Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-01-14 22:00:21 INFO
TEST-RUNNER
Test instance ezFwc9oCE3PSbWf created
baseUrl
https://www.certification.openid.net/test/a/hubfintech
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "pushed",
  "fapi_profile": "openbanking_brazil",
  "fapi_jarm_type": "oidc",
  "fapi_response_mode": "plain_response"
}
alias
hubfintech
description
Hub Fintech - Iniciação de Pagamentos
planId
CHLuUAFFBnQiw
config
{
  "alias": "hubfintech",
  "description": "Hub Fintech - Iniciação de Pagamentos",
  "server": {
    "jwks": {
      "keys": [
        {
          "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
          "kty": "RSA",
          "alg": "PS256",
          "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
          "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
          "e": "AQAB",
          "use": "sig",
          "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
          "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
          "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
          "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
          "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
          "x5c": [
            "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\u003d\u003d"
          ]
        },
        {
          "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
          "kty": "RSA",
          "alg": "RSA-OAEP",
          "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
          "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
          "e": "AQAB",
          "use": "enc",
          "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
          "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
          "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
          "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
          "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
        }
      ]
    }
  },
  "client": {
    "client_id": "hubfintech-bank",
    "redirect_uri": "https://hubfintech.com.br/callback",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "sig",
          "alg": "PS256",
          "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ",
          "e": "AQAB",
          "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c"
        },
        {
          "kty": "RSA",
          "use": "enc",
          "alg": "RSA-OAEP",
          "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww",
          "e": "AQAB",
          "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e"
        }
      ]
    },
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5\nNDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh\nbWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl\nYmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm\naW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T\nFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK\nCZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf\n9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ\n98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1\n1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd\nrSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos\nZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv\nOQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D\nNnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI\nKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr\naS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0\ncDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz\ndWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E\nBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG\nCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm\naWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp\nbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu\nZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2\naWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz\nIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj\nYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB\nBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu\nb3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM\nE5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4\nFDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE\n3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI\nZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr\nJuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO\nHPFJ\n-----END CERTIFICATE-----"
  },
  "client2": {
    "client_id": "hubfintech-bank-two",
    "redirect_uri": "https://hubfintech.com.br/callback",
    "id_token_encrypted_response_alg": "RSA-OAEP",
    "id_token_encrypted_response_enc": "A256GCM",
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIG7zCCBdegAwIBAgIUbozJwymP/g6NdP5bBatu+G9rF9YwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NTEwMFoXDTIyMTExNDE5\nNTEwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh\nbWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl\nYmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm\naW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T\nFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK\nCZImiZPyLGQBARMkYmQ1NTQ5ZDktNjdiNS00MzkyLTgyODYtNWU2ZDhhMjQxNTA1\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySikOXVsymmykvexNTvz\n5roVpMCH+xaPGn3rjaIXXF82huDtGoMhM4W9x8uTDDIeK1sLaRDm61pVHogM259f\nFmS2etbqyCi3k5dAzGZ0Txt/RYeUgjOYDbKQHbT8eejGDuUmcy3H1TtU+kSnWDu1\n2PbFlJo0TTVgCJ5lcjwFp4hZ01NyKWunQshok9EeVbd/ws86sG18DYEAYX4pLGyn\nWYBfJaKr05t5JRvtKBK5AeuM27nGEn+h7Y3BLZKhafgSUCY7YA7hipUnaRNyqbYp\nEmJd/dty1CUwaZtSK1Y+YsFFvivH8w8RC95kP8nyhpE4+jUOuj2f3Zjy3b0ESv7m\nRQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUU5m8jPQ4f2yi\neavRZ2TWx6YX6EYwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI\nKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr\naS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0\ncDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz\ndWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E\nBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG\nCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm\naWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp\nbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu\nZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2\naWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz\nIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj\nYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB\nBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu\nb3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQDbYp7KxmuJtCHRC3pp\nLDquvEGW8BDrYP8P2E2SUgBtE7iTmgVoOCbVOSmdY4h2QSpaoPtbNZk+nP0LxKUc\nG9SrGUL64QN17mxmiuSGtp1yvMqVFyLvQcsBs4h/9eZjl71AMM3QJib+gbgHtyR2\nzOpY85MpyPMKn2AHSnq0JHPsAT/U1ao2Qg+ybROGot0iFCvZ/k6tGVxDyM5JVHwA\nmLKO+C68mEYdDr0pzOnw86Vy/UvJA/OUmuxF25FaNthQl2QVeM/pmI/y7JZSHb1G\nHZMU2R3t5YJuIyODWjIYpdcyy7x/tKtC0KeEx3l1RYidhheP0hSQV4PMAC72g18V\ni5QB\n-----END CERTIFICATE-----",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "sig",
          "alg": "PS256",
          "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ",
          "e": "AQAB",
          "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7"
        },
        {
          "kty": "RSA",
          "use": "enc",
          "alg": "RSA-OAEP",
          "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ",
          "e": "AQAB",
          "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d"
        }
      ]
    }
  },
  "directory": {
    "keystore": "https://keystore.sandbox.directory.openbankingbrasil.org.br/"
  }
}
testName
fapi1-advanced-final-client-refresh-token-test
2022-01-14 22:00:21 SUCCESS
FAPIBrazilGenerateServerConfiguration
Created server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true
}
issuer
https://www.certification.openid.net/test/a/hubfintech/
discoveryUrl
https://www.certification.openid.net/test/a/hubfintech/.well-known/openid-configuration
2022-01-14 22:00:21 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_jwks
{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
server_encryption_keys
{
  "keys": [
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
2022-01-14 22:00:21 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-01-14 22:00:21
SetServerSigningAlgToPS256
Successfully set signing algorithm to PS256
2022-01-14 22:00:21
FAPIBrazilSetGrantTypesSupportedInServerConfiguration
Successfully set grant_types_supported
server
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ]
}
2022-01-14 22:00:21
AddClaimsParameterSupportedTrueToServerConfiguration
Successfully added claims_parameter_supported to server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true
}
2022-01-14 22:00:21
FAPIBrazilAddBrazilSpecificSettingsToServerConfiguration
Added open banking Brazil specific server settings
server
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ]
}
2022-01-14 22:00:21
SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly
Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration
server_configuration
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ]
}
2022-01-14 22:00:21
AddPushedAuthorizationRequestEndpointToServerConfig
Added pushed_authorization_request_endpoint to server configuration
endpoint
https://www.certification.openid.net/test/a/hubfintech/par
2022-01-14 22:00:21
AddRequirePushedAuthorizationRequestsToServerConfig
Added require_pushed_authorization_requests to server configuration
value
true
2022-01-14 22:00:21 SUCCESS
AddResponseTypeCodeIdTokenToServerConfiguration
Added code id_token as response type supported
response_types_supported
[
  "code id_token"
]
2022-01-14 22:00:21 SUCCESS
FAPIBrazilAddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
values
[
  "PS256"
]
2022-01-14 22:00:21 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2022-01-14 22:00:21 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
2022-01-14 22:00:21 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
Verify configuration of first client
2022-01-14 22:00:21 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
hubfintech-bank
redirect_uri
https://hubfintech.com.br/callback
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ",
      "e": "AQAB",
      "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww",
      "e": "AQAB",
      "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e"
    }
  ]
}
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 22:00:21 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-01-14 22:00:21 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ",
      "e": "AQAB",
      "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww",
      "e": "AQAB",
      "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
      "alg": "PS256",
      "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e",
      "alg": "RSA-OAEP",
      "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww"
    }
  ]
}
2022-01-14 22:00:21 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-01-14 22:00:21 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-01-14 22:00:21 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "xLu-dtbDkwe-gb_lnUpo6Asyq9fS-UaxLJYz0o3hbt-ORNc-VTV08M-xWL_1M5ZwAJcSONo17G8XmRa-MXT5Cr4n9Np7j1JsBKG2rLAfbD3tRGO1vsTO0Y_q8T4Ejl2QP6UaFTZ3z4gy2SWrh4vmr0vbpVPZyuyBnKlu2YPlpLsziw3OlVM4gJGMaSfUZKPqTKOUnya3Ha32NyTvYFAizE_M5Ge5pfMtUTrVxTx7fVb3pwEBUZJY09wAJEINdWMx4Z5Is8uqD3cqNOeidFzM3uH5Gp2BvQFiKi1B54HPX1-MVsx49YnL1CAM1JRTAnr8iiaWNEyTKxUTFvrNSLVXHQ",
      "e": "AQAB",
      "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "ygNWJPdjKT_QSJX1cW_pFbd-AT8j7f2_RuOEhwUVQiQGrIaFvzl7iiNM9oHOiJnT1j3-zt3QVSv2vhJcIdMz76BnYTZlvyZS6J2L4tEa23sTCHwDS-PiQR7SEMJ66trjjlsMlmQT6Uj4JFVC1ud1Q_14sN7lNoxlNanx-gTxCJaHHmrcLBOzwmejZ0ea-D9zHo30kdkP3tt0gJuErtqaSn_seTd2RcJPA7tSl8fY4W8JoBO3zPd7X3kLmZmU-EDNL_xacz4KRsdp_zi5QGRCIdZ6mMqj6HJgh8ggPtK7WC45gg-ONfzO9tPJUFE-tW0kY-I3fu14FAOgSZbqBe9aww",
      "e": "AQAB",
      "kid": "56c3ba969a7d049dfdcfe6062b50a737748163e779b6f23c476977f44246906e"
    }
  ]
}
Verify configuration of second client
2022-01-14 22:00:21 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
hubfintech-bank-two
redirect_uri
https://hubfintech.com.br/callback
id_token_encrypted_response_alg
RSA-OAEP
id_token_encrypted_response_enc
A256GCM
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ",
      "e": "AQAB",
      "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ",
      "e": "AQAB",
      "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d"
    }
  ]
}
2022-01-14 22:00:21 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-01-14 22:00:21 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ",
      "e": "AQAB",
      "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ",
      "e": "AQAB",
      "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7",
      "alg": "PS256",
      "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d",
      "alg": "RSA-OAEP",
      "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ"
    }
  ]
}
2022-01-14 22:00:21 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-01-14 22:00:21 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-01-14 22:00:21 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "n": "5zo1b6Bmvxs_EfHpxHJb6pjfskxoiWAyrCcA7XhoxcwMDRc46EPB-VZhGfG6K-s26GIk6_e_1iaqN_UBuInpRrJxOuJstmSlrxqi4aQrdh4e0Ed3f_-arjUl8D-EjE1hvsq41gQcCD5zOhm6ZBu4ZiQ6LawxgU6jEBx_bmEapeP4K52s090wxraX_jzP4oxieW2WrCRnKxCTh1nIWCdgoTILPo2WlRgeKY3YLIBlksOBGzyrIBcDCJsBg4sw1qhhYwyoOBp5CsK9E1C32cCDDYkmffzDFC8-P88d3Wi95h7JiPAzqS6K-DDBTFq-vBuL_T0VWJWw6BXdX3GXIm8uiQ",
      "e": "AQAB",
      "kid": "6f7fcc84bd1c6d280ded71b7ca493e24ae446d181657afeddc8b93d0390ee7e7"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "alg": "RSA-OAEP",
      "n": "tw9nP6cYZEJ7aeFL7z_uutNDCQFSReGZs5kIT0QOuyLGzAq3mX_IIo0D5KxS5Awm3YYMfeuZeNObhZsdwfjDeqy0Ya8SO2CiG_ZYEYgI5KwmrFgC0Eg2q6-C3RHvbSATxba7xzPMythBdUMowxQ9Zj6NQts5pj2pnCdDEGVVSqARHY8D45J9o1y0GIPwdXgA63MqZbpVLygwedf6HKIxOPke9cQI-bkk9dslfJ1H9YftR70tM8F4xWX1zI3_Yo7PDPCkIvRH0GumUSBFF871QllyRl-_n8u6m1WaiKpoFz75Z3ziBpXvn2dw1juhszosLG8HBbCfEJ3ODkWIZ8kOAQ",
      "e": "AQAB",
      "kid": "46a6c8757a247e34063159e65492472779129ab8748f946e83b0d011c97ebf4d"
    }
  ]
}
2022-01-14 22:00:21
fapi1-advanced-final-client-refresh-token-test
Setup Done
2022-01-14 22:00:22 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 22:00:22 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 22:00:22 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/hubfintech/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-01-14 22:00:23 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "content-length": "1096",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/token
incoming_body_form_params
{
  "grant_type": "client_credentials",
  "scope": "payments",
  "client_id": "hubfintech-bank",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjMsImV4cCI6MTY0MjE5NzY4MywianRpIjoidFNCS1dUZkRPX0tSZ3FxLURMQlVIWFREcDNkbWZROURUWkkzZmJtMlJsUSIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.SVCQX3IRonRy7yyuuppmmyeZWy1WCf3KcZSJm7WxqE2kVu8o97xczE4KCPxtHE6bpnPMUrWxdnG-8UpBu1E4-7aZGURluiIoRrWNrXXnNn6QJ0KJTjNITNC1FdvhCk8mGjMu6wrXqPrV8TQx6-D-73TRaZ9p3lDh1obq4pp0Abr5WqQeyDpQuXbuP1Q0X4YAWxJjylegAG3ZvIqytn1I7mF_5XREhHeumjCsFD29k61_tXWAvAwCU7GLUkzh6fd33WvFmpRyX1eBLKmlEX6yyxemdTHB3AeJUZBz8a6_Ket2WNQU7A0ZBEhKQhl06wp7RZZbJUttWI9zvyqSOcdN_A",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=client_credentials&scope=payments&client_id=hubfintech-bank&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjMsImV4cCI6MTY0MjE5NzY4MywianRpIjoidFNCS1dUZkRPX0tSZ3FxLURMQlVIWFREcDNkbWZROURUWkkzZmJtMlJsUSIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.SVCQX3IRonRy7yyuuppmmyeZWy1WCf3KcZSJm7WxqE2kVu8o97xczE4KCPxtHE6bpnPMUrWxdnG-8UpBu1E4-7aZGURluiIoRrWNrXXnNn6QJ0KJTjNITNC1FdvhCk8mGjMu6wrXqPrV8TQx6-D-73TRaZ9p3lDh1obq4pp0Abr5WqQeyDpQuXbuP1Q0X4YAWxJjylegAG3ZvIqytn1I7mF_5XREhHeumjCsFD29k61_tXWAvAwCU7GLUkzh6fd33WvFmpRyX1eBLKmlEX6yyxemdTHB3AeJUZBz8a6_Ket2WNQU7A0ZBEhKQhl06wp7RZZbJUttWI9zvyqSOcdN_A&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2022-01-14 22:00:23 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-01-14 22:00:23 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 22:00:23 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 22:00:23 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 22:00:23 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjMsImV4cCI6MTY0MjE5NzY4MywianRpIjoidFNCS1dUZkRPX0tSZ3FxLURMQlVIWFREcDNkbWZROURUWkkzZmJtMlJsUSIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.SVCQX3IRonRy7yyuuppmmyeZWy1WCf3KcZSJm7WxqE2kVu8o97xczE4KCPxtHE6bpnPMUrWxdnG-8UpBu1E4-7aZGURluiIoRrWNrXXnNn6QJ0KJTjNITNC1FdvhCk8mGjMu6wrXqPrV8TQx6-D-73TRaZ9p3lDh1obq4pp0Abr5WqQeyDpQuXbuP1Q0X4YAWxJjylegAG3ZvIqytn1I7mF_5XREhHeumjCsFD29k61_tXWAvAwCU7GLUkzh6fd33WvFmpRyX1eBLKmlEX6yyxemdTHB3AeJUZBz8a6_Ket2WNQU7A0ZBEhKQhl06wp7RZZbJUttWI9zvyqSOcdN_A",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "hubfintech-bank",
    "aud": [
      "https://www.certification.openid.net/test/a/hubfintech/",
      "https://www.certification.openid.net/test/a/hubfintech/token",
      "https://www.certification.openid.net/test-mtls/a/hubfintech/token"
    ],
    "iss": "hubfintech-bank",
    "exp": 1642197683,
    "iat": 1642197623,
    "jti": "tSBKWTfDO_KRgqq-DLBUHXTDp3dmfQ9DTZI3fbm2RlQ"
  }
}
2022-01-14 22:00:23
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-01-14 22:00:23 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjMsImV4cCI6MTY0MjE5NzY4MywianRpIjoidFNCS1dUZkRPX0tSZ3FxLURMQlVIWFREcDNkbWZROURUWkkzZmJtMlJsUSIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.SVCQX3IRonRy7yyuuppmmyeZWy1WCf3KcZSJm7WxqE2kVu8o97xczE4KCPxtHE6bpnPMUrWxdnG-8UpBu1E4-7aZGURluiIoRrWNrXXnNn6QJ0KJTjNITNC1FdvhCk8mGjMu6wrXqPrV8TQx6-D-73TRaZ9p3lDh1obq4pp0Abr5WqQeyDpQuXbuP1Q0X4YAWxJjylegAG3ZvIqytn1I7mF_5XREhHeumjCsFD29k61_tXWAvAwCU7GLUkzh6fd33WvFmpRyX1eBLKmlEX6yyxemdTHB3AeJUZBz8a6_Ket2WNQU7A0ZBEhKQhl06wp7RZZbJUttWI9zvyqSOcdN_A
2022-01-14 22:00:23 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-01-14 22:00:23 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-01-14 22:00:23 SUCCESS
FAPIBrazilExtractRequestedScopeFromClientCredentialsGrant
Found 'payments' scope in request
actual
[
  "payments"
]
expected
payments
2022-01-14 22:00:23 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
xNZRmWW7Gk4ez8gkX73b28oEXMXwMbD5pm7FQjGXCWrBdu7kfh
2022-01-14 22:00:23 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
xNZRmWW7Gk4ez8gkX73b28oEXMXwMbD5pm7FQjGXCWrBdu7kfh
token_type
Bearer
2022-01-14 22:00:23
CopyAccessTokenToClientCredentialsField
Condition ran but did not log anything
2022-01-14 22:00:23 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "xNZRmWW7Gk4ez8gkX73b28oEXMXwMbD5pm7FQjGXCWrBdu7kfh",
  "token_type": "Bearer"
}
outgoing_path
token
2022-01-14 22:00:24 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json, text/plain, */*",
  "content-type": "application/jwt",
  "authorization": "Bearer xNZRmWW7Gk4ez8gkX73b28oEXMXwMbD5pm7FQjGXCWrBdu7kfh",
  "x-idempotency-key": "89653cac-8790-468d-9058-b6a37fe07455",
  "user-agent": "axios/0.24.0",
  "content-length": "1412",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/payments/v1/consents
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.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.UibGiqKpb6GYeI72dYIbsThmSIbFC6AOUr3XR1rf8pnlrsOJYeV5Lb1lehE7cOdk9nE-FLSE0OrBRPSQYsRNsy5E2UffYx108KQBoaDZvQtL1NL95Ql9RhLLJ8T66FO63wubmVsD5qx52lTsDlwgU_p3Wt4_foqYfeWsv2yO_GRQYMDoNv2DCMutGnvy0FBt4sUK4MkHg9v9PIlP00q4ETDgWM_eRGn5JYr6TdXMHnK76v1C4F3ID0CILic3put87oBJIH8FwwhcGaYLHN73Djkq6zjNxymSw9wh5Ey8x4Cq6kTEz_xOY88SvZPxeThGj_MCn036dDkKICr5voN-iQ
2022-01-14 22:00:24 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
New consent endpoint
2022-01-14 22:00:24 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 22:00:24 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 22:00:24 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 22:00:24 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2022-01-14 22:00:24 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-01-14 22:00:24 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
xNZRmWW7Gk4ez8gkX73b28oEXMXwMbD5pm7FQjGXCWrBdu7kfh
2022-01-14 22:00:24 SUCCESS
RequireBearerClientCredentialsAccessToken
Found access token in request
actual
xNZRmWW7Gk4ez8gkX73b28oEXMXwMbD5pm7FQjGXCWrBdu7kfh
2022-01-14 22:00:24 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2022-01-14 22:00:24 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2022-01-14 22:00:24 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2022-01-14 22:00:24 SUCCESS
FAPIBrazilExtractCertificateSubjectFromServerJwks
Extracted subject from the certificate included in server jwks
subjectdn
UID=74e929d9-33b6-4d85-8ba7-c146c867a817,CN=Open Banking Brasil,OU=12345+OU=certman+OU=agoodone,O=ICP-Brasil,C=BR
ou
12345
brazil_software_id
74e929d9-33b6-4d85-8ba7-c146c867a817
2022-01-14 22:00:24 SUCCESS
FAPIBrazilEnsureClientCredentialsScopeContainedPayments
The token request which was used to obtain the access token contained 'payments' scope
actual
[
  "payments"
]
2022-01-14 22:00:24 SUCCESS
FAPIBrazilExtractPaymentsConsentRequest
Parsed payments consent request
payments_consent_request
{
  "aud": "https://www.certification.openid.net/test-mtls/a/hubfintech/payments/v1/consents",
  "data": {
    "debtorAccount": {
      "number": "4261073573",
      "accountType": "CACC",
      "ispb": "37241230",
      "issuer": "0001"
    },
    "loggedUser": {
      "document": {
        "identification": "57784518064",
        "rel": "CPF"
      }
    },
    "creditor": {
      "name": "HOMOLOGACAO PIX",
      "cpfCnpj": "55155114845",
      "personType": "PESSOA_NATURAL"
    },
    "payment": {
      "date": "2021-11-11",
      "amount": "1.15",
      "currency": "BRL",
      "details": {
        "proxy": "55155114845",
        "localInstrument": "DICT",
        "creditorAccount": {
          "number": "10173722",
          "accountType": "CACC",
          "ispb": "92894922",
          "issuer": "0001"
        }
      },
      "ibgeTownCode": "5300108",
      "type": "PIX"
    }
  },
  "iss": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197623,
  "jti": "6d7506a3-2e0d-45cb-9e95-57117afa6ea5"
}
2022-01-14 22:00:24 SUCCESS
EnsureIncomingRequestContentTypeIsApplicationJwt
Client correctly used application/jwt content type
2022-01-14 22:00:24 SUCCESS
ExtractXIdempotencyKeyHeader
Found an x-idempotency-key header
idempotency_key
89653cac-8790-468d-9058-b6a37fe07455
2022-01-14 22:00:24 SUCCESS
FAPIBrazilValidatePaymentConsentRequestAud
aud claim matches the endpoint url
aud
https://www.certification.openid.net/test-mtls/a/hubfintech/payments/v1/consents
2022-01-14 22:00:24 SUCCESS
FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate
Extracted subject from the mtls client certificate
subjectdn
UID=3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,2.5.4.5=#130e3133383834373735303030313139,CN=hubfintech.com.br,OU=7eebe017-cb01-498c-81e4-6b4149b18e93,O=HUB PAGAMENTOS S.A,L=Tambore,ST=SP,C=BR
ou
7eebe017-cb01-498c-81e4-6b4149b18e93
brazil_software_id
3a268f4c-3ae2-466b-88e3-571c5279e939
2022-01-14 22:00:24 SUCCESS
FAPIBrazilEnsureConsentRequestIssEqualsOrganizationId
iss claim in consent request matches organizationId in client certificate
iss
7eebe017-cb01-498c-81e4-6b4149b18e93
2022-01-14 22:00:24 SUCCESS
FAPIBrazilEnsureConsentRequestJtiIsUUIDv4
jti claim in consent request is a UUIDv4
jti
6d7506a3-2e0d-45cb-9e95-57117afa6ea5
2022-01-14 22:00:24 SUCCESS
FAPIBrazilValidateConsentRequestIat
iat claim in consent request is valid
iat
1642197623
2022-01-14 22:00:24
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Fetching client organization keys
jwks_uri
https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/application.jwks
2022-01-14 22:00:24
FAPIBrazilFetchClientOrganizationJwksFromDirectory
HTTP request
request_uri
https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/application.jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/cbor, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-01-14 22:00:24 RESPONSE
FAPIBrazilFetchClientOrganizationJwksFromDirectory
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-type": "application/jwk-set+json",
  "content-length": "3040",
  "connection": "keep-alive",
  "x-amz-replication-status": "COMPLETED",
  "last-modified": "Thu, 14 Oct 2021 01:23:27 GMT",
  "x-amz-version-id": "JVMaNfEjLpCjFLt2gqawcczHkoI6xYBE",
  "accept-ranges": "bytes",
  "server": "AmazonS3",
  "date": "Fri, 14 Jan 2022 22:00:00 GMT",
  "etag": "\"dc2e24032ca3282f3a5b544ecf4ff54f\"",
  "x-cache": "Hit from cloudfront",
  "via": "1.1 4185d2cf877d43718c5988a45f8edae4.cloudfront.net (CloudFront)",
  "x-amz-cf-pop": "MIA3-C4",
  "x-amz-cf-id": "Z3Jll7_Q6DDrpdgoQtSYrYMXs7RaU2K4aHqHFES8FzqkX9GKFjlKNg\u003d\u003d",
  "age": "25"
}
response_body
{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"7XXe96sz47DZke6IS31lZjpmudU9yhDi54jX7i3ngLtIifV0oEbkycPDJolFrGP2QO470o0gRYVFyetYu7WB83YFV4GG9abKrAcJ4rlpg5NvDjbPB0L-FBMzpUiE9vjFbf6a4-Ez4q0RBVKZmqoySFqGGmRSVje1jcFwNZKx9Btg_IBRJ8ByfU0eDofSZlULcTS7LiXbXno9OnDLs6hCNtQuJp8HhHpQdITx7KW01rLXC08skCtT-lBSE32gRLrGZTGORNFjGoLd4GzyYr6oD-R4IBrQdosFKIeD12eHiEYUSQKrecEHWrfiiBUBMwkHQUdzvjl2rRRdwHonLlW-AQ","e":"AQAB","kid":"Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE.pem","x5t#256":"Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE"}]}
2022-01-14 22:00:24
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"7XXe96sz47DZke6IS31lZjpmudU9yhDi54jX7i3ngLtIifV0oEbkycPDJolFrGP2QO470o0gRYVFyetYu7WB83YFV4GG9abKrAcJ4rlpg5NvDjbPB0L-FBMzpUiE9vjFbf6a4-Ez4q0RBVKZmqoySFqGGmRSVje1jcFwNZKx9Btg_IBRJ8ByfU0eDofSZlULcTS7LiXbXno9OnDLs6hCNtQuJp8HhHpQdITx7KW01rLXC08skCtT-lBSE32gRLrGZTGORNFjGoLd4GzyYr6oD-R4IBrQdosFKIeD12eHiEYUSQKrecEHWrfiiBUBMwkHQUdzvjl2rRRdwHonLlW-AQ","e":"AQAB","kid":"Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE.pem","x5t#256":"Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE"}]}
2022-01-14 22:00:24 SUCCESS
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Downloaded and added client organization JWK set to environment
client_organization_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "n": "7XXe96sz47DZke6IS31lZjpmudU9yhDi54jX7i3ngLtIifV0oEbkycPDJolFrGP2QO470o0gRYVFyetYu7WB83YFV4GG9abKrAcJ4rlpg5NvDjbPB0L-FBMzpUiE9vjFbf6a4-Ez4q0RBVKZmqoySFqGGmRSVje1jcFwNZKx9Btg_IBRJ8ByfU0eDofSZlULcTS7LiXbXno9OnDLs6hCNtQuJp8HhHpQdITx7KW01rLXC08skCtT-lBSE32gRLrGZTGORNFjGoLd4GzyYr6oD-R4IBrQdosFKIeD12eHiEYUSQKrecEHWrfiiBUBMwkHQUdzvjl2rRRdwHonLlW-AQ",
      "e": "AQAB",
      "kid": "Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/7eebe017-cb01-498c-81e4-6b4149b18e93/Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE.pem",
      "x5t#256": "Mkjcev__g_nJbj77LNld6GcRGXgyuZEoRIs13SUDWVE"
    }
  ]
}
2022-01-14 22:00:24 SUCCESS
FAPIBrazilValidateJwtSignatureUsingOrganizationJwks
jwt signature validated
jwt
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.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.UibGiqKpb6GYeI72dYIbsThmSIbFC6AOUr3XR1rf8pnlrsOJYeV5Lb1lehE7cOdk9nE-FLSE0OrBRPSQYsRNsy5E2UffYx108KQBoaDZvQtL1NL95Ql9RhLLJ8T66FO63wubmVsD5qx52lTsDlwgU_p3Wt4_foqYfeWsv2yO_GRQYMDoNv2DCMutGnvy0FBt4sUK4MkHg9v9PIlP00q4ETDgWM_eRGn5JYr6TdXMHnK76v1C4F3ID0CILic3put87oBJIH8FwwhcGaYLHN73Djkq6zjNxymSw9wh5Ey8x4Cq6kTEz_xOY88SvZPxeThGj_MCn036dDkKICr5voN-iQ
2022-01-14 22:00:24 SUCCESS
CreateFapiInteractionIdIfNeeded
Created new FAPI interaction ID
fapi_interaction_id
ed0006c3-5cda-407f-b26e-f8b27c055b00
2022-01-14 22:00:24 SUCCESS
FAPIBrazilGenerateNewPaymentsConsentResponse
Created consent response
headers
{
  "x-fapi-interaction-id": "ed0006c3-5cda-407f-b26e-f8b27c055b00"
}
consentId
urn:conformance:oidf:9M5MlIZ5hF
consent_response
{
  "data": {
    "consentId": "urn:conformance:oidf:9M5MlIZ5hF",
    "creationDateTime": "2022-01-14T22:00:24Z",
    "status": "AWAITING_AUTHORISATION",
    "statusUpdateDateTime": "2022-01-14T22:00:24Z",
    "expirationDateTime": "2022-01-15T00:00:24Z",
    "transactionFromDateTime": "2022-01-14T21:55:24Z",
    "transactionToDateTime": "2022-01-15T00:00:24Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/hubfintechpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-01-14T22:00:24Z"
    },
    "creditor": {
      "name": "HOMOLOGACAO PIX",
      "cpfCnpj": "55155114845",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "57784518064",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2021-11-11",
      "amount": "1.15",
      "currency": "BRL",
      "details": {
        "proxy": "55155114845",
        "localInstrument": "DICT",
        "creditorAccount": {
          "number": "10173722",
          "accountType": "CACC",
          "ispb": "92894922",
          "issuer": "0001"
        }
      },
      "ibgeTownCode": "5300108",
      "type": "PIX"
    },
    "debtorAccount": {
      "number": "4261073573",
      "accountType": "CACC",
      "ispb": "37241230",
      "issuer": "0001"
    }
  },
  "aud": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197624,
  "jti": "b38607d2-4c77-45df-8d25-2380e695c650",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}
2022-01-14 22:00:24 SUCCESS
FAPIBrazilSignPaymentConsentResponse
Signed the payment consent response
signed_consent_response
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.2Qx3dGnf46j2ItxBSZGNQ29DxQjE6U4qDUmdhujhD2OCcD0vICHZBYuCHKIpalrDMIcMpiWvYq93lih8w713Z91p6opJWwvLcxpAbHrghVpHJ8mUO7hxVzNkqrHPBNDajB7MF_gtCF5vSc4zJgeboDMhtHJ3qHW9FjfCUo0FmSCE9sPJ_JYKkiokpsPdaVBDCmqruZhXNRWzbqNYJev6gUW9QQEcg0Dy-Q03XsCwYe6M4u_oCtuWj4NKDaaPQl-O0ELyxxjItQyriCmA1sVMrMwpxS_NSFmKnOOoisrga2kDI4FyhI_0KSWAwLA3aAz-aHyrowpiyLbmv1B-Ti9lEw
2022-01-14 22:00:24
ClearAccessTokenFromRequest
Condition ran but did not log anything
2022-01-14 22:00:24 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
201
outgoing_headers
{
  "x-fapi-interaction-id": [
    "ed0006c3-5cda-407f-b26e-f8b27c055b00"
  ],
  "Content-Type": [
    "application/jwt"
  ]
}
outgoing_body
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJhdWQiOiI3ZWViZTAxNy1jYjAxLTQ5OGMtODFlNC02YjQxNDliMThlOTMiLCJkYXRhIjp7ImRlYnRvckFjY291bnQiOnsibnVtYmVyIjoiNDI2MTA3MzU3MyIsImFjY291bnRUeXBlIjoiQ0FDQyIsImlzcGIiOiIzNzI0MTIzMCIsImlzc3VlciI6IjAwMDEifSwiZXhwaXJhdGlvbkRhdGVUaW1lIjoiMjAyMi0wMS0xNVQwMDowMDoyNFoiLCJ0cmFuc2FjdGlvblRvRGF0ZVRpbWUiOiIyMDIyLTAxLTE1VDAwOjAwOjI0WiIsImxvZ2dlZFVzZXIiOnsiZG9jdW1lbnQiOnsiaWRlbnRpZmljYXRpb24iOiI1Nzc4NDUxODA2NCIsInJlbCI6IkNQRiJ9fSwiY29uc2VudElkIjoidXJuOmNvbmZvcm1hbmNlOm9pZGY6OU01TWxJWjVoRiIsInRyYW5zYWN0aW9uRnJvbURhdGVUaW1lIjoiMjAyMi0wMS0xNFQyMTo1NToyNFoiLCJtZXRhIjp7InRvdGFsUmVjb3JkcyI6MSwicmVxdWVzdERhdGVUaW1lIjoiMjAyMi0wMS0xNFQyMjowMDoyNFoiLCJ0b3RhbFBhZ2VzIjoxfSwic3RhdHVzVXBkYXRlRGF0ZVRpbWUiOiIyMDIyLTAxLTE0VDIyOjAwOjI0WiIsImxpbmtzIjp7InNlbGYiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvaHViZmludGVjaHBheW1lbnRzXC92MVwvY29uc2VudHMifSwiY3JlZGl0b3IiOnsibmFtZSI6IkhPTU9MT0dBQ0FPIFBJWCIsImNwZkNucGoiOiI1NTE1NTExNDg0NSIsInBlcnNvblR5cGUiOiJQRVNTT0FfTkFUVVJBTCJ9LCJwYXltZW50Ijp7ImRhdGUiOiIyMDIxLTExLTExIiwiYW1vdW50IjoiMS4xNSIsImN1cnJlbmN5IjoiQlJMIiwiZGV0YWlscyI6eyJwcm94eSI6IjU1MTU1MTE0ODQ1IiwibG9jYWxJbnN0cnVtZW50IjoiRElDVCIsImNyZWRpdG9yQWNjb3VudCI6eyJudW1iZXIiOiIxMDE3MzcyMiIsImFjY291bnRUeXBlIjoiQ0FDQyIsImlzcGIiOiI5Mjg5NDkyMiIsImlzc3VlciI6IjAwMDEifX0sImliZ2VUb3duQ29kZSI6IjUzMDAxMDgiLCJ0eXBlIjoiUElYIn0sImNyZWF0aW9uRGF0ZVRpbWUiOiIyMDIyLTAxLTE0VDIyOjAwOjI0WiIsInN0YXR1cyI6IkFXQUlUSU5HX0FVVEhPUklTQVRJT04ifSwiaXNzIjoiNzRlOTI5ZDktMzNiNi00ZDg1LThiYTctYzE0NmM4NjdhODE3IiwiaWF0IjoxNjQyMTk3NjI0LCJqdGkiOiJiMzg2MDdkMi00Yzc3LTQ1ZGYtOGQyNS0yMzgwZTY5NWM2NTAifQ.2Qx3dGnf46j2ItxBSZGNQ29DxQjE6U4qDUmdhujhD2OCcD0vICHZBYuCHKIpalrDMIcMpiWvYq93lih8w713Z91p6opJWwvLcxpAbHrghVpHJ8mUO7hxVzNkqrHPBNDajB7MF_gtCF5vSc4zJgeboDMhtHJ3qHW9FjfCUo0FmSCE9sPJ_JYKkiokpsPdaVBDCmqruZhXNRWzbqNYJev6gUW9QQEcg0Dy-Q03XsCwYe6M4u_oCtuWj4NKDaaPQl-O0ELyxxjItQyriCmA1sVMrMwpxS_NSFmKnOOoisrga2kDI4FyhI_0KSWAwLA3aAz-aHyrowpiyLbmv1B-Ti9lEw
outgoing_path
payments/v1/consents
2022-01-14 22:00:25 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "content-length": "2485",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/par
incoming_body_form_params
{
  "request": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiI2NWI1YTBkNjkxMGNmYzk4YzYzOTk4ZTgyZmI3OTAzOTRmMjM3Y2Y1MzkwZWVjMjg0ZDIzOWNlYmRlYWE1MDZjIn0.eyJub25jZSI6IkxTMGpNMU1wbWZuTWdscFNaTmdiN3l0dEprR3FuTlRFM1JiNDBjVW9JTHciLCJzdGF0ZSI6IjFVVGs0N0dSNmJTRFl5Vmhoczc1OWJVWkZyWTZMRkFzdkJtbzZNTmhrMGMiLCJzY29wZSI6Im9wZW5pZCBjb25zZW50OnVybjpjb25mb3JtYW5jZTpvaWRmOjlNNU1sSVo1aEYgcGF5bWVudHMiLCJyZXNwb25zZV90eXBlIjoiY29kZSBpZF90b2tlbiIsInJlZGlyZWN0X3VyaSI6Imh0dHBzOi8vaHViZmludGVjaC5jb20uYnIvY2FsbGJhY2siLCJjbGFpbXMiOnsiaWRfdG9rZW4iOnsiYWNyIjp7InZhbHVlcyI6WyJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTIiLCJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiXSwiZXNzZW50aWFsIjp0cnVlfX19LCJjb2RlX2NoYWxsZW5nZSI6ImhDUmlual9IaGFKNHAtRnhHVTdJRVhHS1NfQkI4enR4ak1nRlZrOEh6V1kiLCJjb2RlX2NoYWxsZW5nZV9tZXRob2QiOiJTMjU2IiwiaXNzIjoiaHViZmludGVjaC1iYW5rIiwiYXVkIjoiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoLyIsImNsaWVudF9pZCI6Imh1YmZpbnRlY2gtYmFuayIsImp0aSI6ImJ2aHNEUncwb0ZOb2tJYW12WDhZTEh1aTItYnJ0U19Ub0ZYLWhMbzdIR3ciLCJpYXQiOjE2NDIxOTc2MjQsImV4cCI6MTY0MjE5NzkyNCwibmJmIjoxNjQyMTk3NjI0fQ.oU82f3qeG4VzI4LYXYYu7us_MxQzyYYPBnb-lesP8Pe6_tePCHrIZXM7DVMUrctAlEUvfYE186RDmK4sYlg-Go9Fi0Yvv7v5evnqu0MmiL1bEOOuUMJL7ksQBdClK_8ZFgO_k6BerszNQCEJn9iKCaF53oy6oASFLRzN-miRQkhVlhpYMmIIqlsK5UDLy-__BMiS4ZI_AHA7kJiRKwH4KsT75lKK1YqgzL4LGm1V88AlspNHa_afrt_PsLiiPLq71AbZ2LjDu_p1kZyEwFDinZPijZBWrNDIpBTaCuC4HluNsEkdxBTUJwf5wkh2TjtNZkfF64U4WXLJSCM7ILXQLA",
  "client_id": "hubfintech-bank",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjQsImV4cCI6MTY0MjE5NzY4NCwianRpIjoiTEt6MHVhbjhwTDdmNTc4QXdHQWVRbUZEdUp3QU11OERfVEJVM0czaFY4cyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.PFQMbLuMKVpWrVjyG42EYcjBqJXBmkDC_ZMYH9hmyA2swgdYOQ3-OkfQL1AjFujzwLPvGX1JQ6J1e1obzu46N6qSD5q5eJ-A9dKd7x8iY0BHckZOY__aZ9b7fgtIE2gdH2jjLAymNERGp3n0ZX4vT2sS78VwHWjTxvhaoTWKlraoCaQklD1Fayc0tVpzNg5otQcQ5sR9UZGmDL3iE4_Ipndqab7mCJqoLbkm0hke7BkxO1eDnjJdAiXg5iRxBPwybRP6_wKYw1Tu2MagHm1COHWHDa42KzDC5RSs0ram5UNV6O430A8nC8bjs1sogpW40lLg_uSqaeVkiyU2lbetZQ",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
request=eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiI2NWI1YTBkNjkxMGNmYzk4YzYzOTk4ZTgyZmI3OTAzOTRmMjM3Y2Y1MzkwZWVjMjg0ZDIzOWNlYmRlYWE1MDZjIn0.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.oU82f3qeG4VzI4LYXYYu7us_MxQzyYYPBnb-lesP8Pe6_tePCHrIZXM7DVMUrctAlEUvfYE186RDmK4sYlg-Go9Fi0Yvv7v5evnqu0MmiL1bEOOuUMJL7ksQBdClK_8ZFgO_k6BerszNQCEJn9iKCaF53oy6oASFLRzN-miRQkhVlhpYMmIIqlsK5UDLy-__BMiS4ZI_AHA7kJiRKwH4KsT75lKK1YqgzL4LGm1V88AlspNHa_afrt_PsLiiPLq71AbZ2LjDu_p1kZyEwFDinZPijZBWrNDIpBTaCuC4HluNsEkdxBTUJwf5wkh2TjtNZkfF64U4WXLJSCM7ILXQLA&client_id=hubfintech-bank&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjQsImV4cCI6MTY0MjE5NzY4NCwianRpIjoiTEt6MHVhbjhwTDdmNTc4QXdHQWVRbUZEdUp3QU11OERfVEJVM0czaFY4cyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.PFQMbLuMKVpWrVjyG42EYcjBqJXBmkDC_ZMYH9hmyA2swgdYOQ3-OkfQL1AjFujzwLPvGX1JQ6J1e1obzu46N6qSD5q5eJ-A9dKd7x8iY0BHckZOY__aZ9b7fgtIE2gdH2jjLAymNERGp3n0ZX4vT2sS78VwHWjTxvhaoTWKlraoCaQklD1Fayc0tVpzNg5otQcQ5sR9UZGmDL3iE4_Ipndqab7mCJqoLbkm0hke7BkxO1eDnjJdAiXg5iRxBPwybRP6_wKYw1Tu2MagHm1COHWHDa42KzDC5RSs0ram5UNV6O430A8nC8bjs1sogpW40lLg_uSqaeVkiyU2lbetZQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2022-01-14 22:00:25 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
PAR endpoint
2022-01-14 22:00:25 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 22:00:25 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 22:00:25 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL
BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx
FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB
TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5
NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh
bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl
YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm
aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T
FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK
CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf
9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ
98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1
1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd
rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos
ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv
OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D
Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI
KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr
aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0
cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz
dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E
BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG
CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm
aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp
bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu
ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2
aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz
IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj
YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB
BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu
b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM
E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4
FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE
3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI
ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr
JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO
HPFJ
-----END CERTIFICATE-----
2022-01-14 22:00:25 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjQsImV4cCI6MTY0MjE5NzY4NCwianRpIjoiTEt6MHVhbjhwTDdmNTc4QXdHQWVRbUZEdUp3QU11OERfVEJVM0czaFY4cyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.PFQMbLuMKVpWrVjyG42EYcjBqJXBmkDC_ZMYH9hmyA2swgdYOQ3-OkfQL1AjFujzwLPvGX1JQ6J1e1obzu46N6qSD5q5eJ-A9dKd7x8iY0BHckZOY__aZ9b7fgtIE2gdH2jjLAymNERGp3n0ZX4vT2sS78VwHWjTxvhaoTWKlraoCaQklD1Fayc0tVpzNg5otQcQ5sR9UZGmDL3iE4_Ipndqab7mCJqoLbkm0hke7BkxO1eDnjJdAiXg5iRxBPwybRP6_wKYw1Tu2MagHm1COHWHDa42KzDC5RSs0ram5UNV6O430A8nC8bjs1sogpW40lLg_uSqaeVkiyU2lbetZQ",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "hubfintech-bank",
    "aud": [
      "https://www.certification.openid.net/test/a/hubfintech/",
      "https://www.certification.openid.net/test/a/hubfintech/token",
      "https://www.certification.openid.net/test-mtls/a/hubfintech/token"
    ],
    "iss": "hubfintech-bank",
    "exp": 1642197684,
    "iat": 1642197624,
    "jti": "LKz0uan8pL7f578AwGAeQmFDuJwAMu8D_TBU3G3hV8s"
  }
}
2022-01-14 22:00:25
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-01-14 22:00:25 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjQsImV4cCI6MTY0MjE5NzY4NCwianRpIjoiTEt6MHVhbjhwTDdmNTc4QXdHQWVRbUZEdUp3QU11OERfVEJVM0czaFY4cyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.PFQMbLuMKVpWrVjyG42EYcjBqJXBmkDC_ZMYH9hmyA2swgdYOQ3-OkfQL1AjFujzwLPvGX1JQ6J1e1obzu46N6qSD5q5eJ-A9dKd7x8iY0BHckZOY__aZ9b7fgtIE2gdH2jjLAymNERGp3n0ZX4vT2sS78VwHWjTxvhaoTWKlraoCaQklD1Fayc0tVpzNg5otQcQ5sR9UZGmDL3iE4_Ipndqab7mCJqoLbkm0hke7BkxO1eDnjJdAiXg5iRxBPwybRP6_wKYw1Tu2MagHm1COHWHDa42KzDC5RSs0ram5UNV6O430A8nC8bjs1sogpW40lLg_uSqaeVkiyU2lbetZQ
2022-01-14 22:00:25 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-01-14 22:00:25 SUCCESS
ValidateClientAssertionClaimsForPAREndpoint
Client Assertion passed all validation checks
2022-01-14 22:00:25 SUCCESS
ExtractRequestObjectFromPAREndpointRequest
Parsed request object
request_object
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiI2NWI1YTBkNjkxMGNmYzk4YzYzOTk4ZTgyZmI3OTAzOTRmMjM3Y2Y1MzkwZWVjMjg0ZDIzOWNlYmRlYWE1MDZjIn0.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.oU82f3qeG4VzI4LYXYYu7us_MxQzyYYPBnb-lesP8Pe6_tePCHrIZXM7DVMUrctAlEUvfYE186RDmK4sYlg-Go9Fi0Yvv7v5evnqu0MmiL1bEOOuUMJL7ksQBdClK_8ZFgO_k6BerszNQCEJn9iKCaF53oy6oASFLRzN-miRQkhVlhpYMmIIqlsK5UDLy-__BMiS4ZI_AHA7kJiRKwH4KsT75lKK1YqgzL4LGm1V88AlspNHa_afrt_PsLiiPLq71AbZ2LjDu_p1kZyEwFDinZPijZBWrNDIpBTaCuC4HluNsEkdxBTUJwf5wkh2TjtNZkfF64U4WXLJSCM7ILXQLA",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "oauth-authz-req+jwt",
    "alg": "PS256"
  },
  "claims": {
    "iss": "hubfintech-bank",
    "response_type": "code id_token",
    "code_challenge_method": "S256",
    "nonce": "LS0jM1MpmfnMglpSZNgb7yttJkGqnNTE3Rb40cUoILw",
    "client_id": "hubfintech-bank",
    "aud": "https://www.certification.openid.net/test/a/hubfintech/",
    "nbf": 1642197624,
    "scope": "openid consent:urn:conformance:oidf:9M5MlIZ5hF payments",
    "claims": {
      "id_token": {
        "acr": {
          "values": [
            "urn:brasil:openbanking:loa2",
            "urn:brasil:openbanking:loa3"
          ],
          "essential": true
        }
      }
    },
    "state": "1UTk47GR6bSDYyVhhs759bUZFrY6LFAsvBmo6MNhk0c",
    "redirect_uri": "https://hubfintech.com.br/callback",
    "exp": 1642197924,
    "iat": 1642197624,
    "code_challenge": "hCRinj_HhaJ4p-FxGU7IEXGKS_BB8ztxjMgFVk8HzWY",
    "jti": "bvhsDRw0oFNokIamvX8YLHui2-brtS_ToFX-hLo7HGw"
  }
}
2022-01-14 22:00:25 SUCCESS
EnsurePAREndpointRequestDoesNotContainRequestUriParameter
PAR endpoint request does not contain a request_uri parameter
2022-01-14 22:00:25 INFO
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
path
jwe_header
mapped
object
authorization_request_object
2022-01-14 22:00:25 SUCCESS
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
alg
PS256
2022-01-14 22:00:25 SUCCESS
FAPIBrazilValidateRequestObjectIdTokenACRClaims
Acr value in request object is as expected
received
[
  "urn:brasil:openbanking:loa3"
]
2022-01-14 22:00:25 SUCCESS
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Jan 14, 2022, 10:05:24 PM"
2022-01-14 22:00:25 SUCCESS
FAPI1AdvancedValidateRequestObjectNBFClaim
nbf claim is valid
nbf
"Jan 14, 2022, 10:00:24 PM"
now
"Jan 14, 2022, 10:00:25 PM"
2022-01-14 22:00:25
ValidateRequestObjectClaims
Request object does not contain a max_age claim
2022-01-14 22:00:25 SUCCESS
ValidateRequestObjectClaims
Request object claims passed all validation checks
2022-01-14 22:00:25 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2022-01-14 22:00:25 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2022-01-14 22:00:25 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2022-01-14 22:00:25 SUCCESS
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
request_object
eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiI2NWI1YTBkNjkxMGNmYzk4YzYzOTk4ZTgyZmI3OTAzOTRmMjM3Y2Y1MzkwZWVjMjg0ZDIzOWNlYmRlYWE1MDZjIn0.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.oU82f3qeG4VzI4LYXYYu7us_MxQzyYYPBnb-lesP8Pe6_tePCHrIZXM7DVMUrctAlEUvfYE186RDmK4sYlg-Go9Fi0Yvv7v5evnqu0MmiL1bEOOuUMJL7ksQBdClK_8ZFgO_k6BerszNQCEJn9iKCaF53oy6oASFLRzN-miRQkhVlhpYMmIIqlsK5UDLy-__BMiS4ZI_AHA7kJiRKwH4KsT75lKK1YqgzL4LGm1V88AlspNHa_afrt_PsLiiPLq71AbZ2LjDu_p1kZyEwFDinZPijZBWrNDIpBTaCuC4HluNsEkdxBTUJwf5wkh2TjtNZkfF64U4WXLJSCM7ILXQLA
request_object_signing_alg
PS256
jwk
Sun RSA public key, 2048 bits
  params: null
  modulus: 24835287790665225667201897756457923186331169898933095651058896242806349634621520685735029231424370262840171268774397976251374443208480022745267902573891531206236761874192625001500109130615227594752926222053161333895850636600708577038211162564239044748847286852186092706541057328857970427799759121098903785539273621086314145424841738602153431339081856287753094874627272856042936200487327282573176095825196525930737500177796987860637593510325328544795403506349954282032809186183869909253862312706728848687096847100563004344427849975365401878211258490084740049329076860348864658344292135056217322011634392046362833540893
  public exponent: 65537
2022-01-14 22:00:25 SUCCESS
EnsureMatchingRedirectUriInRequestObject
Redirect URI matched
actual
https://hubfintech.com.br/callback
2022-01-14 22:00:25 SUCCESS
EnsureRequestObjectContainsCodeChallengeWhenUsingPAR
Found required PKCE parameters in request
code_challenge_method
S256
code_challenge
hCRinj_HhaJ4p-FxGU7IEXGKS_BB8ztxjMgFVk8HzWY
2022-01-14 22:00:25 SUCCESS
CreatePAREndpointResponse
Created PAR endpoint response
request_uri
urn:ietf:params:oauth:request_uri:92efba58-ea07-4f47-8faf-32ad37b03c4d
expires_in
600
2022-01-14 22:00:25 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
201
outgoing_headers
{}
outgoing_body
{
  "request_uri": "urn:ietf:params:oauth:request_uri:92efba58-ea07-4f47-8faf-32ad37b03c4d",
  "expires_in": 600
}
outgoing_path
par
2022-01-14 22:00:26 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "PostmanRuntime/7.28.4",
  "accept": "*/*",
  "cache-control": "no-cache",
  "postman-token": "c54c2677-4439-408f-a331-03a617461770",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/authorize
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{
  "client_id": "hubfintech-bank",
  "scope": "openid consent:urn:conformance:oidf:9M5MlIZ5hF payments",
  "response_type": "code id_token",
  "redirect_uri": "https://hubfintech.com.br/callback",
  "request_uri": "urn:ietf:params:oauth:request_uri:92efba58-ea07-4f47-8faf-32ad37b03c4d"
}
incoming_body
2022-01-14 22:00:26 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Authorization endpoint
2022-01-14 22:00:26 SUCCESS
EnsureAuthorizationRequestDoesNotContainRequestWhenUsingPAR
Request does not contain a request parameter
2022-01-14 22:00:26 INFO
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
path
jwe_header
mapped
object
authorization_request_object
2022-01-14 22:00:26 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "hubfintech-bank",
  "scope": "openid consent:urn:conformance:oidf:9M5MlIZ5hF payments",
  "response_type": "code id_token",
  "redirect_uri": "https://hubfintech.com.br/callback",
  "iss": "hubfintech-bank",
  "code_challenge_method": "S256",
  "nonce": "LS0jM1MpmfnMglpSZNgb7yttJkGqnNTE3Rb40cUoILw",
  "aud": "https://www.certification.openid.net/test/a/hubfintech/",
  "nbf": 1642197624,
  "claims": {
    "id_token": {
      "acr": {
        "values": [
          "urn:brasil:openbanking:loa2",
          "urn:brasil:openbanking:loa3"
        ],
        "essential": true
      }
    }
  },
  "state": "1UTk47GR6bSDYyVhhs759bUZFrY6LFAsvBmo6MNhk0c",
  "exp": 1642197924,
  "iat": 1642197624,
  "code_challenge": "hCRinj_HhaJ4p-FxGU7IEXGKS_BB8ztxjMgFVk8HzWY",
  "jti": "bvhsDRw0oFNokIamvX8YLHui2-brtS_ToFX-hLo7HGw"
}
2022-01-14 22:00:26 SUCCESS
EnsureClientIdInAuthorizationRequestParametersMatchRequestObject
client_id http request parameter value matches client_id in request object
2022-01-14 22:00:26 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid consent:urn:conformance:oidf:9M5MlIZ5hF payments
2022-01-14 22:00:26 SUCCESS
FAPIBrazilValidateConsentScope
Found consent scope in request
actual
[
  "openid",
  "consent:urn:conformance:oidf:9M5MlIZ5hF",
  "payments"
]
expected
consent:urn:conformance:oidf:9M5MlIZ5hF
2022-01-14 22:00:26 SUCCESS
EnsureScopeContainsPayments
Found payments scope in request
actual
[
  "openid",
  "consent:urn:conformance:oidf:9M5MlIZ5hF",
  "payments"
]
2022-01-14 22:00:26 SUCCESS
EnsureResponseTypeIsCodeIdToken
Response type is expected value
expected
code id_token
2022-01-14 22:00:26 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid",
  "consent:urn:conformance:oidf:9M5MlIZ5hF",
  "payments"
]
expected
openid
2022-01-14 22:00:26 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
hubfintech-bank
2022-01-14 22:00:26 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
kX8VvcfhqRsvqZlQXgcUHSh0Vrco2ZUD
2022-01-14 22:00:26 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
LS0jM1MpmfnMglpSZNgb7yttJkGqnNTE3Rb40cUoILw
2022-01-14 22:00:26 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash
jhtMfAeLGrwfUZiIJsUwBw
2022-01-14 22:00:26 SUCCESS
CalculateSHash
Successful s_hash encoding
s_hash
ABYiz966Sg4NkLMV1-uPwA
2022-01-14 22:00:26 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/hubfintech/
sub
user-subject-1234531
aud
hubfintech-bank
nonce
LS0jM1MpmfnMglpSZNgb7yttJkGqnNTE3Rb40cUoILw
iat
1642197626
exp
1642197926
2022-01-14 22:00:26 SUCCESS
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Added claims to id_token claims
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "LS0jM1MpmfnMglpSZNgb7yttJkGqnNTE3Rb40cUoILw",
  "iat": 1642197626,
  "exp": 1642197926
}
2022-01-14 22:00:26 SUCCESS
AddCHashToIdTokenClaims
Added c_hash to ID token claims
c_hash
jhtMfAeLGrwfUZiIJsUwBw
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "LS0jM1MpmfnMglpSZNgb7yttJkGqnNTE3Rb40cUoILw",
  "iat": 1642197626,
  "exp": 1642197926,
  "c_hash": "jhtMfAeLGrwfUZiIJsUwBw"
}
2022-01-14 22:00:26 SUCCESS
AddSHashToIdTokenClaims
Added s_hash to ID token claims
s_hash
ABYiz966Sg4NkLMV1-uPwA
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "LS0jM1MpmfnMglpSZNgb7yttJkGqnNTE3Rb40cUoILw",
  "iat": 1642197626,
  "exp": 1642197926,
  "c_hash": "jhtMfAeLGrwfUZiIJsUwBw",
  "s_hash": "ABYiz966Sg4NkLMV1-uPwA"
}
2022-01-14 22:00:26 INFO
AddAtHashToIdTokenClaims
Skipped evaluation due to missing required string: at_hash
expected
at_hash
2022-01-14 22:00:26 SUCCESS
FAPIBrazilAddACRClaimToIdTokenClaims
Added acr value to id_token_claims
acr_value
urn:brasil:openbanking:loa3
claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "LS0jM1MpmfnMglpSZNgb7yttJkGqnNTE3Rb40cUoILw",
  "iat": 1642197626,
  "exp": 1642197926,
  "c_hash": "jhtMfAeLGrwfUZiIJsUwBw",
  "s_hash": "ABYiz966Sg4NkLMV1-uPwA",
  "acr": "urn:brasil:openbanking:loa3"
}
2022-01-14 22:00:26 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Imh1YmZpbnRlY2gtYmFuayIsImNfaGFzaCI6ImpodE1mQWVMR3J3ZlVaaUlKc1V3QnciLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJBQllpejk2NlNnNE5rTE1WMS11UHdBIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzkyNiwibm9uY2UiOiJMUzBqTTFNcG1mbk1nbHBTWk5nYjd5dHRKa0dxbk5URTNSYjQwY1VvSUx3IiwiaWF0IjoxNjQyMTk3NjI2fQ.mQ26UkpidkkjAqeLexBDZPFfAiEg3vvGEpuhk_2M0OqY4sxL0sdWHQwhOi48x_3d1Fn6LfWzMBXK3XrnRy0_gVBWxR07JTcLIJ1lHpyX7AovCzyhwjgFlUxMoq-OdrH0Jj3dPyyaW1IjNxIT6g5zKKMq-Qi616MCTKQXET98d0gfc0-kV2QUVmd3tNiMnzjgSsFgFl-Qx9sMH7GG9VUeeno6aXcCKja37UEfvgqvm7DxthnYdggaGgGdwZiSnPdDaYVu1ffVZlYRK5K3xrkgHta5zwLMvH6Ziup2P-Wz4_A0zeujd8-FL9hEV2rqjGbtpqBrPMd75pQwU1jziCaoRA
2022-01-14 22:00:26 SUCCESS
FAPIBrazilChangeConsentStatusToAuthorized
Changed consent status to AUTHORISED
consent
{
  "data": {
    "consentId": "urn:conformance:oidf:9M5MlIZ5hF",
    "creationDateTime": "2022-01-14T22:00:24Z",
    "status": "AUTHORISED",
    "statusUpdateDateTime": "2022-01-14T22:00:26Z",
    "expirationDateTime": "2022-01-15T00:00:24Z",
    "transactionFromDateTime": "2022-01-14T21:55:24Z",
    "transactionToDateTime": "2022-01-15T00:00:24Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/hubfintechpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-01-14T22:00:24Z"
    },
    "creditor": {
      "name": "HOMOLOGACAO PIX",
      "cpfCnpj": "55155114845",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "57784518064",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2021-11-11",
      "amount": "1.15",
      "currency": "BRL",
      "details": {
        "proxy": "55155114845",
        "localInstrument": "DICT",
        "creditorAccount": {
          "number": "10173722",
          "accountType": "CACC",
          "ispb": "92894922",
          "issuer": "0001"
        }
      },
      "ibgeTownCode": "5300108",
      "type": "PIX"
    },
    "debtorAccount": {
      "number": "4261073573",
      "accountType": "CACC",
      "ispb": "37241230",
      "issuer": "0001"
    }
  },
  "aud": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197624,
  "jti": "b38607d2-4c77-45df-8d25-2380e695c650",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}
2022-01-14 22:00:26 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://hubfintech.com.br/callback",
  "state": "1UTk47GR6bSDYyVhhs759bUZFrY6LFAsvBmo6MNhk0c"
}
2022-01-14 22:00:26 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://hubfintech.com.br/callback",
  "state": "1UTk47GR6bSDYyVhhs759bUZFrY6LFAsvBmo6MNhk0c",
  "code": "kX8VvcfhqRsvqZlQXgcUHSh0Vrco2ZUD"
}
2022-01-14 22:00:26 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://hubfintech.com.br/callback",
  "state": "1UTk47GR6bSDYyVhhs759bUZFrY6LFAsvBmo6MNhk0c",
  "code": "kX8VvcfhqRsvqZlQXgcUHSh0Vrco2ZUD",
  "id_token": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Imh1YmZpbnRlY2gtYmFuayIsImNfaGFzaCI6ImpodE1mQWVMR3J3ZlVaaUlKc1V3QnciLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJBQllpejk2NlNnNE5rTE1WMS11UHdBIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzkyNiwibm9uY2UiOiJMUzBqTTFNcG1mbk1nbHBTWk5nYjd5dHRKa0dxbk5URTNSYjQwY1VvSUx3IiwiaWF0IjoxNjQyMTk3NjI2fQ.mQ26UkpidkkjAqeLexBDZPFfAiEg3vvGEpuhk_2M0OqY4sxL0sdWHQwhOi48x_3d1Fn6LfWzMBXK3XrnRy0_gVBWxR07JTcLIJ1lHpyX7AovCzyhwjgFlUxMoq-OdrH0Jj3dPyyaW1IjNxIT6g5zKKMq-Qi616MCTKQXET98d0gfc0-kV2QUVmd3tNiMnzjgSsFgFl-Qx9sMH7GG9VUeeno6aXcCKja37UEfvgqvm7DxthnYdggaGgGdwZiSnPdDaYVu1ffVZlYRK5K3xrkgHta5zwLMvH6Ziup2P-Wz4_A0zeujd8-FL9hEV2rqjGbtpqBrPMd75pQwU1jziCaoRA"
}
2022-01-14 22:00:26
SendAuthorizationResponseWithResponseModeFragment
Redirecting back to client
uri
https://hubfintech.com.br/callback#state=1UTk47GR6bSDYyVhhs759bUZFrY6LFAsvBmo6MNhk0c&code=kX8VvcfhqRsvqZlQXgcUHSh0Vrco2ZUD&id_token=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Imh1YmZpbnRlY2gtYmFuayIsImNfaGFzaCI6ImpodE1mQWVMR3J3ZlVaaUlKc1V3QnciLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJBQllpejk2NlNnNE5rTE1WMS11UHdBIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzkyNiwibm9uY2UiOiJMUzBqTTFNcG1mbk1nbHBTWk5nYjd5dHRKa0dxbk5URTNSYjQwY1VvSUx3IiwiaWF0IjoxNjQyMTk3NjI2fQ.mQ26UkpidkkjAqeLexBDZPFfAiEg3vvGEpuhk_2M0OqY4sxL0sdWHQwhOi48x_3d1Fn6LfWzMBXK3XrnRy0_gVBWxR07JTcLIJ1lHpyX7AovCzyhwjgFlUxMoq-OdrH0Jj3dPyyaW1IjNxIT6g5zKKMq-Qi616MCTKQXET98d0gfc0-kV2QUVmd3tNiMnzjgSsFgFl-Qx9sMH7GG9VUeeno6aXcCKja37UEfvgqvm7DxthnYdggaGgGdwZiSnPdDaYVu1ffVZlYRK5K3xrkgHta5zwLMvH6Ziup2P-Wz4_A0zeujd8-FL9hEV2rqjGbtpqBrPMd75pQwU1jziCaoRA
2022-01-14 22:00:26 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://hubfintech.com.br/callback#state=1UTk47GR6bSDYyVhhs759bUZFrY6LFAsvBmo6MNhk0c&code=kX8VvcfhqRsvqZlQXgcUHSh0Vrco2ZUD&id_token=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Imh1YmZpbnRlY2gtYmFuayIsImNfaGFzaCI6ImpodE1mQWVMR3J3ZlVaaUlKc1V3QnciLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJBQllpejk2NlNnNE5rTE1WMS11UHdBIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzkyNiwibm9uY2UiOiJMUzBqTTFNcG1mbk1nbHBTWk5nYjd5dHRKa0dxbk5URTNSYjQwY1VvSUx3IiwiaWF0IjoxNjQyMTk3NjI2fQ.mQ26UkpidkkjAqeLexBDZPFfAiEg3vvGEpuhk_2M0OqY4sxL0sdWHQwhOi48x_3d1Fn6LfWzMBXK3XrnRy0_gVBWxR07JTcLIJ1lHpyX7AovCzyhwjgFlUxMoq-OdrH0Jj3dPyyaW1IjNxIT6g5zKKMq-Qi616MCTKQXET98d0gfc0-kV2QUVmd3tNiMnzjgSsFgFl-Qx9sMH7GG9VUeeno6aXcCKja37UEfvgqvm7DxthnYdggaGgGdwZiSnPdDaYVu1ffVZlYRK5K3xrkgHta5zwLMvH6Ziup2P-Wz4_A0zeujd8-FL9hEV2rqjGbtpqBrPMd75pQwU1jziCaoRA]
outgoing_path
authorize
2022-01-14 22:00:26 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 22:00:26 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 22:00:26 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/hubfintech/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-01-14 22:00:27 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 22:00:27 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 22:00:27 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
outgoing_path
jwks
2022-01-14 22:00:28 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "content-length": "1233",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "kX8VvcfhqRsvqZlQXgcUHSh0Vrco2ZUD",
  "redirect_uri": "https://hubfintech.com.br/callback",
  "code_verifier": "DFH_8TWD3mZd4hgbI25k-JF4YXLAxcMnLDlfuMTpNWk",
  "client_id": "hubfintech-bank",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjcsImV4cCI6MTY0MjE5NzY4NywianRpIjoidVlOZkpDVjFxTW1FQWpWV3hVWUI2SEc5Tk80eVpoODJvdjQ2Nmc4OUNsayIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.d_kJrQB46_knspPy32-AfeJyQmB4WCij4oI31I3tmyIIW6ZSN6SeYVnZGnvn71StMaKQATz4g1estxeJTR4xE7NWucMTlEuChHRrOikTK-mRgJOTyZnsTq8x4OYyhuA60na-UiSeiSOvd3WmKdgOXtARBxaih7f_qQnPVM-9Tq9NXHKmIKdx80p4VZjxnDJ1QV6fvIWJn1Z3OW79fCG0hLxQkcM5TdemvvO0qDNC4N_apGWgu9oFEOTfZmyu94Ve_4l93yKQXxhhLENShrlQSk9s-LRFg7qHIJRguLD9BzkiLw7Gi45vOMj03u5t0dr1UJFOn4CdSrwZ38Tl7cMwlQ",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=kX8VvcfhqRsvqZlQXgcUHSh0Vrco2ZUD&redirect_uri=https%3A%2F%2Fhubfintech.com.br%2Fcallback&code_verifier=DFH_8TWD3mZd4hgbI25k-JF4YXLAxcMnLDlfuMTpNWk&client_id=hubfintech-bank&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjcsImV4cCI6MTY0MjE5NzY4NywianRpIjoidVlOZkpDVjFxTW1FQWpWV3hVWUI2SEc5Tk80eVpoODJvdjQ2Nmc4OUNsayIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.d_kJrQB46_knspPy32-AfeJyQmB4WCij4oI31I3tmyIIW6ZSN6SeYVnZGnvn71StMaKQATz4g1estxeJTR4xE7NWucMTlEuChHRrOikTK-mRgJOTyZnsTq8x4OYyhuA60na-UiSeiSOvd3WmKdgOXtARBxaih7f_qQnPVM-9Tq9NXHKmIKdx80p4VZjxnDJ1QV6fvIWJn1Z3OW79fCG0hLxQkcM5TdemvvO0qDNC4N_apGWgu9oFEOTfZmyu94Ve_4l93yKQXxhhLENShrlQSk9s-LRFg7qHIJRguLD9BzkiLw7Gi45vOMj03u5t0dr1UJFOn4CdSrwZ38Tl7cMwlQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2022-01-14 22:00:28 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-01-14 22:00:28 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----\nMIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5\nNDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh\nbWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl\nYmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm\naW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T\nFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK\nCZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf\n9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ\n98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1\n1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd\nrSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos\nZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv\nOQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D\nNnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI\nKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr\naS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0\ncDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz\ndWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E\nBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG\nCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm\naWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp\nbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu\nZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2\naWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz\nIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj\nYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB\nBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu\nb3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM\nE5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4\nFDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE\n3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI\nZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr\nJuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 22:00:28 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 22:00:28 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 22:00:28 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjcsImV4cCI6MTY0MjE5NzY4NywianRpIjoidVlOZkpDVjFxTW1FQWpWV3hVWUI2SEc5Tk80eVpoODJvdjQ2Nmc4OUNsayIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.d_kJrQB46_knspPy32-AfeJyQmB4WCij4oI31I3tmyIIW6ZSN6SeYVnZGnvn71StMaKQATz4g1estxeJTR4xE7NWucMTlEuChHRrOikTK-mRgJOTyZnsTq8x4OYyhuA60na-UiSeiSOvd3WmKdgOXtARBxaih7f_qQnPVM-9Tq9NXHKmIKdx80p4VZjxnDJ1QV6fvIWJn1Z3OW79fCG0hLxQkcM5TdemvvO0qDNC4N_apGWgu9oFEOTfZmyu94Ve_4l93yKQXxhhLENShrlQSk9s-LRFg7qHIJRguLD9BzkiLw7Gi45vOMj03u5t0dr1UJFOn4CdSrwZ38Tl7cMwlQ",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "hubfintech-bank",
    "aud": [
      "https://www.certification.openid.net/test/a/hubfintech/",
      "https://www.certification.openid.net/test/a/hubfintech/token",
      "https://www.certification.openid.net/test-mtls/a/hubfintech/token"
    ],
    "iss": "hubfintech-bank",
    "exp": 1642197687,
    "iat": 1642197627,
    "jti": "uYNfJCV1qMmEAjVWxUYB6HG9NO4yZh82ov466g89Clk"
  }
}
2022-01-14 22:00:28
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-01-14 22:00:28 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjcsImV4cCI6MTY0MjE5NzY4NywianRpIjoidVlOZkpDVjFxTW1FQWpWV3hVWUI2SEc5Tk80eVpoODJvdjQ2Nmc4OUNsayIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.d_kJrQB46_knspPy32-AfeJyQmB4WCij4oI31I3tmyIIW6ZSN6SeYVnZGnvn71StMaKQATz4g1estxeJTR4xE7NWucMTlEuChHRrOikTK-mRgJOTyZnsTq8x4OYyhuA60na-UiSeiSOvd3WmKdgOXtARBxaih7f_qQnPVM-9Tq9NXHKmIKdx80p4VZjxnDJ1QV6fvIWJn1Z3OW79fCG0hLxQkcM5TdemvvO0qDNC4N_apGWgu9oFEOTfZmyu94Ve_4l93yKQXxhhLENShrlQSk9s-LRFg7qHIJRguLD9BzkiLw7Gi45vOMj03u5t0dr1UJFOn4CdSrwZ38Tl7cMwlQ
2022-01-14 22:00:28 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-01-14 22:00:28 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-01-14 22:00:28 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
kX8VvcfhqRsvqZlQXgcUHSh0Vrco2ZUD
2022-01-14 22:00:28 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
https://hubfintech.com.br/callback
2022-01-14 22:00:28 SUCCESS
ValidateCodeVerifierWithS256
Validated code_verifier successfully
code_challenge_method
S256
code_verifier
DFH_8TWD3mZd4hgbI25k-JF4YXLAxcMnLDlfuMTpNWk
code_challenge
hCRinj_HhaJ4p-FxGU7IEXGKS_BB8ztxjMgFVk8HzWY
2022-01-14 22:00:28 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
gpLSzvfgm1iK5y1WGjIrvxhURlP9LOgxjqaLOtKNTnQ5ByVYmG
2022-01-14 22:00:28 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
LnVol1dK12ucwAqqPLDKjg
2022-01-14 22:00:28
CreateRefreshToken
Created refresh token
refresh_token
VjkNzEByYkmjfGHlbxZEHxdieHKRxXuqVPbjFEWmmPuNFGZvGD7388891707>]@._
2022-01-14 22:00:28 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/hubfintech/
sub
user-subject-1234531
aud
hubfintech-bank
nonce
LS0jM1MpmfnMglpSZNgb7yttJkGqnNTE3Rb40cUoILw
iat
1642197628
exp
1642197928
2022-01-14 22:00:28 SUCCESS
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Added claims to id_token claims
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "LS0jM1MpmfnMglpSZNgb7yttJkGqnNTE3Rb40cUoILw",
  "iat": 1642197628,
  "exp": 1642197928
}
2022-01-14 22:00:28 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
LnVol1dK12ucwAqqPLDKjg
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "LS0jM1MpmfnMglpSZNgb7yttJkGqnNTE3Rb40cUoILw",
  "iat": 1642197628,
  "exp": 1642197928,
  "at_hash": "LnVol1dK12ucwAqqPLDKjg"
}
2022-01-14 22:00:28 SUCCESS
FAPIBrazilAddACRClaimToIdTokenClaims
Added acr value to id_token_claims
acr_value
urn:brasil:openbanking:loa3
claims
{
  "iss": "https://www.certification.openid.net/test/a/hubfintech/",
  "sub": "user-subject-1234531",
  "aud": "hubfintech-bank",
  "nonce": "LS0jM1MpmfnMglpSZNgb7yttJkGqnNTE3Rb40cUoILw",
  "iat": 1642197628,
  "exp": 1642197928,
  "at_hash": "LnVol1dK12ucwAqqPLDKjg",
  "acr": "urn:brasil:openbanking:loa3"
}
2022-01-14 22:00:28 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiTG5Wb2wxZEsxMnVjd0FxcVBMREtqZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiaHViZmludGVjaC1iYW5rIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzkyOCwibm9uY2UiOiJMUzBqTTFNcG1mbk1nbHBTWk5nYjd5dHRKa0dxbk5URTNSYjQwY1VvSUx3IiwiaWF0IjoxNjQyMTk3NjI4fQ.Gm6ZMtS0LGuSX2R9jMW9AsjZnEEDaIakiIMxmi4OQF1eSKwyubEhIZUvT0sVVI3toCyRgFGmUrxfdv8TYuOKkm5LEi4gacg5F-qn_RvrcGAk_gZ302LSEmUxLXbrwoOa1yJwsVipu-nSxEHPzyqv7QJ66Cu9WGguxUd3FVfopK7cytRAobHgGtKL7229bh9cxHX6iaayDnjiIqZq1LcJjAMTGaF2izctJcRBzGUgvlvf0_IQJI5pOdnNEKEHcY9JNW-4IPc9rPcTnutExo5Pn1lkRNsbpWacSlcHH9FYwrK5JvC8rUE9MH9BRXq_Zu33MIagpUhh7Mktuc5VpZCM3A
2022-01-14 22:00:28 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
gpLSzvfgm1iK5y1WGjIrvxhURlP9LOgxjqaLOtKNTnQ5ByVYmG
token_type
Bearer
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiTG5Wb2wxZEsxMnVjd0FxcVBMREtqZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiaHViZmludGVjaC1iYW5rIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzkyOCwibm9uY2UiOiJMUzBqTTFNcG1mbk1nbHBTWk5nYjd5dHRKa0dxbk5URTNSYjQwY1VvSUx3IiwiaWF0IjoxNjQyMTk3NjI4fQ.Gm6ZMtS0LGuSX2R9jMW9AsjZnEEDaIakiIMxmi4OQF1eSKwyubEhIZUvT0sVVI3toCyRgFGmUrxfdv8TYuOKkm5LEi4gacg5F-qn_RvrcGAk_gZ302LSEmUxLXbrwoOa1yJwsVipu-nSxEHPzyqv7QJ66Cu9WGguxUd3FVfopK7cytRAobHgGtKL7229bh9cxHX6iaayDnjiIqZq1LcJjAMTGaF2izctJcRBzGUgvlvf0_IQJI5pOdnNEKEHcY9JNW-4IPc9rPcTnutExo5Pn1lkRNsbpWacSlcHH9FYwrK5JvC8rUE9MH9BRXq_Zu33MIagpUhh7Mktuc5VpZCM3A
refresh_token
VjkNzEByYkmjfGHlbxZEHxdieHKRxXuqVPbjFEWmmPuNFGZvGD7388891707>]@._
scope
openid consent:urn:conformance:oidf:9M5MlIZ5hF payments
2022-01-14 22:00:28
RemoveIssuedAccessTokenFromEnvironment
Removed access_token and token_type from environment
2022-01-14 22:00:28 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "gpLSzvfgm1iK5y1WGjIrvxhURlP9LOgxjqaLOtKNTnQ5ByVYmG",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiTG5Wb2wxZEsxMnVjd0FxcVBMREtqZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiaHViZmludGVjaC1iYW5rIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL2h1YmZpbnRlY2hcLyIsImV4cCI6MTY0MjE5NzkyOCwibm9uY2UiOiJMUzBqTTFNcG1mbk1nbHBTWk5nYjd5dHRKa0dxbk5URTNSYjQwY1VvSUx3IiwiaWF0IjoxNjQyMTk3NjI4fQ.Gm6ZMtS0LGuSX2R9jMW9AsjZnEEDaIakiIMxmi4OQF1eSKwyubEhIZUvT0sVVI3toCyRgFGmUrxfdv8TYuOKkm5LEi4gacg5F-qn_RvrcGAk_gZ302LSEmUxLXbrwoOa1yJwsVipu-nSxEHPzyqv7QJ66Cu9WGguxUd3FVfopK7cytRAobHgGtKL7229bh9cxHX6iaayDnjiIqZq1LcJjAMTGaF2izctJcRBzGUgvlvf0_IQJI5pOdnNEKEHcY9JNW-4IPc9rPcTnutExo5Pn1lkRNsbpWacSlcHH9FYwrK5JvC8rUE9MH9BRXq_Zu33MIagpUhh7Mktuc5VpZCM3A",
  "refresh_token": "VjkNzEByYkmjfGHlbxZEHxdieHKRxXuqVPbjFEWmmPuNFGZvGD7388891707\u003e]@._",
  "scope": "openid consent:urn:conformance:oidf:9M5MlIZ5hF payments"
}
outgoing_path
token
2022-01-14 22:00:28 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/jwt",
  "x-idempotency-key": "0f835833-5aaf-4efc-b82c-574a46ef93a4",
  "authorization": "Bearer gpLSzvfgm1iK5y1WGjIrvxhURlP9LOgxjqaLOtKNTnQ5ByVYmG",
  "user-agent": "PostmanRuntime/7.28.4",
  "accept": "*/*",
  "cache-control": "no-cache",
  "postman-token": "1fca073f-3c6f-4617-8517-171d4ce90b3b",
  "accept-encoding": "gzip, deflate, br",
  "cookie": "JSESSIONID\u003dD3A8EF6D410A1D18385CB6AA2B87AB46",
  "content-length": "1057",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.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.vSBxkhc9tdhc6elVI1IpW3x1liGR4h2SjCbIxnXKYVDlhSFlrOGYtTIHC1ImdoMaIQFvIBfjxUnagM3PLZ5bj5ds85j7DNrlZbNT6LUPYuB_g7v9b5WHCSPv-g9S7zgPzK9oWhIrxiaagE6ac-oJ-MP7YqzacBjhkxa1Bw0pvTOeWgegTskFUjUb5xx8heWKsOK0BF8OohsnlH01OX1I9QC69WMesbNHDkhijMZ2nRvLQCCXyqnsv2yuFJllgMufjE-yP_0va4_8dFTij9jvdWbwPtKpMzB5KN4kpC-k_JOXFhaCXfCGriPrYovquw7Zz3OkCh_5FeG06dDdm-CIiA
2022-01-14 22:00:28 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-01-14 22:00:28 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-01-14 22:00:28 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-01-14 22:00:29 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 22:00:29 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 22:00:29 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/hubfintech/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-01-14 22:00:30 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "content-length": "1162",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/token
incoming_body_form_params
{
  "grant_type": "refresh_token",
  "refresh_token": "VjkNzEByYkmjfGHlbxZEHxdieHKRxXuqVPbjFEWmmPuNFGZvGD7388891707\u003e]@._",
  "client_id": "hubfintech-bank",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjksImV4cCI6MTY0MjE5NzY4OSwianRpIjoiVlQ2WEd2azc2c1hFVFJ4RWlFY3EzeFRFUHFTZ3R3amxTeXVtdVJYdUNqOCIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.ZP6-hz99zmDZPjtkQxA8E-5uqZ_X1Z7Vpsjfb1iWY_Ql07k_br1z_Qn7rd9eWuqJVCI6pZ4G2QM8Cq2NH4xrLIDz56wb_3Vg479nufQQcXRg-A8VEnYbz7PqJfqIrq0Qleix4ovp1bSY9n9Eg1vphngM9TsuoIrMKG0VJhQDUmvldfP_M9WqYqjQ1mSdT3AUacBZp0IabmTryPIeLh3BypzqHX7plUYyH-lHG6gRtgUErlWua7qcC4yVJeIDXQPrw-LhL61tjkkuh9OhzqQxYStN0X4hcWqxDr8WDjKsKS1ENVMgQH4QPrZwXglYtYlDliZyGN1jV7Ngqg0pp1449Q",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=refresh_token&refresh_token=VjkNzEByYkmjfGHlbxZEHxdieHKRxXuqVPbjFEWmmPuNFGZvGD7388891707%3E%5D%40._&client_id=hubfintech-bank&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjksImV4cCI6MTY0MjE5NzY4OSwianRpIjoiVlQ2WEd2azc2c1hFVFJ4RWlFY3EzeFRFUHFTZ3R3amxTeXVtdVJYdUNqOCIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.ZP6-hz99zmDZPjtkQxA8E-5uqZ_X1Z7Vpsjfb1iWY_Ql07k_br1z_Qn7rd9eWuqJVCI6pZ4G2QM8Cq2NH4xrLIDz56wb_3Vg479nufQQcXRg-A8VEnYbz7PqJfqIrq0Qleix4ovp1bSY9n9Eg1vphngM9TsuoIrMKG0VJhQDUmvldfP_M9WqYqjQ1mSdT3AUacBZp0IabmTryPIeLh3BypzqHX7plUYyH-lHG6gRtgUErlWua7qcC4yVJeIDXQPrw-LhL61tjkkuh9OhzqQxYStN0X4hcWqxDr8WDjKsKS1ENVMgQH4QPrZwXglYtYlDliZyGN1jV7Ngqg0pp1449Q&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2022-01-14 22:00:30 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-01-14 22:00:30 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 22:00:30 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 22:00:30 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL
BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx
FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB
TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5
NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh
bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl
YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm
aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T
FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK
CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf
9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ
98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1
1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd
rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos
ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv
OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D
Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI
KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr
aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0
cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz
dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E
BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG
CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm
aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp
bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu
ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2
aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz
IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj
YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB
BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu
b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM
E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4
FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE
3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI
ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr
JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO
HPFJ
-----END CERTIFICATE-----
2022-01-14 22:00:30 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjksImV4cCI6MTY0MjE5NzY4OSwianRpIjoiVlQ2WEd2azc2c1hFVFJ4RWlFY3EzeFRFUHFTZ3R3amxTeXVtdVJYdUNqOCIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.ZP6-hz99zmDZPjtkQxA8E-5uqZ_X1Z7Vpsjfb1iWY_Ql07k_br1z_Qn7rd9eWuqJVCI6pZ4G2QM8Cq2NH4xrLIDz56wb_3Vg479nufQQcXRg-A8VEnYbz7PqJfqIrq0Qleix4ovp1bSY9n9Eg1vphngM9TsuoIrMKG0VJhQDUmvldfP_M9WqYqjQ1mSdT3AUacBZp0IabmTryPIeLh3BypzqHX7plUYyH-lHG6gRtgUErlWua7qcC4yVJeIDXQPrw-LhL61tjkkuh9OhzqQxYStN0X4hcWqxDr8WDjKsKS1ENVMgQH4QPrZwXglYtYlDliZyGN1jV7Ngqg0pp1449Q",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "hubfintech-bank",
    "aud": [
      "https://www.certification.openid.net/test/a/hubfintech/",
      "https://www.certification.openid.net/test/a/hubfintech/token",
      "https://www.certification.openid.net/test-mtls/a/hubfintech/token"
    ],
    "iss": "hubfintech-bank",
    "exp": 1642197689,
    "iat": 1642197629,
    "jti": "VT6XGvk76sXETRxEiEcq3xTEPqSgtwjlSyumuRXuCj8"
  }
}
2022-01-14 22:00:30
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-01-14 22:00:30 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MjksImV4cCI6MTY0MjE5NzY4OSwianRpIjoiVlQ2WEd2azc2c1hFVFJ4RWlFY3EzeFRFUHFTZ3R3amxTeXVtdVJYdUNqOCIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.ZP6-hz99zmDZPjtkQxA8E-5uqZ_X1Z7Vpsjfb1iWY_Ql07k_br1z_Qn7rd9eWuqJVCI6pZ4G2QM8Cq2NH4xrLIDz56wb_3Vg479nufQQcXRg-A8VEnYbz7PqJfqIrq0Qleix4ovp1bSY9n9Eg1vphngM9TsuoIrMKG0VJhQDUmvldfP_M9WqYqjQ1mSdT3AUacBZp0IabmTryPIeLh3BypzqHX7plUYyH-lHG6gRtgUErlWua7qcC4yVJeIDXQPrw-LhL61tjkkuh9OhzqQxYStN0X4hcWqxDr8WDjKsKS1ENVMgQH4QPrZwXglYtYlDliZyGN1jV7Ngqg0pp1449Q
2022-01-14 22:00:30 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-01-14 22:00:30 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-01-14 22:00:30 SUCCESS
ValidateRefreshToken
refresh_token parameter matches the expected value.
refresh_token
VjkNzEByYkmjfGHlbxZEHxdieHKRxXuqVPbjFEWmmPuNFGZvGD7388891707>]@._
2022-01-14 22:00:30 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
MSehNIZbzngCtYMF7jzCjjhZze8ECVp18h4KMXSAiOel6xsL90
2022-01-14 22:00:30 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
yzoxLmZ4gg8dJdWEeYsWKQ
2022-01-14 22:00:30
CreateRefreshToken
Created refresh token
refresh_token
VpDiiikpwJzlbmUBtnZkkvmNnVZBQrkmkrNXMgLaNKLgoCUYRt7440395046,? -$
2022-01-14 22:00:30 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
MSehNIZbzngCtYMF7jzCjjhZze8ECVp18h4KMXSAiOel6xsL90
token_type
Bearer
refresh_token
VpDiiikpwJzlbmUBtnZkkvmNnVZBQrkmkrNXMgLaNKLgoCUYRt7440395046,? -$
scope
openid consent:urn:conformance:oidf:9M5MlIZ5hF payments
2022-01-14 22:00:30 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "MSehNIZbzngCtYMF7jzCjjhZze8ECVp18h4KMXSAiOel6xsL90",
  "token_type": "Bearer",
  "refresh_token": "VpDiiikpwJzlbmUBtnZkkvmNnVZBQrkmkrNXMgLaNKLgoCUYRt7440395046,? -$",
  "scope": "openid consent:urn:conformance:oidf:9M5MlIZ5hF payments"
}
outgoing_path
token
2022-01-14 22:00:30 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/jwt",
  "x-idempotency-key": "4185d906-1006-459d-9f83-18a98f494963",
  "authorization": "Bearer MSehNIZbzngCtYMF7jzCjjhZze8ECVp18h4KMXSAiOel6xsL90",
  "user-agent": "PostmanRuntime/7.28.4",
  "accept": "*/*",
  "cache-control": "no-cache",
  "postman-token": "c5da1bc0-22a9-4480-bb7a-5dec2d307df2",
  "accept-encoding": "gzip, deflate, br",
  "cookie": "JSESSIONID\u003dD3A8EF6D410A1D18385CB6AA2B87AB46",
  "content-length": "1057",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.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.UQwbK3cv7EpI6UtmVzEkKFzI50wM509q5KEXe73fXHJiEgvCumIWfw16ZqwYFYxP9uLBnrNBUw2KKCEwtqOvSMrJMzHRRfaPI1ehMsES5nNLa8qepRSYlTFm0nNv6jsKAQtMHsTjvet-pLWWSBZbLyf9gk4Oxx4xx1ez4aqk6ymwHh03sJnko1aaLnvElksUhnKHWRIlpPWsdJy5Vv6PnQ8GgRMFnfFa6GfyMKD7-DSopL6QQgXecmqllv3us7GnDmH__fqSGlYb8RwWsO7b-3ng3958HqiMatMe2KWEhjxt0qxVdB9w_BGMvJYpNC2nsSneJ1p9GKSZtR1dEnKLLw
2022-01-14 22:00:30 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-01-14 22:00:30 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-01-14 22:00:30 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-01-14 22:00:31 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/hubfintech/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-01-14 22:00:31 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 22:00:31 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/hubfintech/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/hubfintech/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/hubfintech/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/hubfintech/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/hubfintech/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/hubfintech/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/hubfintech/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/hubfintech/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-01-14 22:00:32 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.4 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "content-length": "1162",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/token
incoming_body_form_params
{
  "grant_type": "refresh_token",
  "refresh_token": "VpDiiikpwJzlbmUBtnZkkvmNnVZBQrkmkrNXMgLaNKLgoCUYRt7440395046,? -$",
  "client_id": "hubfintech-bank",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MzEsImV4cCI6MTY0MjE5NzY5MSwianRpIjoiNFdfNmlJd09Jd2o4ZkZlTTZ3b29teVdkSkttX0FEZnR2UjYyaUN3aEZTYyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.Z4IH3pbC7ysbRpeDaxdClNDv9BINn37F5EiLPFONbENT_iMADNUr2FWFK9B6J3QW95EvvN70JQ1LbvZYXAa7FUa4HAKEA1dbHfwspxIzu-XQkm25zr2a5oRAo9NvuODth290yxQya4zvFPJDQtQQjyJDFBYC0qoqA33-RxlRDLN_JfMm1JzXW2hoDVWZxsYRjs-W9l81uNyk52HWN6h8QFMJwv4LNBehTGaE3pd4tUmlF_DFpy0_T-spBoWr7NCdfigjZnBFCWcKBHqmXhvWLing4SP3wEo2ps5iZfeN0a3zoasi2tubWTlL2EeQTTSUJWjmI37iSObhWKUA0QCwoQ",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=refresh_token&refresh_token=VpDiiikpwJzlbmUBtnZkkvmNnVZBQrkmkrNXMgLaNKLgoCUYRt7440395046%2C%3F+-%24&client_id=hubfintech-bank&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MzEsImV4cCI6MTY0MjE5NzY5MSwianRpIjoiNFdfNmlJd09Jd2o4ZkZlTTZ3b29teVdkSkttX0FEZnR2UjYyaUN3aEZTYyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.Z4IH3pbC7ysbRpeDaxdClNDv9BINn37F5EiLPFONbENT_iMADNUr2FWFK9B6J3QW95EvvN70JQ1LbvZYXAa7FUa4HAKEA1dbHfwspxIzu-XQkm25zr2a5oRAo9NvuODth290yxQya4zvFPJDQtQQjyJDFBYC0qoqA33-RxlRDLN_JfMm1JzXW2hoDVWZxsYRjs-W9l81uNyk52HWN6h8QFMJwv4LNBehTGaE3pd4tUmlF_DFpy0_T-spBoWr7NCdfigjZnBFCWcKBHqmXhvWLing4SP3wEo2ps5iZfeN0a3zoasi2tubWTlL2EeQTTSUJWjmI37iSObhWKUA0QCwoQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2022-01-14 22:00:32 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-01-14 22:00:32 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 22:00:32 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 22:00:32 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-01-14 22:00:32 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MzEsImV4cCI6MTY0MjE5NzY5MSwianRpIjoiNFdfNmlJd09Jd2o4ZkZlTTZ3b29teVdkSkttX0FEZnR2UjYyaUN3aEZTYyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.Z4IH3pbC7ysbRpeDaxdClNDv9BINn37F5EiLPFONbENT_iMADNUr2FWFK9B6J3QW95EvvN70JQ1LbvZYXAa7FUa4HAKEA1dbHfwspxIzu-XQkm25zr2a5oRAo9NvuODth290yxQya4zvFPJDQtQQjyJDFBYC0qoqA33-RxlRDLN_JfMm1JzXW2hoDVWZxsYRjs-W9l81uNyk52HWN6h8QFMJwv4LNBehTGaE3pd4tUmlF_DFpy0_T-spBoWr7NCdfigjZnBFCWcKBHqmXhvWLing4SP3wEo2ps5iZfeN0a3zoasi2tubWTlL2EeQTTSUJWjmI37iSObhWKUA0QCwoQ",
  "header": {
    "kid": "65b5a0d6910cfc98c63998e82fb790394f237cf5390eec284d239cebdeaa506c",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "hubfintech-bank",
    "aud": [
      "https://www.certification.openid.net/test/a/hubfintech/",
      "https://www.certification.openid.net/test/a/hubfintech/token",
      "https://www.certification.openid.net/test-mtls/a/hubfintech/token"
    ],
    "iss": "hubfintech-bank",
    "exp": 1642197691,
    "iat": 1642197631,
    "jti": "4W_6iIwOIwj8fFeM6woomyWdJKm_ADftvR62iCwhFSc"
  }
}
2022-01-14 22:00:32
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-01-14 22:00:32 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjY1YjVhMGQ2OTEwY2ZjOThjNjM5OThlODJmYjc5MDM5NGYyMzdjZjUzOTBlZWMyODRkMjM5Y2ViZGVhYTUwNmMifQ.eyJpYXQiOjE2NDIxOTc2MzEsImV4cCI6MTY0MjE5NzY5MSwianRpIjoiNFdfNmlJd09Jd2o4ZkZlTTZ3b29teVdkSkttX0FEZnR2UjYyaUN3aEZTYyIsImlzcyI6Imh1YmZpbnRlY2gtYmFuayIsInN1YiI6Imh1YmZpbnRlY2gtYmFuayIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL2h1YmZpbnRlY2gvIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9odWJmaW50ZWNoL3Rva2VuIiwiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvdG9rZW4iXX0.Z4IH3pbC7ysbRpeDaxdClNDv9BINn37F5EiLPFONbENT_iMADNUr2FWFK9B6J3QW95EvvN70JQ1LbvZYXAa7FUa4HAKEA1dbHfwspxIzu-XQkm25zr2a5oRAo9NvuODth290yxQya4zvFPJDQtQQjyJDFBYC0qoqA33-RxlRDLN_JfMm1JzXW2hoDVWZxsYRjs-W9l81uNyk52HWN6h8QFMJwv4LNBehTGaE3pd4tUmlF_DFpy0_T-spBoWr7NCdfigjZnBFCWcKBHqmXhvWLing4SP3wEo2ps5iZfeN0a3zoasi2tubWTlL2EeQTTSUJWjmI37iSObhWKUA0QCwoQ
2022-01-14 22:00:32 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-01-14 22:00:32 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-01-14 22:00:32 SUCCESS
ValidateRefreshToken
refresh_token parameter matches the expected value.
refresh_token
VpDiiikpwJzlbmUBtnZkkvmNnVZBQrkmkrNXMgLaNKLgoCUYRt7440395046,? -$
2022-01-14 22:00:32 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
3lF6zBtmpcI3RfehIqjtgqJDrgXzJx5TLxeky5qVxTPXu6brkB
2022-01-14 22:00:32 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
EdoKqs1XBN0l3L18U7aR4Q
2022-01-14 22:00:32
CreateRefreshToken
Created refresh token
refresh_token
NdcNoMwgJgMVDOBmKfRMDxnrXACMKNbIkojigiZoySSTjfCzix5502656874*-\$>
2022-01-14 22:00:32 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
3lF6zBtmpcI3RfehIqjtgqJDrgXzJx5TLxeky5qVxTPXu6brkB
token_type
Bearer
refresh_token
NdcNoMwgJgMVDOBmKfRMDxnrXACMKNbIkojigiZoySSTjfCzix5502656874*-\$>
scope
openid consent:urn:conformance:oidf:9M5MlIZ5hF payments
2022-01-14 22:00:32 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "3lF6zBtmpcI3RfehIqjtgqJDrgXzJx5TLxeky5qVxTPXu6brkB",
  "token_type": "Bearer",
  "refresh_token": "NdcNoMwgJgMVDOBmKfRMDxnrXACMKNbIkojigiZoySSTjfCzix5502656874*-\\$\u003e",
  "scope": "openid consent:urn:conformance:oidf:9M5MlIZ5hF payments"
}
outgoing_path
token
2022-01-14 22:00:32 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to test instance ezFwc9oCE3PSbWf
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/jwt",
  "x-idempotency-key": "cd965c39-5a8d-4805-8cb5-52fc259791ec",
  "authorization": "Bearer 3lF6zBtmpcI3RfehIqjtgqJDrgXzJx5TLxeky5qVxTPXu6brkB",
  "user-agent": "PostmanRuntime/7.28.4",
  "accept": "*/*",
  "cache-control": "no-cache",
  "postman-token": "ee203907-867f-4187-bc94-312c2865d670",
  "accept-encoding": "gzip, deflate, br",
  "cookie": "JSESSIONID\u003dD3A8EF6D410A1D18385CB6AA2B87AB46",
  "content-length": "1057",
  "connection": "close"
}
incoming_path
/test-mtls/a/hubfintech/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.eyJkYXRhIjp7ImxvY2FsSW5zdHJ1bWVudCI6IkRJQ1QiLCJwYXltZW50Ijp7ImFtb3VudCI6IjEuMTUiLCJjdXJyZW5jeSI6IkJSTCJ9LCJjcmVkaXRvckFjY291bnQiOnsiYWNjb3VudFR5cGUiOiJDQUNDIiwiaXNwYiI6IjkyODk0OTIyIiwiaXNzdWVyIjoiMDAwMSIsIm51bWJlciI6IjEwMTczNzIyIn0sImNucGpJbml0aWF0b3IiOiIyMDc0NzQzNjAwMDE1NiIsImliZ2VUb3duQ29kZSI6IjUzMDAxMDgiLCJwcm94eSI6IjU1MTU1MTE0ODQ1In0sImlhdCI6MTY0MjE5NzYzMiwiYXVkIjoiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvcGF5bWVudHMvdjEvcGl4L3BheW1lbnRzIiwiaXNzIjoiN2VlYmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzIiwianRpIjoiMWFjZTdkNDItYmEyZi00MzBiLTg5NTItN2ZhNzA5ZDBlMzQzIn0.TzhS3mmXfUplpUokwlmx92uZKWLvf2YvC9-JgkhgzVblEGHinyRSreEu8l5h3TJ0mCYYfvVUjrS2X6NtaAuGdv1-okIY_14WfkWyR7HZYOYG7P2-vELh8oGDziWehlud2MIHU6IXl9-T9JsOzQOX4zvvzgOV1_sMrfkXCTI5yaN1VhdBvD6__OGyoYTz0vijXvHPUrQ_r6wC8tnSnu2RlvcaQ8Lq1Mu_mNttqK1tLGUWkExQelYRcGX5k2JE-3P24L6k2hKz8UI2fweHH1AkysHgwzldklDBhin0H1oy-fi_DWmYSvwwlrr_6FDADWCZikhYDqAMofGzEVBn_v6pbQ
2022-01-14 22:00:32 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-01-14 22:00:32 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5 NDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh bWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl YmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm aW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK CZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf 9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ 98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1 1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd rSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos ZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv OQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D Nnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI KwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0 cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz dWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG CisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm aWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp bWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu ZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2 aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz IGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj YXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB BQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu b3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM E5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4 FDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE 3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI ZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr JuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO HPFJ -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----\nMIIG7zCCBdegAwIBAgIUMxPVo7fxwyry7MUc8Vi5S1AWPKIwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTAxNTE5NDkwMFoXDTIyMTExNDE5\nNDkwMFowggEXMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEDAOBgNVBAcTB1Rh\nbWJvcmUxGzAZBgNVBAoTEkhVQiBQQUdBTUVOVE9TIFMuQTEtMCsGA1UECxMkN2Vl\nYmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzMRowGAYDVQQDExFodWJm\naW50ZWNoLmNvbS5icjEXMBUGA1UEBRMOMTM4ODQ3NzUwMDAxMTkxHTAbBgNVBA8T\nFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYK\nCZImiZPyLGQBARMkM2EyNjhmNGMtM2FlMi00NjZiLTg4ZTMtNTcxYzUyNzllOTM5\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iAov48QLyfV2c855yf\n9U0n150CjqXWRXZUAP0UK9D/zzElCQ60elPI0ckCEXE7nEbxXg7ZiJRYQhgmcZAQ\n98rt7dnr88z35vSVPNMuaVXCYZPxMIV2O0yURaRazEvREjvP438Qt1y+vJfJZjp1\n1UI9x2fiegiSwVfUkCbqE+FfsvAp6JPC7s0I0NfmmMjtRn++3TR8fkof4UIMXZAd\nrSaiGrrVVBM+QpuxHX286uN7KCS33EDZNyrFuR/A+udJCYQ0FNOMTFHIZYYWBwos\nZKiUhiSpO6XtsO5NepB5iAhwwvh/flYL+25GhXoX9CXmyf52Yowo6eFU/60bhxqv\nOQIDAQABo4IC1TCCAtEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJDg8TRs/bR+D\nNnk+SCJYVnEC1NEwHwYDVR0jBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYI\nKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBr\naS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0\ncDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNz\ndWVyLmNybDAcBgNVHREEFTATghFodWJmaW50ZWNoLmNvbS5icjAOBgNVHQ8BAf8E\nBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwggGhBgNVHSAEggGYMIIBlDCCAZAG\nCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlm\naWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExp\nbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2lu\nZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2\naWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVz\nIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2lj\nYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYB\nBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwu\nb3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBKeqEBWlmIeDLWGbIM\nE5ZZL5xfoBGQ29q7pp4mWJU3bh44kw6CzeUpVHeT2GI0P5LKqWniEXFW0PDIVBF4\nFDCy+GBO5EOdN1FpcCj3N8fOAAjb33u0SV1qJaUv876/mkmJY7dVZRZJ7bv1t8VE\n3FVKYvj0bqT09sCINv5HgZ/8v73A3u6XjHagbGDSAtaYbtNPeX9bBmEjq5Xx4fdI\nZLGwLdSDliCCCUCU7ZG1ft5ZnkRc443PC/SRPAne8SV3sm8g8Bmdy1BGvvy3OyAr\nJuDtfG0rTVQRyE3jG5YnFKf/KbTIzbjRrct8dGlb2iZLijpic+keyRMdBZBa+7gO\nHPFJ\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003d3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3133383834373735303030313139,CN\u003dhubfintech.com.br,OU\u003d7eebe017-cb01-498c-81e4-6b4149b18e93,O\u003dHUB PAGAMENTOS S.A,L\u003dTambore,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "hubfintech.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-01-14 22:00:32 SUCCESS
CheckForClientCertificate
Found client certificate
2022-01-14 22:00:32 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Payment initiation endpoint
2022-01-14 22:00:32 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2022-01-14 22:00:32 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-01-14 22:00:32 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
3lF6zBtmpcI3RfehIqjtgqJDrgXzJx5TLxeky5qVxTPXu6brkB
2022-01-14 22:00:32 SUCCESS
RequireBearerAccessToken
Found access token in request
actual
3lF6zBtmpcI3RfehIqjtgqJDrgXzJx5TLxeky5qVxTPXu6brkB
2022-01-14 22:00:32 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2022-01-14 22:00:32 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2022-01-14 22:00:32 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2022-01-14 22:00:32 SUCCESS
FAPIBrazilEnsureAuthorizationRequestScopesContainPayments
'payments' was included in authorization request scopes
actual
openid consent:urn:conformance:oidf:9M5MlIZ5hF payments
expected
payments
2022-01-14 22:00:32 SUCCESS
FAPIBrazilExtractPaymentInitiationRequest
Parsed payment initiation request
payment_initiation_request
{
  "aud": "https://www.certification.openid.net/test-mtls/a/hubfintech/payments/v1/pix/payments",
  "data": {
    "proxy": "55155114845",
    "localInstrument": "DICT",
    "creditorAccount": {
      "number": "10173722",
      "accountType": "CACC",
      "ispb": "92894922",
      "issuer": "0001"
    },
    "cnpjInitiator": "20747436000156",
    "payment": {
      "amount": "1.15",
      "currency": "BRL"
    },
    "ibgeTownCode": "5300108"
  },
  "iss": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197632,
  "jti": "1ace7d42-ba2f-430b-8952-7fa709d0e343"
}
2022-01-14 22:00:32 SUCCESS
FAPIBrazilValidateJwtSignatureUsingOrganizationJwks
jwt signature validated
jwt
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik1ramNldl9fZ19uSmJqNzdMTmxkNkdjUkdYZ3l1WkVvUklzMTNTVURXVkUifQ.eyJkYXRhIjp7ImxvY2FsSW5zdHJ1bWVudCI6IkRJQ1QiLCJwYXltZW50Ijp7ImFtb3VudCI6IjEuMTUiLCJjdXJyZW5jeSI6IkJSTCJ9LCJjcmVkaXRvckFjY291bnQiOnsiYWNjb3VudFR5cGUiOiJDQUNDIiwiaXNwYiI6IjkyODk0OTIyIiwiaXNzdWVyIjoiMDAwMSIsIm51bWJlciI6IjEwMTczNzIyIn0sImNucGpJbml0aWF0b3IiOiIyMDc0NzQzNjAwMDE1NiIsImliZ2VUb3duQ29kZSI6IjUzMDAxMDgiLCJwcm94eSI6IjU1MTU1MTE0ODQ1In0sImlhdCI6MTY0MjE5NzYzMiwiYXVkIjoiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL2h1YmZpbnRlY2gvcGF5bWVudHMvdjEvcGl4L3BheW1lbnRzIiwiaXNzIjoiN2VlYmUwMTctY2IwMS00OThjLTgxZTQtNmI0MTQ5YjE4ZTkzIiwianRpIjoiMWFjZTdkNDItYmEyZi00MzBiLTg5NTItN2ZhNzA5ZDBlMzQzIn0.TzhS3mmXfUplpUokwlmx92uZKWLvf2YvC9-JgkhgzVblEGHinyRSreEu8l5h3TJ0mCYYfvVUjrS2X6NtaAuGdv1-okIY_14WfkWyR7HZYOYG7P2-vELh8oGDziWehlud2MIHU6IXl9-T9JsOzQOX4zvvzgOV1_sMrfkXCTI5yaN1VhdBvD6__OGyoYTz0vijXvHPUrQ_r6wC8tnSnu2RlvcaQ8Lq1Mu_mNttqK1tLGUWkExQelYRcGX5k2JE-3P24L6k2hKz8UI2fweHH1AkysHgwzldklDBhin0H1oy-fi_DWmYSvwwlrr_6FDADWCZikhYDqAMofGzEVBn_v6pbQ
2022-01-14 22:00:32 SUCCESS
EnsureIncomingRequestContentTypeIsApplicationJwt
Client correctly used application/jwt content type
2022-01-14 22:00:32 SUCCESS
ExtractXIdempotencyKeyHeader
Found an x-idempotency-key header
idempotency_key
cd965c39-5a8d-4805-8cb5-52fc259791ec
2022-01-14 22:00:32 SUCCESS
FAPIBrazilValidatePaymentInitiationRequestAud
aud claim matches the endpoint url
aud
https://www.certification.openid.net/test-mtls/a/hubfintech/payments/v1/pix/payments
2022-01-14 22:00:32 SUCCESS
FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate
Extracted subject from the mtls client certificate
subjectdn
UID=3a268f4c-3ae2-466b-88e3-571c5279e939,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,2.5.4.5=#130e3133383834373735303030313139,CN=hubfintech.com.br,OU=7eebe017-cb01-498c-81e4-6b4149b18e93,O=HUB PAGAMENTOS S.A,L=Tambore,ST=SP,C=BR
ou
7eebe017-cb01-498c-81e4-6b4149b18e93
brazil_software_id
3a268f4c-3ae2-466b-88e3-571c5279e939
2022-01-14 22:00:32 SUCCESS
FAPIBrazilEnsurePaymentInitiationRequestIssEqualsOrganizationId
iss claim in payment initiation request matches organizationId in client certificate
iss
7eebe017-cb01-498c-81e4-6b4149b18e93
2022-01-14 22:00:32 SUCCESS
FAPIBrazilEnsurePaymentInitiationRequestJtiIsUUIDv4
jti claim in payment initiation request is a UUIDv4
jti
1ace7d42-ba2f-430b-8952-7fa709d0e343
2022-01-14 22:00:32 SUCCESS
FAPIBrazilValidatePaymentInitiationRequestIat
iat claim in payment initiation request is valid
iat
1642197632
2022-01-14 22:00:32 SUCCESS
FAPIBrazilGenerateNewPaymentInitiationResponse
Created payment initiation response
payment_initiation_response_headers
{
  "x-fapi-interaction-id": "ed0006c3-5cda-407f-b26e-f8b27c055b00"
}
payment_initiation_response
{
  "data": {
    "proxy": "55155114845",
    "localInstrument": "DICT",
    "creditorAccount": {
      "number": "10173722",
      "accountType": "CACC",
      "ispb": "92894922",
      "issuer": "0001"
    },
    "cnpjInitiator": "20747436000156",
    "payment": {
      "amount": "1.15",
      "currency": "BRL"
    },
    "ibgeTownCode": "5300108",
    "paymentId": "25e7fa8e-50ff-4066-b0f0-20a72f91478b",
    "consentId": "urn:conformance:oidf:9M5MlIZ5hF",
    "creationDateTime": "2022-01-14T22:00:32Z",
    "statusUpdateDateTime": "2022-01-14T22:00:32Z",
    "status": "ACSP"
  },
  "links": {
    "self": "https://www.certification.openid.net/test/a/hubfintechpayments/v1/pix/payments"
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-01-14T22:00:32Z"
  },
  "aud": "7eebe017-cb01-498c-81e4-6b4149b18e93",
  "iat": 1642197632,
  "jti": "062a542d-17ae-4253-a670-cf3bf59d4f60",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}
2022-01-14 22:00:32 SUCCESS
FAPIBrazilSignPaymentInitiationResponse
Signed the payment initiation response
signed_payment_initiation_response
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.WRlJsc1rOBzyamlh-fkP8ppRZocWt_kB5uo2VADgS_Fhp0VDMB7luM_gFKVr0qO5HwUfP2E4UhmGe1XR9J2Aot7JFZvuOHh0np2vvwtdktsWxssezQUgEo-zvkPrUkbkjByZn8zkmtLGuPSfOz3gfLOSEEBZKlaZ2Rj9mH9CL_3txYHEoUctYXwr-g5czz5OmgaIngWhkytiDDQY42A1XYsxaOwoLF4bwxnoUaQVw6_p_Moihp9P_jmYa1O37nImbwTRT-ME2dp0Nk6p49TPz6kJjzD3zkws0THxVq62XL2PPb2mtgj6RjQn8i1kGfy3B82ZTfqPKbb3JgF2AhMQ-w
2022-01-14 22:00:32
ClearAccessTokenFromRequest
Condition ran but did not log anything
2022-01-14 22:00:32 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance ezFwc9oCE3PSbWf
outgoing_status_code
201
outgoing_headers
{
  "x-fapi-interaction-id": [
    "ed0006c3-5cda-407f-b26e-f8b27c055b00"
  ],
  "Content-Type": [
    "application/jwt"
  ]
}
outgoing_body
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.WRlJsc1rOBzyamlh-fkP8ppRZocWt_kB5uo2VADgS_Fhp0VDMB7luM_gFKVr0qO5HwUfP2E4UhmGe1XR9J2Aot7JFZvuOHh0np2vvwtdktsWxssezQUgEo-zvkPrUkbkjByZn8zkmtLGuPSfOz3gfLOSEEBZKlaZ2Rj9mH9CL_3txYHEoUctYXwr-g5czz5OmgaIngWhkytiDDQY42A1XYsxaOwoLF4bwxnoUaQVw6_p_Moihp9P_jmYa1O37nImbwTRT-ME2dp0Nk6p49TPz6kJjzD3zkws0THxVq62XL2PPb2mtgj6RjQn8i1kGfy3B82ZTfqPKbb3JgF2AhMQ-w
outgoing_path
payments/v1/pix/payments
2022-01-14 22:00:32 FINISHED
fapi1-advanced-final-client-refresh-token-test
Test has run to completion
testmodule_result
PASSED
2022-01-14 22:00:35
TEST-RUNNER
Alias has now been claimed by another test
alias
hubfintech
new_test_id
95bHDED7qfYJwsL
Test Results