Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-01-14 21:55:35 INFO
TEST-RUNNER
Test instance ZVOXCQuFvUrSpTB created
baseUrl
https://www.certification.openid.net/test/a/hubfintech
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "by_value",
  "fapi_profile": "openbanking_brazil",
  "fapi_jarm_type": "oidc",
  "fapi_response_mode": "plain_response"
}
alias
hubfintech
description
Hub Fintech - Iniciação de Pagamentos
planId
CHLuUAFFBnQiw
config
{
  "alias": "hubfintech",
  "description": "Hub Fintech - Iniciação de Pagamentos",
  "server": {
    "jwks": {
      "keys": [
        {
          "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
          "kty": "RSA",
          "alg": "PS256",
          "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
          "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
          "e": "AQAB",
          "use": "sig",
          "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
          "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
          "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
          "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
          "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
          "x5c": [
            "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\u003d\u003d"
          ]
        },
        {
          "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
          "kty": "RSA",
          "alg": "RSA-OAEP",
          "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
          "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
          "e": "AQAB",
          "use": "enc",
          "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
          "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
          "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
          "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
          "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
        }
      ]
    }
  },
  "client": {
    "client_id": "hubfintech-bank",
    "redirect_uri": "https://hubfintech.com.br/callback",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "sig",
          "alg": "PS256",
          "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ",
          "e": "AQAB",
          "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c"
        },
        {
          "kty": "RSA",
          "use": "enc",
          "alg": "RSA-OAEP",
          "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww",
          "e": "AQAB",
          "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e"
        }
      ]
    },
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5\nNDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh\nbWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl\nYmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm\naW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T\nFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK\nCZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf\n9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ\n98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1\n1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd\nrSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos\nZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv\nOQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D\nNnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI\nKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr\naS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0\ncDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz\ndWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E\nBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG\nCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm\naWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp\nbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu\nZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2\naWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz\nIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj\nYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB\nBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu\nb3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM\nE5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4\nFDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE\n3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI\nZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr\nJuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO\nHPFJ\n-----END CERTIFICATE-----"
  },
  "client2": {
    "client_id": "hubfintech-bank-two",
    "redirect_uri": "https://hubfintech.com.br/callback",
    "id_token_encrypted_response_alg": "RSA-OAEP",
    "id_token_encrypted_response_enc": "A256GCM",
    "certificate": "-----BEGIN CERTIFICATE-----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\ni5QB\n-----END CERTIFICATE-----",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "sig",
          "alg": "PS256",
          "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ",
          "e": "AQAB",
          "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7"
        },
        {
          "kty": "RSA",
          "use": "enc",
          "alg": "RSA-OAEP",
          "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ",
          "e": "AQAB",
          "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d"
        }
      ]
    }
  },
  "directory": {
    "keystore": "https://keystore.sandbox.directory.openbankingbrasil.org.br/"
  }
}
testName
fapi1-advanced-final-client-refresh-token-test
2022-01-14 21:55:35 SUCCESS
FAPIBrazilGenerateServerConfiguration
Created server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true
}
issuer
https://www.certification.openid.net/test/a/hubfintech/
discoveryUrl
https://www.certification.openid.net/test/a/hubfintech/.well-known/openid-configuration
2022-01-14 21:55:35 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_jwks
{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
server_encryption_keys
{
  "keys": [
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
2022-01-14 21:55:35 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-01-14 21:55:35
SetServerSigningAlgToPS256
Successfully set signing algorithm to PS256
2022-01-14 21:55:35
FAPIBrazilSetGrantTypesSupportedInServerConfiguration
Successfully set grant_types_supported
server
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ]
}
2022-01-14 21:55:35
AddClaimsParameterSupportedTrueToServerConfiguration
Successfully added claims_parameter_supported to server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true
}
2022-01-14 21:55:35
FAPIBrazilAddBrazilSpecificSettingsToServerConfiguration
Added open banking Brazil specific server settings
server
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ]
}
2022-01-14 21:55:35
SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly
Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration
server_configuration
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ]
}
2022-01-14 21:55:35 SUCCESS
AddResponseTypeCodeIdTokenToServerConfiguration
Added code id_token as response type supported
response_types_supported
[
  "code id_token"
]
2022-01-14 21:55:35 SUCCESS
FAPIBrazilAddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
values
[
  "PS256"
]
2022-01-14 21:55:35 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2022-01-14 21:55:35 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "MIIGqzCCBZOgAwIBAgIUdUCw8bQZidnZ6uERKJuN9u4RGvcwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMDgxNjA5NTUwMFoXDTIyMDkxNTA5NTUwMFowgacxCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMS8wDAYDVQQLEwUxMjM0NTAOBgNVBAsTB2NlcnRtYW4wDwYDVQQLEwhhZ29vZG9uZTEcMBoGA1UEAxMTT3BlbiBCYW5raW5nIEJyYXNpbDE0MDIGCgmSJomT8ixkAQETJDc0ZTkyOWQ5LTMzYjYtNGQ4NS04YmE3LWMxNDZjODY3YTgxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyF1agPcwq5ms99Flo82XsXUroWoD/6FX4AfmOUu113h4VOLYaO3N8HDYbKxgii2En/+O61e/Ptjn4T2PVq0iVcqiF6Gp4sKE5w/bKZRfdCe8qIPS4D+JKpFpesJvIHUeQvlAuBp5dA9nGSpxOjGe5P2+ZzNGXwvux/2ztdweGmKbtOvbYe4RVhiu6bOubog8XEBmD96EnqmoROasH1Hn9kDJIclbTP51j/TlQMzhrSfJJuE3Qq6vWhe/DaPbtmELmlDiYHjp8CjAY5oBMHLmkHvQxEBV4cwbUZj5ZpdqU8tkA78XtR4DkzrJ4fYoBb1+9ABq6GNzxWPpSQMQuBXdsCAwEAAaOCAwIwggL+MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJwv7oHX2exZL304ru+4eGVypHlxMB8GA1UdIwQYMBaAFIZ/WK0X9YK2TrQFs/uwzhFD30y+MEwGCCsGAQUFBwEBBEAwPjA8BggrBgEFBQcwAYYwaHR0cDovL29jc3Auc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL2lzc3Vlci5jcmwwXgYDVR0RBFcwVaAZBgVgTAEDAqAQDA5NaWNoYWVsIEZyYXNlcqAYBgVgTAEDA6APDA0xMzM1MzIzNjAwMTg5oA0GBWBMAQMEoAQMAm5voA8GBWBMAQMHoAYMBGFsb3QwDgYDVR0PAQH/BAQDAgbAMIIBoQYDVR0gBIIBmDCCAZQwggGQBgorBgEEAYO6L2QBMIIBgDCCATYGCCsGAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNlIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNpcGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3NzZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlkaWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQgZG9jdW1lbnRzIHRoZXJlaW4uMEQGCCsGAQUFBwIBFjhodHRwOi8vY3BzLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczANBgkqhkiG9w0BAQsFAAOCAQEAtKn/QnJqKLp52YB14x+M21qwz67utFkWjhauQe0elXupjY5NWZb5wLrGYNOZQzRe2JRzcBbGN6P7lCweRfxMkSGh9YrXbrkBXLEPtLHpTVEy65v1tWl02lC+ooVPyQpSjAQL0L69OQ7s7rnIXyb3rkSUzuGSxsLU1AXpWj0oYFB4wdeIdPAVPs83frC5s4kz42JruSAE2vsbvQURTVPChh+hO6+R6Irz+ZEZ1NSgjQkxvOXHW53CkXZSjjHbAB/nbJYi7YyK7kck99r38Ba/WBfIfywdFVVYfiiW5TS6XbQeVeilmmt5MLxBz96FxR6E6WR+cQwybEe94Fb/jD6xHA\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
2022-01-14 21:55:35 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
Verify configuration of first client
2022-01-14 21:55:35 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
hubfintech-bank
redirect_uri
https://hubfintech.com.br/callback
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ",
      "e": "AQAB",
      "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww",
      "e": "AQAB",
      "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e"
    }
  ]
}
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 21:55:35 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-01-14 21:55:35 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ",
      "e": "AQAB",
      "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww",
      "e": "AQAB",
      "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
      "alg": "PS256",
      "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e",
      "alg": "RSA-OAEP",
      "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww"
    }
  ]
}
2022-01-14 21:55:35 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-01-14 21:55:35 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-01-14 21:55:35 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ",
      "e": "AQAB",
      "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww",
      "e": "AQAB",
      "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e"
    }
  ]
}
Verify configuration of second client
2022-01-14 21:55:35 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
hubfintech-bank-two
redirect_uri
https://hubfintech.com.br/callback
id_token_encrypted_response_alg
RSA-OAEP
id_token_encrypted_response_enc
A256GCM
certificate
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIUbozJwymP/g6NdP5bBatu+G9rF9YwDQYJKoZIhvcNAQEL
BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx
FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB
TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NTEwMFoXDTIyMTExNDE5
NTEwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh
bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl
YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm
aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T
FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK
CZImiZPyLGQBARMkYmQ1NTQ5ZDktNjdiNS00MzkyLTgyODYtNWU2ZDhhMjQxNTA1
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySikOXVsymmykvexNTvz
5roVpMCH+xaPGn3rjaIXXF82huDtGoMhM4W9x8uTDDIeK1sLaRDm61pVHogM259f
FmS2etbqyCi3k5dAzGZ0Txt/RYeUgjOYDbKQHbT8eejGDuUmcy3H1TtU+kSnWDu1
2PbFlJo0TTVgCJ5lcjwFp4hZ01NyKWunQshok9EeVbd/ws86sG18DYEAYX4pLGyn
WYBfJaKr05t5JRvtKBK5AeuM27nGEn+h7Y3BLZKhafgSUCY7YA7hipUnaRNyqbYp
EmJd/dty1CUwaZtSK1Y+YsFFvivH8w8RC95kP8nyhpE4+jUOuj2f3Zjy3b0ESv7m
RQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUU5m8jPQ4f2yi
eavRZ2TWx6YX6EYwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI
KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr
aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0
cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz
dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E
BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG
CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm
aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp
bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu
ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2
aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz
IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj
YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB
BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu
b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQDbYp7KxmuJtCHRC3pp
LDquvEGW8BDrYP8P2E2SUgBtE7iTmgVoOCbVOSmdY4h2QSpaoPtbNZk+nP0LxKUc
G9SrGUL64QN17mxmiuSGtp1yvMqVFyLvQcsBs4h/9eZjl71AMM3QJib+gbgHtyR2
zOpY85MpyPMKn2AHSnq0JHPsAT/U1ao2Qg+ybROGot0iFCvZ/k6tGVxDyM5JVHwA
mLKO+C68mEYdDr0pzOnw86Vy/UvJA/OUmuxF25FaNthQl2QVeM/pmI/y7JZSHb1G
HZMU2R3t5YJuIyODWjIYpdcyy7x/tKtC0KeEx3l1RYidhheP0hSQV4PMAC72g18V
i5QB
-----END CERTIFICATE-----
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ",
      "e": "AQAB",
      "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ",
      "e": "AQAB",
      "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d"
    }
  ]
}
2022-01-14 21:55:35 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-01-14 21:55:35 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ",
      "e": "AQAB",
      "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ",
      "e": "AQAB",
      "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7",
      "alg": "PS256",
      "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d",
      "alg": "RSA-OAEP",
      "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ"
    }
  ]
}
2022-01-14 21:55:35 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-01-14 21:55:35 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-01-14 21:55:35 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ",
      "e": "AQAB",
      "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ",
      "e": "AQAB",
      "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d"
    }
  ]
}
2022-01-14 21:55:35
fapi1-advanced-final-client-refresh-token-test
Setup Done
2022-01-14 21:55:37 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 21:55:37 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 21:55:37 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-01-14 21:55:38 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "content-length": "1096",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/token
incoming_body_form_params
{
  "grant_type": "client_credentials",
  "scope": "payments",
  "client_id": "hubfintech-bank",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczMzcsImV4cCI6MTY0MjE5NzM5NywianRpIjoiS3RPTnZ2eHUwSVB5QklOaktJSXQ3bWVLQ2dpcE5oZ3dVbWtiWHNSdWdNbyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.weh12Bspo_9X7dly_-lnF_QfWl2HkcJhGMkGHrK-XC__fcOY3YCiy26kTRXRoCIk9_VSCzoAIXhIEgCTRogWuJ5599Ta-hU7bN8Bvlw_kU1K_W5BIBXppZba_fxhIM2yhHLRtnrCiYmAod3J2U0lF5wZbNcyQox0aQSkZYVWq3Wvf7Vve_NYMPnGi-PJ2fUqJz6KM0yeCnSyh0QSQz04xEBPfIRh4CEmVxLed2aBkMcRvDoon47i_WcBrohPdVgAFhp0CGFjOqkOz_uRDFWCYg9b8TgtL8P4Sj-CYSvZcdtzuY-g2eTEKHFLt3UUPHtfySLrH38w22n_nvNtxwkE_Q",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=client_credentials&scope=payments&client_id=hubfintech-bank&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczMzcsImV4cCI6MTY0MjE5NzM5NywianRpIjoiS3RPTnZ2eHUwSVB5QklOaktJSXQ3bWVLQ2dpcE5oZ3dVbWtiWHNSdWdNbyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.weh12Bspo_9X7dly_-lnF_QfWl2HkcJhGMkGHrK-XC__fcOY3YCiy26kTRXRoCIk9_VSCzoAIXhIEgCTRogWuJ5599Ta-hU7bN8Bvlw_kU1K_W5BIBXppZba_fxhIM2yhHLRtnrCiYmAod3J2U0lF5wZbNcyQox0aQSkZYVWq3Wvf7Vve_NYMPnGi-PJ2fUqJz6KM0yeCnSyh0QSQz04xEBPfIRh4CEmVxLed2aBkMcRvDoon47i_WcBrohPdVgAFhp0CGFjOqkOz_uRDFWCYg9b8TgtL8P4Sj-CYSvZcdtzuY-g2eTEKHFLt3UUPHtfySLrH38w22n_nvNtxwkE_Q&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2022-01-14 21:55:38 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-01-14 21:55:38 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 21:55:38 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 21:55:38 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL
BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx
FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB
TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5
NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh
bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl
YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm
aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T
FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK
CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf
9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ
98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1
1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd
rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos
ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv
OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D
Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI
KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr
aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0
cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz
dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E
BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG
CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm
aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp
bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu
ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2
aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz
IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj
YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB
BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu
b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM
E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4
FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE
3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI
ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr
JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO
HPFJ
-----END CERTIFICATE-----
2022-01-14 21:55:38 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczMzcsImV4cCI6MTY0MjE5NzM5NywianRpIjoiS3RPTnZ2eHUwSVB5QklOaktJSXQ3bWVLQ2dpcE5oZ3dVbWtiWHNSdWdNbyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.weh12Bspo_9X7dly_-lnF_QfWl2HkcJhGMkGHrK-XC__fcOY3YCiy26kTRXRoCIk9_VSCzoAIXhIEgCTRogWuJ5599Ta-hU7bN8Bvlw_kU1K_W5BIBXppZba_fxhIM2yhHLRtnrCiYmAod3J2U0lF5wZbNcyQox0aQSkZYVWq3Wvf7Vve_NYMPnGi-PJ2fUqJz6KM0yeCnSyh0QSQz04xEBPfIRh4CEmVxLed2aBkMcRvDoon47i_WcBrohPdVgAFhp0CGFjOqkOz_uRDFWCYg9b8TgtL8P4Sj-CYSvZcdtzuY-g2eTEKHFLt3UUPHtfySLrH38w22n_nvNtxwkE_Q",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "hubfintech-bank",
    "aud": [
      "https://www.certification.openid.net/test/a/hubfintech/",
      "https://www.certification.openid.net/test/a/hubfintech/token",
      "https://www.certification.openid.net/test-mtls/a/hubfintech/token"
    ],
    "iss": "hubfintech-bank",
    "exp": 1642197397,
    "iat": 1642197337,
    "jti": "KtONvvxu0IPyBINjKIIt7meKCgipNhgwUmkbXsRugMo"
  }
}
2022-01-14 21:55:38
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-01-14 21:55:38 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczMzcsImV4cCI6MTY0MjE5NzM5NywianRpIjoiS3RPTnZ2eHUwSVB5QklOaktJSXQ3bWVLQ2dpcE5oZ3dVbWtiWHNSdWdNbyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.weh12Bspo_9X7dly_-lnF_QfWl2HkcJhGMkGHrK-XC__fcOY3YCiy26kTRXRoCIk9_VSCzoAIXhIEgCTRogWuJ5599Ta-hU7bN8Bvlw_kU1K_W5BIBXppZba_fxhIM2yhHLRtnrCiYmAod3J2U0lF5wZbNcyQox0aQSkZYVWq3Wvf7Vve_NYMPnGi-PJ2fUqJz6KM0yeCnSyh0QSQz04xEBPfIRh4CEmVxLed2aBkMcRvDoon47i_WcBrohPdVgAFhp0CGFjOqkOz_uRDFWCYg9b8TgtL8P4Sj-CYSvZcdtzuY-g2eTEKHFLt3UUPHtfySLrH38w22n_nvNtxwkE_Q
2022-01-14 21:55:38 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-01-14 21:55:38 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-01-14 21:55:38 SUCCESS
FAPIBrazilExtractRequestedScopeFromClientCredentialsGrant
Found 'payments' scope in request
actual
[
  "payments"
]
expected
payments
2022-01-14 21:55:38 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
iSEAR7ad2585S8b0h9y9CY5USQ0RoHuLnIjWqSDDRCRVJoJAuk
2022-01-14 21:55:38 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
iSEAR7ad2585S8b0h9y9CY5USQ0RoHuLnIjWqSDDRCRVJoJAuk
token_type
Bearer
2022-01-14 21:55:38
CopyAccessTokenToClientCredentialsField
Condition ran but did not log anything
2022-01-14 21:55:38 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "iSEAR7ad2585S8b0h9y9CY5USQ0RoHuLnIjWqSDDRCRVJoJAuk",
  "token_type": "Bearer"
}
outgoing_path
token
2022-01-14 21:55:39 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json, text/plain, */*",
  "content-type": "application/jwt",
  "authorization": "Bearer iSEAR7ad2585S8b0h9y9CY5USQ0RoHuLnIjWqSDDRCRVJoJAuk",
  "x-idempotency-key": "d1969f06-eeca-4c07-a472-b2087e310619",
  "user-agent": "axios/0.24.0",
  "content-length": "1412",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/payments/v1/consents
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.eyJkYXRhIjp7ImxvZ2dlZFVzZXIiOnsiZG9jdW1lbnQiOnsiaWRlbnRpZmljYXRpb24iOiI1Nzc4NDUxODA2NCIsInJlbCI6IkNQRiJ9fSwiY3JlZGl0b3IiOnsiY3BmQ25waiI6IjU1MTU1MTE0ODQ1IiwibmFtZSI6IkhPTU9MT0dBQ0FPIFBJWCIsInBlcnNvblR5cGUiOiJQRVNTT0FfTkFUVVJBTCJ9LCJwYXltZW50Ijp7ImFtb3VudCI6IjEuMTUiLCJjdXJyZW5jeSI6IkJSTCIsImRhdGUiOiIyMDIxLTExLTExIiwiZGV0YWlscyI6eyJjcmVkaXRvckFjY291bnQiOnsiYWNjb3VudFR5cGUiOiJDQUNDIiwiaXNwYiI6IjkyODk0OTIyIiwiaXNzdWVyIjoiMDAwMSIsIm51bWJlciI6IjEwMTczNzIyIn0sImxvY2FsSW5zdHJ1bWVudCI6IkRJQ1QiLCJwcm94eSI6IjU1MTU1MTE0ODQ1In0sImliZ2VUb3duQ29kZSI6IjUzMDAxMDgiLCJ0eXBlIjoiUElYIn0sImRlYnRvckFjY291bnQiOnsiYWNjb3VudFR5cGUiOiJDQUNDIiwiaXNwYiI6IjM3MjQxMjMwIiwiaXNzdWVyIjoiMDAwMSIsIm51bWJlciI6IjQyNjEwNzM1NzMifX0sImlhdCI6MTY0MjE5NzMzOCwiYXVkIjoiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvcGF5bWVudHMvdjEvY29uc2VudHMiLCJpc3MiOiI3ZWViZTAxNy1jYjAxLTQ5OGMtODFlNC02YjQxNDliMThlOTMiLCJqdGkiOiIzZDJlMDliOS04NWIyLTQ2YWEtYmZiYy0yMzUzMDRlODM5ZDEifQ.NMRNlmFl81kNPrI-nVIA38Ojd6yU7dMz5zP4w8L2HmDA_BBlWFNPb8lcgUCFXSdQfxXLQ5pRc0ZFXgLCLE1ErIHz8Sx7n7h1gA4OVR-t1szgGAIHG4NXPyv6Jlnecv4Kp6SZ8f9dmGMo9Vq_cRZFLKTJAWOraqKprK2bHDwSZsURxUioOGR1A5QEheEKrXPVaUBBLTcbyePJ-e8KWvgvX-LCYWRiJGdk2I0qE-uWuC0N4KriBapiIQ9BciAA-mACmQhSp-fJ7g-JU_dGndxBkBaXg6hwKOt0DXZ4T_iP_AjJIxvYT3D8ClGdi3rIls1Wd5zuuPAt5NmsOI0uH3pfdg
2022-01-14 21:55:39 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
New consent endpoint
2022-01-14 21:55:39 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 21:55:39 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 21:55:39 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 21:55:39 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2022-01-14 21:55:39 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-01-14 21:55:39 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
iSEAR7ad2585S8b0h9y9CY5USQ0RoHuLnIjWqSDDRCRVJoJAuk
2022-01-14 21:55:39 SUCCESS
RequireBearerClientCredentialsAccessToken
Found access token in request
actual
iSEAR7ad2585S8b0h9y9CY5USQ0RoHuLnIjWqSDDRCRVJoJAuk
2022-01-14 21:55:39 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2022-01-14 21:55:39 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2022-01-14 21:55:39 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2022-01-14 21:55:39 SUCCESS
FAPIBrazilExtractCertificateSubjectFromServerJwks
Extracted subject from the certificate included in server jwks
subjectdn
UID=74e929d9-33b6-4d85-8ba7-c146c867a817,CN=Open Banking Brasil,OU=12345+OU=certman+OU=agoodone,O=ICP-Brasil,C=BR
ou
12345
brazil_software_id
74e929d9-33b6-4d85-8ba7-c146c867a817
2022-01-14 21:55:39 SUCCESS
FAPIBrazilEnsureClientCredentialsScopeContainedPayments
The token request which was used to obtain the access token contained 'payments' scope
actual
[
  "payments"
]
2022-01-14 21:55:39 SUCCESS
FAPIBrazilExtractPaymentsConsentRequest
Parsed payments consent request
payments_consent_request
{
  "aud": "https://www.certification.openid.net/test-mtls/a/hubfintech/payments/v1/consents",
  "data": {
    "debtorAccount": {
      "number": "4261073573",
      "accountType": "CACC",
      "ispb": "37241230",
      "issuer": "0001"
    },
    "loggedUser": {
      "document": {
        "identification": "57784518064",
        "rel": "CPF"
      }
    },
    "creditor": {
      "name": "HOMOLOGACAO PIX",
      "cpfCnpj": "55155114845",
      "personType": "PESSOA_NATURAL"
    },
    "payment": {
      "date": "2021-11-11",
      "amount": "1.15",
      "currency": "BRL",
      "details": {
        "proxy": "55155114845",
        "localInstrument": "DICT",
        "creditorAccount": {
          "number": "10173722",
          "accountType": "CACC",
          "ispb": "92894922",
          "issuer": "0001"
        }
      },
      "ibgeTownCode": "5300108",
      "type": "PIX"
    }
  },
  "iss": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197338,
  "jti": "3d2e09b9-85b2-46aa-bfbc-235304e839d1"
}
2022-01-14 21:55:39 SUCCESS
EnsureIncomingRequestContentTypeIsApplicationJwt
Client correctly used application/jwt content type
2022-01-14 21:55:39 SUCCESS
ExtractXIdempotencyKeyHeader
Found an x-idempotency-key header
idempotency_key
d1969f06-eeca-4c07-a472-b2087e310619
2022-01-14 21:55:39 SUCCESS
FAPIBrazilValidatePaymentConsentRequestAud
aud claim matches the endpoint url
aud
https://www.certification.openid.net/test-mtls/a/hubfintech/payments/v1/consents
2022-01-14 21:55:39 SUCCESS
FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate
Extracted subject from the mtls client certificate
subjectdn
UID=3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,2.5.4.5=#130e3133383834373735303030313139,CN=hubfintech.com.br,OU=7eebe017-cb01-498c-81e4-6b4149b18e93,O=HUB PAGAMENTOS S.A,L=Tambore,ST=SP,C=BR
ou
7eebe017-cb01-498c-81e4-6b4149b18e93
brazil_software_id
3a268f4c-3ae2-466b-88e3-571c5279e939
2022-01-14 21:55:39 SUCCESS
FAPIBrazilEnsureConsentRequestIssEqualsOrganizationId
iss claim in consent request matches organizationId in client certificate
iss
7eebe017-cb01-498c-81e4-6b4149b18e93
2022-01-14 21:55:39 SUCCESS
FAPIBrazilEnsureConsentRequestJtiIsUUIDv4
jti claim in consent request is a UUIDv4
jti
3d2e09b9-85b2-46aa-bfbc-235304e839d1
2022-01-14 21:55:39 SUCCESS
FAPIBrazilValidateConsentRequestIat
iat claim in consent request is valid
iat
1642197338
2022-01-14 21:55:39
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Fetching client organization keys
jwks_uri
https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/application.jwks
2022-01-14 21:55:39
FAPIBrazilFetchClientOrganizationJwksFromDirectory
HTTP request
request_uri
https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/application.jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-01-14 21:55:39 RESPONSE
FAPIBrazilFetchClientOrganizationJwksFromDirectory
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-type": "application/jwk-set+json",
  "content-length": "3040",
  "connection": "keep-alive",
  "x-amz-replication-status": "COMPLETED",
  "last-modified": "Thu, 14 Oct 2021 01:23:27 GMT",
  "x-amz-version-id": "JVMaNfEjLpCjFLt2gqawcczHkoI6xYBE",
  "accept-ranges": "bytes",
  "server": "AmazonS3",
  "date": "Fri, 14 Jan 2022 21:55:26 GMT",
  "etag": "\"dc2e24032ca3282f3a5b544ecf4ff54f\"",
  "x-cache": "Hit from cloudfront",
  "via": "1.1 199fd61d7551d8868317c5b53cc7d24c.cloudfront.net (CloudFront)",
  "x-amz-cf-pop": "IAD89-C3",
  "x-amz-cf-id": "uaDcc5RQQGls42b_Y0nEy4JGqq5wdz60KL4nf9nn6qHGAekoc0t-SA\u003d\u003d",
  "age": "34"
}
response_body
{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"7XXe96sz47DZke6IS31lZjpmudU9yhDi54jX7i3ngLtIifV0oEbkycPDJolFrGP2QO470o0gRYVFyetYu7WB83YFV4GG9abKrAcJ4rlpg5NvDjbPB0L-FBMzpUiE9vjFbf6a4-Ez4q0RBVKZmqoySFqGGmRSVje1jcFwNZKx9Btg_IBRJ8ByfU0eDofSZlULcTS7LiXbXno9OnDLs6hCNtQuJp8HhHpQdITx7KW01rLXC08skCtT-lBSE32gRLrGZTGORNFjGoLd4GzyYr6oD-R4IBrQdosFKIeD12eHiEYUSQKrecEHWrfiiBUBMwkHQUdzvjl2rRRdwHonLlW-AQ","e":"AQAB","kid":"Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE.pem","x5t#256":"Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE"}]}
2022-01-14 21:55:39
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"7XXe96sz47DZke6IS31lZjpmudU9yhDi54jX7i3ngLtIifV0oEbkycPDJolFrGP2QO470o0gRYVFyetYu7WB83YFV4GG9abKrAcJ4rlpg5NvDjbPB0L-FBMzpUiE9vjFbf6a4-Ez4q0RBVKZmqoySFqGGmRSVje1jcFwNZKx9Btg_IBRJ8ByfU0eDofSZlULcTS7LiXbXno9OnDLs6hCNtQuJp8HhHpQdITx7KW01rLXC08skCtT-lBSE32gRLrGZTGORNFjGoLd4GzyYr6oD-R4IBrQdosFKIeD12eHiEYUSQKrecEHWrfiiBUBMwkHQUdzvjl2rRRdwHonLlW-AQ","e":"AQAB","kid":"Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE.pem","x5t#256":"Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE"}]}
2022-01-14 21:55:39 SUCCESS
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Downloaded and added client organization JWK set to environment
client_organization_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "n": "7XXe96sz47DZke6IS31lZjpmudU9yhDi54jX7i3ngLtIifV0oEbkycPDJolFrGP2QO470o0gRYVFyetYu7WB83YFV4GG9abKrAcJ4rlpg5NvDjbPB0L-FBMzpUiE9vjFbf6a4-Ez4q0RBVKZmqoySFqGGmRSVje1jcFwNZKx9Btg_IBRJ8ByfU0eDofSZlULcTS7LiXbXno9OnDLs6hCNtQuJp8HhHpQdITx7KW01rLXC08skCtT-lBSE32gRLrGZTGORNFjGoLd4GzyYr6oD-R4IBrQdosFKIeD12eHiEYUSQKrecEHWrfiiBUBMwkHQUdzvjl2rRRdwHonLlW-AQ",
      "e": "AQAB",
      "kid": "Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE.pem",
      "x5t#256": "Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE"
    }
  ]
}
2022-01-14 21:55:39 SUCCESS
FAPIBrazilValidateJwtSignatureUsingOrganizationJwks
jwt signature validated
jwt
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.eyJkYXRhIjp7ImxvZ2dlZFVzZXIiOnsiZG9jdW1lbnQiOnsiaWRlbnRpZmljYXRpb24iOiI1Nzc4NDUxODA2NCIsInJlbCI6IkNQRiJ9fSwiY3JlZGl0b3IiOnsiY3BmQ25waiI6IjU1MTU1MTE0ODQ1IiwibmFtZSI6IkhPTU9MT0dBQ0FPIFBJWCIsInBlcnNvblR5cGUiOiJQRVNTT0FfTkFUVVJBTCJ9LCJwYXltZW50Ijp7ImFtb3VudCI6IjEuMTUiLCJjdXJyZW5jeSI6IkJSTCIsImRhdGUiOiIyMDIxLTExLTExIiwiZGV0YWlscyI6eyJjcmVkaXRvckFjY291bnQiOnsiYWNjb3VudFR5cGUiOiJDQUNDIiwiaXNwYiI6IjkyODk0OTIyIiwiaXNzdWVyIjoiMDAwMSIsIm51bWJlciI6IjEwMTczNzIyIn0sImxvY2FsSW5zdHJ1bWVudCI6IkRJQ1QiLCJwcm94eSI6IjU1MTU1MTE0ODQ1In0sImliZ2VUb3duQ29kZSI6IjUzMDAxMDgiLCJ0eXBlIjoiUElYIn0sImRlYnRvckFjY291bnQiOnsiYWNjb3VudFR5cGUiOiJDQUNDIiwiaXNwYiI6IjM3MjQxMjMwIiwiaXNzdWVyIjoiMDAwMSIsIm51bWJlciI6IjQyNjEwNzM1NzMifX0sImlhdCI6MTY0MjE5NzMzOCwiYXVkIjoiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvcGF5bWVudHMvdjEvY29uc2VudHMiLCJpc3MiOiI3ZWViZTAxNy1jYjAxLTQ5OGMtODFlNC02YjQxNDliMThlOTMiLCJqdGkiOiIzZDJlMDliOS04NWIyLTQ2YWEtYmZiYy0yMzUzMDRlODM5ZDEifQ.NMRNlmFl81kNPrI-nVIA38Ojd6yU7dMz5zP4w8L2HmDA_BBlWFNPb8lcgUCFXSdQfxXLQ5pRc0ZFXgLCLE1ErIHz8Sx7n7h1gA4OVR-t1szgGAIHG4NXPyv6Jlnecv4Kp6SZ8f9dmGMo9Vq_cRZFLKTJAWOraqKprK2bHDwSZsURxUioOGR1A5QEheEKrXPVaUBBLTcbyePJ-e8KWvgvX-LCYWRiJGdk2I0qE-uWuC0N4KriBapiIQ9BciAA-mACmQhSp-fJ7g-JU_dGndxBkBaXg6hwKOt0DXZ4T_iP_AjJIxvYT3D8ClGdi3rIls1Wd5zuuPAt5NmsOI0uH3pfdg
2022-01-14 21:55:39 SUCCESS
CreateFapiInteractionIdIfNeeded
Created new FAPI interaction ID
fapi_interaction_id
3b0c2ac5-a70b-4387-ab9d-136d584972cc
2022-01-14 21:55:39 SUCCESS
FAPIBrazilGenerateNewPaymentsConsentResponse
Created consent response
headers
{
  "x-fapi-interaction-id": "3b0c2ac5-a70b-4387-ab9d-136d584972cc"
}
consentId
urn:conformance:oidf:N0gemw8R9R
consent_response
{
  "data": {
    "consentId": "urn:conformance:oidf:N0gemw8R9R",
    "creationDateTime": "2022-01-14T21:55:39Z",
    "status": "AWAITING_AUTHORISATION",
    "statusUpdateDateTime": "2022-01-14T21:55:39Z",
    "expirationDateTime": "2022-01-14T23:55:39Z",
    "transactionFromDateTime": "2022-01-14T21:50:39Z",
    "transactionToDateTime": "2022-01-14T23:55:39Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/hubfintechpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-01-14T21:55:39Z"
    },
    "creditor": {
      "name": "HOMOLOGACAO PIX",
      "cpfCnpj": "55155114845",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "57784518064",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2021-11-11",
      "amount": "1.15",
      "currency": "BRL",
      "details": {
        "proxy": "55155114845",
        "localInstrument": "DICT",
        "creditorAccount": {
          "number": "10173722",
          "accountType": "CACC",
          "ispb": "92894922",
          "issuer": "0001"
        }
      },
      "ibgeTownCode": "5300108",
      "type": "PIX"
    },
    "debtorAccount": {
      "number": "4261073573",
      "accountType": "CACC",
      "ispb": "37241230",
      "issuer": "0001"
    }
  },
  "aud": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197339,
  "jti": "5661cc1e-caba-49e2-a058-1a746d873e5e",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}
2022-01-14 21:55:39 SUCCESS
FAPIBrazilSignPaymentConsentResponse
Signed the payment consent response
signed_consent_response
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.qveOQeDCugFa2jmbY71bIyasaHI8eqdwe2GW6aGLJXhys0p1X_EFhJ-BwiSXeZ6brTAybAzAMtPSpVilnrENlAyhNAxO3FVawtlr9GDmiaSPLpMiQnBdoKlVh6OSTRA-LMURv5S0xkQVNauP5f_bOw1iZWpjppzwnJAVzscYJKJVUC-i5eoB8DZZmngrqF_6j_ZDsnh0kxLHs_LprU9U1GcOgNwFLNIcSenl5A9w6dc85Rfa8Qj0beyfb0SG3mEe5_qHPsMQrIvn1LoPphn6tEMPc8p9oQ5T087G90pZa1nNMziLBjVtRtTkfLs_ZpTRqwawbB9AfY65Bha5gchL7w
2022-01-14 21:55:39
ClearAccessTokenFromRequest
Condition ran but did not log anything
2022-01-14 21:55:39 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
201
outgoing_headers
{
  "x-fapi-interaction-id": [
    "3b0c2ac5-a70b-4387-ab9d-136d584972cc"
  ],
  "Content-Type": [
    "application/jwt"
  ]
}
outgoing_body
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJhdWQiOiI3ZWViZTAxNy1jYjAxLTQ5OGMtODFlNC02YjQxNDliMThlOTMiLCJkYXRhIjp7ImRlYnRvckFjY291bnQiOnsibnVtYmVyIjoiNDI2MTA3MzU3MyIsImFjY291bnRUeXBlIjoiQ0FDQyIsImlzcGIiOiIzNzI0MTIzMCIsImlzc3VlciI6IjAwMDEifSwiZXhwaXJhdGlvbkRhdGVUaW1lIjoiMjAyMi0wMS0xNFQyMzo1NTozOVoiLCJ0cmFuc2FjdGlvblRvRGF0ZVRpbWUiOiIyMDIyLTAxLTE0VDIzOjU1OjM5WiIsImxvZ2dlZFVzZXIiOnsiZG9jdW1lbnQiOnsiaWRlbnRpZmljYXRpb24iOiI1Nzc4NDUxODA2NCIsInJlbCI6IkNQRiJ9fSwiY29uc2VudElkIjoidXJuOmNvbmZvcm1hbmNlOm9pZGY6TjBnZW13OFI5UiIsInRyYW5zYWN0aW9uRnJvbURhdGVUaW1lIjoiMjAyMi0wMS0xNFQyMTo1MDozOVoiLCJtZXRhIjp7InRvdGFsUmVjb3JkcyI6MSwicmVxdWVzdERhdGVUaW1lIjoiMjAyMi0wMS0xNFQyMTo1NTozOVoiLCJ0b3RhbFBhZ2VzIjoxfSwic3RhdHVzVXBkYXRlRGF0ZVRpbWUiOiIyMDIyLTAxLTE0VDIxOjU1OjM5WiIsImxpbmtzIjp7InNlbGYiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvaHViZmludGVjaHBheW1lbnRzXC92MVwvY29uc2VudHMifSwiY3JlZGl0b3IiOnsibmFtZSI6IkhPTU9MT0dBQ0FPIFBJWCIsImNwZkNucGoiOiI1NTE1NTExNDg0NSIsInBlcnNvblR5cGUiOiJQRVNTT0FfTkFUVVJBTCJ9LCJwYXltZW50Ijp7ImRhdGUiOiIyMDIxLTExLTExIiwiYW1vdW50IjoiMS4xNSIsImN1cnJlbmN5IjoiQlJMIiwiZGV0YWlscyI6eyJwcm94eSI6IjU1MTU1MTE0ODQ1IiwibG9jYWxJbnN0cnVtZW50IjoiRElDVCIsImNyZWRpdG9yQWNjb3VudCI6eyJudW1iZXIiOiIxMDE3MzcyMiIsImFjY291bnRUeXBlIjoiQ0FDQyIsImlzcGIiOiI5Mjg5NDkyMiIsImlzc3VlciI6IjAwMDEifX0sImliZ2VUb3duQ29kZSI6IjUzMDAxMDgiLCJ0eXBlIjoiUElYIn0sImNyZWF0aW9uRGF0ZVRpbWUiOiIyMDIyLTAxLTE0VDIxOjU1OjM5WiIsInN0YXR1cyI6IkFXQUlUSU5HX0FVVEhPUklTQVRJT04ifSwiaXNzIjoiNzRlOTI5ZDktMzNiNi00ZDg1LThiYTctYzE0NmM4NjdhODE3IiwiaWF0IjoxNjQyMTk3MzM5LCJqdGkiOiI1NjYxY2MxZS1jYWJhLTQ5ZTItYTA1OC0xYTc0NmQ4NzNlNWUifQ.qveOQeDCugFa2jmbY71bIyasaHI8eqdwe2GW6aGLJXhys0p1X_EFhJ-BwiSXeZ6brTAybAzAMtPSpVilnrENlAyhNAxO3FVawtlr9GDmiaSPLpMiQnBdoKlVh6OSTRA-LMURv5S0xkQVNauP5f_bOw1iZWpjppzwnJAVzscYJKJVUC-i5eoB8DZZmngrqF_6j_ZDsnh0kxLHs_LprU9U1GcOgNwFLNIcSenl5A9w6dc85Rfa8Qj0beyfb0SG3mEe5_qHPsMQrIvn1LoPphn6tEMPc8p9oQ5T087G90pZa1nNMziLBjVtRtTkfLs_ZpTRqwawbB9AfY65Bha5gchL7w
outgoing_path
payments/v1/consents
2022-01-14 21:55:39 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 21:55:39 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 21:55:39 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
outgoing_path
jwks
2022-01-14 21:55:40 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "PostmanRuntime/7.28.4",
  "accept": "*/*",
  "cache-control": "no-cache",
  "postman-token": "18dfb7f3-c34b-4f18-a049-d24d0fc44e56",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/authorize
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{
  "client_id": "hubfintech-bank",
  "scope": "openid consent:urn:conformance:oidf:N0gemw8R9R payments",
  "response_type": "code id_token",
  "redirect_uri": "https://hubfintech.com.br/callback",
  "request": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00iLCJjdHkiOiJvYXV0aC1hdXRoei1yZXErand0Iiwia2lkIjoiMGZlNTAyZGQtMTRmMC00ZjQ1LTgwZjktZmViOWEyMTZmOTk2In0.gf7P0hhVjEEbE66thqy8ijzf0x0BRr5AoCuFpTrtmKlqGMocKERP3iRIQecDURbDwydNRTeQyhSpUaoGpz5MtJCImP3P7qlBLqtIRfGurxULi_NWy2eT9DG0EacSg0sox5ZYdCPfB61XQTw7Nw1SZ16CYNMZ1xhSRvQAQUD--xYhEXpMXCZGNhsF6gLOOd9mHkUCYuaY5i9nk2rMUC2G7nOGZa9GuoOq2BsPOY3mZ8Cc4Nf6tXhRIQZko_5aHZktDvH85azkfFVtS8zneokh9tHDJZLZ4a9NkKrehap4lZng_LEg0Zm_kbfC7nqMAm8Qsdp3uhltlQfp6EXhmZd7qQ.829ys9dMI_-6jPeT.KdPRfksoiwwZNAPbw8y-oJujx3_3kzYWMuMnkG9cIENqLU76_K-_ijio__UpnFq3bqRrstb635k1W2B0YLtoLASqsVBvmc3TXrXnHZCgY_M2g61rMJBv1OXXVzk7asrU5JFOJii3_GQ55zq7OBwYrcdB6JtY3kkGGD9DUE6NXbs8EDgxn3ZtEjmlTht6fOvPWcSdaYF9Nwz-irOnD8I1PueRaU_gTuJWIlL03cqyOMCFdzRnYgcUI_M5kX0nDOR0p8XHvmml1hp3tFbxyCfuc_ITeVjhutS9mOoEYrP3TR7HUrx9wNdsEqJgd3_jrjD4ZS4Z5qWTdjHehQiIH3nByxKaq1FGWgEQp7STKxPHayXLch9BV5anB83tci-izAkjMpg_yRGOEZXcGRS_EX0p8FCflsT3tozWAkMxLsmMkSzZahX_GMNhex2Rm3gym9zu2ylpOzXm3IRsmUZwe6qjj7K9HzqD3gVurpEu9akVDOiNK9JF4MwpupnKEdUlg1m1QlSOJpKjYlSNcbBicWZBHKnNYy3kNObrDric3HiNnrJZkzKvyvDdZesdSs_-V5Tmfc-NJZY27O0j2cLituDQ6AcIGnxqDS5RUB81pWc-mN8uORRJY4Nx35gsc03HDBjQT9t9KR_XKoZ1OTHaf6S-6z9VZZPWfsuvO2b6gJiq_MXFykAhAUmyseTw5SXlpFZgAYhvnH3ZwDVaoobnx65m-vAhlIbKo1p5nLNh6H9KGq0CKPBECi-harrGyUFUok6fO_RlyLT-9jIv7ECYgcAhmU1l6qriHOaYHC50pFdX5ueSVh0Z87seX4o6BOOIPVfSNdGr3dLszYqEoo4hqu2hNjsCjHZcrzZ0WdcmzxIaxhYKvqVVZy20KblLGfvIXCYMzOuDZ5Y0nlaxpdxNh5fYaRKi0kWBoAsLt3zko787q3NrPYO_ysK-KV_eFniaHHmPbI_c1u0RSjvY7GP4bxXk3IAHPxfDotM6sjLhvR12HaIH5JubA41-tc-ImpArfiFWQeS8IlbslvuNMmc4XjXyTkAAo5zG_NlUpPwGBATYfpPymPHhMcvqb5jBikWi5ejy_CGo4ltbJSR3rgNBYwwzQOKK9qIKyVKRfQHMheyFnji-5RSO7Gc6k7-2CtnTmxoO81NgE_RC1mGlMU3c_vT0R7kJRxZNkMBvADKhXpBlFa8ttrO5cjBwy_h2glzCLcDQzjM_Ve0K8HTyYCdd9dysZhhalUCsyHJkYjE7aObhv9Re-6aGl_nO9M0rpJUtyMw_bQuaRiN02_5P9tj5u81xKfEt-PdpgZZhAKslMJ_DmFnSteCoSGLl1gwSclMV_ads9nE1BmS9Hdg86WGEtghFQr9dZDUQPVd7xnIHNPItQWTdaj09SqTaXtv3wrE6B8zsGNPlBWDa5mJ3-OI2g5B2EN9-K1GL4-owujS4PsNztWojSuTq-gRcz_-F0Q-z9CVbGm1JIW6ZxIKJmp-ftaNVfKK8ChVjhU3Ca9p-3jPv5xNdWRsNIkVGR6v92FGEuxqH2yV_PGJxq6RS7f2EIhBEeFkYh5KT6bhOi9LmMq2UPI2DiuOCKKgz_k60k-WvJU2X96a4ca4aptES-tH9OQrYkG54ViSSOvKeZuv2gp_fpnEHewnAu7fT6i4OheCSuW7KtH4LHY0vToHl-8CcZOZQOcMyX4IwmjljAENb7U2NMTfeN9C0LAuOFfBKnCIM75csuqfY9d4mt761yMDLHkUB9Qn0_p5vnHu1_1NBpT6UHNkXNnv0j1B6n9aLYKXJ_YXs2zu_oGSoF3mWP6A0Q7_yCRUNPU5268JyhwnWwxLAZiYxgeFaMTpeRoAsuQdM-x0FPztIMzoJ-ggwWS_4obVE2jfe9rH4X2IdPQuqS0wY357W.ThhbA5QDu0tbWmLUTXNKYQ"
}
incoming_body
2022-01-14 21:55:40 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Authorization endpoint
2022-01-14 21:55:40 SUCCESS
ExtractRequestObject
Parsed request object
request_object
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiI2NWI1YTBkNjkxMGNmYzk4YzYzOTk4ZTgyZmI3OTAzOTRmMjM3Y2Y1MzkwZWVjMjg0ZDIzOWNlYmRlYWE1MDZjIn0.eyJub25jZSI6IktXbkRNWk10NHdjV3Jab2huaS1UWG92alFzRXZ1UFg5ekdCRW9NbmlFZk0iLCJzdGF0ZSI6Ik84RlFLNHQ4U094OTJCQUhJcDd0ZW9WSXVRZnFhTW1aSWlCd2t3MldVRTQiLCJzY29wZSI6Im9wZW5pZCBjb25zZW50OnVybjpjb25mb3JtYW5jZTpvaWRmOk4wZ2VtdzhSOVIgcGF5bWVudHMiLCJyZXNwb25zZV90eXBlIjoiY29kZSBpZF90b2tlbiIsInJlZGlyZWN0X3VyaSI6Imh0dHBzOi8vaHViZmludGVjaC5jb20uYnIvY2FsbGJhY2siLCJjbGFpbXMiOnsiaWRfdG9rZW4iOnsiYWNyIjp7InZhbHVlcyI6WyJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTIiLCJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiXSwiZXNzZW50aWFsIjp0cnVlfX19LCJjb2RlX2NoYWxsZW5nZSI6Ink3OVRpdmVlVFlCNUZCYVZ5UXhYUGFyRTN0eFExN1NzOHNvQnVlZGVvTVUiLCJjb2RlX2NoYWxsZW5nZV9tZXRob2QiOiJTMjU2IiwiaXNzIjoiaHViZmludGVjaC1iYW5rIiwiYXVkIjoiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoLyIsImNsaWVudF9pZCI6Imh1YmZpbnRlY2gtYmFuayIsImp0aSI6IlNaSzlBRUNnOE9sWjIzSTBXUTgtSm9YMF95d2ZLeFNqZjdvZjV3TUNyelkiLCJpYXQiOjE2NDIxOTczMzksImV4cCI6MTY0MjE5NzYzOSwibmJmIjoxNjQyMTk3MzM5fQ.g_VC0hu8PfR1SYgCl8JLj7OIWzSspo9-h4zoQyrOIndAyWNazvpD50X4acx3Qmt48Qe-tMYFO_3Ssf2t3HreAw71IN8yKxFwDVAt9zrpae0aceCYE1iBC2vs61EEwob-K4pM2kkXeJJqxFlRlglmAm5Jw9eapmaxVB68z8NR-DBBjjESAW2ay_u_uGB0SYFU5PGZ_I_vF2BbBSWdBCfokuJuTf6uS0p9Fh5wqDXs2cvlrNdxJGFnWKuAZrRLAw3SjHBAxpGObTkjCXryafQRUHKYzqPoAz0Vb-_gJqvjEYlSpDtbsdjPXtL22U3SEzvo_e45UWHTM7SJInAvXEhq2Q",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "oauth-authz-req+jwt",
    "alg": "PS256"
  },
  "claims": {
    "iss": "hubfintech-bank",
    "response_type": "code id_token",
    "code_challenge_method": "S256",
    "nonce": "KWnDMZMt4wcWrZohni-TXovjQsEvuPX9zGBEoMniEfM",
    "client_id": "hubfintech-bank",
    "aud": "https://www.certification.openid.net/test/a/hubfintech/",
    "nbf": 1642197339,
    "scope": "openid consent:urn:conformance:oidf:N0gemw8R9R payments",
    "claims": {
      "id_token": {
        "acr": {
          "values": [
            "urn:brasil:openbanking:loa2",
            "urn:brasil:openbanking:loa3"
          ],
          "essential": true
        }
      }
    },
    "state": "O8FQK4t8SOx92BAHIp7teoVIuQfqaMmZIiBwkw2WUE4",
    "redirect_uri": "https://hubfintech.com.br/callback",
    "exp": 1642197639,
    "iat": 1642197339,
    "code_challenge": "y79TiveeTYB5FBaVyQxXParE3txQ17Ss8soBuedeoMU",
    "jti": "SZK9AECg8OlZ23I0WQ8-JoX0_ywfKxSjf7of5wMCrzY"
  },
  "jwe_header": {
    "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
    "cty": "oauth-authz-req+jwt",
    "enc": "A256GCM",
    "alg": "RSA-OAEP"
  }
}
2022-01-14 21:55:40 SUCCESS
EnsureRequestObjectWasEncrypted
Request object was encrypted
jwe_header
{
  "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
  "cty": "oauth-authz-req+jwt",
  "enc": "A256GCM",
  "alg": "RSA-OAEP"
}
2022-01-14 21:55:40 SUCCESS
FAPIBrazilEnsureRequestObjectEncryptedUsingRSAOAEPA256GCM
Request object was encrypted using RSA-OAEP and A256GCM
jwe_header
{
  "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
  "cty": "oauth-authz-req+jwt",
  "enc": "A256GCM",
  "alg": "RSA-OAEP"
}
2022-01-14 21:55:40 SUCCESS
ValidateEncryptedRequestObjectHasKid
kid was found in the encrypted request object header
kid
0fe502dd-14f0-4f45-80f9-feb9a216f996
2022-01-14 21:55:40 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "hubfintech-bank",
  "scope": "openid consent:urn:conformance:oidf:N0gemw8R9R payments",
  "response_type": "code id_token",
  "redirect_uri": "https://hubfintech.com.br/callback",
  "request": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00iLCJjdHkiOiJvYXV0aC1hdXRoei1yZXErand0Iiwia2lkIjoiMGZlNTAyZGQtMTRmMC00ZjQ1LTgwZjktZmViOWEyMTZmOTk2In0.gf7P0hhVjEEbE66thqy8ijzf0x0BRr5AoCuFpTrtmKlqGMocKERP3iRIQecDURbDwydNRTeQyhSpUaoGpz5MtJCImP3P7qlBLqtIRfGurxULi_NWy2eT9DG0EacSg0sox5ZYdCPfB61XQTw7Nw1SZ16CYNMZ1xhSRvQAQUD--xYhEXpMXCZGNhsF6gLOOd9mHkUCYuaY5i9nk2rMUC2G7nOGZa9GuoOq2BsPOY3mZ8Cc4Nf6tXhRIQZko_5aHZktDvH85azkfFVtS8zneokh9tHDJZLZ4a9NkKrehap4lZng_LEg0Zm_kbfC7nqMAm8Qsdp3uhltlQfp6EXhmZd7qQ.829ys9dMI_-6jPeT.KdPRfksoiwwZNAPbw8y-oJujx3_3kzYWMuMnkG9cIENqLU76_K-_ijio__UpnFq3bqRrstb635k1W2B0YLtoLASqsVBvmc3TXrXnHZCgY_M2g61rMJBv1OXXVzk7asrU5JFOJii3_GQ55zq7OBwYrcdB6JtY3kkGGD9DUE6NXbs8EDgxn3ZtEjmlTht6fOvPWcSdaYF9Nwz-irOnD8I1PueRaU_gTuJWIlL03cqyOMCFdzRnYgcUI_M5kX0nDOR0p8XHvmml1hp3tFbxyCfuc_ITeVjhutS9mOoEYrP3TR7HUrx9wNdsEqJgd3_jrjD4ZS4Z5qWTdjHehQiIH3nByxKaq1FGWgEQp7STKxPHayXLch9BV5anB83tci-izAkjMpg_yRGOEZXcGRS_EX0p8FCflsT3tozWAkMxLsmMkSzZahX_GMNhex2Rm3gym9zu2ylpOzXm3IRsmUZwe6qjj7K9HzqD3gVurpEu9akVDOiNK9JF4MwpupnKEdUlg1m1QlSOJpKjYlSNcbBicWZBHKnNYy3kNObrDric3HiNnrJZkzKvyvDdZesdSs_-V5Tmfc-NJZY27O0j2cLituDQ6AcIGnxqDS5RUB81pWc-mN8uORRJY4Nx35gsc03HDBjQT9t9KR_XKoZ1OTHaf6S-6z9VZZPWfsuvO2b6gJiq_MXFykAhAUmyseTw5SXlpFZgAYhvnH3ZwDVaoobnx65m-vAhlIbKo1p5nLNh6H9KGq0CKPBECi-harrGyUFUok6fO_RlyLT-9jIv7ECYgcAhmU1l6qriHOaYHC50pFdX5ueSVh0Z87seX4o6BOOIPVfSNdGr3dLszYqEoo4hqu2hNjsCjHZcrzZ0WdcmzxIaxhYKvqVVZy20KblLGfvIXCYMzOuDZ5Y0nlaxpdxNh5fYaRKi0kWBoAsLt3zko787q3NrPYO_ysK-KV_eFniaHHmPbI_c1u0RSjvY7GP4bxXk3IAHPxfDotM6sjLhvR12HaIH5JubA41-tc-ImpArfiFWQeS8IlbslvuNMmc4XjXyTkAAo5zG_NlUpPwGBATYfpPymPHhMcvqb5jBikWi5ejy_CGo4ltbJSR3rgNBYwwzQOKK9qIKyVKRfQHMheyFnji-5RSO7Gc6k7-2CtnTmxoO81NgE_RC1mGlMU3c_vT0R7kJRxZNkMBvADKhXpBlFa8ttrO5cjBwy_h2glzCLcDQzjM_Ve0K8HTyYCdd9dysZhhalUCsyHJkYjE7aObhv9Re-6aGl_nO9M0rpJUtyMw_bQuaRiN02_5P9tj5u81xKfEt-PdpgZZhAKslMJ_DmFnSteCoSGLl1gwSclMV_ads9nE1BmS9Hdg86WGEtghFQr9dZDUQPVd7xnIHNPItQWTdaj09SqTaXtv3wrE6B8zsGNPlBWDa5mJ3-OI2g5B2EN9-K1GL4-owujS4PsNztWojSuTq-gRcz_-F0Q-z9CVbGm1JIW6ZxIKJmp-ftaNVfKK8ChVjhU3Ca9p-3jPv5xNdWRsNIkVGR6v92FGEuxqH2yV_PGJxq6RS7f2EIhBEeFkYh5KT6bhOi9LmMq2UPI2DiuOCKKgz_k60k-WvJU2X96a4ca4aptES-tH9OQrYkG54ViSSOvKeZuv2gp_fpnEHewnAu7fT6i4OheCSuW7KtH4LHY0vToHl-8CcZOZQOcMyX4IwmjljAENb7U2NMTfeN9C0LAuOFfBKnCIM75csuqfY9d4mt761yMDLHkUB9Qn0_p5vnHu1_1NBpT6UHNkXNnv0j1B6n9aLYKXJ_YXs2zu_oGSoF3mWP6A0Q7_yCRUNPU5268JyhwnWwxLAZiYxgeFaMTpeRoAsuQdM-x0FPztIMzoJ-ggwWS_4obVE2jfe9rH4X2IdPQuqS0wY357W.ThhbA5QDu0tbWmLUTXNKYQ",
  "iss": "hubfintech-bank",
  "code_challenge_method": "S256",
  "nonce": "KWnDMZMt4wcWrZohni-TXovjQsEvuPX9zGBEoMniEfM",
  "aud": "https://www.certification.openid.net/test/a/hubfintech/",
  "nbf": 1642197339,
  "claims": {
    "id_token": {
      "acr": {
        "values": [
          "urn:brasil:openbanking:loa2",
          "urn:brasil:openbanking:loa3"
        ],
        "essential": true
      }
    }
  },
  "state": "O8FQK4t8SOx92BAHIp7teoVIuQfqaMmZIiBwkw2WUE4",
  "exp": 1642197639,
  "iat": 1642197339,
  "code_challenge": "y79TiveeTYB5FBaVyQxXParE3txQ17Ss8soBuedeoMU",
  "jti": "SZK9AECg8OlZ23I0WQ8-JoX0_ywfKxSjf7of5wMCrzY"
}
2022-01-14 21:55:40 SUCCESS
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
alg
PS256
2022-01-14 21:55:40 SUCCESS
FAPIBrazilValidateRequestObjectIdTokenACRClaims
Acr value in request object is as expected
received
[
  "urn:brasil:openbanking:loa3"
]
2022-01-14 21:55:40 SUCCESS
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Jan 14, 2022, 10:00:39 PM"
2022-01-14 21:55:40 SUCCESS
FAPI1AdvancedValidateRequestObjectNBFClaim
nbf claim is valid
nbf
"Jan 14, 2022, 9:55:39 PM"
now
"Jan 14, 2022, 9:55:40 PM"
2022-01-14 21:55:40
ValidateRequestObjectClaims
Request object does not contain a max_age claim
2022-01-14 21:55:40 SUCCESS
ValidateRequestObjectClaims
Request object claims passed all validation checks
2022-01-14 21:55:40 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2022-01-14 21:55:40 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2022-01-14 21:55:40 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2022-01-14 21:55:40 SUCCESS
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
request_object
eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiI2NWI1YTBkNjkxMGNmYzk4YzYzOTk4ZTgyZmI3OTAzOTRmMjM3Y2Y1MzkwZWVjMjg0ZDIzOWNlYmRlYWE1MDZjIn0.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.g_VC0hu8PfR1SYgCl8JLj7OIWzSspo9-h4zoQyrOIndAyWNazvpD50X4acx3Qmt48Qe-tMYFO_3Ssf2t3HreAw71IN8yKxFwDVAt9zrpae0aceCYE1iBC2vs61EEwob-K4pM2kkXeJJqxFlRlglmAm5Jw9eapmaxVB68z8NR-DBBjjESAW2ay_u_uGB0SYFU5PGZ_I_vF2BbBSWdBCfokuJuTf6uS0p9Fh5wqDXs2cvlrNdxJGFnWKuAZrRLAw3SjHBAxpGObTkjCXryafQRUHKYzqPoAz0Vb-_gJqvjEYlSpDtbsdjPXtL22U3SEzvo_e45UWHTM7SJInAvXEhq2Q
request_object_signing_alg
PS256
jwk
Sun RSA public key, 2048 bits
  params: null
  modulus: 24835287790665225667201897756457923186331169898933095651058896242806349634621520685735029231424370262840171268774397976251374443208480022745267902573891531206236761874192625001500109130615227594752926222053161333895850636600708577038211162564239044748847286852186092706541057328857970427799759121098903785539273621086314145424841738602153431339081856287753094874627272856042936200487327282573176095825196525930737500177796987860637593510325328544795403506349954282032809186183869909253862312706728848687096847100563004344427849975365401878211258490084740049329076860348864658344292135056217322011634392046362833540893
  public exponent: 65537
2022-01-14 21:55:40 SUCCESS
EnsureMatchingRedirectUriInRequestObject
Redirect URI matched
actual
https://hubfintech.com.br/callback
2022-01-14 21:55:40 SUCCESS
EnsureRequiredAuthorizationRequestParametersMatchRequestObject
Required http request parameters match request object claims
response_type
code id_token
client_id
hubfintech-bank
2022-01-14 21:55:40 SUCCESS
EnsureOptionalAuthorizationRequestParametersMatchRequestObject
All http request parameters and request object claims match
2022-01-14 21:55:40 SUCCESS
EnsureAuthorizationHttpRequestContainsOpenIDScope
Found 'openid' in scope http request parameter
actual
[
  "openid",
  "consent:urn:conformance:oidf:N0gemw8R9R",
  "payments"
]
expected
openid
2022-01-14 21:55:40 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid consent:urn:conformance:oidf:N0gemw8R9R payments
2022-01-14 21:55:40 SUCCESS
FAPIBrazilValidateConsentScope
Found consent scope in request
actual
[
  "openid",
  "consent:urn:conformance:oidf:N0gemw8R9R",
  "payments"
]
expected
consent:urn:conformance:oidf:N0gemw8R9R
2022-01-14 21:55:40 SUCCESS
EnsureScopeContainsPayments
Found payments scope in request
actual
[
  "openid",
  "consent:urn:conformance:oidf:N0gemw8R9R",
  "payments"
]
2022-01-14 21:55:40 SUCCESS
EnsureResponseTypeIsCodeIdToken
Response type is expected value
expected
code id_token
2022-01-14 21:55:40 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid",
  "consent:urn:conformance:oidf:N0gemw8R9R",
  "payments"
]
expected
openid
2022-01-14 21:55:40 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
hubfintech-bank
2022-01-14 21:55:40 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
9YM9dyyPtOh0UGzp43kTM4tx3aEmykeA
2022-01-14 21:55:40 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
KWnDMZMt4wcWrZohni-TXovjQsEvuPX9zGBEoMniEfM
2022-01-14 21:55:40 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash
k9c3909UeENtInQg32fiwQ
2022-01-14 21:55:40 SUCCESS
CalculateSHash
Successful s_hash encoding
s_hash
bPaFAJ3tAXULgYXdZb9OoQ
2022-01-14 21:55:40 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/hubfintech/
sub
user-subject-1234531
aud
hubfintech-bank
nonce
KWnDMZMt4wcWrZohni-TXovjQsEvuPX9zGBEoMniEfM
iat
1642197340
exp
1642197640
2022-01-14 21:55:40 SUCCESS
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Added claims to id_token claims
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "KWnDMZMt4wcWrZohni-TXovjQsEvuPX9zGBEoMniEfM",
  "iat": 1642197340,
  "exp": 1642197640
}
2022-01-14 21:55:40 SUCCESS
AddCHashToIdTokenClaims
Added c_hash to ID token claims
c_hash
k9c3909UeENtInQg32fiwQ
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "KWnDMZMt4wcWrZohni-TXovjQsEvuPX9zGBEoMniEfM",
  "iat": 1642197340,
  "exp": 1642197640,
  "c_hash": "k9c3909UeENtInQg32fiwQ"
}
2022-01-14 21:55:40 SUCCESS
AddSHashToIdTokenClaims
Added s_hash to ID token claims
s_hash
bPaFAJ3tAXULgYXdZb9OoQ
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "KWnDMZMt4wcWrZohni-TXovjQsEvuPX9zGBEoMniEfM",
  "iat": 1642197340,
  "exp": 1642197640,
  "c_hash": "k9c3909UeENtInQg32fiwQ",
  "s_hash": "bPaFAJ3tAXULgYXdZb9OoQ"
}
2022-01-14 21:55:40 INFO
AddAtHashToIdTokenClaims
Skipped evaluation due to missing required string: at_hash
expected
at_hash
2022-01-14 21:55:40 SUCCESS
FAPIBrazilAddACRClaimToIdTokenClaims
Added acr value to id_token_claims
acr_value
urn:brasil:openbanking:loa3
claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "KWnDMZMt4wcWrZohni-TXovjQsEvuPX9zGBEoMniEfM",
  "iat": 1642197340,
  "exp": 1642197640,
  "c_hash": "k9c3909UeENtInQg32fiwQ",
  "s_hash": "bPaFAJ3tAXULgYXdZb9OoQ",
  "acr": "urn:brasil:openbanking:loa3"
}
2022-01-14 21:55:40 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Imh1YmZpbnRlY2gtYmFuayIsImNfaGFzaCI6Ims5YzM5MDlVZUVOdEluUWczMmZpd1EiLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJiUGFGQUozdEFYVUxnWVhkWmI5T29RIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzY0MCwibm9uY2UiOiJLV25ETVpNdDR3Y1dyWm9obmktVFhvdmpRc0V2dVBYOXpHQkVvTW5pRWZNIiwiaWF0IjoxNjQyMTk3MzQwfQ.u4kxs0er7RagJXFIxN8g9nTaUGIJBmkysmh9_RbfHMa41q3QO2SU6sfplXchf6LADUQC2xO6TsZrPTdJQ_4HXJKHin6Mi11vawr-BOtjhkjdaB6i_QtFuNRE3jY9rwhBewQpa-bpr6Pst3WZheUL98cf9rxdwvHR_MEo2fdbM1J7x2lqGI7GaILQnSF8lbDZBYryV2pXM7v2mQtX84MRXatTRch4d_qkCSl8JVwKMj4z5AOMRA3rCK1LR9WlYzDQakH_Qe8H4qbYkHatOqaXMkNWC1OV2KmvI-WTkkAt_biww5z9tsTJbiT-gl0hqSMyvwrPXRNkeztjvwwQPZ783g
2022-01-14 21:55:40 SUCCESS
FAPIBrazilChangeConsentStatusToAuthorized
Changed consent status to AUTHORISED
consent
{
  "data": {
    "consentId": "urn:conformance:oidf:N0gemw8R9R",
    "creationDateTime": "2022-01-14T21:55:39Z",
    "status": "AUTHORISED",
    "statusUpdateDateTime": "2022-01-14T21:55:40Z",
    "expirationDateTime": "2022-01-14T23:55:39Z",
    "transactionFromDateTime": "2022-01-14T21:50:39Z",
    "transactionToDateTime": "2022-01-14T23:55:39Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/hubfintechpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-01-14T21:55:39Z"
    },
    "creditor": {
      "name": "HOMOLOGACAO PIX",
      "cpfCnpj": "55155114845",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "57784518064",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2021-11-11",
      "amount": "1.15",
      "currency": "BRL",
      "details": {
        "proxy": "55155114845",
        "localInstrument": "DICT",
        "creditorAccount": {
          "number": "10173722",
          "accountType": "CACC",
          "ispb": "92894922",
          "issuer": "0001"
        }
      },
      "ibgeTownCode": "5300108",
      "type": "PIX"
    },
    "debtorAccount": {
      "number": "4261073573",
      "accountType": "CACC",
      "ispb": "37241230",
      "issuer": "0001"
    }
  },
  "aud": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197339,
  "jti": "5661cc1e-caba-49e2-a058-1a746d873e5e",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}
2022-01-14 21:55:40 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://hubfintech.com.br/callback",
  "state": "O8FQK4t8SOx92BAHIp7teoVIuQfqaMmZIiBwkw2WUE4"
}
2022-01-14 21:55:40 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://hubfintech.com.br/callback",
  "state": "O8FQK4t8SOx92BAHIp7teoVIuQfqaMmZIiBwkw2WUE4",
  "code": "9YM9dyyPtOh0UGzp43kTM4tx3aEmykeA"
}
2022-01-14 21:55:40 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://hubfintech.com.br/callback",
  "state": "O8FQK4t8SOx92BAHIp7teoVIuQfqaMmZIiBwkw2WUE4",
  "code": "9YM9dyyPtOh0UGzp43kTM4tx3aEmykeA",
  "id_token": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Imh1YmZpbnRlY2gtYmFuayIsImNfaGFzaCI6Ims5YzM5MDlVZUVOdEluUWczMmZpd1EiLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJiUGFGQUozdEFYVUxnWVhkWmI5T29RIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzY0MCwibm9uY2UiOiJLV25ETVpNdDR3Y1dyWm9obmktVFhvdmpRc0V2dVBYOXpHQkVvTW5pRWZNIiwiaWF0IjoxNjQyMTk3MzQwfQ.u4kxs0er7RagJXFIxN8g9nTaUGIJBmkysmh9_RbfHMa41q3QO2SU6sfplXchf6LADUQC2xO6TsZrPTdJQ_4HXJKHin6Mi11vawr-BOtjhkjdaB6i_QtFuNRE3jY9rwhBewQpa-bpr6Pst3WZheUL98cf9rxdwvHR_MEo2fdbM1J7x2lqGI7GaILQnSF8lbDZBYryV2pXM7v2mQtX84MRXatTRch4d_qkCSl8JVwKMj4z5AOMRA3rCK1LR9WlYzDQakH_Qe8H4qbYkHatOqaXMkNWC1OV2KmvI-WTkkAt_biww5z9tsTJbiT-gl0hqSMyvwrPXRNkeztjvwwQPZ783g"
}
2022-01-14 21:55:40
SendAuthorizationResponseWithResponseModeFragment
Redirecting back to client
uri
https://hubfintech.com.br/callback#state=O8FQK4t8SOx92BAHIp7teoVIuQfqaMmZIiBwkw2WUE4&code=9YM9dyyPtOh0UGzp43kTM4tx3aEmykeA&id_token=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Imh1YmZpbnRlY2gtYmFuayIsImNfaGFzaCI6Ims5YzM5MDlVZUVOdEluUWczMmZpd1EiLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJiUGFGQUozdEFYVUxnWVhkWmI5T29RIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzY0MCwibm9uY2UiOiJLV25ETVpNdDR3Y1dyWm9obmktVFhvdmpRc0V2dVBYOXpHQkVvTW5pRWZNIiwiaWF0IjoxNjQyMTk3MzQwfQ.u4kxs0er7RagJXFIxN8g9nTaUGIJBmkysmh9_RbfHMa41q3QO2SU6sfplXchf6LADUQC2xO6TsZrPTdJQ_4HXJKHin6Mi11vawr-BOtjhkjdaB6i_QtFuNRE3jY9rwhBewQpa-bpr6Pst3WZheUL98cf9rxdwvHR_MEo2fdbM1J7x2lqGI7GaILQnSF8lbDZBYryV2pXM7v2mQtX84MRXatTRch4d_qkCSl8JVwKMj4z5AOMRA3rCK1LR9WlYzDQakH_Qe8H4qbYkHatOqaXMkNWC1OV2KmvI-WTkkAt_biww5z9tsTJbiT-gl0hqSMyvwrPXRNkeztjvwwQPZ783g
2022-01-14 21:55:40 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://hubfintech.com.br/callback#state=O8FQK4t8SOx92BAHIp7teoVIuQfqaMmZIiBwkw2WUE4&code=9YM9dyyPtOh0UGzp43kTM4tx3aEmykeA&id_token=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Imh1YmZpbnRlY2gtYmFuayIsImNfaGFzaCI6Ims5YzM5MDlVZUVOdEluUWczMmZpd1EiLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJiUGFGQUozdEFYVUxnWVhkWmI5T29RIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzY0MCwibm9uY2UiOiJLV25ETVpNdDR3Y1dyWm9obmktVFhvdmpRc0V2dVBYOXpHQkVvTW5pRWZNIiwiaWF0IjoxNjQyMTk3MzQwfQ.u4kxs0er7RagJXFIxN8g9nTaUGIJBmkysmh9_RbfHMa41q3QO2SU6sfplXchf6LADUQC2xO6TsZrPTdJQ_4HXJKHin6Mi11vawr-BOtjhkjdaB6i_QtFuNRE3jY9rwhBewQpa-bpr6Pst3WZheUL98cf9rxdwvHR_MEo2fdbM1J7x2lqGI7GaILQnSF8lbDZBYryV2pXM7v2mQtX84MRXatTRch4d_qkCSl8JVwKMj4z5AOMRA3rCK1LR9WlYzDQakH_Qe8H4qbYkHatOqaXMkNWC1OV2KmvI-WTkkAt_biww5z9tsTJbiT-gl0hqSMyvwrPXRNkeztjvwwQPZ783g]
outgoing_path
authorize
2022-01-14 21:55:41 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 21:55:41 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 21:55:41 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-01-14 21:55:41 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 21:55:41 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 21:55:41 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
outgoing_path
jwks
2022-01-14 21:55:42 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "content-length": "1233",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "9YM9dyyPtOh0UGzp43kTM4tx3aEmykeA",
  "redirect_uri": "https://hubfintech.com.br/callback",
  "code_verifier": "KDLYeaBm73RePGglOaorbKdg5CVh3Y70sNagVKe6Wgs",
  "client_id": "hubfintech-bank",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczNDEsImV4cCI6MTY0MjE5NzQwMSwianRpIjoiUUtnRGd5YmZGSnZteXFGbTY3UXlCdTl5eHZxN1Rkd0pBVGNuSUZiSnJhcyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.bH-Q3I61aBPaZzIAo1oouOWOwoIWme8zgF2ibicTPM4HbD7mAJfW6UMoeDs5CdrmktNG0uP6peGfVCZl7nEO60YGThpn5wIVyqMzaveGRdh1omBcmqto9yYgk2nsZnim93tyty-bMHVFLvE8MHegQx8lRafkM3cONPkdk7iSTilFkisf-jztDnwyeCHoyVEc5gVICiUyOGh7quz4PSsoJE9rf4N-NhvHyPR84Stf6DlWW1uUcXhXukUsDu6UyH1rmbl6AMR-tjeka-m1sL_4he-5KvEpZBf28UtIDtsUFwnimpNCk9JwTfNxnRD7IhVPXzF5RSHNtTsCrmyKz6k9ow",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=9YM9dyyPtOh0UGzp43kTM4tx3aEmykeA&redirect_uri=https%3A%2F%2Fhubfintech.com.br%2Fcallback&code_verifier=KDLYeaBm73RePGglOaorbKdg5CVh3Y70sNagVKe6Wgs&client_id=hubfintech-bank&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczNDEsImV4cCI6MTY0MjE5NzQwMSwianRpIjoiUUtnRGd5YmZGSnZteXFGbTY3UXlCdTl5eHZxN1Rkd0pBVGNuSUZiSnJhcyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.bH-Q3I61aBPaZzIAo1oouOWOwoIWme8zgF2ibicTPM4HbD7mAJfW6UMoeDs5CdrmktNG0uP6peGfVCZl7nEO60YGThpn5wIVyqMzaveGRdh1omBcmqto9yYgk2nsZnim93tyty-bMHVFLvE8MHegQx8lRafkM3cONPkdk7iSTilFkisf-jztDnwyeCHoyVEc5gVICiUyOGh7quz4PSsoJE9rf4N-NhvHyPR84Stf6DlWW1uUcXhXukUsDu6UyH1rmbl6AMR-tjeka-m1sL_4he-5KvEpZBf28UtIDtsUFwnimpNCk9JwTfNxnRD7IhVPXzF5RSHNtTsCrmyKz6k9ow&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2022-01-14 21:55:42 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-01-14 21:55:42 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 21:55:42 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 21:55:42 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 21:55:42 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczNDEsImV4cCI6MTY0MjE5NzQwMSwianRpIjoiUUtnRGd5YmZGSnZteXFGbTY3UXlCdTl5eHZxN1Rkd0pBVGNuSUZiSnJhcyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.bH-Q3I61aBPaZzIAo1oouOWOwoIWme8zgF2ibicTPM4HbD7mAJfW6UMoeDs5CdrmktNG0uP6peGfVCZl7nEO60YGThpn5wIVyqMzaveGRdh1omBcmqto9yYgk2nsZnim93tyty-bMHVFLvE8MHegQx8lRafkM3cONPkdk7iSTilFkisf-jztDnwyeCHoyVEc5gVICiUyOGh7quz4PSsoJE9rf4N-NhvHyPR84Stf6DlWW1uUcXhXukUsDu6UyH1rmbl6AMR-tjeka-m1sL_4he-5KvEpZBf28UtIDtsUFwnimpNCk9JwTfNxnRD7IhVPXzF5RSHNtTsCrmyKz6k9ow",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "hubfintech-bank",
    "aud": [
      "https://www.certification.openid.net/test/a/hubfintech/",
      "https://www.certification.openid.net/test/a/hubfintech/token",
      "https://www.certification.openid.net/test-mtls/a/hubfintech/token"
    ],
    "iss": "hubfintech-bank",
    "exp": 1642197401,
    "iat": 1642197341,
    "jti": "QKgDgybfFJvmyqFm67QyBu9yxvq7TdwJATcnIFbJras"
  }
}
2022-01-14 21:55:42
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-01-14 21:55:42 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczNDEsImV4cCI6MTY0MjE5NzQwMSwianRpIjoiUUtnRGd5YmZGSnZteXFGbTY3UXlCdTl5eHZxN1Rkd0pBVGNuSUZiSnJhcyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.bH-Q3I61aBPaZzIAo1oouOWOwoIWme8zgF2ibicTPM4HbD7mAJfW6UMoeDs5CdrmktNG0uP6peGfVCZl7nEO60YGThpn5wIVyqMzaveGRdh1omBcmqto9yYgk2nsZnim93tyty-bMHVFLvE8MHegQx8lRafkM3cONPkdk7iSTilFkisf-jztDnwyeCHoyVEc5gVICiUyOGh7quz4PSsoJE9rf4N-NhvHyPR84Stf6DlWW1uUcXhXukUsDu6UyH1rmbl6AMR-tjeka-m1sL_4he-5KvEpZBf28UtIDtsUFwnimpNCk9JwTfNxnRD7IhVPXzF5RSHNtTsCrmyKz6k9ow
2022-01-14 21:55:42 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-01-14 21:55:42 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-01-14 21:55:42 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
9YM9dyyPtOh0UGzp43kTM4tx3aEmykeA
2022-01-14 21:55:42 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
https://hubfintech.com.br/callback
2022-01-14 21:55:42 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
5uu4K4q4smDQxyCKxZI7obKCT7IBH7oQoXXQoLJRGuvgW0nDae
2022-01-14 21:55:42 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
qm0RuL9pjKSLVPj5w6hvVg
2022-01-14 21:55:42
CreateRefreshToken
Created refresh token
refresh_token
UzmWPPlFBboJdRXMyEWpZpHirfrDbELEtbWabmTkenXSYngyKu7549724811,@&**
2022-01-14 21:55:42 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/hubfintech/
sub
user-subject-1234531
aud
hubfintech-bank
nonce
KWnDMZMt4wcWrZohni-TXovjQsEvuPX9zGBEoMniEfM
iat
1642197342
exp
1642197642
2022-01-14 21:55:42 SUCCESS
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Added claims to id_token claims
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "KWnDMZMt4wcWrZohni-TXovjQsEvuPX9zGBEoMniEfM",
  "iat": 1642197342,
  "exp": 1642197642
}
2022-01-14 21:55:42 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
qm0RuL9pjKSLVPj5w6hvVg
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "KWnDMZMt4wcWrZohni-TXovjQsEvuPX9zGBEoMniEfM",
  "iat": 1642197342,
  "exp": 1642197642,
  "at_hash": "qm0RuL9pjKSLVPj5w6hvVg"
}
2022-01-14 21:55:42 SUCCESS
FAPIBrazilAddACRClaimToIdTokenClaims
Added acr value to id_token_claims
acr_value
urn:brasil:openbanking:loa3
claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "KWnDMZMt4wcWrZohni-TXovjQsEvuPX9zGBEoMniEfM",
  "iat": 1642197342,
  "exp": 1642197642,
  "at_hash": "qm0RuL9pjKSLVPj5w6hvVg",
  "acr": "urn:brasil:openbanking:loa3"
}
2022-01-14 21:55:42 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoicW0wUnVMOXBqS1NMVlBqNXc2aHZWZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiaHViZmludGVjaC1iYW5rIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzY0Miwibm9uY2UiOiJLV25ETVpNdDR3Y1dyWm9obmktVFhvdmpRc0V2dVBYOXpHQkVvTW5pRWZNIiwiaWF0IjoxNjQyMTk3MzQyfQ.ZoNgNjl-5S6rqCv9RS-4RTHtBex-MxDFmzKiGHlkuv1X_FRZXWn7msnfE_0kOwjME0XDv6Ci8ELOJmc6AuyW6JywHSCBDWyAErnvLAa76Jjcj0tI8HlQaZHqPgXwUAaSKLZvVIoHN3cPL9jcKrjr40cKuV12fHsmlmD0zjZxv6feRvzme_6iCzM2e2gbpatd8ACFsLHEVTY96qk_l-YzrLMPdUWE_HHE8BeLFhA_NGnI9mLrWIAC5Bqv9lTdQhTwFM74V2MQSvXz6goLirKuDBSIYKxv4ofP_lplesHG8ErgPA-fG7oko6gKhkvO5PNA5KoAlbySO7EWbW_sgWsTKg
2022-01-14 21:55:42 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
5uu4K4q4smDQxyCKxZI7obKCT7IBH7oQoXXQoLJRGuvgW0nDae
token_type
Bearer
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoicW0wUnVMOXBqS1NMVlBqNXc2aHZWZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiaHViZmludGVjaC1iYW5rIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzY0Miwibm9uY2UiOiJLV25ETVpNdDR3Y1dyWm9obmktVFhvdmpRc0V2dVBYOXpHQkVvTW5pRWZNIiwiaWF0IjoxNjQyMTk3MzQyfQ.ZoNgNjl-5S6rqCv9RS-4RTHtBex-MxDFmzKiGHlkuv1X_FRZXWn7msnfE_0kOwjME0XDv6Ci8ELOJmc6AuyW6JywHSCBDWyAErnvLAa76Jjcj0tI8HlQaZHqPgXwUAaSKLZvVIoHN3cPL9jcKrjr40cKuV12fHsmlmD0zjZxv6feRvzme_6iCzM2e2gbpatd8ACFsLHEVTY96qk_l-YzrLMPdUWE_HHE8BeLFhA_NGnI9mLrWIAC5Bqv9lTdQhTwFM74V2MQSvXz6goLirKuDBSIYKxv4ofP_lplesHG8ErgPA-fG7oko6gKhkvO5PNA5KoAlbySO7EWbW_sgWsTKg
refresh_token
UzmWPPlFBboJdRXMyEWpZpHirfrDbELEtbWabmTkenXSYngyKu7549724811,@&**
scope
openid consent:urn:conformance:oidf:N0gemw8R9R payments
2022-01-14 21:55:42
RemoveIssuedAccessTokenFromEnvironment
Removed access_token and token_type from environment
2022-01-14 21:55:42 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "5uu4K4q4smDQxyCKxZI7obKCT7IBH7oQoXXQoLJRGuvgW0nDae",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoicW0wUnVMOXBqS1NMVlBqNXc2aHZWZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiaHViZmludGVjaC1iYW5rIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzY0Miwibm9uY2UiOiJLV25ETVpNdDR3Y1dyWm9obmktVFhvdmpRc0V2dVBYOXpHQkVvTW5pRWZNIiwiaWF0IjoxNjQyMTk3MzQyfQ.ZoNgNjl-5S6rqCv9RS-4RTHtBex-MxDFmzKiGHlkuv1X_FRZXWn7msnfE_0kOwjME0XDv6Ci8ELOJmc6AuyW6JywHSCBDWyAErnvLAa76Jjcj0tI8HlQaZHqPgXwUAaSKLZvVIoHN3cPL9jcKrjr40cKuV12fHsmlmD0zjZxv6feRvzme_6iCzM2e2gbpatd8ACFsLHEVTY96qk_l-YzrLMPdUWE_HHE8BeLFhA_NGnI9mLrWIAC5Bqv9lTdQhTwFM74V2MQSvXz6goLirKuDBSIYKxv4ofP_lplesHG8ErgPA-fG7oko6gKhkvO5PNA5KoAlbySO7EWbW_sgWsTKg",
  "refresh_token": "UzmWPPlFBboJdRXMyEWpZpHirfrDbELEtbWabmTkenXSYngyKu7549724811,@\u0026**",
  "scope": "openid consent:urn:conformance:oidf:N0gemw8R9R payments"
}
outgoing_path
token
2022-01-14 21:55:43 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/jwt",
  "x-idempotency-key": "093860f9-f5a5-4b5e-a91e-b22c37bb7a6c",
  "authorization": "Bearer 5uu4K4q4smDQxyCKxZI7obKCT7IBH7oQoXXQoLJRGuvgW0nDae",
  "user-agent": "PostmanRuntime/7.28.4",
  "accept": "*/*",
  "cache-control": "no-cache",
  "postman-token": "6b85ca35-ee27-404f-b98f-6b54e5fc85c6",
  "accept-encoding": "gzip, deflate, br",
  "cookie": "JSESSIONID\u003dC2439E2BB262F2C5924E57E3B6C0FEBB",
  "content-length": "1057",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.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.D3TNpc7FTv_mJSpfUIOL01hlnq5v8yCyfrcg8qP2v3JWYc2xBs9IRlwrhimOwGD65Z19B1oXtA3OrH3grlAoMb4LG_lDp7cNlUrKaQeDpXeqOqtEuwDoFx_rc3SS3SHa9eemIAPawg9mlEizSW4cr9b9j-0pb8slyy3f-9-KDnkr2-t4SsQymrch3fSHf3PeN1UV6qKB-9mojiDVTlvc0B6ZuEbTmBqO7TkaCWUgcKZoA_gJNszPWInyjlp2GniJoa4z2e8fyF9nf12kgSdgCPTfZXpOWQ1gdglOQpZ-ZGqDawaNsR2MxYrx_SvDXCXw_jqG2O_Ju4IR7kimCuryHA
2022-01-14 21:55:43 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-01-14 21:55:43 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-01-14 21:55:43 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-01-14 21:55:43 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 21:55:43 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 21:55:43 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-01-14 21:55:44 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "content-length": "1162",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/token
incoming_body_form_params
{
  "grant_type": "refresh_token",
  "refresh_token": "UzmWPPlFBboJdRXMyEWpZpHirfrDbELEtbWabmTkenXSYngyKu7549724811,@\u0026**",
  "client_id": "hubfintech-bank",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczNDMsImV4cCI6MTY0MjE5NzQwMywianRpIjoiLVJBZE1WNEhmdDVUbG5aZWZveWxIQmVIWHh6MkI1Z2xkdXBmUGZIajFrNCIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.mdnuTgOkpGUuOq61YWs8vTuXEKpMhzxoSutoTjL1swT6ooez_vuftPzwQQ_w4vZGEJ-JhbEvqIOqQBW2sltJIWNUcIRErzFL43FBiDrrTGGduemuytxiGWdysA11LAV4UvMcOGzX1vbMYHfFi0Te03rAKVMG_DNUAbpK0DZ5s6XNkbXdt_rdOb5zAufszavSlulQ_-wsZl2mOt8XwOthFXitYIvyqyVaDrt7lCqBCHC9ivVCMj1ssVqrx0Q1ePsr9saQtYlMjeXZFTk5M8MJAZpo3lo5iwh_qZEP9C4hlStgygQ7xpqaAXNWzAqkWSrW-Ig5txAZ5h5gSsWArmTJFw",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=refresh_token&refresh_token=UzmWPPlFBboJdRXMyEWpZpHirfrDbELEtbWabmTkenXSYngyKu7549724811%2C%40%26**&client_id=hubfintech-bank&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczNDMsImV4cCI6MTY0MjE5NzQwMywianRpIjoiLVJBZE1WNEhmdDVUbG5aZWZveWxIQmVIWHh6MkI1Z2xkdXBmUGZIajFrNCIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.mdnuTgOkpGUuOq61YWs8vTuXEKpMhzxoSutoTjL1swT6ooez_vuftPzwQQ_w4vZGEJ-JhbEvqIOqQBW2sltJIWNUcIRErzFL43FBiDrrTGGduemuytxiGWdysA11LAV4UvMcOGzX1vbMYHfFi0Te03rAKVMG_DNUAbpK0DZ5s6XNkbXdt_rdOb5zAufszavSlulQ_-wsZl2mOt8XwOthFXitYIvyqyVaDrt7lCqBCHC9ivVCMj1ssVqrx0Q1ePsr9saQtYlMjeXZFTk5M8MJAZpo3lo5iwh_qZEP9C4hlStgygQ7xpqaAXNWzAqkWSrW-Ig5txAZ5h5gSsWArmTJFw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2022-01-14 21:55:44 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-01-14 21:55:44 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 21:55:44 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 21:55:44 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL
BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx
FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB
TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5
NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh
bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl
YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm
aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T
FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK
CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf
9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ
98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1
1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd
rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos
ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv
OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D
Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI
KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr
aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0
cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz
dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E
BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG
CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm
aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp
bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu
ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2
aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz
IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj
YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB
BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu
b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM
E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4
FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE
3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI
ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr
JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO
HPFJ
-----END CERTIFICATE-----
2022-01-14 21:55:44 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczNDMsImV4cCI6MTY0MjE5NzQwMywianRpIjoiLVJBZE1WNEhmdDVUbG5aZWZveWxIQmVIWHh6MkI1Z2xkdXBmUGZIajFrNCIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.mdnuTgOkpGUuOq61YWs8vTuXEKpMhzxoSutoTjL1swT6ooez_vuftPzwQQ_w4vZGEJ-JhbEvqIOqQBW2sltJIWNUcIRErzFL43FBiDrrTGGduemuytxiGWdysA11LAV4UvMcOGzX1vbMYHfFi0Te03rAKVMG_DNUAbpK0DZ5s6XNkbXdt_rdOb5zAufszavSlulQ_-wsZl2mOt8XwOthFXitYIvyqyVaDrt7lCqBCHC9ivVCMj1ssVqrx0Q1ePsr9saQtYlMjeXZFTk5M8MJAZpo3lo5iwh_qZEP9C4hlStgygQ7xpqaAXNWzAqkWSrW-Ig5txAZ5h5gSsWArmTJFw",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "hubfintech-bank",
    "aud": [
      "https://www.certification.openid.net/test/a/hubfintech/",
      "https://www.certification.openid.net/test/a/hubfintech/token",
      "https://www.certification.openid.net/test-mtls/a/hubfintech/token"
    ],
    "iss": "hubfintech-bank",
    "exp": 1642197403,
    "iat": 1642197343,
    "jti": "-RAdMV4Hft5TlnZefoylHBeHXxz2B5gldupfPfHj1k4"
  }
}
2022-01-14 21:55:44
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-01-14 21:55:44 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczNDMsImV4cCI6MTY0MjE5NzQwMywianRpIjoiLVJBZE1WNEhmdDVUbG5aZWZveWxIQmVIWHh6MkI1Z2xkdXBmUGZIajFrNCIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.mdnuTgOkpGUuOq61YWs8vTuXEKpMhzxoSutoTjL1swT6ooez_vuftPzwQQ_w4vZGEJ-JhbEvqIOqQBW2sltJIWNUcIRErzFL43FBiDrrTGGduemuytxiGWdysA11LAV4UvMcOGzX1vbMYHfFi0Te03rAKVMG_DNUAbpK0DZ5s6XNkbXdt_rdOb5zAufszavSlulQ_-wsZl2mOt8XwOthFXitYIvyqyVaDrt7lCqBCHC9ivVCMj1ssVqrx0Q1ePsr9saQtYlMjeXZFTk5M8MJAZpo3lo5iwh_qZEP9C4hlStgygQ7xpqaAXNWzAqkWSrW-Ig5txAZ5h5gSsWArmTJFw
2022-01-14 21:55:44 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-01-14 21:55:44 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-01-14 21:55:44 SUCCESS
ValidateRefreshToken
refresh_token parameter matches the expected value.
refresh_token
UzmWPPlFBboJdRXMyEWpZpHirfrDbELEtbWabmTkenXSYngyKu7549724811,@&**
2022-01-14 21:55:44 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
c2xgCLfidQ6nhgPhmUMdP9IQZTP20mFipapURatmtr69tQ520k
2022-01-14 21:55:44 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
G8CjqRktdk01ufGjvo7o8A
2022-01-14 21:55:44
CreateRefreshToken
Created refresh token
refresh_token
DaxKTVKiKTMJCiYZWGZALDunBKOPSxxDqbWqbVbATULoJQKlse7147701577^,\,&
2022-01-14 21:55:44 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
c2xgCLfidQ6nhgPhmUMdP9IQZTP20mFipapURatmtr69tQ520k
token_type
Bearer
refresh_token
DaxKTVKiKTMJCiYZWGZALDunBKOPSxxDqbWqbVbATULoJQKlse7147701577^,\,&
scope
openid consent:urn:conformance:oidf:N0gemw8R9R payments
2022-01-14 21:55:44 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "c2xgCLfidQ6nhgPhmUMdP9IQZTP20mFipapURatmtr69tQ520k",
  "token_type": "Bearer",
  "refresh_token": "DaxKTVKiKTMJCiYZWGZALDunBKOPSxxDqbWqbVbATULoJQKlse7147701577^,\\,\u0026",
  "scope": "openid consent:urn:conformance:oidf:N0gemw8R9R payments"
}
outgoing_path
token
2022-01-14 21:55:44 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/jwt",
  "x-idempotency-key": "daaf997d-289e-455b-9ff6-86e1faadd9d5",
  "authorization": "Bearer c2xgCLfidQ6nhgPhmUMdP9IQZTP20mFipapURatmtr69tQ520k",
  "user-agent": "PostmanRuntime/7.28.4",
  "accept": "*/*",
  "cache-control": "no-cache",
  "postman-token": "834460e5-783b-4c22-8220-fe1478223d5d",
  "accept-encoding": "gzip, deflate, br",
  "cookie": "JSESSIONID\u003dC2439E2BB262F2C5924E57E3B6C0FEBB",
  "content-length": "1057",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.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.z9T_XpEvQxz10Tz32mJVVeYCDIt6YYvaZZwGRLGyXlOurJjoprbc9pinA292CyrA2dh8QXA8bqPTtdI81rmpKgXZBlBKrnh_mNXADGzwezu0MqyUYaxTIj9iRM19CPM3BKQd29PlK8D9ahue2b0XTy_MN8BpvtTugdy9LNBjwGfrN1CoAvxNzHTyr0kBGS16fHwuKY8AioOUXM9nJ1JC8PDnvX-FwAJOz_KUUA8CbhuRb-sj533I0zNjUzKT0iHnk5GNo1QJKC5x66FjVfw29FOsJ44OMPVqxqPg5YcBAG0yrwpHDMiV2EqE9Li9Ac_R6bSu2fppPIQD-I-0KCBTew
2022-01-14 21:55:44 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-01-14 21:55:45 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-01-14 21:55:45 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-01-14 21:55:45 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 21:55:45 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 21:55:45 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-01-14 21:55:46 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "content-length": "1166",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/token
incoming_body_form_params
{
  "grant_type": "refresh_token",
  "refresh_token": "DaxKTVKiKTMJCiYZWGZALDunBKOPSxxDqbWqbVbATULoJQKlse7147701577^,\\,\u0026",
  "client_id": "hubfintech-bank",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczNDUsImV4cCI6MTY0MjE5NzQwNSwianRpIjoiQWhHWGplSFhIRHNYcnY3cjFNSTduQllqTmlYbW5MTFBYSWN3NjI4RGZMVSIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.j9Uhrfs85oI4v-225zIlyt-2IkewWZk1NdUgzyiIrFyU-RZ1hPFvmprA_Y-LCFOdFntdZEDzICBr02t5U6frS3-U5e0bekuGYrE6F0Yat0uatWGJlQEEFS87sD2LSO_XhxYbJa825uUrRbU3glq7Uw6fKgyjNQBddEJHJ2YcvzrXW8o5z6ODmS1BqQ8d4-roTkw8nw3upq9D4G6QUrPD_SreuzwXy6uGdZGipH3FdMLXtmSd6J0IHDGwdFH_bT3SS9h7-1M-YT6hxAN84RwrPrS6vY_xAxK5DjX6sWIaRJWUi7qAeqYKVH17qDQ4GHnRAie-GZ7n53QXMNOpKXZPiw",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=refresh_token&refresh_token=DaxKTVKiKTMJCiYZWGZALDunBKOPSxxDqbWqbVbATULoJQKlse7147701577%5E%2C%5C%2C%26&client_id=hubfintech-bank&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczNDUsImV4cCI6MTY0MjE5NzQwNSwianRpIjoiQWhHWGplSFhIRHNYcnY3cjFNSTduQllqTmlYbW5MTFBYSWN3NjI4RGZMVSIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.j9Uhrfs85oI4v-225zIlyt-2IkewWZk1NdUgzyiIrFyU-RZ1hPFvmprA_Y-LCFOdFntdZEDzICBr02t5U6frS3-U5e0bekuGYrE6F0Yat0uatWGJlQEEFS87sD2LSO_XhxYbJa825uUrRbU3glq7Uw6fKgyjNQBddEJHJ2YcvzrXW8o5z6ODmS1BqQ8d4-roTkw8nw3upq9D4G6QUrPD_SreuzwXy6uGdZGipH3FdMLXtmSd6J0IHDGwdFH_bT3SS9h7-1M-YT6hxAN84RwrPrS6vY_xAxK5DjX6sWIaRJWUi7qAeqYKVH17qDQ4GHnRAie-GZ7n53QXMNOpKXZPiw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2022-01-14 21:55:46 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-01-14 21:55:46 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 21:55:46 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 21:55:46 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 21:55:46 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczNDUsImV4cCI6MTY0MjE5NzQwNSwianRpIjoiQWhHWGplSFhIRHNYcnY3cjFNSTduQllqTmlYbW5MTFBYSWN3NjI4RGZMVSIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.j9Uhrfs85oI4v-225zIlyt-2IkewWZk1NdUgzyiIrFyU-RZ1hPFvmprA_Y-LCFOdFntdZEDzICBr02t5U6frS3-U5e0bekuGYrE6F0Yat0uatWGJlQEEFS87sD2LSO_XhxYbJa825uUrRbU3glq7Uw6fKgyjNQBddEJHJ2YcvzrXW8o5z6ODmS1BqQ8d4-roTkw8nw3upq9D4G6QUrPD_SreuzwXy6uGdZGipH3FdMLXtmSd6J0IHDGwdFH_bT3SS9h7-1M-YT6hxAN84RwrPrS6vY_xAxK5DjX6sWIaRJWUi7qAeqYKVH17qDQ4GHnRAie-GZ7n53QXMNOpKXZPiw",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "hubfintech-bank",
    "aud": [
      "https://www.certification.openid.net/test/a/hubfintech/",
      "https://www.certification.openid.net/test/a/hubfintech/token",
      "https://www.certification.openid.net/test-mtls/a/hubfintech/token"
    ],
    "iss": "hubfintech-bank",
    "exp": 1642197405,
    "iat": 1642197345,
    "jti": "AhGXjeHXHDsXrv7r1MI7nBYjNiXmnLLPXIcw628DfLU"
  }
}
2022-01-14 21:55:46
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-01-14 21:55:46 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTczNDUsImV4cCI6MTY0MjE5NzQwNSwianRpIjoiQWhHWGplSFhIRHNYcnY3cjFNSTduQllqTmlYbW5MTFBYSWN3NjI4RGZMVSIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.j9Uhrfs85oI4v-225zIlyt-2IkewWZk1NdUgzyiIrFyU-RZ1hPFvmprA_Y-LCFOdFntdZEDzICBr02t5U6frS3-U5e0bekuGYrE6F0Yat0uatWGJlQEEFS87sD2LSO_XhxYbJa825uUrRbU3glq7Uw6fKgyjNQBddEJHJ2YcvzrXW8o5z6ODmS1BqQ8d4-roTkw8nw3upq9D4G6QUrPD_SreuzwXy6uGdZGipH3FdMLXtmSd6J0IHDGwdFH_bT3SS9h7-1M-YT6hxAN84RwrPrS6vY_xAxK5DjX6sWIaRJWUi7qAeqYKVH17qDQ4GHnRAie-GZ7n53QXMNOpKXZPiw
2022-01-14 21:55:46 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-01-14 21:55:46 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-01-14 21:55:46 SUCCESS
ValidateRefreshToken
refresh_token parameter matches the expected value.
refresh_token
DaxKTVKiKTMJCiYZWGZALDunBKOPSxxDqbWqbVbATULoJQKlse7147701577^,\,&
2022-01-14 21:55:46 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
98AY6Wh7xzpqGolk2hLXU4aN5gAspCQQe5q3ckqOCl4KQPXe7Z
2022-01-14 21:55:46 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
KXlJU7dsvHsIIVlE0-KzXA
2022-01-14 21:55:46
CreateRefreshToken
Created refresh token
refresh_token
XmEyPKgVNKkMBrtPRABNEzgwMIxfgFtUdevEyQWDmRLxgddkLH4643754663."[~>
2022-01-14 21:55:46 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
98AY6Wh7xzpqGolk2hLXU4aN5gAspCQQe5q3ckqOCl4KQPXe7Z
token_type
Bearer
refresh_token
XmEyPKgVNKkMBrtPRABNEzgwMIxfgFtUdevEyQWDmRLxgddkLH4643754663."[~>
scope
openid consent:urn:conformance:oidf:N0gemw8R9R payments
2022-01-14 21:55:46 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "98AY6Wh7xzpqGolk2hLXU4aN5gAspCQQe5q3ckqOCl4KQPXe7Z",
  "token_type": "Bearer",
  "refresh_token": "XmEyPKgVNKkMBrtPRABNEzgwMIxfgFtUdevEyQWDmRLxgddkLH4643754663.\"[~\u003e",
  "scope": "openid consent:urn:conformance:oidf:N0gemw8R9R payments"
}
outgoing_path
token
2022-01-14 21:55:46 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ZVOXCQuFvUrSpTB
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/jwt",
  "x-idempotency-key": "347effd4-8b8d-4309-b682-bf85476f9e15",
  "authorization": "Bearer 98AY6Wh7xzpqGolk2hLXU4aN5gAspCQQe5q3ckqOCl4KQPXe7Z",
  "user-agent": "PostmanRuntime/7.28.4",
  "accept": "*/*",
  "cache-control": "no-cache",
  "postman-token": "067a4230-6b48-4ddd-b464-2ab0b01f1174",
  "accept-encoding": "gzip, deflate, br",
  "cookie": "JSESSIONID\u003dC2439E2BB262F2C5924E57E3B6C0FEBB",
  "content-length": "1057",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.eyJkYXRhIjp7ImxvY2FsSW5zdHJ1bWVudCI6IkRJQ1QiLCJwYXltZW50Ijp7ImFtb3VudCI6IjEuMTUiLCJjdXJyZW5jeSI6IkJSTCJ9LCJjcmVkaXRvckFjY291bnQiOnsiYWNjb3VudFR5cGUiOiJDQUNDIiwiaXNwYiI6IjkyODk0OTIyIiwiaXNzdWVyIjoiMDAwMSIsIm51bWJlciI6IjEwMTczNzIyIn0sImNucGpJbml0aWF0b3IiOiIyMDc0NzQzNjAwMDE1NiIsImliZ2VUb3duQ29kZSI6IjUzMDAxMDgiLCJwcm94eSI6IjU1MTU1MTE0ODQ1In0sImlhdCI6MTY0MjE5NzM0NiwiYXVkIjoiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvcGF5bWVudHMvdjEvcGl4L3BheW1lbnRzIiwiaXNzIjoiN2VlYmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzIiwianRpIjoiYmNiZjhhM2EtM2M3Yy00NWNiLWEyMzAtMGQyMjQ0MDViNWE4In0.LrwgUWwyDfwQbwew0Eox3vOPzqQD46I0Tt6-Q1REnvqp-_TBYajKnvDz-DqWh3Ux2D3MOu5-U8N3r6aHnMoGsRvIc3SEtTQjIZ6GADMgwwHu6SwKayKXBC7INA7n6XGjXqp9Mcb_ELIpkBt7kn7T_abXZZw8aptc7ki5DlKAUWnvYrVE3BX5hMhhaIj5Ff0PZJ3PhcyxCpYjdSm3X22yL6Hyc4Nv-XMqsGlW-6OhAdZzGdHU_L5tzQvm1z4sZ5I4Rmma1JxQEFVz32iOrr_HFVw3RAukGe-olK8adRWaHHGMI7dgvFkq_3wqQucAQNkaW-sNWqvE7uki2GdLLIEeng
2022-01-14 21:55:46 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 21:55:46 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 21:55:46 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 21:55:46 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Payment initiation endpoint
2022-01-14 21:55:46 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2022-01-14 21:55:46 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-01-14 21:55:46 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
98AY6Wh7xzpqGolk2hLXU4aN5gAspCQQe5q3ckqOCl4KQPXe7Z
2022-01-14 21:55:46 SUCCESS
RequireBearerAccessToken
Found access token in request
actual
98AY6Wh7xzpqGolk2hLXU4aN5gAspCQQe5q3ckqOCl4KQPXe7Z
2022-01-14 21:55:46 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2022-01-14 21:55:46 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2022-01-14 21:55:46 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2022-01-14 21:55:46 SUCCESS
FAPIBrazilEnsureAuthorizationRequestScopesContainPayments
'payments' was included in authorization request scopes
actual
openid consent:urn:conformance:oidf:N0gemw8R9R payments
expected
payments
2022-01-14 21:55:46 SUCCESS
FAPIBrazilExtractPaymentInitiationRequest
Parsed payment initiation request
payment_initiation_request
{
  "aud": "https://www.certification.openid.net/test-mtls/a/hubfintech/payments/v1/pix/payments",
  "data": {
    "proxy": "55155114845",
    "localInstrument": "DICT",
    "creditorAccount": {
      "number": "10173722",
      "accountType": "CACC",
      "ispb": "92894922",
      "issuer": "0001"
    },
    "cnpjInitiator": "20747436000156",
    "payment": {
      "amount": "1.15",
      "currency": "BRL"
    },
    "ibgeTownCode": "5300108"
  },
  "iss": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197346,
  "jti": "bcbf8a3a-3c7c-45cb-a230-0d224405b5a8"
}
2022-01-14 21:55:46 SUCCESS
FAPIBrazilValidateJwtSignatureUsingOrganizationJwks
jwt signature validated
jwt
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.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.LrwgUWwyDfwQbwew0Eox3vOPzqQD46I0Tt6-Q1REnvqp-_TBYajKnvDz-DqWh3Ux2D3MOu5-U8N3r6aHnMoGsRvIc3SEtTQjIZ6GADMgwwHu6SwKayKXBC7INA7n6XGjXqp9Mcb_ELIpkBt7kn7T_abXZZw8aptc7ki5DlKAUWnvYrVE3BX5hMhhaIj5Ff0PZJ3PhcyxCpYjdSm3X22yL6Hyc4Nv-XMqsGlW-6OhAdZzGdHU_L5tzQvm1z4sZ5I4Rmma1JxQEFVz32iOrr_HFVw3RAukGe-olK8adRWaHHGMI7dgvFkq_3wqQucAQNkaW-sNWqvE7uki2GdLLIEeng
2022-01-14 21:55:46 SUCCESS
EnsureIncomingRequestContentTypeIsApplicationJwt
Client correctly used application/jwt content type
2022-01-14 21:55:46 SUCCESS
ExtractXIdempotencyKeyHeader
Found an x-idempotency-key header
idempotency_key
347effd4-8b8d-4309-b682-bf85476f9e15
2022-01-14 21:55:46 SUCCESS
FAPIBrazilValidatePaymentInitiationRequestAud
aud claim matches the endpoint url
aud
https://www.certification.openid.net/test-mtls/a/hubfintech/payments/v1/pix/payments
2022-01-14 21:55:46 SUCCESS
FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate
Extracted subject from the mtls client certificate
subjectdn
UID=3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,2.5.4.5=#130e3133383834373735303030313139,CN=hubfintech.com.br,OU=7eebe017-cb01-498c-81e4-6b4149b18e93,O=HUB PAGAMENTOS S.A,L=Tambore,ST=SP,C=BR
ou
7eebe017-cb01-498c-81e4-6b4149b18e93
brazil_software_id
3a268f4c-3ae2-466b-88e3-571c5279e939
2022-01-14 21:55:46 SUCCESS
FAPIBrazilEnsurePaymentInitiationRequestIssEqualsOrganizationId
iss claim in payment initiation request matches organizationId in client certificate
iss
7eebe017-cb01-498c-81e4-6b4149b18e93
2022-01-14 21:55:46 SUCCESS
FAPIBrazilEnsurePaymentInitiationRequestJtiIsUUIDv4
jti claim in payment initiation request is a UUIDv4
jti
bcbf8a3a-3c7c-45cb-a230-0d224405b5a8
2022-01-14 21:55:46 SUCCESS
FAPIBrazilValidatePaymentInitiationRequestIat
iat claim in payment initiation request is valid
iat
1642197346
2022-01-14 21:55:46 SUCCESS
FAPIBrazilGenerateNewPaymentInitiationResponse
Created payment initiation response
payment_initiation_response_headers
{
  "x-fapi-interaction-id": "3b0c2ac5-a70b-4387-ab9d-136d584972cc"
}
payment_initiation_response
{
  "data": {
    "proxy": "55155114845",
    "localInstrument": "DICT",
    "creditorAccount": {
      "number": "10173722",
      "accountType": "CACC",
      "ispb": "92894922",
      "issuer": "0001"
    },
    "cnpjInitiator": "20747436000156",
    "payment": {
      "amount": "1.15",
      "currency": "BRL"
    },
    "ibgeTownCode": "5300108",
    "paymentId": "e4ddf734-c007-4384-9173-b3af8710b598",
    "consentId": "urn:conformance:oidf:N0gemw8R9R",
    "creationDateTime": "2022-01-14T21:55:46Z",
    "statusUpdateDateTime": "2022-01-14T21:55:46Z",
    "status": "ACSP"
  },
  "links": {
    "self": "https://www.certification.openid.net/test/a/hubfintechpayments/v1/pix/payments"
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-01-14T21:55:46Z"
  },
  "aud": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197346,
  "jti": "392b89a4-83ed-419b-96ee-f36da50cc571",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}
2022-01-14 21:55:46 SUCCESS
FAPIBrazilSignPaymentInitiationResponse
Signed the payment initiation response
signed_payment_initiation_response
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.aFcF-bbXZTEu8mecjY1Scay1p5mnrFJ6iEjhGoWN7wLb5a9edq_-rQA-qpSI-gSMPvd2aCwG84VuoEOX-htHnf7ss9AmATb7ovh5HIxldQ2mMCnZio1d2BoO6QK_fsm3arIyhsVmtI6aVekzeDeH13H7zmOWqkOkKo8YOOeI9hXIpUQPRd6tqCocejiEtbXf2qdktqd4eZdbZTBCZ6lX4i9cbdETFcjfti-ClJFvqFXAn4RLvW7hnne0Zr1HdXCst3_QG1fc5IdfoSAjixW6wxchsHjmNsd0GHsXRdnF83wRs2KCWQ4GcTWovjAksvncWfRTTnURvsl4tAr6Q8Zoig
2022-01-14 21:55:46
ClearAccessTokenFromRequest
Condition ran but did not log anything
2022-01-14 21:55:46 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ZVOXCQuFvUrSpTB
outgoing_status_code
201
outgoing_headers
{
  "x-fapi-interaction-id": [
    "3b0c2ac5-a70b-4387-ab9d-136d584972cc"
  ],
  "Content-Type": [
    "application/jwt"
  ]
}
outgoing_body
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.aFcF-bbXZTEu8mecjY1Scay1p5mnrFJ6iEjhGoWN7wLb5a9edq_-rQA-qpSI-gSMPvd2aCwG84VuoEOX-htHnf7ss9AmATb7ovh5HIxldQ2mMCnZio1d2BoO6QK_fsm3arIyhsVmtI6aVekzeDeH13H7zmOWqkOkKo8YOOeI9hXIpUQPRd6tqCocejiEtbXf2qdktqd4eZdbZTBCZ6lX4i9cbdETFcjfti-ClJFvqFXAn4RLvW7hnne0Zr1HdXCst3_QG1fc5IdfoSAjixW6wxchsHjmNsd0GHsXRdnF83wRs2KCWQ4GcTWovjAksvncWfRTTnURvsl4tAr6Q8Zoig
outgoing_path
payments/v1/pix/payments
2022-01-14 21:55:46 FINISHED
fapi1-advanced-final-client-refresh-token-test
Test has run to completion
testmodule_result
PASSED
2022-01-14 21:55:49
TEST-RUNNER
Alias has now been claimed by another test
alias
hubfintech
new_test_id
NGp0uRmXUig9pDR
Test Results