Test Summary

Test Results

Expand All Collapse All
All times are UTC
2021-10-22 15:34:58 INFO
TEST-RUNNER
Test instance lTnzpCo9Njgwqme created
baseUrl
https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "by_value",
  "fapi_jarm_type": "plain_oauth",
  "fapi_profile": "plain_fapi",
  "fapi_response_mode": "jarm"
}
alias
openid-client-EJrxc-HRrm7lzM4DXsZTK
description
openid-client v5.x FAPI1 Adv. private_key_jwt, JARM (OAUTH2) RP
planId
NLqXv8wV6KQLo
config
{
  "alias": "openid-client-EJrxc-HRrm7lzM4DXsZTK",
  "description": "openid-client v5.x FAPI1 Adv. private_key_jwt, JARM (OAUTH2) RP",
  "server": {
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "xY9l3VOZc7vdKUwKqVgBV26Q_HyyuksglZPROezdgd13LutVUj_DHuD1aGOS1VMcxevq-qMIvB2ZGb6CphR-1NN_3NgCrUphg7vSe6KqtEdYxQyonWhKmy4hsh0QPyWqfNmlSgUELG8D5S-iM5yEvKErzLl8BvCkEIIT_JZcBMI1Gei_YoI127NUwS25TLn52JjuzmCC1GbAYRpCbuTqhLoY5Zi3G12XSYXyOVPsPX66NaGR-RUOzhaPLlk8Iv7dgXcULjepr4B79uktY9Qf3QEl_np6uuaK4DdfrrI9Yn4qoNkOzVtMdqRWaYQs_5Q_5xQREu56W_v_RdDa-O3ekw",
          "d": "RmNfEcpVZCzNEYesTMW0RKh6M9th-ooF5AU0iITiLwDvE-J5FcLuDDRue3Duwd7I46O4pvArjoqlH80G05F91uo8Jj04RvG3aK4kwjQkyfKZqCtocBzWaA-5pbJBNZ5_7dfF0meTIxmys5eTHPxpNqPd7SUxEW_vpIoUAOy5gF_pNiV4MDhKWSUwsfYLMszxw9PzmSljLnCQFXZDYBtjS_c9XR_hsOa43QouykeAqUiqQVP_-wI-b4_yU7krXAswugWtWgardscpglVjAmLsHYmroHDXPlK5RzNHCqYx0yGdjJU8JnaO2um1vs_veLNDeAeHs7mcpz5EteiPbLNWgQ",
          "p": "4g0kUzUXftRE2WJIryeD3J5hauzqPS6aI-ErmzBSkaXS90Iv7AJN0k4XONXfWO3pEedhvjd3mYCFvmXhn5kTlN8jqBGEC5GoFSA6C3oxFS4POyOR3Rnw1s_5TSSjR9FHI0Q0vBP7w5p969vmbQ2pNUn56vcNBwPxjs6lVWIRqeE",
          "q": "37vvqMme9hNuSUxbrMrCmHMkmSjpc6y7JstWB-U7XlZxrL2OCeklagfgLWZ0yM3691TTHqYHOBs3dqTc7NhCSEq46IIi-DMV_fdjwQTTzWROon6AmLnpzSCHPaYiNMTQ1y-Hb95g5s1G-IxIOwmMLrxLKLn2GhGk9fTSIcjpXvM",
          "dp": "gMUFvVSQJtKayc7AIu76obGjQvrk0Kd8bRX29jeHwapZzDpq_CGv3S5Y8ip7Sbh1PZq2Rlpoigv5pCV7aqQT0IlwUWxw8PovaqFqD2GzFiKf0IuJqw788BGXLYfCb8XapU9UTxN_JsUaGEKzN8pBarbSZDQJusZXU4eKDWKJN2E",
          "dq": "lwaW9Zn8OuHM7Z-ktpQ8HYqEJvst806jGsHhdfzwQXMa0t811UzTW6qrUho6NR6ODYzt4l9yuhXtL6KEG0C0JXaDMTg_gMmDS-dGKBIpIxlV12yLRA0jXLtbb2sI5hQBYXCM_R_gy4vAH6EaVPfR7-5c0cYN8XT9pKW5fuLPXa8",
          "qi": "BPFHx99Ac-aaSxlqNc-4Ohq840jlkrUnNHbI5EC5o5UC3YJXg5NtcYmE-aKDF-Uq6Oz8SGp_KhfXaVf5-d9bejwsPXsWl3C84weKe6SfJqLG-ecpJ_iZ4huzumZsr_lflVq2QJUS0HGQzXAWydPoZH-kdnK-qW7lOcgXJTCC90w",
          "kty": "RSA",
          "kid": "EPei4r9YCgl3vuAXc5ApPbSjqmPz0B7beYD-Z6-CnSY",
          "alg": "PS256",
          "use": "sig"
        }
      ]
    }
  },
  "waitTimeoutSeconds": 2,
  "client": {
    "client_id": "client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK",
    "scope": "All your base are belong to us",
    "redirect_uri": "https://openid-client.local/cb",
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "5TIP8bLvKugoELbMw6AIQjCJjr6CYFj4H9BiaSn0e3nefX3Hf0UgULVbEkUovXk26Z4SDmNmtfCXJpWLQwPrYaE170AaMW5HXKvXe9gr0fr0XcQ2VhtHH4SFoP10dLBgQE54BVdT4cWh0Me5MqrZZiChRsfpfxYu82A_4YhtiZjsYRiI41m9V-P7Yj98uF9nl6-hLChNk6jYXscdCPfCiJRpeWBP6PnSbprx2E9heQSbSCCH3-euOFjkTb6QgQRi9P31vrv89YBBzkIroHF8vWYe-iOwJTfnvRHW15rwCSP_-XWGzujKNNV0K9E03yfS2_vKHC5hojFD2h-AkpjxCw",
          "kty": "RSA",
          "kid": "WCr4A0aY87uYlKf4ceJbCAm0sk3I6bYP0o7IvDVi__M",
          "x5c": [
            "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\u003d"
          ],
          "x5t": "b9esCoaj0QhebyzFQ1zvGE58Z2M",
          "x5t#S256": "0KnnXG5EEu80octWIYseXTBRUkLINigCfHSLkA4AK2w"
        }
      ]
    },
    "certificate": "-----BEGIN CERTIFICATE-----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\r\nFNifdPq0XWEQWRf/R6A\u003d\r\n-----END CERTIFICATE-----\r\n"
  },
  "client2": {
    "client_id": "client2-id-openid-client-EJrxc-HRrm7lzM4DXsZTK",
    "scope": "All your base are belong to us",
    "redirect_uri": "https://openid-client2.local/cb",
    "jwks": {
      "keys": [
        {
          "e": "AQAB",
          "n": "utKS_sa0V3n1ryhQP5PzHY3co7DXNFGjW1_itptpdpLosQMbm28i7JQe6BHrfHkD7i6clWgKbI3IcZlC1__GEsCSttbGt4zH7e6S5NQ0fCjMF0QtqpmAD6QqOD6nDaChSzCEZHZNQY46zh91MjddcT_p1Pg-qmN01QtC6qYXSvFd6nSVLNTxUWsrPyyzCBt33Ex_UmNd875-9nNtQw80zUppkCGKv8QOX_SHPXDoRE8Tb2H4ffoNoPhpTpwK9jgwnkkbvMHhQ-wOhpwJGC5E2CUHScoFtCmBYTRlPQ0GgZ8jwPAOgefZMBhU09jmDFQjGe-ihqTMYUTj87jC4dzLYw",
          "kty": "RSA",
          "kid": "MGyVDyfgFZrqFPIF6vLsmmGUgUY7Rjfzrr8wldpoap0",
          "use": "sig",
          "x5c": [
            "MIIDmjCCAoKgAwIBAgIJUv71GuSV1pE5MA0GCSqGSIb3DQEBBQUAMGkxFDASBgNVBAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWExEzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRlc3QwHhcNMjExMDIyMTUzNDUwWhcNMjIxMDIyMTUzNDUwWjBpMRQwEgYDVQQDEwtleGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYDVQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutKS/sa0V3n1ryhQP5PzHY3co7DXNFGjW1/itptpdpLosQMbm28i7JQe6BHrfHkD7i6clWgKbI3IcZlC1//GEsCSttbGt4zH7e6S5NQ0fCjMF0QtqpmAD6QqOD6nDaChSzCEZHZNQY46zh91MjddcT/p1Pg+qmN01QtC6qYXSvFd6nSVLNTxUWsrPyyzCBt33Ex/UmNd875+9nNtQw80zUppkCGKv8QOX/SHPXDoRE8Tb2H4ffoNoPhpTpwK9jgwnkkbvMHhQ+wOhpwJGC5E2CUHScoFtCmBYTRlPQ0GgZ8jwPAOgefZMBhU09jmDFQjGe+ihqTMYUTj87jC4dzLYwIDAQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhtodHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBAGdqVZrZCHi/rmDW6toQlsWdb5L4GxolGIgO2rYBU2z/OPteA7A2ep4W2Se1ZgV7G/2Ra9nygfn8sxPCPZeiOtJP1RP8KWPX5lBanTS60ETf+qDcQmqPFTBAPAcJ8fF/n4OKOo6dqzRQkssKrescc5OTaCPJX0TCr82a0BcS/DcVLqcAJ15OQ6kRkdopf1yFtvWMD3mjRjBX2R1I9IWxl6ZU8987mUxmIgvtsDhOiUYoSulG8HbsFNxFuXALQPqYLUlrCiJeKAWM9G+KULgdCQET+cDrETl06HCxpxaaLpTx/CyKcrLMGpKQSqw1qfMvs0jDcLHXVnG2rg39JZ0Zs4g\u003d"
          ],
          "x5t": "9A1UEqmA4vpYvWJqxzj_cLJofyg",
          "x5t#S256": "nWxJ4NSHmECVy6I29qhqjRj2Nq95IDl-7vczMzX1CK4"
        },
        {
          "e": "AQAB",
          "n": "xw2Vbwm0-kJqipXy71fk-C1jRblYEeOIMRp_M00Cn5jkWmM63Ogbxi9RDejcXraQiDIUaq4IcwmLYy9cBnITkRqfVcKdscnCF9YxbfNsknGSRU1kad_SR63Pau_ih03i3bPB3-JtGX-8RjqRdP_wR5ktpEapR1Fm4LfIneCYPjS35Sgq91RkPA0G3UaO02haC9aNl9HTiHSQrhH-sxWlbQp8yf8eF3G0Myr_ydGlI2B5k1fMdRDUBsec2RT1eoKngTCI2Gr5XvQ3qzuJqQ2Q11Re0UvtfJZosjsEKsO7WWJcx9lLprd7ZiP2Yj_bTtOeIvDH1JOd-YscO8wfyEpZcw",
          "kty": "RSA",
          "kid": "AwY_YKa4QZP66jzA3EgosPhMAXMV3amCAgD4qSoS7Mg",
          "alg": "RSA-OAEP-256",
          "use": "enc"
        }
      ]
    },
    "id_token_encrypted_response_alg": "RSA-OAEP-256",
    "certificate": "-----BEGIN CERTIFICATE-----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\r\ncLHXVnG2rg39JZ0Zs4g\u003d\r\n-----END CERTIFICATE-----\r\n"
  }
}
testName
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
2021-10-22 15:34:58 SUCCESS
GenerateServerConfigurationMTLS
Created server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/userinfo"
}
issuer
https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/
discoveryUrl
https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/.well-known/openid-configuration
2021-10-22 15:34:58 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_jwks
{
  "keys": [
    {
      "p": "4g0kUzUXftRE2WJIryeD3J5hauzqPS6aI-ErmzBSkaXS90Iv7AJN0k4XONXfWO3pEedhvjd3mYCFvmXhn5kTlN8jqBGEC5GoFSA6C3oxFS4POyOR3Rnw1s_5TSSjR9FHI0Q0vBP7w5p969vmbQ2pNUn56vcNBwPxjs6lVWIRqeE",
      "kty": "RSA",
      "q": "37vvqMme9hNuSUxbrMrCmHMkmSjpc6y7JstWB-U7XlZxrL2OCeklagfgLWZ0yM3691TTHqYHOBs3dqTc7NhCSEq46IIi-DMV_fdjwQTTzWROon6AmLnpzSCHPaYiNMTQ1y-Hb95g5s1G-IxIOwmMLrxLKLn2GhGk9fTSIcjpXvM",
      "d": "RmNfEcpVZCzNEYesTMW0RKh6M9th-ooF5AU0iITiLwDvE-J5FcLuDDRue3Duwd7I46O4pvArjoqlH80G05F91uo8Jj04RvG3aK4kwjQkyfKZqCtocBzWaA-5pbJBNZ5_7dfF0meTIxmys5eTHPxpNqPd7SUxEW_vpIoUAOy5gF_pNiV4MDhKWSUwsfYLMszxw9PzmSljLnCQFXZDYBtjS_c9XR_hsOa43QouykeAqUiqQVP_-wI-b4_yU7krXAswugWtWgardscpglVjAmLsHYmroHDXPlK5RzNHCqYx0yGdjJU8JnaO2um1vs_veLNDeAeHs7mcpz5EteiPbLNWgQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "EPei4r9YCgl3vuAXc5ApPbSjqmPz0B7beYD-Z6-CnSY",
      "qi": "BPFHx99Ac-aaSxlqNc-4Ohq840jlkrUnNHbI5EC5o5UC3YJXg5NtcYmE-aKDF-Uq6Oz8SGp_KhfXaVf5-d9bejwsPXsWl3C84weKe6SfJqLG-ecpJ_iZ4huzumZsr_lflVq2QJUS0HGQzXAWydPoZH-kdnK-qW7lOcgXJTCC90w",
      "dp": "gMUFvVSQJtKayc7AIu76obGjQvrk0Kd8bRX29jeHwapZzDpq_CGv3S5Y8ip7Sbh1PZq2Rlpoigv5pCV7aqQT0IlwUWxw8PovaqFqD2GzFiKf0IuJqw788BGXLYfCb8XapU9UTxN_JsUaGEKzN8pBarbSZDQJusZXU4eKDWKJN2E",
      "alg": "PS256",
      "dq": "lwaW9Zn8OuHM7Z-ktpQ8HYqEJvst806jGsHhdfzwQXMa0t811UzTW6qrUho6NR6ODYzt4l9yuhXtL6KEG0C0JXaDMTg_gMmDS-dGKBIpIxlV12yLRA0jXLtbb2sI5hQBYXCM_R_gy4vAH6EaVPfR7-5c0cYN8XT9pKW5fuLPXa8",
      "n": "xY9l3VOZc7vdKUwKqVgBV26Q_HyyuksglZPROezdgd13LutVUj_DHuD1aGOS1VMcxevq-qMIvB2ZGb6CphR-1NN_3NgCrUphg7vSe6KqtEdYxQyonWhKmy4hsh0QPyWqfNmlSgUELG8D5S-iM5yEvKErzLl8BvCkEIIT_JZcBMI1Gei_YoI127NUwS25TLn52JjuzmCC1GbAYRpCbuTqhLoY5Zi3G12XSYXyOVPsPX66NaGR-RUOzhaPLlk8Iv7dgXcULjepr4B79uktY9Qf3QEl_np6uuaK4DdfrrI9Yn4qoNkOzVtMdqRWaYQs_5Q_5xQREu56W_v_RdDa-O3ekw"
    }
  ]
}
server_encryption_keys
{}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "EPei4r9YCgl3vuAXc5ApPbSjqmPz0B7beYD-Z6-CnSY",
      "alg": "PS256",
      "n": "xY9l3VOZc7vdKUwKqVgBV26Q_HyyuksglZPROezdgd13LutVUj_DHuD1aGOS1VMcxevq-qMIvB2ZGb6CphR-1NN_3NgCrUphg7vSe6KqtEdYxQyonWhKmy4hsh0QPyWqfNmlSgUELG8D5S-iM5yEvKErzLl8BvCkEIIT_JZcBMI1Gei_YoI127NUwS25TLn52JjuzmCC1GbAYRpCbuTqhLoY5Zi3G12XSYXyOVPsPX66NaGR-RUOzhaPLlk8Iv7dgXcULjepr4B79uktY9Qf3QEl_np6uuaK4DdfrrI9Yn4qoNkOzVtMdqRWaYQs_5Q_5xQREu56W_v_RdDa-O3ekw"
    }
  ]
}
2021-10-22 15:34:58 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-10-22 15:34:58 SUCCESS
ExtractServerSigningAlg
Successfully extracted algorithm
signing_algorithm
PS256
2021-10-22 15:34:58
SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly
Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration
server_configuration
{
  "issuer": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/userinfo",
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ]
}
2021-10-22 15:34:58 SUCCESS
AddResponseTypeCodeToServerConfiguration
Added code as response type supported
response_types_supported
[
  "code"
]
2021-10-22 15:34:58 SUCCESS
AddJARMResponseModeToServerConfiguration
Added jwt as response_modes_supported
response_modes_supported
[
  "jwt"
]
2021-10-22 15:34:58 SUCCESS
AddAuthorizationSigningAlgValuesSupportedToServerConfiguration
Added authorization_signing_alg_values_supported to server configuration
alg_values
[
  "PS256"
]
2021-10-22 15:34:58 SUCCESS
FAPIAddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
values
[
  "PS256",
  "ES256"
]
2021-10-22 15:34:58 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2021-10-22 15:34:58 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "p": "4g0kUzUXftRE2WJIryeD3J5hauzqPS6aI-ErmzBSkaXS90Iv7AJN0k4XONXfWO3pEedhvjd3mYCFvmXhn5kTlN8jqBGEC5GoFSA6C3oxFS4POyOR3Rnw1s_5TSSjR9FHI0Q0vBP7w5p969vmbQ2pNUn56vcNBwPxjs6lVWIRqeE",
      "kty": "RSA",
      "q": "37vvqMme9hNuSUxbrMrCmHMkmSjpc6y7JstWB-U7XlZxrL2OCeklagfgLWZ0yM3691TTHqYHOBs3dqTc7NhCSEq46IIi-DMV_fdjwQTTzWROon6AmLnpzSCHPaYiNMTQ1y-Hb95g5s1G-IxIOwmMLrxLKLn2GhGk9fTSIcjpXvM",
      "d": "RmNfEcpVZCzNEYesTMW0RKh6M9th-ooF5AU0iITiLwDvE-J5FcLuDDRue3Duwd7I46O4pvArjoqlH80G05F91uo8Jj04RvG3aK4kwjQkyfKZqCtocBzWaA-5pbJBNZ5_7dfF0meTIxmys5eTHPxpNqPd7SUxEW_vpIoUAOy5gF_pNiV4MDhKWSUwsfYLMszxw9PzmSljLnCQFXZDYBtjS_c9XR_hsOa43QouykeAqUiqQVP_-wI-b4_yU7krXAswugWtWgardscpglVjAmLsHYmroHDXPlK5RzNHCqYx0yGdjJU8JnaO2um1vs_veLNDeAeHs7mcpz5EteiPbLNWgQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "EPei4r9YCgl3vuAXc5ApPbSjqmPz0B7beYD-Z6-CnSY",
      "qi": "BPFHx99Ac-aaSxlqNc-4Ohq840jlkrUnNHbI5EC5o5UC3YJXg5NtcYmE-aKDF-Uq6Oz8SGp_KhfXaVf5-d9bejwsPXsWl3C84weKe6SfJqLG-ecpJ_iZ4huzumZsr_lflVq2QJUS0HGQzXAWydPoZH-kdnK-qW7lOcgXJTCC90w",
      "dp": "gMUFvVSQJtKayc7AIu76obGjQvrk0Kd8bRX29jeHwapZzDpq_CGv3S5Y8ip7Sbh1PZq2Rlpoigv5pCV7aqQT0IlwUWxw8PovaqFqD2GzFiKf0IuJqw788BGXLYfCb8XapU9UTxN_JsUaGEKzN8pBarbSZDQJusZXU4eKDWKJN2E",
      "alg": "PS256",
      "dq": "lwaW9Zn8OuHM7Z-ktpQ8HYqEJvst806jGsHhdfzwQXMa0t811UzTW6qrUho6NR6ODYzt4l9yuhXtL6KEG0C0JXaDMTg_gMmDS-dGKBIpIxlV12yLRA0jXLtbb2sI5hQBYXCM_R_gy4vAH6EaVPfR7-5c0cYN8XT9pKW5fuLPXa8",
      "n": "xY9l3VOZc7vdKUwKqVgBV26Q_HyyuksglZPROezdgd13LutVUj_DHuD1aGOS1VMcxevq-qMIvB2ZGb6CphR-1NN_3NgCrUphg7vSe6KqtEdYxQyonWhKmy4hsh0QPyWqfNmlSgUELG8D5S-iM5yEvKErzLl8BvCkEIIT_JZcBMI1Gei_YoI127NUwS25TLn52JjuzmCC1GbAYRpCbuTqhLoY5Zi3G12XSYXyOVPsPX66NaGR-RUOzhaPLlk8Iv7dgXcULjepr4B79uktY9Qf3QEl_np6uuaK4DdfrrI9Yn4qoNkOzVtMdqRWaYQs_5Q_5xQREu56W_v_RdDa-O3ekw"
    }
  ]
}
2021-10-22 15:34:58 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
Verify configuration of first client
2021-10-22 15:34:58 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK
scope
All your base are belong to us
redirect_uri
https://openid-client.local/cb
jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "5TIP8bLvKugoELbMw6AIQjCJjr6CYFj4H9BiaSn0e3nefX3Hf0UgULVbEkUovXk26Z4SDmNmtfCXJpWLQwPrYaE170AaMW5HXKvXe9gr0fr0XcQ2VhtHH4SFoP10dLBgQE54BVdT4cWh0Me5MqrZZiChRsfpfxYu82A_4YhtiZjsYRiI41m9V-P7Yj98uF9nl6-hLChNk6jYXscdCPfCiJRpeWBP6PnSbprx2E9heQSbSCCH3-euOFjkTb6QgQRi9P31vrv89YBBzkIroHF8vWYe-iOwJTfnvRHW15rwCSP_-XWGzujKNNV0K9E03yfS2_vKHC5hojFD2h-AkpjxCw",
      "kty": "RSA",
      "kid": "WCr4A0aY87uYlKf4ceJbCAm0sk3I6bYP0o7IvDVi__M",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "b9esCoaj0QhebyzFQ1zvGE58Z2M",
      "x5t#S256": "0KnnXG5EEu80octWIYseXTBRUkLINigCfHSLkA4AK2w"
    }
  ]
}
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-10-22 15:34:58 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-10-22 15:34:58 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "5TIP8bLvKugoELbMw6AIQjCJjr6CYFj4H9BiaSn0e3nefX3Hf0UgULVbEkUovXk26Z4SDmNmtfCXJpWLQwPrYaE170AaMW5HXKvXe9gr0fr0XcQ2VhtHH4SFoP10dLBgQE54BVdT4cWh0Me5MqrZZiChRsfpfxYu82A_4YhtiZjsYRiI41m9V-P7Yj98uF9nl6-hLChNk6jYXscdCPfCiJRpeWBP6PnSbprx2E9heQSbSCCH3-euOFjkTb6QgQRi9P31vrv89YBBzkIroHF8vWYe-iOwJTfnvRHW15rwCSP_-XWGzujKNNV0K9E03yfS2_vKHC5hojFD2h-AkpjxCw",
      "kty": "RSA",
      "kid": "WCr4A0aY87uYlKf4ceJbCAm0sk3I6bYP0o7IvDVi__M",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "b9esCoaj0QhebyzFQ1zvGE58Z2M",
      "x5t#S256": "0KnnXG5EEu80octWIYseXTBRUkLINigCfHSLkA4AK2w"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "x5t#S256": "0KnnXG5EEu80octWIYseXTBRUkLINigCfHSLkA4AK2w",
      "e": "AQAB",
      "x5t": "b9esCoaj0QhebyzFQ1zvGE58Z2M",
      "kid": "WCr4A0aY87uYlKf4ceJbCAm0sk3I6bYP0o7IvDVi__M",
      "x5c": [
        "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\u003d"
      ],
      "n": "5TIP8bLvKugoELbMw6AIQjCJjr6CYFj4H9BiaSn0e3nefX3Hf0UgULVbEkUovXk26Z4SDmNmtfCXJpWLQwPrYaE170AaMW5HXKvXe9gr0fr0XcQ2VhtHH4SFoP10dLBgQE54BVdT4cWh0Me5MqrZZiChRsfpfxYu82A_4YhtiZjsYRiI41m9V-P7Yj98uF9nl6-hLChNk6jYXscdCPfCiJRpeWBP6PnSbprx2E9heQSbSCCH3-euOFjkTb6QgQRi9P31vrv89YBBzkIroHF8vWYe-iOwJTfnvRHW15rwCSP_-XWGzujKNNV0K9E03yfS2_vKHC5hojFD2h-AkpjxCw"
    }
  ]
}
2021-10-22 15:34:58 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-10-22 15:34:58 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-10-22 15:34:58 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "5TIP8bLvKugoELbMw6AIQjCJjr6CYFj4H9BiaSn0e3nefX3Hf0UgULVbEkUovXk26Z4SDmNmtfCXJpWLQwPrYaE170AaMW5HXKvXe9gr0fr0XcQ2VhtHH4SFoP10dLBgQE54BVdT4cWh0Me5MqrZZiChRsfpfxYu82A_4YhtiZjsYRiI41m9V-P7Yj98uF9nl6-hLChNk6jYXscdCPfCiJRpeWBP6PnSbprx2E9heQSbSCCH3-euOFjkTb6QgQRi9P31vrv89YBBzkIroHF8vWYe-iOwJTfnvRHW15rwCSP_-XWGzujKNNV0K9E03yfS2_vKHC5hojFD2h-AkpjxCw",
      "kty": "RSA",
      "kid": "WCr4A0aY87uYlKf4ceJbCAm0sk3I6bYP0o7IvDVi__M",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "b9esCoaj0QhebyzFQ1zvGE58Z2M",
      "x5t#S256": "0KnnXG5EEu80octWIYseXTBRUkLINigCfHSLkA4AK2w"
    }
  ]
}
Verify configuration of second client
2021-10-22 15:34:58 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
client2-id-openid-client-EJrxc-HRrm7lzM4DXsZTK
scope
All your base are belong to us
redirect_uri
https://openid-client2.local/cb
jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "utKS_sa0V3n1ryhQP5PzHY3co7DXNFGjW1_itptpdpLosQMbm28i7JQe6BHrfHkD7i6clWgKbI3IcZlC1__GEsCSttbGt4zH7e6S5NQ0fCjMF0QtqpmAD6QqOD6nDaChSzCEZHZNQY46zh91MjddcT_p1Pg-qmN01QtC6qYXSvFd6nSVLNTxUWsrPyyzCBt33Ex_UmNd875-9nNtQw80zUppkCGKv8QOX_SHPXDoRE8Tb2H4ffoNoPhpTpwK9jgwnkkbvMHhQ-wOhpwJGC5E2CUHScoFtCmBYTRlPQ0GgZ8jwPAOgefZMBhU09jmDFQjGe-ihqTMYUTj87jC4dzLYw",
      "kty": "RSA",
      "kid": "MGyVDyfgFZrqFPIF6vLsmmGUgUY7Rjfzrr8wldpoap0",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "9A1UEqmA4vpYvWJqxzj_cLJofyg",
      "x5t#S256": "nWxJ4NSHmECVy6I29qhqjRj2Nq95IDl-7vczMzX1CK4"
    },
    {
      "e": "AQAB",
      "n": "xw2Vbwm0-kJqipXy71fk-C1jRblYEeOIMRp_M00Cn5jkWmM63Ogbxi9RDejcXraQiDIUaq4IcwmLYy9cBnITkRqfVcKdscnCF9YxbfNsknGSRU1kad_SR63Pau_ih03i3bPB3-JtGX-8RjqRdP_wR5ktpEapR1Fm4LfIneCYPjS35Sgq91RkPA0G3UaO02haC9aNl9HTiHSQrhH-sxWlbQp8yf8eF3G0Myr_ydGlI2B5k1fMdRDUBsec2RT1eoKngTCI2Gr5XvQ3qzuJqQ2Q11Re0UvtfJZosjsEKsO7WWJcx9lLprd7ZiP2Yj_bTtOeIvDH1JOd-YscO8wfyEpZcw",
      "kty": "RSA",
      "kid": "AwY_YKa4QZP66jzA3EgosPhMAXMV3amCAgD4qSoS7Mg",
      "alg": "RSA-OAEP-256",
      "use": "enc"
    }
  ]
}
id_token_encrypted_response_alg
RSA-OAEP-256
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-10-22 15:34:58 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2021-10-22 15:34:58 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "utKS_sa0V3n1ryhQP5PzHY3co7DXNFGjW1_itptpdpLosQMbm28i7JQe6BHrfHkD7i6clWgKbI3IcZlC1__GEsCSttbGt4zH7e6S5NQ0fCjMF0QtqpmAD6QqOD6nDaChSzCEZHZNQY46zh91MjddcT_p1Pg-qmN01QtC6qYXSvFd6nSVLNTxUWsrPyyzCBt33Ex_UmNd875-9nNtQw80zUppkCGKv8QOX_SHPXDoRE8Tb2H4ffoNoPhpTpwK9jgwnkkbvMHhQ-wOhpwJGC5E2CUHScoFtCmBYTRlPQ0GgZ8jwPAOgefZMBhU09jmDFQjGe-ihqTMYUTj87jC4dzLYw",
      "kty": "RSA",
      "kid": "MGyVDyfgFZrqFPIF6vLsmmGUgUY7Rjfzrr8wldpoap0",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "9A1UEqmA4vpYvWJqxzj_cLJofyg",
      "x5t#S256": "nWxJ4NSHmECVy6I29qhqjRj2Nq95IDl-7vczMzX1CK4"
    },
    {
      "e": "AQAB",
      "n": "xw2Vbwm0-kJqipXy71fk-C1jRblYEeOIMRp_M00Cn5jkWmM63Ogbxi9RDejcXraQiDIUaq4IcwmLYy9cBnITkRqfVcKdscnCF9YxbfNsknGSRU1kad_SR63Pau_ih03i3bPB3-JtGX-8RjqRdP_wR5ktpEapR1Fm4LfIneCYPjS35Sgq91RkPA0G3UaO02haC9aNl9HTiHSQrhH-sxWlbQp8yf8eF3G0Myr_ydGlI2B5k1fMdRDUBsec2RT1eoKngTCI2Gr5XvQ3qzuJqQ2Q11Re0UvtfJZosjsEKsO7WWJcx9lLprd7ZiP2Yj_bTtOeIvDH1JOd-YscO8wfyEpZcw",
      "kty": "RSA",
      "kid": "AwY_YKa4QZP66jzA3EgosPhMAXMV3amCAgD4qSoS7Mg",
      "alg": "RSA-OAEP-256",
      "use": "enc"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "x5t#S256": "nWxJ4NSHmECVy6I29qhqjRj2Nq95IDl-7vczMzX1CK4",
      "e": "AQAB",
      "use": "sig",
      "x5t": "9A1UEqmA4vpYvWJqxzj_cLJofyg",
      "kid": "MGyVDyfgFZrqFPIF6vLsmmGUgUY7Rjfzrr8wldpoap0",
      "x5c": [
        "MIIDmjCCAoKgAwIBAgIJUv71GuSV1pE5MA0GCSqGSIb3DQEBBQUAMGkxFDASBgNVBAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWExEzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRlc3QwHhcNMjExMDIyMTUzNDUwWhcNMjIxMDIyMTUzNDUwWjBpMRQwEgYDVQQDEwtleGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYDVQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutKS/sa0V3n1ryhQP5PzHY3co7DXNFGjW1/itptpdpLosQMbm28i7JQe6BHrfHkD7i6clWgKbI3IcZlC1//GEsCSttbGt4zH7e6S5NQ0fCjMF0QtqpmAD6QqOD6nDaChSzCEZHZNQY46zh91MjddcT/p1Pg+qmN01QtC6qYXSvFd6nSVLNTxUWsrPyyzCBt33Ex/UmNd875+9nNtQw80zUppkCGKv8QOX/SHPXDoRE8Tb2H4ffoNoPhpTpwK9jgwnkkbvMHhQ+wOhpwJGC5E2CUHScoFtCmBYTRlPQ0GgZ8jwPAOgefZMBhU09jmDFQjGe+ihqTMYUTj87jC4dzLYwIDAQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhtodHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBAGdqVZrZCHi/rmDW6toQlsWdb5L4GxolGIgO2rYBU2z/OPteA7A2ep4W2Se1ZgV7G/2Ra9nygfn8sxPCPZeiOtJP1RP8KWPX5lBanTS60ETf+qDcQmqPFTBAPAcJ8fF/n4OKOo6dqzRQkssKrescc5OTaCPJX0TCr82a0BcS/DcVLqcAJ15OQ6kRkdopf1yFtvWMD3mjRjBX2R1I9IWxl6ZU8987mUxmIgvtsDhOiUYoSulG8HbsFNxFuXALQPqYLUlrCiJeKAWM9G+KULgdCQET+cDrETl06HCxpxaaLpTx/CyKcrLMGpKQSqw1qfMvs0jDcLHXVnG2rg39JZ0Zs4g\u003d"
      ],
      "n": "utKS_sa0V3n1ryhQP5PzHY3co7DXNFGjW1_itptpdpLosQMbm28i7JQe6BHrfHkD7i6clWgKbI3IcZlC1__GEsCSttbGt4zH7e6S5NQ0fCjMF0QtqpmAD6QqOD6nDaChSzCEZHZNQY46zh91MjddcT_p1Pg-qmN01QtC6qYXSvFd6nSVLNTxUWsrPyyzCBt33Ex_UmNd875-9nNtQw80zUppkCGKv8QOX_SHPXDoRE8Tb2H4ffoNoPhpTpwK9jgwnkkbvMHhQ-wOhpwJGC5E2CUHScoFtCmBYTRlPQ0GgZ8jwPAOgefZMBhU09jmDFQjGe-ihqTMYUTj87jC4dzLYw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "AwY_YKa4QZP66jzA3EgosPhMAXMV3amCAgD4qSoS7Mg",
      "alg": "RSA-OAEP-256",
      "n": "xw2Vbwm0-kJqipXy71fk-C1jRblYEeOIMRp_M00Cn5jkWmM63Ogbxi9RDejcXraQiDIUaq4IcwmLYy9cBnITkRqfVcKdscnCF9YxbfNsknGSRU1kad_SR63Pau_ih03i3bPB3-JtGX-8RjqRdP_wR5ktpEapR1Fm4LfIneCYPjS35Sgq91RkPA0G3UaO02haC9aNl9HTiHSQrhH-sxWlbQp8yf8eF3G0Myr_ydGlI2B5k1fMdRDUBsec2RT1eoKngTCI2Gr5XvQ3qzuJqQ2Q11Re0UvtfJZosjsEKsO7WWJcx9lLprd7ZiP2Yj_bTtOeIvDH1JOd-YscO8wfyEpZcw"
    }
  ]
}
2021-10-22 15:34:58 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2021-10-22 15:34:58 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2021-10-22 15:34:58 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "e": "AQAB",
      "n": "utKS_sa0V3n1ryhQP5PzHY3co7DXNFGjW1_itptpdpLosQMbm28i7JQe6BHrfHkD7i6clWgKbI3IcZlC1__GEsCSttbGt4zH7e6S5NQ0fCjMF0QtqpmAD6QqOD6nDaChSzCEZHZNQY46zh91MjddcT_p1Pg-qmN01QtC6qYXSvFd6nSVLNTxUWsrPyyzCBt33Ex_UmNd875-9nNtQw80zUppkCGKv8QOX_SHPXDoRE8Tb2H4ffoNoPhpTpwK9jgwnkkbvMHhQ-wOhpwJGC5E2CUHScoFtCmBYTRlPQ0GgZ8jwPAOgefZMBhU09jmDFQjGe-ihqTMYUTj87jC4dzLYw",
      "kty": "RSA",
      "kid": "MGyVDyfgFZrqFPIF6vLsmmGUgUY7Rjfzrr8wldpoap0",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "x5t": "9A1UEqmA4vpYvWJqxzj_cLJofyg",
      "x5t#S256": "nWxJ4NSHmECVy6I29qhqjRj2Nq95IDl-7vczMzX1CK4"
    },
    {
      "e": "AQAB",
      "n": "xw2Vbwm0-kJqipXy71fk-C1jRblYEeOIMRp_M00Cn5jkWmM63Ogbxi9RDejcXraQiDIUaq4IcwmLYy9cBnITkRqfVcKdscnCF9YxbfNsknGSRU1kad_SR63Pau_ih03i3bPB3-JtGX-8RjqRdP_wR5ktpEapR1Fm4LfIneCYPjS35Sgq91RkPA0G3UaO02haC9aNl9HTiHSQrhH-sxWlbQp8yf8eF3G0Myr_ydGlI2B5k1fMdRDUBsec2RT1eoKngTCI2Gr5XvQ3qzuJqQ2Q11Re0UvtfJZosjsEKsO7WWJcx9lLprd7ZiP2Yj_bTtOeIvDH1JOd-YscO8wfyEpZcw",
      "kty": "RSA",
      "kid": "AwY_YKa4QZP66jzA3EgosPhMAXMV3amCAgD4qSoS7Mg",
      "alg": "RSA-OAEP-256",
      "use": "enc"
    }
  ]
}
2021-10-22 15:34:58
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Setup Done
2021-10-22 15:34:59 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to test instance lTnzpCo9Njgwqme
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.9.1 (https://github.com/panva/node-openid-client)",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-10-22 15:34:59 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2021-10-22 15:34:59 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance lTnzpCo9Njgwqme
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/authorize",
  "token_endpoint": "https://www.certification.openid.net/test-mtls/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/userinfo",
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code"
  ],
  "response_modes_supported": [
    "jwt"
  ],
  "authorization_signing_alg_values_supported": [
    "PS256"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256",
    "ES256"
  ]
}
outgoing_path
.well-known/openid-configuration
2021-10-22 15:34:59 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to test instance lTnzpCo9Njgwqme
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "got (https://github.com/sindresorhus/got)",
  "accept-encoding": "gzip, deflate, br",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
authorize
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{
  "client_id": "client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK",
  "scope": "openid",
  "response_type": "code",
  "redirect_uri": "https://openid-client.local/cb",
  "state": "jHBu3Tjz81DtZY0ottbI7zSijSGmAoph2TcovK0hb-8",
  "request": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJXQ3I0QTBhWTg3dVlsS2Y0Y2VKYkNBbTBzazNJNmJZUDBvN0l2RFZpX19NIn0.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.cwyPw2shtu-Z3kTfYn0a6yWCx6wEBRsbwag3JSz-qgb0l1geTBdKmXkRhCCEhf9O6gDIPlvM7_5U7Bai8aFx0tkZ2hNRQH1GM12lWvHrtMvnoiD3ZmVdfDRGujPtU4_ijtVY_FwyvBd_PmRAvyi3LTKpns3BwhMDzBITvccdAUCliotIB4yxwSIid8Rxa9JTOEZw7oFjTiW8-K-_Vwr5cVoYRJ-W1OEP8DzLg0E6301ccAVTLlhRJ5ZxXSGp16O1JlcMrMRdlBLcf5omp7ZwArzg2ncds19bPVBmVCwOTLmDy0UlEHCzCA7N7JEMvM3j8yO-sYCgoCjC8E6Zs4pIQg"
}
incoming_body
2021-10-22 15:34:59 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Authorization endpoint
2021-10-22 15:34:59 SUCCESS
ExtractRequestObject
Parsed request object
request_object
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJXQ3I0QTBhWTg3dVlsS2Y0Y2VKYkNBbTBzazNJNmJZUDBvN0l2RFZpX19NIn0.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.cwyPw2shtu-Z3kTfYn0a6yWCx6wEBRsbwag3JSz-qgb0l1geTBdKmXkRhCCEhf9O6gDIPlvM7_5U7Bai8aFx0tkZ2hNRQH1GM12lWvHrtMvnoiD3ZmVdfDRGujPtU4_ijtVY_FwyvBd_PmRAvyi3LTKpns3BwhMDzBITvccdAUCliotIB4yxwSIid8Rxa9JTOEZw7oFjTiW8-K-_Vwr5cVoYRJ-W1OEP8DzLg0E6301ccAVTLlhRJ5ZxXSGp16O1JlcMrMRdlBLcf5omp7ZwArzg2ncds19bPVBmVCwOTLmDy0UlEHCzCA7N7JEMvM3j8yO-sYCgoCjC8E6Zs4pIQg",
  "header": {
    "kid": "WCr4A0aY87uYlKf4ceJbCAm0sk3I6bYP0o7IvDVi__M",
    "typ": "oauth-authz-req+jwt",
    "alg": "PS256"
  },
  "claims": {
    "aud": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/",
    "nbf": 1634916899,
    "scope": "All your base are belong to us",
    "iss": "client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK",
    "response_type": "code",
    "redirect_uri": "https://openid-client.local/cb",
    "state": "jHBu3Tjz81DtZY0ottbI7zSijSGmAoph2TcovK0hb-8",
    "exp": 1634917199,
    "iat": 1634916899,
    "client_id": "client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK",
    "jti": "xX3AWYoubNZHDAFCv849d83hfyKoK3HUjU5z1dR3AlM"
  }
}
2021-10-22 15:34:59 INFO
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
path
jwe_header
mapped
object
authorization_request_object
2021-10-22 15:34:59 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK",
  "scope": "All your base are belong to us",
  "response_type": "code",
  "redirect_uri": "https://openid-client.local/cb",
  "state": "jHBu3Tjz81DtZY0ottbI7zSijSGmAoph2TcovK0hb-8",
  "request": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJXQ3I0QTBhWTg3dVlsS2Y0Y2VKYkNBbTBzazNJNmJZUDBvN0l2RFZpX19NIn0.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.cwyPw2shtu-Z3kTfYn0a6yWCx6wEBRsbwag3JSz-qgb0l1geTBdKmXkRhCCEhf9O6gDIPlvM7_5U7Bai8aFx0tkZ2hNRQH1GM12lWvHrtMvnoiD3ZmVdfDRGujPtU4_ijtVY_FwyvBd_PmRAvyi3LTKpns3BwhMDzBITvccdAUCliotIB4yxwSIid8Rxa9JTOEZw7oFjTiW8-K-_Vwr5cVoYRJ-W1OEP8DzLg0E6301ccAVTLlhRJ5ZxXSGp16O1JlcMrMRdlBLcf5omp7ZwArzg2ncds19bPVBmVCwOTLmDy0UlEHCzCA7N7JEMvM3j8yO-sYCgoCjC8E6Zs4pIQg",
  "aud": "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/",
  "nbf": 1634916899,
  "iss": "client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK",
  "exp": 1634917199,
  "iat": 1634916899,
  "jti": "xX3AWYoubNZHDAFCv849d83hfyKoK3HUjU5z1dR3AlM"
}
2021-10-22 15:34:59 SUCCESS
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
alg
PS256
2021-10-22 15:34:59 SUCCESS
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Oct 22, 2021, 3:39:59 PM"
2021-10-22 15:34:59 SUCCESS
FAPI1AdvancedValidateRequestObjectNBFClaim
nbf claim is valid
nbf
"Oct 22, 2021, 3:34:59 PM"
now
"Oct 22, 2021, 3:34:59 PM"
2021-10-22 15:34:59
ValidateRequestObjectClaims
Request object does not contain a max_age claim
2021-10-22 15:34:59 SUCCESS
ValidateRequestObjectClaims
Request object claims passed all validation checks
2021-10-22 15:34:59 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2021-10-22 15:34:59 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2021-10-22 15:34:59 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2021-10-22 15:34:59 SUCCESS
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
request_object
eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJXQ3I0QTBhWTg3dVlsS2Y0Y2VKYkNBbTBzazNJNmJZUDBvN0l2RFZpX19NIn0.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.cwyPw2shtu-Z3kTfYn0a6yWCx6wEBRsbwag3JSz-qgb0l1geTBdKmXkRhCCEhf9O6gDIPlvM7_5U7Bai8aFx0tkZ2hNRQH1GM12lWvHrtMvnoiD3ZmVdfDRGujPtU4_ijtVY_FwyvBd_PmRAvyi3LTKpns3BwhMDzBITvccdAUCliotIB4yxwSIid8Rxa9JTOEZw7oFjTiW8-K-_Vwr5cVoYRJ-W1OEP8DzLg0E6301ccAVTLlhRJ5ZxXSGp16O1JlcMrMRdlBLcf5omp7ZwArzg2ncds19bPVBmVCwOTLmDy0UlEHCzCA7N7JEMvM3j8yO-sYCgoCjC8E6Zs4pIQg
request_object_signing_alg
PS256
jwk
Sun RSA public key, 2048 bits
  params: null
  modulus: 28933258468458202829123845872847942566352327082609057618401786217227768768776445629416227418213371044048125483056044045379032647505995184961474724297399385171936477276762586584222154716069957463286314890928822590244080497993110423294970987778356230178893434894321565276697951654535841802837072923781589767178291836776776669062532527584822991299108827136926963527887547431207984262204594162065804021506428229505186574562979191839972321584443712469577705027114639177039882020971275045844415458129733802145292623668721111510457205381412513344669227236576159283451829352426622959573062239059716352467034447994802520256779
  public exponent: 65537
2021-10-22 15:34:59 SUCCESS
EnsureMatchingRedirectUriInRequestObject
Redirect URI matched
actual
https://openid-client.local/cb
2021-10-22 15:34:59 SUCCESS
EnsureRequiredAuthorizationRequestParametersMatchRequestObject
Required http request parameters match request object claims
response_type
code
client_id
client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK
2021-10-22 15:34:59 SUCCESS
EnsureOptionalAuthorizationRequestParametersMatchRequestObject
All http request parameters and request object claims match
2021-10-22 15:34:59 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
All your base are belong to us
2021-10-22 15:34:59 SUCCESS
EnsureRequestedScopeIsEqualToConfiguredScope
Requested scopes match configured scopes
scope
All your base are belong to us
2021-10-22 15:34:59 SUCCESS
EnsureResponseTypeIsCode
Response type is expected value
expected
code
2021-10-22 15:34:59 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK
2021-10-22 15:34:59 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
yAFoEwB8MRVkkPMiSDoqwqrFhJ8aOZjy
2021-10-22 15:34:59 SUCCESS
EnsureAuthorizationRequestContainsStateParameter
Found state parameter
state
jHBu3Tjz81DtZY0ottbI7zSijSGmAoph2TcovK0hb-8
2021-10-22 15:34:59 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://openid-client.local/cb",
  "state": "jHBu3Tjz81DtZY0ottbI7zSijSGmAoph2TcovK0hb-8"
}
2021-10-22 15:34:59 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://openid-client.local/cb",
  "state": "jHBu3Tjz81DtZY0ottbI7zSijSGmAoph2TcovK0hb-8",
  "code": "yAFoEwB8MRVkkPMiSDoqwqrFhJ8aOZjy"
}
2021-10-22 15:34:59
GenerateJARMResponseClaims
Created JARM response claims
iss
https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/
aud
client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK
code
yAFoEwB8MRVkkPMiSDoqwqrFhJ8aOZjy
state
jHBu3Tjz81DtZY0ottbI7zSijSGmAoph2TcovK0hb-8
exp
1634917499
2021-10-22 15:34:59 SUCCESS
SignJARMResponse
Signed the JARM response
jarm_response
eyJraWQiOiJFUGVpNHI5WUNnbDN2dUFYYzVBcFBiU2pxbVB6MEI3YmVZRC1aNi1DblNZIiwiYWxnIjoiUFMyNTYifQ.eyJhdWQiOiJjbGllbnQtaWQtb3BlbmlkLWNsaWVudC1FSnJ4Yy1IUnJtN2x6TTREWHNaVEsiLCJjb2RlIjoieUFGb0V3QjhNUlZra1BNaVNEb3F3cXJGaEo4YU9aankiLCJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvb3BlbmlkLWNsaWVudC1FSnJ4Yy1IUnJtN2x6TTREWHNaVEtcLyIsInN0YXRlIjoiakhCdTNUano4MUR0Wlkwb3R0Ykk3elNpalNHbUFvcGgyVGNvdkswaGItOCIsImV4cCI6MTYzNDkxNzQ5OX0.GlYrnLZ4XmBODeYb4QH93Lzb71rPoG9b3HGFb7ba5E0W9nOq4kfHR2RvET_RMAGMTOXvWeQs0pkTae3rH1E-6H96FlyUgs9fCEtpciDl2uoyF8SaDHyCPNppYdrKrH18NS-21DoN40-Xx_OZrvPhdFSl-Dn48ee8QLWZH1d3FmxkC6OzxYpZXCRzdlvLREtaLoi7XM_8XV4z5WD45dNNVq_Ibuup3fC83M2rkBCVwNhmlnalq3Uq_aNDjmQcURNqWMtSDxFlXaFz2h4EK7OihXcI6HBZzVqqeaX8HpnrWFCVuLeFq32PJHStpy1hcXALh2co8tEEs1kmbhqcghQpeQ
2021-10-22 15:34:59 INFO
EncryptJARMResponse
Skipped evaluation due to missing required element: client authorization_encrypted_response_alg
path
authorization_encrypted_response_alg
mapped
object
client
2021-10-22 15:34:59
SendJARMResponseWitResponseModeQuery
Redirecting back to client
uri
https://openid-client.local/cb?response=eyJraWQiOiJFUGVpNHI5WUNnbDN2dUFYYzVBcFBiU2pxbVB6MEI3YmVZRC1aNi1DblNZIiwiYWxnIjoiUFMyNTYifQ.eyJhdWQiOiJjbGllbnQtaWQtb3BlbmlkLWNsaWVudC1FSnJ4Yy1IUnJtN2x6TTREWHNaVEsiLCJjb2RlIjoieUFGb0V3QjhNUlZra1BNaVNEb3F3cXJGaEo4YU9aankiLCJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvb3BlbmlkLWNsaWVudC1FSnJ4Yy1IUnJtN2x6TTREWHNaVEtcLyIsInN0YXRlIjoiakhCdTNUano4MUR0Wlkwb3R0Ykk3elNpalNHbUFvcGgyVGNvdkswaGItOCIsImV4cCI6MTYzNDkxNzQ5OX0.GlYrnLZ4XmBODeYb4QH93Lzb71rPoG9b3HGFb7ba5E0W9nOq4kfHR2RvET_RMAGMTOXvWeQs0pkTae3rH1E-6H96FlyUgs9fCEtpciDl2uoyF8SaDHyCPNppYdrKrH18NS-21DoN40-Xx_OZrvPhdFSl-Dn48ee8QLWZH1d3FmxkC6OzxYpZXCRzdlvLREtaLoi7XM_8XV4z5WD45dNNVq_Ibuup3fC83M2rkBCVwNhmlnalq3Uq_aNDjmQcURNqWMtSDxFlXaFz2h4EK7OihXcI6HBZzVqqeaX8HpnrWFCVuLeFq32PJHStpy1hcXALh2co8tEEs1kmbhqcghQpeQ
2021-10-22 15:34:59 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance lTnzpCo9Njgwqme
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://openid-client.local/cb?response=eyJraWQiOiJFUGVpNHI5WUNnbDN2dUFYYzVBcFBiU2pxbVB6MEI3YmVZRC1aNi1DblNZIiwiYWxnIjoiUFMyNTYifQ.eyJhdWQiOiJjbGllbnQtaWQtb3BlbmlkLWNsaWVudC1FSnJ4Yy1IUnJtN2x6TTREWHNaVEsiLCJjb2RlIjoieUFGb0V3QjhNUlZra1BNaVNEb3F3cXJGaEo4YU9aankiLCJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvb3BlbmlkLWNsaWVudC1FSnJ4Yy1IUnJtN2x6TTREWHNaVEtcLyIsInN0YXRlIjoiakhCdTNUano4MUR0Wlkwb3R0Ykk3elNpalNHbUFvcGgyVGNvdkswaGItOCIsImV4cCI6MTYzNDkxNzQ5OX0.GlYrnLZ4XmBODeYb4QH93Lzb71rPoG9b3HGFb7ba5E0W9nOq4kfHR2RvET_RMAGMTOXvWeQs0pkTae3rH1E-6H96FlyUgs9fCEtpciDl2uoyF8SaDHyCPNppYdrKrH18NS-21DoN40-Xx_OZrvPhdFSl-Dn48ee8QLWZH1d3FmxkC6OzxYpZXCRzdlvLREtaLoi7XM_8XV4z5WD45dNNVq_Ibuup3fC83M2rkBCVwNhmlnalq3Uq_aNDjmQcURNqWMtSDxFlXaFz2h4EK7OihXcI6HBZzVqqeaX8HpnrWFCVuLeFq32PJHStpy1hcXALh2co8tEEs1kmbhqcghQpeQ]
outgoing_path
authorize
2021-10-22 15:35:00 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to test instance lTnzpCo9Njgwqme
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.9.1 (https://github.com/panva/node-openid-client)",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
jwks
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-10-22 15:35:00 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2021-10-22 15:35:00 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance lTnzpCo9Njgwqme
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "EPei4r9YCgl3vuAXc5ApPbSjqmPz0B7beYD-Z6-CnSY",
      "alg": "PS256",
      "n": "xY9l3VOZc7vdKUwKqVgBV26Q_HyyuksglZPROezdgd13LutVUj_DHuD1aGOS1VMcxevq-qMIvB2ZGb6CphR-1NN_3NgCrUphg7vSe6KqtEdYxQyonWhKmy4hsh0QPyWqfNmlSgUELG8D5S-iM5yEvKErzLl8BvCkEIIT_JZcBMI1Gei_YoI127NUwS25TLn52JjuzmCC1GbAYRpCbuTqhLoY5Zi3G12XSYXyOVPsPX66NaGR-RUOzhaPLlk8Iv7dgXcULjepr4B79uktY9Qf3QEl_np6uuaK4DdfrrI9Yn4qoNkOzVtMdqRWaYQs_5Q_5xQREu56W_v_RdDa-O3ekw"
    }
  ]
}
outgoing_path
jwks
2021-10-22 15:35:01 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to test instance lTnzpCo9Njgwqme
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.9.1 (https://github.com/panva/node-openid-client)",
  "content-type": "application/x-www-form-urlencoded",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "x-ssl-cert": "-----BEGIN CERTIFICATE----- MIIDmjCCAoKgAwIBAgIJbYYf/bS+OF2qMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNV BAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWEx EzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRl c3QwHhcNMjExMDIyMTUzNDQ5WhcNMjIxMDIyMTUzNDQ5WjBpMRQwEgYDVQQDEwtl eGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYD VQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TIP8bLvKugoELbMw6AIQjCJ jr6CYFj4H9BiaSn0e3nefX3Hf0UgULVbEkUovXk26Z4SDmNmtfCXJpWLQwPrYaE1 70AaMW5HXKvXe9gr0fr0XcQ2VhtHH4SFoP10dLBgQE54BVdT4cWh0Me5MqrZZiCh RsfpfxYu82A/4YhtiZjsYRiI41m9V+P7Yj98uF9nl6+hLChNk6jYXscdCPfCiJRp eWBP6PnSbprx2E9heQSbSCCH3+euOFjkTb6QgQRi9P31vrv89YBBzkIroHF8vWYe +iOwJTfnvRHW15rwCSP/+XWGzujKNNV0K9E03yfS2/vKHC5hojFD2h+AkpjxCwID AQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhto dHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBABi8 cvV7nzM4Pv7hHjxVXSvCJAIG8/4kLkaaUB74ye81CpE0O5yjkzORHWCiktXapYug 6AJGRNkemtQ776G7Zw4wjPUz5zdERAHlSrOKzDBux8zNHzKdN2NN7Pwc4ZLi1wVn SU/lfFgT8vIMP4dmHJYq1EobXpYFWG2UojAMhOvjwOI4ulrEyOyfoXVtwyUk678B 1krDlFcTqjC9g8QzxUUBJaNtKNxObUHMWe+O6ShrepFFnsv0pEBitd/4UJWCFE3R Is2CzIxjvBKUn8vjH9TY3gZMAg+Y8UAucSx0mdQKP2OG+/TrQdx8H0P3BBxktf/3 FNifdPq0XWEQWRf/R6A\u003d -----END CERTIFICATE-----",
  "x-ssl-verify": "FAILED:self signed certificate",
  "content-length": "1220",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "yAFoEwB8MRVkkPMiSDoqwqrFhJ8aOZjy",
  "redirect_uri": "https://openid-client.local/cb",
  "client_id": "client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsImtpZCI6IldDcjRBMGFZODd1WWxLZjRjZUpiQ0FtMHNrM0k2YllQMG83SXZEVmlfX00ifQ.eyJpYXQiOjE2MzQ5MTY5MDAsImV4cCI6MTYzNDkxNjk2MCwianRpIjoiSkxPX2lYREEwbGdGT0tEWWhtLU80cUJpaExYd1VkREk4MWc1THhnazhyMCIsImlzcyI6ImNsaWVudC1pZC1vcGVuaWQtY2xpZW50LUVKcnhjLUhScm03bHpNNERYc1pUSyIsInN1YiI6ImNsaWVudC1pZC1vcGVuaWQtY2xpZW50LUVKcnhjLUhScm03bHpNNERYc1pUSyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL29wZW5pZC1jbGllbnQtRUpyeGMtSFJybTdsek00RFhzWlRLLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0LW10bHMvYS9vcGVuaWQtY2xpZW50LUVKcnhjLUhScm03bHpNNERYc1pUSy90b2tlbiJdfQ.uhuWsXfrEMPN-UdSvuvSUPaGxT6Jdwkgn6m3X2dr_oK37zpF_OY9FjW80hgDR4eX1Tc0JNLg-0Lo4u8JfLvbtgLXuBmT28GdqacPemTho6fHbxXCNXXpu6odO1bq3ewhwen6zs7jZrmEdVXiNHmGxqt3KzOkL1RRtwKHT6rJLSmqp1Wwb_cKBz2mvL0dtUTqhArCY8rMAbQ7QtMLqoeHtWG4Cb635gQ6DW5c31R6L_qhMSqZ2UyaDpL9y_kMgh_4H-29_kheNscsX3StuHQku9jlpG4VvEw_klAhtd2Kq-W08tITbw2q0bgsEvn7_FkiwdbFxO8uQPC7rnQhO7JpmA",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=yAFoEwB8MRVkkPMiSDoqwqrFhJ8aOZjy&redirect_uri=https%3A%2F%2Fopenid-client.local%2Fcb&client_id=client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK&client_assertion=eyJhbGciOiJQUzI1NiIsImtpZCI6IldDcjRBMGFZODd1WWxLZjRjZUpiQ0FtMHNrM0k2YllQMG83SXZEVmlfX00ifQ.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.uhuWsXfrEMPN-UdSvuvSUPaGxT6Jdwkgn6m3X2dr_oK37zpF_OY9FjW80hgDR4eX1Tc0JNLg-0Lo4u8JfLvbtgLXuBmT28GdqacPemTho6fHbxXCNXXpu6odO1bq3ewhwen6zs7jZrmEdVXiNHmGxqt3KzOkL1RRtwKHT6rJLSmqp1Wwb_cKBz2mvL0dtUTqhArCY8rMAbQ7QtMLqoeHtWG4Cb635gQ6DW5c31R6L_qhMSqZ2UyaDpL9y_kMgh_4H-29_kheNscsX3StuHQku9jlpG4VvEw_klAhtd2Kq-W08tITbw2q0bgsEvn7_FkiwdbFxO8uQPC7rnQhO7JpmA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2021-10-22 15:35:01 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2021-10-22 15:35:01 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIDmjCCAoKgAwIBAgIJbYYf/bS+OF2qMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNV BAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWEx EzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRl c3QwHhcNMjExMDIyMTUzNDQ5WhcNMjIxMDIyMTUzNDQ5WjBpMRQwEgYDVQQDEwtl eGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYD VQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TIP8bLvKugoELbMw6AIQjCJ jr6CYFj4H9BiaSn0e3nefX3Hf0UgULVbEkUovXk26Z4SDmNmtfCXJpWLQwPrYaE1 70AaMW5HXKvXe9gr0fr0XcQ2VhtHH4SFoP10dLBgQE54BVdT4cWh0Me5MqrZZiCh RsfpfxYu82A/4YhtiZjsYRiI41m9V+P7Yj98uF9nl6+hLChNk6jYXscdCPfCiJRp eWBP6PnSbprx2E9heQSbSCCH3+euOFjkTb6QgQRi9P31vrv89YBBzkIroHF8vWYe +iOwJTfnvRHW15rwCSP/+XWGzujKNNV0K9E03yfS2/vKHC5hojFD2h+AkpjxCwID AQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhto dHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBABi8 cvV7nzM4Pv7hHjxVXSvCJAIG8/4kLkaaUB74ye81CpE0O5yjkzORHWCiktXapYug 6AJGRNkemtQ776G7Zw4wjPUz5zdERAHlSrOKzDBux8zNHzKdN2NN7Pwc4ZLi1wVn SU/lfFgT8vIMP4dmHJYq1EobXpYFWG2UojAMhOvjwOI4ulrEyOyfoXVtwyUk678B 1krDlFcTqjC9g8QzxUUBJaNtKNxObUHMWe+O6ShrepFFnsv0pEBitd/4UJWCFE3R Is2CzIxjvBKUn8vjH9TY3gZMAg+Y8UAucSx0mdQKP2OG+/TrQdx8H0P3BBxktf/3 FNifdPq0XWEQWRf/R6A\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nFNifdPq0XWEQWRf/R6A\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "OU\u003dTest,O\u003dTest,L\u003dBlacksburg,ST\u003dVirginia,C\u003dUS,CN\u003dexample.org"
  },
  "sanDnsNames": [],
  "sanUris": [
    "http://example.org/webid#me"
  ],
  "sanIPs": [],
  "sanEmails": []
}
2021-10-22 15:35:01 SUCCESS
CheckForClientCertificate
Found client certificate
2021-10-22 15:35:01 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-10-22 15:35:01 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6IldDcjRBMGFZODd1WWxLZjRjZUpiQ0FtMHNrM0k2YllQMG83SXZEVmlfX00ifQ.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.uhuWsXfrEMPN-UdSvuvSUPaGxT6Jdwkgn6m3X2dr_oK37zpF_OY9FjW80hgDR4eX1Tc0JNLg-0Lo4u8JfLvbtgLXuBmT28GdqacPemTho6fHbxXCNXXpu6odO1bq3ewhwen6zs7jZrmEdVXiNHmGxqt3KzOkL1RRtwKHT6rJLSmqp1Wwb_cKBz2mvL0dtUTqhArCY8rMAbQ7QtMLqoeHtWG4Cb635gQ6DW5c31R6L_qhMSqZ2UyaDpL9y_kMgh_4H-29_kheNscsX3StuHQku9jlpG4VvEw_klAhtd2Kq-W08tITbw2q0bgsEvn7_FkiwdbFxO8uQPC7rnQhO7JpmA",
  "header": {
    "kid": "WCr4A0aY87uYlKf4ceJbCAm0sk3I6bYP0o7IvDVi__M",
    "alg": "PS256"
  },
  "claims": {
    "sub": "client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK",
    "aud": [
      "https://www.certification.openid.net/test/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/",
      "https://www.certification.openid.net/test-mtls/a/openid-client-EJrxc-HRrm7lzM4DXsZTK/token"
    ],
    "iss": "client-id-openid-client-EJrxc-HRrm7lzM4DXsZTK",
    "exp": 1634916960,
    "iat": 1634916900,
    "jti": "JLO_iXDA0lgFOKDYhm-O4qBihLXwUdDI81g5Lxgk8r0"
  }
}
2021-10-22 15:35:01
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2021-10-22 15:35:01 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsImtpZCI6IldDcjRBMGFZODd1WWxLZjRjZUpiQ0FtMHNrM0k2YllQMG83SXZEVmlfX00ifQ.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.uhuWsXfrEMPN-UdSvuvSUPaGxT6Jdwkgn6m3X2dr_oK37zpF_OY9FjW80hgDR4eX1Tc0JNLg-0Lo4u8JfLvbtgLXuBmT28GdqacPemTho6fHbxXCNXXpu6odO1bq3ewhwen6zs7jZrmEdVXiNHmGxqt3KzOkL1RRtwKHT6rJLSmqp1Wwb_cKBz2mvL0dtUTqhArCY8rMAbQ7QtMLqoeHtWG4Cb635gQ6DW5c31R6L_qhMSqZ2UyaDpL9y_kMgh_4H-29_kheNscsX3StuHQku9jlpG4VvEw_klAhtd2Kq-W08tITbw2q0bgsEvn7_FkiwdbFxO8uQPC7rnQhO7JpmA
2021-10-22 15:35:01 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2021-10-22 15:35:01 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2021-10-22 15:35:01 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
yAFoEwB8MRVkkPMiSDoqwqrFhJ8aOZjy
2021-10-22 15:35:01 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
https://openid-client.local/cb
2021-10-22 15:35:01 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
BVFu7DeK6Mg5hurJAMUyEnEtUw7WAY3yGF2nZMptgjWG2Ntrrv
2021-10-22 15:35:01 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
BkTrMPSmdOGe8TQm5XiLyQ
2021-10-22 15:35:01
CreateRefreshToken
Created refresh token
refresh_token
bXemRvauBkEPTLLlWktmzfZMZUavbXSqngVcIHsGzAogZwTPga2027656640^{?*?
2021-10-22 15:35:01 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
BVFu7DeK6Mg5hurJAMUyEnEtUw7WAY3yGF2nZMptgjWG2Ntrrv
token_type
Bearer
refresh_token
bXemRvauBkEPTLLlWktmzfZMZUavbXSqngVcIHsGzAogZwTPga2027656640^{?*?
2021-10-22 15:35:01 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance lTnzpCo9Njgwqme
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "BVFu7DeK6Mg5hurJAMUyEnEtUw7WAY3yGF2nZMptgjWG2Ntrrv",
  "token_type": "Bearer",
  "refresh_token": "bXemRvauBkEPTLLlWktmzfZMZUavbXSqngVcIHsGzAogZwTPga2027656640^{?*?"
}
outgoing_path
token
2021-10-22 15:35:02 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to test instance lTnzpCo9Njgwqme
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer BVFu7DeK6Mg5hurJAMUyEnEtUw7WAY3yGF2nZMptgjWG2Ntrrv",
  "user-agent": "openid-client/4.9.1 (https://github.com/panva/node-openid-client)",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "x-ssl-cert": "-----BEGIN CERTIFICATE----- MIIDmjCCAoKgAwIBAgIJbYYf/bS+OF2qMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNV BAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWEx EzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRl c3QwHhcNMjExMDIyMTUzNDQ5WhcNMjIxMDIyMTUzNDQ5WjBpMRQwEgYDVQQDEwtl eGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYD VQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TIP8bLvKugoELbMw6AIQjCJ jr6CYFj4H9BiaSn0e3nefX3Hf0UgULVbEkUovXk26Z4SDmNmtfCXJpWLQwPrYaE1 70AaMW5HXKvXe9gr0fr0XcQ2VhtHH4SFoP10dLBgQE54BVdT4cWh0Me5MqrZZiCh RsfpfxYu82A/4YhtiZjsYRiI41m9V+P7Yj98uF9nl6+hLChNk6jYXscdCPfCiJRp eWBP6PnSbprx2E9heQSbSCCH3+euOFjkTb6QgQRi9P31vrv89YBBzkIroHF8vWYe +iOwJTfnvRHW15rwCSP/+XWGzujKNNV0K9E03yfS2/vKHC5hojFD2h+AkpjxCwID AQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhto dHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBABi8 cvV7nzM4Pv7hHjxVXSvCJAIG8/4kLkaaUB74ye81CpE0O5yjkzORHWCiktXapYug 6AJGRNkemtQ776G7Zw4wjPUz5zdERAHlSrOKzDBux8zNHzKdN2NN7Pwc4ZLi1wVn SU/lfFgT8vIMP4dmHJYq1EobXpYFWG2UojAMhOvjwOI4ulrEyOyfoXVtwyUk678B 1krDlFcTqjC9g8QzxUUBJaNtKNxObUHMWe+O6ShrepFFnsv0pEBitd/4UJWCFE3R Is2CzIxjvBKUn8vjH9TY3gZMAg+Y8UAucSx0mdQKP2OG+/TrQdx8H0P3BBxktf/3 FNifdPq0XWEQWRf/R6A\u003d -----END CERTIFICATE-----",
  "x-ssl-verify": "FAILED:self signed certificate",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
incoming_path
open-banking/v1.1/accounts
incoming_body_form_params
incoming_method
GET
incoming_body_json
incoming_query_string_params
{}
incoming_body
2021-10-22 15:35:02 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Accounts endpoint
2021-10-22 15:35:02 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIDmjCCAoKgAwIBAgIJbYYf/bS+OF2qMA0GCSqGSIb3DQEBBQUAMGkxFDASBgNV BAMTC2V4YW1wbGUub3JnMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWEx EzARBgNVBAcTCkJsYWNrc2J1cmcxDTALBgNVBAoTBFRlc3QxDTALBgNVBAsTBFRl c3QwHhcNMjExMDIyMTUzNDQ5WhcNMjIxMDIyMTUzNDQ5WjBpMRQwEgYDVQQDEwtl eGFtcGxlLm9yZzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMRMwEQYD VQQHEwpCbGFja3NidXJnMQ0wCwYDVQQKEwRUZXN0MQ0wCwYDVQQLEwRUZXN0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TIP8bLvKugoELbMw6AIQjCJ jr6CYFj4H9BiaSn0e3nefX3Hf0UgULVbEkUovXk26Z4SDmNmtfCXJpWLQwPrYaE1 70AaMW5HXKvXe9gr0fr0XcQ2VhtHH4SFoP10dLBgQE54BVdT4cWh0Me5MqrZZiCh RsfpfxYu82A/4YhtiZjsYRiI41m9V+P7Yj98uF9nl6+hLChNk6jYXscdCPfCiJRp eWBP6PnSbprx2E9heQSbSCCH3+euOFjkTb6QgQRi9P31vrv89YBBzkIroHF8vWYe +iOwJTfnvRHW15rwCSP/+XWGzujKNNV0K9E03yfS2/vKHC5hojFD2h+AkpjxCwID AQABo0UwQzAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIC9DAmBgNVHREEHzAdhhto dHRwOi8vZXhhbXBsZS5vcmcvd2ViaWQjbWUwDQYJKoZIhvcNAQEFBQADggEBABi8 cvV7nzM4Pv7hHjxVXSvCJAIG8/4kLkaaUB74ye81CpE0O5yjkzORHWCiktXapYug 6AJGRNkemtQ776G7Zw4wjPUz5zdERAHlSrOKzDBux8zNHzKdN2NN7Pwc4ZLi1wVn SU/lfFgT8vIMP4dmHJYq1EobXpYFWG2UojAMhOvjwOI4ulrEyOyfoXVtwyUk678B 1krDlFcTqjC9g8QzxUUBJaNtKNxObUHMWe+O6ShrepFFnsv0pEBitd/4UJWCFE3R Is2CzIxjvBKUn8vjH9TY3gZMAg+Y8UAucSx0mdQKP2OG+/TrQdx8H0P3BBxktf/3 FNifdPq0XWEQWRf/R6A\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nFNifdPq0XWEQWRf/R6A\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "OU\u003dTest,O\u003dTest,L\u003dBlacksburg,ST\u003dVirginia,C\u003dUS,CN\u003dexample.org"
  },
  "sanDnsNames": [],
  "sanUris": [
    "http://example.org/webid#me"
  ],
  "sanIPs": [],
  "sanEmails": []
}
2021-10-22 15:35:02 SUCCESS
CheckForClientCertificate
Found client certificate
2021-10-22 15:35:02 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-10-22 15:35:02 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2021-10-22 15:35:02 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
BVFu7DeK6Mg5hurJAMUyEnEtUw7WAY3yGF2nZMptgjWG2Ntrrv
2021-10-22 15:35:02 SUCCESS
RequireBearerAccessToken
Found access token in request
actual
BVFu7DeK6Mg5hurJAMUyEnEtUw7WAY3yGF2nZMptgjWG2Ntrrv
2021-10-22 15:35:02 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2021-10-22 15:35:02 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2021-10-22 15:35:02 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2021-10-22 15:35:02 SUCCESS
CreateFapiInteractionIdIfNeeded
Created new FAPI interaction ID
fapi_interaction_id
1364106b-9946-4356-b144-16391202b22d
2021-10-22 15:35:02 SUCCESS
CreateFAPIAccountEndpointResponse
Created account response object
accounts_endpoint_response
{
  "conformance-test-finished": "true"
}
accounts_endpoint_response_headers
{
  "x-fapi-interaction-id": "1364106b-9946-4356-b144-16391202b22d",
  "content-type": "application/json; charset\u003dUTF-8"
}
2021-10-22 15:35:02
ClearAccessTokenFromRequest
Condition ran but did not log anything
2021-10-22 15:35:02 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance lTnzpCo9Njgwqme
outgoing_status_code
200
outgoing_headers
{
  "x-fapi-interaction-id": [
    "1364106b-9946-4356-b144-16391202b22d"
  ],
  "content-type": [
    "application/json; charset\u003dUTF-8"
  ]
}
outgoing_body
{
  "conformance-test-finished": "true"
}
outgoing_path
open-banking/v1.1/accounts
2021-10-22 15:35:02 FINISHED
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Test has run to completion
testmodule_result
PASSED
2021-10-22 15:35:02
TEST-RUNNER
Alias has now been claimed by another test
alias
openid-client-EJrxc-HRrm7lzM4DXsZTK
new_test_id
K6Mp7a8DYvYA5Nf
Test Results