Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-01-14 21:55:23 INFO
TEST-RUNNER
Test instance OhUM1KVToq0MVmr created
baseUrl
https://www.certification.openid.net/test/a/hubfintech
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "by_value",
  "fapi_profile": "openbanking_brazil",
  "fapi_jarm_type": "oidc",
  "fapi_response_mode": "plain_response"
}
alias
hubfintech
description
Hub Fintech - Iniciação de Pagamentos
planId
CHLuUAFFBnQiw
config
{
  "alias": "hubfintech",
  "description": "Hub Fintech - Iniciação de Pagamentos",
  "server": {
    "jwks": {
      "keys": [
        {
          "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
          "kty": "RSA",
          "alg": "PS256",
          "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
          "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
          "e": "AQAB",
          "use": "sig",
          "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
          "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
          "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
          "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
          "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
          "x5c": [
            "MIIGqzCCBZOgAwIBAgIUdUCw8bQZidnZ6uERKJuN9u4RGvcwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMDgxNjA5NTUwMFoXDTIyMDkxNTA5NTUwMFowgacxCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMS8wDAYDVQQLEwUxMjM0NTAOBgNVBAsTB2NlcnRtYW4wDwYDVQQLEwhhZ29vZG9uZTEcMBoGA1UEAxMTT3BlbiBCYW5raW5nIEJyYXNpbDE0MDIGCgmSJomT8ixkAQETJDc0ZTkyOWQ5LTMzYjYtNGQ4NS04YmE3LWMxNDZjODY3YTgxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyF1agPcwq5ms99Flo82XsXUroWoD/6FX4AfmOUu113h4VOLYaO3N8HDYbKxgii2En/+O61e/Ptjn4T2PVq0iVcqiF6Gp4sKE5w/bKZRfdCe8qIPS4D+JKpFpesJvIHUeQvlAuBp5dA9nGSpxOjGe5P2+ZzNGXwvux/2ztdweGmKbtOvbYe4RVhiu6bOubog8XEBmD96EnqmoROasH1Hn9kDJIclbTP51j/TlQMzhrSfJJuE3Qq6vWhe/DaPbtmELmlDiYHjp8CjAY5oBMHLmkHvQxEBV4cwbUZj5ZpdqU8tkA78XtR4DkzrJ4fYoBb1+9ABq6GNzxWPpSQMQuBXdsCAwEAAaOCAwIwggL+MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJwv7oHX2exZL304ru+4eGVypHlxMB8GA1UdIwQYMBaAFIZ/WK0X9YK2TrQFs/uwzhFD30y+MEwGCCsGAQUFBwEBBEAwPjA8BggrBgEFBQcwAYYwaHR0cDovL29jc3Auc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL2lzc3Vlci5jcmwwXgYDVR0RBFcwVaAZBgVgTAEDAqAQDA5NaWNoYWVsIEZyYXNlcqAYBgVgTAEDA6APDA0xMzM1MzIzNjAwMTg5oA0GBWBMAQMEoAQMAm5voA8GBWBMAQMHoAYMBGFsb3QwDgYDVR0PAQH/BAQDAgbAMIIBoQYDVR0gBIIBmDCCAZQwggGQBgorBgEEAYO6L2QBMIIBgDCCATYGCCsGAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNlIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNpcGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3NzZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlkaWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQgZG9jdW1lbnRzIHRoZXJlaW4uMEQGCCsGAQUFBwIBFjhodHRwOi8vY3BzLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczANBgkqhkiG9w0BAQsFAAOCAQEAtKn/QnJqKLp52YB14x+M21qwz67utFkWjhauQe0elXupjY5NWZb5wLrGYNOZQzRe2JRzcBbGN6P7lCweRfxMkSGh9YrXbrkBXLEPtLHpTVEy65v1tWl02lC+ooVPyQpSjAQL0L69OQ7s7rnIXyb3rkSUzuGSxsLU1AXpWj0oYFB4wdeIdPAVPs83frC5s4kz42JruSAE2vsbvQURTVPChh+hO6+R6Irz+ZEZ1NSgjQkxvOXHW53CkXZSjjHbAB/nbJYi7YyK7kck99r38Ba/WBfIfywdFVVYfiiW5TS6XbQeVeilmmt5MLxBz96FxR6E6WR+cQwybEe94Fb/jD6xHA\u003d\u003d"
          ]
        },
        {
          "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
          "kty": "RSA",
          "alg": "RSA-OAEP",
          "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
          "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
          "e": "AQAB",
          "use": "enc",
          "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
          "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
          "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
          "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
          "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
        }
      ]
    }
  },
  "client": {
    "client_id": "hubfintech-bank",
    "redirect_uri": "https://hubfintech.com.br/callback",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "sig",
          "alg": "PS256",
          "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ",
          "e": "AQAB",
          "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c"
        },
        {
          "kty": "RSA",
          "use": "enc",
          "alg": "RSA-OAEP",
          "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww",
          "e": "AQAB",
          "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e"
        }
      ]
    },
    "certificate": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----"
  },
  "client2": {
    "client_id": "hubfintech-bank-two",
    "redirect_uri": "https://hubfintech.com.br/callback",
    "id_token_encrypted_response_alg": "RSA-OAEP",
    "id_token_encrypted_response_enc": "A256GCM",
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIG7zCCBdegAwIBAgIUbozJwymP/g6NdP5bBatu+G9rF9YwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NTEwMFoXDTIyMTExNDE5\nNTEwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh\nbWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl\nYmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm\naW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T\nFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK\nCZImiZPyLGQBARMkYmQ1NTQ5ZDktNjdiNS00MzkyLTgyODYtNWU2ZDhhMjQxNTA1\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySikOXVsymmykvexNTvz\n5roVpMCH+xaPGn3rjaIXXF82huDtGoMhM4W9x8uTDDIeK1sLaRDm61pVHogM259f\nFmS2etbqyCi3k5dAzGZ0Txt/RYeUgjOYDbKQHbT8eejGDuUmcy3H1TtU+kSnWDu1\n2PbFlJo0TTVgCJ5lcjwFp4hZ01NyKWunQshok9EeVbd/ws86sG18DYEAYX4pLGyn\nWYBfJaKr05t5JRvtKBK5AeuM27nGEn+h7Y3BLZKhafgSUCY7YA7hipUnaRNyqbYp\nEmJd/dty1CUwaZtSK1Y+YsFFvivH8w8RC95kP8nyhpE4+jUOuj2f3Zjy3b0ESv7m\nRQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUU5m8jPQ4f2yi\neavRZ2TWx6YX6EYwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI\nKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr\naS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0\ncDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz\ndWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E\nBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG\nCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm\naWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp\nbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu\nZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2\naWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz\nIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj\nYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB\nBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu\nb3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQDbYp7KxmuJtCHRC3pp\nLDquvEGW8BDrYP8P2E2SUgBtE7iTmgVoOCbVOSmdY4h2QSpaoPtbNZk+nP0LxKUc\nG9SrGUL64QN17mxmiuSGtp1yvMqVFyLvQcsBs4h/9eZjl71AMM3QJib+gbgHtyR2\nzOpY85MpyPMKn2AHSnq0JHPsAT/U1ao2Qg+ybROGot0iFCvZ/k6tGVxDyM5JVHwA\nmLKO+C68mEYdDr0pzOnw86Vy/UvJA/OUmuxF25FaNthQl2QVeM/pmI/y7JZSHb1G\nHZMU2R3t5YJuIyODWjIYpdcyy7x/tKtC0KeEx3l1RYidhheP0hSQV4PMAC72g18V\ni5QB\n-----END CERTIFICATE-----",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "sig",
          "alg": "PS256",
          "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ",
          "e": "AQAB",
          "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7"
        },
        {
          "kty": "RSA",
          "use": "enc",
          "alg": "RSA-OAEP",
          "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ",
          "e": "AQAB",
          "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d"
        }
      ]
    }
  },
  "directory": {
    "keystore": "https://keystore.sandbox.directory.openbankingbrasil.org.br/"
  }
}
testName
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
2022-01-14 21:55:23 SUCCESS
FAPIBrazilGenerateServerConfiguration
Created server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true
}
issuer
https://www.certification.openid.net/test/a/hubfintech/
discoveryUrl
https://www.certification.openid.net/test/a/hubfintech/.well-known/openid-configuration
2022-01-14 21:55:23 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_jwks
{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
server_encryption_keys
{
  "keys": [
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
2022-01-14 21:55:23 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-01-14 21:55:23
SetServerSigningAlgToPS256
Successfully set signing algorithm to PS256
2022-01-14 21:55:23
FAPIBrazilSetGrantTypesSupportedInServerConfiguration
Successfully set grant_types_supported
server
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ]
}
2022-01-14 21:55:23
AddClaimsParameterSupportedTrueToServerConfiguration
Successfully added claims_parameter_supported to server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true
}
2022-01-14 21:55:23
FAPIBrazilAddBrazilSpecificSettingsToServerConfiguration
Added open banking Brazil specific server settings
server
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ]
}
2022-01-14 21:55:23
SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly
Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration
server_configuration
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ]
}
2022-01-14 21:55:23 SUCCESS
AddResponseTypeCodeIdTokenToServerConfiguration
Added code id_token as response type supported
response_types_supported
[
  "code id_token"
]
2022-01-14 21:55:23 SUCCESS
FAPIBrazilAddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
values
[
  "PS256"
]
2022-01-14 21:55:23 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2022-01-14 21:55:23 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
2022-01-14 21:55:23 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
Verify configuration of first client
2022-01-14 21:55:23 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
hubfintech-bank
redirect_uri
https://hubfintech.com.br/callback
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ",
      "e": "AQAB",
      "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww",
      "e": "AQAB",
      "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e"
    }
  ]
}
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 21:55:23 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-01-14 21:55:23 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ",
      "e": "AQAB",
      "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww",
      "e": "AQAB",
      "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
      "alg": "PS256",
      "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e",
      "alg": "RSA-OAEP",
      "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww"
    }
  ]
}
2022-01-14 21:55:23 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-01-14 21:55:23 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-01-14 21:55:23 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ",
      "e": "AQAB",
      "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww",
      "e": "AQAB",
      "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e"
    }
  ]
}
Verify configuration of second client
2022-01-14 21:55:23 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
hubfintech-bank-two
redirect_uri
https://hubfintech.com.br/callback
id_token_encrypted_response_alg
RSA-OAEP
id_token_encrypted_response_enc
A256GCM
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ",
      "e": "AQAB",
      "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ",
      "e": "AQAB",
      "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d"
    }
  ]
}
2022-01-14 21:55:23 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-01-14 21:55:23 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ",
      "e": "AQAB",
      "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ",
      "e": "AQAB",
      "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7",
      "alg": "PS256",
      "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d",
      "alg": "RSA-OAEP",
      "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ"
    }
  ]
}
2022-01-14 21:55:23 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-01-14 21:55:23 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-01-14 21:55:23 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ",
      "e": "AQAB",
      "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ",
      "e": "AQAB",
      "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d"
    }
  ]
}
2022-01-14 21:55:23
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Setup Done
2022-01-14 21:55:24 INCOMING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Incoming HTTP request to test instance OhUM1KVToq0MVmr
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 21:55:24 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 21:55:24 OUTGOING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Response to HTTP request to test instance OhUM1KVToq0MVmr
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-01-14 21:55:25 INCOMING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Incoming HTTP request to test instance OhUM1KVToq0MVmr
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "content-length": "1096",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/token
incoming_body_form_params
{
  "grant_type": "client_credentials",
  "scope": "payments",
  "client_id": "hubfintech-bank",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczMjQsImV4cCI6MTY0MjE5NzM4NCwianRpIjoiM3QxdTVQVEpscUprbTF6TUpZZDVtZVNBdzF5MmZ4aU16enpEZkRSNEZtayIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.UR_mQMyIpANeyLT7AYTjCURzFwtf5SqDSW9hTybVXSCiTds_R0MLRPyc6zuYRkHRI4ZaaT7vSwb_3qJvYka9UqzCRSPMk_RDkgzopmbt1OjQ_KOdNPa1fCUt3JIPx2WVzQ3ibv9ULbj0JJwC-qO4K6cOQz1MkOjmhVOBWCHUiMWtGWW0rIybilxP_zQpkJ3xZ1dTjge66IedKcvWNyOhLWv320rJZMTZLq-SJeXo6LdrUssb-tSvtCAsYPCE2kTuo2umN2P_M3wvwg82B-so8mNFGXPK1Mf9zoMG06h25v9iXnmfO7mTbr_F-PV5An1AqRT2pBh62KgA1vc1TCr6Bg",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=client_credentials&scope=payments&client_id=hubfintech-bank&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczMjQsImV4cCI6MTY0MjE5NzM4NCwianRpIjoiM3QxdTVQVEpscUprbTF6TUpZZDVtZVNBdzF5MmZ4aU16enpEZkRSNEZtayIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.UR_mQMyIpANeyLT7AYTjCURzFwtf5SqDSW9hTybVXSCiTds_R0MLRPyc6zuYRkHRI4ZaaT7vSwb_3qJvYka9UqzCRSPMk_RDkgzopmbt1OjQ_KOdNPa1fCUt3JIPx2WVzQ3ibv9ULbj0JJwC-qO4K6cOQz1MkOjmhVOBWCHUiMWtGWW0rIybilxP_zQpkJ3xZ1dTjge66IedKcvWNyOhLWv320rJZMTZLq-SJeXo6LdrUssb-tSvtCAsYPCE2kTuo2umN2P_M3wvwg82B-so8mNFGXPK1Mf9zoMG06h25v9iXnmfO7mTbr_F-PV5An1AqRT2pBh62KgA1vc1TCr6Bg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2022-01-14 21:55:25 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-01-14 21:55:25 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 21:55:25 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 21:55:25 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 21:55:25 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczMjQsImV4cCI6MTY0MjE5NzM4NCwianRpIjoiM3QxdTVQVEpscUprbTF6TUpZZDVtZVNBdzF5MmZ4aU16enpEZkRSNEZtayIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.UR_mQMyIpANeyLT7AYTjCURzFwtf5SqDSW9hTybVXSCiTds_R0MLRPyc6zuYRkHRI4ZaaT7vSwb_3qJvYka9UqzCRSPMk_RDkgzopmbt1OjQ_KOdNPa1fCUt3JIPx2WVzQ3ibv9ULbj0JJwC-qO4K6cOQz1MkOjmhVOBWCHUiMWtGWW0rIybilxP_zQpkJ3xZ1dTjge66IedKcvWNyOhLWv320rJZMTZLq-SJeXo6LdrUssb-tSvtCAsYPCE2kTuo2umN2P_M3wvwg82B-so8mNFGXPK1Mf9zoMG06h25v9iXnmfO7mTbr_F-PV5An1AqRT2pBh62KgA1vc1TCr6Bg",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "hubfintech-bank",
    "aud": [
      "https://www.certification.openid.net/test/a/hubfintech/",
      "https://www.certification.openid.net/test/a/hubfintech/token",
      "https://www.certification.openid.net/test-mtls/a/hubfintech/token"
    ],
    "iss": "hubfintech-bank",
    "exp": 1642197384,
    "iat": 1642197324,
    "jti": "3t1u5PTJlqJkm1zMJYd5meSAw1y2fxiMzzzDfDR4Fmk"
  }
}
2022-01-14 21:55:25
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-01-14 21:55:25 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczMjQsImV4cCI6MTY0MjE5NzM4NCwianRpIjoiM3QxdTVQVEpscUprbTF6TUpZZDVtZVNBdzF5MmZ4aU16enpEZkRSNEZtayIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.UR_mQMyIpANeyLT7AYTjCURzFwtf5SqDSW9hTybVXSCiTds_R0MLRPyc6zuYRkHRI4ZaaT7vSwb_3qJvYka9UqzCRSPMk_RDkgzopmbt1OjQ_KOdNPa1fCUt3JIPx2WVzQ3ibv9ULbj0JJwC-qO4K6cOQz1MkOjmhVOBWCHUiMWtGWW0rIybilxP_zQpkJ3xZ1dTjge66IedKcvWNyOhLWv320rJZMTZLq-SJeXo6LdrUssb-tSvtCAsYPCE2kTuo2umN2P_M3wvwg82B-so8mNFGXPK1Mf9zoMG06h25v9iXnmfO7mTbr_F-PV5An1AqRT2pBh62KgA1vc1TCr6Bg
2022-01-14 21:55:25 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-01-14 21:55:25 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-01-14 21:55:25 SUCCESS
FAPIBrazilExtractRequestedScopeFromClientCredentialsGrant
Found 'payments' scope in request
actual
[
  "payments"
]
expected
payments
2022-01-14 21:55:25 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
6uoZTSWi4vOA6c3sMB6teZJp3OW8E84RJpg6OSNufmfKSSzp5t
2022-01-14 21:55:25 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
6uoZTSWi4vOA6c3sMB6teZJp3OW8E84RJpg6OSNufmfKSSzp5t
token_type
Bearer
2022-01-14 21:55:25
CopyAccessTokenToClientCredentialsField
Condition ran but did not log anything
2022-01-14 21:55:25 OUTGOING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Response to HTTP request to test instance OhUM1KVToq0MVmr
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "6uoZTSWi4vOA6c3sMB6teZJp3OW8E84RJpg6OSNufmfKSSzp5t",
  "token_type": "Bearer"
}
outgoing_path
token
2022-01-14 21:55:26 INCOMING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Incoming HTTP request to test instance OhUM1KVToq0MVmr
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json, text/plain, */*",
  "content-type": "application/jwt",
  "authorization": "Bearer 6uoZTSWi4vOA6c3sMB6teZJp3OW8E84RJpg6OSNufmfKSSzp5t",
  "x-idempotency-key": "9828afba-b796-4bbf-9191-af9d8f8e59ac",
  "user-agent": "axios/0.24.0",
  "content-length": "1412",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/payments/v1/consents
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.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.E_WgSgKXhZhDFUt7_7Y4JQv6wpdHbMj6Ah4E9xEpTN-dktdi25zYkT16-x5gloQ9_NpBZmeJC8Wd-9QZ8jZlyw4VezfFCJSIuNxfjrFSz76OhRCmithAB4rbxaBsHOVXI3WDIcGNkl8vQAkezZCU_waVu7iOBIR6q0yL-NEdC1IDjysk5XKUWzYWasin4ZawIbP6cZaghRGdCP5t_hMZXICMfGKzH8IVvFK8x-Dr1CunTneu5x_7WSPgo1SEiwBObxWejQ39hz4hRKTLuLllkmIkPT7_UH9rtYur1MTtjaTOgdTK-Eeo6-H5v190DYpPVxIf7rWeb56QeZwK_Pxc_w
2022-01-14 21:55:26 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
New consent endpoint
2022-01-14 21:55:26 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 21:55:26 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 21:55:26 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 21:55:26 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2022-01-14 21:55:26 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-01-14 21:55:26 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
6uoZTSWi4vOA6c3sMB6teZJp3OW8E84RJpg6OSNufmfKSSzp5t
2022-01-14 21:55:26 SUCCESS
RequireBearerClientCredentialsAccessToken
Found access token in request
actual
6uoZTSWi4vOA6c3sMB6teZJp3OW8E84RJpg6OSNufmfKSSzp5t
2022-01-14 21:55:26 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2022-01-14 21:55:26 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2022-01-14 21:55:26 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2022-01-14 21:55:26 SUCCESS
FAPIBrazilExtractCertificateSubjectFromServerJwks
Extracted subject from the certificate included in server jwks
subjectdn
UID=74e929d9-33b6-4d85-8ba7-c146c867a817,CN=Open Banking Brasil,OU=12345+OU=certman+OU=agoodone,O=ICP-Brasil,C=BR
ou
12345
brazil_software_id
74e929d9-33b6-4d85-8ba7-c146c867a817
2022-01-14 21:55:26 SUCCESS
FAPIBrazilEnsureClientCredentialsScopeContainedPayments
The token request which was used to obtain the access token contained 'payments' scope
actual
[
  "payments"
]
2022-01-14 21:55:26 SUCCESS
FAPIBrazilExtractPaymentsConsentRequest
Parsed payments consent request
payments_consent_request
{
  "aud": "https://www.certification.openid.net/test-mtls/a/hubfintech/payments/v1/consents",
  "data": {
    "debtorAccount": {
      "number": "4261073573",
      "accountType": "CACC",
      "ispb": "37241230",
      "issuer": "0001"
    },
    "loggedUser": {
      "document": {
        "identification": "57784518064",
        "rel": "CPF"
      }
    },
    "creditor": {
      "name": "HOMOLOGACAO PIX",
      "cpfCnpj": "55155114845",
      "personType": "PESSOA_NATURAL"
    },
    "payment": {
      "date": "2021-11-11",
      "amount": "1.15",
      "currency": "BRL",
      "details": {
        "proxy": "55155114845",
        "localInstrument": "DICT",
        "creditorAccount": {
          "number": "10173722",
          "accountType": "CACC",
          "ispb": "92894922",
          "issuer": "0001"
        }
      },
      "ibgeTownCode": "5300108",
      "type": "PIX"
    }
  },
  "iss": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197325,
  "jti": "00f5811b-ea39-4909-bae5-4a063269500f"
}
2022-01-14 21:55:26 SUCCESS
EnsureIncomingRequestContentTypeIsApplicationJwt
Client correctly used application/jwt content type
2022-01-14 21:55:26 SUCCESS
ExtractXIdempotencyKeyHeader
Found an x-idempotency-key header
idempotency_key
9828afba-b796-4bbf-9191-af9d8f8e59ac
2022-01-14 21:55:26 SUCCESS
FAPIBrazilValidatePaymentConsentRequestAud
aud claim matches the endpoint url
aud
https://www.certification.openid.net/test-mtls/a/hubfintech/payments/v1/consents
2022-01-14 21:55:26 SUCCESS
FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate
Extracted subject from the mtls client certificate
subjectdn
UID=3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,2.5.4.5=#130e3133383834373735303030313139,CN=hubfintech.com.br,OU=7eebe017-cb01-498c-81e4-6b4149b18e93,O=HUB PAGAMENTOS S.A,L=Tambore,ST=SP,C=BR
ou
7eebe017-cb01-498c-81e4-6b4149b18e93
brazil_software_id
3a268f4c-3ae2-466b-88e3-571c5279e939
2022-01-14 21:55:26 SUCCESS
FAPIBrazilEnsureConsentRequestIssEqualsOrganizationId
iss claim in consent request matches organizationId in client certificate
iss
7eebe017-cb01-498c-81e4-6b4149b18e93
2022-01-14 21:55:26 SUCCESS
FAPIBrazilEnsureConsentRequestJtiIsUUIDv4
jti claim in consent request is a UUIDv4
jti
00f5811b-ea39-4909-bae5-4a063269500f
2022-01-14 21:55:26 SUCCESS
FAPIBrazilValidateConsentRequestIat
iat claim in consent request is valid
iat
1642197325
2022-01-14 21:55:26
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Fetching client organization keys
jwks_uri
https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/application.jwks
2022-01-14 21:55:26
FAPIBrazilFetchClientOrganizationJwksFromDirectory
HTTP request
request_uri
https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/application.jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-01-14 21:55:26 RESPONSE
FAPIBrazilFetchClientOrganizationJwksFromDirectory
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-type": "application/jwk-set+json",
  "content-length": "3040",
  "connection": "keep-alive",
  "x-amz-replication-status": "COMPLETED",
  "last-modified": "Thu, 14 Oct 2021 01:23:27 GMT",
  "x-amz-version-id": "JVMaNfEjLpCjFLt2gqawcczHkoI6xYBE",
  "accept-ranges": "bytes",
  "server": "AmazonS3",
  "date": "Fri, 14 Jan 2022 21:55:26 GMT",
  "etag": "\"dc2e24032ca3282f3a5b544ecf4ff54f\"",
  "x-cache": "Hit from cloudfront",
  "via": "1.1 077b94dab77b8114aebf503be197d7d8.cloudfront.net (CloudFront)",
  "x-amz-cf-pop": "IAD89-C3",
  "x-amz-cf-id": "omSFK1U7BuU_93IauJt01V73b6fdcndJH2bqQLOVFMDssGqB7AlQMQ\u003d\u003d"
}
response_body
{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"7XXe96sz47DZke6IS31lZjpmudU9yhDi54jX7i3ngLtIifV0oEbkycPDJolFrGP2QO470o0gRYVFyetYu7WB83YFV4GG9abKrAcJ4rlpg5NvDjbPB0L-FBMzpUiE9vjFbf6a4-Ez4q0RBVKZmqoySFqGGmRSVje1jcFwNZKx9Btg_IBRJ8ByfU0eDofSZlULcTS7LiXbXno9OnDLs6hCNtQuJp8HhHpQdITx7KW01rLXC08skCtT-lBSE32gRLrGZTGORNFjGoLd4GzyYr6oD-R4IBrQdosFKIeD12eHiEYUSQKrecEHWrfiiBUBMwkHQUdzvjl2rRRdwHonLlW-AQ","e":"AQAB","kid":"Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE.pem","x5t#256":"Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE"}]}
2022-01-14 21:55:26
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","use":"sig","x5c":["MIIG7jCCBdagAwIBAgIUS+QtJNr4VA26LpenjH4qjg/xUrswDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNDAxMTgwMFoXDTIyMTExMzAxMTgwMFowgcUxCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMU4wEwYDVQQLEwxEZXNjb25oZWNpZG8wFQYDVQQLEw4xMzg4NDc3NTAwMDExOTAgBgNVBAsTGU9yZ2FuaXphY2FvIENlcnRpZmljYWRvcmExGzAZBgNVBAMTEkhVQiBQQUdBTUVOVE9TIFMuQTE0MDIGCgmSJomT8ixkAQETJDdlZWJlMDE3LWNiMDEtNDk4Yy04MWU0LTZiNDE0OWIxOGU5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO113verM+Ow2ZHuiEt9ZWY6ZrnVPcoQ4ueI1+4t54C7SIn1dKBG5MnDwyaJRaxj9kDuO9KNIEWFRcnrWLu1gfN2BVeBhvWmyqwHCeK5aYOTbw42zwdC/hQTM6VIhPb4xW3+muPhM+KtEQVSmZqqMkhahhpkUlY3tY3BcDWSsfQbYPyAUSfAcn1NHg6H0mZVC3E0uy4l2156PTpwy7OoQjbULiafB4R6UHSE8eyltNay1wtPLJArU/pQUhN9oES6xmUxjkTRYxqC3eBs8mK+qA/keCAa0HaLBSiHg9dnh4hGFEkCq3nBB1q34ogVATMJB0FHc745dq0UXcB6Jy5VvgECAwEAAaOCAycwggMjMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHesGc0ipSYQmfnbTzX3VAIzwaI1MB8GA1UdIwQYMBaAFIZ/WK0X9YK2TrQFs/uwzhFD30y+MEwGCCsGAQUFBwEBBEAwPjA8BggrBgEFBQcwAYYwaHR0cDovL29jc3Auc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL2lzc3Vlci5jcmwwgYIGA1UdEQR7MHmgLAYFYEwBAwKgIwwhRmFiaW8gSXRpcm8gQm9uaWbDg8KhY2lvIE11cmFrYW1poBkGBWBMAQMDoBAMDjEzODg0Nzc1MDAwMTE5oBYGBWBMAQMEoA0MCzA3MjYwMDA1NzQyoBYGBWBMAQMHoA0MCzAwMDAwMDAwMDAwMA4GA1UdDwEB/wQEAwIGwDCCAaEGA1UdIASCAZgwggGUMIIBkAYKKwYBBAGDui9kATCCAYAwggE2BggrBgEFBQcCAjCCASgMggEkVGhpcyBDZXJ0aWZpY2F0ZSBpcyBzb2xlbHkgZm9yIHVzZSB3aXRoIFJhaWRpYW0gU2VydmljZXMgTGltaXRlZCBhbmQgb3RoZXIgcGFydGljaXBhdGluZyBvcmdhbmlzYXRpb25zIHVzaW5nIFJhaWRpYW0gU2VydmljZXMgTGltaXRlZHMgVHJ1c3QgRnJhbWV3b3JrIFNlcnZpY2VzLiBJdHMgcmVjZWlwdCwgcG9zc2Vzc2lvbiBvciB1c2UgY29uc3RpdHV0ZXMgYWNjZXB0YW5jZSBvZiB0aGUgUmFpZGlhbSBTZXJ2aWNlcyBMdGQgQ2VydGljaWNhdGUgUG9saWN5IGFuZCByZWxhdGVkIGRvY3VtZW50cyB0aGVyZWluLjBEBggrBgEFBQcCARY4aHR0cDovL2Nwcy5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMwDQYJKoZIhvcNAQELBQADggEBAAbfZCswFZRikHzsagA2JWkFtJV2T9uMHQzvwV+trKtwKesKp1IKJ69StLFBF+ax8mQatCUf2rQlrb4/y6tFQExLsjJ6A4L7rhw4+tQnR7CHzboo7GacdyzqlUkYzBsdpRU5PhEaty8IM39m3tJvjvDuGb5apSKvN1bcC2jZ6z/hHZ3KISGZM/FriRB2LlPFkHC/TRltQYi3hhHvaCKtgGT1B0IdzjWyok7ZRs18/nfRMF9KYQJJPc3d0AIr2QH0sAUQy7fLOPNFmXE+m5r/cH7CWrWubEv73shbNqYQtsoa2GLOtrERH3jsI7tJdovxKOUf17dk3yqZR5cAqI8OP5w="],"n":"7XXe96sz47DZke6IS31lZjpmudU9yhDi54jX7i3ngLtIifV0oEbkycPDJolFrGP2QO470o0gRYVFyetYu7WB83YFV4GG9abKrAcJ4rlpg5NvDjbPB0L-FBMzpUiE9vjFbf6a4-Ez4q0RBVKZmqoySFqGGmRSVje1jcFwNZKx9Btg_IBRJ8ByfU0eDofSZlULcTS7LiXbXno9OnDLs6hCNtQuJp8HhHpQdITx7KW01rLXC08skCtT-lBSE32gRLrGZTGORNFjGoLd4GzyYr6oD-R4IBrQdosFKIeD12eHiEYUSQKrecEHWrfiiBUBMwkHQUdzvjl2rRRdwHonLlW-AQ","e":"AQAB","kid":"Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE.pem","x5t#256":"Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE"}]}
2022-01-14 21:55:26 SUCCESS
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Downloaded and added client organization JWK set to environment
client_organization_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "n": "7XXe96sz47DZke6IS31lZjpmudU9yhDi54jX7i3ngLtIifV0oEbkycPDJolFrGP2QO470o0gRYVFyetYu7WB83YFV4GG9abKrAcJ4rlpg5NvDjbPB0L-FBMzpUiE9vjFbf6a4-Ez4q0RBVKZmqoySFqGGmRSVje1jcFwNZKx9Btg_IBRJ8ByfU0eDofSZlULcTS7LiXbXno9OnDLs6hCNtQuJp8HhHpQdITx7KW01rLXC08skCtT-lBSE32gRLrGZTGORNFjGoLd4GzyYr6oD-R4IBrQdosFKIeD12eHiEYUSQKrecEHWrfiiBUBMwkHQUdzvjl2rRRdwHonLlW-AQ",
      "e": "AQAB",
      "kid": "Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE.pem",
      "x5t#256": "Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE"
    }
  ]
}
2022-01-14 21:55:26 SUCCESS
FAPIBrazilValidateJwtSignatureUsingOrganizationJwks
jwt signature validated
jwt
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.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.E_WgSgKXhZhDFUt7_7Y4JQv6wpdHbMj6Ah4E9xEpTN-dktdi25zYkT16-x5gloQ9_NpBZmeJC8Wd-9QZ8jZlyw4VezfFCJSIuNxfjrFSz76OhRCmithAB4rbxaBsHOVXI3WDIcGNkl8vQAkezZCU_waVu7iOBIR6q0yL-NEdC1IDjysk5XKUWzYWasin4ZawIbP6cZaghRGdCP5t_hMZXICMfGKzH8IVvFK8x-Dr1CunTneu5x_7WSPgo1SEiwBObxWejQ39hz4hRKTLuLllkmIkPT7_UH9rtYur1MTtjaTOgdTK-Eeo6-H5v190DYpPVxIf7rWeb56QeZwK_Pxc_w
2022-01-14 21:55:26 SUCCESS
CreateFapiInteractionIdIfNeeded
Created new FAPI interaction ID
fapi_interaction_id
6463305d-e509-4d4b-918d-8db051829e16
2022-01-14 21:55:26 SUCCESS
FAPIBrazilGenerateNewPaymentsConsentResponse
Created consent response
headers
{
  "x-fapi-interaction-id": "6463305d-e509-4d4b-918d-8db051829e16"
}
consentId
urn:conformance:oidf:bYsLjpDf3n
consent_response
{
  "data": {
    "consentId": "urn:conformance:oidf:bYsLjpDf3n",
    "creationDateTime": "2022-01-14T21:55:26Z",
    "status": "AWAITING_AUTHORISATION",
    "statusUpdateDateTime": "2022-01-14T21:55:26Z",
    "expirationDateTime": "2022-01-14T23:55:26Z",
    "transactionFromDateTime": "2022-01-14T21:50:26Z",
    "transactionToDateTime": "2022-01-14T23:55:26Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/hubfintechpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-01-14T21:55:26Z"
    },
    "creditor": {
      "name": "HOMOLOGACAO PIX",
      "cpfCnpj": "55155114845",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "57784518064",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2021-11-11",
      "amount": "1.15",
      "currency": "BRL",
      "details": {
        "proxy": "55155114845",
        "localInstrument": "DICT",
        "creditorAccount": {
          "number": "10173722",
          "accountType": "CACC",
          "ispb": "92894922",
          "issuer": "0001"
        }
      },
      "ibgeTownCode": "5300108",
      "type": "PIX"
    },
    "debtorAccount": {
      "number": "4261073573",
      "accountType": "CACC",
      "ispb": "37241230",
      "issuer": "0001"
    }
  },
  "aud": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197326,
  "jti": "e5811cd0-c6bc-4f1a-9f20-46f263bcff4c",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}
2022-01-14 21:55:26 SUCCESS
FAPIBrazilSignPaymentConsentResponse
Signed the payment consent response
signed_consent_response
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.2GA7WR6CAm7qLsqCryMPk9xRwHLzGqSBj7VPzOeAzBO7h3NKJ9fpaiqaHe9YsZRXgTUMSH8lQd6AuGvjR8JrNvhiKqp-fZT-S7JfL-Bapb4gHEy8JeXkVYFS1e2j8MGEULj7gGngpkd3V3_HZ5QP7zUGZdDF1PG3weWd2u7nVFpfIxoYQrFkvtbRR9TKqDDqmUTVYomOObD6wmEkJbCslKMIpA97GSeeRfFcgN9srTBIZeOiquUnjzfiqoDjNKKPH0sEN0CCver2jOZuSxDDhHEQct5_ZBizWyXfYYKGpYNYvjhKFwrE6TiPkFJxzPmzgE3jfjnRFqTjtBeyCRGsVQ
2022-01-14 21:55:26
ClearAccessTokenFromRequest
Condition ran but did not log anything
2022-01-14 21:55:26 OUTGOING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Response to HTTP request to test instance OhUM1KVToq0MVmr
outgoing_status_code
201
outgoing_headers
{
  "x-fapi-interaction-id": [
    "6463305d-e509-4d4b-918d-8db051829e16"
  ],
  "Content-Type": [
    "application/jwt"
  ]
}
outgoing_body
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.2GA7WR6CAm7qLsqCryMPk9xRwHLzGqSBj7VPzOeAzBO7h3NKJ9fpaiqaHe9YsZRXgTUMSH8lQd6AuGvjR8JrNvhiKqp-fZT-S7JfL-Bapb4gHEy8JeXkVYFS1e2j8MGEULj7gGngpkd3V3_HZ5QP7zUGZdDF1PG3weWd2u7nVFpfIxoYQrFkvtbRR9TKqDDqmUTVYomOObD6wmEkJbCslKMIpA97GSeeRfFcgN9srTBIZeOiquUnjzfiqoDjNKKPH0sEN0CCver2jOZuSxDDhHEQct5_ZBizWyXfYYKGpYNYvjhKFwrE6TiPkFJxzPmzgE3jfjnRFqTjtBeyCRGsVQ
outgoing_path
payments/v1/consents
2022-01-14 21:55:26 INCOMING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Incoming HTTP request to test instance OhUM1KVToq0MVmr
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 21:55:26 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 21:55:26 OUTGOING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Response to HTTP request to test instance OhUM1KVToq0MVmr
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "MIIGqzCCBZOgAwIBAgIUdUCw8bQZidnZ6uERKJuN9u4RGvcwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMDgxNjA5NTUwMFoXDTIyMDkxNTA5NTUwMFowgacxCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMS8wDAYDVQQLEwUxMjM0NTAOBgNVBAsTB2NlcnRtYW4wDwYDVQQLEwhhZ29vZG9uZTEcMBoGA1UEAxMTT3BlbiBCYW5raW5nIEJyYXNpbDE0MDIGCgmSJomT8ixkAQETJDc0ZTkyOWQ5LTMzYjYtNGQ4NS04YmE3LWMxNDZjODY3YTgxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyF1agPcwq5ms99Flo82XsXUroWoD/6FX4AfmOUu113h4VOLYaO3N8HDYbKxgii2En/+O61e/Ptjn4T2PVq0iVcqiF6Gp4sKE5w/bKZRfdCe8qIPS4D+JKpFpesJvIHUeQvlAuBp5dA9nGSpxOjGe5P2+ZzNGXwvux/2ztdweGmKbtOvbYe4RVhiu6bOubog8XEBmD96EnqmoROasH1Hn9kDJIclbTP51j/TlQMzhrSfJJuE3Qq6vWhe/DaPbtmELmlDiYHjp8CjAY5oBMHLmkHvQxEBV4cwbUZj5ZpdqU8tkA78XtR4DkzrJ4fYoBb1+9ABq6GNzxWPpSQMQuBXdsCAwEAAaOCAwIwggL+MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJwv7oHX2exZL304ru+4eGVypHlxMB8GA1UdIwQYMBaAFIZ/WK0X9YK2TrQFs/uwzhFD30y+MEwGCCsGAQUFBwEBBEAwPjA8BggrBgEFBQcwAYYwaHR0cDovL29jc3Auc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL2lzc3Vlci5jcmwwXgYDVR0RBFcwVaAZBgVgTAEDAqAQDA5NaWNoYWVsIEZyYXNlcqAYBgVgTAEDA6APDA0xMzM1MzIzNjAwMTg5oA0GBWBMAQMEoAQMAm5voA8GBWBMAQMHoAYMBGFsb3QwDgYDVR0PAQH/BAQDAgbAMIIBoQYDVR0gBIIBmDCCAZQwggGQBgorBgEEAYO6L2QBMIIBgDCCATYGCCsGAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNlIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNpcGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3NzZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlkaWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQgZG9jdW1lbnRzIHRoZXJlaW4uMEQGCCsGAQUFBwIBFjhodHRwOi8vY3BzLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczANBgkqhkiG9w0BAQsFAAOCAQEAtKn/QnJqKLp52YB14x+M21qwz67utFkWjhauQe0elXupjY5NWZb5wLrGYNOZQzRe2JRzcBbGN6P7lCweRfxMkSGh9YrXbrkBXLEPtLHpTVEy65v1tWl02lC+ooVPyQpSjAQL0L69OQ7s7rnIXyb3rkSUzuGSxsLU1AXpWj0oYFB4wdeIdPAVPs83frC5s4kz42JruSAE2vsbvQURTVPChh+hO6+R6Irz+ZEZ1NSgjQkxvOXHW53CkXZSjjHbAB/nbJYi7YyK7kck99r38Ba/WBfIfywdFVVYfiiW5TS6XbQeVeilmmt5MLxBz96FxR6E6WR+cQwybEe94Fb/jD6xHA\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
outgoing_path
jwks
2022-01-14 21:55:27 INCOMING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Incoming HTTP request to test instance OhUM1KVToq0MVmr
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "PostmanRuntime/7.28.4",
  "accept": "*/*",
  "cache-control": "no-cache",
  "postman-token": "1306898f-b2a7-4b67-910c-59c9885bcb60",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/authorize
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{
  "client_id": "hubfintech-bank",
  "scope": "openid consent:urn:conformance:oidf:bYsLjpDf3n payments",
  "response_type": "code id_token",
  "redirect_uri": "https://hubfintech.com.br/callback",
  "request": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00iLCJjdHkiOiJvYXV0aC1hdXRoei1yZXErand0Iiwia2lkIjoiMGZlNTAyZGQtMTRmMC00ZjQ1LTgwZjktZmViOWEyMTZmOTk2In0.m1D2cFiaVwtPRR-8LUYUYyENeOEl0M5LsJKBOQs6mpLfctkDWpoUSB9vAbmumthcVL4p-5avF0tvv9PkwBR_yLWmupj8cfPIItupzspaWIo7FGIWPRupQ_nwd192UEww32m6HB_b_tpMSvl8qHuYpcmBTTIPfob2owx4p2fkDV1hfzg6ZlGZZTVkcrv3YtJbfY3Qqrcphfzn9RySjFfqRmXWHXoXPwD2ok3LA5RE4AewkwtzmULyrAoT1ITjJssD_Aqq0p2PLM_FiTUZ5zSARKh0tbdNoMg-KzCBNR21aE12P30jUmWK-9IAfIF3Jp3NEtYCphhRqzJXtF_krkH9uQ.ST37ZqlxJafmpRYL.c6O5kbhUWQOEBEKpYpgP0exdWdyD130HHPgzCIKaGK0uaSChSeKZPZzrhVIVeZ1ml7WYA4FRCq8YBT13sCGLJ0qgMdgOVfPIrgc3Mr5mEcoqiiLZ4z5cftRjyqCMJQaJlL1HmRSFhvTGF40ZcWgA8DyeBiS4ERigz-ql0NSkuKHWX4vko7pNE7oq_jpAF1vfFWItdcGdQHNzp3mCGa-zymJNCFqVgrq5wkhNmTKkEwYgAF0FNuLsHcFHr0c6x-KrOgyjHJ2Bu986cBd2iko8TlB1LRf6YPjuTZZFozpObVo1ks8nJj6BoTjeupj7FmlVRLkXc7V5AWKjPuFGYZquXqhHA4cPkp3TLM6Ya14hNn1EHctv_NJX4DBFMuO5yUoj-E5n_8vezHirSY2YoJf7uALL9nqLbMz9yfmh4-8stC3vNeIRjy9H97VQVm60pIBvpU6HN9rlS0ql1b39CSZ-rBQHVccBxRDwkHb-a4q4WTyL4jF3VlbAQLBu3ydiRZAGnzmucwMAKa1pF3Xs9ap6xlpKhsa0FU2ANk49jcxr_aF8tqMjrUE1lxqYJE78svoOgo15X6OQ6YZ64N6y5k_HSvliVRy5aKWMRO7lC3OSkRfNGQLJKU_VO3CGGmPI3dqbd7UFTeOX6iaURpHC3lQPxDkG79Th9KYyYixZCy7jtRjSHLOI9sKkrxfHjQ0UkYwZhi6ZD8yyKwAoiy_pBgekc6u_8yPzDY0c6cYRLP_sAYc9V23JB8TqnsOXRNYZQlFhjSQlV7CmvDFW86tTvmcAOZnVYmCnW6Cslbk9oEHlxRhzVeUdExru1pAm7SbrJczU6WThuQ4PJyCOnghIyzLamRHK1-SNUHSgsG_0MPXeSRsRDfuSYbbgFU9RoP_MLjSP_Jq3I8Ap9sNX1558j_88o6v94zHOhHuaoBue00KNr5_5TSkRJseQWVjpZJzEEdCb6_OMejDeEu-jLYK0uKlsQSIrbcmKthJTc_F0Gsuigw2dpHR4O-m2FLDVCbDMZPHR51RtOwAykbptOHkIUbix09-s3hc7pyeqLXKSM3_lDu1QXAMgluAEpVwpV4eCP7HAT1blQE3Svhrn37v9e8txW9ktqge24zUReGv4xurzkrcrjDUMoZah2qK4tgclrTQvyOO4hcJ7zVk9OAB6102ChLhXvGGZoLWGuB0IweZjoo1DVTs55Nl240vLuc8IkNy_2j4aMeBg0xqEzs2D2m96mF-j2687YvrnyP0FZwT4vr_4seVSo9QJEkejhr9yhCogXszJO2sKSAR0iZc5MhvlsAd7sUTqhTWzfk1kqO9OghrZS0fTwrqES41BrUXXnifkYaAwHhgKNNb3ksvQQeK_KWBb8Rn4DJzhhS4PEBe79zPihoHppLMk35nZTV2GVfkv6nYvLu1ZBE0fgUyC5aMlE8AAeNjEhBfSd4XiHLnzVN9pK-dtQEoNdIsReGjGD_ymzT2ZS6_u0LtaN4YR--SfYhP2yZ242MBVy7Z0FksRkUgtt2Z-ymeClieBF5aCChF_apKOyL-DKnsJwMdpF31Yr9GIkxAdoIBdTpXPwGaxbWhEGK5gQUPad2R-yZSqIFFcYV10_04eOQjmkEcB41Ot1CxszQiJXNlzDVhbiCdkzbYAyROo0tIGpA3s8NwuAehH8MPxKlCZPLhAj9XA09L12QzTf8QSZVQ1MqKLQWQZK9d4iNdGroQvpP-1aJKyP4IjqzwBqPNxMvNxXIiUyAzeCdefLpUgNj09TH_pFnrIRmzglf6P-4oOLm4pCeLGnDWrnqpo6PT9hvSCTXxPktqzttiLHMA07i8r7QtkhSlN3eO2caDKE_UWxUB4mP8mUTFSeluFRORh6f1hCdqLGYiG7lkDfWBfBzfOeKVth-FaHsnF.7yWdgFrWyaQ-lpGnSrlClA"
}
incoming_body
2022-01-14 21:55:27 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Authorization endpoint
2022-01-14 21:55:27 SUCCESS
ExtractRequestObject
Parsed request object
request_object
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiI2NWI1YTBkNjkxMGNmYzk4YzYzOTk4ZTgyZmI3OTAzOTRmMjM3Y2Y1MzkwZWVjMjg0ZDIzOWNlYmRlYWE1MDZjIn0.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.Ev5U3U7AiTK007Z0KacMxSLBvRaJFAx9Q0IHuq25NkRt-Gf7udT_pQwOQ_ty0tPfh2_owQ_XByG6oFkeVrMEHkMt6sCX24GaMUoKAXlhc8pCpdDm4eMxfo9MbGgYL_tBEO88Rl4mfNuHKljQ7ylViOEhnkWtJUMNOn5FHshmJ80KY8CCJwuDcOmm4y6JIuqNbppQUjeTPp31HnLXWn-SNZNtFU4cQuXKBMW_DQB8PR6sYhU7A4yKlcxp4CQxOCWgW7WdU86Lc1kHDBmanvet9feGFDdXSlu6qlgp0vdKWInBIC3-mYmXIki7U5lwZSseouKsxisuyTGTGWNEubH7Cg",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "oauth-authz-req+jwt",
    "alg": "PS256"
  },
  "claims": {
    "iss": "hubfintech-bank",
    "response_type": "code id_token",
    "code_challenge_method": "S256",
    "nonce": "j-OE_X8V9smkDJ6tYgiOW6BvDF5UGC255oQ9ytkxx5Q",
    "client_id": "hubfintech-bank",
    "aud": "https://www.certification.openid.net/test/a/hubfintech/",
    "nbf": 1642197326,
    "scope": "openid consent:urn:conformance:oidf:bYsLjpDf3n payments",
    "claims": {
      "id_token": {
        "acr": {
          "values": [
            "urn:brasil:openbanking:loa2",
            "urn:brasil:openbanking:loa3"
          ],
          "essential": true
        }
      }
    },
    "state": "0ShW7D-1EHNkh5rXBUBKt30taz0vpLGmZAT2N4GAg1s",
    "redirect_uri": "https://hubfintech.com.br/callback",
    "exp": 1642197626,
    "iat": 1642197326,
    "code_challenge": "qjcMNIfRJm47IhAi_RPhctUn7iz_XS-6TfkzgxqZx9o",
    "jti": "yXre32Wke4FkK-3H25LzaWOsW_5O8ptNdqaLFk8VEAI"
  },
  "jwe_header": {
    "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
    "cty": "oauth-authz-req+jwt",
    "enc": "A256GCM",
    "alg": "RSA-OAEP"
  }
}
2022-01-14 21:55:27 SUCCESS
EnsureRequestObjectWasEncrypted
Request object was encrypted
jwe_header
{
  "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
  "cty": "oauth-authz-req+jwt",
  "enc": "A256GCM",
  "alg": "RSA-OAEP"
}
2022-01-14 21:55:27 SUCCESS
FAPIBrazilEnsureRequestObjectEncryptedUsingRSAOAEPA256GCM
Request object was encrypted using RSA-OAEP and A256GCM
jwe_header
{
  "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
  "cty": "oauth-authz-req+jwt",
  "enc": "A256GCM",
  "alg": "RSA-OAEP"
}
2022-01-14 21:55:27 SUCCESS
ValidateEncryptedRequestObjectHasKid
kid was found in the encrypted request object header
kid
0fe502dd-14f0-4f45-80f9-feb9a216f996
2022-01-14 21:55:27 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "hubfintech-bank",
  "scope": "openid consent:urn:conformance:oidf:bYsLjpDf3n payments",
  "response_type": "code id_token",
  "redirect_uri": "https://hubfintech.com.br/callback",
  "request": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00iLCJjdHkiOiJvYXV0aC1hdXRoei1yZXErand0Iiwia2lkIjoiMGZlNTAyZGQtMTRmMC00ZjQ1LTgwZjktZmViOWEyMTZmOTk2In0.m1D2cFiaVwtPRR-8LUYUYyENeOEl0M5LsJKBOQs6mpLfctkDWpoUSB9vAbmumthcVL4p-5avF0tvv9PkwBR_yLWmupj8cfPIItupzspaWIo7FGIWPRupQ_nwd192UEww32m6HB_b_tpMSvl8qHuYpcmBTTIPfob2owx4p2fkDV1hfzg6ZlGZZTVkcrv3YtJbfY3Qqrcphfzn9RySjFfqRmXWHXoXPwD2ok3LA5RE4AewkwtzmULyrAoT1ITjJssD_Aqq0p2PLM_FiTUZ5zSARKh0tbdNoMg-KzCBNR21aE12P30jUmWK-9IAfIF3Jp3NEtYCphhRqzJXtF_krkH9uQ.ST37ZqlxJafmpRYL.c6O5kbhUWQOEBEKpYpgP0exdWdyD130HHPgzCIKaGK0uaSChSeKZPZzrhVIVeZ1ml7WYA4FRCq8YBT13sCGLJ0qgMdgOVfPIrgc3Mr5mEcoqiiLZ4z5cftRjyqCMJQaJlL1HmRSFhvTGF40ZcWgA8DyeBiS4ERigz-ql0NSkuKHWX4vko7pNE7oq_jpAF1vfFWItdcGdQHNzp3mCGa-zymJNCFqVgrq5wkhNmTKkEwYgAF0FNuLsHcFHr0c6x-KrOgyjHJ2Bu986cBd2iko8TlB1LRf6YPjuTZZFozpObVo1ks8nJj6BoTjeupj7FmlVRLkXc7V5AWKjPuFGYZquXqhHA4cPkp3TLM6Ya14hNn1EHctv_NJX4DBFMuO5yUoj-E5n_8vezHirSY2YoJf7uALL9nqLbMz9yfmh4-8stC3vNeIRjy9H97VQVm60pIBvpU6HN9rlS0ql1b39CSZ-rBQHVccBxRDwkHb-a4q4WTyL4jF3VlbAQLBu3ydiRZAGnzmucwMAKa1pF3Xs9ap6xlpKhsa0FU2ANk49jcxr_aF8tqMjrUE1lxqYJE78svoOgo15X6OQ6YZ64N6y5k_HSvliVRy5aKWMRO7lC3OSkRfNGQLJKU_VO3CGGmPI3dqbd7UFTeOX6iaURpHC3lQPxDkG79Th9KYyYixZCy7jtRjSHLOI9sKkrxfHjQ0UkYwZhi6ZD8yyKwAoiy_pBgekc6u_8yPzDY0c6cYRLP_sAYc9V23JB8TqnsOXRNYZQlFhjSQlV7CmvDFW86tTvmcAOZnVYmCnW6Cslbk9oEHlxRhzVeUdExru1pAm7SbrJczU6WThuQ4PJyCOnghIyzLamRHK1-SNUHSgsG_0MPXeSRsRDfuSYbbgFU9RoP_MLjSP_Jq3I8Ap9sNX1558j_88o6v94zHOhHuaoBue00KNr5_5TSkRJseQWVjpZJzEEdCb6_OMejDeEu-jLYK0uKlsQSIrbcmKthJTc_F0Gsuigw2dpHR4O-m2FLDVCbDMZPHR51RtOwAykbptOHkIUbix09-s3hc7pyeqLXKSM3_lDu1QXAMgluAEpVwpV4eCP7HAT1blQE3Svhrn37v9e8txW9ktqge24zUReGv4xurzkrcrjDUMoZah2qK4tgclrTQvyOO4hcJ7zVk9OAB6102ChLhXvGGZoLWGuB0IweZjoo1DVTs55Nl240vLuc8IkNy_2j4aMeBg0xqEzs2D2m96mF-j2687YvrnyP0FZwT4vr_4seVSo9QJEkejhr9yhCogXszJO2sKSAR0iZc5MhvlsAd7sUTqhTWzfk1kqO9OghrZS0fTwrqES41BrUXXnifkYaAwHhgKNNb3ksvQQeK_KWBb8Rn4DJzhhS4PEBe79zPihoHppLMk35nZTV2GVfkv6nYvLu1ZBE0fgUyC5aMlE8AAeNjEhBfSd4XiHLnzVN9pK-dtQEoNdIsReGjGD_ymzT2ZS6_u0LtaN4YR--SfYhP2yZ242MBVy7Z0FksRkUgtt2Z-ymeClieBF5aCChF_apKOyL-DKnsJwMdpF31Yr9GIkxAdoIBdTpXPwGaxbWhEGK5gQUPad2R-yZSqIFFcYV10_04eOQjmkEcB41Ot1CxszQiJXNlzDVhbiCdkzbYAyROo0tIGpA3s8NwuAehH8MPxKlCZPLhAj9XA09L12QzTf8QSZVQ1MqKLQWQZK9d4iNdGroQvpP-1aJKyP4IjqzwBqPNxMvNxXIiUyAzeCdefLpUgNj09TH_pFnrIRmzglf6P-4oOLm4pCeLGnDWrnqpo6PT9hvSCTXxPktqzttiLHMA07i8r7QtkhSlN3eO2caDKE_UWxUB4mP8mUTFSeluFRORh6f1hCdqLGYiG7lkDfWBfBzfOeKVth-FaHsnF.7yWdgFrWyaQ-lpGnSrlClA",
  "iss": "hubfintech-bank",
  "code_challenge_method": "S256",
  "nonce": "j-OE_X8V9smkDJ6tYgiOW6BvDF5UGC255oQ9ytkxx5Q",
  "aud": "https://www.certification.openid.net/test/a/hubfintech/",
  "nbf": 1642197326,
  "claims": {
    "id_token": {
      "acr": {
        "values": [
          "urn:brasil:openbanking:loa2",
          "urn:brasil:openbanking:loa3"
        ],
        "essential": true
      }
    }
  },
  "state": "0ShW7D-1EHNkh5rXBUBKt30taz0vpLGmZAT2N4GAg1s",
  "exp": 1642197626,
  "iat": 1642197326,
  "code_challenge": "qjcMNIfRJm47IhAi_RPhctUn7iz_XS-6TfkzgxqZx9o",
  "jti": "yXre32Wke4FkK-3H25LzaWOsW_5O8ptNdqaLFk8VEAI"
}
2022-01-14 21:55:27 SUCCESS
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
alg
PS256
2022-01-14 21:55:27 SUCCESS
FAPIBrazilValidateRequestObjectIdTokenACRClaims
Acr value in request object is as expected
received
[
  "urn:brasil:openbanking:loa3"
]
2022-01-14 21:55:27 SUCCESS
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Jan 14, 2022, 10:00:26 PM"
2022-01-14 21:55:27 SUCCESS
FAPI1AdvancedValidateRequestObjectNBFClaim
nbf claim is valid
nbf
"Jan 14, 2022, 9:55:26 PM"
now
"Jan 14, 2022, 9:55:27 PM"
2022-01-14 21:55:27
ValidateRequestObjectClaims
Request object does not contain a max_age claim
2022-01-14 21:55:27 SUCCESS
ValidateRequestObjectClaims
Request object claims passed all validation checks
2022-01-14 21:55:27 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2022-01-14 21:55:27 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2022-01-14 21:55:27 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2022-01-14 21:55:27 SUCCESS
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
request_object
eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiI2NWI1YTBkNjkxMGNmYzk4YzYzOTk4ZTgyZmI3OTAzOTRmMjM3Y2Y1MzkwZWVjMjg0ZDIzOWNlYmRlYWE1MDZjIn0.eyJub25jZSI6ImotT0VfWDhWOXNta0RKNnRZZ2lPVzZCdkRGNVVHQzI1NW9ROXl0a3h4NVEiLCJzdGF0ZSI6IjBTaFc3RC0xRUhOa2g1clhCVUJLdDMwdGF6MHZwTEdtWkFUMk40R0FnMXMiLCJzY29wZSI6Im9wZW5pZCBjb25zZW50OnVybjpjb25mb3JtYW5jZTpvaWRmOmJZc0xqcERmM24gcGF5bWVudHMiLCJyZXNwb25zZV90eXBlIjoiY29kZSBpZF90b2tlbiIsInJlZGlyZWN0X3VyaSI6Imh0dHBzOi8vaHViZmludGVjaC5jb20uYnIvY2FsbGJhY2siLCJjbGFpbXMiOnsiaWRfdG9rZW4iOnsiYWNyIjp7InZhbHVlcyI6WyJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTIiLCJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiXSwiZXNzZW50aWFsIjp0cnVlfX19LCJjb2RlX2NoYWxsZW5nZSI6InFqY01OSWZSSm00N0loQWlfUlBoY3RVbjdpel9YUy02VGZremd4cVp4OW8iLCJjb2RlX2NoYWxsZW5nZV9tZXRob2QiOiJTMjU2IiwiaXNzIjoiaHViZmludGVjaC1iYW5rIiwiYXVkIjoiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoLyIsImNsaWVudF9pZCI6Imh1YmZpbnRlY2gtYmFuayIsImp0aSI6InlYcmUzMldrZTRGa0stM0gyNUx6YVdPc1dfNU84cHROZHFhTEZrOFZFQUkiLCJpYXQiOjE2NDIxOTczMjYsImV4cCI6MTY0MjE5NzYyNiwibmJmIjoxNjQyMTk3MzI2fQ.Ev5U3U7AiTK007Z0KacMxSLBvRaJFAx9Q0IHuq25NkRt-Gf7udT_pQwOQ_ty0tPfh2_owQ_XByG6oFkeVrMEHkMt6sCX24GaMUoKAXlhc8pCpdDm4eMxfo9MbGgYL_tBEO88Rl4mfNuHKljQ7ylViOEhnkWtJUMNOn5FHshmJ80KY8CCJwuDcOmm4y6JIuqNbppQUjeTPp31HnLXWn-SNZNtFU4cQuXKBMW_DQB8PR6sYhU7A4yKlcxp4CQxOCWgW7WdU86Lc1kHDBmanvet9feGFDdXSlu6qlgp0vdKWInBIC3-mYmXIki7U5lwZSseouKsxisuyTGTGWNEubH7Cg
request_object_signing_alg
PS256
jwk
Sun RSA public key, 2048 bits
  params: null
  modulus: 24835287790665225667201897756457923186331169898933095651058896242806349634621520685735029231424370262840171268774397976251374443208480022745267902573891531206236761874192625001500109130615227594752926222053161333895850636600708577038211162564239044748847286852186092706541057328857970427799759121098903785539273621086314145424841738602153431339081856287753094874627272856042936200487327282573176095825196525930737500177796987860637593510325328544795403506349954282032809186183869909253862312706728848687096847100563004344427849975365401878211258490084740049329076860348864658344292135056217322011634392046362833540893
  public exponent: 65537
2022-01-14 21:55:27 SUCCESS
EnsureMatchingRedirectUriInRequestObject
Redirect URI matched
actual
https://hubfintech.com.br/callback
2022-01-14 21:55:27 SUCCESS
EnsureRequiredAuthorizationRequestParametersMatchRequestObject
Required http request parameters match request object claims
response_type
code id_token
client_id
hubfintech-bank
2022-01-14 21:55:27 SUCCESS
EnsureOptionalAuthorizationRequestParametersMatchRequestObject
All http request parameters and request object claims match
2022-01-14 21:55:27 SUCCESS
EnsureAuthorizationHttpRequestContainsOpenIDScope
Found 'openid' in scope http request parameter
actual
[
  "openid",
  "consent:urn:conformance:oidf:bYsLjpDf3n",
  "payments"
]
expected
openid
2022-01-14 21:55:27 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid consent:urn:conformance:oidf:bYsLjpDf3n payments
2022-01-14 21:55:27 SUCCESS
FAPIBrazilValidateConsentScope
Found consent scope in request
actual
[
  "openid",
  "consent:urn:conformance:oidf:bYsLjpDf3n",
  "payments"
]
expected
consent:urn:conformance:oidf:bYsLjpDf3n
2022-01-14 21:55:27 SUCCESS
EnsureScopeContainsPayments
Found payments scope in request
actual
[
  "openid",
  "consent:urn:conformance:oidf:bYsLjpDf3n",
  "payments"
]
2022-01-14 21:55:27 SUCCESS
EnsureResponseTypeIsCodeIdToken
Response type is expected value
expected
code id_token
2022-01-14 21:55:27 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid",
  "consent:urn:conformance:oidf:bYsLjpDf3n",
  "payments"
]
expected
openid
2022-01-14 21:55:27 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
hubfintech-bank
2022-01-14 21:55:27 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
N8C0CsdhBcAO6hxaeVErZxGeTs54bXsd
2022-01-14 21:55:27 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
j-OE_X8V9smkDJ6tYgiOW6BvDF5UGC255oQ9ytkxx5Q
2022-01-14 21:55:27 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash
-B_LI6COfwT8lWTh7HYIHQ
2022-01-14 21:55:27 SUCCESS
CalculateSHash
Successful s_hash encoding
s_hash
b0PSJ6aP0LBvxQKKPaoWgg
2022-01-14 21:55:27 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/hubfintech/
sub
user-subject-1234531
aud
hubfintech-bank
nonce
j-OE_X8V9smkDJ6tYgiOW6BvDF5UGC255oQ9ytkxx5Q
iat
1642197327
exp
1642197627
2022-01-14 21:55:27 SUCCESS
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Added claims to id_token claims
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "j-OE_X8V9smkDJ6tYgiOW6BvDF5UGC255oQ9ytkxx5Q",
  "iat": 1642197327,
  "exp": 1642197627
}
2022-01-14 21:55:27 SUCCESS
AddCHashToIdTokenClaims
Added c_hash to ID token claims
c_hash
-B_LI6COfwT8lWTh7HYIHQ
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "j-OE_X8V9smkDJ6tYgiOW6BvDF5UGC255oQ9ytkxx5Q",
  "iat": 1642197327,
  "exp": 1642197627,
  "c_hash": "-B_LI6COfwT8lWTh7HYIHQ"
}
2022-01-14 21:55:27 SUCCESS
AddSHashToIdTokenClaims
Added s_hash to ID token claims
s_hash
b0PSJ6aP0LBvxQKKPaoWgg
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "j-OE_X8V9smkDJ6tYgiOW6BvDF5UGC255oQ9ytkxx5Q",
  "iat": 1642197327,
  "exp": 1642197627,
  "c_hash": "-B_LI6COfwT8lWTh7HYIHQ",
  "s_hash": "b0PSJ6aP0LBvxQKKPaoWgg"
}
2022-01-14 21:55:27 INFO
AddAtHashToIdTokenClaims
Skipped evaluation due to missing required string: at_hash
expected
at_hash
2022-01-14 21:55:27 SUCCESS
FAPIBrazilAddACRClaimToIdTokenClaims
Added acr value to id_token_claims
acr_value
urn:brasil:openbanking:loa3
claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "j-OE_X8V9smkDJ6tYgiOW6BvDF5UGC255oQ9ytkxx5Q",
  "iat": 1642197327,
  "exp": 1642197627,
  "c_hash": "-B_LI6COfwT8lWTh7HYIHQ",
  "s_hash": "b0PSJ6aP0LBvxQKKPaoWgg",
  "acr": "urn:brasil:openbanking:loa3"
}
2022-01-14 21:55:27 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Imh1YmZpbnRlY2gtYmFuayIsImNfaGFzaCI6Ii1CX0xJNkNPZndUOGxXVGg3SFlJSFEiLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJiMFBTSjZhUDBMQnZ4UUtLUGFvV2dnIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzYyNywibm9uY2UiOiJqLU9FX1g4VjlzbWtESjZ0WWdpT1c2QnZERjVVR0MyNTVvUTl5dGt4eDVRIiwiaWF0IjoxNjQyMTk3MzI3fQ.CaG_E1q1Aw6F7iAQzjz5umnIWVVMfu7DvC-bvDxQ7ITiTE8eYyc3VNuFU9UP2q_ORWh0MGYhePfeLp8it3DIqwA7UdWMj3-l0zVEsejvIPSdSJkEPWkwFK_fzAc1IV1BenOg-Zjr1J-__PC8_6f7Hi_p1FgqqR9dc1Wd-ZzE9UYYQOSeWrZkl9zgs-2mXqGKBmG9EFcEJaGp_k3-tdy61iMAEpRyrxFYUAlRagW-T__Br081jOHWxVVvZYu0CpKspRfHqE3N8HOomAeJoFHANn7LjTkKrrZOuBv_TCKm-f6zasBrlWrvOwdGiLg1747wm25-xCaB4mY5aRzfjvq_FA
2022-01-14 21:55:27 SUCCESS
FAPIBrazilChangeConsentStatusToAuthorized
Changed consent status to AUTHORISED
consent
{
  "data": {
    "consentId": "urn:conformance:oidf:bYsLjpDf3n",
    "creationDateTime": "2022-01-14T21:55:26Z",
    "status": "AUTHORISED",
    "statusUpdateDateTime": "2022-01-14T21:55:27Z",
    "expirationDateTime": "2022-01-14T23:55:26Z",
    "transactionFromDateTime": "2022-01-14T21:50:26Z",
    "transactionToDateTime": "2022-01-14T23:55:26Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/hubfintechpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-01-14T21:55:26Z"
    },
    "creditor": {
      "name": "HOMOLOGACAO PIX",
      "cpfCnpj": "55155114845",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "57784518064",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2021-11-11",
      "amount": "1.15",
      "currency": "BRL",
      "details": {
        "proxy": "55155114845",
        "localInstrument": "DICT",
        "creditorAccount": {
          "number": "10173722",
          "accountType": "CACC",
          "ispb": "92894922",
          "issuer": "0001"
        }
      },
      "ibgeTownCode": "5300108",
      "type": "PIX"
    },
    "debtorAccount": {
      "number": "4261073573",
      "accountType": "CACC",
      "ispb": "37241230",
      "issuer": "0001"
    }
  },
  "aud": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197326,
  "jti": "e5811cd0-c6bc-4f1a-9f20-46f263bcff4c",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}
2022-01-14 21:55:27 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://hubfintech.com.br/callback",
  "state": "0ShW7D-1EHNkh5rXBUBKt30taz0vpLGmZAT2N4GAg1s"
}
2022-01-14 21:55:27 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://hubfintech.com.br/callback",
  "state": "0ShW7D-1EHNkh5rXBUBKt30taz0vpLGmZAT2N4GAg1s",
  "code": "N8C0CsdhBcAO6hxaeVErZxGeTs54bXsd"
}
2022-01-14 21:55:27 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://hubfintech.com.br/callback",
  "state": "0ShW7D-1EHNkh5rXBUBKt30taz0vpLGmZAT2N4GAg1s",
  "code": "N8C0CsdhBcAO6hxaeVErZxGeTs54bXsd",
  "id_token": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Imh1YmZpbnRlY2gtYmFuayIsImNfaGFzaCI6Ii1CX0xJNkNPZndUOGxXVGg3SFlJSFEiLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJiMFBTSjZhUDBMQnZ4UUtLUGFvV2dnIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzYyNywibm9uY2UiOiJqLU9FX1g4VjlzbWtESjZ0WWdpT1c2QnZERjVVR0MyNTVvUTl5dGt4eDVRIiwiaWF0IjoxNjQyMTk3MzI3fQ.CaG_E1q1Aw6F7iAQzjz5umnIWVVMfu7DvC-bvDxQ7ITiTE8eYyc3VNuFU9UP2q_ORWh0MGYhePfeLp8it3DIqwA7UdWMj3-l0zVEsejvIPSdSJkEPWkwFK_fzAc1IV1BenOg-Zjr1J-__PC8_6f7Hi_p1FgqqR9dc1Wd-ZzE9UYYQOSeWrZkl9zgs-2mXqGKBmG9EFcEJaGp_k3-tdy61iMAEpRyrxFYUAlRagW-T__Br081jOHWxVVvZYu0CpKspRfHqE3N8HOomAeJoFHANn7LjTkKrrZOuBv_TCKm-f6zasBrlWrvOwdGiLg1747wm25-xCaB4mY5aRzfjvq_FA"
}
2022-01-14 21:55:27
SendAuthorizationResponseWithResponseModeFragment
Redirecting back to client
uri
https://hubfintech.com.br/callback#state=0ShW7D-1EHNkh5rXBUBKt30taz0vpLGmZAT2N4GAg1s&code=N8C0CsdhBcAO6hxaeVErZxGeTs54bXsd&id_token=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Imh1YmZpbnRlY2gtYmFuayIsImNfaGFzaCI6Ii1CX0xJNkNPZndUOGxXVGg3SFlJSFEiLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJiMFBTSjZhUDBMQnZ4UUtLUGFvV2dnIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzYyNywibm9uY2UiOiJqLU9FX1g4VjlzbWtESjZ0WWdpT1c2QnZERjVVR0MyNTVvUTl5dGt4eDVRIiwiaWF0IjoxNjQyMTk3MzI3fQ.CaG_E1q1Aw6F7iAQzjz5umnIWVVMfu7DvC-bvDxQ7ITiTE8eYyc3VNuFU9UP2q_ORWh0MGYhePfeLp8it3DIqwA7UdWMj3-l0zVEsejvIPSdSJkEPWkwFK_fzAc1IV1BenOg-Zjr1J-__PC8_6f7Hi_p1FgqqR9dc1Wd-ZzE9UYYQOSeWrZkl9zgs-2mXqGKBmG9EFcEJaGp_k3-tdy61iMAEpRyrxFYUAlRagW-T__Br081jOHWxVVvZYu0CpKspRfHqE3N8HOomAeJoFHANn7LjTkKrrZOuBv_TCKm-f6zasBrlWrvOwdGiLg1747wm25-xCaB4mY5aRzfjvq_FA
2022-01-14 21:55:27 OUTGOING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Response to HTTP request to test instance OhUM1KVToq0MVmr
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://hubfintech.com.br/callback#state=0ShW7D-1EHNkh5rXBUBKt30taz0vpLGmZAT2N4GAg1s&code=N8C0CsdhBcAO6hxaeVErZxGeTs54bXsd&id_token=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Imh1YmZpbnRlY2gtYmFuayIsImNfaGFzaCI6Ii1CX0xJNkNPZndUOGxXVGg3SFlJSFEiLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJiMFBTSjZhUDBMQnZ4UUtLUGFvV2dnIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzYyNywibm9uY2UiOiJqLU9FX1g4VjlzbWtESjZ0WWdpT1c2QnZERjVVR0MyNTVvUTl5dGt4eDVRIiwiaWF0IjoxNjQyMTk3MzI3fQ.CaG_E1q1Aw6F7iAQzjz5umnIWVVMfu7DvC-bvDxQ7ITiTE8eYyc3VNuFU9UP2q_ORWh0MGYhePfeLp8it3DIqwA7UdWMj3-l0zVEsejvIPSdSJkEPWkwFK_fzAc1IV1BenOg-Zjr1J-__PC8_6f7Hi_p1FgqqR9dc1Wd-ZzE9UYYQOSeWrZkl9zgs-2mXqGKBmG9EFcEJaGp_k3-tdy61iMAEpRyrxFYUAlRagW-T__Br081jOHWxVVvZYu0CpKspRfHqE3N8HOomAeJoFHANn7LjTkKrrZOuBv_TCKm-f6zasBrlWrvOwdGiLg1747wm25-xCaB4mY5aRzfjvq_FA]
outgoing_path
authorize
2022-01-14 21:55:28 INCOMING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Incoming HTTP request to test instance OhUM1KVToq0MVmr
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 21:55:28 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 21:55:28 OUTGOING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Response to HTTP request to test instance OhUM1KVToq0MVmr
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-01-14 21:55:28 INCOMING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Incoming HTTP request to test instance OhUM1KVToq0MVmr
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 21:55:28 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 21:55:28 OUTGOING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Response to HTTP request to test instance OhUM1KVToq0MVmr
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
outgoing_path
jwks
2022-01-14 21:55:29 INCOMING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Incoming HTTP request to test instance OhUM1KVToq0MVmr
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "content-length": "1233",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "N8C0CsdhBcAO6hxaeVErZxGeTs54bXsd",
  "redirect_uri": "https://hubfintech.com.br/callback",
  "code_verifier": "p5Z5bG41Rg_i1JDRwng-3fQfv5BKicMFjUvsevmfIwc",
  "client_id": "hubfintech-bank",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczMjksImV4cCI6MTY0MjE5NzM4OSwianRpIjoicUNORTN0WTFrbUd5SmFUaWNKZGttM08wZThKMWQwTXZCT1pmd0pFaWNrRSIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.k1EAmnUyiLxPOcAVMn3apwq8-P1r86cg5cgZ8LY9uQzuBFWMErzVyUl1sGuUSQss7gJlNkAXHPeRKx9PN57qcPAP-gTtv96v5E9865coqf1iYmgqirg68uMJvbG95kipgfPbkvmP0EQMeSgpQgxmb6svt0yhmiyeGnJVARqBaZbwdtKCbLMOz_fC5BQ6yTo4xQxKhXadGOgatovPar-mD3gJmBE-hBg8k0x82e40yvqxdZ1Y1bfD5dB7bfGP1zqNol7P-9fwSafoe79Xv7RT4yHSh1qcDpYHTG0J_Qr102vaCeYZllMu_wmUGcNvhKK7sFGgrlR6pOxVXPGQIkDxiA",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=N8C0CsdhBcAO6hxaeVErZxGeTs54bXsd&redirect_uri=https%3A%2F%2Fhubfintech.com.br%2Fcallback&code_verifier=p5Z5bG41Rg_i1JDRwng-3fQfv5BKicMFjUvsevmfIwc&client_id=hubfintech-bank&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczMjksImV4cCI6MTY0MjE5NzM4OSwianRpIjoicUNORTN0WTFrbUd5SmFUaWNKZGttM08wZThKMWQwTXZCT1pmd0pFaWNrRSIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.k1EAmnUyiLxPOcAVMn3apwq8-P1r86cg5cgZ8LY9uQzuBFWMErzVyUl1sGuUSQss7gJlNkAXHPeRKx9PN57qcPAP-gTtv96v5E9865coqf1iYmgqirg68uMJvbG95kipgfPbkvmP0EQMeSgpQgxmb6svt0yhmiyeGnJVARqBaZbwdtKCbLMOz_fC5BQ6yTo4xQxKhXadGOgatovPar-mD3gJmBE-hBg8k0x82e40yvqxdZ1Y1bfD5dB7bfGP1zqNol7P-9fwSafoe79Xv7RT4yHSh1qcDpYHTG0J_Qr102vaCeYZllMu_wmUGcNvhKK7sFGgrlR6pOxVXPGQIkDxiA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2022-01-14 21:55:29 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-01-14 21:55:29 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 21:55:29 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 21:55:29 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 21:55:29 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczMjksImV4cCI6MTY0MjE5NzM4OSwianRpIjoicUNORTN0WTFrbUd5SmFUaWNKZGttM08wZThKMWQwTXZCT1pmd0pFaWNrRSIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.k1EAmnUyiLxPOcAVMn3apwq8-P1r86cg5cgZ8LY9uQzuBFWMErzVyUl1sGuUSQss7gJlNkAXHPeRKx9PN57qcPAP-gTtv96v5E9865coqf1iYmgqirg68uMJvbG95kipgfPbkvmP0EQMeSgpQgxmb6svt0yhmiyeGnJVARqBaZbwdtKCbLMOz_fC5BQ6yTo4xQxKhXadGOgatovPar-mD3gJmBE-hBg8k0x82e40yvqxdZ1Y1bfD5dB7bfGP1zqNol7P-9fwSafoe79Xv7RT4yHSh1qcDpYHTG0J_Qr102vaCeYZllMu_wmUGcNvhKK7sFGgrlR6pOxVXPGQIkDxiA",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "hubfintech-bank",
    "aud": [
      "https://www.certification.openid.net/test/a/hubfintech/",
      "https://www.certification.openid.net/test/a/hubfintech/token",
      "https://www.certification.openid.net/test-mtls/a/hubfintech/token"
    ],
    "iss": "hubfintech-bank",
    "exp": 1642197389,
    "iat": 1642197329,
    "jti": "qCNE3tY1kmGyJaTicJdkm3O0e8J1d0MvBOZfwJEickE"
  }
}
2022-01-14 21:55:29
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-01-14 21:55:29 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczMjksImV4cCI6MTY0MjE5NzM4OSwianRpIjoicUNORTN0WTFrbUd5SmFUaWNKZGttM08wZThKMWQwTXZCT1pmd0pFaWNrRSIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.k1EAmnUyiLxPOcAVMn3apwq8-P1r86cg5cgZ8LY9uQzuBFWMErzVyUl1sGuUSQss7gJlNkAXHPeRKx9PN57qcPAP-gTtv96v5E9865coqf1iYmgqirg68uMJvbG95kipgfPbkvmP0EQMeSgpQgxmb6svt0yhmiyeGnJVARqBaZbwdtKCbLMOz_fC5BQ6yTo4xQxKhXadGOgatovPar-mD3gJmBE-hBg8k0x82e40yvqxdZ1Y1bfD5dB7bfGP1zqNol7P-9fwSafoe79Xv7RT4yHSh1qcDpYHTG0J_Qr102vaCeYZllMu_wmUGcNvhKK7sFGgrlR6pOxVXPGQIkDxiA
2022-01-14 21:55:29 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-01-14 21:55:29 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-01-14 21:55:29 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
N8C0CsdhBcAO6hxaeVErZxGeTs54bXsd
2022-01-14 21:55:29 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
https://hubfintech.com.br/callback
2022-01-14 21:55:29 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
HdlzmLq9ZhzIDJfZzOPWCKytRftFIFWr6tztA0UQNY6WfQXSIB
2022-01-14 21:55:29 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
kSWRz7Bysf9JFyXjISJuNA
2022-01-14 21:55:29
CreateRefreshToken
Created refresh token
refresh_token
ZJSOsJATvZPKPmfaBwklqcOdmnWDwRElpqdEukcXTUSdOEIonz3021211342:_+-*
2022-01-14 21:55:29 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/hubfintech/
sub
user-subject-1234531
aud
hubfintech-bank
nonce
j-OE_X8V9smkDJ6tYgiOW6BvDF5UGC255oQ9ytkxx5Q
iat
1642197329
exp
1642197629
2022-01-14 21:55:29 SUCCESS
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Added claims to id_token claims
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "j-OE_X8V9smkDJ6tYgiOW6BvDF5UGC255oQ9ytkxx5Q",
  "iat": 1642197329,
  "exp": 1642197629
}
2022-01-14 21:55:29 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
kSWRz7Bysf9JFyXjISJuNA
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "j-OE_X8V9smkDJ6tYgiOW6BvDF5UGC255oQ9ytkxx5Q",
  "iat": 1642197329,
  "exp": 1642197629,
  "at_hash": "kSWRz7Bysf9JFyXjISJuNA"
}
2022-01-14 21:55:29 SUCCESS
FAPIBrazilAddACRClaimToIdTokenClaims
Added acr value to id_token_claims
acr_value
urn:brasil:openbanking:loa3
claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "j-OE_X8V9smkDJ6tYgiOW6BvDF5UGC255oQ9ytkxx5Q",
  "iat": 1642197329,
  "exp": 1642197629,
  "at_hash": "kSWRz7Bysf9JFyXjISJuNA",
  "acr": "urn:brasil:openbanking:loa3"
}
2022-01-14 21:55:29 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoia1NXUno3QnlzZjlKRnlYaklTSnVOQSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiaHViZmludGVjaC1iYW5rIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzYyOSwibm9uY2UiOiJqLU9FX1g4VjlzbWtESjZ0WWdpT1c2QnZERjVVR0MyNTVvUTl5dGt4eDVRIiwiaWF0IjoxNjQyMTk3MzI5fQ.Wq-lqWTjkax6g48BNpsxwBPz8d6l5MXlEmMz4pAuCOlcGiQwiIQDejtfjFNoZceROb_tuH9uaR9QeJJ2uh6YotUI1AbqNc6GTxhfXJjjZIF-rJnoOze2uSVtsONMeFgdJQ1EpyE2pGjy8uey5tpQlojfJttxSERJ6SG3Y4T10MJMljZbuiWfj1cFSTwjXwu5KsPNesEJHoaTQ_4Ai_5Wdv38PmRaQEixBui9pdGZehuyhAdwIEyeE8fRqWEQR9_6rDHRQfFl_PHRmgdJAIflcMD2tXbPHkfxGlHN-ORgoznbz2NWSjmzHOcXDjHApxrqPdXl5fXhsIR5UkTzjKaw0Q
2022-01-14 21:55:29 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
HdlzmLq9ZhzIDJfZzOPWCKytRftFIFWr6tztA0UQNY6WfQXSIB
token_type
Bearer
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoia1NXUno3QnlzZjlKRnlYaklTSnVOQSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiaHViZmludGVjaC1iYW5rIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzYyOSwibm9uY2UiOiJqLU9FX1g4VjlzbWtESjZ0WWdpT1c2QnZERjVVR0MyNTVvUTl5dGt4eDVRIiwiaWF0IjoxNjQyMTk3MzI5fQ.Wq-lqWTjkax6g48BNpsxwBPz8d6l5MXlEmMz4pAuCOlcGiQwiIQDejtfjFNoZceROb_tuH9uaR9QeJJ2uh6YotUI1AbqNc6GTxhfXJjjZIF-rJnoOze2uSVtsONMeFgdJQ1EpyE2pGjy8uey5tpQlojfJttxSERJ6SG3Y4T10MJMljZbuiWfj1cFSTwjXwu5KsPNesEJHoaTQ_4Ai_5Wdv38PmRaQEixBui9pdGZehuyhAdwIEyeE8fRqWEQR9_6rDHRQfFl_PHRmgdJAIflcMD2tXbPHkfxGlHN-ORgoznbz2NWSjmzHOcXDjHApxrqPdXl5fXhsIR5UkTzjKaw0Q
refresh_token
ZJSOsJATvZPKPmfaBwklqcOdmnWDwRElpqdEukcXTUSdOEIonz3021211342:_+-*
scope
openid consent:urn:conformance:oidf:bYsLjpDf3n payments dcd02bb0-03a3-49d8-a74c-4b82a0f9b509
2022-01-14 21:55:29 OUTGOING
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Response to HTTP request to test instance OhUM1KVToq0MVmr
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "HdlzmLq9ZhzIDJfZzOPWCKytRftFIFWr6tztA0UQNY6WfQXSIB",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoia1NXUno3QnlzZjlKRnlYaklTSnVOQSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiaHViZmludGVjaC1iYW5rIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzYyOSwibm9uY2UiOiJqLU9FX1g4VjlzbWtESjZ0WWdpT1c2QnZERjVVR0MyNTVvUTl5dGt4eDVRIiwiaWF0IjoxNjQyMTk3MzI5fQ.Wq-lqWTjkax6g48BNpsxwBPz8d6l5MXlEmMz4pAuCOlcGiQwiIQDejtfjFNoZceROb_tuH9uaR9QeJJ2uh6YotUI1AbqNc6GTxhfXJjjZIF-rJnoOze2uSVtsONMeFgdJQ1EpyE2pGjy8uey5tpQlojfJttxSERJ6SG3Y4T10MJMljZbuiWfj1cFSTwjXwu5KsPNesEJHoaTQ_4Ai_5Wdv38PmRaQEixBui9pdGZehuyhAdwIEyeE8fRqWEQR9_6rDHRQfFl_PHRmgdJAIflcMD2tXbPHkfxGlHN-ORgoznbz2NWSjmzHOcXDjHApxrqPdXl5fXhsIR5UkTzjKaw0Q",
  "refresh_token": "ZJSOsJATvZPKPmfaBwklqcOdmnWDwRElpqdEukcXTUSdOEIonz3021211342:_+-*",
  "scope": "openid consent:urn:conformance:oidf:bYsLjpDf3n payments dcd02bb0-03a3-49d8-a74c-4b82a0f9b509"
}
outgoing_path
token
2022-01-14 21:55:34 FINISHED
fapi1-advanced-final-client-test-invalid-scope-in-token-endpoint-response
Test has run to completion
testmodule_result
PASSED
2022-01-14 21:55:35
TEST-RUNNER
Alias has now been claimed by another test
alias
hubfintech
new_test_id
ZVOXCQuFvUrSpTB
Test Results