Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-10-22 15:34:58 INFO
TEST-RUNNER
Test instance L0C41jDRMb8B6Qq created
baseUrl
https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "by_value",
  "fapi_jarm_type": "oidc",
  "fapi_profile": "plain_fapi",
  "fapi_response_mode": "plain_response"
}
alias
openid-client-JsA4OBya72NBFiTmU8P26
description
openid-client v5.x FAPI1 Adv. private_key_jwt RP
planId
VsHCoijUnlaAo
config
{
  "alias": "openid-client-JsA4OBya72NBFiTmU8P26",
  "description": "openid-client v5.x FAPI1 Adv. private_key_jwt RP",
  "server": {
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "qOcQIY2N8ybqMv3xhxiG2WMtjszRaAjQfJbzoa88SIl-sqYpGq7E8SMhemccmDi1GeJd-l63w6MeykHb09HytqncFa2EFCvwhZ499MWVp67ePkTH2ltR1wIZ6V2VkVAkBcY3O0AucJVWI3zLlN1TPpeyfEu5pMsAC8zwzUvuaEFwS4IyA7KqRXNsLSdwZpzO0t5g0PTDoklcguLiFaDsiw0y1jqr0f3j4lhekdu1MH9mo2xdm1G6zm52f6LAiPWRPcEPyrCpFiHRSH7zOOCEXHlt-AOaONsaWk936RDQ5EN2qULh27V-3y791CxM1F7qty_2KstvNIHCIR1I3tCbGw",
          "d": "qK0A7hE4xrCBSOVUVK9I1EZ4k9i19CiBVTtHGZwwHty5G95WxF_vLEYCRAQ_iUFwkuX_Jm97I7R-pkx5JaPQuV0O_tMnSSHMdRRgGVdNKoW3SwZTdByosYlWqTidit4261FVjSV-e06YFJ6njQYvAR5r0DersQhOBnrnrI59C71W92HxiufYcbK6cONQxW4a6KiFdxhTFDo15ctrB4WAcw0h33HvuvSZgA_60GyL08VlCDfkWWF1_BD_1IwOB69nWWAEEsI2oed_n8HQ5L6q_N9nU03hG8QvLE2EjT-7nCxDigW0ZaceAXTmyfz3tOiPGHvYyEF14U_9CfsazS4gEQ",
          "p": "0hh2g3aEyOj5LUiRJSz2b41uFfEemdPNKBP2ZKZcT1RUeA4P-x2q8RMMwDq3GcEFh6cYJ62PlMxjThFSVv-nG8VuwhbaqqId-4MZZfw-e_B-i-RGrC8gQSrPA8e-S4ORueFzm4PIn_Pa1xXgJ_v4Dp1N0dOQWUYcgAKuZCubk8M",
          "q": "zc6Amlx38C34RJTndSYm3pnylQdr036ZxFrUWGe-hqyCLVGDjrri2UHzGmHk5oiuNvieBnJZZgtHT_o1Eaq0YBJFQdIF9119DG-3_pqZZ8HWq5KBzohgmJMOmJTxh46HcLGqgW2lvRZB1UW4aPGrLlDH2yRAhKQ_MNSWp24Znck",
          "dp": "RjPsbhNNXYETukD0VzLGChJ9RZGzgv1WIV1CSPGaCNwJ-a_hQSzxsOqHqTg1dMKd4W1BUgjZ4IPHbw-0ruNwaIQ5dVuDp97SG_f7pat7CZkcAAzAXMrGgWAXmpDFEqCdMjqWkdGgWWp3psVliJbWlbOUjFegdWRLI69BrLExpFc",
          "dq": "cTLnG4BG3A1848P_Nzlf4cpNWlk1nqOg0hafe2y8p_iUtXaDZOs4QQV8QIOd0otVP5kp2iPlNjJ36-6UZ_47rif-fgCWFYQPdtqwGlNQk3hTqhUwXrg2YVVpjtVFsCjeKEcgoIX9xm5KkZMCpn5eiGAYPVnIPuzUcPhNURRG9Lk",
          "qi": "SVo8v-eUECVp0j6BanAVWPd4B5inBTlG4ldTC7qjndgWMvB0TG_3Wxz6DEzBjUJ0m3FNZHSn3IYxuG5sPclKpy3wXRVH5hSVKvRKKYRN0NTABjPXzXi5zGo_bJqEq2pxY5auL94iULIm56iK4C-hh-8L_3PeXwQnKTyyQh-ad7o",
          "kty": "RSA",
          "kid": "sNQ8PpQ7Sr5U5jKCy-I5a3Eji4ZRkLTArO1y-I9wNqA",
          "alg": "PS256",
          "use": "sig"
        }
      ]
    }
  },
  "waitTimeoutSeconds": 2,
  "client": {
    "client_id": "client-id-openid-client-JsA4OBya72NBFiTmU8P26",
    "scope": "openid",
    "redirect_uri": "https://openid-client.local/cb",
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "vxLQCSZwKczHceBwJ4v_GSgvdDWmFE7nSZNhUXS9XOr-PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi-FJ6R-wLvpYo1NH20a6RG24-Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N_Mcdhg4Arwr-Lq9sOmvv1aO_NG-EwG_nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBw",
          "kty": "RSA",
          "kid": "arKeOJiuLF_d2-m1aexeTBVm37QOUG2DRRQ2OIX8GqM",
          "x5c": [
            "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\u003d"
          ],
          "x5t": "bZIgFX__W72fzGP4ToSRv4YC0pU",
          "x5t#S256": "vDGAWNl_H0i7g3-BgYaruR9DFIrRh6wn9MgyppUUD-Y"
        }
      ]
    },
    "certificate": "-----BEGIN CERTIFICATE-----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\r\niSqGF/BXU5yePXxsPv0\u003d\r\n-----END CERTIFICATE-----\r\n"
  },
  "client2": {
    "client_id": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
    "scope": "openid",
    "redirect_uri": "https://openid-client2.local/cb",
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "yOa-9nvr_lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd_T103usdRmy_B4A-O1rrbqfK-QW79S2IzxoHt3C2-CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW_vnR0aK5OTbTcw5JefqkITmo_RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDw",
          "kty": "RSA",
          "kid": "OPDJYjVIsJr1ayg0W0kbuRZGiFPyFvOmhnKSQDierns",
          "use": "sig",
          "x5c": [
            "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\u003d"
          ],
          "x5t": "oJBerrDKzZiQqOem-mjqZSj5AZo",
          "x5t#S256": "WAlDqGxyjiKXAJOgjURFkBFsNA3jzs09RZnwm4EaniQ"
        },
        {
          "e": "AQAB",
          "n": "443RBkcr1wUwpWte2QrlRtob8NNtUBCidYq5CSKd_kuixu-QTNYGaYaf1eMqf9hNVQi9UTy-MBV8fgIBtTIgiAysT-WlRokMOddrL3Oohe7UmyQkPRSxIZqXAlFsDSkOUqmOtdxr3LL_npmJ-YMq0dHYPogRybvvsRSIHCrPqGUbflZ8PZMYpOZ_YmYWf2iGOSsxSAxcG3OKkBCkOVNHKR7RDJ-sgTdfNmSztqbODkHV2ab1grsTMzQcuMWIDGy22wGzVkpNZpuEz-pQwmgwFnWB2kwM6S6q9dQM7bOASM8NgO6mmT8k0u-K0A7vq4OSPkpUdrCizY__0A3LJIMk0w",
          "kty": "RSA",
          "kid": "QxiVy76gkyAxdCKhvR1PmZm1Vcyv4lRSorGXjZmjt6c",
          "alg": "RSA-OAEP-256",
          "use": "enc"
        }
      ]
    },
    "id_token_encrypted_response_alg": "RSA-OAEP-256",
    "certificate": "-----BEGIN CERTIFICATE-----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\r\naXbGs9sIQ3hXRxe57nQ\u003d\r\n-----END CERTIFICATE-----\r\n"
  }
}
testName
fapi1-advanced-final-client-test-encrypted-idtoken
2021-10-22 15:34:58 SUCCESS
GenerateServerConfigurationMTLS
Created server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/openid-client-JsA4OBya72NBFiTmU8P26/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/userinfo"
}
issuer
https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/
discoveryUrl
https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/.well-known/openid-configuration
2021-10-22 15:34:58 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_jwks
{
  "keys": [
    {
      "p": "0hh2g3aEyOj5LUiRJSz2b41uFfEemdPNKBP2ZKZcT1RUeA4P-x2q8RMMwDq3GcEFh6cYJ62PlMxjThFSVv-nG8VuwhbaqqId-4MZZfw-e_B-i-RGrC8gQSrPA8e-S4ORueFzm4PIn_Pa1xXgJ_v4Dp1N0dOQWUYcgAKuZCubk8M",
      "kty": "RSA",
      "q": "zc6Amlx38C34RJTndSYm3pnylQdr036ZxFrUWGe-hqyCLVGDjrri2UHzGmHk5oiuNvieBnJZZgtHT_o1Eaq0YBJFQdIF9119DG-3_pqZZ8HWq5KBzohgmJMOmJTxh46HcLGqgW2lvRZB1UW4aPGrLlDH2yRAhKQ_MNSWp24Znck",
      "d": "qK0A7hE4xrCBSOVUVK9I1EZ4k9i19CiBVTtHGZwwHty5G95WxF_vLEYCRAQ_iUFwkuX_Jm97I7R-pkx5JaPQuV0O_tMnSSHMdRRgGVdNKoW3SwZTdByosYlWqTidit4261FVjSV-e06YFJ6njQYvAR5r0DersQhOBnrnrI59C71W92HxiufYcbK6cONQxW4a6KiFdxhTFDo15ctrB4WAcw0h33HvuvSZgA_60GyL08VlCDfkWWF1_BD_1IwOB69nWWAEEsI2oed_n8HQ5L6q_N9nU03hG8QvLE2EjT-7nCxDigW0ZaceAXTmyfz3tOiPGHvYyEF14U_9CfsazS4gEQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "sNQ8PpQ7Sr5U5jKCy-I5a3Eji4ZRkLTArO1y-I9wNqA",
      "qi": "SVo8v-eUECVp0j6BanAVWPd4B5inBTlG4ldTC7qjndgWMvB0TG_3Wxz6DEzBjUJ0m3FNZHSn3IYxuG5sPclKpy3wXRVH5hSVKvRKKYRN0NTABjPXzXi5zGo_bJqEq2pxY5auL94iULIm56iK4C-hh-8L_3PeXwQnKTyyQh-ad7o",
      "dp": "RjPsbhNNXYETukD0VzLGChJ9RZGzgv1WIV1CSPGaCNwJ-a_hQSzxsOqHqTg1dMKd4W1BUgjZ4IPHbw-0ruNwaIQ5dVuDp97SG_f7pat7CZkcAAzAXMrGgWAXmpDFEqCdMjqWkdGgWWp3psVliJbWlbOUjFegdWRLI69BrLExpFc",
      "alg": "PS256",
      "dq": "cTLnG4BG3A1848P_Nzlf4cpNWlk1nqOg0hafe2y8p_iUtXaDZOs4QQV8QIOd0otVP5kp2iPlNjJ36-6UZ_47rif-fgCWFYQPdtqwGlNQk3hTqhUwXrg2YVVpjtVFsCjeKEcgoIX9xm5KkZMCpn5eiGAYPVnIPuzUcPhNURRG9Lk",
      "n": "qOcQIY2N8ybqMv3xhxiG2WMtjszRaAjQfJbzoa88SIl-sqYpGq7E8SMhemccmDi1GeJd-l63w6MeykHb09HytqncFa2EFCvwhZ499MWVp67ePkTH2ltR1wIZ6V2VkVAkBcY3O0AucJVWI3zLlN1TPpeyfEu5pMsAC8zwzUvuaEFwS4IyA7KqRXNsLSdwZpzO0t5g0PTDoklcguLiFaDsiw0y1jqr0f3j4lhekdu1MH9mo2xdm1G6zm52f6LAiPWRPcEPyrCpFiHRSH7zOOCEXHlt-AOaONsaWk936RDQ5EN2qULh27V-3y791CxM1F7qty_2KstvNIHCIR1I3tCbGw"
    }
  ]
}
server_encryption_keys
{}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "sNQ8PpQ7Sr5U5jKCy-I5a3Eji4ZRkLTArO1y-I9wNqA",
      "alg": "PS256",
      "n": "qOcQIY2N8ybqMv3xhxiG2WMtjszRaAjQfJbzoa88SIl-sqYpGq7E8SMhemccmDi1GeJd-l63w6MeykHb09HytqncFa2EFCvwhZ499MWVp67ePkTH2ltR1wIZ6V2VkVAkBcY3O0AucJVWI3zLlN1TPpeyfEu5pMsAC8zwzUvuaEFwS4IyA7KqRXNsLSdwZpzO0t5g0PTDoklcguLiFaDsiw0y1jqr0f3j4lhekdu1MH9mo2xdm1G6zm52f6LAiPWRPcEPyrCpFiHRSH7zOOCEXHlt-AOaONsaWk936RDQ5EN2qULh27V-3y791CxM1F7qty_2KstvNIHCIR1I3tCbGw"
    }
  ]
}
2021-10-22 15:34:58 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-10-22 15:34:58 SUCCESS
ExtractServerSigningAlg
Successfully extracted algorithm
signing_algorithm
PS256
2021-10-22 15:34:58
SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly
Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration
server_configuration
{
  "issuer": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/openid-client-JsA4OBya72NBFiTmU8P26/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/userinfo",
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ]
}
2021-10-22 15:34:58 SUCCESS
AddResponseTypeCodeIdTokenToServerConfiguration
Added code id_token as response type supported
response_types_supported
[
  "code id_token"
]
2021-10-22 15:34:58 SUCCESS
FAPIAddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
values
[
  "PS256",
  "ES256"
]
2021-10-22 15:34:58 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2021-10-22 15:34:58 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "p": "0hh2g3aEyOj5LUiRJSz2b41uFfEemdPNKBP2ZKZcT1RUeA4P-x2q8RMMwDq3GcEFh6cYJ62PlMxjThFSVv-nG8VuwhbaqqId-4MZZfw-e_B-i-RGrC8gQSrPA8e-S4ORueFzm4PIn_Pa1xXgJ_v4Dp1N0dOQWUYcgAKuZCubk8M",
      "kty": "RSA",
      "q": "zc6Amlx38C34RJTndSYm3pnylQdr036ZxFrUWGe-hqyCLVGDjrri2UHzGmHk5oiuNvieBnJZZgtHT_o1Eaq0YBJFQdIF9119DG-3_pqZZ8HWq5KBzohgmJMOmJTxh46HcLGqgW2lvRZB1UW4aPGrLlDH2yRAhKQ_MNSWp24Znck",
      "d": "qK0A7hE4xrCBSOVUVK9I1EZ4k9i19CiBVTtHGZwwHty5G95WxF_vLEYCRAQ_iUFwkuX_Jm97I7R-pkx5JaPQuV0O_tMnSSHMdRRgGVdNKoW3SwZTdByosYlWqTidit4261FVjSV-e06YFJ6njQYvAR5r0DersQhOBnrnrI59C71W92HxiufYcbK6cONQxW4a6KiFdxhTFDo15ctrB4WAcw0h33HvuvSZgA_60GyL08VlCDfkWWF1_BD_1IwOB69nWWAEEsI2oed_n8HQ5L6q_N9nU03hG8QvLE2EjT-7nCxDigW0ZaceAXTmyfz3tOiPGHvYyEF14U_9CfsazS4gEQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "sNQ8PpQ7Sr5U5jKCy-I5a3Eji4ZRkLTArO1y-I9wNqA",
      "qi": "SVo8v-eUECVp0j6BanAVWPd4B5inBTlG4ldTC7qjndgWMvB0TG_3Wxz6DEzBjUJ0m3FNZHSn3IYxuG5sPclKpy3wXRVH5hSVKvRKKYRN0NTABjPXzXi5zGo_bJqEq2pxY5auL94iULIm56iK4C-hh-8L_3PeXwQnKTyyQh-ad7o",
      "dp": "RjPsbhNNXYETukD0VzLGChJ9RZGzgv1WIV1CSPGaCNwJ-a_hQSzxsOqHqTg1dMKd4W1BUgjZ4IPHbw-0ruNwaIQ5dVuDp97SG_f7pat7CZkcAAzAXMrGgWAXmpDFEqCdMjqWkdGgWWp3psVliJbWlbOUjFegdWRLI69BrLExpFc",
      "alg": "PS256",
      "dq": "cTLnG4BG3A1848P_Nzlf4cpNWlk1nqOg0hafe2y8p_iUtXaDZOs4QQV8QIOd0otVP5kp2iPlNjJ36-6UZ_47rif-fgCWFYQPdtqwGlNQk3hTqhUwXrg2YVVpjtVFsCjeKEcgoIX9xm5KkZMCpn5eiGAYPVnIPuzUcPhNURRG9Lk",
      "n": "qOcQIY2N8ybqMv3xhxiG2WMtjszRaAjQfJbzoa88SIl-sqYpGq7E8SMhemccmDi1GeJd-l63w6MeykHb09HytqncFa2EFCvwhZ499MWVp67ePkTH2ltR1wIZ6V2VkVAkBcY3O0AucJVWI3zLlN1TPpeyfEu5pMsAC8zwzUvuaEFwS4IyA7KqRXNsLSdwZpzO0t5g0PTDoklcguLiFaDsiw0y1jqr0f3j4lhekdu1MH9mo2xdm1G6zm52f6LAiPWRPcEPyrCpFiHRSH7zOOCEXHlt-AOaONsaWk936RDQ5EN2qULh27V-3y791CxM1F7qty_2KstvNIHCIR1I3tCbGw"
    }
  ]
}
2021-10-22 15:34:58 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
Verify configuration of first client
2021-10-22 15:34:58 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
client-id-openid-client-JsA4OBya72NBFiTmU8P26
scope
openid
redirect_uri
https://openid-client.local/cb
jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "vxLQCSZwKczHceBwJ4v_GSgvdDWmFE7nSZNhUXS9XOr-PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi-FJ6R-wLvpYo1NH20a6RG24-Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N_Mcdhg4Arwr-Lq9sOmvv1aO_NG-EwG_nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBw",
      "kty": "RSA",
      "kid": "arKeOJiuLF_d2-m1aexeTBVm37QOUG2DRRQ2OIX8GqM",
      "x5c": [
        "MIIDmjCCAoKgAwIBAgIJT9aTyttzbCFQMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNVBAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWExEzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRlc3QwHhcNMjExMDIyMTUzNDQ5WhcNMjIxMDIyMTUzNDQ5WjBpMRQwEgYDVQQDEwtleGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYDVQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxLQCSZwKczHceBwJ4v/GSgvdDWmFE7nSZNhUXS9XOr+PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi+FJ6R+wLvpYo1NH20a6RG24+Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N/Mcdhg4Arwr+Lq9sOmvv1aO/NG+EwG/nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBwIDAQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhtodHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBAGOS6AwdcTMIH00KPOot1P4qWJNv391rGIEGbAMuniy32X2ZNIXqhIh0g7QHX9Ul8eaRitUbLBcgH3hJ8/BExMJOjOnYEfMLJGSYbrkAwd3LYx4XuwCxY4uKGKWzsdgTgMjijQd2n0bi1rnhKgDAMoUpOAKpA4FkBd2l8y2QqK3w/C3SzrHSYuFrADpFaV6zVrLj+7FMTYj7+rgyF6AwoM279xoyVJ/PkVam3ZXO7cjtTbF53LSLJwaTYmK4r5JeOmN3AttIOXy2geaIWyghkuPtJXUN4/HiRKfgaAQOQYnEMdrJQrBWwRsUWDFz23hotlF4iSqGF/BXU5yePXxsPv0\u003d"
      ],
      "x5t": "bZIgFX__W72fzGP4ToSRv4YC0pU",
      "x5t#S256": "vDGAWNl_H0i7g3-BgYaruR9DFIrRh6wn9MgyppUUD-Y"
    }
  ]
}
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-10-22 15:34:58 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-10-22 15:34:58 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "vxLQCSZwKczHceBwJ4v_GSgvdDWmFE7nSZNhUXS9XOr-PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi-FJ6R-wLvpYo1NH20a6RG24-Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N_Mcdhg4Arwr-Lq9sOmvv1aO_NG-EwG_nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBw",
      "kty": "RSA",
      "kid": "arKeOJiuLF_d2-m1aexeTBVm37QOUG2DRRQ2OIX8GqM",
      "x5c": [
        "MIIDmjCCAoKgAwIBAgIJT9aTyttzbCFQMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNVBAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWExEzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRlc3QwHhcNMjExMDIyMTUzNDQ5WhcNMjIxMDIyMTUzNDQ5WjBpMRQwEgYDVQQDEwtleGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYDVQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxLQCSZwKczHceBwJ4v/GSgvdDWmFE7nSZNhUXS9XOr+PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi+FJ6R+wLvpYo1NH20a6RG24+Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N/Mcdhg4Arwr+Lq9sOmvv1aO/NG+EwG/nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBwIDAQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhtodHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBAGOS6AwdcTMIH00KPOot1P4qWJNv391rGIEGbAMuniy32X2ZNIXqhIh0g7QHX9Ul8eaRitUbLBcgH3hJ8/BExMJOjOnYEfMLJGSYbrkAwd3LYx4XuwCxY4uKGKWzsdgTgMjijQd2n0bi1rnhKgDAMoUpOAKpA4FkBd2l8y2QqK3w/C3SzrHSYuFrADpFaV6zVrLj+7FMTYj7+rgyF6AwoM279xoyVJ/PkVam3ZXO7cjtTbF53LSLJwaTYmK4r5JeOmN3AttIOXy2geaIWyghkuPtJXUN4/HiRKfgaAQOQYnEMdrJQrBWwRsUWDFz23hotlF4iSqGF/BXU5yePXxsPv0\u003d"
      ],
      "x5t": "bZIgFX__W72fzGP4ToSRv4YC0pU",
      "x5t#S256": "vDGAWNl_H0i7g3-BgYaruR9DFIrRh6wn9MgyppUUD-Y"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "x5t#S256": "vDGAWNl_H0i7g3-BgYaruR9DFIrRh6wn9MgyppUUD-Y",
      "e": "AQAB",
      "x5t": "bZIgFX__W72fzGP4ToSRv4YC0pU",
      "kid": "arKeOJiuLF_d2-m1aexeTBVm37QOUG2DRRQ2OIX8GqM",
      "x5c": [
        "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\u003d"
      ],
      "n": "vxLQCSZwKczHceBwJ4v_GSgvdDWmFE7nSZNhUXS9XOr-PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi-FJ6R-wLvpYo1NH20a6RG24-Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N_Mcdhg4Arwr-Lq9sOmvv1aO_NG-EwG_nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBw"
    }
  ]
}
2021-10-22 15:34:58 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-10-22 15:34:58 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-10-22 15:34:58 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "vxLQCSZwKczHceBwJ4v_GSgvdDWmFE7nSZNhUXS9XOr-PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi-FJ6R-wLvpYo1NH20a6RG24-Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N_Mcdhg4Arwr-Lq9sOmvv1aO_NG-EwG_nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBw",
      "kty": "RSA",
      "kid": "arKeOJiuLF_d2-m1aexeTBVm37QOUG2DRRQ2OIX8GqM",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "bZIgFX__W72fzGP4ToSRv4YC0pU",
      "x5t#S256": "vDGAWNl_H0i7g3-BgYaruR9DFIrRh6wn9MgyppUUD-Y"
    }
  ]
}
Verify configuration of second client
2021-10-22 15:34:58 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
client2-id-openid-client-JsA4OBya72NBFiTmU8P26
scope
openid
redirect_uri
https://openid-client2.local/cb
jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "yOa-9nvr_lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd_T103usdRmy_B4A-O1rrbqfK-QW79S2IzxoHt3C2-CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW_vnR0aK5OTbTcw5JefqkITmo_RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDw",
      "kty": "RSA",
      "kid": "OPDJYjVIsJr1ayg0W0kbuRZGiFPyFvOmhnKSQDierns",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "oJBerrDKzZiQqOem-mjqZSj5AZo",
      "x5t#S256": "WAlDqGxyjiKXAJOgjURFkBFsNA3jzs09RZnwm4EaniQ"
    },
    {
      "e": "AQAB",
      "n": "443RBkcr1wUwpWte2QrlRtob8NNtUBCidYq5CSKd_kuixu-QTNYGaYaf1eMqf9hNVQi9UTy-MBV8fgIBtTIgiAysT-WlRokMOddrL3Oohe7UmyQkPRSxIZqXAlFsDSkOUqmOtdxr3LL_npmJ-YMq0dHYPogRybvvsRSIHCrPqGUbflZ8PZMYpOZ_YmYWf2iGOSsxSAxcG3OKkBCkOVNHKR7RDJ-sgTdfNmSztqbODkHV2ab1grsTMzQcuMWIDGy22wGzVkpNZpuEz-pQwmgwFnWB2kwM6S6q9dQM7bOASM8NgO6mmT8k0u-K0A7vq4OSPkpUdrCizY__0A3LJIMk0w",
      "kty": "RSA",
      "kid": "QxiVy76gkyAxdCKhvR1PmZm1Vcyv4lRSorGXjZmjt6c",
      "alg": "RSA-OAEP-256",
      "use": "enc"
    }
  ]
}
id_token_encrypted_response_alg
RSA-OAEP-256
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-10-22 15:34:58 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-10-22 15:34:58 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "yOa-9nvr_lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd_T103usdRmy_B4A-O1rrbqfK-QW79S2IzxoHt3C2-CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW_vnR0aK5OTbTcw5JefqkITmo_RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDw",
      "kty": "RSA",
      "kid": "OPDJYjVIsJr1ayg0W0kbuRZGiFPyFvOmhnKSQDierns",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "oJBerrDKzZiQqOem-mjqZSj5AZo",
      "x5t#S256": "WAlDqGxyjiKXAJOgjURFkBFsNA3jzs09RZnwm4EaniQ"
    },
    {
      "e": "AQAB",
      "n": "443RBkcr1wUwpWte2QrlRtob8NNtUBCidYq5CSKd_kuixu-QTNYGaYaf1eMqf9hNVQi9UTy-MBV8fgIBtTIgiAysT-WlRokMOddrL3Oohe7UmyQkPRSxIZqXAlFsDSkOUqmOtdxr3LL_npmJ-YMq0dHYPogRybvvsRSIHCrPqGUbflZ8PZMYpOZ_YmYWf2iGOSsxSAxcG3OKkBCkOVNHKR7RDJ-sgTdfNmSztqbODkHV2ab1grsTMzQcuMWIDGy22wGzVkpNZpuEz-pQwmgwFnWB2kwM6S6q9dQM7bOASM8NgO6mmT8k0u-K0A7vq4OSPkpUdrCizY__0A3LJIMk0w",
      "kty": "RSA",
      "kid": "QxiVy76gkyAxdCKhvR1PmZm1Vcyv4lRSorGXjZmjt6c",
      "alg": "RSA-OAEP-256",
      "use": "enc"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "x5t#S256": "WAlDqGxyjiKXAJOgjURFkBFsNA3jzs09RZnwm4EaniQ",
      "e": "AQAB",
      "use": "sig",
      "x5t": "oJBerrDKzZiQqOem-mjqZSj5AZo",
      "kid": "OPDJYjVIsJr1ayg0W0kbuRZGiFPyFvOmhnKSQDierns",
      "x5c": [
        "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\u003d"
      ],
      "n": "yOa-9nvr_lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd_T103usdRmy_B4A-O1rrbqfK-QW79S2IzxoHt3C2-CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW_vnR0aK5OTbTcw5JefqkITmo_RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "QxiVy76gkyAxdCKhvR1PmZm1Vcyv4lRSorGXjZmjt6c",
      "alg": "RSA-OAEP-256",
      "n": "443RBkcr1wUwpWte2QrlRtob8NNtUBCidYq5CSKd_kuixu-QTNYGaYaf1eMqf9hNVQi9UTy-MBV8fgIBtTIgiAysT-WlRokMOddrL3Oohe7UmyQkPRSxIZqXAlFsDSkOUqmOtdxr3LL_npmJ-YMq0dHYPogRybvvsRSIHCrPqGUbflZ8PZMYpOZ_YmYWf2iGOSsxSAxcG3OKkBCkOVNHKR7RDJ-sgTdfNmSztqbODkHV2ab1grsTMzQcuMWIDGy22wGzVkpNZpuEz-pQwmgwFnWB2kwM6S6q9dQM7bOASM8NgO6mmT8k0u-K0A7vq4OSPkpUdrCizY__0A3LJIMk0w"
    }
  ]
}
2021-10-22 15:34:58 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-10-22 15:34:58 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-10-22 15:34:58 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "yOa-9nvr_lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd_T103usdRmy_B4A-O1rrbqfK-QW79S2IzxoHt3C2-CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW_vnR0aK5OTbTcw5JefqkITmo_RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDw",
      "kty": "RSA",
      "kid": "OPDJYjVIsJr1ayg0W0kbuRZGiFPyFvOmhnKSQDierns",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "oJBerrDKzZiQqOem-mjqZSj5AZo",
      "x5t#S256": "WAlDqGxyjiKXAJOgjURFkBFsNA3jzs09RZnwm4EaniQ"
    },
    {
      "e": "AQAB",
      "n": "443RBkcr1wUwpWte2QrlRtob8NNtUBCidYq5CSKd_kuixu-QTNYGaYaf1eMqf9hNVQi9UTy-MBV8fgIBtTIgiAysT-WlRokMOddrL3Oohe7UmyQkPRSxIZqXAlFsDSkOUqmOtdxr3LL_npmJ-YMq0dHYPogRybvvsRSIHCrPqGUbflZ8PZMYpOZ_YmYWf2iGOSsxSAxcG3OKkBCkOVNHKR7RDJ-sgTdfNmSztqbODkHV2ab1grsTMzQcuMWIDGy22wGzVkpNZpuEz-pQwmgwFnWB2kwM6S6q9dQM7bOASM8NgO6mmT8k0u-K0A7vq4OSPkpUdrCizY__0A3LJIMk0w",
      "kty": "RSA",
      "kid": "QxiVy76gkyAxdCKhvR1PmZm1Vcyv4lRSorGXjZmjt6c",
      "alg": "RSA-OAEP-256",
      "use": "enc"
    }
  ]
}
2021-10-22 15:34:58 SUCCESS
EnsureIdTokenEncryptedResponseAlgIsNotRSA1_5
Id token encryption algorithm is not RSA1_5
alg
RSA-OAEP-256
2021-10-22 15:34:58 SUCCESS
FAPIEnsureClientJwksContainsAnEncryptionKey
Found an encryption key in client jwks
kid
QxiVy76gkyAxdCKhvR1PmZm1Vcyv4lRSorGXjZmjt6c
algorithm
RSA-OAEP-256
2021-10-22 15:34:58 SUCCESS
EnsureIdTokenEncryptedResponseAlgIsSetIfEncIsSet
id_token_encrypted_response_alg is set
id_token_encrypted_response_alg
RSA-OAEP-256
id_token_encrypted_response_enc
A128CBC-HS256
2021-10-22 15:34:58
fapi1-advanced-final-client-test-encrypted-idtoken
Setup Done
2021-10-22 15:34:59 INCOMING
fapi1-advanced-final-client-test-encrypted-idtoken
Incoming HTTP request to test instance L0C41jDRMb8B6Qq
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.9.1 (https://github.com/panva/node-openid-client)",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-10-22 15:34:59 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2021-10-22 15:34:59 OUTGOING
fapi1-advanced-final-client-test-encrypted-idtoken
Response to HTTP request to test instance L0C41jDRMb8B6Qq
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/openid-client-JsA4OBya72NBFiTmU8P26/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/userinfo",
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256",
    "ES256"
  ]
}
outgoing_path
.well-known/openid-configuration
2021-10-22 15:34:59 INCOMING
fapi1-advanced-final-client-test-encrypted-idtoken
Incoming HTTP request to test instance L0C41jDRMb8B6Qq
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "got (https://github.com/sindresorhus/got)",
  "accept-encoding": "gzip, deflate, br",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
authorize
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{
  "client_id": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "scope": "openid",
  "response_type": "code id_token",
  "redirect_uri": "https://openid-client2.local/cb",
  "state": "6li-p4YERiBA7COO4P9Wgv4Z03Ir49RMq5kOE53Cg2c",
  "nonce": "QNgoRAcdGkDUey4fnhwwzCLNl3oU4gVllWG1szmDKoE",
  "request": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJPUERKWWpWSXNKcjFheWcwVzBrYnVSWkdpRlB5RnZPbWhuS1NRRGllcm5zIn0.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.MavgF9QXzrnj1wmN-skPVlizZPYdOfIfRsO3CdVxAvDeR379jMt4Sr2j556TAi6STMrvq2fNieTWHfIIX4U3bGXtZ_DfkmbG5hthrHyk89rEsGHgO9kSb_HDrA6KuDquik7oYQT6ElyRZ36c8AUrmhgcBTo-ilIzmlG0aVmWubyGacf2MlSSyFpnt50phVWdP_H-BVD316INQ0AUqx_peUz4i5mKzzLf5jcqiBRkYUw2eactShEuc91Lu2Q9VdqzURu-C5RCQwxJnbE3FRo78K3BAvwmtq-LHx3jvm2L-vGln1jWmwJROYlJgnHRpDWpzID4B11Cpqyhn5GXdWC53Q"
}
incoming_body
2021-10-22 15:34:59 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Authorization endpoint
2021-10-22 15:34:59 SUCCESS
ExtractRequestObject
Parsed request object
request_object
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJPUERKWWpWSXNKcjFheWcwVzBrYnVSWkdpRlB5RnZPbWhuS1NRRGllcm5zIn0.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.MavgF9QXzrnj1wmN-skPVlizZPYdOfIfRsO3CdVxAvDeR379jMt4Sr2j556TAi6STMrvq2fNieTWHfIIX4U3bGXtZ_DfkmbG5hthrHyk89rEsGHgO9kSb_HDrA6KuDquik7oYQT6ElyRZ36c8AUrmhgcBTo-ilIzmlG0aVmWubyGacf2MlSSyFpnt50phVWdP_H-BVD316INQ0AUqx_peUz4i5mKzzLf5jcqiBRkYUw2eactShEuc91Lu2Q9VdqzURu-C5RCQwxJnbE3FRo78K3BAvwmtq-LHx3jvm2L-vGln1jWmwJROYlJgnHRpDWpzID4B11Cpqyhn5GXdWC53Q",
  "header": {
    "kid": "OPDJYjVIsJr1ayg0W0kbuRZGiFPyFvOmhnKSQDierns",
    "typ": "oauth-authz-req+jwt",
    "alg": "PS256"
  },
  "claims": {
    "iss": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
    "response_type": "code id_token",
    "nonce": "QNgoRAcdGkDUey4fnhwwzCLNl3oU4gVllWG1szmDKoE",
    "client_id": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
    "aud": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
    "nbf": 1634916899,
    "scope": "openid",
    "claims": {
      "id_token": {
        "acr": {
          "values": [
            "urn:openbanking:psd2:sca",
            "urn:openbanking:psd2:ca"
          ],
          "essential": true
        }
      }
    },
    "redirect_uri": "https://openid-client2.local/cb",
    "state": "6li-p4YERiBA7COO4P9Wgv4Z03Ir49RMq5kOE53Cg2c",
    "exp": 1634917199,
    "iat": 1634916899,
    "jti": "qTOgXpS4ElMzrZtNadxcHvEjRcEP0IcIqmzVd9_K8EA"
  }
}
2021-10-22 15:34:59 INFO
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
path
jwe_header
mapped
object
authorization_request_object
2021-10-22 15:34:59 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "scope": "openid",
  "response_type": "code id_token",
  "redirect_uri": "https://openid-client2.local/cb",
  "state": "6li-p4YERiBA7COO4P9Wgv4Z03Ir49RMq5kOE53Cg2c",
  "nonce": "QNgoRAcdGkDUey4fnhwwzCLNl3oU4gVllWG1szmDKoE",
  "request": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJPUERKWWpWSXNKcjFheWcwVzBrYnVSWkdpRlB5RnZPbWhuS1NRRGllcm5zIn0.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.MavgF9QXzrnj1wmN-skPVlizZPYdOfIfRsO3CdVxAvDeR379jMt4Sr2j556TAi6STMrvq2fNieTWHfIIX4U3bGXtZ_DfkmbG5hthrHyk89rEsGHgO9kSb_HDrA6KuDquik7oYQT6ElyRZ36c8AUrmhgcBTo-ilIzmlG0aVmWubyGacf2MlSSyFpnt50phVWdP_H-BVD316INQ0AUqx_peUz4i5mKzzLf5jcqiBRkYUw2eactShEuc91Lu2Q9VdqzURu-C5RCQwxJnbE3FRo78K3BAvwmtq-LHx3jvm2L-vGln1jWmwJROYlJgnHRpDWpzID4B11Cpqyhn5GXdWC53Q",
  "iss": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "aud": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "nbf": 1634916899,
  "claims": {
    "id_token": {
      "acr": {
        "values": [
          "urn:openbanking:psd2:sca",
          "urn:openbanking:psd2:ca"
        ],
        "essential": true
      }
    }
  },
  "exp": 1634917199,
  "iat": 1634916899,
  "jti": "qTOgXpS4ElMzrZtNadxcHvEjRcEP0IcIqmzVd9_K8EA"
}
2021-10-22 15:34:59 SUCCESS
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
alg
PS256
2021-10-22 15:34:59 SUCCESS
FAPIValidateRequestObjectIdTokenACRClaims
Acr value in request object is as expected
received
[
  "urn:openbanking:psd2:sca",
  "urn:openbanking:psd2:ca"
]
2021-10-22 15:34:59 SUCCESS
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Oct 22, 2021, 3:39:59 PM"
2021-10-22 15:34:59 SUCCESS
FAPI1AdvancedValidateRequestObjectNBFClaim
nbf claim is valid
nbf
"Oct 22, 2021, 3:34:59 PM"
now
"Oct 22, 2021, 3:34:59 PM"
2021-10-22 15:34:59
ValidateRequestObjectClaims
Request object does not contain a max_age claim
2021-10-22 15:34:59 SUCCESS
ValidateRequestObjectClaims
Request object claims passed all validation checks
2021-10-22 15:34:59 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2021-10-22 15:34:59 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2021-10-22 15:34:59 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2021-10-22 15:34:59 SUCCESS
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
request_object
eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJPUERKWWpWSXNKcjFheWcwVzBrYnVSWkdpRlB5RnZPbWhuS1NRRGllcm5zIn0.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.MavgF9QXzrnj1wmN-skPVlizZPYdOfIfRsO3CdVxAvDeR379jMt4Sr2j556TAi6STMrvq2fNieTWHfIIX4U3bGXtZ_DfkmbG5hthrHyk89rEsGHgO9kSb_HDrA6KuDquik7oYQT6ElyRZ36c8AUrmhgcBTo-ilIzmlG0aVmWubyGacf2MlSSyFpnt50phVWdP_H-BVD316INQ0AUqx_peUz4i5mKzzLf5jcqiBRkYUw2eactShEuc91Lu2Q9VdqzURu-C5RCQwxJnbE3FRo78K3BAvwmtq-LHx3jvm2L-vGln1jWmwJROYlJgnHRpDWpzID4B11Cpqyhn5GXdWC53Q
request_object_signing_alg
PS256
jwk
Sun RSA public key, 2048 bits
  params: null
  modulus: 25361446061268516735238562787355464985762853223191362637603545840507498103456696095460465865146498841109713867640740153723079793738267610976629037235890307019212409441295566131796876384430854134653429011936496014010100890536635937792511752664479718113157808633287777323557668549476853973390761414301411988865482565290650470301187159766000433764566618925027498521351476063440286876728140018540613654060574382721927674234195914230814439549403686964568569335934057428765977641810400652370038914682040979752161426331912523317175123235040764391250212963335035292725376718898659498481140411618840698506866022185301427712783
  public exponent: 65537
2021-10-22 15:34:59 SUCCESS
EnsureMatchingRedirectUriInRequestObject
Redirect URI matched
actual
https://openid-client2.local/cb
2021-10-22 15:34:59 SUCCESS
EnsureRequiredAuthorizationRequestParametersMatchRequestObject
Required http request parameters match request object claims
response_type
code id_token
client_id
client2-id-openid-client-JsA4OBya72NBFiTmU8P26
2021-10-22 15:34:59 SUCCESS
EnsureOptionalAuthorizationRequestParametersMatchRequestObject
All http request parameters and request object claims match
2021-10-22 15:34:59 SUCCESS
EnsureAuthorizationHttpRequestContainsOpenIDScope
Found 'openid' in scope http request parameter
actual
[
  "openid"
]
expected
openid
2021-10-22 15:34:59 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid
2021-10-22 15:34:59 SUCCESS
EnsureRequestedScopeIsEqualToConfiguredScope
Requested scopes match configured scopes
scope
openid
2021-10-22 15:34:59 SUCCESS
EnsureResponseTypeIsCodeIdToken
Response type is expected value
expected
code id_token
2021-10-22 15:34:59 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid"
]
expected
openid
2021-10-22 15:34:59 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
client2-id-openid-client-JsA4OBya72NBFiTmU8P26
2021-10-22 15:34:59 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
CLRCMUV6SW3l8YFdBSaQKqTWXntxwfOR
2021-10-22 15:34:59 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
QNgoRAcdGkDUey4fnhwwzCLNl3oU4gVllWG1szmDKoE
2021-10-22 15:34:59 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash
0gPXoSlcMcL3e5I8lWjM7w
2021-10-22 15:34:59 SUCCESS
CalculateSHash
Successful s_hash encoding
s_hash
EYiHacwWn0IgrZSzaJ-6cw
2021-10-22 15:34:59 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/
sub
user-subject-1234531
aud
client2-id-openid-client-JsA4OBya72NBFiTmU8P26
nonce
QNgoRAcdGkDUey4fnhwwzCLNl3oU4gVllWG1szmDKoE
iat
1634916899
exp
1634917199
2021-10-22 15:34:59 SUCCESS
AddCHashToIdTokenClaims
Added c_hash to ID token claims
c_hash
0gPXoSlcMcL3e5I8lWjM7w
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "sub": "user-subject-1234531",
  "aud": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "nonce": "QNgoRAcdGkDUey4fnhwwzCLNl3oU4gVllWG1szmDKoE",
  "iat": 1634916899,
  "exp": 1634917199,
  "c_hash": "0gPXoSlcMcL3e5I8lWjM7w"
}
2021-10-22 15:34:59 SUCCESS
AddSHashToIdTokenClaims
Added s_hash to ID token claims
s_hash
EYiHacwWn0IgrZSzaJ-6cw
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "sub": "user-subject-1234531",
  "aud": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "nonce": "QNgoRAcdGkDUey4fnhwwzCLNl3oU4gVllWG1szmDKoE",
  "iat": 1634916899,
  "exp": 1634917199,
  "c_hash": "0gPXoSlcMcL3e5I8lWjM7w",
  "s_hash": "EYiHacwWn0IgrZSzaJ-6cw"
}
2021-10-22 15:34:59 INFO
AddAtHashToIdTokenClaims
Skipped evaluation due to missing required string: at_hash
expected
at_hash
2021-10-22 15:34:59 SUCCESS
AddACRClaimToIdTokenClaims
Added acr value to id_token_claims
acr_value
urn:openbanking:psd2:sca
claims
{
  "iss": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "sub": "user-subject-1234531",
  "aud": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "nonce": "QNgoRAcdGkDUey4fnhwwzCLNl3oU4gVllWG1szmDKoE",
  "iat": 1634916899,
  "exp": 1634917199,
  "c_hash": "0gPXoSlcMcL3e5I8lWjM7w",
  "s_hash": "EYiHacwWn0IgrZSzaJ-6cw",
  "acr": "urn:openbanking:psd2:sca"
}
2021-10-22 15:34:59 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJzTlE4UHBRN1NyNVU1aktDeS1JNWEzRWppNFpSa0xUQXJPMXktSTl3TnFBIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImNsaWVudDItaWQtb3BlbmlkLWNsaWVudC1Kc0E0T0J5YTcyTkJGaVRtVThQMjYiLCJjX2hhc2giOiIwZ1BYb1NsY01jTDNlNUk4bFdqTTd3IiwiYWNyIjoidXJuOm9wZW5iYW5raW5nOnBzZDI6c2NhIiwic19oYXNoIjoiRVlpSGFjd1duMElnclpTemFKLTZjdyIsImlzcyI6Imh0dHBzOlwvXC93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0XC90ZXN0XC9hXC9vcGVuaWQtY2xpZW50LUpzQTRPQnlhNzJOQkZpVG1VOFAyNlwvIiwiZXhwIjoxNjM0OTE3MTk5LCJub25jZSI6IlFOZ29SQWNkR2tEVWV5NGZuaHd3ekNMTmwzb1U0Z1ZsbFdHMXN6bURLb0UiLCJpYXQiOjE2MzQ5MTY4OTl9.PCUk7KYvoHoybL6XaElJn66ltp805pmYQXttiw83s6FCm5In_5ubrN-Zna0eSzDJMppiJwGI-a4rdSMoZ-cRCYTdm6IEhBi4WJCFAh9es1i6w24EMgzOGALuQISE13IUp2zVVxWd1DU5FcjcTMQMaD4NwZubWmVLkP0kp8z0Bb8QdkH5uy7AHKuzcHs2Zw6sIrMQdoCBbkrPMxjMNijY5HsGwCNAjTmqrpqZ_hS6y_S04UuidB7ROC_xcob48HYvxdGdhfcVLlqYurLSOwGCMssY-wTf7GwdGMx7e6sj3B_5yjL0XTpugry-_DbsAa3dgMk9VDBTeZNBhRgg3vJdDw
2021-10-22 15:34:59
EncryptIdToken
Encrypted the id token
id_token_encrypted_response_alg
RSA-OAEP-256
id_token_encrypted_response_enc
id_token
eyJraWQiOiJReGlWeTc2Z2t5QXhkQ0todlIxUG1abTFWY3l2NGxSU29yR1hqWm1qdDZjIiwiY3R5IjoiSldUIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImFsZyI6IlJTQS1PQUVQLTI1NiJ9.imtzOgAIXhP1S7q_m_qOMsYcmdisBie8tWwAgL8qtT3miBQkfAl_F2JcJiR_fJz6z6vfj1eIOG8a2lNcDDaLRf5cVVwPz3v16TmlPpCCN99ZisG6ROqook1enFxoZfQdSJcdrhCN_B69yGSOX71EToI1ZL6N2EyR8LPoXInsrzpeuIn1G3hCOzKUmxUAgr-EQ_4dhdpppT5Ux39nU43IKWPUMgGao4k_9wa45ntfvffeipHt9r4D6OUqXk4Tm6bn_oRxBk5OwcubdWSt4UfupXKFJT6CEVpClkbPwh47RHJglBOldujEfZiWsVQJnRnAHKK3dE1MSY9Fj4iD8Ck7Nw.sL_Qo7tVTheiYcJRb3t67w.n5elkk_ypWsbW-SUeSETdBUYvzQx_FZfp9C7NGn2svMS62kczmEeRjT2Cg1hwM21d1N5ebYIKboImpmIxjq8EePqh6DuJTC4ciGD5TAuL0P9hU4kXz_Zw775blazzrpZgMZAiOtxBesikmajqdpMMnxT2b3ysXgYWnefBrOfNIlqyGf8DzyV0K5aKtdciik9vJxWfNPN8Z0dkVnCCj2nHtf4I5eqg09tpZe5Q4BJrj7svzqWq3sYywH7xIIiX5qstNP-pwszZfxl9GNG741ju55T5O0G12gxX1jvSJ6_uadLZ26cBdiB_K5qpG9Vst7QjAlPTIm59JUEuQfydNXDbJSxFBlPosClH4ks5raueeQMs_a1LHHU4CxEwxdIJFaPDcpb85KkHeje9KfjM739oKAAFEXct-cM87QY45ObFDxvLx55DWmbcPYsLEFFAQSjD9IeOt5gER05_UwRD0VQfmlUWvd_QWOkhqSZvM_Bkl9JfROvTMkfTmxSreqwHDxh4O7unD3LwI4vUnFKaugmL7MQloQHXNsGYiq-8LOt0w4EdOVqawI4FAXrpD8WJpK2JFU0_YRWBudXwEjWS2VuWoY3eEIdUfD3Qhp7MzLwxwsFGMz2hc6x5FkbciEKzsF6egQKvfQivgB_OHgz18RlVzDH-eFC9Ii2hP_QvqASnSCZzD7JP57V7RfyrbdP1GRbheQzIZsI6illv-NeaWzDJMUf7Z8CD9SHqo7UshupsHG8-Aj0AtxdVlziWZTr9nM-B8L5PBYd_lmBKouE8WKJUNLhlmbul0V_o_SanqEi8-XulBv3-Z1tJxLDT6hirHfhWmbAGlmQM0c1-oOVYqtYQJbo-nCxyyeUC2s2hMil1XLEmNQQsFaBt09I0IioJv3FYcWhr1I2G1e_o2ylJ5pwrMQx2EU-_Urx2xjD1NvmqkcTvvKS19xyXkaFBHoGOx37GwVBpK1UgaHkX_IohEbWnl8a8_2QSuO-13wFjp-zIiQM546d0u8TCiHI0SWTsVT6_Fn5rw78mfEOkgc-yk5Db7bdJnE2d9AJqOyBrOPuyZzKozFrb9atq9NSJoVDWPrWcLUD-tQnm0eTqU3G4rRMYbVdIinykSIRP0ob-SjHPtAzEp1YiComrpoOdoc-aL-ulea-mC2Q1pGkPwRPxYy3bHXMBC285B2ivlFnhWGFv5wjBGaB1kvzPUomcIDGsF5AhshH2iTd3NAiq-ppQf2UgQ.31Bii6Lpub7Hwtdhfhimtg
2021-10-22 15:34:59 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://openid-client2.local/cb",
  "state": "6li-p4YERiBA7COO4P9Wgv4Z03Ir49RMq5kOE53Cg2c"
}
2021-10-22 15:34:59 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://openid-client2.local/cb",
  "state": "6li-p4YERiBA7COO4P9Wgv4Z03Ir49RMq5kOE53Cg2c",
  "code": "CLRCMUV6SW3l8YFdBSaQKqTWXntxwfOR"
}
2021-10-22 15:34:59 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://openid-client2.local/cb",
  "state": "6li-p4YERiBA7COO4P9Wgv4Z03Ir49RMq5kOE53Cg2c",
  "code": "CLRCMUV6SW3l8YFdBSaQKqTWXntxwfOR",
  "id_token": "eyJraWQiOiJReGlWeTc2Z2t5QXhkQ0todlIxUG1abTFWY3l2NGxSU29yR1hqWm1qdDZjIiwiY3R5IjoiSldUIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImFsZyI6IlJTQS1PQUVQLTI1NiJ9.imtzOgAIXhP1S7q_m_qOMsYcmdisBie8tWwAgL8qtT3miBQkfAl_F2JcJiR_fJz6z6vfj1eIOG8a2lNcDDaLRf5cVVwPz3v16TmlPpCCN99ZisG6ROqook1enFxoZfQdSJcdrhCN_B69yGSOX71EToI1ZL6N2EyR8LPoXInsrzpeuIn1G3hCOzKUmxUAgr-EQ_4dhdpppT5Ux39nU43IKWPUMgGao4k_9wa45ntfvffeipHt9r4D6OUqXk4Tm6bn_oRxBk5OwcubdWSt4UfupXKFJT6CEVpClkbPwh47RHJglBOldujEfZiWsVQJnRnAHKK3dE1MSY9Fj4iD8Ck7Nw.sL_Qo7tVTheiYcJRb3t67w.n5elkk_ypWsbW-SUeSETdBUYvzQx_FZfp9C7NGn2svMS62kczmEeRjT2Cg1hwM21d1N5ebYIKboImpmIxjq8EePqh6DuJTC4ciGD5TAuL0P9hU4kXz_Zw775blazzrpZgMZAiOtxBesikmajqdpMMnxT2b3ysXgYWnefBrOfNIlqyGf8DzyV0K5aKtdciik9vJxWfNPN8Z0dkVnCCj2nHtf4I5eqg09tpZe5Q4BJrj7svzqWq3sYywH7xIIiX5qstNP-pwszZfxl9GNG741ju55T5O0G12gxX1jvSJ6_uadLZ26cBdiB_K5qpG9Vst7QjAlPTIm59JUEuQfydNXDbJSxFBlPosClH4ks5raueeQMs_a1LHHU4CxEwxdIJFaPDcpb85KkHeje9KfjM739oKAAFEXct-cM87QY45ObFDxvLx55DWmbcPYsLEFFAQSjD9IeOt5gER05_UwRD0VQfmlUWvd_QWOkhqSZvM_Bkl9JfROvTMkfTmxSreqwHDxh4O7unD3LwI4vUnFKaugmL7MQloQHXNsGYiq-8LOt0w4EdOVqawI4FAXrpD8WJpK2JFU0_YRWBudXwEjWS2VuWoY3eEIdUfD3Qhp7MzLwxwsFGMz2hc6x5FkbciEKzsF6egQKvfQivgB_OHgz18RlVzDH-eFC9Ii2hP_QvqASnSCZzD7JP57V7RfyrbdP1GRbheQzIZsI6illv-NeaWzDJMUf7Z8CD9SHqo7UshupsHG8-Aj0AtxdVlziWZTr9nM-B8L5PBYd_lmBKouE8WKJUNLhlmbul0V_o_SanqEi8-XulBv3-Z1tJxLDT6hirHfhWmbAGlmQM0c1-oOVYqtYQJbo-nCxyyeUC2s2hMil1XLEmNQQsFaBt09I0IioJv3FYcWhr1I2G1e_o2ylJ5pwrMQx2EU-_Urx2xjD1NvmqkcTvvKS19xyXkaFBHoGOx37GwVBpK1UgaHkX_IohEbWnl8a8_2QSuO-13wFjp-zIiQM546d0u8TCiHI0SWTsVT6_Fn5rw78mfEOkgc-yk5Db7bdJnE2d9AJqOyBrOPuyZzKozFrb9atq9NSJoVDWPrWcLUD-tQnm0eTqU3G4rRMYbVdIinykSIRP0ob-SjHPtAzEp1YiComrpoOdoc-aL-ulea-mC2Q1pGkPwRPxYy3bHXMBC285B2ivlFnhWGFv5wjBGaB1kvzPUomcIDGsF5AhshH2iTd3NAiq-ppQf2UgQ.31Bii6Lpub7Hwtdhfhimtg"
}
2021-10-22 15:34:59
SendAuthorizationResponseWithResponseModeFragment
Redirecting back to client
uri
https://openid-client2.local/cb#state=6li-p4YERiBA7COO4P9Wgv4Z03Ir49RMq5kOE53Cg2c&code=CLRCMUV6SW3l8YFdBSaQKqTWXntxwfOR&id_token=eyJraWQiOiJReGlWeTc2Z2t5QXhkQ0todlIxUG1abTFWY3l2NGxSU29yR1hqWm1qdDZjIiwiY3R5IjoiSldUIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImFsZyI6IlJTQS1PQUVQLTI1NiJ9.imtzOgAIXhP1S7q_m_qOMsYcmdisBie8tWwAgL8qtT3miBQkfAl_F2JcJiR_fJz6z6vfj1eIOG8a2lNcDDaLRf5cVVwPz3v16TmlPpCCN99ZisG6ROqook1enFxoZfQdSJcdrhCN_B69yGSOX71EToI1ZL6N2EyR8LPoXInsrzpeuIn1G3hCOzKUmxUAgr-EQ_4dhdpppT5Ux39nU43IKWPUMgGao4k_9wa45ntfvffeipHt9r4D6OUqXk4Tm6bn_oRxBk5OwcubdWSt4UfupXKFJT6CEVpClkbPwh47RHJglBOldujEfZiWsVQJnRnAHKK3dE1MSY9Fj4iD8Ck7Nw.sL_Qo7tVTheiYcJRb3t67w.n5elkk_ypWsbW-SUeSETdBUYvzQx_FZfp9C7NGn2svMS62kczmEeRjT2Cg1hwM21d1N5ebYIKboImpmIxjq8EePqh6DuJTC4ciGD5TAuL0P9hU4kXz_Zw775blazzrpZgMZAiOtxBesikmajqdpMMnxT2b3ysXgYWnefBrOfNIlqyGf8DzyV0K5aKtdciik9vJxWfNPN8Z0dkVnCCj2nHtf4I5eqg09tpZe5Q4BJrj7svzqWq3sYywH7xIIiX5qstNP-pwszZfxl9GNG741ju55T5O0G12gxX1jvSJ6_uadLZ26cBdiB_K5qpG9Vst7QjAlPTIm59JUEuQfydNXDbJSxFBlPosClH4ks5raueeQMs_a1LHHU4CxEwxdIJFaPDcpb85KkHeje9KfjM739oKAAFEXct-cM87QY45ObFDxvLx55DWmbcPYsLEFFAQSjD9IeOt5gER05_UwRD0VQfmlUWvd_QWOkhqSZvM_Bkl9JfROvTMkfTmxSreqwHDxh4O7unD3LwI4vUnFKaugmL7MQloQHXNsGYiq-8LOt0w4EdOVqawI4FAXrpD8WJpK2JFU0_YRWBudXwEjWS2VuWoY3eEIdUfD3Qhp7MzLwxwsFGMz2hc6x5FkbciEKzsF6egQKvfQivgB_OHgz18RlVzDH-eFC9Ii2hP_QvqASnSCZzD7JP57V7RfyrbdP1GRbheQzIZsI6illv-NeaWzDJMUf7Z8CD9SHqo7UshupsHG8-Aj0AtxdVlziWZTr9nM-B8L5PBYd_lmBKouE8WKJUNLhlmbul0V_o_SanqEi8-XulBv3-Z1tJxLDT6hirHfhWmbAGlmQM0c1-oOVYqtYQJbo-nCxyyeUC2s2hMil1XLEmNQQsFaBt09I0IioJv3FYcWhr1I2G1e_o2ylJ5pwrMQx2EU-_Urx2xjD1NvmqkcTvvKS19xyXkaFBHoGOx37GwVBpK1UgaHkX_IohEbWnl8a8_2QSuO-13wFjp-zIiQM546d0u8TCiHI0SWTsVT6_Fn5rw78mfEOkgc-yk5Db7bdJnE2d9AJqOyBrOPuyZzKozFrb9atq9NSJoVDWPrWcLUD-tQnm0eTqU3G4rRMYbVdIinykSIRP0ob-SjHPtAzEp1YiComrpoOdoc-aL-ulea-mC2Q1pGkPwRPxYy3bHXMBC285B2ivlFnhWGFv5wjBGaB1kvzPUomcIDGsF5AhshH2iTd3NAiq-ppQf2UgQ.31Bii6Lpub7Hwtdhfhimtg
2021-10-22 15:34:59 OUTGOING
fapi1-advanced-final-client-test-encrypted-idtoken
Response to HTTP request to test instance L0C41jDRMb8B6Qq
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://openid-client2.local/cb#state=6li-p4YERiBA7COO4P9Wgv4Z03Ir49RMq5kOE53Cg2c&code=CLRCMUV6SW3l8YFdBSaQKqTWXntxwfOR&id_token=eyJraWQiOiJReGlWeTc2Z2t5QXhkQ0todlIxUG1abTFWY3l2NGxSU29yR1hqWm1qdDZjIiwiY3R5IjoiSldUIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImFsZyI6IlJTQS1PQUVQLTI1NiJ9.imtzOgAIXhP1S7q_m_qOMsYcmdisBie8tWwAgL8qtT3miBQkfAl_F2JcJiR_fJz6z6vfj1eIOG8a2lNcDDaLRf5cVVwPz3v16TmlPpCCN99ZisG6ROqook1enFxoZfQdSJcdrhCN_B69yGSOX71EToI1ZL6N2EyR8LPoXInsrzpeuIn1G3hCOzKUmxUAgr-EQ_4dhdpppT5Ux39nU43IKWPUMgGao4k_9wa45ntfvffeipHt9r4D6OUqXk4Tm6bn_oRxBk5OwcubdWSt4UfupXKFJT6CEVpClkbPwh47RHJglBOldujEfZiWsVQJnRnAHKK3dE1MSY9Fj4iD8Ck7Nw.sL_Qo7tVTheiYcJRb3t67w.n5elkk_ypWsbW-SUeSETdBUYvzQx_FZfp9C7NGn2svMS62kczmEeRjT2Cg1hwM21d1N5ebYIKboImpmIxjq8EePqh6DuJTC4ciGD5TAuL0P9hU4kXz_Zw775blazzrpZgMZAiOtxBesikmajqdpMMnxT2b3ysXgYWnefBrOfNIlqyGf8DzyV0K5aKtdciik9vJxWfNPN8Z0dkVnCCj2nHtf4I5eqg09tpZe5Q4BJrj7svzqWq3sYywH7xIIiX5qstNP-pwszZfxl9GNG741ju55T5O0G12gxX1jvSJ6_uadLZ26cBdiB_K5qpG9Vst7QjAlPTIm59JUEuQfydNXDbJSxFBlPosClH4ks5raueeQMs_a1LHHU4CxEwxdIJFaPDcpb85KkHeje9KfjM739oKAAFEXct-cM87QY45ObFDxvLx55DWmbcPYsLEFFAQSjD9IeOt5gER05_UwRD0VQfmlUWvd_QWOkhqSZvM_Bkl9JfROvTMkfTmxSreqwHDxh4O7unD3LwI4vUnFKaugmL7MQloQHXNsGYiq-8LOt0w4EdOVqawI4FAXrpD8WJpK2JFU0_YRWBudXwEjWS2VuWoY3eEIdUfD3Qhp7MzLwxwsFGMz2hc6x5FkbciEKzsF6egQKvfQivgB_OHgz18RlVzDH-eFC9Ii2hP_QvqASnSCZzD7JP57V7RfyrbdP1GRbheQzIZsI6illv-NeaWzDJMUf7Z8CD9SHqo7UshupsHG8-Aj0AtxdVlziWZTr9nM-B8L5PBYd_lmBKouE8WKJUNLhlmbul0V_o_SanqEi8-XulBv3-Z1tJxLDT6hirHfhWmbAGlmQM0c1-oOVYqtYQJbo-nCxyyeUC2s2hMil1XLEmNQQsFaBt09I0IioJv3FYcWhr1I2G1e_o2ylJ5pwrMQx2EU-_Urx2xjD1NvmqkcTvvKS19xyXkaFBHoGOx37GwVBpK1UgaHkX_IohEbWnl8a8_2QSuO-13wFjp-zIiQM546d0u8TCiHI0SWTsVT6_Fn5rw78mfEOkgc-yk5Db7bdJnE2d9AJqOyBrOPuyZzKozFrb9atq9NSJoVDWPrWcLUD-tQnm0eTqU3G4rRMYbVdIinykSIRP0ob-SjHPtAzEp1YiComrpoOdoc-aL-ulea-mC2Q1pGkPwRPxYy3bHXMBC285B2ivlFnhWGFv5wjBGaB1kvzPUomcIDGsF5AhshH2iTd3NAiq-ppQf2UgQ.31Bii6Lpub7Hwtdhfhimtg]
outgoing_path
authorize
2021-10-22 15:35:00 INCOMING
fapi1-advanced-final-client-test-encrypted-idtoken
Incoming HTTP request to test instance L0C41jDRMb8B6Qq
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.9.1 (https://github.com/panva/node-openid-client)",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
jwks
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-10-22 15:35:00 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2021-10-22 15:35:00 OUTGOING
fapi1-advanced-final-client-test-encrypted-idtoken
Response to HTTP request to test instance L0C41jDRMb8B6Qq
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "sNQ8PpQ7Sr5U5jKCy-I5a3Eji4ZRkLTArO1y-I9wNqA",
      "alg": "PS256",
      "n": "qOcQIY2N8ybqMv3xhxiG2WMtjszRaAjQfJbzoa88SIl-sqYpGq7E8SMhemccmDi1GeJd-l63w6MeykHb09HytqncFa2EFCvwhZ499MWVp67ePkTH2ltR1wIZ6V2VkVAkBcY3O0AucJVWI3zLlN1TPpeyfEu5pMsAC8zwzUvuaEFwS4IyA7KqRXNsLSdwZpzO0t5g0PTDoklcguLiFaDsiw0y1jqr0f3j4lhekdu1MH9mo2xdm1G6zm52f6LAiPWRPcEPyrCpFiHRSH7zOOCEXHlt-AOaONsaWk936RDQ5EN2qULh27V-3y791CxM1F7qty_2KstvNIHCIR1I3tCbGw"
    }
  ]
}
outgoing_path
jwks
2021-10-22 15:35:01 INCOMING
fapi1-advanced-final-client-test-encrypted-idtoken
Incoming HTTP request to test instance L0C41jDRMb8B6Qq
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.9.1 (https://github.com/panva/node-openid-client)",
  "content-type": "application/x-www-form-urlencoded",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "x-ssl-cert": "-----BEGIN CERTIFICATE----- MIIDmjCCAoKgAwIBAgIJW/bNuq9QdEgNMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNV BAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWEx EzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRl c3QwHhcNMjExMDIyMTUzNDUwWhcNMjIxMDIyMTUzNDUwWjBpMRQwEgYDVQQDEwtl eGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYD VQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOa+9nvr/lRIwW2m7iyqJcwd Fuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX 7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT 8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd/T103usdRmy/B4A +O1rrbqfK+QW79S2IzxoHt3C2+CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW/vnR0a K5OTbTcw5JefqkITmo/RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDwID AQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhto dHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBADKQ X4i77jws4IC/KAtB4/c5EJPkZ4Tw/sKh3t52Fry1iBDREXKYosR/E4GjtG/TGmSg ed6lqU87cGduJjPq9l8PM6CTg/aC6mg6Lxuf8XXxz78ic6ZCnMJ/XYC7yo1qov8t optd/1lcK/Kd6IP2f9zVP9evVUjNOJOkaE/8f/jM7XI3F7ObwWcdLoPlInbkhdLx gKcCEci+T6D3p1ZMKndCEmUSpK6GrxNLRM284bQqrDV7nwM6PfLyZ5hJGSnKHPJv DneLlUn42qH+XA0tW0/Lk5aEBe7U6g591NJ9IAUrcVVQgOIymEqWMms3e92Ff+tK aXbGs9sIQ3hXRxe57nQ\u003d -----END CERTIFICATE-----",
  "x-ssl-verify": "FAILED:self signed certificate",
  "content-length": "1224",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "CLRCMUV6SW3l8YFdBSaQKqTWXntxwfOR",
  "redirect_uri": "https://openid-client2.local/cb",
  "client_id": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ik9QREpZalZJc0pyMWF5ZzBXMGtidVJaR2lGUHlGdk9taG5LU1FEaWVybnMifQ.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.tojlUiKsU34D8xCdgZNdMwLSWgSimBLLHrzPxVyKBAaHUbKIYiljblZPz4WD1c2swlPGPcoe3KrVHk842UGpfBnt1Y6q-9hFjY_HK8GJ6ZfMgI7PHem7OA4_aDOcclos_UmgWs2sWOp-5RMjb_QbBhy8TR9at7-Cm-RoxbXKEMtTjuqbkxWnkDxaj9GaiOttAiTrIqRcODe0uGG3Y929GqP1T2PeonnlW0Rgv6svhDto7DnFKCUraWKH2E7DRWiVhQooYfOLVtI7YICRLMa71JyohY4vxx2jW4qccj8m5vo5Jslj0_JnmqPAUT82ivgBqC77ffQi54Syq4umPQSQzw",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=CLRCMUV6SW3l8YFdBSaQKqTWXntxwfOR&redirect_uri=https%3A%2F%2Fopenid-client2.local%2Fcb&client_id=client2-id-openid-client-JsA4OBya72NBFiTmU8P26&client_assertion=eyJhbGciOiJQUzI1NiIsImtpZCI6Ik9QREpZalZJc0pyMWF5ZzBXMGtidVJaR2lGUHlGdk9taG5LU1FEaWVybnMifQ.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.tojlUiKsU34D8xCdgZNdMwLSWgSimBLLHrzPxVyKBAaHUbKIYiljblZPz4WD1c2swlPGPcoe3KrVHk842UGpfBnt1Y6q-9hFjY_HK8GJ6ZfMgI7PHem7OA4_aDOcclos_UmgWs2sWOp-5RMjb_QbBhy8TR9at7-Cm-RoxbXKEMtTjuqbkxWnkDxaj9GaiOttAiTrIqRcODe0uGG3Y929GqP1T2PeonnlW0Rgv6svhDto7DnFKCUraWKH2E7DRWiVhQooYfOLVtI7YICRLMa71JyohY4vxx2jW4qccj8m5vo5Jslj0_JnmqPAUT82ivgBqC77ffQi54Syq4umPQSQzw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2021-10-22 15:35:01 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2021-10-22 15:35:01 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIDmjCCAoKgAwIBAgIJW/bNuq9QdEgNMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNV BAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWEx EzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRl c3QwHhcNMjExMDIyMTUzNDUwWhcNMjIxMDIyMTUzNDUwWjBpMRQwEgYDVQQDEwtl eGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYD VQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOa+9nvr/lRIwW2m7iyqJcwd Fuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX 7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT 8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd/T103usdRmy/B4A +O1rrbqfK+QW79S2IzxoHt3C2+CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW/vnR0a K5OTbTcw5JefqkITmo/RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDwID AQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhto dHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBADKQ X4i77jws4IC/KAtB4/c5EJPkZ4Tw/sKh3t52Fry1iBDREXKYosR/E4GjtG/TGmSg ed6lqU87cGduJjPq9l8PM6CTg/aC6mg6Lxuf8XXxz78ic6ZCnMJ/XYC7yo1qov8t optd/1lcK/Kd6IP2f9zVP9evVUjNOJOkaE/8f/jM7XI3F7ObwWcdLoPlInbkhdLx gKcCEci+T6D3p1ZMKndCEmUSpK6GrxNLRM284bQqrDV7nwM6PfLyZ5hJGSnKHPJv DneLlUn42qH+XA0tW0/Lk5aEBe7U6g591NJ9IAUrcVVQgOIymEqWMms3e92Ff+tK aXbGs9sIQ3hXRxe57nQ\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\naXbGs9sIQ3hXRxe57nQ\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "OU\u003dTest,O\u003dTest,L\u003dBlacksburg,ST\u003dVirginia,C\u003dUS,CN\u003dexample.org"
  },
  "sanDnsNames": [],
  "sanUris": [
    "http://example.org/webid#me"
  ],
  "sanIPs": [],
  "sanEmails": []
}
2021-10-22 15:35:01 SUCCESS
CheckForClientCertificate
Found client certificate
2021-10-22 15:35:01 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-10-22 15:35:01 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ik9QREpZalZJc0pyMWF5ZzBXMGtidVJaR2lGUHlGdk9taG5LU1FEaWVybnMifQ.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.tojlUiKsU34D8xCdgZNdMwLSWgSimBLLHrzPxVyKBAaHUbKIYiljblZPz4WD1c2swlPGPcoe3KrVHk842UGpfBnt1Y6q-9hFjY_HK8GJ6ZfMgI7PHem7OA4_aDOcclos_UmgWs2sWOp-5RMjb_QbBhy8TR9at7-Cm-RoxbXKEMtTjuqbkxWnkDxaj9GaiOttAiTrIqRcODe0uGG3Y929GqP1T2PeonnlW0Rgv6svhDto7DnFKCUraWKH2E7DRWiVhQooYfOLVtI7YICRLMa71JyohY4vxx2jW4qccj8m5vo5Jslj0_JnmqPAUT82ivgBqC77ffQi54Syq4umPQSQzw",
  "header": {
    "kid": "OPDJYjVIsJr1ayg0W0kbuRZGiFPyFvOmhnKSQDierns",
    "alg": "PS256"
  },
  "claims": {
    "sub": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
    "aud": [
      "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
      "https://www.certification.openid.net/test-mtls/a/openid-client-JsA4OBya72NBFiTmU8P26/token"
    ],
    "iss": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
    "exp": 1634916960,
    "iat": 1634916900,
    "jti": "mCddbFH7UxIVXxtBRXlr-z7SOZVMu0xvjjBWEcR7Nu8"
  }
}
2021-10-22 15:35:01
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2021-10-22 15:35:01 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsImtpZCI6Ik9QREpZalZJc0pyMWF5ZzBXMGtidVJaR2lGUHlGdk9taG5LU1FEaWVybnMifQ.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.tojlUiKsU34D8xCdgZNdMwLSWgSimBLLHrzPxVyKBAaHUbKIYiljblZPz4WD1c2swlPGPcoe3KrVHk842UGpfBnt1Y6q-9hFjY_HK8GJ6ZfMgI7PHem7OA4_aDOcclos_UmgWs2sWOp-5RMjb_QbBhy8TR9at7-Cm-RoxbXKEMtTjuqbkxWnkDxaj9GaiOttAiTrIqRcODe0uGG3Y929GqP1T2PeonnlW0Rgv6svhDto7DnFKCUraWKH2E7DRWiVhQooYfOLVtI7YICRLMa71JyohY4vxx2jW4qccj8m5vo5Jslj0_JnmqPAUT82ivgBqC77ffQi54Syq4umPQSQzw
2021-10-22 15:35:01 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-10-22 15:35:01 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2021-10-22 15:35:01 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
CLRCMUV6SW3l8YFdBSaQKqTWXntxwfOR
2021-10-22 15:35:01 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
https://openid-client2.local/cb
2021-10-22 15:35:01 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
Sn9ub8xJo1CTK2nvwBgY4CIdJPsM3P6ci525RiwuyRG8l4Xwy2
2021-10-22 15:35:01 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
nwbzP8I23FY0zqsGqopXjQ
2021-10-22 15:35:01
CreateRefreshToken
Created refresh token
refresh_token
kWxcMwgIVHNrFTZyZSxyRtxuXfzkmmgzLrLWPzPWpfVMvPGWCi7337275339:(#%:
2021-10-22 15:35:01 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/
sub
user-subject-1234531
aud
client2-id-openid-client-JsA4OBya72NBFiTmU8P26
nonce
QNgoRAcdGkDUey4fnhwwzCLNl3oU4gVllWG1szmDKoE
iat
1634916901
exp
1634917201
2021-10-22 15:35:01 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
nwbzP8I23FY0zqsGqopXjQ
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "sub": "user-subject-1234531",
  "aud": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "nonce": "QNgoRAcdGkDUey4fnhwwzCLNl3oU4gVllWG1szmDKoE",
  "iat": 1634916901,
  "exp": 1634917201,
  "at_hash": "nwbzP8I23FY0zqsGqopXjQ"
}
2021-10-22 15:35:01 SUCCESS
AddACRClaimToIdTokenClaims
Added acr value to id_token_claims
acr_value
urn:openbanking:psd2:sca
claims
{
  "iss": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "sub": "user-subject-1234531",
  "aud": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "nonce": "QNgoRAcdGkDUey4fnhwwzCLNl3oU4gVllWG1szmDKoE",
  "iat": 1634916901,
  "exp": 1634917201,
  "at_hash": "nwbzP8I23FY0zqsGqopXjQ",
  "acr": "urn:openbanking:psd2:sca"
}
2021-10-22 15:35:01 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJzTlE4UHBRN1NyNVU1aktDeS1JNWEzRWppNFpSa0xUQXJPMXktSTl3TnFBIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoibndielA4STIzRlkwenFzR3FvcFhqUSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiY2xpZW50Mi1pZC1vcGVuaWQtY2xpZW50LUpzQTRPQnlhNzJOQkZpVG1VOFAyNiIsImFjciI6InVybjpvcGVuYmFua2luZzpwc2QyOnNjYSIsImlzcyI6Imh0dHBzOlwvXC93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0XC90ZXN0XC9hXC9vcGVuaWQtY2xpZW50LUpzQTRPQnlhNzJOQkZpVG1VOFAyNlwvIiwiZXhwIjoxNjM0OTE3MjAxLCJub25jZSI6IlFOZ29SQWNkR2tEVWV5NGZuaHd3ekNMTmwzb1U0Z1ZsbFdHMXN6bURLb0UiLCJpYXQiOjE2MzQ5MTY5MDF9.RqxNNfEWuP9XL_DxlRy_itBfHrjcVqzRAv5Cxl0kcuJ2LNP5Z7C0MKa_JCZZ59KpvBnmTYB8tLoANMKBFkEcQCvy6POBTjfbb_DhQgDF5HGdTGWKnDI7mJPOR7nYjM1PwX1fLvEudcQlIjz9FopOfQHrZjqyU8_Y5k9ha36zgKmpvI-aUM4x8omstHfyt5QBVcmieqwlz11t2Sn5U6q2zupQCyTIRrDXjYTW5L-FmdDKxlHLiMBMjYVZ3uF8c4TpjOKaa6VAqXd934-quQAKBCgJvH6g3g-eaTuSHlSSwPJZqZpmVBnZ3_3CrsPwiJFYZo3DUe6VDe7FhXIoXNxiwQ
2021-10-22 15:35:01
EncryptIdToken
Encrypted the id token
id_token_encrypted_response_alg
RSA-OAEP-256
id_token_encrypted_response_enc
id_token
eyJraWQiOiJReGlWeTc2Z2t5QXhkQ0todlIxUG1abTFWY3l2NGxSU29yR1hqWm1qdDZjIiwiY3R5IjoiSldUIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImFsZyI6IlJTQS1PQUVQLTI1NiJ9.Dzzty2n41tay_me0Wd4aFwhp6F1LOKoNUH8yXHoKRrQUt3X-_L8mprWGHiFhjkZLiLS37Jr1aJB2O7N7_CqM3eHQt9FZwW60d5qS_3p7yhhyVEOBc_OrIhxwpyjYFJgADwWsF6kuK9rvMVZOrQ-fYefe1UnwXiG0r4J104SZvAMiWdP4oFSiTedK7NkRY8NnzxzDGHd014O2DxdkSnQmkE1r6Vt_PJ3e4QljvX712n-rFfB2ujjN08XwI3Xt6ODNHDbJ4QVr0U9k_drNKoqQaMb-XTqoRXM5fcUNBIbXOQem7Ih-MpapNAf6_l7TiPj9ZT2Vi6h5__xlbYQ8Nrho4Q.qN0oe3esYt8aohM4IjvXEQ.1ORNIBr0ixkMGf_PVR0vylt4jwUqzAl89hYVJnOD7HuICuZiq291obfxNvbFJc9oEC9uet6YvaSqHwemVdrsCkgGrw9K79YG7B_v2ku1ui8OVyIFZ0Z0ziRVNBzYSg9Y5EI6tiS2qRMFHaA38FcrK4JxjLkJCrLR9T9Zh4ewYzdn3ygIpH_BVhZVDYrVjpn-7PZyfM0yq3rqRT0EPriuB7wOqDshr8WkCE_ZwvNonz_qfZRKLPFgkgyzfEsDw_UT3nlcFJ6vSE4MnFYsCBRRCVtRuCRjkiXdzHjs8NKh0sx5b2lkhiLyvTVouN8ibjHi1uWWhW6mPijRZtlUMtieFSY_EcxtHSEkziR7WxcG0UPrSDeoCiMHHOqt-vC0QMRtr8ATs_iGV0QkWwkbpQnBgVf_CZikP77W0jnV7BLhiS6jitEuTD_9WUJMp7gNDLs0KkAK2obxdzZpSRq5dRyt_FDAQjL5G7jDG_7MQuGi732YqpyZCx5uR1brMDpT3Hf5w3R9Ue0U29EEKuNx5vOBtviKVQ9gJ2rasW0mHHYSR46rwSIQR0FKcv0M6kwuFRV01XIiwCrMg90yHg0vClqicO0ICKzwlR8Px8P4FbKI2RNJw43df4zxAgqsho59W_fkPtO4Zx1BmwYP3IE5_K4NcKLyIr6P2aXGdrNsuEo6VV_XFuQyAKDdkBUdSJvwADegL_LDXsHnAstrMpW9uUDiOgMxQbb6AYhDi8tYZuMKAyHz58M4R0oavDIxNEAS3jArX0x5Vvfh9y71s599msdiXKhhFgk58pub5MdGoSP--lWKQ3AY6H_x2ekszUZau55m_VgEnSVY7sityBk4qAr_Ee8ysebH9FTE1MLw1PTOdx3DBO223On5B-Brmc6Z_5xDPpUl81Q8QhhEUvedh07efgwJ83yN1uSP_s77SrgTMmWtT2mChuVDyB3MXfp6F5hOP00bFRccnRjpTXpjggJIdtUMI9AMtuKIBgq2zE-61tsj-jCRRKBosRua5kt9bBhMlbSOtEQYMNErEPSTaFzIJci1LmDo-1SP20Ngw1f2Jh5kVIn0x4kG40Blg2cks01Il-H696vdzVCjmlh1Wcl95MDPTd6D4YrBbAdo_lyjLXmv3P6nAcRUYr7HXw83B3-PwQq5MO_Ezt_RUMeRi7ua8YZgYka1uxH8Fxm_de6KsB8.kD03cX2x8rGAp8l12l1_TA
2021-10-22 15:35:01 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
Sn9ub8xJo1CTK2nvwBgY4CIdJPsM3P6ci525RiwuyRG8l4Xwy2
token_type
Bearer
id_token
eyJraWQiOiJReGlWeTc2Z2t5QXhkQ0todlIxUG1abTFWY3l2NGxSU29yR1hqWm1qdDZjIiwiY3R5IjoiSldUIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImFsZyI6IlJTQS1PQUVQLTI1NiJ9.Dzzty2n41tay_me0Wd4aFwhp6F1LOKoNUH8yXHoKRrQUt3X-_L8mprWGHiFhjkZLiLS37Jr1aJB2O7N7_CqM3eHQt9FZwW60d5qS_3p7yhhyVEOBc_OrIhxwpyjYFJgADwWsF6kuK9rvMVZOrQ-fYefe1UnwXiG0r4J104SZvAMiWdP4oFSiTedK7NkRY8NnzxzDGHd014O2DxdkSnQmkE1r6Vt_PJ3e4QljvX712n-rFfB2ujjN08XwI3Xt6ODNHDbJ4QVr0U9k_drNKoqQaMb-XTqoRXM5fcUNBIbXOQem7Ih-MpapNAf6_l7TiPj9ZT2Vi6h5__xlbYQ8Nrho4Q.qN0oe3esYt8aohM4IjvXEQ.1ORNIBr0ixkMGf_PVR0vylt4jwUqzAl89hYVJnOD7HuICuZiq291obfxNvbFJc9oEC9uet6YvaSqHwemVdrsCkgGrw9K79YG7B_v2ku1ui8OVyIFZ0Z0ziRVNBzYSg9Y5EI6tiS2qRMFHaA38FcrK4JxjLkJCrLR9T9Zh4ewYzdn3ygIpH_BVhZVDYrVjpn-7PZyfM0yq3rqRT0EPriuB7wOqDshr8WkCE_ZwvNonz_qfZRKLPFgkgyzfEsDw_UT3nlcFJ6vSE4MnFYsCBRRCVtRuCRjkiXdzHjs8NKh0sx5b2lkhiLyvTVouN8ibjHi1uWWhW6mPijRZtlUMtieFSY_EcxtHSEkziR7WxcG0UPrSDeoCiMHHOqt-vC0QMRtr8ATs_iGV0QkWwkbpQnBgVf_CZikP77W0jnV7BLhiS6jitEuTD_9WUJMp7gNDLs0KkAK2obxdzZpSRq5dRyt_FDAQjL5G7jDG_7MQuGi732YqpyZCx5uR1brMDpT3Hf5w3R9Ue0U29EEKuNx5vOBtviKVQ9gJ2rasW0mHHYSR46rwSIQR0FKcv0M6kwuFRV01XIiwCrMg90yHg0vClqicO0ICKzwlR8Px8P4FbKI2RNJw43df4zxAgqsho59W_fkPtO4Zx1BmwYP3IE5_K4NcKLyIr6P2aXGdrNsuEo6VV_XFuQyAKDdkBUdSJvwADegL_LDXsHnAstrMpW9uUDiOgMxQbb6AYhDi8tYZuMKAyHz58M4R0oavDIxNEAS3jArX0x5Vvfh9y71s599msdiXKhhFgk58pub5MdGoSP--lWKQ3AY6H_x2ekszUZau55m_VgEnSVY7sityBk4qAr_Ee8ysebH9FTE1MLw1PTOdx3DBO223On5B-Brmc6Z_5xDPpUl81Q8QhhEUvedh07efgwJ83yN1uSP_s77SrgTMmWtT2mChuVDyB3MXfp6F5hOP00bFRccnRjpTXpjggJIdtUMI9AMtuKIBgq2zE-61tsj-jCRRKBosRua5kt9bBhMlbSOtEQYMNErEPSTaFzIJci1LmDo-1SP20Ngw1f2Jh5kVIn0x4kG40Blg2cks01Il-H696vdzVCjmlh1Wcl95MDPTd6D4YrBbAdo_lyjLXmv3P6nAcRUYr7HXw83B3-PwQq5MO_Ezt_RUMeRi7ua8YZgYka1uxH8Fxm_de6KsB8.kD03cX2x8rGAp8l12l1_TA
refresh_token
kWxcMwgIVHNrFTZyZSxyRtxuXfzkmmgzLrLWPzPWpfVMvPGWCi7337275339:(#%:
scope
openid
2021-10-22 15:35:01 OUTGOING
fapi1-advanced-final-client-test-encrypted-idtoken
Response to HTTP request to test instance L0C41jDRMb8B6Qq
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "Sn9ub8xJo1CTK2nvwBgY4CIdJPsM3P6ci525RiwuyRG8l4Xwy2",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiJReGlWeTc2Z2t5QXhkQ0todlIxUG1abTFWY3l2NGxSU29yR1hqWm1qdDZjIiwiY3R5IjoiSldUIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImFsZyI6IlJTQS1PQUVQLTI1NiJ9.Dzzty2n41tay_me0Wd4aFwhp6F1LOKoNUH8yXHoKRrQUt3X-_L8mprWGHiFhjkZLiLS37Jr1aJB2O7N7_CqM3eHQt9FZwW60d5qS_3p7yhhyVEOBc_OrIhxwpyjYFJgADwWsF6kuK9rvMVZOrQ-fYefe1UnwXiG0r4J104SZvAMiWdP4oFSiTedK7NkRY8NnzxzDGHd014O2DxdkSnQmkE1r6Vt_PJ3e4QljvX712n-rFfB2ujjN08XwI3Xt6ODNHDbJ4QVr0U9k_drNKoqQaMb-XTqoRXM5fcUNBIbXOQem7Ih-MpapNAf6_l7TiPj9ZT2Vi6h5__xlbYQ8Nrho4Q.qN0oe3esYt8aohM4IjvXEQ.1ORNIBr0ixkMGf_PVR0vylt4jwUqzAl89hYVJnOD7HuICuZiq291obfxNvbFJc9oEC9uet6YvaSqHwemVdrsCkgGrw9K79YG7B_v2ku1ui8OVyIFZ0Z0ziRVNBzYSg9Y5EI6tiS2qRMFHaA38FcrK4JxjLkJCrLR9T9Zh4ewYzdn3ygIpH_BVhZVDYrVjpn-7PZyfM0yq3rqRT0EPriuB7wOqDshr8WkCE_ZwvNonz_qfZRKLPFgkgyzfEsDw_UT3nlcFJ6vSE4MnFYsCBRRCVtRuCRjkiXdzHjs8NKh0sx5b2lkhiLyvTVouN8ibjHi1uWWhW6mPijRZtlUMtieFSY_EcxtHSEkziR7WxcG0UPrSDeoCiMHHOqt-vC0QMRtr8ATs_iGV0QkWwkbpQnBgVf_CZikP77W0jnV7BLhiS6jitEuTD_9WUJMp7gNDLs0KkAK2obxdzZpSRq5dRyt_FDAQjL5G7jDG_7MQuGi732YqpyZCx5uR1brMDpT3Hf5w3R9Ue0U29EEKuNx5vOBtviKVQ9gJ2rasW0mHHYSR46rwSIQR0FKcv0M6kwuFRV01XIiwCrMg90yHg0vClqicO0ICKzwlR8Px8P4FbKI2RNJw43df4zxAgqsho59W_fkPtO4Zx1BmwYP3IE5_K4NcKLyIr6P2aXGdrNsuEo6VV_XFuQyAKDdkBUdSJvwADegL_LDXsHnAstrMpW9uUDiOgMxQbb6AYhDi8tYZuMKAyHz58M4R0oavDIxNEAS3jArX0x5Vvfh9y71s599msdiXKhhFgk58pub5MdGoSP--lWKQ3AY6H_x2ekszUZau55m_VgEnSVY7sityBk4qAr_Ee8ysebH9FTE1MLw1PTOdx3DBO223On5B-Brmc6Z_5xDPpUl81Q8QhhEUvedh07efgwJ83yN1uSP_s77SrgTMmWtT2mChuVDyB3MXfp6F5hOP00bFRccnRjpTXpjggJIdtUMI9AMtuKIBgq2zE-61tsj-jCRRKBosRua5kt9bBhMlbSOtEQYMNErEPSTaFzIJci1LmDo-1SP20Ngw1f2Jh5kVIn0x4kG40Blg2cks01Il-H696vdzVCjmlh1Wcl95MDPTd6D4YrBbAdo_lyjLXmv3P6nAcRUYr7HXw83B3-PwQq5MO_Ezt_RUMeRi7ua8YZgYka1uxH8Fxm_de6KsB8.kD03cX2x8rGAp8l12l1_TA",
  "refresh_token": "kWxcMwgIVHNrFTZyZSxyRtxuXfzkmmgzLrLWPzPWpfVMvPGWCi7337275339:(#%:",
  "scope": "openid"
}
outgoing_path
token
2021-10-22 15:35:01 INCOMING
fapi1-advanced-final-client-test-encrypted-idtoken
Incoming HTTP request to test instance L0C41jDRMb8B6Qq
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer Sn9ub8xJo1CTK2nvwBgY4CIdJPsM3P6ci525RiwuyRG8l4Xwy2",
  "user-agent": "openid-client/4.9.1 (https://github.com/panva/node-openid-client)",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "x-ssl-cert": "-----BEGIN CERTIFICATE----- MIIDmjCCAoKgAwIBAgIJW/bNuq9QdEgNMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNV BAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWEx EzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRl c3QwHhcNMjExMDIyMTUzNDUwWhcNMjIxMDIyMTUzNDUwWjBpMRQwEgYDVQQDEwtl eGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYD VQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOa+9nvr/lRIwW2m7iyqJcwd Fuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX 7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT 8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd/T103usdRmy/B4A +O1rrbqfK+QW79S2IzxoHt3C2+CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW/vnR0a K5OTbTcw5JefqkITmo/RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDwID AQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhto dHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBADKQ X4i77jws4IC/KAtB4/c5EJPkZ4Tw/sKh3t52Fry1iBDREXKYosR/E4GjtG/TGmSg ed6lqU87cGduJjPq9l8PM6CTg/aC6mg6Lxuf8XXxz78ic6ZCnMJ/XYC7yo1qov8t optd/1lcK/Kd6IP2f9zVP9evVUjNOJOkaE/8f/jM7XI3F7ObwWcdLoPlInbkhdLx gKcCEci+T6D3p1ZMKndCEmUSpK6GrxNLRM284bQqrDV7nwM6PfLyZ5hJGSnKHPJv DneLlUn42qH+XA0tW0/Lk5aEBe7U6g591NJ9IAUrcVVQgOIymEqWMms3e92Ff+tK aXbGs9sIQ3hXRxe57nQ\u003d -----END CERTIFICATE-----",
  "x-ssl-verify": "FAILED:self signed certificate",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
open-banking/v1.1/accounts
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-10-22 15:35:01 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Accounts endpoint
2021-10-22 15:35:01 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIDmjCCAoKgAwIBAgIJW/bNuq9QdEgNMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNV BAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWEx EzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRl c3QwHhcNMjExMDIyMTUzNDUwWhcNMjIxMDIyMTUzNDUwWjBpMRQwEgYDVQQDEwtl eGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYD VQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOa+9nvr/lRIwW2m7iyqJcwd Fuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX 7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT 8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd/T103usdRmy/B4A +O1rrbqfK+QW79S2IzxoHt3C2+CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW/vnR0a K5OTbTcw5JefqkITmo/RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDwID AQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhto dHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBADKQ X4i77jws4IC/KAtB4/c5EJPkZ4Tw/sKh3t52Fry1iBDREXKYosR/E4GjtG/TGmSg ed6lqU87cGduJjPq9l8PM6CTg/aC6mg6Lxuf8XXxz78ic6ZCnMJ/XYC7yo1qov8t optd/1lcK/Kd6IP2f9zVP9evVUjNOJOkaE/8f/jM7XI3F7ObwWcdLoPlInbkhdLx gKcCEci+T6D3p1ZMKndCEmUSpK6GrxNLRM284bQqrDV7nwM6PfLyZ5hJGSnKHPJv DneLlUn42qH+XA0tW0/Lk5aEBe7U6g591NJ9IAUrcVVQgOIymEqWMms3e92Ff+tK aXbGs9sIQ3hXRxe57nQ\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----\nMIIDmjCCAoKgAwIBAgIJW/bNuq9QdEgNMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNV\nBAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWEx\nEzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRl\nc3QwHhcNMjExMDIyMTUzNDUwWhcNMjIxMDIyMTUzNDUwWjBpMRQwEgYDVQQDEwtl\neGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYD\nVQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIB\nIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOa+9nvr/lRIwW2m7iyqJcwd\nFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX\n7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT\n8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd/T103usdRmy/B4A\n+O1rrbqfK+QW79S2IzxoHt3C2+CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW/vnR0a\nK5OTbTcw5JefqkITmo/RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDwID\nAQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhto\ndHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBADKQ\nX4i77jws4IC/KAtB4/c5EJPkZ4Tw/sKh3t52Fry1iBDREXKYosR/E4GjtG/TGmSg\ned6lqU87cGduJjPq9l8PM6CTg/aC6mg6Lxuf8XXxz78ic6ZCnMJ/XYC7yo1qov8t\noptd/1lcK/Kd6IP2f9zVP9evVUjNOJOkaE/8f/jM7XI3F7ObwWcdLoPlInbkhdLx\ngKcCEci+T6D3p1ZMKndCEmUSpK6GrxNLRM284bQqrDV7nwM6PfLyZ5hJGSnKHPJv\nDneLlUn42qH+XA0tW0/Lk5aEBe7U6g591NJ9IAUrcVVQgOIymEqWMms3e92Ff+tK\naXbGs9sIQ3hXRxe57nQ\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "OU\u003dTest,O\u003dTest,L\u003dBlacksburg,ST\u003dVirginia,C\u003dUS,CN\u003dexample.org"
  },
  "sanDnsNames": [],
  "sanUris": [
    "http://example.org/webid#me"
  ],
  "sanIPs": [],
  "sanEmails": []
}
2021-10-22 15:35:01 SUCCESS
CheckForClientCertificate
Found client certificate
2021-10-22 15:35:01 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-10-22 15:35:01 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2021-10-22 15:35:01 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
Sn9ub8xJo1CTK2nvwBgY4CIdJPsM3P6ci525RiwuyRG8l4Xwy2
2021-10-22 15:35:01 SUCCESS
RequireBearerAccessToken
Found access token in request
actual
Sn9ub8xJo1CTK2nvwBgY4CIdJPsM3P6ci525RiwuyRG8l4Xwy2
2021-10-22 15:35:01 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2021-10-22 15:35:01 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2021-10-22 15:35:01 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2021-10-22 15:35:01 SUCCESS
CreateFapiInteractionIdIfNeeded
Created new FAPI interaction ID
fapi_interaction_id
d1abdf87-5237-4473-ace8-062927fe301f
2021-10-22 15:35:01 SUCCESS
CreateFAPIAccountEndpointResponse
Created account response object
accounts_endpoint_response
{
  "conformance-test-finished": "true"
}
accounts_endpoint_response_headers
{
  "x-fapi-interaction-id": "d1abdf87-5237-4473-ace8-062927fe301f",
  "content-type": "application/json; charset\u003dUTF-8"
}
2021-10-22 15:35:01
ClearAccessTokenFromRequest
Condition ran but did not log anything
2021-10-22 15:35:01 OUTGOING
fapi1-advanced-final-client-test-encrypted-idtoken
Response to HTTP request to test instance L0C41jDRMb8B6Qq
outgoing_status_code
200
outgoing_headers
{
  "x-fapi-interaction-id": [
    "d1abdf87-5237-4473-ace8-062927fe301f"
  ],
  "content-type": [
    "application/json; charset\u003dUTF-8"
  ]
}
outgoing_body
{
  "conformance-test-finished": "true"
}
outgoing_path
open-banking/v1.1/accounts
2021-10-22 15:35:01 FINISHED
fapi1-advanced-final-client-test-encrypted-idtoken
Test has run to completion
testmodule_result
PASSED
2021-10-22 15:35:02
TEST-RUNNER
Alias has now been claimed by another test
alias
openid-client-JsA4OBya72NBFiTmU8P26
new_test_id
DsL5XRY6Tp8rFvb
Test Results