Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-04-11 21:39:46 INFO
TEST-RUNNER
Test instance wXmqBJLtFNw3iYW created
baseUrl
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party
variant
{
  "client_auth_type": "mtls",
  "fapi_auth_request_method": "pushed",
  "fapi_profile": "openbanking_brazil",
  "fapi_jarm_type": "oidc",
  "fapi_response_mode": "plain_response"
}
alias
Celcoin_FAPI_Relying_Party
description
Celcoin - Client Test Accounts
planId
QdyZbNYSMad4E
config
{
  "alias": "Celcoin_FAPI_Relying_Party",
  "server": {
    "discoveryUrl": "https://aa.openfinance.celcoin.dev/.well-known/openid-configuration",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "enc",
          "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
          "e": "AQAB",
          "d": "RLiYx_6oRxst_NIb3RifPlCGuF6i5g5r0dmeAH-H__PtITFWiuLnHhT5hRh_1F1c3XZohxAXPO_5PX6O4z3fSUxXHBMFvwuGX6XVI46r4zQMBTJDukOpIKOhKYi463wqf4zeoaomIUWbBUoH34Ee2-mDOxGvRG24VbkMZq14PiMIkNTu7EXfc4ViYGia3o40YoRJOuEZDZBkLlLitTEBp7naO_vDpij1Hu9TOv7OKVU3Tt1_ujblS0KFUuEvG0hRvCRQIHuXY6EG5XxpfqimQ7uHDwihvBIgKFTvuL-7oUWD3rRUwsrZ_JqiE44yJhGXOdnIPtd3ZF5CEJtxtx5hiQ",
          "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
          "alg": "RSA-OAEP"
        },
        {
          "kty": "RSA",
          "use": "sig",
          "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
          "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
          "e": "AQAB",
          "d": "OYZyXTTnSIO_2m4YButsZIEdMOZ-PI0HdBxol_1mA9tqEivImVW7eaicIY51eDSQOCxTEbYgGw5wmWu5ixr63korPSNVbXuR2IbZ1fwkL9jl7bhM3w2Kpoxb4YZR8w3OSTh0QYi4bp3yFwNg7CijJGzfQcaXdaUHB_CeGfhv10SED5YwvA4VLOG3_NUw64B1m21FLIofnWAaosp9YKbm8I2UGuiK-Yg3maoROShtfIumLCszdSAgZmsX7mmRHFIdWlxdSXbB_M32HuKOAh2muUIMkackgwRsOKuoD1-tizRbKmWdm36NU88NHC6th3vL0nlnNKBJI0eN9c13bpsogQ",
          "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
          "x5c": [
            "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"
          ],
          "alg": "PS256"
        }
      ]
    }
  },
  "client": {
    "scope": "openid accounts",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "sig",
          "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
          "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
          "e": "AQAB",
          "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
          "x5c": [
            "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"
          ],
          "alg": "PS256"
        }
      ]
    },
    "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
    "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
    "certificate": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----\nMIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5\nMTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD\no28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG\nA1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD\nVQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw\nMDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC\nNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx\nMDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA\nsKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M\nW5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y\n6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p\npBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV\n1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1\nYLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV\nHQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO\ntAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v\nb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f\nBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy\nYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j\nZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw\nggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH\nAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0\naCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp\nbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz\nIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np\nb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g\nU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1\nbWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w\na2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB\nCwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD\naM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv\n4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv\nH4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go\nMJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----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\n1jKA5uU1oqqsM2pFYzjCjEmv\n-----END PRIVATE KEY-----",
    "ca": "----BEGIN CERTIFICATE-----\nMIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL\nBQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv\nb3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow\ncTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT\nBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC\nT1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC\nAQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P\nS39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H\nGInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO\nDRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V\nW98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ\nV75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP\nBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf\nBgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w\nPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n\nYnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi\nb3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG\nSIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH\nIURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV\n1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y\nMc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3\nNrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY\np02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\n1DXIta0LpqM4pMoRMXvp9SLU0atVZLEu6Sc\u003d\n-----END CERTIFICATE-----"
  },
  "resource": {
    "resourceUrl": "https://opbbroker.openfinance.celcoin.dev/open-banking/accounts/v1/accounts",
    "consentUrl": "https://consent.openfinance.celcoin.dev/open-banking/consents/v1/consents",
    "brazilCpf": "67165276050",
    "brazilCnpj": "38576619000111",
    "brazilOrganizationId": "4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8"
  },
  "directory": {
    "discoveryUrl": "https://auth.sandbox.directory.openbankingbrasil.org.br/.well-known/openid-configuration",
    "client_id": "GDzmbynkPq5Xx9S485FFM",
    "apibase": "https://matls-api.sandbox.directory.openbankingbrasil.org.br/",
    "keystore": "https://keystore.sandbox.directory.openbankingbrasil.org.br/"
  },
  "client2": {
    "client_id": "7e99ed43-5e74-4e1a-82aa-5682a2b5436f",
    "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "sig",
          "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
          "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
          "e": "AQAB",
          "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
          "x5c": [
            "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"
          ],
          "alg": "PS256"
        },
        {
          "kty": "RSA",
          "use": "enc",
          "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
          "e": "AQAB",
          "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
          "alg": "RSA-OAEP"
        }
      ]
    },
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5\nMTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD\no28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG\nA1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD\nVQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw\nMDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC\nNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx\nMDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA\nsKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M\nW5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y\n6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p\npBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV\n1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1\nYLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV\nHQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO\ntAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v\nb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f\nBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy\nYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j\nZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw\nggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH\nAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0\naCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp\nbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz\nIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np\nb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g\nU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1\nbWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w\na2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB\nCwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD\naM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv\n4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv\nH4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go\nMJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
    "id_token_encrypted_response_alg": "RSA-OAEP",
    "id_token_encrypted_response_enc": "A128GCM"
  },
  "publish": "summary",
  "description": "Celcoin - Client Test Accounts"
}
testName
fapi1-advanced-final-client-refresh-token-test
2022-04-11 21:39:46 SUCCESS
FAPIBrazilGenerateServerConfiguration
Created server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true
}
issuer
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/
discoveryUrl
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
2022-04-11 21:39:46 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "d": "RLiYx_6oRxst_NIb3RifPlCGuF6i5g5r0dmeAH-H__PtITFWiuLnHhT5hRh_1F1c3XZohxAXPO_5PX6O4z3fSUxXHBMFvwuGX6XVI46r4zQMBTJDukOpIKOhKYi463wqf4zeoaomIUWbBUoH34Ee2-mDOxGvRG24VbkMZq14PiMIkNTu7EXfc4ViYGia3o40YoRJOuEZDZBkLlLitTEBp7naO_vDpij1Hu9TOv7OKVU3Tt1_ujblS0KFUuEvG0hRvCRQIHuXY6EG5XxpfqimQ7uHDwihvBIgKFTvuL-7oUWD3rRUwsrZ_JqiE44yJhGXOdnIPtd3ZF5CEJtxtx5hiQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "d": "OYZyXTTnSIO_2m4YButsZIEdMOZ-PI0HdBxol_1mA9tqEivImVW7eaicIY51eDSQOCxTEbYgGw5wmWu5ixr63korPSNVbXuR2IbZ1fwkL9jl7bhM3w2Kpoxb4YZR8w3OSTh0QYi4bp3yFwNg7CijJGzfQcaXdaUHB_CeGfhv10SED5YwvA4VLOG3_NUw64B1m21FLIofnWAaosp9YKbm8I2UGuiK-Yg3maoROShtfIumLCszdSAgZmsX7mmRHFIdWlxdSXbB_M32HuKOAh2muUIMkackgwRsOKuoD1-tizRbKmWdm36NU88NHC6th3vL0nlnNKBJI0eN9c13bpsogQ",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
server_encryption_keys
{
  "keys": [
    {
      "kty": "RSA",
      "d": "RLiYx_6oRxst_NIb3RifPlCGuF6i5g5r0dmeAH-H__PtITFWiuLnHhT5hRh_1F1c3XZohxAXPO_5PX6O4z3fSUxXHBMFvwuGX6XVI46r4zQMBTJDukOpIKOhKYi463wqf4zeoaomIUWbBUoH34Ee2-mDOxGvRG24VbkMZq14PiMIkNTu7EXfc4ViYGia3o40YoRJOuEZDZBkLlLitTEBp7naO_vDpij1Hu9TOv7OKVU3Tt1_ujblS0KFUuEvG0hRvCRQIHuXY6EG5XxpfqimQ7uHDwihvBIgKFTvuL-7oUWD3rRUwsrZ_JqiE44yJhGXOdnIPtd3ZF5CEJtxtx5hiQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    }
  ]
}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
2022-04-11 21:39:46 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-04-11 21:39:46
SetServerSigningAlgToPS256
Successfully set signing algorithm to PS256
2022-04-11 21:39:46
FAPIBrazilSetGrantTypesSupportedInServerConfiguration
Successfully set grant_types_supported
server
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ]
}
2022-04-11 21:39:46
AddClaimsParameterSupportedTrueToServerConfiguration
Successfully added claims_parameter_supported to server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true
}
2022-04-11 21:39:46
FAPIBrazilAddBrazilSpecificSettingsToServerConfiguration
Added open banking Brazil specific server settings
server
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ]
}
2022-04-11 21:39:46 SUCCESS
AddTLSClientAuthToServerConfiguration
Added tls_client_auth for token_endpoint_auth_methods_supported
2022-04-11 21:39:46
AddPushedAuthorizationRequestEndpointToServerConfig
Added pushed_authorization_request_endpoint to server configuration
endpoint
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/par
2022-04-11 21:39:46
AddRequirePushedAuthorizationRequestsToServerConfig
Added require_pushed_authorization_requests to server configuration
value
true
2022-04-11 21:39:46 SUCCESS
AddResponseTypeCodeIdTokenToServerConfiguration
Added code id_token as response type supported
response_types_supported
[
  "code id_token"
]
2022-04-11 21:39:46 SUCCESS
FAPIBrazilAddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
values
[
  "PS256"
]
2022-04-11 21:39:46 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2022-04-11 21:39:46 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "d": "RLiYx_6oRxst_NIb3RifPlCGuF6i5g5r0dmeAH-H__PtITFWiuLnHhT5hRh_1F1c3XZohxAXPO_5PX6O4z3fSUxXHBMFvwuGX6XVI46r4zQMBTJDukOpIKOhKYi463wqf4zeoaomIUWbBUoH34Ee2-mDOxGvRG24VbkMZq14PiMIkNTu7EXfc4ViYGia3o40YoRJOuEZDZBkLlLitTEBp7naO_vDpij1Hu9TOv7OKVU3Tt1_ujblS0KFUuEvG0hRvCRQIHuXY6EG5XxpfqimQ7uHDwihvBIgKFTvuL-7oUWD3rRUwsrZ_JqiE44yJhGXOdnIPtd3ZF5CEJtxtx5hiQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "d": "OYZyXTTnSIO_2m4YButsZIEdMOZ-PI0HdBxol_1mA9tqEivImVW7eaicIY51eDSQOCxTEbYgGw5wmWu5ixr63korPSNVbXuR2IbZ1fwkL9jl7bhM3w2Kpoxb4YZR8w3OSTh0QYi4bp3yFwNg7CijJGzfQcaXdaUHB_CeGfhv10SED5YwvA4VLOG3_NUw64B1m21FLIofnWAaosp9YKbm8I2UGuiK-Yg3maoROShtfIumLCszdSAgZmsX7mmRHFIdWlxdSXbB_M32HuKOAh2muUIMkackgwRsOKuoD1-tizRbKmWdm36NU88NHC6th3vL0nlnNKBJI0eN9c13bpsogQ",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
2022-04-11 21:39:46 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
Verify configuration of first client
2022-04-11 21:39:46 SUCCESS
GetStaticClientConfiguration
Found a static client object
scope
openid accounts
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    }
  ]
}
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
redirect_uri
https://tpp.openfinance.celcoin.dev/signin-oidc
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:39:46 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-04-11 21:39:46 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
2022-04-11 21:39:46 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-04-11 21:39:46 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-04-11 21:39:46 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    }
  ]
}
Verify configuration of second client
2022-04-11 21:39:46 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
7e99ed43-5e74-4e1a-82aa-5682a2b5436f
redirect_uri
https://tpp.openfinance.celcoin.dev/signin-oidc
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "e": "AQAB",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
      "alg": "RSA-OAEP"
    }
  ]
}
certificate
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL
BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx
FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB
TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5
MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD
o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG
A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD
VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw
MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC
NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx
MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M
W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y
6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p
pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV
1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1
YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO
tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v
b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f
BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy
YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j
ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw
ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH
AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0
aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp
bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz
IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np
b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g
U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1
bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w
a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB
CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD
aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv
4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv
H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go
MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB
APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1
-----END CERTIFICATE-----
id_token_encrypted_response_alg
RSA-OAEP
id_token_encrypted_response_enc
A128GCM
2022-04-11 21:39:46 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-04-11 21:39:46 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "e": "AQAB",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
      "alg": "RSA-OAEP"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "MIIG7DCCBdSgAwIBAgIUTrLrCiShohhHToplj1GN+jrMWNMwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDExNzE4MDAwMFoXDTIzMDIxNjE4MDAwMFowgeExCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMWMwGAYDVQQLDBE8VmFsaWRhdGlvbiB0eXBlPjAeBgNVBAsMFzxDZXJ0aWZpY2F0ZSBBdXRob3JpdHk+MCcGA1UECwwgPENOUEogZGEgUmVnaXN0cmF0aW9uIEF1dGhvcml0eT4xIjAgBgNVBAMMGSoub3BlbmZpbmFuY2UuY2VsY29pbi5kZXYxNDAyBgoJkiaJk/IsZAEBEyQ0ZDJmODdhOC04Y2ZjLTU0YjEtYTViNC1jYTM5MzE5ZmM4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYCH6YtsJJ+1dtYxHKTxxAB2hpfim9R+q2WIQiUp7PMmoNVypSPYiZNxoT6QgW90d+QApqCotHOySlHK/D7lz6BPnyTlVj4Gj/zP8/b1xcIm6//lTlahRuAPfg4nhHFYXVzt9XVHc8KahKLOk5MZGXcg1IrLZ0Ef//wbFL91dnI5cYa/GeSWA2YPYotKUCxQoAYiSDf7YmLknr0YH0Qf7BiSB74ckBbtN1oPTmxWDeBsY/VedroTpsZSk05aK2KxKglE+EQOiLUKqGRweOkPNaiFqWxbS6zsVCEQym1oWuuwig/cNGV8GVxRMRF5CiDLd+VTjs7fZYPIGNH9QBwQ/AgMBAAGjggMJMIIDBTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSPDbZtKSByAZXj6fT5vxxugUF+oDAfBgNVHSMEGDAWgBSGf1itF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMGUGA1UdEQReMFygFQYFYEwBAwKgDAwKSm9hbyBUZXN0ZaAZBgVgTAEDA6AQDA41OTExODEzMzAwMDEwMKAWBgVgTAEDBKANDAs2MDk1MDAyMTA5MaAQBgVgTAEDB6AHDAUwOTc4NjAOBgNVHQ8BAf8EBAMCBsAwggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBcqHz+t8xXh2KnXoKFu1Aio4xF/7HzWmAN3/4GrmDJu+kzueloDBX0WRGjqtnm5XKXmDGPmdSuXS8MsO0KLApeJvKKnH9aa2xGX7doG+/FtVCdlN9bkKYZQZ7TIgfoxj4WFEv60z4TBdJneO/oavFVKJIJcqzl9AohidzPHE5Zxld3d18ovPgAKL92JgSNgFqODGYTDN900OkCuJMsQuTWPewBTWfy9j2K44tI+hmUAjxyXFbIoX4UGxRkzMDRM2Cc8iJcwJT3iv796zCqB8X5W8tiAUBWXvSAQkE9uUBOocT2MKp3y3Tqtq108hoZ8p48IUuwdT6ltYn2LYdZt83V"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    }
  ]
}
2022-04-11 21:39:46 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-04-11 21:39:46 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-04-11 21:39:46 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "MIIG7DCCBdSgAwIBAgIUTrLrCiShohhHToplj1GN+jrMWNMwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDExNzE4MDAwMFoXDTIzMDIxNjE4MDAwMFowgeExCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMWMwGAYDVQQLDBE8VmFsaWRhdGlvbiB0eXBlPjAeBgNVBAsMFzxDZXJ0aWZpY2F0ZSBBdXRob3JpdHk+MCcGA1UECwwgPENOUEogZGEgUmVnaXN0cmF0aW9uIEF1dGhvcml0eT4xIjAgBgNVBAMMGSoub3BlbmZpbmFuY2UuY2VsY29pbi5kZXYxNDAyBgoJkiaJk/IsZAEBEyQ0ZDJmODdhOC04Y2ZjLTU0YjEtYTViNC1jYTM5MzE5ZmM4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYCH6YtsJJ+1dtYxHKTxxAB2hpfim9R+q2WIQiUp7PMmoNVypSPYiZNxoT6QgW90d+QApqCotHOySlHK/D7lz6BPnyTlVj4Gj/zP8/b1xcIm6//lTlahRuAPfg4nhHFYXVzt9XVHc8KahKLOk5MZGXcg1IrLZ0Ef//wbFL91dnI5cYa/GeSWA2YPYotKUCxQoAYiSDf7YmLknr0YH0Qf7BiSB74ckBbtN1oPTmxWDeBsY/VedroTpsZSk05aK2KxKglE+EQOiLUKqGRweOkPNaiFqWxbS6zsVCEQym1oWuuwig/cNGV8GVxRMRF5CiDLd+VTjs7fZYPIGNH9QBwQ/AgMBAAGjggMJMIIDBTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSPDbZtKSByAZXj6fT5vxxugUF+oDAfBgNVHSMEGDAWgBSGf1itF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMGUGA1UdEQReMFygFQYFYEwBAwKgDAwKSm9hbyBUZXN0ZaAZBgVgTAEDA6AQDA41OTExODEzMzAwMDEwMKAWBgVgTAEDBKANDAs2MDk1MDAyMTA5MaAQBgVgTAEDB6AHDAUwOTc4NjAOBgNVHQ8BAf8EBAMCBsAwggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBcqHz+t8xXh2KnXoKFu1Aio4xF/7HzWmAN3/4GrmDJu+kzueloDBX0WRGjqtnm5XKXmDGPmdSuXS8MsO0KLApeJvKKnH9aa2xGX7doG+/FtVCdlN9bkKYZQZ7TIgfoxj4WFEv60z4TBdJneO/oavFVKJIJcqzl9AohidzPHE5Zxld3d18ovPgAKL92JgSNgFqODGYTDN900OkCuJMsQuTWPewBTWfy9j2K44tI+hmUAjxyXFbIoX4UGxRkzMDRM2Cc8iJcwJT3iv796zCqB8X5W8tiAUBWXvSAQkE9uUBOocT2MKp3y3Tqtq108hoZ8p48IUuwdT6ltYn2LYdZt83V"
      ],
      "alg": "PS256"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "e": "AQAB",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
      "alg": "RSA-OAEP"
    }
  ]
}
2022-04-11 21:39:46
fapi1-advanced-final-client-refresh-token-test
Setup Done
2022-04-11 21:40:27 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:40:27 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-11 21:40:27 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "tls_client_auth"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-04-11 21:40:28 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:40:28 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-11 21:40:28 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "tls_client_auth"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-04-11 21:40:28 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003d4EF963E6894708BC51575ABAC02ABCFD",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "91"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "scope": "consents",
  "grant_type": "client_credentials"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
client_id=ed515952-455b-4639-a3f5-c50f3e51c08c&scope=consents&grant_type=client_credentials
2022-04-11 21:40:28 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-11 21:40:28 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:40:28 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:40:28 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:40:28 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL
BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx
FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB
TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5
MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD
o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG
A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD
VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw
MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC
NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx
MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M
W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y
6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p
pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV
1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1
YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO
tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v
b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f
BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy
YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j
ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw
ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH
AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0
aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp
bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz
IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np
b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g
U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1
bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w
a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB
CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD
aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv
4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv
H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go
MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB
APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1
-----END CERTIFICATE-----
2022-04-11 21:40:28 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-11 21:40:28 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-11 21:40:28 SUCCESS
FAPIBrazilExtractRequestedScopeFromClientCredentialsGrant
Found 'consents' scope in request
actual
[
  "consents"
]
expected
consents
2022-04-11 21:40:28 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
SNN9dvxAnJTRGpwR2VAV3f2ctYrLRUMRaojNcy3rH2nyCHJQLx
2022-04-11 21:40:28 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
SNN9dvxAnJTRGpwR2VAV3f2ctYrLRUMRaojNcy3rH2nyCHJQLx
token_type
Bearer
2022-04-11 21:40:28
CopyAccessTokenToClientCredentialsField
Condition ran but did not log anything
2022-04-11 21:40:28 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "SNN9dvxAnJTRGpwR2VAV3f2ctYrLRUMRaojNcy3rH2nyCHJQLx",
  "token_type": "Bearer"
}
outgoing_path
token
2022-04-11 21:40:29 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/consents/v1/consents
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer SNN9dvxAnJTRGpwR2VAV3f2ctYrLRUMRaojNcy3rH2nyCHJQLx",
  "accept": "application/json",
  "x-fapi-auth-date": "Mon, 11 Apr 2022 18:40:28 GMT",
  "x-fapi-customer-ip-address": "172.17.48.1",
  "x-fapi-interaction-id": "87e6ead4-f80a-4723-a07b-44938fa63eed",
  "x-customer-user-agent": "string",
  "cookie": "JSESSIONID\u003dD0D709488DB14C00A4C64021703750A9",
  "content-type": "application/json; charset\u003dutf-8",
  "connection": "close",
  "content-length": "440"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/consents/v1/consents
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
{
  "clientId": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "data": {
    "loggedUser": {
      "document": {
        "identification": "00441660010",
        "rel": "CPF"
      }
    },
    "businessEntity": {
      "document": {
        "identification": "92707126000119",
        "rel": "CNPJ"
      }
    },
    "permissions": [
      "openid",
      "profile",
      "consents",
      "accounts",
      "resources"
    ],
    "expirationDateTime": "2022-04-11T18:45:28.5094506",
    "transactionFromDateTime": "2022-04-11T18:40:28.5467553",
    "transactionToDateTime": "2022-04-11T18:45:28.5732951"
  }
}
incoming_query_string_params
{}
incoming_body
{"clientId":"ed515952-455b-4639-a3f5-c50f3e51c08c","data":{"loggedUser":{"document":{"identification":"00441660010","rel":"CPF"}},"businessEntity":{"document":{"identification":"92707126000119","rel":"CNPJ"}},"permissions":["openid","profile","consents","accounts","resources"],"expirationDateTime":"2022-04-11T18:45:28.5094506","transactionFromDateTime":"2022-04-11T18:40:28.5467553","transactionToDateTime":"2022-04-11T18:45:28.5732951"}}
2022-04-11 21:40:29 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
New consent endpoint
2022-04-11 21:40:29 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:40:29 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:40:29 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:40:29 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2022-04-11 21:40:29 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-04-11 21:40:29 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
SNN9dvxAnJTRGpwR2VAV3f2ctYrLRUMRaojNcy3rH2nyCHJQLx
2022-04-11 21:40:29 SUCCESS
RequireBearerClientCredentialsAccessToken
Found access token in request
actual
SNN9dvxAnJTRGpwR2VAV3f2ctYrLRUMRaojNcy3rH2nyCHJQLx
2022-04-11 21:40:29 SUCCESS
ExtractFapiDateHeader
Found a FAPI auth date header
fapi_auth_date
Mon, 11 Apr 2022 18:40:28 GMT
2022-04-11 21:40:29 SUCCESS
ExtractFapiIpAddressHeader
Found a FAPI ip address header
fapi_customer_ip_address
172.17.48.1
addr
172.17.48.1
2022-04-11 21:40:29 SUCCESS
ExtractFapiInteractionIdHeader
Found a FAPI interaction ID header
fapi_interaction_id
87e6ead4-f80a-4723-a07b-44938fa63eed
2022-04-11 21:40:29 SUCCESS
FAPIBrazilEnsureClientCredentialsScopeContainedConsents
The token request which was used to obtain the access token contained 'consents' scope
actual
[
  "consents"
]
2022-04-11 21:40:29
FAPIBrazilExtractConsentRequest
Condition ran but did not log anything
2022-04-11 21:40:29 INFO
CreateFapiInteractionIdIfNeeded
Found existing FAPI interaction ID
fapi_interaction_id
87e6ead4-f80a-4723-a07b-44938fa63eed
2022-04-11 21:40:29 SUCCESS
FAPIBrazilGenerateNewConsentResponse
Created consent response
headers
{
  "x-fapi-interaction-id": "87e6ead4-f80a-4723-a07b-44938fa63eed"
}
consentId
urn:conformance:oidf:TjHU5pMHhc
consent_response
{
  "data": {
    "consentId": "urn:conformance:oidf:TjHU5pMHhc",
    "creationDateTime": "2022-04-11T21:40:29Z",
    "status": "AWAITING_AUTHORISATION",
    "statusUpdateDateTime": "2022-04-11T21:40:29Z",
    "permissions": [
      "ACCOUNTS_READ",
      "ACCOUNTS_BALANCES_READ",
      "RESOURCES_READ"
    ],
    "expirationDateTime": "2022-04-11T23:40:29Z",
    "transactionFromDateTime": "2022-04-11T21:35:29Z",
    "transactionToDateTime": "2022-04-11T23:40:29Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Partyconsents/v1/consents"
    }
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-04-11T21:40:29Z"
  }
}
2022-04-11 21:40:29
ClearAccessTokenFromRequest
Condition ran but did not log anything
2022-04-11 21:40:29 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
201
outgoing_headers
{
  "x-fapi-interaction-id": [
    "87e6ead4-f80a-4723-a07b-44938fa63eed"
  ]
}
outgoing_body
{
  "data": {
    "consentId": "urn:conformance:oidf:TjHU5pMHhc",
    "creationDateTime": "2022-04-11T21:40:29Z",
    "status": "AWAITING_AUTHORISATION",
    "statusUpdateDateTime": "2022-04-11T21:40:29Z",
    "permissions": [
      "ACCOUNTS_READ",
      "ACCOUNTS_BALANCES_READ",
      "RESOURCES_READ"
    ],
    "expirationDateTime": "2022-04-11T23:40:29Z",
    "transactionFromDateTime": "2022-04-11T21:35:29Z",
    "transactionToDateTime": "2022-04-11T23:40:29Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Partyconsents/v1/consents"
    }
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-04-11T21:40:29Z"
  }
}
outgoing_path
consents/v1/consents
2022-04-11 21:40:29 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/jwks
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json, application/jwk-set+json",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:40:29 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-11 21:40:29 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
outgoing_path
jwks
2022-04-11 21:40:29 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/par
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003dD0D709488DB14C00A4C64021703750A9",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "2394"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/par
incoming_body_form_params
{
  "request": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkExMjhDQkMtSFMyNTYiLCJraWQiOiIzQzhGMEUyQzNFRjEzMzRCNkZFRDg2NDhGOTg5NDJCRkQ1M0JBOUI2IiwidHlwIjoiSldUIn0.TP85K3NeioawqTL6tqjaEO8Njz2r7mvTbKAzPLPZeW9i_wVxpH_XcGobrv6hQTXu22aCSkuE5tSupEHF5m5C8HniqLQr6Uf3Em92qX5pMXx9IVx4VpMc1mUln0f0EHZIFjMF0cZqlofI9NQ4BjXoQ3b80PGtUc8Gy6u3ueXYJccERWCADgDri3DKe5Z_j0RkO_n5dSd_UKtle1FZzrrv_DD2swZ7ZRRq4x3tSqr4WtHdvOmHqyf9S25xExvyWe9nU41vU57BV7VVgd8KCaeB0OABZmjGAB8-jt3pjZ7a_d9L9fQn1qcXPo0uYrEzzQ1SdUopV-QJg8wrVBb35PLUeA.8-evaL5rAqABW2p-9Ok9tA.OY8hhR6VwdKfWg4aZUufaYGXxyFXrbygq8Ro6kXJb9pOHrcQAm9bs7lMDXETAy8C_L48fr7DDwDnJJ_5DZF-AAOUkfDoHKEeCA93lPQ854UA4OIYaMLTlPQ6NajCo_uPilRj0IBxmAcZ1syr8zKdaRCueB7D-TcN_Ss0tcaf8QLvsKOzlzMqTAayQvqG-cIw9X0GZaPpfT1B4pyV_eCw7S7Thr3Y8Okw_MeYLFTYD8yFVJtZLtM0xADwJJqTGifwNukemq0SRfu7WrUHiTyHLso6cfR2z3MjC_zM8NQQoAq9bzWkin0qBO2TYyQzSXRdCm42VwGP9nkpBp1CCjWNJEsKzN8JDg9NpG5rgREBlVgQIr1uml8ZrhPoSK-kbvbhPo9NNfYBi4pCXQoiHZ7nB1_cLV76Qmhxxxoa1K2WM02clI_9eiZO0FJzlLLriXvVMroENPeCvkKfnO13UObBuMh1IOKuFnaw8Ci0zKK0266ujmZihVMEBfjixxMj2uQGicYuvhfAcsnfFBLVfYhbZh--1zTBJjxcz7_CGNW9F5Vij3m8atf5qjnIDI4I6T249Lz4ffJ4DnxfahLVWXwKWcEVdAfL6QS_7g-auAigaHY_QxuoDKlZ_6dtU5O_wRzEVJIE0dRITxuJDArvH6aLqWr76XcWH_9Tg2gpVEmOPSjLAvOMtPFIbRHrNFvP1zCmvWUiddAu_E5BbNhQe7yqJCxQLtIGgXCng-lSZ389UL84cBvywqf83ClilxmC06_xTdRRJBJxaoQ5krfgONSD80txSaErvzJby3V4PtL6UoYG6wDxa36uihbBjaSeRp5gT7E6uu8Ne7-NnSlElFDIrAqy8Sd3tspoaY60vyUpXs9238DzOt9X4LmQlIrAHCpvc1GhOYmQUv0_X_KO_I7eOrqsyXabkwEpykmFev9mIyw_JuiMrl4d5o1Ir3rG4KhFv5fHDxS_gr0ApPfFUXs06IGJUrK6Uqu9RcRLGta8NO-GHu1rEfvanVSCkGC0py1AXURbpoSAznNFpGXcrr1EH99MduTc401tftOzSMruU0EpWkyKRqNlSKnJfY8ZDkrsGPviQpKG-2MfLKwYmzE4DBhOuvkr3t66CjmUdBgR6ZPgGhVwQgix8vdZ0UJXM_dSi3KjfAar7XgtqdjqJC5SLr2DpX3deh-mveU8f_j6sFa65rmb76QK_WS--3e5HVfq_6PywrBhT_HjwaxTACDPcFnuFHO2Aa0cp7zsLLwd1At8RIIfLK-c701wXJK0RGbhnuttHItGT5uqk51XDu99v3oeEvMRb0tJH296n7RRURNy1RqsPz9BJN6A_8vS8dG7cJnzRQKNM5uWs67YNrvqv2q1UTYu6ZvoX-CfnTjXvEJLateLckdtI3-0hdWD8QLrlAsrTUbrrNnRHS6Ues-T6yeD1GF-nxQIDR_qYZc7GeUUpHiO4jBHjZ-10aev_iO71hc1M-RTPWj-3z-ZuGSWDhl8PbFJj3ekZlINawEOH_2v23ayljksZZcg8ND32hQBWI89hoaRTtr4-a6GkWU41HiVaJlceKyYHqU3XyEsLwZqHFIx_mGdP8ZPUsTEbeacGhB7e_Llmm-pdy_Hbm9DQa0LE6ChG9lkRY_7OjrgklG7SWtle5QdQYhsl87q-_HWP6qXIQHcqgT5FWqOlIQP_1YhqrorMAns_RvUXBrGb2Vc2WDWJnmZ-vg1qNuybtrxSVukkiGtAy7L4u-wFWi0ftgptPYO6xJYkO3K7a0OVD9XnLHHxYOALufvPnDFpOCXUdVljnPzq48T0vdJm-Cipw.mEZKmHHdqVZCA_n6wVELXQ",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
request=eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkExMjhDQkMtSFMyNTYiLCJraWQiOiIzQzhGMEUyQzNFRjEzMzRCNkZFRDg2NDhGOTg5NDJCRkQ1M0JBOUI2IiwidHlwIjoiSldUIn0.TP85K3NeioawqTL6tqjaEO8Njz2r7mvTbKAzPLPZeW9i_wVxpH_XcGobrv6hQTXu22aCSkuE5tSupEHF5m5C8HniqLQr6Uf3Em92qX5pMXx9IVx4VpMc1mUln0f0EHZIFjMF0cZqlofI9NQ4BjXoQ3b80PGtUc8Gy6u3ueXYJccERWCADgDri3DKe5Z_j0RkO_n5dSd_UKtle1FZzrrv_DD2swZ7ZRRq4x3tSqr4WtHdvOmHqyf9S25xExvyWe9nU41vU57BV7VVgd8KCaeB0OABZmjGAB8-jt3pjZ7a_d9L9fQn1qcXPo0uYrEzzQ1SdUopV-QJg8wrVBb35PLUeA.8-evaL5rAqABW2p-9Ok9tA.OY8hhR6VwdKfWg4aZUufaYGXxyFXrbygq8Ro6kXJb9pOHrcQAm9bs7lMDXETAy8C_L48fr7DDwDnJJ_5DZF-AAOUkfDoHKEeCA93lPQ854UA4OIYaMLTlPQ6NajCo_uPilRj0IBxmAcZ1syr8zKdaRCueB7D-TcN_Ss0tcaf8QLvsKOzlzMqTAayQvqG-cIw9X0GZaPpfT1B4pyV_eCw7S7Thr3Y8Okw_MeYLFTYD8yFVJtZLtM0xADwJJqTGifwNukemq0SRfu7WrUHiTyHLso6cfR2z3MjC_zM8NQQoAq9bzWkin0qBO2TYyQzSXRdCm42VwGP9nkpBp1CCjWNJEsKzN8JDg9NpG5rgREBlVgQIr1uml8ZrhPoSK-kbvbhPo9NNfYBi4pCXQoiHZ7nB1_cLV76Qmhxxxoa1K2WM02clI_9eiZO0FJzlLLriXvVMroENPeCvkKfnO13UObBuMh1IOKuFnaw8Ci0zKK0266ujmZihVMEBfjixxMj2uQGicYuvhfAcsnfFBLVfYhbZh--1zTBJjxcz7_CGNW9F5Vij3m8atf5qjnIDI4I6T249Lz4ffJ4DnxfahLVWXwKWcEVdAfL6QS_7g-auAigaHY_QxuoDKlZ_6dtU5O_wRzEVJIE0dRITxuJDArvH6aLqWr76XcWH_9Tg2gpVEmOPSjLAvOMtPFIbRHrNFvP1zCmvWUiddAu_E5BbNhQe7yqJCxQLtIGgXCng-lSZ389UL84cBvywqf83ClilxmC06_xTdRRJBJxaoQ5krfgONSD80txSaErvzJby3V4PtL6UoYG6wDxa36uihbBjaSeRp5gT7E6uu8Ne7-NnSlElFDIrAqy8Sd3tspoaY60vyUpXs9238DzOt9X4LmQlIrAHCpvc1GhOYmQUv0_X_KO_I7eOrqsyXabkwEpykmFev9mIyw_JuiMrl4d5o1Ir3rG4KhFv5fHDxS_gr0ApPfFUXs06IGJUrK6Uqu9RcRLGta8NO-GHu1rEfvanVSCkGC0py1AXURbpoSAznNFpGXcrr1EH99MduTc401tftOzSMruU0EpWkyKRqNlSKnJfY8ZDkrsGPviQpKG-2MfLKwYmzE4DBhOuvkr3t66CjmUdBgR6ZPgGhVwQgix8vdZ0UJXM_dSi3KjfAar7XgtqdjqJC5SLr2DpX3deh-mveU8f_j6sFa65rmb76QK_WS--3e5HVfq_6PywrBhT_HjwaxTACDPcFnuFHO2Aa0cp7zsLLwd1At8RIIfLK-c701wXJK0RGbhnuttHItGT5uqk51XDu99v3oeEvMRb0tJH296n7RRURNy1RqsPz9BJN6A_8vS8dG7cJnzRQKNM5uWs67YNrvqv2q1UTYu6ZvoX-CfnTjXvEJLateLckdtI3-0hdWD8QLrlAsrTUbrrNnRHS6Ues-T6yeD1GF-nxQIDR_qYZc7GeUUpHiO4jBHjZ-10aev_iO71hc1M-RTPWj-3z-ZuGSWDhl8PbFJj3ekZlINawEOH_2v23ayljksZZcg8ND32hQBWI89hoaRTtr4-a6GkWU41HiVaJlceKyYHqU3XyEsLwZqHFIx_mGdP8ZPUsTEbeacGhB7e_Llmm-pdy_Hbm9DQa0LE6ChG9lkRY_7OjrgklG7SWtle5QdQYhsl87q-_HWP6qXIQHcqgT5FWqOlIQP_1YhqrorMAns_RvUXBrGb2Vc2WDWJnmZ-vg1qNuybtrxSVukkiGtAy7L4u-wFWi0ftgptPYO6xJYkO3K7a0OVD9XnLHHxYOALufvPnDFpOCXUdVljnPzq48T0vdJm-Cipw.mEZKmHHdqVZCA_n6wVELXQ&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:40:29 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
PAR endpoint
2022-04-11 21:40:29 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:40:29 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:40:29 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:40:29 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-11 21:40:29 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-11 21:40:30 SUCCESS
ExtractRequestObjectFromPAREndpointRequest
Parsed request object
request_object
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.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.IbxprV2tamj3RF2p4h7uwaZmSRVqj8fFoR7vi6jLhdZc47drPuLfgtaPq0tOgkDzuuptgXhsztKA5fJ9U6Font_CRSarU5rUaXnkJWkLRTk-Py57guYAzDYGKmjRwWb3SrrIBJlzJNsl57MR44po0D_ZhzQkU0bt1qDLrzJgVijDK0fGMfkOK6crOtj_Oyz8xVT8-RI6RpHmzIHcV4Sh3O3QE_LKSzUIfjgulBoQDM8tUrkP0WNeKbthdxbEQqh6M6qEJl-rMmHW8xmqDZuqSFAMZDUcE2euOiMRCJjYfnaTrfPp5l7H6IbdivrWFtS_XM7e3hP9tSV3DodKtSRChg",
  "header": {
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "iss": "ed515952-455b-4639-a3f5-c50f3e51c08c",
    "response_type": "code id_token",
    "code_challenge_method": "S256",
    "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
    "acr": {
      "loa2": "urn:brasil:openbanking:loa2",
      "loa3": "urn:brasil:openbanking:loa3"
    },
    "aud": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
    "nbf": 1649713229,
    "scope": "openid profile consent:urn:conformance:oidf:TjHU5pMHhc resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers",
    "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
    "state": "2d7a09a999d94501ac4448048192a764",
    "exp": 1649715029,
    "iat": 1649713229,
    "code_challenge": "RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE"
  },
  "jwe_header": {
    "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
    "typ": "JWT",
    "enc": "A128CBC-HS256",
    "alg": "RSA-OAEP"
  }
}
2022-04-11 21:40:30 SUCCESS
EnsurePAREndpointRequestDoesNotContainRequestUriParameter
PAR endpoint request does not contain a request_uri parameter
2022-04-11 21:40:30 SUCCESS
ValidateEncryptedRequestObjectHasKid
kid was found in the encrypted request object header
kid
3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6
2022-04-11 21:40:30 SUCCESS
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
alg
PS256
2022-04-11 21:40:30
FAPIBrazilValidateRequestObjectIdTokenACRClaims
acr claim is not requested
2022-04-11 21:40:30 SUCCESS
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Apr 11, 2022, 10:10:29 PM"
2022-04-11 21:40:30 SUCCESS
FAPI1AdvancedValidateRequestObjectNBFClaim
nbf claim is valid
nbf
"Apr 11, 2022, 9:40:29 PM"
now
"Apr 11, 2022, 9:40:30 PM"
2022-04-11 21:40:30
ValidateRequestObjectClaims
Request object does not contain a max_age claim
2022-04-11 21:40:30 SUCCESS
ValidateRequestObjectClaims
Request object claims passed all validation checks
2022-04-11 21:40:30 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2022-04-11 21:40:30 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2022-04-11 21:40:30 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2022-04-11 21:40:30 SUCCESS
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
request_object
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.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.IbxprV2tamj3RF2p4h7uwaZmSRVqj8fFoR7vi6jLhdZc47drPuLfgtaPq0tOgkDzuuptgXhsztKA5fJ9U6Font_CRSarU5rUaXnkJWkLRTk-Py57guYAzDYGKmjRwWb3SrrIBJlzJNsl57MR44po0D_ZhzQkU0bt1qDLrzJgVijDK0fGMfkOK6crOtj_Oyz8xVT8-RI6RpHmzIHcV4Sh3O3QE_LKSzUIfjgulBoQDM8tUrkP0WNeKbthdxbEQqh6M6qEJl-rMmHW8xmqDZuqSFAMZDUcE2euOiMRCJjYfnaTrfPp5l7H6IbdivrWFtS_XM7e3hP9tSV3DodKtSRChg
request_object_signing_alg
PS256
jwk
Sun RSA public key, 2048 bits
  params: null
  modulus: 20119295304009516311190391668853499906772160384787819465246930140952650527352983481923489277850717619239235654943902531781232577954793402186569031944611083154776407411245155421117523068859956953200109492511351952744474803732730278314697405605110643068797336324196376840961738840025412995070127252143121706336652111414900824867891473870663692606816232494200714479267239820219432021227604116790221600147770859041177092325748308602358921571122654766715070577443397801872654891225909291716159963977734891894591335442042301421252349575359848287773145166719392893383330704569533859334524901681511372983760867188554139632703
  public exponent: 65537
2022-04-11 21:40:30 SUCCESS
EnsureMatchingRedirectUriInRequestObject
Redirect URI matched
actual
https://tpp.openfinance.celcoin.dev/signin-oidc
2022-04-11 21:40:30 SUCCESS
EnsureRequestObjectContainsCodeChallengeWhenUsingPAR
Found required PKCE parameters in request
code_challenge_method
S256
code_challenge
RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE
2022-04-11 21:40:30 SUCCESS
CreatePAREndpointResponse
Created PAR endpoint response
request_uri
urn:ietf:params:oauth:request_uri:7d74459f-1c7c-4102-9a58-a022e3c2f314
expires_in
600
2022-04-11 21:40:30 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
201
outgoing_headers
{}
outgoing_body
{
  "request_uri": "urn:ietf:params:oauth:request_uri:7d74459f-1c7c-4102-9a58-a022e3c2f314",
  "expires_in": 600
}
outgoing_path
par
2022-04-11 21:40:30 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:40:30 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-11 21:40:30 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "tls_client_auth"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-04-11 21:40:30 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/jwks
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json, application/jwk-set+json",
  "cookie": "JSESSIONID\u003d318CC36A73B692F281EAAF19CA2B4450",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:40:30 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-11 21:40:30 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
outgoing_path
jwks
2022-04-11 21:40:30 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/authorize
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003d318CC36A73B692F281EAAF19CA2B4450",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/authorize
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "response_type": "code id_token",
  "scope": "openid profile consent:urn:conformance:oidf:TjHU5pMHhc accounts resources",
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "d6b0dd23161f48abbd2ae9171f156634",
  "nonce": "QlVJsmRX/HLYtFPSO3yBhMms5ZoRRYNC/gU8PWhNcmQ\u003d",
  "response_mode": "form_post",
  "code_challenge": "RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE",
  "request_uri": "urn:ietf:params:oauth:request_uri:7d74459f-1c7c-4102-9a58-a022e3c2f314"
}
incoming_body
2022-04-11 21:40:30 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Authorization endpoint
2022-04-11 21:40:30 SUCCESS
EnsureAuthorizationRequestDoesNotContainRequestWhenUsingPAR
Request does not contain a request parameter
2022-04-11 21:40:30 SUCCESS
ValidateEncryptedRequestObjectHasKid
kid was found in the encrypted request object header
kid
3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6
2022-04-11 21:40:30 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "response_type": "code id_token",
  "scope": "openid profile consent:urn:conformance:oidf:TjHU5pMHhc resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers",
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "2d7a09a999d94501ac4448048192a764",
  "nonce": "QlVJsmRX/HLYtFPSO3yBhMms5ZoRRYNC/gU8PWhNcmQ\u003d",
  "response_mode": "form_post",
  "code_challenge": "RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE",
  "iss": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "code_challenge_method": "S256",
  "acr": {
    "loa2": "urn:brasil:openbanking:loa2",
    "loa3": "urn:brasil:openbanking:loa3"
  },
  "aud": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "nbf": 1649713229,
  "exp": 1649715029,
  "iat": 1649713229
}
2022-04-11 21:40:30 SUCCESS
EnsureClientIdInAuthorizationRequestParametersMatchRequestObject
client_id http request parameter value matches client_id in request object
2022-04-11 21:40:30 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid profile consent:urn:conformance:oidf:TjHU5pMHhc resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers
2022-04-11 21:40:30 SUCCESS
FAPIBrazilValidateConsentScope
Found consent scope in request
actual
[
  "openid",
  "profile",
  "consent:urn:conformance:oidf:TjHU5pMHhc",
  "resources",
  "accounts",
  "credit-cards-accounts",
  "loans",
  "financings",
  "unarranged-accounts-overdraft",
  "invoice-financings",
  "customers"
]
expected
consent:urn:conformance:oidf:TjHU5pMHhc
2022-04-11 21:40:30 SUCCESS
EnsureScopeContainsAccounts
Found accounts scope in request
actual
[
  "openid",
  "profile",
  "consent:urn:conformance:oidf:TjHU5pMHhc",
  "resources",
  "accounts",
  "credit-cards-accounts",
  "loans",
  "financings",
  "unarranged-accounts-overdraft",
  "invoice-financings",
  "customers"
]
2022-04-11 21:40:30 SUCCESS
EnsureResponseTypeIsCodeIdToken
Response type is expected value
expected
code id_token
2022-04-11 21:40:30 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid",
  "profile",
  "consent:urn:conformance:oidf:TjHU5pMHhc",
  "resources",
  "accounts",
  "credit-cards-accounts",
  "loans",
  "financings",
  "unarranged-accounts-overdraft",
  "invoice-financings",
  "customers"
]
expected
openid
2022-04-11 21:40:30 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:40:30 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
YhppUI92psDzkaXEcFkdOLdD7MDIIpRw
2022-04-11 21:40:30 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
QlVJsmRX/HLYtFPSO3yBhMms5ZoRRYNC/gU8PWhNcmQ=
2022-04-11 21:40:30 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash
AiDv8lP4bBs1XCbzcEv8Pg
2022-04-11 21:40:30 SUCCESS
CalculateSHash
Successful s_hash encoding
s_hash
-SWRk6tqmHRJpflbqSL86Q
2022-04-11 21:40:30 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/
sub
user-subject-1234531
aud
ed515952-455b-4639-a3f5-c50f3e51c08c
nonce
QlVJsmRX/HLYtFPSO3yBhMms5ZoRRYNC/gU8PWhNcmQ=
iat
1649713230
exp
1649713530
2022-04-11 21:40:30
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Request object does not contain a claims element.id_token
2022-04-11 21:40:30 SUCCESS
AddCHashToIdTokenClaims
Added c_hash to ID token claims
c_hash
AiDv8lP4bBs1XCbzcEv8Pg
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "sub": "user-subject-1234531",
  "aud": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "nonce": "QlVJsmRX/HLYtFPSO3yBhMms5ZoRRYNC/gU8PWhNcmQ\u003d",
  "iat": 1649713230,
  "exp": 1649713530,
  "c_hash": "AiDv8lP4bBs1XCbzcEv8Pg"
}
2022-04-11 21:40:30 SUCCESS
AddSHashToIdTokenClaims
Added s_hash to ID token claims
s_hash
-SWRk6tqmHRJpflbqSL86Q
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "sub": "user-subject-1234531",
  "aud": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "nonce": "QlVJsmRX/HLYtFPSO3yBhMms5ZoRRYNC/gU8PWhNcmQ\u003d",
  "iat": 1649713230,
  "exp": 1649713530,
  "c_hash": "AiDv8lP4bBs1XCbzcEv8Pg",
  "s_hash": "-SWRk6tqmHRJpflbqSL86Q"
}
2022-04-11 21:40:30 INFO
AddAtHashToIdTokenClaims
Skipped evaluation due to missing required string: at_hash
expected
at_hash
2022-04-11 21:40:30 INFO
FAPIBrazilAddACRClaimToIdTokenClaims
Skipped evaluation due to missing required string: requested_id_token_acr_values
expected
requested_id_token_acr_values
2022-04-11 21:40:30 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImVkNTE1OTUyLTQ1NWItNDYzOS1hM2Y1LWM1MGYzZTUxYzA4YyIsImNfaGFzaCI6IkFpRHY4bFA0YkJzMVhDYnpjRXY4UGciLCJzX2hhc2giOiItU1dSazZ0cW1IUkpwZmxicVNMODZRIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTM1MzAsIm5vbmNlIjoiUWxWSnNtUlhcL0hMWXRGUFNPM3lCaE1tczVab1JSWU5DXC9nVThQV2hOY21RPSIsImlhdCI6MTY0OTcxMzIzMH0.kedcyXNsvRP-JDg-LHVRvhrU99WZztw1a-Oj3IzQWJdwCQy8Nq15MqEXHVTxkDaUqcKajWGTWMi1D3KX11iSufAJMVrcXQrmbB9_LT26LV7oW6fb0p8YXGbvyp1eGxBNqgKhZ9C6yqp0xMBO_mk6oNVgbEuTq5hfyTVRQaH9b1NvY4DeH3_Rmv5PgPrZiQokd3-v-horqdydsAm2f8X9IVAwW_n5A82YiajJKiU_GUHlo8kvxKQE-YJiuiVcgLe58lwZM7L6kRFgz9QpJmaJ88nMo9iYZ2RuSq9OTbBJZEboTj3XtQppPotWD7et8T-rRRrp8Mzs-lJde067KCTw9Q
2022-04-11 21:40:30 SUCCESS
FAPIBrazilChangeConsentStatusToAuthorized
Changed consent status to AUTHORISED
consent
{
  "data": {
    "consentId": "urn:conformance:oidf:TjHU5pMHhc",
    "creationDateTime": "2022-04-11T21:40:29Z",
    "status": "AUTHORISED",
    "statusUpdateDateTime": "2022-04-11T21:40:30Z",
    "permissions": [
      "ACCOUNTS_READ",
      "ACCOUNTS_BALANCES_READ",
      "RESOURCES_READ"
    ],
    "expirationDateTime": "2022-04-11T23:40:29Z",
    "transactionFromDateTime": "2022-04-11T21:35:29Z",
    "transactionToDateTime": "2022-04-11T23:40:29Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Partyconsents/v1/consents"
    }
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-04-11T21:40:29Z"
  }
}
2022-04-11 21:40:30 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "2d7a09a999d94501ac4448048192a764"
}
2022-04-11 21:40:30 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "2d7a09a999d94501ac4448048192a764",
  "code": "YhppUI92psDzkaXEcFkdOLdD7MDIIpRw"
}
2022-04-11 21:40:30 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "2d7a09a999d94501ac4448048192a764",
  "code": "YhppUI92psDzkaXEcFkdOLdD7MDIIpRw",
  "id_token": "eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImVkNTE1OTUyLTQ1NWItNDYzOS1hM2Y1LWM1MGYzZTUxYzA4YyIsImNfaGFzaCI6IkFpRHY4bFA0YkJzMVhDYnpjRXY4UGciLCJzX2hhc2giOiItU1dSazZ0cW1IUkpwZmxicVNMODZRIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTM1MzAsIm5vbmNlIjoiUWxWSnNtUlhcL0hMWXRGUFNPM3lCaE1tczVab1JSWU5DXC9nVThQV2hOY21RPSIsImlhdCI6MTY0OTcxMzIzMH0.kedcyXNsvRP-JDg-LHVRvhrU99WZztw1a-Oj3IzQWJdwCQy8Nq15MqEXHVTxkDaUqcKajWGTWMi1D3KX11iSufAJMVrcXQrmbB9_LT26LV7oW6fb0p8YXGbvyp1eGxBNqgKhZ9C6yqp0xMBO_mk6oNVgbEuTq5hfyTVRQaH9b1NvY4DeH3_Rmv5PgPrZiQokd3-v-horqdydsAm2f8X9IVAwW_n5A82YiajJKiU_GUHlo8kvxKQE-YJiuiVcgLe58lwZM7L6kRFgz9QpJmaJ88nMo9iYZ2RuSq9OTbBJZEboTj3XtQppPotWD7et8T-rRRrp8Mzs-lJde067KCTw9Q"
}
2022-04-11 21:40:30
SendAuthorizationResponseWithResponseModeFragment
Redirecting back to client
uri
https://tpp.openfinance.celcoin.dev/signin-oidc#state=2d7a09a999d94501ac4448048192a764&code=YhppUI92psDzkaXEcFkdOLdD7MDIIpRw&id_token=eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImVkNTE1OTUyLTQ1NWItNDYzOS1hM2Y1LWM1MGYzZTUxYzA4YyIsImNfaGFzaCI6IkFpRHY4bFA0YkJzMVhDYnpjRXY4UGciLCJzX2hhc2giOiItU1dSazZ0cW1IUkpwZmxicVNMODZRIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTM1MzAsIm5vbmNlIjoiUWxWSnNtUlhcL0hMWXRGUFNPM3lCaE1tczVab1JSWU5DXC9nVThQV2hOY21RPSIsImlhdCI6MTY0OTcxMzIzMH0.kedcyXNsvRP-JDg-LHVRvhrU99WZztw1a-Oj3IzQWJdwCQy8Nq15MqEXHVTxkDaUqcKajWGTWMi1D3KX11iSufAJMVrcXQrmbB9_LT26LV7oW6fb0p8YXGbvyp1eGxBNqgKhZ9C6yqp0xMBO_mk6oNVgbEuTq5hfyTVRQaH9b1NvY4DeH3_Rmv5PgPrZiQokd3-v-horqdydsAm2f8X9IVAwW_n5A82YiajJKiU_GUHlo8kvxKQE-YJiuiVcgLe58lwZM7L6kRFgz9QpJmaJ88nMo9iYZ2RuSq9OTbBJZEboTj3XtQppPotWD7et8T-rRRrp8Mzs-lJde067KCTw9Q
2022-04-11 21:40:30 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://tpp.openfinance.celcoin.dev/signin-oidc#state=2d7a09a999d94501ac4448048192a764&code=YhppUI92psDzkaXEcFkdOLdD7MDIIpRw&id_token=eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImVkNTE1OTUyLTQ1NWItNDYzOS1hM2Y1LWM1MGYzZTUxYzA4YyIsImNfaGFzaCI6IkFpRHY4bFA0YkJzMVhDYnpjRXY4UGciLCJzX2hhc2giOiItU1dSazZ0cW1IUkpwZmxicVNMODZRIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTM1MzAsIm5vbmNlIjoiUWxWSnNtUlhcL0hMWXRGUFNPM3lCaE1tczVab1JSWU5DXC9nVThQV2hOY21RPSIsImlhdCI6MTY0OTcxMzIzMH0.kedcyXNsvRP-JDg-LHVRvhrU99WZztw1a-Oj3IzQWJdwCQy8Nq15MqEXHVTxkDaUqcKajWGTWMi1D3KX11iSufAJMVrcXQrmbB9_LT26LV7oW6fb0p8YXGbvyp1eGxBNqgKhZ9C6yqp0xMBO_mk6oNVgbEuTq5hfyTVRQaH9b1NvY4DeH3_Rmv5PgPrZiQokd3-v-horqdydsAm2f8X9IVAwW_n5A82YiajJKiU_GUHlo8kvxKQE-YJiuiVcgLe58lwZM7L6kRFgz9QpJmaJ88nMo9iYZ2RuSq9OTbBJZEboTj3XtQppPotWD7et8T-rRRrp8Mzs-lJde067KCTw9Q]
outgoing_path
authorize
2022-04-11 21:40:33 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003dD0D709488DB14C00A4C64021703750A9",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "243"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "YhppUI92psDzkaXEcFkdOLdD7MDIIpRw",
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "code_verifier": "ed515952-455b-4639-a3f5-c50f3e51c08curn:con",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=YhppUI92psDzkaXEcFkdOLdD7MDIIpRw&redirect_uri=https%3A%2F%2Ftpp.openfinance.celcoin.dev%2Fsignin-oidc&code_verifier=ed515952-455b-4639-a3f5-c50f3e51c08curn%3Acon&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:40:33 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-11 21:40:33 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:40:33 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:40:33 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:40:33 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:40:33 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-11 21:40:33 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-11 21:40:33 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
YhppUI92psDzkaXEcFkdOLdD7MDIIpRw
2022-04-11 21:40:33 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
https://tpp.openfinance.celcoin.dev/signin-oidc
2022-04-11 21:40:33 SUCCESS
ValidateCodeVerifierWithS256
Validated code_verifier successfully
code_challenge_method
S256
code_verifier
ed515952-455b-4639-a3f5-c50f3e51c08curn:con
code_challenge
RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE
2022-04-11 21:40:33 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
jF68k5VwcMx0nkW7xlVbPU0t1JFk2CTqtnwRaGIIrMxAigbsPf
2022-04-11 21:40:33 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
0Ia14lUUnXx-KFCmHECrnQ
2022-04-11 21:40:33
CreateRefreshToken
Created refresh token
refresh_token
peXJrdSVArOVecpkCtfPSHKORIUOARRexIafblmfucxhxotrSx6972245472<+=);
2022-04-11 21:40:33 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/
sub
user-subject-1234531
aud
ed515952-455b-4639-a3f5-c50f3e51c08c
nonce
QlVJsmRX/HLYtFPSO3yBhMms5ZoRRYNC/gU8PWhNcmQ=
iat
1649713233
exp
1649713533
2022-04-11 21:40:33
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Request object does not contain a claims element.id_token
2022-04-11 21:40:33 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
0Ia14lUUnXx-KFCmHECrnQ
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "sub": "user-subject-1234531",
  "aud": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "nonce": "QlVJsmRX/HLYtFPSO3yBhMms5ZoRRYNC/gU8PWhNcmQ\u003d",
  "iat": 1649713233,
  "exp": 1649713533,
  "at_hash": "0Ia14lUUnXx-KFCmHECrnQ"
}
2022-04-11 21:40:33 INFO
FAPIBrazilAddACRClaimToIdTokenClaims
Skipped evaluation due to missing required string: requested_id_token_acr_values
expected
requested_id_token_acr_values
2022-04-11 21:40:33 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiMElhMTRsVVVuWHgtS0ZDbUhFQ3JuUSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTM1MzMsIm5vbmNlIjoiUWxWSnNtUlhcL0hMWXRGUFNPM3lCaE1tczVab1JSWU5DXC9nVThQV2hOY21RPSIsImlhdCI6MTY0OTcxMzIzM30.CvYYoM69IUzxeCjqGKLEJbqDR_pkQMfKoVXVZRNEVL7WlFqYA89SVP4Wcmsk3W5AYdlI-Yeg7ENwPXjz1y3xOZEneEAiPzxsevHrHTQXiZdHYNPqbH167BZu-MnPNc2SQQysjYzdN3INVj_aRJuhZVyleTdt8Yc0oiqPoypttDJFh17InJLGkQg_qrhDmX69uqF6hwAfo9PDmef5fRqDxIFn6vRz1WJ0OphX1v9PLijIHusGxROeJX65vWrfI6JuufZ4uUTZWQhi56FY8kMmsfoF6mTNQpZe-LfQAQtQa3Y5pQC-ktOEA_bGwJaDbylbvMw3dkDVmiuGRuv8laCGSg
2022-04-11 21:40:33 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
jF68k5VwcMx0nkW7xlVbPU0t1JFk2CTqtnwRaGIIrMxAigbsPf
token_type
Bearer
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiMElhMTRsVVVuWHgtS0ZDbUhFQ3JuUSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTM1MzMsIm5vbmNlIjoiUWxWSnNtUlhcL0hMWXRGUFNPM3lCaE1tczVab1JSWU5DXC9nVThQV2hOY21RPSIsImlhdCI6MTY0OTcxMzIzM30.CvYYoM69IUzxeCjqGKLEJbqDR_pkQMfKoVXVZRNEVL7WlFqYA89SVP4Wcmsk3W5AYdlI-Yeg7ENwPXjz1y3xOZEneEAiPzxsevHrHTQXiZdHYNPqbH167BZu-MnPNc2SQQysjYzdN3INVj_aRJuhZVyleTdt8Yc0oiqPoypttDJFh17InJLGkQg_qrhDmX69uqF6hwAfo9PDmef5fRqDxIFn6vRz1WJ0OphX1v9PLijIHusGxROeJX65vWrfI6JuufZ4uUTZWQhi56FY8kMmsfoF6mTNQpZe-LfQAQtQa3Y5pQC-ktOEA_bGwJaDbylbvMw3dkDVmiuGRuv8laCGSg
refresh_token
peXJrdSVArOVecpkCtfPSHKORIUOARRexIafblmfucxhxotrSx6972245472<+=);
scope
openid profile consent:urn:conformance:oidf:TjHU5pMHhc resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers
2022-04-11 21:40:33
RemoveIssuedAccessTokenFromEnvironment
Removed access_token and token_type from environment
2022-04-11 21:40:33 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "jF68k5VwcMx0nkW7xlVbPU0t1JFk2CTqtnwRaGIIrMxAigbsPf",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiMElhMTRsVVVuWHgtS0ZDbUhFQ3JuUSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTM1MzMsIm5vbmNlIjoiUWxWSnNtUlhcL0hMWXRGUFNPM3lCaE1tczVab1JSWU5DXC9nVThQV2hOY21RPSIsImlhdCI6MTY0OTcxMzIzM30.CvYYoM69IUzxeCjqGKLEJbqDR_pkQMfKoVXVZRNEVL7WlFqYA89SVP4Wcmsk3W5AYdlI-Yeg7ENwPXjz1y3xOZEneEAiPzxsevHrHTQXiZdHYNPqbH167BZu-MnPNc2SQQysjYzdN3INVj_aRJuhZVyleTdt8Yc0oiqPoypttDJFh17InJLGkQg_qrhDmX69uqF6hwAfo9PDmef5fRqDxIFn6vRz1WJ0OphX1v9PLijIHusGxROeJX65vWrfI6JuufZ4uUTZWQhi56FY8kMmsfoF6mTNQpZe-LfQAQtQa3Y5pQC-ktOEA_bGwJaDbylbvMw3dkDVmiuGRuv8laCGSg",
  "refresh_token": "peXJrdSVArOVecpkCtfPSHKORIUOARRexIafblmfucxhxotrSx6972245472\u003c+\u003d);",
  "scope": "openid profile consent:urn:conformance:oidf:TjHU5pMHhc resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers"
}
outgoing_path
token
2022-04-11 21:40:33 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003dD0D709488DB14C00A4C64021703750A9",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "161"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "grant_type": "refresh_token",
  "refresh_token": "peXJrdSVArOVecpkCtfPSHKORIUOARRexIafblmfucxhxotrSx6972245472\u003c+\u003d);",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=refresh_token&refresh_token=peXJrdSVArOVecpkCtfPSHKORIUOARRexIafblmfucxhxotrSx6972245472%3C%2B%3D%29%3B&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:40:33 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-11 21:40:33 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:40:33 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:40:33 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:40:33 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:40:33 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-11 21:40:33 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-11 21:40:33 SUCCESS
ValidateRefreshToken
refresh_token parameter matches the expected value.
refresh_token
peXJrdSVArOVecpkCtfPSHKORIUOARRexIafblmfucxhxotrSx6972245472<+=);
2022-04-11 21:40:33 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
PW9TKcBcqSahcagkyGw3aSLBpjfxigDXGp7aUpkmu8vOmLQgv6
2022-04-11 21:40:33 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
sPfC2HDSZe7wxn9KVLkpNA
2022-04-11 21:40:33
CreateRefreshToken
Created refresh token
refresh_token
KdSfBlEqOLlhNKnRpGdJLyFFtBqdlEiOjWbesouUQyljfWIXws2292026839<@}=[
2022-04-11 21:40:33 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
PW9TKcBcqSahcagkyGw3aSLBpjfxigDXGp7aUpkmu8vOmLQgv6
token_type
Bearer
refresh_token
KdSfBlEqOLlhNKnRpGdJLyFFtBqdlEiOjWbesouUQyljfWIXws2292026839<@}=[
scope
openid profile consent:urn:conformance:oidf:TjHU5pMHhc resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers
2022-04-11 21:40:33 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "PW9TKcBcqSahcagkyGw3aSLBpjfxigDXGp7aUpkmu8vOmLQgv6",
  "token_type": "Bearer",
  "refresh_token": "KdSfBlEqOLlhNKnRpGdJLyFFtBqdlEiOjWbesouUQyljfWIXws2292026839\u003c@}\u003d[",
  "scope": "openid profile consent:urn:conformance:oidf:TjHU5pMHhc resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers"
}
outgoing_path
token
2022-04-11 21:40:33 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/accounts/v1/accounts
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer PW9TKcBcqSahcagkyGw3aSLBpjfxigDXGp7aUpkmu8vOmLQgv6",
  "cookie": "JSESSIONID\u003dD0D709488DB14C00A4C64021703750A9",
  "connection": "close"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/accounts/v1/accounts
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:40:33 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Accounts endpoint (always rejected)
2022-04-11 21:40:33 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-04-11 21:40:33 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
accounts/v1/accounts
2022-04-11 21:41:11 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:41:11 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-11 21:41:12 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "tls_client_auth"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-04-11 21:41:57 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003d497C1F68FE83CA10A64397C80D1CFE36",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "243"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "YhppUI92psDzkaXEcFkdOLdD7MDIIpRw",
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "code_verifier": "ed515952-455b-4639-a3f5-c50f3e51c08curn:con",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=YhppUI92psDzkaXEcFkdOLdD7MDIIpRw&redirect_uri=https%3A%2F%2Ftpp.openfinance.celcoin.dev%2Fsignin-oidc&code_verifier=ed515952-455b-4639-a3f5-c50f3e51c08curn%3Acon&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:41:57 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-11 21:41:57 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:41:57 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:41:57 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:41:57 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:41:57 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-11 21:41:57 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-11 21:41:57 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
YhppUI92psDzkaXEcFkdOLdD7MDIIpRw
2022-04-11 21:41:57 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
https://tpp.openfinance.celcoin.dev/signin-oidc
2022-04-11 21:41:57 SUCCESS
ValidateCodeVerifierWithS256
Validated code_verifier successfully
code_challenge_method
S256
code_verifier
ed515952-455b-4639-a3f5-c50f3e51c08curn:con
code_challenge
RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE
2022-04-11 21:41:57 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
0iXKiu1f2vXGiXDSJs4ZDG5rGKKEq4tgmyl4i4AXV4blU1HatP
2022-04-11 21:41:57 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
JBfJAbbV9xbZZZBTnGmS_g
2022-04-11 21:41:57
CreateRefreshToken
Created refresh token
refresh_token
cBkgtKOnlgZMoeTOlQPKlzDBPCakIFTBDrsrxGSPzkbPtLIlIk0979734594\{>,/
2022-04-11 21:41:57 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/
sub
user-subject-1234531
aud
ed515952-455b-4639-a3f5-c50f3e51c08c
nonce
QlVJsmRX/HLYtFPSO3yBhMms5ZoRRYNC/gU8PWhNcmQ=
iat
1649713317
exp
1649713617
2022-04-11 21:41:57
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Request object does not contain a claims element.id_token
2022-04-11 21:41:57 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
JBfJAbbV9xbZZZBTnGmS_g
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "sub": "user-subject-1234531",
  "aud": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "nonce": "QlVJsmRX/HLYtFPSO3yBhMms5ZoRRYNC/gU8PWhNcmQ\u003d",
  "iat": 1649713317,
  "exp": 1649713617,
  "at_hash": "JBfJAbbV9xbZZZBTnGmS_g"
}
2022-04-11 21:41:57 INFO
FAPIBrazilAddACRClaimToIdTokenClaims
Skipped evaluation due to missing required string: requested_id_token_acr_values
expected
requested_id_token_acr_values
2022-04-11 21:41:57 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiSkJmSkFiYlY5eGJaWlpCVG5HbVNfZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTM2MTcsIm5vbmNlIjoiUWxWSnNtUlhcL0hMWXRGUFNPM3lCaE1tczVab1JSWU5DXC9nVThQV2hOY21RPSIsImlhdCI6MTY0OTcxMzMxN30.TokczdGnTEadpHlvHU10zK1PAWQf8x_yrubwS2NLoz0ZF_SfACmzEur2QtJDetgIc6UqIrvxHMOzg0cyhNXHFN2HKeb4_1dfMY-jncEg0m1NBPUhO1qZent-YQoYxRnIZg28XoP2bIF_PLJajpwwF_ntwMgFE4_6dDGhMVjvhcW31mn7BwpOndHmy0jQyAi8HgkldHaIhXEypoK0-pQOK-QCer9E5PhyxcKUk_8eAY9Jem7l0atVlGbYjELl-C0jVcVS6sZD02iw-bIOj-6nMTadTAOeJlNs311sbNojdBuhqR544cFvHedQRC98PdOvB4OLY2p7p2KBYo-n_6GRNw
2022-04-11 21:41:57 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
0iXKiu1f2vXGiXDSJs4ZDG5rGKKEq4tgmyl4i4AXV4blU1HatP
token_type
Bearer
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiSkJmSkFiYlY5eGJaWlpCVG5HbVNfZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTM2MTcsIm5vbmNlIjoiUWxWSnNtUlhcL0hMWXRGUFNPM3lCaE1tczVab1JSWU5DXC9nVThQV2hOY21RPSIsImlhdCI6MTY0OTcxMzMxN30.TokczdGnTEadpHlvHU10zK1PAWQf8x_yrubwS2NLoz0ZF_SfACmzEur2QtJDetgIc6UqIrvxHMOzg0cyhNXHFN2HKeb4_1dfMY-jncEg0m1NBPUhO1qZent-YQoYxRnIZg28XoP2bIF_PLJajpwwF_ntwMgFE4_6dDGhMVjvhcW31mn7BwpOndHmy0jQyAi8HgkldHaIhXEypoK0-pQOK-QCer9E5PhyxcKUk_8eAY9Jem7l0atVlGbYjELl-C0jVcVS6sZD02iw-bIOj-6nMTadTAOeJlNs311sbNojdBuhqR544cFvHedQRC98PdOvB4OLY2p7p2KBYo-n_6GRNw
refresh_token
cBkgtKOnlgZMoeTOlQPKlzDBPCakIFTBDrsrxGSPzkbPtLIlIk0979734594\{>,/
scope
openid profile consent:urn:conformance:oidf:TjHU5pMHhc resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers
2022-04-11 21:41:57
RemoveIssuedAccessTokenFromEnvironment
Removed access_token and token_type from environment
2022-04-11 21:41:57 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "0iXKiu1f2vXGiXDSJs4ZDG5rGKKEq4tgmyl4i4AXV4blU1HatP",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiSkJmSkFiYlY5eGJaWlpCVG5HbVNfZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTM2MTcsIm5vbmNlIjoiUWxWSnNtUlhcL0hMWXRGUFNPM3lCaE1tczVab1JSWU5DXC9nVThQV2hOY21RPSIsImlhdCI6MTY0OTcxMzMxN30.TokczdGnTEadpHlvHU10zK1PAWQf8x_yrubwS2NLoz0ZF_SfACmzEur2QtJDetgIc6UqIrvxHMOzg0cyhNXHFN2HKeb4_1dfMY-jncEg0m1NBPUhO1qZent-YQoYxRnIZg28XoP2bIF_PLJajpwwF_ntwMgFE4_6dDGhMVjvhcW31mn7BwpOndHmy0jQyAi8HgkldHaIhXEypoK0-pQOK-QCer9E5PhyxcKUk_8eAY9Jem7l0atVlGbYjELl-C0jVcVS6sZD02iw-bIOj-6nMTadTAOeJlNs311sbNojdBuhqR544cFvHedQRC98PdOvB4OLY2p7p2KBYo-n_6GRNw",
  "refresh_token": "cBkgtKOnlgZMoeTOlQPKlzDBPCakIFTBDrsrxGSPzkbPtLIlIk0979734594\\{\u003e,/",
  "scope": "openid profile consent:urn:conformance:oidf:TjHU5pMHhc resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers"
}
outgoing_path
token
2022-04-11 21:42:17 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003d497C1F68FE83CA10A64397C80D1CFE36",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "161"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "grant_type": "refresh_token",
  "refresh_token": "cBkgtKOnlgZMoeTOlQPKlzDBPCakIFTBDrsrxGSPzkbPtLIlIk0979734594\\{\u003e,/",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=refresh_token&refresh_token=cBkgtKOnlgZMoeTOlQPKlzDBPCakIFTBDrsrxGSPzkbPtLIlIk0979734594%5C%7B%3E%2C%2F&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:42:17 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-11 21:42:17 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:42:17 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:42:17 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:42:17 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL
BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx
FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB
TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5
MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD
o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG
A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD
VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw
MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC
NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx
MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M
W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y
6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p
pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV
1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1
YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO
tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v
b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f
BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy
YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j
ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw
ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH
AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0
aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp
bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz
IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np
b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g
U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1
bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w
a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB
CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD
aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv
4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv
H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go
MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB
APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1
-----END CERTIFICATE-----
2022-04-11 21:42:17 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-11 21:42:17 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-11 21:42:17 SUCCESS
ValidateRefreshToken
refresh_token parameter matches the expected value.
refresh_token
cBkgtKOnlgZMoeTOlQPKlzDBPCakIFTBDrsrxGSPzkbPtLIlIk0979734594\{>,/
2022-04-11 21:42:17 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
QBKpBNidIHPjEg2QkVXs05gb737okxJafbbk9jdSTs4ORDEAxr
2022-04-11 21:42:17 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
8ZOduMKEWZYBvnmAClqbVA
2022-04-11 21:42:17
CreateRefreshToken
Created refresh token
refresh_token
HViAOzSiCfFGgSrMcLdnYOjTfPtXxTdoyEUDkNJrrAnTbwgINz4555008651#,(+-
2022-04-11 21:42:17 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
QBKpBNidIHPjEg2QkVXs05gb737okxJafbbk9jdSTs4ORDEAxr
token_type
Bearer
refresh_token
HViAOzSiCfFGgSrMcLdnYOjTfPtXxTdoyEUDkNJrrAnTbwgINz4555008651#,(+-
scope
openid profile consent:urn:conformance:oidf:TjHU5pMHhc resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers
2022-04-11 21:42:17 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "QBKpBNidIHPjEg2QkVXs05gb737okxJafbbk9jdSTs4ORDEAxr",
  "token_type": "Bearer",
  "refresh_token": "HViAOzSiCfFGgSrMcLdnYOjTfPtXxTdoyEUDkNJrrAnTbwgINz4555008651#,(+-",
  "scope": "openid profile consent:urn:conformance:oidf:TjHU5pMHhc resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers"
}
outgoing_path
token
2022-04-11 21:42:21 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/accounts/v1/accounts
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer QBKpBNidIHPjEg2QkVXs05gb737okxJafbbk9jdSTs4ORDEAxr",
  "cookie": "JSESSIONID\u003d497C1F68FE83CA10A64397C80D1CFE36",
  "connection": "close"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/accounts/v1/accounts
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:42:21 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Accounts endpoint
2022-04-11 21:42:21 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:42:21 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:42:21 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:42:21 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-04-11 21:42:21 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
QBKpBNidIHPjEg2QkVXs05gb737okxJafbbk9jdSTs4ORDEAxr
2022-04-11 21:42:21 SUCCESS
RequireBearerAccessToken
Found access token in request
actual
QBKpBNidIHPjEg2QkVXs05gb737okxJafbbk9jdSTs4ORDEAxr
2022-04-11 21:42:21 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2022-04-11 21:42:21 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2022-04-11 21:42:21 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2022-04-11 21:42:21 SUCCESS
FAPIBrazilEnsureAuthorizationRequestScopesContainAccounts
'accounts' was included in authorization request scopes
actual
openid profile consent:urn:conformance:oidf:TjHU5pMHhc resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers
expected
accounts
2022-04-11 21:42:21 INFO
CreateFapiInteractionIdIfNeeded
Found existing FAPI interaction ID
fapi_interaction_id
87e6ead4-f80a-4723-a07b-44938fa63eed
2022-04-11 21:42:21 SUCCESS
CreateFAPIAccountEndpointResponse
Created account response object
accounts_endpoint_response
{
  "conformance-test-finished": "true"
}
accounts_endpoint_response_headers
{
  "x-fapi-interaction-id": "87e6ead4-f80a-4723-a07b-44938fa63eed",
  "content-type": "application/json; charset\u003dUTF-8"
}
2022-04-11 21:42:21 SUCCESS
CreateBrazilAccountsEndpointResponse
Created Brazil accounts response (Please note that this is a hardcoded response copied from API documentation)
accounts_endpoint_response
{
  "data": [
    {
      "brandName": "Organização A",
      "companyCnpj": "21128159000166",
      "type": "CONTA_DEPOSITO_A_VISTA",
      "compeCode": "001",
      "branchCode": "6272",
      "number": "94088392",
      "checkDigit": "4",
      "accountId": "92792126019929279212650822221989319252576"
    }
  ],
  "links": {
    "self": "https://api.banco.com.br/open-banking/api/v1/resource",
    "first": "https://api.banco.com.br/open-banking/api/v1/resource",
    "prev": "https://api.banco.com.br/open-banking/api/v1/resource",
    "next": "https://api.banco.com.br/open-banking/api/v1/resource",
    "last": "https://api.banco.com.br/open-banking/api/v1/resource"
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-04-11T21:42:21Z"
  }
}
accounts_endpoint_response_headers
{
  "x-fapi-interaction-id": "87e6ead4-f80a-4723-a07b-44938fa63eed",
  "content-type": "application/json"
}
2022-04-11 21:42:21
ClearAccessTokenFromRequest
Condition ran but did not log anything
2022-04-11 21:42:21 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance wXmqBJLtFNw3iYW
outgoing_status_code
200
outgoing_headers
{
  "x-fapi-interaction-id": [
    "87e6ead4-f80a-4723-a07b-44938fa63eed"
  ],
  "content-type": [
    "application/json"
  ]
}
outgoing_body
{
  "data": [
    {
      "brandName": "Organização A",
      "companyCnpj": "21128159000166",
      "type": "CONTA_DEPOSITO_A_VISTA",
      "compeCode": "001",
      "branchCode": "6272",
      "number": "94088392",
      "checkDigit": "4",
      "accountId": "92792126019929279212650822221989319252576"
    }
  ],
  "links": {
    "self": "https://api.banco.com.br/open-banking/api/v1/resource",
    "first": "https://api.banco.com.br/open-banking/api/v1/resource",
    "prev": "https://api.banco.com.br/open-banking/api/v1/resource",
    "next": "https://api.banco.com.br/open-banking/api/v1/resource",
    "last": "https://api.banco.com.br/open-banking/api/v1/resource"
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-04-11T21:42:21Z"
  }
}
outgoing_path
accounts/v1/accounts
2022-04-11 21:42:21 FINISHED
fapi1-advanced-final-client-refresh-token-test
Test has run to completion
testmodule_result
PASSED
2022-04-11 21:42:57
TEST-RUNNER
Alias has now been claimed by another test
alias
Celcoin_FAPI_Relying_Party
new_test_id
jy7ODG0KjBgdHxL
Test Results