Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-10-22 15:35:24 INFO
TEST-RUNNER
Test instance 4TeeGFOdXUSvIMk created
baseUrl
https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "by_value",
  "fapi_jarm_type": "oidc",
  "fapi_profile": "plain_fapi",
  "fapi_response_mode": "plain_response"
}
alias
openid-client-JsA4OBya72NBFiTmU8P26
description
openid-client v5.x FAPI1 Adv. private_key_jwt RP
planId
VsHCoijUnlaAo
config
{
  "alias": "openid-client-JsA4OBya72NBFiTmU8P26",
  "description": "openid-client v5.x FAPI1 Adv. private_key_jwt RP",
  "server": {
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "qOcQIY2N8ybqMv3xhxiG2WMtjszRaAjQfJbzoa88SIl-sqYpGq7E8SMhemccmDi1GeJd-l63w6MeykHb09HytqncFa2EFCvwhZ499MWVp67ePkTH2ltR1wIZ6V2VkVAkBcY3O0AucJVWI3zLlN1TPpeyfEu5pMsAC8zwzUvuaEFwS4IyA7KqRXNsLSdwZpzO0t5g0PTDoklcguLiFaDsiw0y1jqr0f3j4lhekdu1MH9mo2xdm1G6zm52f6LAiPWRPcEPyrCpFiHRSH7zOOCEXHlt-AOaONsaWk936RDQ5EN2qULh27V-3y791CxM1F7qty_2KstvNIHCIR1I3tCbGw",
          "d": "qK0A7hE4xrCBSOVUVK9I1EZ4k9i19CiBVTtHGZwwHty5G95WxF_vLEYCRAQ_iUFwkuX_Jm97I7R-pkx5JaPQuV0O_tMnSSHMdRRgGVdNKoW3SwZTdByosYlWqTidit4261FVjSV-e06YFJ6njQYvAR5r0DersQhOBnrnrI59C71W92HxiufYcbK6cONQxW4a6KiFdxhTFDo15ctrB4WAcw0h33HvuvSZgA_60GyL08VlCDfkWWF1_BD_1IwOB69nWWAEEsI2oed_n8HQ5L6q_N9nU03hG8QvLE2EjT-7nCxDigW0ZaceAXTmyfz3tOiPGHvYyEF14U_9CfsazS4gEQ",
          "p": "0hh2g3aEyOj5LUiRJSz2b41uFfEemdPNKBP2ZKZcT1RUeA4P-x2q8RMMwDq3GcEFh6cYJ62PlMxjThFSVv-nG8VuwhbaqqId-4MZZfw-e_B-i-RGrC8gQSrPA8e-S4ORueFzm4PIn_Pa1xXgJ_v4Dp1N0dOQWUYcgAKuZCubk8M",
          "q": "zc6Amlx38C34RJTndSYm3pnylQdr036ZxFrUWGe-hqyCLVGDjrri2UHzGmHk5oiuNvieBnJZZgtHT_o1Eaq0YBJFQdIF9119DG-3_pqZZ8HWq5KBzohgmJMOmJTxh46HcLGqgW2lvRZB1UW4aPGrLlDH2yRAhKQ_MNSWp24Znck",
          "dp": "RjPsbhNNXYETukD0VzLGChJ9RZGzgv1WIV1CSPGaCNwJ-a_hQSzxsOqHqTg1dMKd4W1BUgjZ4IPHbw-0ruNwaIQ5dVuDp97SG_f7pat7CZkcAAzAXMrGgWAXmpDFEqCdMjqWkdGgWWp3psVliJbWlbOUjFegdWRLI69BrLExpFc",
          "dq": "cTLnG4BG3A1848P_Nzlf4cpNWlk1nqOg0hafe2y8p_iUtXaDZOs4QQV8QIOd0otVP5kp2iPlNjJ36-6UZ_47rif-fgCWFYQPdtqwGlNQk3hTqhUwXrg2YVVpjtVFsCjeKEcgoIX9xm5KkZMCpn5eiGAYPVnIPuzUcPhNURRG9Lk",
          "qi": "SVo8v-eUECVp0j6BanAVWPd4B5inBTlG4ldTC7qjndgWMvB0TG_3Wxz6DEzBjUJ0m3FNZHSn3IYxuG5sPclKpy3wXRVH5hSVKvRKKYRN0NTABjPXzXi5zGo_bJqEq2pxY5auL94iULIm56iK4C-hh-8L_3PeXwQnKTyyQh-ad7o",
          "kty": "RSA",
          "kid": "sNQ8PpQ7Sr5U5jKCy-I5a3Eji4ZRkLTArO1y-I9wNqA",
          "alg": "PS256",
          "use": "sig"
        }
      ]
    }
  },
  "waitTimeoutSeconds": 2,
  "client": {
    "client_id": "client-id-openid-client-JsA4OBya72NBFiTmU8P26",
    "scope": "openid",
    "redirect_uri": "https://openid-client.local/cb",
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "vxLQCSZwKczHceBwJ4v_GSgvdDWmFE7nSZNhUXS9XOr-PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi-FJ6R-wLvpYo1NH20a6RG24-Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N_Mcdhg4Arwr-Lq9sOmvv1aO_NG-EwG_nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBw",
          "kty": "RSA",
          "kid": "arKeOJiuLF_d2-m1aexeTBVm37QOUG2DRRQ2OIX8GqM",
          "x5c": [
            "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\u003d"
          ],
          "x5t": "bZIgFX__W72fzGP4ToSRv4YC0pU",
          "x5t#S256": "vDGAWNl_H0i7g3-BgYaruR9DFIrRh6wn9MgyppUUD-Y"
        }
      ]
    },
    "certificate": "-----BEGIN CERTIFICATE-----\r\nMIIDmjCCAoKgAwIBAgIJT9aTyttzbCFQMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNV\r\nBAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWEx\r\nEzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRl\r\nc3QwHhcNMjExMDIyMTUzNDQ5WhcNMjIxMDIyMTUzNDQ5WjBpMRQwEgYDVQQDEwtl\r\neGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYD\r\nVQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIB\r\nIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxLQCSZwKczHceBwJ4v/GSgv\r\ndDWmFE7nSZNhUXS9XOr+PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczR\r\nQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQR\r\ni+FJ6R+wLvpYo1NH20a6RG24+Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7G\r\nu3AgcHWFzycj1N/Mcdhg4Arwr+Lq9sOmvv1aO/NG+EwG/nzyqyljJiKvCIMc57vt\r\ngQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBwID\r\nAQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhto\r\ndHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBAGOS\r\n6AwdcTMIH00KPOot1P4qWJNv391rGIEGbAMuniy32X2ZNIXqhIh0g7QHX9Ul8eaR\r\nitUbLBcgH3hJ8/BExMJOjOnYEfMLJGSYbrkAwd3LYx4XuwCxY4uKGKWzsdgTgMji\r\njQd2n0bi1rnhKgDAMoUpOAKpA4FkBd2l8y2QqK3w/C3SzrHSYuFrADpFaV6zVrLj\r\n+7FMTYj7+rgyF6AwoM279xoyVJ/PkVam3ZXO7cjtTbF53LSLJwaTYmK4r5JeOmN3\r\nAttIOXy2geaIWyghkuPtJXUN4/HiRKfgaAQOQYnEMdrJQrBWwRsUWDFz23hotlF4\r\niSqGF/BXU5yePXxsPv0\u003d\r\n-----END CERTIFICATE-----\r\n"
  },
  "client2": {
    "client_id": "client2-id-openid-client-JsA4OBya72NBFiTmU8P26",
    "scope": "openid",
    "redirect_uri": "https://openid-client2.local/cb",
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "yOa-9nvr_lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd_T103usdRmy_B4A-O1rrbqfK-QW79S2IzxoHt3C2-CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW_vnR0aK5OTbTcw5JefqkITmo_RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDw",
          "kty": "RSA",
          "kid": "OPDJYjVIsJr1ayg0W0kbuRZGiFPyFvOmhnKSQDierns",
          "use": "sig",
          "x5c": [
            "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\u003d"
          ],
          "x5t": "oJBerrDKzZiQqOem-mjqZSj5AZo",
          "x5t#S256": "WAlDqGxyjiKXAJOgjURFkBFsNA3jzs09RZnwm4EaniQ"
        },
        {
          "e": "AQAB",
          "n": "443RBkcr1wUwpWte2QrlRtob8NNtUBCidYq5CSKd_kuixu-QTNYGaYaf1eMqf9hNVQi9UTy-MBV8fgIBtTIgiAysT-WlRokMOddrL3Oohe7UmyQkPRSxIZqXAlFsDSkOUqmOtdxr3LL_npmJ-YMq0dHYPogRybvvsRSIHCrPqGUbflZ8PZMYpOZ_YmYWf2iGOSsxSAxcG3OKkBCkOVNHKR7RDJ-sgTdfNmSztqbODkHV2ab1grsTMzQcuMWIDGy22wGzVkpNZpuEz-pQwmgwFnWB2kwM6S6q9dQM7bOASM8NgO6mmT8k0u-K0A7vq4OSPkpUdrCizY__0A3LJIMk0w",
          "kty": "RSA",
          "kid": "QxiVy76gkyAxdCKhvR1PmZm1Vcyv4lRSorGXjZmjt6c",
          "alg": "RSA-OAEP-256",
          "use": "enc"
        }
      ]
    },
    "id_token_encrypted_response_alg": "RSA-OAEP-256",
    "certificate": "-----BEGIN CERTIFICATE-----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\r\naXbGs9sIQ3hXRxe57nQ\u003d\r\n-----END CERTIFICATE-----\r\n"
  }
}
testName
fapi1-advanced-final-client-test-invalid-nonce
2021-10-22 15:35:24 SUCCESS
GenerateServerConfigurationMTLS
Created server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/openid-client-JsA4OBya72NBFiTmU8P26/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/userinfo"
}
issuer
https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/
discoveryUrl
https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/.well-known/openid-configuration
2021-10-22 15:35:24 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_jwks
{
  "keys": [
    {
      "p": "0hh2g3aEyOj5LUiRJSz2b41uFfEemdPNKBP2ZKZcT1RUeA4P-x2q8RMMwDq3GcEFh6cYJ62PlMxjThFSVv-nG8VuwhbaqqId-4MZZfw-e_B-i-RGrC8gQSrPA8e-S4ORueFzm4PIn_Pa1xXgJ_v4Dp1N0dOQWUYcgAKuZCubk8M",
      "kty": "RSA",
      "q": "zc6Amlx38C34RJTndSYm3pnylQdr036ZxFrUWGe-hqyCLVGDjrri2UHzGmHk5oiuNvieBnJZZgtHT_o1Eaq0YBJFQdIF9119DG-3_pqZZ8HWq5KBzohgmJMOmJTxh46HcLGqgW2lvRZB1UW4aPGrLlDH2yRAhKQ_MNSWp24Znck",
      "d": "qK0A7hE4xrCBSOVUVK9I1EZ4k9i19CiBVTtHGZwwHty5G95WxF_vLEYCRAQ_iUFwkuX_Jm97I7R-pkx5JaPQuV0O_tMnSSHMdRRgGVdNKoW3SwZTdByosYlWqTidit4261FVjSV-e06YFJ6njQYvAR5r0DersQhOBnrnrI59C71W92HxiufYcbK6cONQxW4a6KiFdxhTFDo15ctrB4WAcw0h33HvuvSZgA_60GyL08VlCDfkWWF1_BD_1IwOB69nWWAEEsI2oed_n8HQ5L6q_N9nU03hG8QvLE2EjT-7nCxDigW0ZaceAXTmyfz3tOiPGHvYyEF14U_9CfsazS4gEQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "sNQ8PpQ7Sr5U5jKCy-I5a3Eji4ZRkLTArO1y-I9wNqA",
      "qi": "SVo8v-eUECVp0j6BanAVWPd4B5inBTlG4ldTC7qjndgWMvB0TG_3Wxz6DEzBjUJ0m3FNZHSn3IYxuG5sPclKpy3wXRVH5hSVKvRKKYRN0NTABjPXzXi5zGo_bJqEq2pxY5auL94iULIm56iK4C-hh-8L_3PeXwQnKTyyQh-ad7o",
      "dp": "RjPsbhNNXYETukD0VzLGChJ9RZGzgv1WIV1CSPGaCNwJ-a_hQSzxsOqHqTg1dMKd4W1BUgjZ4IPHbw-0ruNwaIQ5dVuDp97SG_f7pat7CZkcAAzAXMrGgWAXmpDFEqCdMjqWkdGgWWp3psVliJbWlbOUjFegdWRLI69BrLExpFc",
      "alg": "PS256",
      "dq": "cTLnG4BG3A1848P_Nzlf4cpNWlk1nqOg0hafe2y8p_iUtXaDZOs4QQV8QIOd0otVP5kp2iPlNjJ36-6UZ_47rif-fgCWFYQPdtqwGlNQk3hTqhUwXrg2YVVpjtVFsCjeKEcgoIX9xm5KkZMCpn5eiGAYPVnIPuzUcPhNURRG9Lk",
      "n": "qOcQIY2N8ybqMv3xhxiG2WMtjszRaAjQfJbzoa88SIl-sqYpGq7E8SMhemccmDi1GeJd-l63w6MeykHb09HytqncFa2EFCvwhZ499MWVp67ePkTH2ltR1wIZ6V2VkVAkBcY3O0AucJVWI3zLlN1TPpeyfEu5pMsAC8zwzUvuaEFwS4IyA7KqRXNsLSdwZpzO0t5g0PTDoklcguLiFaDsiw0y1jqr0f3j4lhekdu1MH9mo2xdm1G6zm52f6LAiPWRPcEPyrCpFiHRSH7zOOCEXHlt-AOaONsaWk936RDQ5EN2qULh27V-3y791CxM1F7qty_2KstvNIHCIR1I3tCbGw"
    }
  ]
}
server_encryption_keys
{}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "sNQ8PpQ7Sr5U5jKCy-I5a3Eji4ZRkLTArO1y-I9wNqA",
      "alg": "PS256",
      "n": "qOcQIY2N8ybqMv3xhxiG2WMtjszRaAjQfJbzoa88SIl-sqYpGq7E8SMhemccmDi1GeJd-l63w6MeykHb09HytqncFa2EFCvwhZ499MWVp67ePkTH2ltR1wIZ6V2VkVAkBcY3O0AucJVWI3zLlN1TPpeyfEu5pMsAC8zwzUvuaEFwS4IyA7KqRXNsLSdwZpzO0t5g0PTDoklcguLiFaDsiw0y1jqr0f3j4lhekdu1MH9mo2xdm1G6zm52f6LAiPWRPcEPyrCpFiHRSH7zOOCEXHlt-AOaONsaWk936RDQ5EN2qULh27V-3y791CxM1F7qty_2KstvNIHCIR1I3tCbGw"
    }
  ]
}
2021-10-22 15:35:24 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-10-22 15:35:24 SUCCESS
ExtractServerSigningAlg
Successfully extracted algorithm
signing_algorithm
PS256
2021-10-22 15:35:24
SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly
Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration
server_configuration
{
  "issuer": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/openid-client-JsA4OBya72NBFiTmU8P26/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/userinfo",
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ]
}
2021-10-22 15:35:24 SUCCESS
AddResponseTypeCodeIdTokenToServerConfiguration
Added code id_token as response type supported
response_types_supported
[
  "code id_token"
]
2021-10-22 15:35:24 SUCCESS
FAPIAddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
values
[
  "PS256",
  "ES256"
]
2021-10-22 15:35:24 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2021-10-22 15:35:24 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "p": "0hh2g3aEyOj5LUiRJSz2b41uFfEemdPNKBP2ZKZcT1RUeA4P-x2q8RMMwDq3GcEFh6cYJ62PlMxjThFSVv-nG8VuwhbaqqId-4MZZfw-e_B-i-RGrC8gQSrPA8e-S4ORueFzm4PIn_Pa1xXgJ_v4Dp1N0dOQWUYcgAKuZCubk8M",
      "kty": "RSA",
      "q": "zc6Amlx38C34RJTndSYm3pnylQdr036ZxFrUWGe-hqyCLVGDjrri2UHzGmHk5oiuNvieBnJZZgtHT_o1Eaq0YBJFQdIF9119DG-3_pqZZ8HWq5KBzohgmJMOmJTxh46HcLGqgW2lvRZB1UW4aPGrLlDH2yRAhKQ_MNSWp24Znck",
      "d": "qK0A7hE4xrCBSOVUVK9I1EZ4k9i19CiBVTtHGZwwHty5G95WxF_vLEYCRAQ_iUFwkuX_Jm97I7R-pkx5JaPQuV0O_tMnSSHMdRRgGVdNKoW3SwZTdByosYlWqTidit4261FVjSV-e06YFJ6njQYvAR5r0DersQhOBnrnrI59C71W92HxiufYcbK6cONQxW4a6KiFdxhTFDo15ctrB4WAcw0h33HvuvSZgA_60GyL08VlCDfkWWF1_BD_1IwOB69nWWAEEsI2oed_n8HQ5L6q_N9nU03hG8QvLE2EjT-7nCxDigW0ZaceAXTmyfz3tOiPGHvYyEF14U_9CfsazS4gEQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "sNQ8PpQ7Sr5U5jKCy-I5a3Eji4ZRkLTArO1y-I9wNqA",
      "qi": "SVo8v-eUECVp0j6BanAVWPd4B5inBTlG4ldTC7qjndgWMvB0TG_3Wxz6DEzBjUJ0m3FNZHSn3IYxuG5sPclKpy3wXRVH5hSVKvRKKYRN0NTABjPXzXi5zGo_bJqEq2pxY5auL94iULIm56iK4C-hh-8L_3PeXwQnKTyyQh-ad7o",
      "dp": "RjPsbhNNXYETukD0VzLGChJ9RZGzgv1WIV1CSPGaCNwJ-a_hQSzxsOqHqTg1dMKd4W1BUgjZ4IPHbw-0ruNwaIQ5dVuDp97SG_f7pat7CZkcAAzAXMrGgWAXmpDFEqCdMjqWkdGgWWp3psVliJbWlbOUjFegdWRLI69BrLExpFc",
      "alg": "PS256",
      "dq": "cTLnG4BG3A1848P_Nzlf4cpNWlk1nqOg0hafe2y8p_iUtXaDZOs4QQV8QIOd0otVP5kp2iPlNjJ36-6UZ_47rif-fgCWFYQPdtqwGlNQk3hTqhUwXrg2YVVpjtVFsCjeKEcgoIX9xm5KkZMCpn5eiGAYPVnIPuzUcPhNURRG9Lk",
      "n": "qOcQIY2N8ybqMv3xhxiG2WMtjszRaAjQfJbzoa88SIl-sqYpGq7E8SMhemccmDi1GeJd-l63w6MeykHb09HytqncFa2EFCvwhZ499MWVp67ePkTH2ltR1wIZ6V2VkVAkBcY3O0AucJVWI3zLlN1TPpeyfEu5pMsAC8zwzUvuaEFwS4IyA7KqRXNsLSdwZpzO0t5g0PTDoklcguLiFaDsiw0y1jqr0f3j4lhekdu1MH9mo2xdm1G6zm52f6LAiPWRPcEPyrCpFiHRSH7zOOCEXHlt-AOaONsaWk936RDQ5EN2qULh27V-3y791CxM1F7qty_2KstvNIHCIR1I3tCbGw"
    }
  ]
}
2021-10-22 15:35:24 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
Verify configuration of first client
2021-10-22 15:35:24 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
client-id-openid-client-JsA4OBya72NBFiTmU8P26
scope
openid
redirect_uri
https://openid-client.local/cb
jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "vxLQCSZwKczHceBwJ4v_GSgvdDWmFE7nSZNhUXS9XOr-PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi-FJ6R-wLvpYo1NH20a6RG24-Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N_Mcdhg4Arwr-Lq9sOmvv1aO_NG-EwG_nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBw",
      "kty": "RSA",
      "kid": "arKeOJiuLF_d2-m1aexeTBVm37QOUG2DRRQ2OIX8GqM",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "bZIgFX__W72fzGP4ToSRv4YC0pU",
      "x5t#S256": "vDGAWNl_H0i7g3-BgYaruR9DFIrRh6wn9MgyppUUD-Y"
    }
  ]
}
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-10-22 15:35:24 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-10-22 15:35:24 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "vxLQCSZwKczHceBwJ4v_GSgvdDWmFE7nSZNhUXS9XOr-PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi-FJ6R-wLvpYo1NH20a6RG24-Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N_Mcdhg4Arwr-Lq9sOmvv1aO_NG-EwG_nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBw",
      "kty": "RSA",
      "kid": "arKeOJiuLF_d2-m1aexeTBVm37QOUG2DRRQ2OIX8GqM",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "bZIgFX__W72fzGP4ToSRv4YC0pU",
      "x5t#S256": "vDGAWNl_H0i7g3-BgYaruR9DFIrRh6wn9MgyppUUD-Y"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "x5t#S256": "vDGAWNl_H0i7g3-BgYaruR9DFIrRh6wn9MgyppUUD-Y",
      "e": "AQAB",
      "x5t": "bZIgFX__W72fzGP4ToSRv4YC0pU",
      "kid": "arKeOJiuLF_d2-m1aexeTBVm37QOUG2DRRQ2OIX8GqM",
      "x5c": [
        "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\u003d"
      ],
      "n": "vxLQCSZwKczHceBwJ4v_GSgvdDWmFE7nSZNhUXS9XOr-PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi-FJ6R-wLvpYo1NH20a6RG24-Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N_Mcdhg4Arwr-Lq9sOmvv1aO_NG-EwG_nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBw"
    }
  ]
}
2021-10-22 15:35:24 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-10-22 15:35:24 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-10-22 15:35:24 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "vxLQCSZwKczHceBwJ4v_GSgvdDWmFE7nSZNhUXS9XOr-PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi-FJ6R-wLvpYo1NH20a6RG24-Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N_Mcdhg4Arwr-Lq9sOmvv1aO_NG-EwG_nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBw",
      "kty": "RSA",
      "kid": "arKeOJiuLF_d2-m1aexeTBVm37QOUG2DRRQ2OIX8GqM",
      "x5c": [
        "MIIDmjCCAoKgAwIBAgIJT9aTyttzbCFQMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNVBAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWExEzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRlc3QwHhcNMjExMDIyMTUzNDQ5WhcNMjIxMDIyMTUzNDQ5WjBpMRQwEgYDVQQDEwtleGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYDVQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxLQCSZwKczHceBwJ4v/GSgvdDWmFE7nSZNhUXS9XOr+PgOwxeLWSQIZBrrKAMtiN8oqIm60ooN1Sm4RrvL8AczRQo1Voi24OdtXRnuxhp3nFC4R6U4HqCJG7okElthWeRgsHv8lWb6K8PUR7Hx6LmQRi+FJ6R+wLvpYo1NH20a6RG24+Dk1W2yGEXCspYYRkH7Kq3OdNcyLWe2fqiAkaQ7Gu3AgcHWFzycj1N/Mcdhg4Arwr+Lq9sOmvv1aO/NG+EwG/nzyqyljJiKvCIMc57vtgQJHST9TGlmaJsYdAdeNkw815ddR9mJ1NT08UAe2FmaR1BVDDmWNzz3H4UpoBwIDAQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhtodHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBAGOS6AwdcTMIH00KPOot1P4qWJNv391rGIEGbAMuniy32X2ZNIXqhIh0g7QHX9Ul8eaRitUbLBcgH3hJ8/BExMJOjOnYEfMLJGSYbrkAwd3LYx4XuwCxY4uKGKWzsdgTgMjijQd2n0bi1rnhKgDAMoUpOAKpA4FkBd2l8y2QqK3w/C3SzrHSYuFrADpFaV6zVrLj+7FMTYj7+rgyF6AwoM279xoyVJ/PkVam3ZXO7cjtTbF53LSLJwaTYmK4r5JeOmN3AttIOXy2geaIWyghkuPtJXUN4/HiRKfgaAQOQYnEMdrJQrBWwRsUWDFz23hotlF4iSqGF/BXU5yePXxsPv0\u003d"
      ],
      "x5t": "bZIgFX__W72fzGP4ToSRv4YC0pU",
      "x5t#S256": "vDGAWNl_H0i7g3-BgYaruR9DFIrRh6wn9MgyppUUD-Y"
    }
  ]
}
Verify configuration of second client
2021-10-22 15:35:24 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
client2-id-openid-client-JsA4OBya72NBFiTmU8P26
scope
openid
redirect_uri
https://openid-client2.local/cb
jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "yOa-9nvr_lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd_T103usdRmy_B4A-O1rrbqfK-QW79S2IzxoHt3C2-CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW_vnR0aK5OTbTcw5JefqkITmo_RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDw",
      "kty": "RSA",
      "kid": "OPDJYjVIsJr1ayg0W0kbuRZGiFPyFvOmhnKSQDierns",
      "use": "sig",
      "x5c": [
        "MIIDmjCCAoKgAwIBAgIJW/bNuq9QdEgNMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNVBAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWExEzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRlc3QwHhcNMjExMDIyMTUzNDUwWhcNMjIxMDIyMTUzNDUwWjBpMRQwEgYDVQQDEwtleGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYDVQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOa+9nvr/lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd/T103usdRmy/B4A+O1rrbqfK+QW79S2IzxoHt3C2+CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW/vnR0aK5OTbTcw5JefqkITmo/RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDwIDAQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhtodHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBADKQX4i77jws4IC/KAtB4/c5EJPkZ4Tw/sKh3t52Fry1iBDREXKYosR/E4GjtG/TGmSged6lqU87cGduJjPq9l8PM6CTg/aC6mg6Lxuf8XXxz78ic6ZCnMJ/XYC7yo1qov8toptd/1lcK/Kd6IP2f9zVP9evVUjNOJOkaE/8f/jM7XI3F7ObwWcdLoPlInbkhdLxgKcCEci+T6D3p1ZMKndCEmUSpK6GrxNLRM284bQqrDV7nwM6PfLyZ5hJGSnKHPJvDneLlUn42qH+XA0tW0/Lk5aEBe7U6g591NJ9IAUrcVVQgOIymEqWMms3e92Ff+tKaXbGs9sIQ3hXRxe57nQ\u003d"
      ],
      "x5t": "oJBerrDKzZiQqOem-mjqZSj5AZo",
      "x5t#S256": "WAlDqGxyjiKXAJOgjURFkBFsNA3jzs09RZnwm4EaniQ"
    },
    {
      "e": "AQAB",
      "n": "443RBkcr1wUwpWte2QrlRtob8NNtUBCidYq5CSKd_kuixu-QTNYGaYaf1eMqf9hNVQi9UTy-MBV8fgIBtTIgiAysT-WlRokMOddrL3Oohe7UmyQkPRSxIZqXAlFsDSkOUqmOtdxr3LL_npmJ-YMq0dHYPogRybvvsRSIHCrPqGUbflZ8PZMYpOZ_YmYWf2iGOSsxSAxcG3OKkBCkOVNHKR7RDJ-sgTdfNmSztqbODkHV2ab1grsTMzQcuMWIDGy22wGzVkpNZpuEz-pQwmgwFnWB2kwM6S6q9dQM7bOASM8NgO6mmT8k0u-K0A7vq4OSPkpUdrCizY__0A3LJIMk0w",
      "kty": "RSA",
      "kid": "QxiVy76gkyAxdCKhvR1PmZm1Vcyv4lRSorGXjZmjt6c",
      "alg": "RSA-OAEP-256",
      "use": "enc"
    }
  ]
}
id_token_encrypted_response_alg
RSA-OAEP-256
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-10-22 15:35:24 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-10-22 15:35:24 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "yOa-9nvr_lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd_T103usdRmy_B4A-O1rrbqfK-QW79S2IzxoHt3C2-CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW_vnR0aK5OTbTcw5JefqkITmo_RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDw",
      "kty": "RSA",
      "kid": "OPDJYjVIsJr1ayg0W0kbuRZGiFPyFvOmhnKSQDierns",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "oJBerrDKzZiQqOem-mjqZSj5AZo",
      "x5t#S256": "WAlDqGxyjiKXAJOgjURFkBFsNA3jzs09RZnwm4EaniQ"
    },
    {
      "e": "AQAB",
      "n": "443RBkcr1wUwpWte2QrlRtob8NNtUBCidYq5CSKd_kuixu-QTNYGaYaf1eMqf9hNVQi9UTy-MBV8fgIBtTIgiAysT-WlRokMOddrL3Oohe7UmyQkPRSxIZqXAlFsDSkOUqmOtdxr3LL_npmJ-YMq0dHYPogRybvvsRSIHCrPqGUbflZ8PZMYpOZ_YmYWf2iGOSsxSAxcG3OKkBCkOVNHKR7RDJ-sgTdfNmSztqbODkHV2ab1grsTMzQcuMWIDGy22wGzVkpNZpuEz-pQwmgwFnWB2kwM6S6q9dQM7bOASM8NgO6mmT8k0u-K0A7vq4OSPkpUdrCizY__0A3LJIMk0w",
      "kty": "RSA",
      "kid": "QxiVy76gkyAxdCKhvR1PmZm1Vcyv4lRSorGXjZmjt6c",
      "alg": "RSA-OAEP-256",
      "use": "enc"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "x5t#S256": "WAlDqGxyjiKXAJOgjURFkBFsNA3jzs09RZnwm4EaniQ",
      "e": "AQAB",
      "use": "sig",
      "x5t": "oJBerrDKzZiQqOem-mjqZSj5AZo",
      "kid": "OPDJYjVIsJr1ayg0W0kbuRZGiFPyFvOmhnKSQDierns",
      "x5c": [
        "MIIDmjCCAoKgAwIBAgIJW/bNuq9QdEgNMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNVBAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWExEzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRlc3QwHhcNMjExMDIyMTUzNDUwWhcNMjIxMDIyMTUzNDUwWjBpMRQwEgYDVQQDEwtleGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYDVQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOa+9nvr/lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd/T103usdRmy/B4A+O1rrbqfK+QW79S2IzxoHt3C2+CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW/vnR0aK5OTbTcw5JefqkITmo/RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDwIDAQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhtodHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBADKQX4i77jws4IC/KAtB4/c5EJPkZ4Tw/sKh3t52Fry1iBDREXKYosR/E4GjtG/TGmSged6lqU87cGduJjPq9l8PM6CTg/aC6mg6Lxuf8XXxz78ic6ZCnMJ/XYC7yo1qov8toptd/1lcK/Kd6IP2f9zVP9evVUjNOJOkaE/8f/jM7XI3F7ObwWcdLoPlInbkhdLxgKcCEci+T6D3p1ZMKndCEmUSpK6GrxNLRM284bQqrDV7nwM6PfLyZ5hJGSnKHPJvDneLlUn42qH+XA0tW0/Lk5aEBe7U6g591NJ9IAUrcVVQgOIymEqWMms3e92Ff+tKaXbGs9sIQ3hXRxe57nQ\u003d"
      ],
      "n": "yOa-9nvr_lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd_T103usdRmy_B4A-O1rrbqfK-QW79S2IzxoHt3C2-CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW_vnR0aK5OTbTcw5JefqkITmo_RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "QxiVy76gkyAxdCKhvR1PmZm1Vcyv4lRSorGXjZmjt6c",
      "alg": "RSA-OAEP-256",
      "n": "443RBkcr1wUwpWte2QrlRtob8NNtUBCidYq5CSKd_kuixu-QTNYGaYaf1eMqf9hNVQi9UTy-MBV8fgIBtTIgiAysT-WlRokMOddrL3Oohe7UmyQkPRSxIZqXAlFsDSkOUqmOtdxr3LL_npmJ-YMq0dHYPogRybvvsRSIHCrPqGUbflZ8PZMYpOZ_YmYWf2iGOSsxSAxcG3OKkBCkOVNHKR7RDJ-sgTdfNmSztqbODkHV2ab1grsTMzQcuMWIDGy22wGzVkpNZpuEz-pQwmgwFnWB2kwM6S6q9dQM7bOASM8NgO6mmT8k0u-K0A7vq4OSPkpUdrCizY__0A3LJIMk0w"
    }
  ]
}
2021-10-22 15:35:24 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-10-22 15:35:24 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-10-22 15:35:24 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "yOa-9nvr_lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd_T103usdRmy_B4A-O1rrbqfK-QW79S2IzxoHt3C2-CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW_vnR0aK5OTbTcw5JefqkITmo_RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDw",
      "kty": "RSA",
      "kid": "OPDJYjVIsJr1ayg0W0kbuRZGiFPyFvOmhnKSQDierns",
      "use": "sig",
      "x5c": [
        "MIIDmjCCAoKgAwIBAgIJW/bNuq9QdEgNMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNVBAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWExEzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRlc3QwHhcNMjExMDIyMTUzNDUwWhcNMjIxMDIyMTUzNDUwWjBpMRQwEgYDVQQDEwtleGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYDVQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOa+9nvr/lRIwW2m7iyqJcwdFuy2l1FgUqEr1PX6iUoeJJsrdEYJtaxGiyYM0kUPczTU0SO5ywzS6x5ygjMDSpjX7z0td5lAik8Z36NEv11WJzxtJZDKmRiU1cqxhKebDh4z9pspcWq0wPKi8G1HfRJT8MrwAbieBbUL5PfiPm7Oo8p2hRnyxOYms789LxXlVyg1ohWYd/T103usdRmy/B4A+O1rrbqfK+QW79S2IzxoHt3C2+CjJQr70DMlZkfkT3n6rHO0OLYiR0RLwW/vnR0aK5OTbTcw5JefqkITmo/RbCNT0sWNu81UOyOqORsqkdBuKI59sgVTQUnPBV1zDwIDAQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhtodHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBADKQX4i77jws4IC/KAtB4/c5EJPkZ4Tw/sKh3t52Fry1iBDREXKYosR/E4GjtG/TGmSged6lqU87cGduJjPq9l8PM6CTg/aC6mg6Lxuf8XXxz78ic6ZCnMJ/XYC7yo1qov8toptd/1lcK/Kd6IP2f9zVP9evVUjNOJOkaE/8f/jM7XI3F7ObwWcdLoPlInbkhdLxgKcCEci+T6D3p1ZMKndCEmUSpK6GrxNLRM284bQqrDV7nwM6PfLyZ5hJGSnKHPJvDneLlUn42qH+XA0tW0/Lk5aEBe7U6g591NJ9IAUrcVVQgOIymEqWMms3e92Ff+tKaXbGs9sIQ3hXRxe57nQ\u003d"
      ],
      "x5t": "oJBerrDKzZiQqOem-mjqZSj5AZo",
      "x5t#S256": "WAlDqGxyjiKXAJOgjURFkBFsNA3jzs09RZnwm4EaniQ"
    },
    {
      "e": "AQAB",
      "n": "443RBkcr1wUwpWte2QrlRtob8NNtUBCidYq5CSKd_kuixu-QTNYGaYaf1eMqf9hNVQi9UTy-MBV8fgIBtTIgiAysT-WlRokMOddrL3Oohe7UmyQkPRSxIZqXAlFsDSkOUqmOtdxr3LL_npmJ-YMq0dHYPogRybvvsRSIHCrPqGUbflZ8PZMYpOZ_YmYWf2iGOSsxSAxcG3OKkBCkOVNHKR7RDJ-sgTdfNmSztqbODkHV2ab1grsTMzQcuMWIDGy22wGzVkpNZpuEz-pQwmgwFnWB2kwM6S6q9dQM7bOASM8NgO6mmT8k0u-K0A7vq4OSPkpUdrCizY__0A3LJIMk0w",
      "kty": "RSA",
      "kid": "QxiVy76gkyAxdCKhvR1PmZm1Vcyv4lRSorGXjZmjt6c",
      "alg": "RSA-OAEP-256",
      "use": "enc"
    }
  ]
}
2021-10-22 15:35:24
fapi1-advanced-final-client-test-invalid-nonce
Setup Done
2021-10-22 15:35:25 INCOMING
fapi1-advanced-final-client-test-invalid-nonce
Incoming HTTP request to test instance 4TeeGFOdXUSvIMk
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.9.1 (https://github.com/panva/node-openid-client)",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-10-22 15:35:25 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2021-10-22 15:35:25 OUTGOING
fapi1-advanced-final-client-test-invalid-nonce
Response to HTTP request to test instance 4TeeGFOdXUSvIMk
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/openid-client-JsA4OBya72NBFiTmU8P26/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/userinfo",
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256",
    "ES256"
  ]
}
outgoing_path
.well-known/openid-configuration
2021-10-22 15:35:25 INCOMING
fapi1-advanced-final-client-test-invalid-nonce
Incoming HTTP request to test instance 4TeeGFOdXUSvIMk
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "got (https://github.com/sindresorhus/got)",
  "accept-encoding": "gzip, deflate, br",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
authorize
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{
  "client_id": "client-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "scope": "openid",
  "response_type": "code id_token",
  "redirect_uri": "https://openid-client.local/cb",
  "state": "Q8Mne7wLcpLcCoHYpjVEgy5PAKI6mHuCAmrhDjCcyMg",
  "nonce": "253nqrRIECvG0CyyNfBCzbN7cj65JDlIpUSXplmGWNw",
  "request": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJhcktlT0ppdUxGX2QyLW0xYWV4ZVRCVm0zN1FPVUcyRFJSUTJPSVg4R3FNIn0.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.ZlY49aYED6yEOQsKxHHHsWKdlWSgjMu7SbW9uzVkTwP4-AQwFza94ALTHWy8-50ev1tF3s0yWlzWscplYUC-6TKORAGCvi8c8lDU9ArGMJEbF93MyzMiUWj-Xw4r1SCr7yqVlOTwc_t_Eapddv0c_ukHPqs0Sg16Nnpp0ZQZ9Wn-ou2Ncmz96lGQIRzG912tOu3eSyAVL6omsi9hVC44ktLzyJN4Pm32h7uHyxPyeggxYSmSwmV6A_bTL8AErkzy54woPOdgiQxatjCoiAHgCKxqEq4YuqfWckPTOSKyiL2GV7Xvraq0tfnYWIlsUaOzX1pG6QK1U2-mbDaSfAOafQ"
}
incoming_body
2021-10-22 15:35:25 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Authorization endpoint
2021-10-22 15:35:25 SUCCESS
ExtractRequestObject
Parsed request object
request_object
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJhcktlT0ppdUxGX2QyLW0xYWV4ZVRCVm0zN1FPVUcyRFJSUTJPSVg4R3FNIn0.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.ZlY49aYED6yEOQsKxHHHsWKdlWSgjMu7SbW9uzVkTwP4-AQwFza94ALTHWy8-50ev1tF3s0yWlzWscplYUC-6TKORAGCvi8c8lDU9ArGMJEbF93MyzMiUWj-Xw4r1SCr7yqVlOTwc_t_Eapddv0c_ukHPqs0Sg16Nnpp0ZQZ9Wn-ou2Ncmz96lGQIRzG912tOu3eSyAVL6omsi9hVC44ktLzyJN4Pm32h7uHyxPyeggxYSmSwmV6A_bTL8AErkzy54woPOdgiQxatjCoiAHgCKxqEq4YuqfWckPTOSKyiL2GV7Xvraq0tfnYWIlsUaOzX1pG6QK1U2-mbDaSfAOafQ",
  "header": {
    "kid": "arKeOJiuLF_d2-m1aexeTBVm37QOUG2DRRQ2OIX8GqM",
    "typ": "oauth-authz-req+jwt",
    "alg": "PS256"
  },
  "claims": {
    "iss": "client-id-openid-client-JsA4OBya72NBFiTmU8P26",
    "response_type": "code id_token",
    "nonce": "253nqrRIECvG0CyyNfBCzbN7cj65JDlIpUSXplmGWNw",
    "client_id": "client-id-openid-client-JsA4OBya72NBFiTmU8P26",
    "aud": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
    "nbf": 1634916925,
    "scope": "openid",
    "claims": {
      "id_token": {
        "acr": {
          "values": [
            "urn:openbanking:psd2:sca",
            "urn:openbanking:psd2:ca"
          ],
          "essential": true
        }
      }
    },
    "redirect_uri": "https://openid-client.local/cb",
    "state": "Q8Mne7wLcpLcCoHYpjVEgy5PAKI6mHuCAmrhDjCcyMg",
    "exp": 1634917225,
    "iat": 1634916925,
    "jti": "Oh6LkAkzK9Gv68gPecDolCXS80VVyh8nMVrmfTGHy5A"
  }
}
2021-10-22 15:35:25 INFO
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
path
jwe_header
mapped
object
authorization_request_object
2021-10-22 15:35:25 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "client-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "scope": "openid",
  "response_type": "code id_token",
  "redirect_uri": "https://openid-client.local/cb",
  "state": "Q8Mne7wLcpLcCoHYpjVEgy5PAKI6mHuCAmrhDjCcyMg",
  "nonce": "253nqrRIECvG0CyyNfBCzbN7cj65JDlIpUSXplmGWNw",
  "request": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJhcktlT0ppdUxGX2QyLW0xYWV4ZVRCVm0zN1FPVUcyRFJSUTJPSVg4R3FNIn0.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.ZlY49aYED6yEOQsKxHHHsWKdlWSgjMu7SbW9uzVkTwP4-AQwFza94ALTHWy8-50ev1tF3s0yWlzWscplYUC-6TKORAGCvi8c8lDU9ArGMJEbF93MyzMiUWj-Xw4r1SCr7yqVlOTwc_t_Eapddv0c_ukHPqs0Sg16Nnpp0ZQZ9Wn-ou2Ncmz96lGQIRzG912tOu3eSyAVL6omsi9hVC44ktLzyJN4Pm32h7uHyxPyeggxYSmSwmV6A_bTL8AErkzy54woPOdgiQxatjCoiAHgCKxqEq4YuqfWckPTOSKyiL2GV7Xvraq0tfnYWIlsUaOzX1pG6QK1U2-mbDaSfAOafQ",
  "iss": "client-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "aud": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "nbf": 1634916925,
  "claims": {
    "id_token": {
      "acr": {
        "values": [
          "urn:openbanking:psd2:sca",
          "urn:openbanking:psd2:ca"
        ],
        "essential": true
      }
    }
  },
  "exp": 1634917225,
  "iat": 1634916925,
  "jti": "Oh6LkAkzK9Gv68gPecDolCXS80VVyh8nMVrmfTGHy5A"
}
2021-10-22 15:35:25 SUCCESS
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
alg
PS256
2021-10-22 15:35:25 SUCCESS
FAPIValidateRequestObjectIdTokenACRClaims
Acr value in request object is as expected
received
[
  "urn:openbanking:psd2:sca",
  "urn:openbanking:psd2:ca"
]
2021-10-22 15:35:25 SUCCESS
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Oct 22, 2021, 3:40:25 PM"
2021-10-22 15:35:25 SUCCESS
FAPI1AdvancedValidateRequestObjectNBFClaim
nbf claim is valid
nbf
"Oct 22, 2021, 3:35:25 PM"
now
"Oct 22, 2021, 3:35:25 PM"
2021-10-22 15:35:25
ValidateRequestObjectClaims
Request object does not contain a max_age claim
2021-10-22 15:35:25 SUCCESS
ValidateRequestObjectClaims
Request object claims passed all validation checks
2021-10-22 15:35:25 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2021-10-22 15:35:25 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2021-10-22 15:35:25 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2021-10-22 15:35:25 SUCCESS
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
request_object
eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJhcktlT0ppdUxGX2QyLW0xYWV4ZVRCVm0zN1FPVUcyRFJSUTJPSVg4R3FNIn0.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.ZlY49aYED6yEOQsKxHHHsWKdlWSgjMu7SbW9uzVkTwP4-AQwFza94ALTHWy8-50ev1tF3s0yWlzWscplYUC-6TKORAGCvi8c8lDU9ArGMJEbF93MyzMiUWj-Xw4r1SCr7yqVlOTwc_t_Eapddv0c_ukHPqs0Sg16Nnpp0ZQZ9Wn-ou2Ncmz96lGQIRzG912tOu3eSyAVL6omsi9hVC44ktLzyJN4Pm32h7uHyxPyeggxYSmSwmV6A_bTL8AErkzy54woPOdgiQxatjCoiAHgCKxqEq4YuqfWckPTOSKyiL2GV7Xvraq0tfnYWIlsUaOzX1pG6QK1U2-mbDaSfAOafQ
request_object_signing_alg
PS256
jwk
Sun RSA public key, 2048 bits
  params: null
  modulus: 24120793106867159726050660143053208899109825787798875199966726457904094570166708252784631741511492652648749062462406683746892869698449427522453525836516587284215899922383471837016813015192783535193745605367064389479660270600332758392495825602588984839236777206658010545157224327770485426191500453426661129319407306009879065019849886684474647298226958662469851005654632089890379273293009129849815355327242945831913463054786621930154289200720436935935237497544249454551187209438032627489164509531927567631256064199549803126995398896057023341429010746038249570074594510149912750101486825317409162172296131622824592435207
  public exponent: 65537
2021-10-22 15:35:25 SUCCESS
EnsureMatchingRedirectUriInRequestObject
Redirect URI matched
actual
https://openid-client.local/cb
2021-10-22 15:35:25 SUCCESS
EnsureRequiredAuthorizationRequestParametersMatchRequestObject
Required http request parameters match request object claims
response_type
code id_token
client_id
client-id-openid-client-JsA4OBya72NBFiTmU8P26
2021-10-22 15:35:25 SUCCESS
EnsureOptionalAuthorizationRequestParametersMatchRequestObject
All http request parameters and request object claims match
2021-10-22 15:35:25 SUCCESS
EnsureAuthorizationHttpRequestContainsOpenIDScope
Found 'openid' in scope http request parameter
actual
[
  "openid"
]
expected
openid
2021-10-22 15:35:25 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid
2021-10-22 15:35:25 SUCCESS
EnsureRequestedScopeIsEqualToConfiguredScope
Requested scopes match configured scopes
scope
openid
2021-10-22 15:35:25 SUCCESS
EnsureResponseTypeIsCodeIdToken
Response type is expected value
expected
code id_token
2021-10-22 15:35:25 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid"
]
expected
openid
2021-10-22 15:35:25 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
client-id-openid-client-JsA4OBya72NBFiTmU8P26
2021-10-22 15:35:25 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
HfSQOmGq1FUhmXgAWEltaBIfQAJRSBYF
2021-10-22 15:35:25 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
253nqrRIECvG0CyyNfBCzbN7cj65JDlIpUSXplmGWNw
2021-10-22 15:35:25 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash
U9KEbhAGbb8Sz4pnknkdiw
2021-10-22 15:35:25 SUCCESS
CalculateSHash
Successful s_hash encoding
s_hash
ZhuwN10qQCiVEMUD326qwg
2021-10-22 15:35:25 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/
sub
user-subject-1234531
aud
client-id-openid-client-JsA4OBya72NBFiTmU8P26
nonce
253nqrRIECvG0CyyNfBCzbN7cj65JDlIpUSXplmGWNw
iat
1634916925
exp
1634917225
2021-10-22 15:35:25 SUCCESS
AddCHashToIdTokenClaims
Added c_hash to ID token claims
c_hash
U9KEbhAGbb8Sz4pnknkdiw
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "sub": "user-subject-1234531",
  "aud": "client-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "nonce": "253nqrRIECvG0CyyNfBCzbN7cj65JDlIpUSXplmGWNw",
  "iat": 1634916925,
  "exp": 1634917225,
  "c_hash": "U9KEbhAGbb8Sz4pnknkdiw"
}
2021-10-22 15:35:25 SUCCESS
AddSHashToIdTokenClaims
Added s_hash to ID token claims
s_hash
ZhuwN10qQCiVEMUD326qwg
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "sub": "user-subject-1234531",
  "aud": "client-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "nonce": "253nqrRIECvG0CyyNfBCzbN7cj65JDlIpUSXplmGWNw",
  "iat": 1634916925,
  "exp": 1634917225,
  "c_hash": "U9KEbhAGbb8Sz4pnknkdiw",
  "s_hash": "ZhuwN10qQCiVEMUD326qwg"
}
2021-10-22 15:35:25 INFO
AddAtHashToIdTokenClaims
Skipped evaluation due to missing required string: at_hash
expected
at_hash
2021-10-22 15:35:25 SUCCESS
AddInvalidNonceValueToIdToken
Added invalid nonce to ID token claims
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "sub": "user-subject-1234531",
  "aud": "client-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "nonce": "253nqrRIECvG0CyyNfBCzbN7cj65JDlIpUSXplmGWNw1",
  "iat": 1634916925,
  "exp": 1634917225,
  "c_hash": "U9KEbhAGbb8Sz4pnknkdiw",
  "s_hash": "ZhuwN10qQCiVEMUD326qwg"
}
nonce
253nqrRIECvG0CyyNfBCzbN7cj65JDlIpUSXplmGWNw1
2021-10-22 15:35:25 SUCCESS
AddACRClaimToIdTokenClaims
Added acr value to id_token_claims
acr_value
urn:openbanking:psd2:sca
claims
{
  "iss": "https://www.certification.openid.net/test/a/openid-client-JsA4OBya72NBFiTmU8P26/",
  "sub": "user-subject-1234531",
  "aud": "client-id-openid-client-JsA4OBya72NBFiTmU8P26",
  "nonce": "253nqrRIECvG0CyyNfBCzbN7cj65JDlIpUSXplmGWNw1",
  "iat": 1634916925,
  "exp": 1634917225,
  "c_hash": "U9KEbhAGbb8Sz4pnknkdiw",
  "s_hash": "ZhuwN10qQCiVEMUD326qwg",
  "acr": "urn:openbanking:psd2:sca"
}
2021-10-22 15:35:25 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJzTlE4UHBRN1NyNVU1aktDeS1JNWEzRWppNFpSa0xUQXJPMXktSTl3TnFBIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImNsaWVudC1pZC1vcGVuaWQtY2xpZW50LUpzQTRPQnlhNzJOQkZpVG1VOFAyNiIsImNfaGFzaCI6IlU5S0ViaEFHYmI4U3o0cG5rbmtkaXciLCJhY3IiOiJ1cm46b3BlbmJhbmtpbmc6cHNkMjpzY2EiLCJzX2hhc2giOiJaaHV3TjEwcVFDaVZFTVVEMzI2cXdnIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL29wZW5pZC1jbGllbnQtSnNBNE9CeWE3Mk5CRmlUbVU4UDI2XC8iLCJleHAiOjE2MzQ5MTcyMjUsIm5vbmNlIjoiMjUzbnFyUklFQ3ZHMEN5eU5mQkN6Yk43Y2o2NUpEbElwVVNYcGxtR1dOdzEiLCJpYXQiOjE2MzQ5MTY5MjV9.QKDb_8UV6wuthLv9x6_8mIWh5h1TNVOcEa51z9qFx7OL_zoZIgdg377ZiLe1likCYbQFZmH4M1RiWmqeGSLGXohdM3w2jcWdKFGMDk7MaK5jPl4HEUEehiFZ4f34M4lLu8T1rlXXCglgA8HGLGIlUAJqOedpkWq5-GPL-pHWmqwJTRChDccQD5rt_m-BnLI2vzGs7ZXzua-f57NrxjamevG3oLqGQEx4-Ozr3Y3_i77mSINKgCslb4OAa-Yy2d9TflllKa9HGWQ4e97e0vaG18UPZrgdOuQ7EFp0OCnrdUF4iLBq1lGPRj8GT-0aBPC8bpnH8oGroL5qiLG0tKEkcg
2021-10-22 15:35:25 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://openid-client.local/cb",
  "state": "Q8Mne7wLcpLcCoHYpjVEgy5PAKI6mHuCAmrhDjCcyMg"
}
2021-10-22 15:35:25 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://openid-client.local/cb",
  "state": "Q8Mne7wLcpLcCoHYpjVEgy5PAKI6mHuCAmrhDjCcyMg",
  "code": "HfSQOmGq1FUhmXgAWEltaBIfQAJRSBYF"
}
2021-10-22 15:35:25 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://openid-client.local/cb",
  "state": "Q8Mne7wLcpLcCoHYpjVEgy5PAKI6mHuCAmrhDjCcyMg",
  "code": "HfSQOmGq1FUhmXgAWEltaBIfQAJRSBYF",
  "id_token": "eyJraWQiOiJzTlE4UHBRN1NyNVU1aktDeS1JNWEzRWppNFpSa0xUQXJPMXktSTl3TnFBIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImNsaWVudC1pZC1vcGVuaWQtY2xpZW50LUpzQTRPQnlhNzJOQkZpVG1VOFAyNiIsImNfaGFzaCI6IlU5S0ViaEFHYmI4U3o0cG5rbmtkaXciLCJhY3IiOiJ1cm46b3BlbmJhbmtpbmc6cHNkMjpzY2EiLCJzX2hhc2giOiJaaHV3TjEwcVFDaVZFTVVEMzI2cXdnIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL29wZW5pZC1jbGllbnQtSnNBNE9CeWE3Mk5CRmlUbVU4UDI2XC8iLCJleHAiOjE2MzQ5MTcyMjUsIm5vbmNlIjoiMjUzbnFyUklFQ3ZHMEN5eU5mQkN6Yk43Y2o2NUpEbElwVVNYcGxtR1dOdzEiLCJpYXQiOjE2MzQ5MTY5MjV9.QKDb_8UV6wuthLv9x6_8mIWh5h1TNVOcEa51z9qFx7OL_zoZIgdg377ZiLe1likCYbQFZmH4M1RiWmqeGSLGXohdM3w2jcWdKFGMDk7MaK5jPl4HEUEehiFZ4f34M4lLu8T1rlXXCglgA8HGLGIlUAJqOedpkWq5-GPL-pHWmqwJTRChDccQD5rt_m-BnLI2vzGs7ZXzua-f57NrxjamevG3oLqGQEx4-Ozr3Y3_i77mSINKgCslb4OAa-Yy2d9TflllKa9HGWQ4e97e0vaG18UPZrgdOuQ7EFp0OCnrdUF4iLBq1lGPRj8GT-0aBPC8bpnH8oGroL5qiLG0tKEkcg"
}
2021-10-22 15:35:25
SendAuthorizationResponseWithResponseModeFragment
Redirecting back to client
uri
https://openid-client.local/cb#state=Q8Mne7wLcpLcCoHYpjVEgy5PAKI6mHuCAmrhDjCcyMg&code=HfSQOmGq1FUhmXgAWEltaBIfQAJRSBYF&id_token=eyJraWQiOiJzTlE4UHBRN1NyNVU1aktDeS1JNWEzRWppNFpSa0xUQXJPMXktSTl3TnFBIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImNsaWVudC1pZC1vcGVuaWQtY2xpZW50LUpzQTRPQnlhNzJOQkZpVG1VOFAyNiIsImNfaGFzaCI6IlU5S0ViaEFHYmI4U3o0cG5rbmtkaXciLCJhY3IiOiJ1cm46b3BlbmJhbmtpbmc6cHNkMjpzY2EiLCJzX2hhc2giOiJaaHV3TjEwcVFDaVZFTVVEMzI2cXdnIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL29wZW5pZC1jbGllbnQtSnNBNE9CeWE3Mk5CRmlUbVU4UDI2XC8iLCJleHAiOjE2MzQ5MTcyMjUsIm5vbmNlIjoiMjUzbnFyUklFQ3ZHMEN5eU5mQkN6Yk43Y2o2NUpEbElwVVNYcGxtR1dOdzEiLCJpYXQiOjE2MzQ5MTY5MjV9.QKDb_8UV6wuthLv9x6_8mIWh5h1TNVOcEa51z9qFx7OL_zoZIgdg377ZiLe1likCYbQFZmH4M1RiWmqeGSLGXohdM3w2jcWdKFGMDk7MaK5jPl4HEUEehiFZ4f34M4lLu8T1rlXXCglgA8HGLGIlUAJqOedpkWq5-GPL-pHWmqwJTRChDccQD5rt_m-BnLI2vzGs7ZXzua-f57NrxjamevG3oLqGQEx4-Ozr3Y3_i77mSINKgCslb4OAa-Yy2d9TflllKa9HGWQ4e97e0vaG18UPZrgdOuQ7EFp0OCnrdUF4iLBq1lGPRj8GT-0aBPC8bpnH8oGroL5qiLG0tKEkcg
2021-10-22 15:35:25 OUTGOING
fapi1-advanced-final-client-test-invalid-nonce
Response to HTTP request to test instance 4TeeGFOdXUSvIMk
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://openid-client.local/cb#state=Q8Mne7wLcpLcCoHYpjVEgy5PAKI6mHuCAmrhDjCcyMg&code=HfSQOmGq1FUhmXgAWEltaBIfQAJRSBYF&id_token=eyJraWQiOiJzTlE4UHBRN1NyNVU1aktDeS1JNWEzRWppNFpSa0xUQXJPMXktSTl3TnFBIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImNsaWVudC1pZC1vcGVuaWQtY2xpZW50LUpzQTRPQnlhNzJOQkZpVG1VOFAyNiIsImNfaGFzaCI6IlU5S0ViaEFHYmI4U3o0cG5rbmtkaXciLCJhY3IiOiJ1cm46b3BlbmJhbmtpbmc6cHNkMjpzY2EiLCJzX2hhc2giOiJaaHV3TjEwcVFDaVZFTVVEMzI2cXdnIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL29wZW5pZC1jbGllbnQtSnNBNE9CeWE3Mk5CRmlUbVU4UDI2XC8iLCJleHAiOjE2MzQ5MTcyMjUsIm5vbmNlIjoiMjUzbnFyUklFQ3ZHMEN5eU5mQkN6Yk43Y2o2NUpEbElwVVNYcGxtR1dOdzEiLCJpYXQiOjE2MzQ5MTY5MjV9.QKDb_8UV6wuthLv9x6_8mIWh5h1TNVOcEa51z9qFx7OL_zoZIgdg377ZiLe1likCYbQFZmH4M1RiWmqeGSLGXohdM3w2jcWdKFGMDk7MaK5jPl4HEUEehiFZ4f34M4lLu8T1rlXXCglgA8HGLGIlUAJqOedpkWq5-GPL-pHWmqwJTRChDccQD5rt_m-BnLI2vzGs7ZXzua-f57NrxjamevG3oLqGQEx4-Ozr3Y3_i77mSINKgCslb4OAa-Yy2d9TflllKa9HGWQ4e97e0vaG18UPZrgdOuQ7EFp0OCnrdUF4iLBq1lGPRj8GT-0aBPC8bpnH8oGroL5qiLG0tKEkcg]
outgoing_path
authorize
2021-10-22 15:35:26 INCOMING
fapi1-advanced-final-client-test-invalid-nonce
Incoming HTTP request to test instance 4TeeGFOdXUSvIMk
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.9.1 (https://github.com/panva/node-openid-client)",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
jwks
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-10-22 15:35:26 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2021-10-22 15:35:26 OUTGOING
fapi1-advanced-final-client-test-invalid-nonce
Response to HTTP request to test instance 4TeeGFOdXUSvIMk
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "sNQ8PpQ7Sr5U5jKCy-I5a3Eji4ZRkLTArO1y-I9wNqA",
      "alg": "PS256",
      "n": "qOcQIY2N8ybqMv3xhxiG2WMtjszRaAjQfJbzoa88SIl-sqYpGq7E8SMhemccmDi1GeJd-l63w6MeykHb09HytqncFa2EFCvwhZ499MWVp67ePkTH2ltR1wIZ6V2VkVAkBcY3O0AucJVWI3zLlN1TPpeyfEu5pMsAC8zwzUvuaEFwS4IyA7KqRXNsLSdwZpzO0t5g0PTDoklcguLiFaDsiw0y1jqr0f3j4lhekdu1MH9mo2xdm1G6zm52f6LAiPWRPcEPyrCpFiHRSH7zOOCEXHlt-AOaONsaWk936RDQ5EN2qULh27V-3y791CxM1F7qty_2KstvNIHCIR1I3tCbGw"
    }
  ]
}
outgoing_path
jwks
2021-10-22 15:35:30 FINISHED
fapi1-advanced-final-client-test-invalid-nonce
Test has run to completion
testmodule_result
PASSED
2021-10-22 15:35:31
TEST-RUNNER
Alias has now been claimed by another test
alias
openid-client-JsA4OBya72NBFiTmU8P26
new_test_id
O1kcSPmF5oD3SIV
Test Results