Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-04-11 21:28:05 INFO
TEST-RUNNER
Test instance x1EEfjkUfFrABJT created
baseUrl
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party
variant
{
  "client_auth_type": "mtls",
  "fapi_auth_request_method": "pushed",
  "fapi_profile": "openbanking_brazil",
  "fapi_jarm_type": "oidc",
  "fapi_response_mode": "plain_response"
}
alias
Celcoin_FAPI_Relying_Party
description
Celcoin - Client Test Accounts
planId
QdyZbNYSMad4E
config
{
  "alias": "Celcoin_FAPI_Relying_Party",
  "server": {
    "discoveryUrl": "https://aa.openfinance.celcoin.dev/.well-known/openid-configuration",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "enc",
          "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
          "e": "AQAB",
          "d": "RLiYx_6oRxst_NIb3RifPlCGuF6i5g5r0dmeAH-H__PtITFWiuLnHhT5hRh_1F1c3XZohxAXPO_5PX6O4z3fSUxXHBMFvwuGX6XVI46r4zQMBTJDukOpIKOhKYi463wqf4zeoaomIUWbBUoH34Ee2-mDOxGvRG24VbkMZq14PiMIkNTu7EXfc4ViYGia3o40YoRJOuEZDZBkLlLitTEBp7naO_vDpij1Hu9TOv7OKVU3Tt1_ujblS0KFUuEvG0hRvCRQIHuXY6EG5XxpfqimQ7uHDwihvBIgKFTvuL-7oUWD3rRUwsrZ_JqiE44yJhGXOdnIPtd3ZF5CEJtxtx5hiQ",
          "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
          "alg": "RSA-OAEP"
        },
        {
          "kty": "RSA",
          "use": "sig",
          "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
          "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
          "e": "AQAB",
          "d": "OYZyXTTnSIO_2m4YButsZIEdMOZ-PI0HdBxol_1mA9tqEivImVW7eaicIY51eDSQOCxTEbYgGw5wmWu5ixr63korPSNVbXuR2IbZ1fwkL9jl7bhM3w2Kpoxb4YZR8w3OSTh0QYi4bp3yFwNg7CijJGzfQcaXdaUHB_CeGfhv10SED5YwvA4VLOG3_NUw64B1m21FLIofnWAaosp9YKbm8I2UGuiK-Yg3maoROShtfIumLCszdSAgZmsX7mmRHFIdWlxdSXbB_M32HuKOAh2muUIMkackgwRsOKuoD1-tizRbKmWdm36NU88NHC6th3vL0nlnNKBJI0eN9c13bpsogQ",
          "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
          "x5c": [
            "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"
          ],
          "alg": "PS256"
        }
      ]
    }
  },
  "client": {
    "scope": "openid accounts",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "sig",
          "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
          "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
          "e": "AQAB",
          "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
          "x5c": [
            "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"
          ],
          "alg": "PS256"
        }
      ]
    },
    "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
    "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5\nMTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD\no28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG\nA1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD\nVQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw\nMDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC\nNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx\nMDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA\nsKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M\nW5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y\n6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p\npBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV\n1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1\nYLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV\nHQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO\ntAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v\nb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f\nBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy\nYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j\nZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw\nggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH\nAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0\naCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp\nbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz\nIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np\nb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g\nU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1\nbWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w\na2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB\nCwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD\naM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv\n4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv\nH4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go\nMJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----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\n1jKA5uU1oqqsM2pFYzjCjEmv\n-----END PRIVATE KEY-----",
    "ca": "----BEGIN CERTIFICATE-----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\np02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\n1DXIta0LpqM4pMoRMXvp9SLU0atVZLEu6Sc\u003d\n-----END CERTIFICATE-----"
  },
  "resource": {
    "resourceUrl": "https://opbbroker.openfinance.celcoin.dev/open-banking/accounts/v1/accounts",
    "consentUrl": "https://consent.openfinance.celcoin.dev/open-banking/consents/v1/consents",
    "brazilCpf": "67165276050",
    "brazilCnpj": "38576619000111",
    "brazilOrganizationId": "4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8"
  },
  "directory": {
    "discoveryUrl": "https://auth.sandbox.directory.openbankingbrasil.org.br/.well-known/openid-configuration",
    "client_id": "GDzmbynkPq5Xx9S485FFM",
    "apibase": "https://matls-api.sandbox.directory.openbankingbrasil.org.br/",
    "keystore": "https://keystore.sandbox.directory.openbankingbrasil.org.br/"
  },
  "client2": {
    "client_id": "7e99ed43-5e74-4e1a-82aa-5682a2b5436f",
    "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "sig",
          "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
          "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
          "e": "AQAB",
          "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
          "x5c": [
            "MIIG7DCCBdSgAwIBAgIUTrLrCiShohhHToplj1GN+jrMWNMwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDExNzE4MDAwMFoXDTIzMDIxNjE4MDAwMFowgeExCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMWMwGAYDVQQLDBE8VmFsaWRhdGlvbiB0eXBlPjAeBgNVBAsMFzxDZXJ0aWZpY2F0ZSBBdXRob3JpdHk+MCcGA1UECwwgPENOUEogZGEgUmVnaXN0cmF0aW9uIEF1dGhvcml0eT4xIjAgBgNVBAMMGSoub3BlbmZpbmFuY2UuY2VsY29pbi5kZXYxNDAyBgoJkiaJk/IsZAEBEyQ0ZDJmODdhOC04Y2ZjLTU0YjEtYTViNC1jYTM5MzE5ZmM4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYCH6YtsJJ+1dtYxHKTxxAB2hpfim9R+q2WIQiUp7PMmoNVypSPYiZNxoT6QgW90d+QApqCotHOySlHK/D7lz6BPnyTlVj4Gj/zP8/b1xcIm6//lTlahRuAPfg4nhHFYXVzt9XVHc8KahKLOk5MZGXcg1IrLZ0Ef//wbFL91dnI5cYa/GeSWA2YPYotKUCxQoAYiSDf7YmLknr0YH0Qf7BiSB74ckBbtN1oPTmxWDeBsY/VedroTpsZSk05aK2KxKglE+EQOiLUKqGRweOkPNaiFqWxbS6zsVCEQym1oWuuwig/cNGV8GVxRMRF5CiDLd+VTjs7fZYPIGNH9QBwQ/AgMBAAGjggMJMIIDBTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSPDbZtKSByAZXj6fT5vxxugUF+oDAfBgNVHSMEGDAWgBSGf1itF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMGUGA1UdEQReMFygFQYFYEwBAwKgDAwKSm9hbyBUZXN0ZaAZBgVgTAEDA6AQDA41OTExODEzMzAwMDEwMKAWBgVgTAEDBKANDAs2MDk1MDAyMTA5MaAQBgVgTAEDB6AHDAUwOTc4NjAOBgNVHQ8BAf8EBAMCBsAwggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBcqHz+t8xXh2KnXoKFu1Aio4xF/7HzWmAN3/4GrmDJu+kzueloDBX0WRGjqtnm5XKXmDGPmdSuXS8MsO0KLApeJvKKnH9aa2xGX7doG+/FtVCdlN9bkKYZQZ7TIgfoxj4WFEv60z4TBdJneO/oavFVKJIJcqzl9AohidzPHE5Zxld3d18ovPgAKL92JgSNgFqODGYTDN900OkCuJMsQuTWPewBTWfy9j2K44tI+hmUAjxyXFbIoX4UGxRkzMDRM2Cc8iJcwJT3iv796zCqB8X5W8tiAUBWXvSAQkE9uUBOocT2MKp3y3Tqtq108hoZ8p48IUuwdT6ltYn2LYdZt83V"
          ],
          "alg": "PS256"
        },
        {
          "kty": "RSA",
          "use": "enc",
          "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
          "e": "AQAB",
          "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
          "alg": "RSA-OAEP"
        }
      ]
    },
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5\nMTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD\no28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG\nA1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD\nVQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw\nMDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC\nNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx\nMDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA\nsKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M\nW5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y\n6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p\npBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV\n1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1\nYLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV\nHQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO\ntAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v\nb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f\nBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy\nYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j\nZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw\nggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH\nAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0\naCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp\nbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz\nIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np\nb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g\nU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1\nbWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w\na2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB\nCwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD\naM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv\n4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv\nH4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go\nMJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
    "id_token_encrypted_response_alg": "RSA-OAEP",
    "id_token_encrypted_response_enc": "A128GCM"
  },
  "publish": "summary",
  "description": "Celcoin - Client Test Accounts"
}
testName
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
2022-04-11 21:28:05 SUCCESS
FAPIBrazilGenerateServerConfiguration
Created server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true
}
issuer
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/
discoveryUrl
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
2022-04-11 21:28:05 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "d": "RLiYx_6oRxst_NIb3RifPlCGuF6i5g5r0dmeAH-H__PtITFWiuLnHhT5hRh_1F1c3XZohxAXPO_5PX6O4z3fSUxXHBMFvwuGX6XVI46r4zQMBTJDukOpIKOhKYi463wqf4zeoaomIUWbBUoH34Ee2-mDOxGvRG24VbkMZq14PiMIkNTu7EXfc4ViYGia3o40YoRJOuEZDZBkLlLitTEBp7naO_vDpij1Hu9TOv7OKVU3Tt1_ujblS0KFUuEvG0hRvCRQIHuXY6EG5XxpfqimQ7uHDwihvBIgKFTvuL-7oUWD3rRUwsrZ_JqiE44yJhGXOdnIPtd3ZF5CEJtxtx5hiQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "d": "OYZyXTTnSIO_2m4YButsZIEdMOZ-PI0HdBxol_1mA9tqEivImVW7eaicIY51eDSQOCxTEbYgGw5wmWu5ixr63korPSNVbXuR2IbZ1fwkL9jl7bhM3w2Kpoxb4YZR8w3OSTh0QYi4bp3yFwNg7CijJGzfQcaXdaUHB_CeGfhv10SED5YwvA4VLOG3_NUw64B1m21FLIofnWAaosp9YKbm8I2UGuiK-Yg3maoROShtfIumLCszdSAgZmsX7mmRHFIdWlxdSXbB_M32HuKOAh2muUIMkackgwRsOKuoD1-tizRbKmWdm36NU88NHC6th3vL0nlnNKBJI0eN9c13bpsogQ",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
server_encryption_keys
{
  "keys": [
    {
      "kty": "RSA",
      "d": "RLiYx_6oRxst_NIb3RifPlCGuF6i5g5r0dmeAH-H__PtITFWiuLnHhT5hRh_1F1c3XZohxAXPO_5PX6O4z3fSUxXHBMFvwuGX6XVI46r4zQMBTJDukOpIKOhKYi463wqf4zeoaomIUWbBUoH34Ee2-mDOxGvRG24VbkMZq14PiMIkNTu7EXfc4ViYGia3o40YoRJOuEZDZBkLlLitTEBp7naO_vDpij1Hu9TOv7OKVU3Tt1_ujblS0KFUuEvG0hRvCRQIHuXY6EG5XxpfqimQ7uHDwihvBIgKFTvuL-7oUWD3rRUwsrZ_JqiE44yJhGXOdnIPtd3ZF5CEJtxtx5hiQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    }
  ]
}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
2022-04-11 21:28:05 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-04-11 21:28:05
SetServerSigningAlgToPS256
Successfully set signing algorithm to PS256
2022-04-11 21:28:05
FAPIBrazilSetGrantTypesSupportedInServerConfiguration
Successfully set grant_types_supported
server
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ]
}
2022-04-11 21:28:05
AddClaimsParameterSupportedTrueToServerConfiguration
Successfully added claims_parameter_supported to server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true
}
2022-04-11 21:28:05
FAPIBrazilAddBrazilSpecificSettingsToServerConfiguration
Added open banking Brazil specific server settings
server
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ]
}
2022-04-11 21:28:05 SUCCESS
AddTLSClientAuthToServerConfiguration
Added tls_client_auth for token_endpoint_auth_methods_supported
2022-04-11 21:28:05
AddPushedAuthorizationRequestEndpointToServerConfig
Added pushed_authorization_request_endpoint to server configuration
endpoint
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/par
2022-04-11 21:28:05
AddRequirePushedAuthorizationRequestsToServerConfig
Added require_pushed_authorization_requests to server configuration
value
true
2022-04-11 21:28:05 SUCCESS
AddResponseTypeCodeIdTokenToServerConfiguration
Added code id_token as response type supported
response_types_supported
[
  "code id_token"
]
2022-04-11 21:28:05 SUCCESS
FAPIBrazilAddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
values
[
  "PS256"
]
2022-04-11 21:28:05 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2022-04-11 21:28:05 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "d": "RLiYx_6oRxst_NIb3RifPlCGuF6i5g5r0dmeAH-H__PtITFWiuLnHhT5hRh_1F1c3XZohxAXPO_5PX6O4z3fSUxXHBMFvwuGX6XVI46r4zQMBTJDukOpIKOhKYi463wqf4zeoaomIUWbBUoH34Ee2-mDOxGvRG24VbkMZq14PiMIkNTu7EXfc4ViYGia3o40YoRJOuEZDZBkLlLitTEBp7naO_vDpij1Hu9TOv7OKVU3Tt1_ujblS0KFUuEvG0hRvCRQIHuXY6EG5XxpfqimQ7uHDwihvBIgKFTvuL-7oUWD3rRUwsrZ_JqiE44yJhGXOdnIPtd3ZF5CEJtxtx5hiQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "d": "OYZyXTTnSIO_2m4YButsZIEdMOZ-PI0HdBxol_1mA9tqEivImVW7eaicIY51eDSQOCxTEbYgGw5wmWu5ixr63korPSNVbXuR2IbZ1fwkL9jl7bhM3w2Kpoxb4YZR8w3OSTh0QYi4bp3yFwNg7CijJGzfQcaXdaUHB_CeGfhv10SED5YwvA4VLOG3_NUw64B1m21FLIofnWAaosp9YKbm8I2UGuiK-Yg3maoROShtfIumLCszdSAgZmsX7mmRHFIdWlxdSXbB_M32HuKOAh2muUIMkackgwRsOKuoD1-tizRbKmWdm36NU88NHC6th3vL0nlnNKBJI0eN9c13bpsogQ",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
2022-04-11 21:28:05 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
Verify configuration of first client
2022-04-11 21:28:05 SUCCESS
GetStaticClientConfiguration
Found a static client object
scope
openid accounts
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    }
  ]
}
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
redirect_uri
https://tpp.openfinance.celcoin.dev/signin-oidc
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:28:05 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-04-11 21:28:05 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
2022-04-11 21:28:05 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-04-11 21:28:05 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-04-11 21:28:05 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    }
  ]
}
Verify configuration of second client
2022-04-11 21:28:05 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
7e99ed43-5e74-4e1a-82aa-5682a2b5436f
redirect_uri
https://tpp.openfinance.celcoin.dev/signin-oidc
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "e": "AQAB",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
      "alg": "RSA-OAEP"
    }
  ]
}
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
id_token_encrypted_response_alg
RSA-OAEP
id_token_encrypted_response_enc
A128GCM
2022-04-11 21:28:05 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-04-11 21:28:05 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "e": "AQAB",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
      "alg": "RSA-OAEP"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    }
  ]
}
2022-04-11 21:28:05 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-04-11 21:28:05 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-04-11 21:28:05 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "e": "AQAB",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
      "alg": "RSA-OAEP"
    }
  ]
}
2022-04-11 21:28:05
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Setup Done
2022-04-11 21:28:59 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:28:59 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-11 21:28:59 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance x1EEfjkUfFrABJT
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "tls_client_auth"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-04-11 21:29:00 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:29:00 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-11 21:29:00 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance x1EEfjkUfFrABJT
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "tls_client_auth"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-04-11 21:29:00 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003d3E1200DEE37EC49559BA6E82BCB5B8DB",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "91"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "scope": "consents",
  "grant_type": "client_credentials"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
client_id=ed515952-455b-4639-a3f5-c50f3e51c08c&scope=consents&grant_type=client_credentials
2022-04-11 21:29:00 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-11 21:29:00 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:29:00 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:29:00 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:29:00 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:29:00 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-11 21:29:00 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-11 21:29:00 SUCCESS
FAPIBrazilExtractRequestedScopeFromClientCredentialsGrant
Found 'consents' scope in request
actual
[
  "consents"
]
expected
consents
2022-04-11 21:29:00 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
wsJshikZf2Wapd9BiZUP2kQWherE0mZy44ijsz7eufB440XWin
2022-04-11 21:29:00 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
wsJshikZf2Wapd9BiZUP2kQWherE0mZy44ijsz7eufB440XWin
token_type
Bearer
2022-04-11 21:29:00
CopyAccessTokenToClientCredentialsField
Condition ran but did not log anything
2022-04-11 21:29:00 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance x1EEfjkUfFrABJT
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "wsJshikZf2Wapd9BiZUP2kQWherE0mZy44ijsz7eufB440XWin",
  "token_type": "Bearer"
}
outgoing_path
token
2022-04-11 21:29:01 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/consents/v1/consents
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer wsJshikZf2Wapd9BiZUP2kQWherE0mZy44ijsz7eufB440XWin",
  "accept": "application/json",
  "x-fapi-auth-date": "Mon, 11 Apr 2022 18:29:00 GMT",
  "x-fapi-customer-ip-address": "172.17.48.1",
  "x-fapi-interaction-id": "000de31c-52cd-4075-8595-744a18ef6674",
  "x-customer-user-agent": "string",
  "cookie": "JSESSIONID\u003d9705ADBC8050B9FAD4476AB14ACF67A1",
  "content-type": "application/json; charset\u003dutf-8",
  "connection": "close",
  "content-length": "440"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/consents/v1/consents
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
{
  "clientId": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "data": {
    "loggedUser": {
      "document": {
        "identification": "00441660010",
        "rel": "CPF"
      }
    },
    "businessEntity": {
      "document": {
        "identification": "92707126000119",
        "rel": "CNPJ"
      }
    },
    "permissions": [
      "openid",
      "profile",
      "consents",
      "accounts",
      "resources"
    ],
    "expirationDateTime": "2022-04-11T18:34:00.5910439",
    "transactionFromDateTime": "2022-04-11T18:29:00.6426259",
    "transactionToDateTime": "2022-04-11T18:34:00.6702636"
  }
}
incoming_query_string_params
{}
incoming_body
{"clientId":"ed515952-455b-4639-a3f5-c50f3e51c08c","data":{"loggedUser":{"document":{"identification":"00441660010","rel":"CPF"}},"businessEntity":{"document":{"identification":"92707126000119","rel":"CNPJ"}},"permissions":["openid","profile","consents","accounts","resources"],"expirationDateTime":"2022-04-11T18:34:00.5910439","transactionFromDateTime":"2022-04-11T18:29:00.6426259","transactionToDateTime":"2022-04-11T18:34:00.6702636"}}
2022-04-11 21:29:01 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
New consent endpoint
2022-04-11 21:29:01 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:29:01 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:29:01 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:29:01 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2022-04-11 21:29:01 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-04-11 21:29:01 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
wsJshikZf2Wapd9BiZUP2kQWherE0mZy44ijsz7eufB440XWin
2022-04-11 21:29:01 SUCCESS
RequireBearerClientCredentialsAccessToken
Found access token in request
actual
wsJshikZf2Wapd9BiZUP2kQWherE0mZy44ijsz7eufB440XWin
2022-04-11 21:29:01 SUCCESS
ExtractFapiDateHeader
Found a FAPI auth date header
fapi_auth_date
Mon, 11 Apr 2022 18:29:00 GMT
2022-04-11 21:29:01 SUCCESS
ExtractFapiIpAddressHeader
Found a FAPI ip address header
fapi_customer_ip_address
172.17.48.1
addr
172.17.48.1
2022-04-11 21:29:01 SUCCESS
ExtractFapiInteractionIdHeader
Found a FAPI interaction ID header
fapi_interaction_id
000de31c-52cd-4075-8595-744a18ef6674
2022-04-11 21:29:01 SUCCESS
FAPIBrazilEnsureClientCredentialsScopeContainedConsents
The token request which was used to obtain the access token contained 'consents' scope
actual
[
  "consents"
]
2022-04-11 21:29:01
FAPIBrazilExtractConsentRequest
Condition ran but did not log anything
2022-04-11 21:29:01 INFO
CreateFapiInteractionIdIfNeeded
Found existing FAPI interaction ID
fapi_interaction_id
000de31c-52cd-4075-8595-744a18ef6674
2022-04-11 21:29:01 SUCCESS
FAPIBrazilGenerateNewConsentResponse
Created consent response
headers
{
  "x-fapi-interaction-id": "000de31c-52cd-4075-8595-744a18ef6674"
}
consentId
urn:conformance:oidf:263IxB0LlO
consent_response
{
  "data": {
    "consentId": "urn:conformance:oidf:263IxB0LlO",
    "creationDateTime": "2022-04-11T21:29:01Z",
    "status": "AWAITING_AUTHORISATION",
    "statusUpdateDateTime": "2022-04-11T21:29:01Z",
    "permissions": [
      "ACCOUNTS_READ",
      "ACCOUNTS_BALANCES_READ",
      "RESOURCES_READ"
    ],
    "expirationDateTime": "2022-04-11T23:29:01Z",
    "transactionFromDateTime": "2022-04-11T21:24:01Z",
    "transactionToDateTime": "2022-04-11T23:29:01Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Partyconsents/v1/consents"
    }
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-04-11T21:29:01Z"
  }
}
2022-04-11 21:29:01
ClearAccessTokenFromRequest
Condition ran but did not log anything
2022-04-11 21:29:01 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance x1EEfjkUfFrABJT
outgoing_status_code
201
outgoing_headers
{
  "x-fapi-interaction-id": [
    "000de31c-52cd-4075-8595-744a18ef6674"
  ]
}
outgoing_body
{
  "data": {
    "consentId": "urn:conformance:oidf:263IxB0LlO",
    "creationDateTime": "2022-04-11T21:29:01Z",
    "status": "AWAITING_AUTHORISATION",
    "statusUpdateDateTime": "2022-04-11T21:29:01Z",
    "permissions": [
      "ACCOUNTS_READ",
      "ACCOUNTS_BALANCES_READ",
      "RESOURCES_READ"
    ],
    "expirationDateTime": "2022-04-11T23:29:01Z",
    "transactionFromDateTime": "2022-04-11T21:24:01Z",
    "transactionToDateTime": "2022-04-11T23:29:01Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Partyconsents/v1/consents"
    }
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-04-11T21:29:01Z"
  }
}
outgoing_path
consents/v1/consents
2022-04-11 21:29:01 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/jwks
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json, application/jwk-set+json",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:29:01 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-11 21:29:01 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance x1EEfjkUfFrABJT
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "MIIG7DCCBdSgAwIBAgIUTrLrCiShohhHToplj1GN+jrMWNMwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDExNzE4MDAwMFoXDTIzMDIxNjE4MDAwMFowgeExCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMWMwGAYDVQQLDBE8VmFsaWRhdGlvbiB0eXBlPjAeBgNVBAsMFzxDZXJ0aWZpY2F0ZSBBdXRob3JpdHk+MCcGA1UECwwgPENOUEogZGEgUmVnaXN0cmF0aW9uIEF1dGhvcml0eT4xIjAgBgNVBAMMGSoub3BlbmZpbmFuY2UuY2VsY29pbi5kZXYxNDAyBgoJkiaJk/IsZAEBEyQ0ZDJmODdhOC04Y2ZjLTU0YjEtYTViNC1jYTM5MzE5ZmM4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYCH6YtsJJ+1dtYxHKTxxAB2hpfim9R+q2WIQiUp7PMmoNVypSPYiZNxoT6QgW90d+QApqCotHOySlHK/D7lz6BPnyTlVj4Gj/zP8/b1xcIm6//lTlahRuAPfg4nhHFYXVzt9XVHc8KahKLOk5MZGXcg1IrLZ0Ef//wbFL91dnI5cYa/GeSWA2YPYotKUCxQoAYiSDf7YmLknr0YH0Qf7BiSB74ckBbtN1oPTmxWDeBsY/VedroTpsZSk05aK2KxKglE+EQOiLUKqGRweOkPNaiFqWxbS6zsVCEQym1oWuuwig/cNGV8GVxRMRF5CiDLd+VTjs7fZYPIGNH9QBwQ/AgMBAAGjggMJMIIDBTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSPDbZtKSByAZXj6fT5vxxugUF+oDAfBgNVHSMEGDAWgBSGf1itF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMGUGA1UdEQReMFygFQYFYEwBAwKgDAwKSm9hbyBUZXN0ZaAZBgVgTAEDA6AQDA41OTExODEzMzAwMDEwMKAWBgVgTAEDBKANDAs2MDk1MDAyMTA5MaAQBgVgTAEDB6AHDAUwOTc4NjAOBgNVHQ8BAf8EBAMCBsAwggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBcqHz+t8xXh2KnXoKFu1Aio4xF/7HzWmAN3/4GrmDJu+kzueloDBX0WRGjqtnm5XKXmDGPmdSuXS8MsO0KLApeJvKKnH9aa2xGX7doG+/FtVCdlN9bkKYZQZ7TIgfoxj4WFEv60z4TBdJneO/oavFVKJIJcqzl9AohidzPHE5Zxld3d18ovPgAKL92JgSNgFqODGYTDN900OkCuJMsQuTWPewBTWfy9j2K44tI+hmUAjxyXFbIoX4UGxRkzMDRM2Cc8iJcwJT3iv796zCqB8X5W8tiAUBWXvSAQkE9uUBOocT2MKp3y3Tqtq108hoZ8p48IUuwdT6ltYn2LYdZt83V"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
outgoing_path
jwks
2022-04-11 21:29:02 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/par
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003d9705ADBC8050B9FAD4476AB14ACF67A1",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "2394"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/par
incoming_body_form_params
{
  "request": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkExMjhDQkMtSFMyNTYiLCJraWQiOiIzQzhGMEUyQzNFRjEzMzRCNkZFRDg2NDhGOTg5NDJCRkQ1M0JBOUI2IiwidHlwIjoiSldUIn0.yaoUj8kFBIhaS-hCGqib10-yAf_Vu4VE9aAk9hdyrAZDuQqybi6OcOcu-u6sOlSAxphxGUfiu9EHiOtEOqdit3Bi8O5dQ9q2AE_scIF5ywmuk_3HoN4K8sz2d5rEivgzwZvza2wGyPaSPbVSsoUOlGAfdAh_dbbhsGQp7KK9C0hE5mkiPNm6NmpKHBmxu2ozBrean8w76UJFQ57LrHhg-NNbkB6LnXyu3ymF_1OeAILizis3--pIwBjUPQQDDM8vnrSnHlg6V9ozlFeW9YuofvfuJqYM3NtNyaSo-2ktsYTMtM-aFB7evdSX6myjRstvAbbZsLytPSaoFDHo1y92hQ.MUo0XiplKITdHVXgrhaL1g.bGJS_Kf8qLs747J0zzz4Sh-HzVekgIaXPCWarYEjU_d7xClgnEJdc9rh4YE49gobSfloXLbOrlcbgW7gRVu07XxwoXO57Y39gw-d7Cz-ffDLx9qgm7OEteWEOr0GGjpHnWu6dfg5Mxnf6EhoETSLLIiYhEDUW7UYVdkdbCm0BSxhegY2y8E4yJ9Ga_1Dbj2xjfu2mdmk6hkT5uT04CVFM_vmiVS2zhHY46i2awSQaW-GHpLtgiLm9al4xZ1UAioQSPvt6KFZFgz2sROTYFw1qMC9sJ1QOXRWdWWBuTL1OHITpDA76P1Rh5cZA-U8nYiPndOK-yYYEpzuWvtraLggbuBQKJ0aVIEyk-en1qBGnybNO6hVUVQKeqkeFoMh9_KqvF-kAnkooepFOrvLaArNwA_kdFIxX25jVNBhe9NLnlYfVRz4FL6xEBiFgU69BarAgz3NWuZHf4cee-R61nsz6RulE0Lt_hrRA3ptUy805Ynks9TwTNOTzytnhH56W-efsPL0YvC5bLGnpkyR2guB9csDR43AWC3zglxcacNa1ME204XckTK2ING6UtarwEwuphMmk2Eg7VTEJsB2sVG4Tp2T7LPAj_JwiPzJRbFvjyhKD6S8-7i6U7o1rBoh8-nrNJSYXD4Ibv-duJo4vcv6xOv3-8EbOI7i9kBiy7zILozNtrGHnCEAqY9ypaeWYwRf5B-H7RCuHLScqCzr40w7_nKiXSObZJCE1CzstF7PJ_x-dq2XWLYQYR5wiJyecF0KaSgcb41QouVxZOnbLxsrequ2xhoZXwk99qeqoobcmUK9iyPV4M_qR4sR471GHzHa5Gr19KNSZd40SdBwFSEoeMc4ncSzEccM4QO5moDnVCWjo-AssvBouX56dWNZuGAARm36F3LxU3B8ARZXQFhRgw1WfOnsBfE7lYltBUjyjNHxqbPblhvqKpx_3fV_CQWyIkpnsosKG9mGbTTERrWrL_oOAmr4dLiIxnW3LXj_i_CT5ZhwH9ZS4wO5_dsMfOwvsbM01qYfv1bwwyGmy7YwAr8o_q6r5cwrbSkXMUj0Q2uxRcbQZblbgCcEyah6AYW6bJ2wiYjPjA97DB_CWuYajUsY4_z1VoSdAUJdc40UEU3KIb9SIIhNLLsfj1TXgQAn4kTJq1ZNeImAiICFT7TUDMmDN31u7UL2eQuT3gnL7HHvGSwgGKK781zRUGnGVvfMY4hCubMGPRBPbg9foPGZ_rPJvFW0SBYx1Jw73BBsgiOkeGxy1OoXcVQ43KP4A_ggxB_CZzdRHIORQ_iq7XFsB8fIvZ2A7fvES15NYtfBc3Eds_uVP5hLfeiCfAWJ0Uei2Zt3NBCk8uJkev_bbED7KRQI9mBuixzZflDiWrvWmjuIFRegTlOBucP3bxedzvOBiQ9vzKuYFmhDwGJqpzZCdRe4yb85CilISl85bMAVSfp38i0BOCT4m_Q_6Xkkk846HHZoe4jSSbDArYMMQ7dvaTBy0fJB6yNK-AFvoC3w2ZhiFxVnjimYPGraWlN5ZkkHlFIk5hDu8yn2iQlnEhtLvuDfTMg49yyB-ZQcZ4JTBGO3eORBnEBL8nT-jq-a8-zxDnz-xGG9eKGQZqkC5aZ_LZeqgnfogrAnQE3VS_I-wJC_gvxPjkD9rW8o8dvwD5gJ_MlHNiN-S9tFLKcgTUDCL4FJMMFp3AkKMzHNP8St1u0RcmVZH749dObzLdc8LYi1qEAfMDT_yfqrwwFQWhm_JtMGqfLzpGsjTiZrGbCb3BlbckvzFVTmgRQxOJLEZ2GknHUUHI-tsH5GgyVOoYlVBQ.MI6YH3xhxI1vmFwfAXFcOA",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
request=eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkExMjhDQkMtSFMyNTYiLCJraWQiOiIzQzhGMEUyQzNFRjEzMzRCNkZFRDg2NDhGOTg5NDJCRkQ1M0JBOUI2IiwidHlwIjoiSldUIn0.yaoUj8kFBIhaS-hCGqib10-yAf_Vu4VE9aAk9hdyrAZDuQqybi6OcOcu-u6sOlSAxphxGUfiu9EHiOtEOqdit3Bi8O5dQ9q2AE_scIF5ywmuk_3HoN4K8sz2d5rEivgzwZvza2wGyPaSPbVSsoUOlGAfdAh_dbbhsGQp7KK9C0hE5mkiPNm6NmpKHBmxu2ozBrean8w76UJFQ57LrHhg-NNbkB6LnXyu3ymF_1OeAILizis3--pIwBjUPQQDDM8vnrSnHlg6V9ozlFeW9YuofvfuJqYM3NtNyaSo-2ktsYTMtM-aFB7evdSX6myjRstvAbbZsLytPSaoFDHo1y92hQ.MUo0XiplKITdHVXgrhaL1g.bGJS_Kf8qLs747J0zzz4Sh-HzVekgIaXPCWarYEjU_d7xClgnEJdc9rh4YE49gobSfloXLbOrlcbgW7gRVu07XxwoXO57Y39gw-d7Cz-ffDLx9qgm7OEteWEOr0GGjpHnWu6dfg5Mxnf6EhoETSLLIiYhEDUW7UYVdkdbCm0BSxhegY2y8E4yJ9Ga_1Dbj2xjfu2mdmk6hkT5uT04CVFM_vmiVS2zhHY46i2awSQaW-GHpLtgiLm9al4xZ1UAioQSPvt6KFZFgz2sROTYFw1qMC9sJ1QOXRWdWWBuTL1OHITpDA76P1Rh5cZA-U8nYiPndOK-yYYEpzuWvtraLggbuBQKJ0aVIEyk-en1qBGnybNO6hVUVQKeqkeFoMh9_KqvF-kAnkooepFOrvLaArNwA_kdFIxX25jVNBhe9NLnlYfVRz4FL6xEBiFgU69BarAgz3NWuZHf4cee-R61nsz6RulE0Lt_hrRA3ptUy805Ynks9TwTNOTzytnhH56W-efsPL0YvC5bLGnpkyR2guB9csDR43AWC3zglxcacNa1ME204XckTK2ING6UtarwEwuphMmk2Eg7VTEJsB2sVG4Tp2T7LPAj_JwiPzJRbFvjyhKD6S8-7i6U7o1rBoh8-nrNJSYXD4Ibv-duJo4vcv6xOv3-8EbOI7i9kBiy7zILozNtrGHnCEAqY9ypaeWYwRf5B-H7RCuHLScqCzr40w7_nKiXSObZJCE1CzstF7PJ_x-dq2XWLYQYR5wiJyecF0KaSgcb41QouVxZOnbLxsrequ2xhoZXwk99qeqoobcmUK9iyPV4M_qR4sR471GHzHa5Gr19KNSZd40SdBwFSEoeMc4ncSzEccM4QO5moDnVCWjo-AssvBouX56dWNZuGAARm36F3LxU3B8ARZXQFhRgw1WfOnsBfE7lYltBUjyjNHxqbPblhvqKpx_3fV_CQWyIkpnsosKG9mGbTTERrWrL_oOAmr4dLiIxnW3LXj_i_CT5ZhwH9ZS4wO5_dsMfOwvsbM01qYfv1bwwyGmy7YwAr8o_q6r5cwrbSkXMUj0Q2uxRcbQZblbgCcEyah6AYW6bJ2wiYjPjA97DB_CWuYajUsY4_z1VoSdAUJdc40UEU3KIb9SIIhNLLsfj1TXgQAn4kTJq1ZNeImAiICFT7TUDMmDN31u7UL2eQuT3gnL7HHvGSwgGKK781zRUGnGVvfMY4hCubMGPRBPbg9foPGZ_rPJvFW0SBYx1Jw73BBsgiOkeGxy1OoXcVQ43KP4A_ggxB_CZzdRHIORQ_iq7XFsB8fIvZ2A7fvES15NYtfBc3Eds_uVP5hLfeiCfAWJ0Uei2Zt3NBCk8uJkev_bbED7KRQI9mBuixzZflDiWrvWmjuIFRegTlOBucP3bxedzvOBiQ9vzKuYFmhDwGJqpzZCdRe4yb85CilISl85bMAVSfp38i0BOCT4m_Q_6Xkkk846HHZoe4jSSbDArYMMQ7dvaTBy0fJB6yNK-AFvoC3w2ZhiFxVnjimYPGraWlN5ZkkHlFIk5hDu8yn2iQlnEhtLvuDfTMg49yyB-ZQcZ4JTBGO3eORBnEBL8nT-jq-a8-zxDnz-xGG9eKGQZqkC5aZ_LZeqgnfogrAnQE3VS_I-wJC_gvxPjkD9rW8o8dvwD5gJ_MlHNiN-S9tFLKcgTUDCL4FJMMFp3AkKMzHNP8St1u0RcmVZH749dObzLdc8LYi1qEAfMDT_yfqrwwFQWhm_JtMGqfLzpGsjTiZrGbCb3BlbckvzFVTmgRQxOJLEZ2GknHUUHI-tsH5GgyVOoYlVBQ.MI6YH3xhxI1vmFwfAXFcOA&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:29:02 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
PAR endpoint
2022-04-11 21:29:02 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:29:02 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:29:02 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:29:02 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-11 21:29:02 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-11 21:29:02 SUCCESS
ExtractRequestObjectFromPAREndpointRequest
Parsed request object
request_object
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.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.hznknjZ8KZMYW8iQ1zEb8z_gbBQcjXY7lX4XxNh0Pq49JUrd79m-AQ34n_xONQXmGjEP_Hy6-9XGYOAMLHSmY5T1mW3hLb57peoEd9rJDsuaLHqJb2c2xTKDDrlyk8dcMepWefH_vwVhnOs9vat1xADvtCgeGscjJY0ldtjrGQanu0JBFup7Wc6ANC4Xqcx-6Dah2HpOJlMF735KNvKAtAio--XsDEEFowDI93yNqA7QJzLDQseRAhhE-pe3t3vPTeLv3RX3hSKALWzGoI3Xxof1uMpdQwZcx2oWWc8qTaChiGpjrnxvTAALNh-f5gCiujycsC06oPk6UFqr_UoEyg",
  "header": {
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "iss": "ed515952-455b-4639-a3f5-c50f3e51c08c",
    "response_type": "code id_token",
    "code_challenge_method": "S256",
    "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
    "acr": {
      "loa2": "urn:brasil:openbanking:loa2",
      "loa3": "urn:brasil:openbanking:loa3"
    },
    "aud": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
    "nbf": 1649712541,
    "scope": "openid profile consent:urn:conformance:oidf:263IxB0LlO resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers",
    "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
    "state": "1b3c65f20bc1414d8a0bfadfb58c60ac",
    "exp": 1649714341,
    "iat": 1649712541,
    "code_challenge": "RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE"
  },
  "jwe_header": {
    "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
    "typ": "JWT",
    "enc": "A128CBC-HS256",
    "alg": "RSA-OAEP"
  }
}
2022-04-11 21:29:02 SUCCESS
EnsurePAREndpointRequestDoesNotContainRequestUriParameter
PAR endpoint request does not contain a request_uri parameter
2022-04-11 21:29:02 SUCCESS
ValidateEncryptedRequestObjectHasKid
kid was found in the encrypted request object header
kid
3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6
2022-04-11 21:29:02 SUCCESS
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
alg
PS256
2022-04-11 21:29:02
FAPIBrazilValidateRequestObjectIdTokenACRClaims
acr claim is not requested
2022-04-11 21:29:02 SUCCESS
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Apr 11, 2022, 9:59:01 PM"
2022-04-11 21:29:02 SUCCESS
FAPI1AdvancedValidateRequestObjectNBFClaim
nbf claim is valid
nbf
"Apr 11, 2022, 9:29:01 PM"
now
"Apr 11, 2022, 9:29:02 PM"
2022-04-11 21:29:02
ValidateRequestObjectClaims
Request object does not contain a max_age claim
2022-04-11 21:29:02 SUCCESS
ValidateRequestObjectClaims
Request object claims passed all validation checks
2022-04-11 21:29:02 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2022-04-11 21:29:02 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2022-04-11 21:29:02 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2022-04-11 21:29:02 SUCCESS
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
request_object
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.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.hznknjZ8KZMYW8iQ1zEb8z_gbBQcjXY7lX4XxNh0Pq49JUrd79m-AQ34n_xONQXmGjEP_Hy6-9XGYOAMLHSmY5T1mW3hLb57peoEd9rJDsuaLHqJb2c2xTKDDrlyk8dcMepWefH_vwVhnOs9vat1xADvtCgeGscjJY0ldtjrGQanu0JBFup7Wc6ANC4Xqcx-6Dah2HpOJlMF735KNvKAtAio--XsDEEFowDI93yNqA7QJzLDQseRAhhE-pe3t3vPTeLv3RX3hSKALWzGoI3Xxof1uMpdQwZcx2oWWc8qTaChiGpjrnxvTAALNh-f5gCiujycsC06oPk6UFqr_UoEyg
request_object_signing_alg
PS256
jwk
Sun RSA public key, 2048 bits
  params: null
  modulus: 20119295304009516311190391668853499906772160384787819465246930140952650527352983481923489277850717619239235654943902531781232577954793402186569031944611083154776407411245155421117523068859956953200109492511351952744474803732730278314697405605110643068797336324196376840961738840025412995070127252143121706336652111414900824867891473870663692606816232494200714479267239820219432021227604116790221600147770859041177092325748308602358921571122654766715070577443397801872654891225909291716159963977734891894591335442042301421252349575359848287773145166719392893383330704569533859334524901681511372983760867188554139632703
  public exponent: 65537
2022-04-11 21:29:02 SUCCESS
EnsureMatchingRedirectUriInRequestObject
Redirect URI matched
actual
https://tpp.openfinance.celcoin.dev/signin-oidc
2022-04-11 21:29:02 SUCCESS
EnsureRequestObjectContainsCodeChallengeWhenUsingPAR
Found required PKCE parameters in request
code_challenge_method
S256
code_challenge
RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE
2022-04-11 21:29:02 SUCCESS
CreatePAREndpointResponse
Created PAR endpoint response
request_uri
urn:ietf:params:oauth:request_uri:248b04be-5f8d-438c-ade4-3d43d712ce5e
expires_in
600
2022-04-11 21:29:02 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance x1EEfjkUfFrABJT
outgoing_status_code
201
outgoing_headers
{}
outgoing_body
{
  "request_uri": "urn:ietf:params:oauth:request_uri:248b04be-5f8d-438c-ade4-3d43d712ce5e",
  "expires_in": 600
}
outgoing_path
par
2022-04-11 21:29:02 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:29:02 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-11 21:29:02 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance x1EEfjkUfFrABJT
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "tls_client_auth"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-04-11 21:29:02 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/jwks
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json, application/jwk-set+json",
  "cookie": "JSESSIONID\u003dFFFFA477778866E5D315241BEA05D7B1",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:29:02 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-11 21:29:02 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance x1EEfjkUfFrABJT
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
outgoing_path
jwks
2022-04-11 21:29:03 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/authorize
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003dFFFFA477778866E5D315241BEA05D7B1",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/authorize
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "response_type": "code id_token",
  "scope": "openid profile consent:urn:conformance:oidf:263IxB0LlO accounts resources",
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "a6c5e88c532948cc8f05f035a3f9baf8",
  "nonce": "gp57qr4PGQC2+y6OfMQC/eGL1zFXzzluHfh8hSCC4+8\u003d",
  "response_mode": "form_post",
  "code_challenge": "RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE",
  "request_uri": "urn:ietf:params:oauth:request_uri:248b04be-5f8d-438c-ade4-3d43d712ce5e"
}
incoming_body
2022-04-11 21:29:03 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Authorization endpoint
2022-04-11 21:29:03 SUCCESS
EnsureAuthorizationRequestDoesNotContainRequestWhenUsingPAR
Request does not contain a request parameter
2022-04-11 21:29:03 SUCCESS
ValidateEncryptedRequestObjectHasKid
kid was found in the encrypted request object header
kid
3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6
2022-04-11 21:29:03 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "response_type": "code id_token",
  "scope": "openid profile consent:urn:conformance:oidf:263IxB0LlO resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers",
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "1b3c65f20bc1414d8a0bfadfb58c60ac",
  "nonce": "gp57qr4PGQC2+y6OfMQC/eGL1zFXzzluHfh8hSCC4+8\u003d",
  "response_mode": "form_post",
  "code_challenge": "RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE",
  "iss": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "code_challenge_method": "S256",
  "acr": {
    "loa2": "urn:brasil:openbanking:loa2",
    "loa3": "urn:brasil:openbanking:loa3"
  },
  "aud": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "nbf": 1649712541,
  "exp": 1649714341,
  "iat": 1649712541
}
2022-04-11 21:29:03 SUCCESS
EnsureClientIdInAuthorizationRequestParametersMatchRequestObject
client_id http request parameter value matches client_id in request object
2022-04-11 21:29:03 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid profile consent:urn:conformance:oidf:263IxB0LlO resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers
2022-04-11 21:29:03 SUCCESS
FAPIBrazilValidateConsentScope
Found consent scope in request
actual
[
  "openid",
  "profile",
  "consent:urn:conformance:oidf:263IxB0LlO",
  "resources",
  "accounts",
  "credit-cards-accounts",
  "loans",
  "financings",
  "unarranged-accounts-overdraft",
  "invoice-financings",
  "customers"
]
expected
consent:urn:conformance:oidf:263IxB0LlO
2022-04-11 21:29:03 SUCCESS
EnsureScopeContainsAccounts
Found accounts scope in request
actual
[
  "openid",
  "profile",
  "consent:urn:conformance:oidf:263IxB0LlO",
  "resources",
  "accounts",
  "credit-cards-accounts",
  "loans",
  "financings",
  "unarranged-accounts-overdraft",
  "invoice-financings",
  "customers"
]
2022-04-11 21:29:03 SUCCESS
EnsureResponseTypeIsCodeIdToken
Response type is expected value
expected
code id_token
2022-04-11 21:29:03 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid",
  "profile",
  "consent:urn:conformance:oidf:263IxB0LlO",
  "resources",
  "accounts",
  "credit-cards-accounts",
  "loans",
  "financings",
  "unarranged-accounts-overdraft",
  "invoice-financings",
  "customers"
]
expected
openid
2022-04-11 21:29:03 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:29:03 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
IfuycD8jdrQR87Dt9zJBU1iTH13s4z2o
2022-04-11 21:29:03 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
gp57qr4PGQC2+y6OfMQC/eGL1zFXzzluHfh8hSCC4+8=
2022-04-11 21:29:03 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash
cUnhwX_fsl2XPgkteUABgQ
2022-04-11 21:29:03 SUCCESS
CalculateSHash
Successful s_hash encoding
s_hash
xOsGCrg2SM9l36XgzuZQaQ
2022-04-11 21:29:03 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/
sub
user-subject-1234531
aud
ed515952-455b-4639-a3f5-c50f3e51c08c
nonce
gp57qr4PGQC2+y6OfMQC/eGL1zFXzzluHfh8hSCC4+8=
iat
1649712543
exp
1649712843
2022-04-11 21:29:03
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Request object does not contain a claims element.id_token
2022-04-11 21:29:03 SUCCESS
AddCHashToIdTokenClaims
Added c_hash to ID token claims
c_hash
cUnhwX_fsl2XPgkteUABgQ
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "sub": "user-subject-1234531",
  "aud": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "nonce": "gp57qr4PGQC2+y6OfMQC/eGL1zFXzzluHfh8hSCC4+8\u003d",
  "iat": 1649712543,
  "exp": 1649712843,
  "c_hash": "cUnhwX_fsl2XPgkteUABgQ"
}
2022-04-11 21:29:03 SUCCESS
AddSHashToIdTokenClaims
Added s_hash to ID token claims
s_hash
xOsGCrg2SM9l36XgzuZQaQ
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "sub": "user-subject-1234531",
  "aud": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "nonce": "gp57qr4PGQC2+y6OfMQC/eGL1zFXzzluHfh8hSCC4+8\u003d",
  "iat": 1649712543,
  "exp": 1649712843,
  "c_hash": "cUnhwX_fsl2XPgkteUABgQ",
  "s_hash": "xOsGCrg2SM9l36XgzuZQaQ"
}
2022-04-11 21:29:03 INFO
AddAtHashToIdTokenClaims
Skipped evaluation due to missing required string: at_hash
expected
at_hash
2022-04-11 21:29:03 INFO
FAPIBrazilAddACRClaimToIdTokenClaims
Skipped evaluation due to missing required string: requested_id_token_acr_values
expected
requested_id_token_acr_values
2022-04-11 21:29:03 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImVkNTE1OTUyLTQ1NWItNDYzOS1hM2Y1LWM1MGYzZTUxYzA4YyIsImNfaGFzaCI6ImNVbmh3WF9mc2wyWFBna3RlVUFCZ1EiLCJzX2hhc2giOiJ4T3NHQ3JnMlNNOWwzNlhnenVaUWFRIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTI4NDMsIm5vbmNlIjoiZ3A1N3FyNFBHUUMyK3k2T2ZNUUNcL2VHTDF6Rlh6emx1SGZoOGhTQ0M0Kzg9IiwiaWF0IjoxNjQ5NzEyNTQzfQ.Fwop_XcP997UPR9A9JpAMepZh-If4TB_ahDc7keLqm42gks3ek8wS_6JAMYQWRyDhsHwQw8vBWyN5gpCgpdtFyk1P48LnabhrIZ7nUy_noXXtmDPy_25GhJtBEJvZH1oLU8OHOiMakvhWy2b2WpdRuyQZsQ5aPvhuqluXClG95zWWgA25IBDfJBRnpIufbeG8a0WJvmZTQblJI5b2IqeWlPG-Ocls8cqZhSoq_MxwshH1vkW1S_G1T5vmKQUnggBlGmwSfY4VEaXa5lfrUOqTRo2ywmggYGiEm_BR-WFLnUMikD4EBaJJ39UVx-Exoqv_6uY29wokmvYJuERVDH9aQ
2022-04-11 21:29:03 SUCCESS
FAPIBrazilChangeConsentStatusToAuthorized
Changed consent status to AUTHORISED
consent
{
  "data": {
    "consentId": "urn:conformance:oidf:263IxB0LlO",
    "creationDateTime": "2022-04-11T21:29:01Z",
    "status": "AUTHORISED",
    "statusUpdateDateTime": "2022-04-11T21:29:03Z",
    "permissions": [
      "ACCOUNTS_READ",
      "ACCOUNTS_BALANCES_READ",
      "RESOURCES_READ"
    ],
    "expirationDateTime": "2022-04-11T23:29:01Z",
    "transactionFromDateTime": "2022-04-11T21:24:01Z",
    "transactionToDateTime": "2022-04-11T23:29:01Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Partyconsents/v1/consents"
    }
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-04-11T21:29:01Z"
  }
}
2022-04-11 21:29:03 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "1b3c65f20bc1414d8a0bfadfb58c60ac"
}
2022-04-11 21:29:03 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "1b3c65f20bc1414d8a0bfadfb58c60ac",
  "code": "IfuycD8jdrQR87Dt9zJBU1iTH13s4z2o"
}
2022-04-11 21:29:03 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "1b3c65f20bc1414d8a0bfadfb58c60ac",
  "code": "IfuycD8jdrQR87Dt9zJBU1iTH13s4z2o",
  "id_token": "eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImVkNTE1OTUyLTQ1NWItNDYzOS1hM2Y1LWM1MGYzZTUxYzA4YyIsImNfaGFzaCI6ImNVbmh3WF9mc2wyWFBna3RlVUFCZ1EiLCJzX2hhc2giOiJ4T3NHQ3JnMlNNOWwzNlhnenVaUWFRIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTI4NDMsIm5vbmNlIjoiZ3A1N3FyNFBHUUMyK3k2T2ZNUUNcL2VHTDF6Rlh6emx1SGZoOGhTQ0M0Kzg9IiwiaWF0IjoxNjQ5NzEyNTQzfQ.Fwop_XcP997UPR9A9JpAMepZh-If4TB_ahDc7keLqm42gks3ek8wS_6JAMYQWRyDhsHwQw8vBWyN5gpCgpdtFyk1P48LnabhrIZ7nUy_noXXtmDPy_25GhJtBEJvZH1oLU8OHOiMakvhWy2b2WpdRuyQZsQ5aPvhuqluXClG95zWWgA25IBDfJBRnpIufbeG8a0WJvmZTQblJI5b2IqeWlPG-Ocls8cqZhSoq_MxwshH1vkW1S_G1T5vmKQUnggBlGmwSfY4VEaXa5lfrUOqTRo2ywmggYGiEm_BR-WFLnUMikD4EBaJJ39UVx-Exoqv_6uY29wokmvYJuERVDH9aQ"
}
2022-04-11 21:29:03
SendAuthorizationResponseWithResponseModeFragment
Redirecting back to client
uri
https://tpp.openfinance.celcoin.dev/signin-oidc#state=1b3c65f20bc1414d8a0bfadfb58c60ac&code=IfuycD8jdrQR87Dt9zJBU1iTH13s4z2o&id_token=eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImVkNTE1OTUyLTQ1NWItNDYzOS1hM2Y1LWM1MGYzZTUxYzA4YyIsImNfaGFzaCI6ImNVbmh3WF9mc2wyWFBna3RlVUFCZ1EiLCJzX2hhc2giOiJ4T3NHQ3JnMlNNOWwzNlhnenVaUWFRIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTI4NDMsIm5vbmNlIjoiZ3A1N3FyNFBHUUMyK3k2T2ZNUUNcL2VHTDF6Rlh6emx1SGZoOGhTQ0M0Kzg9IiwiaWF0IjoxNjQ5NzEyNTQzfQ.Fwop_XcP997UPR9A9JpAMepZh-If4TB_ahDc7keLqm42gks3ek8wS_6JAMYQWRyDhsHwQw8vBWyN5gpCgpdtFyk1P48LnabhrIZ7nUy_noXXtmDPy_25GhJtBEJvZH1oLU8OHOiMakvhWy2b2WpdRuyQZsQ5aPvhuqluXClG95zWWgA25IBDfJBRnpIufbeG8a0WJvmZTQblJI5b2IqeWlPG-Ocls8cqZhSoq_MxwshH1vkW1S_G1T5vmKQUnggBlGmwSfY4VEaXa5lfrUOqTRo2ywmggYGiEm_BR-WFLnUMikD4EBaJJ39UVx-Exoqv_6uY29wokmvYJuERVDH9aQ
2022-04-11 21:29:03 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance x1EEfjkUfFrABJT
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://tpp.openfinance.celcoin.dev/signin-oidc#state=1b3c65f20bc1414d8a0bfadfb58c60ac&code=IfuycD8jdrQR87Dt9zJBU1iTH13s4z2o&id_token=eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImVkNTE1OTUyLTQ1NWItNDYzOS1hM2Y1LWM1MGYzZTUxYzA4YyIsImNfaGFzaCI6ImNVbmh3WF9mc2wyWFBna3RlVUFCZ1EiLCJzX2hhc2giOiJ4T3NHQ3JnMlNNOWwzNlhnenVaUWFRIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTI4NDMsIm5vbmNlIjoiZ3A1N3FyNFBHUUMyK3k2T2ZNUUNcL2VHTDF6Rlh6emx1SGZoOGhTQ0M0Kzg9IiwiaWF0IjoxNjQ5NzEyNTQzfQ.Fwop_XcP997UPR9A9JpAMepZh-If4TB_ahDc7keLqm42gks3ek8wS_6JAMYQWRyDhsHwQw8vBWyN5gpCgpdtFyk1P48LnabhrIZ7nUy_noXXtmDPy_25GhJtBEJvZH1oLU8OHOiMakvhWy2b2WpdRuyQZsQ5aPvhuqluXClG95zWWgA25IBDfJBRnpIufbeG8a0WJvmZTQblJI5b2IqeWlPG-Ocls8cqZhSoq_MxwshH1vkW1S_G1T5vmKQUnggBlGmwSfY4VEaXa5lfrUOqTRo2ywmggYGiEm_BR-WFLnUMikD4EBaJJ39UVx-Exoqv_6uY29wokmvYJuERVDH9aQ]
outgoing_path
authorize
2022-04-11 21:29:10 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003d9705ADBC8050B9FAD4476AB14ACF67A1",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "243"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "IfuycD8jdrQR87Dt9zJBU1iTH13s4z2o",
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "code_verifier": "ed515952-455b-4639-a3f5-c50f3e51c08curn:con",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=IfuycD8jdrQR87Dt9zJBU1iTH13s4z2o&redirect_uri=https%3A%2F%2Ftpp.openfinance.celcoin.dev%2Fsignin-oidc&code_verifier=ed515952-455b-4639-a3f5-c50f3e51c08curn%3Acon&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:29:10 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-11 21:29:10 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:29:10 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:29:10 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:29:10 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:29:10 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-11 21:29:10 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-11 21:29:10 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
IfuycD8jdrQR87Dt9zJBU1iTH13s4z2o
2022-04-11 21:29:10 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
https://tpp.openfinance.celcoin.dev/signin-oidc
2022-04-11 21:29:10 SUCCESS
ValidateCodeVerifierWithS256
Validated code_verifier successfully
code_challenge_method
S256
code_verifier
ed515952-455b-4639-a3f5-c50f3e51c08curn:con
code_challenge
RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE
2022-04-11 21:29:10 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
5P08T9mz8JhbsmxPdv1ZjkMinQ1NdfwbZTpaLj7fDPIGgVwHub
2022-04-11 21:29:10 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
exCWrHWTsmjr0uULFKZq8Q
2022-04-11 21:29:10
CreateRefreshToken
Created refresh token
refresh_token
SqFaItKGHkBqZmGtlykUkFMLNtqsXOwzSNkxFXXnJillyGoirR3460256738~>!&|
2022-04-11 21:29:10 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/
sub
user-subject-1234531
aud
ed515952-455b-4639-a3f5-c50f3e51c08c
nonce
gp57qr4PGQC2+y6OfMQC/eGL1zFXzzluHfh8hSCC4+8=
iat
1649712550
exp
1649712850
2022-04-11 21:29:10
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Request object does not contain a claims element.id_token
2022-04-11 21:29:10 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
exCWrHWTsmjr0uULFKZq8Q
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "sub": "user-subject-1234531",
  "aud": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "nonce": "gp57qr4PGQC2+y6OfMQC/eGL1zFXzzluHfh8hSCC4+8\u003d",
  "iat": 1649712550,
  "exp": 1649712850,
  "at_hash": "exCWrHWTsmjr0uULFKZq8Q"
}
2022-04-11 21:29:10 INFO
FAPIBrazilAddACRClaimToIdTokenClaims
Skipped evaluation due to missing required string: requested_id_token_acr_values
expected
requested_id_token_acr_values
2022-04-11 21:29:10 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiZXhDV3JIV1RzbWpyMHVVTEZLWnE4USIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTI4NTAsIm5vbmNlIjoiZ3A1N3FyNFBHUUMyK3k2T2ZNUUNcL2VHTDF6Rlh6emx1SGZoOGhTQ0M0Kzg9IiwiaWF0IjoxNjQ5NzEyNTUwfQ.EsXRBzmM85Ti6Q-xI2E0Bg3u2jK8pY-Fpt0VBOh8G8ViEY2Onpk2w6xVnKntMGVd-_SXje4ouo0VbbKpKBiSOH3ZgxXGqXc0DRprR2K9U_iqUI7tiAgIatFWAnmFmBRYaLC_xw2nX_6TrcAbHpGKBUIF-tKahNpXKak-_RQKOa-uNjK_kOkBKoafDN50Yu2Xbb0FecIpQnmTHp3mwD6BP3zmqLAgo6VehF3pcR5nh2ZzDAOkrhZucaBFKzF-F5FP84H0qq-jX_huML_XbGTRNxVe7McSRq1a-LeYYeRuoAPa8ouxVocpkcquTPu0K850l_y7SHtM97RVICOx3NeRUw
2022-04-11 21:29:10 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
5P08T9mz8JhbsmxPdv1ZjkMinQ1NdfwbZTpaLj7fDPIGgVwHub
token_type
Bearer
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiZXhDV3JIV1RzbWpyMHVVTEZLWnE4USIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTI4NTAsIm5vbmNlIjoiZ3A1N3FyNFBHUUMyK3k2T2ZNUUNcL2VHTDF6Rlh6emx1SGZoOGhTQ0M0Kzg9IiwiaWF0IjoxNjQ5NzEyNTUwfQ.EsXRBzmM85Ti6Q-xI2E0Bg3u2jK8pY-Fpt0VBOh8G8ViEY2Onpk2w6xVnKntMGVd-_SXje4ouo0VbbKpKBiSOH3ZgxXGqXc0DRprR2K9U_iqUI7tiAgIatFWAnmFmBRYaLC_xw2nX_6TrcAbHpGKBUIF-tKahNpXKak-_RQKOa-uNjK_kOkBKoafDN50Yu2Xbb0FecIpQnmTHp3mwD6BP3zmqLAgo6VehF3pcR5nh2ZzDAOkrhZucaBFKzF-F5FP84H0qq-jX_huML_XbGTRNxVe7McSRq1a-LeYYeRuoAPa8ouxVocpkcquTPu0K850l_y7SHtM97RVICOx3NeRUw
refresh_token
SqFaItKGHkBqZmGtlykUkFMLNtqsXOwzSNkxFXXnJillyGoirR3460256738~>!&|
2022-04-11 21:29:10 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance x1EEfjkUfFrABJT
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "5P08T9mz8JhbsmxPdv1ZjkMinQ1NdfwbZTpaLj7fDPIGgVwHub",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiZXhDV3JIV1RzbWpyMHVVTEZLWnE4USIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3MTI4NTAsIm5vbmNlIjoiZ3A1N3FyNFBHUUMyK3k2T2ZNUUNcL2VHTDF6Rlh6emx1SGZoOGhTQ0M0Kzg9IiwiaWF0IjoxNjQ5NzEyNTUwfQ.EsXRBzmM85Ti6Q-xI2E0Bg3u2jK8pY-Fpt0VBOh8G8ViEY2Onpk2w6xVnKntMGVd-_SXje4ouo0VbbKpKBiSOH3ZgxXGqXc0DRprR2K9U_iqUI7tiAgIatFWAnmFmBRYaLC_xw2nX_6TrcAbHpGKBUIF-tKahNpXKak-_RQKOa-uNjK_kOkBKoafDN50Yu2Xbb0FecIpQnmTHp3mwD6BP3zmqLAgo6VehF3pcR5nh2ZzDAOkrhZucaBFKzF-F5FP84H0qq-jX_huML_XbGTRNxVe7McSRq1a-LeYYeRuoAPa8ouxVocpkcquTPu0K850l_y7SHtM97RVICOx3NeRUw",
  "refresh_token": "SqFaItKGHkBqZmGtlykUkFMLNtqsXOwzSNkxFXXnJillyGoirR3460256738~\u003e!\u0026|"
}
outgoing_path
token
2022-04-11 21:29:10 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003d9705ADBC8050B9FAD4476AB14ACF67A1",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "159"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "grant_type": "refresh_token",
  "refresh_token": "SqFaItKGHkBqZmGtlykUkFMLNtqsXOwzSNkxFXXnJillyGoirR3460256738~\u003e!\u0026|",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=refresh_token&refresh_token=SqFaItKGHkBqZmGtlykUkFMLNtqsXOwzSNkxFXXnJillyGoirR3460256738%7E%3E%21%26%7C&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:29:10 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-11 21:29:10 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-11 21:29:10 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:29:10 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:29:10 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:29:10 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-11 21:29:10 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-11 21:29:10 SUCCESS
ValidateRefreshToken
refresh_token parameter matches the expected value.
refresh_token
SqFaItKGHkBqZmGtlykUkFMLNtqsXOwzSNkxFXXnJillyGoirR3460256738~>!&|
2022-04-11 21:29:10 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
bPZOuZmykj2CIVjuI51gQam8mIHhx4faKvqdpCxunD6Lr42roH
2022-04-11 21:29:10 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
BTxXMcixzELjqoeFJHwCXA
2022-04-11 21:29:10
CreateRefreshToken
Created refresh token
refresh_token
GyhtpRobbUNFHOSZnsavRljbszfGtKDUGURnTfbqkDvXlcLVar6171555617?">;=
2022-04-11 21:29:10 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
bPZOuZmykj2CIVjuI51gQam8mIHhx4faKvqdpCxunD6Lr42roH
token_type
Bearer
refresh_token
GyhtpRobbUNFHOSZnsavRljbszfGtKDUGURnTfbqkDvXlcLVar6171555617?">;=
scope
openid profile consent:urn:conformance:oidf:263IxB0LlO resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers
2022-04-11 21:29:10 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance x1EEfjkUfFrABJT
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "bPZOuZmykj2CIVjuI51gQam8mIHhx4faKvqdpCxunD6Lr42roH",
  "token_type": "Bearer",
  "refresh_token": "GyhtpRobbUNFHOSZnsavRljbszfGtKDUGURnTfbqkDvXlcLVar6171555617?\"\u003e;\u003d",
  "scope": "openid profile consent:urn:conformance:oidf:263IxB0LlO resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers"
}
outgoing_path
token
2022-04-11 21:29:10 INCOMING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/accounts/v1/accounts
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer bPZOuZmykj2CIVjuI51gQam8mIHhx4faKvqdpCxunD6Lr42roH",
  "cookie": "JSESSIONID\u003d9705ADBC8050B9FAD4476AB14ACF67A1",
  "connection": "close"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/accounts/v1/accounts
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-11 21:29:10 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Accounts endpoint
2022-04-11 21:29:10 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-11 21:29:10 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-11 21:29:10 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-11 21:29:10 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-04-11 21:29:10 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
bPZOuZmykj2CIVjuI51gQam8mIHhx4faKvqdpCxunD6Lr42roH
2022-04-11 21:29:10 SUCCESS
RequireBearerAccessToken
Found access token in request
actual
bPZOuZmykj2CIVjuI51gQam8mIHhx4faKvqdpCxunD6Lr42roH
2022-04-11 21:29:10 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2022-04-11 21:29:10 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2022-04-11 21:29:10 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2022-04-11 21:29:10 SUCCESS
FAPIBrazilEnsureAuthorizationRequestScopesContainAccounts
'accounts' was included in authorization request scopes
actual
openid profile consent:urn:conformance:oidf:263IxB0LlO resources accounts credit-cards-accounts loans financings unarranged-accounts-overdraft invoice-financings customers
expected
accounts
2022-04-11 21:29:10 INFO
CreateFapiInteractionIdIfNeeded
Found existing FAPI interaction ID
fapi_interaction_id
000de31c-52cd-4075-8595-744a18ef6674
2022-04-11 21:29:10 SUCCESS
CreateFAPIAccountEndpointResponse
Created account response object
accounts_endpoint_response
{
  "conformance-test-finished": "true"
}
accounts_endpoint_response_headers
{
  "x-fapi-interaction-id": "000de31c-52cd-4075-8595-744a18ef6674",
  "content-type": "application/json; charset\u003dUTF-8"
}
2022-04-11 21:29:10 SUCCESS
CreateBrazilAccountsEndpointResponse
Created Brazil accounts response (Please note that this is a hardcoded response copied from API documentation)
accounts_endpoint_response
{
  "data": [
    {
      "brandName": "Organização A",
      "companyCnpj": "21128159000166",
      "type": "CONTA_DEPOSITO_A_VISTA",
      "compeCode": "001",
      "branchCode": "6272",
      "number": "94088392",
      "checkDigit": "4",
      "accountId": "92792126019929279212650822221989319252576"
    }
  ],
  "links": {
    "self": "https://api.banco.com.br/open-banking/api/v1/resource",
    "first": "https://api.banco.com.br/open-banking/api/v1/resource",
    "prev": "https://api.banco.com.br/open-banking/api/v1/resource",
    "next": "https://api.banco.com.br/open-banking/api/v1/resource",
    "last": "https://api.banco.com.br/open-banking/api/v1/resource"
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-04-11T21:29:10Z"
  }
}
accounts_endpoint_response_headers
{
  "x-fapi-interaction-id": "000de31c-52cd-4075-8595-744a18ef6674",
  "content-type": "application/json"
}
2022-04-11 21:29:10
ClearAccessTokenFromRequest
Condition ran but did not log anything
2022-04-11 21:29:10 OUTGOING
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Response to HTTP request to test instance x1EEfjkUfFrABJT
outgoing_status_code
200
outgoing_headers
{
  "x-fapi-interaction-id": [
    "000de31c-52cd-4075-8595-744a18ef6674"
  ],
  "content-type": [
    "application/json"
  ]
}
outgoing_body
{
  "data": [
    {
      "brandName": "Organização A",
      "companyCnpj": "21128159000166",
      "type": "CONTA_DEPOSITO_A_VISTA",
      "compeCode": "001",
      "branchCode": "6272",
      "number": "94088392",
      "checkDigit": "4",
      "accountId": "92792126019929279212650822221989319252576"
    }
  ],
  "links": {
    "self": "https://api.banco.com.br/open-banking/api/v1/resource",
    "first": "https://api.banco.com.br/open-banking/api/v1/resource",
    "prev": "https://api.banco.com.br/open-banking/api/v1/resource",
    "next": "https://api.banco.com.br/open-banking/api/v1/resource",
    "last": "https://api.banco.com.br/open-banking/api/v1/resource"
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-04-11T21:29:10Z"
  }
}
outgoing_path
accounts/v1/accounts
2022-04-11 21:29:10 FINISHED
fapi1-advanced-final-client-test-no-scope-in-token-endpoint-response
Test has run to completion
testmodule_result
PASSED
2022-04-11 21:29:37
TEST-RUNNER
Alias has now been claimed by another test
alias
Celcoin_FAPI_Relying_Party
new_test_id
XyaOX9SkSYO7XY1
Test Results