Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-05-20 11:58:17 INFO
TEST-RUNNER
Test instance el6IA0uzlFNW2NO created
baseUrl
https://www.certification.openid.net/test/el6IA0uzlFNW2NO
variant
{
  "client_auth_type": "private_key_jwt",
  "ciba_mode": "poll",
  "fapi_profile": "plain_fapi",
  "client_registration": "dynamic_client"
}
alias

                                
description
planId
j17FMmhjGYfFu
config
{
  "automated_ciba_approval_url": "https://fapi.panva.cz/ciba-sim?authReqId\u003d{auth_req_id}\u0026action\u003d{action}",
  "server": {
    "discoveryUrl": "https://fapi.panva.cz/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "pkjwt-one",
    "client_name": "pkjwt-one",
    "scope": "openid offline_access",
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw",
          "d": "dxzWeLBYGwOgNb-S-4RCDxz7U6lUPPZaIkrbmkpLsdDdZOkMXGg_jk2LIJ3tYgAvZkWm87ZQqKjN2ADzJmpHvu-vCLuh8ccpwaiTXfWTOjjii0-Cfq0-fT6aQpIglbwubVKi1Tqxz-AglrMnCkNICm-e0GsotXFskxhwybp8IAZP__Up1pg-G9Dg_Timtepw55HjO4xDhzY70zV2NqSDEIvKOleyIZj4JP5kCkwP4_FJw_KynXwlxKvCshtFC3U2IEWWUaUQmM8Yy1Hz2x3TqImLQTWs3EMm6oRuhS0Y4tg9VlzJqnetdd6Ulh-DFzSB37KnBZS1qvnGGG4Cri9IkQ",
          "p": "5SLM2g4Uv3Q1-PGqwKPQ8h8Onp674FTxxYAHCh8mivgCGx7uIjVaOxCKvCimi8NCgtON0a1QdGY-BT3NsewJUvaniWyb5BZo-kpdkSzXCvQpWuWT_iSorgEgl4anJ59JZH_QW7wtjRnF8jWnw-_nkNv4HIIVd7fdKKCkpGi1Drk",
          "q": "xgyjgfZdlfpne27vdlxi5VGmNnBnLRAe_a7Wgo6JdmKPMPa1qugxVM5tUhoYjUuUpHxi8gDSxb0-N_kIqTu7zp2Ly9iB8wQIyyYmdxN7J_B5bSn5rfTcu_Uz-EuYVEGfj0hk5_aNQc0y02Di1L4QrnMNRGBo3jWCCRZrjqyHfqc",
          "dp": "tc9sHeUoX1V1cedHpn0VUNiFwCSRTIn6IMzaSRS4f3IUMbLUHv6Ybt9MRco3hBRV1PrJv8K2YPWzZnNIoFF6gILIIsmz1EJX36lcHtIme0GLAt3BFNm_ofmxA6pLPawtDvo_uFpTBm-Z2frq-BSGeDGh5_Tr1cdlS1RT70RJzbk",
          "dq": "FXlVWUgfSZ3HDqkuqcTGrFq4DPsPFOHEmnkUpT9TRFTXddWqSQe4IZvoWpidxORHD7a0-8x_DhXA40zLVZ42dOa8O7QUEweC9JQEY7DnD6ORZvbALc55CKBDrE52C9y5sk2FM2mWU2YudqDwt2SMZn3vGFTjygQ_P0EBFI08e80",
          "qi": "nmJaonUO_d62824V6YmWuEX7imXdgHKRi-tY4IUDJbrm7lKEfcn_xazqilECh1xm7O8b4bj0th3JrRcs1Al0sWP1FwVHjzzmg5oqq26PvHjmtVIHn3cXGT6AmY8-eUPkYgPBc61Ej58Usazm1iuRIe-wNIBeL244kFTQK7zJfnE",
          "kty": "RSA",
          "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
          "alg": "PS256",
          "use": "sig"
        }
      ]
    },
    "hint_type": "login_hint",
    "hint_value": "panva"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\nTfkwHHtW2BegWR/q3+q9gs7uehc\u003d\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN PRIVATE KEY-----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\nKuUEGLKAzDf1JIzseUr8jdvw\n-----END PRIVATE KEY-----\n"
  },
  "client2": {
    "client_id": "pkjwt-two",
    "client_name": "pkjwt-two",
    "scope": "openid offline_access",
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "5xcUf9SqYSEQHDyQft6iabfz5WvuZyjFLTj9x_R8ARdBDyVE42vkWnf6jOZoeMZ_WjtYGLF0nwnuEVBoCVxP4Nu1UUQq8OTigmk2f4IyPT-79pvW9b7EGQDdTsBIrrb2AKktwDJe16uK64kDNO0Ay3U_nShIPgMVbmGd_K6__OwwhhrLwKv_OSbvU8ZlPI24jy1Yxfq175F_1ZQBRjm0jAMf6PBt8cgxQclgbpP-7OBUQHBzpfudD1U9W6V8hqKKjDldlI9Zg6xBa8MpC6JuQdgwkcugWdwyG69p2kq_pyl735C8yj9Bif7Vok1d4E81cSh8Jy1wGNfAmlz8ncJSRw",
          "d": "ttJDnX4Z7Q3DORORHU31H74wbmidC2_tzoEwBWkeUZ6cEediQKmy1v_kcGQ4cpRXXINmhuKdaNTqSzhZlk45w6MOJ2TOtBXgPVwPiYDvThWGFuvjfDeX3FAaxZrJ5a9Jn-w4Db3L2sQT-5NBvjViU5RG54Ze4PB_m_wOiUGXEfgonv64APPBkodIz_26lJ-r4447tcdMkDw4p6xTP-y33sPB4ZOhQ5ezE4FzQlpq0K98ysKLwo8wvhQ8stxqL46avBnflgDhTsb-1I54aU3ROjThU5tkeAkudzg4lFKdd4WmVneVMD-FJ2wrkjwztqHSBCP8G9IAXBdXRxRzdJIOAQ",
          "p": "_WOUrDYt1uay8XtnaNgutctzdI6XJaf5XrGv6wE_ZoVbqEKWTnBbVfqbwkWf58CeH32tt3hUjBFicG-XAlYI8TW5Lf6H78Fmt2y3fdowLzzWLwNDoLWo1_rOGxneL-vYM1MekZyUN-uDARdEeOL9yRPFKOZm7eWSUc_Sdlu9yuc",
          "q": "6XitRdF0tFu7O7S1rQZZjqhrza53f-Ox1vCYY_Hy4Tm_1fMc7GV0VCHoQwO3ZJPlPEE0JahnfpQkhHGj67GGO40lZYEXdBwNxtktp1zdmEokbsWmacz57SVPg4pzgS9kketf-wdUbT5VgBmNWS9MPt7rKiyFbmuPcHU99fWEsaE",
          "dp": "e_5s1FC24cCGtFCU6-NOCDwExXa5U_38s2_0C-XSZpK_pXjgIIYuy8YUzl5Pv5KsTfCsP2msxdYD-80_ci8ztQV7FpzFXHehkgSrTfSlO5hjnyHTyCLc-sOKdAyWg5C_fW4hOVQL28ltk-0U3qsFUY5RHpCQsb1zeoFeFfkSyOU",
          "dq": "2tyhsh2UBa8oaeQRm02kjrMbvAidRWoxwIhykt6xDKmSSAJLTuAcmPHgRVIqjUKHVmDZfaPMwUAmq3HMdJpKd3DtaaYGUnYqBAp7XbUUljqKxLzML8pTUBf13h3gAW5oHNJFe5F3d6FDjX5mnwBTvWxDj5mEy-pQ4N9HYlbyOYE",
          "qi": "rbxxLBMPxBVpoyNfpjYtXEuem0HHvemHiGklhCbJO_N3vRu8lEarlZ_IPLrRmq7he0cNHcd4j_yhge1-0RR0LzJ4l_Wg-B1Jc0fKJrSItp8pmjmaVHbp_ToYqVlJh_AfU5tru86zSCvVycV79BvkvLl6IusDAuRK8eD1h7dU59g",
          "kty": "RSA",
          "kid": "NriyGITqpt6QdRBXz6k_qjup6vO_81Namq05CX4hij0",
          "alg": "PS256",
          "use": "sig"
        }
      ]
    },
    "acr_value": "urn:mace:incommon:iap:silver"
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\nAWzRJlZD89KZAQgjj4Z215QeLxA\u003d\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN PRIVATE KEY-----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\nlGAIorVbtD1xAn2WaYuEb5Q\u003d\n-----END PRIVATE KEY-----\n  \n"
  },
  "resource": {
    "resourceUrl": "https://mtls.fapi.panva.cz/accounts",
    "institution_id": "xxxxx"
  },
  "browser": [
    {
      "match": "https://fapi.panva.cz/auth*",
      "tasks": [
        {
          "task": "Login",
          "optional": true,
          "match": "https://fapi.panva.cz/interaction*",
          "commands": [
            [
              "text",
              "name",
              "login",
              "foo",
              "optional"
            ],
            [
              "text",
              "name",
              "password",
              "bar",
              "optional"
            ],
            [
              "click",
              "class",
              "login-submit"
            ]
          ]
        },
        {
          "task": "Consent",
          "optional": true,
          "match": "https://fapi.panva.cz/interaction*",
          "commands": [
            [
              "click",
              "class",
              "login-submit"
            ]
          ]
        },
        {
          "task": "Verify Complete",
          "match": "https://*/test/a/*/callback*",
          "commands": [
            [
              "wait",
              "id",
              "submission_complete",
              10
            ]
          ]
        }
      ]
    }
  ]
}
testName
fapi-ciba-id1-multiple-call-to-token-endpoint
2021-05-20 11:58:17 SUCCESS
CreateCIBANotificationEndpointUri
Created ciba notification endpoint URI
notification_uri
https://www.certification.openid.net/test/el6IA0uzlFNW2NO/ciba-notification-endpoint
2021-05-20 11:58:18
GetDynamicServerConfiguration
HTTP request
request_uri
https://fapi.panva.cz/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-05-20 11:58:19 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "1746",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:18 GMT",
  "expect-ct": "max-age\u003d0",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"acr_values_supported":["urn:mace:incommon:iap:silver"],"authorization_endpoint":"https://fapi.panva.cz/auth","claims_parameter_supported":true,"claims_supported":["sub","acr","sid","auth_time","iss"],"code_challenge_methods_supported":["S256"],"end_session_endpoint":"https://fapi.panva.cz/session/end","grant_types_supported":["implicit","authorization_code","refresh_token","urn:openid:params:grant-type:ciba"],"id_token_signing_alg_values_supported":["PS256"],"issuer":"https://fapi.panva.cz","jwks_uri":"https://fapi.panva.cz/jwks","registration_endpoint":"https://fapi.panva.cz/reg","response_modes_supported":["form_post","fragment","query","jwt","query.jwt","fragment.jwt","form_post.jwt"],"response_types_supported":["code id_token","code"],"scopes_supported":["openid","offline_access"],"subject_types_supported":["public"],"token_endpoint_auth_methods_supported":["private_key_jwt","self_signed_tls_client_auth"],"token_endpoint_auth_signing_alg_values_supported":["PS256"],"token_endpoint":"https://mtls.fapi.panva.cz/token","pushed_authorization_request_endpoint":"https://mtls.fapi.panva.cz/request","request_object_signing_alg_values_supported":["PS256"],"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_signed_request_object":true,"userinfo_endpoint":"https://mtls.fapi.panva.cz/accounts","authorization_signing_alg_values_supported":["PS256"],"tls_client_certificate_bound_access_tokens":true,"backchannel_authentication_endpoint":"https://mtls.fapi.panva.cz/backchannel","backchannel_token_delivery_modes_supported":["poll","ping"],"backchannel_user_code_parameter_supported":true,"backchannel_authentication_request_signing_alg_values_supported":["PS256"],"claim_types_supported":["normal"]}
2021-05-20 11:58:19
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{"acr_values_supported":["urn:mace:incommon:iap:silver"],"authorization_endpoint":"https://fapi.panva.cz/auth","claims_parameter_supported":true,"claims_supported":["sub","acr","sid","auth_time","iss"],"code_challenge_methods_supported":["S256"],"end_session_endpoint":"https://fapi.panva.cz/session/end","grant_types_supported":["implicit","authorization_code","refresh_token","urn:openid:params:grant-type:ciba"],"id_token_signing_alg_values_supported":["PS256"],"issuer":"https://fapi.panva.cz","jwks_uri":"https://fapi.panva.cz/jwks","registration_endpoint":"https://fapi.panva.cz/reg","response_modes_supported":["form_post","fragment","query","jwt","query.jwt","fragment.jwt","form_post.jwt"],"response_types_supported":["code id_token","code"],"scopes_supported":["openid","offline_access"],"subject_types_supported":["public"],"token_endpoint_auth_methods_supported":["private_key_jwt","self_signed_tls_client_auth"],"token_endpoint_auth_signing_alg_values_supported":["PS256"],"token_endpoint":"https://mtls.fapi.panva.cz/token","pushed_authorization_request_endpoint":"https://mtls.fapi.panva.cz/request","request_object_signing_alg_values_supported":["PS256"],"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_signed_request_object":true,"userinfo_endpoint":"https://mtls.fapi.panva.cz/accounts","authorization_signing_alg_values_supported":["PS256"],"tls_client_certificate_bound_access_tokens":true,"backchannel_authentication_endpoint":"https://mtls.fapi.panva.cz/backchannel","backchannel_token_delivery_modes_supported":["poll","ping"],"backchannel_user_code_parameter_supported":true,"backchannel_authentication_request_signing_alg_values_supported":["PS256"],"claim_types_supported":["normal"]}
2021-05-20 11:58:19 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
acr_values_supported
[
  "urn:mace:incommon:iap:silver"
]
authorization_endpoint
https://fapi.panva.cz/auth
claims_parameter_supported
true
claims_supported
[
  "sub",
  "acr",
  "sid",
  "auth_time",
  "iss"
]
code_challenge_methods_supported
[
  "S256"
]
end_session_endpoint
https://fapi.panva.cz/session/end
grant_types_supported
[
  "implicit",
  "authorization_code",
  "refresh_token",
  "urn:openid:params:grant-type:ciba"
]
id_token_signing_alg_values_supported
[
  "PS256"
]
issuer
https://fapi.panva.cz
jwks_uri
https://fapi.panva.cz/jwks
registration_endpoint
https://fapi.panva.cz/reg
response_modes_supported
[
  "form_post",
  "fragment",
  "query",
  "jwt",
  "query.jwt",
  "fragment.jwt",
  "form_post.jwt"
]
response_types_supported
[
  "code id_token",
  "code"
]
scopes_supported
[
  "openid",
  "offline_access"
]
subject_types_supported
[
  "public"
]
token_endpoint_auth_methods_supported
[
  "private_key_jwt",
  "self_signed_tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "PS256"
]
token_endpoint
https://mtls.fapi.panva.cz/token
pushed_authorization_request_endpoint
https://mtls.fapi.panva.cz/request
request_object_signing_alg_values_supported
[
  "PS256"
]
request_parameter_supported
true
request_uri_parameter_supported
false
require_signed_request_object
true
userinfo_endpoint
https://mtls.fapi.panva.cz/accounts
authorization_signing_alg_values_supported
[
  "PS256"
]
tls_client_certificate_bound_access_tokens
true
backchannel_authentication_endpoint
https://mtls.fapi.panva.cz/backchannel
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_user_code_parameter_supported
true
backchannel_authentication_request_signing_alg_values_supported
[
  "PS256"
]
claim_types_supported
[
  "normal"
]
2021-05-20 11:58:19 INFO
AddMTLSEndpointAliasesToEnvironment
The mtls_endpoint_aliases is not present in the server configuration
server
{
  "acr_values_supported": [
    "urn:mace:incommon:iap:silver"
  ],
  "authorization_endpoint": "https://fapi.panva.cz/auth",
  "claims_parameter_supported": true,
  "claims_supported": [
    "sub",
    "acr",
    "sid",
    "auth_time",
    "iss"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ],
  "end_session_endpoint": "https://fapi.panva.cz/session/end",
  "grant_types_supported": [
    "implicit",
    "authorization_code",
    "refresh_token",
    "urn:openid:params:grant-type:ciba"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "issuer": "https://fapi.panva.cz",
  "jwks_uri": "https://fapi.panva.cz/jwks",
  "registration_endpoint": "https://fapi.panva.cz/reg",
  "response_modes_supported": [
    "form_post",
    "fragment",
    "query",
    "jwt",
    "query.jwt",
    "fragment.jwt",
    "form_post.jwt"
  ],
  "response_types_supported": [
    "code id_token",
    "code"
  ],
  "scopes_supported": [
    "openid",
    "offline_access"
  ],
  "subject_types_supported": [
    "public"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt",
    "self_signed_tls_client_auth"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ],
  "token_endpoint": "https://mtls.fapi.panva.cz/token",
  "pushed_authorization_request_endpoint": "https://mtls.fapi.panva.cz/request",
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "require_signed_request_object": true,
  "userinfo_endpoint": "https://mtls.fapi.panva.cz/accounts",
  "authorization_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "backchannel_authentication_endpoint": "https://mtls.fapi.panva.cz/backchannel",
  "backchannel_token_delivery_modes_supported": [
    "poll",
    "ping"
  ],
  "backchannel_user_code_parameter_supported": true,
  "backchannel_authentication_request_signing_alg_values_supported": [
    "PS256"
  ],
  "claim_types_supported": [
    "normal"
  ]
}
2021-05-20 11:58:19 SUCCESS
CheckCIBAServerConfiguration
Found required server configuration keys
required
[
  "backchannel_authentication_endpoint",
  "token_endpoint",
  "issuer"
]
2021-05-20 11:58:19 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
{
  "testHost": "fapi.panva.cz",
  "testPort": 443
}
authorization_endpoint
{
  "testHost": "fapi.panva.cz",
  "testPort": 443
}
token_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
userinfo_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
2021-05-20 11:58:19
FetchServerKeys
Fetching server key
jwks_uri
https://fapi.panva.cz/jwks
2021-05-20 11:58:19
FetchServerKeys
HTTP request
request_uri
https://fapi.panva.cz/jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-05-20 11:58:19 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "462",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/jwk-set+json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:19 GMT",
  "expect-ct": "max-age\u003d0",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"keys":[{"kty":"RSA","use":"sig","kid":"EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M","alg":"PS256","e":"AQAB","n":"sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"}]}
2021-05-20 11:58:19
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","use":"sig","kid":"EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M","alg":"PS256","e":"AQAB","n":"sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"}]}
2021-05-20 11:58:19 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
      "alg": "PS256",
      "e": "AQAB",
      "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"
    }
  ]
}
2021-05-20 11:58:19 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
      "alg": "PS256",
      "e": "AQAB",
      "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"
    }
  ]
}
2021-05-20 11:58:19 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-05-20 11:58:19 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2021-05-20 11:58:20 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-05-20 11:58:20 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
      "alg": "PS256",
      "e": "AQAB",
      "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw"
    }
  ]
}
First client: registering client using dynamic client registration
2021-05-20 11:58:20 SUCCESS
GetDynamicClientConfiguration
Created dynamic_client_registration_template object from the client configuration.
client_id
pkjwt-one
client_name
pkjwt-one
scope
openid offline_access
jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "sUQ6a7yX-qCAIgqYl_pzn2yK5RsPb5zjxMG1v2bvlvf6l6LyvJkxEr4dWLAbn9WAV72GuyMkvWfVi13fu4cYl2vdkIFBt0JGT40QxkMUp0izHs4RiLK1GTrwJ2qX7H67EaNNWFeE9Yqh3sIRyQgHqQf6L9rZFWBSED-M3OaiwH-zdwrMzjQH6wCEjmuyTFiNLO2QI6Yr7dDl1rPjWvN9d8pHHWxkRMAnQrL5_mfvOD_j1Tr5blXYTMHHpThOHVM2Ibe4_5YDmPaRXFMgQrPjz6mlUa9d1EL7CuxLd19S3A_6XEMB2juo0RRCfaHK7ZORPJKa36qrVZVhXK3Geuqorw",
      "d": "dxzWeLBYGwOgNb-S-4RCDxz7U6lUPPZaIkrbmkpLsdDdZOkMXGg_jk2LIJ3tYgAvZkWm87ZQqKjN2ADzJmpHvu-vCLuh8ccpwaiTXfWTOjjii0-Cfq0-fT6aQpIglbwubVKi1Tqxz-AglrMnCkNICm-e0GsotXFskxhwybp8IAZP__Up1pg-G9Dg_Timtepw55HjO4xDhzY70zV2NqSDEIvKOleyIZj4JP5kCkwP4_FJw_KynXwlxKvCshtFC3U2IEWWUaUQmM8Yy1Hz2x3TqImLQTWs3EMm6oRuhS0Y4tg9VlzJqnetdd6Ulh-DFzSB37KnBZS1qvnGGG4Cri9IkQ",
      "p": "5SLM2g4Uv3Q1-PGqwKPQ8h8Onp674FTxxYAHCh8mivgCGx7uIjVaOxCKvCimi8NCgtON0a1QdGY-BT3NsewJUvaniWyb5BZo-kpdkSzXCvQpWuWT_iSorgEgl4anJ59JZH_QW7wtjRnF8jWnw-_nkNv4HIIVd7fdKKCkpGi1Drk",
      "q": "xgyjgfZdlfpne27vdlxi5VGmNnBnLRAe_a7Wgo6JdmKPMPa1qugxVM5tUhoYjUuUpHxi8gDSxb0-N_kIqTu7zp2Ly9iB8wQIyyYmdxN7J_B5bSn5rfTcu_Uz-EuYVEGfj0hk5_aNQc0y02Di1L4QrnMNRGBo3jWCCRZrjqyHfqc",
      "dp": "tc9sHeUoX1V1cedHpn0VUNiFwCSRTIn6IMzaSRS4f3IUMbLUHv6Ybt9MRco3hBRV1PrJv8K2YPWzZnNIoFF6gILIIsmz1EJX36lcHtIme0GLAt3BFNm_ofmxA6pLPawtDvo_uFpTBm-Z2frq-BSGeDGh5_Tr1cdlS1RT70RJzbk",
      "dq": "FXlVWUgfSZ3HDqkuqcTGrFq4DPsPFOHEmnkUpT9TRFTXddWqSQe4IZvoWpidxORHD7a0-8x_DhXA40zLVZ42dOa8O7QUEweC9JQEY7DnD6ORZvbALc55CKBDrE52C9y5sk2FM2mWU2YudqDwt2SMZn3vGFTjygQ_P0EBFI08e80",
      "qi": "nmJaonUO_d62824V6YmWuEX7imXdgHKRi-tY4IUDJbrm7lKEfcn_xazqilECh1xm7O8b4bj0th3JrRcs1Al0sWP1FwVHjzzmg5oqq26PvHjmtVIHn3cXGT6AmY8-eUPkYgPBc61Ej58Usazm1iuRIe-wNIBeL244kFTQK7zJfnE",
      "kty": "RSA",
      "kid": "EUsMLFwXz5zMhkJoo1lcnIM2pApLc3kc_2WV8YKYC3M",
      "alg": "PS256",
      "use": "sig"
    }
  ]
}
hint_type
login_hint
hint_value
panva
2021-05-20 11:58:33 SUCCESS
GeneratePS256ClientJWKsWithKeyID
Generated client JWKs
client_jwks
{
  "keys": [
    {
      "p": "9HWhuFAxr9gYVfuey_XH4l2mWQTAHLFG-VDnGZzXFu_T6WBZorrVuyrbHQJc8-XbWE_5visFNb-TlFQbu7giLKgK3sEM-0lz9SSBzZAaWN7iQ6JIfyHFq6GMwA5KoyaifVGBdnjAkOh3Nd-tLcOUlR47VneKGyBkAtDpgI-kVFE",
      "kty": "RSA",
      "q": "p8UMeULVlItfnRF8JiE55WYc27j9UV6GQZYXbZtSyIafgiHUF04YFWnr-U59g473rwTaLW1ZEPcs2MNfjN86pknjUb1FNV2Ed5M-xEiy7Pkq84xOlQIrN9ITl7LenVkhCZDaAlkwDAChARpnbm4AK_Vw07h60eONpaW_ON0CYtE",
      "d": "KqeLKKh3RG6XMfXfWJ-mY2a4KA1dz-hASCg3_E_quLlpLWfZ52GQH6_W84_jrGWppLJxxs1c-vm6u7vz_p59dOuiP6BefbMmFqAP4lttwYXsIYXeyicfHFeeV4yMskHsCHlVkoX60FkstfDQhQ43w70H5PHeNERxJk9AgnSq85buFvpJYlxcklg91Mot5MkrWsiTEbhf5CRgIxmGlQfuC6PhBKJWBpfimmzOfzjQ710dWY5SxewDtTTL30FbPucKf4--Z5YEkJCBG9jE5Zet5VFYKxXSBm3N5lGtDjbFWZ92rXYJW87gbIpQyXSqUHo237IwHfx_6jyYefWSAutJAQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
      "qi": "QVvXTn46wZvcEKcmteOMnljpQbPfX6VrwOeONKC6GBxHL79Ct_sWv9psOQGWh9Ls9q1umXtTFVKoQid0LNMfIh60WmwHZOYJzZ6mvP8eH5CAEwWe0mc7EwVxHrgSU24oePawrTMEwKjcMrTGuXXOUbq6M-a9HF-gfcvp2URfS7s",
      "dp": "Ee464XEIY_R-vHfLSvyJH8JsvCTMDo62PP1BJjDJ2gXXTkvh5zy7BpJ7JeKRfNZEQ3MCR3-ST0HxCjUtH5S-9PWSbopMcHYPylBWMQS72f7nK7zQgnqwrAkacM_bi6H-0yBSVaU_wqE6dTol0rCAyntAMPRtrdWvYEGAjwx6KjE",
      "alg": "PS256",
      "dq": "H8AwGybl6uXxo3UyrLivD1Yi8gZxkpu0BueT6X9yzFaGC4fBbuOttSfFq_oJ0QMWpv3hGKXQLGDLEP7wr2Vz4RKsvcR3O6FGN6cbQuSLUEPbuBn-qT6u1TKh2JzWeqrqkLfkOnuMl0jrL51Co-iXibo6rycDv4M0RHw401coY3E",
      "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
      "alg": "PS256",
      "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ"
    }
  ]
}
2021-05-20 11:58:33 SUCCESS
GenerateMTLSCertificateFromJWKs
Generated client MTLS certificate
mutual_tls_authentication
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:58:33 SUCCESS
AddClientX509CertificateClaimToPublicJWKs
Added x5c claim to public JWKs
client_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
      "alg": "PS256",
      "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ",
      "x5c": [
        "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\u003d\u003d"
      ]
    }
  ]
}
2021-05-20 11:58:33 SUCCESS
CreateDynamicRegistrationRequest
Created dynamic registration request
client_name
pkjwt-one el6IA0uzlFNW2NO
2021-05-20 11:58:33
AddCibaGrantTypeToDynamicRegistrationRequest
Added 'urn:openid:params:grant-type:ciba' to 'grant_types'
grant_types
[
  "urn:openid:params:grant-type:ciba"
]
2021-05-20 11:58:33
AddPublicJwksToDynamicRegistrationRequest
Added client public JWKS to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one el6IA0uzlFNW2NO",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
        "alg": "PS256",
        "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  }
}
2021-05-20 11:58:33
AddCibaUserCodeFalseToDynamicRegistrationRequest
Added CIBA backchannel_user_code_parameter: false to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one el6IA0uzlFNW2NO",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
        "alg": "PS256",
        "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ",
        "x5c": [
          "MIICuzCCAaOgAwIBAgIGAXmJpECKMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjAxMTU4MzNaFw0yMjA1MjAxMTU4MzNaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKA05u3+Jns8sJeZjftR3b5CZVxg262Eyv+ceMg7nC+Je8tBynA6U3CDjW//ovzsiCA4MrjvI7NHhLlAENJdVxDQji8EGFN5fXsFc1Zjrby2axAut9UC/y9p7B9wZpB+B+2mzIuqGrTltbiDqtD9PTkKA990nCJepp5eQriNoNh3H3aAP5SM7ATSMgGeJY5ut41cNg0eTIuaLY7yWKknrF7ufiJKwZqv8tuhrJR6ZqzL0iDXrlTRf9jmNLmpauWJH2Q5P1h9aftNXetofnTpyVBNJUoOAY4z8Pc8kY7WABzGCkPM0eqxoeAkKXnUlMHlYNimkoDWhNwaqQO1vMMR2CECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEARnzU320NO/k4GN9plHsCel2M28VeNojanIpydlqhvg6JrjIUh9pHPG9IahiGxoQWn7ksLGl6uFrhKoS2UrQ33C9/SJPoSX4mExFZhAx4Y4v6vpTepTv4APOg5enAz1NBweqpnq3jRlKypacGMw8UORM+WhMTFRc5xNMRg633I4+0kHol7WDfwt/6c2f0w1RYz9dm2MjpWlnPBib9krkdNQAKj+fH4Glw3KpYBT8SK/O6opYNRv2CbYNc5nBVVcTZtxhl+2wZhkW5zx+BVEb4CNh+bvAFGrn6N9vc81p+DQYgCPAP7L6nGPUIsu3s/M1RS+ESr/tU/lxpemTvUrbJGw\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false
}
2021-05-20 11:58:33
AddCibaTokenDeliveryModePollToDynamicRegistrationRequest
Added CIBA token delivery mode poll to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one el6IA0uzlFNW2NO",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
        "alg": "PS256",
        "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "poll"
}
2021-05-20 11:58:33
AddCibaRequestSigningPS256ToDynamicRegistrationRequest
Added CIBA request sign alg to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one el6IA0uzlFNW2NO",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
        "alg": "PS256",
        "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "poll",
  "backchannel_authentication_request_signing_alg": "PS256"
}
2021-05-20 11:58:33
AddIdTokenSigningAlgPS256ToDynamicRegistrationRequest
Added id_token_signed_response_alg to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one el6IA0uzlFNW2NO",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
        "alg": "PS256",
        "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ",
        "x5c": [
          "MIICuzCCAaOgAwIBAgIGAXmJpECKMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjAxMTU4MzNaFw0yMjA1MjAxMTU4MzNaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKA05u3+Jns8sJeZjftR3b5CZVxg262Eyv+ceMg7nC+Je8tBynA6U3CDjW//ovzsiCA4MrjvI7NHhLlAENJdVxDQji8EGFN5fXsFc1Zjrby2axAut9UC/y9p7B9wZpB+B+2mzIuqGrTltbiDqtD9PTkKA990nCJepp5eQriNoNh3H3aAP5SM7ATSMgGeJY5ut41cNg0eTIuaLY7yWKknrF7ufiJKwZqv8tuhrJR6ZqzL0iDXrlTRf9jmNLmpauWJH2Q5P1h9aftNXetofnTpyVBNJUoOAY4z8Pc8kY7WABzGCkPM0eqxoeAkKXnUlMHlYNimkoDWhNwaqQO1vMMR2CECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEARnzU320NO/k4GN9plHsCel2M28VeNojanIpydlqhvg6JrjIUh9pHPG9IahiGxoQWn7ksLGl6uFrhKoS2UrQ33C9/SJPoSX4mExFZhAx4Y4v6vpTepTv4APOg5enAz1NBweqpnq3jRlKypacGMw8UORM+WhMTFRc5xNMRg633I4+0kHol7WDfwt/6c2f0w1RYz9dm2MjpWlnPBib9krkdNQAKj+fH4Glw3KpYBT8SK/O6opYNRv2CbYNc5nBVVcTZtxhl+2wZhkW5zx+BVEb4CNh+bvAFGrn6N9vc81p+DQYgCPAP7L6nGPUIsu3s/M1RS+ESr/tU/lxpemTvUrbJGw\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "poll",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256"
}
2021-05-20 11:58:33
AddEmptyResponseTypesArrayToDynamicRegistrationRequest
Added empty response_types array to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one el6IA0uzlFNW2NO",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
        "alg": "PS256",
        "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ",
        "x5c": [
          "MIICuzCCAaOgAwIBAgIGAXmJpECKMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjAxMTU4MzNaFw0yMjA1MjAxMTU4MzNaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKA05u3+Jns8sJeZjftR3b5CZVxg262Eyv+ceMg7nC+Je8tBynA6U3CDjW//ovzsiCA4MrjvI7NHhLlAENJdVxDQji8EGFN5fXsFc1Zjrby2axAut9UC/y9p7B9wZpB+B+2mzIuqGrTltbiDqtD9PTkKA990nCJepp5eQriNoNh3H3aAP5SM7ATSMgGeJY5ut41cNg0eTIuaLY7yWKknrF7ufiJKwZqv8tuhrJR6ZqzL0iDXrlTRf9jmNLmpauWJH2Q5P1h9aftNXetofnTpyVBNJUoOAY4z8Pc8kY7WABzGCkPM0eqxoeAkKXnUlMHlYNimkoDWhNwaqQO1vMMR2CECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEARnzU320NO/k4GN9plHsCel2M28VeNojanIpydlqhvg6JrjIUh9pHPG9IahiGxoQWn7ksLGl6uFrhKoS2UrQ33C9/SJPoSX4mExFZhAx4Y4v6vpTepTv4APOg5enAz1NBweqpnq3jRlKypacGMw8UORM+WhMTFRc5xNMRg633I4+0kHol7WDfwt/6c2f0w1RYz9dm2MjpWlnPBib9krkdNQAKj+fH4Glw3KpYBT8SK/O6opYNRv2CbYNc5nBVVcTZtxhl+2wZhkW5zx+BVEb4CNh+bvAFGrn6N9vc81p+DQYgCPAP7L6nGPUIsu3s/M1RS+ESr/tU/lxpemTvUrbJGw\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "poll",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256",
  "response_types": []
}
2021-05-20 11:58:33
AddTokenEndpointAuthMethodPrivateKeyJwtToDynamicRegistrationRequest
Added private_key_jwt for token endpoint auth method to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one el6IA0uzlFNW2NO",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
        "alg": "PS256",
        "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "poll",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256",
  "response_types": [],
  "token_endpoint_auth_method": "private_key_jwt"
}
2021-05-20 11:58:33
AddTokenEndpointAuthSigningAlgPS256ToDynamicRegistrationRequest
Added PS256 for token endpoint auth signing alg to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one el6IA0uzlFNW2NO",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
        "alg": "PS256",
        "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "poll",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256",
  "response_types": [],
  "token_endpoint_auth_method": "private_key_jwt",
  "token_endpoint_auth_signing_alg": "PS256"
}
2021-05-20 11:58:33
AddTLSBoundAccessTokensTrueToDynamicRegistrationRequest
Added tls_client_certificate_bound_access_tokens to dynamic registration request
dynamic_registration_request
{
  "client_name": "pkjwt-one el6IA0uzlFNW2NO",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
        "alg": "PS256",
        "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "backchannel_user_code_parameter": false,
  "backchannel_token_delivery_mode": "poll",
  "backchannel_authentication_request_signing_alg": "PS256",
  "id_token_signed_response_alg": "PS256",
  "response_types": [],
  "token_endpoint_auth_method": "private_key_jwt",
  "token_endpoint_auth_signing_alg": "PS256",
  "tls_client_certificate_bound_access_tokens": true
}
2021-05-20 11:58:34
CallDynamicRegistrationEndpoint
HTTP request
request_uri
https://fapi.panva.cz/reg
request_method
POST
request_headers
{
  "accept": "application/json",
  "accept-charset": "utf-8",
  "content-type": "application/json",
  "content-length": "1852"
}
request_body
{"client_name":"pkjwt-one el6IA0uzlFNW2NO","grant_types":["urn:openid:params:grant-type:ciba"],"jwks":{"keys":[{"kty":"RSA","e":"AQAB","use":"sig","kid":"nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU","alg":"PS256","n":"oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ","x5c":["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"]}]},"backchannel_user_code_parameter":false,"backchannel_token_delivery_mode":"poll","backchannel_authentication_request_signing_alg":"PS256","id_token_signed_response_alg":"PS256","response_types":[],"token_endpoint_auth_method":"private_key_jwt","token_endpoint_auth_signing_alg":"PS256","tls_client_certificate_bound_access_tokens":true}
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:58:34 RESPONSE
CallDynamicRegistrationEndpoint
HTTP response
response_status_code
201 CREATED
response_status_text
Created
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "2360",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:34 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"application_type":"web","grant_types":["urn:openid:params:grant-type:ciba"],"id_token_signed_response_alg":"PS256","post_logout_redirect_uris":[],"redirect_uris":[],"require_auth_time":false,"response_types":[],"subject_type":"public","token_endpoint_auth_method":"private_key_jwt","request_object_signing_alg":"PS256","require_signed_request_object":true,"require_pushed_authorization_requests":false,"authorization_signed_response_alg":"PS256","tls_client_certificate_bound_access_tokens":true,"backchannel_user_code_parameter":false,"client_id_issued_at":1621511914,"client_id":"RsRV8XUazIaV6bDwwO8yV","client_name":"pkjwt-one el6IA0uzlFNW2NO","jwks":{"keys":[{"kty":"RSA","e":"AQAB","use":"sig","kid":"nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU","alg":"PS256","n":"oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ","x5c":["MIICuzCCAaOgAwIBAgIGAXmJpECKMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjAxMTU4MzNaFw0yMjA1MjAxMTU4MzNaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKA05u3+Jns8sJeZjftR3b5CZVxg262Eyv+ceMg7nC+Je8tBynA6U3CDjW//ovzsiCA4MrjvI7NHhLlAENJdVxDQji8EGFN5fXsFc1Zjrby2axAut9UC/y9p7B9wZpB+B+2mzIuqGrTltbiDqtD9PTkKA990nCJepp5eQriNoNh3H3aAP5SM7ATSMgGeJY5ut41cNg0eTIuaLY7yWKknrF7ufiJKwZqv8tuhrJR6ZqzL0iDXrlTRf9jmNLmpauWJH2Q5P1h9aftNXetofnTpyVBNJUoOAY4z8Pc8kY7WABzGCkPM0eqxoeAkKXnUlMHlYNimkoDWhNwaqQO1vMMR2CECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEARnzU320NO/k4GN9plHsCel2M28VeNojanIpydlqhvg6JrjIUh9pHPG9IahiGxoQWn7ksLGl6uFrhKoS2UrQ33C9/SJPoSX4mExFZhAx4Y4v6vpTepTv4APOg5enAz1NBweqpnq3jRlKypacGMw8UORM+WhMTFRc5xNMRg633I4+0kHol7WDfwt/6c2f0w1RYz9dm2MjpWlnPBib9krkdNQAKj+fH4Glw3KpYBT8SK/O6opYNRv2CbYNc5nBVVcTZtxhl+2wZhkW5zx+BVEb4CNh+bvAFGrn6N9vc81p+DQYgCPAP7L6nGPUIsu3s/M1RS+ESr/tU/lxpemTvUrbJGw=="]}]},"token_endpoint_auth_signing_alg":"PS256","backchannel_token_delivery_mode":"poll","backchannel_authentication_request_signing_alg":"PS256","registration_client_uri":"https://fapi.panva.cz/reg/RsRV8XUazIaV6bDwwO8yV","registration_access_token":"5_E1VWMEQIKkUvKqCsmAZ19GDZ1rCkXnFhvvuDOxwgR"}
2021-05-20 11:58:34
CallDynamicRegistrationEndpoint
Registration endpoint response
dynamic_registration_response
{"application_type":"web","grant_types":["urn:openid:params:grant-type:ciba"],"id_token_signed_response_alg":"PS256","post_logout_redirect_uris":[],"redirect_uris":[],"require_auth_time":false,"response_types":[],"subject_type":"public","token_endpoint_auth_method":"private_key_jwt","request_object_signing_alg":"PS256","require_signed_request_object":true,"require_pushed_authorization_requests":false,"authorization_signed_response_alg":"PS256","tls_client_certificate_bound_access_tokens":true,"backchannel_user_code_parameter":false,"client_id_issued_at":1621511914,"client_id":"RsRV8XUazIaV6bDwwO8yV","client_name":"pkjwt-one el6IA0uzlFNW2NO","jwks":{"keys":[{"kty":"RSA","e":"AQAB","use":"sig","kid":"nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU","alg":"PS256","n":"oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ","x5c":["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"]}]},"token_endpoint_auth_signing_alg":"PS256","backchannel_token_delivery_mode":"poll","backchannel_authentication_request_signing_alg":"PS256","registration_client_uri":"https://fapi.panva.cz/reg/RsRV8XUazIaV6bDwwO8yV","registration_access_token":"5_E1VWMEQIKkUvKqCsmAZ19GDZ1rCkXnFhvvuDOxwgR"}
2021-05-20 11:58:34
CallDynamicRegistrationEndpoint
Parsed registration endpoint response
application_type
web
grant_types
[
  "urn:openid:params:grant-type:ciba"
]
id_token_signed_response_alg
PS256
post_logout_redirect_uris
[]
redirect_uris
[]
require_auth_time
false
response_types
[]
subject_type
public
token_endpoint_auth_method
private_key_jwt
request_object_signing_alg
PS256
require_signed_request_object
true
require_pushed_authorization_requests
false
authorization_signed_response_alg
PS256
tls_client_certificate_bound_access_tokens
true
backchannel_user_code_parameter
false
client_id_issued_at
1621511914
client_id
RsRV8XUazIaV6bDwwO8yV
client_name
pkjwt-one el6IA0uzlFNW2NO
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
      "alg": "PS256",
      "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ",
      "x5c": [
        "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\u003d\u003d"
      ]
    }
  ]
}
token_endpoint_auth_signing_alg
PS256
backchannel_token_delivery_mode
poll
backchannel_authentication_request_signing_alg
PS256
registration_client_uri
https://fapi.panva.cz/reg/RsRV8XUazIaV6bDwwO8yV
registration_access_token
5_E1VWMEQIKkUvKqCsmAZ19GDZ1rCkXnFhvvuDOxwgR
2021-05-20 11:58:34 SUCCESS
CallDynamicRegistrationEndpoint
Extracted dynamic registration management credentials
registration_client_uri
https://fapi.panva.cz/reg/RsRV8XUazIaV6bDwwO8yV
registration_access_token
5_E1VWMEQIKkUvKqCsmAZ19GDZ1rCkXnFhvvuDOxwgR
2021-05-20 11:58:34
CopyScopeFromDynamicRegistrationTemplateToClientConfiguration
Copied scope from dynamic_client_registration_template to client configuration
client
{
  "application_type": "web",
  "grant_types": [
    "urn:openid:params:grant-type:ciba"
  ],
  "id_token_signed_response_alg": "PS256",
  "post_logout_redirect_uris": [],
  "redirect_uris": [],
  "require_auth_time": false,
  "response_types": [],
  "subject_type": "public",
  "token_endpoint_auth_method": "private_key_jwt",
  "request_object_signing_alg": "PS256",
  "require_signed_request_object": true,
  "require_pushed_authorization_requests": false,
  "authorization_signed_response_alg": "PS256",
  "tls_client_certificate_bound_access_tokens": true,
  "backchannel_user_code_parameter": false,
  "client_id_issued_at": 1621511914,
  "client_id": "RsRV8XUazIaV6bDwwO8yV",
  "client_name": "pkjwt-one el6IA0uzlFNW2NO",
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
        "alg": "PS256",
        "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ",
        "x5c": [
          "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\u003d\u003d"
        ]
      }
    ]
  },
  "token_endpoint_auth_signing_alg": "PS256",
  "backchannel_token_delivery_mode": "poll",
  "backchannel_authentication_request_signing_alg": "PS256",
  "registration_client_uri": "https://fapi.panva.cz/reg/RsRV8XUazIaV6bDwwO8yV",
  "registration_access_token": "5_E1VWMEQIKkUvKqCsmAZ19GDZ1rCkXnFhvvuDOxwgR",
  "scope": "openid offline_access"
}
2021-05-20 11:58:34 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-05-20 11:58:34 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-05-20 11:58:34 SUCCESS
FAPICheckKeyAlgInClientJWKs
Found a key with alg PS256 or ES256
2021-05-20 11:58:34 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "9HWhuFAxr9gYVfuey_XH4l2mWQTAHLFG-VDnGZzXFu_T6WBZorrVuyrbHQJc8-XbWE_5visFNb-TlFQbu7giLKgK3sEM-0lz9SSBzZAaWN7iQ6JIfyHFq6GMwA5KoyaifVGBdnjAkOh3Nd-tLcOUlR47VneKGyBkAtDpgI-kVFE",
      "kty": "RSA",
      "q": "p8UMeULVlItfnRF8JiE55WYc27j9UV6GQZYXbZtSyIafgiHUF04YFWnr-U59g473rwTaLW1ZEPcs2MNfjN86pknjUb1FNV2Ed5M-xEiy7Pkq84xOlQIrN9ITl7LenVkhCZDaAlkwDAChARpnbm4AK_Vw07h60eONpaW_ON0CYtE",
      "d": "KqeLKKh3RG6XMfXfWJ-mY2a4KA1dz-hASCg3_E_quLlpLWfZ52GQH6_W84_jrGWppLJxxs1c-vm6u7vz_p59dOuiP6BefbMmFqAP4lttwYXsIYXeyicfHFeeV4yMskHsCHlVkoX60FkstfDQhQ43w70H5PHeNERxJk9AgnSq85buFvpJYlxcklg91Mot5MkrWsiTEbhf5CRgIxmGlQfuC6PhBKJWBpfimmzOfzjQ710dWY5SxewDtTTL30FbPucKf4--Z5YEkJCBG9jE5Zet5VFYKxXSBm3N5lGtDjbFWZ92rXYJW87gbIpQyXSqUHo237IwHfx_6jyYefWSAutJAQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU",
      "qi": "QVvXTn46wZvcEKcmteOMnljpQbPfX6VrwOeONKC6GBxHL79Ct_sWv9psOQGWh9Ls9q1umXtTFVKoQid0LNMfIh60WmwHZOYJzZ6mvP8eH5CAEwWe0mc7EwVxHrgSU24oePawrTMEwKjcMrTGuXXOUbq6M-a9HF-gfcvp2URfS7s",
      "dp": "Ee464XEIY_R-vHfLSvyJH8JsvCTMDo62PP1BJjDJ2gXXTkvh5zy7BpJ7JeKRfNZEQ3MCR3-ST0HxCjUtH5S-9PWSbopMcHYPylBWMQS72f7nK7zQgnqwrAkacM_bi6H-0yBSVaU_wqE6dTol0rCAyntAMPRtrdWvYEGAjwx6KjE",
      "alg": "PS256",
      "dq": "H8AwGybl6uXxo3UyrLivD1Yi8gZxkpu0BueT6X9yzFaGC4fBbuOttSfFq_oJ0QMWpv3hGKXQLGDLEP7wr2Vz4RKsvcR3O6FGN6cbQuSLUEPbuBn-qT6u1TKh2JzWeqrqkLfkOnuMl0jrL51Co-iXibo6rycDv4M0RHw401coY3E",
      "n": "oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ"
    }
  ]
}
2021-05-20 11:58:34 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2021-05-20 11:58:34 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://mtls.fapi.panva.cz/accounts
institution_id
xxxxx
2021-05-20 11:58:34 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://mtls.fapi.panva.cz/accounts
2021-05-20 11:58:34 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
2021-05-20 11:58:34 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
accounts_request_endpoint
{
  "testHost": "mtls.fapi.panva.cz",
  "testPort": 443
}
2021-05-20 11:58:34
fapi-ciba-id1-multiple-call-to-token-endpoint
Setup Done
Call backchannel authentication endpoint
2021-05-20 11:58:34 SUCCESS
CreateEmptyAuthorizationEndpointRequest
Created empty authorization endpoint request
2021-05-20 11:58:34 SUCCESS
AddScopeToAuthorizationEndpointRequest
Added scope of 'openid offline_access' to authorization endpoint request
scope
openid offline_access
2021-05-20 11:58:34 SUCCESS
AddHintToAuthorizationEndpointRequest
Added hint to authorization endpoint request
login_hint
panva
2021-05-20 11:58:34 SUCCESS
AddBindingMessageToAuthorizationEndpointRequest
Added binding message to authorization endpoint request
binding_message
1234
2021-05-20 11:58:34 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "scope": "openid offline_access",
  "login_hint": "panva",
  "binding_message": "1234"
}
2021-05-20 11:58:34 SUCCESS
AddIatToRequestObject
Added iat to request object claims
iat
1.621511914E9
2021-05-20 11:58:34 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.621512214E9
2021-05-20 11:58:34 SUCCESS
AddNbfToRequestObject
Added nbf to request object claims
nbf
1.621511914E9
2021-05-20 11:58:34 SUCCESS
AddJtiToRequestObject
Added jti to request object claims
jti
KanqNxYWxHr3andfngGV
2021-05-20 11:58:34 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://fapi.panva.cz
2021-05-20 11:58:34 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
RsRV8XUazIaV6bDwwO8yV
2021-05-20 11:58:35 SUCCESS
SignRequestObject
Signed the request object
claims
{"aud":"https:\/\/fapi.panva.cz","login_hint":"panva","nbf":1621511914,"scope":"openid offline_access","iss":"RsRV8XUazIaV6bDwwO8yV","binding_message":"1234","exp":1621512214,"iat":1621511914,"jti":"KanqNxYWxHr3andfngGV"}
header
{"kid":"nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU","alg":"PS256"}
request_object
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJhdWQiOiJodHRwczpcL1wvZmFwaS5wYW52YS5jeiIsImxvZ2luX2hpbnQiOiJwYW52YSIsIm5iZiI6MTYyMTUxMTkxNCwic2NvcGUiOiJvcGVuaWQgb2ZmbGluZV9hY2Nlc3MiLCJpc3MiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJiaW5kaW5nX21lc3NhZ2UiOiIxMjM0IiwiZXhwIjoxNjIxNTEyMjE0LCJpYXQiOjE2MjE1MTE5MTQsImp0aSI6IkthbnFOeFlXeEhyM2FuZGZuZ0dWIn0.HyeM64s-R0cvEOhFqjJuCDYCkswqXiuWhcFmadbdD8HLA1kYj4rhs1dWKawnGeCfbR8uSRj_lEjF0l27wPOlGuQqT31jG50peyJvi1D_IxRQQ8-_BqDHj58NU_yIxVsWY0qDfg4oGQHxNa7ExDhY3eGJ8iDOe357gYcNc9sGFFM1bTvMlYu-2okdDKX2fz3UDKNOKHHqDNyQDct4r1tEXbcnD2tiPKoLn79JlkSJzYWk21CWxNgMIviASfajP57xIQw9d7dnBpGjxhIGA8PneWWpqikKhdSA4Y4BO90x_M5VVVqDeOqtkqBj_xW3lcarplWm_UQfhM0Ukk9N2vHcLA
key
{"p":"9HWhuFAxr9gYVfuey_XH4l2mWQTAHLFG-VDnGZzXFu_T6WBZorrVuyrbHQJc8-XbWE_5visFNb-TlFQbu7giLKgK3sEM-0lz9SSBzZAaWN7iQ6JIfyHFq6GMwA5KoyaifVGBdnjAkOh3Nd-tLcOUlR47VneKGyBkAtDpgI-kVFE","kty":"RSA","q":"p8UMeULVlItfnRF8JiE55WYc27j9UV6GQZYXbZtSyIafgiHUF04YFWnr-U59g473rwTaLW1ZEPcs2MNfjN86pknjUb1FNV2Ed5M-xEiy7Pkq84xOlQIrN9ITl7LenVkhCZDaAlkwDAChARpnbm4AK_Vw07h60eONpaW_ON0CYtE","d":"KqeLKKh3RG6XMfXfWJ-mY2a4KA1dz-hASCg3_E_quLlpLWfZ52GQH6_W84_jrGWppLJxxs1c-vm6u7vz_p59dOuiP6BefbMmFqAP4lttwYXsIYXeyicfHFeeV4yMskHsCHlVkoX60FkstfDQhQ43w70H5PHeNERxJk9AgnSq85buFvpJYlxcklg91Mot5MkrWsiTEbhf5CRgIxmGlQfuC6PhBKJWBpfimmzOfzjQ710dWY5SxewDtTTL30FbPucKf4--Z5YEkJCBG9jE5Zet5VFYKxXSBm3N5lGtDjbFWZ92rXYJW87gbIpQyXSqUHo237IwHfx_6jyYefWSAutJAQ","e":"AQAB","use":"sig","kid":"nXfHld2_daaw3LvndVfkSB7BzontIMoOEzviLXya2pU","qi":"QVvXTn46wZvcEKcmteOMnljpQbPfX6VrwOeONKC6GBxHL79Ct_sWv9psOQGWh9Ls9q1umXtTFVKoQid0LNMfIh60WmwHZOYJzZ6mvP8eH5CAEwWe0mc7EwVxHrgSU24oePawrTMEwKjcMrTGuXXOUbq6M-a9HF-gfcvp2URfS7s","dp":"Ee464XEIY_R-vHfLSvyJH8JsvCTMDo62PP1BJjDJ2gXXTkvh5zy7BpJ7JeKRfNZEQ3MCR3-ST0HxCjUtH5S-9PWSbopMcHYPylBWMQS72f7nK7zQgnqwrAkacM_bi6H-0yBSVaU_wqE6dTol0rCAyntAMPRtrdWvYEGAjwx6KjE","alg":"PS256","dq":"H8AwGybl6uXxo3UyrLivD1Yi8gZxkpu0BueT6X9yzFaGC4fBbuOttSfFq_oJ0QMWpv3hGKXQLGDLEP7wr2Vz4RKsvcR3O6FGN6cbQuSLUEPbuBn-qT6u1TKh2JzWeqrqkLfkOnuMl0jrL51Co-iXibo6rycDv4M0RHw401coY3E","n":"oDTm7f4mezywl5mN-1HdvkJlXGDbrYTK_5x4yDucL4l7y0HKcDpTcIONb_-i_OyIIDgyuO8js0eEuUAQ0l1XENCOLwQYU3l9ewVzVmOtvLZrEC631QL_L2nsH3BmkH4H7abMi6oatOW1uIOq0P09OQoD33ScIl6mnl5CuI2g2HcfdoA_lIzsBNIyAZ4ljm63jVw2DR5Mi5otjvJYqSesXu5-IkrBmq_y26GslHpmrMvSINeuVNF_2OY0ualq5YkfZDk_WH1p-01d62h-dOnJUE0lSg4BjjPw9zyRjtYAHMYKQ8zR6rGh4CQpedSUweVg2KaSgNaE3BqpA7W8wxHYIQ"}
2021-05-20 11:58:35 SUCCESS
CreateBackchannelAuthenticationEndpointRequest
Created backchannel authentication endpoint request
2021-05-20 11:58:35
AddRequestToBackchannelAuthenticationEndpointRequest
request
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJhdWQiOiJodHRwczpcL1wvZmFwaS5wYW52YS5jeiIsImxvZ2luX2hpbnQiOiJwYW52YSIsIm5iZiI6MTYyMTUxMTkxNCwic2NvcGUiOiJvcGVuaWQgb2ZmbGluZV9hY2Nlc3MiLCJpc3MiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJiaW5kaW5nX21lc3NhZ2UiOiIxMjM0IiwiZXhwIjoxNjIxNTEyMjE0LCJpYXQiOjE2MjE1MTE5MTQsImp0aSI6IkthbnFOeFlXeEhyM2FuZGZuZ0dWIn0.HyeM64s-R0cvEOhFqjJuCDYCkswqXiuWhcFmadbdD8HLA1kYj4rhs1dWKawnGeCfbR8uSRj_lEjF0l27wPOlGuQqT31jG50peyJvi1D_IxRQQ8-_BqDHj58NU_yIxVsWY0qDfg4oGQHxNa7ExDhY3eGJ8iDOe357gYcNc9sGFFM1bTvMlYu-2okdDKX2fz3UDKNOKHHqDNyQDct4r1tEXbcnD2tiPKoLn79JlkSJzYWk21CWxNgMIviASfajP57xIQw9d7dnBpGjxhIGA8PneWWpqikKhdSA4Y4BO90x_M5VVVqDeOqtkqBj_xW3lcarplWm_UQfhM0Ukk9N2vHcLA
2021-05-20 11:58:35 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
AWJhdQJK4oAE7fdKS4ke
iat
1621511915
exp
1621511975
2021-05-20 11:58:35 SUCCESS
SetClientAuthenticationAudToBackchannelAuthenticationEndpoint
Add backchannel_authentication_endpoint as aud value to client_assertion_claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/backchannel
jti
AWJhdQJK4oAE7fdKS4ke
iat
1621511915
exp
1621511975
2021-05-20 11:58:35 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC9iYWNrY2hhbm5lbCIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk3NSwiaWF0IjoxNjIxNTExOTE1LCJqdGkiOiJBV0poZFFKSzRvQUU3ZmRLUzRrZSJ9.C3G2jELE80s01wqBtDTJs6NyBhos4X9DFHVA1ivbNpelFfNlTWkvh0fIykofQ6_ST35fXVM2bxNjCpQXb6SPOEwQ80EZpvMh8axYdnNRI4nj0KfiVH-6u_9FSyvbvGqRpKismnw10YQQ2evsvJpXmz0Lw9YsNecvMb1Hj9wlgnICTsgQsA3DFeCaqok2TE9AfZEP2h4BSPGCqLCh2LpKXos_rXd3p_h-EUu0kL3OBJj8epfAG9KI_Gn0DAkujkq474wSbloI-3BOnRWDTq0rvb-zJ-zA71I99ynuOux0tK8Dsh2Wkx4j_m18E43RE253mLRwkC93XNf40WUw_63EGg
2021-05-20 11:58:35
AddClientAssertionToBackchannelAuthenticationEndpoint
Added client assertion
request
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJhdWQiOiJodHRwczpcL1wvZmFwaS5wYW52YS5jeiIsImxvZ2luX2hpbnQiOiJwYW52YSIsIm5iZiI6MTYyMTUxMTkxNCwic2NvcGUiOiJvcGVuaWQgb2ZmbGluZV9hY2Nlc3MiLCJpc3MiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJiaW5kaW5nX21lc3NhZ2UiOiIxMjM0IiwiZXhwIjoxNjIxNTEyMjE0LCJpYXQiOjE2MjE1MTE5MTQsImp0aSI6IkthbnFOeFlXeEhyM2FuZGZuZ0dWIn0.HyeM64s-R0cvEOhFqjJuCDYCkswqXiuWhcFmadbdD8HLA1kYj4rhs1dWKawnGeCfbR8uSRj_lEjF0l27wPOlGuQqT31jG50peyJvi1D_IxRQQ8-_BqDHj58NU_yIxVsWY0qDfg4oGQHxNa7ExDhY3eGJ8iDOe357gYcNc9sGFFM1bTvMlYu-2okdDKX2fz3UDKNOKHHqDNyQDct4r1tEXbcnD2tiPKoLn79JlkSJzYWk21CWxNgMIviASfajP57xIQw9d7dnBpGjxhIGA8PneWWpqikKhdSA4Y4BO90x_M5VVVqDeOqtkqBj_xW3lcarplWm_UQfhM0Ukk9N2vHcLA
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC9iYWNrY2hhbm5lbCIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk3NSwiaWF0IjoxNjIxNTExOTE1LCJqdGkiOiJBV0poZFFKSzRvQUU3ZmRLUzRrZSJ9.C3G2jELE80s01wqBtDTJs6NyBhos4X9DFHVA1ivbNpelFfNlTWkvh0fIykofQ6_ST35fXVM2bxNjCpQXb6SPOEwQ80EZpvMh8axYdnNRI4nj0KfiVH-6u_9FSyvbvGqRpKismnw10YQQ2evsvJpXmz0Lw9YsNecvMb1Hj9wlgnICTsgQsA3DFeCaqok2TE9AfZEP2h4BSPGCqLCh2LpKXos_rXd3p_h-EUu0kL3OBJj8epfAG9KI_Gn0DAkujkq474wSbloI-3BOnRWDTq0rvb-zJ-zA71I99ynuOux0tK8Dsh2Wkx4j_m18E43RE253mLRwkC93XNf40WUw_63EGg
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:58:35
CallBackchannelAuthenticationEndpoint
HTTP request
request_uri
https://mtls.fapi.panva.cz/backchannel
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "1508"
}
request_body
request=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJhdWQiOiJodHRwczpcL1wvZmFwaS5wYW52YS5jeiIsImxvZ2luX2hpbnQiOiJwYW52YSIsIm5iZiI6MTYyMTUxMTkxNCwic2NvcGUiOiJvcGVuaWQgb2ZmbGluZV9hY2Nlc3MiLCJpc3MiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJiaW5kaW5nX21lc3NhZ2UiOiIxMjM0IiwiZXhwIjoxNjIxNTEyMjE0LCJpYXQiOjE2MjE1MTE5MTQsImp0aSI6IkthbnFOeFlXeEhyM2FuZGZuZ0dWIn0.HyeM64s-R0cvEOhFqjJuCDYCkswqXiuWhcFmadbdD8HLA1kYj4rhs1dWKawnGeCfbR8uSRj_lEjF0l27wPOlGuQqT31jG50peyJvi1D_IxRQQ8-_BqDHj58NU_yIxVsWY0qDfg4oGQHxNa7ExDhY3eGJ8iDOe357gYcNc9sGFFM1bTvMlYu-2okdDKX2fz3UDKNOKHHqDNyQDct4r1tEXbcnD2tiPKoLn79JlkSJzYWk21CWxNgMIviASfajP57xIQw9d7dnBpGjxhIGA8PneWWpqikKhdSA4Y4BO90x_M5VVVqDeOqtkqBj_xW3lcarplWm_UQfhM0Ukk9N2vHcLA&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC9iYWNrY2hhbm5lbCIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk3NSwiaWF0IjoxNjIxNTExOTE1LCJqdGkiOiJBV0poZFFKSzRvQUU3ZmRLUzRrZSJ9.C3G2jELE80s01wqBtDTJs6NyBhos4X9DFHVA1ivbNpelFfNlTWkvh0fIykofQ6_ST35fXVM2bxNjCpQXb6SPOEwQ80EZpvMh8axYdnNRI4nj0KfiVH-6u_9FSyvbvGqRpKismnw10YQQ2evsvJpXmz0Lw9YsNecvMb1Hj9wlgnICTsgQsA3DFeCaqok2TE9AfZEP2h4BSPGCqLCh2LpKXos_rXd3p_h-EUu0kL3OBJj8epfAG9KI_Gn0DAkujkq474wSbloI-3BOnRWDTq0rvb-zJ-zA71I99ynuOux0tK8Dsh2Wkx4j_m18E43RE253mLRwkC93XNf40WUw_63EGg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:58:36 RESPONSE
CallBackchannelAuthenticationEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "78",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:36 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"expires_in":600,"auth_req_id":"zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz"}
2021-05-20 11:58:36
CallBackchannelAuthenticationEndpoint
Backchannel Authentication endpoint response
backchannel_authentication_endpoint_response
{"expires_in":600,"auth_req_id":"zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz"}
2021-05-20 11:58:36 SUCCESS
CallBackchannelAuthenticationEndpoint
Parsed backchannel authentication endpoint response
expires_in
600
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:58:36 SUCCESS
CheckBackchannelAuthenticationEndpointHttpStatus200
Backchannel authentication endpoint http status code was 200
2021-05-20 11:58:36 SUCCESS
CheckBackchannelAuthenticationEndpointContentType
Backchannel authentication endpoint Content-Type: header is application/json
2021-05-20 11:58:36 SUCCESS
CheckIfBackchannelAuthenticationEndpointResponseError
No error from Backchannel authentication endpoint
2021-05-20 11:58:36 SUCCESS
ValidateAuthenticationRequestId
auth_req_id passed all validation checks
2021-05-20 11:58:36 SUCCESS
EnsureMinimumAuthenticationRequestIdLength
auth_req_id is of sufficient length
actual
344
required
128
2021-05-20 11:58:36 SUCCESS
EnsureMinimumAuthenticationRequestIdEntropy
Calculated shannon entropy seems sufficient
actual
204.9648564755899
expected
96.0
2021-05-20 11:58:36 SUCCESS
EnsureRecommendedAuthenticationRequestIdEntropy
Calculated entropy
actual
204.9648564755899
recommended
160.0
2021-05-20 11:58:36 SUCCESS
ValidateAuthenticationRequestIdExpiresIn
expires_in passed all validation checks
expires_in
600
2021-05-20 11:58:36
ValidateAuthenticationRequestIdInterval
interval is empty.
Call token endpoint expecting pending
2021-05-20 11:58:36 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:58:36
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:58:36 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
UzVrJKdOqCW6bUQ3akLb
iat
1621511916
exp
1621511976
2021-05-20 11:58:36 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk3NiwiaWF0IjoxNjIxNTExOTE2LCJqdGkiOiJVelZySktkT3FDVzZiVVEzYWtMYiJ9.dHFV1Q3aTMEZd7BNSt2caYUiVl_naXnvrdlV96bNpriyXtOBl4wWyqBVG97cCHUHqSgbzISBhhdVH05xFT4WmzjN8OWKlbj5yRvjUE06Yg9VpD24psY-t65fbucZgVCrUmAUB8PX0jcz8d1IuFqDRogw5Y47wuL24DlCJaWKfQ2x6XdIiL6hBlJqSOM3Q7tG1xmEFojV3427k3R9s5PZ70-WbKbbg0Op2eRPDxCuA3bVtZzfl3gpASwN3hEqq1Ownhla5HQLg0rNd3BJRSUQ5fbOh45bSfMxpgnetwDsUdTiSbeO6sRs1ixxfEf054pAq6E0kiPE_XXNIkF7fOd6cw
2021-05-20 11:58:37
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk3NiwiaWF0IjoxNjIxNTExOTE2LCJqdGkiOiJVelZySktkT3FDVzZiVVEzYWtMYiJ9.dHFV1Q3aTMEZd7BNSt2caYUiVl_naXnvrdlV96bNpriyXtOBl4wWyqBVG97cCHUHqSgbzISBhhdVH05xFT4WmzjN8OWKlbj5yRvjUE06Yg9VpD24psY-t65fbucZgVCrUmAUB8PX0jcz8d1IuFqDRogw5Y47wuL24DlCJaWKfQ2x6XdIiL6hBlJqSOM3Q7tG1xmEFojV3427k3R9s5PZ70-WbKbbg0Op2eRPDxCuA3bVtZzfl3gpASwN3hEqq1Ownhla5HQLg0rNd3BJRSUQ5fbOh45bSfMxpgnetwDsUdTiSbeO6sRs1ixxfEf054pAq6E0kiPE_XXNIkF7fOd6cw
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:58:37
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk3NiwiaWF0IjoxNjIxNTExOTE2LCJqdGkiOiJVelZySktkT3FDVzZiVVEzYWtMYiJ9.dHFV1Q3aTMEZd7BNSt2caYUiVl_naXnvrdlV96bNpriyXtOBl4wWyqBVG97cCHUHqSgbzISBhhdVH05xFT4WmzjN8OWKlbj5yRvjUE06Yg9VpD24psY-t65fbucZgVCrUmAUB8PX0jcz8d1IuFqDRogw5Y47wuL24DlCJaWKfQ2x6XdIiL6hBlJqSOM3Q7tG1xmEFojV3427k3R9s5PZ70-WbKbbg0Op2eRPDxCuA3bVtZzfl3gpASwN3hEqq1Ownhla5HQLg0rNd3BJRSUQ5fbOh45bSfMxpgnetwDsUdTiSbeO6sRs1ixxfEf054pAq6E0kiPE_XXNIkF7fOd6cw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:58:38 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:38 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:58:38 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:38 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response is pending or slow_down
2021-05-20 11:58:38 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:58:38 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:58:38 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:38 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:38 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:58:38 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Call token endpoint expecting pending (second time)
2021-05-20 11:58:43 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:58:43
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:58:43 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
Vl0khZ8XdK3Rv95yJXsg
iat
1621511923
exp
1621511983
2021-05-20 11:58:43 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk4MywiaWF0IjoxNjIxNTExOTIzLCJqdGkiOiJWbDBraFo4WGRLM1J2OTV5SlhzZyJ9.C9mTFiknM3vdoE7w6norkoBwaOYWDLmDvcyRm9HxOJaG5bI8m9KzhKNMN1gNvYhLINnS64zOpKZ4APTklWnw9b8xvEFiOaQlR5tjvR-fCgceUBpTNAYULX6L9TMV-eHdZ9whYxXjg0JDleiTm2ZsJmJRk2ocmFV9fuBTAh45T7VIekZB4b4Ts6x9rljlWZOYkVroL57zaCkM2aCAwlgy4-rpjgjwTlcgx7Pq4wUQyosMzF2sDjFPAlK2vxh0dWOsJylZV_0Gqo-EKuf_dSMgzSidY3QvOeNwb4g8ij_qZZARlfc9Ety93cmQ3i_W1zum5EJZ6XTiJFqhcX25BKOMQA
2021-05-20 11:58:44
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk4MywiaWF0IjoxNjIxNTExOTIzLCJqdGkiOiJWbDBraFo4WGRLM1J2OTV5SlhzZyJ9.C9mTFiknM3vdoE7w6norkoBwaOYWDLmDvcyRm9HxOJaG5bI8m9KzhKNMN1gNvYhLINnS64zOpKZ4APTklWnw9b8xvEFiOaQlR5tjvR-fCgceUBpTNAYULX6L9TMV-eHdZ9whYxXjg0JDleiTm2ZsJmJRk2ocmFV9fuBTAh45T7VIekZB4b4Ts6x9rljlWZOYkVroL57zaCkM2aCAwlgy4-rpjgjwTlcgx7Pq4wUQyosMzF2sDjFPAlK2vxh0dWOsJylZV_0Gqo-EKuf_dSMgzSidY3QvOeNwb4g8ij_qZZARlfc9Ety93cmQ3i_W1zum5EJZ6XTiJFqhcX25BKOMQA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:58:44
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk4MywiaWF0IjoxNjIxNTExOTIzLCJqdGkiOiJWbDBraFo4WGRLM1J2OTV5SlhzZyJ9.C9mTFiknM3vdoE7w6norkoBwaOYWDLmDvcyRm9HxOJaG5bI8m9KzhKNMN1gNvYhLINnS64zOpKZ4APTklWnw9b8xvEFiOaQlR5tjvR-fCgceUBpTNAYULX6L9TMV-eHdZ9whYxXjg0JDleiTm2ZsJmJRk2ocmFV9fuBTAh45T7VIekZB4b4Ts6x9rljlWZOYkVroL57zaCkM2aCAwlgy4-rpjgjwTlcgx7Pq4wUQyosMzF2sDjFPAlK2vxh0dWOsJylZV_0Gqo-EKuf_dSMgzSidY3QvOeNwb4g8ij_qZZARlfc9Ety93cmQ3i_W1zum5EJZ6XTiJFqhcX25BKOMQA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "MIICuzCCAaOgAwIBAgIGAXmJpECKMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjAxMTU4MzNaFw0yMjA1MjAxMTU4MzNaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKA05u3+Jns8sJeZjftR3b5CZVxg262Eyv+ceMg7nC+Je8tBynA6U3CDjW//ovzsiCA4MrjvI7NHhLlAENJdVxDQji8EGFN5fXsFc1Zjrby2axAut9UC/y9p7B9wZpB+B+2mzIuqGrTltbiDqtD9PTkKA990nCJepp5eQriNoNh3H3aAP5SM7ATSMgGeJY5ut41cNg0eTIuaLY7yWKknrF7ufiJKwZqv8tuhrJR6ZqzL0iDXrlTRf9jmNLmpauWJH2Q5P1h9aftNXetofnTpyVBNJUoOAY4z8Pc8kY7WABzGCkPM0eqxoeAkKXnUlMHlYNimkoDWhNwaqQO1vMMR2CECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEARnzU320NO/k4GN9plHsCel2M28VeNojanIpydlqhvg6JrjIUh9pHPG9IahiGxoQWn7ksLGl6uFrhKoS2UrQ33C9/SJPoSX4mExFZhAx4Y4v6vpTepTv4APOg5enAz1NBweqpnq3jRlKypacGMw8UORM+WhMTFRc5xNMRg633I4+0kHol7WDfwt/6c2f0w1RYz9dm2MjpWlnPBib9krkdNQAKj+fH4Glw3KpYBT8SK/O6opYNRv2CbYNc5nBVVcTZtxhl+2wZhkW5zx+BVEb4CNh+bvAFGrn6N9vc81p+DQYgCPAP7L6nGPUIsu3s/M1RS+ESr/tU/lxpemTvUrbJGw\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:58:46 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:45 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:58:46 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:46 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
Verify token endpoint response is pending or slow_down
2021-05-20 11:58:46 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:58:46 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:58:46 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:46 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:46 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:58:46 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:58:46 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:58:46
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:58:46 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
wF1ykIcmtZoWDCUX99Pg
iat
1621511926
exp
1621511986
2021-05-20 11:58:46 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk4NiwiaWF0IjoxNjIxNTExOTI2LCJqdGkiOiJ3RjF5a0ljbXRab1dEQ1VYOTlQZyJ9.LwMk-44_i-dD74tlRWxzNMtE3tGiKAoHlhMJNCzQ0hqafyIHrHXIdNCo6m-L5m7WX6PNoLg4CqmyILO7WvJytQjysRH6glYc-OvqhPsJFUeYTzNGaUAzgQLmYMwEGuekSr7pVgh5UNCuw4-xwmYy_9fyFtOad607l8vjUKwye1q1aHflHkMrV-A6JoVFaHo-b8l4lnkd20RrcjyssjcnXU1t9dlwtXYSCPg2Lw8X4cJOIHc0nIEJOawGfozDvmsq-TI10aZbYvmBYLb9QO0LIzRLfIh1tF8nalZcWGdgfSpyTPoFf1bCUm3ZnRfFbBHWgByeXbef0tVnRGbsVzn1rQ
2021-05-20 11:58:46
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk4NiwiaWF0IjoxNjIxNTExOTI2LCJqdGkiOiJ3RjF5a0ljbXRab1dEQ1VYOTlQZyJ9.LwMk-44_i-dD74tlRWxzNMtE3tGiKAoHlhMJNCzQ0hqafyIHrHXIdNCo6m-L5m7WX6PNoLg4CqmyILO7WvJytQjysRH6glYc-OvqhPsJFUeYTzNGaUAzgQLmYMwEGuekSr7pVgh5UNCuw4-xwmYy_9fyFtOad607l8vjUKwye1q1aHflHkMrV-A6JoVFaHo-b8l4lnkd20RrcjyssjcnXU1t9dlwtXYSCPg2Lw8X4cJOIHc0nIEJOawGfozDvmsq-TI10aZbYvmBYLb9QO0LIzRLfIh1tF8nalZcWGdgfSpyTPoFf1bCUm3ZnRfFbBHWgByeXbef0tVnRGbsVzn1rQ
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:58:46
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk4NiwiaWF0IjoxNjIxNTExOTI2LCJqdGkiOiJ3RjF5a0ljbXRab1dEQ1VYOTlQZyJ9.LwMk-44_i-dD74tlRWxzNMtE3tGiKAoHlhMJNCzQ0hqafyIHrHXIdNCo6m-L5m7WX6PNoLg4CqmyILO7WvJytQjysRH6glYc-OvqhPsJFUeYTzNGaUAzgQLmYMwEGuekSr7pVgh5UNCuw4-xwmYy_9fyFtOad607l8vjUKwye1q1aHflHkMrV-A6JoVFaHo-b8l4lnkd20RrcjyssjcnXU1t9dlwtXYSCPg2Lw8X4cJOIHc0nIEJOawGfozDvmsq-TI10aZbYvmBYLb9QO0LIzRLfIh1tF8nalZcWGdgfSpyTPoFf1bCUm3ZnRfFbBHWgByeXbef0tVnRGbsVzn1rQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "MIICuzCCAaOgAwIBAgIGAXmJpECKMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjAxMTU4MzNaFw0yMjA1MjAxMTU4MzNaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKA05u3+Jns8sJeZjftR3b5CZVxg262Eyv+ceMg7nC+Je8tBynA6U3CDjW//ovzsiCA4MrjvI7NHhLlAENJdVxDQji8EGFN5fXsFc1Zjrby2axAut9UC/y9p7B9wZpB+B+2mzIuqGrTltbiDqtD9PTkKA990nCJepp5eQriNoNh3H3aAP5SM7ATSMgGeJY5ut41cNg0eTIuaLY7yWKknrF7ufiJKwZqv8tuhrJR6ZqzL0iDXrlTRf9jmNLmpauWJH2Q5P1h9aftNXetofnTpyVBNJUoOAY4z8Pc8kY7WABzGCkPM0eqxoeAkKXnUlMHlYNimkoDWhNwaqQO1vMMR2CECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEARnzU320NO/k4GN9plHsCel2M28VeNojanIpydlqhvg6JrjIUh9pHPG9IahiGxoQWn7ksLGl6uFrhKoS2UrQ33C9/SJPoSX4mExFZhAx4Y4v6vpTepTv4APOg5enAz1NBweqpnq3jRlKypacGMw8UORM+WhMTFRc5xNMRg633I4+0kHol7WDfwt/6c2f0w1RYz9dm2MjpWlnPBib9krkdNQAKj+fH4Glw3KpYBT8SK/O6opYNRv2CbYNc5nBVVcTZtxhl+2wZhkW5zx+BVEb4CNh+bvAFGrn6N9vc81p+DQYgCPAP7L6nGPUIsu3s/M1RS+ESr/tU/lxpemTvUrbJGw\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:58:47 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:47 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:58:47 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:47 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:58:47
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:58:47 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:58:47 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:58:47 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:47 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:47 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:58:47 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:58:47 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:58:47
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:58:47 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
ZzzrFaoyP4AGqQmZ8nyv
iat
1621511927
exp
1621511987
2021-05-20 11:58:47 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk4NywiaWF0IjoxNjIxNTExOTI3LCJqdGkiOiJaenpyRmFveVA0QUdxUW1aOG55diJ9.UZFbVdQf8eGUfobLIm5iJbO4oW1hPMpWHx0S-KxwcUm8WdeUggQETybbBfrE23dWWLwRMkymgDt6XIFRgZM--JOeQrpT7A_3XMKLUU3RGYa6gQskMRs6Ktu9hX1WgKz5K2bC2LeUJ-1wZpdLgh1kfUsuM_8KyAmZ_FsBVQdPTxM8oRIfqAcAhytBqIUJg_bnaIJoAlnwXlgLRnswWycH8sQyJBTt7F6pRCs48jC5Disze147GVbHVwjVBpoZkm9za2CvdZoONqubCGs0iiPjYsLEpSqHwm4w-cfETYotuGHC_hSK06zox_fUqJAP9MusQvkFGOvknkF_-6RjGuR1FA
2021-05-20 11:58:47
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk4NywiaWF0IjoxNjIxNTExOTI3LCJqdGkiOiJaenpyRmFveVA0QUdxUW1aOG55diJ9.UZFbVdQf8eGUfobLIm5iJbO4oW1hPMpWHx0S-KxwcUm8WdeUggQETybbBfrE23dWWLwRMkymgDt6XIFRgZM--JOeQrpT7A_3XMKLUU3RGYa6gQskMRs6Ktu9hX1WgKz5K2bC2LeUJ-1wZpdLgh1kfUsuM_8KyAmZ_FsBVQdPTxM8oRIfqAcAhytBqIUJg_bnaIJoAlnwXlgLRnswWycH8sQyJBTt7F6pRCs48jC5Disze147GVbHVwjVBpoZkm9za2CvdZoONqubCGs0iiPjYsLEpSqHwm4w-cfETYotuGHC_hSK06zox_fUqJAP9MusQvkFGOvknkF_-6RjGuR1FA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:58:48
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk4NywiaWF0IjoxNjIxNTExOTI3LCJqdGkiOiJaenpyRmFveVA0QUdxUW1aOG55diJ9.UZFbVdQf8eGUfobLIm5iJbO4oW1hPMpWHx0S-KxwcUm8WdeUggQETybbBfrE23dWWLwRMkymgDt6XIFRgZM--JOeQrpT7A_3XMKLUU3RGYa6gQskMRs6Ktu9hX1WgKz5K2bC2LeUJ-1wZpdLgh1kfUsuM_8KyAmZ_FsBVQdPTxM8oRIfqAcAhytBqIUJg_bnaIJoAlnwXlgLRnswWycH8sQyJBTt7F6pRCs48jC5Disze147GVbHVwjVBpoZkm9za2CvdZoONqubCGs0iiPjYsLEpSqHwm4w-cfETYotuGHC_hSK06zox_fUqJAP9MusQvkFGOvknkF_-6RjGuR1FA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:58:48 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:48 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:58:48 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:48 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:58:48
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:58:48 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:58:48 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:58:48 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:48 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:48 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:58:48 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:58:48 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:58:48
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:58:48 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
QpzO6Z246MhL7nk2RfpQ
iat
1621511928
exp
1621511988
2021-05-20 11:58:49 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk4OCwiaWF0IjoxNjIxNTExOTI4LCJqdGkiOiJRcHpPNloyNDZNaEw3bmsyUmZwUSJ9.nctWXAeArveGiV1NOV-NYjDM6iJ5RZdeqTrrbhedhV6St2zF0I9fByqc89AWvwFEa45ZJFYf1aKyUGYBb0ugerlpfk3H_s7jpvZcHIj1ywwYl8o-BohjkYMgywWO6UEU8rZyQQjjDtNUqkzFEj_lmFPSCTdmljWUac0g1wkZl7y9LpF_xDuwdssNRh7P1QsRqeTsQ9m69Nu7cQUNg9ly14IPcdbmkdQA46dIbSOMlEv0O7iDMbTvsJt-kinKSRIP82VlChirHKEJGmNcoe32kkzSDFCfEfxK3hIH4eF2X49DLY1-z5dYpA1DJIMoiCn1CMITvLvuNFPU_AjZC0Jjdg
2021-05-20 11:58:49
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk4OCwiaWF0IjoxNjIxNTExOTI4LCJqdGkiOiJRcHpPNloyNDZNaEw3bmsyUmZwUSJ9.nctWXAeArveGiV1NOV-NYjDM6iJ5RZdeqTrrbhedhV6St2zF0I9fByqc89AWvwFEa45ZJFYf1aKyUGYBb0ugerlpfk3H_s7jpvZcHIj1ywwYl8o-BohjkYMgywWO6UEU8rZyQQjjDtNUqkzFEj_lmFPSCTdmljWUac0g1wkZl7y9LpF_xDuwdssNRh7P1QsRqeTsQ9m69Nu7cQUNg9ly14IPcdbmkdQA46dIbSOMlEv0O7iDMbTvsJt-kinKSRIP82VlChirHKEJGmNcoe32kkzSDFCfEfxK3hIH4eF2X49DLY1-z5dYpA1DJIMoiCn1CMITvLvuNFPU_AjZC0Jjdg
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:58:49
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk4OCwiaWF0IjoxNjIxNTExOTI4LCJqdGkiOiJRcHpPNloyNDZNaEw3bmsyUmZwUSJ9.nctWXAeArveGiV1NOV-NYjDM6iJ5RZdeqTrrbhedhV6St2zF0I9fByqc89AWvwFEa45ZJFYf1aKyUGYBb0ugerlpfk3H_s7jpvZcHIj1ywwYl8o-BohjkYMgywWO6UEU8rZyQQjjDtNUqkzFEj_lmFPSCTdmljWUac0g1wkZl7y9LpF_xDuwdssNRh7P1QsRqeTsQ9m69Nu7cQUNg9ly14IPcdbmkdQA46dIbSOMlEv0O7iDMbTvsJt-kinKSRIP82VlChirHKEJGmNcoe32kkzSDFCfEfxK3hIH4eF2X49DLY1-z5dYpA1DJIMoiCn1CMITvLvuNFPU_AjZC0Jjdg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:58:50 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:50 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:58:50 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:50 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:58:50
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:58:50 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:58:50 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:58:50 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:50 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:50 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:58:50 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:58:50 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:58:50
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:58:51 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
2DEpkEYQEYsytsqlYpr3
iat
1621511931
exp
1621511991
2021-05-20 11:58:51 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5MSwiaWF0IjoxNjIxNTExOTMxLCJqdGkiOiIyREVwa0VZUUVZc3l0c3FsWXByMyJ9.Fc3JN5I-lwt1DS2s4XnNoSLKq2xBpjkGTCZhCpdQHnCgWtFROjyS-1KWDpLxXHoZw4FKIboGGpZS5ZG1v7q7qsKhCQwspBLSvnAByKxy1d3ZljWBoXqnvzn3OqfYdX_qITNZ7cs3b0M1EVGtI0HnW3hpkTdxAc0_LPGRd9Wjq96nqkMjMuGo1NL8jpcXoahLen_9QzAesl7aPJG1LWgU_-yZlzlyP2LJ3XiWNdCPf2gGRuyvOdJVlaTMDlCs9wWLcQzAJX-FFThmTrNYo-wi0WytNie2pDsfd8MZWeceLHouQardpjAyWo1jTca33O8WqhdTWu-YN6jwdziZ_lxP7Q
2021-05-20 11:58:51
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5MSwiaWF0IjoxNjIxNTExOTMxLCJqdGkiOiIyREVwa0VZUUVZc3l0c3FsWXByMyJ9.Fc3JN5I-lwt1DS2s4XnNoSLKq2xBpjkGTCZhCpdQHnCgWtFROjyS-1KWDpLxXHoZw4FKIboGGpZS5ZG1v7q7qsKhCQwspBLSvnAByKxy1d3ZljWBoXqnvzn3OqfYdX_qITNZ7cs3b0M1EVGtI0HnW3hpkTdxAc0_LPGRd9Wjq96nqkMjMuGo1NL8jpcXoahLen_9QzAesl7aPJG1LWgU_-yZlzlyP2LJ3XiWNdCPf2gGRuyvOdJVlaTMDlCs9wWLcQzAJX-FFThmTrNYo-wi0WytNie2pDsfd8MZWeceLHouQardpjAyWo1jTca33O8WqhdTWu-YN6jwdziZ_lxP7Q
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:58:51
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5MSwiaWF0IjoxNjIxNTExOTMxLCJqdGkiOiIyREVwa0VZUUVZc3l0c3FsWXByMyJ9.Fc3JN5I-lwt1DS2s4XnNoSLKq2xBpjkGTCZhCpdQHnCgWtFROjyS-1KWDpLxXHoZw4FKIboGGpZS5ZG1v7q7qsKhCQwspBLSvnAByKxy1d3ZljWBoXqnvzn3OqfYdX_qITNZ7cs3b0M1EVGtI0HnW3hpkTdxAc0_LPGRd9Wjq96nqkMjMuGo1NL8jpcXoahLen_9QzAesl7aPJG1LWgU_-yZlzlyP2LJ3XiWNdCPf2gGRuyvOdJVlaTMDlCs9wWLcQzAJX-FFThmTrNYo-wi0WytNie2pDsfd8MZWeceLHouQardpjAyWo1jTca33O8WqhdTWu-YN6jwdziZ_lxP7Q&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:58:52 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:52 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:58:52 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:52 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:58:52
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:58:52 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:58:52 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:58:52 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:52 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:52 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:58:52 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:58:52 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:58:52
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:58:52 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
KGPS7hbfQ1csZc7GKd9w
iat
1621511932
exp
1621511992
2021-05-20 11:58:52 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5MiwiaWF0IjoxNjIxNTExOTMyLCJqdGkiOiJLR1BTN2hiZlExY3NaYzdHS2Q5dyJ9.GLsl6Y1jMEwMp_kgFl6KqGlGiW8xGO_7up94jdISRDRxx0UC3OCkYt4bRxMX5vskYsD1eNbuG8hJUfMmFLog75ykmtJGVGMBccbf9UwE8wdcCGvV-jis2NkORQqVI6-LiEuuo-ue11v_dC2bXpCgVQvGn_9sfkx5uIYQ-ZMNl0GCAJOwSXFiCtBM5oxVMVB-HH59ED1w6jXvRQlRdOiJ8g7-DXusKOr5RKXxbhzOY2xjbLVbrW5VECeO3bKBmS2Njxv-5n0MtkF76L-IWalFTnW-dHUXmr-BLU8LLwB_13UhgGN77IIXAgat-o0fe5PYgAeLYBqB-NQlHKDgu5HBlg
2021-05-20 11:58:52
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5MiwiaWF0IjoxNjIxNTExOTMyLCJqdGkiOiJLR1BTN2hiZlExY3NaYzdHS2Q5dyJ9.GLsl6Y1jMEwMp_kgFl6KqGlGiW8xGO_7up94jdISRDRxx0UC3OCkYt4bRxMX5vskYsD1eNbuG8hJUfMmFLog75ykmtJGVGMBccbf9UwE8wdcCGvV-jis2NkORQqVI6-LiEuuo-ue11v_dC2bXpCgVQvGn_9sfkx5uIYQ-ZMNl0GCAJOwSXFiCtBM5oxVMVB-HH59ED1w6jXvRQlRdOiJ8g7-DXusKOr5RKXxbhzOY2xjbLVbrW5VECeO3bKBmS2Njxv-5n0MtkF76L-IWalFTnW-dHUXmr-BLU8LLwB_13UhgGN77IIXAgat-o0fe5PYgAeLYBqB-NQlHKDgu5HBlg
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:58:53
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5MiwiaWF0IjoxNjIxNTExOTMyLCJqdGkiOiJLR1BTN2hiZlExY3NaYzdHS2Q5dyJ9.GLsl6Y1jMEwMp_kgFl6KqGlGiW8xGO_7up94jdISRDRxx0UC3OCkYt4bRxMX5vskYsD1eNbuG8hJUfMmFLog75ykmtJGVGMBccbf9UwE8wdcCGvV-jis2NkORQqVI6-LiEuuo-ue11v_dC2bXpCgVQvGn_9sfkx5uIYQ-ZMNl0GCAJOwSXFiCtBM5oxVMVB-HH59ED1w6jXvRQlRdOiJ8g7-DXusKOr5RKXxbhzOY2xjbLVbrW5VECeO3bKBmS2Njxv-5n0MtkF76L-IWalFTnW-dHUXmr-BLU8LLwB_13UhgGN77IIXAgat-o0fe5PYgAeLYBqB-NQlHKDgu5HBlg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCgNObt/iZ7PLCXmY37Ud2+QmVcYNuthMr/nHjIO5wviXvLQcpwOlNwg41v/6L87IggODK47yOzR4S5QBDSXVcQ0I4vBBhTeX17BXNWY628tmsQLrfVAv8vaewfcGaQfgftpsyLqhq05bW4g6rQ/T05CgPfdJwiXqaeXkK4jaDYdx92gD+UjOwE0jIBniWObreNXDYNHkyLmi2O8lipJ6xe7n4iSsGar/LboayUemasy9Ig165U0X/Y5jS5qWrliR9kOT9YfWn7TV3raH506clQTSVKDgGOM/D3PJGO1gAcxgpDzNHqsaHgJCl51JTB5WDYppKA1oTcGqkDtbzDEdghAgMBAAECggEAKqeLKKh3RG6XMfXfWJ+mY2a4KA1dz+hASCg3/E/quLlpLWfZ52GQH6/W84/jrGWppLJxxs1c+vm6u7vz/p59dOuiP6BefbMmFqAP4lttwYXsIYXeyicfHFeeV4yMskHsCHlVkoX60FkstfDQhQ43w70H5PHeNERxJk9AgnSq85buFvpJYlxcklg91Mot5MkrWsiTEbhf5CRgIxmGlQfuC6PhBKJWBpfimmzOfzjQ710dWY5SxewDtTTL30FbPucKf4++Z5YEkJCBG9jE5Zet5VFYKxXSBm3N5lGtDjbFWZ92rXYJW87gbIpQyXSqUHo237IwHfx/6jyYefWSAutJAQKBgQD0daG4UDGv2BhV+57L9cfiXaZZBMAcsUb5UOcZnNcW79PpYFmiutW7KtsdAlzz5dtYT/m+KwU1v5OUVBu7uCIsqArewQz7SXP1JIHNkBpY3uJDokh/IcWroYzADkqjJqJ9UYF2eMCQ6Hc1360tw5SVHjtWd4obIGQC0OmAj6RUUQKBgQCnxQx5QtWUi1+dEXwmITnlZhzbuP1RXoZBlhdtm1LIhp+CIdQXThgVaev5Tn2DjvevBNotbVkQ9yzYw1+M3zqmSeNRvUU1XYR3kz7ESLLs+SrzjE6VAis30hOXst6dWSEJkNoCWTAMAKEBGmdubgAr9XDTuHrR442lpb843QJi0QKBgBHuOuFxCGP0frx3y0r8iR/CbLwkzA6Otjz9QSYwydoF105L4ec8uwaSeyXikXzWRENzAkd/kk9B8Qo1LR+UvvT1km6KTHB2D8pQVjEEu9n+5yu80IJ6sKwJGnDP24uh/tMgUlWlP8KhOnU6JdKwgMp7QDD0ba3Vr2BBgI8MeioxAoGAH8AwGybl6uXxo3UyrLivD1Yi8gZxkpu0BueT6X9yzFaGC4fBbuOttSfFq/oJ0QMWpv3hGKXQLGDLEP7wr2Vz4RKsvcR3O6FGN6cbQuSLUEPbuBn+qT6u1TKh2JzWeqrqkLfkOnuMl0jrL51Co+iXibo6rycDv4M0RHw401coY3ECgYBBW9dOfjrBm9wQpya144yeWOlBs99fpWvA5440oLoYHEcvv0K3+xa/2mw5AZaH0uz2rW6Ze1MVUqhCJ3Qs0x8iHrRabAdk5gnNnqa8/x4fkIATBZ7SZzsTBXEeuBJTbih49rCtMwTAqNwytMa5dc5Ruroz5r0cX6B9y+nZRF9Luw\u003d\u003d"
}
2021-05-20 11:58:54 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:54 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:58:54 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:54 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:58:54
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:58:54 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:58:54 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:58:54 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:54 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:54 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:58:54 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:58:54 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:58:54
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:58:54 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
VHucBwjYGlht9oLOAd3l
iat
1621511934
exp
1621511994
2021-05-20 11:58:54 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5NCwiaWF0IjoxNjIxNTExOTM0LCJqdGkiOiJWSHVjQndqWUdsaHQ5b0xPQWQzbCJ9.Am1PlRKBcIpfhvQ8OkvItV-XgsdJdLrZX58QfO4SaDpiaDRyhP0pjvFM6dma_1hXHkEvyUlzZWQwh8WT64a6pBBCqYNT16Ko-FDuPBF3JtHkPdr15-OVQd5hOwTA8tAsEtXSg-j7A3ArABToJnnNDYp6I140Aa9K2DcnJ8d4rY6rhzxvI6Gdn1nUrjAPYT24tsiNB63sSQdSFHOQGy_QjRF6sXn8Y7X7gDi8sd2npqQW8eOi4eK27O6AbRaOzsWme9Yj__SLx9_cO_YcfP-zTlXMTymxpp1BBOODQctqlo1ZIn3Sx8tyz6-Au9GU_HTGspfX56pjtxqeP92P2-jtbw
2021-05-20 11:58:54
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5NCwiaWF0IjoxNjIxNTExOTM0LCJqdGkiOiJWSHVjQndqWUdsaHQ5b0xPQWQzbCJ9.Am1PlRKBcIpfhvQ8OkvItV-XgsdJdLrZX58QfO4SaDpiaDRyhP0pjvFM6dma_1hXHkEvyUlzZWQwh8WT64a6pBBCqYNT16Ko-FDuPBF3JtHkPdr15-OVQd5hOwTA8tAsEtXSg-j7A3ArABToJnnNDYp6I140Aa9K2DcnJ8d4rY6rhzxvI6Gdn1nUrjAPYT24tsiNB63sSQdSFHOQGy_QjRF6sXn8Y7X7gDi8sd2npqQW8eOi4eK27O6AbRaOzsWme9Yj__SLx9_cO_YcfP-zTlXMTymxpp1BBOODQctqlo1ZIn3Sx8tyz6-Au9GU_HTGspfX56pjtxqeP92P2-jtbw
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:58:54
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5NCwiaWF0IjoxNjIxNTExOTM0LCJqdGkiOiJWSHVjQndqWUdsaHQ5b0xPQWQzbCJ9.Am1PlRKBcIpfhvQ8OkvItV-XgsdJdLrZX58QfO4SaDpiaDRyhP0pjvFM6dma_1hXHkEvyUlzZWQwh8WT64a6pBBCqYNT16Ko-FDuPBF3JtHkPdr15-OVQd5hOwTA8tAsEtXSg-j7A3ArABToJnnNDYp6I140Aa9K2DcnJ8d4rY6rhzxvI6Gdn1nUrjAPYT24tsiNB63sSQdSFHOQGy_QjRF6sXn8Y7X7gDi8sd2npqQW8eOi4eK27O6AbRaOzsWme9Yj__SLx9_cO_YcfP-zTlXMTymxpp1BBOODQctqlo1ZIn3Sx8tyz6-Au9GU_HTGspfX56pjtxqeP92P2-jtbw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCgNObt/iZ7PLCXmY37Ud2+QmVcYNuthMr/nHjIO5wviXvLQcpwOlNwg41v/6L87IggODK47yOzR4S5QBDSXVcQ0I4vBBhTeX17BXNWY628tmsQLrfVAv8vaewfcGaQfgftpsyLqhq05bW4g6rQ/T05CgPfdJwiXqaeXkK4jaDYdx92gD+UjOwE0jIBniWObreNXDYNHkyLmi2O8lipJ6xe7n4iSsGar/LboayUemasy9Ig165U0X/Y5jS5qWrliR9kOT9YfWn7TV3raH506clQTSVKDgGOM/D3PJGO1gAcxgpDzNHqsaHgJCl51JTB5WDYppKA1oTcGqkDtbzDEdghAgMBAAECggEAKqeLKKh3RG6XMfXfWJ+mY2a4KA1dz+hASCg3/E/quLlpLWfZ52GQH6/W84/jrGWppLJxxs1c+vm6u7vz/p59dOuiP6BefbMmFqAP4lttwYXsIYXeyicfHFeeV4yMskHsCHlVkoX60FkstfDQhQ43w70H5PHeNERxJk9AgnSq85buFvpJYlxcklg91Mot5MkrWsiTEbhf5CRgIxmGlQfuC6PhBKJWBpfimmzOfzjQ710dWY5SxewDtTTL30FbPucKf4++Z5YEkJCBG9jE5Zet5VFYKxXSBm3N5lGtDjbFWZ92rXYJW87gbIpQyXSqUHo237IwHfx/6jyYefWSAutJAQKBgQD0daG4UDGv2BhV+57L9cfiXaZZBMAcsUb5UOcZnNcW79PpYFmiutW7KtsdAlzz5dtYT/m+KwU1v5OUVBu7uCIsqArewQz7SXP1JIHNkBpY3uJDokh/IcWroYzADkqjJqJ9UYF2eMCQ6Hc1360tw5SVHjtWd4obIGQC0OmAj6RUUQKBgQCnxQx5QtWUi1+dEXwmITnlZhzbuP1RXoZBlhdtm1LIhp+CIdQXThgVaev5Tn2DjvevBNotbVkQ9yzYw1+M3zqmSeNRvUU1XYR3kz7ESLLs+SrzjE6VAis30hOXst6dWSEJkNoCWTAMAKEBGmdubgAr9XDTuHrR442lpb843QJi0QKBgBHuOuFxCGP0frx3y0r8iR/CbLwkzA6Otjz9QSYwydoF105L4ec8uwaSeyXikXzWRENzAkd/kk9B8Qo1LR+UvvT1km6KTHB2D8pQVjEEu9n+5yu80IJ6sKwJGnDP24uh/tMgUlWlP8KhOnU6JdKwgMp7QDD0ba3Vr2BBgI8MeioxAoGAH8AwGybl6uXxo3UyrLivD1Yi8gZxkpu0BueT6X9yzFaGC4fBbuOttSfFq/oJ0QMWpv3hGKXQLGDLEP7wr2Vz4RKsvcR3O6FGN6cbQuSLUEPbuBn+qT6u1TKh2JzWeqrqkLfkOnuMl0jrL51Co+iXibo6rycDv4M0RHw401coY3ECgYBBW9dOfjrBm9wQpya144yeWOlBs99fpWvA5440oLoYHEcvv0K3+xa/2mw5AZaH0uz2rW6Ze1MVUqhCJ3Qs0x8iHrRabAdk5gnNnqa8/x4fkIATBZ7SZzsTBXEeuBJTbih49rCtMwTAqNwytMa5dc5Ruroz5r0cX6B9y+nZRF9Luw\u003d\u003d"
}
2021-05-20 11:58:56 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:56 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:58:56 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:56 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:58:56
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:58:56 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:58:56 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:58:56 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:56 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:56 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:58:56 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:58:56 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:58:57
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:58:57 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
4EARfYYm8L4V8yaZ1otM
iat
1621511937
exp
1621511997
2021-05-20 11:58:57 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5NywiaWF0IjoxNjIxNTExOTM3LCJqdGkiOiI0RUFSZllZbThMNFY4eWFaMW90TSJ9.Fn4WYTGF8z45wpPJAOKkBtdLebF6EF4V8EItVHwTRb9wRhHL6I4X06mB9RaoVLdumi2at1E6fDDA83-NnGa2cRZoR9jFkB6Zr3r6pgvCgPX39WeuejrWdNXl8K2tSfwavAKEp84peqL5frIareWeUjOzy58qvF_fwy4q5gWxr0t7NDHnma4xLwG3eiov-y13EVkgkSa6_oeOT0sS9j4G4z9UGeja5XQWByNYOnhMOUfHkgXKEZ3ws-DpfMjut0aHW0f9FE08tTnrln0H3-d1FXZMnVxNM2pdkPkB2DAgRIfTYXZPaPETT45q0cpxyOsh2yfEImS5cpYOcmKR5D5c8A
2021-05-20 11:58:57
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5NywiaWF0IjoxNjIxNTExOTM3LCJqdGkiOiI0RUFSZllZbThMNFY4eWFaMW90TSJ9.Fn4WYTGF8z45wpPJAOKkBtdLebF6EF4V8EItVHwTRb9wRhHL6I4X06mB9RaoVLdumi2at1E6fDDA83-NnGa2cRZoR9jFkB6Zr3r6pgvCgPX39WeuejrWdNXl8K2tSfwavAKEp84peqL5frIareWeUjOzy58qvF_fwy4q5gWxr0t7NDHnma4xLwG3eiov-y13EVkgkSa6_oeOT0sS9j4G4z9UGeja5XQWByNYOnhMOUfHkgXKEZ3ws-DpfMjut0aHW0f9FE08tTnrln0H3-d1FXZMnVxNM2pdkPkB2DAgRIfTYXZPaPETT45q0cpxyOsh2yfEImS5cpYOcmKR5D5c8A
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:58:57
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5NywiaWF0IjoxNjIxNTExOTM3LCJqdGkiOiI0RUFSZllZbThMNFY4eWFaMW90TSJ9.Fn4WYTGF8z45wpPJAOKkBtdLebF6EF4V8EItVHwTRb9wRhHL6I4X06mB9RaoVLdumi2at1E6fDDA83-NnGa2cRZoR9jFkB6Zr3r6pgvCgPX39WeuejrWdNXl8K2tSfwavAKEp84peqL5frIareWeUjOzy58qvF_fwy4q5gWxr0t7NDHnma4xLwG3eiov-y13EVkgkSa6_oeOT0sS9j4G4z9UGeja5XQWByNYOnhMOUfHkgXKEZ3ws-DpfMjut0aHW0f9FE08tTnrln0H3-d1FXZMnVxNM2pdkPkB2DAgRIfTYXZPaPETT45q0cpxyOsh2yfEImS5cpYOcmKR5D5c8A&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:58:58 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:58 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:58:58 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:58 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:58:58
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:58:58 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:58:58 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:58:58 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:58 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:58 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:58:58 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:58:58 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:58:58
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:58:58 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
JOwpPG40ehhbW8DqQEDH
iat
1621511938
exp
1621511998
2021-05-20 11:58:58 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5OCwiaWF0IjoxNjIxNTExOTM4LCJqdGkiOiJKT3dwUEc0MGVoaGJXOERxUUVESCJ9.VrdAvvaJ3xRxUO1p4Qo2ZEli1Jiz41x4qFTaIIBhNP2M5HDDX8ungBVJKYn5RujKeLS6Liv1rUkrBnuZkAh4axLce4_gx7mV1wNF7fvht5HYuWshU6XtOZM4AYgbyzdNPD6BIyVCmfxvT0yy-YmAdRCodcvtDcmyTnyX_fWEOlCh3nmF_wwQrlfpE9HcE_xnjSr8_C4sAcTWtwI0MD2HPbbtq0_nH0QdX032iNFz17wsrwjr9doUyi5l2hHyHRu4sJK4SVREMtWVXHX7V0nVprliA93Rvizy8ewQ6pJgrg6Og8n7j_cnE9vys16zJvgrhF2NBPbHRyhAjY3-1ubKog
2021-05-20 11:58:58
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5OCwiaWF0IjoxNjIxNTExOTM4LCJqdGkiOiJKT3dwUEc0MGVoaGJXOERxUUVESCJ9.VrdAvvaJ3xRxUO1p4Qo2ZEli1Jiz41x4qFTaIIBhNP2M5HDDX8ungBVJKYn5RujKeLS6Liv1rUkrBnuZkAh4axLce4_gx7mV1wNF7fvht5HYuWshU6XtOZM4AYgbyzdNPD6BIyVCmfxvT0yy-YmAdRCodcvtDcmyTnyX_fWEOlCh3nmF_wwQrlfpE9HcE_xnjSr8_C4sAcTWtwI0MD2HPbbtq0_nH0QdX032iNFz17wsrwjr9doUyi5l2hHyHRu4sJK4SVREMtWVXHX7V0nVprliA93Rvizy8ewQ6pJgrg6Og8n7j_cnE9vys16zJvgrhF2NBPbHRyhAjY3-1ubKog
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:58:58
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5OCwiaWF0IjoxNjIxNTExOTM4LCJqdGkiOiJKT3dwUEc0MGVoaGJXOERxUUVESCJ9.VrdAvvaJ3xRxUO1p4Qo2ZEli1Jiz41x4qFTaIIBhNP2M5HDDX8ungBVJKYn5RujKeLS6Liv1rUkrBnuZkAh4axLce4_gx7mV1wNF7fvht5HYuWshU6XtOZM4AYgbyzdNPD6BIyVCmfxvT0yy-YmAdRCodcvtDcmyTnyX_fWEOlCh3nmF_wwQrlfpE9HcE_xnjSr8_C4sAcTWtwI0MD2HPbbtq0_nH0QdX032iNFz17wsrwjr9doUyi5l2hHyHRu4sJK4SVREMtWVXHX7V0nVprliA93Rvizy8ewQ6pJgrg6Og8n7j_cnE9vys16zJvgrhF2NBPbHRyhAjY3-1ubKog&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:58:59 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:58:59 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:58:59 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:59 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:58:59
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:58:59 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:58:59 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:58:59 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:59 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:58:59 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:58:59 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:58:59 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:58:59
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:58:59 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
yWh5JONREUgJ3iarEi02
iat
1621511939
exp
1621511999
2021-05-20 11:59:00 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5OSwiaWF0IjoxNjIxNTExOTM5LCJqdGkiOiJ5V2g1Sk9OUkVVZ0ozaWFyRWkwMiJ9.WLkLwSWdQQ6YLTPeZ7R69-16d_gjXI95nKEEZY0_ah2JOa5ByJDduTTSNnNbBXIbgyCT4fuEmlGU61RqtdL5cNkSzF28mvfACMRIcaNke-geAmGkgINIJchjIsWMVJTNB4BtlwL3adAnqfumRgExFKpyD-IB0b53vi9bbhIeV34B7tqAd3knQvwHXuV26ojjI-NChrzhtaEHnBswMc8En94zUR7VeRdNJx2jltIFZ8fq1_myu_zpJdASLgVMiUGkH7nk3j2_RViAn_f0V2WN9ebBL3wYa2V2Z-pgyXF4Yri_hentxgw_ZNtkAu7Qze2V-7eOwZh8GifCRKBcHRYI8w
2021-05-20 11:59:00
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5OSwiaWF0IjoxNjIxNTExOTM5LCJqdGkiOiJ5V2g1Sk9OUkVVZ0ozaWFyRWkwMiJ9.WLkLwSWdQQ6YLTPeZ7R69-16d_gjXI95nKEEZY0_ah2JOa5ByJDduTTSNnNbBXIbgyCT4fuEmlGU61RqtdL5cNkSzF28mvfACMRIcaNke-geAmGkgINIJchjIsWMVJTNB4BtlwL3adAnqfumRgExFKpyD-IB0b53vi9bbhIeV34B7tqAd3knQvwHXuV26ojjI-NChrzhtaEHnBswMc8En94zUR7VeRdNJx2jltIFZ8fq1_myu_zpJdASLgVMiUGkH7nk3j2_RViAn_f0V2WN9ebBL3wYa2V2Z-pgyXF4Yri_hentxgw_ZNtkAu7Qze2V-7eOwZh8GifCRKBcHRYI8w
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:59:00
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMTk5OSwiaWF0IjoxNjIxNTExOTM5LCJqdGkiOiJ5V2g1Sk9OUkVVZ0ozaWFyRWkwMiJ9.WLkLwSWdQQ6YLTPeZ7R69-16d_gjXI95nKEEZY0_ah2JOa5ByJDduTTSNnNbBXIbgyCT4fuEmlGU61RqtdL5cNkSzF28mvfACMRIcaNke-geAmGkgINIJchjIsWMVJTNB4BtlwL3adAnqfumRgExFKpyD-IB0b53vi9bbhIeV34B7tqAd3knQvwHXuV26ojjI-NChrzhtaEHnBswMc8En94zUR7VeRdNJx2jltIFZ8fq1_myu_zpJdASLgVMiUGkH7nk3j2_RViAn_f0V2WN9ebBL3wYa2V2Z-pgyXF4Yri_hentxgw_ZNtkAu7Qze2V-7eOwZh8GifCRKBcHRYI8w&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:59:01 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:59:01 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:59:01 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:01 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:59:01
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:59:01 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:59:01 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:59:01 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:01 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:01 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:59:01 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:59:01 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:59:01
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:59:01 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
mF3e26S9EkMZaMYTsFks
iat
1621511941
exp
1621512001
2021-05-20 11:59:01 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwMSwiaWF0IjoxNjIxNTExOTQxLCJqdGkiOiJtRjNlMjZTOUVrTVphTVlUc0ZrcyJ9.oBBCWY-SJgBonyeQqELYlYL-iJ8TO8whOvlkvcwEUqStWin-xbObFKqYRgh8Jd33B5eD8wO_Pput54lugkg9Li_Zd5I_byXyswWYD6ccKwFzAk0APx0zhuYFzncCdnUkF1qhmX09tQcUZiYsDS5ZufEFPj8i0LE32o6fkbLsMwDcEvpWoF9TNW1mvHP5YLp12VXyPEX30dr6Eh5YY_H1FzNHYiEUiel8PEs3D7kwoMQ8nWG1h8w-IgcaAKqwQdA7Cr_LzfSlLbfMxro9ZE9tGafjjwSXZS2GUAFqfuC9sOEDmD1WvDmluGukReEkXHCUglWykulkZqW6Var9THeJeg
2021-05-20 11:59:01
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwMSwiaWF0IjoxNjIxNTExOTQxLCJqdGkiOiJtRjNlMjZTOUVrTVphTVlUc0ZrcyJ9.oBBCWY-SJgBonyeQqELYlYL-iJ8TO8whOvlkvcwEUqStWin-xbObFKqYRgh8Jd33B5eD8wO_Pput54lugkg9Li_Zd5I_byXyswWYD6ccKwFzAk0APx0zhuYFzncCdnUkF1qhmX09tQcUZiYsDS5ZufEFPj8i0LE32o6fkbLsMwDcEvpWoF9TNW1mvHP5YLp12VXyPEX30dr6Eh5YY_H1FzNHYiEUiel8PEs3D7kwoMQ8nWG1h8w-IgcaAKqwQdA7Cr_LzfSlLbfMxro9ZE9tGafjjwSXZS2GUAFqfuC9sOEDmD1WvDmluGukReEkXHCUglWykulkZqW6Var9THeJeg
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:59:01
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwMSwiaWF0IjoxNjIxNTExOTQxLCJqdGkiOiJtRjNlMjZTOUVrTVphTVlUc0ZrcyJ9.oBBCWY-SJgBonyeQqELYlYL-iJ8TO8whOvlkvcwEUqStWin-xbObFKqYRgh8Jd33B5eD8wO_Pput54lugkg9Li_Zd5I_byXyswWYD6ccKwFzAk0APx0zhuYFzncCdnUkF1qhmX09tQcUZiYsDS5ZufEFPj8i0LE32o6fkbLsMwDcEvpWoF9TNW1mvHP5YLp12VXyPEX30dr6Eh5YY_H1FzNHYiEUiel8PEs3D7kwoMQ8nWG1h8w-IgcaAKqwQdA7Cr_LzfSlLbfMxro9ZE9tGafjjwSXZS2GUAFqfuC9sOEDmD1WvDmluGukReEkXHCUglWykulkZqW6Var9THeJeg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "MIICuzCCAaOgAwIBAgIGAXmJpECKMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjAxMTU4MzNaFw0yMjA1MjAxMTU4MzNaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKA05u3+Jns8sJeZjftR3b5CZVxg262Eyv+ceMg7nC+Je8tBynA6U3CDjW//ovzsiCA4MrjvI7NHhLlAENJdVxDQji8EGFN5fXsFc1Zjrby2axAut9UC/y9p7B9wZpB+B+2mzIuqGrTltbiDqtD9PTkKA990nCJepp5eQriNoNh3H3aAP5SM7ATSMgGeJY5ut41cNg0eTIuaLY7yWKknrF7ufiJKwZqv8tuhrJR6ZqzL0iDXrlTRf9jmNLmpauWJH2Q5P1h9aftNXetofnTpyVBNJUoOAY4z8Pc8kY7WABzGCkPM0eqxoeAkKXnUlMHlYNimkoDWhNwaqQO1vMMR2CECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEARnzU320NO/k4GN9plHsCel2M28VeNojanIpydlqhvg6JrjIUh9pHPG9IahiGxoQWn7ksLGl6uFrhKoS2UrQ33C9/SJPoSX4mExFZhAx4Y4v6vpTepTv4APOg5enAz1NBweqpnq3jRlKypacGMw8UORM+WhMTFRc5xNMRg633I4+0kHol7WDfwt/6c2f0w1RYz9dm2MjpWlnPBib9krkdNQAKj+fH4Glw3KpYBT8SK/O6opYNRv2CbYNc5nBVVcTZtxhl+2wZhkW5zx+BVEb4CNh+bvAFGrn6N9vc81p+DQYgCPAP7L6nGPUIsu3s/M1RS+ESr/tU/lxpemTvUrbJGw\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:59:03 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:59:02 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:59:03 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:03 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:59:03
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:59:03 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:59:03 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:59:03 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:03 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:03 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:59:03 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:59:03 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:59:03
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:59:03 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
27NQqMDeExzS9KYyRW7s
iat
1621511943
exp
1621512003
2021-05-20 11:59:03 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwMywiaWF0IjoxNjIxNTExOTQzLCJqdGkiOiIyN05RcU1EZUV4elM5S1l5Ulc3cyJ9.bnQKDo8fcr1SaoJa5rH9DcOzxG_Fkk1pzFQ9cB_x2hkeNoYfHAYAIdMDe8oVkzTB0GaehSflgNprG-hfcPApLcjvxu5dV4QmCH3sqUgfShZhImSuLvJYDRAkb7Fb7qfFnSlrBcGBMdFmwYTohUj-6gsfi5qVwb2Kb24PR86rNRAPGeRXKX5Q3EHdjZp2Sn_Bpgoy9y0e2u0SexFHlK5-fgdRAa6kIFuDbHFur--MgipqqPgfWFhsjDJcIM50p4Ii1Q7uKo_GgKpI8OE-JMGVhSpW3PYW1BPaF-1MXtfKF6ivzT-8hOv2mpY6JTxO9oVFtafHwKFWFkKWkGqUczN6nw
2021-05-20 11:59:03
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwMywiaWF0IjoxNjIxNTExOTQzLCJqdGkiOiIyN05RcU1EZUV4elM5S1l5Ulc3cyJ9.bnQKDo8fcr1SaoJa5rH9DcOzxG_Fkk1pzFQ9cB_x2hkeNoYfHAYAIdMDe8oVkzTB0GaehSflgNprG-hfcPApLcjvxu5dV4QmCH3sqUgfShZhImSuLvJYDRAkb7Fb7qfFnSlrBcGBMdFmwYTohUj-6gsfi5qVwb2Kb24PR86rNRAPGeRXKX5Q3EHdjZp2Sn_Bpgoy9y0e2u0SexFHlK5-fgdRAa6kIFuDbHFur--MgipqqPgfWFhsjDJcIM50p4Ii1Q7uKo_GgKpI8OE-JMGVhSpW3PYW1BPaF-1MXtfKF6ivzT-8hOv2mpY6JTxO9oVFtafHwKFWFkKWkGqUczN6nw
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:59:03
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwMywiaWF0IjoxNjIxNTExOTQzLCJqdGkiOiIyN05RcU1EZUV4elM5S1l5Ulc3cyJ9.bnQKDo8fcr1SaoJa5rH9DcOzxG_Fkk1pzFQ9cB_x2hkeNoYfHAYAIdMDe8oVkzTB0GaehSflgNprG-hfcPApLcjvxu5dV4QmCH3sqUgfShZhImSuLvJYDRAkb7Fb7qfFnSlrBcGBMdFmwYTohUj-6gsfi5qVwb2Kb24PR86rNRAPGeRXKX5Q3EHdjZp2Sn_Bpgoy9y0e2u0SexFHlK5-fgdRAa6kIFuDbHFur--MgipqqPgfWFhsjDJcIM50p4Ii1Q7uKo_GgKpI8OE-JMGVhSpW3PYW1BPaF-1MXtfKF6ivzT-8hOv2mpY6JTxO9oVFtafHwKFWFkKWkGqUczN6nw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:59:04 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:59:04 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:59:04 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:04 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:59:04
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:59:04 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:59:04 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:59:04 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:04 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:04 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:59:04 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:59:04 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:59:04
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:59:04 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
hIyZOyk5X6nuDeSqBV4K
iat
1621511944
exp
1621512004
2021-05-20 11:59:04 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwNCwiaWF0IjoxNjIxNTExOTQ0LCJqdGkiOiJoSXlaT3lrNVg2bnVEZVNxQlY0SyJ9.QleniODDMtHbarGdjXpcICZ748Tiy6oYQW3hGPXjTlV5TnVrWc_tW0cJrq2BDNd4vspzT70ei7ITPpjFOsHRqaxL8cEvvYEKOeRreSuDDrcPaKTJKeWPUOBQhrY_5sCrm3mQLhCEfQs5wkqobbANJitbbUbNKBCQHqWIYUryXZeuR-VKZgBXk0qmDpRJvZk3XMlp3PEMdvqX3vF80dH3I-17I4OzwZ4JOso32yNwCYG0GHh6WluDT0AJF_zp1-nbLDV0lKDyEaayoNY2E7n5XYs3td9xFTKY7mUA42IoBEY6cwxk9vTHBn-yqx76BSI25EYUgrL2bCJdmIkNYyknaw
2021-05-20 11:59:04
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwNCwiaWF0IjoxNjIxNTExOTQ0LCJqdGkiOiJoSXlaT3lrNVg2bnVEZVNxQlY0SyJ9.QleniODDMtHbarGdjXpcICZ748Tiy6oYQW3hGPXjTlV5TnVrWc_tW0cJrq2BDNd4vspzT70ei7ITPpjFOsHRqaxL8cEvvYEKOeRreSuDDrcPaKTJKeWPUOBQhrY_5sCrm3mQLhCEfQs5wkqobbANJitbbUbNKBCQHqWIYUryXZeuR-VKZgBXk0qmDpRJvZk3XMlp3PEMdvqX3vF80dH3I-17I4OzwZ4JOso32yNwCYG0GHh6WluDT0AJF_zp1-nbLDV0lKDyEaayoNY2E7n5XYs3td9xFTKY7mUA42IoBEY6cwxk9vTHBn-yqx76BSI25EYUgrL2bCJdmIkNYyknaw
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:59:05
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwNCwiaWF0IjoxNjIxNTExOTQ0LCJqdGkiOiJoSXlaT3lrNVg2bnVEZVNxQlY0SyJ9.QleniODDMtHbarGdjXpcICZ748Tiy6oYQW3hGPXjTlV5TnVrWc_tW0cJrq2BDNd4vspzT70ei7ITPpjFOsHRqaxL8cEvvYEKOeRreSuDDrcPaKTJKeWPUOBQhrY_5sCrm3mQLhCEfQs5wkqobbANJitbbUbNKBCQHqWIYUryXZeuR-VKZgBXk0qmDpRJvZk3XMlp3PEMdvqX3vF80dH3I-17I4OzwZ4JOso32yNwCYG0GHh6WluDT0AJF_zp1-nbLDV0lKDyEaayoNY2E7n5XYs3td9xFTKY7mUA42IoBEY6cwxk9vTHBn-yqx76BSI25EYUgrL2bCJdmIkNYyknaw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:59:06 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:59:05 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:59:06 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:06 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:59:06
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:59:06 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:59:06 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:59:06 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:06 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:06 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:59:06 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:59:06 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:59:06
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:59:06 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
lsxSSyBPbTBq7tdaz3ed
iat
1621511946
exp
1621512006
2021-05-20 11:59:06 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwNiwiaWF0IjoxNjIxNTExOTQ2LCJqdGkiOiJsc3hTU3lCUGJUQnE3dGRhejNlZCJ9.aLjZgB4-zi5Jk0u3Q9WTyPAkPfIfgCghX9MDlIMAb0v0KBUqLfVanIkavvns32coP7Tgdunp30zMcAmppzpXkAPbLcBUVLUG68c0zSjKWj4zYhGVD6m_y9S6puOoi2tKoqpPgsP-eh_JZ2ntT7NpBWFTjHzMi3RZZ8LvinfC8g1fwNbQ1AdaxwR6tVloqncJ-TvkRWByxt05zmR4JbLy2qv-3kEt4upAcUo2DQuQBh5JswhDSE6JZAG9BY4MELEcvqAQi7szwtym20S2c3wk9QMo5OUMqaUN27PmdrKvwTRYczya-ujzOYRKMnqszB5qa3-3YiJWrkLPzrndi9qvow
2021-05-20 11:59:06
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwNiwiaWF0IjoxNjIxNTExOTQ2LCJqdGkiOiJsc3hTU3lCUGJUQnE3dGRhejNlZCJ9.aLjZgB4-zi5Jk0u3Q9WTyPAkPfIfgCghX9MDlIMAb0v0KBUqLfVanIkavvns32coP7Tgdunp30zMcAmppzpXkAPbLcBUVLUG68c0zSjKWj4zYhGVD6m_y9S6puOoi2tKoqpPgsP-eh_JZ2ntT7NpBWFTjHzMi3RZZ8LvinfC8g1fwNbQ1AdaxwR6tVloqncJ-TvkRWByxt05zmR4JbLy2qv-3kEt4upAcUo2DQuQBh5JswhDSE6JZAG9BY4MELEcvqAQi7szwtym20S2c3wk9QMo5OUMqaUN27PmdrKvwTRYczya-ujzOYRKMnqszB5qa3-3YiJWrkLPzrndi9qvow
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:59:06
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwNiwiaWF0IjoxNjIxNTExOTQ2LCJqdGkiOiJsc3hTU3lCUGJUQnE3dGRhejNlZCJ9.aLjZgB4-zi5Jk0u3Q9WTyPAkPfIfgCghX9MDlIMAb0v0KBUqLfVanIkavvns32coP7Tgdunp30zMcAmppzpXkAPbLcBUVLUG68c0zSjKWj4zYhGVD6m_y9S6puOoi2tKoqpPgsP-eh_JZ2ntT7NpBWFTjHzMi3RZZ8LvinfC8g1fwNbQ1AdaxwR6tVloqncJ-TvkRWByxt05zmR4JbLy2qv-3kEt4upAcUo2DQuQBh5JswhDSE6JZAG9BY4MELEcvqAQi7szwtym20S2c3wk9QMo5OUMqaUN27PmdrKvwTRYczya-ujzOYRKMnqszB5qa3-3YiJWrkLPzrndi9qvow&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:59:07 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:59:07 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:59:07 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:07 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:59:07
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:59:07 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:59:07 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:59:07 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:07 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:07 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:59:07 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:59:07 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:59:07
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:59:07 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
xL7HRImLlkJ4L0EHWWgp
iat
1621511947
exp
1621512007
2021-05-20 11:59:07 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwNywiaWF0IjoxNjIxNTExOTQ3LCJqdGkiOiJ4TDdIUkltTGxrSjRMMEVIV1dncCJ9.Ta5bmouBLLjq6ie8O3pFMljIjF0vGWExc317T2N09KvJ9i8QAqUFXgCbqG3yRfn4U0PFTqXebEH8LJIBc7yGfgsowpow1zt-UtwIoyztcTSOZuOa-McDccdCznRyVSF5uxggzGPFyPvv7Byul0DDduUIYy4oDSQoUgT4djnx3N75mP-ht3KA1FvdzSVAiKvXBWTK_xBYcNOp1w1BtKXB3NQdSi6jJ8WermsGOlHKETmSaQ5xK94QJXcxjvWWZ8Qeaj2YvaLrg2789ShhxoABLcuW8Ac_WwU1PbhNTDuAog25H7mjRJel1xUKNePtxxZneE6x4lR8KQyhlpvcUNKIrg
2021-05-20 11:59:07
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwNywiaWF0IjoxNjIxNTExOTQ3LCJqdGkiOiJ4TDdIUkltTGxrSjRMMEVIV1dncCJ9.Ta5bmouBLLjq6ie8O3pFMljIjF0vGWExc317T2N09KvJ9i8QAqUFXgCbqG3yRfn4U0PFTqXebEH8LJIBc7yGfgsowpow1zt-UtwIoyztcTSOZuOa-McDccdCznRyVSF5uxggzGPFyPvv7Byul0DDduUIYy4oDSQoUgT4djnx3N75mP-ht3KA1FvdzSVAiKvXBWTK_xBYcNOp1w1BtKXB3NQdSi6jJ8WermsGOlHKETmSaQ5xK94QJXcxjvWWZ8Qeaj2YvaLrg2789ShhxoABLcuW8Ac_WwU1PbhNTDuAog25H7mjRJel1xUKNePtxxZneE6x4lR8KQyhlpvcUNKIrg
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:59:08
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwNywiaWF0IjoxNjIxNTExOTQ3LCJqdGkiOiJ4TDdIUkltTGxrSjRMMEVIV1dncCJ9.Ta5bmouBLLjq6ie8O3pFMljIjF0vGWExc317T2N09KvJ9i8QAqUFXgCbqG3yRfn4U0PFTqXebEH8LJIBc7yGfgsowpow1zt-UtwIoyztcTSOZuOa-McDccdCznRyVSF5uxggzGPFyPvv7Byul0DDduUIYy4oDSQoUgT4djnx3N75mP-ht3KA1FvdzSVAiKvXBWTK_xBYcNOp1w1BtKXB3NQdSi6jJ8WermsGOlHKETmSaQ5xK94QJXcxjvWWZ8Qeaj2YvaLrg2789ShhxoABLcuW8Ac_WwU1PbhNTDuAog25H7mjRJel1xUKNePtxxZneE6x4lR8KQyhlpvcUNKIrg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "MIICuzCCAaOgAwIBAgIGAXmJpECKMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjAxMTU4MzNaFw0yMjA1MjAxMTU4MzNaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKA05u3+Jns8sJeZjftR3b5CZVxg262Eyv+ceMg7nC+Je8tBynA6U3CDjW//ovzsiCA4MrjvI7NHhLlAENJdVxDQji8EGFN5fXsFc1Zjrby2axAut9UC/y9p7B9wZpB+B+2mzIuqGrTltbiDqtD9PTkKA990nCJepp5eQriNoNh3H3aAP5SM7ATSMgGeJY5ut41cNg0eTIuaLY7yWKknrF7ufiJKwZqv8tuhrJR6ZqzL0iDXrlTRf9jmNLmpauWJH2Q5P1h9aftNXetofnTpyVBNJUoOAY4z8Pc8kY7WABzGCkPM0eqxoeAkKXnUlMHlYNimkoDWhNwaqQO1vMMR2CECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEARnzU320NO/k4GN9plHsCel2M28VeNojanIpydlqhvg6JrjIUh9pHPG9IahiGxoQWn7ksLGl6uFrhKoS2UrQ33C9/SJPoSX4mExFZhAx4Y4v6vpTepTv4APOg5enAz1NBweqpnq3jRlKypacGMw8UORM+WhMTFRc5xNMRg633I4+0kHol7WDfwt/6c2f0w1RYz9dm2MjpWlnPBib9krkdNQAKj+fH4Glw3KpYBT8SK/O6opYNRv2CbYNc5nBVVcTZtxhl+2wZhkW5zx+BVEb4CNh+bvAFGrn6N9vc81p+DQYgCPAP7L6nGPUIsu3s/M1RS+ESr/tU/lxpemTvUrbJGw\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:59:09 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:59:09 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:59:09 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:09 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:59:09
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:59:09 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:59:09 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:59:09 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:09 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:09 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:59:09 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:59:09 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:59:09
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:59:09 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
3MmyQdKu45vQXpHXyFtQ
iat
1621511949
exp
1621512009
2021-05-20 11:59:09 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwOSwiaWF0IjoxNjIxNTExOTQ5LCJqdGkiOiIzTW15UWRLdTQ1dlFYcEhYeUZ0USJ9.P5XavjkeBqW-AmeoJlOZ_e4t8pgNgY_6lm4LntptbzH3GMRcxDDDLNgIYuJL8yeU1vYcdPL1maE22Qc03bU6FtENwSOlbLPmilDeiZgcrGVmH96j2RdyauoWD6-e7tEwfuNV-WmWOAhIra03J78TeJv4nrGgF2P_Jp8SVyRLeJNIy4lNbd14sa2buP4ZiPfO6LBe2_aJBzkxE2pODY7fyssBqWuhtwTJAAMXxAJZ6xaz7rSd0OhtQV5Bm0ibQU7uVs_Wr7hFamDiexnSm4NNa7pv-RZLf4-lFHITLLAD3_OC_N2kfdf9Ex4r33TH_uSwm40aW-IOV4NLoUvjUPtZag
2021-05-20 11:59:09
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwOSwiaWF0IjoxNjIxNTExOTQ5LCJqdGkiOiIzTW15UWRLdTQ1dlFYcEhYeUZ0USJ9.P5XavjkeBqW-AmeoJlOZ_e4t8pgNgY_6lm4LntptbzH3GMRcxDDDLNgIYuJL8yeU1vYcdPL1maE22Qc03bU6FtENwSOlbLPmilDeiZgcrGVmH96j2RdyauoWD6-e7tEwfuNV-WmWOAhIra03J78TeJv4nrGgF2P_Jp8SVyRLeJNIy4lNbd14sa2buP4ZiPfO6LBe2_aJBzkxE2pODY7fyssBqWuhtwTJAAMXxAJZ6xaz7rSd0OhtQV5Bm0ibQU7uVs_Wr7hFamDiexnSm4NNa7pv-RZLf4-lFHITLLAD3_OC_N2kfdf9Ex4r33TH_uSwm40aW-IOV4NLoUvjUPtZag
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:59:09
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAwOSwiaWF0IjoxNjIxNTExOTQ5LCJqdGkiOiIzTW15UWRLdTQ1dlFYcEhYeUZ0USJ9.P5XavjkeBqW-AmeoJlOZ_e4t8pgNgY_6lm4LntptbzH3GMRcxDDDLNgIYuJL8yeU1vYcdPL1maE22Qc03bU6FtENwSOlbLPmilDeiZgcrGVmH96j2RdyauoWD6-e7tEwfuNV-WmWOAhIra03J78TeJv4nrGgF2P_Jp8SVyRLeJNIy4lNbd14sa2buP4ZiPfO6LBe2_aJBzkxE2pODY7fyssBqWuhtwTJAAMXxAJZ6xaz7rSd0OhtQV5Bm0ibQU7uVs_Wr7hFamDiexnSm4NNa7pv-RZLf4-lFHITLLAD3_OC_N2kfdf9Ex4r33TH_uSwm40aW-IOV4NLoUvjUPtZag&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "MIICuzCCAaOgAwIBAgIGAXmJpECKMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjAxMTU4MzNaFw0yMjA1MjAxMTU4MzNaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKA05u3+Jns8sJeZjftR3b5CZVxg262Eyv+ceMg7nC+Je8tBynA6U3CDjW//ovzsiCA4MrjvI7NHhLlAENJdVxDQji8EGFN5fXsFc1Zjrby2axAut9UC/y9p7B9wZpB+B+2mzIuqGrTltbiDqtD9PTkKA990nCJepp5eQriNoNh3H3aAP5SM7ATSMgGeJY5ut41cNg0eTIuaLY7yWKknrF7ufiJKwZqv8tuhrJR6ZqzL0iDXrlTRf9jmNLmpauWJH2Q5P1h9aftNXetofnTpyVBNJUoOAY4z8Pc8kY7WABzGCkPM0eqxoeAkKXnUlMHlYNimkoDWhNwaqQO1vMMR2CECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEARnzU320NO/k4GN9plHsCel2M28VeNojanIpydlqhvg6JrjIUh9pHPG9IahiGxoQWn7ksLGl6uFrhKoS2UrQ33C9/SJPoSX4mExFZhAx4Y4v6vpTepTv4APOg5enAz1NBweqpnq3jRlKypacGMw8UORM+WhMTFRc5xNMRg633I4+0kHol7WDfwt/6c2f0w1RYz9dm2MjpWlnPBib9krkdNQAKj+fH4Glw3KpYBT8SK/O6opYNRv2CbYNc5nBVVcTZtxhl+2wZhkW5zx+BVEb4CNh+bvAFGrn6N9vc81p+DQYgCPAP7L6nGPUIsu3s/M1RS+ESr/tU/lxpemTvUrbJGw\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:59:10 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:59:10 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:59:10 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:10 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:59:10
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:59:10 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:59:10 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:59:10 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:10 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:10 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:59:10 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:59:10 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:59:10
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:59:10 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
SHwoPdTQRpD4XKgGvoEp
iat
1621511950
exp
1621512010
2021-05-20 11:59:10 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxMCwiaWF0IjoxNjIxNTExOTUwLCJqdGkiOiJTSHdvUGRUUVJwRDRYS2dHdm9FcCJ9.MGztJjAscyFXaeLclK0nq5ZGxM-67w6QTkiBFPY5ZyOepWn4k4GrlS-YFcqBYXoh-WTPxPkqLKKlF_qGv_uPunDp930Uk8AUqF0FSNQjCwMAmFeM_aiAlHoIMc4jrOS85MaLMJXMwt6JYGB0I4Aq0aFS6zanQjZXpF2JFEPSVRG3vhS3J9ZslRTqdYBtEBc8xx-_fcnlHQs2s4QBGdaCE1pK6fy_gdGwFY9taQnf2i6H5TN7JROUVN0EThLWlT2AKh_VyWiaCAHAbDYXAsy9xjbDgby8YYrjwYGFOXWYXYJIOl39ty3uFJ5mn8WdLZ9Rfss8WRy7lH1Tu_nPfBpqzw
2021-05-20 11:59:10
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxMCwiaWF0IjoxNjIxNTExOTUwLCJqdGkiOiJTSHdvUGRUUVJwRDRYS2dHdm9FcCJ9.MGztJjAscyFXaeLclK0nq5ZGxM-67w6QTkiBFPY5ZyOepWn4k4GrlS-YFcqBYXoh-WTPxPkqLKKlF_qGv_uPunDp930Uk8AUqF0FSNQjCwMAmFeM_aiAlHoIMc4jrOS85MaLMJXMwt6JYGB0I4Aq0aFS6zanQjZXpF2JFEPSVRG3vhS3J9ZslRTqdYBtEBc8xx-_fcnlHQs2s4QBGdaCE1pK6fy_gdGwFY9taQnf2i6H5TN7JROUVN0EThLWlT2AKh_VyWiaCAHAbDYXAsy9xjbDgby8YYrjwYGFOXWYXYJIOl39ty3uFJ5mn8WdLZ9Rfss8WRy7lH1Tu_nPfBpqzw
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:59:11
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxMCwiaWF0IjoxNjIxNTExOTUwLCJqdGkiOiJTSHdvUGRUUVJwRDRYS2dHdm9FcCJ9.MGztJjAscyFXaeLclK0nq5ZGxM-67w6QTkiBFPY5ZyOepWn4k4GrlS-YFcqBYXoh-WTPxPkqLKKlF_qGv_uPunDp930Uk8AUqF0FSNQjCwMAmFeM_aiAlHoIMc4jrOS85MaLMJXMwt6JYGB0I4Aq0aFS6zanQjZXpF2JFEPSVRG3vhS3J9ZslRTqdYBtEBc8xx-_fcnlHQs2s4QBGdaCE1pK6fy_gdGwFY9taQnf2i6H5TN7JROUVN0EThLWlT2AKh_VyWiaCAHAbDYXAsy9xjbDgby8YYrjwYGFOXWYXYJIOl39ty3uFJ5mn8WdLZ9Rfss8WRy7lH1Tu_nPfBpqzw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:59:11 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:59:11 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:59:11 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:11 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:59:11
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:59:11 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:59:11 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:59:11 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:11 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:11 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:59:11 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:59:11 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:59:11
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:59:11 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
ij50GKagSxXVM7skdVUn
iat
1621511951
exp
1621512011
2021-05-20 11:59:12 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxMSwiaWF0IjoxNjIxNTExOTUxLCJqdGkiOiJpajUwR0thZ1N4WFZNN3NrZFZVbiJ9.d13ajyVRrKnqMTY6EAMiAPbCIe8MivBZ3D_bIt8vo0fpvMbOKE9vac9SD_QOZ4kQBJl0Op4CwI_7cNStDqASCFmpk3s628FIO9nnc7X2D8PsFLqjd9VmaQFO5YbiCLsMyG2pbokjeAZ9HgR2FXVgU-nJ38xaHt8AHenMrBlxvVsx8Qi5AGk3KTTaJmbNFTG37rQXmmNJhQFJt3VGFJ4BZKqpTyAV3ENZsswFlhB8u-YQhRRDb5Io8mAKpCRTxVPFST_aarGNil_eHG4BaIvl0SlP5_MDzpr4cJLd0JFVjSzDAEi-csjXc7gEi2mE7oNzS6qx2jmTUJGCr8MGVYB51A
2021-05-20 11:59:12
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxMSwiaWF0IjoxNjIxNTExOTUxLCJqdGkiOiJpajUwR0thZ1N4WFZNN3NrZFZVbiJ9.d13ajyVRrKnqMTY6EAMiAPbCIe8MivBZ3D_bIt8vo0fpvMbOKE9vac9SD_QOZ4kQBJl0Op4CwI_7cNStDqASCFmpk3s628FIO9nnc7X2D8PsFLqjd9VmaQFO5YbiCLsMyG2pbokjeAZ9HgR2FXVgU-nJ38xaHt8AHenMrBlxvVsx8Qi5AGk3KTTaJmbNFTG37rQXmmNJhQFJt3VGFJ4BZKqpTyAV3ENZsswFlhB8u-YQhRRDb5Io8mAKpCRTxVPFST_aarGNil_eHG4BaIvl0SlP5_MDzpr4cJLd0JFVjSzDAEi-csjXc7gEi2mE7oNzS6qx2jmTUJGCr8MGVYB51A
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:59:12
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxMSwiaWF0IjoxNjIxNTExOTUxLCJqdGkiOiJpajUwR0thZ1N4WFZNN3NrZFZVbiJ9.d13ajyVRrKnqMTY6EAMiAPbCIe8MivBZ3D_bIt8vo0fpvMbOKE9vac9SD_QOZ4kQBJl0Op4CwI_7cNStDqASCFmpk3s628FIO9nnc7X2D8PsFLqjd9VmaQFO5YbiCLsMyG2pbokjeAZ9HgR2FXVgU-nJ38xaHt8AHenMrBlxvVsx8Qi5AGk3KTTaJmbNFTG37rQXmmNJhQFJt3VGFJ4BZKqpTyAV3ENZsswFlhB8u-YQhRRDb5Io8mAKpCRTxVPFST_aarGNil_eHG4BaIvl0SlP5_MDzpr4cJLd0JFVjSzDAEi-csjXc7gEi2mE7oNzS6qx2jmTUJGCr8MGVYB51A&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCgNObt/iZ7PLCXmY37Ud2+QmVcYNuthMr/nHjIO5wviXvLQcpwOlNwg41v/6L87IggODK47yOzR4S5QBDSXVcQ0I4vBBhTeX17BXNWY628tmsQLrfVAv8vaewfcGaQfgftpsyLqhq05bW4g6rQ/T05CgPfdJwiXqaeXkK4jaDYdx92gD+UjOwE0jIBniWObreNXDYNHkyLmi2O8lipJ6xe7n4iSsGar/LboayUemasy9Ig165U0X/Y5jS5qWrliR9kOT9YfWn7TV3raH506clQTSVKDgGOM/D3PJGO1gAcxgpDzNHqsaHgJCl51JTB5WDYppKA1oTcGqkDtbzDEdghAgMBAAECggEAKqeLKKh3RG6XMfXfWJ+mY2a4KA1dz+hASCg3/E/quLlpLWfZ52GQH6/W84/jrGWppLJxxs1c+vm6u7vz/p59dOuiP6BefbMmFqAP4lttwYXsIYXeyicfHFeeV4yMskHsCHlVkoX60FkstfDQhQ43w70H5PHeNERxJk9AgnSq85buFvpJYlxcklg91Mot5MkrWsiTEbhf5CRgIxmGlQfuC6PhBKJWBpfimmzOfzjQ710dWY5SxewDtTTL30FbPucKf4++Z5YEkJCBG9jE5Zet5VFYKxXSBm3N5lGtDjbFWZ92rXYJW87gbIpQyXSqUHo237IwHfx/6jyYefWSAutJAQKBgQD0daG4UDGv2BhV+57L9cfiXaZZBMAcsUb5UOcZnNcW79PpYFmiutW7KtsdAlzz5dtYT/m+KwU1v5OUVBu7uCIsqArewQz7SXP1JIHNkBpY3uJDokh/IcWroYzADkqjJqJ9UYF2eMCQ6Hc1360tw5SVHjtWd4obIGQC0OmAj6RUUQKBgQCnxQx5QtWUi1+dEXwmITnlZhzbuP1RXoZBlhdtm1LIhp+CIdQXThgVaev5Tn2DjvevBNotbVkQ9yzYw1+M3zqmSeNRvUU1XYR3kz7ESLLs+SrzjE6VAis30hOXst6dWSEJkNoCWTAMAKEBGmdubgAr9XDTuHrR442lpb843QJi0QKBgBHuOuFxCGP0frx3y0r8iR/CbLwkzA6Otjz9QSYwydoF105L4ec8uwaSeyXikXzWRENzAkd/kk9B8Qo1LR+UvvT1km6KTHB2D8pQVjEEu9n+5yu80IJ6sKwJGnDP24uh/tMgUlWlP8KhOnU6JdKwgMp7QDD0ba3Vr2BBgI8MeioxAoGAH8AwGybl6uXxo3UyrLivD1Yi8gZxkpu0BueT6X9yzFaGC4fBbuOttSfFq/oJ0QMWpv3hGKXQLGDLEP7wr2Vz4RKsvcR3O6FGN6cbQuSLUEPbuBn+qT6u1TKh2JzWeqrqkLfkOnuMl0jrL51Co+iXibo6rycDv4M0RHw401coY3ECgYBBW9dOfjrBm9wQpya144yeWOlBs99fpWvA5440oLoYHEcvv0K3+xa/2mw5AZaH0uz2rW6Ze1MVUqhCJ3Qs0x8iHrRabAdk5gnNnqa8/x4fkIATBZ7SZzsTBXEeuBJTbih49rCtMwTAqNwytMa5dc5Ruroz5r0cX6B9y+nZRF9Luw\u003d\u003d"
}
2021-05-20 11:59:13 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:59:13 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:59:13 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:13 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:59:13
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:59:13 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:59:13 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:59:13 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:13 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:13 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:59:13 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:59:13 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:59:13
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:59:13 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
u2rbB9LbwTxTYVrMoTmg
iat
1621511953
exp
1621512013
2021-05-20 11:59:13 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxMywiaWF0IjoxNjIxNTExOTUzLCJqdGkiOiJ1MnJiQjlMYndUeFRZVnJNb1RtZyJ9.Ga2ZaIm1P816comIcFruDfXv5yurclWxOTP3jO0aPcxR9VcASeK_yQ2x4cJRTk3XFVYK-FH4AXcW-RKFnZCOZNkxv5QpIKGO0K-Hozr2h_Za5aPzAO-EcwFYJbBrgnqKllfA44pOJhND5OAuRUeprOFlpAfx95Za5MpVi7oq-7V9m6FpLIPlas3VA0vppkP9fD8LVAIBUoGloBIi4pVU2JpGGZi9W-THeMsxxY-toETOy-abhpamUIaRplGeRSm-hHwkWPYa0zQIs2tCznAiH7wsxeBGcSdAZlvT00ZLyXWLUWGa3ekm6Xg4EzlorlxZKVoLVMsIoqc4GPZQc7XSbQ
2021-05-20 11:59:13
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxMywiaWF0IjoxNjIxNTExOTUzLCJqdGkiOiJ1MnJiQjlMYndUeFRZVnJNb1RtZyJ9.Ga2ZaIm1P816comIcFruDfXv5yurclWxOTP3jO0aPcxR9VcASeK_yQ2x4cJRTk3XFVYK-FH4AXcW-RKFnZCOZNkxv5QpIKGO0K-Hozr2h_Za5aPzAO-EcwFYJbBrgnqKllfA44pOJhND5OAuRUeprOFlpAfx95Za5MpVi7oq-7V9m6FpLIPlas3VA0vppkP9fD8LVAIBUoGloBIi4pVU2JpGGZi9W-THeMsxxY-toETOy-abhpamUIaRplGeRSm-hHwkWPYa0zQIs2tCznAiH7wsxeBGcSdAZlvT00ZLyXWLUWGa3ekm6Xg4EzlorlxZKVoLVMsIoqc4GPZQc7XSbQ
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:59:14
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxMywiaWF0IjoxNjIxNTExOTUzLCJqdGkiOiJ1MnJiQjlMYndUeFRZVnJNb1RtZyJ9.Ga2ZaIm1P816comIcFruDfXv5yurclWxOTP3jO0aPcxR9VcASeK_yQ2x4cJRTk3XFVYK-FH4AXcW-RKFnZCOZNkxv5QpIKGO0K-Hozr2h_Za5aPzAO-EcwFYJbBrgnqKllfA44pOJhND5OAuRUeprOFlpAfx95Za5MpVi7oq-7V9m6FpLIPlas3VA0vppkP9fD8LVAIBUoGloBIi4pVU2JpGGZi9W-THeMsxxY-toETOy-abhpamUIaRplGeRSm-hHwkWPYa0zQIs2tCznAiH7wsxeBGcSdAZlvT00ZLyXWLUWGa3ekm6Xg4EzlorlxZKVoLVMsIoqc4GPZQc7XSbQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "MIICuzCCAaOgAwIBAgIGAXmJpECKMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjAxMTU4MzNaFw0yMjA1MjAxMTU4MzNaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKA05u3+Jns8sJeZjftR3b5CZVxg262Eyv+ceMg7nC+Je8tBynA6U3CDjW//ovzsiCA4MrjvI7NHhLlAENJdVxDQji8EGFN5fXsFc1Zjrby2axAut9UC/y9p7B9wZpB+B+2mzIuqGrTltbiDqtD9PTkKA990nCJepp5eQriNoNh3H3aAP5SM7ATSMgGeJY5ut41cNg0eTIuaLY7yWKknrF7ufiJKwZqv8tuhrJR6ZqzL0iDXrlTRf9jmNLmpauWJH2Q5P1h9aftNXetofnTpyVBNJUoOAY4z8Pc8kY7WABzGCkPM0eqxoeAkKXnUlMHlYNimkoDWhNwaqQO1vMMR2CECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEARnzU320NO/k4GN9plHsCel2M28VeNojanIpydlqhvg6JrjIUh9pHPG9IahiGxoQWn7ksLGl6uFrhKoS2UrQ33C9/SJPoSX4mExFZhAx4Y4v6vpTepTv4APOg5enAz1NBweqpnq3jRlKypacGMw8UORM+WhMTFRc5xNMRg633I4+0kHol7WDfwt/6c2f0w1RYz9dm2MjpWlnPBib9krkdNQAKj+fH4Glw3KpYBT8SK/O6opYNRv2CbYNc5nBVVcTZtxhl+2wZhkW5zx+BVEb4CNh+bvAFGrn6N9vc81p+DQYgCPAP7L6nGPUIsu3s/M1RS+ESr/tU/lxpemTvUrbJGw\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:59:15 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:59:15 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:59:15 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:15 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:59:15
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:59:15 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:59:15 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:59:15 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:15 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:15 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:59:15 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:59:15 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:59:15
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:59:15 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
veLF1qpUjoAfia9ktXAs
iat
1621511955
exp
1621512015
2021-05-20 11:59:15 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxNSwiaWF0IjoxNjIxNTExOTU1LCJqdGkiOiJ2ZUxGMXFwVWpvQWZpYTlrdFhBcyJ9.Gnt8C28WdMn_hj_jwEQR_QUrO0quYNACCmc6VnVFZ9WQsE8hMFkst4EAgOpLrkIWZ4TxmsFRS7WIGKgx-e-KHW-fuNesr9TRoReejd8tc7jvRkRgTD4S-AtZi2NiNRH-AxjL6d1NHt3kNPiJqRG0dnpRinjpeeCjj4tdxrDsSXIdF93UkEmqyhE6r8bZy0M8zw2JHiifYg6Fcp56dXa5xUGwh1NmXQpOFD9NzzNbRdUmEUkg0piC5hukCI_CP2BcZYkZC36ftqTrB5NzObPhgdOQVYlQjzEyiqim1n1L0A06DnK8O81dbPa_bQL8seiEv1Mexfc5GLF5MI4H83xNuQ
2021-05-20 11:59:15
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxNSwiaWF0IjoxNjIxNTExOTU1LCJqdGkiOiJ2ZUxGMXFwVWpvQWZpYTlrdFhBcyJ9.Gnt8C28WdMn_hj_jwEQR_QUrO0quYNACCmc6VnVFZ9WQsE8hMFkst4EAgOpLrkIWZ4TxmsFRS7WIGKgx-e-KHW-fuNesr9TRoReejd8tc7jvRkRgTD4S-AtZi2NiNRH-AxjL6d1NHt3kNPiJqRG0dnpRinjpeeCjj4tdxrDsSXIdF93UkEmqyhE6r8bZy0M8zw2JHiifYg6Fcp56dXa5xUGwh1NmXQpOFD9NzzNbRdUmEUkg0piC5hukCI_CP2BcZYkZC36ftqTrB5NzObPhgdOQVYlQjzEyiqim1n1L0A06DnK8O81dbPa_bQL8seiEv1Mexfc5GLF5MI4H83xNuQ
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:59:15
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxNSwiaWF0IjoxNjIxNTExOTU1LCJqdGkiOiJ2ZUxGMXFwVWpvQWZpYTlrdFhBcyJ9.Gnt8C28WdMn_hj_jwEQR_QUrO0quYNACCmc6VnVFZ9WQsE8hMFkst4EAgOpLrkIWZ4TxmsFRS7WIGKgx-e-KHW-fuNesr9TRoReejd8tc7jvRkRgTD4S-AtZi2NiNRH-AxjL6d1NHt3kNPiJqRG0dnpRinjpeeCjj4tdxrDsSXIdF93UkEmqyhE6r8bZy0M8zw2JHiifYg6Fcp56dXa5xUGwh1NmXQpOFD9NzzNbRdUmEUkg0piC5hukCI_CP2BcZYkZC36ftqTrB5NzObPhgdOQVYlQjzEyiqim1n1L0A06DnK8O81dbPa_bQL8seiEv1Mexfc5GLF5MI4H83xNuQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "MIICuzCCAaOgAwIBAgIGAXmJpECKMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNVBAMTCXBrand0LW9uZTAeFw0yMTA1MjAxMTU4MzNaFw0yMjA1MjAxMTU4MzNaMBQxEjAQBgNVBAMTCXBrand0LW9uZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKA05u3+Jns8sJeZjftR3b5CZVxg262Eyv+ceMg7nC+Je8tBynA6U3CDjW//ovzsiCA4MrjvI7NHhLlAENJdVxDQji8EGFN5fXsFc1Zjrby2axAut9UC/y9p7B9wZpB+B+2mzIuqGrTltbiDqtD9PTkKA990nCJepp5eQriNoNh3H3aAP5SM7ATSMgGeJY5ut41cNg0eTIuaLY7yWKknrF7ufiJKwZqv8tuhrJR6ZqzL0iDXrlTRf9jmNLmpauWJH2Q5P1h9aftNXetofnTpyVBNJUoOAY4z8Pc8kY7WABzGCkPM0eqxoeAkKXnUlMHlYNimkoDWhNwaqQO1vMMR2CECAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEARnzU320NO/k4GN9plHsCel2M28VeNojanIpydlqhvg6JrjIUh9pHPG9IahiGxoQWn7ksLGl6uFrhKoS2UrQ33C9/SJPoSX4mExFZhAx4Y4v6vpTepTv4APOg5enAz1NBweqpnq3jRlKypacGMw8UORM+WhMTFRc5xNMRg633I4+0kHol7WDfwt/6c2f0w1RYz9dm2MjpWlnPBib9krkdNQAKj+fH4Glw3KpYBT8SK/O6opYNRv2CbYNc5nBVVcTZtxhl+2wZhkW5zx+BVEb4CNh+bvAFGrn6N9vc81p+DQYgCPAP7L6nGPUIsu3s/M1RS+ESr/tU/lxpemTvUrbJGw\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:59:16 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:59:16 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:59:16 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:16 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:59:16
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:59:16 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:59:16 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:59:16 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:16 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:16 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:59:16 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
Calling token endpoint expecting one of errors of authorization_pending, slow_down, invalid_request, or 503 error
2021-05-20 11:59:16 SUCCESS
CreateTokenEndpointRequestForCIBAGrant
grant_type
urn:openid:params:grant-type:ciba
2021-05-20 11:59:16
AddAuthReqIdToTokenEndpointRequest
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
2021-05-20 11:59:16 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
RsRV8XUazIaV6bDwwO8yV
sub
RsRV8XUazIaV6bDwwO8yV
aud
https://mtls.fapi.panva.cz/token
jti
leJCdI7Z27pqPjyCHFN7
iat
1621511956
exp
1621512016
2021-05-20 11:59:17 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxNiwiaWF0IjoxNjIxNTExOTU2LCJqdGkiOiJsZUpDZEk3WjI3cHFQanlDSEZONyJ9.k29lPi9bmDKQPdgHH0GhXVnvPpKPNLdVdrtN2H3V80CwHEE1hm51vUHuJD6CrjZvuYlbqlAzBpKeXI36Ny2sxFC-px9BV2uDfY-iexcHpECUuF-jujvOrIuQry34O4I_q-MmTVunUMalHiGW8N2aJguayJ4CgVqwzhvYvp_KRft1y9U5VlG8J14J1tRv91kv2BCn7w80u5XKhfBNST4fiEzJZ-2ayUC1Bi-zJMA1Ct74WczAD4-byLDCngasyazkLDQgFFhhKa4D0IeTbwmoBbyejiW7Lp_2u6ouHwt4L7g7xoYCMbso3rg9Kz4wLRYmDxP5V7cbiXNguFUsPhSofA
2021-05-20 11:59:17
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
urn:openid:params:grant-type:ciba
auth_req_id
zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz
client_assertion
eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxNiwiaWF0IjoxNjIxNTExOTU2LCJqdGkiOiJsZUpDZEk3WjI3cHFQanlDSEZONyJ9.k29lPi9bmDKQPdgHH0GhXVnvPpKPNLdVdrtN2H3V80CwHEE1hm51vUHuJD6CrjZvuYlbqlAzBpKeXI36Ny2sxFC-px9BV2uDfY-iexcHpECUuF-jujvOrIuQry34O4I_q-MmTVunUMalHiGW8N2aJguayJ4CgVqwzhvYvp_KRft1y9U5VlG8J14J1tRv91kv2BCn7w80u5XKhfBNST4fiEzJZ-2ayUC1Bi-zJMA1Ct74WczAD4-byLDCngasyazkLDQgFFhhKa4D0IeTbwmoBbyejiW7Lp_2u6ouHwt4L7g7xoYCMbso3rg9Kz4wLRYmDxP5V7cbiXNguFUsPhSofA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-05-20 11:59:17
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://mtls.fapi.panva.cz/token
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "871"
}
request_body
grant_type=urn%3Aopenid%3Aparams%3Agrant-type%3Aciba&auth_req_id=zPZhhhewthFhoIcfT2Pp39Lt7Y47Nq-Q261DGuGXuzz&client_assertion=eyJraWQiOiJuWGZIbGQyX2RhYXczTHZuZFZma1NCN0J6b250SU1vT0V6dmlMWHlhMnBVIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJSc1JWOFhVYXpJYVY2YkR3d084eVYiLCJhdWQiOiJodHRwczpcL1wvbXRscy5mYXBpLnBhbnZhLmN6XC90b2tlbiIsImlzcyI6IlJzUlY4WFVheklhVjZiRHd3Tzh5ViIsImV4cCI6MTYyMTUxMjAxNiwiaWF0IjoxNjIxNTExOTU2LCJqdGkiOiJsZUpDZEk3WjI3cHFQanlDSEZONyJ9.k29lPi9bmDKQPdgHH0GhXVnvPpKPNLdVdrtN2H3V80CwHEE1hm51vUHuJD6CrjZvuYlbqlAzBpKeXI36Ny2sxFC-px9BV2uDfY-iexcHpECUuF-jujvOrIuQry34O4I_q-MmTVunUMalHiGW8N2aJguayJ4CgVqwzhvYvp_KRft1y9U5VlG8J14J1tRv91kv2BCn7w80u5XKhfBNST4fiEzJZ-2ayUC1Bi-zJMA1Ct74WczAD4-byLDCngasyazkLDQgFFhhKa4D0IeTbwmoBbyejiW7Lp_2u6ouHwt4L7g7xoYCMbso3rg9Kz4wLRYmDxP5V7cbiXNguFUsPhSofA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCgNObt/iZ7PLCXmY37Ud2+QmVcYNuthMr/nHjIO5wviXvLQcpwOlNwg41v/6L87IggODK47yOzR4S5QBDSXVcQ0I4vBBhTeX17BXNWY628tmsQLrfVAv8vaewfcGaQfgftpsyLqhq05bW4g6rQ/T05CgPfdJwiXqaeXkK4jaDYdx92gD+UjOwE0jIBniWObreNXDYNHkyLmi2O8lipJ6xe7n4iSsGar/LboayUemasy9Ig165U0X/Y5jS5qWrliR9kOT9YfWn7TV3raH506clQTSVKDgGOM/D3PJGO1gAcxgpDzNHqsaHgJCl51JTB5WDYppKA1oTcGqkDtbzDEdghAgMBAAECggEAKqeLKKh3RG6XMfXfWJ+mY2a4KA1dz+hASCg3/E/quLlpLWfZ52GQH6/W84/jrGWppLJxxs1c+vm6u7vz/p59dOuiP6BefbMmFqAP4lttwYXsIYXeyicfHFeeV4yMskHsCHlVkoX60FkstfDQhQ43w70H5PHeNERxJk9AgnSq85buFvpJYlxcklg91Mot5MkrWsiTEbhf5CRgIxmGlQfuC6PhBKJWBpfimmzOfzjQ710dWY5SxewDtTTL30FbPucKf4++Z5YEkJCBG9jE5Zet5VFYKxXSBm3N5lGtDjbFWZ92rXYJW87gbIpQyXSqUHo237IwHfx/6jyYefWSAutJAQKBgQD0daG4UDGv2BhV+57L9cfiXaZZBMAcsUb5UOcZnNcW79PpYFmiutW7KtsdAlzz5dtYT/m+KwU1v5OUVBu7uCIsqArewQz7SXP1JIHNkBpY3uJDokh/IcWroYzADkqjJqJ9UYF2eMCQ6Hc1360tw5SVHjtWd4obIGQC0OmAj6RUUQKBgQCnxQx5QtWUi1+dEXwmITnlZhzbuP1RXoZBlhdtm1LIhp+CIdQXThgVaev5Tn2DjvevBNotbVkQ9yzYw1+M3zqmSeNRvUU1XYR3kz7ESLLs+SrzjE6VAis30hOXst6dWSEJkNoCWTAMAKEBGmdubgAr9XDTuHrR442lpb843QJi0QKBgBHuOuFxCGP0frx3y0r8iR/CbLwkzA6Otjz9QSYwydoF105L4ec8uwaSeyXikXzWRENzAkd/kk9B8Qo1LR+UvvT1km6KTHB2D8pQVjEEu9n+5yu80IJ6sKwJGnDP24uh/tMgUlWlP8KhOnU6JdKwgMp7QDD0ba3Vr2BBgI8MeioxAoGAH8AwGybl6uXxo3UyrLivD1Yi8gZxkpu0BueT6X9yzFaGC4fBbuOttSfFq/oJ0QMWpv3hGKXQLGDLEP7wr2Vz4RKsvcR3O6FGN6cbQuSLUEPbuBn+qT6u1TKh2JzWeqrqkLfkOnuMl0jrL51Co+iXibo6rycDv4M0RHw401coY3ECgYBBW9dOfjrBm9wQpya144yeWOlBs99fpWvA5440oLoYHEcvv0K3+xa/2mw5AZaH0uz2rW6Ze1MVUqhCJ3Qs0x8iHrRabAdk5gnNnqa8/x4fkIATBZ7SZzsTBXEeuBJTbih49rCtMwTAqNwytMa5dc5Ruroz5r0cX6B9y+nZRF9Luw\u003d\u003d"
}
2021-05-20 11:59:18 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-length": "158",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "content-type": "application/json; charset\u003dutf-8",
  "date": "Thu, 20 May 2021 11:59:18 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "vary": "Origin",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body
{"error":"authorization_pending","error_description":"authorization request is still pending as the end-user hasn't yet completed the user interaction steps"}
2021-05-20 11:59:18 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
authorization_pending
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:18 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-05-20 11:59:18
CheckTokenEndpointHttpStatusNot200
Condition ran but did not log anything
Verify token endpoint response is pending or slow_down
2021-05-20 11:59:18 SUCCESS
CheckTokenEndpointHttpStatus400
Token endpoint http status code was 400
2021-05-20 11:59:18 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
authorization_pending
2021-05-20 11:59:18 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:18 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
authorization request is still pending as the end-user hasn't yet completed the user interaction steps
2021-05-20 11:59:18 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-05-20 11:59:18 SUCCESS
EnsureErrorTokenEndpointSlowdownOrAuthorizationPending
error met 'slow_down' or 'authorization_pending'
error
authorization_pending
2021-05-20 11:59:18 FINISHED
fapi-ciba-id1-multiple-call-to-token-endpoint
Test has run to completion
testmodule_result
PASSED
Unregister dynamically registered client
2021-05-20 11:59:19
UnregisterDynamicallyRegisteredClient
HTTP request
request_uri
https://fapi.panva.cz/reg/RsRV8XUazIaV6bDwwO8yV
request_method
DELETE
request_headers
{
  "accept": "application/json",
  "accept-charset": "utf-8",
  "authorization": "Bearer 5_E1VWMEQIKkUvKqCsmAZ19GDZ1rCkXnFhvvuDOxwgR",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d"
}
2021-05-20 11:59:19 RESPONSE
UnregisterDynamicallyRegisteredClient
HTTP response
response_status_code
204 NO_CONTENT
response_status_text
No Content
response_headers
{
  "cache-control": "no-cache, no-store",
  "content-security-policy": "default-src \u0027self\u0027;base-uri \u0027self\u0027;block-all-mixed-content;font-src \u0027self\u0027 https: data:;frame-ancestors \u0027self\u0027;img-src \u0027self\u0027 data:;object-src \u0027none\u0027;script-src \u0027self\u0027;script-src-attr \u0027none\u0027;style-src \u0027self\u0027 https: \u0027unsafe-inline\u0027;upgrade-insecure-requests",
  "date": "Thu, 20 May 2021 11:59:19 GMT",
  "expect-ct": "max-age\u003d0",
  "pragma": "no-cache",
  "referrer-policy": "no-referrer",
  "server": [
    "Caddy",
    "Cowboy"
  ],
  "strict-transport-security": "max-age\u003d15552000; includeSubDomains",
  "via": "1.1 vegur",
  "x-content-type-options": "nosniff",
  "x-dns-prefetch-control": "off",
  "x-download-options": "noopen",
  "x-frame-options": "SAMEORIGIN",
  "x-permitted-cross-domain-policies": "none",
  "x-xss-protection": "0"
}
response_body

                                
2021-05-20 11:59:19 SUCCESS
UnregisterDynamicallyRegisteredClient
Client successfully unregistered
Test Results