY0WDZHTVlaSHhvYmcwQSJ9.FWlqlkOS7j1Oau49FdGlqOc7av7x_tRSsD5ZetNuEu6dqXZSfCUR1I9T6RINLFhH-T1LBmzQnfVT4m1CC1OeKabYqVgZstPYOMXRu1DrRiUfyoXRAgqXXkdEGmIGxwu7v-_gzb4sgyYAb-4jo_wf4eGusE16J5pgzHudz9ekapQ9veUlT8Ae10DDWh9i8p_DMTwgxPSQA6F6QwIwBevs_hn_8jtpwOevI5bQaBFdH5_2tN5nb3T678HI1BRUTSiy1VI_pHKEP3azums8U3OQ2QtsQRrHiPleQGTbpMPTF5f_kWQdJ1DDcnmTSmqWPag4AqFm_MsThP6NOe2swIeaCw
2021-05-21 16:04:22
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyMiwiaWF0IjoxNjIxNjEzMDYyLCJqdGkiOiJBcVYyNnY0WDZHTVlaSHhvYmcwQSJ9.FWlqlkOS7j1Oau49FdGlqOc7av7x_tRSsD5ZetNuEu6dqXZSfCUR1I9T6RINLFhH-T1LBmzQnfVT4m1CC1OeKabYqVgZstPYOMXRu1DrRiUfyoXRAgqXXkdEGmIGxwu7v-_gzb4sgyYAb-4jo_wf4eGusE16J5pgzHudz9ekapQ9veUlT8Ae10DDWh9i8p_DMTwgxPSQA6F6QwIwBevs_hn_8jtpwOevI5bQaBFdH5_2tN5nb3T678HI1BRUTSiy1VI_pHKEP3azums8U3OQ2QtsQRrHiPleQGTbpMPTF5f_kWQdJ1DDcnmTSmqWPag4AqFm_MsThP6NOe2swIeaCw
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:22
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyMiwiaWF0IjoxNjIxNjEzMDYyLCJqdGkiOiJBcVYyNnY0WDZHTVlaSHhvYmcwQSJ9.FWlqlkOS7j1Oau49FdGlqOc7av7x_tRSsD5ZetNuEu6dqXZSfCUR1I9T6RINLFhH-T1LBmzQnfVT4m1CC1OeKabYqVgZstPYOMXRu1DrRiUfyoXRAgqXXkdEGmIGxwu7v-_gzb4sgyYAb-4jo_wf4eGusE16J5pgzHudz9ekapQ9veUlT8Ae10DDWh9i8p_DMTwgxPSQA6F6QwIwBevs_hn_8jtpwOevI5bQaBFdH5_2tN5nb3T678HI1BRUTSiy1VI_pHKEP3azums8U3OQ2QtsQRrHiPleQGTbpMPTF5f_kWQdJ1DDcnmTSmqWPag4AqFm_MsThP6NOe2swIeaCw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:23 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:23 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:23 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:23 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:23
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:23 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:23 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:23 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:23 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:23 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:23 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:23 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:23
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:23 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
GsPsiPeMhUqrRSXOhac6
iat
1621613063
exp
1621613123
2021-05-21 16:04:23 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyMywiaWF0IjoxNjIxNjEzMDYzLCJqdGkiOiJHc1BzaVBlTWhVcXJSU1hPaGFjNiJ9.kQaY36fxB873c3r0vE2uwDxmt-5UcqUpoUNaQ48bSozU-jv-nDqxW122QZgRKs3OyFURKsLpYVZH88EvMmM2EtPwDiuD6jeTU_28CzlEYNh0Oubdj5Jke22c9tyxLpsRYw0z6k0p9A8qzOMjkXGOVlbny9_bnmM-Puza6i6dFw19hcvnR1JN8wjV8kYzSkaRPBVQnO2nEtIxAJ2pY94BRcIYozGr-zXUmXtI6tECWD-xvC-OyNz0cmtG8Rx_ynFhRSh1cJgtgQIQMAkdtoF8rjsH3Z-vVhJ9Z5NLBM6dLkGEASv14f5-27vDssUle6TMKU4X3AKVfum65KTbRddsvA
2021-05-21 16:04:23
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyMywiaWF0IjoxNjIxNjEzMDYzLCJqdGkiOiJHc1BzaVBlTWhVcXJSU1hPaGFjNiJ9.kQaY36fxB873c3r0vE2uwDxmt-5UcqUpoUNaQ48bSozU-jv-nDqxW122QZgRKs3OyFURKsLpYVZH88EvMmM2EtPwDiuD6jeTU_28CzlEYNh0Oubdj5Jke22c9tyxLpsRYw0z6k0p9A8qzOMjkXGOVlbny9_bnmM-Puza6i6dFw19hcvnR1JN8wjV8kYzSkaRPBVQnO2nEtIxAJ2pY94BRcIYozGr-zXUmXtI6tECWD-xvC-OyNz0cmtG8Rx_ynFhRSh1cJgtgQIQMAkdtoF8rjsH3Z-vVhJ9Z5NLBM6dLkGEASv14f5-27vDssUle6TMKU4X3AKVfum65KTbRddsvA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:23
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyMywiaWF0IjoxNjIxNjEzMDYzLCJqdGkiOiJHc1BzaVBlTWhVcXJSU1hPaGFjNiJ9.kQaY36fxB873c3r0vE2uwDxmt-5UcqUpoUNaQ48bSozU-jv-nDqxW122QZgRKs3OyFURKsLpYVZH88EvMmM2EtPwDiuD6jeTU_28CzlEYNh0Oubdj5Jke22c9tyxLpsRYw0z6k0p9A8qzOMjkXGOVlbny9_bnmM-Puza6i6dFw19hcvnR1JN8wjV8kYzSkaRPBVQnO2nEtIxAJ2pY94BRcIYozGr-zXUmXtI6tECWD-xvC-OyNz0cmtG8Rx_ynFhRSh1cJgtgQIQMAkdtoF8rjsH3Z-vVhJ9Z5NLBM6dLkGEASv14f5-27vDssUle6TMKU4X3AKVfum65KTbRddsvA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCkrNc/pfxEDKDNB1PnzX17On3bsMCE/vN0+M4fwq0ynVvreCmggI3Vhlwd0CbrEzw1NzK8xwUmvPnsOGjXQ3SCkZyuZ64G0ezW9AySm/uw7nu2G84k/fRdcYixSAX8SofVeGO7UwsFbi1HZyFhtjdNruJFCdiaw+se+Eas4RKFvdLt7s3RRTF8BdtO9h4iyVueqDJZO6DpX/kNcl2zVoTUKg0QrjqUFv9sf6M/r/dvG6jdSSsFKHVOv6BmKjEpkwq7idX2/1d3TTuLBW1hTVVohNIpmQ9JrS56OjOLgMaxFf+F/y1GwpS3QSCeYlGT5NMi7JVqcnRyAtaedGMxN7ZjAgMBAAECggEAPvSxKe0sP1vQkfHOOx2NbnITMc0mHPJXYw3Hx86mZmZQgPokd+8NymceimtMpaxp5TJgHFm992xh49RBCKMKROykSOzsVEEnWZpdwCMQGzlhZGLG8c+A/8Rq7NPLLgPUYGExR6lc2kuf1d9wnKmMBQ/qA1jbTXe/SMzEQE2fxi8KFFDRJZ3HAUuzw2TR2SgOYt1/QSts9OIt0m5Dv3SK5BEIPm6QY8Cjy+egXeee+2DVbkr1JX4/yiAz/2JKe50RXUfyenaiFit2aFDG9zxO6m6pjeejMuMa4pvLlTv4TO+1mkoYIwD8PdXaqlUvAI7GgkHzENIMb4jCigiOvHCLmQKBgQDQvrszrK8dQlD6RKCvJc06kTS747mhU3D6xXKTxCT1FDb1dz8wTdlyqwJpwPSJT8nrnXl3Z9JKuVctHi9khO0TpF4m6NtqBSQp4flD8dGrClOOFkisGVFMyCBsB2mS1kj1n+oltBNyysjEZjVavj5OR5NbvrpRP3n7Baq7kd24zwKBgQDJ9CfTqcMfKEyERkYirH4COiIpIt8rsQoNYwDRpsTSuCzBt2Id5iTzXWTc/Yq8D8Ul6pAFg34QGJIGLsUmBuowFI1A3YOWq6i16MW1jFhCnzNcU3fGYq1WiTakU5e2jEd4P30R+8+Z7ipQTcwmVqYhSWgwzefsFp5LHOtyTBimLQKBgA1NGgCg8EedAivwU4zVi84/kmymhh2Rg5F3I2XnCbPUJexePNiHHWQBIZY7hVl6jBNHZYYGR5AbX0KwubReA/1Ma/NuwwxuZ2+Dxq5dqk6Lyecz5E2TD2slFWvMzR1eKif8mJ7uao7V/RUGrj+p/65dQTaHYLfso4krQ0XQdaBhAoGADRZUamQK7/71jnDbZK3W8KABzLakzbkIVLvAttVe1eT3iYovwo5CgL7hpWyMzAkdlopv0NunlLVy6RGo1wEFth3u1XBFccMoCLnP7ibtJUwZ0PbbwTBt2TjFILsGDt9iVkmO+lZeKrSDa3bPLwDYfTm7lcYSLHt+wJFcNKj3w/UCgYEAszQyRNc6qeU+I4IFOf9Nga3iNlKXJmCY/IojBKqq8x2lCzMG6VnMaRkGQEwKF9Tfr40MigMAtG4H/utENOiy2eMMEXp8eyGgqXZuZGEolW8NR2uuD8GrDPU8jQZFvrZVMScqIZodccD3OLOidUUfXHLhN0BFQYxb8JwNkUS8Y24\u003d"
}
2021-05-21 16:04:24 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:24 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:24 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:24 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:24
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:24 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:24 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:24 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:24 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:24 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:24 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:24 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:24
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:24 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
tgefgFm5Mv4mypR0dtR4
iat
1621613064
exp
1621613124
2021-05-21 16:04:24 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNCwiaWF0IjoxNjIxNjEzMDY0LCJqdGkiOiJ0Z2VmZ0ZtNU12NG15cFIwZHRSNCJ9.e_aBskHKQ3UAxePDz916mSnYQXoO4-TGGVA_HzlqLRg7wjX9UJ9jFV4aHhEwLMSnZQQuo6ElhcHAlixva-Pr8JXI1STma-IEsaxv5cw_JjESJC70M-t8pIULQ7UOQBsGeraLpsA2PjfOJrkkaqgHxENh3mH0_NdOwjd_TjDMWSaRcRejQ8amGZYPDWa4CxcxrF_N4VqBrdPZZWxmzEmyueCKvW2uJQZknJTS8M7hngnVlplGwKOq1P2bZyTr1ol2_5rKpcjdJo2Ssp3K81LLZK9C7DO-VBW5lUfoUdUfHt4MXBztlVICvgfOAtg6OK_3wlEFbJEYZuRsltVsvB-hZA
2021-05-21 16:04:24
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNCwiaWF0IjoxNjIxNjEzMDY0LCJqdGkiOiJ0Z2VmZ0ZtNU12NG15cFIwZHRSNCJ9.e_aBskHKQ3UAxePDz916mSnYQXoO4-TGGVA_HzlqLRg7wjX9UJ9jFV4aHhEwLMSnZQQuo6ElhcHAlixva-Pr8JXI1STma-IEsaxv5cw_JjESJC70M-t8pIULQ7UOQBsGeraLpsA2PjfOJrkkaqgHxENh3mH0_NdOwjd_TjDMWSaRcRejQ8amGZYPDWa4CxcxrF_N4VqBrdPZZWxmzEmyueCKvW2uJQZknJTS8M7hngnVlplGwKOq1P2bZyTr1ol2_5rKpcjdJo2Ssp3K81LLZK9C7DO-VBW5lUfoUdUfHt4MXBztlVICvgfOAtg6OK_3wlEFbJEYZuRsltVsvB-hZA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:24
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNCwiaWF0IjoxNjIxNjEzMDY0LCJqdGkiOiJ0Z2VmZ0ZtNU12NG15cFIwZHRSNCJ9.e_aBskHKQ3UAxePDz916mSnYQXoO4-TGGVA_HzlqLRg7wjX9UJ9jFV4aHhEwLMSnZQQuo6ElhcHAlixva-Pr8JXI1STma-IEsaxv5cw_JjESJC70M-t8pIULQ7UOQBsGeraLpsA2PjfOJrkkaqgHxENh3mH0_NdOwjd_TjDMWSaRcRejQ8amGZYPDWa4CxcxrF_N4VqBrdPZZWxmzEmyueCKvW2uJQZknJTS8M7hngnVlplGwKOq1P2bZyTr1ol2_5rKpcjdJo2Ssp3K81LLZK9C7DO-VBW5lUfoUdUfHt4MXBztlVICvgfOAtg6OK_3wlEFbJEYZuRsltVsvB-hZA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "MIICuzCCAaOgAwIBAgIGAXmPq3VTMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjExNjA0MDlaFw0yMjA1MjExNjA0MDlaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSs1z+l/EQMoM0HU+fNfXs6fduwwIT+83T4zh/CrTKdW+t4KaCAjdWGXB3QJusTPDU3MrzHBSa8+ew4aNdDdIKRnK5nrgbR7Nb0DJKb+7Due7YbziT99F1xiLFIBfxKh9V4Y7tTCwVuLUdnIWG2N02u4kUJ2JrD6x74RqzhEoW90u3uzdFFMXwF2072HiLJW56oMlk7oOlf+Q1yXbNWhNQqDRCuOpQW/2x/oz+v928bqN1JKwUodU6/oGYqMSmTCruJ1fb/V3dNO4sFbWFNVWiE0imZD0mtLno6M4uAxrEV/4X/LUbClLdBIJ5iUZPk0yLslWpydHIC1p50YzE3tmMCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEABQlQUM7hwUS/T0jzsne/BwVUA6cn/Qd1NRu5jLZFt7b10FQdW/DgeKvwNq2QawbLK3q3rd/ZZBtlKRWkROWfhVhI7rEG1wsxFVR4qe9+l+e7ltGSkapIS71U9qeXFNEgifhgTQQRKAbGztk5jjUl8krglAjQQJpai5hI48g0CKoIYQgFPVeD6UstVgOrFlz2ufghYfTja41X3yJqXg634xDXToUe36QYTsXSMWWroLhm+zEErAtBci92Pgtap0TwX3ZhPY+wySpW/kw5vq59JuGlaktnprbEIdFbeaF3BEKUwgUrGkyMJNnYEwpw1Neli1IEJbndA6S5efcREadFUA\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:25 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:24 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:25 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:25 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:25
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:25 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:25 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:25 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:25 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:25 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:25 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:25 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:25
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:25 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
DUjIj6LItHnUUFRQtZu0
iat
1621613065
exp
1621613125
2021-05-21 16:04:25 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNSwiaWF0IjoxNjIxNjEzMDY1LCJqdGkiOiJEVWpJajZMSXRIblVVRlJRdFp1MCJ9.WGNTJAWjHd0qbtNMfhlgvkVtuLKzpLwmt77t54DOOnEI-i-EwQpb3zzsKun69YcNyk9Ud85fo9982JC1AHm8cj2KxG6_KbbHLYf6sE-dnQ_Zlv2oFj4BK0ixgXsIq2hlm-_kBTVOuc2h9s9fiCos7JDZlAVSNWbV047nNX7vnufEhXLMD1n9fo6DaNEm32QG4f-qo54_80BMEC50goBo1v-zI2J53INxtM0yU8JgkjNN4K85j0VCnkgd-w4frNjk5GAqDAds4w3Ql061UTYcc0z0RSO4cu6sLRnmmtZ7iOKhGlHrewIk3nJLQnBxHAXuwn-J9nd2_PQ7zHN9xR3pCA
2021-05-21 16:04:25
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNSwiaWF0IjoxNjIxNjEzMDY1LCJqdGkiOiJEVWpJajZMSXRIblVVRlJRdFp1MCJ9.WGNTJAWjHd0qbtNMfhlgvkVtuLKzpLwmt77t54DOOnEI-i-EwQpb3zzsKun69YcNyk9Ud85fo9982JC1AHm8cj2KxG6_KbbHLYf6sE-dnQ_Zlv2oFj4BK0ixgXsIq2hlm-_kBTVOuc2h9s9fiCos7JDZlAVSNWbV047nNX7vnufEhXLMD1n9fo6DaNEm32QG4f-qo54_80BMEC50goBo1v-zI2J53INxtM0yU8JgkjNN4K85j0VCnkgd-w4frNjk5GAqDAds4w3Ql061UTYcc0z0RSO4cu6sLRnmmtZ7iOKhGlHrewIk3nJLQnBxHAXuwn-J9nd2_PQ7zHN9xR3pCA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:25
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNSwiaWF0IjoxNjIxNjEzMDY1LCJqdGkiOiJEVWpJajZMSXRIblVVRlJRdFp1MCJ9.WGNTJAWjHd0qbtNMfhlgvkVtuLKzpLwmt77t54DOOnEI-i-EwQpb3zzsKun69YcNyk9Ud85fo9982JC1AHm8cj2KxG6_KbbHLYf6sE-dnQ_Zlv2oFj4BK0ixgXsIq2hlm-_kBTVOuc2h9s9fiCos7JDZlAVSNWbV047nNX7vnufEhXLMD1n9fo6DaNEm32QG4f-qo54_80BMEC50goBo1v-zI2J53INxtM0yU8JgkjNN4K85j0VCnkgd-w4frNjk5GAqDAds4w3Ql061UTYcc0z0RSO4cu6sLRnmmtZ7iOKhGlHrewIk3nJLQnBxHAXuwn-J9nd2_PQ7zHN9xR3pCA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:25 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:25 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:25 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:25 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:25
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:25 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:25 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:25 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:25 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:25 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:25 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:25 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:25
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:25 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
8g6OrPebFMUUp4FNpEjL
iat
1621613065
exp
1621613125
2021-05-21 16:04:25 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNSwiaWF0IjoxNjIxNjEzMDY1LCJqdGkiOiI4ZzZPclBlYkZNVVVwNEZOcEVqTCJ9.Cyil89zSsi1SB9vWR1wNEwvab1S8HA4dgCivoht_o-HIaYdie536AVJOgHbxQNRXHZqvlDOadzcqiWoHK4ToFMPlec1Vd_JtJU7IIZCSBQetlDcKH3EO7tow-a2IUL7I02iw-jvwM-ddgzBSnFoN0_ZjQ0YK2Fx8HwOr8Zq9XNv2gKADKFgPFwZSuA73MyCPTkDMSly4Ej7JsMzlhcznCw171aqdRhtG32I0oFxMKgqXRMb6mQ4IGGN58KIlL12teSCh9ZLuNV11yxI_oU60eYV7SujE-MSDVCvSJTEveMMjgMo0ymBF-k368zKc8Hhhso798AA4IhEhfn98elHnpw
2021-05-21 16:04:25
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNSwiaWF0IjoxNjIxNjEzMDY1LCJqdGkiOiI4ZzZPclBlYkZNVVVwNEZOcEVqTCJ9.Cyil89zSsi1SB9vWR1wNEwvab1S8HA4dgCivoht_o-HIaYdie536AVJOgHbxQNRXHZqvlDOadzcqiWoHK4ToFMPlec1Vd_JtJU7IIZCSBQetlDcKH3EO7tow-a2IUL7I02iw-jvwM-ddgzBSnFoN0_ZjQ0YK2Fx8HwOr8Zq9XNv2gKADKFgPFwZSuA73MyCPTkDMSly4Ej7JsMzlhcznCw171aqdRhtG32I0oFxMKgqXRMb6mQ4IGGN58KIlL12teSCh9ZLuNV11yxI_oU60eYV7SujE-MSDVCvSJTEveMMjgMo0ymBF-k368zKc8Hhhso798AA4IhEhfn98elHnpw
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:25
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNSwiaWF0IjoxNjIxNjEzMDY1LCJqdGkiOiI4ZzZPclBlYkZNVVVwNEZOcEVqTCJ9.Cyil89zSsi1SB9vWR1wNEwvab1S8HA4dgCivoht_o-HIaYdie536AVJOgHbxQNRXHZqvlDOadzcqiWoHK4ToFMPlec1Vd_JtJU7IIZCSBQetlDcKH3EO7tow-a2IUL7I02iw-jvwM-ddgzBSnFoN0_ZjQ0YK2Fx8HwOr8Zq9XNv2gKADKFgPFwZSuA73MyCPTkDMSly4Ej7JsMzlhcznCw171aqdRhtG32I0oFxMKgqXRMb6mQ4IGGN58KIlL12teSCh9ZLuNV11yxI_oU60eYV7SujE-MSDVCvSJTEveMMjgMo0ymBF-k368zKc8Hhhso798AA4IhEhfn98elHnpw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:26 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:26 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:26 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:26 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:26
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:26 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:26 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:26 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:26 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:26 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:26 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:26 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:26
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:26 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
zGnNsHBHGXS5RZEVugF2
iat
1621613066
exp
1621613126
2021-05-21 16:04:26 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNiwiaWF0IjoxNjIxNjEzMDY2LCJqdGkiOiJ6R25Oc0hCSEdYUzVSWkVWdWdGMiJ9.XvbfEsXSLWlO6jGP08peLPAxEvpbk1goNTWT_gADen0pvGsPrPJtr66SRJuJNzpmdrP2jWHRyEc247SJl4dTvQGmOa4IXcMZlkttjWaBCvMY_BOlXA2rtnyQqT4DeDv8iDeGUwTrBvM0TsGjUfHMJ364U1zL7ZYU_b9m0BqdkcA68Gdd3M5HjB4EKrKP6blFin67uw3PVhCm-3a8JQp1UxVAhLHkSUiUZxS9fLsHUl3lIrVPBxFUDO5HqU_5Q7Lqe1RyBLQwWkZUbYEfqiqflBlYzJ_ZQLC5MRm-t3vYP9kOaL3sn6UlFA6WYThk1P4JDvkaNXArq4FIv1cnvpnjEA
2021-05-21 16:04:26
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNiwiaWF0IjoxNjIxNjEzMDY2LCJqdGkiOiJ6R25Oc0hCSEdYUzVSWkVWdWdGMiJ9.XvbfEsXSLWlO6jGP08peLPAxEvpbk1goNTWT_gADen0pvGsPrPJtr66SRJuJNzpmdrP2jWHRyEc247SJl4dTvQGmOa4IXcMZlkttjWaBCvMY_BOlXA2rtnyQqT4DeDv8iDeGUwTrBvM0TsGjUfHMJ364U1zL7ZYU_b9m0BqdkcA68Gdd3M5HjB4EKrKP6blFin67uw3PVhCm-3a8JQp1UxVAhLHkSUiUZxS9fLsHUl3lIrVPBxFUDO5HqU_5Q7Lqe1RyBLQwWkZUbYEfqiqflBlYzJ_ZQLC5MRm-t3vYP9kOaL3sn6UlFA6WYThk1P4JDvkaNXArq4FIv1cnvpnjEA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:26
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNiwiaWF0IjoxNjIxNjEzMDY2LCJqdGkiOiJ6R25Oc0hCSEdYUzVSWkVWdWdGMiJ9.XvbfEsXSLWlO6jGP08peLPAxEvpbk1goNTWT_gADen0pvGsPrPJtr66SRJuJNzpmdrP2jWHRyEc247SJl4dTvQGmOa4IXcMZlkttjWaBCvMY_BOlXA2rtnyQqT4DeDv8iDeGUwTrBvM0TsGjUfHMJ364U1zL7ZYU_b9m0BqdkcA68Gdd3M5HjB4EKrKP6blFin67uw3PVhCm-3a8JQp1UxVAhLHkSUiUZxS9fLsHUl3lIrVPBxFUDO5HqU_5Q7Lqe1RyBLQwWkZUbYEfqiqflBlYzJ_ZQLC5MRm-t3vYP9kOaL3sn6UlFA6WYThk1P4JDvkaNXArq4FIv1cnvpnjEA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:27 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:27 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:27 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:27 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:27
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:27 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:27 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:27 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:27 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:27 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:27 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:27 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:27
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:27 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
UTF1izrcJJ3tqQi44Jky
iat
1621613067
exp
1621613127
2021-05-21 16:04:27 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNywiaWF0IjoxNjIxNjEzMDY3LCJqdGkiOiJVVEYxaXpyY0pKM3RxUWk0NEpreSJ9.BPIpU9mv6RF2C5tg1tyF5AUhSiNXH5u_WYXBrV9F9x6jbQRlOYyLwRA9uzcqcmNGFjEWNVtcIfH45lad7cyMePQuE3gqjru2Ja3sZblCqafuSCejmNb-8BhlJyVifNMbLuwgRTeqaEz_PC7SSlsokn72asu3Y7msLKifozBojbyoLS_Bb02KsjrsaWtJsEbf11wviU7pohMefHIg-6l8AiwznP6AitLUZh5N-EcRRHMZxx0ociEiECb4LGaRFc2x7PAM9DDe-YAJwvZloc71UtfJmxNteH8vi6NjYNpcOObe1apShHm7t3JcKPI-WCC3JV9suCP7VJf1i_jG848uaw
2021-05-21 16:04:27
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNywiaWF0IjoxNjIxNjEzMDY3LCJqdGkiOiJVVEYxaXpyY0pKM3RxUWk0NEpreSJ9.BPIpU9mv6RF2C5tg1tyF5AUhSiNXH5u_WYXBrV9F9x6jbQRlOYyLwRA9uzcqcmNGFjEWNVtcIfH45lad7cyMePQuE3gqjru2Ja3sZblCqafuSCejmNb-8BhlJyVifNMbLuwgRTeqaEz_PC7SSlsokn72asu3Y7msLKifozBojbyoLS_Bb02KsjrsaWtJsEbf11wviU7pohMefHIg-6l8AiwznP6AitLUZh5N-EcRRHMZxx0ociEiECb4LGaRFc2x7PAM9DDe-YAJwvZloc71UtfJmxNteH8vi6NjYNpcOObe1apShHm7t3JcKPI-WCC3JV9suCP7VJf1i_jG848uaw
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:27
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyNywiaWF0IjoxNjIxNjEzMDY3LCJqdGkiOiJVVEYxaXpyY0pKM3RxUWk0NEpreSJ9.BPIpU9mv6RF2C5tg1tyF5AUhSiNXH5u_WYXBrV9F9x6jbQRlOYyLwRA9uzcqcmNGFjEWNVtcIfH45lad7cyMePQuE3gqjru2Ja3sZblCqafuSCejmNb-8BhlJyVifNMbLuwgRTeqaEz_PC7SSlsokn72asu3Y7msLKifozBojbyoLS_Bb02KsjrsaWtJsEbf11wviU7pohMefHIg-6l8AiwznP6AitLUZh5N-EcRRHMZxx0ociEiECb4LGaRFc2x7PAM9DDe-YAJwvZloc71UtfJmxNteH8vi6NjYNpcOObe1apShHm7t3JcKPI-WCC3JV9suCP7VJf1i_jG848uaw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:28 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:28 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:28 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:28 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:28
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:28 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:28 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:28 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:28 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:28 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:28 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:28 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:28
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:28 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
G6rkW8svwURmn3y606Ll
iat
1621613068
exp
1621613128
2021-05-21 16:04:28 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyOCwiaWF0IjoxNjIxNjEzMDY4LCJqdGkiOiJHNnJrVzhzdndVUm1uM3k2MDZMbCJ9.YDGvIynaK715udTF7prO85wlDRTpSCIZWuX3HbJa2JotFXqSfFu1wYTvY4-j8LUf8XADwOvuweP0AGA4qpc9vQPmct5dnmqPyxVkRBy6efqfi45bbJddnODcKH8qISFg0bMgpVV-iSs5Ewpi0NPkL4SyNKdf8kdKSrXFsZIqF9VTrxWN3Wodt_6FM4zCA3kng6t9T8_T0Tvqb7fYCtgDR0hzL9MbX_bOqocnJY1eLMF4eGMF6Q0ThrhUfwTcHquiZKMzE-eMBEEgBY3PMscuWbHzH8dlZ5nHXN8NKyGDLYzHaZzHFavhxqBSPi8-7IILZPWKKPm_HdwjAnGJ0kFR_w
2021-05-21 16:04:28
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyOCwiaWF0IjoxNjIxNjEzMDY4LCJqdGkiOiJHNnJrVzhzdndVUm1uM3k2MDZMbCJ9.YDGvIynaK715udTF7prO85wlDRTpSCIZWuX3HbJa2JotFXqSfFu1wYTvY4-j8LUf8XADwOvuweP0AGA4qpc9vQPmct5dnmqPyxVkRBy6efqfi45bbJddnODcKH8qISFg0bMgpVV-iSs5Ewpi0NPkL4SyNKdf8kdKSrXFsZIqF9VTrxWN3Wodt_6FM4zCA3kng6t9T8_T0Tvqb7fYCtgDR0hzL9MbX_bOqocnJY1eLMF4eGMF6Q0ThrhUfwTcHquiZKMzE-eMBEEgBY3PMscuWbHzH8dlZ5nHXN8NKyGDLYzHaZzHFavhxqBSPi8-7IILZPWKKPm_HdwjAnGJ0kFR_w
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:28
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyOCwiaWF0IjoxNjIxNjEzMDY4LCJqdGkiOiJHNnJrVzhzdndVUm1uM3k2MDZMbCJ9.YDGvIynaK715udTF7prO85wlDRTpSCIZWuX3HbJa2JotFXqSfFu1wYTvY4-j8LUf8XADwOvuweP0AGA4qpc9vQPmct5dnmqPyxVkRBy6efqfi45bbJddnODcKH8qISFg0bMgpVV-iSs5Ewpi0NPkL4SyNKdf8kdKSrXFsZIqF9VTrxWN3Wodt_6FM4zCA3kng6t9T8_T0Tvqb7fYCtgDR0hzL9MbX_bOqocnJY1eLMF4eGMF6Q0ThrhUfwTcHquiZKMzE-eMBEEgBY3PMscuWbHzH8dlZ5nHXN8NKyGDLYzHaZzHFavhxqBSPi8-7IILZPWKKPm_HdwjAnGJ0kFR_w&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:29 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:29 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:29 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:29 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:29
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:29 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:29 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:29 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:29 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:29 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:29 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:29 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:29
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:29 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
YX8sFcc2tSof1WDi4Lal
iat
1621613069
exp
1621613129
2021-05-21 16:04:29 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyOSwiaWF0IjoxNjIxNjEzMDY5LCJqdGkiOiJZWDhzRmNjMnRTb2YxV0RpNExhbCJ9.ZBVqnxx0c50-FzLaucscvO68yK8Zra7qU9bBGFtnihdHCeSvwYehPdDV9u2jezSiyut9_WaUAz2p6wwb5EXc_wtCm_zorjYtd4ebE0XdswFN-s4x2iEy7rRuabp12cgMFwvcOeXbRg1SMe0ZPWeTbNwS8eQkH-S-b24in-MXLiTh1h9szP82DaI14DRAp6TUDjBQzTZLtzPHxtzl0QIJGgPfVSIYt4eqEz4hYmTC2gHgqhwVTfwny5KB7zsO7CBCBN668s6eqkdxAuk-fIcatrkaHyfgOhb4nZ_gbqE4EiA_R7ni427jDLRh8bbDZDRRM5ZwfjmMWlXRQwxFC2WHxg
2021-05-21 16:04:29
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyOSwiaWF0IjoxNjIxNjEzMDY5LCJqdGkiOiJZWDhzRmNjMnRTb2YxV0RpNExhbCJ9.ZBVqnxx0c50-FzLaucscvO68yK8Zra7qU9bBGFtnihdHCeSvwYehPdDV9u2jezSiyut9_WaUAz2p6wwb5EXc_wtCm_zorjYtd4ebE0XdswFN-s4x2iEy7rRuabp12cgMFwvcOeXbRg1SMe0ZPWeTbNwS8eQkH-S-b24in-MXLiTh1h9szP82DaI14DRAp6TUDjBQzTZLtzPHxtzl0QIJGgPfVSIYt4eqEz4hYmTC2gHgqhwVTfwny5KB7zsO7CBCBN668s6eqkdxAuk-fIcatrkaHyfgOhb4nZ_gbqE4EiA_R7ni427jDLRh8bbDZDRRM5ZwfjmMWlXRQwxFC2WHxg
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:29
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEyOSwiaWF0IjoxNjIxNjEzMDY5LCJqdGkiOiJZWDhzRmNjMnRTb2YxV0RpNExhbCJ9.ZBVqnxx0c50-FzLaucscvO68yK8Zra7qU9bBGFtnihdHCeSvwYehPdDV9u2jezSiyut9_WaUAz2p6wwb5EXc_wtCm_zorjYtd4ebE0XdswFN-s4x2iEy7rRuabp12cgMFwvcOeXbRg1SMe0ZPWeTbNwS8eQkH-S-b24in-MXLiTh1h9szP82DaI14DRAp6TUDjBQzTZLtzPHxtzl0QIJGgPfVSIYt4eqEz4hYmTC2gHgqhwVTfwny5KB7zsO7CBCBN668s6eqkdxAuk-fIcatrkaHyfgOhb4nZ_gbqE4EiA_R7ni427jDLRh8bbDZDRRM5ZwfjmMWlXRQwxFC2WHxg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCkrNc/pfxEDKDNB1PnzX17On3bsMCE/vN0+M4fwq0ynVvreCmggI3Vhlwd0CbrEzw1NzK8xwUmvPnsOGjXQ3SCkZyuZ64G0ezW9AySm/uw7nu2G84k/fRdcYixSAX8SofVeGO7UwsFbi1HZyFhtjdNruJFCdiaw+se+Eas4RKFvdLt7s3RRTF8BdtO9h4iyVueqDJZO6DpX/kNcl2zVoTUKg0QrjqUFv9sf6M/r/dvG6jdSSsFKHVOv6BmKjEpkwq7idX2/1d3TTuLBW1hTVVohNIpmQ9JrS56OjOLgMaxFf+F/y1GwpS3QSCeYlGT5NMi7JVqcnRyAtaedGMxN7ZjAgMBAAECggEAPvSxKe0sP1vQkfHOOx2NbnITMc0mHPJXYw3Hx86mZmZQgPokd+8NymceimtMpaxp5TJgHFm992xh49RBCKMKROykSOzsVEEnWZpdwCMQGzlhZGLG8c+A/8Rq7NPLLgPUYGExR6lc2kuf1d9wnKmMBQ/qA1jbTXe/SMzEQE2fxi8KFFDRJZ3HAUuzw2TR2SgOYt1/QSts9OIt0m5Dv3SK5BEIPm6QY8Cjy+egXeee+2DVbkr1JX4/yiAz/2JKe50RXUfyenaiFit2aFDG9zxO6m6pjeejMuMa4pvLlTv4TO+1mkoYIwD8PdXaqlUvAI7GgkHzENIMb4jCigiOvHCLmQKBgQDQvrszrK8dQlD6RKCvJc06kTS747mhU3D6xXKTxCT1FDb1dz8wTdlyqwJpwPSJT8nrnXl3Z9JKuVctHi9khO0TpF4m6NtqBSQp4flD8dGrClOOFkisGVFMyCBsB2mS1kj1n+oltBNyysjEZjVavj5OR5NbvrpRP3n7Baq7kd24zwKBgQDJ9CfTqcMfKEyERkYirH4COiIpIt8rsQoNYwDRpsTSuCzBt2Id5iTzXWTc/Yq8D8Ul6pAFg34QGJIGLsUmBuowFI1A3YOWq6i16MW1jFhCnzNcU3fGYq1WiTakU5e2jEd4P30R+8+Z7ipQTcwmVqYhSWgwzefsFp5LHOtyTBimLQKBgA1NGgCg8EedAivwU4zVi84/kmymhh2Rg5F3I2XnCbPUJexePNiHHWQBIZY7hVl6jBNHZYYGR5AbX0KwubReA/1Ma/NuwwxuZ2+Dxq5dqk6Lyecz5E2TD2slFWvMzR1eKif8mJ7uao7V/RUGrj+p/65dQTaHYLfso4krQ0XQdaBhAoGADRZUamQK7/71jnDbZK3W8KABzLakzbkIVLvAttVe1eT3iYovwo5CgL7hpWyMzAkdlopv0NunlLVy6RGo1wEFth3u1XBFccMoCLnP7ibtJUwZ0PbbwTBt2TjFILsGDt9iVkmO+lZeKrSDa3bPLwDYfTm7lcYSLHt+wJFcNKj3w/UCgYEAszQyRNc6qeU+I4IFOf9Nga3iNlKXJmCY/IojBKqq8x2lCzMG6VnMaRkGQEwKF9Tfr40MigMAtG4H/utENOiy2eMMEXp8eyGgqXZuZGEolW8NR2uuD8GrDPU8jQZFvrZVMScqIZodccD3OLOidUUfXHLhN0BFQYxb8JwNkUS8Y24\u003d"
}
2021-05-21 16:04:30 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:30 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:30 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:30 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:30
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:30 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:30 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:30 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:30 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:30 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:30 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:30 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:30
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:30 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
lXH8TLYkEbU5sCBTKzBO
iat
1621613070
exp
1621613130
2021-05-21 16:04:30 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMCwiaWF0IjoxNjIxNjEzMDcwLCJqdGkiOiJsWEg4VExZa0ViVTVzQ0JUS3pCTyJ9.JmV7Adr8IadN_P7sT2Fgz0hn7apCz1lmgdSumE0on8BDUydbUZlOh8yx-AsvNopBxfMcjB5sckpoqsd94N10nbPf_rdAD9j-989Kfxugo5AgZMQ7weIZ7p8gpMopXtFFKmU0V3Ymq1dlPOgWOWPOQVAQp55Kod0fBWyHiX8Tpr5fbxfloG0aRm5aFazMjKP7DHLZpSizkt5G7A4OylWhaUlAp7WstUKbuH1mOU3TPFW9th77SmBe5kDVmh9g_-sU0g-FZHTO2qX3A6mO6J9mvd5loKaoHUtC4lUqikPZOn6YQY7bSSN_pYAW7OPJo0j3p_fYVcEtpgpGHNtvQu1mDg
2021-05-21 16:04:30
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMCwiaWF0IjoxNjIxNjEzMDcwLCJqdGkiOiJsWEg4VExZa0ViVTVzQ0JUS3pCTyJ9.JmV7Adr8IadN_P7sT2Fgz0hn7apCz1lmgdSumE0on8BDUydbUZlOh8yx-AsvNopBxfMcjB5sckpoqsd94N10nbPf_rdAD9j-989Kfxugo5AgZMQ7weIZ7p8gpMopXtFFKmU0V3Ymq1dlPOgWOWPOQVAQp55Kod0fBWyHiX8Tpr5fbxfloG0aRm5aFazMjKP7DHLZpSizkt5G7A4OylWhaUlAp7WstUKbuH1mOU3TPFW9th77SmBe5kDVmh9g_-sU0g-FZHTO2qX3A6mO6J9mvd5loKaoHUtC4lUqikPZOn6YQY7bSSN_pYAW7OPJo0j3p_fYVcEtpgpGHNtvQu1mDg
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:30
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMCwiaWF0IjoxNjIxNjEzMDcwLCJqdGkiOiJsWEg4VExZa0ViVTVzQ0JUS3pCTyJ9.JmV7Adr8IadN_P7sT2Fgz0hn7apCz1lmgdSumE0on8BDUydbUZlOh8yx-AsvNopBxfMcjB5sckpoqsd94N10nbPf_rdAD9j-989Kfxugo5AgZMQ7weIZ7p8gpMopXtFFKmU0V3Ymq1dlPOgWOWPOQVAQp55Kod0fBWyHiX8Tpr5fbxfloG0aRm5aFazMjKP7DHLZpSizkt5G7A4OylWhaUlAp7WstUKbuH1mOU3TPFW9th77SmBe5kDVmh9g_-sU0g-FZHTO2qX3A6mO6J9mvd5loKaoHUtC4lUqikPZOn6YQY7bSSN_pYAW7OPJo0j3p_fYVcEtpgpGHNtvQu1mDg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:31 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:30 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:31 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:31 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:31
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:31 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:31 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:31 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:31 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:31 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:31 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:31 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:31
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:31 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
SLHgUBTXj0gG4go4pxC7
iat
1621613071
exp
1621613131
2021-05-21 16:04:31 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMSwiaWF0IjoxNjIxNjEzMDcxLCJqdGkiOiJTTEhnVUJUWGowZ0c0Z280cHhDNyJ9.FfXZxMb9kyTdDNNDYRjgwg08jeQL8CBsR63-CRqrLzRzSXkOHeH3Z7FM_55iNPipWa_4H4xyPcRzTgjnIOK1mzVAZi8vaA1ggTIfaJ5p_NoETVz_u-pEGaB37VcyUGXntjTMkcCcDXfMyzZwgZIVpzHXBFXI1EaBTL7DKecw-de3c2Vz-aVsy9FdxFRp4BuU8I9AEoLgxJ4pTOy10Wur9vPPGhen4FQevGX57YTJGJpJyqyopnuGzl9LrP9UTMy_HzVz-Uap5u1KLk8GtyjqKvgZtJWV88xVVOoDXO0vzGIna8VHDvyZAm4FeP9KTr4hptB9BVqgGZmV93zEFqVxpA
2021-05-21 16:04:31
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMSwiaWF0IjoxNjIxNjEzMDcxLCJqdGkiOiJTTEhnVUJUWGowZ0c0Z280cHhDNyJ9.FfXZxMb9kyTdDNNDYRjgwg08jeQL8CBsR63-CRqrLzRzSXkOHeH3Z7FM_55iNPipWa_4H4xyPcRzTgjnIOK1mzVAZi8vaA1ggTIfaJ5p_NoETVz_u-pEGaB37VcyUGXntjTMkcCcDXfMyzZwgZIVpzHXBFXI1EaBTL7DKecw-de3c2Vz-aVsy9FdxFRp4BuU8I9AEoLgxJ4pTOy10Wur9vPPGhen4FQevGX57YTJGJpJyqyopnuGzl9LrP9UTMy_HzVz-Uap5u1KLk8GtyjqKvgZtJWV88xVVOoDXO0vzGIna8VHDvyZAm4FeP9KTr4hptB9BVqgGZmV93zEFqVxpA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:31
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMSwiaWF0IjoxNjIxNjEzMDcxLCJqdGkiOiJTTEhnVUJUWGowZ0c0Z280cHhDNyJ9.FfXZxMb9kyTdDNNDYRjgwg08jeQL8CBsR63-CRqrLzRzSXkOHeH3Z7FM_55iNPipWa_4H4xyPcRzTgjnIOK1mzVAZi8vaA1ggTIfaJ5p_NoETVz_u-pEGaB37VcyUGXntjTMkcCcDXfMyzZwgZIVpzHXBFXI1EaBTL7DKecw-de3c2Vz-aVsy9FdxFRp4BuU8I9AEoLgxJ4pTOy10Wur9vPPGhen4FQevGX57YTJGJpJyqyopnuGzl9LrP9UTMy_HzVz-Uap5u1KLk8GtyjqKvgZtJWV88xVVOoDXO0vzGIna8VHDvyZAm4FeP9KTr4hptB9BVqgGZmV93zEFqVxpA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "MIICuzCCAaOgAwIBAgIGAXmPq3VTMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjExNjA0MDlaFw0yMjA1MjExNjA0MDlaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSs1z+l/EQMoM0HU+fNfXs6fduwwIT+83T4zh/CrTKdW+t4KaCAjdWGXB3QJusTPDU3MrzHBSa8+ew4aNdDdIKRnK5nrgbR7Nb0DJKb+7Due7YbziT99F1xiLFIBfxKh9V4Y7tTCwVuLUdnIWG2N02u4kUJ2JrD6x74RqzhEoW90u3uzdFFMXwF2072HiLJW56oMlk7oOlf+Q1yXbNWhNQqDRCuOpQW/2x/oz+v928bqN1JKwUodU6/oGYqMSmTCruJ1fb/V3dNO4sFbWFNVWiE0imZD0mtLno6M4uAxrEV/4X/LUbClLdBIJ5iUZPk0yLslWpydHIC1p50YzE3tmMCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEABQlQUM7hwUS/T0jzsne/BwVUA6cn/Qd1NRu5jLZFt7b10FQdW/DgeKvwNq2QawbLK3q3rd/ZZBtlKRWkROWfhVhI7rEG1wsxFVR4qe9+l+e7ltGSkapIS71U9qeXFNEgifhgTQQRKAbGztk5jjUl8krglAjQQJpai5hI48g0CKoIYQgFPVeD6UstVgOrFlz2ufghYfTja41X3yJqXg634xDXToUe36QYTsXSMWWroLhm+zEErAtBci92Pgtap0TwX3ZhPY+wySpW/kw5vq59JuGlaktnprbEIdFbeaF3BEKUwgUrGkyMJNnYEwpw1Neli1IEJbndA6S5efcREadFUA\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:31 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:31 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:31 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:31 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:31
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:31 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:31 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:31 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:31 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:31 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:31 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:31 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:31
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:31 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
KUbAfmmLWAzqE7oHroDP
iat
1621613071
exp
1621613131
2021-05-21 16:04:31 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMSwiaWF0IjoxNjIxNjEzMDcxLCJqdGkiOiJLVWJBZm1tTFdBenFFN29Icm9EUCJ9.hMvHW7dvuC2GqXg5Jk3AK5c-mB2e-eH4lNubwxSrBkzqEhxN1JEedhZHBqjK5Ob_S6hynE8PhHMOAcvGy4ErI5A9nd5WztwXZFIjzhQlOc6tsZ5r56kCccaiTaAsXNRGSIHz6zvqZFikOR4kwEbvEMJOYrlHO7lGrRTX6k31u5qiY7bq98pgIXoCwDvV40emPEuaiPimmhNhCDYa-qMhDpKv9JMLqPAkHiBu_oAgZhZC0XGdeZzIx78apDrozkcK42XzwY5E7EHzi6YVeXJyJUXz3mhrpfJCp_HyHIupsAheMHvB0CbSgJgOVDLAaT-3c_9EXPdHwi8BbCty-vYfJg
2021-05-21 16:04:31
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMSwiaWF0IjoxNjIxNjEzMDcxLCJqdGkiOiJLVWJBZm1tTFdBenFFN29Icm9EUCJ9.hMvHW7dvuC2GqXg5Jk3AK5c-mB2e-eH4lNubwxSrBkzqEhxN1JEedhZHBqjK5Ob_S6hynE8PhHMOAcvGy4ErI5A9nd5WztwXZFIjzhQlOc6tsZ5r56kCccaiTaAsXNRGSIHz6zvqZFikOR4kwEbvEMJOYrlHO7lGrRTX6k31u5qiY7bq98pgIXoCwDvV40emPEuaiPimmhNhCDYa-qMhDpKv9JMLqPAkHiBu_oAgZhZC0XGdeZzIx78apDrozkcK42XzwY5E7EHzi6YVeXJyJUXz3mhrpfJCp_HyHIupsAheMHvB0CbSgJgOVDLAaT-3c_9EXPdHwi8BbCty-vYfJg
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:31
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMSwiaWF0IjoxNjIxNjEzMDcxLCJqdGkiOiJLVWJBZm1tTFdBenFFN29Icm9EUCJ9.hMvHW7dvuC2GqXg5Jk3AK5c-mB2e-eH4lNubwxSrBkzqEhxN1JEedhZHBqjK5Ob_S6hynE8PhHMOAcvGy4ErI5A9nd5WztwXZFIjzhQlOc6tsZ5r56kCccaiTaAsXNRGSIHz6zvqZFikOR4kwEbvEMJOYrlHO7lGrRTX6k31u5qiY7bq98pgIXoCwDvV40emPEuaiPimmhNhCDYa-qMhDpKv9JMLqPAkHiBu_oAgZhZC0XGdeZzIx78apDrozkcK42XzwY5E7EHzi6YVeXJyJUXz3mhrpfJCp_HyHIupsAheMHvB0CbSgJgOVDLAaT-3c_9EXPdHwi8BbCty-vYfJg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:32 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:32 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:32 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:32 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:32
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:32 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:32 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:32 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:32 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:32 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:32 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:32 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:32
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:32 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
WBmlR2hzzTvwXv0CflwJ
iat
1621613072
exp
1621613132
2021-05-21 16:04:32 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMiwiaWF0IjoxNjIxNjEzMDcyLCJqdGkiOiJXQm1sUjJoenpUdndYdjBDZmx3SiJ9.l89fn8phi0rjYLw7N41qD51d9j7G4hb_Ic1j_7iYsadpZfNZJMH5vTMqx5BE_Mxo9Br6OHDzvVtIFVVbyplbdJTZHQHaPlzTPZrtPYbihJ9S4vQEb9dW1C71JpGmXzQcrl_w3vQp3qMIKSDIw3BkM0YtLylZLOjrlwXz80Mnfjeels1qgHVV_ySg-SzJ5ZBYbLGvWvrpFMj5R2V6xbllqrC-G2OnY0_pGbuOnXUbBffzh8wzdPhASm_mhkK8DGiNg_U3qK3e6Nf9U9E0Xa0M36r4YFdb5t08BDa9mnjdmKO_SGtQbrO-VBC8YcurFXNQyTu0EecitUN-RIuL4LljDg
2021-05-21 16:04:32
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMiwiaWF0IjoxNjIxNjEzMDcyLCJqdGkiOiJXQm1sUjJoenpUdndYdjBDZmx3SiJ9.l89fn8phi0rjYLw7N41qD51d9j7G4hb_Ic1j_7iYsadpZfNZJMH5vTMqx5BE_Mxo9Br6OHDzvVtIFVVbyplbdJTZHQHaPlzTPZrtPYbihJ9S4vQEb9dW1C71JpGmXzQcrl_w3vQp3qMIKSDIw3BkM0YtLylZLOjrlwXz80Mnfjeels1qgHVV_ySg-SzJ5ZBYbLGvWvrpFMj5R2V6xbllqrC-G2OnY0_pGbuOnXUbBffzh8wzdPhASm_mhkK8DGiNg_U3qK3e6Nf9U9E0Xa0M36r4YFdb5t08BDa9mnjdmKO_SGtQbrO-VBC8YcurFXNQyTu0EecitUN-RIuL4LljDg
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:32
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMiwiaWF0IjoxNjIxNjEzMDcyLCJqdGkiOiJXQm1sUjJoenpUdndYdjBDZmx3SiJ9.l89fn8phi0rjYLw7N41qD51d9j7G4hb_Ic1j_7iYsadpZfNZJMH5vTMqx5BE_Mxo9Br6OHDzvVtIFVVbyplbdJTZHQHaPlzTPZrtPYbihJ9S4vQEb9dW1C71JpGmXzQcrl_w3vQp3qMIKSDIw3BkM0YtLylZLOjrlwXz80Mnfjeels1qgHVV_ySg-SzJ5ZBYbLGvWvrpFMj5R2V6xbllqrC-G2OnY0_pGbuOnXUbBffzh8wzdPhASm_mhkK8DGiNg_U3qK3e6Nf9U9E0Xa0M36r4YFdb5t08BDa9mnjdmKO_SGtQbrO-VBC8YcurFXNQyTu0EecitUN-RIuL4LljDg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCkrNc/pfxEDKDNB1PnzX17On3bsMCE/vN0+M4fwq0ynVvreCmggI3Vhlwd0CbrEzw1NzK8xwUmvPnsOGjXQ3SCkZyuZ64G0ezW9AySm/uw7nu2G84k/fRdcYixSAX8SofVeGO7UwsFbi1HZyFhtjdNruJFCdiaw+se+Eas4RKFvdLt7s3RRTF8BdtO9h4iyVueqDJZO6DpX/kNcl2zVoTUKg0QrjqUFv9sf6M/r/dvG6jdSSsFKHVOv6BmKjEpkwq7idX2/1d3TTuLBW1hTVVohNIpmQ9JrS56OjOLgMaxFf+F/y1GwpS3QSCeYlGT5NMi7JVqcnRyAtaedGMxN7ZjAgMBAAECggEAPvSxKe0sP1vQkfHOOx2NbnITMc0mHPJXYw3Hx86mZmZQgPokd+8NymceimtMpaxp5TJgHFm992xh49RBCKMKROykSOzsVEEnWZpdwCMQGzlhZGLG8c+A/8Rq7NPLLgPUYGExR6lc2kuf1d9wnKmMBQ/qA1jbTXe/SMzEQE2fxi8KFFDRJZ3HAUuzw2TR2SgOYt1/QSts9OIt0m5Dv3SK5BEIPm6QY8Cjy+egXeee+2DVbkr1JX4/yiAz/2JKe50RXUfyenaiFit2aFDG9zxO6m6pjeejMuMa4pvLlTv4TO+1mkoYIwD8PdXaqlUvAI7GgkHzENIMb4jCigiOvHCLmQKBgQDQvrszrK8dQlD6RKCvJc06kTS747mhU3D6xXKTxCT1FDb1dz8wTdlyqwJpwPSJT8nrnXl3Z9JKuVctHi9khO0TpF4m6NtqBSQp4flD8dGrClOOFkisGVFMyCBsB2mS1kj1n+oltBNyysjEZjVavj5OR5NbvrpRP3n7Baq7kd24zwKBgQDJ9CfTqcMfKEyERkYirH4COiIpIt8rsQoNYwDRpsTSuCzBt2Id5iTzXWTc/Yq8D8Ul6pAFg34QGJIGLsUmBuowFI1A3YOWq6i16MW1jFhCnzNcU3fGYq1WiTakU5e2jEd4P30R+8+Z7ipQTcwmVqYhSWgwzefsFp5LHOtyTBimLQKBgA1NGgCg8EedAivwU4zVi84/kmymhh2Rg5F3I2XnCbPUJexePNiHHWQBIZY7hVl6jBNHZYYGR5AbX0KwubReA/1Ma/NuwwxuZ2+Dxq5dqk6Lyecz5E2TD2slFWvMzR1eKif8mJ7uao7V/RUGrj+p/65dQTaHYLfso4krQ0XQdaBhAoGADRZUamQK7/71jnDbZK3W8KABzLakzbkIVLvAttVe1eT3iYovwo5CgL7hpWyMzAkdlopv0NunlLVy6RGo1wEFth3u1XBFccMoCLnP7ibtJUwZ0PbbwTBt2TjFILsGDt9iVkmO+lZeKrSDa3bPLwDYfTm7lcYSLHt+wJFcNKj3w/UCgYEAszQyRNc6qeU+I4IFOf9Nga3iNlKXJmCY/IojBKqq8x2lCzMG6VnMaRkGQEwKF9Tfr40MigMAtG4H/utENOiy2eMMEXp8eyGgqXZuZGEolW8NR2uuD8GrDPU8jQZFvrZVMScqIZodccD3OLOidUUfXHLhN0BFQYxb8JwNkUS8Y24\u003d"
}
2021-05-21 16:04:33 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:33 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:33 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:33 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:33
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:33 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:33 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:33 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:33 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:33 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:33 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-21 16:04:33 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-21 16:04:33
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
2021-05-21 16:04:33 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
hVQpynuN9dHG9wFB2iblG
sub
hVQpynuN9dHG9wFB2iblG
aud
https://mtls.fapi.panva.cz/token
jti
cuy17FgcIgb9P41dNyZc
iat
1621613073
exp
1621613133
2021-05-21 16:04:33 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMywiaWF0IjoxNjIxNjEzMDczLCJqdGkiOiJjdXkxN0ZnY0lnYjlQNDFkTnlaYyJ9.VFhXIltw8_KYAg6X0txksZGg-9vm3yH6wuK-p_2i50oXOmFaTEjgAwfT3HelAlKztn43XWNN3QS4mY4DhFDG_uq8Yrev-SqK8dL8taSydpZX_H9gESLrs_TraU2lWpwcQXWwuHe_1v8Vd4IT1Xl6q8wMGlKz_JGunZFI0SR0DRp2_AtU6cz4MG4TN6fT6r3Fg8_rby9dBbAuqkSUqoEAR6OQWnMywzfsIbhjkFsq_m3dedDRlYercPczGZtvBmEUKqGy4YYL3EQro5YaX--M28PMziXZE42RKsqlFu4l-w1lBMOSKxm9h6xgyUKiB3-M3c-_ElpDaAgX7veCHUcDCA
2021-05-21 16:04:33
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA
client_assertion
eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMywiaWF0IjoxNjIxNjEzMDczLCJqdGkiOiJjdXkxN0ZnY0lnYjlQNDFkTnlaYyJ9.VFhXIltw8_KYAg6X0txksZGg-9vm3yH6wuK-p_2i50oXOmFaTEjgAwfT3HelAlKztn43XWNN3QS4mY4DhFDG_uq8Yrev-SqK8dL8taSydpZX_H9gESLrs_TraU2lWpwcQXWwuHe_1v8Vd4IT1Xl6q8wMGlKz_JGunZFI0SR0DRp2_AtU6cz4MG4TN6fT6r3Fg8_rby9dBbAuqkSUqoEAR6OQWnMywzfsIbhjkFsq_m3dedDRlYercPczGZtvBmEUKqGy4YYL3EQro5YaX--M28PMziXZE42RKsqlFu4l-w1lBMOSKxm9h6xgyUKiB3-M3c-_ElpDaAgX7veCHUcDCA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-21 16:04:33
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&client_assertion=eyJraWQiOiJKQ2tidk1NeDZGUHJHY1Jabi1KNVNUdnZMT1Nqc1ZGXzcydmJCaURlbzg0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJoVlFweW51TjlkSEc5d0ZCMmlibEciLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6ImhWUXB5bnVOOWRIRzl3RkIyaWJsRyIsImV4cCI6MTYyMTYxMzEzMywiaWF0IjoxNjIxNjEzMDczLCJqdGkiOiJjdXkxN0ZnY0lnYjlQNDFkTnlaYyJ9.VFhXIltw8_KYAg6X0txksZGg-9vm3yH6wuK-p_2i50oXOmFaTEjgAwfT3HelAlKztn43XWNN3QS4mY4DhFDG_uq8Yrev-SqK8dL8taSydpZX_H9gESLrs_TraU2lWpwcQXWwuHe_1v8Vd4IT1Xl6q8wMGlKz_JGunZFI0SR0DRp2_AtU6cz4MG4TN6fT6r3Fg8_rby9dBbAuqkSUqoEAR6OQWnMywzfsIbhjkFsq_m3dedDRlYercPczGZtvBmEUKqGy4YYL3EQro5YaX--M28PMziXZE42RKsqlFu4l-w1lBMOSKxm9h6xgyUKiB3-M3c-_ElpDaAgX7veCHUcDCA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "MIICuzCCAaOgAwIBAgIGAXmPq3VTMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjExNjA0MDlaFw0yMjA1MjExNjA0MDlaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSs1z+l/EQMoM0HU+fNfXs6fduwwIT+83T4zh/CrTKdW+t4KaCAjdWGXB3QJusTPDU3MrzHBSa8+ew4aNdDdIKRnK5nrgbR7Nb0DJKb+7Due7YbziT99F1xiLFIBfxKh9V4Y7tTCwVuLUdnIWG2N02u4kUJ2JrD6x74RqzhEoW90u3uzdFFMXwF2072HiLJW56oMlk7oOlf+Q1yXbNWhNQqDRCuOpQW/2x/oz+v928bqN1JKwUodU6/oGYqMSmTCruJ1fb/V3dNO4sFbWFNVWiE0imZD0mtLno6M4uAxrEV/4X/LUbClLdBIJ5iUZPk0yLslWpydHIC1p50YzE3tmMCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEABQlQUM7hwUS/T0jzsne/BwVUA6cn/Qd1NRu5jLZFt7b10FQdW/DgeKvwNq2QawbLK3q3rd/ZZBtlKRWkROWfhVhI7rEG1wsxFVR4qe9+l+e7ltGSkapIS71U9qeXFNEgifhgTQQRKAbGztk5jjUl8krglAjQQJpai5hI48g0CKoIYQgFPVeD6UstVgOrFlz2ufghYfTja41X3yJqXg634xDXToUe36QYTsXSMWWroLhm+zEErAtBci92Pgtap0TwX3ZhPY+wySpW/kw5vq59JuGlaktnprbEIdFbeaF3BEKUwgUrGkyMJNnYEwpw1Neli1IEJbndA6S5efcREadFUA\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:34 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:34 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-21 16:04:34 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:34 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-21 16:04:34
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-21 16:04:34 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-21 16:04:34 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-21 16:04:34 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:34 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-21 16:04:34 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-21 16:04:34 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
2021-05-21 16:04:34
TellUserToDoCIBAAuthentication
Please authenticate and authorize the request
2021-05-21 16:04:34
CallAutomatedCibaApprovalEndpoint
HTTP request
request_uri
https://fapi.panva.cz/ciba-sim?authReqId=dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA&action=allow
request_method
POST
request_headers
{
  "accept": "application/json",
  "accept-charset": "utf-8",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d"
}
2021-05-21 16:04:34 INCOMING
fapi-ciba-id1-multiple-call-to-token-endpoint
Incoming HTTP request to test instance uEselgGSQVYlrde
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer +WwIi9WfG~S9bSJV2DZY\u003d",
  "content-type": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "61",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
ciba-notification-endpoint
incoming_body_form_params
incoming_method
POST
incoming_body_json
{
  "auth_req_id": "dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA"
}
incoming_query_string_params
{}
incoming_body
{"auth_req_id":"dSoIkbHfH117UwaHwYmi2e9Prqw_-ulzfGJgN06LDPA"}
2021-05-21 16:04:34 OUTGOING
fapi-ciba-id1-multiple-call-to-token-endpoint
Response to HTTP request to test instance uEselgGSQVYlrde
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
ciba-notification-endpoint
2021-05-21 16:04:35 RESPONSE
CallAutomatedCibaApprovalEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "13",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Fri, 21 May 2021 16:04:34 GMT",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "via": "1.1 vegur"
}
response_body
{"done":true}
2021-05-21 16:04:35 SUCCESS
CallAutomatedCibaApprovalEndpoint
Successfully called automated_ciba_approval_url endpoint
response
{"done":true}
2021-05-21 16:04:35 FINISHED
fapi-ciba-id1-multiple-call-to-token-endpoint
Test has run to completion
testmodule_result
PASSED
Unregister dynamically registered client
2021-05-21 16:04:35
UnregisterDynamicallyRegisteredClient
HTTP request
request_uri
https://fapi.panva.cz/reg/hVQpynuN9dHG9wFB2iblG
request_method
DELETE
request_headers
{
  "accept": "application/json",
  "accept-charset": "utf-8",
  "authorization": "Bearer KxWKOauDpi9NLa6Lc_7YMXvurC6SzAbChuipAIMgFYW",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCkrNc/pfxEDKDNB1PnzX17On3bsMCE/vN0+M4fwq0ynVvreCmggI3Vhlwd0CbrEzw1NzK8xwUmvPnsOGjXQ3SCkZyuZ64G0ezW9AySm/uw7nu2G84k/fRdcYixSAX8SofVeGO7UwsFbi1HZyFhtjdNruJFCdiaw+se+Eas4RKFvdLt7s3RRTF8BdtO9h4iyVueqDJZO6DpX/kNcl2zVoTUKg0QrjqUFv9sf6M/r/dvG6jdSSsFKHVOv6BmKjEpkwq7idX2/1d3TTuLBW1hTVVohNIpmQ9JrS56OjOLgMaxFf+F/y1GwpS3QSCeYlGT5NMi7JVqcnRyAtaedGMxN7ZjAgMBAAECggEAPvSxKe0sP1vQkfHOOx2NbnITMc0mHPJXYw3Hx86mZmZQgPokd+8NymceimtMpaxp5TJgHFm992xh49RBCKMKROykSOzsVEEnWZpdwCMQGzlhZGLG8c+A/8Rq7NPLLgPUYGExR6lc2kuf1d9wnKmMBQ/qA1jbTXe/SMzEQE2fxi8KFFDRJZ3HAUuzw2TR2SgOYt1/QSts9OIt0m5Dv3SK5BEIPm6QY8Cjy+egXeee+2DVbkr1JX4/yiAz/2JKe50RXUfyenaiFit2aFDG9zxO6m6pjeejMuMa4pvLlTv4TO+1mkoYIwD8PdXaqlUvAI7GgkHzENIMb4jCigiOvHCLmQKBgQDQvrszrK8dQlD6RKCvJc06kTS747mhU3D6xXKTxCT1FDb1dz8wTdlyqwJpwPSJT8nrnXl3Z9JKuVctHi9khO0TpF4m6NtqBSQp4flD8dGrClOOFkisGVFMyCBsB2mS1kj1n+oltBNyysjEZjVavj5OR5NbvrpRP3n7Baq7kd24zwKBgQDJ9CfTqcMfKEyERkYirH4COiIpIt8rsQoNYwDRpsTSuCzBt2Id5iTzXWTc/Yq8D8Ul6pAFg34QGJIGLsUmBuowFI1A3YOWq6i16MW1jFhCnzNcU3fGYq1WiTakU5e2jEd4P30R+8+Z7ipQTcwmVqYhSWgwzefsFp5LHOtyTBimLQKBgA1NGgCg8EedAivwU4zVi84/kmymhh2Rg5F3I2XnCbPUJexePNiHHWQBIZY7hVl6jBNHZYYGR5AbX0KwubReA/1Ma/NuwwxuZ2+Dxq5dqk6Lyecz5E2TD2slFWvMzR1eKif8mJ7uao7V/RUGrj+p/65dQTaHYLfso4krQ0XQdaBhAoGADRZUamQK7/71jnDbZK3W8KABzLakzbkIVLvAttVe1eT3iYovwo5CgL7hpWyMzAkdlopv0NunlLVy6RGo1wEFth3u1XBFccMoCLnP7ibtJUwZ0PbbwTBt2TjFILsGDt9iVkmO+lZeKrSDa3bPLwDYfTm7lcYSLHt+wJFcNKj3w/UCgYEAszQyRNc6qeU+I4IFOf9Nga3iNlKXJmCY/IojBKqq8x2lCzMG6VnMaRkGQEwKF9Tfr40MigMAtG4H/utENOiy2eMMEXp8eyGgqXZuZGEolW8NR2uuD8GrDPU8jQZFvrZVMScqIZodccD3OLOidUUfXHLhN0BFQYxb8JwNkUS8Y24\u003d"
}
2021-05-21 16:04:35 RESPONSE
UnregisterDynamicallyRegisteredClient
HTTP response
response_status_code
204 NO_CONTENT
response_status_text
No Content
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "date": "Fri, 21 May 2021 16:04:35 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body

                                
2021-05-21 16:04:35 SUCCESS
UnregisterDynamicallyRegisteredClient
Client successfully unregistered
Test Results