Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-08-13 15:58:41 INFO
TEST-RUNNER
Test instance C3tCrudSxJE0wrL created
baseUrl
https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain
variant
{
  "client_auth_type": "mtls",
  "fapi_auth_request_method": "by_value",
  "fapi_profile": "plain_fapi",
  "fapi_response_mode": "plain_response"
}
alias
pingidentity-pingfederate-fapi-adv-op-mtls-value-plain
description
planId
rAIoXunraej7D
config
{
  "alias": "pingidentity-pingfederate-fapi-adv-op-mtls-value-plain",
  "browser": [
    {
      "match": "https://idp.conf.ping-eng.com:9031/as/authorization.oauth2*",
      "tasks": [
        {
          "task": "Initial Login",
          "match": "https://idp.conf.ping-eng.com:9031/as/authorization.oauth2*",
          "optional": true,
          "commands": [
            [
              "wait",
              "id",
              "username",
              10
            ],
            [
              "text",
              "id",
              "username",
              "joe"
            ],
            [
              "text",
              "id",
              "password",
              "2Federate"
            ],
            [
              "click",
              "id",
              "signOnButton"
            ]
          ]
        },
        {
          "task": "Authorize Client",
          "match": "https://idp.conf.ping-eng.com:9031/as/*/resume/as/authorization.ping*",
          "optional": true,
          "commands": [
            [
              "click",
              "css",
              "a.ping-button.normal.allow"
            ]
          ]
        },
        {
          "task": "Verify Complete",
          "optional": true,
          "match": "https://www.certification.openid.net/test/a/*/callback*"
        }
      ]
    }
  ],
  "server": {
    "discoveryUrl": "https://idp.conf.ping-eng.com:9031/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "fapi_adv_op_w_mtls_value_first_client",
    "scope": "openid payments",
    "jwks": {
      "keys": [
        {
          "p": "7Iiv4eby1Ubo_U9uzWEa8OlUQoBz4vjPtB7MWQ6dlM7ajD9IjhjwwE8e1d_fE22DW4bEjHb1ls6_wbEm07PusUuMyHtWzW1sNWnpCh0xgDsEnLZwmtdXhPDHJlbRXHXAqcTVTUIJNMUSa8Mj9MXs33u1mkMD-hYWJfDHNCrDUAc",
          "kty": "RSA",
          "q": "msxkZpdafUHdoC-S5QrAHZ8z0NrQNFjn2yFcpznZ0zjXK83QH-jbBHCcTDBkF7xpatG61SbEznYxYaDEFR4xzuyy0WOYtoIk5IukygdvZhMkAXDNl5rNvF770Fnv8gwpoxZqlpb18kWtP2gk-ebJK2YHKjhl-pHDOrbzubkRdOE",
          "d": "AXvpT93_Y-hQYTCk95gHj6BinFTppIaTZhgJWvnDY-Bz1NhUZ7fz-RjePxQBEuRv3DUk6nEmT8CivxJKZdql9AR9UjHz_ANOH6mAwHxkE2bcEKEsJFGTkaDJhVqmwukYwfKfGpkeNuD2r5rhNdl3XNUQ6VdTkUokmZM3KNrLhks3NtPL3xEMqK5KAYJbJuS8AQoOI5scRTJZYcS63KK9WwBoOFwbz3PFHJb2lffTOH_tnqgSvm9chb7y1CaarSJuFSVTjkjMyk2rBOr4bu5YRtxzH1dAa3Dd5n9XzVwN_q0dIitTh7Vro2JcSU24O1n-XR4WGzCCiarMxPKc8SWyAQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "pingfederate-fapi-jwt-assertion-client1",
          "qi": "De5E3i5KIQ88R7jYZDWEsVonhPPGcWksWXC-s4frJ0tISk5-zlCdP6eitstJTaB1i7bkCW4R7iXufgXqW2WCRK2IXXjwItZo1zEpuAZJnKFwDPxXt5pLoc_sDjarMRENxdx_spyiFIxejLvvDmKGxs7vt3LDm_ytvJXfsymzjqM",
          "dp": "z80l9-jV3dl2R1TJm1V8Pbo_dE01gmnkz_Fexb65Ykp4Zk4SiAQRPmJETNFpQcAsbvRvKJg6Gkt428muur6RLOGaxWbWU5OWRTbOrTwIiQdQff0p4F7fXMPLsjsDo58vq_ZpDn69Z8ba8CF4LUrVV2Fvoh7OF5_fxWVLHOGUxXE",
          "alg": "PS256",
          "dq": "JRS_HEA3YffsMhoTUyB_ItlnHSm9ZDzD1Z8pRbm67zkXehvENlCeXnLnTeztnS36BqeU3Mh7roVrkNpk_jYMcmgK8dOs2lNUqRa2c9rSGZ6OKnYuGZnwnKYYJjHVI6M8Oh_9inNBGTcNqDm3WdGp8OZw4vE9pIdUP_VhbuThRKE",
          "n": "jwcTfjv0q48qux1sg2MR8OvCh1mXITYu7zkEJVCz0UImIrIqLtEzmGkqJP0LobK6-NlFHWOsAp2NcVTh79RBwawsrmi59rJ_nHigX00C7wjVpJtldJmOwmSS4HD8EgRkiM0yJzyKijtRiB5ssrOoBK3VPFMqZYm_JBJY35s_qDDHWTlwuWDLqADZp809btMcwQZCqgrSKgtalspeKXIh6Lv3lkFnELJhfwGZYPtVc2SJk91F8tmgamPNJUfVJV3ygdBuDcB8EZ8m-tIaISghfR1RRkEeYI8r_Wf4dfjIAZRkrj8GHqAJOi762rjyFvXvcPc0Zc-ABDYnVi4WdWOCJw"
        }
      ]
    }
  },
  "resource": {
    "resourceUrl": "https://idp.conf.ping-eng.com:3000/get"
  },
  "client2": {
    "client_id": "fapi_adv_op_w_mtls_value_second_client",
    "scope": "openid payments",
    "jwks": {
      "keys": [
        {
          "p": "43lqQE0EN1LJ_jdqHq56hNFjErKfcrwJnVpIVRsXCZWboV4MSfLzGGEyePPs6SxV6-l_txQY-M2dW6xLaedRUlaFT89r10cIm136ecYUzs51iX_GZW_AvohaXSmAbZKpjLmsHIDelgggQKjDQxGGbmAAQojnqzorpVrfz-8aUNc",
          "kty": "RSA",
          "q": "q1t1ErKAx06nV7ohJ4zlo3xUeMA3rO7HLmK6Eh460DsiX80AsCxyw1AsQy0N1W8u_RgkA3y_p_5Nf7K1KLLa9mduIBWyUFEim1EneviM4m3q7e2UtQ7iezh6FatYFZD5c_v_CH2gV0bhxZrMzNc8ubL46OXo5h1WycY1iAqsjNs",
          "d": "ElS590xAIy7zN4KHKmq2rLnAg1TJ9kODaUrb98X3gCGuTOLBAtFzUqjPyBF8rqXAtkgl8inec6GwY6gmB9p53quJfKSunnN7CbU3Qe37f8HBgS95vFsmJtbctbJ43XKlwo0imYbIeBYLmxKUJt5BKSnUYWWv4EI2AVE_LrqecL-QaNLH2IxY1JVLvR8WhP7wzjTHIsGjaQGn7199eVBaHZ7KTC-bFaEWnPgklR0e8t8TdICUqJudCqTEuoEBFYXRdqi_3betdNZHtJdcwfk9VEXTYTnjzw0fJ7RoFyVE1_1-wMULnEYk5SyfSYfYsBq_V25e-TUSLxB3IXgzBmJVOQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "pingfederate-fapi-jwt-assertion-client2",
          "qi": "rBDWPBNof1ZrvpqRqpPIf-hn6jmOmLN5mzv8ArwfYEuoIPo9Ltzta1m42A6KQAAsHfXUaKtihSXnVopYtYcxguVNCi2qbDh4nx7ZZNCcQsKSkUOw-hgm4vHZJMOJ-4jh6jthUeLTRmCpEZAHQrtmnpQ1tC1g3g2VCDH48p8cLzo",
          "dp": "BrSxmSusECV0pvXjPvxNyFST4x047hz0-5qJv1iJGVM7v0oSequa1wEmh8JJHaac8dN0XGVPRyZomSc_IeQb1Z2PWIb42uPRMSNYGvbn7iDP_jmyE5Nzzyod39k1XAWS0f83P6_c3_dlXAKdnwCJQf-6gjue-MFCQCGpr2uRDwk",
          "alg": "PS256",
          "dq": "GyE3v-YTDXsec308ko50LRYaKaQFLJQBZQ6sdwHiPeWe45wJZ9shsFqZJ2mSryATSG7yBLtTfL1-d6FLnU3z7N8jSGEnAiBWYlDO92EyrQbKEzFyQdhBc1DVw2iFYaS6WeqjzixVnnvScv63Phc1vhDf57--x_ANNZT0FL3b49E",
          "n": "mENeKNMC5ttp60qEq6LZoWaihn-__Ei70wnW8Zd_-ILFnYcaM90oTTnl8R2uHD4EJ3t_VCjFteXIwWV7OwDmRmOMwda0X1R5IKYn0O2ujT8NI4citj8G4NHY0r5Y5loLdb5dynGgT-YpsnWwfTC8Ky98gNA3OLf6Z2n8PEdKJr818RMAC0Vx6NQMHBNG4jI1D0bvbrZbx0XkXan7h2Elm9HLRjzHar5Qb5gFLGQRFdeHVHF5lRKyAFgdeQPvBqMiRsAwcgyKxDjbzF5qHPwhKMB-7IVhxuSULMvgSkesIIhrylzU9bo2KRhcxTB7oPkhAbPgumpoVZV0ME-ypiy77Q"
        }
      ]
    }
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\nw3oHfC8xmWvgqsTdlzJm1qhZCZGNOsdWLEv6hGl4XLyr\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----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\nbfaw1pClq9IbngVcDGfzg74\u003d\n-----END PRIVATE KEY-----"
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\n+xrUbrRn4H+K0eQSLE+LmmxuOaE4WgdK4ln9ZUXQC90R1aM\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----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\nSPB0OxcyG9wu0OBKbG70lP6scQE\u003d\n-----END PRIVATE KEY-----"
  }
}
testName
fapi1-advanced-final-ensure-request-object-with-multiple-aud-succeeds
2021-08-13 15:58:41 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback
2021-08-13 15:58:41
GetDynamicServerConfiguration
HTTP request
request_uri
https://idp.conf.ping-eng.com:9031/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-08-13 15:58:41 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Fri, 13 Aug 2021 15:58:41 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003deqYwixYNOBCZD2dKAshkBa; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "content-length": "3783"
}
response_body
{
  "issuer": "https://idp.conf.ping-eng.com:9031",
  "authorization_endpoint": "https://idp.conf.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://idp.conf.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://idp.conf.ping-eng.com:9031/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://idp.conf.ping-eng.com:9031/idp/userinfo.openid",
  "introspection_endpoint": "https://idp.conf.ping-eng.com:9031/as/introspect.oauth2",
  "jwks_uri": "https://idp.conf.ping-eng.com:9031/pf/JWKS",
  "registration_endpoint": "https://idp.conf.ping-eng.com:9031/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://idp.conf.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://idp.conf.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions",
  "ping_session_management_users_endpoint": "https://idp.conf.ping-eng.com:9031/pf-ws/rest/sessionMgmt/users",
  "ping_end_session_endpoint": "https://idp.conf.ping-eng.com:9031/idp/startSLO.ping",
  "device_authorization_endpoint": "https://idp.conf.ping-eng.com:9031/as/device_authz.oauth2",
  "scopes_supported": [ "openid", "payments" ],
  "claims_supported": [ "acr", "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  
"token_endpoint_auth_methods_supported": ["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],

  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  
"tls_client_certificate_bound_access_tokens":true,
"claim_types_supported": 
[ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  
"request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512", "none" ],

  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "pushed_authorization_request_endpoint": "https://idp.conf.ping-eng.com:9031/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://idp.conf.ping-eng.com:9031/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "code_challenge_methods_supported": [ "S256" ]

,
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://idp.conf.ping-eng.com:9032/as/token.oauth2",
    "pushed_authorization_request_endpoint": "https://idp.conf.ping-eng.com:9032/as/par.oauth2"
    }
}

2021-08-13 15:58:41
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{
  "issuer": "https://idp.conf.ping-eng.com:9031",
  "authorization_endpoint": "https://idp.conf.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://idp.conf.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://idp.conf.ping-eng.com:9031/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://idp.conf.ping-eng.com:9031/idp/userinfo.openid",
  "introspection_endpoint": "https://idp.conf.ping-eng.com:9031/as/introspect.oauth2",
  "jwks_uri": "https://idp.conf.ping-eng.com:9031/pf/JWKS",
  "registration_endpoint": "https://idp.conf.ping-eng.com:9031/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://idp.conf.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://idp.conf.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions",
  "ping_session_management_users_endpoint": "https://idp.conf.ping-eng.com:9031/pf-ws/rest/sessionMgmt/users",
  "ping_end_session_endpoint": "https://idp.conf.ping-eng.com:9031/idp/startSLO.ping",
  "device_authorization_endpoint": "https://idp.conf.ping-eng.com:9031/as/device_authz.oauth2",
  "scopes_supported": [ "openid", "payments" ],
  "claims_supported": [ "acr", "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  
"token_endpoint_auth_methods_supported": ["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],

  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  
"tls_client_certificate_bound_access_tokens":true,
"claim_types_supported": 
[ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  
"request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512", "none" ],

  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "pushed_authorization_request_endpoint": "https://idp.conf.ping-eng.com:9031/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://idp.conf.ping-eng.com:9031/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "code_challenge_methods_supported": [ "S256" ]

,
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://idp.conf.ping-eng.com:9032/as/token.oauth2",
    "pushed_authorization_request_endpoint": "https://idp.conf.ping-eng.com:9032/as/par.oauth2"
    }
}

2021-08-13 15:58:41 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://idp.conf.ping-eng.com:9031
authorization_endpoint
https://idp.conf.ping-eng.com:9031/as/authorization.oauth2
token_endpoint
https://idp.conf.ping-eng.com:9032/as/token.oauth2
revocation_endpoint
https://idp.conf.ping-eng.com:9031/as/revoke_token.oauth2
userinfo_endpoint
https://idp.conf.ping-eng.com:9031/idp/userinfo.openid
introspection_endpoint
https://idp.conf.ping-eng.com:9031/as/introspect.oauth2
jwks_uri
https://idp.conf.ping-eng.com:9031/pf/JWKS
registration_endpoint
https://idp.conf.ping-eng.com:9031/as/clients.oauth2
ping_revoked_sris_endpoint
https://idp.conf.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris
ping_session_management_sris_endpoint
https://idp.conf.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions
ping_session_management_users_endpoint
https://idp.conf.ping-eng.com:9031/pf-ws/rest/sessionMgmt/users
ping_end_session_endpoint
https://idp.conf.ping-eng.com:9031/idp/startSLO.ping
device_authorization_endpoint
https://idp.conf.ping-eng.com:9031/as/device_authz.oauth2
scopes_supported
[
  "openid",
  "payments"
]
claims_supported
[
  "acr",
  "sub"
]
response_types_supported
[
  "code",
  "token",
  "id_token",
  "code token",
  "code id_token",
  "token id_token",
  "code token id_token"
]
response_modes_supported
[
  "fragment",
  "query",
  "form_post"
]
grant_types_supported
[
  "implicit",
  "authorization_code",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
  "urn:ietf:params:oauth:grant-type:jwt-bearer",
  "urn:ietf:params:oauth:grant-type:saml2-bearer",
  "urn:ietf:params:oauth:grant-type:device_code",
  "urn:ietf:params:oauth:grant-type:token-exchange",
  "urn:openid:params:grant-type:ciba"
]
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "none",
  "HS256",
  "HS384",
  "HS512",
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
token_endpoint_auth_methods_supported
[
  "client_secret_basic",
  "client_secret_post",
  "private_key_jwt",
  "tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
tls_client_certificate_bound_access_tokens
true
claim_types_supported
[
  "normal"
]
claims_parameter_supported
false
request_parameter_supported
true
request_uri_parameter_supported
false
request_object_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512",
  "none"
]
id_token_encryption_alg_values_supported
[
  "dir",
  "A128KW",
  "A192KW",
  "A256KW",
  "A128GCMKW",
  "A192GCMKW",
  "A256GCMKW",
  "ECDH-ES",
  "ECDH-ES+A128KW",
  "ECDH-ES+A192KW",
  "ECDH-ES+A256KW",
  "RSA-OAEP"
]
id_token_encryption_enc_values_supported
[
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256CBC-HS512",
  "A128GCM",
  "A192GCM",
  "A256GCM"
]
pushed_authorization_request_endpoint
https://idp.conf.ping-eng.com:9031/as/par.oauth2
require_pushed_authorization_requests
false
backchannel_authentication_endpoint
https://idp.conf.ping-eng.com:9031/as/bc-auth.ciba
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
backchannel_user_code_parameter_supported
false
code_challenge_methods_supported
[
  "S256"
]
mtls_endpoint_aliases
{
  "token_endpoint": "https://idp.conf.ping-eng.com:9032/as/token.oauth2",
  "pushed_authorization_request_endpoint": "https://idp.conf.ping-eng.com:9032/as/par.oauth2"
}
2021-08-13 15:58:41 SUCCESS
AddMTLSEndpointAliasesToEnvironment
Added mtls_endpoint_aliases to environment
2021-08-13 15:58:41 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2021-08-13 15:58:41
FetchServerKeys
Fetching server key
jwks_uri
https://idp.conf.ping-eng.com:9031/pf/JWKS
2021-08-13 15:58:41
FetchServerKeys
HTTP request
request_uri
https://idp.conf.ping-eng.com:9031/pf/JWKS
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-08-13 15:58:42 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Fri, 13 Aug 2021 15:58:42 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dqQLgKpMcOZar2dKpxL2L0j; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"keys":[{"kty":"RSA","kid":"2CmYYedTMgSg_B2IEBeQc3c_JY0","use":"sig","n":"3bdVMnUR62v8t0UFsyg3lITTNCS6M1qgVimdBHmhHmU_mK4brurPe3v3BDhWvRvCV4ZxLBvvxj3jEQawmz-XviBb6q0ox_PwzrUAb-qP6efmKuAfNKTGzhEqSzkxZMWqACbL_BL4Hw5WmSxaPtRky678AbCzLVBa6E9nfpldgUa0-lukdR-JMF9VyAtlyTuN-0Sc9abGObLCoM0k-b_3DLLvKFlUmBc7G2M0bCYA_2L92nmDDAMLaPMUeyHoUrNR5f5divBt0SrRpPuvNp5gMlhSdea4oacurnjSbjI0OIY9yjihmVNCnyRTojJGU8zHuTcbTn_xQA_6gE3Xi45Gww","e":"AQAB"},{"kty":"EC","kid":"8xsYE4Tn3xDqzfp84Bvy2EjAfnA","use":"sig","x":"1cnxOz2zPjxTNl87EP0natwkjsY21sZtTrVjFCwSlKqBZP_9-vAF71pd5d0C_AVg","y":"dTMtn07V5Bxhg_lct0FOgNmP2MumHxd4DvCQ5z-11ISEkZzm4R0nw3-SpKz1z4jp","crv":"P-384"},{"kty":"EC","kid":"LT5rdwU8SbVJar_J7x6zw42TZm4","use":"sig","x":"AbZvDXykFQorO0FKXZT6ch123qOw_P2hdDLT8EGu7fmEzy2KwiXKgxD3ToTwBXQh1xVIDASTVyk8ULifcPyCrzVg","y":"AfS_WYn_POzpZaZ7CK4-NXdCKoIdSjRpLidr1gPulIs0CjU04cGB6lzY_M2z9P9fDlwdxMJsB7WzzqFYLhyD-hxG","crv":"P-521"},{"kty":"EC","kid":"OWOHC2Lhg2V9Z2OP3AeTnsIqfcU","use":"sig","x":"RUEyPQeEHjIR6E6Js6MGzZnrzBKkoyLP0dZve4ZdThk","y":"Q_sV8s67YTUp1IkK5DrD2Od2JW7wKkOm334yX5m4xJY","crv":"P-256"},{"kty":"EC","kid":"Jvt8Q_a_g_tybc1my9tocjX-c4A","use":"sig","x":"F4vJqpd243lWKo7uDKSrggXwuDYAOSXHcBfDBfYOYt0","y":"QAMHyzLnQRKrUqF8ycAFrQ3Cg9Its3xOQ_r9PO0X5GY","crv":"P-256"},{"kty":"EC","kid":"K1pu5hRTBR4Z_L9DabJ6z8UYNC8","use":"sig","x":"Pf9yQal5uYkLe37xaybqwmQEkYPcwW-6Eg6-jiXU2mJi4RY_DU2A7ghHpiUjX56i","y":"S6KXvLguETXRx8suIvV05i8p29cpCW9W_tgsaBKT6qI62parFenA2VSvhf_8U8FO","crv":"P-384"},{"kty":"RSA","kid":"NfGZj3wtxSjC-G5ZOsy0GIrGqwU","use":"sig","n":"kL1Bq2Eo1i1qLrwK6XLmCyFf3WNbKqTJfilwntH-Voy_qgprhprcv8BpQtD8SdkAvrpeLcZLYg4yUbFSumxJC9DXNNkJkIl21tJZAxm-ism8dp-80T2_J-fXwI_h6jw_PK2JwZKBl6mKRvrM3VwEdVHYWLb7uII2Khsa-QE0T3EOYAZKASlitKYgD1GEtlq0DNhJ6q6IVEtGnuvTbyOmF_mD-50CcwxoBdy-6m_ue3-YbgYGL6yd0pP5KMiw3BOO1In7Mb8Yg7akJcfjnnqihBgWuDVkr0_usoBZ8mjqYm_zSBsXpGiKIGpV_UVej4o5zMEsnkMe36s02ocvDOWBHQ","e":"AQAB"},{"kty":"EC","kid":"RdEAGU6yqPfkvo6OjXVFeed1wuI","use":"sig","x":"AZuOUs9iispneV185uu2qVslK0pTHaN5sWj4XuwEFJ0qBm_LFSJFXAUy20uasUK4KI6mmezPZZs0ZWsDjcRILMJB","y":"AKDnQNp2KypK6uYe0YIHL-UTJhVxhl9qJNOLFFDy3gcHIzSMvMeexuJpvr-wzOi9gzHTHs-lyRf-7I-l59bjyWKG","crv":"P-521"},{"kty":"EC","kid":"BwvCR6iBoOhSint4SwviYtdL35o","use":"enc","x":"AH_JYF0Kw-g6kbb1m0MB9Vkck-TGiHfrn8_UNWvD_l4VdqGGt1-EhA8nrfolZVsHeNaQM06lRhlyHqyIOaHN-yJy","y":"AIvuF575rqT-3sq_ja97840a-J7P93K3dr92YnJo6c5dl0prPyafIG3BNm9PfuhvcA2spVJw4t4rjtNekgyUeVX3","crv":"P-521"},{"kty":"EC","kid":"EDuQgEuWy4bDB4VEI2WhdqgzKzQ","use":"enc","x":"2hxj_wZFyRXuYxn4RDpnn2eE7VeVSTzsULm_qTkVcua-pv68qfL5eWTu2hsnMgmg","y":"ahx3r1rDzsQNUXnfH6ukWQGdC132E9FuF5py8ZdwAS2YImecC7MrAb4dJeowrX-h","crv":"P-384"},{"kty":"RSA","kid":"oAgFKBn4jaaiisguObdKPSgxBDw","use":"enc","n":"otYWk0hVkhhtCKGNT33RgXENFaZFJXjZ9jSJxyikceMyG3RKPnULtRQ7lKkIGpC8V_OJRl6MPp6wOU8SJZFqvsy2LCECejjUCMSzyJ1IJVJcicZ3E-Ru_vPs9lrT9ey3vgvdAPWxvRykPGPlgj5OMTmPRJx4-IDJ7XRXYREFjskGV7cECLd1AhptYyMyw_anUCKzhANMk_v4QG5q9poSuXPEAAYqnZsVpkoW5fAZAUdSAsrCP8q3Q1hcTUIjeRy-xcuGuMpWtq740ggt19Sz9PkpDg3NSiwZHDIybgyCbXKZkLIU6-Uu1wKhSVdBhTWtwtRgRVo6-GuODg3EFpSqbw","e":"AQAB"},{"kty":"EC","kid":"zcKSoQqEAJ6TCUFIKqmKyh32_cw","use":"enc","x":"czEXTyQiOF2-N8wxBgzcAYSWCZTe048YGAFhQ5qGEKo","y":"ZSDzPSI1Qr4s-D7y0TvFgy6Jc5jEkx-DzY_SK4JOMvk","crv":"P-256"}]}
2021-08-13 15:58:42
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","kid":"2CmYYedTMgSg_B2IEBeQc3c_JY0","use":"sig","n":"3bdVMnUR62v8t0UFsyg3lITTNCS6M1qgVimdBHmhHmU_mK4brurPe3v3BDhWvRvCV4ZxLBvvxj3jEQawmz-XviBb6q0ox_PwzrUAb-qP6efmKuAfNKTGzhEqSzkxZMWqACbL_BL4Hw5WmSxaPtRky678AbCzLVBa6E9nfpldgUa0-lukdR-JMF9VyAtlyTuN-0Sc9abGObLCoM0k-b_3DLLvKFlUmBc7G2M0bCYA_2L92nmDDAMLaPMUeyHoUrNR5f5divBt0SrRpPuvNp5gMlhSdea4oacurnjSbjI0OIY9yjihmVNCnyRTojJGU8zHuTcbTn_xQA_6gE3Xi45Gww","e":"AQAB"},{"kty":"EC","kid":"8xsYE4Tn3xDqzfp84Bvy2EjAfnA","use":"sig","x":"1cnxOz2zPjxTNl87EP0natwkjsY21sZtTrVjFCwSlKqBZP_9-vAF71pd5d0C_AVg","y":"dTMtn07V5Bxhg_lct0FOgNmP2MumHxd4DvCQ5z-11ISEkZzm4R0nw3-SpKz1z4jp","crv":"P-384"},{"kty":"EC","kid":"LT5rdwU8SbVJar_J7x6zw42TZm4","use":"sig","x":"AbZvDXykFQorO0FKXZT6ch123qOw_P2hdDLT8EGu7fmEzy2KwiXKgxD3ToTwBXQh1xVIDASTVyk8ULifcPyCrzVg","y":"AfS_WYn_POzpZaZ7CK4-NXdCKoIdSjRpLidr1gPulIs0CjU04cGB6lzY_M2z9P9fDlwdxMJsB7WzzqFYLhyD-hxG","crv":"P-521"},{"kty":"EC","kid":"OWOHC2Lhg2V9Z2OP3AeTnsIqfcU","use":"sig","x":"RUEyPQeEHjIR6E6Js6MGzZnrzBKkoyLP0dZve4ZdThk","y":"Q_sV8s67YTUp1IkK5DrD2Od2JW7wKkOm334yX5m4xJY","crv":"P-256"},{"kty":"EC","kid":"Jvt8Q_a_g_tybc1my9tocjX-c4A","use":"sig","x":"F4vJqpd243lWKo7uDKSrggXwuDYAOSXHcBfDBfYOYt0","y":"QAMHyzLnQRKrUqF8ycAFrQ3Cg9Its3xOQ_r9PO0X5GY","crv":"P-256"},{"kty":"EC","kid":"K1pu5hRTBR4Z_L9DabJ6z8UYNC8","use":"sig","x":"Pf9yQal5uYkLe37xaybqwmQEkYPcwW-6Eg6-jiXU2mJi4RY_DU2A7ghHpiUjX56i","y":"S6KXvLguETXRx8suIvV05i8p29cpCW9W_tgsaBKT6qI62parFenA2VSvhf_8U8FO","crv":"P-384"},{"kty":"RSA","kid":"NfGZj3wtxSjC-G5ZOsy0GIrGqwU","use":"sig","n":"kL1Bq2Eo1i1qLrwK6XLmCyFf3WNbKqTJfilwntH-Voy_qgprhprcv8BpQtD8SdkAvrpeLcZLYg4yUbFSumxJC9DXNNkJkIl21tJZAxm-ism8dp-80T2_J-fXwI_h6jw_PK2JwZKBl6mKRvrM3VwEdVHYWLb7uII2Khsa-QE0T3EOYAZKASlitKYgD1GEtlq0DNhJ6q6IVEtGnuvTbyOmF_mD-50CcwxoBdy-6m_ue3-YbgYGL6yd0pP5KMiw3BOO1In7Mb8Yg7akJcfjnnqihBgWuDVkr0_usoBZ8mjqYm_zSBsXpGiKIGpV_UVej4o5zMEsnkMe36s02ocvDOWBHQ","e":"AQAB"},{"kty":"EC","kid":"RdEAGU6yqPfkvo6OjXVFeed1wuI","use":"sig","x":"AZuOUs9iispneV185uu2qVslK0pTHaN5sWj4XuwEFJ0qBm_LFSJFXAUy20uasUK4KI6mmezPZZs0ZWsDjcRILMJB","y":"AKDnQNp2KypK6uYe0YIHL-UTJhVxhl9qJNOLFFDy3gcHIzSMvMeexuJpvr-wzOi9gzHTHs-lyRf-7I-l59bjyWKG","crv":"P-521"},{"kty":"EC","kid":"BwvCR6iBoOhSint4SwviYtdL35o","use":"enc","x":"AH_JYF0Kw-g6kbb1m0MB9Vkck-TGiHfrn8_UNWvD_l4VdqGGt1-EhA8nrfolZVsHeNaQM06lRhlyHqyIOaHN-yJy","y":"AIvuF575rqT-3sq_ja97840a-J7P93K3dr92YnJo6c5dl0prPyafIG3BNm9PfuhvcA2spVJw4t4rjtNekgyUeVX3","crv":"P-521"},{"kty":"EC","kid":"EDuQgEuWy4bDB4VEI2WhdqgzKzQ","use":"enc","x":"2hxj_wZFyRXuYxn4RDpnn2eE7VeVSTzsULm_qTkVcua-pv68qfL5eWTu2hsnMgmg","y":"ahx3r1rDzsQNUXnfH6ukWQGdC132E9FuF5py8ZdwAS2YImecC7MrAb4dJeowrX-h","crv":"P-384"},{"kty":"RSA","kid":"oAgFKBn4jaaiisguObdKPSgxBDw","use":"enc","n":"otYWk0hVkhhtCKGNT33RgXENFaZFJXjZ9jSJxyikceMyG3RKPnULtRQ7lKkIGpC8V_OJRl6MPp6wOU8SJZFqvsy2LCECejjUCMSzyJ1IJVJcicZ3E-Ru_vPs9lrT9ey3vgvdAPWxvRykPGPlgj5OMTmPRJx4-IDJ7XRXYREFjskGV7cECLd1AhptYyMyw_anUCKzhANMk_v4QG5q9poSuXPEAAYqnZsVpkoW5fAZAUdSAsrCP8q3Q1hcTUIjeRy-xcuGuMpWtq740ggt19Sz9PkpDg3NSiwZHDIybgyCbXKZkLIU6-Uu1wKhSVdBhTWtwtRgRVo6-GuODg3EFpSqbw","e":"AQAB"},{"kty":"EC","kid":"zcKSoQqEAJ6TCUFIKqmKyh32_cw","use":"enc","x":"czEXTyQiOF2-N8wxBgzcAYSWCZTe048YGAFhQ5qGEKo","y":"ZSDzPSI1Qr4s-D7y0TvFgy6Jc5jEkx-DzY_SK4JOMvk","crv":"P-256"}]}
2021-08-13 15:58:42 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "2CmYYedTMgSg_B2IEBeQc3c_JY0",
      "use": "sig",
      "n": "3bdVMnUR62v8t0UFsyg3lITTNCS6M1qgVimdBHmhHmU_mK4brurPe3v3BDhWvRvCV4ZxLBvvxj3jEQawmz-XviBb6q0ox_PwzrUAb-qP6efmKuAfNKTGzhEqSzkxZMWqACbL_BL4Hw5WmSxaPtRky678AbCzLVBa6E9nfpldgUa0-lukdR-JMF9VyAtlyTuN-0Sc9abGObLCoM0k-b_3DLLvKFlUmBc7G2M0bCYA_2L92nmDDAMLaPMUeyHoUrNR5f5divBt0SrRpPuvNp5gMlhSdea4oacurnjSbjI0OIY9yjihmVNCnyRTojJGU8zHuTcbTn_xQA_6gE3Xi45Gww",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "8xsYE4Tn3xDqzfp84Bvy2EjAfnA",
      "use": "sig",
      "x": "1cnxOz2zPjxTNl87EP0natwkjsY21sZtTrVjFCwSlKqBZP_9-vAF71pd5d0C_AVg",
      "y": "dTMtn07V5Bxhg_lct0FOgNmP2MumHxd4DvCQ5z-11ISEkZzm4R0nw3-SpKz1z4jp",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "LT5rdwU8SbVJar_J7x6zw42TZm4",
      "use": "sig",
      "x": "AbZvDXykFQorO0FKXZT6ch123qOw_P2hdDLT8EGu7fmEzy2KwiXKgxD3ToTwBXQh1xVIDASTVyk8ULifcPyCrzVg",
      "y": "AfS_WYn_POzpZaZ7CK4-NXdCKoIdSjRpLidr1gPulIs0CjU04cGB6lzY_M2z9P9fDlwdxMJsB7WzzqFYLhyD-hxG",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "OWOHC2Lhg2V9Z2OP3AeTnsIqfcU",
      "use": "sig",
      "x": "RUEyPQeEHjIR6E6Js6MGzZnrzBKkoyLP0dZve4ZdThk",
      "y": "Q_sV8s67YTUp1IkK5DrD2Od2JW7wKkOm334yX5m4xJY",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "Jvt8Q_a_g_tybc1my9tocjX-c4A",
      "use": "sig",
      "x": "F4vJqpd243lWKo7uDKSrggXwuDYAOSXHcBfDBfYOYt0",
      "y": "QAMHyzLnQRKrUqF8ycAFrQ3Cg9Its3xOQ_r9PO0X5GY",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "K1pu5hRTBR4Z_L9DabJ6z8UYNC8",
      "use": "sig",
      "x": "Pf9yQal5uYkLe37xaybqwmQEkYPcwW-6Eg6-jiXU2mJi4RY_DU2A7ghHpiUjX56i",
      "y": "S6KXvLguETXRx8suIvV05i8p29cpCW9W_tgsaBKT6qI62parFenA2VSvhf_8U8FO",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "NfGZj3wtxSjC-G5ZOsy0GIrGqwU",
      "use": "sig",
      "n": "kL1Bq2Eo1i1qLrwK6XLmCyFf3WNbKqTJfilwntH-Voy_qgprhprcv8BpQtD8SdkAvrpeLcZLYg4yUbFSumxJC9DXNNkJkIl21tJZAxm-ism8dp-80T2_J-fXwI_h6jw_PK2JwZKBl6mKRvrM3VwEdVHYWLb7uII2Khsa-QE0T3EOYAZKASlitKYgD1GEtlq0DNhJ6q6IVEtGnuvTbyOmF_mD-50CcwxoBdy-6m_ue3-YbgYGL6yd0pP5KMiw3BOO1In7Mb8Yg7akJcfjnnqihBgWuDVkr0_usoBZ8mjqYm_zSBsXpGiKIGpV_UVej4o5zMEsnkMe36s02ocvDOWBHQ",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "RdEAGU6yqPfkvo6OjXVFeed1wuI",
      "use": "sig",
      "x": "AZuOUs9iispneV185uu2qVslK0pTHaN5sWj4XuwEFJ0qBm_LFSJFXAUy20uasUK4KI6mmezPZZs0ZWsDjcRILMJB",
      "y": "AKDnQNp2KypK6uYe0YIHL-UTJhVxhl9qJNOLFFDy3gcHIzSMvMeexuJpvr-wzOi9gzHTHs-lyRf-7I-l59bjyWKG",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "BwvCR6iBoOhSint4SwviYtdL35o",
      "use": "enc",
      "x": "AH_JYF0Kw-g6kbb1m0MB9Vkck-TGiHfrn8_UNWvD_l4VdqGGt1-EhA8nrfolZVsHeNaQM06lRhlyHqyIOaHN-yJy",
      "y": "AIvuF575rqT-3sq_ja97840a-J7P93K3dr92YnJo6c5dl0prPyafIG3BNm9PfuhvcA2spVJw4t4rjtNekgyUeVX3",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "EDuQgEuWy4bDB4VEI2WhdqgzKzQ",
      "use": "enc",
      "x": "2hxj_wZFyRXuYxn4RDpnn2eE7VeVSTzsULm_qTkVcua-pv68qfL5eWTu2hsnMgmg",
      "y": "ahx3r1rDzsQNUXnfH6ukWQGdC132E9FuF5py8ZdwAS2YImecC7MrAb4dJeowrX-h",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "oAgFKBn4jaaiisguObdKPSgxBDw",
      "use": "enc",
      "n": "otYWk0hVkhhtCKGNT33RgXENFaZFJXjZ9jSJxyikceMyG3RKPnULtRQ7lKkIGpC8V_OJRl6MPp6wOU8SJZFqvsy2LCECejjUCMSzyJ1IJVJcicZ3E-Ru_vPs9lrT9ey3vgvdAPWxvRykPGPlgj5OMTmPRJx4-IDJ7XRXYREFjskGV7cECLd1AhptYyMyw_anUCKzhANMk_v4QG5q9poSuXPEAAYqnZsVpkoW5fAZAUdSAsrCP8q3Q1hcTUIjeRy-xcuGuMpWtq740ggt19Sz9PkpDg3NSiwZHDIybgyCbXKZkLIU6-Uu1wKhSVdBhTWtwtRgRVo6-GuODg3EFpSqbw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "zcKSoQqEAJ6TCUFIKqmKyh32_cw",
      "use": "enc",
      "x": "czEXTyQiOF2-N8wxBgzcAYSWCZTe048YGAFhQ5qGEKo",
      "y": "ZSDzPSI1Qr4s-D7y0TvFgy6Jc5jEkx-DzY_SK4JOMvk",
      "crv": "P-256"
    }
  ]
}
2021-08-13 15:58:42 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "2CmYYedTMgSg_B2IEBeQc3c_JY0",
      "use": "sig",
      "n": "3bdVMnUR62v8t0UFsyg3lITTNCS6M1qgVimdBHmhHmU_mK4brurPe3v3BDhWvRvCV4ZxLBvvxj3jEQawmz-XviBb6q0ox_PwzrUAb-qP6efmKuAfNKTGzhEqSzkxZMWqACbL_BL4Hw5WmSxaPtRky678AbCzLVBa6E9nfpldgUa0-lukdR-JMF9VyAtlyTuN-0Sc9abGObLCoM0k-b_3DLLvKFlUmBc7G2M0bCYA_2L92nmDDAMLaPMUeyHoUrNR5f5divBt0SrRpPuvNp5gMlhSdea4oacurnjSbjI0OIY9yjihmVNCnyRTojJGU8zHuTcbTn_xQA_6gE3Xi45Gww",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "8xsYE4Tn3xDqzfp84Bvy2EjAfnA",
      "use": "sig",
      "x": "1cnxOz2zPjxTNl87EP0natwkjsY21sZtTrVjFCwSlKqBZP_9-vAF71pd5d0C_AVg",
      "y": "dTMtn07V5Bxhg_lct0FOgNmP2MumHxd4DvCQ5z-11ISEkZzm4R0nw3-SpKz1z4jp",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "LT5rdwU8SbVJar_J7x6zw42TZm4",
      "use": "sig",
      "x": "AbZvDXykFQorO0FKXZT6ch123qOw_P2hdDLT8EGu7fmEzy2KwiXKgxD3ToTwBXQh1xVIDASTVyk8ULifcPyCrzVg",
      "y": "AfS_WYn_POzpZaZ7CK4-NXdCKoIdSjRpLidr1gPulIs0CjU04cGB6lzY_M2z9P9fDlwdxMJsB7WzzqFYLhyD-hxG",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "OWOHC2Lhg2V9Z2OP3AeTnsIqfcU",
      "use": "sig",
      "x": "RUEyPQeEHjIR6E6Js6MGzZnrzBKkoyLP0dZve4ZdThk",
      "y": "Q_sV8s67YTUp1IkK5DrD2Od2JW7wKkOm334yX5m4xJY",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "Jvt8Q_a_g_tybc1my9tocjX-c4A",
      "use": "sig",
      "x": "F4vJqpd243lWKo7uDKSrggXwuDYAOSXHcBfDBfYOYt0",
      "y": "QAMHyzLnQRKrUqF8ycAFrQ3Cg9Its3xOQ_r9PO0X5GY",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "K1pu5hRTBR4Z_L9DabJ6z8UYNC8",
      "use": "sig",
      "x": "Pf9yQal5uYkLe37xaybqwmQEkYPcwW-6Eg6-jiXU2mJi4RY_DU2A7ghHpiUjX56i",
      "y": "S6KXvLguETXRx8suIvV05i8p29cpCW9W_tgsaBKT6qI62parFenA2VSvhf_8U8FO",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "NfGZj3wtxSjC-G5ZOsy0GIrGqwU",
      "use": "sig",
      "n": "kL1Bq2Eo1i1qLrwK6XLmCyFf3WNbKqTJfilwntH-Voy_qgprhprcv8BpQtD8SdkAvrpeLcZLYg4yUbFSumxJC9DXNNkJkIl21tJZAxm-ism8dp-80T2_J-fXwI_h6jw_PK2JwZKBl6mKRvrM3VwEdVHYWLb7uII2Khsa-QE0T3EOYAZKASlitKYgD1GEtlq0DNhJ6q6IVEtGnuvTbyOmF_mD-50CcwxoBdy-6m_ue3-YbgYGL6yd0pP5KMiw3BOO1In7Mb8Yg7akJcfjnnqihBgWuDVkr0_usoBZ8mjqYm_zSBsXpGiKIGpV_UVej4o5zMEsnkMe36s02ocvDOWBHQ",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "RdEAGU6yqPfkvo6OjXVFeed1wuI",
      "use": "sig",
      "x": "AZuOUs9iispneV185uu2qVslK0pTHaN5sWj4XuwEFJ0qBm_LFSJFXAUy20uasUK4KI6mmezPZZs0ZWsDjcRILMJB",
      "y": "AKDnQNp2KypK6uYe0YIHL-UTJhVxhl9qJNOLFFDy3gcHIzSMvMeexuJpvr-wzOi9gzHTHs-lyRf-7I-l59bjyWKG",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "BwvCR6iBoOhSint4SwviYtdL35o",
      "use": "enc",
      "x": "AH_JYF0Kw-g6kbb1m0MB9Vkck-TGiHfrn8_UNWvD_l4VdqGGt1-EhA8nrfolZVsHeNaQM06lRhlyHqyIOaHN-yJy",
      "y": "AIvuF575rqT-3sq_ja97840a-J7P93K3dr92YnJo6c5dl0prPyafIG3BNm9PfuhvcA2spVJw4t4rjtNekgyUeVX3",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "EDuQgEuWy4bDB4VEI2WhdqgzKzQ",
      "use": "enc",
      "x": "2hxj_wZFyRXuYxn4RDpnn2eE7VeVSTzsULm_qTkVcua-pv68qfL5eWTu2hsnMgmg",
      "y": "ahx3r1rDzsQNUXnfH6ukWQGdC132E9FuF5py8ZdwAS2YImecC7MrAb4dJeowrX-h",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "oAgFKBn4jaaiisguObdKPSgxBDw",
      "use": "enc",
      "n": "otYWk0hVkhhtCKGNT33RgXENFaZFJXjZ9jSJxyikceMyG3RKPnULtRQ7lKkIGpC8V_OJRl6MPp6wOU8SJZFqvsy2LCECejjUCMSzyJ1IJVJcicZ3E-Ru_vPs9lrT9ey3vgvdAPWxvRykPGPlgj5OMTmPRJx4-IDJ7XRXYREFjskGV7cECLd1AhptYyMyw_anUCKzhANMk_v4QG5q9poSuXPEAAYqnZsVpkoW5fAZAUdSAsrCP8q3Q1hcTUIjeRy-xcuGuMpWtq740ggt19Sz9PkpDg3NSiwZHDIybgyCbXKZkLIU6-Uu1wKhSVdBhTWtwtRgRVo6-GuODg3EFpSqbw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "zcKSoQqEAJ6TCUFIKqmKyh32_cw",
      "use": "enc",
      "x": "czEXTyQiOF2-N8wxBgzcAYSWCZTe048YGAFhQ5qGEKo",
      "y": "ZSDzPSI1Qr4s-D7y0TvFgy6Jc5jEkx-DzY_SK4JOMvk",
      "crv": "P-256"
    }
  ]
}
2021-08-13 15:58:42 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-08-13 15:58:42 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2021-08-13 15:58:42 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-08-13 15:58:42 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "2CmYYedTMgSg_B2IEBeQc3c_JY0",
      "use": "sig",
      "n": "3bdVMnUR62v8t0UFsyg3lITTNCS6M1qgVimdBHmhHmU_mK4brurPe3v3BDhWvRvCV4ZxLBvvxj3jEQawmz-XviBb6q0ox_PwzrUAb-qP6efmKuAfNKTGzhEqSzkxZMWqACbL_BL4Hw5WmSxaPtRky678AbCzLVBa6E9nfpldgUa0-lukdR-JMF9VyAtlyTuN-0Sc9abGObLCoM0k-b_3DLLvKFlUmBc7G2M0bCYA_2L92nmDDAMLaPMUeyHoUrNR5f5divBt0SrRpPuvNp5gMlhSdea4oacurnjSbjI0OIY9yjihmVNCnyRTojJGU8zHuTcbTn_xQA_6gE3Xi45Gww",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "8xsYE4Tn3xDqzfp84Bvy2EjAfnA",
      "use": "sig",
      "x": "1cnxOz2zPjxTNl87EP0natwkjsY21sZtTrVjFCwSlKqBZP_9-vAF71pd5d0C_AVg",
      "y": "dTMtn07V5Bxhg_lct0FOgNmP2MumHxd4DvCQ5z-11ISEkZzm4R0nw3-SpKz1z4jp",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "LT5rdwU8SbVJar_J7x6zw42TZm4",
      "use": "sig",
      "x": "AbZvDXykFQorO0FKXZT6ch123qOw_P2hdDLT8EGu7fmEzy2KwiXKgxD3ToTwBXQh1xVIDASTVyk8ULifcPyCrzVg",
      "y": "AfS_WYn_POzpZaZ7CK4-NXdCKoIdSjRpLidr1gPulIs0CjU04cGB6lzY_M2z9P9fDlwdxMJsB7WzzqFYLhyD-hxG",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "OWOHC2Lhg2V9Z2OP3AeTnsIqfcU",
      "use": "sig",
      "x": "RUEyPQeEHjIR6E6Js6MGzZnrzBKkoyLP0dZve4ZdThk",
      "y": "Q_sV8s67YTUp1IkK5DrD2Od2JW7wKkOm334yX5m4xJY",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "Jvt8Q_a_g_tybc1my9tocjX-c4A",
      "use": "sig",
      "x": "F4vJqpd243lWKo7uDKSrggXwuDYAOSXHcBfDBfYOYt0",
      "y": "QAMHyzLnQRKrUqF8ycAFrQ3Cg9Its3xOQ_r9PO0X5GY",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "K1pu5hRTBR4Z_L9DabJ6z8UYNC8",
      "use": "sig",
      "x": "Pf9yQal5uYkLe37xaybqwmQEkYPcwW-6Eg6-jiXU2mJi4RY_DU2A7ghHpiUjX56i",
      "y": "S6KXvLguETXRx8suIvV05i8p29cpCW9W_tgsaBKT6qI62parFenA2VSvhf_8U8FO",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "NfGZj3wtxSjC-G5ZOsy0GIrGqwU",
      "use": "sig",
      "n": "kL1Bq2Eo1i1qLrwK6XLmCyFf3WNbKqTJfilwntH-Voy_qgprhprcv8BpQtD8SdkAvrpeLcZLYg4yUbFSumxJC9DXNNkJkIl21tJZAxm-ism8dp-80T2_J-fXwI_h6jw_PK2JwZKBl6mKRvrM3VwEdVHYWLb7uII2Khsa-QE0T3EOYAZKASlitKYgD1GEtlq0DNhJ6q6IVEtGnuvTbyOmF_mD-50CcwxoBdy-6m_ue3-YbgYGL6yd0pP5KMiw3BOO1In7Mb8Yg7akJcfjnnqihBgWuDVkr0_usoBZ8mjqYm_zSBsXpGiKIGpV_UVej4o5zMEsnkMe36s02ocvDOWBHQ",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "RdEAGU6yqPfkvo6OjXVFeed1wuI",
      "use": "sig",
      "x": "AZuOUs9iispneV185uu2qVslK0pTHaN5sWj4XuwEFJ0qBm_LFSJFXAUy20uasUK4KI6mmezPZZs0ZWsDjcRILMJB",
      "y": "AKDnQNp2KypK6uYe0YIHL-UTJhVxhl9qJNOLFFDy3gcHIzSMvMeexuJpvr-wzOi9gzHTHs-lyRf-7I-l59bjyWKG",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "BwvCR6iBoOhSint4SwviYtdL35o",
      "use": "enc",
      "x": "AH_JYF0Kw-g6kbb1m0MB9Vkck-TGiHfrn8_UNWvD_l4VdqGGt1-EhA8nrfolZVsHeNaQM06lRhlyHqyIOaHN-yJy",
      "y": "AIvuF575rqT-3sq_ja97840a-J7P93K3dr92YnJo6c5dl0prPyafIG3BNm9PfuhvcA2spVJw4t4rjtNekgyUeVX3",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "EDuQgEuWy4bDB4VEI2WhdqgzKzQ",
      "use": "enc",
      "x": "2hxj_wZFyRXuYxn4RDpnn2eE7VeVSTzsULm_qTkVcua-pv68qfL5eWTu2hsnMgmg",
      "y": "ahx3r1rDzsQNUXnfH6ukWQGdC132E9FuF5py8ZdwAS2YImecC7MrAb4dJeowrX-h",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "oAgFKBn4jaaiisguObdKPSgxBDw",
      "use": "enc",
      "n": "otYWk0hVkhhtCKGNT33RgXENFaZFJXjZ9jSJxyikceMyG3RKPnULtRQ7lKkIGpC8V_OJRl6MPp6wOU8SJZFqvsy2LCECejjUCMSzyJ1IJVJcicZ3E-Ru_vPs9lrT9ey3vgvdAPWxvRykPGPlgj5OMTmPRJx4-IDJ7XRXYREFjskGV7cECLd1AhptYyMyw_anUCKzhANMk_v4QG5q9poSuXPEAAYqnZsVpkoW5fAZAUdSAsrCP8q3Q1hcTUIjeRy-xcuGuMpWtq740ggt19Sz9PkpDg3NSiwZHDIybgyCbXKZkLIU6-Uu1wKhSVdBhTWtwtRgRVo6-GuODg3EFpSqbw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "zcKSoQqEAJ6TCUFIKqmKyh32_cw",
      "use": "enc",
      "x": "czEXTyQiOF2-N8wxBgzcAYSWCZTe048YGAFhQ5qGEKo",
      "y": "ZSDzPSI1Qr4s-D7y0TvFgy6Jc5jEkx-DzY_SK4JOMvk",
      "crv": "P-256"
    }
  ]
}
2021-08-13 15:58:42 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
fapi_adv_op_w_mtls_value_first_client
scope
openid payments
jwks
{
  "keys": [
    {
      "p": "7Iiv4eby1Ubo_U9uzWEa8OlUQoBz4vjPtB7MWQ6dlM7ajD9IjhjwwE8e1d_fE22DW4bEjHb1ls6_wbEm07PusUuMyHtWzW1sNWnpCh0xgDsEnLZwmtdXhPDHJlbRXHXAqcTVTUIJNMUSa8Mj9MXs33u1mkMD-hYWJfDHNCrDUAc",
      "kty": "RSA",
      "q": "msxkZpdafUHdoC-S5QrAHZ8z0NrQNFjn2yFcpznZ0zjXK83QH-jbBHCcTDBkF7xpatG61SbEznYxYaDEFR4xzuyy0WOYtoIk5IukygdvZhMkAXDNl5rNvF770Fnv8gwpoxZqlpb18kWtP2gk-ebJK2YHKjhl-pHDOrbzubkRdOE",
      "d": "AXvpT93_Y-hQYTCk95gHj6BinFTppIaTZhgJWvnDY-Bz1NhUZ7fz-RjePxQBEuRv3DUk6nEmT8CivxJKZdql9AR9UjHz_ANOH6mAwHxkE2bcEKEsJFGTkaDJhVqmwukYwfKfGpkeNuD2r5rhNdl3XNUQ6VdTkUokmZM3KNrLhks3NtPL3xEMqK5KAYJbJuS8AQoOI5scRTJZYcS63KK9WwBoOFwbz3PFHJb2lffTOH_tnqgSvm9chb7y1CaarSJuFSVTjkjMyk2rBOr4bu5YRtxzH1dAa3Dd5n9XzVwN_q0dIitTh7Vro2JcSU24O1n-XR4WGzCCiarMxPKc8SWyAQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "pingfederate-fapi-jwt-assertion-client1",
      "qi": "De5E3i5KIQ88R7jYZDWEsVonhPPGcWksWXC-s4frJ0tISk5-zlCdP6eitstJTaB1i7bkCW4R7iXufgXqW2WCRK2IXXjwItZo1zEpuAZJnKFwDPxXt5pLoc_sDjarMRENxdx_spyiFIxejLvvDmKGxs7vt3LDm_ytvJXfsymzjqM",
      "dp": "z80l9-jV3dl2R1TJm1V8Pbo_dE01gmnkz_Fexb65Ykp4Zk4SiAQRPmJETNFpQcAsbvRvKJg6Gkt428muur6RLOGaxWbWU5OWRTbOrTwIiQdQff0p4F7fXMPLsjsDo58vq_ZpDn69Z8ba8CF4LUrVV2Fvoh7OF5_fxWVLHOGUxXE",
      "alg": "PS256",
      "dq": "JRS_HEA3YffsMhoTUyB_ItlnHSm9ZDzD1Z8pRbm67zkXehvENlCeXnLnTeztnS36BqeU3Mh7roVrkNpk_jYMcmgK8dOs2lNUqRa2c9rSGZ6OKnYuGZnwnKYYJjHVI6M8Oh_9inNBGTcNqDm3WdGp8OZw4vE9pIdUP_VhbuThRKE",
      "n": "jwcTfjv0q48qux1sg2MR8OvCh1mXITYu7zkEJVCz0UImIrIqLtEzmGkqJP0LobK6-NlFHWOsAp2NcVTh79RBwawsrmi59rJ_nHigX00C7wjVpJtldJmOwmSS4HD8EgRkiM0yJzyKijtRiB5ssrOoBK3VPFMqZYm_JBJY35s_qDDHWTlwuWDLqADZp809btMcwQZCqgrSKgtalspeKXIh6Lv3lkFnELJhfwGZYPtVc2SJk91F8tmgamPNJUfVJV3ygdBuDcB8EZ8m-tIaISghfR1RRkEeYI8r_Wf4dfjIAZRkrj8GHqAJOi762rjyFvXvcPc0Zc-ABDYnVi4WdWOCJw"
    }
  ]
}
2021-08-13 15:58:42
ValidateMTLSCertificatesHeader
No certificate authority found for MTLS
2021-08-13 15:58:42 SUCCESS
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
2021-08-13 15:58:42
ExtractMTLSCertificatesFromConfiguration
No certificate authority found for MTLS
2021-08-13 15:58:42 SUCCESS
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCa91hiBBEaNcRdvQ0Gvg06mzaIQpa17vgtP77HwtV0FvH+3imrnqmaCcpEnWGMv/udX8S5r/VAeUPB2Q31187vKDLKxbadWTKuSNQajOkRyiXZzutbEQbN/t7JAz7oETujYoOTlMNT4N9twYvKEvxTeZAWNUCQHXZcESKYXhph0eZaaOvNo7WqQ+ygGBzgTVev6tXr/Q2+M3NkBnSvRYegSN5ZtmIXMrNVaH7D+SC8QUPWxsB8ZVIENzBhCI8+brrPjyLNqVKoI9O7Hjdgzb8Xs+gC98ATmsbQrE/8pRdYYCPkEoETAWRq2T/dEf7NE+AMerttKk9TdNwvbB1WbAoHAgMBAAECggEAf4aFKUQHfvY4PpvRGHdWE6CfY8rIk7ewbCxFJ8biOcKYKxFQYXcUQztDROvu1xE2Uu/4yIZQ4VnptKCWqHWMSatfARdrjFlXJ62vPpovQwCD3ZY2gJ6mZucTF4CgSAHGflIXzV9izqgDtiLMkuLE2zzyohP4qaBVQranLZRjSZNWeGvEpkcf7Nv7FlfZaOJ/FkcGwyFn7iSzX/KRL/1TA6zDlreA3PGJr96i9SmFHQsurFv7quRxEUFoSVxVtn5IiOJji45Evte8KAhMzlau1MuAlKxiIJAMIPN2l1nTRTRZUybDBoLp9CkkAmvp75krld9NB/hbWaeRsxhgVPXYwQKBgQDMsai5QHJAFZ5P31LN0dvlvcj0X2dPS0hEd6NsIf5DkbQKHQuVlxdIGhChLhVBdkGUt9ZYSflxlUtc8GUG3+e0TKg+ZAHNakueV73TGZy3BAzQBxwQBMqUltcXWMjWBaDnbQH+TrtYP0A+ZdHd4gnBNuSUuv5R7IxGWHgfcvtnuQKBgQDBzt2kGjDXXPV4qrtmGl4KaCAvsFr76VsVr8879MhrVgevI5vbsBNWQ3yvykXLr5B6s0VaqibvgDTcchQvqwtoEeDQfHsSHnAglGYCAi06hwGArTW/hxW0L7IivB+laFsbPY2HbnGZ6WUOjMNTgGAihbbLd6+IvLJEVdn7gjxfvwKBgD/DS9rBP5XE5jbdS08AA27yiqnNGkJyIgXp+sdRY4Iq3hmUaKplkYQNUobS8x4cN1ubVLLWAFUoe3xtCht1HhllE7ezsXgKl5mwnVooDVBZe6BFxrEavPxCbKhCKPW6dSACLe/JGMTplxqY3yIuKnm8nsHR6i0c8alsH6c0SypJAoGBALcVCn+5ViY8ZI9nCby8b9X4417phCmxGiB0gpoq9SGglYW3Z8ayoLG+8wzFUgXGhf/DVmL9leZuAIG3KqaVOCNJsEyDK2fEZTwBtBN1pvBBFQRPnBSgMbqTy/3QJT0GRfqHvSkRBjPVLWf/RY2eGjLCihnPqHzNdMHlMBTNxObVAoGAMRDZNtM0vIUNbjY5YFK0AoetPqR1mS2fWOFdCVnyHYBOJmmUZbU4oNZk5HmHBOC8N7aOELyXu56I4yEw0KUjOphKGfA9b2553q1A6t1x1oHBIwVuj1W3sEpUOtj2fWwmmdqjEyRsdzEJWfOuOEFzbfaw1pClq9IbngVcDGfzg74=
2021-08-13 15:58:42 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-08-13 15:58:42 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "p": "7Iiv4eby1Ubo_U9uzWEa8OlUQoBz4vjPtB7MWQ6dlM7ajD9IjhjwwE8e1d_fE22DW4bEjHb1ls6_wbEm07PusUuMyHtWzW1sNWnpCh0xgDsEnLZwmtdXhPDHJlbRXHXAqcTVTUIJNMUSa8Mj9MXs33u1mkMD-hYWJfDHNCrDUAc",
      "kty": "RSA",
      "q": "msxkZpdafUHdoC-S5QrAHZ8z0NrQNFjn2yFcpznZ0zjXK83QH-jbBHCcTDBkF7xpatG61SbEznYxYaDEFR4xzuyy0WOYtoIk5IukygdvZhMkAXDNl5rNvF770Fnv8gwpoxZqlpb18kWtP2gk-ebJK2YHKjhl-pHDOrbzubkRdOE",
      "d": "AXvpT93_Y-hQYTCk95gHj6BinFTppIaTZhgJWvnDY-Bz1NhUZ7fz-RjePxQBEuRv3DUk6nEmT8CivxJKZdql9AR9UjHz_ANOH6mAwHxkE2bcEKEsJFGTkaDJhVqmwukYwfKfGpkeNuD2r5rhNdl3XNUQ6VdTkUokmZM3KNrLhks3NtPL3xEMqK5KAYJbJuS8AQoOI5scRTJZYcS63KK9WwBoOFwbz3PFHJb2lffTOH_tnqgSvm9chb7y1CaarSJuFSVTjkjMyk2rBOr4bu5YRtxzH1dAa3Dd5n9XzVwN_q0dIitTh7Vro2JcSU24O1n-XR4WGzCCiarMxPKc8SWyAQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "pingfederate-fapi-jwt-assertion-client1",
      "qi": "De5E3i5KIQ88R7jYZDWEsVonhPPGcWksWXC-s4frJ0tISk5-zlCdP6eitstJTaB1i7bkCW4R7iXufgXqW2WCRK2IXXjwItZo1zEpuAZJnKFwDPxXt5pLoc_sDjarMRENxdx_spyiFIxejLvvDmKGxs7vt3LDm_ytvJXfsymzjqM",
      "dp": "z80l9-jV3dl2R1TJm1V8Pbo_dE01gmnkz_Fexb65Ykp4Zk4SiAQRPmJETNFpQcAsbvRvKJg6Gkt428muur6RLOGaxWbWU5OWRTbOrTwIiQdQff0p4F7fXMPLsjsDo58vq_ZpDn69Z8ba8CF4LUrVV2Fvoh7OF5_fxWVLHOGUxXE",
      "alg": "PS256",
      "dq": "JRS_HEA3YffsMhoTUyB_ItlnHSm9ZDzD1Z8pRbm67zkXehvENlCeXnLnTeztnS36BqeU3Mh7roVrkNpk_jYMcmgK8dOs2lNUqRa2c9rSGZ6OKnYuGZnwnKYYJjHVI6M8Oh_9inNBGTcNqDm3WdGp8OZw4vE9pIdUP_VhbuThRKE",
      "n": "jwcTfjv0q48qux1sg2MR8OvCh1mXITYu7zkEJVCz0UImIrIqLtEzmGkqJP0LobK6-NlFHWOsAp2NcVTh79RBwawsrmi59rJ_nHigX00C7wjVpJtldJmOwmSS4HD8EgRkiM0yJzyKijtRiB5ssrOoBK3VPFMqZYm_JBJY35s_qDDHWTlwuWDLqADZp809btMcwQZCqgrSKgtalspeKXIh6Lv3lkFnELJhfwGZYPtVc2SJk91F8tmgamPNJUfVJV3ygdBuDcB8EZ8m-tIaISghfR1RRkEeYI8r_Wf4dfjIAZRkrj8GHqAJOi762rjyFvXvcPc0Zc-ABDYnVi4WdWOCJw"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "pingfederate-fapi-jwt-assertion-client1",
      "alg": "PS256",
      "n": "jwcTfjv0q48qux1sg2MR8OvCh1mXITYu7zkEJVCz0UImIrIqLtEzmGkqJP0LobK6-NlFHWOsAp2NcVTh79RBwawsrmi59rJ_nHigX00C7wjVpJtldJmOwmSS4HD8EgRkiM0yJzyKijtRiB5ssrOoBK3VPFMqZYm_JBJY35s_qDDHWTlwuWDLqADZp809btMcwQZCqgrSKgtalspeKXIh6Lv3lkFnELJhfwGZYPtVc2SJk91F8tmgamPNJUfVJV3ygdBuDcB8EZ8m-tIaISghfR1RRkEeYI8r_Wf4dfjIAZRkrj8GHqAJOi762rjyFvXvcPc0Zc-ABDYnVi4WdWOCJw"
    }
  ]
}
2021-08-13 15:58:42 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-08-13 15:58:42 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-08-13 15:58:42 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "ES256",
  "PS256"
]
2021-08-13 15:58:42 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "7Iiv4eby1Ubo_U9uzWEa8OlUQoBz4vjPtB7MWQ6dlM7ajD9IjhjwwE8e1d_fE22DW4bEjHb1ls6_wbEm07PusUuMyHtWzW1sNWnpCh0xgDsEnLZwmtdXhPDHJlbRXHXAqcTVTUIJNMUSa8Mj9MXs33u1mkMD-hYWJfDHNCrDUAc",
      "kty": "RSA",
      "q": "msxkZpdafUHdoC-S5QrAHZ8z0NrQNFjn2yFcpznZ0zjXK83QH-jbBHCcTDBkF7xpatG61SbEznYxYaDEFR4xzuyy0WOYtoIk5IukygdvZhMkAXDNl5rNvF770Fnv8gwpoxZqlpb18kWtP2gk-ebJK2YHKjhl-pHDOrbzubkRdOE",
      "d": "AXvpT93_Y-hQYTCk95gHj6BinFTppIaTZhgJWvnDY-Bz1NhUZ7fz-RjePxQBEuRv3DUk6nEmT8CivxJKZdql9AR9UjHz_ANOH6mAwHxkE2bcEKEsJFGTkaDJhVqmwukYwfKfGpkeNuD2r5rhNdl3XNUQ6VdTkUokmZM3KNrLhks3NtPL3xEMqK5KAYJbJuS8AQoOI5scRTJZYcS63KK9WwBoOFwbz3PFHJb2lffTOH_tnqgSvm9chb7y1CaarSJuFSVTjkjMyk2rBOr4bu5YRtxzH1dAa3Dd5n9XzVwN_q0dIitTh7Vro2JcSU24O1n-XR4WGzCCiarMxPKc8SWyAQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "pingfederate-fapi-jwt-assertion-client1",
      "qi": "De5E3i5KIQ88R7jYZDWEsVonhPPGcWksWXC-s4frJ0tISk5-zlCdP6eitstJTaB1i7bkCW4R7iXufgXqW2WCRK2IXXjwItZo1zEpuAZJnKFwDPxXt5pLoc_sDjarMRENxdx_spyiFIxejLvvDmKGxs7vt3LDm_ytvJXfsymzjqM",
      "dp": "z80l9-jV3dl2R1TJm1V8Pbo_dE01gmnkz_Fexb65Ykp4Zk4SiAQRPmJETNFpQcAsbvRvKJg6Gkt428muur6RLOGaxWbWU5OWRTbOrTwIiQdQff0p4F7fXMPLsjsDo58vq_ZpDn69Z8ba8CF4LUrVV2Fvoh7OF5_fxWVLHOGUxXE",
      "alg": "PS256",
      "dq": "JRS_HEA3YffsMhoTUyB_ItlnHSm9ZDzD1Z8pRbm67zkXehvENlCeXnLnTeztnS36BqeU3Mh7roVrkNpk_jYMcmgK8dOs2lNUqRa2c9rSGZ6OKnYuGZnwnKYYJjHVI6M8Oh_9inNBGTcNqDm3WdGp8OZw4vE9pIdUP_VhbuThRKE",
      "n": "jwcTfjv0q48qux1sg2MR8OvCh1mXITYu7zkEJVCz0UImIrIqLtEzmGkqJP0LobK6-NlFHWOsAp2NcVTh79RBwawsrmi59rJ_nHigX00C7wjVpJtldJmOwmSS4HD8EgRkiM0yJzyKijtRiB5ssrOoBK3VPFMqZYm_JBJY35s_qDDHWTlwuWDLqADZp809btMcwQZCqgrSKgtalspeKXIh6Lv3lkFnELJhfwGZYPtVc2SJk91F8tmgamPNJUfVJV3ygdBuDcB8EZ8m-tIaISghfR1RRkEeYI8r_Wf4dfjIAZRkrj8GHqAJOi762rjyFvXvcPc0Zc-ABDYnVi4WdWOCJw"
    }
  ]
}
2021-08-13 15:58:42 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
Verify configuration of second client
2021-08-13 15:58:42 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
fapi_adv_op_w_mtls_value_second_client
scope
openid payments
jwks
{
  "keys": [
    {
      "p": "43lqQE0EN1LJ_jdqHq56hNFjErKfcrwJnVpIVRsXCZWboV4MSfLzGGEyePPs6SxV6-l_txQY-M2dW6xLaedRUlaFT89r10cIm136ecYUzs51iX_GZW_AvohaXSmAbZKpjLmsHIDelgggQKjDQxGGbmAAQojnqzorpVrfz-8aUNc",
      "kty": "RSA",
      "q": "q1t1ErKAx06nV7ohJ4zlo3xUeMA3rO7HLmK6Eh460DsiX80AsCxyw1AsQy0N1W8u_RgkA3y_p_5Nf7K1KLLa9mduIBWyUFEim1EneviM4m3q7e2UtQ7iezh6FatYFZD5c_v_CH2gV0bhxZrMzNc8ubL46OXo5h1WycY1iAqsjNs",
      "d": "ElS590xAIy7zN4KHKmq2rLnAg1TJ9kODaUrb98X3gCGuTOLBAtFzUqjPyBF8rqXAtkgl8inec6GwY6gmB9p53quJfKSunnN7CbU3Qe37f8HBgS95vFsmJtbctbJ43XKlwo0imYbIeBYLmxKUJt5BKSnUYWWv4EI2AVE_LrqecL-QaNLH2IxY1JVLvR8WhP7wzjTHIsGjaQGn7199eVBaHZ7KTC-bFaEWnPgklR0e8t8TdICUqJudCqTEuoEBFYXRdqi_3betdNZHtJdcwfk9VEXTYTnjzw0fJ7RoFyVE1_1-wMULnEYk5SyfSYfYsBq_V25e-TUSLxB3IXgzBmJVOQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "pingfederate-fapi-jwt-assertion-client2",
      "qi": "rBDWPBNof1ZrvpqRqpPIf-hn6jmOmLN5mzv8ArwfYEuoIPo9Ltzta1m42A6KQAAsHfXUaKtihSXnVopYtYcxguVNCi2qbDh4nx7ZZNCcQsKSkUOw-hgm4vHZJMOJ-4jh6jthUeLTRmCpEZAHQrtmnpQ1tC1g3g2VCDH48p8cLzo",
      "dp": "BrSxmSusECV0pvXjPvxNyFST4x047hz0-5qJv1iJGVM7v0oSequa1wEmh8JJHaac8dN0XGVPRyZomSc_IeQb1Z2PWIb42uPRMSNYGvbn7iDP_jmyE5Nzzyod39k1XAWS0f83P6_c3_dlXAKdnwCJQf-6gjue-MFCQCGpr2uRDwk",
      "alg": "PS256",
      "dq": "GyE3v-YTDXsec308ko50LRYaKaQFLJQBZQ6sdwHiPeWe45wJZ9shsFqZJ2mSryATSG7yBLtTfL1-d6FLnU3z7N8jSGEnAiBWYlDO92EyrQbKEzFyQdhBc1DVw2iFYaS6WeqjzixVnnvScv63Phc1vhDf57--x_ANNZT0FL3b49E",
      "n": "mENeKNMC5ttp60qEq6LZoWaihn-__Ei70wnW8Zd_-ILFnYcaM90oTTnl8R2uHD4EJ3t_VCjFteXIwWV7OwDmRmOMwda0X1R5IKYn0O2ujT8NI4citj8G4NHY0r5Y5loLdb5dynGgT-YpsnWwfTC8Ky98gNA3OLf6Z2n8PEdKJr818RMAC0Vx6NQMHBNG4jI1D0bvbrZbx0XkXan7h2Elm9HLRjzHar5Qb5gFLGQRFdeHVHF5lRKyAFgdeQPvBqMiRsAwcgyKxDjbzF5qHPwhKMB-7IVhxuSULMvgSkesIIhrylzU9bo2KRhcxTB7oPkhAbPgumpoVZV0ME-ypiy77Q"
    }
  ]
}
2021-08-13 15:58:42
ValidateMTLSCertificates2Header
No certificate authority found for MTLS
2021-08-13 15:58:42 SUCCESS
ValidateMTLSCertificates2Header
MTLS certificates header is valid
2021-08-13 15:58:42
ExtractMTLSCertificates2FromConfiguration
No certificate authority found for MTLS
2021-08-13 15:58:42 SUCCESS
ExtractMTLSCertificates2FromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
2021-08-13 15:58:42 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-08-13 15:58:42 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "p": "43lqQE0EN1LJ_jdqHq56hNFjErKfcrwJnVpIVRsXCZWboV4MSfLzGGEyePPs6SxV6-l_txQY-M2dW6xLaedRUlaFT89r10cIm136ecYUzs51iX_GZW_AvohaXSmAbZKpjLmsHIDelgggQKjDQxGGbmAAQojnqzorpVrfz-8aUNc",
      "kty": "RSA",
      "q": "q1t1ErKAx06nV7ohJ4zlo3xUeMA3rO7HLmK6Eh460DsiX80AsCxyw1AsQy0N1W8u_RgkA3y_p_5Nf7K1KLLa9mduIBWyUFEim1EneviM4m3q7e2UtQ7iezh6FatYFZD5c_v_CH2gV0bhxZrMzNc8ubL46OXo5h1WycY1iAqsjNs",
      "d": "ElS590xAIy7zN4KHKmq2rLnAg1TJ9kODaUrb98X3gCGuTOLBAtFzUqjPyBF8rqXAtkgl8inec6GwY6gmB9p53quJfKSunnN7CbU3Qe37f8HBgS95vFsmJtbctbJ43XKlwo0imYbIeBYLmxKUJt5BKSnUYWWv4EI2AVE_LrqecL-QaNLH2IxY1JVLvR8WhP7wzjTHIsGjaQGn7199eVBaHZ7KTC-bFaEWnPgklR0e8t8TdICUqJudCqTEuoEBFYXRdqi_3betdNZHtJdcwfk9VEXTYTnjzw0fJ7RoFyVE1_1-wMULnEYk5SyfSYfYsBq_V25e-TUSLxB3IXgzBmJVOQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "pingfederate-fapi-jwt-assertion-client2",
      "qi": "rBDWPBNof1ZrvpqRqpPIf-hn6jmOmLN5mzv8ArwfYEuoIPo9Ltzta1m42A6KQAAsHfXUaKtihSXnVopYtYcxguVNCi2qbDh4nx7ZZNCcQsKSkUOw-hgm4vHZJMOJ-4jh6jthUeLTRmCpEZAHQrtmnpQ1tC1g3g2VCDH48p8cLzo",
      "dp": "BrSxmSusECV0pvXjPvxNyFST4x047hz0-5qJv1iJGVM7v0oSequa1wEmh8JJHaac8dN0XGVPRyZomSc_IeQb1Z2PWIb42uPRMSNYGvbn7iDP_jmyE5Nzzyod39k1XAWS0f83P6_c3_dlXAKdnwCJQf-6gjue-MFCQCGpr2uRDwk",
      "alg": "PS256",
      "dq": "GyE3v-YTDXsec308ko50LRYaKaQFLJQBZQ6sdwHiPeWe45wJZ9shsFqZJ2mSryATSG7yBLtTfL1-d6FLnU3z7N8jSGEnAiBWYlDO92EyrQbKEzFyQdhBc1DVw2iFYaS6WeqjzixVnnvScv63Phc1vhDf57--x_ANNZT0FL3b49E",
      "n": "mENeKNMC5ttp60qEq6LZoWaihn-__Ei70wnW8Zd_-ILFnYcaM90oTTnl8R2uHD4EJ3t_VCjFteXIwWV7OwDmRmOMwda0X1R5IKYn0O2ujT8NI4citj8G4NHY0r5Y5loLdb5dynGgT-YpsnWwfTC8Ky98gNA3OLf6Z2n8PEdKJr818RMAC0Vx6NQMHBNG4jI1D0bvbrZbx0XkXan7h2Elm9HLRjzHar5Qb5gFLGQRFdeHVHF5lRKyAFgdeQPvBqMiRsAwcgyKxDjbzF5qHPwhKMB-7IVhxuSULMvgSkesIIhrylzU9bo2KRhcxTB7oPkhAbPgumpoVZV0ME-ypiy77Q"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "pingfederate-fapi-jwt-assertion-client2",
      "alg": "PS256",
      "n": "mENeKNMC5ttp60qEq6LZoWaihn-__Ei70wnW8Zd_-ILFnYcaM90oTTnl8R2uHD4EJ3t_VCjFteXIwWV7OwDmRmOMwda0X1R5IKYn0O2ujT8NI4citj8G4NHY0r5Y5loLdb5dynGgT-YpsnWwfTC8Ky98gNA3OLf6Z2n8PEdKJr818RMAC0Vx6NQMHBNG4jI1D0bvbrZbx0XkXan7h2Elm9HLRjzHar5Qb5gFLGQRFdeHVHF5lRKyAFgdeQPvBqMiRsAwcgyKxDjbzF5qHPwhKMB-7IVhxuSULMvgSkesIIhrylzU9bo2KRhcxTB7oPkhAbPgumpoVZV0ME-ypiy77Q"
    }
  ]
}
2021-08-13 15:58:42 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-08-13 15:58:42 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-08-13 15:58:42 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "ES256",
  "PS256"
]
2021-08-13 15:58:42 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "43lqQE0EN1LJ_jdqHq56hNFjErKfcrwJnVpIVRsXCZWboV4MSfLzGGEyePPs6SxV6-l_txQY-M2dW6xLaedRUlaFT89r10cIm136ecYUzs51iX_GZW_AvohaXSmAbZKpjLmsHIDelgggQKjDQxGGbmAAQojnqzorpVrfz-8aUNc",
      "kty": "RSA",
      "q": "q1t1ErKAx06nV7ohJ4zlo3xUeMA3rO7HLmK6Eh460DsiX80AsCxyw1AsQy0N1W8u_RgkA3y_p_5Nf7K1KLLa9mduIBWyUFEim1EneviM4m3q7e2UtQ7iezh6FatYFZD5c_v_CH2gV0bhxZrMzNc8ubL46OXo5h1WycY1iAqsjNs",
      "d": "ElS590xAIy7zN4KHKmq2rLnAg1TJ9kODaUrb98X3gCGuTOLBAtFzUqjPyBF8rqXAtkgl8inec6GwY6gmB9p53quJfKSunnN7CbU3Qe37f8HBgS95vFsmJtbctbJ43XKlwo0imYbIeBYLmxKUJt5BKSnUYWWv4EI2AVE_LrqecL-QaNLH2IxY1JVLvR8WhP7wzjTHIsGjaQGn7199eVBaHZ7KTC-bFaEWnPgklR0e8t8TdICUqJudCqTEuoEBFYXRdqi_3betdNZHtJdcwfk9VEXTYTnjzw0fJ7RoFyVE1_1-wMULnEYk5SyfSYfYsBq_V25e-TUSLxB3IXgzBmJVOQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "pingfederate-fapi-jwt-assertion-client2",
      "qi": "rBDWPBNof1ZrvpqRqpPIf-hn6jmOmLN5mzv8ArwfYEuoIPo9Ltzta1m42A6KQAAsHfXUaKtihSXnVopYtYcxguVNCi2qbDh4nx7ZZNCcQsKSkUOw-hgm4vHZJMOJ-4jh6jthUeLTRmCpEZAHQrtmnpQ1tC1g3g2VCDH48p8cLzo",
      "dp": "BrSxmSusECV0pvXjPvxNyFST4x047hz0-5qJv1iJGVM7v0oSequa1wEmh8JJHaac8dN0XGVPRyZomSc_IeQb1Z2PWIb42uPRMSNYGvbn7iDP_jmyE5Nzzyod39k1XAWS0f83P6_c3_dlXAKdnwCJQf-6gjue-MFCQCGpr2uRDwk",
      "alg": "PS256",
      "dq": "GyE3v-YTDXsec308ko50LRYaKaQFLJQBZQ6sdwHiPeWe45wJZ9shsFqZJ2mSryATSG7yBLtTfL1-d6FLnU3z7N8jSGEnAiBWYlDO92EyrQbKEzFyQdhBc1DVw2iFYaS6WeqjzixVnnvScv63Phc1vhDf57--x_ANNZT0FL3b49E",
      "n": "mENeKNMC5ttp60qEq6LZoWaihn-__Ei70wnW8Zd_-ILFnYcaM90oTTnl8R2uHD4EJ3t_VCjFteXIwWV7OwDmRmOMwda0X1R5IKYn0O2ujT8NI4citj8G4NHY0r5Y5loLdb5dynGgT-YpsnWwfTC8Ky98gNA3OLf6Z2n8PEdKJr818RMAC0Vx6NQMHBNG4jI1D0bvbrZbx0XkXan7h2Elm9HLRjzHar5Qb5gFLGQRFdeHVHF5lRKyAFgdeQPvBqMiRsAwcgyKxDjbzF5qHPwhKMB-7IVhxuSULMvgSkesIIhrylzU9bo2KRhcxTB7oPkhAbPgumpoVZV0ME-ypiy77Q"
    }
  ]
}
2021-08-13 15:58:42 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2021-08-13 15:58:42 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://idp.conf.ping-eng.com:3000/get
2021-08-13 15:58:42 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://idp.conf.ping-eng.com:3000/get
2021-08-13 15:58:42 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "idp.conf.ping-eng.com",
  "testPort": 3000
}
2021-08-13 15:58:42 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "idp.conf.ping-eng.com",
  "testPort": 3000
}
accounts_request_endpoint
{
  "testHost": "idp.conf.ping-eng.com",
  "testPort": 3000
}
2021-08-13 15:58:42
fapi1-advanced-final-ensure-request-object-with-multiple-aud-succeeds
Setup Done
Make request to authorization endpoint
2021-08-13 15:58:42 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
fapi_adv_op_w_mtls_value_first_client
redirect_uri
https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback
scope
openid payments
2021-08-13 15:58:42 SUCCESS
AddAcrClaimToAuthorizationEndpointRequest
Added acr claim to authorization_endpoint_request
authorization_endpoint_request
{
  "client_id": "fapi_adv_op_w_mtls_value_first_client",
  "redirect_uri": "https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback",
  "scope": "openid payments",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  }
}
2021-08-13 15:58:42
CreateRandomStateValue
Created state value
requested_state_length
10
state
jSoJk13pWE
2021-08-13 15:58:42 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
fapi_adv_op_w_mtls_value_first_client
redirect_uri
https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback
scope
openid payments
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
jSoJk13pWE
2021-08-13 15:58:42
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
qALAEoSR72
2021-08-13 15:58:42 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
fapi_adv_op_w_mtls_value_first_client
redirect_uri
https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback
scope
openid payments
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
jSoJk13pWE
nonce
qALAEoSR72
2021-08-13 15:58:42 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToCodeIdtoken
Added response_type parameter to request
client_id
fapi_adv_op_w_mtls_value_first_client
redirect_uri
https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback
scope
openid payments
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
jSoJk13pWE
nonce
qALAEoSR72
response_type
code id_token
2021-08-13 15:58:42 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "client_id": "fapi_adv_op_w_mtls_value_first_client",
  "redirect_uri": "https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback",
  "scope": "openid payments",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  },
  "state": "jSoJk13pWE",
  "nonce": "qALAEoSR72",
  "response_type": "code id_token"
}
2021-08-13 15:58:42 SUCCESS
AddNbfToRequestObject
Added nbf to request object claims
nbf
1.628870322E9
2021-08-13 15:58:42 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.628870622E9
2021-08-13 15:58:42 SUCCESS
AddMultipleAudToRequestObject
Added multiple aud to request object claims
aud
[
  "https://idp.conf.ping-eng.com:9031",
  "https://other1.example.com",
  "invalid"
]
2021-08-13 15:58:42 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
fapi_adv_op_w_mtls_value_first_client
2021-08-13 15:58:42 SUCCESS
AddClientIdToRequestObject
Added client_id to request object claims
client_id
fapi_adv_op_w_mtls_value_first_client
2021-08-13 15:58:42 SUCCESS
SignRequestObject
Signed the request object
claims
{"aud":["https:\/\/idp.conf.ping-eng.com:9031","https:\/\/other1.example.com","invalid"],"nbf":1628870322,"scope":"openid payments","claims":{"id_token":{"acr":{"value":"urn:mace:incommon:iap:silver","essential":true}}},"iss":"fapi_adv_op_w_mtls_value_first_client","response_type":"code id_token","redirect_uri":"https:\/\/www.certification.openid.net\/test\/a\/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain\/callback","state":"jSoJk13pWE","exp":1628870622,"nonce":"qALAEoSR72","client_id":"fapi_adv_op_w_mtls_value_first_client"}
header
{"kid":"pingfederate-fapi-jwt-assertion-client1","alg":"PS256"}
request_object
eyJraWQiOiJwaW5nZmVkZXJhdGUtZmFwaS1qd3QtYXNzZXJ0aW9uLWNsaWVudDEiLCJhbGciOiJQUzI1NiJ9.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.Y7Bruuv3Qe5NiuYN-WB3rfhW_cTpZUoLKV-ENIk7-F41Kw8Y4iZsXK_2NsNwsPXR-z_MFZg2-fdDh3pRQADKUYzF3ahqXtlCo1h0yFpPy0WphO4ixem9n_HUb_fKSJrFYRFlK_kQ_ynjCIRty9Mkj4JStPuVIJvhSKh9KtVV3epH6zDJ8_qTuzcAg8gUpFGY3kngnWbEN3XKo_fSQnNmr2dvo-BW3i5JeFjO5QRDAyLASwB-Bkuyg8WCFdTlCGL3BbRkKA79khXAvf6ZSfVpsGHw5RbJxGfSYavQchC42bek4q8pzFc8Te3ugmNrykCK-Q5tGoOKXuxUCUsFHtuYWw
key
{"p":"7Iiv4eby1Ubo_U9uzWEa8OlUQoBz4vjPtB7MWQ6dlM7ajD9IjhjwwE8e1d_fE22DW4bEjHb1ls6_wbEm07PusUuMyHtWzW1sNWnpCh0xgDsEnLZwmtdXhPDHJlbRXHXAqcTVTUIJNMUSa8Mj9MXs33u1mkMD-hYWJfDHNCrDUAc","kty":"RSA","q":"msxkZpdafUHdoC-S5QrAHZ8z0NrQNFjn2yFcpznZ0zjXK83QH-jbBHCcTDBkF7xpatG61SbEznYxYaDEFR4xzuyy0WOYtoIk5IukygdvZhMkAXDNl5rNvF770Fnv8gwpoxZqlpb18kWtP2gk-ebJK2YHKjhl-pHDOrbzubkRdOE","d":"AXvpT93_Y-hQYTCk95gHj6BinFTppIaTZhgJWvnDY-Bz1NhUZ7fz-RjePxQBEuRv3DUk6nEmT8CivxJKZdql9AR9UjHz_ANOH6mAwHxkE2bcEKEsJFGTkaDJhVqmwukYwfKfGpkeNuD2r5rhNdl3XNUQ6VdTkUokmZM3KNrLhks3NtPL3xEMqK5KAYJbJuS8AQoOI5scRTJZYcS63KK9WwBoOFwbz3PFHJb2lffTOH_tnqgSvm9chb7y1CaarSJuFSVTjkjMyk2rBOr4bu5YRtxzH1dAa3Dd5n9XzVwN_q0dIitTh7Vro2JcSU24O1n-XR4WGzCCiarMxPKc8SWyAQ","e":"AQAB","use":"sig","kid":"pingfederate-fapi-jwt-assertion-client1","qi":"De5E3i5KIQ88R7jYZDWEsVonhPPGcWksWXC-s4frJ0tISk5-zlCdP6eitstJTaB1i7bkCW4R7iXufgXqW2WCRK2IXXjwItZo1zEpuAZJnKFwDPxXt5pLoc_sDjarMRENxdx_spyiFIxejLvvDmKGxs7vt3LDm_ytvJXfsymzjqM","dp":"z80l9-jV3dl2R1TJm1V8Pbo_dE01gmnkz_Fexb65Ykp4Zk4SiAQRPmJETNFpQcAsbvRvKJg6Gkt428muur6RLOGaxWbWU5OWRTbOrTwIiQdQff0p4F7fXMPLsjsDo58vq_ZpDn69Z8ba8CF4LUrVV2Fvoh7OF5_fxWVLHOGUxXE","alg":"PS256","dq":"JRS_HEA3YffsMhoTUyB_ItlnHSm9ZDzD1Z8pRbm67zkXehvENlCeXnLnTeztnS36BqeU3Mh7roVrkNpk_jYMcmgK8dOs2lNUqRa2c9rSGZ6OKnYuGZnwnKYYJjHVI6M8Oh_9inNBGTcNqDm3WdGp8OZw4vE9pIdUP_VhbuThRKE","n":"jwcTfjv0q48qux1sg2MR8OvCh1mXITYu7zkEJVCz0UImIrIqLtEzmGkqJP0LobK6-NlFHWOsAp2NcVTh79RBwawsrmi59rJ_nHigX00C7wjVpJtldJmOwmSS4HD8EgRkiM0yJzyKijtRiB5ssrOoBK3VPFMqZYm_JBJY35s_qDDHWTlwuWDLqADZp809btMcwQZCqgrSKgtalspeKXIh6Lv3lkFnELJhfwGZYPtVc2SJk91F8tmgamPNJUfVJV3ygdBuDcB8EZ8m-tIaISghfR1RRkEeYI8r_Wf4dfjIAZRkrj8GHqAJOi762rjyFvXvcPc0Zc-ABDYnVi4WdWOCJw"}
2021-08-13 15:58:42 SUCCESS
BuildRequestObjectByValueRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
https://idp.conf.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiJwaW5nZmVkZXJhdGUtZmFwaS1qd3QtYXNzZXJ0aW9uLWNsaWVudDEiLCJhbGciOiJQUzI1NiJ9.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.Y7Bruuv3Qe5NiuYN-WB3rfhW_cTpZUoLKV-ENIk7-F41Kw8Y4iZsXK_2NsNwsPXR-z_MFZg2-fdDh3pRQADKUYzF3ahqXtlCo1h0yFpPy0WphO4ixem9n_HUb_fKSJrFYRFlK_kQ_ynjCIRty9Mkj4JStPuVIJvhSKh9KtVV3epH6zDJ8_qTuzcAg8gUpFGY3kngnWbEN3XKo_fSQnNmr2dvo-BW3i5JeFjO5QRDAyLASwB-Bkuyg8WCFdTlCGL3BbRkKA79khXAvf6ZSfVpsGHw5RbJxGfSYavQchC42bek4q8pzFc8Te3ugmNrykCK-Q5tGoOKXuxUCUsFHtuYWw&client_id=fapi_adv_op_w_mtls_value_first_client&redirect_uri=https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback&scope=openid%20payments&response_type=code%20id_token
2021-08-13 15:58:42 REDIRECT
fapi1-advanced-final-ensure-request-object-with-multiple-aud-succeeds
Redirecting to authorization endpoint
redirect_to
https://idp.conf.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiJwaW5nZmVkZXJhdGUtZmFwaS1qd3QtYXNzZXJ0aW9uLWNsaWVudDEiLCJhbGciOiJQUzI1NiJ9.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.Y7Bruuv3Qe5NiuYN-WB3rfhW_cTpZUoLKV-ENIk7-F41Kw8Y4iZsXK_2NsNwsPXR-z_MFZg2-fdDh3pRQADKUYzF3ahqXtlCo1h0yFpPy0WphO4ixem9n_HUb_fKSJrFYRFlK_kQ_ynjCIRty9Mkj4JStPuVIJvhSKh9KtVV3epH6zDJ8_qTuzcAg8gUpFGY3kngnWbEN3XKo_fSQnNmr2dvo-BW3i5JeFjO5QRDAyLASwB-Bkuyg8WCFdTlCGL3BbRkKA79khXAvf6ZSfVpsGHw5RbJxGfSYavQchC42bek4q8pzFc8Te3ugmNrykCK-Q5tGoOKXuxUCUsFHtuYWw&client_id=fapi_adv_op_w_mtls_value_first_client&redirect_uri=https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback&scope=openid%20payments&response_type=code%20id_token
2021-08-13 15:58:42
WebRunner
Scripted browser HTTP request
browser
goToUrl
request_method
GET
request_uri
https://idp.conf.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiJwaW5nZmVkZXJhdGUtZmFwaS1qd3QtYXNzZXJ0aW9uLWNsaWVudDEiLCJhbGciOiJQUzI1NiJ9.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.Y7Bruuv3Qe5NiuYN-WB3rfhW_cTpZUoLKV-ENIk7-F41Kw8Y4iZsXK_2NsNwsPXR-z_MFZg2-fdDh3pRQADKUYzF3ahqXtlCo1h0yFpPy0WphO4ixem9n_HUb_fKSJrFYRFlK_kQ_ynjCIRty9Mkj4JStPuVIJvhSKh9KtVV3epH6zDJ8_qTuzcAg8gUpFGY3kngnWbEN3XKo_fSQnNmr2dvo-BW3i5JeFjO5QRDAyLASwB-Bkuyg8WCFdTlCGL3BbRkKA79khXAvf6ZSfVpsGHw5RbJxGfSYavQchC42bek4q8pzFc8Te3ugmNrykCK-Q5tGoOKXuxUCUsFHtuYWw&client_id=fapi_adv_op_w_mtls_value_first_client&redirect_uri=https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback&scope=openid%20payments&response_type=code%20id_token
2021-08-13 15:58:43 RESPONSE
WebRunner
Scripted browser HTTP response
response_content
<!DOCTYPE html>


<!-- template name: html.form.login.template.html -->


<!-- Configurable default behavior for the Remember Username checkbox -->
            <!-- set the checkbox to unchecked -->
            

<html lang="en" dir="ltr">
<head>
    <title>Sign On</title>
    <base href="https://idp.conf.ping-eng.com:9031/"/>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
    <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no"/>
    <meta http-equiv="x-ua-compatible" content="IE=edge" />
    <link rel="stylesheet" type="text/css" href="assets/css/main.css"/>
    </head>

<body onload="setFocus();">

<div class="ping-container ping-signin login-template">

    <!--
    if there is a logo present in the 'company-logo' container,
    then 'has-logo' class should be added to 'ping-header' container.
    -->
    <div class="ping-header">
        <span class="company-logo"><!-- client company logo here --></span>
        Sign On
    </div>
    <!-- .ping-header -->

    <div class="ping-body-container">

        <div>
            <form method="POST" action="/as/9MNiT/resume/as/authorization.ping" autocomplete="off">

                <div class="ping-messages">
                                        
                                        
                </div>

                
                        <div class="ping-input-label">
                            Username
                        </div>
                        <div class="ping-input-container">
                                                            <input id="username" type="text" size="36" name="pf.username" value="" autocorrect="off" autocapitalize="off" onKeyPress="return postOnReturn(event)"  /><!---->
                                                        <div class="place-bottom type-alert tooltip-text" id="username-text">
                                <div class="icon">!</div>
                                Please fill out this field.
                            </div>
                        </div>

                        <div class="ping-input-label">
                            Password
                        </div>
                        <div class="ping-input-container password-container">
                            <input id="password" type="password" size="36" name="pf.pass" onKeyPress="return postOnReturn(event)" />
                            <div class="place-bottom type-alert tooltip-text" id="password-text">
                                <div class="icon">!</div>
                                Please fill out this field.
                            </div>
                        </div>

                        
                        
                        <div class="ping-buttons">
                            <input type="hidden" name="pf.ok" value="" />
                            <input type="hidden" name="pf.cancel" value="" />
                            <span id="signOnButtonSpan">
                                <a onclick="postOk();" class="ping-button normal allow" id="signOnButton" title="Sign On">
                                Sign On
                                </a>
                            </span>
                        </div><!-- .ping-buttons -->

                        
                        
                                    
                <!-- #recaptcha -->
                
                <input type="hidden" name="pf.adapterId" id="pf.adapterId" value="HTMLFormSimplePCV" />
            </form>
        </div><!-- .ping-body// blank div -->
        
    </div><!-- .ping-body-container -->

    <div class="ping-footer-container">
        <div class="ping-footer">
            <div class="ping-credits"></div>
            <div class="ping-copyright">© Copyright 2021 Ping Identity. All rights reserved.</div>
        </div>
        <!-- .ping-footer -->
    </div>
    <!-- .ping-footer-container -->

</div><!-- .ping-container -->

<script type="text/javascript">

	function postForgotPassword() {

		document.forms[0]['pf.passwordreset'].value = 'clicked';
		document.forms[0].submit();
	}

	function postRecoverUsername() {
        document.forms[0]['pf.usernamerecovery'].value = 'clicked';
		document.forms[0].submit();
	}

	function postAlternateAuthnSystem(system) {
	    var variants = ["Biometrics", "Windows Hello", "Face ID",  "Touch ID"];
	    for (i = 0; i < variants.length; i++) {
	        if(variants[i] == system) {
	            system = "FIDO";
	        }
	    }
	    document.forms[0]['$alternateAuthnSystem'].value = system;
	    document.forms[0].submit();
	}


	function postRegistration()
    {
        document.forms[0]['$registrationValue'].value = true;
        document.forms[0].submit();
    }

    function postOk() {
        if (false) {
            grecaptcha.execute();
        }
        else {
            // remove error tips
            if (document.forms[0]['pf.username'].value !== '') {
                document.getElementById('username-text').className = 'place-bottom type-alert tooltip-text';
            }
            if (document.forms[0]['pf.pass'].value !== '') {
                document.getElementById('password-text').className = 'place-bottom type-alert tooltip-text';
            }
            // Add back
            if (document.forms[0]['pf.username'].value === '') {
                document.getElementById('username-text').className += ' show';
            }
            else if (document.forms[0]['pf.pass'].value === '') {
                document.getElementById('password-text').className += ' show';
            }
            else {
                submitForm()
            }
        }
    }

    function submitForm()
    {
        var signOnButtonSpan = document.getElementById('signOnButtonSpan');
        signOnButtonSpan.classList.add('content-columns', 'disabled');
        signOnButtonSpan.style = "pointer-events: none;";

        var signOnButton = document.getElementById('signOnButton');
        signOnButton.innerHTML = 'Signing on...';

        document.forms[0]['pf.ok'].value = 'clicked';
        document.forms[0].submit();
        if(false) {
            grecaptcha.reset();
        }
    }

    function postCancel() {
        document.forms[0]['pf.cancel'].value = 'clicked';
        document.forms[0].submit();
    }

    function postOnReturn(e) {
        var keycode;
        if (window.event) keycode = window.event.keyCode;
        else if (e) keycode = e.which;
        else return true;

        if (keycode == 13) {
            postOk();
            return false;
        } else {
            return true;
        }
    }

    function setFocus() {
        var platform = navigator.platform;
        if (platform != null && platform.indexOf("iPhone") == -1) {
                            document.getElementById('username').focus();
                    }
    }

    function setMobile(mobile) {
        var className = ' mobile',
            hasClass = (bodyTag.className.indexOf(className) !== -1);

        if (mobile && !hasClass) {
            bodyTag.className += className;

        } else if (!mobile && hasClass) {
            bodyTag.className = bodyTag.className.replace(className, '');
        }

        
        <!-- Check if this is the PingOne Mobile App -->
            }

    function getScreenWidth() {
        return (window.outerHeight) ? window.outerWidth : document.body.clientWidth;
    }

    var bodyTag = document.getElementsByTagName('body')[0],
        width = getScreenWidth(),
        remember = false && false;

    
    if (/Android|webOS|iPhone|iPod|BlackBerry|IEMobile|Opera Mini/i.test(navigator.userAgent)) {
        setMobile(true);
    } else {
        setMobile((width <= 480));
        window.onresize = function() {
            width = getScreenWidth();
            setMobile((width <= 480));
        }
    }
   


</script>

</body>
</html>
response_content_type
text/html
response_status_text
200-OK
response_status_code
200
2021-08-13 15:58:43 INFO
WebRunner
Waiting
regexp
seconds
10
task
Initial Login
browser
wait
action
element_type
id
url
https://idp.conf.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiJwaW5nZmVkZXJhdGUtZmFwaS1qd3QtYXNzZXJ0aW9uLWNsaWVudDEiLCJhbGciOiJQUzI1NiJ9.eyJhdWQiOlsiaHR0cHM6XC9cL2lkcC5jb25mLnBpbmctZW5nLmNvbTo5MDMxIiwiaHR0cHM6XC9cL290aGVyMS5leGFtcGxlLmNvbSIsImludmFsaWQiXSwibmJmIjoxNjI4ODcwMzIyLCJzY29wZSI6Im9wZW5pZCBwYXltZW50cyIsImNsYWltcyI6eyJpZF90b2tlbiI6eyJhY3IiOnsidmFsdWUiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiZXNzZW50aWFsIjp0cnVlfX19LCJpc3MiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwicmVzcG9uc2VfdHlwZSI6ImNvZGUgaWRfdG9rZW4iLCJyZWRpcmVjdF91cmkiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvcGluZ2lkZW50aXR5LXBpbmdmZWRlcmF0ZS1mYXBpLWFkdi1vcC1tdGxzLXZhbHVlLXBsYWluXC9jYWxsYmFjayIsInN0YXRlIjoialNvSmsxM3BXRSIsImV4cCI6MTYyODg3MDYyMiwibm9uY2UiOiJxQUxBRW9TUjcyIiwiY2xpZW50X2lkIjoiZmFwaV9hZHZfb3Bfd19tdGxzX3ZhbHVlX2ZpcnN0X2NsaWVudCJ9.Y7Bruuv3Qe5NiuYN-WB3rfhW_cTpZUoLKV-ENIk7-F41Kw8Y4iZsXK_2NsNwsPXR-z_MFZg2-fdDh3pRQADKUYzF3ahqXtlCo1h0yFpPy0WphO4ixem9n_HUb_fKSJrFYRFlK_kQ_ynjCIRty9Mkj4JStPuVIJvhSKh9KtVV3epH6zDJ8_qTuzcAg8gUpFGY3kngnWbEN3XKo_fSQnNmr2dvo-BW3i5JeFjO5QRDAyLASwB-Bkuyg8WCFdTlCGL3BbRkKA79khXAvf6ZSfVpsGHw5RbJxGfSYavQchC42bek4q8pzFc8Te3ugmNrykCK-Q5tGoOKXuxUCUsFHtuYWw&client_id=fapi_adv_op_w_mtls_value_first_client&redirect_uri=https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback&scope=openid%20payments&response_type=code%20id_token
target
username
2021-08-13 15:58:43 INFO
WebRunner
Entering text
task
Initial Login
browser
text
element_type
id
value
joe
url
https://idp.conf.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiJwaW5nZmVkZXJhdGUtZmFwaS1qd3QtYXNzZXJ0aW9uLWNsaWVudDEiLCJhbGciOiJQUzI1NiJ9.eyJhdWQiOlsiaHR0cHM6XC9cL2lkcC5jb25mLnBpbmctZW5nLmNvbTo5MDMxIiwiaHR0cHM6XC9cL290aGVyMS5leGFtcGxlLmNvbSIsImludmFsaWQiXSwibmJmIjoxNjI4ODcwMzIyLCJzY29wZSI6Im9wZW5pZCBwYXltZW50cyIsImNsYWltcyI6eyJpZF90b2tlbiI6eyJhY3IiOnsidmFsdWUiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiZXNzZW50aWFsIjp0cnVlfX19LCJpc3MiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwicmVzcG9uc2VfdHlwZSI6ImNvZGUgaWRfdG9rZW4iLCJyZWRpcmVjdF91cmkiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvcGluZ2lkZW50aXR5LXBpbmdmZWRlcmF0ZS1mYXBpLWFkdi1vcC1tdGxzLXZhbHVlLXBsYWluXC9jYWxsYmFjayIsInN0YXRlIjoialNvSmsxM3BXRSIsImV4cCI6MTYyODg3MDYyMiwibm9uY2UiOiJxQUxBRW9TUjcyIiwiY2xpZW50X2lkIjoiZmFwaV9hZHZfb3Bfd19tdGxzX3ZhbHVlX2ZpcnN0X2NsaWVudCJ9.Y7Bruuv3Qe5NiuYN-WB3rfhW_cTpZUoLKV-ENIk7-F41Kw8Y4iZsXK_2NsNwsPXR-z_MFZg2-fdDh3pRQADKUYzF3ahqXtlCo1h0yFpPy0WphO4ixem9n_HUb_fKSJrFYRFlK_kQ_ynjCIRty9Mkj4JStPuVIJvhSKh9KtVV3epH6zDJ8_qTuzcAg8gUpFGY3kngnWbEN3XKo_fSQnNmr2dvo-BW3i5JeFjO5QRDAyLASwB-Bkuyg8WCFdTlCGL3BbRkKA79khXAvf6ZSfVpsGHw5RbJxGfSYavQchC42bek4q8pzFc8Te3ugmNrykCK-Q5tGoOKXuxUCUsFHtuYWw&client_id=fapi_adv_op_w_mtls_value_first_client&redirect_uri=https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback&scope=openid%20payments&response_type=code%20id_token
target
username
2021-08-13 15:58:43 INFO
WebRunner
Entering text
task
Initial Login
browser
text
element_type
id
value
2Federate
url
https://idp.conf.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiJwaW5nZmVkZXJhdGUtZmFwaS1qd3QtYXNzZXJ0aW9uLWNsaWVudDEiLCJhbGciOiJQUzI1NiJ9.eyJhdWQiOlsiaHR0cHM6XC9cL2lkcC5jb25mLnBpbmctZW5nLmNvbTo5MDMxIiwiaHR0cHM6XC9cL290aGVyMS5leGFtcGxlLmNvbSIsImludmFsaWQiXSwibmJmIjoxNjI4ODcwMzIyLCJzY29wZSI6Im9wZW5pZCBwYXltZW50cyIsImNsYWltcyI6eyJpZF90b2tlbiI6eyJhY3IiOnsidmFsdWUiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiZXNzZW50aWFsIjp0cnVlfX19LCJpc3MiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwicmVzcG9uc2VfdHlwZSI6ImNvZGUgaWRfdG9rZW4iLCJyZWRpcmVjdF91cmkiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvcGluZ2lkZW50aXR5LXBpbmdmZWRlcmF0ZS1mYXBpLWFkdi1vcC1tdGxzLXZhbHVlLXBsYWluXC9jYWxsYmFjayIsInN0YXRlIjoialNvSmsxM3BXRSIsImV4cCI6MTYyODg3MDYyMiwibm9uY2UiOiJxQUxBRW9TUjcyIiwiY2xpZW50X2lkIjoiZmFwaV9hZHZfb3Bfd19tdGxzX3ZhbHVlX2ZpcnN0X2NsaWVudCJ9.Y7Bruuv3Qe5NiuYN-WB3rfhW_cTpZUoLKV-ENIk7-F41Kw8Y4iZsXK_2NsNwsPXR-z_MFZg2-fdDh3pRQADKUYzF3ahqXtlCo1h0yFpPy0WphO4ixem9n_HUb_fKSJrFYRFlK_kQ_ynjCIRty9Mkj4JStPuVIJvhSKh9KtVV3epH6zDJ8_qTuzcAg8gUpFGY3kngnWbEN3XKo_fSQnNmr2dvo-BW3i5JeFjO5QRDAyLASwB-Bkuyg8WCFdTlCGL3BbRkKA79khXAvf6ZSfVpsGHw5RbJxGfSYavQchC42bek4q8pzFc8Te3ugmNrykCK-Q5tGoOKXuxUCUsFHtuYWw&client_id=fapi_adv_op_w_mtls_value_first_client&redirect_uri=https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback&scope=openid%20payments&response_type=code%20id_token
target
password
2021-08-13 15:58:43 INFO
WebRunner
Clicking an element
task
Initial Login
browser
click
element_type
id
url
https://idp.conf.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiJwaW5nZmVkZXJhdGUtZmFwaS1qd3QtYXNzZXJ0aW9uLWNsaWVudDEiLCJhbGciOiJQUzI1NiJ9.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.Y7Bruuv3Qe5NiuYN-WB3rfhW_cTpZUoLKV-ENIk7-F41Kw8Y4iZsXK_2NsNwsPXR-z_MFZg2-fdDh3pRQADKUYzF3ahqXtlCo1h0yFpPy0WphO4ixem9n_HUb_fKSJrFYRFlK_kQ_ynjCIRty9Mkj4JStPuVIJvhSKh9KtVV3epH6zDJ8_qTuzcAg8gUpFGY3kngnWbEN3XKo_fSQnNmr2dvo-BW3i5JeFjO5QRDAyLASwB-Bkuyg8WCFdTlCGL3BbRkKA79khXAvf6ZSfVpsGHw5RbJxGfSYavQchC42bek4q8pzFc8Te3ugmNrykCK-Q5tGoOKXuxUCUsFHtuYWw&client_id=fapi_adv_op_w_mtls_value_first_client&redirect_uri=https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback&scope=openid%20payments&response_type=code%20id_token
target
signOnButton
2021-08-13 15:58:43 INFO
WebRunner
Completed processing of webpage
task
Initial Login
browser
complete
response_status_text
200-OK
match
https://idp.conf.ping-eng.com:9031/as/authorization.oauth2*
url
https://idp.conf.ping-eng.com:9031/as/9MNiT/resume/as/authorization.ping
response_status_code
200
2021-08-13 15:58:43 INFO
WebRunner
Clicking an element
task
Authorize Client
browser
click
element_type
css
url
https://idp.conf.ping-eng.com:9031/as/9MNiT/resume/as/authorization.ping
target
a.ping-button.normal.allow
2021-08-13 15:58:43 INCOMING
fapi1-advanced-final-ensure-request-object-with-multiple-aud-succeeds
Incoming HTTP request to test instance C3tCrudSxJE0wrL
incoming_headers
{
  "host": "www.certification.openid.net",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.72 Safari/537.36",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,*/*;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.9",
  "sec-fetch-site": "same-origin",
  "sec-fetch-mode": "navigate",
  "sec-fetch-user": "?1",
  "sec-fetch-dest": "document",
  "referer": "https://idp.conf.ping-eng.com:9031/as/9MNiT/resume/as/authorization.ping",
  "accept-encoding": "gzip, deflate, br",
  "accept-language": "en-US,en;q\u003d0.9",
  "origin": "https://idp.conf.ping-eng.com:9031",
  "cache-control": "max-age\u003d0",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
callback
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-08-13 15:58:43 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/kQmVYNubGR2jvdS3OVsx",
  "fullUrl": "https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/implicit/kQmVYNubGR2jvdS3OVsx"
}
2021-08-13 15:58:43 OUTGOING
fapi1-advanced-final-ensure-request-object-with-multiple-aud-succeeds
Response to HTTP request to test instance C3tCrudSxJE0wrL
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/implicit/kQmVYNubGR2jvdS3OVsx, returnUrl=/log-detail.html?log=C3tCrudSxJE0wrL}]
outgoing_path
callback
2021-08-13 15:58:44 INFO
WebRunner
Completed processing of webpage
task
Authorize Client
browser
complete
response_status_text
200-
match
https://idp.conf.ping-eng.com:9031/as/*/resume/as/authorization.ping*
url
https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback#code=N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK&id_token=eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg&state=jSoJk13pWE
response_status_code
200
2021-08-13 15:58:44 INFO
WebRunner
Completed processing of webpage
task
Verify Complete
browser
complete
response_status_text
200-
match
https://www.certification.openid.net/test/a/*/callback*
url
https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback#code=N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK&id_token=eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg&state=jSoJk13pWE
response_status_code
200
2021-08-13 15:58:44 INCOMING
fapi1-advanced-final-ensure-request-object-with-multiple-aud-succeeds
Incoming HTTP request to test instance C3tCrudSxJE0wrL
incoming_headers
{
  "host": "www.certification.openid.net",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.72 Safari/537.36",
  "accept": "*/*",
  "sec-fetch-site": "same-origin",
  "sec-fetch-mode": "navigate",
  "sec-fetch-user": "?1",
  "sec-fetch-dest": "document",
  "referer": "https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback",
  "accept-encoding": "gzip, deflate, br",
  "accept-language": "en-US,en;q\u003d0.9",
  "cookie": "JSESSIONID\u003d6840224AB491AB9EAAFD1F6CBE3544DC",
  "x-requested-with": "XMLHttpRequest",
  "content-type": "text/plain",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "907",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
implicit/kQmVYNubGR2jvdS3OVsx
incoming_body_form_params
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
#code=N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK&id_token=eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg&state=jSoJk13pWE
2021-08-13 15:58:44 OUTGOING
fapi1-advanced-final-ensure-request-object-with-multiple-aud-succeeds
Response to HTTP request to test instance C3tCrudSxJE0wrL
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/kQmVYNubGR2jvdS3OVsx
2021-08-13 15:58:44
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "code",
    "value": "N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK"
  },
  {
    "name": "id_token",
    "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg"
  },
  {
    "name": "state",
    "value": "jSoJk13pWE"
  }
]
2021-08-13 15:58:44 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
code
N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg
state
jSoJk13pWE
2021-08-13 15:58:44 REDIRECT-IN
fapi1-advanced-final-ensure-request-object-with-multiple-aud-succeeds
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.72 Safari/537.36",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,*/*;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.9",
  "sec-fetch-site": "same-origin",
  "sec-fetch-mode": "navigate",
  "sec-fetch-user": "?1",
  "sec-fetch-dest": "document",
  "referer": "https://idp.conf.ping-eng.com:9031/as/9MNiT/resume/as/authorization.ping",
  "accept-encoding": "gzip, deflate, br",
  "accept-language": "en-US,en;q\u003d0.9",
  "origin": "https://idp.conf.ping-eng.com:9031",
  "cache-control": "max-age\u003d0",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "code": "N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK",
  "id_token": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg",
  "state": "jSoJk13pWE"
}
post_body
Verify authorization endpoint response
2021-08-13 15:58:44 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2021-08-13 15:58:44 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2021-08-13 15:58:44 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2021-08-13 15:58:44 SUCCESS
RejectStateInUrlQueryForHybridFlow
state is correctly not present in URL query returned from authorization endpoint (as in the hybrid flow it must be returned in the URL fragment/hash only)
2021-08-13 15:58:44 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2021-08-13 15:58:44 SUCCESS
ValidateSuccessfulHybridResponseFromAuthorizationEndpoint
authorization endpoint response does not include unexpected parameters
code
N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg
state
jSoJk13pWE
2021-08-13 15:58:44 SUCCESS
CheckStateInAuthorizationResponse
State in response correctly returned
state
jSoJk13pWE
2021-08-13 15:58:44
ValidateIssInAuthorizationResponse
No 'iss' value in authorization response.
2021-08-13 15:58:44 SUCCESS
ExtractAuthorizationCodeFromAuthorizationResponse
Found authorization code
code
N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK
2021-08-13 15:58:44 SUCCESS
EnsureMinimumAuthorizationCodeLength
Authorization code is of sufficient length
actual
320
required
128
2021-08-13 15:58:44 SUCCESS
EnsureMinimumAuthorizationCodeEntropy
Calculated shannon entropy seems sufficient
actual
189.36734879116756
expected
96.0
2021-08-13 15:58:44 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg
header
{
  "kid": "NfGZj3wtxSjC-G5ZOsy0GIrGqwU",
  "alg": "PS256"
}
claims
{
  "sub": "joe",
  "aud": "fapi_adv_op_w_mtls_value_first_client",
  "acr": "urn:mace:incommon:iap:silver",
  "c_hash": "3OetjMaZulaYeiGmanZ-SA",
  "s_hash": "b71ZA3TnvVyVZjYzkFoQag",
  "auth_time": 1628870323,
  "iss": "https://idp.conf.ping-eng.com:9031",
  "exp": 1628870623,
  "iat": 1628870323,
  "nonce": "qALAEoSR72",
  "jti": "OUP7T8zId8tPxnyPyewbu0"
}
2021-08-13 15:58:44 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-08-13 15:58:44 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
NfGZj3wtxSjC-G5ZOsy0GIrGqwU
2021-08-13 15:58:44 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
qALAEoSR72
2021-08-13 15:58:44 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
acr value in id_token is (one of) the requested values
actual
urn:mace:incommon:iap:silver
requested
[
  "urn:mace:incommon:iap:silver"
]
2021-08-13 15:58:44 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg
2021-08-13 15:58:44 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg
2021-08-13 15:58:44 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
joe
2021-08-13 15:58:44 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "ES256",
  "PS256"
]
alg
PS256
2021-08-13 15:58:44 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-08-13 15:58:44 INFO
FAPIValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-08-13 15:58:44 SUCCESS
ExtractSHash
Extracted s_hash from ID Token
s_hash
b71ZA3TnvVyVZjYzkFoQag
alg
PS256
2021-08-13 15:58:44 SUCCESS
ValidateSHash
s_hash validated successfully
expected_hash
b71ZA3TnvVyVZjYzkFoQag
unhashed_value
jSoJk13pWE
id_token_hash
b71ZA3TnvVyVZjYzkFoQag
2021-08-13 15:58:44 SUCCESS
ExtractCHash
Extracted c_hash from ID Token
c_hash
3OetjMaZulaYeiGmanZ-SA
alg
PS256
2021-08-13 15:58:44 SUCCESS
ValidateCHash
c_hash validated successfully
expected_hash
3OetjMaZulaYeiGmanZ-SA
unhashed_value
N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK
id_token_hash
3OetjMaZulaYeiGmanZ-SA
Call token endpoint
2021-08-13 15:58:44 SUCCESS
CreateTokenEndpointRequestForAuthorizationCodeGrant
grant_type
authorization_code
code
N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK
redirect_uri
https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback
2021-08-13 15:58:44
AddClientIdToTokenEndpointRequest
grant_type
authorization_code
code
N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK
redirect_uri
https://www.certification.openid.net/test/a/pingidentity-pingfederate-fapi-adv-op-mtls-value-plain/callback
client_id
fapi_adv_op_w_mtls_value_first_client
2021-08-13 15:58:44
CallTokenEndpoint
HTTP request
request_uri
https://idp.conf.ping-eng.com:9032/as/token.oauth2
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "258"
}
request_body
grant_type=authorization_code&code=N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK&redirect_uri=https%3A%2F%2Fwww.certification.openid.net%2Ftest%2Fa%2Fpingidentity-pingfederate-fapi-adv-op-mtls-value-plain%2Fcallback&client_id=fapi_adv_op_w_mtls_value_first_client
request_mutual_tls
{
  "cert": "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",
  "key": "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\u003d"
}
2021-08-13 15:58:44 RESPONSE
CallTokenEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Fri, 13 Aug 2021 15:58:44 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dxFtqssumPV9BJeW8cbYyDH; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"access_token":"eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSIsInBpLmF0bSI6ImE5Z2kifQ.eyJzY29wZSI6Im9wZW5pZCBwYXltZW50cyIsImNsaWVudF9pZCI6ImZhcGlfYWR2X29wX3dfbXRsc192YWx1ZV9maXJzdF9jbGllbnQiLCJzdWIiOiJqb2UiLCJwaS51ayI6ImpvZSIsImNuZiI6eyJ4NXQjUzI1NiI6ImpyMkZ0UllhZm9oYkNaMnpQLTdpaUk1M1F5Q0VwTXhQbW9fbDdoQkhHWkkifSwiZXhwIjoxNjI4ODc3NTI0fQ.MCDlqiW4IUvwT5CNhvPXuGqlK9_LEgOMl5UBqTLWXcvATlKpyCV_dAzbgDF9XHCCumuyDygjZgiTRJfQkpfrXQkyElOXv2wy9-X_bi7FToF8YnU5Ufiaq-mbx3SAYTtYC0CJrNO72NjOowDCHCJBuJupt7kQZINZd5HhS7rsDlcTjXU6bc--jcuK721bCNPAW4bdPgZZokZiCmKelkJ5q09o1Sk2J__aksF6dhbWudOJayesjD-aHTMkehMb6hSbn2hiIzzlbo-Er4bO5kkwd7JA_0jnR2tVsSD6AgUZ0wpDtTosPMbcQ0bxBqSEufeP1o3C9XQN1crOp57BB0U5HQ","refresh_token":"KY1m9udkNCX6mSz3kgvFa5bTJjfRK35aDAOpQwUmX2","id_token":"eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg","token_type":"Bearer","expires_in":7199}
2021-08-13 15:58:44
CallTokenEndpoint
Token endpoint response
token_endpoint_response
{"access_token":"eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSIsInBpLmF0bSI6ImE5Z2kifQ.eyJzY29wZSI6Im9wZW5pZCBwYXltZW50cyIsImNsaWVudF9pZCI6ImZhcGlfYWR2X29wX3dfbXRsc192YWx1ZV9maXJzdF9jbGllbnQiLCJzdWIiOiJqb2UiLCJwaS51ayI6ImpvZSIsImNuZiI6eyJ4NXQjUzI1NiI6ImpyMkZ0UllhZm9oYkNaMnpQLTdpaUk1M1F5Q0VwTXhQbW9fbDdoQkhHWkkifSwiZXhwIjoxNjI4ODc3NTI0fQ.MCDlqiW4IUvwT5CNhvPXuGqlK9_LEgOMl5UBqTLWXcvATlKpyCV_dAzbgDF9XHCCumuyDygjZgiTRJfQkpfrXQkyElOXv2wy9-X_bi7FToF8YnU5Ufiaq-mbx3SAYTtYC0CJrNO72NjOowDCHCJBuJupt7kQZINZd5HhS7rsDlcTjXU6bc--jcuK721bCNPAW4bdPgZZokZiCmKelkJ5q09o1Sk2J__aksF6dhbWudOJayesjD-aHTMkehMb6hSbn2hiIzzlbo-Er4bO5kkwd7JA_0jnR2tVsSD6AgUZ0wpDtTosPMbcQ0bxBqSEufeP1o3C9XQN1crOp57BB0U5HQ","refresh_token":"KY1m9udkNCX6mSz3kgvFa5bTJjfRK35aDAOpQwUmX2","id_token":"eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg","token_type":"Bearer","expires_in":7199}
2021-08-13 15:58:44 SUCCESS
CallTokenEndpoint
Parsed token endpoint response
access_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSIsInBpLmF0bSI6ImE5Z2kifQ.eyJzY29wZSI6Im9wZW5pZCBwYXltZW50cyIsImNsaWVudF9pZCI6ImZhcGlfYWR2X29wX3dfbXRsc192YWx1ZV9maXJzdF9jbGllbnQiLCJzdWIiOiJqb2UiLCJwaS51ayI6ImpvZSIsImNuZiI6eyJ4NXQjUzI1NiI6ImpyMkZ0UllhZm9oYkNaMnpQLTdpaUk1M1F5Q0VwTXhQbW9fbDdoQkhHWkkifSwiZXhwIjoxNjI4ODc3NTI0fQ.MCDlqiW4IUvwT5CNhvPXuGqlK9_LEgOMl5UBqTLWXcvATlKpyCV_dAzbgDF9XHCCumuyDygjZgiTRJfQkpfrXQkyElOXv2wy9-X_bi7FToF8YnU5Ufiaq-mbx3SAYTtYC0CJrNO72NjOowDCHCJBuJupt7kQZINZd5HhS7rsDlcTjXU6bc--jcuK721bCNPAW4bdPgZZokZiCmKelkJ5q09o1Sk2J__aksF6dhbWudOJayesjD-aHTMkehMb6hSbn2hiIzzlbo-Er4bO5kkwd7JA_0jnR2tVsSD6AgUZ0wpDtTosPMbcQ0bxBqSEufeP1o3C9XQN1crOp57BB0U5HQ
refresh_token
KY1m9udkNCX6mSz3kgvFa5bTJjfRK35aDAOpQwUmX2
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg
token_type
Bearer
expires_in
7199
Verify token endpoint response
2021-08-13 15:58:44 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2021-08-13 15:58:44 SUCCESS
CheckForAccessTokenValue
Found an access token
access_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSIsInBpLmF0bSI6ImE5Z2kifQ.eyJzY29wZSI6Im9wZW5pZCBwYXltZW50cyIsImNsaWVudF9pZCI6ImZhcGlfYWR2X29wX3dfbXRsc192YWx1ZV9maXJzdF9jbGllbnQiLCJzdWIiOiJqb2UiLCJwaS51ayI6ImpvZSIsImNuZiI6eyJ4NXQjUzI1NiI6ImpyMkZ0UllhZm9oYkNaMnpQLTdpaUk1M1F5Q0VwTXhQbW9fbDdoQkhHWkkifSwiZXhwIjoxNjI4ODc3NTI0fQ.MCDlqiW4IUvwT5CNhvPXuGqlK9_LEgOMl5UBqTLWXcvATlKpyCV_dAzbgDF9XHCCumuyDygjZgiTRJfQkpfrXQkyElOXv2wy9-X_bi7FToF8YnU5Ufiaq-mbx3SAYTtYC0CJrNO72NjOowDCHCJBuJupt7kQZINZd5HhS7rsDlcTjXU6bc--jcuK721bCNPAW4bdPgZZokZiCmKelkJ5q09o1Sk2J__aksF6dhbWudOJayesjD-aHTMkehMb6hSbn2hiIzzlbo-Er4bO5kkwd7JA_0jnR2tVsSD6AgUZ0wpDtTosPMbcQ0bxBqSEufeP1o3C9XQN1crOp57BB0U5HQ
2021-08-13 15:58:44 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSIsInBpLmF0bSI6ImE5Z2kifQ.eyJzY29wZSI6Im9wZW5pZCBwYXltZW50cyIsImNsaWVudF9pZCI6ImZhcGlfYWR2X29wX3dfbXRsc192YWx1ZV9maXJzdF9jbGllbnQiLCJzdWIiOiJqb2UiLCJwaS51ayI6ImpvZSIsImNuZiI6eyJ4NXQjUzI1NiI6ImpyMkZ0UllhZm9oYkNaMnpQLTdpaUk1M1F5Q0VwTXhQbW9fbDdoQkhHWkkifSwiZXhwIjoxNjI4ODc3NTI0fQ.MCDlqiW4IUvwT5CNhvPXuGqlK9_LEgOMl5UBqTLWXcvATlKpyCV_dAzbgDF9XHCCumuyDygjZgiTRJfQkpfrXQkyElOXv2wy9-X_bi7FToF8YnU5Ufiaq-mbx3SAYTtYC0CJrNO72NjOowDCHCJBuJupt7kQZINZd5HhS7rsDlcTjXU6bc--jcuK721bCNPAW4bdPgZZokZiCmKelkJ5q09o1Sk2J__aksF6dhbWudOJayesjD-aHTMkehMb6hSbn2hiIzzlbo-Er4bO5kkwd7JA_0jnR2tVsSD6AgUZ0wpDtTosPMbcQ0bxBqSEufeP1o3C9XQN1crOp57BB0U5HQ
type
Bearer
2021-08-13 15:58:44 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
7199
2021-08-13 15:58:44 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
7199
2021-08-13 15:58:44 SUCCESS
CheckForRefreshTokenValue
Found a refresh token
refresh_token
KY1m9udkNCX6mSz3kgvFa5bTJjfRK35aDAOpQwUmX2
2021-08-13 15:58:44 SUCCESS
EnsureMinimumRefreshTokenLength
Refresh token is of sufficient length
actual
336
required
128
2021-08-13 15:58:44 SUCCESS
EnsureMinimumRefreshTokenEntropy
Calculated shannon entropy seems sufficient
actual
209.7224442545445
expected
96.0
2021-08-13 15:58:44 SUCCESS
EnsureMinimumAccessTokenLength
Access token is of sufficient length
actual
5472
required
128
2021-08-13 15:58:44 SUCCESS
EnsureMinimumAccessTokenEntropy
Calculated shannon entropy seems sufficient
actual
4004.7004005373065
expected
96.0
2021-08-13 15:58:44 SUCCESS
ExtractIdTokenFromTokenResponse
Found and parsed the id_token from token_endpoint_response
value
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg
header
{
  "kid": "NfGZj3wtxSjC-G5ZOsy0GIrGqwU",
  "alg": "PS256"
}
claims
{
  "sub": "joe",
  "aud": "fapi_adv_op_w_mtls_value_first_client",
  "acr": "urn:mace:incommon:iap:silver",
  "c_hash": "3OetjMaZulaYeiGmanZ-SA",
  "s_hash": "b71ZA3TnvVyVZjYzkFoQag",
  "auth_time": 1628870323,
  "iss": "https://idp.conf.ping-eng.com:9031",
  "exp": 1628870623,
  "iat": 1628870323,
  "nonce": "qALAEoSR72",
  "jti": "OUP7T8zId8tPxnyPyewbu0"
}
2021-08-13 15:58:44 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-08-13 15:58:44 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
NfGZj3wtxSjC-G5ZOsy0GIrGqwU
2021-08-13 15:58:44 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
qALAEoSR72
2021-08-13 15:58:44 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
acr value in id_token is (one of) the requested values
actual
urn:mace:incommon:iap:silver
requested
[
  "urn:mace:incommon:iap:silver"
]
2021-08-13 15:58:44 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg
2021-08-13 15:58:44 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSJ9.eyJzdWIiOiJqb2UiLCJhdWQiOiJmYXBpX2Fkdl9vcF93X210bHNfdmFsdWVfZmlyc3RfY2xpZW50IiwianRpIjoiT1VQN1Q4eklkOHRQeG55UHlld2J1MCIsImlzcyI6Imh0dHBzOi8vaWRwLmNvbmYucGluZy1lbmcuY29tOjkwMzEiLCJpYXQiOjE2Mjg4NzAzMjMsImV4cCI6MTYyODg3MDYyMywiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImF1dGhfdGltZSI6MTYyODg3MDMyMywibm9uY2UiOiJxQUxBRW9TUjcyIiwiY19oYXNoIjoiM09ldGpNYVp1bGFZZWlHbWFuWi1TQSIsInNfaGFzaCI6ImI3MVpBM1RudlZ5VlpqWXprRm9RYWcifQ.d-ZgqibvmMXT7Vb4tJGQ23AUnYdhxCTxb85mpqqzrNrJ5_L_OQGhsQJrmpp_dXVZxReGRIyj-ZmhMHyjQ6JgSfCWWVmBH77Wg2veOXiI8BJzUo8XWXWsq6W1BPIVQo0IOIw_4RBIgAlUzS3JA2FmRM8ew8Ht-4tPTVX8dKqWQbFFaOJfCJT8p7FXVDRE959oOBWLtynMFzYT47lhdYr2PezUp_jq4I6I7aeOEBfDPL9NBAHbqxMsL-BR9hFca3vXcNqLYjBRVXwCf8ETvlinzvkF_5faoKbA5Bt5gn6rEk1kHr1Lb4hvHNubrHioBJPkeOgOz9NL2CmENx9j2gesXg
2021-08-13 15:58:44 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
joe
2021-08-13 15:58:44 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "ES256",
  "PS256"
]
alg
PS256
2021-08-13 15:58:44 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-08-13 15:58:44 INFO
FAPIValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2021-08-13 15:58:44 SUCCESS
ExtractCHash
Extracted c_hash from ID Token
c_hash
3OetjMaZulaYeiGmanZ-SA
alg
PS256
2021-08-13 15:58:44 SUCCESS
ExtractSHash
Extracted s_hash from ID Token
s_hash
b71ZA3TnvVyVZjYzkFoQag
alg
PS256
2021-08-13 15:58:44 INFO
ExtractAtHash
Couldn't find at_hash in ID token
2021-08-13 15:58:44 SUCCESS
ValidateCHash
c_hash validated successfully
expected_hash
3OetjMaZulaYeiGmanZ-SA
unhashed_value
N0R43i4-3q_gH8b6Kjup-9vX85Lks0HaMGH0XwRK
id_token_hash
3OetjMaZulaYeiGmanZ-SA
2021-08-13 15:58:44 SUCCESS
ValidateSHash
s_hash validated successfully
expected_hash
b71ZA3TnvVyVZjYzkFoQag
unhashed_value
jSoJk13pWE
id_token_hash
b71ZA3TnvVyVZjYzkFoQag
2021-08-13 15:58:44 INFO
ValidateAtHash
Skipped evaluation due to missing required object: at_hash
expected
at_hash
mapped
Verify at_hash in the authorization endpoint id_token
2021-08-13 15:58:44 INFO
ExtractAtHash
Couldn't find at_hash in ID token
2021-08-13 15:58:44 INFO
ValidateAtHash
Skipped evaluation due to missing required object: at_hash
expected
at_hash
mapped
Resource server endpoint tests
2021-08-13 15:58:44
CreateEmptyResourceEndpointRequestHeaders
Created empty headers
resource_endpoint_request_headers
{}
2021-08-13 15:58:44 SUCCESS
AddFAPIAuthDateToResourceEndpointRequest
Added x-fapi-auth-date to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Fri, 13 Aug 2021 15:58:44 GMT"
}
2021-08-13 15:58:44
AddIpV4FapiCustomerIpAddressToResourceEndpointRequest
Added x-fapi-customer-ip-address containing IPv4 address to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Fri, 13 Aug 2021 15:58:44 GMT",
  "x-fapi-customer-ip-address": "198.51.100.119"
}
2021-08-13 15:58:44
CreateRandomFAPIInteractionId
Created interaction ID
fapi_interaction_id
581f96e6-bb49-430d-9af5-6742332db8ca
2021-08-13 15:58:44 SUCCESS
AddFAPIInteractionIdToResourceEndpointRequest
Added x-fapi-interaction-id to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Fri, 13 Aug 2021 15:58:44 GMT",
  "x-fapi-customer-ip-address": "198.51.100.119",
  "x-fapi-interaction-id": "581f96e6-bb49-430d-9af5-6742332db8ca"
}
2021-08-13 15:58:44
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP request
request_uri
https://idp.conf.ping-eng.com:3000/get
request_method
GET
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "x-fapi-auth-date": "Fri, 13 Aug 2021 15:58:44 GMT",
  "x-fapi-customer-ip-address": "198.51.100.119",
  "x-fapi-interaction-id": "581f96e6-bb49-430d-9af5-6742332db8ca",
  "authorization": "Bearer eyJhbGciOiJQUzI1NiIsImtpZCI6Ik5mR1pqM3d0eFNqQy1HNVpPc3kwR0lyR3F3VSIsInBpLmF0bSI6ImE5Z2kifQ.eyJzY29wZSI6Im9wZW5pZCBwYXltZW50cyIsImNsaWVudF9pZCI6ImZhcGlfYWR2X29wX3dfbXRsc192YWx1ZV9maXJzdF9jbGllbnQiLCJzdWIiOiJqb2UiLCJwaS51ayI6ImpvZSIsImNuZiI6eyJ4NXQjUzI1NiI6ImpyMkZ0UllhZm9oYkNaMnpQLTdpaUk1M1F5Q0VwTXhQbW9fbDdoQkhHWkkifSwiZXhwIjoxNjI4ODc3NTI0fQ.MCDlqiW4IUvwT5CNhvPXuGqlK9_LEgOMl5UBqTLWXcvATlKpyCV_dAzbgDF9XHCCumuyDygjZgiTRJfQkpfrXQkyElOXv2wy9-X_bi7FToF8YnU5Ufiaq-mbx3SAYTtYC0CJrNO72NjOowDCHCJBuJupt7kQZINZd5HhS7rsDlcTjXU6bc--jcuK721bCNPAW4bdPgZZokZiCmKelkJ5q09o1Sk2J__aksF6dhbWudOJayesjD-aHTMkehMb6hSbn2hiIzzlbo-Er4bO5kkwd7JA_0jnR2tVsSD6AgUZ0wpDtTosPMbcQ0bxBqSEufeP1o3C9XQN1crOp57BB0U5HQ",
  "accept-charset": "utf-8",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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",
  "key": "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\u003d"
}
2021-08-13 15:58:44 RESPONSE
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Fri, 13 Aug 2021 15:58:44 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dVjJGBdilBrOkjcXQij9u4b; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "transfer-encoding": "chunked",
  "x-fapi-interaction-id": "581f96e6-bb49-430d-9af5-6742332db8ca"
}
response_body
{"sub":"joe"}
2021-08-13 15:58:44 SUCCESS
CallProtectedResourceWithBearerTokenAndCustomHeaders
Got a response from the resource endpoint
headers
{
  "date": "Fri, 13 Aug 2021 15:58:44 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dVjJGBdilBrOkjcXQij9u4b; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "transfer-encoding": "chunked",
  "x-fapi-interaction-id": "581f96e6-bb49-430d-9af5-6742332db8ca"
}
status_code
{
  "code": 200
}
body
{"sub":"joe"}
2021-08-13 15:58:44 SUCCESS
CheckForDateHeaderInResourceResponse
Date header present and validated
date
Fri, 13 Aug 2021 15:58:44 GMT
skew
976
2021-08-13 15:58:44 SUCCESS
CheckForFAPIInteractionIdInResourceResponse
Found x-fapi-interaction-id
interaction_id
581f96e6-bb49-430d-9af5-6742332db8ca
2021-08-13 15:58:44 SUCCESS
EnsureMatchingFAPIInteractionId
Interaction ID matched
fapi_interaction_id
581f96e6-bb49-430d-9af5-6742332db8ca
2021-08-13 15:58:44 SUCCESS
EnsureResourceResponseReturnedJsonContentType
Response content type is JSON
content_type
application/json;charset=utf-8
2021-08-13 15:58:44 FINISHED
fapi1-advanced-final-ensure-request-object-with-multiple-aud-succeeds
Test has run to completion
testmodule_result
PASSED
2021-08-13 15:58:45
TEST-RUNNER
Alias has now been claimed by another test
alias
pingidentity-pingfederate-fapi-adv-op-mtls-value-plain
new_test_id
KW924EfRyhF75Ho
Test Results