Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-04-12 13:54:37 INFO
TEST-RUNNER
Test instance Snqe2hJPXgCdT4q created
baseUrl
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party
variant
{
  "client_auth_type": "mtls",
  "fapi_auth_request_method": "pushed",
  "fapi_profile": "openbanking_brazil",
  "fapi_jarm_type": "oidc",
  "fapi_response_mode": "plain_response"
}
alias
Celcoin_FAPI_Relying_Party
description
Celcoin - Client Test Payments
planId
FFzQsjOxUPOcf
config
{
  "alias": "Celcoin_FAPI_Relying_Party",
  "server": {
    "discoveryUrl": "https://aa.openfinance.celcoin.dev/.well-known/openid-configuration",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "enc",
          "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
          "e": "AQAB",
          "d": "RLiYx_6oRxst_NIb3RifPlCGuF6i5g5r0dmeAH-H__PtITFWiuLnHhT5hRh_1F1c3XZohxAXPO_5PX6O4z3fSUxXHBMFvwuGX6XVI46r4zQMBTJDukOpIKOhKYi463wqf4zeoaomIUWbBUoH34Ee2-mDOxGvRG24VbkMZq14PiMIkNTu7EXfc4ViYGia3o40YoRJOuEZDZBkLlLitTEBp7naO_vDpij1Hu9TOv7OKVU3Tt1_ujblS0KFUuEvG0hRvCRQIHuXY6EG5XxpfqimQ7uHDwihvBIgKFTvuL-7oUWD3rRUwsrZ_JqiE44yJhGXOdnIPtd3ZF5CEJtxtx5hiQ",
          "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
          "alg": "RSA-OAEP"
        },
        {
          "kty": "RSA",
          "use": "sig",
          "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
          "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
          "e": "AQAB",
          "d": "OYZyXTTnSIO_2m4YButsZIEdMOZ-PI0HdBxol_1mA9tqEivImVW7eaicIY51eDSQOCxTEbYgGw5wmWu5ixr63korPSNVbXuR2IbZ1fwkL9jl7bhM3w2Kpoxb4YZR8w3OSTh0QYi4bp3yFwNg7CijJGzfQcaXdaUHB_CeGfhv10SED5YwvA4VLOG3_NUw64B1m21FLIofnWAaosp9YKbm8I2UGuiK-Yg3maoROShtfIumLCszdSAgZmsX7mmRHFIdWlxdSXbB_M32HuKOAh2muUIMkackgwRsOKuoD1-tizRbKmWdm36NU88NHC6th3vL0nlnNKBJI0eN9c13bpsogQ",
          "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
          "x5c": [
            "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"
          ],
          "alg": "PS256"
        }
      ]
    }
  },
  "client": {
    "scope": "openid accounts",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "sig",
          "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
          "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
          "e": "AQAB",
          "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
          "x5c": [
            "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"
          ],
          "alg": "PS256"
        }
      ]
    },
    "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
    "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5\nMTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD\no28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG\nA1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD\nVQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw\nMDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC\nNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx\nMDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA\nsKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M\nW5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y\n6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p\npBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV\n1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1\nYLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV\nHQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO\ntAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v\nb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f\nBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy\nYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j\nZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw\nggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH\nAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0\naCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp\nbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz\nIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np\nb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g\nU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1\nbWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w\na2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB\nCwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD\naM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv\n4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv\nH4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go\nMJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----\nMIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCwo6klXSmkqIKX\n9tK8VOkyhrhkHn12pLAwRTQ7+6VX4yj1I5TXHzpRaFw2HfZrDYxbmVY5jORxnq2L\nGIAWUOFnir+zTlRytCYCxWkFeH17QIxbbvCMYBhBKWAK55lWv3Lqn0Wl9T0PpJgO\ngdkwElOuFRi37IBMociTrL/a1dIh8lg2kOEFmrvtkKpxZqXCfemkFr1rDj0yOaod\nOwlv8e3pK7b3ZWgNaBEeg04W4rBhplVIpFPDyTaY03YT7MsfyhXWoalJo1rFlxom\nWcI2fDk1GDvRJgyNk21wimmYBK3jB7xLJxeLySshYVwz1OFImHVgvDlMiNRmUXCT\n6lBtrInDAgMBAAECggEAEJK6exP7pUReRG3XJe59ls0HHfWyZeBb25uSpBIfWFiq\n7h0xiOGYMi0tgbJb/X1e7vU7Htk2UebGd6eL1QwvqexdwjAWQlDexCHLkcTVWSwc\nPzPwg+s8O1jrdvp166q42ISrH0AcQ4x469uJCjad/VZjZFZfT1FapWhu89ReC+su\nH7t6Yy2flSS4EWdbbRuF4KpPZ/aNJVS6CGjGvQjjdaA8uOe5hd4/JQ+2ucCqqDHl\np/O68nhAxazD3CN9caW59e8h30Fewjfd0ujVTQjn0EoEeoaajD/87xEtKyYN2hpA\njZeol6T7Dvja8+kLXywy+ZMWzRQBtpDFp9Qh7F8o8QKBgQDgRMjlbgNkuFqaeTu0\nzWoxA2tOz3aVjbJL6OZQlqqnknaiDf/P3a35wG0atvuB87QsvI9btNSeWCWifktC\nn2IDbqLtMU9n8P0QjaBA5BNws06sHoF4AvW4m1bHbi88mpvO8Cm6H5jfrjQfxX+j\nxu+DV8QzxNKRTbLLUSHXSyHieQKBgQDJobI+1+nTPdu13vZTEQPGxmGSkS+cKC1N\nFnJRG5LGq9FAqW4nK51n31zG8YSpQIBh1xaOIuOj3wcbR7iyy3aeOSeAVfnayKsw\nPbrJeh5O+Qfah+yaFbBZp5v0lTIIpzcRX89vr9FtDK4tCV+i/4ih3BYF8IJ6xup9\nxJpauNUfGwKBgQDE1Zo9Q8FWtTdQPPdaSK/bNNUJ5qx9tk+2sEL0mEhPqwzUTtUm\n67m2al1YBSHZfLu2SAjKxHuYPmVJqO8FGj48JO56n7zBzZFO5f6w9XzafYWfK2cW\nngJsdGpFvz9WQZxelAsLgI/8QjkdaYoNhJzS+kUJ6sWlIjy6lgrNmvOygQKBgQCG\ndPx/Kc50nqCANJHArOz+xdXVPlooYSZsbJaI/cEwGO2umA2rs0sBNJMS24Xis++o\nzxzsZdm1solzqK1DFakhM+3ih/LY8c4umkuQBY5mjWyuTsv5qJL0BnBado9p89Am\nFuUmjnEyri0MPV74PD0p6rEI/uyT4UgH3G4uJ2l/lwKBgCB7XmzrZ8ucWT88Nz5h\n0uYnKUWGPpnywqCCuipjs2zVPa+UW1jU6JMJz0Uafkdpnxd/Iv9c2p2MHYKJk1Nz\nTA6Xx2sNSXOfzoOTIHhruWDqIdFvHPNIQIqL4JMZSy4iyo08w/ouMsnm/QWcSI13\n1jKA5uU1oqqsM2pFYzjCjEmv\n-----END PRIVATE KEY-----",
    "ca": "----BEGIN CERTIFICATE-----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\np02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\n1DXIta0LpqM4pMoRMXvp9SLU0atVZLEu6Sc\u003d\n-----END CERTIFICATE-----"
  },
  "resource": {
    "resourceUrl": "https://opbbroker.openfinance.celcoin.dev/open-banking/accounts/v1/accounts",
    "consentUrl": "https://consent.openfinance.celcoin.dev/open-banking/consents/v1/consents",
    "brazilCpf": "67165276050",
    "brazilCnpj": "38576619000111",
    "brazilOrganizationId": "4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8"
  },
  "directory": {
    "discoveryUrl": "https://auth.sandbox.directory.openbankingbrasil.org.br/.well-known/openid-configuration",
    "client_id": "GDzmbynkPq5Xx9S485FFM",
    "apibase": "https://matls-api.sandbox.directory.openbankingbrasil.org.br/",
    "keystore": "https://keystore.sandbox.directory.openbankingbrasil.org.br/"
  },
  "client2": {
    "client_id": "7e99ed43-5e74-4e1a-82aa-5682a2b5436f",
    "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "sig",
          "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
          "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
          "e": "AQAB",
          "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
          "x5c": [
            "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"
          ],
          "alg": "PS256"
        },
        {
          "kty": "RSA",
          "use": "enc",
          "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
          "e": "AQAB",
          "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
          "alg": "RSA-OAEP"
        }
      ]
    },
    "certificate": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
    "id_token_encrypted_response_alg": "RSA-OAEP",
    "id_token_encrypted_response_enc": "A128GCM"
  },
  "publish": "summary",
  "description": "Celcoin - Client Test Payments"
}
testName
fapi1-advanced-final-client-refresh-token-test
2022-04-12 13:54:37 SUCCESS
FAPIBrazilGenerateServerConfiguration
Created server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true
}
issuer
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/
discoveryUrl
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
2022-04-12 13:54:37 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "d": "RLiYx_6oRxst_NIb3RifPlCGuF6i5g5r0dmeAH-H__PtITFWiuLnHhT5hRh_1F1c3XZohxAXPO_5PX6O4z3fSUxXHBMFvwuGX6XVI46r4zQMBTJDukOpIKOhKYi463wqf4zeoaomIUWbBUoH34Ee2-mDOxGvRG24VbkMZq14PiMIkNTu7EXfc4ViYGia3o40YoRJOuEZDZBkLlLitTEBp7naO_vDpij1Hu9TOv7OKVU3Tt1_ujblS0KFUuEvG0hRvCRQIHuXY6EG5XxpfqimQ7uHDwihvBIgKFTvuL-7oUWD3rRUwsrZ_JqiE44yJhGXOdnIPtd3ZF5CEJtxtx5hiQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "d": "OYZyXTTnSIO_2m4YButsZIEdMOZ-PI0HdBxol_1mA9tqEivImVW7eaicIY51eDSQOCxTEbYgGw5wmWu5ixr63korPSNVbXuR2IbZ1fwkL9jl7bhM3w2Kpoxb4YZR8w3OSTh0QYi4bp3yFwNg7CijJGzfQcaXdaUHB_CeGfhv10SED5YwvA4VLOG3_NUw64B1m21FLIofnWAaosp9YKbm8I2UGuiK-Yg3maoROShtfIumLCszdSAgZmsX7mmRHFIdWlxdSXbB_M32HuKOAh2muUIMkackgwRsOKuoD1-tizRbKmWdm36NU88NHC6th3vL0nlnNKBJI0eN9c13bpsogQ",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
server_encryption_keys
{
  "keys": [
    {
      "kty": "RSA",
      "d": "RLiYx_6oRxst_NIb3RifPlCGuF6i5g5r0dmeAH-H__PtITFWiuLnHhT5hRh_1F1c3XZohxAXPO_5PX6O4z3fSUxXHBMFvwuGX6XVI46r4zQMBTJDukOpIKOhKYi463wqf4zeoaomIUWbBUoH34Ee2-mDOxGvRG24VbkMZq14PiMIkNTu7EXfc4ViYGia3o40YoRJOuEZDZBkLlLitTEBp7naO_vDpij1Hu9TOv7OKVU3Tt1_ujblS0KFUuEvG0hRvCRQIHuXY6EG5XxpfqimQ7uHDwihvBIgKFTvuL-7oUWD3rRUwsrZ_JqiE44yJhGXOdnIPtd3ZF5CEJtxtx5hiQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    }
  ]
}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
2022-04-12 13:54:37 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-04-12 13:54:37
SetServerSigningAlgToPS256
Successfully set signing algorithm to PS256
2022-04-12 13:54:37
FAPIBrazilSetGrantTypesSupportedInServerConfiguration
Successfully set grant_types_supported
server
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ]
}
2022-04-12 13:54:37
AddClaimsParameterSupportedTrueToServerConfiguration
Successfully added claims_parameter_supported to server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true
}
2022-04-12 13:54:37
FAPIBrazilAddBrazilSpecificSettingsToServerConfiguration
Added open banking Brazil specific server settings
server
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ]
}
2022-04-12 13:54:37 SUCCESS
AddTLSClientAuthToServerConfiguration
Added tls_client_auth for token_endpoint_auth_methods_supported
2022-04-12 13:54:37
AddPushedAuthorizationRequestEndpointToServerConfig
Added pushed_authorization_request_endpoint to server configuration
endpoint
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/par
2022-04-12 13:54:37
AddRequirePushedAuthorizationRequestsToServerConfig
Added require_pushed_authorization_requests to server configuration
value
true
2022-04-12 13:54:37 SUCCESS
AddResponseTypeCodeIdTokenToServerConfiguration
Added code id_token as response type supported
response_types_supported
[
  "code id_token"
]
2022-04-12 13:54:37 SUCCESS
FAPIBrazilAddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
values
[
  "PS256"
]
2022-04-12 13:54:37 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2022-04-12 13:54:37 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "d": "RLiYx_6oRxst_NIb3RifPlCGuF6i5g5r0dmeAH-H__PtITFWiuLnHhT5hRh_1F1c3XZohxAXPO_5PX6O4z3fSUxXHBMFvwuGX6XVI46r4zQMBTJDukOpIKOhKYi463wqf4zeoaomIUWbBUoH34Ee2-mDOxGvRG24VbkMZq14PiMIkNTu7EXfc4ViYGia3o40YoRJOuEZDZBkLlLitTEBp7naO_vDpij1Hu9TOv7OKVU3Tt1_ujblS0KFUuEvG0hRvCRQIHuXY6EG5XxpfqimQ7uHDwihvBIgKFTvuL-7oUWD3rRUwsrZ_JqiE44yJhGXOdnIPtd3ZF5CEJtxtx5hiQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "d": "OYZyXTTnSIO_2m4YButsZIEdMOZ-PI0HdBxol_1mA9tqEivImVW7eaicIY51eDSQOCxTEbYgGw5wmWu5ixr63korPSNVbXuR2IbZ1fwkL9jl7bhM3w2Kpoxb4YZR8w3OSTh0QYi4bp3yFwNg7CijJGzfQcaXdaUHB_CeGfhv10SED5YwvA4VLOG3_NUw64B1m21FLIofnWAaosp9YKbm8I2UGuiK-Yg3maoROShtfIumLCszdSAgZmsX7mmRHFIdWlxdSXbB_M32HuKOAh2muUIMkackgwRsOKuoD1-tizRbKmWdm36NU88NHC6th3vL0nlnNKBJI0eN9c13bpsogQ",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
2022-04-12 13:54:37 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
Verify configuration of first client
2022-04-12 13:54:37 SUCCESS
GetStaticClientConfiguration
Found a static client object
scope
openid accounts
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    }
  ]
}
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
redirect_uri
https://tpp.openfinance.celcoin.dev/signin-oidc
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-12 13:54:37 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-04-12 13:54:37 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
2022-04-12 13:54:37 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-04-12 13:54:37 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-04-12 13:54:37 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    }
  ]
}
Verify configuration of second client
2022-04-12 13:54:37 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
7e99ed43-5e74-4e1a-82aa-5682a2b5436f
redirect_uri
https://tpp.openfinance.celcoin.dev/signin-oidc
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "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"
      ],
      "alg": "PS256"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "e": "AQAB",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
      "alg": "RSA-OAEP"
    }
  ]
}
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
id_token_encrypted_response_alg
RSA-OAEP
id_token_encrypted_response_enc
A128GCM
2022-04-12 13:54:37 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-04-12 13:54:37 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "MIIG7DCCBdSgAwIBAgIUTrLrCiShohhHToplj1GN+jrMWNMwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDExNzE4MDAwMFoXDTIzMDIxNjE4MDAwMFowgeExCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMWMwGAYDVQQLDBE8VmFsaWRhdGlvbiB0eXBlPjAeBgNVBAsMFzxDZXJ0aWZpY2F0ZSBBdXRob3JpdHk+MCcGA1UECwwgPENOUEogZGEgUmVnaXN0cmF0aW9uIEF1dGhvcml0eT4xIjAgBgNVBAMMGSoub3BlbmZpbmFuY2UuY2VsY29pbi5kZXYxNDAyBgoJkiaJk/IsZAEBEyQ0ZDJmODdhOC04Y2ZjLTU0YjEtYTViNC1jYTM5MzE5ZmM4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYCH6YtsJJ+1dtYxHKTxxAB2hpfim9R+q2WIQiUp7PMmoNVypSPYiZNxoT6QgW90d+QApqCotHOySlHK/D7lz6BPnyTlVj4Gj/zP8/b1xcIm6//lTlahRuAPfg4nhHFYXVzt9XVHc8KahKLOk5MZGXcg1IrLZ0Ef//wbFL91dnI5cYa/GeSWA2YPYotKUCxQoAYiSDf7YmLknr0YH0Qf7BiSB74ckBbtN1oPTmxWDeBsY/VedroTpsZSk05aK2KxKglE+EQOiLUKqGRweOkPNaiFqWxbS6zsVCEQym1oWuuwig/cNGV8GVxRMRF5CiDLd+VTjs7fZYPIGNH9QBwQ/AgMBAAGjggMJMIIDBTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSPDbZtKSByAZXj6fT5vxxugUF+oDAfBgNVHSMEGDAWgBSGf1itF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMGUGA1UdEQReMFygFQYFYEwBAwKgDAwKSm9hbyBUZXN0ZaAZBgVgTAEDA6AQDA41OTExODEzMzAwMDEwMKAWBgVgTAEDBKANDAs2MDk1MDAyMTA5MaAQBgVgTAEDB6AHDAUwOTc4NjAOBgNVHQ8BAf8EBAMCBsAwggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBcqHz+t8xXh2KnXoKFu1Aio4xF/7HzWmAN3/4GrmDJu+kzueloDBX0WRGjqtnm5XKXmDGPmdSuXS8MsO0KLApeJvKKnH9aa2xGX7doG+/FtVCdlN9bkKYZQZ7TIgfoxj4WFEv60z4TBdJneO/oavFVKJIJcqzl9AohidzPHE5Zxld3d18ovPgAKL92JgSNgFqODGYTDN900OkCuJMsQuTWPewBTWfy9j2K44tI+hmUAjxyXFbIoX4UGxRkzMDRM2Cc8iJcwJT3iv796zCqB8X5W8tiAUBWXvSAQkE9uUBOocT2MKp3y3Tqtq108hoZ8p48IUuwdT6ltYn2LYdZt83V"
      ],
      "alg": "PS256"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "e": "AQAB",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
      "alg": "RSA-OAEP"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "MIIG7DCCBdSgAwIBAgIUTrLrCiShohhHToplj1GN+jrMWNMwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDExNzE4MDAwMFoXDTIzMDIxNjE4MDAwMFowgeExCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMWMwGAYDVQQLDBE8VmFsaWRhdGlvbiB0eXBlPjAeBgNVBAsMFzxDZXJ0aWZpY2F0ZSBBdXRob3JpdHk+MCcGA1UECwwgPENOUEogZGEgUmVnaXN0cmF0aW9uIEF1dGhvcml0eT4xIjAgBgNVBAMMGSoub3BlbmZpbmFuY2UuY2VsY29pbi5kZXYxNDAyBgoJkiaJk/IsZAEBEyQ0ZDJmODdhOC04Y2ZjLTU0YjEtYTViNC1jYTM5MzE5ZmM4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYCH6YtsJJ+1dtYxHKTxxAB2hpfim9R+q2WIQiUp7PMmoNVypSPYiZNxoT6QgW90d+QApqCotHOySlHK/D7lz6BPnyTlVj4Gj/zP8/b1xcIm6//lTlahRuAPfg4nhHFYXVzt9XVHc8KahKLOk5MZGXcg1IrLZ0Ef//wbFL91dnI5cYa/GeSWA2YPYotKUCxQoAYiSDf7YmLknr0YH0Qf7BiSB74ckBbtN1oPTmxWDeBsY/VedroTpsZSk05aK2KxKglE+EQOiLUKqGRweOkPNaiFqWxbS6zsVCEQym1oWuuwig/cNGV8GVxRMRF5CiDLd+VTjs7fZYPIGNH9QBwQ/AgMBAAGjggMJMIIDBTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSPDbZtKSByAZXj6fT5vxxugUF+oDAfBgNVHSMEGDAWgBSGf1itF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMGUGA1UdEQReMFygFQYFYEwBAwKgDAwKSm9hbyBUZXN0ZaAZBgVgTAEDA6AQDA41OTExODEzMzAwMDEwMKAWBgVgTAEDBKANDAs2MDk1MDAyMTA5MaAQBgVgTAEDB6AHDAUwOTc4NjAOBgNVHQ8BAf8EBAMCBsAwggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBcqHz+t8xXh2KnXoKFu1Aio4xF/7HzWmAN3/4GrmDJu+kzueloDBX0WRGjqtnm5XKXmDGPmdSuXS8MsO0KLApeJvKKnH9aa2xGX7doG+/FtVCdlN9bkKYZQZ7TIgfoxj4WFEv60z4TBdJneO/oavFVKJIJcqzl9AohidzPHE5Zxld3d18ovPgAKL92JgSNgFqODGYTDN900OkCuJMsQuTWPewBTWfy9j2K44tI+hmUAjxyXFbIoX4UGxRkzMDRM2Cc8iJcwJT3iv796zCqB8X5W8tiAUBWXvSAQkE9uUBOocT2MKp3y3Tqtq108hoZ8p48IUuwdT6ltYn2LYdZt83V"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    }
  ]
}
2022-04-12 13:54:37 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-04-12 13:54:37 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-04-12 13:54:37 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "e": "AQAB",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "x5c": [
        "MIIG7DCCBdSgAwIBAgIUTrLrCiShohhHToplj1GN+jrMWNMwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDExNzE4MDAwMFoXDTIzMDIxNjE4MDAwMFowgeExCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMWMwGAYDVQQLDBE8VmFsaWRhdGlvbiB0eXBlPjAeBgNVBAsMFzxDZXJ0aWZpY2F0ZSBBdXRob3JpdHk+MCcGA1UECwwgPENOUEogZGEgUmVnaXN0cmF0aW9uIEF1dGhvcml0eT4xIjAgBgNVBAMMGSoub3BlbmZpbmFuY2UuY2VsY29pbi5kZXYxNDAyBgoJkiaJk/IsZAEBEyQ0ZDJmODdhOC04Y2ZjLTU0YjEtYTViNC1jYTM5MzE5ZmM4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYCH6YtsJJ+1dtYxHKTxxAB2hpfim9R+q2WIQiUp7PMmoNVypSPYiZNxoT6QgW90d+QApqCotHOySlHK/D7lz6BPnyTlVj4Gj/zP8/b1xcIm6//lTlahRuAPfg4nhHFYXVzt9XVHc8KahKLOk5MZGXcg1IrLZ0Ef//wbFL91dnI5cYa/GeSWA2YPYotKUCxQoAYiSDf7YmLknr0YH0Qf7BiSB74ckBbtN1oPTmxWDeBsY/VedroTpsZSk05aK2KxKglE+EQOiLUKqGRweOkPNaiFqWxbS6zsVCEQym1oWuuwig/cNGV8GVxRMRF5CiDLd+VTjs7fZYPIGNH9QBwQ/AgMBAAGjggMJMIIDBTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSPDbZtKSByAZXj6fT5vxxugUF+oDAfBgNVHSMEGDAWgBSGf1itF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMGUGA1UdEQReMFygFQYFYEwBAwKgDAwKSm9hbyBUZXN0ZaAZBgVgTAEDA6AQDA41OTExODEzMzAwMDEwMKAWBgVgTAEDBKANDAs2MDk1MDAyMTA5MaAQBgVgTAEDB6AHDAUwOTc4NjAOBgNVHQ8BAf8EBAMCBsAwggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBcqHz+t8xXh2KnXoKFu1Aio4xF/7HzWmAN3/4GrmDJu+kzueloDBX0WRGjqtnm5XKXmDGPmdSuXS8MsO0KLApeJvKKnH9aa2xGX7doG+/FtVCdlN9bkKYZQZ7TIgfoxj4WFEv60z4TBdJneO/oavFVKJIJcqzl9AohidzPHE5Zxld3d18ovPgAKL92JgSNgFqODGYTDN900OkCuJMsQuTWPewBTWfy9j2K44tI+hmUAjxyXFbIoX4UGxRkzMDRM2Cc8iJcwJT3iv796zCqB8X5W8tiAUBWXvSAQkE9uUBOocT2MKp3y3Tqtq108hoZ8p48IUuwdT6ltYn2LYdZt83V"
      ],
      "alg": "PS256"
    },
    {
      "kty": "RSA",
      "use": "enc",
      "kid": "BC8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "e": "AQAB",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q",
      "alg": "RSA-OAEP"
    }
  ]
}
2022-04-12 13:54:38
fapi1-advanced-final-client-refresh-token-test
Setup Done
2022-04-12 13:55:01 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "request-id": "|8f368db4-49afe2bb4f822b2e.1.",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-12 13:55:01 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-12 13:55:01 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "tls_client_auth"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-04-12 13:55:03 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "100"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "scope": "consents payments",
  "grant_type": "client_credentials"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
client_id=ed515952-455b-4639-a3f5-c50f3e51c08c&scope=consents+payments&grant_type=client_credentials
2022-04-12 13:55:03 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-12 13:55:03 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-12 13:55:03 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-12 13:55:03 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-12 13:55:03 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-12 13:55:03 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-12 13:55:03 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-12 13:55:03 SUCCESS
FAPIBrazilExtractRequestedScopeFromClientCredentialsGrant
Found 'payments' scope in request
actual
[
  "consents",
  "payments"
]
expected
payments
2022-04-12 13:55:03 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
508n1lATifQOYRhrha9lGQ7ltET8WEoI3KlYr0B8soFqX2Kss2
2022-04-12 13:55:03 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
508n1lATifQOYRhrha9lGQ7ltET8WEoI3KlYr0B8soFqX2Kss2
token_type
Bearer
2022-04-12 13:55:03
CopyAccessTokenToClientCredentialsField
Condition ran but did not log anything
2022-04-12 13:55:03 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "508n1lATifQOYRhrha9lGQ7ltET8WEoI3KlYr0B8soFqX2Kss2",
  "token_type": "Bearer"
}
outgoing_path
token
2022-04-12 13:55:04 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/payments/v1/consents
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer 508n1lATifQOYRhrha9lGQ7ltET8WEoI3KlYr0B8soFqX2Kss2",
  "x-idempotency-key": "3a455586853e49f7a9a0dbaff4f6cff4",
  "content-type": "application/jwt",
  "connection": "close",
  "content-length": "1651"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/payments/v1/consents
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.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.Zs5jAkTx7vzcayqeFIuDnWAKaNCysZvP4IVOYZpBBb3KInaNZY7cJovPFbLtlAxilWJc6D5yJQhawCh-JVsyBdTZoRsXdPp98CQylmH6blkV3rX_Hvq8GP3vkHepmvKAiFntzGljqi_iBJlvN3l3TYJknoBI1BNRljAkvfNS-5OYYR5OXyoFtYA3TWKWqzv22RMyYD3S9u-F4742EHInwemNDA1HsOAuGrtn8y7Ri4T_EdjLmz5Y84GYVNLDoZKUlgLfeZ_bIkNaVEyc4VatPuPQW4RwpKzWYeNJYfwxu0k6AXRj9ehuK613ZtLWqOG7vvTghx7GwTV0r7NDGfHqwA
2022-04-12 13:55:04 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
New consent endpoint
2022-04-12 13:55:04 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-12 13:55:04 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-12 13:55:04 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL
BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx
FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB
TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5
MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD
o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG
A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD
VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw
MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC
NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx
MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M
W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y
6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p
pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV
1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1
YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO
tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v
b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f
BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy
YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j
ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw
ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH
AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0
aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp
bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz
IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np
b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g
U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1
bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w
a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB
CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD
aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv
4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv
H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go
MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB
APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1
-----END CERTIFICATE-----
2022-04-12 13:55:04 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2022-04-12 13:55:04 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-04-12 13:55:04 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
508n1lATifQOYRhrha9lGQ7ltET8WEoI3KlYr0B8soFqX2Kss2
2022-04-12 13:55:04 SUCCESS
RequireBearerClientCredentialsAccessToken
Found access token in request
actual
508n1lATifQOYRhrha9lGQ7ltET8WEoI3KlYr0B8soFqX2Kss2
2022-04-12 13:55:04 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2022-04-12 13:55:04 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2022-04-12 13:55:04 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2022-04-12 13:55:04 SUCCESS
FAPIBrazilExtractCertificateSubjectFromServerJwks
Extracted subject from the certificate included in server jwks
subjectdn
UID=4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,CN=*.openfinance.celcoin.dev,OU=\<Validation type\>+OU=\<Certificate Authority\>+OU=\<CNPJ da Registration Authority\>,O=ICP-Brasil,C=BR
ou
\<Validation type\>
brazil_software_id
4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8
2022-04-12 13:55:04 SUCCESS
FAPIBrazilEnsureClientCredentialsScopeContainedPayments
The token request which was used to obtain the access token contained 'payments' scope
actual
[
  "consents",
  "payments"
]
2022-04-12 13:55:04 SUCCESS
FAPIBrazilExtractPaymentsConsentRequest
Parsed payments consent request
payments_consent_request
{
  "aud": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/payments/v1/consents",
  "nbf": 1649771703,
  "data": {
    "debtorAccount": {
      "number": "1234567890",
      "accountType": "CACC",
      "ispb": "12345678",
      "issuer": "1774"
    },
    "loggedUser": {
      "document": {
        "identification": "00000000000",
        "rel": "CPF"
      }
    },
    "creditor": {
      "name": "João",
      "cpfCnpj": "00000000000",
      "personType": "PESSOA_NATURAL"
    },
    "payment": {
      "date": "12/04/2022",
      "amount": "1000,50",
      "currency": "BRL",
      "details": {
        "proxy": "chavePix",
        "localInstrument": "MAN",
        "qrCode": "00020101021126440014br.gov.bcb.pix0122chavePix5204000053031000,505802BR5913João6008SAOPAULO63044BE9",
        "creditorAccount": {
          "number": "1234567890",
          "accountType": "CACC",
          "ispb": "12345678",
          "issuer": "1774"
        }
      },
      "type": "PIX",
      "ibgeTownCode": "3505708"
    },
    "businessEntity": {
      "document": {
        "identification": "00000000000000",
        "rel": "CNPJ"
      }
    }
  },
  "iss": "4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8",
  "exp": 1649771823,
  "iat": 1649771823,
  "jti": "a2297aa6-d135-4eb8-9e88-25aeab08db18"
}
2022-04-12 13:55:04 SUCCESS
EnsureIncomingRequestContentTypeIsApplicationJwt
Client correctly used application/jwt content type
2022-04-12 13:55:04 SUCCESS
ExtractXIdempotencyKeyHeader
Found an x-idempotency-key header
idempotency_key
3a455586853e49f7a9a0dbaff4f6cff4
2022-04-12 13:55:04 SUCCESS
FAPIBrazilValidatePaymentConsentRequestAud
aud claim matches the endpoint url
aud
https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/payments/v1/consents
2022-04-12 13:55:04 SUCCESS
FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate
Extracted subject from the mtls client certificate
subjectdn
UID=fa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,2.5.4.5=#130e3539313138313333303030313030,CN=openfinance.celcoin.dev,OU=4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O=BCO LUSO BRASILEIRO S.A.,L=São Paulo,ST=SP,C=BR
ou
4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8
brazil_software_id
fa3c1c0f-c1d9-48e3-a107-d8ff97578670
2022-04-12 13:55:04 SUCCESS
FAPIBrazilEnsureConsentRequestIssEqualsOrganizationId
iss claim in consent request matches organizationId in client certificate
iss
4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8
2022-04-12 13:55:04 SUCCESS
FAPIBrazilEnsureConsentRequestJtiIsUUIDv4
jti claim in consent request is a UUIDv4
jti
a2297aa6-d135-4eb8-9e88-25aeab08db18
2022-04-12 13:55:04 SUCCESS
FAPIBrazilValidateConsentRequestIat
iat claim in consent request is valid
iat
1649771823
2022-04-12 13:55:04
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Fetching client organization keys
jwks_uri
https://keystore.sandbox.directory.openbankingbrasil.org.br/4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8/application.jwks
2022-04-12 13:55:04
FAPIBrazilFetchClientOrganizationJwksFromDirectory
HTTP request
request_uri
https://keystore.sandbox.directory.openbankingbrasil.org.br/4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8/application.jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-04-12 13:55:05 RESPONSE
FAPIBrazilFetchClientOrganizationJwksFromDirectory
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-type": "application/jwk-set+json",
  "content-length": "6070",
  "connection": "keep-alive",
  "x-amz-replication-status": "COMPLETED",
  "last-modified": "Thu, 17 Feb 2022 12:58:39 GMT",
  "x-amz-version-id": "VhTqfnpyd77tT4CgJfignfCmPr37f1Ia",
  "accept-ranges": "bytes",
  "server": "AmazonS3",
  "date": "Tue, 12 Apr 2022 13:55:06 GMT",
  "etag": "\"b70cfa3ac07472504176ff7398081263\"",
  "x-xss-protection": "1; mode\u003dblock",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "strict-origin-when-cross-origin",
  "x-content-type-options": "nosniff",
  "strict-transport-security": "max-age\u003d31536000",
  "x-cache": "RefreshHit from cloudfront",
  "via": "1.1 901ab2286f37b97cae8e703e2e582a98.cloudfront.net (CloudFront)",
  "x-amz-cf-pop": "MIA3-P2",
  "x-amz-cf-id": "V7pL2BFGpOV2ZEEgyS7nZkLeyZnikowg51ietyaIUcSPjVLBIcEpjQ\u003d\u003d"
}
response_body
{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw","e":"AQAB","kid":"RPy50SyOVCc17QxlFmFjHkljiYFKcl_ZTBwFUtSDtr8","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8/RPy50SyOVCc17QxlFmFjHkljiYFKcl_ZTBwFUtSDtr8.pem","x5t#256":"RPy50SyOVCc17QxlFmFjHkljiYFKcl_ZTBwFUtSDtr8"},{"kty":"RSA","use":"sig","x5c":["MIIG8DCCBdigAwIBAgIUAjKdq0gBAej2b1vkI/DjCvyahp0wDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDIxNzEyNTQwMFoXDTIzMDMxOTEyNTQwMFowgeExCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMWMwGAYDVQQLDBE8VmFsaWRhdGlvbiB0eXBlPjAeBgNVBAsMFzxDZXJ0aWZpY2F0ZSBBdXRob3JpdHk+MCcGA1UECwwgPENOUEogZGEgUmVnaXN0cmF0aW9uIEF1dGhvcml0eT4xIjAgBgNVBAMMGSoub3BlbmZpbmFuY2UuY2VsY29pbi5kZXYxNDAyBgoJkiaJk/IsZAEBEyQ0ZDJmODdhOC04Y2ZjLTU0YjEtYTViNC1jYTM5MzE5ZmM4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJou7FvuuofQYH4cveFria76J4d3Uq98XTdrrfikWYjM7Wml3SKx0+OMcxV53zlgfZJqkUrUPeodzK/RhJoEvmKN0E2hQFBHdE08utOZscYWDEX8ooyGJqspTtOlH9c5hvcZk5yEs4lmIKHh8sYy8qvHYGQkjqOXg70bMhWyO1zn2LQom96bBFWiySvK/ZkA2VC8Xohhfi3Y+tqli2Gj4IS9ClGOgtObt7njqSWr3/iv4DD5pNiFStH8UtZjYtSDdXof7qYLaZEdcddg8TENZOIs/qUqGUZ/vskuFm1xLctpwdh5Q9T7Rcq1HC7UQdvXWkqU/nlbtrJX81KDtTcJrhAgMBAAGjggMNMIIDCTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTkU4fE0JxuSoHrr/TdE4ci1YP4VjAfBgNVHSMEGDAWgBSGf1itF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMGkGA1UdEQRiMGCgGQYFYEwBAwKgEAwOQ2xpZW50ZTIgVGVzdGWgGQYFYEwBAwOgEAwONTkxMTgxMzMwMDAxMDCgFgYFYEwBAwSgDQwLNjA5NTAwMjEwOTGgEAYFYEwBAwegBwwFMDk3ODYwDgYDVR0PAQH/BAQDAgbAMIIBoQYDVR0gBIIBmDCCAZQwggGQBgorBgEEAYO6L2QBMIIBgDCCATYGCCsGAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNlIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNpcGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3NzZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlkaWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQgZG9jdW1lbnRzIHRoZXJlaW4uMEQGCCsGAQUFBwIBFjhodHRwOi8vY3BzLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczANBgkqhkiG9w0BAQsFAAOCAQEAYndo4m+8CRSUEr/ha5p/dURsoVdTeWwL2lB6+IfPlPEaSDBusgXYg7yBJNtGmna2PnIMYHOys/4FEvEciP5P7ATfMZficSPDjCRWUvUGm7BODO8WvRuq5j8rpNu6h26CC4ot4JjVQnoTujqjPJPnXZ6Pc6zWXHFxGNs5DZ5L4qXSJggQX5S+Mfh8Vu/LJlJp0h7pNLWzj4KvA8cc4bNhn83l9RjNkLRmtQf1DGyOA7yHxd+5jtcdWfCivOH5x+GuiJ3h8/6nxvFAA+0wdWkWxOml9U6sgnIlbriHRwHzkSgTtZpsPreoycc6I5tTVRX7bRsAnWr0BRIfFwF56Fr0EA=="],"n":"yaLuxb7rqH0GB-HL3ha4mu-ieHd1KvfF03a634pFmIzO1ppd0isdPjjHMVed85YH2SapFK1D3qHcyv0YSaBL5ijdBNoUBQR3RNPLrTmbHGFgxF_KKMhiarKU7TpR_XOYb3GZOchLOJZiCh4fLGMvKrx2BkJI6jl4O9GzIVsjtc59i0KJvemwRVoskryv2ZANlQvF6IYX4t2PrapYtho-CEvQpRjoLTm7e546klq9_4r-Aw-aTYhUrR_FLWY2LUg3V6H-6mC2mRHXHXYPExDWTiLP6lKhlGf77JLhZtcS3LacHYeUPU-0XKtRwu1EHb11pKlP55W7ayV_NSg7U3Ca4Q","e":"AQAB","kid":"Q4xpYH7U6vgzzFa1gMQIbFmPrGhig5iJ9KabGLNtPGQ","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8/Q4xpYH7U6vgzzFa1gMQIbFmPrGhig5iJ9KabGLNtPGQ.pem","x5t#256":"Q4xpYH7U6vgzzFa1gMQIbFmPrGhig5iJ9KabGLNtPGQ"}]}
2022-04-12 13:55:05
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","use":"sig","x5c":["MIIG7DCCBdSgAwIBAgIUTrLrCiShohhHToplj1GN+jrMWNMwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDExNzE4MDAwMFoXDTIzMDIxNjE4MDAwMFowgeExCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMWMwGAYDVQQLDBE8VmFsaWRhdGlvbiB0eXBlPjAeBgNVBAsMFzxDZXJ0aWZpY2F0ZSBBdXRob3JpdHk+MCcGA1UECwwgPENOUEogZGEgUmVnaXN0cmF0aW9uIEF1dGhvcml0eT4xIjAgBgNVBAMMGSoub3BlbmZpbmFuY2UuY2VsY29pbi5kZXYxNDAyBgoJkiaJk/IsZAEBEyQ0ZDJmODdhOC04Y2ZjLTU0YjEtYTViNC1jYTM5MzE5ZmM4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYCH6YtsJJ+1dtYxHKTxxAB2hpfim9R+q2WIQiUp7PMmoNVypSPYiZNxoT6QgW90d+QApqCotHOySlHK/D7lz6BPnyTlVj4Gj/zP8/b1xcIm6//lTlahRuAPfg4nhHFYXVzt9XVHc8KahKLOk5MZGXcg1IrLZ0Ef//wbFL91dnI5cYa/GeSWA2YPYotKUCxQoAYiSDf7YmLknr0YH0Qf7BiSB74ckBbtN1oPTmxWDeBsY/VedroTpsZSk05aK2KxKglE+EQOiLUKqGRweOkPNaiFqWxbS6zsVCEQym1oWuuwig/cNGV8GVxRMRF5CiDLd+VTjs7fZYPIGNH9QBwQ/AgMBAAGjggMJMIIDBTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSPDbZtKSByAZXj6fT5vxxugUF+oDAfBgNVHSMEGDAWgBSGf1itF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMGUGA1UdEQReMFygFQYFYEwBAwKgDAwKSm9hbyBUZXN0ZaAZBgVgTAEDA6AQDA41OTExODEzMzAwMDEwMKAWBgVgTAEDBKANDAs2MDk1MDAyMTA5MaAQBgVgTAEDB6AHDAUwOTc4NjAOBgNVHQ8BAf8EBAMCBsAwggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEBCwUAA4IBAQBcqHz+t8xXh2KnXoKFu1Aio4xF/7HzWmAN3/4GrmDJu+kzueloDBX0WRGjqtnm5XKXmDGPmdSuXS8MsO0KLApeJvKKnH9aa2xGX7doG+/FtVCdlN9bkKYZQZ7TIgfoxj4WFEv60z4TBdJneO/oavFVKJIJcqzl9AohidzPHE5Zxld3d18ovPgAKL92JgSNgFqODGYTDN900OkCuJMsQuTWPewBTWfy9j2K44tI+hmUAjxyXFbIoX4UGxRkzMDRM2Cc8iJcwJT3iv796zCqB8X5W8tiAUBWXvSAQkE9uUBOocT2MKp3y3Tqtq108hoZ8p48IUuwdT6ltYn2LYdZt83V"],"n":"n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw","e":"AQAB","kid":"RPy50SyOVCc17QxlFmFjHkljiYFKcl_ZTBwFUtSDtr8","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8/RPy50SyOVCc17QxlFmFjHkljiYFKcl_ZTBwFUtSDtr8.pem","x5t#256":"RPy50SyOVCc17QxlFmFjHkljiYFKcl_ZTBwFUtSDtr8"},{"kty":"RSA","use":"sig","x5c":["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"],"n":"yaLuxb7rqH0GB-HL3ha4mu-ieHd1KvfF03a634pFmIzO1ppd0isdPjjHMVed85YH2SapFK1D3qHcyv0YSaBL5ijdBNoUBQR3RNPLrTmbHGFgxF_KKMhiarKU7TpR_XOYb3GZOchLOJZiCh4fLGMvKrx2BkJI6jl4O9GzIVsjtc59i0KJvemwRVoskryv2ZANlQvF6IYX4t2PrapYtho-CEvQpRjoLTm7e546klq9_4r-Aw-aTYhUrR_FLWY2LUg3V6H-6mC2mRHXHXYPExDWTiLP6lKhlGf77JLhZtcS3LacHYeUPU-0XKtRwu1EHb11pKlP55W7ayV_NSg7U3Ca4Q","e":"AQAB","kid":"Q4xpYH7U6vgzzFa1gMQIbFmPrGhig5iJ9KabGLNtPGQ","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8/Q4xpYH7U6vgzzFa1gMQIbFmPrGhig5iJ9KabGLNtPGQ.pem","x5t#256":"Q4xpYH7U6vgzzFa1gMQIbFmPrGhig5iJ9KabGLNtPGQ"}]}
2022-04-12 13:55:05 SUCCESS
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Downloaded and added client organization JWK set to environment
client_organization_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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"
      ],
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw",
      "e": "AQAB",
      "kid": "RPy50SyOVCc17QxlFmFjHkljiYFKcl_ZTBwFUtSDtr8",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8/RPy50SyOVCc17QxlFmFjHkljiYFKcl_ZTBwFUtSDtr8.pem",
      "x5t#256": "RPy50SyOVCc17QxlFmFjHkljiYFKcl_ZTBwFUtSDtr8"
    },
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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\u003d\u003d"
      ],
      "n": "yaLuxb7rqH0GB-HL3ha4mu-ieHd1KvfF03a634pFmIzO1ppd0isdPjjHMVed85YH2SapFK1D3qHcyv0YSaBL5ijdBNoUBQR3RNPLrTmbHGFgxF_KKMhiarKU7TpR_XOYb3GZOchLOJZiCh4fLGMvKrx2BkJI6jl4O9GzIVsjtc59i0KJvemwRVoskryv2ZANlQvF6IYX4t2PrapYtho-CEvQpRjoLTm7e546klq9_4r-Aw-aTYhUrR_FLWY2LUg3V6H-6mC2mRHXHXYPExDWTiLP6lKhlGf77JLhZtcS3LacHYeUPU-0XKtRwu1EHb11pKlP55W7ayV_NSg7U3Ca4Q",
      "e": "AQAB",
      "kid": "Q4xpYH7U6vgzzFa1gMQIbFmPrGhig5iJ9KabGLNtPGQ",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8/Q4xpYH7U6vgzzFa1gMQIbFmPrGhig5iJ9KabGLNtPGQ.pem",
      "x5t#256": "Q4xpYH7U6vgzzFa1gMQIbFmPrGhig5iJ9KabGLNtPGQ"
    }
  ]
}
2022-04-12 13:55:05 SUCCESS
FAPIBrazilValidateJwtSignatureUsingOrganizationJwks
jwt signature validated
jwt
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiJhMjI5N2FhNi1kMTM1LTRlYjgtOWU4OC0yNWFlYWIwOGRiMTgiLCJkYXRhIjp7ImxvZ2dlZFVzZXIiOnsiZG9jdW1lbnQiOnsiaWRlbnRpZmljYXRpb24iOiIwMDAwMDAwMDAwMCIsInJlbCI6IkNQRiJ9fSwiYnVzaW5lc3NFbnRpdHkiOnsiZG9jdW1lbnQiOnsiaWRlbnRpZmljYXRpb24iOiIwMDAwMDAwMDAwMDAwMCIsInJlbCI6IkNOUEoifX0sImNyZWRpdG9yIjp7InBlcnNvblR5cGUiOiJQRVNTT0FfTkFUVVJBTCIsImNwZkNucGoiOiIwMDAwMDAwMDAwMCIsIm5hbWUiOiJKb8OjbyJ9LCJwYXltZW50Ijp7InR5cGUiOiJQSVgiLCJkYXRlIjoiMTIvMDQvMjAyMiIsImN1cnJlbmN5IjoiQlJMIiwiYW1vdW50IjoiMTAwMCw1MCIsImliZ2VUb3duQ29kZSI6IjM1MDU3MDgiLCJkZXRhaWxzIjp7ImxvY2FsSW5zdHJ1bWVudCI6Ik1BTiIsInFyQ29kZSI6IjAwMDIwMTAxMDIxMTI2NDQwMDE0YnIuZ292LmJjYi5waXgwMTIyY2hhdmVQaXg1MjA0MDAwMDUzMDMxMDAwLDUwNTgwMkJSNTkxM0pvw6NvNjAwOFNBT1BBVUxPNjMwNDRCRTkiLCJwcm94eSI6ImNoYXZlUGl4IiwiY3JlZGl0b3JBY2NvdW50Ijp7ImlzcGIiOiIxMjM0NTY3OCIsImlzc3VlciI6IjE3NzQiLCJudW1iZXIiOiIxMjM0NTY3ODkwIiwiYWNjb3VudFR5cGUiOiJDQUNDIn19fSwiZGVidG9yQWNjb3VudCI6eyJpc3BiIjoiMTIzNDU2NzgiLCJpc3N1ZXIiOiIxNzc0IiwibnVtYmVyIjoiMTIzNDU2Nzg5MCIsImFjY291bnRUeXBlIjoiQ0FDQyJ9fSwibmJmIjoxNjQ5NzcxNzAzLCJleHAiOjE2NDk3NzE4MjMsImlhdCI6MTY0OTc3MTgyMywiaXNzIjoiNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4IiwiYXVkIjoiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5L3BheW1lbnRzL3YxL2NvbnNlbnRzIn0.Zs5jAkTx7vzcayqeFIuDnWAKaNCysZvP4IVOYZpBBb3KInaNZY7cJovPFbLtlAxilWJc6D5yJQhawCh-JVsyBdTZoRsXdPp98CQylmH6blkV3rX_Hvq8GP3vkHepmvKAiFntzGljqi_iBJlvN3l3TYJknoBI1BNRljAkvfNS-5OYYR5OXyoFtYA3TWKWqzv22RMyYD3S9u-F4742EHInwemNDA1HsOAuGrtn8y7Ri4T_EdjLmz5Y84GYVNLDoZKUlgLfeZ_bIkNaVEyc4VatPuPQW4RwpKzWYeNJYfwxu0k6AXRj9ehuK613ZtLWqOG7vvTghx7GwTV0r7NDGfHqwA
2022-04-12 13:55:05 SUCCESS
CreateFapiInteractionIdIfNeeded
Created new FAPI interaction ID
fapi_interaction_id
a2c1c9fb-6cf5-443b-9a92-c18cc1ece8bc
2022-04-12 13:55:05 SUCCESS
FAPIBrazilGenerateNewPaymentsConsentResponse
Created consent response
headers
{
  "x-fapi-interaction-id": "a2c1c9fb-6cf5-443b-9a92-c18cc1ece8bc"
}
consentId
urn:conformance:oidf:V1gEBrndRj
consent_response
{
  "data": {
    "consentId": "urn:conformance:oidf:V1gEBrndRj",
    "creationDateTime": "2022-04-12T13:55:05Z",
    "status": "AWAITING_AUTHORISATION",
    "statusUpdateDateTime": "2022-04-12T13:55:05Z",
    "expirationDateTime": "2022-04-12T15:55:05Z",
    "transactionFromDateTime": "2022-04-12T13:50:05Z",
    "transactionToDateTime": "2022-04-12T15:55:05Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Partypayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-04-12T13:55:05Z"
    },
    "creditor": {
      "name": "João",
      "cpfCnpj": "00000000000",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "00000000000",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "12/04/2022",
      "amount": "1000,50",
      "currency": "BRL",
      "details": {
        "proxy": "chavePix",
        "localInstrument": "MAN",
        "qrCode": "00020101021126440014br.gov.bcb.pix0122chavePix5204000053031000,505802BR5913João6008SAOPAULO63044BE9",
        "creditorAccount": {
          "number": "1234567890",
          "accountType": "CACC",
          "ispb": "12345678",
          "issuer": "1774"
        }
      },
      "type": "PIX",
      "ibgeTownCode": "3505708"
    },
    "businessEntity": {
      "document": {
        "identification": "00000000000000",
        "rel": "CNPJ"
      }
    },
    "debtorAccount": {
      "number": "1234567890",
      "accountType": "CACC",
      "ispb": "12345678",
      "issuer": "1774"
    }
  },
  "aud": "4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8",
  "iat": 1649771705,
  "jti": "2b2bfef4-243d-413d-be00-b6230826bbd7",
  "iss": "4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8"
}
2022-04-12 13:55:05 SUCCESS
FAPIBrazilSignPaymentConsentResponse
Signed the payment consent response
signed_consent_response
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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_Do28iLCJjcGZDbnBqIjoiMDAwMDAwMDAwMDAiLCJwZXJzb25UeXBlIjoiUEVTU09BX05BVFVSQUwifSwicGF5bWVudCI6eyJkYXRlIjoiMTJcLzA0XC8yMDIyIiwiYW1vdW50IjoiMTAwMCw1MCIsImN1cnJlbmN5IjoiQlJMIiwiZGV0YWlscyI6eyJwcm94eSI6ImNoYXZlUGl4IiwibG9jYWxJbnN0cnVtZW50IjoiTUFOIiwicXJDb2RlIjoiMDAwMjAxMDEwMjExMjY0NDAwMTRici5nb3YuYmNiLnBpeDAxMjJjaGF2ZVBpeDUyMDQwMDAwNTMwMzEwMDAsNTA1ODAyQlI1OTEzSm_Do282MDA4U0FPUEFVTE82MzA0NEJFOSIsImNyZWRpdG9yQWNjb3VudCI6eyJudW1iZXIiOiIxMjM0NTY3ODkwIiwiYWNjb3VudFR5cGUiOiJDQUNDIiwiaXNwYiI6IjEyMzQ1Njc4IiwiaXNzdWVyIjoiMTc3NCJ9fSwidHlwZSI6IlBJWCIsImliZ2VUb3duQ29kZSI6IjM1MDU3MDgifSwiY3JlYXRpb25EYXRlVGltZSI6IjIwMjItMDQtMTJUMTM6NTU6MDVaIiwic3RhdHVzIjoiQVdBSVRJTkdfQVVUSE9SSVNBVElPTiJ9LCJpYXQiOjE2NDk3NzE3MDUsImp0aSI6IjJiMmJmZWY0LTI0M2QtNDEzZC1iZTAwLWI2MjMwODI2YmJkNyJ9.BRa6163yi3-1xXmybV6pXEL4BsBMaWltiFqkgCBP1rUshF_-1hdb8423cWSqG9aFWFtfw-dPnBQdntDO0Uid6In-w_u4ezS7GgaWMwQcKDcoR8uBaS5fa7MmEMbqV1-OICUxJ5kXm5ib7cnRXWHut_JRBW4MthlvrUWW3Czr1hptz77BKcxVIporSxUY9PxT_-PdE-KSw8YN-SS5LUGqUts97eSPwQGoUf8vciuyrYBrHRzKL1hw50vk0bYW3AOAFcdXTVUpZC8mMmz9bmY1OdRwQTxj1Ka_R53rkZUJ_VefBFLTYUGvmmGES68WEi8wsZzldDCLeh2Yo7B85AEYrw
2022-04-12 13:55:05
ClearAccessTokenFromRequest
Condition ran but did not log anything
2022-04-12 13:55:05 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
201
outgoing_headers
{
  "x-fapi-interaction-id": [
    "a2c1c9fb-6cf5-443b-9a92-c18cc1ece8bc"
  ],
  "Content-Type": [
    "application/jwt"
  ]
}
outgoing_body
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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_Do28iLCJjcGZDbnBqIjoiMDAwMDAwMDAwMDAiLCJwZXJzb25UeXBlIjoiUEVTU09BX05BVFVSQUwifSwicGF5bWVudCI6eyJkYXRlIjoiMTJcLzA0XC8yMDIyIiwiYW1vdW50IjoiMTAwMCw1MCIsImN1cnJlbmN5IjoiQlJMIiwiZGV0YWlscyI6eyJwcm94eSI6ImNoYXZlUGl4IiwibG9jYWxJbnN0cnVtZW50IjoiTUFOIiwicXJDb2RlIjoiMDAwMjAxMDEwMjExMjY0NDAwMTRici5nb3YuYmNiLnBpeDAxMjJjaGF2ZVBpeDUyMDQwMDAwNTMwMzEwMDAsNTA1ODAyQlI1OTEzSm_Do282MDA4U0FPUEFVTE82MzA0NEJFOSIsImNyZWRpdG9yQWNjb3VudCI6eyJudW1iZXIiOiIxMjM0NTY3ODkwIiwiYWNjb3VudFR5cGUiOiJDQUNDIiwiaXNwYiI6IjEyMzQ1Njc4IiwiaXNzdWVyIjoiMTc3NCJ9fSwidHlwZSI6IlBJWCIsImliZ2VUb3duQ29kZSI6IjM1MDU3MDgifSwiY3JlYXRpb25EYXRlVGltZSI6IjIwMjItMDQtMTJUMTM6NTU6MDVaIiwic3RhdHVzIjoiQVdBSVRJTkdfQVVUSE9SSVNBVElPTiJ9LCJpYXQiOjE2NDk3NzE3MDUsImp0aSI6IjJiMmJmZWY0LTI0M2QtNDEzZC1iZTAwLWI2MjMwODI2YmJkNyJ9.BRa6163yi3-1xXmybV6pXEL4BsBMaWltiFqkgCBP1rUshF_-1hdb8423cWSqG9aFWFtfw-dPnBQdntDO0Uid6In-w_u4ezS7GgaWMwQcKDcoR8uBaS5fa7MmEMbqV1-OICUxJ5kXm5ib7cnRXWHut_JRBW4MthlvrUWW3Czr1hptz77BKcxVIporSxUY9PxT_-PdE-KSw8YN-SS5LUGqUts97eSPwQGoUf8vciuyrYBrHRzKL1hw50vk0bYW3AOAFcdXTVUpZC8mMmz9bmY1OdRwQTxj1Ka_R53rkZUJ_VefBFLTYUGvmmGES68WEi8wsZzldDCLeh2Yo7B85AEYrw
outgoing_path
payments/v1/consents
2022-04-12 13:55:06 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/jwks
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json, application/jwk-set+json",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-12 13:55:06 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-12 13:55:06 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
outgoing_path
jwks
2022-04-12 13:55:07 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/par
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "1249"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/par
incoming_body_form_params
{
  "request": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.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.lG4VwvjGsvjd4oDSWdf4S5mrxcwzsA28zRPS1GpB8FqFQ4H84GnDWqtlrTUUonLe3rFiC9SyMgVb4fwwi2jmfjhn8u2z-73oCF7e5r-bUtPghx97XEvDBeDyRVzxd9JDugqi54Th89sz-V3GwBq56mdg1GBm_zcd_AH2kg64ytw7ZxgrCQ4ekl8-r6f9mW77LI75LhZsRt6hSSyBVGLOtc2y8Srr5MyVXR35_OPn6q0HMz-q-hnnGIhL6vIILjb18zrs62XD97aIsmiiuPqBInPB4XcKPL6snl6yPory4wlU56CgrE3SuPgBIXWPqJwLStZOkWV8kCq3wqlbqShaEA",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
request=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.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.lG4VwvjGsvjd4oDSWdf4S5mrxcwzsA28zRPS1GpB8FqFQ4H84GnDWqtlrTUUonLe3rFiC9SyMgVb4fwwi2jmfjhn8u2z-73oCF7e5r-bUtPghx97XEvDBeDyRVzxd9JDugqi54Th89sz-V3GwBq56mdg1GBm_zcd_AH2kg64ytw7ZxgrCQ4ekl8-r6f9mW77LI75LhZsRt6hSSyBVGLOtc2y8Srr5MyVXR35_OPn6q0HMz-q-hnnGIhL6vIILjb18zrs62XD97aIsmiiuPqBInPB4XcKPL6snl6yPory4wlU56CgrE3SuPgBIXWPqJwLStZOkWV8kCq3wqlbqShaEA&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-12 13:55:07 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
PAR endpoint
2022-04-12 13:55:07 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-12 13:55:07 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-12 13:55:07 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-12 13:55:07 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-12 13:55:07 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-12 13:55:07 SUCCESS
ExtractRequestObjectFromPAREndpointRequest
Parsed request object
request_object
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.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.lG4VwvjGsvjd4oDSWdf4S5mrxcwzsA28zRPS1GpB8FqFQ4H84GnDWqtlrTUUonLe3rFiC9SyMgVb4fwwi2jmfjhn8u2z-73oCF7e5r-bUtPghx97XEvDBeDyRVzxd9JDugqi54Th89sz-V3GwBq56mdg1GBm_zcd_AH2kg64ytw7ZxgrCQ4ekl8-r6f9mW77LI75LhZsRt6hSSyBVGLOtc2y8Srr5MyVXR35_OPn6q0HMz-q-hnnGIhL6vIILjb18zrs62XD97aIsmiiuPqBInPB4XcKPL6snl6yPory4wlU56CgrE3SuPgBIXWPqJwLStZOkWV8kCq3wqlbqShaEA",
  "header": {
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "iss": "ed515952-455b-4639-a3f5-c50f3e51c08c",
    "response_type": "code id_token",
    "code_challenge_method": "S256",
    "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
    "acr": {
      "loa2": "urn:brasil:openbanking:loa2",
      "loa3": "urn:brasil:openbanking:loa3"
    },
    "aud": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
    "nbf": 1649771706,
    "scope": "openid payments consent:urn:conformance:oidf:V1gEBrndRj",
    "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
    "state": "88469c1f447548ce97810115337b1661",
    "exp": 1649773506,
    "iat": 1649771706,
    "code_challenge": "RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE"
  }
}
2022-04-12 13:55:07 SUCCESS
EnsurePAREndpointRequestDoesNotContainRequestUriParameter
PAR endpoint request does not contain a request_uri parameter
2022-04-12 13:55:07 INFO
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
path
jwe_header
mapped
object
authorization_request_object
2022-04-12 13:55:07 SUCCESS
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
alg
PS256
2022-04-12 13:55:07
FAPIBrazilValidateRequestObjectIdTokenACRClaims
acr claim is not requested
2022-04-12 13:55:07 SUCCESS
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Apr 12, 2022, 2:25:06 PM"
2022-04-12 13:55:07 SUCCESS
FAPI1AdvancedValidateRequestObjectNBFClaim
nbf claim is valid
nbf
"Apr 12, 2022, 1:55:06 PM"
now
"Apr 12, 2022, 1:55:07 PM"
2022-04-12 13:55:07
ValidateRequestObjectClaims
Request object does not contain a max_age claim
2022-04-12 13:55:07 SUCCESS
ValidateRequestObjectClaims
Request object claims passed all validation checks
2022-04-12 13:55:07 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2022-04-12 13:55:07 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2022-04-12 13:55:07 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2022-04-12 13:55:07 SUCCESS
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
request_object
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.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.lG4VwvjGsvjd4oDSWdf4S5mrxcwzsA28zRPS1GpB8FqFQ4H84GnDWqtlrTUUonLe3rFiC9SyMgVb4fwwi2jmfjhn8u2z-73oCF7e5r-bUtPghx97XEvDBeDyRVzxd9JDugqi54Th89sz-V3GwBq56mdg1GBm_zcd_AH2kg64ytw7ZxgrCQ4ekl8-r6f9mW77LI75LhZsRt6hSSyBVGLOtc2y8Srr5MyVXR35_OPn6q0HMz-q-hnnGIhL6vIILjb18zrs62XD97aIsmiiuPqBInPB4XcKPL6snl6yPory4wlU56CgrE3SuPgBIXWPqJwLStZOkWV8kCq3wqlbqShaEA
request_object_signing_alg
PS256
jwk
Sun RSA public key, 2048 bits
  params: null
  modulus: 20119295304009516311190391668853499906772160384787819465246930140952650527352983481923489277850717619239235654943902531781232577954793402186569031944611083154776407411245155421117523068859956953200109492511351952744474803732730278314697405605110643068797336324196376840961738840025412995070127252143121706336652111414900824867891473870663692606816232494200714479267239820219432021227604116790221600147770859041177092325748308602358921571122654766715070577443397801872654891225909291716159963977734891894591335442042301421252349575359848287773145166719392893383330704569533859334524901681511372983760867188554139632703
  public exponent: 65537
2022-04-12 13:55:07 SUCCESS
EnsureMatchingRedirectUriInRequestObject
Redirect URI matched
actual
https://tpp.openfinance.celcoin.dev/signin-oidc
2022-04-12 13:55:07 SUCCESS
EnsureRequestObjectContainsCodeChallengeWhenUsingPAR
Found required PKCE parameters in request
code_challenge_method
S256
code_challenge
RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE
2022-04-12 13:55:07 SUCCESS
CreatePAREndpointResponse
Created PAR endpoint response
request_uri
urn:ietf:params:oauth:request_uri:f1e969c3-4dd6-4eda-b797-a45f98f6af85
expires_in
600
2022-04-12 13:55:07 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
201
outgoing_headers
{}
outgoing_body
{
  "request_uri": "urn:ietf:params:oauth:request_uri:f1e969c3-4dd6-4eda-b797-a45f98f6af85",
  "expires_in": 600
}
outgoing_path
par
2022-04-12 13:55:07 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/jwks
incoming_headers
{
  "host": "www.certification.openid.net",
  "accept": "application/json, application/jwk-set+json",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-12 13:55:07 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-12 13:55:07 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "3C8F0E2C3EF1334B6FED8648F98942BFD53BA9B6",
      "alg": "RSA-OAEP",
      "n": "ynQDyAUomK2AogeCyYc4H0xamUxJnHNf6H6sxxnCiwMS0QILmjJVrK928bsOfJKrCWepP7yXaC54V10xkqPCrXCG3_bQls-1AaLvVHDz_Apk3h_o8daoSrd0CKzrcxzE3sgTIcXEzDxB8wgLtaAw8Uwl49b3q3Pv7cmpgUyDgV43aKyHZ-1IvCH5Mfxs5VmU_J-o7AVgIrIc0rqOuaUzW8ombsY0bSzoBQWL6S-Qss8VIarjY6ZBgn1RVEokeE5rJszmxw5ci9IllUH3igjWbrdd61fbdEt3Gzk-tax8jnnQibNdLjDbWqwkUIAOJ_UK7NjVkwj5whq7Oj4VdSwm5Q"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "x5t": "Rnv7xLxPK1rRrTTN7nf3e5yAxbQ",
      "kid": "467BFBC4BC4F2B5AD1AD34CDEE77F77B9C80C5B4",
      "x5c": [
        "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"
      ],
      "alg": "PS256",
      "n": "n2Ah-mLbCSftXbWMRyk8cQAdoaX4pvUfqtliEIlKezzJqDVcqUj2ImTcaE-kIFvdHfkAKagqLRzskpRyvw-5c-gT58k5VY-Bo_8z_P29cXCJuv_5U5WoUbgD34OJ4RxWF1c7fV1R3PCmoSizpOTGRl3INSKy2dBH__8GxS_dXZyOXGGvxnklgNmD2KLSlAsUKAGIkg3-2Ji5J69GB9EH-wYkge-HJAW7TdaD05sVg3gbGP1Xna6E6bGUpNOWitisSoJRPhEDoi1CqhkcHjpDzWohalsW0us7FQhEMptaFrrsIoP3DRlfBlcUTEReQogy3flU47O32WDyBjR_UAcEPw"
    }
  ]
}
outgoing_path
jwks
2022-04-12 13:55:07 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/authorize
incoming_headers
{
  "host": "www.certification.openid.net",
  "cookie": "JSESSIONID\u003d27D7C9A995C14B0E58CB8968E6CB10F7",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/authorize
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "response_type": "code id_token",
  "scope": "openid payments consent:urn:conformance:oidf:V1gEBrndRj",
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "ZxvrHibg/bBft549P71F5sw435V10NbgxSysnbi0kqo\u003d",
  "nonce": "31rvHaW0eJg+gG9BB0KGFGnbvYX33z54Kg0okYCPHuE\u003d",
  "response_mode": "form_post",
  "request_uri": "urn:ietf:params:oauth:request_uri:f1e969c3-4dd6-4eda-b797-a45f98f6af85"
}
incoming_body
2022-04-12 13:55:07 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Authorization endpoint
2022-04-12 13:55:07 SUCCESS
EnsureAuthorizationRequestDoesNotContainRequestWhenUsingPAR
Request does not contain a request parameter
2022-04-12 13:55:07 INFO
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
path
jwe_header
mapped
object
authorization_request_object
2022-04-12 13:55:07 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "response_type": "code id_token",
  "scope": "openid payments consent:urn:conformance:oidf:V1gEBrndRj",
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "88469c1f447548ce97810115337b1661",
  "nonce": "31rvHaW0eJg+gG9BB0KGFGnbvYX33z54Kg0okYCPHuE\u003d",
  "response_mode": "form_post",
  "iss": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "code_challenge_method": "S256",
  "acr": {
    "loa2": "urn:brasil:openbanking:loa2",
    "loa3": "urn:brasil:openbanking:loa3"
  },
  "aud": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "nbf": 1649771706,
  "exp": 1649773506,
  "iat": 1649771706,
  "code_challenge": "RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE"
}
2022-04-12 13:55:07 SUCCESS
EnsureClientIdInAuthorizationRequestParametersMatchRequestObject
client_id http request parameter value matches client_id in request object
2022-04-12 13:55:07 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid payments consent:urn:conformance:oidf:V1gEBrndRj
2022-04-12 13:55:07 SUCCESS
FAPIBrazilValidateConsentScope
Found consent scope in request
actual
[
  "openid",
  "payments",
  "consent:urn:conformance:oidf:V1gEBrndRj"
]
expected
consent:urn:conformance:oidf:V1gEBrndRj
2022-04-12 13:55:07 SUCCESS
EnsureScopeContainsPayments
Found payments scope in request
actual
[
  "openid",
  "payments",
  "consent:urn:conformance:oidf:V1gEBrndRj"
]
2022-04-12 13:55:07 SUCCESS
EnsureResponseTypeIsCodeIdToken
Response type is expected value
expected
code id_token
2022-04-12 13:55:07 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid",
  "payments",
  "consent:urn:conformance:oidf:V1gEBrndRj"
]
expected
openid
2022-04-12 13:55:07 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-12 13:55:07 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
9uSrhwStECAyHWHmgaSt3JzZ6VZGSbsQ
2022-04-12 13:55:07 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
31rvHaW0eJg+gG9BB0KGFGnbvYX33z54Kg0okYCPHuE=
2022-04-12 13:55:07 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash
DZ_hL8jVHw0jXE15UT0HNg
2022-04-12 13:55:07 SUCCESS
CalculateSHash
Successful s_hash encoding
s_hash
Itsr8DeAjwoaqpum5G3LOg
2022-04-12 13:55:07 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/
sub
user-subject-1234531
aud
ed515952-455b-4639-a3f5-c50f3e51c08c
nonce
31rvHaW0eJg+gG9BB0KGFGnbvYX33z54Kg0okYCPHuE=
iat
1649771707
exp
1649772007
2022-04-12 13:55:07
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Request object does not contain a claims element.id_token
2022-04-12 13:55:07 SUCCESS
AddCHashToIdTokenClaims
Added c_hash to ID token claims
c_hash
DZ_hL8jVHw0jXE15UT0HNg
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "sub": "user-subject-1234531",
  "aud": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "nonce": "31rvHaW0eJg+gG9BB0KGFGnbvYX33z54Kg0okYCPHuE\u003d",
  "iat": 1649771707,
  "exp": 1649772007,
  "c_hash": "DZ_hL8jVHw0jXE15UT0HNg"
}
2022-04-12 13:55:07 SUCCESS
AddSHashToIdTokenClaims
Added s_hash to ID token claims
s_hash
Itsr8DeAjwoaqpum5G3LOg
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "sub": "user-subject-1234531",
  "aud": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "nonce": "31rvHaW0eJg+gG9BB0KGFGnbvYX33z54Kg0okYCPHuE\u003d",
  "iat": 1649771707,
  "exp": 1649772007,
  "c_hash": "DZ_hL8jVHw0jXE15UT0HNg",
  "s_hash": "Itsr8DeAjwoaqpum5G3LOg"
}
2022-04-12 13:55:07 INFO
AddAtHashToIdTokenClaims
Skipped evaluation due to missing required string: at_hash
expected
at_hash
2022-04-12 13:55:07 INFO
FAPIBrazilAddACRClaimToIdTokenClaims
Skipped evaluation due to missing required string: requested_id_token_acr_values
expected
requested_id_token_acr_values
2022-04-12 13:55:07 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImVkNTE1OTUyLTQ1NWItNDYzOS1hM2Y1LWM1MGYzZTUxYzA4YyIsImNfaGFzaCI6IkRaX2hMOGpWSHcwalhFMTVVVDBITmciLCJzX2hhc2giOiJJdHNyOERlQWp3b2FxcHVtNUczTE9nIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3NzIwMDcsIm5vbmNlIjoiMzFydkhhVzBlSmcrZ0c5QkIwS0dGR25idllYMzN6NTRLZzBva1lDUEh1RT0iLCJpYXQiOjE2NDk3NzE3MDd9.AUfLsEV8tyP39ku_uR7K4mf0-MwEh4aZdSQm-SwAfr-J0I7on56eNQK65nDCpZ6PZhQkCmC5bnqT5kWvcwNA_VFq8p6mdVhrkRuKSb_8Gfx6mET5jkCT58qTWTX7KzjBqzlHSF2fBPdENzZJhW4GiXTa042A9lQ1ypNvXAfyf7Qp8i0t8kb8ekE8QNPrsFMXCXnIGX0bBDhF0g-xo4U0Dxqr7Oex0ltAr84OvTQCRzJ9Q5IkJ1IVW0vYX2XsXDDqBYKiSbSAsm5X08rTCooKjsfzgif1QalHP_L3KwOxxbJFfwYYvtjz0n3CHdk4ajeFLLrWS3h06CAQckosqrlhDQ
2022-04-12 13:55:07 SUCCESS
FAPIBrazilChangeConsentStatusToAuthorized
Changed consent status to AUTHORISED
consent
{
  "data": {
    "consentId": "urn:conformance:oidf:V1gEBrndRj",
    "creationDateTime": "2022-04-12T13:55:05Z",
    "status": "AUTHORISED",
    "statusUpdateDateTime": "2022-04-12T13:55:07Z",
    "expirationDateTime": "2022-04-12T15:55:05Z",
    "transactionFromDateTime": "2022-04-12T13:50:05Z",
    "transactionToDateTime": "2022-04-12T15:55:05Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Partypayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-04-12T13:55:05Z"
    },
    "creditor": {
      "name": "João",
      "cpfCnpj": "00000000000",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "00000000000",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "12/04/2022",
      "amount": "1000,50",
      "currency": "BRL",
      "details": {
        "proxy": "chavePix",
        "localInstrument": "MAN",
        "qrCode": "00020101021126440014br.gov.bcb.pix0122chavePix5204000053031000,505802BR5913João6008SAOPAULO63044BE9",
        "creditorAccount": {
          "number": "1234567890",
          "accountType": "CACC",
          "ispb": "12345678",
          "issuer": "1774"
        }
      },
      "type": "PIX",
      "ibgeTownCode": "3505708"
    },
    "businessEntity": {
      "document": {
        "identification": "00000000000000",
        "rel": "CNPJ"
      }
    },
    "debtorAccount": {
      "number": "1234567890",
      "accountType": "CACC",
      "ispb": "12345678",
      "issuer": "1774"
    }
  },
  "aud": "4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8",
  "iat": 1649771705,
  "jti": "2b2bfef4-243d-413d-be00-b6230826bbd7",
  "iss": "4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8"
}
2022-04-12 13:55:07 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "88469c1f447548ce97810115337b1661"
}
2022-04-12 13:55:07 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "88469c1f447548ce97810115337b1661",
  "code": "9uSrhwStECAyHWHmgaSt3JzZ6VZGSbsQ"
}
2022-04-12 13:55:07 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "state": "88469c1f447548ce97810115337b1661",
  "code": "9uSrhwStECAyHWHmgaSt3JzZ6VZGSbsQ",
  "id_token": "eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImVkNTE1OTUyLTQ1NWItNDYzOS1hM2Y1LWM1MGYzZTUxYzA4YyIsImNfaGFzaCI6IkRaX2hMOGpWSHcwalhFMTVVVDBITmciLCJzX2hhc2giOiJJdHNyOERlQWp3b2FxcHVtNUczTE9nIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3NzIwMDcsIm5vbmNlIjoiMzFydkhhVzBlSmcrZ0c5QkIwS0dGR25idllYMzN6NTRLZzBva1lDUEh1RT0iLCJpYXQiOjE2NDk3NzE3MDd9.AUfLsEV8tyP39ku_uR7K4mf0-MwEh4aZdSQm-SwAfr-J0I7on56eNQK65nDCpZ6PZhQkCmC5bnqT5kWvcwNA_VFq8p6mdVhrkRuKSb_8Gfx6mET5jkCT58qTWTX7KzjBqzlHSF2fBPdENzZJhW4GiXTa042A9lQ1ypNvXAfyf7Qp8i0t8kb8ekE8QNPrsFMXCXnIGX0bBDhF0g-xo4U0Dxqr7Oex0ltAr84OvTQCRzJ9Q5IkJ1IVW0vYX2XsXDDqBYKiSbSAsm5X08rTCooKjsfzgif1QalHP_L3KwOxxbJFfwYYvtjz0n3CHdk4ajeFLLrWS3h06CAQckosqrlhDQ"
}
2022-04-12 13:55:07
SendAuthorizationResponseWithResponseModeFragment
Redirecting back to client
uri
https://tpp.openfinance.celcoin.dev/signin-oidc#state=88469c1f447548ce97810115337b1661&code=9uSrhwStECAyHWHmgaSt3JzZ6VZGSbsQ&id_token=eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImVkNTE1OTUyLTQ1NWItNDYzOS1hM2Y1LWM1MGYzZTUxYzA4YyIsImNfaGFzaCI6IkRaX2hMOGpWSHcwalhFMTVVVDBITmciLCJzX2hhc2giOiJJdHNyOERlQWp3b2FxcHVtNUczTE9nIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3NzIwMDcsIm5vbmNlIjoiMzFydkhhVzBlSmcrZ0c5QkIwS0dGR25idllYMzN6NTRLZzBva1lDUEh1RT0iLCJpYXQiOjE2NDk3NzE3MDd9.AUfLsEV8tyP39ku_uR7K4mf0-MwEh4aZdSQm-SwAfr-J0I7on56eNQK65nDCpZ6PZhQkCmC5bnqT5kWvcwNA_VFq8p6mdVhrkRuKSb_8Gfx6mET5jkCT58qTWTX7KzjBqzlHSF2fBPdENzZJhW4GiXTa042A9lQ1ypNvXAfyf7Qp8i0t8kb8ekE8QNPrsFMXCXnIGX0bBDhF0g-xo4U0Dxqr7Oex0ltAr84OvTQCRzJ9Q5IkJ1IVW0vYX2XsXDDqBYKiSbSAsm5X08rTCooKjsfzgif1QalHP_L3KwOxxbJFfwYYvtjz0n3CHdk4ajeFLLrWS3h06CAQckosqrlhDQ
2022-04-12 13:55:07 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://tpp.openfinance.celcoin.dev/signin-oidc#state=88469c1f447548ce97810115337b1661&code=9uSrhwStECAyHWHmgaSt3JzZ6VZGSbsQ&id_token=eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6ImVkNTE1OTUyLTQ1NWItNDYzOS1hM2Y1LWM1MGYzZTUxYzA4YyIsImNfaGFzaCI6IkRaX2hMOGpWSHcwalhFMTVVVDBITmciLCJzX2hhc2giOiJJdHNyOERlQWp3b2FxcHVtNUczTE9nIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3NzIwMDcsIm5vbmNlIjoiMzFydkhhVzBlSmcrZ0c5QkIwS0dGR25idllYMzN6NTRLZzBva1lDUEh1RT0iLCJpYXQiOjE2NDk3NzE3MDd9.AUfLsEV8tyP39ku_uR7K4mf0-MwEh4aZdSQm-SwAfr-J0I7on56eNQK65nDCpZ6PZhQkCmC5bnqT5kWvcwNA_VFq8p6mdVhrkRuKSb_8Gfx6mET5jkCT58qTWTX7KzjBqzlHSF2fBPdENzZJhW4GiXTa042A9lQ1ypNvXAfyf7Qp8i0t8kb8ekE8QNPrsFMXCXnIGX0bBDhF0g-xo4U0Dxqr7Oex0ltAr84OvTQCRzJ9Q5IkJ1IVW0vYX2XsXDDqBYKiSbSAsm5X08rTCooKjsfzgif1QalHP_L3KwOxxbJFfwYYvtjz0n3CHdk4ajeFLLrWS3h06CAQckosqrlhDQ]
outgoing_path
authorize
2022-04-12 13:55:21 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "243"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "9uSrhwStECAyHWHmgaSt3JzZ6VZGSbsQ",
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "code_verifier": "ed515952-455b-4639-a3f5-c50f3e51c08curn:con",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=9uSrhwStECAyHWHmgaSt3JzZ6VZGSbsQ&redirect_uri=https%3A%2F%2Ftpp.openfinance.celcoin.dev%2Fsignin-oidc&code_verifier=ed515952-455b-4639-a3f5-c50f3e51c08curn%3Acon&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-12 13:55:21 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-12 13:55:21 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-12 13:55:21 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----\nMIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5\nMTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD\no28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG\nA1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD\nVQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw\nMDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC\nNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx\nMDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA\nsKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M\nW5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y\n6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p\npBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV\n1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1\nYLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV\nHQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO\ntAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v\nb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f\nBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy\nYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j\nZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw\nggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH\nAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0\naCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp\nbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz\nIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np\nb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g\nU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1\nbWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w\na2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB\nCwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD\naM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv\n4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv\nH4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go\nMJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-12 13:55:21 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-12 13:55:21 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-12 13:55:21 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-12 13:55:21 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-12 13:55:21 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
9uSrhwStECAyHWHmgaSt3JzZ6VZGSbsQ
2022-04-12 13:55:21 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
https://tpp.openfinance.celcoin.dev/signin-oidc
2022-04-12 13:55:21 SUCCESS
ValidateCodeVerifierWithS256
Validated code_verifier successfully
code_challenge_method
S256
code_verifier
ed515952-455b-4639-a3f5-c50f3e51c08curn:con
code_challenge
RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE
2022-04-12 13:55:21 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
oJtockhq3i4Nt3rzzphUJCfa2FS8w4Qd6UJ9b2qebGGrRmwU0A
2022-04-12 13:55:21 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
4womQyY-wrYVvGlL68Zm7Q
2022-04-12 13:55:21
CreateRefreshToken
Created refresh token
refresh_token
eLdPHrlxkjOptFvIbIwMVsKwDVYKHRfiAsGtiGEFpNDzUjgTxx2401010280`==?"
2022-04-12 13:55:21 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/
sub
user-subject-1234531
aud
ed515952-455b-4639-a3f5-c50f3e51c08c
nonce
31rvHaW0eJg+gG9BB0KGFGnbvYX33z54Kg0okYCPHuE=
iat
1649771721
exp
1649772021
2022-04-12 13:55:21
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Request object does not contain a claims element.id_token
2022-04-12 13:55:21 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
4womQyY-wrYVvGlL68Zm7Q
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "sub": "user-subject-1234531",
  "aud": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "nonce": "31rvHaW0eJg+gG9BB0KGFGnbvYX33z54Kg0okYCPHuE\u003d",
  "iat": 1649771721,
  "exp": 1649772021,
  "at_hash": "4womQyY-wrYVvGlL68Zm7Q"
}
2022-04-12 13:55:21 INFO
FAPIBrazilAddACRClaimToIdTokenClaims
Skipped evaluation due to missing required string: requested_id_token_acr_values
expected
requested_id_token_acr_values
2022-04-12 13:55:21 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiNHdvbVF5WS13cllWdkdsTDY4Wm03USIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3NzIwMjEsIm5vbmNlIjoiMzFydkhhVzBlSmcrZ0c5QkIwS0dGR25idllYMzN6NTRLZzBva1lDUEh1RT0iLCJpYXQiOjE2NDk3NzE3MjF9.K3RdgfyLLvOVvNTwnmudiSyNHNPk9GniPy-SZnMdF7oichaykycHi8HgGlNMVbxn3cPK2wgt4IJlWR4PvwfH0URGgzF78OSUbon0Fl6LFWANs2gpn9DrPHIIJxPkaMLSFfn60Izux40WhlcQuNtVxkYdFLT-p_z4Y64wU7GEURw2o7G2NllGS_kP3SCJuvjQnUvP8wRBFkcFTUlkVtRRCaomyGu0Fx_ytRDXNNB14El9HX4syInwyYvmMKt_c8tEde-P3cGmGvFXUDG5lnAjTbwzoILQucbjaVt7SAg6vu9M0l8syR2xrLALc0RkKAHyjHFSf-wEpeRR6iPXQi1EWA
2022-04-12 13:55:21 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
oJtockhq3i4Nt3rzzphUJCfa2FS8w4Qd6UJ9b2qebGGrRmwU0A
token_type
Bearer
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiNHdvbVF5WS13cllWdkdsTDY4Wm03USIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3NzIwMjEsIm5vbmNlIjoiMzFydkhhVzBlSmcrZ0c5QkIwS0dGR25idllYMzN6NTRLZzBva1lDUEh1RT0iLCJpYXQiOjE2NDk3NzE3MjF9.K3RdgfyLLvOVvNTwnmudiSyNHNPk9GniPy-SZnMdF7oichaykycHi8HgGlNMVbxn3cPK2wgt4IJlWR4PvwfH0URGgzF78OSUbon0Fl6LFWANs2gpn9DrPHIIJxPkaMLSFfn60Izux40WhlcQuNtVxkYdFLT-p_z4Y64wU7GEURw2o7G2NllGS_kP3SCJuvjQnUvP8wRBFkcFTUlkVtRRCaomyGu0Fx_ytRDXNNB14El9HX4syInwyYvmMKt_c8tEde-P3cGmGvFXUDG5lnAjTbwzoILQucbjaVt7SAg6vu9M0l8syR2xrLALc0RkKAHyjHFSf-wEpeRR6iPXQi1EWA
refresh_token
eLdPHrlxkjOptFvIbIwMVsKwDVYKHRfiAsGtiGEFpNDzUjgTxx2401010280`==?"
scope
openid payments consent:urn:conformance:oidf:V1gEBrndRj
2022-04-12 13:55:21
RemoveIssuedAccessTokenFromEnvironment
Removed access_token and token_type from environment
2022-04-12 13:55:21 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "oJtockhq3i4Nt3rzzphUJCfa2FS8w4Qd6UJ9b2qebGGrRmwU0A",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiNHdvbVF5WS13cllWdkdsTDY4Wm03USIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3NzIwMjEsIm5vbmNlIjoiMzFydkhhVzBlSmcrZ0c5QkIwS0dGR25idllYMzN6NTRLZzBva1lDUEh1RT0iLCJpYXQiOjE2NDk3NzE3MjF9.K3RdgfyLLvOVvNTwnmudiSyNHNPk9GniPy-SZnMdF7oichaykycHi8HgGlNMVbxn3cPK2wgt4IJlWR4PvwfH0URGgzF78OSUbon0Fl6LFWANs2gpn9DrPHIIJxPkaMLSFfn60Izux40WhlcQuNtVxkYdFLT-p_z4Y64wU7GEURw2o7G2NllGS_kP3SCJuvjQnUvP8wRBFkcFTUlkVtRRCaomyGu0Fx_ytRDXNNB14El9HX4syInwyYvmMKt_c8tEde-P3cGmGvFXUDG5lnAjTbwzoILQucbjaVt7SAg6vu9M0l8syR2xrLALc0RkKAHyjHFSf-wEpeRR6iPXQi1EWA",
  "refresh_token": "eLdPHrlxkjOptFvIbIwMVsKwDVYKHRfiAsGtiGEFpNDzUjgTxx2401010280`\u003d\u003d?\"",
  "scope": "openid payments consent:urn:conformance:oidf:V1gEBrndRj"
}
outgoing_path
token
2022-04-12 13:55:22 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "161"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "grant_type": "refresh_token",
  "refresh_token": "eLdPHrlxkjOptFvIbIwMVsKwDVYKHRfiAsGtiGEFpNDzUjgTxx2401010280`\u003d\u003d?\"",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=refresh_token&refresh_token=eLdPHrlxkjOptFvIbIwMVsKwDVYKHRfiAsGtiGEFpNDzUjgTxx2401010280%60%3D%3D%3F%22&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-12 13:55:22 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-12 13:55:22 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-12 13:55:22 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-12 13:55:22 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-12 13:55:22 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-12 13:55:22 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-12 13:55:22 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-12 13:55:22 SUCCESS
ValidateRefreshToken
refresh_token parameter matches the expected value.
refresh_token
eLdPHrlxkjOptFvIbIwMVsKwDVYKHRfiAsGtiGEFpNDzUjgTxx2401010280`==?"
2022-04-12 13:55:22 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
x8QKDPF8dttvQ93bz7wdgZpUXzawQ2ZmQUhs5J2zMO3eUqXSBi
2022-04-12 13:55:22 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
9fFv3vprkTy6NykgdCYQIA
2022-04-12 13:55:22
CreateRefreshToken
Created refresh token
refresh_token
TFXJuLetGfithqYQBofpWitYkdTMPQWPYBSvYjpCZwfvlAQbQd7223907150!$/{+
2022-04-12 13:55:22 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
x8QKDPF8dttvQ93bz7wdgZpUXzawQ2ZmQUhs5J2zMO3eUqXSBi
token_type
Bearer
refresh_token
TFXJuLetGfithqYQBofpWitYkdTMPQWPYBSvYjpCZwfvlAQbQd7223907150!$/{+
scope
openid payments consent:urn:conformance:oidf:V1gEBrndRj
2022-04-12 13:55:22 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "x8QKDPF8dttvQ93bz7wdgZpUXzawQ2ZmQUhs5J2zMO3eUqXSBi",
  "token_type": "Bearer",
  "refresh_token": "TFXJuLetGfithqYQBofpWitYkdTMPQWPYBSvYjpCZwfvlAQbQd7223907150!$/{+",
  "scope": "openid payments consent:urn:conformance:oidf:V1gEBrndRj"
}
outgoing_path
token
2022-04-12 13:55:28 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer x8QKDPF8dttvQ93bz7wdgZpUXzawQ2ZmQUhs5J2zMO3eUqXSBi",
  "x-idempotency-key": "d0582f688d9d4d7ab35c4439228a6698",
  "content-type": "application/jwt",
  "connection": "close",
  "content-length": "1216"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiJmOWJkZDk5Ny1iNTdlLTQxODUtYmU4Yy1kZmU5MDRiNjk5ZDQiLCJkYXRhIjp7ImxvY2FsSW5zdHJ1bWVudCI6Ik1BTiIsInBheW1lbnQiOnsiYW1vdW50IjoiMTAwMCw1MCIsImN1cnJlbmN5IjoiQlJMIn0sImNyZWRpdG9yQWNjb3VudCI6eyJpc3BiIjoiMTIzNDU2NzgiLCJpc3N1ZXIiOiIxNzc0IiwibnVtYmVyIjoiMTIzNDU2Nzg5MCIsImFjY291bnRUeXBlIjoiQ0FDQyJ9LCJyZW1pdHRhbmNlSW5mb3JtYXRpb24iOm51bGwsInFyQ29kZSI6bnVsbCwicHJveHkiOiJjaGF2ZVBpeCIsImNucGpJbml0aWF0b3IiOiIwMDAwMDAwMDAwMDAwMCIsInRyYW5zYWN0aW9uSWRlbnRpZmljYXRpb24iOm51bGwsImliZ2VUb3duQ29kZSI6IjM1MDU3MDgiLCJQYXllckRvY3VtZW50IjpudWxsLCJSZWNlaXZlckRvY3VtZW50IjpudWxsfSwibmJmIjoxNjQ5NzcxNzIyLCJleHAiOjE2NDk3NzE4NDIsImlhdCI6MTY0OTc3MTg0MiwiaXNzIjoiNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4IiwiYXVkIjoiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5L3BheW1lbnRzL3YxL3BpeC9wYXltZW50cyJ9.M2dDfgu7GGH99QiUs2xQimqQfu8Jf3o9f193IHZvE91FScToRyCaalUEwks260uNzNe1MfdwMJH9HPnDEu3TcAR92Js1jpmfI7qaaoRjekiopq1_kOd0zFHYodjCrdHpBDnY5ve8mVO_6SII4x5YnoJC_x7JbIqgNsxKoVBOOhtW1kawAm4TB2Y-FojUBz01QVwO_Wmwz6082V85UBYVbrj1cME3z6ubSdFvJIkl350GOGKFEqnJy_bERHUBBai9PrhF1M72F15QwFK5rYeqSKdBhrceeuqLJXCpstwTZ6OpFwbLzCVIis2RZ95HKkxd_HMwYKD7AsLPXhB9u_e-1w
2022-04-12 13:55:28 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-04-12 13:55:28 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-04-12 13:55:28 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-04-12 13:56:43 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "request-id": "|d5923e81-436ffda6f23bbbe4.1.",
  "connection": "close"
}
incoming_path
/test/a/Celcoin_FAPI_Relying_Party/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-04-12 13:56:43 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-12 13:56:43 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/userinfo",
    "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/par"
  },
  "tls_client_certificate_bound_access_tokens": true,
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "token_endpoint_auth_methods_supported": [
    "tls_client_auth"
  ],
  "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/par",
  "require_pushed_authorization_requests": true,
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-04-12 13:57:29 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "243"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "9uSrhwStECAyHWHmgaSt3JzZ6VZGSbsQ",
  "redirect_uri": "https://tpp.openfinance.celcoin.dev/signin-oidc",
  "code_verifier": "ed515952-455b-4639-a3f5-c50f3e51c08curn:con",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=9uSrhwStECAyHWHmgaSt3JzZ6VZGSbsQ&redirect_uri=https%3A%2F%2Ftpp.openfinance.celcoin.dev%2Fsignin-oidc&code_verifier=ed515952-455b-4639-a3f5-c50f3e51c08curn%3Acon&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-12 13:57:29 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-12 13:57:29 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-12 13:57:29 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-12 13:57:29 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-12 13:57:29 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-12 13:57:29 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-12 13:57:29 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-12 13:57:29 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
9uSrhwStECAyHWHmgaSt3JzZ6VZGSbsQ
2022-04-12 13:57:29 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
https://tpp.openfinance.celcoin.dev/signin-oidc
2022-04-12 13:57:29 SUCCESS
ValidateCodeVerifierWithS256
Validated code_verifier successfully
code_challenge_method
S256
code_verifier
ed515952-455b-4639-a3f5-c50f3e51c08curn:con
code_challenge
RUIDY9ARg0D5fZAUHYnqAnsq_VBjfLKCJ0-0Gs-asFE
2022-04-12 13:57:29 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
IDRgcKJwrJC9BClF9S52gkA0gVBkdPRvDir6i6rjJocK8Y9XGC
2022-04-12 13:57:29 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
8oVWSBJizi4kRJ_8Klzl4A
2022-04-12 13:57:29
CreateRefreshToken
Created refresh token
refresh_token
uOYDmqYauQWvxGpTOzXUPNzrxcSvdTdkXwCRcreiiPVvbAVfql7990206691$@?]_
2022-04-12 13:57:29 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/
sub
user-subject-1234531
aud
ed515952-455b-4639-a3f5-c50f3e51c08c
nonce
31rvHaW0eJg+gG9BB0KGFGnbvYX33z54Kg0okYCPHuE=
iat
1649771849
exp
1649772149
2022-04-12 13:57:29
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Request object does not contain a claims element.id_token
2022-04-12 13:57:29 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
8oVWSBJizi4kRJ_8Klzl4A
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Party/",
  "sub": "user-subject-1234531",
  "aud": "ed515952-455b-4639-a3f5-c50f3e51c08c",
  "nonce": "31rvHaW0eJg+gG9BB0KGFGnbvYX33z54Kg0okYCPHuE\u003d",
  "iat": 1649771849,
  "exp": 1649772149,
  "at_hash": "8oVWSBJizi4kRJ_8Klzl4A"
}
2022-04-12 13:57:29 INFO
FAPIBrazilAddACRClaimToIdTokenClaims
Skipped evaluation due to missing required string: requested_id_token_acr_values
expected
requested_id_token_acr_values
2022-04-12 13:57:29 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiOG9WV1NCSml6aTRrUkpfOEtsemw0QSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3NzIxNDksIm5vbmNlIjoiMzFydkhhVzBlSmcrZ0c5QkIwS0dGR25idllYMzN6NTRLZzBva1lDUEh1RT0iLCJpYXQiOjE2NDk3NzE4NDl9.cv4VAnyffeabe-hDwNtLneKTG64uB_bFsAfVwd_9-Ca_fxGYkU8xbmDVGQoOwc1eepl3HbWLGwZtBEAuS30lSZsRtdlPSjMTGygFxnaSA8d2qnWv1fqW8EBfobt5q8yeO7O1L30KKOlnylV91vuXuF7lGHtWn-Wg76W741Earc_Ftz7PkYIArZLE9FNnvg9RkpGY6j0X6MPNBduHjX4E3elwx-IEXeirpBSmr6ixvuDGC9-iW5G-PxAVKJj1r_taU1FcQeTm2RazjV6lPNyRnqRXJs3qjKrRcuzAG09NJ3EqHTLeb5ofnkwO-2NBjTjTERLxOq196AUFEKJgK0yarA
2022-04-12 13:57:29 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
IDRgcKJwrJC9BClF9S52gkA0gVBkdPRvDir6i6rjJocK8Y9XGC
token_type
Bearer
id_token
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiOG9WV1NCSml6aTRrUkpfOEtsemw0QSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3NzIxNDksIm5vbmNlIjoiMzFydkhhVzBlSmcrZ0c5QkIwS0dGR25idllYMzN6NTRLZzBva1lDUEh1RT0iLCJpYXQiOjE2NDk3NzE4NDl9.cv4VAnyffeabe-hDwNtLneKTG64uB_bFsAfVwd_9-Ca_fxGYkU8xbmDVGQoOwc1eepl3HbWLGwZtBEAuS30lSZsRtdlPSjMTGygFxnaSA8d2qnWv1fqW8EBfobt5q8yeO7O1L30KKOlnylV91vuXuF7lGHtWn-Wg76W741Earc_Ftz7PkYIArZLE9FNnvg9RkpGY6j0X6MPNBduHjX4E3elwx-IEXeirpBSmr6ixvuDGC9-iW5G-PxAVKJj1r_taU1FcQeTm2RazjV6lPNyRnqRXJs3qjKrRcuzAG09NJ3EqHTLeb5ofnkwO-2NBjTjTERLxOq196AUFEKJgK0yarA
refresh_token
uOYDmqYauQWvxGpTOzXUPNzrxcSvdTdkXwCRcreiiPVvbAVfql7990206691$@?]_
scope
openid payments consent:urn:conformance:oidf:V1gEBrndRj
2022-04-12 13:57:29
RemoveIssuedAccessTokenFromEnvironment
Removed access_token and token_type from environment
2022-04-12 13:57:29 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "IDRgcKJwrJC9BClF9S52gkA0gVBkdPRvDir6i6rjJocK8Y9XGC",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiOG9WV1NCSml6aTRrUkpfOEtsemw0QSIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiZWQ1MTU5NTItNDU1Yi00NjM5LWEzZjUtYzUwZjNlNTFjMDhjIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL0NlbGNvaW5fRkFQSV9SZWx5aW5nX1BhcnR5XC8iLCJleHAiOjE2NDk3NzIxNDksIm5vbmNlIjoiMzFydkhhVzBlSmcrZ0c5QkIwS0dGR25idllYMzN6NTRLZzBva1lDUEh1RT0iLCJpYXQiOjE2NDk3NzE4NDl9.cv4VAnyffeabe-hDwNtLneKTG64uB_bFsAfVwd_9-Ca_fxGYkU8xbmDVGQoOwc1eepl3HbWLGwZtBEAuS30lSZsRtdlPSjMTGygFxnaSA8d2qnWv1fqW8EBfobt5q8yeO7O1L30KKOlnylV91vuXuF7lGHtWn-Wg76W741Earc_Ftz7PkYIArZLE9FNnvg9RkpGY6j0X6MPNBduHjX4E3elwx-IEXeirpBSmr6ixvuDGC9-iW5G-PxAVKJj1r_taU1FcQeTm2RazjV6lPNyRnqRXJs3qjKrRcuzAG09NJ3EqHTLeb5ofnkwO-2NBjTjTERLxOq196AUFEKJgK0yarA",
  "refresh_token": "uOYDmqYauQWvxGpTOzXUPNzrxcSvdTdkXwCRcreiiPVvbAVfql7990206691$@?]_",
  "scope": "openid payments consent:urn:conformance:oidf:V1gEBrndRj"
}
outgoing_path
token
2022-04-12 13:57:32 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "159"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/token
incoming_body_form_params
{
  "grant_type": "refresh_token",
  "refresh_token": "uOYDmqYauQWvxGpTOzXUPNzrxcSvdTdkXwCRcreiiPVvbAVfql7990206691$@?]_",
  "client_id": "ed515952-455b-4639-a3f5-c50f3e51c08c"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
grant_type=refresh_token&refresh_token=uOYDmqYauQWvxGpTOzXUPNzrxcSvdTdkXwCRcreiiPVvbAVfql7990206691%24%40%3F%5D_&client_id=ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-12 13:57:32 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-04-12 13:57:32 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
ed515952-455b-4639-a3f5-c50f3e51c08c
2022-04-12 13:57:32 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-12 13:57:32 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-12 13:57:32 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-04-12 13:57:32 SUCCESS
EnsureClientIdIsPresentOnTokenRequest
Parameter client_id found on the request
2022-04-12 13:57:32 SUCCESS
EnsureNoClientAssertionSentToTokenEndpoint
Client did not send a client_assertion to token endpoint
2022-04-12 13:57:32 SUCCESS
ValidateRefreshToken
refresh_token parameter matches the expected value.
refresh_token
uOYDmqYauQWvxGpTOzXUPNzrxcSvdTdkXwCRcreiiPVvbAVfql7990206691$@?]_
2022-04-12 13:57:32 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
uMTeA88z5N58cODGryoHrJXRlmZu8juR5gip4sBqRaBjhizjGW
2022-04-12 13:57:32 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
nOY70J-9UfOIDMlCsEk52g
2022-04-12 13:57:32
CreateRefreshToken
Created refresh token
refresh_token
zvoiiuioULhpoakuJHoVRzaukGqtLJJNHpPzLMINhANpdZeLjW7809773196=((,?
2022-04-12 13:57:32 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
uMTeA88z5N58cODGryoHrJXRlmZu8juR5gip4sBqRaBjhizjGW
token_type
Bearer
refresh_token
zvoiiuioULhpoakuJHoVRzaukGqtLJJNHpPzLMINhANpdZeLjW7809773196=((,?
scope
openid payments consent:urn:conformance:oidf:V1gEBrndRj
2022-04-12 13:57:32 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "uMTeA88z5N58cODGryoHrJXRlmZu8juR5gip4sBqRaBjhizjGW",
  "token_type": "Bearer",
  "refresh_token": "zvoiiuioULhpoakuJHoVRzaukGqtLJJNHpPzLMINhANpdZeLjW7809773196\u003d((,?",
  "scope": "openid payments consent:urn:conformance:oidf:V1gEBrndRj"
}
outgoing_path
token
2022-04-12 13:57:34 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/Celcoin_FAPI_Relying_Party/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer uMTeA88z5N58cODGryoHrJXRlmZu8juR5gip4sBqRaBjhizjGW",
  "x-idempotency-key": "cf746c0002f94237824d100bde7fcda7",
  "content-type": "application/jwt",
  "connection": "close",
  "content-length": "1216"
}
incoming_path
/test-mtls/a/Celcoin_FAPI_Relying_Party/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----
incoming_body_json
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.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.hc_os1Dv_Hw4RFHM2TjtCsZLQhp3xEqcse1g4dN1FxfOa9xTPCoXwvag1wy2iAT1dD8OaDbPcoTYxfoUXv0JedCw8KxgqClDJSdcbDYTvGtO5GKH98HNbgkZ6fEz2L84OImCbcu689h70mX5-iAB6Vvzo3KmGnwnLUpZLx1_u6jZpevIuPEkqM5Lo8ghZ0g9gIQI1G2hQMVOuI7GPRhUnvbU1cMSJXk_e0i3PwaKkELR87JHiXt5EiytHmJiu9XPwF1AmnesfQvV5gsgosWP21XI_v8Aa54OaQtotS5YMTCECHdUp6V0puKEWxVQP4AaIhA2fYve38sLtugfpigqVw
2022-04-12 13:57:34 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES256-GCM-SHA384
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-04-12 13:57:35 SUCCESS
ExtractClientCertificateFromTokenEndpointRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUCkOthNUoLMwsnOuDpyMlwp72wrAwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMTIwOTE5MTUwMFoXDTIzMDEwODE5 MTUwMFowggEmMQswCQYDVQQGEwJCUjELMAkGA1UECBMCU1AxEzARBgNVBAcMClPD o28gUGF1bG8xITAfBgNVBAoTGEJDTyBMVVNPIEJSQVNJTEVJUk8gUy5BLjEtMCsG A1UECxMkNGQyZjg3YTgtOGNmYy01NGIxLWE1YjQtY2EzOTMxOWZjOGM4MSAwHgYD VQQDExdvcGVuZmluYW5jZS5jZWxjb2luLmRldjEXMBUGA1UEBRMONTkxMTgxMzMw MDAxMDAxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGC NzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkZmEzYzFjMGYtYzFkOS00OGUzLWEx MDctZDhmZjk3NTc4NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA sKOpJV0ppKiCl/bSvFTpMoa4ZB59dqSwMEU0O/ulV+Mo9SOU1x86UWhcNh32aw2M W5lWOYzkcZ6tixiAFlDhZ4q/s05UcrQmAsVpBXh9e0CMW27wjGAYQSlgCueZVr9y 6p9FpfU9D6SYDoHZMBJTrhUYt+yATKHIk6y/2tXSIfJYNpDhBZq77ZCqcWalwn3p pBa9aw49MjmqHTsJb/Ht6Su292VoDWgRHoNOFuKwYaZVSKRTw8k2mNN2E+zLH8oV 1qGpSaNaxZcaJlnCNnw5NRg70SYMjZNtcIppmASt4we8SycXi8krIWFcM9ThSJh1 YLw5TIjUZlFwk+pQbayJwwIDAQABo4IC2zCCAtcwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUGSWH/BSgvsuoiRge+2nj/Kih2/4wHwYDVR0jBBgwFoAUhn9YrRf1grZO tAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzABhjBodHRwOi8v b2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIwSwYDVR0f BEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2Jy YXNpbC5vcmcuYnIvaXNzdWVyLmNybDAiBgNVHREEGzAZghdvcGVuZmluYW5jZS5j ZWxjb2luLmRldjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIw ggGhBgNVHSAEggGYMIIBlDCCAZAGCisGAQQBg7ovZAEwggGAMIIBNgYIKwYBBQUH AgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0 aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRp bmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRz IFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Np b24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0g U2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1 bWVudHMgdGhlcmVpbi4wRAYIKwYBBQUHAgEWOGh0dHA6Ly9jcHMuc2FuZGJveC5w a2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL3BvbGljaWVzMA0GCSqGSIb3DQEB CwUAA4IBAQBIrPhNO6uUOeAofrPKnco+7absg099+/sXYjP7jYl2HAXB6ExpTOrD aM7v/S0YkAqoOHzPoR9c9GG7FP5T44Q5+KDuYNqpcGSN5IW9Aq6agcOg9mqUfJgv 4mREQaSLrmhNp6gBIEfRk4Wk3JavUBHWbHcGB5OE0nwP825hOYAnOzPeVk7w54fv H4tfh2ca+U5rXaqyhcLFQkwDn3yAG6KF1SARAD0+s2jsbfOI0QxG0ujP9zDzu/Go MJyDPPOtvP8DZOC/rCjiRuN4EVRymPgF02+OOKDtJLYAxk2i7Z5slR1RiXjU30NB APbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1 -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nAPbGW8ZtPIg5oBYUoa1ll7c2KKSqNFq1\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dfa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3539313138313333303030313030,CN\u003dopenfinance.celcoin.dev,OU\u003d4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O\u003dBCO LUSO BRASILEIRO S.A.,L\u003dSão Paulo,ST\u003dSP,C\u003dBR"
  },
  "sanDnsNames": [
    "openfinance.celcoin.dev"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-04-12 13:57:35 SUCCESS
CheckForClientCertificate
Found client certificate
2022-04-12 13:57:35 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Payment initiation endpoint
2022-04-12 13:57:35 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2022-04-12 13:57:35 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-04-12 13:57:35 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
uMTeA88z5N58cODGryoHrJXRlmZu8juR5gip4sBqRaBjhizjGW
2022-04-12 13:57:35 SUCCESS
RequireBearerAccessToken
Found access token in request
actual
uMTeA88z5N58cODGryoHrJXRlmZu8juR5gip4sBqRaBjhizjGW
2022-04-12 13:57:35 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2022-04-12 13:57:35 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2022-04-12 13:57:35 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2022-04-12 13:57:35 SUCCESS
FAPIBrazilEnsureAuthorizationRequestScopesContainPayments
'payments' was included in authorization request scopes
actual
openid payments consent:urn:conformance:oidf:V1gEBrndRj
expected
payments
2022-04-12 13:57:35 SUCCESS
FAPIBrazilExtractPaymentInitiationRequest
Parsed payment initiation request
payment_initiation_request
{
  "aud": "https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/payments/v1/pix/payments",
  "nbf": 1649771854,
  "data": {
    "proxy": "chavePix",
    "localInstrument": "MAN",
    "qrCode": null,
    "PayerDocument": null,
    "remittanceInformation": null,
    "creditorAccount": {
      "number": "1234567890",
      "accountType": "CACC",
      "ispb": "12345678",
      "issuer": "1774"
    },
    "cnpjInitiator": "00000000000000",
    "ReceiverDocument": null,
    "payment": {
      "amount": "1000,50",
      "currency": "BRL"
    },
    "ibgeTownCode": "3505708",
    "transactionIdentification": null
  },
  "iss": "4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8",
  "exp": 1649771974,
  "iat": 1649771974,
  "jti": "71ed37a3-9129-4432-9f27-03fbfffcac19"
}
2022-04-12 13:57:35 SUCCESS
FAPIBrazilValidateJwtSignatureUsingOrganizationJwks
jwt signature validated
jwt
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCJ9.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.hc_os1Dv_Hw4RFHM2TjtCsZLQhp3xEqcse1g4dN1FxfOa9xTPCoXwvag1wy2iAT1dD8OaDbPcoTYxfoUXv0JedCw8KxgqClDJSdcbDYTvGtO5GKH98HNbgkZ6fEz2L84OImCbcu689h70mX5-iAB6Vvzo3KmGnwnLUpZLx1_u6jZpevIuPEkqM5Lo8ghZ0g9gIQI1G2hQMVOuI7GPRhUnvbU1cMSJXk_e0i3PwaKkELR87JHiXt5EiytHmJiu9XPwF1AmnesfQvV5gsgosWP21XI_v8Aa54OaQtotS5YMTCECHdUp6V0puKEWxVQP4AaIhA2fYve38sLtugfpigqVw
2022-04-12 13:57:35 SUCCESS
EnsureIncomingRequestContentTypeIsApplicationJwt
Client correctly used application/jwt content type
2022-04-12 13:57:35 SUCCESS
ExtractXIdempotencyKeyHeader
Found an x-idempotency-key header
idempotency_key
cf746c0002f94237824d100bde7fcda7
2022-04-12 13:57:35 SUCCESS
FAPIBrazilValidatePaymentInitiationRequestAud
aud claim matches the endpoint url
aud
https://www.certification.openid.net/test-mtls/a/Celcoin_FAPI_Relying_Party/payments/v1/pix/payments
2022-04-12 13:57:35 SUCCESS
FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate
Extracted subject from the mtls client certificate
subjectdn
UID=fa3c1c0f-c1d9-48e3-a107-d8ff97578670,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,2.5.4.5=#130e3539313138313333303030313030,CN=openfinance.celcoin.dev,OU=4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8,O=BCO LUSO BRASILEIRO S.A.,L=São Paulo,ST=SP,C=BR
ou
4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8
brazil_software_id
fa3c1c0f-c1d9-48e3-a107-d8ff97578670
2022-04-12 13:57:35 SUCCESS
FAPIBrazilEnsurePaymentInitiationRequestIssEqualsOrganizationId
iss claim in payment initiation request matches organizationId in client certificate
iss
4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8
2022-04-12 13:57:35 SUCCESS
FAPIBrazilEnsurePaymentInitiationRequestJtiIsUUIDv4
jti claim in payment initiation request is a UUIDv4
jti
71ed37a3-9129-4432-9f27-03fbfffcac19
2022-04-12 13:57:35 SUCCESS
FAPIBrazilValidatePaymentInitiationRequestIat
iat claim in payment initiation request is valid
iat
1649771974
2022-04-12 13:57:35 SUCCESS
FAPIBrazilGenerateNewPaymentInitiationResponse
Created payment initiation response
payment_initiation_response_headers
{
  "x-fapi-interaction-id": "a2c1c9fb-6cf5-443b-9a92-c18cc1ece8bc"
}
payment_initiation_response
{
  "data": {
    "proxy": "chavePix",
    "localInstrument": "MAN",
    "qrCode": null,
    "PayerDocument": null,
    "remittanceInformation": null,
    "creditorAccount": {
      "number": "1234567890",
      "accountType": "CACC",
      "ispb": "12345678",
      "issuer": "1774"
    },
    "cnpjInitiator": "00000000000000",
    "ReceiverDocument": null,
    "payment": {
      "amount": "1000,50",
      "currency": "BRL"
    },
    "ibgeTownCode": "3505708",
    "transactionIdentification": null,
    "paymentId": "4a8adfa7-07ed-46a9-9718-5b94d6e02de4",
    "consentId": "urn:conformance:oidf:V1gEBrndRj",
    "creationDateTime": "2022-04-12T13:57:35Z",
    "statusUpdateDateTime": "2022-04-12T13:57:35Z",
    "status": "ACSP"
  },
  "links": {
    "self": "https://www.certification.openid.net/test/a/Celcoin_FAPI_Relying_Partypayments/v1/pix/payments"
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-04-12T13:57:35Z"
  },
  "aud": "4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8",
  "iat": 1649771855,
  "jti": "02f2d0e3-d7f8-4f90-905d-976bb696a5b8",
  "iss": "4d2f87a8-8cfc-54b1-a5b4-ca39319fc8c8"
}
2022-04-12 13:57:35 SUCCESS
FAPIBrazilSignPaymentInitiationResponse
Signed the payment initiation response
signed_payment_initiation_response
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.KaUJwqmSSf6UkGLnMUu2ReM4ayLg7gKIrHUfqCDkqZQ3inIz_HRc1ddG7bqWyoU8GkpfBzJDZjsy1CDKkg4m2NQmnBF41KBO12Yth8bQk2SG6HFok9oRLGTRlUE2bXMjV9rU-6YMwI9-blxE_mjkdTs3sPVfJ5sG-7YajCthtjowAnYvRRG8KFFEyJIgqfCez39Gu5Txym2VUSvfW-yOtWIy5UH96XgWAFE53vCzmFv95zUlP5wqTf0xVhpLFyRlbF-FHzfG70UrX3--NOR5abo-102QipA5LY4-1VIvjp9s_0j9s-EtU94tNyXd8LocuDpdS9EuZJ6kBCsChIZhsA
2022-04-12 13:57:35
ClearAccessTokenFromRequest
Condition ran but did not log anything
2022-04-12 13:57:35 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance Snqe2hJPXgCdT4q
outgoing_status_code
201
outgoing_headers
{
  "x-fapi-interaction-id": [
    "a2c1c9fb-6cf5-443b-9a92-c18cc1ece8bc"
  ],
  "Content-Type": [
    "application/jwt"
  ]
}
outgoing_body
eyJraWQiOiI0NjdCRkJDNEJDNEYyQjVBRDFBRDM0Q0RFRTc3Rjc3QjlDODBDNUI0IiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.KaUJwqmSSf6UkGLnMUu2ReM4ayLg7gKIrHUfqCDkqZQ3inIz_HRc1ddG7bqWyoU8GkpfBzJDZjsy1CDKkg4m2NQmnBF41KBO12Yth8bQk2SG6HFok9oRLGTRlUE2bXMjV9rU-6YMwI9-blxE_mjkdTs3sPVfJ5sG-7YajCthtjowAnYvRRG8KFFEyJIgqfCez39Gu5Txym2VUSvfW-yOtWIy5UH96XgWAFE53vCzmFv95zUlP5wqTf0xVhpLFyRlbF-FHzfG70UrX3--NOR5abo-102QipA5LY4-1VIvjp9s_0j9s-EtU94tNyXd8LocuDpdS9EuZJ6kBCsChIZhsA
outgoing_path
payments/v1/pix/payments
2022-04-12 13:57:35 FINISHED
fapi1-advanced-final-client-refresh-token-test
Test has run to completion
testmodule_result
PASSED
2022-04-12 13:58:33
TEST-RUNNER
Alias has now been claimed by another test
alias
Celcoin_FAPI_Relying_Party
new_test_id
jbwfbSSQOWI8WzZ
Test Results