Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-08-25 20:47:31 INFO
TEST-RUNNER
Test instance vVjEm2Gh1mCq6g9 created
baseUrl
https://www.certification.openid.net/test/a/pi
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "by_value",
  "fapi_profile": "consumerdataright_au",
  "fapi_response_mode": "plain_response"
}
alias
pi
description
planId
NRsHFPPrj1Hb5
config
{
  "alias": "pi",
  "server": {
    "discoveryUrl": "https://par-what-is-it-good-for.ping-eng.com:9031/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "c__fapi-jwt-jar1",
    "scope": "openid other",
    "hint_type": "login_hint",
    "hint_value": "cheba-hut@ping-eng.com",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "kid": "fmzJBg",
          "use": "sig",
          "alg": "PS256",
          "n": "mMnnzXsk2aFQA5wl_FmzRdL7-XGUqcSV6gd0GRhxlyoR4HECV74eedAZmD3a54bIKPUlkk2qklpOAtcm7Xp_oPlEkmkvIAd-KtdOfFHN_iW5FeIiu4gPJXJyelBv49Kf-FfGfh2_Jy4jraUX_3_9YwXCuVgkUggH1hCv8ia2MECPHRu-XmrvgHA1J8YkAc4NLpXG60_JwIQqQwpbowfh22lbffx2qPMqAh5Untcfexpc9_xg3kqxwjVjaqP0nc9EOzu41tBJw7xQEWUl47_vVfDKLqMZzq6Q-H1TJZuq5ecpyFsFmIpwS-KAI_ccbvY0iNMc7xl88XM2lE-_fiOWLw",
          "e": "AQAB",
          "d": "MGOhun5JyXNBeCM4FJgEIxUTIIlMYAgWwqvhpSEMuKdmSgMAjvFzjXjO4lyUu8cAFZiucYuPfhKDqnqhpYyqZz0K7qPJfQdiegb-oHj4GImx-LBJ98K7qUx53SskhK7sYybJgp_BLpN6UUB8PTs38OieJz03I5PPh4h5cOO5x8XtP46wMRCQmrQsPKVdGfGTPhrbnHVt81p-52PxdqyMJPD10T3A7bQy0l5HQPgcDewp_JRWobbEFtMXckmdRimgxMmbIJxoIb-RvyWch4u89ep5jx9qbkDDfBOXPpiICRm-RarkBNDJ8ptgo2AvyRG7BHDQyxiqZdBGUw00Uuk-AQ",
          "p": "yjTNjtpFbhdrWZDWh8588XUoViHHKU7PDDALOjAziA9oHeEyJNNwi8Rw5EA9zePOxFSJ1U9H1HTZ-zhUcBIL0h8YIw7zcOJuz4XgH43WgTA_PBaUtr4LOnASPQIDROYD-Bwj57yLwUeESKN9_iWh89fIna1uCp0Yi8yGBDvZIUE",
          "q": "wW-Ipp0_ro-W5x-4-YBxp6SIZ92y7TMxwm-DomDYwZRj-b_fdSonySF-Wmy3cynEw7Lo9Y31OckyxrSkFWWK0nshEe4Nx0pKpZyMVJEcVn7MvsSeU-YFvXwlL91xigsdK6k9qEwfp5_Og0vF5OTp1fPxBmLz82iyVX0Ac6wYa28",
          "dp": "W7Dx_XMwxKlN_oFVJqQVuBAeSGBsxWh9LtOiY7Jzy6Dg35u8d0KB6H8digMvg2tn2VNUZSvcMJUEO4zhjShBv_hlo5AmB-xFv0i_xs80k8RjCEZdDTjEMq2bN5rwDJAZAKsSBQVUgkKB08Z_XX2HIOGakRWRrrJp7QrDQqw424E",
          "dq": "mP_cSVUlsq_WfzdjOs3yl9QXJHiB9wZAPHex2bTanbr-nOO8HtNaJsd8Ro-pRsjp3pTbmKZRKgTPScZF5rqrZDKKBMGTWmeTxYyenqEslemzjsy8IsZVEfxo-YQhMzv5NbimkUCs5QwM72L2w0ahAl7x7MhGBuhv7hhyTAv6QLc",
          "qi": "eq8KkKza25CFTfe9oMs1L0JxNy7TqpBFuHo4_DSXg6Z2lObefpixYTBtCbdPOCUNA7bjhFN94btd-r08NWGmULj_3-5f3WX1xlcHLrr2HLSl0IxyEcO7cHomtGCxErxXUsR9h--Bb-3AW237DIEbmBCVhX-DOTQeX5mtYF1iJE8"
        },
        {
          "kty": "RSA",
          "kid": "x9Lwfg",
          "use": "enc",
          "alg": "RSA-OAEP",
          "n": "wxjMNkWf7al6qmbMvzdEKCTLiVg5Nd18EWroXhhS1pU7CGpKoxwO2tSnS4hLHAOadxejghHs0d45CP_cnYeyQgfhes61b28__5uc-oLVbDTv0xEnOYBYaoEgHH8ltaz0029eSADHHaTyOkpZcN3oIjrvty05NaBKSfLheg_XB0Ai3UxKYr1TpNVR8OyHn_ESYoDAwhIFSXcyyKCftQxI8InsVyKHl7znOb3BnErhlVtebRZMjYlwgygsz1wc7U3abl3oWVI4c_BpVs-XYbgwPBMU7oUEN7i8inAuu4lKlHOod8QHjR-grBjHbeR4lB83FUQllFWeSv0UtY06KIKYUQ",
          "e": "AQAB",
          "d": "uzkU4BA4xa4alWRJoEa9FXkaCher71E5Os3JaGMXO-3B1PWL4rOOXdotIYMN8ThUB22b77qb9Vq4iTZg1JvgKRW_AEdWPjYYyIbhQlZD0a-LZpXTeo78SljYJACwg4QS_sSlSZvVeVFNUzr-Uh3iItdELBkuCZRlNknqr2R8CeuHYMsOTmGA8QAEAMWhOqsayjIk0uG1XVgikWzYcuSZqKQ7_5_EfBL-GaFENz70k6EWNhl_Xw_EP9OY8oPCLPOomEdIV5MWnUsCTdbXOt66jmA4XLE_GAKSGRubVy26gePfIg9xL3AgdWGPqg535q36sy46bv75YDeCmgFI244aMQ",
          "p": "93BEwltItdVaVmfc0IC-L02-u_ejZ-H3jts_8suzSj8NomnOAVIR-nHjyIvNg4OmNAIPaoE9019IPGpGDakP4BFAfM5keywMycgkCN4dWs_or_oWBsRnFk3luXDa_rlwUkS90XbYMgggIkI-tQZB0B64GaKkDblw0Zg0_gsdfd8",
          "q": "ydjnO1XrLxE02jguwbhcbrWNzoThwmJhRmXVWACotW-iRZSUHv8vf9o0JpYif77wqyEwky0jsYbWLtwewFhsljKm-7DZ-wUozn6YY3lfL_Yo1iBfLmOAoVptbP4vKRhi02Yr4_-TpelOvVFt2AxiOWKnq6G-bQdLeztq8oRuT88",
          "dp": "dldLi2j9LXoM6qZiBZaNXzJftqaJkHWSYNCblRO3fBsL-lGAJUGLN6ygtJmogO3F37nchaOqXh2D_uEVABOLdC7MGOTdScuXkioWkecpQvWM5B1Hy5TDePdol3hSROGLxsz5u-SLIeKg-8GTHCER-Oe4RQp0S9wVCSkyrw3B3SE",
          "dq": "JXkeXLazxfY00LqTe6WFi4wrOocS_qqTEqW_OOpOZ_jEsJRH94U6xUq2Wd-PohXJyouL4BcGRGQbCXIWR3FjH3Nh6uJHZcHsdIGuOvGCiX3y0OYLpaoVbF9EZ3K9QKzlVAfo6Bg_yhKJar5eXTjXV34IUOXjW4x6J_O9BC8v56M",
          "qi": "LtFFHjwpcfPB1bqGe4PitwzA55D1e2axO0Z9poRpaFoOy_lSwc3WkQoRgAxjFKTG6jbFUfxRzkWye3Mz3tiJjC3WJ1tsPxbwnre3-kIU2Zj1-Fdit-q8xtDBrmT1EQY3vbt8veDBAvgsNZjngsu2twHLpuoV9ZRhLXUqzQ1PpHE"
        }
      ]
    }
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\nboAwUi7aTGa4/t9IdxJl\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\nZl3SyKWQOxikzuDJ599TjUw1NmvfR0RehncxCZUT/uP0xaPgkAJ3pA4\u003d\n-----END RSA PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----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\nRX5gP7kuu2KGMg\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "resource": {
    "resourceUrl": "https://par-what-is-it-good-for.ping-eng.com:3000/ext/au/cdr/mock",
    "cdrVersion": "3"
  },
  "client2": {
    "client_id": "c__fapi-jwt-jar2",
    "scope": "openid",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "kid": "55zSYQ",
          "use": "sig",
          "alg": "PS256",
          "n": "1Ju18TJ6X9RzfOCYfRZcXLAKhkyV5H3OkuLGBm0D5XL7r1XigsfE_L3a4zcBPuSPO1xhFF1pTGsqGGqTHF82zuqZPLKEO6aGGyoDlLQTKmjh17uYvF1JNUu5goW1mjYe2WuZX8SWIhVl7HzMqCCiK3ji2JiqLuYGtP73iEVWf869MPBH3OGvQphnbdzziQCaqWbv0ipPkKIdl8v1A-3MAmZftYe33mMhe9D1qP7fe3QtfVQ4sHi5z_2wXf1W2JakOYb6rbG0EblHCBmF_zuRX5rKWzG3uYHiyObYyAHqtWETKMN53DdqjjC2l9x45OT1lRhNgLpg2hlBJnnur5UR4w",
          "e": "AQAB",
          "d": "Qp0_FoGQYjI4tSnR3W-CJPBre8THOj5I2TEAhsblb6DlRvyL6hoZmG8MBCEZ3NDUJ-8745uZAH6bQ-cwjLUwgQh0VtZAJEh6wEwbrx3021bdXDDFHE_GPlKpn0Gxss2-QLU76wu3VpqJwt0fapY--Yv415CN0f_0ngU9HY9MGOLli2rMBy_u3pGkotI_RLPmvpP61bA0xwaH17BkfDeDnjbFqaICddxDUTRMpogcTba7BbFWbK-W1M-OkC-wvcDPvZ7S_0WZE7E8gi4Fsgu86o6WHdK1yTTf1mwKhJBeXuWAp05Nzt7OQjyiZExR-wXnnkUGVyiXJjs6XPaA28njoQ",
          "p": "8k6JpkJMbBYBy0qBETA95c-MNRKuE6fRIGgU8ZUU6ICk_9d2uHLXV9bvCXjcCwFAQny0HHgq4gK4BQjIuoolvpfJou8CNf63ioqXURVXvXDl3E_m_nmg3VSySaMgZ12zWh-_Tku3GDSgPAiZjWzaZCMacrqO3XvwHvKRj3-B8Rk",
          "q": "4J-F4XxQN_9ThZEbxu6gNE8WFJC4eCkBea4tssNZc6e5sj7D-YMmVycRrGu4LP8DwsDW0ITtR1Ppi4UZ3pauXcJ4pCRo7Jd6g-v18_vmSMuuKg5GENg4FCYjPjmQtuQI_N8KPYCiqsD0ob6gq0vb9UFDFuNn__Q8OdAo7ch9Dls",
          "dp": "3883SYB3gmaZZaL9sFi0865PPT5x1-nsOlio77PaSh95SG9GU3yP96ypwkAGT4vqRP9Whe1g_r2wJ8ZDUjoEPxWIw5ysmB8cfTUiK1zhXDQJvQN4w5iow4dV3rp0VcWwwhAM7k71YcBKOOlgm8btugzKgypah63Qz2USmk8WQRE",
          "dq": "HbyAmM1AQWmHwRLovnkwtDwUDDzsbtve2iD448WAvhLiPnqYrxtxo_AEIvNPuoU4Fjw5M_mk_-BX9qR0PEduZfMszW4Uhd231mcSdG5Qmip8sAybsfct1V0HJWGxisS9e9x7GpFA96H7wL3fv02XnOw62XjZd8T5hB3OjUwRYik",
          "qi": "cBQVKSQjUdrCtMJdKGiCVeu_aUmFUQS0ytosgNO1LT0qyZdVNC2AtxgH9OIxKFNsSpZPeUBIWMvvmZk1NYBhUYaksK5Rqux5oM8yNneO9wvqnGipQjUg5I3L1yXTiNMoIVGhRBOwjDXC0qWfhXuzQ6cJJNRrCZEHlyC43TwyBF0"
        },
        {
          "kty": "EC",
          "kid": "o5kHtA",
          "use": "enc",
          "alg": "ECDH-ES",
          "x": "MAkYWBWYUM830KIy9sjGxvurGU598Pkj80K2rGOw5C4",
          "y": "mXTwYcKflVl9Oh9qwcTQtpVLw8Ze3AC5S-XKOzIhUFU",
          "crv": "P-256",
          "d": "xocdnt58Na2xFC3wNuzD5NIW-GnC1w2mfx9OVV5u2ig"
        }
      ]
    }
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----\nMIICpzCCAk2gAwIBAgIBEzAKBggqhkjOPQQDAjA6MRswGQYDVQQKDBJMZXQncyBB\ndXRoZW50aWNhdGUxGzAZBgNVBAMMEkxBIEludGVybWVkaWF0ZSBDQTAeFw0yMTA2\nMTQxOTE1NTJaFw0yMjA2MjQxOTE1NTJaMEExCzAJBgNVBAYTAkNBMQswCQYDVQQI\nDAJCQzELMAkGA1UECgwCY28xGDAWBgNVBAMMD25vdCBhIGhvc3QgbmFtZTCCASIw\nDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrKvHoY40kTCBO1KBJafdtuqri1\n3luLWkRyCjaIogINrplT9roSv90FOg3JfaUTxNq3lMLQ6oIcVM2vYGpleRlZFw+b\nGoy3hJBWgAhorGBljiQ9RHPSIJ1hb36usLMeRfv541wOX5ESKkB7EltFDAns7M6N\nxJxFQFT+Xh4DZBWW6EyAy9EfiEq+A7ARiuWeBwun2Qv4P+hIS0Ee6hZfskYZYt0W\nOZSnLJSpTS5lIzG7XSkyyswZtJalkraHaxAWLy+EC3x3IPcLW2oQ/UFQK41R/CET\nDb8UILReWIqbE37QtbziqMlO97zdzb4RvARm6azjGUjiLHrkFZ88e6MGWxECAwEA\nAaNyMHAwCQYDVR0TBAIwADAfBgNVHSMEGDAWgBRm3WjLa38lbEYCuiCPct0ZaSED\n2DAOBgNVHQ8BAf8EBAMCBsAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwHQYDVR0RAQH/\nBBMwEYEPYmRjQGV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0gAMEUCIQCihD6Rnr21\ntoww0MlLDKmo9Ty33uuBNR+pYW607Bax5gIgFUgyn2kTSLiCdMnFAsXRfVS3vWzX\n3ZIqsFoKqq4DsUU\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\nkl47DFPrliIdQzAFsQaB+sQ+OvZg6LVScwU7jW33aUPzX6jjDCjh\n-----END RSA PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----\nMIIB5jCCAYugAwIBAgIBFjAKBggqhkjOPQQDAjBWMQswCQYDVQQGEwJVUzEbMBkG\nA1UECgwSTGV0J3MgQXV0aGVudGljYXRlMSowKAYDVQQDDCFMZXQncyBBdXRoZW50\naWNhdGUgUm9vdCBBdXRob3JpdHkwHhcNMjAwMTE0MjEzMjMwWhcNMzAwMTExMjEz\nMjMwWjA6MRswGQYDVQQKDBJMZXQncyBBdXRoZW50aWNhdGUxGzAZBgNVBAMMEkxB\nIEludGVybWVkaWF0ZSBDQTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJf+aA54\nRC5pyLAR5yfXVYmNpgd+CGUTDp2KOGhc0gK91zxhHesEYkdXkpS2UN8Kati+yHtW\nCV3kkhCngGyv7RqjZjBkMB0GA1UdDgQWBBRm3WjLa38lbEYCuiCPct0ZaSED2DAf\nBgNVHSMEGDAWgBTEA2Q6eecKu9g9yb5glbkhhVINGDASBgNVHRMBAf8ECDAGAQH/\nAgEAMA4GA1UdDwEB/wQEAwIBhjAKBggqhkjOPQQDAgNJADBGAiEA5pLvaFwRRkxo\nmIAtDIwg9D7gC1xzxBl4r28EzmSO1pcCIQCJUShpSXO9HDIQMUgH69fNDEMHXD3R\nRX5gP7kuu2KGMg\u003d\u003d\n-----END CERTIFICATE-----"
  }
}
testName
fapi-rw-id2-ensure-client-assertion-with-wrong-aud-fails
2021-08-25 20:47:31 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
2021-08-25 20:47:31
GetDynamicServerConfiguration
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9031/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-08-25 20:47:31 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Wed, 25 Aug 2021 20:47:31 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003d2RHheOIHGLivq91RDQPttZ; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "content-length": "3850"
}
response_body
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9031",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9031/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions",
  "ping_session_management_users_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/users",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/device_authz.oauth2",
  "scopes_supported": [ "other", "openid", "accounts" ],
  "claims_supported": [ "acr", "sharing_duration", "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "token_endpoint_auth_methods_supported": ["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "code_challenge_methods_supported": [ "S256" ],
  "tls_client_certificate_bound_access_tokens":true,
"claims_parameter_supported":true
}

2021-08-25 20:47:31
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9031",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9031/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions",
  "ping_session_management_users_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/users",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/device_authz.oauth2",
  "scopes_supported": [ "other", "openid", "accounts" ],
  "claims_supported": [ "acr", "sharing_duration", "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "token_endpoint_auth_methods_supported": ["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "code_challenge_methods_supported": [ "S256" ],
  "tls_client_certificate_bound_access_tokens":true,
"claims_parameter_supported":true
}

2021-08-25 20:47:31 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://par-what-is-it-good-for.ping-eng.com:9031
authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2
token_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
revocation_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/revoke_token.oauth2
userinfo_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/idp/userinfo.openid
introspection_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/introspect.oauth2
jwks_uri
https://par-what-is-it-good-for.ping-eng.com:9031/pf/JWKS
registration_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/clients.oauth2
ping_revoked_sris_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris
ping_session_management_sris_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions
ping_session_management_users_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/users
ping_end_session_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/idp/startSLO.ping
device_authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/device_authz.oauth2
scopes_supported
[
  "other",
  "openid",
  "accounts"
]
claims_supported
[
  "acr",
  "sharing_duration",
  "sub"
]
response_types_supported
[
  "code",
  "token",
  "id_token",
  "code token",
  "code id_token",
  "token id_token",
  "code token id_token"
]
response_modes_supported
[
  "fragment",
  "query",
  "form_post"
]
grant_types_supported
[
  "implicit",
  "authorization_code",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
  "urn:ietf:params:oauth:grant-type:jwt-bearer",
  "urn:ietf:params:oauth:grant-type:saml2-bearer",
  "urn:ietf:params:oauth:grant-type:device_code",
  "urn:ietf:params:oauth:grant-type:token-exchange",
  "urn:openid:params:grant-type:ciba"
]
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "none",
  "HS256",
  "HS384",
  "HS512",
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
token_endpoint_auth_methods_supported
[
  "client_secret_basic",
  "client_secret_post",
  "private_key_jwt",
  "tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
claim_types_supported
[
  "normal"
]
claims_parameter_supported
true
request_parameter_supported
true
request_uri_parameter_supported
false
request_object_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
id_token_encryption_alg_values_supported
[
  "dir",
  "A128KW",
  "A192KW",
  "A256KW",
  "A128GCMKW",
  "A192GCMKW",
  "A256GCMKW",
  "ECDH-ES",
  "ECDH-ES+A128KW",
  "ECDH-ES+A192KW",
  "ECDH-ES+A256KW",
  "RSA-OAEP"
]
id_token_encryption_enc_values_supported
[
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256CBC-HS512",
  "A128GCM",
  "A192GCM",
  "A256GCM"
]
pushed_authorization_request_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/par.oauth2
require_pushed_authorization_requests
false
backchannel_authentication_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/bc-auth.ciba
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
backchannel_user_code_parameter_supported
false
code_challenge_methods_supported
[
  "S256"
]
tls_client_certificate_bound_access_tokens
true
2021-08-25 20:47:31 SUCCESS
AddMTLSEndpointAliasesToEnvironment
Added mtls_endpoint_aliases to environment
2021-08-25 20:47:31 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2021-08-25 20:47:31 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9031
}
authorization_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9031
}
token_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9032
}
userinfo_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9031
}
2021-08-25 20:47:31
FetchServerKeys
Fetching server key
jwks_uri
https://par-what-is-it-good-for.ping-eng.com:9031/pf/JWKS
2021-08-25 20:47:31
FetchServerKeys
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9031/pf/JWKS
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-08-25 20:47:32 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Wed, 25 Aug 2021 20:47:32 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003djA7c6WfNGrji2g5uLaTrgv; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"keys":[{"kty":"RSA","kid":"0OkwcG7h25a78veaJ4zp_LiE190","use":"sig","n":"vax6lDZPWoMM_usc48KLv19ZLIKQVDapygEAYFYgEnqtvK7SKwal80pMUjk74rMNdJqZLqW2yG4-tBbvFMHJtq9WVzLjZ2OSPIrgsVH9fY-wsSxiEtAS0acbxIfbYyZNfX0ZxF2rEh90qlGNsW6AXmzaXVWZkDwm9Q48wnJGdB0tFE9IyucoJwWzNMS6YTAPcjuMCHmhgcAvIRqI9fJ-784XF9gwpC8f68X6v0ZAd8U5tGURh4aBCv34Agln7O2L1VbeFqM7_yfJB2NuqdunETHfFkCJRREid8ONt_Qs0VRJ-2lmTHCodHtbNIwIY8KReeTbaGuA-P1eXwCVWmOq_w","e":"AQAB"},{"kty":"EC","kid":"FDBu6tV56Yq4FCS10YSx5iEj27Y","use":"sig","x":"AOBWZ5IBzBQYPZw0moKjRxO29Gdxq3EAjS22kqBUoPSoQE21Fv2Fvn51KI6kS26k9FeZOMdZZ5xMxyf4xE8N9Zbx","y":"ACZUHZDtGOCXRcN_cPOoLO6cPtwhgD0TOPCdfuhPkhVkXseIeSKrTGZ_mel4txgRpugyirQ8ST5iKysMbgHb4jI_","crv":"P-521"},{"kty":"EC","kid":"dx_AQHNiPt6uUz_lxRoA8XmJLlk","use":"sig","x":"-RSPlUjlEkeyA6yGA2ifCWRl8kjl7WLaQQZsmFOVCEc","y":"PBcEKcRCKaJTAd2iWn5qgsk6aCoixwoS-GH0gq4D1bQ","crv":"P-256"},{"kty":"EC","kid":"zT0oyWqDMmV5Iak4fMiTfwAqXUA","use":"sig","x":"VZddnMPgM53oZN0fLmuE5VP3PBYZN5pFFSizAT_E6AxbgIlr5X1OdEyRfHZCB2E8","y":"L7nS8RbI-vsdQwqzO45FMA0NH42f0FNYDwP1xS1EF_f_t5UrXU8ANHyBaux8ze0E","crv":"P-384"},{"kty":"RSA","kid":"4MsFQnCmsobqJwaHrb7ubTsNQxM","use":"sig","n":"kW0pzJkr0gLg7Tf5uj4BtAP1XEV83-3ecc8WkNTX1ndvgPpzzpzeX3q5RTBpgyQI-HCFpCThj7DYLrc1gHjss820gPkBezGSRG4WqMfLrXDIZypy_d75Nrfivyb_2zN4jrLEdtcpBf_RQ0-pkAGqQE43VcvJBu3jpeS-A3kx4wl3H5dHfLwWh4GXsqTo2R0HIeqnOFIIILuKDjBD2AZMANnTzmGnm3Dpj9ph_9NlazPY0zvsXLKhHvv1woyZsFKbSB3EBDpiqPWkn3d314nr1jgKQ0K-1JYhp5EFs_FzPdEUtBMFkwdISlem8YNoSKBG552Cq4UmOa8vPC0ZwCKL4Q","e":"AQAB"},{"kty":"EC","kid":"XB5vWN73DL8AKr_gKfYppLniNtc","use":"sig","x":"CA6Nwu192uO0hj_JOevQJELKyNwqliVfiYkzfkm8Y5Q","y":"C465ha92MByoi0tkjIFGg8kQdmk2F7Q8fOpYvU8dNK4","crv":"P-256"},{"kty":"EC","kid":"u0AuuzVxj4IyK1uTyX-kb4JK70E","use":"sig","x":"AaVgth9qgqVnbuCgUs_7_McGagdxyBhk9uGUR_p6i3UTfzFfNBd-fWHWPWLadqGfLjdu2rUV5qO-WizxKafW-l6W","y":"ALqbu_ksYe9M-1105xyKrDe-6O0yFGFzIfeFe_EH1wLUeaR5bVm0V8nGtPsD-ZyjB8RfRMmzC-LogmnSvLk75mjP","crv":"P-521"},{"kty":"EC","kid":"vNt0YlmeP6RzEIn0Wf-Sj5cCouA","use":"sig","x":"OEQ1Onv_FWCZlb1JXP-ep3eeqQtfQXPJsTDo0yzu5An_xnZMjSJtgXJPDdc1lIS8","y":"I-6xrMzTNpe5iudIu6-HESJsoc2z1Ayy-OJ7psqECGa6sSKvCEMHDDQ2OPi5OhuA","crv":"P-384"},{"kty":"RSA","kid":"SNmwYQAzoY_o_lfI1Kq-qOqG3oo","use":"enc","n":"xhwEuePw8Elbbx86zR5xbqvjJPWMTzzJkMQWUTTBKgngdxiIEg3iLJiTxSQOSIi4FIwNVDhWt_BXfbNMk5VwuBdnsxZ4NYLsrMst-PA0krlJsmZ-TkVLRabjOWC1Ikg1MChgtofdbFQKIdOWQawF4MyXltACro6Svf_7Ct0aEh5og1d80HZ076mj3aIGa40d-IyCuMHNdbMKeysQ-x2zvGLy7KtdSeRyCIAtaglCX-VRuyKjeQkYsP0c-xc7wjbZGVR8X0DcPc94tl2hp_c0sWd1gW-a_8BqxfWuGRvCUfKPXbd5IH4cjvEA25Tr0kEQtCt9voaRI6IQ7A0QpAeAQw","e":"AQAB"},{"kty":"EC","kid":"UmmotA-gHk0nwIJutjzeyE8NFAY","use":"enc","x":"Ort6A65pM7rxrPEbpSCs-RNuzcQ0qBZ0mHZFG-6AbK8","y":"t_394crxLIH_gMQc2Cn3BClP0eJUpzA9tFejFK12Sn4","crv":"P-256"},{"kty":"EC","kid":"lF2d6Abngrj47Nc0Fl60aj6X35k","use":"enc","x":"tQPUct_BI3PNjK8dvfDRJDbJIv3el2J3csOn-3tlAcVybGlpXPkVnMAhfoGOhkUa","y":"95ZdF5nXRsjYYbWyCQ6QxwAVFJIP1FNi5n3DS7rw2HS71f8bWU0HsPCT5MAtk8VM","crv":"P-384"},{"kty":"EC","kid":"mMMYX1Wd89M9JNNflvYu9Lu4zi4","use":"enc","x":"AB78B-cPZCBk-GCmvqlB5XWP4Js7eg2YHvT5PSt-rp4W5QjfyloNU-9uUerhkjhjzUYCXGZPlLhcA3TnuIoejj-s","y":"AGiqjHyPd5C05KJnK9s90tkNkXFp5VdDBc_qafnTHRnQePNh8FAdjOQ3LxLlQTUWHd1X3Zmv-SEb1dKdVOPgw53k","crv":"P-521"}]}
2021-08-25 20:47:32
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","kid":"0OkwcG7h25a78veaJ4zp_LiE190","use":"sig","n":"vax6lDZPWoMM_usc48KLv19ZLIKQVDapygEAYFYgEnqtvK7SKwal80pMUjk74rMNdJqZLqW2yG4-tBbvFMHJtq9WVzLjZ2OSPIrgsVH9fY-wsSxiEtAS0acbxIfbYyZNfX0ZxF2rEh90qlGNsW6AXmzaXVWZkDwm9Q48wnJGdB0tFE9IyucoJwWzNMS6YTAPcjuMCHmhgcAvIRqI9fJ-784XF9gwpC8f68X6v0ZAd8U5tGURh4aBCv34Agln7O2L1VbeFqM7_yfJB2NuqdunETHfFkCJRREid8ONt_Qs0VRJ-2lmTHCodHtbNIwIY8KReeTbaGuA-P1eXwCVWmOq_w","e":"AQAB"},{"kty":"EC","kid":"FDBu6tV56Yq4FCS10YSx5iEj27Y","use":"sig","x":"AOBWZ5IBzBQYPZw0moKjRxO29Gdxq3EAjS22kqBUoPSoQE21Fv2Fvn51KI6kS26k9FeZOMdZZ5xMxyf4xE8N9Zbx","y":"ACZUHZDtGOCXRcN_cPOoLO6cPtwhgD0TOPCdfuhPkhVkXseIeSKrTGZ_mel4txgRpugyirQ8ST5iKysMbgHb4jI_","crv":"P-521"},{"kty":"EC","kid":"dx_AQHNiPt6uUz_lxRoA8XmJLlk","use":"sig","x":"-RSPlUjlEkeyA6yGA2ifCWRl8kjl7WLaQQZsmFOVCEc","y":"PBcEKcRCKaJTAd2iWn5qgsk6aCoixwoS-GH0gq4D1bQ","crv":"P-256"},{"kty":"EC","kid":"zT0oyWqDMmV5Iak4fMiTfwAqXUA","use":"sig","x":"VZddnMPgM53oZN0fLmuE5VP3PBYZN5pFFSizAT_E6AxbgIlr5X1OdEyRfHZCB2E8","y":"L7nS8RbI-vsdQwqzO45FMA0NH42f0FNYDwP1xS1EF_f_t5UrXU8ANHyBaux8ze0E","crv":"P-384"},{"kty":"RSA","kid":"4MsFQnCmsobqJwaHrb7ubTsNQxM","use":"sig","n":"kW0pzJkr0gLg7Tf5uj4BtAP1XEV83-3ecc8WkNTX1ndvgPpzzpzeX3q5RTBpgyQI-HCFpCThj7DYLrc1gHjss820gPkBezGSRG4WqMfLrXDIZypy_d75Nrfivyb_2zN4jrLEdtcpBf_RQ0-pkAGqQE43VcvJBu3jpeS-A3kx4wl3H5dHfLwWh4GXsqTo2R0HIeqnOFIIILuKDjBD2AZMANnTzmGnm3Dpj9ph_9NlazPY0zvsXLKhHvv1woyZsFKbSB3EBDpiqPWkn3d314nr1jgKQ0K-1JYhp5EFs_FzPdEUtBMFkwdISlem8YNoSKBG552Cq4UmOa8vPC0ZwCKL4Q","e":"AQAB"},{"kty":"EC","kid":"XB5vWN73DL8AKr_gKfYppLniNtc","use":"sig","x":"CA6Nwu192uO0hj_JOevQJELKyNwqliVfiYkzfkm8Y5Q","y":"C465ha92MByoi0tkjIFGg8kQdmk2F7Q8fOpYvU8dNK4","crv":"P-256"},{"kty":"EC","kid":"u0AuuzVxj4IyK1uTyX-kb4JK70E","use":"sig","x":"AaVgth9qgqVnbuCgUs_7_McGagdxyBhk9uGUR_p6i3UTfzFfNBd-fWHWPWLadqGfLjdu2rUV5qO-WizxKafW-l6W","y":"ALqbu_ksYe9M-1105xyKrDe-6O0yFGFzIfeFe_EH1wLUeaR5bVm0V8nGtPsD-ZyjB8RfRMmzC-LogmnSvLk75mjP","crv":"P-521"},{"kty":"EC","kid":"vNt0YlmeP6RzEIn0Wf-Sj5cCouA","use":"sig","x":"OEQ1Onv_FWCZlb1JXP-ep3eeqQtfQXPJsTDo0yzu5An_xnZMjSJtgXJPDdc1lIS8","y":"I-6xrMzTNpe5iudIu6-HESJsoc2z1Ayy-OJ7psqECGa6sSKvCEMHDDQ2OPi5OhuA","crv":"P-384"},{"kty":"RSA","kid":"SNmwYQAzoY_o_lfI1Kq-qOqG3oo","use":"enc","n":"xhwEuePw8Elbbx86zR5xbqvjJPWMTzzJkMQWUTTBKgngdxiIEg3iLJiTxSQOSIi4FIwNVDhWt_BXfbNMk5VwuBdnsxZ4NYLsrMst-PA0krlJsmZ-TkVLRabjOWC1Ikg1MChgtofdbFQKIdOWQawF4MyXltACro6Svf_7Ct0aEh5og1d80HZ076mj3aIGa40d-IyCuMHNdbMKeysQ-x2zvGLy7KtdSeRyCIAtaglCX-VRuyKjeQkYsP0c-xc7wjbZGVR8X0DcPc94tl2hp_c0sWd1gW-a_8BqxfWuGRvCUfKPXbd5IH4cjvEA25Tr0kEQtCt9voaRI6IQ7A0QpAeAQw","e":"AQAB"},{"kty":"EC","kid":"UmmotA-gHk0nwIJutjzeyE8NFAY","use":"enc","x":"Ort6A65pM7rxrPEbpSCs-RNuzcQ0qBZ0mHZFG-6AbK8","y":"t_394crxLIH_gMQc2Cn3BClP0eJUpzA9tFejFK12Sn4","crv":"P-256"},{"kty":"EC","kid":"lF2d6Abngrj47Nc0Fl60aj6X35k","use":"enc","x":"tQPUct_BI3PNjK8dvfDRJDbJIv3el2J3csOn-3tlAcVybGlpXPkVnMAhfoGOhkUa","y":"95ZdF5nXRsjYYbWyCQ6QxwAVFJIP1FNi5n3DS7rw2HS71f8bWU0HsPCT5MAtk8VM","crv":"P-384"},{"kty":"EC","kid":"mMMYX1Wd89M9JNNflvYu9Lu4zi4","use":"enc","x":"AB78B-cPZCBk-GCmvqlB5XWP4Js7eg2YHvT5PSt-rp4W5QjfyloNU-9uUerhkjhjzUYCXGZPlLhcA3TnuIoejj-s","y":"AGiqjHyPd5C05KJnK9s90tkNkXFp5VdDBc_qafnTHRnQePNh8FAdjOQ3LxLlQTUWHd1X3Zmv-SEb1dKdVOPgw53k","crv":"P-521"}]}
2021-08-25 20:47:32 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "0OkwcG7h25a78veaJ4zp_LiE190",
      "use": "sig",
      "n": "vax6lDZPWoMM_usc48KLv19ZLIKQVDapygEAYFYgEnqtvK7SKwal80pMUjk74rMNdJqZLqW2yG4-tBbvFMHJtq9WVzLjZ2OSPIrgsVH9fY-wsSxiEtAS0acbxIfbYyZNfX0ZxF2rEh90qlGNsW6AXmzaXVWZkDwm9Q48wnJGdB0tFE9IyucoJwWzNMS6YTAPcjuMCHmhgcAvIRqI9fJ-784XF9gwpC8f68X6v0ZAd8U5tGURh4aBCv34Agln7O2L1VbeFqM7_yfJB2NuqdunETHfFkCJRREid8ONt_Qs0VRJ-2lmTHCodHtbNIwIY8KReeTbaGuA-P1eXwCVWmOq_w",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "FDBu6tV56Yq4FCS10YSx5iEj27Y",
      "use": "sig",
      "x": "AOBWZ5IBzBQYPZw0moKjRxO29Gdxq3EAjS22kqBUoPSoQE21Fv2Fvn51KI6kS26k9FeZOMdZZ5xMxyf4xE8N9Zbx",
      "y": "ACZUHZDtGOCXRcN_cPOoLO6cPtwhgD0TOPCdfuhPkhVkXseIeSKrTGZ_mel4txgRpugyirQ8ST5iKysMbgHb4jI_",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "dx_AQHNiPt6uUz_lxRoA8XmJLlk",
      "use": "sig",
      "x": "-RSPlUjlEkeyA6yGA2ifCWRl8kjl7WLaQQZsmFOVCEc",
      "y": "PBcEKcRCKaJTAd2iWn5qgsk6aCoixwoS-GH0gq4D1bQ",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "zT0oyWqDMmV5Iak4fMiTfwAqXUA",
      "use": "sig",
      "x": "VZddnMPgM53oZN0fLmuE5VP3PBYZN5pFFSizAT_E6AxbgIlr5X1OdEyRfHZCB2E8",
      "y": "L7nS8RbI-vsdQwqzO45FMA0NH42f0FNYDwP1xS1EF_f_t5UrXU8ANHyBaux8ze0E",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "4MsFQnCmsobqJwaHrb7ubTsNQxM",
      "use": "sig",
      "n": "kW0pzJkr0gLg7Tf5uj4BtAP1XEV83-3ecc8WkNTX1ndvgPpzzpzeX3q5RTBpgyQI-HCFpCThj7DYLrc1gHjss820gPkBezGSRG4WqMfLrXDIZypy_d75Nrfivyb_2zN4jrLEdtcpBf_RQ0-pkAGqQE43VcvJBu3jpeS-A3kx4wl3H5dHfLwWh4GXsqTo2R0HIeqnOFIIILuKDjBD2AZMANnTzmGnm3Dpj9ph_9NlazPY0zvsXLKhHvv1woyZsFKbSB3EBDpiqPWkn3d314nr1jgKQ0K-1JYhp5EFs_FzPdEUtBMFkwdISlem8YNoSKBG552Cq4UmOa8vPC0ZwCKL4Q",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "XB5vWN73DL8AKr_gKfYppLniNtc",
      "use": "sig",
      "x": "CA6Nwu192uO0hj_JOevQJELKyNwqliVfiYkzfkm8Y5Q",
      "y": "C465ha92MByoi0tkjIFGg8kQdmk2F7Q8fOpYvU8dNK4",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "u0AuuzVxj4IyK1uTyX-kb4JK70E",
      "use": "sig",
      "x": "AaVgth9qgqVnbuCgUs_7_McGagdxyBhk9uGUR_p6i3UTfzFfNBd-fWHWPWLadqGfLjdu2rUV5qO-WizxKafW-l6W",
      "y": "ALqbu_ksYe9M-1105xyKrDe-6O0yFGFzIfeFe_EH1wLUeaR5bVm0V8nGtPsD-ZyjB8RfRMmzC-LogmnSvLk75mjP",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "vNt0YlmeP6RzEIn0Wf-Sj5cCouA",
      "use": "sig",
      "x": "OEQ1Onv_FWCZlb1JXP-ep3eeqQtfQXPJsTDo0yzu5An_xnZMjSJtgXJPDdc1lIS8",
      "y": "I-6xrMzTNpe5iudIu6-HESJsoc2z1Ayy-OJ7psqECGa6sSKvCEMHDDQ2OPi5OhuA",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "SNmwYQAzoY_o_lfI1Kq-qOqG3oo",
      "use": "enc",
      "n": "xhwEuePw8Elbbx86zR5xbqvjJPWMTzzJkMQWUTTBKgngdxiIEg3iLJiTxSQOSIi4FIwNVDhWt_BXfbNMk5VwuBdnsxZ4NYLsrMst-PA0krlJsmZ-TkVLRabjOWC1Ikg1MChgtofdbFQKIdOWQawF4MyXltACro6Svf_7Ct0aEh5og1d80HZ076mj3aIGa40d-IyCuMHNdbMKeysQ-x2zvGLy7KtdSeRyCIAtaglCX-VRuyKjeQkYsP0c-xc7wjbZGVR8X0DcPc94tl2hp_c0sWd1gW-a_8BqxfWuGRvCUfKPXbd5IH4cjvEA25Tr0kEQtCt9voaRI6IQ7A0QpAeAQw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "UmmotA-gHk0nwIJutjzeyE8NFAY",
      "use": "enc",
      "x": "Ort6A65pM7rxrPEbpSCs-RNuzcQ0qBZ0mHZFG-6AbK8",
      "y": "t_394crxLIH_gMQc2Cn3BClP0eJUpzA9tFejFK12Sn4",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "lF2d6Abngrj47Nc0Fl60aj6X35k",
      "use": "enc",
      "x": "tQPUct_BI3PNjK8dvfDRJDbJIv3el2J3csOn-3tlAcVybGlpXPkVnMAhfoGOhkUa",
      "y": "95ZdF5nXRsjYYbWyCQ6QxwAVFJIP1FNi5n3DS7rw2HS71f8bWU0HsPCT5MAtk8VM",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "mMMYX1Wd89M9JNNflvYu9Lu4zi4",
      "use": "enc",
      "x": "AB78B-cPZCBk-GCmvqlB5XWP4Js7eg2YHvT5PSt-rp4W5QjfyloNU-9uUerhkjhjzUYCXGZPlLhcA3TnuIoejj-s",
      "y": "AGiqjHyPd5C05KJnK9s90tkNkXFp5VdDBc_qafnTHRnQePNh8FAdjOQ3LxLlQTUWHd1X3Zmv-SEb1dKdVOPgw53k",
      "crv": "P-521"
    }
  ]
}
2021-08-25 20:47:32 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "0OkwcG7h25a78veaJ4zp_LiE190",
      "use": "sig",
      "n": "vax6lDZPWoMM_usc48KLv19ZLIKQVDapygEAYFYgEnqtvK7SKwal80pMUjk74rMNdJqZLqW2yG4-tBbvFMHJtq9WVzLjZ2OSPIrgsVH9fY-wsSxiEtAS0acbxIfbYyZNfX0ZxF2rEh90qlGNsW6AXmzaXVWZkDwm9Q48wnJGdB0tFE9IyucoJwWzNMS6YTAPcjuMCHmhgcAvIRqI9fJ-784XF9gwpC8f68X6v0ZAd8U5tGURh4aBCv34Agln7O2L1VbeFqM7_yfJB2NuqdunETHfFkCJRREid8ONt_Qs0VRJ-2lmTHCodHtbNIwIY8KReeTbaGuA-P1eXwCVWmOq_w",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "FDBu6tV56Yq4FCS10YSx5iEj27Y",
      "use": "sig",
      "x": "AOBWZ5IBzBQYPZw0moKjRxO29Gdxq3EAjS22kqBUoPSoQE21Fv2Fvn51KI6kS26k9FeZOMdZZ5xMxyf4xE8N9Zbx",
      "y": "ACZUHZDtGOCXRcN_cPOoLO6cPtwhgD0TOPCdfuhPkhVkXseIeSKrTGZ_mel4txgRpugyirQ8ST5iKysMbgHb4jI_",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "dx_AQHNiPt6uUz_lxRoA8XmJLlk",
      "use": "sig",
      "x": "-RSPlUjlEkeyA6yGA2ifCWRl8kjl7WLaQQZsmFOVCEc",
      "y": "PBcEKcRCKaJTAd2iWn5qgsk6aCoixwoS-GH0gq4D1bQ",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "zT0oyWqDMmV5Iak4fMiTfwAqXUA",
      "use": "sig",
      "x": "VZddnMPgM53oZN0fLmuE5VP3PBYZN5pFFSizAT_E6AxbgIlr5X1OdEyRfHZCB2E8",
      "y": "L7nS8RbI-vsdQwqzO45FMA0NH42f0FNYDwP1xS1EF_f_t5UrXU8ANHyBaux8ze0E",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "4MsFQnCmsobqJwaHrb7ubTsNQxM",
      "use": "sig",
      "n": "kW0pzJkr0gLg7Tf5uj4BtAP1XEV83-3ecc8WkNTX1ndvgPpzzpzeX3q5RTBpgyQI-HCFpCThj7DYLrc1gHjss820gPkBezGSRG4WqMfLrXDIZypy_d75Nrfivyb_2zN4jrLEdtcpBf_RQ0-pkAGqQE43VcvJBu3jpeS-A3kx4wl3H5dHfLwWh4GXsqTo2R0HIeqnOFIIILuKDjBD2AZMANnTzmGnm3Dpj9ph_9NlazPY0zvsXLKhHvv1woyZsFKbSB3EBDpiqPWkn3d314nr1jgKQ0K-1JYhp5EFs_FzPdEUtBMFkwdISlem8YNoSKBG552Cq4UmOa8vPC0ZwCKL4Q",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "XB5vWN73DL8AKr_gKfYppLniNtc",
      "use": "sig",
      "x": "CA6Nwu192uO0hj_JOevQJELKyNwqliVfiYkzfkm8Y5Q",
      "y": "C465ha92MByoi0tkjIFGg8kQdmk2F7Q8fOpYvU8dNK4",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "u0AuuzVxj4IyK1uTyX-kb4JK70E",
      "use": "sig",
      "x": "AaVgth9qgqVnbuCgUs_7_McGagdxyBhk9uGUR_p6i3UTfzFfNBd-fWHWPWLadqGfLjdu2rUV5qO-WizxKafW-l6W",
      "y": "ALqbu_ksYe9M-1105xyKrDe-6O0yFGFzIfeFe_EH1wLUeaR5bVm0V8nGtPsD-ZyjB8RfRMmzC-LogmnSvLk75mjP",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "vNt0YlmeP6RzEIn0Wf-Sj5cCouA",
      "use": "sig",
      "x": "OEQ1Onv_FWCZlb1JXP-ep3eeqQtfQXPJsTDo0yzu5An_xnZMjSJtgXJPDdc1lIS8",
      "y": "I-6xrMzTNpe5iudIu6-HESJsoc2z1Ayy-OJ7psqECGa6sSKvCEMHDDQ2OPi5OhuA",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "SNmwYQAzoY_o_lfI1Kq-qOqG3oo",
      "use": "enc",
      "n": "xhwEuePw8Elbbx86zR5xbqvjJPWMTzzJkMQWUTTBKgngdxiIEg3iLJiTxSQOSIi4FIwNVDhWt_BXfbNMk5VwuBdnsxZ4NYLsrMst-PA0krlJsmZ-TkVLRabjOWC1Ikg1MChgtofdbFQKIdOWQawF4MyXltACro6Svf_7Ct0aEh5og1d80HZ076mj3aIGa40d-IyCuMHNdbMKeysQ-x2zvGLy7KtdSeRyCIAtaglCX-VRuyKjeQkYsP0c-xc7wjbZGVR8X0DcPc94tl2hp_c0sWd1gW-a_8BqxfWuGRvCUfKPXbd5IH4cjvEA25Tr0kEQtCt9voaRI6IQ7A0QpAeAQw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "UmmotA-gHk0nwIJutjzeyE8NFAY",
      "use": "enc",
      "x": "Ort6A65pM7rxrPEbpSCs-RNuzcQ0qBZ0mHZFG-6AbK8",
      "y": "t_394crxLIH_gMQc2Cn3BClP0eJUpzA9tFejFK12Sn4",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "lF2d6Abngrj47Nc0Fl60aj6X35k",
      "use": "enc",
      "x": "tQPUct_BI3PNjK8dvfDRJDbJIv3el2J3csOn-3tlAcVybGlpXPkVnMAhfoGOhkUa",
      "y": "95ZdF5nXRsjYYbWyCQ6QxwAVFJIP1FNi5n3DS7rw2HS71f8bWU0HsPCT5MAtk8VM",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "mMMYX1Wd89M9JNNflvYu9Lu4zi4",
      "use": "enc",
      "x": "AB78B-cPZCBk-GCmvqlB5XWP4Js7eg2YHvT5PSt-rp4W5QjfyloNU-9uUerhkjhjzUYCXGZPlLhcA3TnuIoejj-s",
      "y": "AGiqjHyPd5C05KJnK9s90tkNkXFp5VdDBc_qafnTHRnQePNh8FAdjOQ3LxLlQTUWHd1X3Zmv-SEb1dKdVOPgw53k",
      "crv": "P-521"
    }
  ]
}
2021-08-25 20:47:32 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-08-25 20:47:32 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2021-08-25 20:47:32 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-08-25 20:47:32 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "0OkwcG7h25a78veaJ4zp_LiE190",
      "use": "sig",
      "n": "vax6lDZPWoMM_usc48KLv19ZLIKQVDapygEAYFYgEnqtvK7SKwal80pMUjk74rMNdJqZLqW2yG4-tBbvFMHJtq9WVzLjZ2OSPIrgsVH9fY-wsSxiEtAS0acbxIfbYyZNfX0ZxF2rEh90qlGNsW6AXmzaXVWZkDwm9Q48wnJGdB0tFE9IyucoJwWzNMS6YTAPcjuMCHmhgcAvIRqI9fJ-784XF9gwpC8f68X6v0ZAd8U5tGURh4aBCv34Agln7O2L1VbeFqM7_yfJB2NuqdunETHfFkCJRREid8ONt_Qs0VRJ-2lmTHCodHtbNIwIY8KReeTbaGuA-P1eXwCVWmOq_w",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "FDBu6tV56Yq4FCS10YSx5iEj27Y",
      "use": "sig",
      "x": "AOBWZ5IBzBQYPZw0moKjRxO29Gdxq3EAjS22kqBUoPSoQE21Fv2Fvn51KI6kS26k9FeZOMdZZ5xMxyf4xE8N9Zbx",
      "y": "ACZUHZDtGOCXRcN_cPOoLO6cPtwhgD0TOPCdfuhPkhVkXseIeSKrTGZ_mel4txgRpugyirQ8ST5iKysMbgHb4jI_",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "dx_AQHNiPt6uUz_lxRoA8XmJLlk",
      "use": "sig",
      "x": "-RSPlUjlEkeyA6yGA2ifCWRl8kjl7WLaQQZsmFOVCEc",
      "y": "PBcEKcRCKaJTAd2iWn5qgsk6aCoixwoS-GH0gq4D1bQ",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "zT0oyWqDMmV5Iak4fMiTfwAqXUA",
      "use": "sig",
      "x": "VZddnMPgM53oZN0fLmuE5VP3PBYZN5pFFSizAT_E6AxbgIlr5X1OdEyRfHZCB2E8",
      "y": "L7nS8RbI-vsdQwqzO45FMA0NH42f0FNYDwP1xS1EF_f_t5UrXU8ANHyBaux8ze0E",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "4MsFQnCmsobqJwaHrb7ubTsNQxM",
      "use": "sig",
      "n": "kW0pzJkr0gLg7Tf5uj4BtAP1XEV83-3ecc8WkNTX1ndvgPpzzpzeX3q5RTBpgyQI-HCFpCThj7DYLrc1gHjss820gPkBezGSRG4WqMfLrXDIZypy_d75Nrfivyb_2zN4jrLEdtcpBf_RQ0-pkAGqQE43VcvJBu3jpeS-A3kx4wl3H5dHfLwWh4GXsqTo2R0HIeqnOFIIILuKDjBD2AZMANnTzmGnm3Dpj9ph_9NlazPY0zvsXLKhHvv1woyZsFKbSB3EBDpiqPWkn3d314nr1jgKQ0K-1JYhp5EFs_FzPdEUtBMFkwdISlem8YNoSKBG552Cq4UmOa8vPC0ZwCKL4Q",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "XB5vWN73DL8AKr_gKfYppLniNtc",
      "use": "sig",
      "x": "CA6Nwu192uO0hj_JOevQJELKyNwqliVfiYkzfkm8Y5Q",
      "y": "C465ha92MByoi0tkjIFGg8kQdmk2F7Q8fOpYvU8dNK4",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "u0AuuzVxj4IyK1uTyX-kb4JK70E",
      "use": "sig",
      "x": "AaVgth9qgqVnbuCgUs_7_McGagdxyBhk9uGUR_p6i3UTfzFfNBd-fWHWPWLadqGfLjdu2rUV5qO-WizxKafW-l6W",
      "y": "ALqbu_ksYe9M-1105xyKrDe-6O0yFGFzIfeFe_EH1wLUeaR5bVm0V8nGtPsD-ZyjB8RfRMmzC-LogmnSvLk75mjP",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "vNt0YlmeP6RzEIn0Wf-Sj5cCouA",
      "use": "sig",
      "x": "OEQ1Onv_FWCZlb1JXP-ep3eeqQtfQXPJsTDo0yzu5An_xnZMjSJtgXJPDdc1lIS8",
      "y": "I-6xrMzTNpe5iudIu6-HESJsoc2z1Ayy-OJ7psqECGa6sSKvCEMHDDQ2OPi5OhuA",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "SNmwYQAzoY_o_lfI1Kq-qOqG3oo",
      "use": "enc",
      "n": "xhwEuePw8Elbbx86zR5xbqvjJPWMTzzJkMQWUTTBKgngdxiIEg3iLJiTxSQOSIi4FIwNVDhWt_BXfbNMk5VwuBdnsxZ4NYLsrMst-PA0krlJsmZ-TkVLRabjOWC1Ikg1MChgtofdbFQKIdOWQawF4MyXltACro6Svf_7Ct0aEh5og1d80HZ076mj3aIGa40d-IyCuMHNdbMKeysQ-x2zvGLy7KtdSeRyCIAtaglCX-VRuyKjeQkYsP0c-xc7wjbZGVR8X0DcPc94tl2hp_c0sWd1gW-a_8BqxfWuGRvCUfKPXbd5IH4cjvEA25Tr0kEQtCt9voaRI6IQ7A0QpAeAQw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "UmmotA-gHk0nwIJutjzeyE8NFAY",
      "use": "enc",
      "x": "Ort6A65pM7rxrPEbpSCs-RNuzcQ0qBZ0mHZFG-6AbK8",
      "y": "t_394crxLIH_gMQc2Cn3BClP0eJUpzA9tFejFK12Sn4",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "lF2d6Abngrj47Nc0Fl60aj6X35k",
      "use": "enc",
      "x": "tQPUct_BI3PNjK8dvfDRJDbJIv3el2J3csOn-3tlAcVybGlpXPkVnMAhfoGOhkUa",
      "y": "95ZdF5nXRsjYYbWyCQ6QxwAVFJIP1FNi5n3DS7rw2HS71f8bWU0HsPCT5MAtk8VM",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "mMMYX1Wd89M9JNNflvYu9Lu4zi4",
      "use": "enc",
      "x": "AB78B-cPZCBk-GCmvqlB5XWP4Js7eg2YHvT5PSt-rp4W5QjfyloNU-9uUerhkjhjzUYCXGZPlLhcA3TnuIoejj-s",
      "y": "AGiqjHyPd5C05KJnK9s90tkNkXFp5VdDBc_qafnTHRnQePNh8FAdjOQ3LxLlQTUWHd1X3Zmv-SEb1dKdVOPgw53k",
      "crv": "P-521"
    }
  ]
}
2021-08-25 20:47:32 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
c__fapi-jwt-jar1
scope
openid other
hint_type
login_hint
hint_value
cheba-hut@ping-eng.com
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "fmzJBg",
      "use": "sig",
      "alg": "PS256",
      "n": "mMnnzXsk2aFQA5wl_FmzRdL7-XGUqcSV6gd0GRhxlyoR4HECV74eedAZmD3a54bIKPUlkk2qklpOAtcm7Xp_oPlEkmkvIAd-KtdOfFHN_iW5FeIiu4gPJXJyelBv49Kf-FfGfh2_Jy4jraUX_3_9YwXCuVgkUggH1hCv8ia2MECPHRu-XmrvgHA1J8YkAc4NLpXG60_JwIQqQwpbowfh22lbffx2qPMqAh5Untcfexpc9_xg3kqxwjVjaqP0nc9EOzu41tBJw7xQEWUl47_vVfDKLqMZzq6Q-H1TJZuq5ecpyFsFmIpwS-KAI_ccbvY0iNMc7xl88XM2lE-_fiOWLw",
      "e": "AQAB",
      "d": "MGOhun5JyXNBeCM4FJgEIxUTIIlMYAgWwqvhpSEMuKdmSgMAjvFzjXjO4lyUu8cAFZiucYuPfhKDqnqhpYyqZz0K7qPJfQdiegb-oHj4GImx-LBJ98K7qUx53SskhK7sYybJgp_BLpN6UUB8PTs38OieJz03I5PPh4h5cOO5x8XtP46wMRCQmrQsPKVdGfGTPhrbnHVt81p-52PxdqyMJPD10T3A7bQy0l5HQPgcDewp_JRWobbEFtMXckmdRimgxMmbIJxoIb-RvyWch4u89ep5jx9qbkDDfBOXPpiICRm-RarkBNDJ8ptgo2AvyRG7BHDQyxiqZdBGUw00Uuk-AQ",
      "p": "yjTNjtpFbhdrWZDWh8588XUoViHHKU7PDDALOjAziA9oHeEyJNNwi8Rw5EA9zePOxFSJ1U9H1HTZ-zhUcBIL0h8YIw7zcOJuz4XgH43WgTA_PBaUtr4LOnASPQIDROYD-Bwj57yLwUeESKN9_iWh89fIna1uCp0Yi8yGBDvZIUE",
      "q": "wW-Ipp0_ro-W5x-4-YBxp6SIZ92y7TMxwm-DomDYwZRj-b_fdSonySF-Wmy3cynEw7Lo9Y31OckyxrSkFWWK0nshEe4Nx0pKpZyMVJEcVn7MvsSeU-YFvXwlL91xigsdK6k9qEwfp5_Og0vF5OTp1fPxBmLz82iyVX0Ac6wYa28",
      "dp": "W7Dx_XMwxKlN_oFVJqQVuBAeSGBsxWh9LtOiY7Jzy6Dg35u8d0KB6H8digMvg2tn2VNUZSvcMJUEO4zhjShBv_hlo5AmB-xFv0i_xs80k8RjCEZdDTjEMq2bN5rwDJAZAKsSBQVUgkKB08Z_XX2HIOGakRWRrrJp7QrDQqw424E",
      "dq": "mP_cSVUlsq_WfzdjOs3yl9QXJHiB9wZAPHex2bTanbr-nOO8HtNaJsd8Ro-pRsjp3pTbmKZRKgTPScZF5rqrZDKKBMGTWmeTxYyenqEslemzjsy8IsZVEfxo-YQhMzv5NbimkUCs5QwM72L2w0ahAl7x7MhGBuhv7hhyTAv6QLc",
      "qi": "eq8KkKza25CFTfe9oMs1L0JxNy7TqpBFuHo4_DSXg6Z2lObefpixYTBtCbdPOCUNA7bjhFN94btd-r08NWGmULj_3-5f3WX1xlcHLrr2HLSl0IxyEcO7cHomtGCxErxXUsR9h--Bb-3AW237DIEbmBCVhX-DOTQeX5mtYF1iJE8"
    },
    {
      "kty": "RSA",
      "kid": "x9Lwfg",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "wxjMNkWf7al6qmbMvzdEKCTLiVg5Nd18EWroXhhS1pU7CGpKoxwO2tSnS4hLHAOadxejghHs0d45CP_cnYeyQgfhes61b28__5uc-oLVbDTv0xEnOYBYaoEgHH8ltaz0029eSADHHaTyOkpZcN3oIjrvty05NaBKSfLheg_XB0Ai3UxKYr1TpNVR8OyHn_ESYoDAwhIFSXcyyKCftQxI8InsVyKHl7znOb3BnErhlVtebRZMjYlwgygsz1wc7U3abl3oWVI4c_BpVs-XYbgwPBMU7oUEN7i8inAuu4lKlHOod8QHjR-grBjHbeR4lB83FUQllFWeSv0UtY06KIKYUQ",
      "e": "AQAB",
      "d": "uzkU4BA4xa4alWRJoEa9FXkaCher71E5Os3JaGMXO-3B1PWL4rOOXdotIYMN8ThUB22b77qb9Vq4iTZg1JvgKRW_AEdWPjYYyIbhQlZD0a-LZpXTeo78SljYJACwg4QS_sSlSZvVeVFNUzr-Uh3iItdELBkuCZRlNknqr2R8CeuHYMsOTmGA8QAEAMWhOqsayjIk0uG1XVgikWzYcuSZqKQ7_5_EfBL-GaFENz70k6EWNhl_Xw_EP9OY8oPCLPOomEdIV5MWnUsCTdbXOt66jmA4XLE_GAKSGRubVy26gePfIg9xL3AgdWGPqg535q36sy46bv75YDeCmgFI244aMQ",
      "p": "93BEwltItdVaVmfc0IC-L02-u_ejZ-H3jts_8suzSj8NomnOAVIR-nHjyIvNg4OmNAIPaoE9019IPGpGDakP4BFAfM5keywMycgkCN4dWs_or_oWBsRnFk3luXDa_rlwUkS90XbYMgggIkI-tQZB0B64GaKkDblw0Zg0_gsdfd8",
      "q": "ydjnO1XrLxE02jguwbhcbrWNzoThwmJhRmXVWACotW-iRZSUHv8vf9o0JpYif77wqyEwky0jsYbWLtwewFhsljKm-7DZ-wUozn6YY3lfL_Yo1iBfLmOAoVptbP4vKRhi02Yr4_-TpelOvVFt2AxiOWKnq6G-bQdLeztq8oRuT88",
      "dp": "dldLi2j9LXoM6qZiBZaNXzJftqaJkHWSYNCblRO3fBsL-lGAJUGLN6ygtJmogO3F37nchaOqXh2D_uEVABOLdC7MGOTdScuXkioWkecpQvWM5B1Hy5TDePdol3hSROGLxsz5u-SLIeKg-8GTHCER-Oe4RQp0S9wVCSkyrw3B3SE",
      "dq": "JXkeXLazxfY00LqTe6WFi4wrOocS_qqTEqW_OOpOZ_jEsJRH94U6xUq2Wd-PohXJyouL4BcGRGQbCXIWR3FjH3Nh6uJHZcHsdIGuOvGCiX3y0OYLpaoVbF9EZ3K9QKzlVAfo6Bg_yhKJar5eXTjXV34IUOXjW4x6J_O9BC8v56M",
      "qi": "LtFFHjwpcfPB1bqGe4PitwzA55D1e2axO0Z9poRpaFoOy_lSwc3WkQoRgAxjFKTG6jbFUfxRzkWye3Mz3tiJjC3WJ1tsPxbwnre3-kIU2Zj1-Fdit-q8xtDBrmT1EQY3vbt8veDBAvgsNZjngsu2twHLpuoV9ZRhLXUqzQ1PpHE"
    }
  ]
}
2021-08-25 20:47:32 SUCCESS
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
2021-08-25 20:47:32 SUCCESS
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
cert
MIICqzCCAlKgAwIBAgIBEjAKBggqhkjOPQQDAjA6MRswGQYDVQQKDBJMZXQncyBBdXRoZW50aWNhdGUxGzAZBgNVBAMMEkxBIEludGVybWVkaWF0ZSBDQTAeFw0yMTA2MTQxOTE1NDNaFw0yMjA2MjQxOTE1NDNaMEYxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDTzEPMA0GA1UEBwwGRC10b3duMRkwFwYDVQQDDBBjZXJ0eSBtY2NlcnRmYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H+LQGaKAcM3a3Psv0Pid0ElX9yRaTYnz6TMmxWhoov2z8Fbvqygy5LaJTdr5kyNgZzAuRq51e0iiPiSHSAkbrDRTpBDVLvjLHfkosPRMYkmeBWR8LjRqXbLHXc+h5D6uU3wwl3rgVsl70OHw/0/0QahTvnGCjpHuQ6yP787sMtsoiR/mGgFuviW+grawnmPJan8mG6bSnbZ7PaE0v4mv2z4+h3N720Wri7x9NuOIm82ffV0L7+EGruJ6wA8Xs1eQ9FHzNClmxZVdgtFYlChl7bpDAnzWFV4WpcZmbuVI5bX6pvHeCPCZJElDZGcy5ZIyRSvyzWanmmuit07RArvrQIDAQABo3IwcDAJBgNVHRMEAjAAMB8GA1UdIwQYMBaAFGbdaMtrfyVsRgK6II9y3RlpIQPYMA4GA1UdDwEB/wQEAwIGwDATBgNVHSUEDDAKBggrBgEFBQcDAjAdBgNVHREBAf8EEzARgQ9iZGNAZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDRwAwRAIgFRh2HtKY/xZCcmn3ThRLojgpkmEjzDp2iADLYXd+qdACIAd/RnFXPaLocBny1apx/g+9boAwUi7aTGa4/t9IdxJl
key
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
ca
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
2021-08-25 20:47:32 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-08-25 20:47:32 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "fmzJBg",
      "use": "sig",
      "alg": "PS256",
      "n": "mMnnzXsk2aFQA5wl_FmzRdL7-XGUqcSV6gd0GRhxlyoR4HECV74eedAZmD3a54bIKPUlkk2qklpOAtcm7Xp_oPlEkmkvIAd-KtdOfFHN_iW5FeIiu4gPJXJyelBv49Kf-FfGfh2_Jy4jraUX_3_9YwXCuVgkUggH1hCv8ia2MECPHRu-XmrvgHA1J8YkAc4NLpXG60_JwIQqQwpbowfh22lbffx2qPMqAh5Untcfexpc9_xg3kqxwjVjaqP0nc9EOzu41tBJw7xQEWUl47_vVfDKLqMZzq6Q-H1TJZuq5ecpyFsFmIpwS-KAI_ccbvY0iNMc7xl88XM2lE-_fiOWLw",
      "e": "AQAB",
      "d": "MGOhun5JyXNBeCM4FJgEIxUTIIlMYAgWwqvhpSEMuKdmSgMAjvFzjXjO4lyUu8cAFZiucYuPfhKDqnqhpYyqZz0K7qPJfQdiegb-oHj4GImx-LBJ98K7qUx53SskhK7sYybJgp_BLpN6UUB8PTs38OieJz03I5PPh4h5cOO5x8XtP46wMRCQmrQsPKVdGfGTPhrbnHVt81p-52PxdqyMJPD10T3A7bQy0l5HQPgcDewp_JRWobbEFtMXckmdRimgxMmbIJxoIb-RvyWch4u89ep5jx9qbkDDfBOXPpiICRm-RarkBNDJ8ptgo2AvyRG7BHDQyxiqZdBGUw00Uuk-AQ",
      "p": "yjTNjtpFbhdrWZDWh8588XUoViHHKU7PDDALOjAziA9oHeEyJNNwi8Rw5EA9zePOxFSJ1U9H1HTZ-zhUcBIL0h8YIw7zcOJuz4XgH43WgTA_PBaUtr4LOnASPQIDROYD-Bwj57yLwUeESKN9_iWh89fIna1uCp0Yi8yGBDvZIUE",
      "q": "wW-Ipp0_ro-W5x-4-YBxp6SIZ92y7TMxwm-DomDYwZRj-b_fdSonySF-Wmy3cynEw7Lo9Y31OckyxrSkFWWK0nshEe4Nx0pKpZyMVJEcVn7MvsSeU-YFvXwlL91xigsdK6k9qEwfp5_Og0vF5OTp1fPxBmLz82iyVX0Ac6wYa28",
      "dp": "W7Dx_XMwxKlN_oFVJqQVuBAeSGBsxWh9LtOiY7Jzy6Dg35u8d0KB6H8digMvg2tn2VNUZSvcMJUEO4zhjShBv_hlo5AmB-xFv0i_xs80k8RjCEZdDTjEMq2bN5rwDJAZAKsSBQVUgkKB08Z_XX2HIOGakRWRrrJp7QrDQqw424E",
      "dq": "mP_cSVUlsq_WfzdjOs3yl9QXJHiB9wZAPHex2bTanbr-nOO8HtNaJsd8Ro-pRsjp3pTbmKZRKgTPScZF5rqrZDKKBMGTWmeTxYyenqEslemzjsy8IsZVEfxo-YQhMzv5NbimkUCs5QwM72L2w0ahAl7x7MhGBuhv7hhyTAv6QLc",
      "qi": "eq8KkKza25CFTfe9oMs1L0JxNy7TqpBFuHo4_DSXg6Z2lObefpixYTBtCbdPOCUNA7bjhFN94btd-r08NWGmULj_3-5f3WX1xlcHLrr2HLSl0IxyEcO7cHomtGCxErxXUsR9h--Bb-3AW237DIEbmBCVhX-DOTQeX5mtYF1iJE8"
    },
    {
      "kty": "RSA",
      "kid": "x9Lwfg",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "wxjMNkWf7al6qmbMvzdEKCTLiVg5Nd18EWroXhhS1pU7CGpKoxwO2tSnS4hLHAOadxejghHs0d45CP_cnYeyQgfhes61b28__5uc-oLVbDTv0xEnOYBYaoEgHH8ltaz0029eSADHHaTyOkpZcN3oIjrvty05NaBKSfLheg_XB0Ai3UxKYr1TpNVR8OyHn_ESYoDAwhIFSXcyyKCftQxI8InsVyKHl7znOb3BnErhlVtebRZMjYlwgygsz1wc7U3abl3oWVI4c_BpVs-XYbgwPBMU7oUEN7i8inAuu4lKlHOod8QHjR-grBjHbeR4lB83FUQllFWeSv0UtY06KIKYUQ",
      "e": "AQAB",
      "d": "uzkU4BA4xa4alWRJoEa9FXkaCher71E5Os3JaGMXO-3B1PWL4rOOXdotIYMN8ThUB22b77qb9Vq4iTZg1JvgKRW_AEdWPjYYyIbhQlZD0a-LZpXTeo78SljYJACwg4QS_sSlSZvVeVFNUzr-Uh3iItdELBkuCZRlNknqr2R8CeuHYMsOTmGA8QAEAMWhOqsayjIk0uG1XVgikWzYcuSZqKQ7_5_EfBL-GaFENz70k6EWNhl_Xw_EP9OY8oPCLPOomEdIV5MWnUsCTdbXOt66jmA4XLE_GAKSGRubVy26gePfIg9xL3AgdWGPqg535q36sy46bv75YDeCmgFI244aMQ",
      "p": "93BEwltItdVaVmfc0IC-L02-u_ejZ-H3jts_8suzSj8NomnOAVIR-nHjyIvNg4OmNAIPaoE9019IPGpGDakP4BFAfM5keywMycgkCN4dWs_or_oWBsRnFk3luXDa_rlwUkS90XbYMgggIkI-tQZB0B64GaKkDblw0Zg0_gsdfd8",
      "q": "ydjnO1XrLxE02jguwbhcbrWNzoThwmJhRmXVWACotW-iRZSUHv8vf9o0JpYif77wqyEwky0jsYbWLtwewFhsljKm-7DZ-wUozn6YY3lfL_Yo1iBfLmOAoVptbP4vKRhi02Yr4_-TpelOvVFt2AxiOWKnq6G-bQdLeztq8oRuT88",
      "dp": "dldLi2j9LXoM6qZiBZaNXzJftqaJkHWSYNCblRO3fBsL-lGAJUGLN6ygtJmogO3F37nchaOqXh2D_uEVABOLdC7MGOTdScuXkioWkecpQvWM5B1Hy5TDePdol3hSROGLxsz5u-SLIeKg-8GTHCER-Oe4RQp0S9wVCSkyrw3B3SE",
      "dq": "JXkeXLazxfY00LqTe6WFi4wrOocS_qqTEqW_OOpOZ_jEsJRH94U6xUq2Wd-PohXJyouL4BcGRGQbCXIWR3FjH3Nh6uJHZcHsdIGuOvGCiX3y0OYLpaoVbF9EZ3K9QKzlVAfo6Bg_yhKJar5eXTjXV34IUOXjW4x6J_O9BC8v56M",
      "qi": "LtFFHjwpcfPB1bqGe4PitwzA55D1e2axO0Z9poRpaFoOy_lSwc3WkQoRgAxjFKTG6jbFUfxRzkWye3Mz3tiJjC3WJ1tsPxbwnre3-kIU2Zj1-Fdit-q8xtDBrmT1EQY3vbt8veDBAvgsNZjngsu2twHLpuoV9ZRhLXUqzQ1PpHE"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "fmzJBg",
      "alg": "PS256",
      "n": "mMnnzXsk2aFQA5wl_FmzRdL7-XGUqcSV6gd0GRhxlyoR4HECV74eedAZmD3a54bIKPUlkk2qklpOAtcm7Xp_oPlEkmkvIAd-KtdOfFHN_iW5FeIiu4gPJXJyelBv49Kf-FfGfh2_Jy4jraUX_3_9YwXCuVgkUggH1hCv8ia2MECPHRu-XmrvgHA1J8YkAc4NLpXG60_JwIQqQwpbowfh22lbffx2qPMqAh5Untcfexpc9_xg3kqxwjVjaqP0nc9EOzu41tBJw7xQEWUl47_vVfDKLqMZzq6Q-H1TJZuq5ecpyFsFmIpwS-KAI_ccbvY0iNMc7xl88XM2lE-_fiOWLw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "x9Lwfg",
      "alg": "RSA-OAEP",
      "n": "wxjMNkWf7al6qmbMvzdEKCTLiVg5Nd18EWroXhhS1pU7CGpKoxwO2tSnS4hLHAOadxejghHs0d45CP_cnYeyQgfhes61b28__5uc-oLVbDTv0xEnOYBYaoEgHH8ltaz0029eSADHHaTyOkpZcN3oIjrvty05NaBKSfLheg_XB0Ai3UxKYr1TpNVR8OyHn_ESYoDAwhIFSXcyyKCftQxI8InsVyKHl7znOb3BnErhlVtebRZMjYlwgygsz1wc7U3abl3oWVI4c_BpVs-XYbgwPBMU7oUEN7i8inAuu4lKlHOod8QHjR-grBjHbeR4lB83FUQllFWeSv0UtY06KIKYUQ"
    }
  ]
}
2021-08-25 20:47:32 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-08-25 20:47:32 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-08-25 20:47:32 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "ES256",
  "PS256"
]
2021-08-25 20:47:32 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "fmzJBg",
      "use": "sig",
      "alg": "PS256",
      "n": "mMnnzXsk2aFQA5wl_FmzRdL7-XGUqcSV6gd0GRhxlyoR4HECV74eedAZmD3a54bIKPUlkk2qklpOAtcm7Xp_oPlEkmkvIAd-KtdOfFHN_iW5FeIiu4gPJXJyelBv49Kf-FfGfh2_Jy4jraUX_3_9YwXCuVgkUggH1hCv8ia2MECPHRu-XmrvgHA1J8YkAc4NLpXG60_JwIQqQwpbowfh22lbffx2qPMqAh5Untcfexpc9_xg3kqxwjVjaqP0nc9EOzu41tBJw7xQEWUl47_vVfDKLqMZzq6Q-H1TJZuq5ecpyFsFmIpwS-KAI_ccbvY0iNMc7xl88XM2lE-_fiOWLw",
      "e": "AQAB",
      "d": "MGOhun5JyXNBeCM4FJgEIxUTIIlMYAgWwqvhpSEMuKdmSgMAjvFzjXjO4lyUu8cAFZiucYuPfhKDqnqhpYyqZz0K7qPJfQdiegb-oHj4GImx-LBJ98K7qUx53SskhK7sYybJgp_BLpN6UUB8PTs38OieJz03I5PPh4h5cOO5x8XtP46wMRCQmrQsPKVdGfGTPhrbnHVt81p-52PxdqyMJPD10T3A7bQy0l5HQPgcDewp_JRWobbEFtMXckmdRimgxMmbIJxoIb-RvyWch4u89ep5jx9qbkDDfBOXPpiICRm-RarkBNDJ8ptgo2AvyRG7BHDQyxiqZdBGUw00Uuk-AQ",
      "p": "yjTNjtpFbhdrWZDWh8588XUoViHHKU7PDDALOjAziA9oHeEyJNNwi8Rw5EA9zePOxFSJ1U9H1HTZ-zhUcBIL0h8YIw7zcOJuz4XgH43WgTA_PBaUtr4LOnASPQIDROYD-Bwj57yLwUeESKN9_iWh89fIna1uCp0Yi8yGBDvZIUE",
      "q": "wW-Ipp0_ro-W5x-4-YBxp6SIZ92y7TMxwm-DomDYwZRj-b_fdSonySF-Wmy3cynEw7Lo9Y31OckyxrSkFWWK0nshEe4Nx0pKpZyMVJEcVn7MvsSeU-YFvXwlL91xigsdK6k9qEwfp5_Og0vF5OTp1fPxBmLz82iyVX0Ac6wYa28",
      "dp": "W7Dx_XMwxKlN_oFVJqQVuBAeSGBsxWh9LtOiY7Jzy6Dg35u8d0KB6H8digMvg2tn2VNUZSvcMJUEO4zhjShBv_hlo5AmB-xFv0i_xs80k8RjCEZdDTjEMq2bN5rwDJAZAKsSBQVUgkKB08Z_XX2HIOGakRWRrrJp7QrDQqw424E",
      "dq": "mP_cSVUlsq_WfzdjOs3yl9QXJHiB9wZAPHex2bTanbr-nOO8HtNaJsd8Ro-pRsjp3pTbmKZRKgTPScZF5rqrZDKKBMGTWmeTxYyenqEslemzjsy8IsZVEfxo-YQhMzv5NbimkUCs5QwM72L2w0ahAl7x7MhGBuhv7hhyTAv6QLc",
      "qi": "eq8KkKza25CFTfe9oMs1L0JxNy7TqpBFuHo4_DSXg6Z2lObefpixYTBtCbdPOCUNA7bjhFN94btd-r08NWGmULj_3-5f3WX1xlcHLrr2HLSl0IxyEcO7cHomtGCxErxXUsR9h--Bb-3AW237DIEbmBCVhX-DOTQeX5mtYF1iJE8"
    },
    {
      "kty": "RSA",
      "kid": "x9Lwfg",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "wxjMNkWf7al6qmbMvzdEKCTLiVg5Nd18EWroXhhS1pU7CGpKoxwO2tSnS4hLHAOadxejghHs0d45CP_cnYeyQgfhes61b28__5uc-oLVbDTv0xEnOYBYaoEgHH8ltaz0029eSADHHaTyOkpZcN3oIjrvty05NaBKSfLheg_XB0Ai3UxKYr1TpNVR8OyHn_ESYoDAwhIFSXcyyKCftQxI8InsVyKHl7znOb3BnErhlVtebRZMjYlwgygsz1wc7U3abl3oWVI4c_BpVs-XYbgwPBMU7oUEN7i8inAuu4lKlHOod8QHjR-grBjHbeR4lB83FUQllFWeSv0UtY06KIKYUQ",
      "e": "AQAB",
      "d": "uzkU4BA4xa4alWRJoEa9FXkaCher71E5Os3JaGMXO-3B1PWL4rOOXdotIYMN8ThUB22b77qb9Vq4iTZg1JvgKRW_AEdWPjYYyIbhQlZD0a-LZpXTeo78SljYJACwg4QS_sSlSZvVeVFNUzr-Uh3iItdELBkuCZRlNknqr2R8CeuHYMsOTmGA8QAEAMWhOqsayjIk0uG1XVgikWzYcuSZqKQ7_5_EfBL-GaFENz70k6EWNhl_Xw_EP9OY8oPCLPOomEdIV5MWnUsCTdbXOt66jmA4XLE_GAKSGRubVy26gePfIg9xL3AgdWGPqg535q36sy46bv75YDeCmgFI244aMQ",
      "p": "93BEwltItdVaVmfc0IC-L02-u_ejZ-H3jts_8suzSj8NomnOAVIR-nHjyIvNg4OmNAIPaoE9019IPGpGDakP4BFAfM5keywMycgkCN4dWs_or_oWBsRnFk3luXDa_rlwUkS90XbYMgggIkI-tQZB0B64GaKkDblw0Zg0_gsdfd8",
      "q": "ydjnO1XrLxE02jguwbhcbrWNzoThwmJhRmXVWACotW-iRZSUHv8vf9o0JpYif77wqyEwky0jsYbWLtwewFhsljKm-7DZ-wUozn6YY3lfL_Yo1iBfLmOAoVptbP4vKRhi02Yr4_-TpelOvVFt2AxiOWKnq6G-bQdLeztq8oRuT88",
      "dp": "dldLi2j9LXoM6qZiBZaNXzJftqaJkHWSYNCblRO3fBsL-lGAJUGLN6ygtJmogO3F37nchaOqXh2D_uEVABOLdC7MGOTdScuXkioWkecpQvWM5B1Hy5TDePdol3hSROGLxsz5u-SLIeKg-8GTHCER-Oe4RQp0S9wVCSkyrw3B3SE",
      "dq": "JXkeXLazxfY00LqTe6WFi4wrOocS_qqTEqW_OOpOZ_jEsJRH94U6xUq2Wd-PohXJyouL4BcGRGQbCXIWR3FjH3Nh6uJHZcHsdIGuOvGCiX3y0OYLpaoVbF9EZ3K9QKzlVAfo6Bg_yhKJar5eXTjXV34IUOXjW4x6J_O9BC8v56M",
      "qi": "LtFFHjwpcfPB1bqGe4PitwzA55D1e2axO0Z9poRpaFoOy_lSwc3WkQoRgAxjFKTG6jbFUfxRzkWye3Mz3tiJjC3WJ1tsPxbwnre3-kIU2Zj1-Fdit-q8xtDBrmT1EQY3vbt8veDBAvgsNZjngsu2twHLpuoV9ZRhLXUqzQ1PpHE"
    }
  ]
}
2021-08-25 20:47:32 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
Verify configuration of second client
2021-08-25 20:47:32 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
c__fapi-jwt-jar2
scope
openid
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "55zSYQ",
      "use": "sig",
      "alg": "PS256",
      "n": "1Ju18TJ6X9RzfOCYfRZcXLAKhkyV5H3OkuLGBm0D5XL7r1XigsfE_L3a4zcBPuSPO1xhFF1pTGsqGGqTHF82zuqZPLKEO6aGGyoDlLQTKmjh17uYvF1JNUu5goW1mjYe2WuZX8SWIhVl7HzMqCCiK3ji2JiqLuYGtP73iEVWf869MPBH3OGvQphnbdzziQCaqWbv0ipPkKIdl8v1A-3MAmZftYe33mMhe9D1qP7fe3QtfVQ4sHi5z_2wXf1W2JakOYb6rbG0EblHCBmF_zuRX5rKWzG3uYHiyObYyAHqtWETKMN53DdqjjC2l9x45OT1lRhNgLpg2hlBJnnur5UR4w",
      "e": "AQAB",
      "d": "Qp0_FoGQYjI4tSnR3W-CJPBre8THOj5I2TEAhsblb6DlRvyL6hoZmG8MBCEZ3NDUJ-8745uZAH6bQ-cwjLUwgQh0VtZAJEh6wEwbrx3021bdXDDFHE_GPlKpn0Gxss2-QLU76wu3VpqJwt0fapY--Yv415CN0f_0ngU9HY9MGOLli2rMBy_u3pGkotI_RLPmvpP61bA0xwaH17BkfDeDnjbFqaICddxDUTRMpogcTba7BbFWbK-W1M-OkC-wvcDPvZ7S_0WZE7E8gi4Fsgu86o6WHdK1yTTf1mwKhJBeXuWAp05Nzt7OQjyiZExR-wXnnkUGVyiXJjs6XPaA28njoQ",
      "p": "8k6JpkJMbBYBy0qBETA95c-MNRKuE6fRIGgU8ZUU6ICk_9d2uHLXV9bvCXjcCwFAQny0HHgq4gK4BQjIuoolvpfJou8CNf63ioqXURVXvXDl3E_m_nmg3VSySaMgZ12zWh-_Tku3GDSgPAiZjWzaZCMacrqO3XvwHvKRj3-B8Rk",
      "q": "4J-F4XxQN_9ThZEbxu6gNE8WFJC4eCkBea4tssNZc6e5sj7D-YMmVycRrGu4LP8DwsDW0ITtR1Ppi4UZ3pauXcJ4pCRo7Jd6g-v18_vmSMuuKg5GENg4FCYjPjmQtuQI_N8KPYCiqsD0ob6gq0vb9UFDFuNn__Q8OdAo7ch9Dls",
      "dp": "3883SYB3gmaZZaL9sFi0865PPT5x1-nsOlio77PaSh95SG9GU3yP96ypwkAGT4vqRP9Whe1g_r2wJ8ZDUjoEPxWIw5ysmB8cfTUiK1zhXDQJvQN4w5iow4dV3rp0VcWwwhAM7k71YcBKOOlgm8btugzKgypah63Qz2USmk8WQRE",
      "dq": "HbyAmM1AQWmHwRLovnkwtDwUDDzsbtve2iD448WAvhLiPnqYrxtxo_AEIvNPuoU4Fjw5M_mk_-BX9qR0PEduZfMszW4Uhd231mcSdG5Qmip8sAybsfct1V0HJWGxisS9e9x7GpFA96H7wL3fv02XnOw62XjZd8T5hB3OjUwRYik",
      "qi": "cBQVKSQjUdrCtMJdKGiCVeu_aUmFUQS0ytosgNO1LT0qyZdVNC2AtxgH9OIxKFNsSpZPeUBIWMvvmZk1NYBhUYaksK5Rqux5oM8yNneO9wvqnGipQjUg5I3L1yXTiNMoIVGhRBOwjDXC0qWfhXuzQ6cJJNRrCZEHlyC43TwyBF0"
    },
    {
      "kty": "EC",
      "kid": "o5kHtA",
      "use": "enc",
      "alg": "ECDH-ES",
      "x": "MAkYWBWYUM830KIy9sjGxvurGU598Pkj80K2rGOw5C4",
      "y": "mXTwYcKflVl9Oh9qwcTQtpVLw8Ze3AC5S-XKOzIhUFU",
      "crv": "P-256",
      "d": "xocdnt58Na2xFC3wNuzD5NIW-GnC1w2mfx9OVV5u2ig"
    }
  ]
}
2021-08-25 20:47:32 SUCCESS
ValidateMTLSCertificates2Header
MTLS certificates header is valid
2021-08-25 20:47:32 SUCCESS
ExtractMTLSCertificates2FromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
ca
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
2021-08-25 20:47:32 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-08-25 20:47:32 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "55zSYQ",
      "use": "sig",
      "alg": "PS256",
      "n": "1Ju18TJ6X9RzfOCYfRZcXLAKhkyV5H3OkuLGBm0D5XL7r1XigsfE_L3a4zcBPuSPO1xhFF1pTGsqGGqTHF82zuqZPLKEO6aGGyoDlLQTKmjh17uYvF1JNUu5goW1mjYe2WuZX8SWIhVl7HzMqCCiK3ji2JiqLuYGtP73iEVWf869MPBH3OGvQphnbdzziQCaqWbv0ipPkKIdl8v1A-3MAmZftYe33mMhe9D1qP7fe3QtfVQ4sHi5z_2wXf1W2JakOYb6rbG0EblHCBmF_zuRX5rKWzG3uYHiyObYyAHqtWETKMN53DdqjjC2l9x45OT1lRhNgLpg2hlBJnnur5UR4w",
      "e": "AQAB",
      "d": "Qp0_FoGQYjI4tSnR3W-CJPBre8THOj5I2TEAhsblb6DlRvyL6hoZmG8MBCEZ3NDUJ-8745uZAH6bQ-cwjLUwgQh0VtZAJEh6wEwbrx3021bdXDDFHE_GPlKpn0Gxss2-QLU76wu3VpqJwt0fapY--Yv415CN0f_0ngU9HY9MGOLli2rMBy_u3pGkotI_RLPmvpP61bA0xwaH17BkfDeDnjbFqaICddxDUTRMpogcTba7BbFWbK-W1M-OkC-wvcDPvZ7S_0WZE7E8gi4Fsgu86o6WHdK1yTTf1mwKhJBeXuWAp05Nzt7OQjyiZExR-wXnnkUGVyiXJjs6XPaA28njoQ",
      "p": "8k6JpkJMbBYBy0qBETA95c-MNRKuE6fRIGgU8ZUU6ICk_9d2uHLXV9bvCXjcCwFAQny0HHgq4gK4BQjIuoolvpfJou8CNf63ioqXURVXvXDl3E_m_nmg3VSySaMgZ12zWh-_Tku3GDSgPAiZjWzaZCMacrqO3XvwHvKRj3-B8Rk",
      "q": "4J-F4XxQN_9ThZEbxu6gNE8WFJC4eCkBea4tssNZc6e5sj7D-YMmVycRrGu4LP8DwsDW0ITtR1Ppi4UZ3pauXcJ4pCRo7Jd6g-v18_vmSMuuKg5GENg4FCYjPjmQtuQI_N8KPYCiqsD0ob6gq0vb9UFDFuNn__Q8OdAo7ch9Dls",
      "dp": "3883SYB3gmaZZaL9sFi0865PPT5x1-nsOlio77PaSh95SG9GU3yP96ypwkAGT4vqRP9Whe1g_r2wJ8ZDUjoEPxWIw5ysmB8cfTUiK1zhXDQJvQN4w5iow4dV3rp0VcWwwhAM7k71YcBKOOlgm8btugzKgypah63Qz2USmk8WQRE",
      "dq": "HbyAmM1AQWmHwRLovnkwtDwUDDzsbtve2iD448WAvhLiPnqYrxtxo_AEIvNPuoU4Fjw5M_mk_-BX9qR0PEduZfMszW4Uhd231mcSdG5Qmip8sAybsfct1V0HJWGxisS9e9x7GpFA96H7wL3fv02XnOw62XjZd8T5hB3OjUwRYik",
      "qi": "cBQVKSQjUdrCtMJdKGiCVeu_aUmFUQS0ytosgNO1LT0qyZdVNC2AtxgH9OIxKFNsSpZPeUBIWMvvmZk1NYBhUYaksK5Rqux5oM8yNneO9wvqnGipQjUg5I3L1yXTiNMoIVGhRBOwjDXC0qWfhXuzQ6cJJNRrCZEHlyC43TwyBF0"
    },
    {
      "kty": "EC",
      "kid": "o5kHtA",
      "use": "enc",
      "alg": "ECDH-ES",
      "x": "MAkYWBWYUM830KIy9sjGxvurGU598Pkj80K2rGOw5C4",
      "y": "mXTwYcKflVl9Oh9qwcTQtpVLw8Ze3AC5S-XKOzIhUFU",
      "crv": "P-256",
      "d": "xocdnt58Na2xFC3wNuzD5NIW-GnC1w2mfx9OVV5u2ig"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "55zSYQ",
      "alg": "PS256",
      "n": "1Ju18TJ6X9RzfOCYfRZcXLAKhkyV5H3OkuLGBm0D5XL7r1XigsfE_L3a4zcBPuSPO1xhFF1pTGsqGGqTHF82zuqZPLKEO6aGGyoDlLQTKmjh17uYvF1JNUu5goW1mjYe2WuZX8SWIhVl7HzMqCCiK3ji2JiqLuYGtP73iEVWf869MPBH3OGvQphnbdzziQCaqWbv0ipPkKIdl8v1A-3MAmZftYe33mMhe9D1qP7fe3QtfVQ4sHi5z_2wXf1W2JakOYb6rbG0EblHCBmF_zuRX5rKWzG3uYHiyObYyAHqtWETKMN53DdqjjC2l9x45OT1lRhNgLpg2hlBJnnur5UR4w"
    },
    {
      "kty": "EC",
      "use": "enc",
      "crv": "P-256",
      "kid": "o5kHtA",
      "x": "MAkYWBWYUM830KIy9sjGxvurGU598Pkj80K2rGOw5C4",
      "y": "mXTwYcKflVl9Oh9qwcTQtpVLw8Ze3AC5S-XKOzIhUFU",
      "alg": "ECDH-ES"
    }
  ]
}
2021-08-25 20:47:32 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-08-25 20:47:32 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-08-25 20:47:32 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "ES256",
  "PS256"
]
2021-08-25 20:47:32 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "55zSYQ",
      "use": "sig",
      "alg": "PS256",
      "n": "1Ju18TJ6X9RzfOCYfRZcXLAKhkyV5H3OkuLGBm0D5XL7r1XigsfE_L3a4zcBPuSPO1xhFF1pTGsqGGqTHF82zuqZPLKEO6aGGyoDlLQTKmjh17uYvF1JNUu5goW1mjYe2WuZX8SWIhVl7HzMqCCiK3ji2JiqLuYGtP73iEVWf869MPBH3OGvQphnbdzziQCaqWbv0ipPkKIdl8v1A-3MAmZftYe33mMhe9D1qP7fe3QtfVQ4sHi5z_2wXf1W2JakOYb6rbG0EblHCBmF_zuRX5rKWzG3uYHiyObYyAHqtWETKMN53DdqjjC2l9x45OT1lRhNgLpg2hlBJnnur5UR4w",
      "e": "AQAB",
      "d": "Qp0_FoGQYjI4tSnR3W-CJPBre8THOj5I2TEAhsblb6DlRvyL6hoZmG8MBCEZ3NDUJ-8745uZAH6bQ-cwjLUwgQh0VtZAJEh6wEwbrx3021bdXDDFHE_GPlKpn0Gxss2-QLU76wu3VpqJwt0fapY--Yv415CN0f_0ngU9HY9MGOLli2rMBy_u3pGkotI_RLPmvpP61bA0xwaH17BkfDeDnjbFqaICddxDUTRMpogcTba7BbFWbK-W1M-OkC-wvcDPvZ7S_0WZE7E8gi4Fsgu86o6WHdK1yTTf1mwKhJBeXuWAp05Nzt7OQjyiZExR-wXnnkUGVyiXJjs6XPaA28njoQ",
      "p": "8k6JpkJMbBYBy0qBETA95c-MNRKuE6fRIGgU8ZUU6ICk_9d2uHLXV9bvCXjcCwFAQny0HHgq4gK4BQjIuoolvpfJou8CNf63ioqXURVXvXDl3E_m_nmg3VSySaMgZ12zWh-_Tku3GDSgPAiZjWzaZCMacrqO3XvwHvKRj3-B8Rk",
      "q": "4J-F4XxQN_9ThZEbxu6gNE8WFJC4eCkBea4tssNZc6e5sj7D-YMmVycRrGu4LP8DwsDW0ITtR1Ppi4UZ3pauXcJ4pCRo7Jd6g-v18_vmSMuuKg5GENg4FCYjPjmQtuQI_N8KPYCiqsD0ob6gq0vb9UFDFuNn__Q8OdAo7ch9Dls",
      "dp": "3883SYB3gmaZZaL9sFi0865PPT5x1-nsOlio77PaSh95SG9GU3yP96ypwkAGT4vqRP9Whe1g_r2wJ8ZDUjoEPxWIw5ysmB8cfTUiK1zhXDQJvQN4w5iow4dV3rp0VcWwwhAM7k71YcBKOOlgm8btugzKgypah63Qz2USmk8WQRE",
      "dq": "HbyAmM1AQWmHwRLovnkwtDwUDDzsbtve2iD448WAvhLiPnqYrxtxo_AEIvNPuoU4Fjw5M_mk_-BX9qR0PEduZfMszW4Uhd231mcSdG5Qmip8sAybsfct1V0HJWGxisS9e9x7GpFA96H7wL3fv02XnOw62XjZd8T5hB3OjUwRYik",
      "qi": "cBQVKSQjUdrCtMJdKGiCVeu_aUmFUQS0ytosgNO1LT0qyZdVNC2AtxgH9OIxKFNsSpZPeUBIWMvvmZk1NYBhUYaksK5Rqux5oM8yNneO9wvqnGipQjUg5I3L1yXTiNMoIVGhRBOwjDXC0qWfhXuzQ6cJJNRrCZEHlyC43TwyBF0"
    },
    {
      "kty": "EC",
      "kid": "o5kHtA",
      "use": "enc",
      "alg": "ECDH-ES",
      "x": "MAkYWBWYUM830KIy9sjGxvurGU598Pkj80K2rGOw5C4",
      "y": "mXTwYcKflVl9Oh9qwcTQtpVLw8Ze3AC5S-XKOzIhUFU",
      "crv": "P-256",
      "d": "xocdnt58Na2xFC3wNuzD5NIW-GnC1w2mfx9OVV5u2ig"
    }
  ]
}
2021-08-25 20:47:32 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2021-08-25 20:47:32 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://par-what-is-it-good-for.ping-eng.com:3000/ext/au/cdr/mock
cdrVersion
3
2021-08-25 20:47:32 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://par-what-is-it-good-for.ping-eng.com:3000/ext/au/cdr/mock
2021-08-25 20:47:32 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
2021-08-25 20:47:32 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
accounts_request_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
2021-08-25 20:47:32
fapi-rw-id2-ensure-client-assertion-with-wrong-aud-fails
Setup Done
Make request to authorization endpoint
2021-08-25 20:47:32 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
c__fapi-jwt-jar1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
2021-08-25 20:47:32 SUCCESS
AddCdrAcrClaimToAuthorizationEndpointRequest
Added acr claim to authorization_endpoint_request
authorization_endpoint_request
{
  "client_id": "c__fapi-jwt-jar1",
  "redirect_uri": "https://www.certification.openid.net/test/a/pi/callback",
  "scope": "openid other",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:cds.au:cdr:2",
        "essential": true
      }
    }
  }
}
2021-08-25 20:47:32 SUCCESS
AddCdrSharingDurationClaimToAuthorizationEndpointRequest
Added sharing_duration claim to authorization_endpoint_request
authorization_endpoint_request
{
  "client_id": "c__fapi-jwt-jar1",
  "redirect_uri": "https://www.certification.openid.net/test/a/pi/callback",
  "scope": "openid other",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:cds.au:cdr:2",
        "essential": true
      }
    },
    "sharing_duration": 7776000
  }
}
2021-08-25 20:47:32
CreateRandomStateValue
Created state value
requested_state_length
10
state
QRFx3kkqHG
2021-08-25 20:47:32 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
c__fapi-jwt-jar1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:cds.au:cdr:2",
      "essential": true
    }
  },
  "sharing_duration": 7776000
}
state
QRFx3kkqHG
2021-08-25 20:47:32
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
CqQms16M6N
2021-08-25 20:47:32 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
c__fapi-jwt-jar1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:cds.au:cdr:2",
      "essential": true
    }
  },
  "sharing_duration": 7776000
}
state
QRFx3kkqHG
nonce
CqQms16M6N
2021-08-25 20:47:32 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToCodeIdtoken
Added response_type parameter to request
client_id
c__fapi-jwt-jar1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:cds.au:cdr:2",
      "essential": true
    }
  },
  "sharing_duration": 7776000
}
state
QRFx3kkqHG
nonce
CqQms16M6N
response_type
code id_token
2021-08-25 20:47:32 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "client_id": "c__fapi-jwt-jar1",
  "redirect_uri": "https://www.certification.openid.net/test/a/pi/callback",
  "scope": "openid other",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:cds.au:cdr:2",
        "essential": true
      }
    },
    "sharing_duration": 7776000
  },
  "state": "QRFx3kkqHG",
  "nonce": "CqQms16M6N",
  "response_type": "code id_token"
}
2021-08-25 20:47:32 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.629924752E9
2021-08-25 20:47:32 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://par-what-is-it-good-for.ping-eng.com:9031
2021-08-25 20:47:32 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
c__fapi-jwt-jar1
2021-08-25 20:47:32 SUCCESS
AddClientIdToRequestObject
Added client_id to request object claims
client_id
c__fapi-jwt-jar1
2021-08-25 20:47:32 SUCCESS
SignRequestObject
Signed the request object
claims
{"aud":"https:\/\/par-what-is-it-good-for.ping-eng.com:9031","scope":"openid other","claims":{"sharing_duration":7776000,"id_token":{"acr":{"value":"urn:cds.au:cdr:2","essential":true}}},"iss":"c__fapi-jwt-jar1","response_type":"code id_token","redirect_uri":"https:\/\/www.certification.openid.net\/test\/a\/pi\/callback","state":"QRFx3kkqHG","exp":1629924752,"nonce":"CqQms16M6N","client_id":"c__fapi-jwt-jar1"}
header
{"kid":"fmzJBg","alg":"PS256"}
request_object
eyJraWQiOiJmbXpKQmciLCJhbGciOiJQUzI1NiJ9.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.lLn7xAy4eCbVCgDFJgvmPi7w65ThYmIm3kB14KOG4XAaG2Xsc8NSx8KhOgMMgFlOR00DtPjuEybpAedjwWwrYKANxVJ1dOjvGFt1US8fSVgyEata-ApmAI6r6njxuPzmmbnNRIGvB0qyvq7ItdzNG9AiII4176-_ra6DyLiVLN4OwjTE2RFLkxIKpcR1kAX6jIxkQSUUxoR_y2BQ2oERBIxT25b7taa8Gz9mSUaBaNMXV3u0AOKFaGHCjM1PJEO3T-lDbTeBVFce_H-cJgjcOM6pwCpKVwbDA2qirT-vn8jv7kv5PYgM0ERx-LgMnEx_MCvoddcErFifgXnT-ZJPtQ
key
{"p":"yjTNjtpFbhdrWZDWh8588XUoViHHKU7PDDALOjAziA9oHeEyJNNwi8Rw5EA9zePOxFSJ1U9H1HTZ-zhUcBIL0h8YIw7zcOJuz4XgH43WgTA_PBaUtr4LOnASPQIDROYD-Bwj57yLwUeESKN9_iWh89fIna1uCp0Yi8yGBDvZIUE","kty":"RSA","q":"wW-Ipp0_ro-W5x-4-YBxp6SIZ92y7TMxwm-DomDYwZRj-b_fdSonySF-Wmy3cynEw7Lo9Y31OckyxrSkFWWK0nshEe4Nx0pKpZyMVJEcVn7MvsSeU-YFvXwlL91xigsdK6k9qEwfp5_Og0vF5OTp1fPxBmLz82iyVX0Ac6wYa28","d":"MGOhun5JyXNBeCM4FJgEIxUTIIlMYAgWwqvhpSEMuKdmSgMAjvFzjXjO4lyUu8cAFZiucYuPfhKDqnqhpYyqZz0K7qPJfQdiegb-oHj4GImx-LBJ98K7qUx53SskhK7sYybJgp_BLpN6UUB8PTs38OieJz03I5PPh4h5cOO5x8XtP46wMRCQmrQsPKVdGfGTPhrbnHVt81p-52PxdqyMJPD10T3A7bQy0l5HQPgcDewp_JRWobbEFtMXckmdRimgxMmbIJxoIb-RvyWch4u89ep5jx9qbkDDfBOXPpiICRm-RarkBNDJ8ptgo2AvyRG7BHDQyxiqZdBGUw00Uuk-AQ","e":"AQAB","use":"sig","kid":"fmzJBg","qi":"eq8KkKza25CFTfe9oMs1L0JxNy7TqpBFuHo4_DSXg6Z2lObefpixYTBtCbdPOCUNA7bjhFN94btd-r08NWGmULj_3-5f3WX1xlcHLrr2HLSl0IxyEcO7cHomtGCxErxXUsR9h--Bb-3AW237DIEbmBCVhX-DOTQeX5mtYF1iJE8","dp":"W7Dx_XMwxKlN_oFVJqQVuBAeSGBsxWh9LtOiY7Jzy6Dg35u8d0KB6H8digMvg2tn2VNUZSvcMJUEO4zhjShBv_hlo5AmB-xFv0i_xs80k8RjCEZdDTjEMq2bN5rwDJAZAKsSBQVUgkKB08Z_XX2HIOGakRWRrrJp7QrDQqw424E","alg":"PS256","dq":"mP_cSVUlsq_WfzdjOs3yl9QXJHiB9wZAPHex2bTanbr-nOO8HtNaJsd8Ro-pRsjp3pTbmKZRKgTPScZF5rqrZDKKBMGTWmeTxYyenqEslemzjsy8IsZVEfxo-YQhMzv5NbimkUCs5QwM72L2w0ahAl7x7MhGBuhv7hhyTAv6QLc","n":"mMnnzXsk2aFQA5wl_FmzRdL7-XGUqcSV6gd0GRhxlyoR4HECV74eedAZmD3a54bIKPUlkk2qklpOAtcm7Xp_oPlEkmkvIAd-KtdOfFHN_iW5FeIiu4gPJXJyelBv49Kf-FfGfh2_Jy4jraUX_3_9YwXCuVgkUggH1hCv8ia2MECPHRu-XmrvgHA1J8YkAc4NLpXG60_JwIQqQwpbowfh22lbffx2qPMqAh5Untcfexpc9_xg3kqxwjVjaqP0nc9EOzu41tBJw7xQEWUl47_vVfDKLqMZzq6Q-H1TJZuq5ecpyFsFmIpwS-KAI_ccbvY0iNMc7xl88XM2lE-_fiOWLw"}
2021-08-25 20:47:32 SUCCESS
BuildRequestObjectByValueRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiJmbXpKQmciLCJhbGciOiJQUzI1NiJ9.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.lLn7xAy4eCbVCgDFJgvmPi7w65ThYmIm3kB14KOG4XAaG2Xsc8NSx8KhOgMMgFlOR00DtPjuEybpAedjwWwrYKANxVJ1dOjvGFt1US8fSVgyEata-ApmAI6r6njxuPzmmbnNRIGvB0qyvq7ItdzNG9AiII4176-_ra6DyLiVLN4OwjTE2RFLkxIKpcR1kAX6jIxkQSUUxoR_y2BQ2oERBIxT25b7taa8Gz9mSUaBaNMXV3u0AOKFaGHCjM1PJEO3T-lDbTeBVFce_H-cJgjcOM6pwCpKVwbDA2qirT-vn8jv7kv5PYgM0ERx-LgMnEx_MCvoddcErFifgXnT-ZJPtQ&client_id=c__fapi-jwt-jar1&redirect_uri=https://www.certification.openid.net/test/a/pi/callback&scope=openid%20other&response_type=code%20id_token
2021-08-25 20:47:32 REDIRECT
fapi-rw-id2-ensure-client-assertion-with-wrong-aud-fails
Redirecting to authorization endpoint
redirect_to
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2?request=eyJraWQiOiJmbXpKQmciLCJhbGciOiJQUzI1NiJ9.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.lLn7xAy4eCbVCgDFJgvmPi7w65ThYmIm3kB14KOG4XAaG2Xsc8NSx8KhOgMMgFlOR00DtPjuEybpAedjwWwrYKANxVJ1dOjvGFt1US8fSVgyEata-ApmAI6r6njxuPzmmbnNRIGvB0qyvq7ItdzNG9AiII4176-_ra6DyLiVLN4OwjTE2RFLkxIKpcR1kAX6jIxkQSUUxoR_y2BQ2oERBIxT25b7taa8Gz9mSUaBaNMXV3u0AOKFaGHCjM1PJEO3T-lDbTeBVFce_H-cJgjcOM6pwCpKVwbDA2qirT-vn8jv7kv5PYgM0ERx-LgMnEx_MCvoddcErFifgXnT-ZJPtQ&client_id=c__fapi-jwt-jar1&redirect_uri=https://www.certification.openid.net/test/a/pi/callback&scope=openid%20other&response_type=code%20id_token
2021-08-25 20:47:40 INCOMING
fapi-rw-id2-ensure-client-assertion-with-wrong-aud-fails
Incoming HTTP request to test instance vVjEm2Gh1mCq6g9
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Firefox/91.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://par-what-is-it-good-for.ping-eng.com:9031/",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1629918002.1629920868.308; __utmz\u003d201319536.1626984986.282.70.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; JSESSIONID\u003d5C1CBD6B3D813EDA466CECE6A68D46D7; __utmc\u003d201319536; login_tab\u003dgoogleplus; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell",
  "upgrade-insecure-requests": "1",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "sec-fetch-user": "?1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
callback
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-08-25 20:47:40 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/FwTtcIId7szV0gzch7Dg",
  "fullUrl": "https://www.certification.openid.net/test/a/pi/implicit/FwTtcIId7szV0gzch7Dg"
}
2021-08-25 20:47:41 OUTGOING
fapi-rw-id2-ensure-client-assertion-with-wrong-aud-fails
Response to HTTP request to test instance vVjEm2Gh1mCq6g9
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/pi/implicit/FwTtcIId7szV0gzch7Dg, returnUrl=/log-detail.html?log=vVjEm2Gh1mCq6g9}]
outgoing_path
callback
2021-08-25 20:47:41 INCOMING
fapi-rw-id2-ensure-client-assertion-with-wrong-aud-fails
Incoming HTTP request to test instance vVjEm2Gh1mCq6g9
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Firefox/91.0",
  "accept": "*/*",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "content-type": "text/plain",
  "x-requested-with": "XMLHttpRequest",
  "origin": "https://www.certification.openid.net",
  "referer": "https://www.certification.openid.net/test/a/pi/callback",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1629918002.1629920868.308; __utmz\u003d201319536.1626984986.282.70.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; JSESSIONID\u003d5C1CBD6B3D813EDA466CECE6A68D46D7; __utmc\u003d201319536; login_tab\u003dgoogleplus; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "1727",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
implicit/FwTtcIId7szV0gzch7Dg
incoming_body_form_params
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
#code=kL0q-MDp1SUBiEG4QlIV-HshzNci15g3ApbNzHyu&id_token=eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkExMjhDQkMtSFMyNTYiLCJjdHkiOiJKV1QiLCJraWQiOiJ4OUx3ZmcifQ.Gr-j0_2ZxC55KZIcwVmeYcPsPMWRApEiAIcf7ynG58mpuKFq35Abe6No26XqGTyIUEpJOIh4twq8YW07tQ9wdC8dS320U_bngr6hfwbLnAnMqpXOeraXMG7TfmGkKvqvd2ThbQLiICJvTBP_EOovIHI9NtW6yq4Q7HmIhkSQ83_v0pgFrU6mdCtDM-o_4ed9-5JzJlV9e2dB__p5PU2v50bQo-fHfwK4Q9zHK3zxJ5mmHlOT9dEE66ckJQKdD9Zd_7aZAqGfjGC_oYXyPwu1J-F45yd62JSootGkV73PqB01TMoJ5Q6MjXANCUbVDoLkJEjr6BtB4iZwAbeJPruEBw.XHmUrL2dYN3dPAbtuNSWsA.b0iA2cjA3ISCyqk9pIUK2D7amt0UFJ0N5Tw3HCmK5XA_64SYyxKNPIKKA0socjU2HxD6R1eJgsUjReucz1nF4rvqOsm0qReYG34bz_LUygfjGf367mIY-gmDoqRJtw1q-PHkhcSCVMP9zuons39p2SXeIuk0cNXi-41nkXpmphj1E1CsVFwImkhxyg5TQ01Q5fJffWVQvoLzKkS3VuOfil_8Hghu1beE7OonKS9fIIkpn2SBqV0SE3F_GL4codUIJc833byzp3egh_2oiAOdyT_S6DuKvrYxDCGa4jcab7_5xx-eknsOMKoqNxMY1YURO_9Hq68RdQdXH_nRj1M8hq49adLyY5Qj1rTuO8Sth8SgVa3W6-31WfsoyWxQe6PQyl_LgAVwPbdXWOoDHDyJq5Fu-6Mu5mcVzTL0NP1z8KuosbxeY2NRLlA5HmtxLpr0HdKUoct4wvRHxB9T_v7xFF9Se83gPbcOoQoYdPsfRE9DV1S_230RWFJB60mPaWKMEIqhTpiW42UEMYH-eCQD9_pskmv85db75boCljVu16wfmQOKn1v8bkQHffbouDiegocabz-kqjvPXI7Eyhlg1_BRfalKTXyeGKWZjRMYgDWKzwQhSLgbXQCYr4LU3gAFqFUipIGKHxbLa2dEgzFwzHBUdh8OJqbNHOablAytmeN_jSyBqAQhQIeWySxlxq0xsLM2qcL2C_eC-qIvXcxT66uiGOCiLcfwUBQLHXr-1SsKvBGGmHxQ-BSJ6r9Pd2jv_wr5ipSz_RN-FJuUElEjIjva1_C63SjM45x-DcQyM-5nSgsk7ZWPeV7Z6j2RzJcKgxWAGG_Bpg9awo4p7WpYsqJQXo-Azee3erQOt9R6caQcp6-I5q2ucsZD3tPKOOUEGCev1N6n_2i_V4P2x0t05EEvUR7ziGkJH47Txc8t4aI8-Oa3JFmRwQI5ljuc-hGMwZrCOg7eHAEkl5AZaYP880g9B_0fluAGcPaFZwj9ZMsp5gDkkCi8sX7TXtdkPucLEyp7stOqgDW8G88o5WQlZAN2wIKP-65v6N0WaJRnCIzyYZy6fD2VQdokEFxfBxVkxdg75EAtOsku3Jv2-RpNV4Ed7KEVo-XOt4QdgZkFZ8QKi-CykWqvpWuagOifSgIwQuJibm9iJF6kZAu2RGyvQA.pGfKBvjTuY0BlauDPwGWBw&state=QRFx3kkqHG
2021-08-25 20:47:41 OUTGOING
fapi-rw-id2-ensure-client-assertion-with-wrong-aud-fails
Response to HTTP request to test instance vVjEm2Gh1mCq6g9
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/FwTtcIId7szV0gzch7Dg
2021-08-25 20:47:41
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "code",
    "value": "kL0q-MDp1SUBiEG4QlIV-HshzNci15g3ApbNzHyu"
  },
  {
    "name": "id_token",
    "value": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkExMjhDQkMtSFMyNTYiLCJjdHkiOiJKV1QiLCJraWQiOiJ4OUx3ZmcifQ.Gr-j0_2ZxC55KZIcwVmeYcPsPMWRApEiAIcf7ynG58mpuKFq35Abe6No26XqGTyIUEpJOIh4twq8YW07tQ9wdC8dS320U_bngr6hfwbLnAnMqpXOeraXMG7TfmGkKvqvd2ThbQLiICJvTBP_EOovIHI9NtW6yq4Q7HmIhkSQ83_v0pgFrU6mdCtDM-o_4ed9-5JzJlV9e2dB__p5PU2v50bQo-fHfwK4Q9zHK3zxJ5mmHlOT9dEE66ckJQKdD9Zd_7aZAqGfjGC_oYXyPwu1J-F45yd62JSootGkV73PqB01TMoJ5Q6MjXANCUbVDoLkJEjr6BtB4iZwAbeJPruEBw.XHmUrL2dYN3dPAbtuNSWsA.b0iA2cjA3ISCyqk9pIUK2D7amt0UFJ0N5Tw3HCmK5XA_64SYyxKNPIKKA0socjU2HxD6R1eJgsUjReucz1nF4rvqOsm0qReYG34bz_LUygfjGf367mIY-gmDoqRJtw1q-PHkhcSCVMP9zuons39p2SXeIuk0cNXi-41nkXpmphj1E1CsVFwImkhxyg5TQ01Q5fJffWVQvoLzKkS3VuOfil_8Hghu1beE7OonKS9fIIkpn2SBqV0SE3F_GL4codUIJc833byzp3egh_2oiAOdyT_S6DuKvrYxDCGa4jcab7_5xx-eknsOMKoqNxMY1YURO_9Hq68RdQdXH_nRj1M8hq49adLyY5Qj1rTuO8Sth8SgVa3W6-31WfsoyWxQe6PQyl_LgAVwPbdXWOoDHDyJq5Fu-6Mu5mcVzTL0NP1z8KuosbxeY2NRLlA5HmtxLpr0HdKUoct4wvRHxB9T_v7xFF9Se83gPbcOoQoYdPsfRE9DV1S_230RWFJB60mPaWKMEIqhTpiW42UEMYH-eCQD9_pskmv85db75boCljVu16wfmQOKn1v8bkQHffbouDiegocabz-kqjvPXI7Eyhlg1_BRfalKTXyeGKWZjRMYgDWKzwQhSLgbXQCYr4LU3gAFqFUipIGKHxbLa2dEgzFwzHBUdh8OJqbNHOablAytmeN_jSyBqAQhQIeWySxlxq0xsLM2qcL2C_eC-qIvXcxT66uiGOCiLcfwUBQLHXr-1SsKvBGGmHxQ-BSJ6r9Pd2jv_wr5ipSz_RN-FJuUElEjIjva1_C63SjM45x-DcQyM-5nSgsk7ZWPeV7Z6j2RzJcKgxWAGG_Bpg9awo4p7WpYsqJQXo-Azee3erQOt9R6caQcp6-I5q2ucsZD3tPKOOUEGCev1N6n_2i_V4P2x0t05EEvUR7ziGkJH47Txc8t4aI8-Oa3JFmRwQI5ljuc-hGMwZrCOg7eHAEkl5AZaYP880g9B_0fluAGcPaFZwj9ZMsp5gDkkCi8sX7TXtdkPucLEyp7stOqgDW8G88o5WQlZAN2wIKP-65v6N0WaJRnCIzyYZy6fD2VQdokEFxfBxVkxdg75EAtOsku3Jv2-RpNV4Ed7KEVo-XOt4QdgZkFZ8QKi-CykWqvpWuagOifSgIwQuJibm9iJF6kZAu2RGyvQA.pGfKBvjTuY0BlauDPwGWBw"
  },
  {
    "name": "state",
    "value": "QRFx3kkqHG"
  }
]
2021-08-25 20:47:41 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
code
kL0q-MDp1SUBiEG4QlIV-HshzNci15g3ApbNzHyu
id_token
eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkExMjhDQkMtSFMyNTYiLCJjdHkiOiJKV1QiLCJraWQiOiJ4OUx3ZmcifQ.Gr-j0_2ZxC55KZIcwVmeYcPsPMWRApEiAIcf7ynG58mpuKFq35Abe6No26XqGTyIUEpJOIh4twq8YW07tQ9wdC8dS320U_bngr6hfwbLnAnMqpXOeraXMG7TfmGkKvqvd2ThbQLiICJvTBP_EOovIHI9NtW6yq4Q7HmIhkSQ83_v0pgFrU6mdCtDM-o_4ed9-5JzJlV9e2dB__p5PU2v50bQo-fHfwK4Q9zHK3zxJ5mmHlOT9dEE66ckJQKdD9Zd_7aZAqGfjGC_oYXyPwu1J-F45yd62JSootGkV73PqB01TMoJ5Q6MjXANCUbVDoLkJEjr6BtB4iZwAbeJPruEBw.XHmUrL2dYN3dPAbtuNSWsA.b0iA2cjA3ISCyqk9pIUK2D7amt0UFJ0N5Tw3HCmK5XA_64SYyxKNPIKKA0socjU2HxD6R1eJgsUjReucz1nF4rvqOsm0qReYG34bz_LUygfjGf367mIY-gmDoqRJtw1q-PHkhcSCVMP9zuons39p2SXeIuk0cNXi-41nkXpmphj1E1CsVFwImkhxyg5TQ01Q5fJffWVQvoLzKkS3VuOfil_8Hghu1beE7OonKS9fIIkpn2SBqV0SE3F_GL4codUIJc833byzp3egh_2oiAOdyT_S6DuKvrYxDCGa4jcab7_5xx-eknsOMKoqNxMY1YURO_9Hq68RdQdXH_nRj1M8hq49adLyY5Qj1rTuO8Sth8SgVa3W6-31WfsoyWxQe6PQyl_LgAVwPbdXWOoDHDyJq5Fu-6Mu5mcVzTL0NP1z8KuosbxeY2NRLlA5HmtxLpr0HdKUoct4wvRHxB9T_v7xFF9Se83gPbcOoQoYdPsfRE9DV1S_230RWFJB60mPaWKMEIqhTpiW42UEMYH-eCQD9_pskmv85db75boCljVu16wfmQOKn1v8bkQHffbouDiegocabz-kqjvPXI7Eyhlg1_BRfalKTXyeGKWZjRMYgDWKzwQhSLgbXQCYr4LU3gAFqFUipIGKHxbLa2dEgzFwzHBUdh8OJqbNHOablAytmeN_jSyBqAQhQIeWySxlxq0xsLM2qcL2C_eC-qIvXcxT66uiGOCiLcfwUBQLHXr-1SsKvBGGmHxQ-BSJ6r9Pd2jv_wr5ipSz_RN-FJuUElEjIjva1_C63SjM45x-DcQyM-5nSgsk7ZWPeV7Z6j2RzJcKgxWAGG_Bpg9awo4p7WpYsqJQXo-Azee3erQOt9R6caQcp6-I5q2ucsZD3tPKOOUEGCev1N6n_2i_V4P2x0t05EEvUR7ziGkJH47Txc8t4aI8-Oa3JFmRwQI5ljuc-hGMwZrCOg7eHAEkl5AZaYP880g9B_0fluAGcPaFZwj9ZMsp5gDkkCi8sX7TXtdkPucLEyp7stOqgDW8G88o5WQlZAN2wIKP-65v6N0WaJRnCIzyYZy6fD2VQdokEFxfBxVkxdg75EAtOsku3Jv2-RpNV4Ed7KEVo-XOt4QdgZkFZ8QKi-CykWqvpWuagOifSgIwQuJibm9iJF6kZAu2RGyvQA.pGfKBvjTuY0BlauDPwGWBw
state
QRFx3kkqHG
2021-08-25 20:47:41 REDIRECT-IN
fapi-rw-id2-ensure-client-assertion-with-wrong-aud-fails
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Firefox/91.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://par-what-is-it-good-for.ping-eng.com:9031/",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1629918002.1629920868.308; __utmz\u003d201319536.1626984986.282.70.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; JSESSIONID\u003d5C1CBD6B3D813EDA466CECE6A68D46D7; __utmc\u003d201319536; login_tab\u003dgoogleplus; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell",
  "upgrade-insecure-requests": "1",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "sec-fetch-user": "?1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "code": "kL0q-MDp1SUBiEG4QlIV-HshzNci15g3ApbNzHyu",
  "id_token": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkExMjhDQkMtSFMyNTYiLCJjdHkiOiJKV1QiLCJraWQiOiJ4OUx3ZmcifQ.Gr-j0_2ZxC55KZIcwVmeYcPsPMWRApEiAIcf7ynG58mpuKFq35Abe6No26XqGTyIUEpJOIh4twq8YW07tQ9wdC8dS320U_bngr6hfwbLnAnMqpXOeraXMG7TfmGkKvqvd2ThbQLiICJvTBP_EOovIHI9NtW6yq4Q7HmIhkSQ83_v0pgFrU6mdCtDM-o_4ed9-5JzJlV9e2dB__p5PU2v50bQo-fHfwK4Q9zHK3zxJ5mmHlOT9dEE66ckJQKdD9Zd_7aZAqGfjGC_oYXyPwu1J-F45yd62JSootGkV73PqB01TMoJ5Q6MjXANCUbVDoLkJEjr6BtB4iZwAbeJPruEBw.XHmUrL2dYN3dPAbtuNSWsA.b0iA2cjA3ISCyqk9pIUK2D7amt0UFJ0N5Tw3HCmK5XA_64SYyxKNPIKKA0socjU2HxD6R1eJgsUjReucz1nF4rvqOsm0qReYG34bz_LUygfjGf367mIY-gmDoqRJtw1q-PHkhcSCVMP9zuons39p2SXeIuk0cNXi-41nkXpmphj1E1CsVFwImkhxyg5TQ01Q5fJffWVQvoLzKkS3VuOfil_8Hghu1beE7OonKS9fIIkpn2SBqV0SE3F_GL4codUIJc833byzp3egh_2oiAOdyT_S6DuKvrYxDCGa4jcab7_5xx-eknsOMKoqNxMY1YURO_9Hq68RdQdXH_nRj1M8hq49adLyY5Qj1rTuO8Sth8SgVa3W6-31WfsoyWxQe6PQyl_LgAVwPbdXWOoDHDyJq5Fu-6Mu5mcVzTL0NP1z8KuosbxeY2NRLlA5HmtxLpr0HdKUoct4wvRHxB9T_v7xFF9Se83gPbcOoQoYdPsfRE9DV1S_230RWFJB60mPaWKMEIqhTpiW42UEMYH-eCQD9_pskmv85db75boCljVu16wfmQOKn1v8bkQHffbouDiegocabz-kqjvPXI7Eyhlg1_BRfalKTXyeGKWZjRMYgDWKzwQhSLgbXQCYr4LU3gAFqFUipIGKHxbLa2dEgzFwzHBUdh8OJqbNHOablAytmeN_jSyBqAQhQIeWySxlxq0xsLM2qcL2C_eC-qIvXcxT66uiGOCiLcfwUBQLHXr-1SsKvBGGmHxQ-BSJ6r9Pd2jv_wr5ipSz_RN-FJuUElEjIjva1_C63SjM45x-DcQyM-5nSgsk7ZWPeV7Z6j2RzJcKgxWAGG_Bpg9awo4p7WpYsqJQXo-Azee3erQOt9R6caQcp6-I5q2ucsZD3tPKOOUEGCev1N6n_2i_V4P2x0t05EEvUR7ziGkJH47Txc8t4aI8-Oa3JFmRwQI5ljuc-hGMwZrCOg7eHAEkl5AZaYP880g9B_0fluAGcPaFZwj9ZMsp5gDkkCi8sX7TXtdkPucLEyp7stOqgDW8G88o5WQlZAN2wIKP-65v6N0WaJRnCIzyYZy6fD2VQdokEFxfBxVkxdg75EAtOsku3Jv2-RpNV4Ed7KEVo-XOt4QdgZkFZ8QKi-CykWqvpWuagOifSgIwQuJibm9iJF6kZAu2RGyvQA.pGfKBvjTuY0BlauDPwGWBw",
  "state": "QRFx3kkqHG"
}
post_body
Verify authorization endpoint response
2021-08-25 20:47:41 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2021-08-25 20:47:41 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2021-08-25 20:47:41 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2021-08-25 20:47:41 SUCCESS
RejectStateInUrlQueryForHybridFlow
state is correctly not present in URL query returned from authorization endpoint (as in the hybrid flow it must be returned in the URL fragment/hash only)
2021-08-25 20:47:41 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2021-08-25 20:47:41 SUCCESS
ValidateSuccessfulHybridResponseFromAuthorizationEndpoint
authorization endpoint response does not include unexpected parameters
code
kL0q-MDp1SUBiEG4QlIV-HshzNci15g3ApbNzHyu
id_token
eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkExMjhDQkMtSFMyNTYiLCJjdHkiOiJKV1QiLCJraWQiOiJ4OUx3ZmcifQ.Gr-j0_2ZxC55KZIcwVmeYcPsPMWRApEiAIcf7ynG58mpuKFq35Abe6No26XqGTyIUEpJOIh4twq8YW07tQ9wdC8dS320U_bngr6hfwbLnAnMqpXOeraXMG7TfmGkKvqvd2ThbQLiICJvTBP_EOovIHI9NtW6yq4Q7HmIhkSQ83_v0pgFrU6mdCtDM-o_4ed9-5JzJlV9e2dB__p5PU2v50bQo-fHfwK4Q9zHK3zxJ5mmHlOT9dEE66ckJQKdD9Zd_7aZAqGfjGC_oYXyPwu1J-F45yd62JSootGkV73PqB01TMoJ5Q6MjXANCUbVDoLkJEjr6BtB4iZwAbeJPruEBw.XHmUrL2dYN3dPAbtuNSWsA.b0iA2cjA3ISCyqk9pIUK2D7amt0UFJ0N5Tw3HCmK5XA_64SYyxKNPIKKA0socjU2HxD6R1eJgsUjReucz1nF4rvqOsm0qReYG34bz_LUygfjGf367mIY-gmDoqRJtw1q-PHkhcSCVMP9zuons39p2SXeIuk0cNXi-41nkXpmphj1E1CsVFwImkhxyg5TQ01Q5fJffWVQvoLzKkS3VuOfil_8Hghu1beE7OonKS9fIIkpn2SBqV0SE3F_GL4codUIJc833byzp3egh_2oiAOdyT_S6DuKvrYxDCGa4jcab7_5xx-eknsOMKoqNxMY1YURO_9Hq68RdQdXH_nRj1M8hq49adLyY5Qj1rTuO8Sth8SgVa3W6-31WfsoyWxQe6PQyl_LgAVwPbdXWOoDHDyJq5Fu-6Mu5mcVzTL0NP1z8KuosbxeY2NRLlA5HmtxLpr0HdKUoct4wvRHxB9T_v7xFF9Se83gPbcOoQoYdPsfRE9DV1S_230RWFJB60mPaWKMEIqhTpiW42UEMYH-eCQD9_pskmv85db75boCljVu16wfmQOKn1v8bkQHffbouDiegocabz-kqjvPXI7Eyhlg1_BRfalKTXyeGKWZjRMYgDWKzwQhSLgbXQCYr4LU3gAFqFUipIGKHxbLa2dEgzFwzHBUdh8OJqbNHOablAytmeN_jSyBqAQhQIeWySxlxq0xsLM2qcL2C_eC-qIvXcxT66uiGOCiLcfwUBQLHXr-1SsKvBGGmHxQ-BSJ6r9Pd2jv_wr5ipSz_RN-FJuUElEjIjva1_C63SjM45x-DcQyM-5nSgsk7ZWPeV7Z6j2RzJcKgxWAGG_Bpg9awo4p7WpYsqJQXo-Azee3erQOt9R6caQcp6-I5q2ucsZD3tPKOOUEGCev1N6n_2i_V4P2x0t05EEvUR7ziGkJH47Txc8t4aI8-Oa3JFmRwQI5ljuc-hGMwZrCOg7eHAEkl5AZaYP880g9B_0fluAGcPaFZwj9ZMsp5gDkkCi8sX7TXtdkPucLEyp7stOqgDW8G88o5WQlZAN2wIKP-65v6N0WaJRnCIzyYZy6fD2VQdokEFxfBxVkxdg75EAtOsku3Jv2-RpNV4Ed7KEVo-XOt4QdgZkFZ8QKi-CykWqvpWuagOifSgIwQuJibm9iJF6kZAu2RGyvQA.pGfKBvjTuY0BlauDPwGWBw
state
QRFx3kkqHG
2021-08-25 20:47:41 SUCCESS
CheckStateInAuthorizationResponse
State in response correctly returned
state
QRFx3kkqHG
2021-08-25 20:47:41
ValidateIssInAuthorizationResponse
No 'iss' value in authorization response.
2021-08-25 20:47:41 SUCCESS
ExtractAuthorizationCodeFromAuthorizationResponse
Found authorization code
code
kL0q-MDp1SUBiEG4QlIV-HshzNci15g3ApbNzHyu
2021-08-25 20:47:41 SUCCESS
EnsureMinimumAuthorizationCodeLength
Authorization code is of sufficient length
actual
320
required
128
2021-08-25 20:47:41 SUCCESS
EnsureMinimumAuthorizationCodeEntropy
Calculated shannon entropy seems sufficient
actual
198.87712379549453
expected
96.0
2021-08-25 20:47:41 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJhbGciOiJQUzI1NiIsImtpZCI6IjRNc0ZRbkNtc29icUp3YUhyYjd1YlRzTlF4TSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtamFyMSIsImp0aSI6Ik5UZzRQMVREWEs5Z0RlT3UyRVVpY20iLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMxIiwiaWF0IjoxNjI5OTI0NDYwLCJleHAiOjE2Mjk5MjQ3NjAsImFjciI6InVybjpjZHMuYXU6Y2RyOjIiLCJhdXRoX3RpbWUiOjE2Mjk5MjMzODMsIm5vbmNlIjoiQ3FRbXMxNk02TiIsImNfaGFzaCI6IndaT0ZpR1lGMWhHRDhOVlY5VUkwRkEiLCJzX2hhc2giOiJtSjRhb2RaTVRxcFRua1ZoUXFpQ1J3In0.D-yd8vBO89m1857Ww90FC0MReFoe6NdcnvvWprsZVI1gjWzVaqh1Z57VFwRHbeeO0O1w7GADpyEklQx2zJjcAQ8mcj_Fz2rss3xYdtCaqPAPrGGg-OjOs65_FzMYO8PWlzf_j790BpkyhD6pbrloOT0t4SZuIh2Dg4tLrRQyT1_gHq9dsw0tTqQUoJLxximjAEUuSvxhOTQaFv7FvQMdT3Zpnsv28Q_jeQkiqiscL00SFHeFQCnXg7jDYxQX0fjH4wG2ES3_Hg9tGTJ2LlXJMpLURtAWkFEJi2ydsERl0mtYonNtNEWV94oSZk-POXWzeN3txU2kpkIdHzVSZ5NyUg
header
{
  "kid": "4MsFQnCmsobqJwaHrb7ubTsNQxM",
  "alg": "PS256"
}
claims
{
  "sub": "9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4",
  "aud": "c__fapi-jwt-jar1",
  "acr": "urn:cds.au:cdr:2",
  "c_hash": "wZOFiGYF1hGD8NVV9UI0FA",
  "s_hash": "mJ4aodZMTqpTnkVhQqiCRw",
  "auth_time": 1629923383,
  "iss": "https://par-what-is-it-good-for.ping-eng.com:9031",
  "exp": 1629924760,
  "iat": 1629924460,
  "nonce": "CqQms16M6N",
  "jti": "NTg4P1TDXK9gDeOu2EUicm"
}
jwe_header
{
  "kid": "x9Lwfg",
  "cty": "JWT",
  "enc": "A128CBC-HS256",
  "alg": "RSA-OAEP"
}
2021-08-25 20:47:41 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-08-25 20:47:41 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
4MsFQnCmsobqJwaHrb7ubTsNQxM
2021-08-25 20:47:41 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
CqQms16M6N
2021-08-25 20:47:41 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
acr value in id_token is (one of) the requested values
actual
urn:cds.au:cdr:2
requested
[
  "urn:cds.au:cdr:2"
]
2021-08-25 20:47:41 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IjRNc0ZRbkNtc29icUp3YUhyYjd1YlRzTlF4TSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtamFyMSIsImp0aSI6Ik5UZzRQMVREWEs5Z0RlT3UyRVVpY20iLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMxIiwiaWF0IjoxNjI5OTI0NDYwLCJleHAiOjE2Mjk5MjQ3NjAsImFjciI6InVybjpjZHMuYXU6Y2RyOjIiLCJhdXRoX3RpbWUiOjE2Mjk5MjMzODMsIm5vbmNlIjoiQ3FRbXMxNk02TiIsImNfaGFzaCI6IndaT0ZpR1lGMWhHRDhOVlY5VUkwRkEiLCJzX2hhc2giOiJtSjRhb2RaTVRxcFRua1ZoUXFpQ1J3In0.D-yd8vBO89m1857Ww90FC0MReFoe6NdcnvvWprsZVI1gjWzVaqh1Z57VFwRHbeeO0O1w7GADpyEklQx2zJjcAQ8mcj_Fz2rss3xYdtCaqPAPrGGg-OjOs65_FzMYO8PWlzf_j790BpkyhD6pbrloOT0t4SZuIh2Dg4tLrRQyT1_gHq9dsw0tTqQUoJLxximjAEUuSvxhOTQaFv7FvQMdT3Zpnsv28Q_jeQkiqiscL00SFHeFQCnXg7jDYxQX0fjH4wG2ES3_Hg9tGTJ2LlXJMpLURtAWkFEJi2ydsERl0mtYonNtNEWV94oSZk-POXWzeN3txU2kpkIdHzVSZ5NyUg
2021-08-25 20:47:41 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IjRNc0ZRbkNtc29icUp3YUhyYjd1YlRzTlF4TSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtamFyMSIsImp0aSI6Ik5UZzRQMVREWEs5Z0RlT3UyRVVpY20iLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMxIiwiaWF0IjoxNjI5OTI0NDYwLCJleHAiOjE2Mjk5MjQ3NjAsImFjciI6InVybjpjZHMuYXU6Y2RyOjIiLCJhdXRoX3RpbWUiOjE2Mjk5MjMzODMsIm5vbmNlIjoiQ3FRbXMxNk02TiIsImNfaGFzaCI6IndaT0ZpR1lGMWhHRDhOVlY5VUkwRkEiLCJzX2hhc2giOiJtSjRhb2RaTVRxcFRua1ZoUXFpQ1J3In0.D-yd8vBO89m1857Ww90FC0MReFoe6NdcnvvWprsZVI1gjWzVaqh1Z57VFwRHbeeO0O1w7GADpyEklQx2zJjcAQ8mcj_Fz2rss3xYdtCaqPAPrGGg-OjOs65_FzMYO8PWlzf_j790BpkyhD6pbrloOT0t4SZuIh2Dg4tLrRQyT1_gHq9dsw0tTqQUoJLxximjAEUuSvxhOTQaFv7FvQMdT3Zpnsv28Q_jeQkiqiscL00SFHeFQCnXg7jDYxQX0fjH4wG2ES3_Hg9tGTJ2LlXJMpLURtAWkFEJi2ydsERl0mtYonNtNEWV94oSZk-POXWzeN3txU2kpkIdHzVSZ5NyUg
2021-08-25 20:47:41 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4
2021-08-25 20:47:41 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "ES256",
  "PS256"
]
alg
PS256
2021-08-25 20:47:41 SUCCESS
FAPIValidateIdTokenEncryptionAlg
id_token was encrypted with a permitted algorithm
alg
RSA-OAEP
2021-08-25 20:47:41 SUCCESS
FAPIValidateEncryptedIdTokenHasKid
kid was found in the encrypted ID token header
kid
x9Lwfg
2021-08-25 20:47:41 SUCCESS
ValidateIdTokenEncrypted
id_token was encrypted
2021-08-25 20:47:41 SUCCESS
ExtractSHash
Extracted s_hash from ID Token
s_hash
mJ4aodZMTqpTnkVhQqiCRw
alg
PS256
2021-08-25 20:47:41 SUCCESS
ValidateSHash
s_hash validated successfully
expected_hash
mJ4aodZMTqpTnkVhQqiCRw
unhashed_value
QRFx3kkqHG
id_token_hash
mJ4aodZMTqpTnkVhQqiCRw
2021-08-25 20:47:41 SUCCESS
ExtractCHash
Extracted c_hash from ID Token
c_hash
wZOFiGYF1hGD8NVV9UI0FA
alg
PS256
2021-08-25 20:47:41 SUCCESS
ValidateCHash
c_hash validated successfully
expected_hash
wZOFiGYF1hGD8NVV9UI0FA
unhashed_value
kL0q-MDp1SUBiEG4QlIV-HshzNci15g3ApbNzHyu
id_token_hash
wZOFiGYF1hGD8NVV9UI0FA
2021-08-25 20:47:41 SUCCESS
CreateTokenEndpointRequestForAuthorizationCodeGrant
grant_type
authorization_code
code
kL0q-MDp1SUBiEG4QlIV-HshzNci15g3ApbNzHyu
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
2021-08-25 20:47:41 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
c__fapi-jwt-jar1
sub
c__fapi-jwt-jar1
aud
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
jti
gsJyMjvMlRdjFqqwQ0xr
iat
1629924461
exp
1629924521
2021-08-25 20:47:41 SUCCESS
AddWrongAudToClientAssertionClaims
Added wrong aud to client_assertion_claims
iss
c__fapi-jwt-jar1
sub
c__fapi-jwt-jar1
aud
https://fapidev-rs.authlete.net/api/userinfo
jti
gsJyMjvMlRdjFqqwQ0xr
iat
1629924461
exp
1629924521
2021-08-25 20:47:41 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJmbXpKQmciLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJjX19mYXBpLWp3dC1qYXIxIiwiYXVkIjoiaHR0cHM6XC9cL2ZhcGlkZXYtcnMuYXV0aGxldGUubmV0XC9hcGlcL3VzZXJpbmZvIiwiaXNzIjoiY19fZmFwaS1qd3QtamFyMSIsImV4cCI6MTYyOTkyNDUyMSwiaWF0IjoxNjI5OTI0NDYxLCJqdGkiOiJnc0p5TWp2TWxSZGpGcXF3UTB4ciJ9.DIxCio_L_ZmGGJ6eiILLXhAFETEieBH_BjsIpbI1XUl9CrL8fX99NLdi2Hvd7UxdOXDgBUztZjzoTPm-FuUVsmSg0_VUDuywnZOMNoW8BJYFyM5f4DocBjy22yD9j_6A7Pl9OPKwFffmgxgrTMBi9BroGhC6LSVKTzIHO8H63lvDy3QNCZUakpy_1b1uOqdmi0npWGl8WrMcvdZQnOt4AQifd9G3GeRQ2tjC6l5esGqUXkbMRHkt0ftKpOOxEr8iOexsHTDCuNfh8pkCrAbvq3WmthjNRpxYIXH23CzyA2XVboAlBCiOkUOftC4dVFm7SzSMj4Mt61VRk5acK6x6zw
2021-08-25 20:47:41
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
authorization_code
code
kL0q-MDp1SUBiEG4QlIV-HshzNci15g3ApbNzHyu
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
client_assertion
eyJraWQiOiJmbXpKQmciLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJjX19mYXBpLWp3dC1qYXIxIiwiYXVkIjoiaHR0cHM6XC9cL2ZhcGlkZXYtcnMuYXV0aGxldGUubmV0XC9hcGlcL3VzZXJpbmZvIiwiaXNzIjoiY19fZmFwaS1qd3QtamFyMSIsImV4cCI6MTYyOTkyNDUyMSwiaWF0IjoxNjI5OTI0NDYxLCJqdGkiOiJnc0p5TWp2TWxSZGpGcXF3UTB4ciJ9.DIxCio_L_ZmGGJ6eiILLXhAFETEieBH_BjsIpbI1XUl9CrL8fX99NLdi2Hvd7UxdOXDgBUztZjzoTPm-FuUVsmSg0_VUDuywnZOMNoW8BJYFyM5f4DocBjy22yD9j_6A7Pl9OPKwFffmgxgrTMBi9BroGhC6LSVKTzIHO8H63lvDy3QNCZUakpy_1b1uOqdmi0npWGl8WrMcvdZQnOt4AQifd9G3GeRQ2tjC6l5esGqUXkbMRHkt0ftKpOOxEr8iOexsHTDCuNfh8pkCrAbvq3WmthjNRpxYIXH23CzyA2XVboAlBCiOkUOftC4dVFm7SzSMj4Mt61VRk5acK6x6zw
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-08-25 20:47:41
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "875"
}
request_body
grant_type=authorization_code&code=kL0q-MDp1SUBiEG4QlIV-HshzNci15g3ApbNzHyu&redirect_uri=https%3A%2F%2Fwww.certification.openid.net%2Ftest%2Fa%2Fpi%2Fcallback&client_assertion=eyJraWQiOiJmbXpKQmciLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJjX19mYXBpLWp3dC1qYXIxIiwiYXVkIjoiaHR0cHM6XC9cL2ZhcGlkZXYtcnMuYXV0aGxldGUubmV0XC9hcGlcL3VzZXJpbmZvIiwiaXNzIjoiY19fZmFwaS1qd3QtamFyMSIsImV4cCI6MTYyOTkyNDUyMSwiaWF0IjoxNjI5OTI0NDYxLCJqdGkiOiJnc0p5TWp2TWxSZGpGcXF3UTB4ciJ9.DIxCio_L_ZmGGJ6eiILLXhAFETEieBH_BjsIpbI1XUl9CrL8fX99NLdi2Hvd7UxdOXDgBUztZjzoTPm-FuUVsmSg0_VUDuywnZOMNoW8BJYFyM5f4DocBjy22yD9j_6A7Pl9OPKwFffmgxgrTMBi9BroGhC6LSVKTzIHO8H63lvDy3QNCZUakpy_1b1uOqdmi0npWGl8WrMcvdZQnOt4AQifd9G3GeRQ2tjC6l5esGqUXkbMRHkt0ftKpOOxEr8iOexsHTDCuNfh8pkCrAbvq3WmthjNRpxYIXH23CzyA2XVboAlBCiOkUOftC4dVFm7SzSMj4Mt61VRk5acK6x6zw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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",
  "key": "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\u003d",
  "ca": "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\u003d\u003d"
}
2021-08-25 20:47:41 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "date": "Wed, 25 Aug 2021 20:47:41 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dsV5KDny9ins1Nshml911X4; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"error_description":"Invalid JWT token","error":"invalid_client"}
2021-08-25 20:47:41 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error_description
Invalid JWT token
error
invalid_client
2021-08-25 20:47:41 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2021-08-25 20:47:41 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
invalid_client
2021-08-25 20:47:41 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
Invalid JWT token
2021-08-25 20:47:41 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
Invalid JWT token
2021-08-25 20:47:41 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2021-08-25 20:47:41 SUCCESS
CheckTokenEndpointHttpStatusIs400Allowing401ForInvalidClientError
Token endpoint http status code was 400 for error 'invalid_client'
2021-08-25 20:47:41 SUCCESS
CheckErrorFromTokenEndpointResponseErrorInvalidClientOrInvalidRequest
Token Endpoint response error returned expected 'error' of 'invalid_client'
expected
[
  "invalid_request",
  "invalid_client"
]
2021-08-25 20:47:41 FINISHED
fapi-rw-id2-ensure-client-assertion-with-wrong-aud-fails
Test has run to completion
testmodule_result
PASSED
2021-08-25 20:47:46
TEST-RUNNER
Alias has now been claimed by another test
alias
pi
new_test_id
anrYOV7tONu2lNN
Test Results