Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-08-25 21:14:54 INFO
TEST-RUNNER
Test instance T1sALmDF0XfejVd created
baseUrl
https://www.certification.openid.net/test/a/pi
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "pushed",
  "fapi_profile": "consumerdataright_au",
  "fapi_response_mode": "plain_response"
}
alias
pi
description
AU-CDR R/W OP w/ Private Key, PAR
planId
mmtV5bycW2kIQ
config
{
  "alias": "pi",
  "server": {
    "discoveryUrl": "https://par-what-is-it-good-for.ping-eng.com:9031/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "c__fapi-jwt-par1",
    "scope": "openid other",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "kid": "dakid",
          "alg": "PS256",
          "n": "sfiwoB_Ix6eYm07Bneu7aitqrol1DvTpVWII8vSR7LYEmR2yoOwqsqnLPEwvloFvc726vE0_QG8eM2PDZX8uz3I6o0GsqNa1LXtVYy-YMu4wyoX5SiXxajnFaBx0OqrGJF1GdGaOvpQNokxfYxekLz4U2_gnIm9ogwoKA6BSwjCJzBHoTLbF6IzvciSsSKuUWibnw4iSl-G1Mwgfa4IXVPwMFvix4WuBW7E66w8d6kPf0lmW2SOiaVcByLaATZZ5jQE1mxiXuq53z_rN0WaLaLcEo52_DfoN1hCacQ_ggpNvdMogWY5e7sK5nQIbRx3lSdqmwHbdg_O8aA-GWpYW-Q",
          "e": "AQAB",
          "d": "ohc3fs8UBct98U2ciCFQM1VRt59X7wRek7ZTIjxfv3DT5USoEWqnRMviX4uf9_rxMEAIGEJermfF4NYm-4UHdEa8Yz6Ia8oJf2AKF-kcPJ61725v6vl909rEEZuAvIIXLr2JUrCpp6eed0gJxG2eyqxHQUTVF8bSMC7viff2CAe4RPdiSDWQBUGoM13svSC5cdZlHxz134mHthMh7zdk47tGHJZaS8AyjeRlU7sRzYFHY76NPoaF8YKBjU97nysXQkkNqcKOTt-ZK1ZYafdEowBYxO2nQEx4wKL56nxqkr1u93XBrEEt62mOftwGgozaDyHwer0C0bD_FQZut5rLAQ",
          "p": "7LHmQtYeFeKSop1R7tBXbTDDtdmgI3woVFwnexbelvK1Ll-Pm8ZBmClbFuBusacANfPNccbbPd6QElkkbcVhPI5q2BBdoO7ga-QZPB9WgQeUBKjGQFkJa6fV144_vQozYppDneulQJ9sFSaU6VkDYq4maJmFNozxV8_4keSfDSE",
          "q": "wHyqoGzxWvMWJneQm_GJB0EQGQb_ypnpDF3vgL6ACCgv8mcDW8ZGlue5BlCK5QbtgRyhJch1gFjNCcMJY8p_lriMX1tfEvoDi8yo-Dhmn0nvEQ-0mG1x-26cgLyA0K06LRxh9GO7069Safo3xEPKNflphfVOct1YapTQpewfNtk",
          "dp": "3cwGnXLPVmquRbtt339TrXoYqvt3WEkr8YE5bdqMUp60sPPTOoGZTeDS_qjokYiQZf5D8e4J2_wGvWrS_BoNeBVsgXM0iW3O1ssz6mbjRJ25UnRk8j982Gi5tfgSOi6o4Cj2W7FJdTjuqxMwT0meJoZSb4oMjoWcUlEL-IpnkIE",
          "dq": "s9ZF3CisvpqKwVnII8pgigSBs8BUT8fIcqN41sIlAHn7gfA4tQ_kd6z7syig_CWi1JQZAyHslgNhXZN5PGC_H-RAUf8eLq6jjYOjAnY_eucqkrgntJncelr3oVd8ynpt9iOkaR6dJ8OPri_21km3rQHfUybDKpIev0VWQw7-gtE",
          "qi": "By6K5EAIOIypaL2r6n5BdXSzNuA1r6SBgeIzwB_kQP02CGB6iPle5_tLm9MFMYnN2WayRlCqfNBKbZ700wK4zLBThbwbbMWX8C3FxCaxDvaUemh9u-Ls-3MnFLMtKTZcl5K7BQ7HHx0WUlXW5gDtLbjwRkvanzdIEiTN5ALCtQc"
        },
        {
          "kty": "EC",
          "kid": "hTmLGw",
          "use": "enc",
          "alg": "ECDH-ES",
          "x": "zayjCNChbil1lRhGFTOfD7IsDI1uTcCt8whjMo42EZg",
          "y": "LL5EYIHi3zM16i6nUJzwvG-GJLwjE7GyArT4PxPNQDs",
          "crv": "P-256",
          "d": "nP-nIU2smk3SPM5kFYgXtrpV6OpQDAW3Jrri7A2ZbIA"
        }
      ]
    }
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\u003d\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\nRjWKxJXJyEeFjPqAGzGOIUCrt+84CfoKr5epUpuZecZA+OxRRuSr674\u003d\n-----END RSA PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----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\nRX5gP7kuu2KGMg\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "resource": {
    "resourceUrl": "https://par-what-is-it-good-for.ping-eng.com:3000/ext/au/cdr/mock",
    "cdrVersion": "3"
  },
  "client2": {
    "client_id": "c__fapi-jwt-par2",
    "scope": "openid",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "kid": "daotherkid",
          "alg": "PS256",
          "n": "lG76rfhCZ5xRaKf39CCMvrTJLL7x_mNwN1hdk6vIvAkL8iIjOYgmNo0E7DZIH4PXxJHVX9Ef6G4aZaC6-bfTPTsjR39HO6aV1dLSSZircjflNACkwsytg5D7MO_6W-gwoXmMAA9n6iMBQ0wUaw9Tn1Jk_qlX8HcF2Je-Z5WNYNyfh2SRpdCwsCgoRq4wqmOvhWTIccy7pPzQy-IfHIdN8VSKfvwWR4DlAJlzpGsWSlSQS-rDkbVKnax63BZQOR3K7aOt5sJwrh3niR5gtI7CYjjkjuq6KlulAPTnKNfZnQ2j8nmyvjRV57hZg9Z-rzEVcGY-gQJ8VHhY8AyVkN3EmQ",
          "e": "AQAB",
          "d": "ScKocYEXxpMIZWBqt_bg2ffOrJyqdoaFggs4XSSVWNOKCyXpqTI-AweqtZL33ilPNJBfnwC1wXPNTElGAMfXger8ShA2nq7WcG4WL5pdQCIElQXo2iCJ7QJDwPrPx5IncGaNKo59Tf1dKEsLLnRsUpTIOUB_wa_zyMEHTkQkAEh5VrFDcT5l4Pz7uEcBjrPP-xvRXalK9H8E7xq8YMg0BByp0ogd-qnyNPTK-0iqSPBn5Gj-8lNEiqvBkY_i0S5VoBTBvh7HsLnmIsoqB1yGkEJNxijL463cNB5SekRTztiC7mz7f9-oJe9OLHqpcjwBAuEEJY-ekoftVY8kNvk2gQ",
          "p": "_7mhydczsf1-RlgazC1ElW1kDTdcVh9xtfiPRlLjjAklNxtKOVDxNXzPb8qsqqG6hXtio39ixH5vTGLVJRMz_jL0V_bPC4VH-s7zaKFxZWa2Fn79zRJv4KcS59Oi-2d1noR0lztDeyFdKBO2F3q9yjY4GUU0GPyt7Q1FmmsBSfE",
          "q": "lJfS4NDe2-E3QoW7TX2XGSixV50N76zo-V6KHp5CeYvtF4NHlQwRm8sD3NBKSCWg_hDhZYrFPIXJnoaTLSrzaDP_EX64ix9v_O48IWLvmUSb21XXk3g7gc1sYXIYn7UZm12Xe4P8LoStJep21xZZH6P4Nn3AaSCStq0_-ZkyvSk",
          "dp": "IVmxSuSA_m6D4GKvI_-nWSGKEdstdKHnL4c6ED7RJDsxGk250V3IB2S-nOK-wAYVkED2LUJ4vA2NMFYXXB10A2vbx_kNKYB5UbFZt0SOyF2r06U-LleANbk0Uv2b3NOyWDkIB40YEN_aCVcAwXElfVCy4kDPOY8Ck87OTAQ2h9E",
          "dq": "W0g5X6pwfZsJG3CT87KnU-lPqIbuvMH4DNkq-Ew4gfqXl84p90IGvzIkGU5Lk66qC-nKzVpGeDun9B6v4xtzlBv9IX47WBvj6_leLxRcJEelh0RgvlMqGz9ayTISNmpGZM9F87bNALa4t4Ylo1QzQ-Cy5qaxwOMlvdsIZgjaxqE",
          "qi": "XrW0v41psl4xeZ_imnUoZypy0GHeoar7uYYQd6ROssFA8DQjCzj0wfG-MaTd4NaBRcOuoxTJ1p6LgVe3Wfp3lnnoW4pK0EP1mC5LTlEx8SihzlcyPyCwRQgyJ-XggguF2KgU0fo01QP3mZwCtTGZ85Y173FtCbxR4_SZhVu8QJ8"
        },
        {
          "kty": "RSA",
          "kid": "g4VpZQ",
          "use": "enc",
          "alg": "RSA-OAEP",
          "n": "sru5fupwET_tFy3Y8Ghk3y6Mx2wWw82T4QcM_xxbFZidQzdjMy6959hctYQ0z73XkZ0gYlbwx58hpbYA7b85nStzd0efPsaHcLzHjqV7vYU7s7C2rwyQN2dEBA8sF7Llga-WCCM-37KwI5-WYMMN19vO23g82rm2p_ORP0F01qe7UKQJZNqpep21-hXhUp8czDrBwwSAgwg0MLG9Ffiq5BVSbWMM4ituxK7Dss7oASwM90kdNzwAuRK-0WAuMlxzCJqRJW0JdHS3CGrCHIvjNYKRSsUIcrqjRROpP7ev_L-R-ObITzke8UoYdC6Jq-K5biTKYagRbifnoKgIcLZUyQ",
          "e": "AQAB",
          "d": "NhHYUe62LGG8ZdC22jOaoHHCoOmwEVf1rpOleN-pJmVe3eC5n9g6FxM7KKZwG5CA0EpKa7WFbb5UPX9L1KCO218ztRfzstf4TUCu1hZ10qWlo_yHp3kTf887oka8vgaeq5bkul1_PckexAgZQ_h-DZkvgPFk535bJX_nps00fWMLOSIqKUudS3LiotEknoCF7oaGY4L6BIuu6D41R7vIw0Be4yQfr1sxU_OwMGhDAL8evX1FB0MkxgM42dtmc2MSlSzYgm0zgyLd7ZMaSSyyPgdttzJyL5g2sBxviicTIZyzLzwuj4CH4Oe3mVbSR9gO7hJcFEiDBTmHSY071HMtAQ",
          "p": "1w5j4DsHb5ZCiBK24OcfSxR77cu8fl2EGwxZiew5EBAIlQoPiBZQGXmQXhuPaivU6nUXfQm42ypKW2vX2m3OCRG-BYSKEj6goz7NhFHyGfG-UAE5wV0hhg3v2ZMce57mm7y94Wbuo9qZr4CtAiS2LRz0TUQyN9BKux_dBxAjrFk",
          "q": "1ML-md6F83rwAX08CtTz2AgAq0qmyoAjfsNVKKCbDnU0-QyeqGpOPoBUjKLw1lJN7AlVkSQVhT_CYsNMdi6Sn60qTr5HX28uHTvSzbVwCQQ3Yn1fQSuEoap79JHygE7fEm-2yQ7ifitGzm2z8a9Gfe5eF9klfh-MYzzKNnoTHfE",
          "dp": "CFQMViCzFwUwqmhfILKSqauvaPQc5p_kf8-ooAi_5PlZ-7uaAmEq1PG6P4q9sRTld_b04-i-ee5XVtcEUvcxpXREcZ5CYpZ-ThQejWNHBu4vupVxkSV0KObdRQXHcpoiwCE9ET-VOk866GsJSC33yCN46o0bjMHKQxjmzGE5oHE",
          "dq": "yYDISwhiSwAzEOYAGK4pJ4AkyhYQs5b6hxMOs0SwtdexzPHzzcOoyS8XZH7po8IdhKAuhyDqtOF3A7y9zOw897e0axFxXWRaA1vmQedF7XQt1DyzG3DQ06A4d6BGUNjiEn71WaScRCxOijGCDDMZiylXujRxeur8Nfyb805YjrE",
          "qi": "ix_ZaWpPw0XYUJk0AXmnM-hcTifv-X-B6z-0z-RTrg0NPQJS40wr9j7qY1y9iBSu2ZhMqXJS9JZ7nBAGyRiqooghcxjrIJOKAUqRrbrXvgH75Mf9cHLxTNuz1AFmSrC2xsOlARPfpCJpIUS0Ub0h-UbEsuCTQMExHDWBjmb4opE"
        }
      ]
    }
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\u003d\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\n+cniEsvOMnUCryuTw6aU481HCpy3CUW4u5m7YpG/y/CwAG6xq97rZg\u003d\u003d\n-----END RSA PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----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\nRX5gP7kuu2KGMg\u003d\u003d\n-----END CERTIFICATE-----"
  },
  "description": "AU-CDR R/W OP w/ Private Key, PAR"
}
testName
fapi-rw-id2-state-only-outside-request-object-not-used
2021-08-25 21:14:54 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
2021-08-25 21:14:54
GetDynamicServerConfiguration
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9031/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-08-25 21:14:54 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Wed, 25 Aug 2021 21:14:54 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dx1diabETX3LPK9k0pp2BqF; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "content-length": "3850"
}
response_body
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9031",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9031/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions",
  "ping_session_management_users_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/users",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/device_authz.oauth2",
  "scopes_supported": [ "other", "openid", "accounts" ],
  "claims_supported": [ "acr", "sharing_duration", "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "token_endpoint_auth_methods_supported": ["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "code_challenge_methods_supported": [ "S256" ],
  "tls_client_certificate_bound_access_tokens":true,
"claims_parameter_supported":true
}

2021-08-25 21:14:54
GetDynamicServerConfiguration
Downloaded server configuration
server_config_string
{
  "issuer": "https://par-what-is-it-good-for.ping-eng.com:9031",
  "authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2",
  "token_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2",
  "revocation_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/revoke_token.oauth2",
  "userinfo_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/idp/userinfo.openid",
  "introspection_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/introspect.oauth2",
  "jwks_uri": "https://par-what-is-it-good-for.ping-eng.com:9031/pf/JWKS",
  "registration_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/clients.oauth2",
  "ping_revoked_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris",
  "ping_session_management_sris_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions",
  "ping_session_management_users_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/users",
  "ping_end_session_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/idp/startSLO.ping",
  "device_authorization_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/device_authz.oauth2",
  "scopes_supported": [ "other", "openid", "accounts" ],
  "claims_supported": [ "acr", "sharing_duration", "sub" ],
  "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ],
  "response_modes_supported": [ "fragment", "query", "form_post" ],
  "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ],
  "subject_types_supported": [ "public", "pairwise" ],
  "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "token_endpoint_auth_methods_supported": ["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],
  "token_endpoint_auth_signing_alg_values_supported":  [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "claim_types_supported": [ "normal" ],
  "claims_parameter_supported": false,
  "request_parameter_supported": true,
  "request_uri_parameter_supported": false,
  "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ],
  "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ],
  "pushed_authorization_request_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/par.oauth2",
  "require_pushed_authorization_requests": false,
  "backchannel_authentication_endpoint": "https://par-what-is-it-good-for.ping-eng.com:9031/as/bc-auth.ciba",
  "backchannel_token_delivery_modes_supported": [ "poll", "ping" ],
  "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ],
  "backchannel_user_code_parameter_supported": false,
  "code_challenge_methods_supported": [ "S256" ],
  "tls_client_certificate_bound_access_tokens":true,
"claims_parameter_supported":true
}

2021-08-25 21:14:54 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://par-what-is-it-good-for.ping-eng.com:9031
authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2
token_endpoint
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
revocation_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/revoke_token.oauth2
userinfo_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/idp/userinfo.openid
introspection_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/introspect.oauth2
jwks_uri
https://par-what-is-it-good-for.ping-eng.com:9031/pf/JWKS
registration_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/clients.oauth2
ping_revoked_sris_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/revokedSris
ping_session_management_sris_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/sessions
ping_session_management_users_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/pf-ws/rest/sessionMgmt/users
ping_end_session_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/idp/startSLO.ping
device_authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/device_authz.oauth2
scopes_supported
[
  "other",
  "openid",
  "accounts"
]
claims_supported
[
  "acr",
  "sharing_duration",
  "sub"
]
response_types_supported
[
  "code",
  "token",
  "id_token",
  "code token",
  "code id_token",
  "token id_token",
  "code token id_token"
]
response_modes_supported
[
  "fragment",
  "query",
  "form_post"
]
grant_types_supported
[
  "implicit",
  "authorization_code",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:pingidentity.com:oauth2:grant_type:validate_bearer",
  "urn:ietf:params:oauth:grant-type:jwt-bearer",
  "urn:ietf:params:oauth:grant-type:saml2-bearer",
  "urn:ietf:params:oauth:grant-type:device_code",
  "urn:ietf:params:oauth:grant-type:token-exchange",
  "urn:openid:params:grant-type:ciba"
]
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "none",
  "HS256",
  "HS384",
  "HS512",
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
token_endpoint_auth_methods_supported
[
  "client_secret_basic",
  "client_secret_post",
  "private_key_jwt",
  "tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
claim_types_supported
[
  "normal"
]
claims_parameter_supported
true
request_parameter_supported
true
request_uri_parameter_supported
false
request_object_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
id_token_encryption_alg_values_supported
[
  "dir",
  "A128KW",
  "A192KW",
  "A256KW",
  "A128GCMKW",
  "A192GCMKW",
  "A256GCMKW",
  "ECDH-ES",
  "ECDH-ES+A128KW",
  "ECDH-ES+A192KW",
  "ECDH-ES+A256KW",
  "RSA-OAEP"
]
id_token_encryption_enc_values_supported
[
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256CBC-HS512",
  "A128GCM",
  "A192GCM",
  "A256GCM"
]
pushed_authorization_request_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/par.oauth2
require_pushed_authorization_requests
false
backchannel_authentication_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/bc-auth.ciba
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "ES256",
  "ES384",
  "ES512",
  "PS256",
  "PS384",
  "PS512"
]
backchannel_user_code_parameter_supported
false
code_challenge_methods_supported
[
  "S256"
]
tls_client_certificate_bound_access_tokens
true
2021-08-25 21:14:54 SUCCESS
AddMTLSEndpointAliasesToEnvironment
Added mtls_endpoint_aliases to environment
2021-08-25 21:14:54 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2021-08-25 21:14:54 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9031
}
authorization_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9031
}
token_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9032
}
userinfo_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 9031
}
2021-08-25 21:14:54
FetchServerKeys
Fetching server key
jwks_uri
https://par-what-is-it-good-for.ping-eng.com:9031/pf/JWKS
2021-08-25 21:14:54
FetchServerKeys
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9031/pf/JWKS
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2021-08-25 21:14:55 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Wed, 25 Aug 2021 21:14:55 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dYwJ5Bfu8CEQ8cyJxXgc9Ei; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"keys":[{"kty":"RSA","kid":"0OkwcG7h25a78veaJ4zp_LiE190","use":"sig","n":"vax6lDZPWoMM_usc48KLv19ZLIKQVDapygEAYFYgEnqtvK7SKwal80pMUjk74rMNdJqZLqW2yG4-tBbvFMHJtq9WVzLjZ2OSPIrgsVH9fY-wsSxiEtAS0acbxIfbYyZNfX0ZxF2rEh90qlGNsW6AXmzaXVWZkDwm9Q48wnJGdB0tFE9IyucoJwWzNMS6YTAPcjuMCHmhgcAvIRqI9fJ-784XF9gwpC8f68X6v0ZAd8U5tGURh4aBCv34Agln7O2L1VbeFqM7_yfJB2NuqdunETHfFkCJRREid8ONt_Qs0VRJ-2lmTHCodHtbNIwIY8KReeTbaGuA-P1eXwCVWmOq_w","e":"AQAB"},{"kty":"EC","kid":"FDBu6tV56Yq4FCS10YSx5iEj27Y","use":"sig","x":"AOBWZ5IBzBQYPZw0moKjRxO29Gdxq3EAjS22kqBUoPSoQE21Fv2Fvn51KI6kS26k9FeZOMdZZ5xMxyf4xE8N9Zbx","y":"ACZUHZDtGOCXRcN_cPOoLO6cPtwhgD0TOPCdfuhPkhVkXseIeSKrTGZ_mel4txgRpugyirQ8ST5iKysMbgHb4jI_","crv":"P-521"},{"kty":"EC","kid":"dx_AQHNiPt6uUz_lxRoA8XmJLlk","use":"sig","x":"-RSPlUjlEkeyA6yGA2ifCWRl8kjl7WLaQQZsmFOVCEc","y":"PBcEKcRCKaJTAd2iWn5qgsk6aCoixwoS-GH0gq4D1bQ","crv":"P-256"},{"kty":"EC","kid":"zT0oyWqDMmV5Iak4fMiTfwAqXUA","use":"sig","x":"VZddnMPgM53oZN0fLmuE5VP3PBYZN5pFFSizAT_E6AxbgIlr5X1OdEyRfHZCB2E8","y":"L7nS8RbI-vsdQwqzO45FMA0NH42f0FNYDwP1xS1EF_f_t5UrXU8ANHyBaux8ze0E","crv":"P-384"},{"kty":"RSA","kid":"4MsFQnCmsobqJwaHrb7ubTsNQxM","use":"sig","n":"kW0pzJkr0gLg7Tf5uj4BtAP1XEV83-3ecc8WkNTX1ndvgPpzzpzeX3q5RTBpgyQI-HCFpCThj7DYLrc1gHjss820gPkBezGSRG4WqMfLrXDIZypy_d75Nrfivyb_2zN4jrLEdtcpBf_RQ0-pkAGqQE43VcvJBu3jpeS-A3kx4wl3H5dHfLwWh4GXsqTo2R0HIeqnOFIIILuKDjBD2AZMANnTzmGnm3Dpj9ph_9NlazPY0zvsXLKhHvv1woyZsFKbSB3EBDpiqPWkn3d314nr1jgKQ0K-1JYhp5EFs_FzPdEUtBMFkwdISlem8YNoSKBG552Cq4UmOa8vPC0ZwCKL4Q","e":"AQAB"},{"kty":"EC","kid":"XB5vWN73DL8AKr_gKfYppLniNtc","use":"sig","x":"CA6Nwu192uO0hj_JOevQJELKyNwqliVfiYkzfkm8Y5Q","y":"C465ha92MByoi0tkjIFGg8kQdmk2F7Q8fOpYvU8dNK4","crv":"P-256"},{"kty":"EC","kid":"u0AuuzVxj4IyK1uTyX-kb4JK70E","use":"sig","x":"AaVgth9qgqVnbuCgUs_7_McGagdxyBhk9uGUR_p6i3UTfzFfNBd-fWHWPWLadqGfLjdu2rUV5qO-WizxKafW-l6W","y":"ALqbu_ksYe9M-1105xyKrDe-6O0yFGFzIfeFe_EH1wLUeaR5bVm0V8nGtPsD-ZyjB8RfRMmzC-LogmnSvLk75mjP","crv":"P-521"},{"kty":"EC","kid":"vNt0YlmeP6RzEIn0Wf-Sj5cCouA","use":"sig","x":"OEQ1Onv_FWCZlb1JXP-ep3eeqQtfQXPJsTDo0yzu5An_xnZMjSJtgXJPDdc1lIS8","y":"I-6xrMzTNpe5iudIu6-HESJsoc2z1Ayy-OJ7psqECGa6sSKvCEMHDDQ2OPi5OhuA","crv":"P-384"},{"kty":"RSA","kid":"SNmwYQAzoY_o_lfI1Kq-qOqG3oo","use":"enc","n":"xhwEuePw8Elbbx86zR5xbqvjJPWMTzzJkMQWUTTBKgngdxiIEg3iLJiTxSQOSIi4FIwNVDhWt_BXfbNMk5VwuBdnsxZ4NYLsrMst-PA0krlJsmZ-TkVLRabjOWC1Ikg1MChgtofdbFQKIdOWQawF4MyXltACro6Svf_7Ct0aEh5og1d80HZ076mj3aIGa40d-IyCuMHNdbMKeysQ-x2zvGLy7KtdSeRyCIAtaglCX-VRuyKjeQkYsP0c-xc7wjbZGVR8X0DcPc94tl2hp_c0sWd1gW-a_8BqxfWuGRvCUfKPXbd5IH4cjvEA25Tr0kEQtCt9voaRI6IQ7A0QpAeAQw","e":"AQAB"},{"kty":"EC","kid":"UmmotA-gHk0nwIJutjzeyE8NFAY","use":"enc","x":"Ort6A65pM7rxrPEbpSCs-RNuzcQ0qBZ0mHZFG-6AbK8","y":"t_394crxLIH_gMQc2Cn3BClP0eJUpzA9tFejFK12Sn4","crv":"P-256"},{"kty":"EC","kid":"lF2d6Abngrj47Nc0Fl60aj6X35k","use":"enc","x":"tQPUct_BI3PNjK8dvfDRJDbJIv3el2J3csOn-3tlAcVybGlpXPkVnMAhfoGOhkUa","y":"95ZdF5nXRsjYYbWyCQ6QxwAVFJIP1FNi5n3DS7rw2HS71f8bWU0HsPCT5MAtk8VM","crv":"P-384"},{"kty":"EC","kid":"mMMYX1Wd89M9JNNflvYu9Lu4zi4","use":"enc","x":"AB78B-cPZCBk-GCmvqlB5XWP4Js7eg2YHvT5PSt-rp4W5QjfyloNU-9uUerhkjhjzUYCXGZPlLhcA3TnuIoejj-s","y":"AGiqjHyPd5C05KJnK9s90tkNkXFp5VdDBc_qafnTHRnQePNh8FAdjOQ3LxLlQTUWHd1X3Zmv-SEb1dKdVOPgw53k","crv":"P-521"}]}
2021-08-25 21:14:55
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","kid":"0OkwcG7h25a78veaJ4zp_LiE190","use":"sig","n":"vax6lDZPWoMM_usc48KLv19ZLIKQVDapygEAYFYgEnqtvK7SKwal80pMUjk74rMNdJqZLqW2yG4-tBbvFMHJtq9WVzLjZ2OSPIrgsVH9fY-wsSxiEtAS0acbxIfbYyZNfX0ZxF2rEh90qlGNsW6AXmzaXVWZkDwm9Q48wnJGdB0tFE9IyucoJwWzNMS6YTAPcjuMCHmhgcAvIRqI9fJ-784XF9gwpC8f68X6v0ZAd8U5tGURh4aBCv34Agln7O2L1VbeFqM7_yfJB2NuqdunETHfFkCJRREid8ONt_Qs0VRJ-2lmTHCodHtbNIwIY8KReeTbaGuA-P1eXwCVWmOq_w","e":"AQAB"},{"kty":"EC","kid":"FDBu6tV56Yq4FCS10YSx5iEj27Y","use":"sig","x":"AOBWZ5IBzBQYPZw0moKjRxO29Gdxq3EAjS22kqBUoPSoQE21Fv2Fvn51KI6kS26k9FeZOMdZZ5xMxyf4xE8N9Zbx","y":"ACZUHZDtGOCXRcN_cPOoLO6cPtwhgD0TOPCdfuhPkhVkXseIeSKrTGZ_mel4txgRpugyirQ8ST5iKysMbgHb4jI_","crv":"P-521"},{"kty":"EC","kid":"dx_AQHNiPt6uUz_lxRoA8XmJLlk","use":"sig","x":"-RSPlUjlEkeyA6yGA2ifCWRl8kjl7WLaQQZsmFOVCEc","y":"PBcEKcRCKaJTAd2iWn5qgsk6aCoixwoS-GH0gq4D1bQ","crv":"P-256"},{"kty":"EC","kid":"zT0oyWqDMmV5Iak4fMiTfwAqXUA","use":"sig","x":"VZddnMPgM53oZN0fLmuE5VP3PBYZN5pFFSizAT_E6AxbgIlr5X1OdEyRfHZCB2E8","y":"L7nS8RbI-vsdQwqzO45FMA0NH42f0FNYDwP1xS1EF_f_t5UrXU8ANHyBaux8ze0E","crv":"P-384"},{"kty":"RSA","kid":"4MsFQnCmsobqJwaHrb7ubTsNQxM","use":"sig","n":"kW0pzJkr0gLg7Tf5uj4BtAP1XEV83-3ecc8WkNTX1ndvgPpzzpzeX3q5RTBpgyQI-HCFpCThj7DYLrc1gHjss820gPkBezGSRG4WqMfLrXDIZypy_d75Nrfivyb_2zN4jrLEdtcpBf_RQ0-pkAGqQE43VcvJBu3jpeS-A3kx4wl3H5dHfLwWh4GXsqTo2R0HIeqnOFIIILuKDjBD2AZMANnTzmGnm3Dpj9ph_9NlazPY0zvsXLKhHvv1woyZsFKbSB3EBDpiqPWkn3d314nr1jgKQ0K-1JYhp5EFs_FzPdEUtBMFkwdISlem8YNoSKBG552Cq4UmOa8vPC0ZwCKL4Q","e":"AQAB"},{"kty":"EC","kid":"XB5vWN73DL8AKr_gKfYppLniNtc","use":"sig","x":"CA6Nwu192uO0hj_JOevQJELKyNwqliVfiYkzfkm8Y5Q","y":"C465ha92MByoi0tkjIFGg8kQdmk2F7Q8fOpYvU8dNK4","crv":"P-256"},{"kty":"EC","kid":"u0AuuzVxj4IyK1uTyX-kb4JK70E","use":"sig","x":"AaVgth9qgqVnbuCgUs_7_McGagdxyBhk9uGUR_p6i3UTfzFfNBd-fWHWPWLadqGfLjdu2rUV5qO-WizxKafW-l6W","y":"ALqbu_ksYe9M-1105xyKrDe-6O0yFGFzIfeFe_EH1wLUeaR5bVm0V8nGtPsD-ZyjB8RfRMmzC-LogmnSvLk75mjP","crv":"P-521"},{"kty":"EC","kid":"vNt0YlmeP6RzEIn0Wf-Sj5cCouA","use":"sig","x":"OEQ1Onv_FWCZlb1JXP-ep3eeqQtfQXPJsTDo0yzu5An_xnZMjSJtgXJPDdc1lIS8","y":"I-6xrMzTNpe5iudIu6-HESJsoc2z1Ayy-OJ7psqECGa6sSKvCEMHDDQ2OPi5OhuA","crv":"P-384"},{"kty":"RSA","kid":"SNmwYQAzoY_o_lfI1Kq-qOqG3oo","use":"enc","n":"xhwEuePw8Elbbx86zR5xbqvjJPWMTzzJkMQWUTTBKgngdxiIEg3iLJiTxSQOSIi4FIwNVDhWt_BXfbNMk5VwuBdnsxZ4NYLsrMst-PA0krlJsmZ-TkVLRabjOWC1Ikg1MChgtofdbFQKIdOWQawF4MyXltACro6Svf_7Ct0aEh5og1d80HZ076mj3aIGa40d-IyCuMHNdbMKeysQ-x2zvGLy7KtdSeRyCIAtaglCX-VRuyKjeQkYsP0c-xc7wjbZGVR8X0DcPc94tl2hp_c0sWd1gW-a_8BqxfWuGRvCUfKPXbd5IH4cjvEA25Tr0kEQtCt9voaRI6IQ7A0QpAeAQw","e":"AQAB"},{"kty":"EC","kid":"UmmotA-gHk0nwIJutjzeyE8NFAY","use":"enc","x":"Ort6A65pM7rxrPEbpSCs-RNuzcQ0qBZ0mHZFG-6AbK8","y":"t_394crxLIH_gMQc2Cn3BClP0eJUpzA9tFejFK12Sn4","crv":"P-256"},{"kty":"EC","kid":"lF2d6Abngrj47Nc0Fl60aj6X35k","use":"enc","x":"tQPUct_BI3PNjK8dvfDRJDbJIv3el2J3csOn-3tlAcVybGlpXPkVnMAhfoGOhkUa","y":"95ZdF5nXRsjYYbWyCQ6QxwAVFJIP1FNi5n3DS7rw2HS71f8bWU0HsPCT5MAtk8VM","crv":"P-384"},{"kty":"EC","kid":"mMMYX1Wd89M9JNNflvYu9Lu4zi4","use":"enc","x":"AB78B-cPZCBk-GCmvqlB5XWP4Js7eg2YHvT5PSt-rp4W5QjfyloNU-9uUerhkjhjzUYCXGZPlLhcA3TnuIoejj-s","y":"AGiqjHyPd5C05KJnK9s90tkNkXFp5VdDBc_qafnTHRnQePNh8FAdjOQ3LxLlQTUWHd1X3Zmv-SEb1dKdVOPgw53k","crv":"P-521"}]}
2021-08-25 21:14:55 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "0OkwcG7h25a78veaJ4zp_LiE190",
      "use": "sig",
      "n": "vax6lDZPWoMM_usc48KLv19ZLIKQVDapygEAYFYgEnqtvK7SKwal80pMUjk74rMNdJqZLqW2yG4-tBbvFMHJtq9WVzLjZ2OSPIrgsVH9fY-wsSxiEtAS0acbxIfbYyZNfX0ZxF2rEh90qlGNsW6AXmzaXVWZkDwm9Q48wnJGdB0tFE9IyucoJwWzNMS6YTAPcjuMCHmhgcAvIRqI9fJ-784XF9gwpC8f68X6v0ZAd8U5tGURh4aBCv34Agln7O2L1VbeFqM7_yfJB2NuqdunETHfFkCJRREid8ONt_Qs0VRJ-2lmTHCodHtbNIwIY8KReeTbaGuA-P1eXwCVWmOq_w",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "FDBu6tV56Yq4FCS10YSx5iEj27Y",
      "use": "sig",
      "x": "AOBWZ5IBzBQYPZw0moKjRxO29Gdxq3EAjS22kqBUoPSoQE21Fv2Fvn51KI6kS26k9FeZOMdZZ5xMxyf4xE8N9Zbx",
      "y": "ACZUHZDtGOCXRcN_cPOoLO6cPtwhgD0TOPCdfuhPkhVkXseIeSKrTGZ_mel4txgRpugyirQ8ST5iKysMbgHb4jI_",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "dx_AQHNiPt6uUz_lxRoA8XmJLlk",
      "use": "sig",
      "x": "-RSPlUjlEkeyA6yGA2ifCWRl8kjl7WLaQQZsmFOVCEc",
      "y": "PBcEKcRCKaJTAd2iWn5qgsk6aCoixwoS-GH0gq4D1bQ",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "zT0oyWqDMmV5Iak4fMiTfwAqXUA",
      "use": "sig",
      "x": "VZddnMPgM53oZN0fLmuE5VP3PBYZN5pFFSizAT_E6AxbgIlr5X1OdEyRfHZCB2E8",
      "y": "L7nS8RbI-vsdQwqzO45FMA0NH42f0FNYDwP1xS1EF_f_t5UrXU8ANHyBaux8ze0E",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "4MsFQnCmsobqJwaHrb7ubTsNQxM",
      "use": "sig",
      "n": "kW0pzJkr0gLg7Tf5uj4BtAP1XEV83-3ecc8WkNTX1ndvgPpzzpzeX3q5RTBpgyQI-HCFpCThj7DYLrc1gHjss820gPkBezGSRG4WqMfLrXDIZypy_d75Nrfivyb_2zN4jrLEdtcpBf_RQ0-pkAGqQE43VcvJBu3jpeS-A3kx4wl3H5dHfLwWh4GXsqTo2R0HIeqnOFIIILuKDjBD2AZMANnTzmGnm3Dpj9ph_9NlazPY0zvsXLKhHvv1woyZsFKbSB3EBDpiqPWkn3d314nr1jgKQ0K-1JYhp5EFs_FzPdEUtBMFkwdISlem8YNoSKBG552Cq4UmOa8vPC0ZwCKL4Q",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "XB5vWN73DL8AKr_gKfYppLniNtc",
      "use": "sig",
      "x": "CA6Nwu192uO0hj_JOevQJELKyNwqliVfiYkzfkm8Y5Q",
      "y": "C465ha92MByoi0tkjIFGg8kQdmk2F7Q8fOpYvU8dNK4",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "u0AuuzVxj4IyK1uTyX-kb4JK70E",
      "use": "sig",
      "x": "AaVgth9qgqVnbuCgUs_7_McGagdxyBhk9uGUR_p6i3UTfzFfNBd-fWHWPWLadqGfLjdu2rUV5qO-WizxKafW-l6W",
      "y": "ALqbu_ksYe9M-1105xyKrDe-6O0yFGFzIfeFe_EH1wLUeaR5bVm0V8nGtPsD-ZyjB8RfRMmzC-LogmnSvLk75mjP",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "vNt0YlmeP6RzEIn0Wf-Sj5cCouA",
      "use": "sig",
      "x": "OEQ1Onv_FWCZlb1JXP-ep3eeqQtfQXPJsTDo0yzu5An_xnZMjSJtgXJPDdc1lIS8",
      "y": "I-6xrMzTNpe5iudIu6-HESJsoc2z1Ayy-OJ7psqECGa6sSKvCEMHDDQ2OPi5OhuA",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "SNmwYQAzoY_o_lfI1Kq-qOqG3oo",
      "use": "enc",
      "n": "xhwEuePw8Elbbx86zR5xbqvjJPWMTzzJkMQWUTTBKgngdxiIEg3iLJiTxSQOSIi4FIwNVDhWt_BXfbNMk5VwuBdnsxZ4NYLsrMst-PA0krlJsmZ-TkVLRabjOWC1Ikg1MChgtofdbFQKIdOWQawF4MyXltACro6Svf_7Ct0aEh5og1d80HZ076mj3aIGa40d-IyCuMHNdbMKeysQ-x2zvGLy7KtdSeRyCIAtaglCX-VRuyKjeQkYsP0c-xc7wjbZGVR8X0DcPc94tl2hp_c0sWd1gW-a_8BqxfWuGRvCUfKPXbd5IH4cjvEA25Tr0kEQtCt9voaRI6IQ7A0QpAeAQw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "UmmotA-gHk0nwIJutjzeyE8NFAY",
      "use": "enc",
      "x": "Ort6A65pM7rxrPEbpSCs-RNuzcQ0qBZ0mHZFG-6AbK8",
      "y": "t_394crxLIH_gMQc2Cn3BClP0eJUpzA9tFejFK12Sn4",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "lF2d6Abngrj47Nc0Fl60aj6X35k",
      "use": "enc",
      "x": "tQPUct_BI3PNjK8dvfDRJDbJIv3el2J3csOn-3tlAcVybGlpXPkVnMAhfoGOhkUa",
      "y": "95ZdF5nXRsjYYbWyCQ6QxwAVFJIP1FNi5n3DS7rw2HS71f8bWU0HsPCT5MAtk8VM",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "mMMYX1Wd89M9JNNflvYu9Lu4zi4",
      "use": "enc",
      "x": "AB78B-cPZCBk-GCmvqlB5XWP4Js7eg2YHvT5PSt-rp4W5QjfyloNU-9uUerhkjhjzUYCXGZPlLhcA3TnuIoejj-s",
      "y": "AGiqjHyPd5C05KJnK9s90tkNkXFp5VdDBc_qafnTHRnQePNh8FAdjOQ3LxLlQTUWHd1X3Zmv-SEb1dKdVOPgw53k",
      "crv": "P-521"
    }
  ]
}
2021-08-25 21:14:55 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "0OkwcG7h25a78veaJ4zp_LiE190",
      "use": "sig",
      "n": "vax6lDZPWoMM_usc48KLv19ZLIKQVDapygEAYFYgEnqtvK7SKwal80pMUjk74rMNdJqZLqW2yG4-tBbvFMHJtq9WVzLjZ2OSPIrgsVH9fY-wsSxiEtAS0acbxIfbYyZNfX0ZxF2rEh90qlGNsW6AXmzaXVWZkDwm9Q48wnJGdB0tFE9IyucoJwWzNMS6YTAPcjuMCHmhgcAvIRqI9fJ-784XF9gwpC8f68X6v0ZAd8U5tGURh4aBCv34Agln7O2L1VbeFqM7_yfJB2NuqdunETHfFkCJRREid8ONt_Qs0VRJ-2lmTHCodHtbNIwIY8KReeTbaGuA-P1eXwCVWmOq_w",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "FDBu6tV56Yq4FCS10YSx5iEj27Y",
      "use": "sig",
      "x": "AOBWZ5IBzBQYPZw0moKjRxO29Gdxq3EAjS22kqBUoPSoQE21Fv2Fvn51KI6kS26k9FeZOMdZZ5xMxyf4xE8N9Zbx",
      "y": "ACZUHZDtGOCXRcN_cPOoLO6cPtwhgD0TOPCdfuhPkhVkXseIeSKrTGZ_mel4txgRpugyirQ8ST5iKysMbgHb4jI_",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "dx_AQHNiPt6uUz_lxRoA8XmJLlk",
      "use": "sig",
      "x": "-RSPlUjlEkeyA6yGA2ifCWRl8kjl7WLaQQZsmFOVCEc",
      "y": "PBcEKcRCKaJTAd2iWn5qgsk6aCoixwoS-GH0gq4D1bQ",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "zT0oyWqDMmV5Iak4fMiTfwAqXUA",
      "use": "sig",
      "x": "VZddnMPgM53oZN0fLmuE5VP3PBYZN5pFFSizAT_E6AxbgIlr5X1OdEyRfHZCB2E8",
      "y": "L7nS8RbI-vsdQwqzO45FMA0NH42f0FNYDwP1xS1EF_f_t5UrXU8ANHyBaux8ze0E",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "4MsFQnCmsobqJwaHrb7ubTsNQxM",
      "use": "sig",
      "n": "kW0pzJkr0gLg7Tf5uj4BtAP1XEV83-3ecc8WkNTX1ndvgPpzzpzeX3q5RTBpgyQI-HCFpCThj7DYLrc1gHjss820gPkBezGSRG4WqMfLrXDIZypy_d75Nrfivyb_2zN4jrLEdtcpBf_RQ0-pkAGqQE43VcvJBu3jpeS-A3kx4wl3H5dHfLwWh4GXsqTo2R0HIeqnOFIIILuKDjBD2AZMANnTzmGnm3Dpj9ph_9NlazPY0zvsXLKhHvv1woyZsFKbSB3EBDpiqPWkn3d314nr1jgKQ0K-1JYhp5EFs_FzPdEUtBMFkwdISlem8YNoSKBG552Cq4UmOa8vPC0ZwCKL4Q",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "XB5vWN73DL8AKr_gKfYppLniNtc",
      "use": "sig",
      "x": "CA6Nwu192uO0hj_JOevQJELKyNwqliVfiYkzfkm8Y5Q",
      "y": "C465ha92MByoi0tkjIFGg8kQdmk2F7Q8fOpYvU8dNK4",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "u0AuuzVxj4IyK1uTyX-kb4JK70E",
      "use": "sig",
      "x": "AaVgth9qgqVnbuCgUs_7_McGagdxyBhk9uGUR_p6i3UTfzFfNBd-fWHWPWLadqGfLjdu2rUV5qO-WizxKafW-l6W",
      "y": "ALqbu_ksYe9M-1105xyKrDe-6O0yFGFzIfeFe_EH1wLUeaR5bVm0V8nGtPsD-ZyjB8RfRMmzC-LogmnSvLk75mjP",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "vNt0YlmeP6RzEIn0Wf-Sj5cCouA",
      "use": "sig",
      "x": "OEQ1Onv_FWCZlb1JXP-ep3eeqQtfQXPJsTDo0yzu5An_xnZMjSJtgXJPDdc1lIS8",
      "y": "I-6xrMzTNpe5iudIu6-HESJsoc2z1Ayy-OJ7psqECGa6sSKvCEMHDDQ2OPi5OhuA",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "SNmwYQAzoY_o_lfI1Kq-qOqG3oo",
      "use": "enc",
      "n": "xhwEuePw8Elbbx86zR5xbqvjJPWMTzzJkMQWUTTBKgngdxiIEg3iLJiTxSQOSIi4FIwNVDhWt_BXfbNMk5VwuBdnsxZ4NYLsrMst-PA0krlJsmZ-TkVLRabjOWC1Ikg1MChgtofdbFQKIdOWQawF4MyXltACro6Svf_7Ct0aEh5og1d80HZ076mj3aIGa40d-IyCuMHNdbMKeysQ-x2zvGLy7KtdSeRyCIAtaglCX-VRuyKjeQkYsP0c-xc7wjbZGVR8X0DcPc94tl2hp_c0sWd1gW-a_8BqxfWuGRvCUfKPXbd5IH4cjvEA25Tr0kEQtCt9voaRI6IQ7A0QpAeAQw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "UmmotA-gHk0nwIJutjzeyE8NFAY",
      "use": "enc",
      "x": "Ort6A65pM7rxrPEbpSCs-RNuzcQ0qBZ0mHZFG-6AbK8",
      "y": "t_394crxLIH_gMQc2Cn3BClP0eJUpzA9tFejFK12Sn4",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "lF2d6Abngrj47Nc0Fl60aj6X35k",
      "use": "enc",
      "x": "tQPUct_BI3PNjK8dvfDRJDbJIv3el2J3csOn-3tlAcVybGlpXPkVnMAhfoGOhkUa",
      "y": "95ZdF5nXRsjYYbWyCQ6QxwAVFJIP1FNi5n3DS7rw2HS71f8bWU0HsPCT5MAtk8VM",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "mMMYX1Wd89M9JNNflvYu9Lu4zi4",
      "use": "enc",
      "x": "AB78B-cPZCBk-GCmvqlB5XWP4Js7eg2YHvT5PSt-rp4W5QjfyloNU-9uUerhkjhjzUYCXGZPlLhcA3TnuIoejj-s",
      "y": "AGiqjHyPd5C05KJnK9s90tkNkXFp5VdDBc_qafnTHRnQePNh8FAdjOQ3LxLlQTUWHd1X3Zmv-SEb1dKdVOPgw53k",
      "crv": "P-521"
    }
  ]
}
2021-08-25 21:14:55 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-08-25 21:14:55 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2021-08-25 21:14:55 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-08-25 21:14:55 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "0OkwcG7h25a78veaJ4zp_LiE190",
      "use": "sig",
      "n": "vax6lDZPWoMM_usc48KLv19ZLIKQVDapygEAYFYgEnqtvK7SKwal80pMUjk74rMNdJqZLqW2yG4-tBbvFMHJtq9WVzLjZ2OSPIrgsVH9fY-wsSxiEtAS0acbxIfbYyZNfX0ZxF2rEh90qlGNsW6AXmzaXVWZkDwm9Q48wnJGdB0tFE9IyucoJwWzNMS6YTAPcjuMCHmhgcAvIRqI9fJ-784XF9gwpC8f68X6v0ZAd8U5tGURh4aBCv34Agln7O2L1VbeFqM7_yfJB2NuqdunETHfFkCJRREid8ONt_Qs0VRJ-2lmTHCodHtbNIwIY8KReeTbaGuA-P1eXwCVWmOq_w",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "FDBu6tV56Yq4FCS10YSx5iEj27Y",
      "use": "sig",
      "x": "AOBWZ5IBzBQYPZw0moKjRxO29Gdxq3EAjS22kqBUoPSoQE21Fv2Fvn51KI6kS26k9FeZOMdZZ5xMxyf4xE8N9Zbx",
      "y": "ACZUHZDtGOCXRcN_cPOoLO6cPtwhgD0TOPCdfuhPkhVkXseIeSKrTGZ_mel4txgRpugyirQ8ST5iKysMbgHb4jI_",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "dx_AQHNiPt6uUz_lxRoA8XmJLlk",
      "use": "sig",
      "x": "-RSPlUjlEkeyA6yGA2ifCWRl8kjl7WLaQQZsmFOVCEc",
      "y": "PBcEKcRCKaJTAd2iWn5qgsk6aCoixwoS-GH0gq4D1bQ",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "zT0oyWqDMmV5Iak4fMiTfwAqXUA",
      "use": "sig",
      "x": "VZddnMPgM53oZN0fLmuE5VP3PBYZN5pFFSizAT_E6AxbgIlr5X1OdEyRfHZCB2E8",
      "y": "L7nS8RbI-vsdQwqzO45FMA0NH42f0FNYDwP1xS1EF_f_t5UrXU8ANHyBaux8ze0E",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "4MsFQnCmsobqJwaHrb7ubTsNQxM",
      "use": "sig",
      "n": "kW0pzJkr0gLg7Tf5uj4BtAP1XEV83-3ecc8WkNTX1ndvgPpzzpzeX3q5RTBpgyQI-HCFpCThj7DYLrc1gHjss820gPkBezGSRG4WqMfLrXDIZypy_d75Nrfivyb_2zN4jrLEdtcpBf_RQ0-pkAGqQE43VcvJBu3jpeS-A3kx4wl3H5dHfLwWh4GXsqTo2R0HIeqnOFIIILuKDjBD2AZMANnTzmGnm3Dpj9ph_9NlazPY0zvsXLKhHvv1woyZsFKbSB3EBDpiqPWkn3d314nr1jgKQ0K-1JYhp5EFs_FzPdEUtBMFkwdISlem8YNoSKBG552Cq4UmOa8vPC0ZwCKL4Q",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "XB5vWN73DL8AKr_gKfYppLniNtc",
      "use": "sig",
      "x": "CA6Nwu192uO0hj_JOevQJELKyNwqliVfiYkzfkm8Y5Q",
      "y": "C465ha92MByoi0tkjIFGg8kQdmk2F7Q8fOpYvU8dNK4",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "u0AuuzVxj4IyK1uTyX-kb4JK70E",
      "use": "sig",
      "x": "AaVgth9qgqVnbuCgUs_7_McGagdxyBhk9uGUR_p6i3UTfzFfNBd-fWHWPWLadqGfLjdu2rUV5qO-WizxKafW-l6W",
      "y": "ALqbu_ksYe9M-1105xyKrDe-6O0yFGFzIfeFe_EH1wLUeaR5bVm0V8nGtPsD-ZyjB8RfRMmzC-LogmnSvLk75mjP",
      "crv": "P-521"
    },
    {
      "kty": "EC",
      "kid": "vNt0YlmeP6RzEIn0Wf-Sj5cCouA",
      "use": "sig",
      "x": "OEQ1Onv_FWCZlb1JXP-ep3eeqQtfQXPJsTDo0yzu5An_xnZMjSJtgXJPDdc1lIS8",
      "y": "I-6xrMzTNpe5iudIu6-HESJsoc2z1Ayy-OJ7psqECGa6sSKvCEMHDDQ2OPi5OhuA",
      "crv": "P-384"
    },
    {
      "kty": "RSA",
      "kid": "SNmwYQAzoY_o_lfI1Kq-qOqG3oo",
      "use": "enc",
      "n": "xhwEuePw8Elbbx86zR5xbqvjJPWMTzzJkMQWUTTBKgngdxiIEg3iLJiTxSQOSIi4FIwNVDhWt_BXfbNMk5VwuBdnsxZ4NYLsrMst-PA0krlJsmZ-TkVLRabjOWC1Ikg1MChgtofdbFQKIdOWQawF4MyXltACro6Svf_7Ct0aEh5og1d80HZ076mj3aIGa40d-IyCuMHNdbMKeysQ-x2zvGLy7KtdSeRyCIAtaglCX-VRuyKjeQkYsP0c-xc7wjbZGVR8X0DcPc94tl2hp_c0sWd1gW-a_8BqxfWuGRvCUfKPXbd5IH4cjvEA25Tr0kEQtCt9voaRI6IQ7A0QpAeAQw",
      "e": "AQAB"
    },
    {
      "kty": "EC",
      "kid": "UmmotA-gHk0nwIJutjzeyE8NFAY",
      "use": "enc",
      "x": "Ort6A65pM7rxrPEbpSCs-RNuzcQ0qBZ0mHZFG-6AbK8",
      "y": "t_394crxLIH_gMQc2Cn3BClP0eJUpzA9tFejFK12Sn4",
      "crv": "P-256"
    },
    {
      "kty": "EC",
      "kid": "lF2d6Abngrj47Nc0Fl60aj6X35k",
      "use": "enc",
      "x": "tQPUct_BI3PNjK8dvfDRJDbJIv3el2J3csOn-3tlAcVybGlpXPkVnMAhfoGOhkUa",
      "y": "95ZdF5nXRsjYYbWyCQ6QxwAVFJIP1FNi5n3DS7rw2HS71f8bWU0HsPCT5MAtk8VM",
      "crv": "P-384"
    },
    {
      "kty": "EC",
      "kid": "mMMYX1Wd89M9JNNflvYu9Lu4zi4",
      "use": "enc",
      "x": "AB78B-cPZCBk-GCmvqlB5XWP4Js7eg2YHvT5PSt-rp4W5QjfyloNU-9uUerhkjhjzUYCXGZPlLhcA3TnuIoejj-s",
      "y": "AGiqjHyPd5C05KJnK9s90tkNkXFp5VdDBc_qafnTHRnQePNh8FAdjOQ3LxLlQTUWHd1X3Zmv-SEb1dKdVOPgw53k",
      "crv": "P-521"
    }
  ]
}
2021-08-25 21:14:55 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
c__fapi-jwt-par1
scope
openid other
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "dakid",
      "alg": "PS256",
      "n": "sfiwoB_Ix6eYm07Bneu7aitqrol1DvTpVWII8vSR7LYEmR2yoOwqsqnLPEwvloFvc726vE0_QG8eM2PDZX8uz3I6o0GsqNa1LXtVYy-YMu4wyoX5SiXxajnFaBx0OqrGJF1GdGaOvpQNokxfYxekLz4U2_gnIm9ogwoKA6BSwjCJzBHoTLbF6IzvciSsSKuUWibnw4iSl-G1Mwgfa4IXVPwMFvix4WuBW7E66w8d6kPf0lmW2SOiaVcByLaATZZ5jQE1mxiXuq53z_rN0WaLaLcEo52_DfoN1hCacQ_ggpNvdMogWY5e7sK5nQIbRx3lSdqmwHbdg_O8aA-GWpYW-Q",
      "e": "AQAB",
      "d": "ohc3fs8UBct98U2ciCFQM1VRt59X7wRek7ZTIjxfv3DT5USoEWqnRMviX4uf9_rxMEAIGEJermfF4NYm-4UHdEa8Yz6Ia8oJf2AKF-kcPJ61725v6vl909rEEZuAvIIXLr2JUrCpp6eed0gJxG2eyqxHQUTVF8bSMC7viff2CAe4RPdiSDWQBUGoM13svSC5cdZlHxz134mHthMh7zdk47tGHJZaS8AyjeRlU7sRzYFHY76NPoaF8YKBjU97nysXQkkNqcKOTt-ZK1ZYafdEowBYxO2nQEx4wKL56nxqkr1u93XBrEEt62mOftwGgozaDyHwer0C0bD_FQZut5rLAQ",
      "p": "7LHmQtYeFeKSop1R7tBXbTDDtdmgI3woVFwnexbelvK1Ll-Pm8ZBmClbFuBusacANfPNccbbPd6QElkkbcVhPI5q2BBdoO7ga-QZPB9WgQeUBKjGQFkJa6fV144_vQozYppDneulQJ9sFSaU6VkDYq4maJmFNozxV8_4keSfDSE",
      "q": "wHyqoGzxWvMWJneQm_GJB0EQGQb_ypnpDF3vgL6ACCgv8mcDW8ZGlue5BlCK5QbtgRyhJch1gFjNCcMJY8p_lriMX1tfEvoDi8yo-Dhmn0nvEQ-0mG1x-26cgLyA0K06LRxh9GO7069Safo3xEPKNflphfVOct1YapTQpewfNtk",
      "dp": "3cwGnXLPVmquRbtt339TrXoYqvt3WEkr8YE5bdqMUp60sPPTOoGZTeDS_qjokYiQZf5D8e4J2_wGvWrS_BoNeBVsgXM0iW3O1ssz6mbjRJ25UnRk8j982Gi5tfgSOi6o4Cj2W7FJdTjuqxMwT0meJoZSb4oMjoWcUlEL-IpnkIE",
      "dq": "s9ZF3CisvpqKwVnII8pgigSBs8BUT8fIcqN41sIlAHn7gfA4tQ_kd6z7syig_CWi1JQZAyHslgNhXZN5PGC_H-RAUf8eLq6jjYOjAnY_eucqkrgntJncelr3oVd8ynpt9iOkaR6dJ8OPri_21km3rQHfUybDKpIev0VWQw7-gtE",
      "qi": "By6K5EAIOIypaL2r6n5BdXSzNuA1r6SBgeIzwB_kQP02CGB6iPle5_tLm9MFMYnN2WayRlCqfNBKbZ700wK4zLBThbwbbMWX8C3FxCaxDvaUemh9u-Ls-3MnFLMtKTZcl5K7BQ7HHx0WUlXW5gDtLbjwRkvanzdIEiTN5ALCtQc"
    },
    {
      "kty": "EC",
      "kid": "hTmLGw",
      "use": "enc",
      "alg": "ECDH-ES",
      "x": "zayjCNChbil1lRhGFTOfD7IsDI1uTcCt8whjMo42EZg",
      "y": "LL5EYIHi3zM16i6nUJzwvG-GJLwjE7GyArT4PxPNQDs",
      "crv": "P-256",
      "d": "nP-nIU2smk3SPM5kFYgXtrpV6OpQDAW3Jrri7A2ZbIA"
    }
  ]
}
2021-08-25 21:14:55 SUCCESS
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
2021-08-25 21:14:55 SUCCESS
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
ca
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
2021-08-25 21:14:55 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-08-25 21:14:55 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "dakid",
      "alg": "PS256",
      "n": "sfiwoB_Ix6eYm07Bneu7aitqrol1DvTpVWII8vSR7LYEmR2yoOwqsqnLPEwvloFvc726vE0_QG8eM2PDZX8uz3I6o0GsqNa1LXtVYy-YMu4wyoX5SiXxajnFaBx0OqrGJF1GdGaOvpQNokxfYxekLz4U2_gnIm9ogwoKA6BSwjCJzBHoTLbF6IzvciSsSKuUWibnw4iSl-G1Mwgfa4IXVPwMFvix4WuBW7E66w8d6kPf0lmW2SOiaVcByLaATZZ5jQE1mxiXuq53z_rN0WaLaLcEo52_DfoN1hCacQ_ggpNvdMogWY5e7sK5nQIbRx3lSdqmwHbdg_O8aA-GWpYW-Q",
      "e": "AQAB",
      "d": "ohc3fs8UBct98U2ciCFQM1VRt59X7wRek7ZTIjxfv3DT5USoEWqnRMviX4uf9_rxMEAIGEJermfF4NYm-4UHdEa8Yz6Ia8oJf2AKF-kcPJ61725v6vl909rEEZuAvIIXLr2JUrCpp6eed0gJxG2eyqxHQUTVF8bSMC7viff2CAe4RPdiSDWQBUGoM13svSC5cdZlHxz134mHthMh7zdk47tGHJZaS8AyjeRlU7sRzYFHY76NPoaF8YKBjU97nysXQkkNqcKOTt-ZK1ZYafdEowBYxO2nQEx4wKL56nxqkr1u93XBrEEt62mOftwGgozaDyHwer0C0bD_FQZut5rLAQ",
      "p": "7LHmQtYeFeKSop1R7tBXbTDDtdmgI3woVFwnexbelvK1Ll-Pm8ZBmClbFuBusacANfPNccbbPd6QElkkbcVhPI5q2BBdoO7ga-QZPB9WgQeUBKjGQFkJa6fV144_vQozYppDneulQJ9sFSaU6VkDYq4maJmFNozxV8_4keSfDSE",
      "q": "wHyqoGzxWvMWJneQm_GJB0EQGQb_ypnpDF3vgL6ACCgv8mcDW8ZGlue5BlCK5QbtgRyhJch1gFjNCcMJY8p_lriMX1tfEvoDi8yo-Dhmn0nvEQ-0mG1x-26cgLyA0K06LRxh9GO7069Safo3xEPKNflphfVOct1YapTQpewfNtk",
      "dp": "3cwGnXLPVmquRbtt339TrXoYqvt3WEkr8YE5bdqMUp60sPPTOoGZTeDS_qjokYiQZf5D8e4J2_wGvWrS_BoNeBVsgXM0iW3O1ssz6mbjRJ25UnRk8j982Gi5tfgSOi6o4Cj2W7FJdTjuqxMwT0meJoZSb4oMjoWcUlEL-IpnkIE",
      "dq": "s9ZF3CisvpqKwVnII8pgigSBs8BUT8fIcqN41sIlAHn7gfA4tQ_kd6z7syig_CWi1JQZAyHslgNhXZN5PGC_H-RAUf8eLq6jjYOjAnY_eucqkrgntJncelr3oVd8ynpt9iOkaR6dJ8OPri_21km3rQHfUybDKpIev0VWQw7-gtE",
      "qi": "By6K5EAIOIypaL2r6n5BdXSzNuA1r6SBgeIzwB_kQP02CGB6iPle5_tLm9MFMYnN2WayRlCqfNBKbZ700wK4zLBThbwbbMWX8C3FxCaxDvaUemh9u-Ls-3MnFLMtKTZcl5K7BQ7HHx0WUlXW5gDtLbjwRkvanzdIEiTN5ALCtQc"
    },
    {
      "kty": "EC",
      "kid": "hTmLGw",
      "use": "enc",
      "alg": "ECDH-ES",
      "x": "zayjCNChbil1lRhGFTOfD7IsDI1uTcCt8whjMo42EZg",
      "y": "LL5EYIHi3zM16i6nUJzwvG-GJLwjE7GyArT4PxPNQDs",
      "crv": "P-256",
      "d": "nP-nIU2smk3SPM5kFYgXtrpV6OpQDAW3Jrri7A2ZbIA"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "kid": "dakid",
      "alg": "PS256",
      "n": "sfiwoB_Ix6eYm07Bneu7aitqrol1DvTpVWII8vSR7LYEmR2yoOwqsqnLPEwvloFvc726vE0_QG8eM2PDZX8uz3I6o0GsqNa1LXtVYy-YMu4wyoX5SiXxajnFaBx0OqrGJF1GdGaOvpQNokxfYxekLz4U2_gnIm9ogwoKA6BSwjCJzBHoTLbF6IzvciSsSKuUWibnw4iSl-G1Mwgfa4IXVPwMFvix4WuBW7E66w8d6kPf0lmW2SOiaVcByLaATZZ5jQE1mxiXuq53z_rN0WaLaLcEo52_DfoN1hCacQ_ggpNvdMogWY5e7sK5nQIbRx3lSdqmwHbdg_O8aA-GWpYW-Q"
    },
    {
      "kty": "EC",
      "use": "enc",
      "crv": "P-256",
      "kid": "hTmLGw",
      "x": "zayjCNChbil1lRhGFTOfD7IsDI1uTcCt8whjMo42EZg",
      "y": "LL5EYIHi3zM16i6nUJzwvG-GJLwjE7GyArT4PxPNQDs",
      "alg": "ECDH-ES"
    }
  ]
}
2021-08-25 21:14:55 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-08-25 21:14:55 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-08-25 21:14:55 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "ES256",
  "PS256"
]
2021-08-25 21:14:55 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "dakid",
      "alg": "PS256",
      "n": "sfiwoB_Ix6eYm07Bneu7aitqrol1DvTpVWII8vSR7LYEmR2yoOwqsqnLPEwvloFvc726vE0_QG8eM2PDZX8uz3I6o0GsqNa1LXtVYy-YMu4wyoX5SiXxajnFaBx0OqrGJF1GdGaOvpQNokxfYxekLz4U2_gnIm9ogwoKA6BSwjCJzBHoTLbF6IzvciSsSKuUWibnw4iSl-G1Mwgfa4IXVPwMFvix4WuBW7E66w8d6kPf0lmW2SOiaVcByLaATZZ5jQE1mxiXuq53z_rN0WaLaLcEo52_DfoN1hCacQ_ggpNvdMogWY5e7sK5nQIbRx3lSdqmwHbdg_O8aA-GWpYW-Q",
      "e": "AQAB",
      "d": "ohc3fs8UBct98U2ciCFQM1VRt59X7wRek7ZTIjxfv3DT5USoEWqnRMviX4uf9_rxMEAIGEJermfF4NYm-4UHdEa8Yz6Ia8oJf2AKF-kcPJ61725v6vl909rEEZuAvIIXLr2JUrCpp6eed0gJxG2eyqxHQUTVF8bSMC7viff2CAe4RPdiSDWQBUGoM13svSC5cdZlHxz134mHthMh7zdk47tGHJZaS8AyjeRlU7sRzYFHY76NPoaF8YKBjU97nysXQkkNqcKOTt-ZK1ZYafdEowBYxO2nQEx4wKL56nxqkr1u93XBrEEt62mOftwGgozaDyHwer0C0bD_FQZut5rLAQ",
      "p": "7LHmQtYeFeKSop1R7tBXbTDDtdmgI3woVFwnexbelvK1Ll-Pm8ZBmClbFuBusacANfPNccbbPd6QElkkbcVhPI5q2BBdoO7ga-QZPB9WgQeUBKjGQFkJa6fV144_vQozYppDneulQJ9sFSaU6VkDYq4maJmFNozxV8_4keSfDSE",
      "q": "wHyqoGzxWvMWJneQm_GJB0EQGQb_ypnpDF3vgL6ACCgv8mcDW8ZGlue5BlCK5QbtgRyhJch1gFjNCcMJY8p_lriMX1tfEvoDi8yo-Dhmn0nvEQ-0mG1x-26cgLyA0K06LRxh9GO7069Safo3xEPKNflphfVOct1YapTQpewfNtk",
      "dp": "3cwGnXLPVmquRbtt339TrXoYqvt3WEkr8YE5bdqMUp60sPPTOoGZTeDS_qjokYiQZf5D8e4J2_wGvWrS_BoNeBVsgXM0iW3O1ssz6mbjRJ25UnRk8j982Gi5tfgSOi6o4Cj2W7FJdTjuqxMwT0meJoZSb4oMjoWcUlEL-IpnkIE",
      "dq": "s9ZF3CisvpqKwVnII8pgigSBs8BUT8fIcqN41sIlAHn7gfA4tQ_kd6z7syig_CWi1JQZAyHslgNhXZN5PGC_H-RAUf8eLq6jjYOjAnY_eucqkrgntJncelr3oVd8ynpt9iOkaR6dJ8OPri_21km3rQHfUybDKpIev0VWQw7-gtE",
      "qi": "By6K5EAIOIypaL2r6n5BdXSzNuA1r6SBgeIzwB_kQP02CGB6iPle5_tLm9MFMYnN2WayRlCqfNBKbZ700wK4zLBThbwbbMWX8C3FxCaxDvaUemh9u-Ls-3MnFLMtKTZcl5K7BQ7HHx0WUlXW5gDtLbjwRkvanzdIEiTN5ALCtQc"
    },
    {
      "kty": "EC",
      "kid": "hTmLGw",
      "use": "enc",
      "alg": "ECDH-ES",
      "x": "zayjCNChbil1lRhGFTOfD7IsDI1uTcCt8whjMo42EZg",
      "y": "LL5EYIHi3zM16i6nUJzwvG-GJLwjE7GyArT4PxPNQDs",
      "crv": "P-256",
      "d": "nP-nIU2smk3SPM5kFYgXtrpV6OpQDAW3Jrri7A2ZbIA"
    }
  ]
}
2021-08-25 21:14:55 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
Verify configuration of second client
2021-08-25 21:14:55 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
c__fapi-jwt-par2
scope
openid
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "daotherkid",
      "alg": "PS256",
      "n": "lG76rfhCZ5xRaKf39CCMvrTJLL7x_mNwN1hdk6vIvAkL8iIjOYgmNo0E7DZIH4PXxJHVX9Ef6G4aZaC6-bfTPTsjR39HO6aV1dLSSZircjflNACkwsytg5D7MO_6W-gwoXmMAA9n6iMBQ0wUaw9Tn1Jk_qlX8HcF2Je-Z5WNYNyfh2SRpdCwsCgoRq4wqmOvhWTIccy7pPzQy-IfHIdN8VSKfvwWR4DlAJlzpGsWSlSQS-rDkbVKnax63BZQOR3K7aOt5sJwrh3niR5gtI7CYjjkjuq6KlulAPTnKNfZnQ2j8nmyvjRV57hZg9Z-rzEVcGY-gQJ8VHhY8AyVkN3EmQ",
      "e": "AQAB",
      "d": "ScKocYEXxpMIZWBqt_bg2ffOrJyqdoaFggs4XSSVWNOKCyXpqTI-AweqtZL33ilPNJBfnwC1wXPNTElGAMfXger8ShA2nq7WcG4WL5pdQCIElQXo2iCJ7QJDwPrPx5IncGaNKo59Tf1dKEsLLnRsUpTIOUB_wa_zyMEHTkQkAEh5VrFDcT5l4Pz7uEcBjrPP-xvRXalK9H8E7xq8YMg0BByp0ogd-qnyNPTK-0iqSPBn5Gj-8lNEiqvBkY_i0S5VoBTBvh7HsLnmIsoqB1yGkEJNxijL463cNB5SekRTztiC7mz7f9-oJe9OLHqpcjwBAuEEJY-ekoftVY8kNvk2gQ",
      "p": "_7mhydczsf1-RlgazC1ElW1kDTdcVh9xtfiPRlLjjAklNxtKOVDxNXzPb8qsqqG6hXtio39ixH5vTGLVJRMz_jL0V_bPC4VH-s7zaKFxZWa2Fn79zRJv4KcS59Oi-2d1noR0lztDeyFdKBO2F3q9yjY4GUU0GPyt7Q1FmmsBSfE",
      "q": "lJfS4NDe2-E3QoW7TX2XGSixV50N76zo-V6KHp5CeYvtF4NHlQwRm8sD3NBKSCWg_hDhZYrFPIXJnoaTLSrzaDP_EX64ix9v_O48IWLvmUSb21XXk3g7gc1sYXIYn7UZm12Xe4P8LoStJep21xZZH6P4Nn3AaSCStq0_-ZkyvSk",
      "dp": "IVmxSuSA_m6D4GKvI_-nWSGKEdstdKHnL4c6ED7RJDsxGk250V3IB2S-nOK-wAYVkED2LUJ4vA2NMFYXXB10A2vbx_kNKYB5UbFZt0SOyF2r06U-LleANbk0Uv2b3NOyWDkIB40YEN_aCVcAwXElfVCy4kDPOY8Ck87OTAQ2h9E",
      "dq": "W0g5X6pwfZsJG3CT87KnU-lPqIbuvMH4DNkq-Ew4gfqXl84p90IGvzIkGU5Lk66qC-nKzVpGeDun9B6v4xtzlBv9IX47WBvj6_leLxRcJEelh0RgvlMqGz9ayTISNmpGZM9F87bNALa4t4Ylo1QzQ-Cy5qaxwOMlvdsIZgjaxqE",
      "qi": "XrW0v41psl4xeZ_imnUoZypy0GHeoar7uYYQd6ROssFA8DQjCzj0wfG-MaTd4NaBRcOuoxTJ1p6LgVe3Wfp3lnnoW4pK0EP1mC5LTlEx8SihzlcyPyCwRQgyJ-XggguF2KgU0fo01QP3mZwCtTGZ85Y173FtCbxR4_SZhVu8QJ8"
    },
    {
      "kty": "RSA",
      "kid": "g4VpZQ",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "sru5fupwET_tFy3Y8Ghk3y6Mx2wWw82T4QcM_xxbFZidQzdjMy6959hctYQ0z73XkZ0gYlbwx58hpbYA7b85nStzd0efPsaHcLzHjqV7vYU7s7C2rwyQN2dEBA8sF7Llga-WCCM-37KwI5-WYMMN19vO23g82rm2p_ORP0F01qe7UKQJZNqpep21-hXhUp8czDrBwwSAgwg0MLG9Ffiq5BVSbWMM4ituxK7Dss7oASwM90kdNzwAuRK-0WAuMlxzCJqRJW0JdHS3CGrCHIvjNYKRSsUIcrqjRROpP7ev_L-R-ObITzke8UoYdC6Jq-K5biTKYagRbifnoKgIcLZUyQ",
      "e": "AQAB",
      "d": "NhHYUe62LGG8ZdC22jOaoHHCoOmwEVf1rpOleN-pJmVe3eC5n9g6FxM7KKZwG5CA0EpKa7WFbb5UPX9L1KCO218ztRfzstf4TUCu1hZ10qWlo_yHp3kTf887oka8vgaeq5bkul1_PckexAgZQ_h-DZkvgPFk535bJX_nps00fWMLOSIqKUudS3LiotEknoCF7oaGY4L6BIuu6D41R7vIw0Be4yQfr1sxU_OwMGhDAL8evX1FB0MkxgM42dtmc2MSlSzYgm0zgyLd7ZMaSSyyPgdttzJyL5g2sBxviicTIZyzLzwuj4CH4Oe3mVbSR9gO7hJcFEiDBTmHSY071HMtAQ",
      "p": "1w5j4DsHb5ZCiBK24OcfSxR77cu8fl2EGwxZiew5EBAIlQoPiBZQGXmQXhuPaivU6nUXfQm42ypKW2vX2m3OCRG-BYSKEj6goz7NhFHyGfG-UAE5wV0hhg3v2ZMce57mm7y94Wbuo9qZr4CtAiS2LRz0TUQyN9BKux_dBxAjrFk",
      "q": "1ML-md6F83rwAX08CtTz2AgAq0qmyoAjfsNVKKCbDnU0-QyeqGpOPoBUjKLw1lJN7AlVkSQVhT_CYsNMdi6Sn60qTr5HX28uHTvSzbVwCQQ3Yn1fQSuEoap79JHygE7fEm-2yQ7ifitGzm2z8a9Gfe5eF9klfh-MYzzKNnoTHfE",
      "dp": "CFQMViCzFwUwqmhfILKSqauvaPQc5p_kf8-ooAi_5PlZ-7uaAmEq1PG6P4q9sRTld_b04-i-ee5XVtcEUvcxpXREcZ5CYpZ-ThQejWNHBu4vupVxkSV0KObdRQXHcpoiwCE9ET-VOk866GsJSC33yCN46o0bjMHKQxjmzGE5oHE",
      "dq": "yYDISwhiSwAzEOYAGK4pJ4AkyhYQs5b6hxMOs0SwtdexzPHzzcOoyS8XZH7po8IdhKAuhyDqtOF3A7y9zOw897e0axFxXWRaA1vmQedF7XQt1DyzG3DQ06A4d6BGUNjiEn71WaScRCxOijGCDDMZiylXujRxeur8Nfyb805YjrE",
      "qi": "ix_ZaWpPw0XYUJk0AXmnM-hcTifv-X-B6z-0z-RTrg0NPQJS40wr9j7qY1y9iBSu2ZhMqXJS9JZ7nBAGyRiqooghcxjrIJOKAUqRrbrXvgH75Mf9cHLxTNuz1AFmSrC2xsOlARPfpCJpIUS0Ub0h-UbEsuCTQMExHDWBjmb4opE"
    }
  ]
}
2021-08-25 21:14:55 SUCCESS
ValidateMTLSCertificates2Header
MTLS certificates header is valid
2021-08-25 21:14:55 SUCCESS
ExtractMTLSCertificates2FromConfiguration
Mutual TLS authentication credentials loaded
cert
MIICmjCCAkGgAwIBAgIBDDAKBggqhkjOPQQDAjA6MRswGQYDVQQKDBJMZXQncyBBdXRoZW50aWNhdGUxGzAZBgNVBAMMEkxBIEludGVybWVkaWF0ZSBDQTAeFw0yMTA2MTQxNTU3MjBaFw0yMjA2MjQxNTU3MjBaMDUxCzAJBgNVBAYTAkNBMQswCQYDVQQIDAJCQzEZMBcGA1UEAwwQY19fZmFwaS1qd3QtcGFyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK5p8ftaq5Tt5AsV1ZgqUQry0FR7o2wDK6Rw+HMcS1YiZvcTwb0tzDxjJ6fcRT7jtMDisxA0TwGOX3eSTpkPRdPpP+UMeOLk6SM6wXCYztTYKYR90qaYlF9Ozbx5ikDQLOxSP++fVWwRwmJSynGZ+KrQaR2Yyd8nQ11Zc5JqFi1DlAAY6Tx+c9rMhQZ2TGPURmOWDSB5/nee7pnPaMcof5mDw46zUXKOS7J6ROTTjN/Te4JzRPJkwCBDzCxC+Q4c86Gl8iO3saEiBWKxi4865Otu+k+0+unbYfnk6zc4EETCm6RxOpwmKfnWxnY2M71eW+CuPidXrFEX3Uo/94xV0NUCAwEAAaNyMHAwCQYDVR0TBAIwADAfBgNVHSMEGDAWgBRm3WjLa38lbEYCuiCPct0ZaSED2DAOBgNVHQ8BAf8EBAMCBsAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwHQYDVR0RAQH/BBMwEYEPYmRjQGV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0cAMEQCIDT3f+hniFekzmsolMFZISlukRzuLZrRUQOcVLIE+2vpAiAJkxsggy87x2GHdVYs08CTM4913DZNz2row+Bdw1tZ2w==
key
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
ca
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
2021-08-25 21:14:55 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2021-08-25 21:14:55 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "daotherkid",
      "alg": "PS256",
      "n": "lG76rfhCZ5xRaKf39CCMvrTJLL7x_mNwN1hdk6vIvAkL8iIjOYgmNo0E7DZIH4PXxJHVX9Ef6G4aZaC6-bfTPTsjR39HO6aV1dLSSZircjflNACkwsytg5D7MO_6W-gwoXmMAA9n6iMBQ0wUaw9Tn1Jk_qlX8HcF2Je-Z5WNYNyfh2SRpdCwsCgoRq4wqmOvhWTIccy7pPzQy-IfHIdN8VSKfvwWR4DlAJlzpGsWSlSQS-rDkbVKnax63BZQOR3K7aOt5sJwrh3niR5gtI7CYjjkjuq6KlulAPTnKNfZnQ2j8nmyvjRV57hZg9Z-rzEVcGY-gQJ8VHhY8AyVkN3EmQ",
      "e": "AQAB",
      "d": "ScKocYEXxpMIZWBqt_bg2ffOrJyqdoaFggs4XSSVWNOKCyXpqTI-AweqtZL33ilPNJBfnwC1wXPNTElGAMfXger8ShA2nq7WcG4WL5pdQCIElQXo2iCJ7QJDwPrPx5IncGaNKo59Tf1dKEsLLnRsUpTIOUB_wa_zyMEHTkQkAEh5VrFDcT5l4Pz7uEcBjrPP-xvRXalK9H8E7xq8YMg0BByp0ogd-qnyNPTK-0iqSPBn5Gj-8lNEiqvBkY_i0S5VoBTBvh7HsLnmIsoqB1yGkEJNxijL463cNB5SekRTztiC7mz7f9-oJe9OLHqpcjwBAuEEJY-ekoftVY8kNvk2gQ",
      "p": "_7mhydczsf1-RlgazC1ElW1kDTdcVh9xtfiPRlLjjAklNxtKOVDxNXzPb8qsqqG6hXtio39ixH5vTGLVJRMz_jL0V_bPC4VH-s7zaKFxZWa2Fn79zRJv4KcS59Oi-2d1noR0lztDeyFdKBO2F3q9yjY4GUU0GPyt7Q1FmmsBSfE",
      "q": "lJfS4NDe2-E3QoW7TX2XGSixV50N76zo-V6KHp5CeYvtF4NHlQwRm8sD3NBKSCWg_hDhZYrFPIXJnoaTLSrzaDP_EX64ix9v_O48IWLvmUSb21XXk3g7gc1sYXIYn7UZm12Xe4P8LoStJep21xZZH6P4Nn3AaSCStq0_-ZkyvSk",
      "dp": "IVmxSuSA_m6D4GKvI_-nWSGKEdstdKHnL4c6ED7RJDsxGk250V3IB2S-nOK-wAYVkED2LUJ4vA2NMFYXXB10A2vbx_kNKYB5UbFZt0SOyF2r06U-LleANbk0Uv2b3NOyWDkIB40YEN_aCVcAwXElfVCy4kDPOY8Ck87OTAQ2h9E",
      "dq": "W0g5X6pwfZsJG3CT87KnU-lPqIbuvMH4DNkq-Ew4gfqXl84p90IGvzIkGU5Lk66qC-nKzVpGeDun9B6v4xtzlBv9IX47WBvj6_leLxRcJEelh0RgvlMqGz9ayTISNmpGZM9F87bNALa4t4Ylo1QzQ-Cy5qaxwOMlvdsIZgjaxqE",
      "qi": "XrW0v41psl4xeZ_imnUoZypy0GHeoar7uYYQd6ROssFA8DQjCzj0wfG-MaTd4NaBRcOuoxTJ1p6LgVe3Wfp3lnnoW4pK0EP1mC5LTlEx8SihzlcyPyCwRQgyJ-XggguF2KgU0fo01QP3mZwCtTGZ85Y173FtCbxR4_SZhVu8QJ8"
    },
    {
      "kty": "RSA",
      "kid": "g4VpZQ",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "sru5fupwET_tFy3Y8Ghk3y6Mx2wWw82T4QcM_xxbFZidQzdjMy6959hctYQ0z73XkZ0gYlbwx58hpbYA7b85nStzd0efPsaHcLzHjqV7vYU7s7C2rwyQN2dEBA8sF7Llga-WCCM-37KwI5-WYMMN19vO23g82rm2p_ORP0F01qe7UKQJZNqpep21-hXhUp8czDrBwwSAgwg0MLG9Ffiq5BVSbWMM4ituxK7Dss7oASwM90kdNzwAuRK-0WAuMlxzCJqRJW0JdHS3CGrCHIvjNYKRSsUIcrqjRROpP7ev_L-R-ObITzke8UoYdC6Jq-K5biTKYagRbifnoKgIcLZUyQ",
      "e": "AQAB",
      "d": "NhHYUe62LGG8ZdC22jOaoHHCoOmwEVf1rpOleN-pJmVe3eC5n9g6FxM7KKZwG5CA0EpKa7WFbb5UPX9L1KCO218ztRfzstf4TUCu1hZ10qWlo_yHp3kTf887oka8vgaeq5bkul1_PckexAgZQ_h-DZkvgPFk535bJX_nps00fWMLOSIqKUudS3LiotEknoCF7oaGY4L6BIuu6D41R7vIw0Be4yQfr1sxU_OwMGhDAL8evX1FB0MkxgM42dtmc2MSlSzYgm0zgyLd7ZMaSSyyPgdttzJyL5g2sBxviicTIZyzLzwuj4CH4Oe3mVbSR9gO7hJcFEiDBTmHSY071HMtAQ",
      "p": "1w5j4DsHb5ZCiBK24OcfSxR77cu8fl2EGwxZiew5EBAIlQoPiBZQGXmQXhuPaivU6nUXfQm42ypKW2vX2m3OCRG-BYSKEj6goz7NhFHyGfG-UAE5wV0hhg3v2ZMce57mm7y94Wbuo9qZr4CtAiS2LRz0TUQyN9BKux_dBxAjrFk",
      "q": "1ML-md6F83rwAX08CtTz2AgAq0qmyoAjfsNVKKCbDnU0-QyeqGpOPoBUjKLw1lJN7AlVkSQVhT_CYsNMdi6Sn60qTr5HX28uHTvSzbVwCQQ3Yn1fQSuEoap79JHygE7fEm-2yQ7ifitGzm2z8a9Gfe5eF9klfh-MYzzKNnoTHfE",
      "dp": "CFQMViCzFwUwqmhfILKSqauvaPQc5p_kf8-ooAi_5PlZ-7uaAmEq1PG6P4q9sRTld_b04-i-ee5XVtcEUvcxpXREcZ5CYpZ-ThQejWNHBu4vupVxkSV0KObdRQXHcpoiwCE9ET-VOk866GsJSC33yCN46o0bjMHKQxjmzGE5oHE",
      "dq": "yYDISwhiSwAzEOYAGK4pJ4AkyhYQs5b6hxMOs0SwtdexzPHzzcOoyS8XZH7po8IdhKAuhyDqtOF3A7y9zOw897e0axFxXWRaA1vmQedF7XQt1DyzG3DQ06A4d6BGUNjiEn71WaScRCxOijGCDDMZiylXujRxeur8Nfyb805YjrE",
      "qi": "ix_ZaWpPw0XYUJk0AXmnM-hcTifv-X-B6z-0z-RTrg0NPQJS40wr9j7qY1y9iBSu2ZhMqXJS9JZ7nBAGyRiqooghcxjrIJOKAUqRrbrXvgH75Mf9cHLxTNuz1AFmSrC2xsOlARPfpCJpIUS0Ub0h-UbEsuCTQMExHDWBjmb4opE"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "kid": "daotherkid",
      "alg": "PS256",
      "n": "lG76rfhCZ5xRaKf39CCMvrTJLL7x_mNwN1hdk6vIvAkL8iIjOYgmNo0E7DZIH4PXxJHVX9Ef6G4aZaC6-bfTPTsjR39HO6aV1dLSSZircjflNACkwsytg5D7MO_6W-gwoXmMAA9n6iMBQ0wUaw9Tn1Jk_qlX8HcF2Je-Z5WNYNyfh2SRpdCwsCgoRq4wqmOvhWTIccy7pPzQy-IfHIdN8VSKfvwWR4DlAJlzpGsWSlSQS-rDkbVKnax63BZQOR3K7aOt5sJwrh3niR5gtI7CYjjkjuq6KlulAPTnKNfZnQ2j8nmyvjRV57hZg9Z-rzEVcGY-gQJ8VHhY8AyVkN3EmQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "g4VpZQ",
      "alg": "RSA-OAEP",
      "n": "sru5fupwET_tFy3Y8Ghk3y6Mx2wWw82T4QcM_xxbFZidQzdjMy6959hctYQ0z73XkZ0gYlbwx58hpbYA7b85nStzd0efPsaHcLzHjqV7vYU7s7C2rwyQN2dEBA8sF7Llga-WCCM-37KwI5-WYMMN19vO23g82rm2p_ORP0F01qe7UKQJZNqpep21-hXhUp8czDrBwwSAgwg0MLG9Ffiq5BVSbWMM4ituxK7Dss7oASwM90kdNzwAuRK-0WAuMlxzCJqRJW0JdHS3CGrCHIvjNYKRSsUIcrqjRROpP7ev_L-R-ObITzke8UoYdC6Jq-K5biTKYagRbifnoKgIcLZUyQ"
    }
  ]
}
2021-08-25 21:14:55 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2021-08-25 21:14:55 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-08-25 21:14:55 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "ES256",
  "PS256"
]
2021-08-25 21:14:55 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "daotherkid",
      "alg": "PS256",
      "n": "lG76rfhCZ5xRaKf39CCMvrTJLL7x_mNwN1hdk6vIvAkL8iIjOYgmNo0E7DZIH4PXxJHVX9Ef6G4aZaC6-bfTPTsjR39HO6aV1dLSSZircjflNACkwsytg5D7MO_6W-gwoXmMAA9n6iMBQ0wUaw9Tn1Jk_qlX8HcF2Je-Z5WNYNyfh2SRpdCwsCgoRq4wqmOvhWTIccy7pPzQy-IfHIdN8VSKfvwWR4DlAJlzpGsWSlSQS-rDkbVKnax63BZQOR3K7aOt5sJwrh3niR5gtI7CYjjkjuq6KlulAPTnKNfZnQ2j8nmyvjRV57hZg9Z-rzEVcGY-gQJ8VHhY8AyVkN3EmQ",
      "e": "AQAB",
      "d": "ScKocYEXxpMIZWBqt_bg2ffOrJyqdoaFggs4XSSVWNOKCyXpqTI-AweqtZL33ilPNJBfnwC1wXPNTElGAMfXger8ShA2nq7WcG4WL5pdQCIElQXo2iCJ7QJDwPrPx5IncGaNKo59Tf1dKEsLLnRsUpTIOUB_wa_zyMEHTkQkAEh5VrFDcT5l4Pz7uEcBjrPP-xvRXalK9H8E7xq8YMg0BByp0ogd-qnyNPTK-0iqSPBn5Gj-8lNEiqvBkY_i0S5VoBTBvh7HsLnmIsoqB1yGkEJNxijL463cNB5SekRTztiC7mz7f9-oJe9OLHqpcjwBAuEEJY-ekoftVY8kNvk2gQ",
      "p": "_7mhydczsf1-RlgazC1ElW1kDTdcVh9xtfiPRlLjjAklNxtKOVDxNXzPb8qsqqG6hXtio39ixH5vTGLVJRMz_jL0V_bPC4VH-s7zaKFxZWa2Fn79zRJv4KcS59Oi-2d1noR0lztDeyFdKBO2F3q9yjY4GUU0GPyt7Q1FmmsBSfE",
      "q": "lJfS4NDe2-E3QoW7TX2XGSixV50N76zo-V6KHp5CeYvtF4NHlQwRm8sD3NBKSCWg_hDhZYrFPIXJnoaTLSrzaDP_EX64ix9v_O48IWLvmUSb21XXk3g7gc1sYXIYn7UZm12Xe4P8LoStJep21xZZH6P4Nn3AaSCStq0_-ZkyvSk",
      "dp": "IVmxSuSA_m6D4GKvI_-nWSGKEdstdKHnL4c6ED7RJDsxGk250V3IB2S-nOK-wAYVkED2LUJ4vA2NMFYXXB10A2vbx_kNKYB5UbFZt0SOyF2r06U-LleANbk0Uv2b3NOyWDkIB40YEN_aCVcAwXElfVCy4kDPOY8Ck87OTAQ2h9E",
      "dq": "W0g5X6pwfZsJG3CT87KnU-lPqIbuvMH4DNkq-Ew4gfqXl84p90IGvzIkGU5Lk66qC-nKzVpGeDun9B6v4xtzlBv9IX47WBvj6_leLxRcJEelh0RgvlMqGz9ayTISNmpGZM9F87bNALa4t4Ylo1QzQ-Cy5qaxwOMlvdsIZgjaxqE",
      "qi": "XrW0v41psl4xeZ_imnUoZypy0GHeoar7uYYQd6ROssFA8DQjCzj0wfG-MaTd4NaBRcOuoxTJ1p6LgVe3Wfp3lnnoW4pK0EP1mC5LTlEx8SihzlcyPyCwRQgyJ-XggguF2KgU0fo01QP3mZwCtTGZ85Y173FtCbxR4_SZhVu8QJ8"
    },
    {
      "kty": "RSA",
      "kid": "g4VpZQ",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "sru5fupwET_tFy3Y8Ghk3y6Mx2wWw82T4QcM_xxbFZidQzdjMy6959hctYQ0z73XkZ0gYlbwx58hpbYA7b85nStzd0efPsaHcLzHjqV7vYU7s7C2rwyQN2dEBA8sF7Llga-WCCM-37KwI5-WYMMN19vO23g82rm2p_ORP0F01qe7UKQJZNqpep21-hXhUp8czDrBwwSAgwg0MLG9Ffiq5BVSbWMM4ituxK7Dss7oASwM90kdNzwAuRK-0WAuMlxzCJqRJW0JdHS3CGrCHIvjNYKRSsUIcrqjRROpP7ev_L-R-ObITzke8UoYdC6Jq-K5biTKYagRbifnoKgIcLZUyQ",
      "e": "AQAB",
      "d": "NhHYUe62LGG8ZdC22jOaoHHCoOmwEVf1rpOleN-pJmVe3eC5n9g6FxM7KKZwG5CA0EpKa7WFbb5UPX9L1KCO218ztRfzstf4TUCu1hZ10qWlo_yHp3kTf887oka8vgaeq5bkul1_PckexAgZQ_h-DZkvgPFk535bJX_nps00fWMLOSIqKUudS3LiotEknoCF7oaGY4L6BIuu6D41R7vIw0Be4yQfr1sxU_OwMGhDAL8evX1FB0MkxgM42dtmc2MSlSzYgm0zgyLd7ZMaSSyyPgdttzJyL5g2sBxviicTIZyzLzwuj4CH4Oe3mVbSR9gO7hJcFEiDBTmHSY071HMtAQ",
      "p": "1w5j4DsHb5ZCiBK24OcfSxR77cu8fl2EGwxZiew5EBAIlQoPiBZQGXmQXhuPaivU6nUXfQm42ypKW2vX2m3OCRG-BYSKEj6goz7NhFHyGfG-UAE5wV0hhg3v2ZMce57mm7y94Wbuo9qZr4CtAiS2LRz0TUQyN9BKux_dBxAjrFk",
      "q": "1ML-md6F83rwAX08CtTz2AgAq0qmyoAjfsNVKKCbDnU0-QyeqGpOPoBUjKLw1lJN7AlVkSQVhT_CYsNMdi6Sn60qTr5HX28uHTvSzbVwCQQ3Yn1fQSuEoap79JHygE7fEm-2yQ7ifitGzm2z8a9Gfe5eF9klfh-MYzzKNnoTHfE",
      "dp": "CFQMViCzFwUwqmhfILKSqauvaPQc5p_kf8-ooAi_5PlZ-7uaAmEq1PG6P4q9sRTld_b04-i-ee5XVtcEUvcxpXREcZ5CYpZ-ThQejWNHBu4vupVxkSV0KObdRQXHcpoiwCE9ET-VOk866GsJSC33yCN46o0bjMHKQxjmzGE5oHE",
      "dq": "yYDISwhiSwAzEOYAGK4pJ4AkyhYQs5b6hxMOs0SwtdexzPHzzcOoyS8XZH7po8IdhKAuhyDqtOF3A7y9zOw897e0axFxXWRaA1vmQedF7XQt1DyzG3DQ06A4d6BGUNjiEn71WaScRCxOijGCDDMZiylXujRxeur8Nfyb805YjrE",
      "qi": "ix_ZaWpPw0XYUJk0AXmnM-hcTifv-X-B6z-0z-RTrg0NPQJS40wr9j7qY1y9iBSu2ZhMqXJS9JZ7nBAGyRiqooghcxjrIJOKAUqRrbrXvgH75Mf9cHLxTNuz1AFmSrC2xsOlARPfpCJpIUS0Ub0h-UbEsuCTQMExHDWBjmb4opE"
    }
  ]
}
2021-08-25 21:14:55 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2021-08-25 21:14:55 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://par-what-is-it-good-for.ping-eng.com:3000/ext/au/cdr/mock
cdrVersion
3
2021-08-25 21:14:55 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://par-what-is-it-good-for.ping-eng.com:3000/ext/au/cdr/mock
2021-08-25 21:14:55 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
2021-08-25 21:14:55 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
accounts_request_endpoint
{
  "testHost": "par-what-is-it-good-for.ping-eng.com",
  "testPort": 3000
}
2021-08-25 21:14:55
fapi-rw-id2-state-only-outside-request-object-not-used
Setup Done
Make request to authorization endpoint
2021-08-25 21:14:55 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
c__fapi-jwt-par1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
2021-08-25 21:14:55 SUCCESS
AddCdrAcrClaimToAuthorizationEndpointRequest
Added acr claim to authorization_endpoint_request
authorization_endpoint_request
{
  "client_id": "c__fapi-jwt-par1",
  "redirect_uri": "https://www.certification.openid.net/test/a/pi/callback",
  "scope": "openid other",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:cds.au:cdr:2",
        "essential": true
      }
    }
  }
}
2021-08-25 21:14:55 SUCCESS
AddCdrSharingDurationClaimToAuthorizationEndpointRequest
Added sharing_duration claim to authorization_endpoint_request
authorization_endpoint_request
{
  "client_id": "c__fapi-jwt-par1",
  "redirect_uri": "https://www.certification.openid.net/test/a/pi/callback",
  "scope": "openid other",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:cds.au:cdr:2",
        "essential": true
      }
    },
    "sharing_duration": 7776000
  }
}
2021-08-25 21:14:55
CreateRandomStateValue
Created state value
requested_state_length
10
state
7WrnnhL2Hb
2021-08-25 21:14:55
AddStateToAuthorizationEndpointRequest
NOT adding state to request object
2021-08-25 21:14:55
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
La0WBRrI84
2021-08-25 21:14:55 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
c__fapi-jwt-par1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:cds.au:cdr:2",
      "essential": true
    }
  },
  "sharing_duration": 7776000
}
nonce
La0WBRrI84
2021-08-25 21:14:55 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToCodeIdtoken
Added response_type parameter to request
client_id
c__fapi-jwt-par1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:cds.au:cdr:2",
      "essential": true
    }
  },
  "sharing_duration": 7776000
}
nonce
La0WBRrI84
response_type
code id_token
2021-08-25 21:14:55 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "client_id": "c__fapi-jwt-par1",
  "redirect_uri": "https://www.certification.openid.net/test/a/pi/callback",
  "scope": "openid other",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:cds.au:cdr:2",
        "essential": true
      }
    },
    "sharing_duration": 7776000
  },
  "nonce": "La0WBRrI84",
  "response_type": "code id_token"
}
2021-08-25 21:14:55 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.629926395E9
2021-08-25 21:14:55 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://par-what-is-it-good-for.ping-eng.com:9031
2021-08-25 21:14:55 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
c__fapi-jwt-par1
2021-08-25 21:14:55 SUCCESS
AddClientIdToRequestObject
Added client_id to request object claims
client_id
c__fapi-jwt-par1
2021-08-25 21:14:55 SUCCESS
SignRequestObject
Signed the request object
claims
{"aud":"https:\/\/par-what-is-it-good-for.ping-eng.com:9031","scope":"openid other","claims":{"sharing_duration":7776000,"id_token":{"acr":{"value":"urn:cds.au:cdr:2","essential":true}}},"iss":"c__fapi-jwt-par1","response_type":"code id_token","redirect_uri":"https:\/\/www.certification.openid.net\/test\/a\/pi\/callback","exp":1629926395,"nonce":"La0WBRrI84","client_id":"c__fapi-jwt-par1"}
header
{"kid":"dakid","alg":"PS256"}
request_object
eyJraWQiOiJkYWtpZCIsImFsZyI6IlBTMjU2In0.eyJhdWQiOiJodHRwczpcL1wvcGFyLXdoYXQtaXMtaXQtZ29vZC1mb3IucGluZy1lbmcuY29tOjkwMzEiLCJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsYWltcyI6eyJzaGFyaW5nX2R1cmF0aW9uIjo3Nzc2MDAwLCJpZF90b2tlbiI6eyJhY3IiOnsidmFsdWUiOiJ1cm46Y2RzLmF1OmNkcjoyIiwiZXNzZW50aWFsIjp0cnVlfX19LCJpc3MiOiJjX19mYXBpLWp3dC1wYXIxIiwicmVzcG9uc2VfdHlwZSI6ImNvZGUgaWRfdG9rZW4iLCJyZWRpcmVjdF91cmkiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvcGlcL2NhbGxiYWNrIiwiZXhwIjoxNjI5OTI2Mzk1LCJub25jZSI6IkxhMFdCUnJJODQiLCJjbGllbnRfaWQiOiJjX19mYXBpLWp3dC1wYXIxIn0.YAtIfecCzkqJLvgSoTcpcD3N0PPFkgAx-unNEBPpgFLNwMfUGek99pRjZSPVSbHlA3Z5ThPI0tggh1tXqVTbPbEMvWoUQknxAc9dwzSMHbldOjqj8ErgOy6BIaWsbScn7JrYNtY1oLaUuCCczzQ5OeqpjD7pZqAPmCNfug0pgF-F5XssEBdthVtqaWDReIhWQvXaT_9SB5Ri2YQE7IH-HrFRpOgibkVqVdMFdnHitOrPAI5hjoIKZc06lmoJgbwiczii5nClQSxd_9xKRqfIqA894vc94oT_dnHSrnVlpQH2d_AySX-qFXmwIprnQ5wIDNSbz0vT308loI3MSb1W9Q
key
{"p":"7LHmQtYeFeKSop1R7tBXbTDDtdmgI3woVFwnexbelvK1Ll-Pm8ZBmClbFuBusacANfPNccbbPd6QElkkbcVhPI5q2BBdoO7ga-QZPB9WgQeUBKjGQFkJa6fV144_vQozYppDneulQJ9sFSaU6VkDYq4maJmFNozxV8_4keSfDSE","kty":"RSA","q":"wHyqoGzxWvMWJneQm_GJB0EQGQb_ypnpDF3vgL6ACCgv8mcDW8ZGlue5BlCK5QbtgRyhJch1gFjNCcMJY8p_lriMX1tfEvoDi8yo-Dhmn0nvEQ-0mG1x-26cgLyA0K06LRxh9GO7069Safo3xEPKNflphfVOct1YapTQpewfNtk","d":"ohc3fs8UBct98U2ciCFQM1VRt59X7wRek7ZTIjxfv3DT5USoEWqnRMviX4uf9_rxMEAIGEJermfF4NYm-4UHdEa8Yz6Ia8oJf2AKF-kcPJ61725v6vl909rEEZuAvIIXLr2JUrCpp6eed0gJxG2eyqxHQUTVF8bSMC7viff2CAe4RPdiSDWQBUGoM13svSC5cdZlHxz134mHthMh7zdk47tGHJZaS8AyjeRlU7sRzYFHY76NPoaF8YKBjU97nysXQkkNqcKOTt-ZK1ZYafdEowBYxO2nQEx4wKL56nxqkr1u93XBrEEt62mOftwGgozaDyHwer0C0bD_FQZut5rLAQ","e":"AQAB","kid":"dakid","qi":"By6K5EAIOIypaL2r6n5BdXSzNuA1r6SBgeIzwB_kQP02CGB6iPle5_tLm9MFMYnN2WayRlCqfNBKbZ700wK4zLBThbwbbMWX8C3FxCaxDvaUemh9u-Ls-3MnFLMtKTZcl5K7BQ7HHx0WUlXW5gDtLbjwRkvanzdIEiTN5ALCtQc","dp":"3cwGnXLPVmquRbtt339TrXoYqvt3WEkr8YE5bdqMUp60sPPTOoGZTeDS_qjokYiQZf5D8e4J2_wGvWrS_BoNeBVsgXM0iW3O1ssz6mbjRJ25UnRk8j982Gi5tfgSOi6o4Cj2W7FJdTjuqxMwT0meJoZSb4oMjoWcUlEL-IpnkIE","alg":"PS256","dq":"s9ZF3CisvpqKwVnII8pgigSBs8BUT8fIcqN41sIlAHn7gfA4tQ_kd6z7syig_CWi1JQZAyHslgNhXZN5PGC_H-RAUf8eLq6jjYOjAnY_eucqkrgntJncelr3oVd8ynpt9iOkaR6dJ8OPri_21km3rQHfUybDKpIev0VWQw7-gtE","n":"sfiwoB_Ix6eYm07Bneu7aitqrol1DvTpVWII8vSR7LYEmR2yoOwqsqnLPEwvloFvc726vE0_QG8eM2PDZX8uz3I6o0GsqNa1LXtVYy-YMu4wyoX5SiXxajnFaBx0OqrGJF1GdGaOvpQNokxfYxekLz4U2_gnIm9ogwoKA6BSwjCJzBHoTLbF6IzvciSsSKuUWibnw4iSl-G1Mwgfa4IXVPwMFvix4WuBW7E66w8d6kPf0lmW2SOiaVcByLaATZZ5jQE1mxiXuq53z_rN0WaLaLcEo52_DfoN1hCacQ_ggpNvdMogWY5e7sK5nQIbRx3lSdqmwHbdg_O8aA-GWpYW-Q"}
2021-08-25 21:14:55 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
c__fapi-jwt-par1
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
scope
openid other
claims
{
  "id_token": {
    "acr": {
      "value": "urn:cds.au:cdr:2",
      "essential": true
    }
  },
  "sharing_duration": 7776000
}
nonce
La0WBRrI84
response_type
code id_token
state
7WrnnhL2Hb
2021-08-25 21:14:55 SUCCESS
BuildRequestObjectPostToPAREndpoint
request
eyJraWQiOiJkYWtpZCIsImFsZyI6IlBTMjU2In0.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.YAtIfecCzkqJLvgSoTcpcD3N0PPFkgAx-unNEBPpgFLNwMfUGek99pRjZSPVSbHlA3Z5ThPI0tggh1tXqVTbPbEMvWoUQknxAc9dwzSMHbldOjqj8ErgOy6BIaWsbScn7JrYNtY1oLaUuCCczzQ5OeqpjD7pZqAPmCNfug0pgF-F5XssEBdthVtqaWDReIhWQvXaT_9SB5Ri2YQE7IH-HrFRpOgibkVqVdMFdnHitOrPAI5hjoIKZc06lmoJgbwiczii5nClQSxd_9xKRqfIqA894vc94oT_dnHSrnVlpQH2d_AySX-qFXmwIprnQ5wIDNSbz0vT308loI3MSb1W9Q
2021-08-25 21:14:55 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
c__fapi-jwt-par1
sub
c__fapi-jwt-par1
aud
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
jti
mHE0gRaToHusGsUitgfQ
iat
1629926095
exp
1629926155
2021-08-25 21:14:55 SUCCESS
UpdateClientAuthenticationAssertionClaimsWithISSAud
Updated audience in client assertion claims
iss
c__fapi-jwt-par1
sub
c__fapi-jwt-par1
jti
mHE0gRaToHusGsUitgfQ
iat
1629926095
exp
1629926155
aud
https://par-what-is-it-good-for.ping-eng.com:9031
2021-08-25 21:14:55 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJkYWtpZCIsImFsZyI6IlBTMjU2In0.eyJzdWIiOiJjX19mYXBpLWp3dC1wYXIxIiwiYXVkIjoiaHR0cHM6XC9cL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMxIiwiaXNzIjoiY19fZmFwaS1qd3QtcGFyMSIsImV4cCI6MTYyOTkyNjE1NSwiaWF0IjoxNjI5OTI2MDk1LCJqdGkiOiJtSEUwZ1JhVG9IdXNHc1VpdGdmUSJ9.ofnDW16TQxN-kStLvmW9qPEC_ZbdTPefOInztwuvB9-u95IczufI0LgJ_Rt44dm250Px3xAWPY0EulLKFLU5V8hQWq9A-kK-XsD_YHzJ4HpzxjudBth2_6REomwoeuuc35T6aWvvF5f8EJK_cEb3H5p8zN1mqr-tBNNkmxASAv53y3o1ddAyk9dq-swCi1YkCtKiFIio2jXYrZ4VcGmQdm3WUdp4qpWA4KrgssP8e_ikL7XanUaCmui1d0G2lE35A7tJxduUnB7YWLDC_6MhhCH9kYnisATzH5WtaCpHhH5-h_oMX_F3EKE7cXCobVOioMmjTr_H-ss2Yi_ZbyMwjA
2021-08-25 21:14:55 SUCCESS
AddClientAssertionToPAREndpointParameters
Added client assertion to request
request
{
  "request": "eyJraWQiOiJkYWtpZCIsImFsZyI6IlBTMjU2In0.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.YAtIfecCzkqJLvgSoTcpcD3N0PPFkgAx-unNEBPpgFLNwMfUGek99pRjZSPVSbHlA3Z5ThPI0tggh1tXqVTbPbEMvWoUQknxAc9dwzSMHbldOjqj8ErgOy6BIaWsbScn7JrYNtY1oLaUuCCczzQ5OeqpjD7pZqAPmCNfug0pgF-F5XssEBdthVtqaWDReIhWQvXaT_9SB5Ri2YQE7IH-HrFRpOgibkVqVdMFdnHitOrPAI5hjoIKZc06lmoJgbwiczii5nClQSxd_9xKRqfIqA894vc94oT_dnHSrnVlpQH2d_AySX-qFXmwIprnQ5wIDNSbz0vT308loI3MSb1W9Q",
  "client_assertion": "eyJraWQiOiJkYWtpZCIsImFsZyI6IlBTMjU2In0.eyJzdWIiOiJjX19mYXBpLWp3dC1wYXIxIiwiYXVkIjoiaHR0cHM6XC9cL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMxIiwiaXNzIjoiY19fZmFwaS1qd3QtcGFyMSIsImV4cCI6MTYyOTkyNjE1NSwiaWF0IjoxNjI5OTI2MDk1LCJqdGkiOiJtSEUwZ1JhVG9IdXNHc1VpdGdmUSJ9.ofnDW16TQxN-kStLvmW9qPEC_ZbdTPefOInztwuvB9-u95IczufI0LgJ_Rt44dm250Px3xAWPY0EulLKFLU5V8hQWq9A-kK-XsD_YHzJ4HpzxjudBth2_6REomwoeuuc35T6aWvvF5f8EJK_cEb3H5p8zN1mqr-tBNNkmxASAv53y3o1ddAyk9dq-swCi1YkCtKiFIio2jXYrZ4VcGmQdm3WUdp4qpWA4KrgssP8e_ikL7XanUaCmui1d0G2lE35A7tJxduUnB7YWLDC_6MhhCH9kYnisATzH5WtaCpHhH5-h_oMX_F3EKE7cXCobVOioMmjTr_H-ss2Yi_ZbyMwjA",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
2021-08-25 21:14:55
CallPAREndpoint
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9031/as/par.oauth2
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-length": "1634"
}
request_body
request=eyJraWQiOiJkYWtpZCIsImFsZyI6IlBTMjU2In0.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.YAtIfecCzkqJLvgSoTcpcD3N0PPFkgAx-unNEBPpgFLNwMfUGek99pRjZSPVSbHlA3Z5ThPI0tggh1tXqVTbPbEMvWoUQknxAc9dwzSMHbldOjqj8ErgOy6BIaWsbScn7JrYNtY1oLaUuCCczzQ5OeqpjD7pZqAPmCNfug0pgF-F5XssEBdthVtqaWDReIhWQvXaT_9SB5Ri2YQE7IH-HrFRpOgibkVqVdMFdnHitOrPAI5hjoIKZc06lmoJgbwiczii5nClQSxd_9xKRqfIqA894vc94oT_dnHSrnVlpQH2d_AySX-qFXmwIprnQ5wIDNSbz0vT308loI3MSb1W9Q&client_assertion=eyJraWQiOiJkYWtpZCIsImFsZyI6IlBTMjU2In0.eyJzdWIiOiJjX19mYXBpLWp3dC1wYXIxIiwiYXVkIjoiaHR0cHM6XC9cL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMxIiwiaXNzIjoiY19fZmFwaS1qd3QtcGFyMSIsImV4cCI6MTYyOTkyNjE1NSwiaWF0IjoxNjI5OTI2MDk1LCJqdGkiOiJtSEUwZ1JhVG9IdXNHc1VpdGdmUSJ9.ofnDW16TQxN-kStLvmW9qPEC_ZbdTPefOInztwuvB9-u95IczufI0LgJ_Rt44dm250Px3xAWPY0EulLKFLU5V8hQWq9A-kK-XsD_YHzJ4HpzxjudBth2_6REomwoeuuc35T6aWvvF5f8EJK_cEb3H5p8zN1mqr-tBNNkmxASAv53y3o1ddAyk9dq-swCi1YkCtKiFIio2jXYrZ4VcGmQdm3WUdp4qpWA4KrgssP8e_ikL7XanUaCmui1d0G2lE35A7tJxduUnB7YWLDC_6MhhCH9kYnisATzH5WtaCpHhH5-h_oMX_F3EKE7cXCobVOioMmjTr_H-ss2Yi_ZbyMwjA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d",
  "ca": "MIIB5jCCAYugAwIBAgIBFjAKBggqhkjOPQQDAjBWMQswCQYDVQQGEwJVUzEbMBkGA1UECgwSTGV0J3MgQXV0aGVudGljYXRlMSowKAYDVQQDDCFMZXQncyBBdXRoZW50aWNhdGUgUm9vdCBBdXRob3JpdHkwHhcNMjAwMTE0MjEzMjMwWhcNMzAwMTExMjEzMjMwWjA6MRswGQYDVQQKDBJMZXQncyBBdXRoZW50aWNhdGUxGzAZBgNVBAMMEkxBIEludGVybWVkaWF0ZSBDQTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJf+aA54RC5pyLAR5yfXVYmNpgd+CGUTDp2KOGhc0gK91zxhHesEYkdXkpS2UN8Kati+yHtWCV3kkhCngGyv7RqjZjBkMB0GA1UdDgQWBBRm3WjLa38lbEYCuiCPct0ZaSED2DAfBgNVHSMEGDAWgBTEA2Q6eecKu9g9yb5glbkhhVINGDASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBhjAKBggqhkjOPQQDAgNJADBGAiEA5pLvaFwRRkxomIAtDIwg9D7gC1xzxBl4r28EzmSO1pcCIQCJUShpSXO9HDIQMUgH69fNDEMHXD3RRX5gP7kuu2KGMg\u003d\u003d"
}
2021-08-25 21:14:55 RESPONSE
CallPAREndpoint
HTTP response
response_status_code
201 CREATED
response_status_text
Created
response_headers
{
  "date": "Wed, 25 Aug 2021 21:14:55 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dzmC5ZXaJXJocpgS45LHAlD; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"expires_in":15,"request_uri":"urn:ietf:params:oauth:request_uri:rLF6EPjdRVQkLU0uYMo0CcO5ZR5XVOTv"}
2021-08-25 21:14:55 SUCCESS
CallPAREndpoint
Storing pushed_authorization_endpoint_response_http_status 201
2021-08-25 21:14:55 SUCCESS
CallPAREndpoint
Parsed pushed authorization request endpoint response
expires_in
15
request_uri
urn:ietf:params:oauth:request_uri:rLF6EPjdRVQkLU0uYMo0CcO5ZR5XVOTv
2021-08-25 21:14:55 SUCCESS
CheckIfPAREndpointResponseError
pushed authorization request endpoint correct response.
2021-08-25 21:14:55 SUCCESS
CheckForRequestUriValue
Found valid request_uri
request_uri
urn:ietf:params:oauth:request_uri:rLF6EPjdRVQkLU0uYMo0CcO5ZR5XVOTv
2021-08-25 21:14:55 SUCCESS
CheckForPARResponseExpiresIn
Found expires_in
expires_in
15
2021-08-25 21:14:55 SUCCESS
ExtractRequestUriFromPARResponse
Extracted the request_uri: urn:ietf:params:oauth:request_uri:rLF6EPjdRVQkLU0uYMo0CcO5ZR5XVOTv
2021-08-25 21:14:55 SUCCESS
EnsureMinimumRequestUriEntropy
Calculated shannon entropy seems sufficient
actual
331.8364279478573
expected
128.0
2021-08-25 21:14:55 SUCCESS
BuildRequestObjectByReferenceRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2?request_uri=urn:ietf:params:oauth:request_uri:rLF6EPjdRVQkLU0uYMo0CcO5ZR5XVOTv&client_id=c__fapi-jwt-par1&redirect_uri=https://www.certification.openid.net/test/a/pi/callback&scope=openid%20other&response_type=code%20id_token&state=7WrnnhL2Hb
2021-08-25 21:14:55 REDIRECT
fapi-rw-id2-state-only-outside-request-object-not-used
Redirecting to authorization endpoint
redirect_to
https://par-what-is-it-good-for.ping-eng.com:9031/as/authorization.oauth2?request_uri=urn:ietf:params:oauth:request_uri:rLF6EPjdRVQkLU0uYMo0CcO5ZR5XVOTv&client_id=c__fapi-jwt-par1&redirect_uri=https://www.certification.openid.net/test/a/pi/callback&scope=openid%20other&response_type=code%20id_token&state=7WrnnhL2Hb
2021-08-25 21:14:55 REVIEW
ExpectRequestObjectMissingStateErrorPage
If the server does not return an invalid_request_object error back to the client, it must show an error page saying the request object is invalid as it is missing the 'state' claim - upload a screenshot of the error page.
image_no_longer_required
true
2021-08-25 21:14:59 INCOMING
fapi-rw-id2-state-only-outside-request-object-not-used
Incoming HTTP request to test instance T1sALmDF0XfejVd
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Firefox/91.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://par-what-is-it-good-for.ping-eng.com:9031/",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1629918002.1629920868.308; __utmz\u003d201319536.1626984986.282.70.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; JSESSIONID\u003d5C1CBD6B3D813EDA466CECE6A68D46D7; __utmc\u003d201319536; login_tab\u003dgoogleplus; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell",
  "upgrade-insecure-requests": "1",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "sec-fetch-user": "?1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
callback
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-08-25 21:14:59 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/nRgjUG9ifcmG2bBH8KGF",
  "fullUrl": "https://www.certification.openid.net/test/a/pi/implicit/nRgjUG9ifcmG2bBH8KGF"
}
2021-08-25 21:14:59 OUTGOING
fapi-rw-id2-state-only-outside-request-object-not-used
Response to HTTP request to test instance T1sALmDF0XfejVd
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/pi/implicit/nRgjUG9ifcmG2bBH8KGF, returnUrl=/log-detail.html?log=T1sALmDF0XfejVd}]
outgoing_path
callback
2021-08-25 21:14:59 INCOMING
fapi-rw-id2-state-only-outside-request-object-not-used
Incoming HTTP request to test instance T1sALmDF0XfejVd
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Firefox/91.0",
  "accept": "*/*",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "content-type": "text/plain",
  "x-requested-with": "XMLHttpRequest",
  "origin": "https://www.certification.openid.net",
  "referer": "https://www.certification.openid.net/test/a/pi/callback",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1629918002.1629920868.308; __utmz\u003d201319536.1626984986.282.70.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; JSESSIONID\u003d5C1CBD6B3D813EDA466CECE6A68D46D7; __utmc\u003d201319536; login_tab\u003dgoogleplus; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "content-length": "1501",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
implicit/nRgjUG9ifcmG2bBH8KGF
incoming_body_form_params
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
#code=-hgYSyqRJiCpntImeoVFg4CrcFYlZaDzVA-Fx_WM&id_token=eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImN0eSI6IkpXVCIsImtpZCI6ImhUbUxHdyIsImVwayI6eyJrdHkiOiJFQyIsIngiOiJLeHVPZG9LLW00VFBuT0V3dEZ6LXdyVmJVZXdYVVJjRzJNT2ZfSlhjdUIwIiwieSI6InJSUW81WHh3TXN2RTFZSlhYOWdvUk1PNjYwSzFWU19COTk1LUFzMDd3aUEiLCJjcnYiOiJQLTI1NiJ9fQ..sh-3Zn7wGpm_z-__irtE-g.jI2-KTGIlA8nOPii7fiOVe6jhTnUaC5vSGJKon24E55VNjSBH4WPNpg2H5uqOmjKgyeW3WQ_gTxlYSm_T25CoZzYts5NTM9HySSGctWThGf1KWTzvYPPpC3VfccsopA5uVbiGUOOzVQY46pid-yNRPAmd0oYxJmQ5rRFRpnDeoW91Xp_jZbXLrcoYmwXdPhJYgijMZEEGGba4N8XCn4m4PXDqoLHMFkFLDnH5udceEyedXioYJjaEV5c_Cja8x3X_JfzBfTZiopn_vSga95LnXCFxH2Vtu0fA-Lw4nYFu6rWSqyDFH0NtDxbpS9GMUX1KXZR-WM6LXOPntixOgPKbNssj7SWu6ssPF3xyWsGJEtWca-7SzC7iV3bJzJQBCxtUptesXd4xdxNnNtKYyKmTbMqAsxvTqWpODYypb9-XKE4NswQOwxzhCdfxIO-gUieTdoL0P4HQlbcPnP7P3ZUKgcl3IkkUYlR2Ax-CJe9VINdx9jepjbcXtPHqjRGGLKPU_2hCDfo6n3jwuSA8QXYEL7TpCZQlCHXgxnlkj134vvatiiaEBFG0J6ThvZPFv6NxqD8f7OkE7zZSDIYs1-VtDrO_-JbivGaHIHU906PAKmYSUpSNrkFoBMJu_2yHGx118QUD6Zd5i44adzJCGzuMGVNYC52el4k4rzWm97STiZCG7pcyezHIjJsYIK0QYVdZKiNionrT2gayC-xRyxvpacU1anMeeUdn6exw11I1TLh5hLd46PcQeAzgcZQ_6_sMzUSGl5mjhRa9_uXtgwQxWOMf-lcpuHfQZE0EmQq4AMv4e_sup-ikdnaOzG-zIvJeQC8TtIE68hq0ppQyvFUyDU_kAw_rv9N0mUqNvAHrFti3wLIxkr3J5iH6RvzlAFjiSZj-vafYP7Jq3oP9S8r1fflIBwnBHOHXQhwWIwspWT-HIvJGL4UWJ7VLe0Yw_sY3Xppbi8tObYo47V2kpagk_uBcrryOnai7cogQjys30_oI3xroePj4_taJOyLZBPfWAeHYIZOjSauWyxy4fEByeZdyrLniaFduWM7DigDjBakhSue6rnhUU2Q19xuD9X2m2oWGK1ngR84vUBFUtzHjtCBavNSYgTWCngSPColR38.teH3BfKwaFITfCnGLQMfXQ
2021-08-25 21:14:59 OUTGOING
fapi-rw-id2-state-only-outside-request-object-not-used
Response to HTTP request to test instance T1sALmDF0XfejVd
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/nRgjUG9ifcmG2bBH8KGF
2021-08-25 21:14:59
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "code",
    "value": "-hgYSyqRJiCpntImeoVFg4CrcFYlZaDzVA-Fx_WM"
  },
  {
    "name": "id_token",
    "value": "eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImN0eSI6IkpXVCIsImtpZCI6ImhUbUxHdyIsImVwayI6eyJrdHkiOiJFQyIsIngiOiJLeHVPZG9LLW00VFBuT0V3dEZ6LXdyVmJVZXdYVVJjRzJNT2ZfSlhjdUIwIiwieSI6InJSUW81WHh3TXN2RTFZSlhYOWdvUk1PNjYwSzFWU19COTk1LUFzMDd3aUEiLCJjcnYiOiJQLTI1NiJ9fQ..sh-3Zn7wGpm_z-__irtE-g.jI2-KTGIlA8nOPii7fiOVe6jhTnUaC5vSGJKon24E55VNjSBH4WPNpg2H5uqOmjKgyeW3WQ_gTxlYSm_T25CoZzYts5NTM9HySSGctWThGf1KWTzvYPPpC3VfccsopA5uVbiGUOOzVQY46pid-yNRPAmd0oYxJmQ5rRFRpnDeoW91Xp_jZbXLrcoYmwXdPhJYgijMZEEGGba4N8XCn4m4PXDqoLHMFkFLDnH5udceEyedXioYJjaEV5c_Cja8x3X_JfzBfTZiopn_vSga95LnXCFxH2Vtu0fA-Lw4nYFu6rWSqyDFH0NtDxbpS9GMUX1KXZR-WM6LXOPntixOgPKbNssj7SWu6ssPF3xyWsGJEtWca-7SzC7iV3bJzJQBCxtUptesXd4xdxNnNtKYyKmTbMqAsxvTqWpODYypb9-XKE4NswQOwxzhCdfxIO-gUieTdoL0P4HQlbcPnP7P3ZUKgcl3IkkUYlR2Ax-CJe9VINdx9jepjbcXtPHqjRGGLKPU_2hCDfo6n3jwuSA8QXYEL7TpCZQlCHXgxnlkj134vvatiiaEBFG0J6ThvZPFv6NxqD8f7OkE7zZSDIYs1-VtDrO_-JbivGaHIHU906PAKmYSUpSNrkFoBMJu_2yHGx118QUD6Zd5i44adzJCGzuMGVNYC52el4k4rzWm97STiZCG7pcyezHIjJsYIK0QYVdZKiNionrT2gayC-xRyxvpacU1anMeeUdn6exw11I1TLh5hLd46PcQeAzgcZQ_6_sMzUSGl5mjhRa9_uXtgwQxWOMf-lcpuHfQZE0EmQq4AMv4e_sup-ikdnaOzG-zIvJeQC8TtIE68hq0ppQyvFUyDU_kAw_rv9N0mUqNvAHrFti3wLIxkr3J5iH6RvzlAFjiSZj-vafYP7Jq3oP9S8r1fflIBwnBHOHXQhwWIwspWT-HIvJGL4UWJ7VLe0Yw_sY3Xppbi8tObYo47V2kpagk_uBcrryOnai7cogQjys30_oI3xroePj4_taJOyLZBPfWAeHYIZOjSauWyxy4fEByeZdyrLniaFduWM7DigDjBakhSue6rnhUU2Q19xuD9X2m2oWGK1ngR84vUBFUtzHjtCBavNSYgTWCngSPColR38.teH3BfKwaFITfCnGLQMfXQ"
  }
]
2021-08-25 21:14:59 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
code
-hgYSyqRJiCpntImeoVFg4CrcFYlZaDzVA-Fx_WM
id_token
eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImN0eSI6IkpXVCIsImtpZCI6ImhUbUxHdyIsImVwayI6eyJrdHkiOiJFQyIsIngiOiJLeHVPZG9LLW00VFBuT0V3dEZ6LXdyVmJVZXdYVVJjRzJNT2ZfSlhjdUIwIiwieSI6InJSUW81WHh3TXN2RTFZSlhYOWdvUk1PNjYwSzFWU19COTk1LUFzMDd3aUEiLCJjcnYiOiJQLTI1NiJ9fQ..sh-3Zn7wGpm_z-__irtE-g.jI2-KTGIlA8nOPii7fiOVe6jhTnUaC5vSGJKon24E55VNjSBH4WPNpg2H5uqOmjKgyeW3WQ_gTxlYSm_T25CoZzYts5NTM9HySSGctWThGf1KWTzvYPPpC3VfccsopA5uVbiGUOOzVQY46pid-yNRPAmd0oYxJmQ5rRFRpnDeoW91Xp_jZbXLrcoYmwXdPhJYgijMZEEGGba4N8XCn4m4PXDqoLHMFkFLDnH5udceEyedXioYJjaEV5c_Cja8x3X_JfzBfTZiopn_vSga95LnXCFxH2Vtu0fA-Lw4nYFu6rWSqyDFH0NtDxbpS9GMUX1KXZR-WM6LXOPntixOgPKbNssj7SWu6ssPF3xyWsGJEtWca-7SzC7iV3bJzJQBCxtUptesXd4xdxNnNtKYyKmTbMqAsxvTqWpODYypb9-XKE4NswQOwxzhCdfxIO-gUieTdoL0P4HQlbcPnP7P3ZUKgcl3IkkUYlR2Ax-CJe9VINdx9jepjbcXtPHqjRGGLKPU_2hCDfo6n3jwuSA8QXYEL7TpCZQlCHXgxnlkj134vvatiiaEBFG0J6ThvZPFv6NxqD8f7OkE7zZSDIYs1-VtDrO_-JbivGaHIHU906PAKmYSUpSNrkFoBMJu_2yHGx118QUD6Zd5i44adzJCGzuMGVNYC52el4k4rzWm97STiZCG7pcyezHIjJsYIK0QYVdZKiNionrT2gayC-xRyxvpacU1anMeeUdn6exw11I1TLh5hLd46PcQeAzgcZQ_6_sMzUSGl5mjhRa9_uXtgwQxWOMf-lcpuHfQZE0EmQq4AMv4e_sup-ikdnaOzG-zIvJeQC8TtIE68hq0ppQyvFUyDU_kAw_rv9N0mUqNvAHrFti3wLIxkr3J5iH6RvzlAFjiSZj-vafYP7Jq3oP9S8r1fflIBwnBHOHXQhwWIwspWT-HIvJGL4UWJ7VLe0Yw_sY3Xppbi8tObYo47V2kpagk_uBcrryOnai7cogQjys30_oI3xroePj4_taJOyLZBPfWAeHYIZOjSauWyxy4fEByeZdyrLniaFduWM7DigDjBakhSue6rnhUU2Q19xuD9X2m2oWGK1ngR84vUBFUtzHjtCBavNSYgTWCngSPColR38.teH3BfKwaFITfCnGLQMfXQ
2021-08-25 21:14:59 REDIRECT-IN
fapi-rw-id2-state-only-outside-request-object-not-used
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Firefox/91.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://par-what-is-it-good-for.ping-eng.com:9031/",
  "cookie": "__utma\u003d201319536.1543712019.1535389192.1629918002.1629920868.308; __utmz\u003d201319536.1626984986.282.70.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.1543712019.1535389192; JSESSIONID\u003d5C1CBD6B3D813EDA466CECE6A68D46D7; __utmc\u003d201319536; login_tab\u003dgoogleplus; expected_tab\u003dgoogleplus; welcome_info_name\u003dBrian%20Campbell",
  "upgrade-insecure-requests": "1",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "sec-fetch-user": "?1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "code": "-hgYSyqRJiCpntImeoVFg4CrcFYlZaDzVA-Fx_WM",
  "id_token": "eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImN0eSI6IkpXVCIsImtpZCI6ImhUbUxHdyIsImVwayI6eyJrdHkiOiJFQyIsIngiOiJLeHVPZG9LLW00VFBuT0V3dEZ6LXdyVmJVZXdYVVJjRzJNT2ZfSlhjdUIwIiwieSI6InJSUW81WHh3TXN2RTFZSlhYOWdvUk1PNjYwSzFWU19COTk1LUFzMDd3aUEiLCJjcnYiOiJQLTI1NiJ9fQ..sh-3Zn7wGpm_z-__irtE-g.jI2-KTGIlA8nOPii7fiOVe6jhTnUaC5vSGJKon24E55VNjSBH4WPNpg2H5uqOmjKgyeW3WQ_gTxlYSm_T25CoZzYts5NTM9HySSGctWThGf1KWTzvYPPpC3VfccsopA5uVbiGUOOzVQY46pid-yNRPAmd0oYxJmQ5rRFRpnDeoW91Xp_jZbXLrcoYmwXdPhJYgijMZEEGGba4N8XCn4m4PXDqoLHMFkFLDnH5udceEyedXioYJjaEV5c_Cja8x3X_JfzBfTZiopn_vSga95LnXCFxH2Vtu0fA-Lw4nYFu6rWSqyDFH0NtDxbpS9GMUX1KXZR-WM6LXOPntixOgPKbNssj7SWu6ssPF3xyWsGJEtWca-7SzC7iV3bJzJQBCxtUptesXd4xdxNnNtKYyKmTbMqAsxvTqWpODYypb9-XKE4NswQOwxzhCdfxIO-gUieTdoL0P4HQlbcPnP7P3ZUKgcl3IkkUYlR2Ax-CJe9VINdx9jepjbcXtPHqjRGGLKPU_2hCDfo6n3jwuSA8QXYEL7TpCZQlCHXgxnlkj134vvatiiaEBFG0J6ThvZPFv6NxqD8f7OkE7zZSDIYs1-VtDrO_-JbivGaHIHU906PAKmYSUpSNrkFoBMJu_2yHGx118QUD6Zd5i44adzJCGzuMGVNYC52el4k4rzWm97STiZCG7pcyezHIjJsYIK0QYVdZKiNionrT2gayC-xRyxvpacU1anMeeUdn6exw11I1TLh5hLd46PcQeAzgcZQ_6_sMzUSGl5mjhRa9_uXtgwQxWOMf-lcpuHfQZE0EmQq4AMv4e_sup-ikdnaOzG-zIvJeQC8TtIE68hq0ppQyvFUyDU_kAw_rv9N0mUqNvAHrFti3wLIxkr3J5iH6RvzlAFjiSZj-vafYP7Jq3oP9S8r1fflIBwnBHOHXQhwWIwspWT-HIvJGL4UWJ7VLe0Yw_sY3Xppbi8tObYo47V2kpagk_uBcrryOnai7cogQjys30_oI3xroePj4_taJOyLZBPfWAeHYIZOjSauWyxy4fEByeZdyrLniaFduWM7DigDjBakhSue6rnhUU2Q19xuD9X2m2oWGK1ngR84vUBFUtzHjtCBavNSYgTWCngSPColR38.teH3BfKwaFITfCnGLQMfXQ"
}
post_body
Verify authorization endpoint response
2021-08-25 21:14:59 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2021-08-25 21:14:59 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2021-08-25 21:14:59 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2021-08-25 21:14:59 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2021-08-25 21:14:59 SUCCESS
VerifyNoStateInAuthorizationResponse
Authorization endpoint response is correctly missing 'state'
2021-08-25 21:14:59 SUCCESS
ExtractAuthorizationCodeFromAuthorizationResponse
Found authorization code
code
-hgYSyqRJiCpntImeoVFg4CrcFYlZaDzVA-Fx_WM
2021-08-25 21:14:59 SUCCESS
EnsureMinimumAuthorizationCodeLength
Authorization code is of sufficient length
actual
320
required
128
2021-08-25 21:14:59 SUCCESS
EnsureMinimumAuthorizationCodeEntropy
Calculated shannon entropy seems sufficient
actual
198.12223629333107
expected
96.0
2021-08-25 21:14:59 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJhbGciOiJQUzI1NiIsImtpZCI6IjRNc0ZRbkNtc29icUp3YUhyYjd1YlRzTlF4TSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtcGFyMSIsImp0aSI6IlVvR2s0NU9VRG1XSmhkSHN2RG42dzEiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMxIiwiaWF0IjoxNjI5OTI2MDk5LCJleHAiOjE2Mjk5MjYzOTksImFjciI6InVybjpjZHMuYXU6Y2RyOjIiLCJhdXRoX3RpbWUiOjE2Mjk5MjU0MDUsIm5vbmNlIjoiTGEwV0JSckk4NCIsImNfaGFzaCI6InZIWkZQazY3WEVESDVWcWhUS2hsdHcifQ.HZABHjZFFHGXBuhoik8OL16QQQzogeqbbLmpEolN0gshpThIvBffgBW2l__j8egvBHuLMSodIreXgbeBnO45khbv1E_bBUhG4lluV3-SP-PGQMA5jIzh5yeR2sGxoyRBYaDhIEnwTDmtXTNDyY87XyjR4HgriHGQnW2yR9aiiYDb_wyj1ZUmPK9CidbJrksSp2IM5aD4N1cUYoc7rklBtaOG4G-BZ_hzahafv-yF92RJhFjm8kah_y7toBL7H06bCnnzE28iTtmEhdv-7H5d2izIqaPkPKpbfZYT4rS5ujgoNBT-FGO3-GYZwk0NkJSAco1xiGRmupQ34ekcIGmfag
header
{
  "kid": "4MsFQnCmsobqJwaHrb7ubTsNQxM",
  "alg": "PS256"
}
claims
{
  "sub": "9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4",
  "aud": "c__fapi-jwt-par1",
  "acr": "urn:cds.au:cdr:2",
  "c_hash": "vHZFPk67XEDH5VqhTKhltw",
  "auth_time": 1629925405,
  "iss": "https://par-what-is-it-good-for.ping-eng.com:9031",
  "exp": 1629926399,
  "iat": 1629926099,
  "nonce": "La0WBRrI84",
  "jti": "UoGk45OUDmWJhdHsvDn6w1"
}
jwe_header
{
  "epk": {
    "kty": "EC",
    "crv": "P-256",
    "x": "KxuOdoK-m4TPnOEwtFz-wrVbUewXURcG2MOf_JXcuB0",
    "y": "rRQo5XxwMsvE1YJXX9goRMO660K1VS_B995-As07wiA"
  },
  "kid": "hTmLGw",
  "cty": "JWT",
  "enc": "A128CBC-HS256",
  "alg": "ECDH-ES"
}
2021-08-25 21:14:59 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-08-25 21:14:59 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
4MsFQnCmsobqJwaHrb7ubTsNQxM
2021-08-25 21:14:59 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
La0WBRrI84
2021-08-25 21:14:59 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
acr value in id_token is (one of) the requested values
actual
urn:cds.au:cdr:2
requested
[
  "urn:cds.au:cdr:2"
]
2021-08-25 21:14:59 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IjRNc0ZRbkNtc29icUp3YUhyYjd1YlRzTlF4TSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtcGFyMSIsImp0aSI6IlVvR2s0NU9VRG1XSmhkSHN2RG42dzEiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMxIiwiaWF0IjoxNjI5OTI2MDk5LCJleHAiOjE2Mjk5MjYzOTksImFjciI6InVybjpjZHMuYXU6Y2RyOjIiLCJhdXRoX3RpbWUiOjE2Mjk5MjU0MDUsIm5vbmNlIjoiTGEwV0JSckk4NCIsImNfaGFzaCI6InZIWkZQazY3WEVESDVWcWhUS2hsdHcifQ.HZABHjZFFHGXBuhoik8OL16QQQzogeqbbLmpEolN0gshpThIvBffgBW2l__j8egvBHuLMSodIreXgbeBnO45khbv1E_bBUhG4lluV3-SP-PGQMA5jIzh5yeR2sGxoyRBYaDhIEnwTDmtXTNDyY87XyjR4HgriHGQnW2yR9aiiYDb_wyj1ZUmPK9CidbJrksSp2IM5aD4N1cUYoc7rklBtaOG4G-BZ_hzahafv-yF92RJhFjm8kah_y7toBL7H06bCnnzE28iTtmEhdv-7H5d2izIqaPkPKpbfZYT4rS5ujgoNBT-FGO3-GYZwk0NkJSAco1xiGRmupQ34ekcIGmfag
2021-08-25 21:14:59 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IjRNc0ZRbkNtc29icUp3YUhyYjd1YlRzTlF4TSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtcGFyMSIsImp0aSI6IlVvR2s0NU9VRG1XSmhkSHN2RG42dzEiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMxIiwiaWF0IjoxNjI5OTI2MDk5LCJleHAiOjE2Mjk5MjYzOTksImFjciI6InVybjpjZHMuYXU6Y2RyOjIiLCJhdXRoX3RpbWUiOjE2Mjk5MjU0MDUsIm5vbmNlIjoiTGEwV0JSckk4NCIsImNfaGFzaCI6InZIWkZQazY3WEVESDVWcWhUS2hsdHcifQ.HZABHjZFFHGXBuhoik8OL16QQQzogeqbbLmpEolN0gshpThIvBffgBW2l__j8egvBHuLMSodIreXgbeBnO45khbv1E_bBUhG4lluV3-SP-PGQMA5jIzh5yeR2sGxoyRBYaDhIEnwTDmtXTNDyY87XyjR4HgriHGQnW2yR9aiiYDb_wyj1ZUmPK9CidbJrksSp2IM5aD4N1cUYoc7rklBtaOG4G-BZ_hzahafv-yF92RJhFjm8kah_y7toBL7H06bCnnzE28iTtmEhdv-7H5d2izIqaPkPKpbfZYT4rS5ujgoNBT-FGO3-GYZwk0NkJSAco1xiGRmupQ34ekcIGmfag
2021-08-25 21:14:59 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4
2021-08-25 21:14:59 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "ES256",
  "PS256"
]
alg
PS256
2021-08-25 21:14:59 SUCCESS
FAPIValidateIdTokenEncryptionAlg
id_token was encrypted with a permitted algorithm
alg
ECDH-ES
2021-08-25 21:14:59 SUCCESS
FAPIValidateEncryptedIdTokenHasKid
kid was found in the encrypted ID token header
kid
hTmLGw
2021-08-25 21:14:59 SUCCESS
ValidateIdTokenEncrypted
id_token was encrypted
2021-08-25 21:14:59 SUCCESS
VerifyNoSHash
ID Token is correctly missing s_hash
2021-08-25 21:14:59 SUCCESS
ExtractCHash
Extracted c_hash from ID Token
c_hash
vHZFPk67XEDH5VqhTKhltw
alg
PS256
2021-08-25 21:14:59 SUCCESS
ValidateCHash
c_hash validated successfully
expected_hash
vHZFPk67XEDH5VqhTKhltw
unhashed_value
-hgYSyqRJiCpntImeoVFg4CrcFYlZaDzVA-Fx_WM
id_token_hash
vHZFPk67XEDH5VqhTKhltw
Call token endpoint
2021-08-25 21:14:59 SUCCESS
CreateTokenEndpointRequestForAuthorizationCodeGrant
grant_type
authorization_code
code
-hgYSyqRJiCpntImeoVFg4CrcFYlZaDzVA-Fx_WM
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
2021-08-25 21:14:59 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
c__fapi-jwt-par1
sub
c__fapi-jwt-par1
aud
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
jti
8IknlR99u7IQ7TysImDw
iat
1629926099
exp
1629926159
2021-08-25 21:14:59 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJkYWtpZCIsImFsZyI6IlBTMjU2In0.eyJzdWIiOiJjX19mYXBpLWp3dC1wYXIxIiwiYXVkIjoiaHR0cHM6XC9cL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyXC9hc1wvdG9rZW4ub2F1dGgyIiwiaXNzIjoiY19fZmFwaS1qd3QtcGFyMSIsImV4cCI6MTYyOTkyNjE1OSwiaWF0IjoxNjI5OTI2MDk5LCJqdGkiOiI4SWtubFI5OXU3SVE3VHlzSW1EdyJ9.QaJsVnrKd-GjK3Fpa61oSBjNTsJoQJ40EHwmAs5DRbgZttjOIMJ94soHuwcf9j4wegFp_eS8ZNjvlfEkmRQo2P70S7fxL-NX7qTyOwEjZ4PnvsLMC_A2ktJ84NHKOwQkx5vpuDwspyYUti2G4OaXh7SOXp93pS8_3xX5rMpa8tnA6frgMHyj1rwGu7n-CN2P_7p0Svj47rsUETN8cX8tEwFbrWRiUOeDQiU4Fd4RJiJB80tFECWQAsxeC6kXb4uKuZfSMkDqoVAJ4Mlfbiksp4zHguli90x_F2uLVmi4QKDh4mSKmwmvf-blqY54poQUrIP5I7-x6b2jSdYYfvq9bQ
2021-08-25 21:14:59
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
authorization_code
code
-hgYSyqRJiCpntImeoVFg4CrcFYlZaDzVA-Fx_WM
redirect_uri
https://www.certification.openid.net/test/a/pi/callback
client_assertion
eyJraWQiOiJkYWtpZCIsImFsZyI6IlBTMjU2In0.eyJzdWIiOiJjX19mYXBpLWp3dC1wYXIxIiwiYXVkIjoiaHR0cHM6XC9cL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyXC9hc1wvdG9rZW4ub2F1dGgyIiwiaXNzIjoiY19fZmFwaS1qd3QtcGFyMSIsImV4cCI6MTYyOTkyNjE1OSwiaWF0IjoxNjI5OTI2MDk5LCJqdGkiOiI4SWtubFI5OXU3SVE3VHlzSW1EdyJ9.QaJsVnrKd-GjK3Fpa61oSBjNTsJoQJ40EHwmAs5DRbgZttjOIMJ94soHuwcf9j4wegFp_eS8ZNjvlfEkmRQo2P70S7fxL-NX7qTyOwEjZ4PnvsLMC_A2ktJ84NHKOwQkx5vpuDwspyYUti2G4OaXh7SOXp93pS8_3xX5rMpa8tnA6frgMHyj1rwGu7n-CN2P_7p0Svj47rsUETN8cX8tEwFbrWRiUOeDQiU4Fd4RJiJB80tFECWQAsxeC6kXb4uKuZfSMkDqoVAJ4Mlfbiksp4zHguli90x_F2uLVmi4QKDh4mSKmwmvf-blqY54poQUrIP5I7-x6b2jSdYYfvq9bQ
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-08-25 21:14:59
CallTokenEndpoint
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:9032/as/token.oauth2
request_method
POST
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "accept-charset": "utf-8",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "902"
}
request_body
grant_type=authorization_code&code=-hgYSyqRJiCpntImeoVFg4CrcFYlZaDzVA-Fx_WM&redirect_uri=https%3A%2F%2Fwww.certification.openid.net%2Ftest%2Fa%2Fpi%2Fcallback&client_assertion=eyJraWQiOiJkYWtpZCIsImFsZyI6IlBTMjU2In0.eyJzdWIiOiJjX19mYXBpLWp3dC1wYXIxIiwiYXVkIjoiaHR0cHM6XC9cL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMyXC9hc1wvdG9rZW4ub2F1dGgyIiwiaXNzIjoiY19fZmFwaS1qd3QtcGFyMSIsImV4cCI6MTYyOTkyNjE1OSwiaWF0IjoxNjI5OTI2MDk5LCJqdGkiOiI4SWtubFI5OXU3SVE3VHlzSW1EdyJ9.QaJsVnrKd-GjK3Fpa61oSBjNTsJoQJ40EHwmAs5DRbgZttjOIMJ94soHuwcf9j4wegFp_eS8ZNjvlfEkmRQo2P70S7fxL-NX7qTyOwEjZ4PnvsLMC_A2ktJ84NHKOwQkx5vpuDwspyYUti2G4OaXh7SOXp93pS8_3xX5rMpa8tnA6frgMHyj1rwGu7n-CN2P_7p0Svj47rsUETN8cX8tEwFbrWRiUOeDQiU4Fd4RJiJB80tFECWQAsxeC6kXb4uKuZfSMkDqoVAJ4Mlfbiksp4zHguli90x_F2uLVmi4QKDh4mSKmwmvf-blqY54poQUrIP5I7-x6b2jSdYYfvq9bQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d",
  "ca": "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\u003d\u003d"
}
2021-08-25 21:15:00 RESPONSE
CallTokenEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Wed, 25 Aug 2021 21:14:59 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dLp9HmGixEyRVaS5tMjfX8W; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "transfer-encoding": "chunked"
}
response_body
{"access_token":"eyJhbGciOiJFUzI1NiIsImtpZCI6IlhCNXZXTjczREw4QUtyX2dLZllwcExuaU50YyIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktand0LXBhcjEiLCJzdWIiOiJqb2UiLCJpaWQiOiJUQkQiLCJjbmYiOnsieDV0I1MyNTYiOiJNVFFJc1paLTV2T3F6bUt1U2xzbjJyc1VTV3hmT2ZJaWhubkdNdmV6X0ZvIn0sImV4cCI6MTYyOTkyOTY5OX0.09EvBk9A_1D4BgdhbsUDqTsZ82QeJv4mSN0zfp7wY-H0GXRO98euLsskvZbt_Io8rz9jka210GmNdnT_O9mDig","refresh_token":"wzqcvZj24mOkZpWuhhzA0A1hxgIGXlSZ2u1BSAWIJn","id_token":"eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImN0eSI6IkpXVCIsImtpZCI6ImhUbUxHdyIsImVwayI6eyJrdHkiOiJFQyIsIngiOiJLeHVPZG9LLW00VFBuT0V3dEZ6LXdyVmJVZXdYVVJjRzJNT2ZfSlhjdUIwIiwieSI6InJSUW81WHh3TXN2RTFZSlhYOWdvUk1PNjYwSzFWU19COTk1LUFzMDd3aUEiLCJjcnYiOiJQLTI1NiJ9fQ..sh-3Zn7wGpm_z-__irtE-g.jI2-KTGIlA8nOPii7fiOVe6jhTnUaC5vSGJKon24E55VNjSBH4WPNpg2H5uqOmjKgyeW3WQ_gTxlYSm_T25CoZzYts5NTM9HySSGctWThGf1KWTzvYPPpC3VfccsopA5uVbiGUOOzVQY46pid-yNRPAmd0oYxJmQ5rRFRpnDeoW91Xp_jZbXLrcoYmwXdPhJYgijMZEEGGba4N8XCn4m4PXDqoLHMFkFLDnH5udceEyedXioYJjaEV5c_Cja8x3X_JfzBfTZiopn_vSga95LnXCFxH2Vtu0fA-Lw4nYFu6rWSqyDFH0NtDxbpS9GMUX1KXZR-WM6LXOPntixOgPKbNssj7SWu6ssPF3xyWsGJEtWca-7SzC7iV3bJzJQBCxtUptesXd4xdxNnNtKYyKmTbMqAsxvTqWpODYypb9-XKE4NswQOwxzhCdfxIO-gUieTdoL0P4HQlbcPnP7P3ZUKgcl3IkkUYlR2Ax-CJe9VINdx9jepjbcXtPHqjRGGLKPU_2hCDfo6n3jwuSA8QXYEL7TpCZQlCHXgxnlkj134vvatiiaEBFG0J6ThvZPFv6NxqD8f7OkE7zZSDIYs1-VtDrO_-JbivGaHIHU906PAKmYSUpSNrkFoBMJu_2yHGx118QUD6Zd5i44adzJCGzuMGVNYC52el4k4rzWm97STiZCG7pcyezHIjJsYIK0QYVdZKiNionrT2gayC-xRyxvpacU1anMeeUdn6exw11I1TLh5hLd46PcQeAzgcZQ_6_sMzUSGl5mjhRa9_uXtgwQxWOMf-lcpuHfQZE0EmQq4AMv4e_sup-ikdnaOzG-zIvJeQC8TtIE68hq0ppQyvFUyDU_kAw_rv9N0mUqNvAHrFti3wLIxkr3J5iH6RvzlAFjiSZj-vafYP7Jq3oP9S8r1fflIBwnBHOHXQhwWIwspWT-HIvJGL4UWJ7VLe0Yw_sY3Xppbi8tObYo47V2kpagk_uBcrryOnai7cogQjys30_oI3xroePj4_taJOyLZBPfWAeHYIZOjSauWyxy4fEByeZdyrLniaFduWM7DigDjBakhSue6rnhUU2Q19xuD9X2m2oWGK1ngR84vUBFUtzHjtCBavNSYgTWCngSPColR38.teH3BfKwaFITfCnGLQMfXQ","token_type":"Bearer","expires_in":3599}
2021-08-25 21:15:00
CallTokenEndpoint
Token endpoint response
token_endpoint_response
{"access_token":"eyJhbGciOiJFUzI1NiIsImtpZCI6IlhCNXZXTjczREw4QUtyX2dLZllwcExuaU50YyIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktand0LXBhcjEiLCJzdWIiOiJqb2UiLCJpaWQiOiJUQkQiLCJjbmYiOnsieDV0I1MyNTYiOiJNVFFJc1paLTV2T3F6bUt1U2xzbjJyc1VTV3hmT2ZJaWhubkdNdmV6X0ZvIn0sImV4cCI6MTYyOTkyOTY5OX0.09EvBk9A_1D4BgdhbsUDqTsZ82QeJv4mSN0zfp7wY-H0GXRO98euLsskvZbt_Io8rz9jka210GmNdnT_O9mDig","refresh_token":"wzqcvZj24mOkZpWuhhzA0A1hxgIGXlSZ2u1BSAWIJn","id_token":"eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImN0eSI6IkpXVCIsImtpZCI6ImhUbUxHdyIsImVwayI6eyJrdHkiOiJFQyIsIngiOiJLeHVPZG9LLW00VFBuT0V3dEZ6LXdyVmJVZXdYVVJjRzJNT2ZfSlhjdUIwIiwieSI6InJSUW81WHh3TXN2RTFZSlhYOWdvUk1PNjYwSzFWU19COTk1LUFzMDd3aUEiLCJjcnYiOiJQLTI1NiJ9fQ..sh-3Zn7wGpm_z-__irtE-g.jI2-KTGIlA8nOPii7fiOVe6jhTnUaC5vSGJKon24E55VNjSBH4WPNpg2H5uqOmjKgyeW3WQ_gTxlYSm_T25CoZzYts5NTM9HySSGctWThGf1KWTzvYPPpC3VfccsopA5uVbiGUOOzVQY46pid-yNRPAmd0oYxJmQ5rRFRpnDeoW91Xp_jZbXLrcoYmwXdPhJYgijMZEEGGba4N8XCn4m4PXDqoLHMFkFLDnH5udceEyedXioYJjaEV5c_Cja8x3X_JfzBfTZiopn_vSga95LnXCFxH2Vtu0fA-Lw4nYFu6rWSqyDFH0NtDxbpS9GMUX1KXZR-WM6LXOPntixOgPKbNssj7SWu6ssPF3xyWsGJEtWca-7SzC7iV3bJzJQBCxtUptesXd4xdxNnNtKYyKmTbMqAsxvTqWpODYypb9-XKE4NswQOwxzhCdfxIO-gUieTdoL0P4HQlbcPnP7P3ZUKgcl3IkkUYlR2Ax-CJe9VINdx9jepjbcXtPHqjRGGLKPU_2hCDfo6n3jwuSA8QXYEL7TpCZQlCHXgxnlkj134vvatiiaEBFG0J6ThvZPFv6NxqD8f7OkE7zZSDIYs1-VtDrO_-JbivGaHIHU906PAKmYSUpSNrkFoBMJu_2yHGx118QUD6Zd5i44adzJCGzuMGVNYC52el4k4rzWm97STiZCG7pcyezHIjJsYIK0QYVdZKiNionrT2gayC-xRyxvpacU1anMeeUdn6exw11I1TLh5hLd46PcQeAzgcZQ_6_sMzUSGl5mjhRa9_uXtgwQxWOMf-lcpuHfQZE0EmQq4AMv4e_sup-ikdnaOzG-zIvJeQC8TtIE68hq0ppQyvFUyDU_kAw_rv9N0mUqNvAHrFti3wLIxkr3J5iH6RvzlAFjiSZj-vafYP7Jq3oP9S8r1fflIBwnBHOHXQhwWIwspWT-HIvJGL4UWJ7VLe0Yw_sY3Xppbi8tObYo47V2kpagk_uBcrryOnai7cogQjys30_oI3xroePj4_taJOyLZBPfWAeHYIZOjSauWyxy4fEByeZdyrLniaFduWM7DigDjBakhSue6rnhUU2Q19xuD9X2m2oWGK1ngR84vUBFUtzHjtCBavNSYgTWCngSPColR38.teH3BfKwaFITfCnGLQMfXQ","token_type":"Bearer","expires_in":3599}
2021-08-25 21:15:00 SUCCESS
CallTokenEndpoint
Parsed token endpoint response
access_token
eyJhbGciOiJFUzI1NiIsImtpZCI6IlhCNXZXTjczREw4QUtyX2dLZllwcExuaU50YyIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktand0LXBhcjEiLCJzdWIiOiJqb2UiLCJpaWQiOiJUQkQiLCJjbmYiOnsieDV0I1MyNTYiOiJNVFFJc1paLTV2T3F6bUt1U2xzbjJyc1VTV3hmT2ZJaWhubkdNdmV6X0ZvIn0sImV4cCI6MTYyOTkyOTY5OX0.09EvBk9A_1D4BgdhbsUDqTsZ82QeJv4mSN0zfp7wY-H0GXRO98euLsskvZbt_Io8rz9jka210GmNdnT_O9mDig
refresh_token
wzqcvZj24mOkZpWuhhzA0A1hxgIGXlSZ2u1BSAWIJn
id_token
eyJhbGciOiJFQ0RILUVTIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImN0eSI6IkpXVCIsImtpZCI6ImhUbUxHdyIsImVwayI6eyJrdHkiOiJFQyIsIngiOiJLeHVPZG9LLW00VFBuT0V3dEZ6LXdyVmJVZXdYVVJjRzJNT2ZfSlhjdUIwIiwieSI6InJSUW81WHh3TXN2RTFZSlhYOWdvUk1PNjYwSzFWU19COTk1LUFzMDd3aUEiLCJjcnYiOiJQLTI1NiJ9fQ..sh-3Zn7wGpm_z-__irtE-g.jI2-KTGIlA8nOPii7fiOVe6jhTnUaC5vSGJKon24E55VNjSBH4WPNpg2H5uqOmjKgyeW3WQ_gTxlYSm_T25CoZzYts5NTM9HySSGctWThGf1KWTzvYPPpC3VfccsopA5uVbiGUOOzVQY46pid-yNRPAmd0oYxJmQ5rRFRpnDeoW91Xp_jZbXLrcoYmwXdPhJYgijMZEEGGba4N8XCn4m4PXDqoLHMFkFLDnH5udceEyedXioYJjaEV5c_Cja8x3X_JfzBfTZiopn_vSga95LnXCFxH2Vtu0fA-Lw4nYFu6rWSqyDFH0NtDxbpS9GMUX1KXZR-WM6LXOPntixOgPKbNssj7SWu6ssPF3xyWsGJEtWca-7SzC7iV3bJzJQBCxtUptesXd4xdxNnNtKYyKmTbMqAsxvTqWpODYypb9-XKE4NswQOwxzhCdfxIO-gUieTdoL0P4HQlbcPnP7P3ZUKgcl3IkkUYlR2Ax-CJe9VINdx9jepjbcXtPHqjRGGLKPU_2hCDfo6n3jwuSA8QXYEL7TpCZQlCHXgxnlkj134vvatiiaEBFG0J6ThvZPFv6NxqD8f7OkE7zZSDIYs1-VtDrO_-JbivGaHIHU906PAKmYSUpSNrkFoBMJu_2yHGx118QUD6Zd5i44adzJCGzuMGVNYC52el4k4rzWm97STiZCG7pcyezHIjJsYIK0QYVdZKiNionrT2gayC-xRyxvpacU1anMeeUdn6exw11I1TLh5hLd46PcQeAzgcZQ_6_sMzUSGl5mjhRa9_uXtgwQxWOMf-lcpuHfQZE0EmQq4AMv4e_sup-ikdnaOzG-zIvJeQC8TtIE68hq0ppQyvFUyDU_kAw_rv9N0mUqNvAHrFti3wLIxkr3J5iH6RvzlAFjiSZj-vafYP7Jq3oP9S8r1fflIBwnBHOHXQhwWIwspWT-HIvJGL4UWJ7VLe0Yw_sY3Xppbi8tObYo47V2kpagk_uBcrryOnai7cogQjys30_oI3xroePj4_taJOyLZBPfWAeHYIZOjSauWyxy4fEByeZdyrLniaFduWM7DigDjBakhSue6rnhUU2Q19xuD9X2m2oWGK1ngR84vUBFUtzHjtCBavNSYgTWCngSPColR38.teH3BfKwaFITfCnGLQMfXQ
token_type
Bearer
expires_in
3599
Verify token endpoint response
2021-08-25 21:15:00 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2021-08-25 21:15:00 SUCCESS
CheckForAccessTokenValue
Found an access token
access_token
eyJhbGciOiJFUzI1NiIsImtpZCI6IlhCNXZXTjczREw4QUtyX2dLZllwcExuaU50YyIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktand0LXBhcjEiLCJzdWIiOiJqb2UiLCJpaWQiOiJUQkQiLCJjbmYiOnsieDV0I1MyNTYiOiJNVFFJc1paLTV2T3F6bUt1U2xzbjJyc1VTV3hmT2ZJaWhubkdNdmV6X0ZvIn0sImV4cCI6MTYyOTkyOTY5OX0.09EvBk9A_1D4BgdhbsUDqTsZ82QeJv4mSN0zfp7wY-H0GXRO98euLsskvZbt_Io8rz9jka210GmNdnT_O9mDig
2021-08-25 21:15:00 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
eyJhbGciOiJFUzI1NiIsImtpZCI6IlhCNXZXTjczREw4QUtyX2dLZllwcExuaU50YyIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktand0LXBhcjEiLCJzdWIiOiJqb2UiLCJpaWQiOiJUQkQiLCJjbmYiOnsieDV0I1MyNTYiOiJNVFFJc1paLTV2T3F6bUt1U2xzbjJyc1VTV3hmT2ZJaWhubkdNdmV6X0ZvIn0sImV4cCI6MTYyOTkyOTY5OX0.09EvBk9A_1D4BgdhbsUDqTsZ82QeJv4mSN0zfp7wY-H0GXRO98euLsskvZbt_Io8rz9jka210GmNdnT_O9mDig
type
Bearer
2021-08-25 21:15:00 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
3599
2021-08-25 21:15:00 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
3599
2021-08-25 21:15:00 SUCCESS
CheckForRefreshTokenValue
Found a refresh token
refresh_token
wzqcvZj24mOkZpWuhhzA0A1hxgIGXlSZ2u1BSAWIJn
2021-08-25 21:15:00 SUCCESS
EnsureMinimumRefreshTokenLength
Refresh token is of sufficient length
actual
336
required
128
2021-08-25 21:15:00 SUCCESS
EnsureMinimumRefreshTokenEntropy
Calculated shannon entropy seems sufficient
actual
198.2126692502176
expected
96.0
2021-08-25 21:15:00 SUCCESS
EnsureMinimumAccessTokenLength
Access token is of sufficient length
actual
3144
required
128
2021-08-25 21:15:00 SUCCESS
EnsureMinimumAccessTokenEntropy
Calculated shannon entropy seems sufficient
actual
2238.441531941371
expected
96.0
2021-08-25 21:15:00 SUCCESS
ExtractIdTokenFromTokenResponse
Found and parsed the id_token from token_endpoint_response
value
eyJhbGciOiJQUzI1NiIsImtpZCI6IjRNc0ZRbkNtc29icUp3YUhyYjd1YlRzTlF4TSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtcGFyMSIsImp0aSI6IlVvR2s0NU9VRG1XSmhkSHN2RG42dzEiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMxIiwiaWF0IjoxNjI5OTI2MDk5LCJleHAiOjE2Mjk5MjYzOTksImFjciI6InVybjpjZHMuYXU6Y2RyOjIiLCJhdXRoX3RpbWUiOjE2Mjk5MjU0MDUsIm5vbmNlIjoiTGEwV0JSckk4NCIsImNfaGFzaCI6InZIWkZQazY3WEVESDVWcWhUS2hsdHcifQ.HZABHjZFFHGXBuhoik8OL16QQQzogeqbbLmpEolN0gshpThIvBffgBW2l__j8egvBHuLMSodIreXgbeBnO45khbv1E_bBUhG4lluV3-SP-PGQMA5jIzh5yeR2sGxoyRBYaDhIEnwTDmtXTNDyY87XyjR4HgriHGQnW2yR9aiiYDb_wyj1ZUmPK9CidbJrksSp2IM5aD4N1cUYoc7rklBtaOG4G-BZ_hzahafv-yF92RJhFjm8kah_y7toBL7H06bCnnzE28iTtmEhdv-7H5d2izIqaPkPKpbfZYT4rS5ujgoNBT-FGO3-GYZwk0NkJSAco1xiGRmupQ34ekcIGmfag
header
{
  "kid": "4MsFQnCmsobqJwaHrb7ubTsNQxM",
  "alg": "PS256"
}
claims
{
  "sub": "9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4",
  "aud": "c__fapi-jwt-par1",
  "acr": "urn:cds.au:cdr:2",
  "c_hash": "vHZFPk67XEDH5VqhTKhltw",
  "auth_time": 1629925405,
  "iss": "https://par-what-is-it-good-for.ping-eng.com:9031",
  "exp": 1629926399,
  "iat": 1629926099,
  "nonce": "La0WBRrI84",
  "jti": "UoGk45OUDmWJhdHsvDn6w1"
}
jwe_header
{
  "epk": {
    "kty": "EC",
    "crv": "P-256",
    "x": "KxuOdoK-m4TPnOEwtFz-wrVbUewXURcG2MOf_JXcuB0",
    "y": "rRQo5XxwMsvE1YJXX9goRMO660K1VS_B995-As07wiA"
  },
  "kid": "hTmLGw",
  "cty": "JWT",
  "enc": "A128CBC-HS256",
  "alg": "ECDH-ES"
}
2021-08-25 21:15:00 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2021-08-25 21:15:00 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
4MsFQnCmsobqJwaHrb7ubTsNQxM
2021-08-25 21:15:00 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
La0WBRrI84
2021-08-25 21:15:00 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
acr value in id_token is (one of) the requested values
actual
urn:cds.au:cdr:2
requested
[
  "urn:cds.au:cdr:2"
]
2021-08-25 21:15:00 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IjRNc0ZRbkNtc29icUp3YUhyYjd1YlRzTlF4TSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtcGFyMSIsImp0aSI6IlVvR2s0NU9VRG1XSmhkSHN2RG42dzEiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMxIiwiaWF0IjoxNjI5OTI2MDk5LCJleHAiOjE2Mjk5MjYzOTksImFjciI6InVybjpjZHMuYXU6Y2RyOjIiLCJhdXRoX3RpbWUiOjE2Mjk5MjU0MDUsIm5vbmNlIjoiTGEwV0JSckk4NCIsImNfaGFzaCI6InZIWkZQazY3WEVESDVWcWhUS2hsdHcifQ.HZABHjZFFHGXBuhoik8OL16QQQzogeqbbLmpEolN0gshpThIvBffgBW2l__j8egvBHuLMSodIreXgbeBnO45khbv1E_bBUhG4lluV3-SP-PGQMA5jIzh5yeR2sGxoyRBYaDhIEnwTDmtXTNDyY87XyjR4HgriHGQnW2yR9aiiYDb_wyj1ZUmPK9CidbJrksSp2IM5aD4N1cUYoc7rklBtaOG4G-BZ_hzahafv-yF92RJhFjm8kah_y7toBL7H06bCnnzE28iTtmEhdv-7H5d2izIqaPkPKpbfZYT4rS5ujgoNBT-FGO3-GYZwk0NkJSAco1xiGRmupQ34ekcIGmfag
2021-08-25 21:15:00 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IjRNc0ZRbkNtc29icUp3YUhyYjd1YlRzTlF4TSJ9.eyJzdWIiOiI5d1A0MUFkRzE5OVNPR3JLaUtoYUlZVnRqYWhkeG9rQ0k2UDF2ZlpjeGkwU2RfeU9SY3BLM3Y0IiwiYXVkIjoiY19fZmFwaS1qd3QtcGFyMSIsImp0aSI6IlVvR2s0NU9VRG1XSmhkSHN2RG42dzEiLCJpc3MiOiJodHRwczovL3Bhci13aGF0LWlzLWl0LWdvb2QtZm9yLnBpbmctZW5nLmNvbTo5MDMxIiwiaWF0IjoxNjI5OTI2MDk5LCJleHAiOjE2Mjk5MjYzOTksImFjciI6InVybjpjZHMuYXU6Y2RyOjIiLCJhdXRoX3RpbWUiOjE2Mjk5MjU0MDUsIm5vbmNlIjoiTGEwV0JSckk4NCIsImNfaGFzaCI6InZIWkZQazY3WEVESDVWcWhUS2hsdHcifQ.HZABHjZFFHGXBuhoik8OL16QQQzogeqbbLmpEolN0gshpThIvBffgBW2l__j8egvBHuLMSodIreXgbeBnO45khbv1E_bBUhG4lluV3-SP-PGQMA5jIzh5yeR2sGxoyRBYaDhIEnwTDmtXTNDyY87XyjR4HgriHGQnW2yR9aiiYDb_wyj1ZUmPK9CidbJrksSp2IM5aD4N1cUYoc7rklBtaOG4G-BZ_hzahafv-yF92RJhFjm8kah_y7toBL7H06bCnnzE28iTtmEhdv-7H5d2izIqaPkPKpbfZYT4rS5ujgoNBT-FGO3-GYZwk0NkJSAco1xiGRmupQ34ekcIGmfag
2021-08-25 21:15:00 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
9wP41AdG199SOGrKiKhaIYVtjahdxokCI6P1vfZcxi0Sd_yORcpK3v4
2021-08-25 21:15:00 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "ES256",
  "PS256"
]
alg
PS256
2021-08-25 21:15:00 SUCCESS
FAPIValidateIdTokenEncryptionAlg
id_token was encrypted with a permitted algorithm
alg
ECDH-ES
2021-08-25 21:15:00 SUCCESS
FAPIValidateEncryptedIdTokenHasKid
kid was found in the encrypted ID token header
kid
hTmLGw
2021-08-25 21:15:00 SUCCESS
ValidateIdTokenEncrypted
id_token was encrypted
2021-08-25 21:15:00 SUCCESS
ExtractCHash
Extracted c_hash from ID Token
c_hash
vHZFPk67XEDH5VqhTKhltw
alg
PS256
2021-08-25 21:15:00 INFO
ExtractSHash
Couldn't find s_hash in ID token
2021-08-25 21:15:00 INFO
ExtractAtHash
Couldn't find at_hash in ID token
2021-08-25 21:15:00 SUCCESS
ValidateCHash
c_hash validated successfully
expected_hash
vHZFPk67XEDH5VqhTKhltw
unhashed_value
-hgYSyqRJiCpntImeoVFg4CrcFYlZaDzVA-Fx_WM
id_token_hash
vHZFPk67XEDH5VqhTKhltw
2021-08-25 21:15:00 INFO
ValidateSHash
Skipped evaluation due to missing required object: s_hash
expected
s_hash
mapped
2021-08-25 21:15:00 INFO
ValidateAtHash
Skipped evaluation due to missing required object: at_hash
expected
at_hash
mapped
Verify at_hash in the authorization endpoint id_token
2021-08-25 21:15:00 INFO
ExtractAtHash
Couldn't find at_hash in ID token
2021-08-25 21:15:00 INFO
ValidateAtHash
Skipped evaluation due to missing required object: at_hash
expected
at_hash
mapped
Resource server endpoint tests
2021-08-25 21:15:00
CreateEmptyResourceEndpointRequestHeaders
Created empty headers
resource_endpoint_request_headers
{}
2021-08-25 21:15:00 SUCCESS
AddFAPIAuthDateToResourceEndpointRequest
Added x-fapi-auth-date to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Wed, 25 Aug 2021 21:15:00 GMT"
}
2021-08-25 21:15:00
AddIpV4FapiCustomerIpAddressToResourceEndpointRequest
Added x-fapi-customer-ip-address containing IPv4 address to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Wed, 25 Aug 2021 21:15:00 GMT",
  "x-fapi-customer-ip-address": "198.51.100.119"
}
2021-08-25 21:15:00
AddCdrXCdsClientHeadersToResourceEndpointRequest
Added x-cds-client-headers to resource_endpoint_request_headers
x-fapi-auth-date
Wed, 25 Aug 2021 21:15:00 GMT
x-fapi-customer-ip-address
198.51.100.119
x-cds-client-headers
TW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzkuMC4zOTQ1Ljg4IFNhZmFyaS81MzcuMzY=
2021-08-25 21:15:00
CreateRandomFAPIInteractionId
Created interaction ID
fapi_interaction_id
0de6e0d2-a602-4211-912e-9ea1de0b7187
2021-08-25 21:15:00 SUCCESS
AddFAPIInteractionIdToResourceEndpointRequest
Added x-fapi-interaction-id to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Wed, 25 Aug 2021 21:15:00 GMT",
  "x-fapi-customer-ip-address": "198.51.100.119",
  "x-cds-client-headers": "TW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzkuMC4zOTQ1Ljg4IFNhZmFyaS81MzcuMzY\u003d",
  "x-fapi-interaction-id": "0de6e0d2-a602-4211-912e-9ea1de0b7187"
}
2021-08-25 21:15:00
AddCdrXvToResourceEndpointRequest
Added x-v to resource_endpoint_request_headers
2021-08-25 21:15:00
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP request
request_uri
https://par-what-is-it-good-for.ping-eng.com:3000/ext/au/cdr/mock
request_method
GET
request_headers
{
  "accept": "application/json;charset\u003dUTF-8",
  "x-fapi-auth-date": "Wed, 25 Aug 2021 21:15:00 GMT",
  "x-fapi-customer-ip-address": "198.51.100.119",
  "x-cds-client-headers": "TW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzkuMC4zOTQ1Ljg4IFNhZmFyaS81MzcuMzY\u003d",
  "x-fapi-interaction-id": "0de6e0d2-a602-4211-912e-9ea1de0b7187",
  "x-v": "3",
  "authorization": "Bearer eyJhbGciOiJFUzI1NiIsImtpZCI6IlhCNXZXTjczREw4QUtyX2dLZllwcExuaU50YyIsInBpLmF0bSI6Imx1eWcifQ.eyJzY29wZSI6Im9wZW5pZCBvdGhlciIsImNsaWVudF9pZCI6ImNfX2ZhcGktand0LXBhcjEiLCJzdWIiOiJqb2UiLCJpaWQiOiJUQkQiLCJjbmYiOnsieDV0I1MyNTYiOiJNVFFJc1paLTV2T3F6bUt1U2xzbjJyc1VTV3hmT2ZJaWhubkdNdmV6X0ZvIn0sImV4cCI6MTYyOTkyOTY5OX0.09EvBk9A_1D4BgdhbsUDqTsZ82QeJv4mSN0zfp7wY-H0GXRO98euLsskvZbt_Io8rz9jka210GmNdnT_O9mDig",
  "accept-charset": "utf-8",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "MIIEpQIBAAKCAQEAr62e+ASZtZzhmfWwqtfSe4RENFlFIGJ61SjrfRTt6j48HEGumpaeORWGWFpv6IqWzvzZ2N9sEF4yrcZa3ibMtYFkaaKXUoKxek7vCDWiB+NMD1/xT9mYFYiDZk/zazczvltmLYcgoSldKPbhN3faI+Bi61n4NFt+qGETyPVDZrFwuSmpcDAVKC49PtvPgoe1FeFCy/Xh+A1Tb6+637IDBAVkqRm304dklysIm4/o4E7nd4IRvSEAjiz7i9wwzgL+IDu2U//7qcJ0czck0EIINN9l0GmABMrwCAr35++fBwAzCABb6skTUHxjiucXUSkDaId8NwJDH7hA/JLhCA8F6wIDAQABAoIBAQChGTPH+GAEHQL8rkL9x8AqqFXrM1miouxFAKtCHqk1vzBcMRcuh6Q8cLKr3vL0afJ1iYUzzV5JfDg5BsZZJXdfknJENGdTsKmToUKtYpFdbmBXUQH22XEPfgoRDowH6601iJcgdOPFJitZ31sUBIIzmBbd/7kOOkDho3QDOnY+ej6s901DGOvW5+EYj0bCIaJUpX4BHr/pKmSqIa5dYZj6OrrCXFZk5Rvg8Mp20POxS0O2xqTInTIwKV4kALnAsmP65Qiw0qoYwRUwfbF06iFVy1IVQnN3sChMeh67RQBcgKPtZRf+oylFTs5Ox3fxBj1H+4CwCDN50yUyyQVeA/AhAoGBAObea7aSusVx0+fPTW6d468lSpSSSRtVTcmGaPS8YaU0K9HFaw9smoilVpkarV4/v4J5CM2vNXdTtBpPiPaQACCGyqmBJ0xkK1dF1stVIDij4phg6OZhQO5wrcMCT0MtOPEZEIjYjI96CYhI46czt4Hv6GMiUTyncLag9S9LiSbJAoGBAMLNNpdZCBjSi3lGbD58WCW1H7ISzl0Um+K7gjhps5cw4PkTPdLMRjurKrs1bCLvsWQmg3CdNU+QLe7nSgKytaa4Z8YywJRNRRBOZNS6k/Px0QEycy3RBHBXS9jw4+TPnERI2K4J2S3QrBMUMD0OWKCz0c+rxWW1U7OrOHLo6X0TAoGAI5qrq+VnDmomjvpma6fH5Evw+4av5Zo7O9gRuaSPvoWUOG6kuyU5k9dDyqrVj9Ju+3UlCWt66GMtRF19tuCwVFPVT1zOrbZJBNWNcaA4LuP/Xxaa9GSNOfiAo7FofeisfmoqJaCX1MyySaVMDo4oP8663Qb+1kbQWCnshhW1GhkCgYEAtVSrJXUl2V1boVdReVTsBKW2TF+/ItwFQ6hBzltuZiWEtbYYjXnDQtXRYBSZhWfTm6NSJOjh8B8I8uLvfNV3zCrJxrAFncbTrBsdNvw6rxCA+nlIx/RSCnToUJfju2EaWGHq+Q6H0GL3WocnZB5Pl7/rZUHC7Ss+L/gJAsYWWmsCgYEAnIcOu9bcNYYAr3Y9g0F9qdPBMFtyZUiDVpVhOiPioDxf4WKmIE4hk21I1teEmfkxMeDGcsPXf4Qb1wdm+Cj2vLptzhIgIW7JeuZXgqTyGEEjdN9xjO45RjWKxJXJyEeFjPqAGzGOIUCrt+84CfoKr5epUpuZecZA+OxRRuSr674\u003d",
  "ca": "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\u003d\u003d"
}
2021-08-25 21:15:00 RESPONSE
CallProtectedResourceWithBearerTokenAndCustomHeaders
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Wed, 25 Aug 2021 21:15:00 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dPG00WaWCovrV0N51mO80gI; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "transfer-encoding": "chunked",
  "x-fapi-interaction-id": "0de6e0d2-a602-4211-912e-9ea1de0b7187"
}
response_body
{"some data":"goes here"}
2021-08-25 21:15:00 SUCCESS
CallProtectedResourceWithBearerTokenAndCustomHeaders
Got a response from the resource endpoint
status
200
endpoint_name
resource
headers
{
  "date": "Wed, 25 Aug 2021 21:15:00 GMT",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "origin",
  "cache-control": "no-cache, no-store",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "content-type": "application/json;charset\u003dutf-8",
  "set-cookie": "PF\u003dPG00WaWCovrV0N51mO80gI; Path\u003d/; Secure; HttpOnly; SameSite\u003dNone",
  "transfer-encoding": "chunked",
  "x-fapi-interaction-id": "0de6e0d2-a602-4211-912e-9ea1de0b7187"
}
body
{"some data":"goes here"}
2021-08-25 21:15:00 SUCCESS
CheckForDateHeaderInResourceResponse
Date header present and validated
date
Wed, 25 Aug 2021 21:15:00 GMT
skew
467
2021-08-25 21:15:00 SUCCESS
CheckForFAPIInteractionIdInResourceResponse
Found x-fapi-interaction-id
interaction_id
0de6e0d2-a602-4211-912e-9ea1de0b7187
2021-08-25 21:15:00 SUCCESS
EnsureMatchingFAPIInteractionId
Interaction ID matched
fapi_interaction_id
0de6e0d2-a602-4211-912e-9ea1de0b7187
2021-08-25 21:15:00 SUCCESS
EnsureResourceResponseReturnedJsonContentType
Response content type is json
content_type
application/json;charset=utf-8
2021-08-25 21:15:00 FINISHED
fapi-rw-id2-state-only-outside-request-object-not-used
Test has run to completion
testmodule_result
PASSED
2021-08-25 21:15:01
TEST-RUNNER
Alias has now been claimed by another test
alias
pi
new_test_id
G3aZARasCQZLOWc
Test Results