Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-05-19 13:33:17 INFO
TEST-RUNNER
Test instance SVzX48yENnPW8Yp created
baseUrl
https://www.certification.openid.net/test/a/keycloak
variant
{
  "client_auth_type": "client_secret_basic",
  "response_type": "code",
  "server_metadata": "discovery",
  "response_mode": "default",
  "client_registration": "dynamic_client"
}
alias
keycloak
description
Keycloak, OpenID Connect Core: Basic Certification Profile (server_metadata:discovery/client_registration:dynamic_client)
planId
AARDBxQWkvyJU
config
{
  "alias": "keycloak",
  "description": "Keycloak, OpenID Connect Core: Basic Certification Profile (server_metadata:discovery/client_registration:dynamic_client)",
  "server": {
    "discoveryUrl": "https://84-244-72-90.nip.io:60000/auth/realms/test/.well-known/openid-configuration",
    "login_hint": "john"
  },
  "client": {
    "client_id": "client1-oidcc-hybrid",
    "client_secret": "ulvklGmELzpZqKiISkRmberNm4als3z3"
  },
  "client_secret_post": {
    "client_id": "client1-oidcc-hybrid-client_secret_post",
    "client_secret": "4gDNjUhBkki0gSuKlxtytGCTh4UlNc45"
  },
  "client2": {
    "client_id": "client2-oidcc-hybrid",
    "client_secret": "BAfJ8ugBegJ7JWdPVjcqGNFpYfNb6euL"
  }
}
testName
oidcc-max-age-10000
2022-05-19 13:33:17 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
2022-05-19 13:33:17
GetDynamicServerConfiguration
HTTP request
request_uri
https://84-244-72-90.nip.io:60000/auth/realms/test/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-05-19 13:33:18 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "cache-control": "no-cache, must-revalidate, no-transform, no-store",
  "x-xss-protection": "1; mode\u003dblock",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "no-referrer",
  "date": "Thu, 19 May 2022 13:33:17 GMT",
  "connection": "keep-alive",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "x-content-type-options": "nosniff",
  "content-type": "application/json",
  "content-length": "6214"
}
response_body
{"issuer":"https://84-244-72-90.nip.io:60000/auth/realms/test","authorization_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/auth","token_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/token","introspection_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/token/introspect","userinfo_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/userinfo","end_session_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/logout","frontchannel_logout_session_supported":true,"frontchannel_logout_supported":true,"jwks_uri":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/certs","check_session_iframe":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/login-status-iframe.html","grant_types_supported":["authorization_code","implicit","refresh_token","password","client_credentials","urn:ietf:params:oauth:grant-type:device_code","urn:openid:params:grant-type:ciba"],"acr_values_supported":["0","1"],"response_types_supported":["code","none","id_token","token","id_token token","code id_token","code token","code id_token token"],"subject_types_supported":["public","pairwise"],"id_token_signing_alg_values_supported":["PS384","ES384","RS384","HS256","HS512","ES256","RS256","HS384","ES512","PS256","PS512","RS512"],"id_token_encryption_alg_values_supported":["RSA-OAEP","RSA-OAEP-256","RSA1_5"],"id_token_encryption_enc_values_supported":["A256GCM","A192GCM","A128GCM","A128CBC-HS256","A192CBC-HS384","A256CBC-HS512"],"userinfo_signing_alg_values_supported":["PS384","ES384","RS384","HS256","HS512","ES256","RS256","HS384","ES512","PS256","PS512","RS512","none"],"userinfo_encryption_alg_values_supported":["RSA-OAEP","RSA-OAEP-256","RSA1_5"],"userinfo_encryption_enc_values_supported":["A256GCM","A192GCM","A128GCM","A128CBC-HS256","A192CBC-HS384","A256CBC-HS512"],"request_object_signing_alg_values_supported":["PS384","ES384","RS384","HS256","HS512","ES256","RS256","HS384","ES512","PS256","PS512","RS512","none"],"request_object_encryption_alg_values_supported":["RSA-OAEP","RSA-OAEP-256","RSA1_5"],"request_object_encryption_enc_values_supported":["A256GCM","A192GCM","A128GCM","A128CBC-HS256","A192CBC-HS384","A256CBC-HS512"],"response_modes_supported":["query","fragment","form_post","query.jwt","fragment.jwt","form_post.jwt","jwt"],"registration_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/clients-registrations/openid-connect","token_endpoint_auth_methods_supported":["private_key_jwt","client_secret_basic","client_secret_post","tls_client_auth","client_secret_jwt"],"token_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","HS256","HS512","ES256","RS256","HS384","ES512","PS256","PS512","RS512"],"introspection_endpoint_auth_methods_supported":["private_key_jwt","client_secret_basic","client_secret_post","tls_client_auth","client_secret_jwt"],"introspection_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","HS256","HS512","ES256","RS256","HS384","ES512","PS256","PS512","RS512"],"authorization_signing_alg_values_supported":["PS384","ES384","RS384","HS256","HS512","ES256","RS256","HS384","ES512","PS256","PS512","RS512"],"authorization_encryption_alg_values_supported":["RSA-OAEP","RSA-OAEP-256","RSA1_5"],"authorization_encryption_enc_values_supported":["A256GCM","A192GCM","A128GCM","A128CBC-HS256","A192CBC-HS384","A256CBC-HS512"],"claims_supported":["aud","sub","iss","auth_time","name","given_name","family_name","preferred_username","email","acr"],"claim_types_supported":["normal"],"claims_parameter_supported":true,"scopes_supported":["openid","consents","name_claims","microprofile-jwt","consent:1","name_claims_for_implicit","roles","address","phone","web-origins","profile","acr","offline_access","resources","email"],"request_parameter_supported":true,"request_uri_parameter_supported":true,"require_request_uri_registration":true,"code_challenge_methods_supported":["plain","S256"],"tls_client_certificate_bound_access_tokens":true,"revocation_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/revoke","revocation_endpoint_auth_methods_supported":["private_key_jwt","client_secret_basic","client_secret_post","tls_client_auth","client_secret_jwt"],"revocation_endpoint_auth_signing_alg_values_supported":["PS384","ES384","RS384","HS256","HS512","ES256","RS256","HS384","ES512","PS256","PS512","RS512"],"backchannel_logout_supported":true,"backchannel_logout_session_supported":true,"device_authorization_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/auth/device","backchannel_token_delivery_modes_supported":["poll","ping"],"backchannel_authentication_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/ext/ciba/auth","backchannel_authentication_request_signing_alg_values_supported":["PS384","ES384","RS384","ES256","RS256","ES512","PS256","PS512","RS512"],"require_pushed_authorization_requests":false,"pushed_authorization_request_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/ext/par/request","mtls_endpoint_aliases":{"token_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/token","revocation_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/revoke","introspection_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/token/introspect","device_authorization_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/auth/device","registration_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/clients-registrations/openid-connect","userinfo_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/userinfo","pushed_authorization_request_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/ext/par/request","backchannel_authentication_endpoint":"https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/ext/ciba/auth"}}
2022-05-19 13:33:18 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://84-244-72-90.nip.io:60000/auth/realms/test
authorization_endpoint
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/auth
token_endpoint
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/token
introspection_endpoint
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/token/introspect
userinfo_endpoint
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/userinfo
end_session_endpoint
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/logout
frontchannel_logout_session_supported
true
frontchannel_logout_supported
true
jwks_uri
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/certs
check_session_iframe
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/login-status-iframe.html
grant_types_supported
[
  "authorization_code",
  "implicit",
  "refresh_token",
  "password",
  "client_credentials",
  "urn:ietf:params:oauth:grant-type:device_code",
  "urn:openid:params:grant-type:ciba"
]
acr_values_supported
[
  "0",
  "1"
]
response_types_supported
[
  "code",
  "none",
  "id_token",
  "token",
  "id_token token",
  "code id_token",
  "code token",
  "code id_token token"
]
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "RS384",
  "HS256",
  "HS512",
  "ES256",
  "RS256",
  "HS384",
  "ES512",
  "PS256",
  "PS512",
  "RS512"
]
id_token_encryption_alg_values_supported
[
  "RSA-OAEP",
  "RSA-OAEP-256",
  "RSA1_5"
]
id_token_encryption_enc_values_supported
[
  "A256GCM",
  "A192GCM",
  "A128GCM",
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256CBC-HS512"
]
userinfo_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "RS384",
  "HS256",
  "HS512",
  "ES256",
  "RS256",
  "HS384",
  "ES512",
  "PS256",
  "PS512",
  "RS512",
  "none"
]
userinfo_encryption_alg_values_supported
[
  "RSA-OAEP",
  "RSA-OAEP-256",
  "RSA1_5"
]
userinfo_encryption_enc_values_supported
[
  "A256GCM",
  "A192GCM",
  "A128GCM",
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256CBC-HS512"
]
request_object_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "RS384",
  "HS256",
  "HS512",
  "ES256",
  "RS256",
  "HS384",
  "ES512",
  "PS256",
  "PS512",
  "RS512",
  "none"
]
request_object_encryption_alg_values_supported
[
  "RSA-OAEP",
  "RSA-OAEP-256",
  "RSA1_5"
]
request_object_encryption_enc_values_supported
[
  "A256GCM",
  "A192GCM",
  "A128GCM",
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256CBC-HS512"
]
response_modes_supported
[
  "query",
  "fragment",
  "form_post",
  "query.jwt",
  "fragment.jwt",
  "form_post.jwt",
  "jwt"
]
registration_endpoint
https://84-244-72-90.nip.io:60000/auth/realms/test/clients-registrations/openid-connect
token_endpoint_auth_methods_supported
[
  "private_key_jwt",
  "client_secret_basic",
  "client_secret_post",
  "tls_client_auth",
  "client_secret_jwt"
]
token_endpoint_auth_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "RS384",
  "HS256",
  "HS512",
  "ES256",
  "RS256",
  "HS384",
  "ES512",
  "PS256",
  "PS512",
  "RS512"
]
introspection_endpoint_auth_methods_supported
[
  "private_key_jwt",
  "client_secret_basic",
  "client_secret_post",
  "tls_client_auth",
  "client_secret_jwt"
]
introspection_endpoint_auth_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "RS384",
  "HS256",
  "HS512",
  "ES256",
  "RS256",
  "HS384",
  "ES512",
  "PS256",
  "PS512",
  "RS512"
]
authorization_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "RS384",
  "HS256",
  "HS512",
  "ES256",
  "RS256",
  "HS384",
  "ES512",
  "PS256",
  "PS512",
  "RS512"
]
authorization_encryption_alg_values_supported
[
  "RSA-OAEP",
  "RSA-OAEP-256",
  "RSA1_5"
]
authorization_encryption_enc_values_supported
[
  "A256GCM",
  "A192GCM",
  "A128GCM",
  "A128CBC-HS256",
  "A192CBC-HS384",
  "A256CBC-HS512"
]
claims_supported
[
  "aud",
  "sub",
  "iss",
  "auth_time",
  "name",
  "given_name",
  "family_name",
  "preferred_username",
  "email",
  "acr"
]
claim_types_supported
[
  "normal"
]
claims_parameter_supported
true
scopes_supported
[
  "openid",
  "consents",
  "name_claims",
  "microprofile-jwt",
  "consent:1",
  "name_claims_for_implicit",
  "roles",
  "address",
  "phone",
  "web-origins",
  "profile",
  "acr",
  "offline_access",
  "resources",
  "email"
]
request_parameter_supported
true
request_uri_parameter_supported
true
require_request_uri_registration
true
code_challenge_methods_supported
[
  "plain",
  "S256"
]
tls_client_certificate_bound_access_tokens
true
revocation_endpoint
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/revoke
revocation_endpoint_auth_methods_supported
[
  "private_key_jwt",
  "client_secret_basic",
  "client_secret_post",
  "tls_client_auth",
  "client_secret_jwt"
]
revocation_endpoint_auth_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "RS384",
  "HS256",
  "HS512",
  "ES256",
  "RS256",
  "HS384",
  "ES512",
  "PS256",
  "PS512",
  "RS512"
]
backchannel_logout_supported
true
backchannel_logout_session_supported
true
device_authorization_endpoint
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/auth/device
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_authentication_endpoint
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/ext/ciba/auth
backchannel_authentication_request_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "RS384",
  "ES256",
  "RS256",
  "ES512",
  "PS256",
  "PS512",
  "RS512"
]
require_pushed_authorization_requests
false
pushed_authorization_request_endpoint
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/ext/par/request
mtls_endpoint_aliases
{
  "token_endpoint": "https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/token",
  "revocation_endpoint": "https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/revoke",
  "introspection_endpoint": "https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/token/introspect",
  "device_authorization_endpoint": "https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/auth/device",
  "registration_endpoint": "https://84-244-72-90.nip.io:60000/auth/realms/test/clients-registrations/openid-connect",
  "userinfo_endpoint": "https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/userinfo",
  "pushed_authorization_request_endpoint": "https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/ext/par/request",
  "backchannel_authentication_endpoint": "https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/ext/ciba/auth"
}
2022-05-19 13:33:18 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2022-05-19 13:33:18 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
{
  "testHost": "84-244-72-90.nip.io",
  "testPort": 60000
}
authorization_endpoint
{
  "testHost": "84-244-72-90.nip.io",
  "testPort": 60000
}
token_endpoint
{
  "testHost": "84-244-72-90.nip.io",
  "testPort": 60000
}
userinfo_endpoint
{
  "testHost": "84-244-72-90.nip.io",
  "testPort": 60000
}
2022-05-19 13:33:18
FetchServerKeys
Fetching server key
jwks_uri
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/certs
2022-05-19 13:33:18
FetchServerKeys
HTTP request
request_uri
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/certs
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-05-19 13:33:18 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "cache-control": "no-cache",
  "x-xss-protection": "1; mode\u003dblock",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "no-referrer",
  "date": "Thu, 19 May 2022 13:33:18 GMT",
  "connection": "keep-alive",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "x-content-type-options": "nosniff",
  "content-type": "application/json",
  "content-length": "7660"
}
response_body
{"keys":[{"kid":"nVJXuV18rIhJQK_ezukCg6B6ihqd_ysVRpNmmGNIJgg","kty":"RSA","alg":"PS256","use":"enc","n":"gJeVMx_ucf4OkwPjfo3QqRVGJad4MoGX0epHfzh_9JWhetahQKvU2R8I7YnWMRmdni2ZuWVdnRDdrU83FN-RGKRq8bkV59-U9UM25mrFD-27qczX_SvipPeSJfCC8BVg6IVaG0xYVJcAJyqCczhV0p36Tv3ehLhnZA_JZYgGcQznEXRawqQMQ1hKLC-cbQdXbcuzlKB-jGKUvNOPrRWkFYbcbbPMqeqv60TtQL--9X0rFxySfGbUVTDENmsJUaS5vs-cHEyst-UX6Y-lmCoTA0LZsOaH608POFmeaVB7ZmDdeGCHS_H4BCbQS7p_vI67i-IH8L5qrr_TZGabii1Ggw","e":"AQAB","x5c":["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"],"x5t":"nsamQNPuXTrs2Bh2mhtQ1p-Cs-M","x5t#S256":"g1XbSXBmnrd0nphVoyIfkix50Nsr0HqrJAvypgOzBq0"},{"kid":"a91iq85i0CF0ltgMw4EBQ0_y5kYCAtEFXQL_kbTulA0","kty":"EC","alg":"ES256","use":"sig","crv":"P-256","x":"to_LaMDcALkQvaelmWtIn2iyJEKooTbOZxp7KIC74Kg","y":"NVQw_Pya5rmgKM0JLra_IRN-t0O1fUWfrnJrOX8yZn0"},{"kid":"Mb20UGZj81X9UGbs0uReFcFlUV81vJRDYFPclWBv9GY","kty":"RSA","alg":"RS256","use":"sig","n":"juc0_frkLlvtC1Lf_WDb7tkbMmaBS6c0hN0Hl6dbmbgAHqrF39LLKrMokaIafSRKA9kuMOx1W4j-uPm4OpUDYArq7boa2a064j3e4JvAR8BOU2Kz5nDtKXSDDiSQLqa-ZEaHbji879SG0IA_tp_nNiX8EV_BR7CsjjbyaqI9hwzHXsai_o6dAzCa1mbCPFYAQH66m-4xk0AgysRowupKa2yyjFiAtCfw0vI3DJUSzQ1S3OlFZwqUP0U09TOnwh5EP0zAapbW_8J9InF_TAl5q-nUY8HPqtMjgQvTcaCgJ3wntdWrdXR9OrlJ29Zdf1D5Tqi0UCTh3GaOm3lxTFNyJQ","e":"AQAB","x5c":["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"],"x5t":"c5AzQajNLbmncxy7N3Q0uDQm_Xg","x5t#S256":"cQJC3_ilcCLSX2saHq-o1pQaZ0x3KdyxP7crW68ypjc"},{"kid":"iM1idlnX7sRsh3lBqliOt7ENVX1cWkimfTpsfWgYG9k","kty":"RSA","alg":"PS256","use":"sig","n":"ly8t1-qtzaC4RM0-glXufIilNOX8y3-ct_veSR7dHYeyc27-y6aEIckzmtRzGRERaJ6Ux4FVxOZ2Sx2TsuuOk2IH2oCKyCa41fusaRr8yhxGpO2xnv_z_8WC1ELcAS2vvwF-xUNpZLLgdC3k_jFZcnVLDBgKc_A1gZPc1gfyPnhpd_bMxq3OAzKyER-hVVH7HZHo-4qXl_c117u7hOhg6vt3OSklWe4xdHq43Bq72Zb5kVcNAmopHCN5Ri8riSo6iuhx-I-TQG1pmnzYlZAir6vcA-P65berb-nH7IgGToqnU2diLDFsAWAn7LxVYnR2K9WCNL9rBIw5RcCNcdm5ww","e":"AQAB","x5c":["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"],"x5t":"Lm8DzD2yYGlll-4mb0CSlyc0vFY","x5t#S256":"auer9itHtTEkwScExvyYbSFQxh5twqG_ViJra5YBgN4"},{"kid":"zfx31Yr_QijkHreEgzJJmgDt3vpNJw-3UYDHWDL832s","kty":"EC","alg":"ES256","use":"sig","crv":"P-256","x":"kXozRF_AaHf2kBa_0_FJPJVO0NFfHBvA4UE7eE6YYMA","y":"1i7kcT1H0Zb9v_F8XE17tVeBzb2vgThwKWaZcD1lhk4"},{"kid":"43WiDgKXF75uxXjFBcTz5rhUD2FJsRmE_YViw3iaJxE","kty":"RSA","alg":"RS256","use":"sig","n":"2trCYBvZGDi8xlH8EAB04AEBhyUpBK9pXS-hv9ALOuZ6vPYcEdzNVdrwgXKMIPUJlR3HWjb7BsPUNQBekI8aAAoy1WIreP6CkRYPZLS7jKNAKBFYrxNCIptP0aTw-M1MC47d6Unz5x_25i8UZH4uQZiDWRODsqzcvBYYzrP_FhuagI2_pKmkWq73jDsF5T_m13JCwz_OIPL2JpCalPAKihz-7b9QdDr9V_cutP7ymSoTuZLY7gKYFdblZm26SAMGhm9rHVuLaFGobis9ggOdbOsD-4cn82s-q88mKDb7eZ9nmFGZfqTCnvksDOiEjZIycY8p8MnWSYVdyTokyGZSkQ","e":"AQAB","x5c":["MIIClzCCAX8CBgGA3G+FjjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDAR0ZXN0MB4XDTIyMDUxOTEzMDcxN1oXDTMyMDUxOTEzMDg1N1owDzENMAsGA1UEAwwEdGVzdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANrawmAb2Rg4vMZR/BAAdOABAYclKQSvaV0vob/QCzrmerz2HBHczVXa8IFyjCD1CZUdx1o2+wbD1DUAXpCPGgAKMtViK3j+gpEWD2S0u4yjQCgRWK8TQiKbT9Gk8PjNTAuO3elJ8+cf9uYvFGR+LkGYg1kTg7Ks3LwWGM6z/xYbmoCNv6SppFqu94w7BeU/5tdyQsM/ziDy9iaQmpTwCooc/u2/UHQ6/Vf3LrT+8pkqE7mS2O4CmBXW5WZtukgDBoZvax1bi2hRqG4rPYIDnWzrA/uHJ/NrPqvPJig2+3mfZ5hRmX6kwp75LAzohI2SMnGPKfDJ1kmFXck6JMhmUpECAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAFGNHtSt+UzYHQUw2yONUvLW0Bh+Z/xYc6AfJEl3Tr4ytEmmUmKz5X5UcbGNGM5RLV6ZbDP6hUTEtkVWxFP079PJKTSeQmOnsztpD/qEdAcgIKumAVGDOR1SxD6X8h7tKICufY6c40yJ7A3VyCTZP0JvsmBb8UVtKNTBl202ltCnMP7DBZ/7aFt2kW02NtScWvXx8lT9UogcZPuwgxhL20pRUTua6dr2KqWjd66Mfdped/U3LhdVd9+JmUKURawQ3xX9phIh2d3kq+G25GzLj0olKygcJxYI7GDWokNvAFMhq17B7zmnOLRwsHu5J3/08+ef0un3flKHx7kV0aT/YDw=="],"x5t":"075PkNdlE5gbAn1w6OfLONGc7Fw","x5t#S256":"UZRPmtRfCvrCxcRt2M9kR2XFUjwqfJGSBgljPT5wDPI"},{"kid":"oscahzKbEkdWp4Z4gGCNMVm8pjwpj0q2AAQ0ZIn9y1U","kty":"RSA","alg":"PS256","use":"sig","n":"itV4oDZRs9Tc6cXuPtFiUuQ2jUA7Jhg2Xk3XpMDgWfYxQbmYslKS28NjfDmmbvypaiCH9TzQlgaBAvvCl62gNA73TaVGv7uKDIge6vL_g4dwaZsapkxc4Ao36tOsU4w8QQC4pZDh9xCzoqYemvQUuVGh_rSqVUoHhcEzd3_-NGEhamiuNDxrJftHkfMf_GHi05edeN5FHT9ZJrxpcsAXY7fz3SmGI-wiVB9CgErKuaH91SBrReDvY6rnK7fxcGZKgnd0ACbvDUDruNh7R2wvrJT7pTEHSre-ulehLPKNOGOX49jlPEn8CZEFTO6wi-9aK97Cyyg7ZG3uPIfrS-PrDw","e":"AQAB","x5c":["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"],"x5t":"YQwHgxOXWi4PkD6oVDUcZ6sxSL0","x5t#S256":"8XdoYM7hypH7yGcAZsCbu4QkH73aBPsuImUnnn_Q6kU"}]}
2022-05-19 13:33:18
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kid":"nVJXuV18rIhJQK_ezukCg6B6ihqd_ysVRpNmmGNIJgg","kty":"RSA","alg":"PS256","use":"enc","n":"gJeVMx_ucf4OkwPjfo3QqRVGJad4MoGX0epHfzh_9JWhetahQKvU2R8I7YnWMRmdni2ZuWVdnRDdrU83FN-RGKRq8bkV59-U9UM25mrFD-27qczX_SvipPeSJfCC8BVg6IVaG0xYVJcAJyqCczhV0p36Tv3ehLhnZA_JZYgGcQznEXRawqQMQ1hKLC-cbQdXbcuzlKB-jGKUvNOPrRWkFYbcbbPMqeqv60TtQL--9X0rFxySfGbUVTDENmsJUaS5vs-cHEyst-UX6Y-lmCoTA0LZsOaH608POFmeaVB7ZmDdeGCHS_H4BCbQS7p_vI67i-IH8L5qrr_TZGabii1Ggw","e":"AQAB","x5c":["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"],"x5t":"nsamQNPuXTrs2Bh2mhtQ1p-Cs-M","x5t#S256":"g1XbSXBmnrd0nphVoyIfkix50Nsr0HqrJAvypgOzBq0"},{"kid":"a91iq85i0CF0ltgMw4EBQ0_y5kYCAtEFXQL_kbTulA0","kty":"EC","alg":"ES256","use":"sig","crv":"P-256","x":"to_LaMDcALkQvaelmWtIn2iyJEKooTbOZxp7KIC74Kg","y":"NVQw_Pya5rmgKM0JLra_IRN-t0O1fUWfrnJrOX8yZn0"},{"kid":"Mb20UGZj81X9UGbs0uReFcFlUV81vJRDYFPclWBv9GY","kty":"RSA","alg":"RS256","use":"sig","n":"juc0_frkLlvtC1Lf_WDb7tkbMmaBS6c0hN0Hl6dbmbgAHqrF39LLKrMokaIafSRKA9kuMOx1W4j-uPm4OpUDYArq7boa2a064j3e4JvAR8BOU2Kz5nDtKXSDDiSQLqa-ZEaHbji879SG0IA_tp_nNiX8EV_BR7CsjjbyaqI9hwzHXsai_o6dAzCa1mbCPFYAQH66m-4xk0AgysRowupKa2yyjFiAtCfw0vI3DJUSzQ1S3OlFZwqUP0U09TOnwh5EP0zAapbW_8J9InF_TAl5q-nUY8HPqtMjgQvTcaCgJ3wntdWrdXR9OrlJ29Zdf1D5Tqi0UCTh3GaOm3lxTFNyJQ","e":"AQAB","x5c":["MIIClzCCAX8CBgGA3HI4LjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDAR0ZXN0MB4XDTIyMDUxOTEzMTAxNFoXDTMyMDUxOTEzMTE1NFowDzENMAsGA1UEAwwEdGVzdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI7nNP365C5b7QtS3/1g2+7ZGzJmgUunNITdB5enW5m4AB6qxd/SyyqzKJGiGn0kSgPZLjDsdVuI/rj5uDqVA2AK6u26GtmtOuI93uCbwEfATlNis+Zw7Sl0gw4kkC6mvmRGh244vO/UhtCAP7af5zYl/BFfwUewrI428mqiPYcMx17Gov6OnQMwmtZmwjxWAEB+upvuMZNAIMrEaMLqSmtssoxYgLQn8NLyNwyVEs0NUtzpRWcKlD9FNPUzp8IeRD9MwGqW1v/CfSJxf0wJeavp1GPBz6rTI4EL03GgoCd8J7XVq3V0fTq5SdvWXX9Q+U6otFAk4dxmjpt5cUxTciUCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEALyN8EuuwKeJYqgzbM99mmGM2IixxbTDzFaBhrr2EK6s9vGEGZ/p7G4PYodMenADyVUAIa/9Vfr+dFJMy66mIB/tl2Fq9ES67YtMeo/W3ikS861uZjmshIrM1+w/jmXRkhmU+QgPWZv/tEqm6mmYCCGRV0W4rkkqbsbmGLUxlAsYBvie/jblVPUhnCBati1i5vYEpa7YIkQAVRFSA60u2mcQVcA/C1TvP/wjyfWqn3zbuPVXFxIkLt7JDfWDNxiLv9//hnRKqrxmrwKcT+Suuznn2zooAFM+WbAjAuaq176G4ocwWfMDN7H+r0SF8XqNBO9i0BdY/jxK3SOws9bVP/A=="],"x5t":"c5AzQajNLbmncxy7N3Q0uDQm_Xg","x5t#S256":"cQJC3_ilcCLSX2saHq-o1pQaZ0x3KdyxP7crW68ypjc"},{"kid":"iM1idlnX7sRsh3lBqliOt7ENVX1cWkimfTpsfWgYG9k","kty":"RSA","alg":"PS256","use":"sig","n":"ly8t1-qtzaC4RM0-glXufIilNOX8y3-ct_veSR7dHYeyc27-y6aEIckzmtRzGRERaJ6Ux4FVxOZ2Sx2TsuuOk2IH2oCKyCa41fusaRr8yhxGpO2xnv_z_8WC1ELcAS2vvwF-xUNpZLLgdC3k_jFZcnVLDBgKc_A1gZPc1gfyPnhpd_bMxq3OAzKyER-hVVH7HZHo-4qXl_c117u7hOhg6vt3OSklWe4xdHq43Bq72Zb5kVcNAmopHCN5Ri8riSo6iuhx-I-TQG1pmnzYlZAir6vcA-P65berb-nH7IgGToqnU2diLDFsAWAn7LxVYnR2K9WCNL9rBIw5RcCNcdm5ww","e":"AQAB","x5c":["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"],"x5t":"Lm8DzD2yYGlll-4mb0CSlyc0vFY","x5t#S256":"auer9itHtTEkwScExvyYbSFQxh5twqG_ViJra5YBgN4"},{"kid":"zfx31Yr_QijkHreEgzJJmgDt3vpNJw-3UYDHWDL832s","kty":"EC","alg":"ES256","use":"sig","crv":"P-256","x":"kXozRF_AaHf2kBa_0_FJPJVO0NFfHBvA4UE7eE6YYMA","y":"1i7kcT1H0Zb9v_F8XE17tVeBzb2vgThwKWaZcD1lhk4"},{"kid":"43WiDgKXF75uxXjFBcTz5rhUD2FJsRmE_YViw3iaJxE","kty":"RSA","alg":"RS256","use":"sig","n":"2trCYBvZGDi8xlH8EAB04AEBhyUpBK9pXS-hv9ALOuZ6vPYcEdzNVdrwgXKMIPUJlR3HWjb7BsPUNQBekI8aAAoy1WIreP6CkRYPZLS7jKNAKBFYrxNCIptP0aTw-M1MC47d6Unz5x_25i8UZH4uQZiDWRODsqzcvBYYzrP_FhuagI2_pKmkWq73jDsF5T_m13JCwz_OIPL2JpCalPAKihz-7b9QdDr9V_cutP7ymSoTuZLY7gKYFdblZm26SAMGhm9rHVuLaFGobis9ggOdbOsD-4cn82s-q88mKDb7eZ9nmFGZfqTCnvksDOiEjZIycY8p8MnWSYVdyTokyGZSkQ","e":"AQAB","x5c":["MIIClzCCAX8CBgGA3G+FjjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDAR0ZXN0MB4XDTIyMDUxOTEzMDcxN1oXDTMyMDUxOTEzMDg1N1owDzENMAsGA1UEAwwEdGVzdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANrawmAb2Rg4vMZR/BAAdOABAYclKQSvaV0vob/QCzrmerz2HBHczVXa8IFyjCD1CZUdx1o2+wbD1DUAXpCPGgAKMtViK3j+gpEWD2S0u4yjQCgRWK8TQiKbT9Gk8PjNTAuO3elJ8+cf9uYvFGR+LkGYg1kTg7Ks3LwWGM6z/xYbmoCNv6SppFqu94w7BeU/5tdyQsM/ziDy9iaQmpTwCooc/u2/UHQ6/Vf3LrT+8pkqE7mS2O4CmBXW5WZtukgDBoZvax1bi2hRqG4rPYIDnWzrA/uHJ/NrPqvPJig2+3mfZ5hRmX6kwp75LAzohI2SMnGPKfDJ1kmFXck6JMhmUpECAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAFGNHtSt+UzYHQUw2yONUvLW0Bh+Z/xYc6AfJEl3Tr4ytEmmUmKz5X5UcbGNGM5RLV6ZbDP6hUTEtkVWxFP079PJKTSeQmOnsztpD/qEdAcgIKumAVGDOR1SxD6X8h7tKICufY6c40yJ7A3VyCTZP0JvsmBb8UVtKNTBl202ltCnMP7DBZ/7aFt2kW02NtScWvXx8lT9UogcZPuwgxhL20pRUTua6dr2KqWjd66Mfdped/U3LhdVd9+JmUKURawQ3xX9phIh2d3kq+G25GzLj0olKygcJxYI7GDWokNvAFMhq17B7zmnOLRwsHu5J3/08+ef0un3flKHx7kV0aT/YDw=="],"x5t":"075PkNdlE5gbAn1w6OfLONGc7Fw","x5t#S256":"UZRPmtRfCvrCxcRt2M9kR2XFUjwqfJGSBgljPT5wDPI"},{"kid":"oscahzKbEkdWp4Z4gGCNMVm8pjwpj0q2AAQ0ZIn9y1U","kty":"RSA","alg":"PS256","use":"sig","n":"itV4oDZRs9Tc6cXuPtFiUuQ2jUA7Jhg2Xk3XpMDgWfYxQbmYslKS28NjfDmmbvypaiCH9TzQlgaBAvvCl62gNA73TaVGv7uKDIge6vL_g4dwaZsapkxc4Ao36tOsU4w8QQC4pZDh9xCzoqYemvQUuVGh_rSqVUoHhcEzd3_-NGEhamiuNDxrJftHkfMf_GHi05edeN5FHT9ZJrxpcsAXY7fz3SmGI-wiVB9CgErKuaH91SBrReDvY6rnK7fxcGZKgnd0ACbvDUDruNh7R2wvrJT7pTEHSre-ulehLPKNOGOX49jlPEn8CZEFTO6wi-9aK97Cyyg7ZG3uPIfrS-PrDw","e":"AQAB","x5c":["MIIClzCCAX8CBgGA3HCQDjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDAR0ZXN0MB4XDTIyMDUxOTEzMDgyNloXDTMyMDUxOTEzMTAwNlowDzENMAsGA1UEAwwEdGVzdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIrVeKA2UbPU3OnF7j7RYlLkNo1AOyYYNl5N16TA4Fn2MUG5mLJSktvDY3w5pm78qWogh/U80JYGgQL7wpetoDQO902lRr+7igyIHury/4OHcGmbGqZMXOAKN+rTrFOMPEEAuKWQ4fcQs6KmHpr0FLlRof60qlVKB4XBM3d//jRhIWporjQ8ayX7R5HzH/xh4tOXnXjeRR0/WSa8aXLAF2O3890phiPsIlQfQoBKyrmh/dUga0Xg72Oq5yu38XBmSoJ3dAAm7w1A67jYe0dsL6yU+6UxB0q3vrpXoSzyjThjl+PY5TxJ/AmRBUzusIvvWivewssoO2Rt7jyH60vj6w8CAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAHtZQkZfHwKHBfv14crbC3IxAp8TaSOBJeFXerV+0pusay7lzFuDM+rT6zcMIasCZos1NHg7EdX3O3RyMwWv1bKT2cejaWu1lNlK9iKptPJjj5d9Lh9/Urs+cdXlp5chpWPQNSy3zbr50yyMc9SUkZ0cU9FJXRCZTsNOHyYb7QhtInM2QKuoF/hK7MVQzkyM2yn3wuYjQy9tLsxUO2LRRoCbXy+8l4fCSFZyxOtls5Ny2dJErFslvQWVT1iiJNyKoQpn4uoxNmUqlwNt2TYsc9OUsJdqf4kkYfmYGIjrlDD5oLtIGGLPTbNbb8NsNIHfuG8+dtU3mM2kCkwEeEkekpw=="],"x5t":"YQwHgxOXWi4PkD6oVDUcZ6sxSL0","x5t#S256":"8XdoYM7hypH7yGcAZsCbu4QkH73aBPsuImUnnn_Q6kU"}]}
2022-05-19 13:33:18 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kid": "nVJXuV18rIhJQK_ezukCg6B6ihqd_ysVRpNmmGNIJgg",
      "kty": "RSA",
      "alg": "PS256",
      "use": "enc",
      "n": "gJeVMx_ucf4OkwPjfo3QqRVGJad4MoGX0epHfzh_9JWhetahQKvU2R8I7YnWMRmdni2ZuWVdnRDdrU83FN-RGKRq8bkV59-U9UM25mrFD-27qczX_SvipPeSJfCC8BVg6IVaG0xYVJcAJyqCczhV0p36Tv3ehLhnZA_JZYgGcQznEXRawqQMQ1hKLC-cbQdXbcuzlKB-jGKUvNOPrRWkFYbcbbPMqeqv60TtQL--9X0rFxySfGbUVTDENmsJUaS5vs-cHEyst-UX6Y-lmCoTA0LZsOaH608POFmeaVB7ZmDdeGCHS_H4BCbQS7p_vI67i-IH8L5qrr_TZGabii1Ggw",
      "e": "AQAB",
      "x5c": [
        "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\u003d\u003d"
      ],
      "x5t": "nsamQNPuXTrs2Bh2mhtQ1p-Cs-M",
      "x5t#S256": "g1XbSXBmnrd0nphVoyIfkix50Nsr0HqrJAvypgOzBq0"
    },
    {
      "kid": "a91iq85i0CF0ltgMw4EBQ0_y5kYCAtEFXQL_kbTulA0",
      "kty": "EC",
      "alg": "ES256",
      "use": "sig",
      "crv": "P-256",
      "x": "to_LaMDcALkQvaelmWtIn2iyJEKooTbOZxp7KIC74Kg",
      "y": "NVQw_Pya5rmgKM0JLra_IRN-t0O1fUWfrnJrOX8yZn0"
    },
    {
      "kid": "Mb20UGZj81X9UGbs0uReFcFlUV81vJRDYFPclWBv9GY",
      "kty": "RSA",
      "alg": "RS256",
      "use": "sig",
      "n": "juc0_frkLlvtC1Lf_WDb7tkbMmaBS6c0hN0Hl6dbmbgAHqrF39LLKrMokaIafSRKA9kuMOx1W4j-uPm4OpUDYArq7boa2a064j3e4JvAR8BOU2Kz5nDtKXSDDiSQLqa-ZEaHbji879SG0IA_tp_nNiX8EV_BR7CsjjbyaqI9hwzHXsai_o6dAzCa1mbCPFYAQH66m-4xk0AgysRowupKa2yyjFiAtCfw0vI3DJUSzQ1S3OlFZwqUP0U09TOnwh5EP0zAapbW_8J9InF_TAl5q-nUY8HPqtMjgQvTcaCgJ3wntdWrdXR9OrlJ29Zdf1D5Tqi0UCTh3GaOm3lxTFNyJQ",
      "e": "AQAB",
      "x5c": [
        "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\u003d\u003d"
      ],
      "x5t": "c5AzQajNLbmncxy7N3Q0uDQm_Xg",
      "x5t#S256": "cQJC3_ilcCLSX2saHq-o1pQaZ0x3KdyxP7crW68ypjc"
    },
    {
      "kid": "iM1idlnX7sRsh3lBqliOt7ENVX1cWkimfTpsfWgYG9k",
      "kty": "RSA",
      "alg": "PS256",
      "use": "sig",
      "n": "ly8t1-qtzaC4RM0-glXufIilNOX8y3-ct_veSR7dHYeyc27-y6aEIckzmtRzGRERaJ6Ux4FVxOZ2Sx2TsuuOk2IH2oCKyCa41fusaRr8yhxGpO2xnv_z_8WC1ELcAS2vvwF-xUNpZLLgdC3k_jFZcnVLDBgKc_A1gZPc1gfyPnhpd_bMxq3OAzKyER-hVVH7HZHo-4qXl_c117u7hOhg6vt3OSklWe4xdHq43Bq72Zb5kVcNAmopHCN5Ri8riSo6iuhx-I-TQG1pmnzYlZAir6vcA-P65berb-nH7IgGToqnU2diLDFsAWAn7LxVYnR2K9WCNL9rBIw5RcCNcdm5ww",
      "e": "AQAB",
      "x5c": [
        "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\u003d\u003d"
      ],
      "x5t": "Lm8DzD2yYGlll-4mb0CSlyc0vFY",
      "x5t#S256": "auer9itHtTEkwScExvyYbSFQxh5twqG_ViJra5YBgN4"
    },
    {
      "kid": "zfx31Yr_QijkHreEgzJJmgDt3vpNJw-3UYDHWDL832s",
      "kty": "EC",
      "alg": "ES256",
      "use": "sig",
      "crv": "P-256",
      "x": "kXozRF_AaHf2kBa_0_FJPJVO0NFfHBvA4UE7eE6YYMA",
      "y": "1i7kcT1H0Zb9v_F8XE17tVeBzb2vgThwKWaZcD1lhk4"
    },
    {
      "kid": "43WiDgKXF75uxXjFBcTz5rhUD2FJsRmE_YViw3iaJxE",
      "kty": "RSA",
      "alg": "RS256",
      "use": "sig",
      "n": "2trCYBvZGDi8xlH8EAB04AEBhyUpBK9pXS-hv9ALOuZ6vPYcEdzNVdrwgXKMIPUJlR3HWjb7BsPUNQBekI8aAAoy1WIreP6CkRYPZLS7jKNAKBFYrxNCIptP0aTw-M1MC47d6Unz5x_25i8UZH4uQZiDWRODsqzcvBYYzrP_FhuagI2_pKmkWq73jDsF5T_m13JCwz_OIPL2JpCalPAKihz-7b9QdDr9V_cutP7ymSoTuZLY7gKYFdblZm26SAMGhm9rHVuLaFGobis9ggOdbOsD-4cn82s-q88mKDb7eZ9nmFGZfqTCnvksDOiEjZIycY8p8MnWSYVdyTokyGZSkQ",
      "e": "AQAB",
      "x5c": [
        "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\u003d\u003d"
      ],
      "x5t": "075PkNdlE5gbAn1w6OfLONGc7Fw",
      "x5t#S256": "UZRPmtRfCvrCxcRt2M9kR2XFUjwqfJGSBgljPT5wDPI"
    },
    {
      "kid": "oscahzKbEkdWp4Z4gGCNMVm8pjwpj0q2AAQ0ZIn9y1U",
      "kty": "RSA",
      "alg": "PS256",
      "use": "sig",
      "n": "itV4oDZRs9Tc6cXuPtFiUuQ2jUA7Jhg2Xk3XpMDgWfYxQbmYslKS28NjfDmmbvypaiCH9TzQlgaBAvvCl62gNA73TaVGv7uKDIge6vL_g4dwaZsapkxc4Ao36tOsU4w8QQC4pZDh9xCzoqYemvQUuVGh_rSqVUoHhcEzd3_-NGEhamiuNDxrJftHkfMf_GHi05edeN5FHT9ZJrxpcsAXY7fz3SmGI-wiVB9CgErKuaH91SBrReDvY6rnK7fxcGZKgnd0ACbvDUDruNh7R2wvrJT7pTEHSre-ulehLPKNOGOX49jlPEn8CZEFTO6wi-9aK97Cyyg7ZG3uPIfrS-PrDw",
      "e": "AQAB",
      "x5c": [
        "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\u003d\u003d"
      ],
      "x5t": "YQwHgxOXWi4PkD6oVDUcZ6sxSL0",
      "x5t#S256": "8XdoYM7hypH7yGcAZsCbu4QkH73aBPsuImUnnn_Q6kU"
    }
  ]
}
2022-05-19 13:33:18 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kid": "nVJXuV18rIhJQK_ezukCg6B6ihqd_ysVRpNmmGNIJgg",
      "kty": "RSA",
      "alg": "PS256",
      "use": "enc",
      "n": "gJeVMx_ucf4OkwPjfo3QqRVGJad4MoGX0epHfzh_9JWhetahQKvU2R8I7YnWMRmdni2ZuWVdnRDdrU83FN-RGKRq8bkV59-U9UM25mrFD-27qczX_SvipPeSJfCC8BVg6IVaG0xYVJcAJyqCczhV0p36Tv3ehLhnZA_JZYgGcQznEXRawqQMQ1hKLC-cbQdXbcuzlKB-jGKUvNOPrRWkFYbcbbPMqeqv60TtQL--9X0rFxySfGbUVTDENmsJUaS5vs-cHEyst-UX6Y-lmCoTA0LZsOaH608POFmeaVB7ZmDdeGCHS_H4BCbQS7p_vI67i-IH8L5qrr_TZGabii1Ggw",
      "e": "AQAB",
      "x5c": [
        "MIIClzCCAX8CBgGAzCPyBjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDAR0ZXN0MB4XDTIyMDUxNjA5MTA0OVoXDTMyMDUxNjA5MTIyOVowDzENMAsGA1UEAwwEdGVzdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAICXlTMf7nH+DpMD436N0KkVRiWneDKBl9HqR384f/SVoXrWoUCr1NkfCO2J1jEZnZ4tmbllXZ0Q3a1PNxTfkRikavG5FefflPVDNuZqxQ/tu6nM1/0r4qT3kiXwgvAVYOiFWhtMWFSXACcqgnM4VdKd+k793oS4Z2QPyWWIBnEM5xF0WsKkDENYSiwvnG0HV23Ls5SgfoxilLzTj60VpBWG3G2zzKnqr+tE7UC/vvV9Kxccknxm1FUwxDZrCVGkub7PnBxMrLflF+mPpZgqEwNC2bDmh+tPDzhZnmlQe2Zg3Xhgh0vx+AQm0Eu6f7yOu4viB/C+aq6/02Rmm4otRoMCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAJGENeCNqIbHidimks6k9WRJaYYP0n5cRFcxh2EKKwgOJqaHJ3oaeWJ97owND+S7wl6VZLKebb6BPwaKoedtkPgSh/H4wYBW5u5reE/GkU1M7T37Zn1Xs6jsLDISJWWxDn8k+hTeAi08P0Qoymq8WnDbKplbjiPbKTtDDqEcBsXvwRHkPUrBFKzlSapWWSIspqcHwpFklfYKm9JCC6JtFdw/lCyd/0u+x/dQ/ZNhYx9WUOUtLtnqFxkWWuydQ0z6hOkfUDUokH5FhjdvfYJk8Nw82VuTm3ly3HEv59HbjOxnobzDM0pnqJfiYWRNcfJ480b55sdzMF1604bk//h0oVQ\u003d\u003d"
      ],
      "x5t": "nsamQNPuXTrs2Bh2mhtQ1p-Cs-M",
      "x5t#S256": "g1XbSXBmnrd0nphVoyIfkix50Nsr0HqrJAvypgOzBq0"
    },
    {
      "kid": "a91iq85i0CF0ltgMw4EBQ0_y5kYCAtEFXQL_kbTulA0",
      "kty": "EC",
      "alg": "ES256",
      "use": "sig",
      "crv": "P-256",
      "x": "to_LaMDcALkQvaelmWtIn2iyJEKooTbOZxp7KIC74Kg",
      "y": "NVQw_Pya5rmgKM0JLra_IRN-t0O1fUWfrnJrOX8yZn0"
    },
    {
      "kid": "Mb20UGZj81X9UGbs0uReFcFlUV81vJRDYFPclWBv9GY",
      "kty": "RSA",
      "alg": "RS256",
      "use": "sig",
      "n": "juc0_frkLlvtC1Lf_WDb7tkbMmaBS6c0hN0Hl6dbmbgAHqrF39LLKrMokaIafSRKA9kuMOx1W4j-uPm4OpUDYArq7boa2a064j3e4JvAR8BOU2Kz5nDtKXSDDiSQLqa-ZEaHbji879SG0IA_tp_nNiX8EV_BR7CsjjbyaqI9hwzHXsai_o6dAzCa1mbCPFYAQH66m-4xk0AgysRowupKa2yyjFiAtCfw0vI3DJUSzQ1S3OlFZwqUP0U09TOnwh5EP0zAapbW_8J9InF_TAl5q-nUY8HPqtMjgQvTcaCgJ3wntdWrdXR9OrlJ29Zdf1D5Tqi0UCTh3GaOm3lxTFNyJQ",
      "e": "AQAB",
      "x5c": [
        "MIIClzCCAX8CBgGA3HI4LjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDAR0ZXN0MB4XDTIyMDUxOTEzMTAxNFoXDTMyMDUxOTEzMTE1NFowDzENMAsGA1UEAwwEdGVzdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI7nNP365C5b7QtS3/1g2+7ZGzJmgUunNITdB5enW5m4AB6qxd/SyyqzKJGiGn0kSgPZLjDsdVuI/rj5uDqVA2AK6u26GtmtOuI93uCbwEfATlNis+Zw7Sl0gw4kkC6mvmRGh244vO/UhtCAP7af5zYl/BFfwUewrI428mqiPYcMx17Gov6OnQMwmtZmwjxWAEB+upvuMZNAIMrEaMLqSmtssoxYgLQn8NLyNwyVEs0NUtzpRWcKlD9FNPUzp8IeRD9MwGqW1v/CfSJxf0wJeavp1GPBz6rTI4EL03GgoCd8J7XVq3V0fTq5SdvWXX9Q+U6otFAk4dxmjpt5cUxTciUCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEALyN8EuuwKeJYqgzbM99mmGM2IixxbTDzFaBhrr2EK6s9vGEGZ/p7G4PYodMenADyVUAIa/9Vfr+dFJMy66mIB/tl2Fq9ES67YtMeo/W3ikS861uZjmshIrM1+w/jmXRkhmU+QgPWZv/tEqm6mmYCCGRV0W4rkkqbsbmGLUxlAsYBvie/jblVPUhnCBati1i5vYEpa7YIkQAVRFSA60u2mcQVcA/C1TvP/wjyfWqn3zbuPVXFxIkLt7JDfWDNxiLv9//hnRKqrxmrwKcT+Suuznn2zooAFM+WbAjAuaq176G4ocwWfMDN7H+r0SF8XqNBO9i0BdY/jxK3SOws9bVP/A\u003d\u003d"
      ],
      "x5t": "c5AzQajNLbmncxy7N3Q0uDQm_Xg",
      "x5t#S256": "cQJC3_ilcCLSX2saHq-o1pQaZ0x3KdyxP7crW68ypjc"
    },
    {
      "kid": "iM1idlnX7sRsh3lBqliOt7ENVX1cWkimfTpsfWgYG9k",
      "kty": "RSA",
      "alg": "PS256",
      "use": "sig",
      "n": "ly8t1-qtzaC4RM0-glXufIilNOX8y3-ct_veSR7dHYeyc27-y6aEIckzmtRzGRERaJ6Ux4FVxOZ2Sx2TsuuOk2IH2oCKyCa41fusaRr8yhxGpO2xnv_z_8WC1ELcAS2vvwF-xUNpZLLgdC3k_jFZcnVLDBgKc_A1gZPc1gfyPnhpd_bMxq3OAzKyER-hVVH7HZHo-4qXl_c117u7hOhg6vt3OSklWe4xdHq43Bq72Zb5kVcNAmopHCN5Ri8riSo6iuhx-I-TQG1pmnzYlZAir6vcA-P65berb-nH7IgGToqnU2diLDFsAWAn7LxVYnR2K9WCNL9rBIw5RcCNcdm5ww",
      "e": "AQAB",
      "x5c": [
        "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\u003d\u003d"
      ],
      "x5t": "Lm8DzD2yYGlll-4mb0CSlyc0vFY",
      "x5t#S256": "auer9itHtTEkwScExvyYbSFQxh5twqG_ViJra5YBgN4"
    },
    {
      "kid": "zfx31Yr_QijkHreEgzJJmgDt3vpNJw-3UYDHWDL832s",
      "kty": "EC",
      "alg": "ES256",
      "use": "sig",
      "crv": "P-256",
      "x": "kXozRF_AaHf2kBa_0_FJPJVO0NFfHBvA4UE7eE6YYMA",
      "y": "1i7kcT1H0Zb9v_F8XE17tVeBzb2vgThwKWaZcD1lhk4"
    },
    {
      "kid": "43WiDgKXF75uxXjFBcTz5rhUD2FJsRmE_YViw3iaJxE",
      "kty": "RSA",
      "alg": "RS256",
      "use": "sig",
      "n": "2trCYBvZGDi8xlH8EAB04AEBhyUpBK9pXS-hv9ALOuZ6vPYcEdzNVdrwgXKMIPUJlR3HWjb7BsPUNQBekI8aAAoy1WIreP6CkRYPZLS7jKNAKBFYrxNCIptP0aTw-M1MC47d6Unz5x_25i8UZH4uQZiDWRODsqzcvBYYzrP_FhuagI2_pKmkWq73jDsF5T_m13JCwz_OIPL2JpCalPAKihz-7b9QdDr9V_cutP7ymSoTuZLY7gKYFdblZm26SAMGhm9rHVuLaFGobis9ggOdbOsD-4cn82s-q88mKDb7eZ9nmFGZfqTCnvksDOiEjZIycY8p8MnWSYVdyTokyGZSkQ",
      "e": "AQAB",
      "x5c": [
        "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\u003d\u003d"
      ],
      "x5t": "075PkNdlE5gbAn1w6OfLONGc7Fw",
      "x5t#S256": "UZRPmtRfCvrCxcRt2M9kR2XFUjwqfJGSBgljPT5wDPI"
    },
    {
      "kid": "oscahzKbEkdWp4Z4gGCNMVm8pjwpj0q2AAQ0ZIn9y1U",
      "kty": "RSA",
      "alg": "PS256",
      "use": "sig",
      "n": "itV4oDZRs9Tc6cXuPtFiUuQ2jUA7Jhg2Xk3XpMDgWfYxQbmYslKS28NjfDmmbvypaiCH9TzQlgaBAvvCl62gNA73TaVGv7uKDIge6vL_g4dwaZsapkxc4Ao36tOsU4w8QQC4pZDh9xCzoqYemvQUuVGh_rSqVUoHhcEzd3_-NGEhamiuNDxrJftHkfMf_GHi05edeN5FHT9ZJrxpcsAXY7fz3SmGI-wiVB9CgErKuaH91SBrReDvY6rnK7fxcGZKgnd0ACbvDUDruNh7R2wvrJT7pTEHSre-ulehLPKNOGOX49jlPEn8CZEFTO6wi-9aK97Cyyg7ZG3uPIfrS-PrDw",
      "e": "AQAB",
      "x5c": [
        "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\u003d\u003d"
      ],
      "x5t": "YQwHgxOXWi4PkD6oVDUcZ6sxSL0",
      "x5t#S256": "8XdoYM7hypH7yGcAZsCbu4QkH73aBPsuImUnnn_Q6kU"
    }
  ]
}
2022-05-19 13:33:18 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-05-19 13:33:18 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2022-05-19 13:33:18 SUCCESS
CheckDistinctKeyIdValueInServerJWKs
Distinct 'kid' value in all keys of server_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-05-19 13:33:18 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-05-19 13:33:18
StoreOriginalClientConfiguration
Created original_client_config object from the client configuration.
client_id
client1-oidcc-hybrid
client_secret
ulvklGmELzpZqKiISkRmberNm4als3z3
2022-05-19 13:33:18
ExtractClientNameFromStoredConfig
Extracted client_name from stored client configuration.
client_name
2022-05-19 13:33:18 SUCCESS
GenerateRS256ClientJWKs
Generated client JWKs
client_jwks
{
  "keys": [
    {
      "p": "4bSU_paC-m-6wBjhRWShHG7990Fra1D4YLeEkFJn9qxHFDst_c9Fuox7PbW4jPQIC-BaV2IudaRxWQ7sH97OKNg56Bzya0wzTW-hDyq_5zX4nxLe8FedrJEh6wP9gHBwKUGK_gZhPCA3ZMv6jGtfyGgyyN-Wxj0EZw9vlr7LnuU",
      "kty": "RSA",
      "q": "rR4QnOnl1yiXyOIm7569y2hjfgNopwVkvG1Do5hQVXEquEHgatk1lDczmkacZNK2MxiS9CUw2cV8IXyDQMvrCiI9n5CoFEAo5WcR4ogF0kQkXxm3saiLBRVDOlNNUnyQfTl_nRqFkiVxOHxdn8snFSP1IA0VIc3fHvqZ73JByBU",
      "d": "Nxo60eNwBEZH2DK3Oc4Mh916eJTrm4OOwOTOj6O5xBf7tHGWVjP6Tu2In_3DBSNL06MNJb9q2uy9avQfFte1oPzw6i1j1jUGUilZdfiB7acn-fSqrCeS2e2px8TNaA4_0oZtgh0j99KoOWYKxl6RJVLfiUToaDist0IGvFUzdj5acl2s-ssORFIQv5ov35wJ7lAJucbtLr9J-6QZeF3TqIZ4AYwzXGwqJLdbAD1tktEq1qjLuZdNyHD9pQCxVmJgm7hLoFHIjPuszZUK81IukvDE6hV1NEFFwQ2SUs9Ly9648afzGm8UXyhjllMT1ooF2wNiEPZwaEc_OjEGnmfjwQ",
      "e": "AQAB",
      "use": "sig",
      "qi": "P8qBXUJqYueFpNWY2IxE6SFmEitKaTw5313nG33NzS74f0ZFKz1LuJjYl5CIhQt5XRvyPCsRbtvJ3mPPXLIz6UoDxktdXopYHQiKzfJczmJZx2d1eqSdCEM2gxTeS2_J29Pdc0ja2MrhOnqLzgih8hy0IgB6-ohqh1b7YehPzu0",
      "dp": "Tic-dE1fuyIXE09KKcIne3X_YK95Z6aY6ryBHYw7TZHn5tx7F2i_J1JflkWnSr9xTdN41Ms9dSTkzsa5AmwfDMuaeYIUewzestCVf2_5FTF-Dm71XVmpUkjK6trt25yTaeW1IDLLVot9QtzSu-6uMvHJq_6n8arNLHaO2C7myPU",
      "alg": "RS256",
      "dq": "lkwd3D1tYGlLrgo6B5tn5-sPRd4rw6X5GWY7bRLV2_hOQH5hGiLOU4nBcVWQfjA6Iw5Yt0J6sPa1mFUDlwPzYW7s1VW_tyUk3FWpv2ScuTqT4UTwqHtNhvI41bBw1wZyY2XCF2FpScLcE1BV8F9t5Pq83EC_cgPMjJbBgpNN7Sk",
      "n": "mKGKfyMe2vozqNy4geV-qEsotI6FvUDmpJabmH_dHVHA3AFUFyLurR4TGlcGZLy12aRXhTio5zJAZaM675V-V13O0xm64LfQpKH-AHQ_mfU9r4zAsMdsLCalTRDkT2op_WJgFkZEAMOgDJ5y_7Yoz8lYz8qGOQ3yPH3WADc5CWrdeFLDR-LsKXyHLk6eHa8TlFF8_gebSvFl-NURpPH9U_TxO7S-L42DUMqVPmy5g-fQAEfRoqvdirhwss07yFLf8nhNTONvIcOzLUdQI4dK0p0DT-MZuyeMEKPD1fJNObi6ZLf-OMW6IL_MfKe-jzotii2tgUy_vDPNYT-tDPvwyQ"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "alg": "RS256",
      "n": "mKGKfyMe2vozqNy4geV-qEsotI6FvUDmpJabmH_dHVHA3AFUFyLurR4TGlcGZLy12aRXhTio5zJAZaM675V-V13O0xm64LfQpKH-AHQ_mfU9r4zAsMdsLCalTRDkT2op_WJgFkZEAMOgDJ5y_7Yoz8lYz8qGOQ3yPH3WADc5CWrdeFLDR-LsKXyHLk6eHa8TlFF8_gebSvFl-NURpPH9U_TxO7S-L42DUMqVPmy5g-fQAEfRoqvdirhwss07yFLf8nhNTONvIcOzLUdQI4dK0p0DT-MZuyeMEKPD1fJNObi6ZLf-OMW6IL_MfKe-jzotii2tgUy_vDPNYT-tDPvwyQ"
    }
  ]
}
2022-05-19 13:33:18 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-05-19 13:33:18
CreateEmptyDynamicRegistrationRequest
Created empty dynamic registration request
2022-05-19 13:33:18
AddClientNameToDynamicRegistrationRequest
Added client_name to registration request
client_name
OIDF Conformance Test SVzX48yENnPW8Yp
2022-05-19 13:33:18
AddAuthorizationCodeGrantTypeToDynamicRegistrationRequest
Added 'authorization_code' to 'grant_types'
grant_types
[
  "authorization_code"
]
2022-05-19 13:33:18
AddPublicJwksToDynamicRegistrationRequest
Added client public JWKS to dynamic registration request
dynamic_registration_request
{
  "client_name": "OIDF Conformance Test SVzX48yENnPW8Yp",
  "grant_types": [
    "authorization_code"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "alg": "RS256",
        "n": "mKGKfyMe2vozqNy4geV-qEsotI6FvUDmpJabmH_dHVHA3AFUFyLurR4TGlcGZLy12aRXhTio5zJAZaM675V-V13O0xm64LfQpKH-AHQ_mfU9r4zAsMdsLCalTRDkT2op_WJgFkZEAMOgDJ5y_7Yoz8lYz8qGOQ3yPH3WADc5CWrdeFLDR-LsKXyHLk6eHa8TlFF8_gebSvFl-NURpPH9U_TxO7S-L42DUMqVPmy5g-fQAEfRoqvdirhwss07yFLf8nhNTONvIcOzLUdQI4dK0p0DT-MZuyeMEKPD1fJNObi6ZLf-OMW6IL_MfKe-jzotii2tgUy_vDPNYT-tDPvwyQ"
      }
    ]
  }
}
2022-05-19 13:33:18
AddTokenEndpointAuthMethodToDynamicRegistrationRequestFromEnvironment
Added token endpoint auth method to dynamic registration request
dynamic_registration_request
{
  "client_name": "OIDF Conformance Test SVzX48yENnPW8Yp",
  "grant_types": [
    "authorization_code"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "alg": "RS256",
        "n": "mKGKfyMe2vozqNy4geV-qEsotI6FvUDmpJabmH_dHVHA3AFUFyLurR4TGlcGZLy12aRXhTio5zJAZaM675V-V13O0xm64LfQpKH-AHQ_mfU9r4zAsMdsLCalTRDkT2op_WJgFkZEAMOgDJ5y_7Yoz8lYz8qGOQ3yPH3WADc5CWrdeFLDR-LsKXyHLk6eHa8TlFF8_gebSvFl-NURpPH9U_TxO7S-L42DUMqVPmy5g-fQAEfRoqvdirhwss07yFLf8nhNTONvIcOzLUdQI4dK0p0DT-MZuyeMEKPD1fJNObi6ZLf-OMW6IL_MfKe-jzotii2tgUy_vDPNYT-tDPvwyQ"
      }
    ]
  },
  "token_endpoint_auth_method": "client_secret_basic"
}
2022-05-19 13:33:18
AddResponseTypesArrayToDynamicRegistrationRequestFromEnvironment
Added response_types array to dynamic registration request
dynamic_registration_request
{
  "client_name": "OIDF Conformance Test SVzX48yENnPW8Yp",
  "grant_types": [
    "authorization_code"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "alg": "RS256",
        "n": "mKGKfyMe2vozqNy4geV-qEsotI6FvUDmpJabmH_dHVHA3AFUFyLurR4TGlcGZLy12aRXhTio5zJAZaM675V-V13O0xm64LfQpKH-AHQ_mfU9r4zAsMdsLCalTRDkT2op_WJgFkZEAMOgDJ5y_7Yoz8lYz8qGOQ3yPH3WADc5CWrdeFLDR-LsKXyHLk6eHa8TlFF8_gebSvFl-NURpPH9U_TxO7S-L42DUMqVPmy5g-fQAEfRoqvdirhwss07yFLf8nhNTONvIcOzLUdQI4dK0p0DT-MZuyeMEKPD1fJNObi6ZLf-OMW6IL_MfKe-jzotii2tgUy_vDPNYT-tDPvwyQ"
      }
    ]
  },
  "token_endpoint_auth_method": "client_secret_basic",
  "response_types": [
    "code"
  ]
}
2022-05-19 13:33:18
AddRedirectUriToDynamicRegistrationRequest
Added redirect_uris array to dynamic registration request
dynamic_registration_request
{
  "client_name": "OIDF Conformance Test SVzX48yENnPW8Yp",
  "grant_types": [
    "authorization_code"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "alg": "RS256",
        "n": "mKGKfyMe2vozqNy4geV-qEsotI6FvUDmpJabmH_dHVHA3AFUFyLurR4TGlcGZLy12aRXhTio5zJAZaM675V-V13O0xm64LfQpKH-AHQ_mfU9r4zAsMdsLCalTRDkT2op_WJgFkZEAMOgDJ5y_7Yoz8lYz8qGOQ3yPH3WADc5CWrdeFLDR-LsKXyHLk6eHa8TlFF8_gebSvFl-NURpPH9U_TxO7S-L42DUMqVPmy5g-fQAEfRoqvdirhwss07yFLf8nhNTONvIcOzLUdQI4dK0p0DT-MZuyeMEKPD1fJNObi6ZLf-OMW6IL_MfKe-jzotii2tgUy_vDPNYT-tDPvwyQ"
      }
    ]
  },
  "token_endpoint_auth_method": "client_secret_basic",
  "response_types": [
    "code"
  ],
  "redirect_uris": [
    "https://www.certification.openid.net/test/a/keycloak/callback"
  ]
}
2022-05-19 13:33:18
AddContactsToDynamicRegistrationRequest
Added contacts array to dynamic registration request
dynamic_registration_request
{
  "client_name": "OIDF Conformance Test SVzX48yENnPW8Yp",
  "grant_types": [
    "authorization_code"
  ],
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "e": "AQAB",
        "use": "sig",
        "alg": "RS256",
        "n": "mKGKfyMe2vozqNy4geV-qEsotI6FvUDmpJabmH_dHVHA3AFUFyLurR4TGlcGZLy12aRXhTio5zJAZaM675V-V13O0xm64LfQpKH-AHQ_mfU9r4zAsMdsLCalTRDkT2op_WJgFkZEAMOgDJ5y_7Yoz8lYz8qGOQ3yPH3WADc5CWrdeFLDR-LsKXyHLk6eHa8TlFF8_gebSvFl-NURpPH9U_TxO7S-L42DUMqVPmy5g-fQAEfRoqvdirhwss07yFLf8nhNTONvIcOzLUdQI4dK0p0DT-MZuyeMEKPD1fJNObi6ZLf-OMW6IL_MfKe-jzotii2tgUy_vDPNYT-tDPvwyQ"
      }
    ]
  },
  "token_endpoint_auth_method": "client_secret_basic",
  "response_types": [
    "code"
  ],
  "redirect_uris": [
    "https://www.certification.openid.net/test/a/keycloak/callback"
  ],
  "contacts": [
    "certification@oidf.org"
  ]
}
2022-05-19 13:33:18
CallDynamicRegistrationEndpoint
HTTP request
request_uri
https://84-244-72-90.nip.io:60000/auth/realms/test/clients-registrations/openid-connect
request_method
POST
request_headers
{
  "accept": "application/json",
  "accept-charset": "utf-8",
  "content-type": "application/json",
  "content-length": "707"
}
request_body
{"client_name":"OIDF Conformance Test SVzX48yENnPW8Yp","grant_types":["authorization_code"],"jwks":{"keys":[{"kty":"RSA","e":"AQAB","use":"sig","alg":"RS256","n":"mKGKfyMe2vozqNy4geV-qEsotI6FvUDmpJabmH_dHVHA3AFUFyLurR4TGlcGZLy12aRXhTio5zJAZaM675V-V13O0xm64LfQpKH-AHQ_mfU9r4zAsMdsLCalTRDkT2op_WJgFkZEAMOgDJ5y_7Yoz8lYz8qGOQ3yPH3WADc5CWrdeFLDR-LsKXyHLk6eHa8TlFF8_gebSvFl-NURpPH9U_TxO7S-L42DUMqVPmy5g-fQAEfRoqvdirhwss07yFLf8nhNTONvIcOzLUdQI4dK0p0DT-MZuyeMEKPD1fJNObi6ZLf-OMW6IL_MfKe-jzotii2tgUy_vDPNYT-tDPvwyQ"}]},"token_endpoint_auth_method":"client_secret_basic","response_types":["code"],"redirect_uris":["https://www.certification.openid.net/test/a/keycloak/callback"],"contacts":["certification@oidf.org"]}
2022-05-19 13:33:19 RESPONSE
CallDynamicRegistrationEndpoint
HTTP response
response_status_code
201 CREATED
response_status_text
Created
response_headers
{
  "x-xss-protection": "1; mode\u003dblock",
  "location": "https://84-244-72-90.nip.io:60000/auth/realms/test/clients-registrations/openid-connect/0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "no-referrer",
  "date": "Thu, 19 May 2022 13:33:19 GMT",
  "connection": "keep-alive",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "x-content-type-options": "nosniff",
  "content-type": "application/json",
  "content-length": "1807"
}
response_body
{"redirect_uris":["https://www.certification.openid.net/test/a/keycloak/callback"],"token_endpoint_auth_method":"client_secret_basic","grant_types":["authorization_code"],"response_types":["code","none"],"client_id":"0ff06c71-17c2-4045-be7e-e7c5a61ebb03","client_secret":"XieOc3cE1NmP9N6jWDpuuCOBgryhxvsa","client_name":"OIDF Conformance Test SVzX48yENnPW8Yp","scope":"address phone profile offline_access microprofile-jwt email","jwks":{"keys":[{"kty":"RSA","alg":"RS256","use":"sig","e":"AQAB","n":"mKGKfyMe2vozqNy4geV-qEsotI6FvUDmpJabmH_dHVHA3AFUFyLurR4TGlcGZLy12aRXhTio5zJAZaM675V-V13O0xm64LfQpKH-AHQ_mfU9r4zAsMdsLCalTRDkT2op_WJgFkZEAMOgDJ5y_7Yoz8lYz8qGOQ3yPH3WADc5CWrdeFLDR-LsKXyHLk6eHa8TlFF8_gebSvFl-NURpPH9U_TxO7S-L42DUMqVPmy5g-fQAEfRoqvdirhwss07yFLf8nhNTONvIcOzLUdQI4dK0p0DT-MZuyeMEKPD1fJNObi6ZLf-OMW6IL_MfKe-jzotii2tgUy_vDPNYT-tDPvwyQ"}]},"subject_type":"public","request_uris":[],"tls_client_certificate_bound_access_tokens":false,"client_id_issued_at":1652967199,"client_secret_expires_at":0,"registration_client_uri":"https://84-244-72-90.nip.io:60000/auth/realms/test/clients-registrations/openid-connect/0ff06c71-17c2-4045-be7e-e7c5a61ebb03","registration_access_token":"eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJlZGU2NjRjNS0zN2U1LTQ3ZGItOTQzZC04ODk5ZDRmNzExNTQifQ.eyJleHAiOjAsImlhdCI6MTY1Mjk2NzE5OSwianRpIjoiMjE5OWQ2MTctOTY2Ny00MWYyLTg1NjEtMmFhMzMxOTlmNzIyIiwiaXNzIjoiaHR0cHM6Ly84NC0yNDQtNzItOTAubmlwLmlvOjYwMDAwL2F1dGgvcmVhbG1zL3Rlc3QiLCJhdWQiOiJodHRwczovLzg0LTI0NC03Mi05MC5uaXAuaW86NjAwMDAvYXV0aC9yZWFsbXMvdGVzdCIsInR5cCI6IlJlZ2lzdHJhdGlvbkFjY2Vzc1Rva2VuIiwicmVnaXN0cmF0aW9uX2F1dGgiOiJhbm9ueW1vdXMifQ.pr-Uioc-6EOxgz3w8AF5uqH16GYjI0xRVbfi3oBvEQI","backchannel_logout_session_required":false,"require_pushed_authorization_requests":false,"frontchannel_logout_session_required":false}
2022-05-19 13:33:19
CallDynamicRegistrationEndpoint
Parsed registration endpoint response
status
201
endpoint_name
dynamic registration
headers
{
  "x-xss-protection": "1; mode\u003dblock",
  "location": "https://84-244-72-90.nip.io:60000/auth/realms/test/clients-registrations/openid-connect/0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "no-referrer",
  "date": "Thu, 19 May 2022 13:33:19 GMT",
  "connection": "keep-alive",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "x-content-type-options": "nosniff",
  "content-type": "application/json",
  "content-length": "1807"
}
body
{"redirect_uris":["https://www.certification.openid.net/test/a/keycloak/callback"],"token_endpoint_auth_method":"client_secret_basic","grant_types":["authorization_code"],"response_types":["code","none"],"client_id":"0ff06c71-17c2-4045-be7e-e7c5a61ebb03","client_secret":"XieOc3cE1NmP9N6jWDpuuCOBgryhxvsa","client_name":"OIDF Conformance Test SVzX48yENnPW8Yp","scope":"address phone profile offline_access microprofile-jwt email","jwks":{"keys":[{"kty":"RSA","alg":"RS256","use":"sig","e":"AQAB","n":"mKGKfyMe2vozqNy4geV-qEsotI6FvUDmpJabmH_dHVHA3AFUFyLurR4TGlcGZLy12aRXhTio5zJAZaM675V-V13O0xm64LfQpKH-AHQ_mfU9r4zAsMdsLCalTRDkT2op_WJgFkZEAMOgDJ5y_7Yoz8lYz8qGOQ3yPH3WADc5CWrdeFLDR-LsKXyHLk6eHa8TlFF8_gebSvFl-NURpPH9U_TxO7S-L42DUMqVPmy5g-fQAEfRoqvdirhwss07yFLf8nhNTONvIcOzLUdQI4dK0p0DT-MZuyeMEKPD1fJNObi6ZLf-OMW6IL_MfKe-jzotii2tgUy_vDPNYT-tDPvwyQ"}]},"subject_type":"public","request_uris":[],"tls_client_certificate_bound_access_tokens":false,"client_id_issued_at":1652967199,"client_secret_expires_at":0,"registration_client_uri":"https://84-244-72-90.nip.io:60000/auth/realms/test/clients-registrations/openid-connect/0ff06c71-17c2-4045-be7e-e7c5a61ebb03","registration_access_token":"eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJlZGU2NjRjNS0zN2U1LTQ3ZGItOTQzZC04ODk5ZDRmNzExNTQifQ.eyJleHAiOjAsImlhdCI6MTY1Mjk2NzE5OSwianRpIjoiMjE5OWQ2MTctOTY2Ny00MWYyLTg1NjEtMmFhMzMxOTlmNzIyIiwiaXNzIjoiaHR0cHM6Ly84NC0yNDQtNzItOTAubmlwLmlvOjYwMDAwL2F1dGgvcmVhbG1zL3Rlc3QiLCJhdWQiOiJodHRwczovLzg0LTI0NC03Mi05MC5uaXAuaW86NjAwMDAvYXV0aC9yZWFsbXMvdGVzdCIsInR5cCI6IlJlZ2lzdHJhdGlvbkFjY2Vzc1Rva2VuIiwicmVnaXN0cmF0aW9uX2F1dGgiOiJhbm9ueW1vdXMifQ.pr-Uioc-6EOxgz3w8AF5uqH16GYjI0xRVbfi3oBvEQI","backchannel_logout_session_required":false,"require_pushed_authorization_requests":false,"frontchannel_logout_session_required":false}
body_json
{
  "redirect_uris": [
    "https://www.certification.openid.net/test/a/keycloak/callback"
  ],
  "token_endpoint_auth_method": "client_secret_basic",
  "grant_types": [
    "authorization_code"
  ],
  "response_types": [
    "code",
    "none"
  ],
  "client_id": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "client_secret": "XieOc3cE1NmP9N6jWDpuuCOBgryhxvsa",
  "client_name": "OIDF Conformance Test SVzX48yENnPW8Yp",
  "scope": "address phone profile offline_access microprofile-jwt email",
  "jwks": {
    "keys": [
      {
        "kty": "RSA",
        "alg": "RS256",
        "use": "sig",
        "e": "AQAB",
        "n": "mKGKfyMe2vozqNy4geV-qEsotI6FvUDmpJabmH_dHVHA3AFUFyLurR4TGlcGZLy12aRXhTio5zJAZaM675V-V13O0xm64LfQpKH-AHQ_mfU9r4zAsMdsLCalTRDkT2op_WJgFkZEAMOgDJ5y_7Yoz8lYz8qGOQ3yPH3WADc5CWrdeFLDR-LsKXyHLk6eHa8TlFF8_gebSvFl-NURpPH9U_TxO7S-L42DUMqVPmy5g-fQAEfRoqvdirhwss07yFLf8nhNTONvIcOzLUdQI4dK0p0DT-MZuyeMEKPD1fJNObi6ZLf-OMW6IL_MfKe-jzotii2tgUy_vDPNYT-tDPvwyQ"
      }
    ]
  },
  "subject_type": "public",
  "request_uris": [],
  "tls_client_certificate_bound_access_tokens": false,
  "client_id_issued_at": 1652967199,
  "client_secret_expires_at": 0,
  "registration_client_uri": "https://84-244-72-90.nip.io:60000/auth/realms/test/clients-registrations/openid-connect/0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "registration_access_token": "eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJlZGU2NjRjNS0zN2U1LTQ3ZGItOTQzZC04ODk5ZDRmNzExNTQifQ.eyJleHAiOjAsImlhdCI6MTY1Mjk2NzE5OSwianRpIjoiMjE5OWQ2MTctOTY2Ny00MWYyLTg1NjEtMmFhMzMxOTlmNzIyIiwiaXNzIjoiaHR0cHM6Ly84NC0yNDQtNzItOTAubmlwLmlvOjYwMDAwL2F1dGgvcmVhbG1zL3Rlc3QiLCJhdWQiOiJodHRwczovLzg0LTI0NC03Mi05MC5uaXAuaW86NjAwMDAvYXV0aC9yZWFsbXMvdGVzdCIsInR5cCI6IlJlZ2lzdHJhdGlvbkFjY2Vzc1Rva2VuIiwicmVnaXN0cmF0aW9uX2F1dGgiOiJhbm9ueW1vdXMifQ.pr-Uioc-6EOxgz3w8AF5uqH16GYjI0xRVbfi3oBvEQI",
  "backchannel_logout_session_required": false,
  "require_pushed_authorization_requests": false,
  "frontchannel_logout_session_required": false
}
2022-05-19 13:33:19 SUCCESS
EnsureContentTypeJson
endpoint_response Content-Type: header is application/json
2022-05-19 13:33:19 SUCCESS
EnsureHttpStatusCodeIs201
dynamic registration endpoint returned the expected http status
expected_status
201
http_status
201
2022-05-19 13:33:19 SUCCESS
CheckNoErrorFromDynamicRegistrationEndpoint
Dynamic registration endpoint did not return an error.
2022-05-19 13:33:19 SUCCESS
ExtractDynamicRegistrationResponse
Extracted client from dynamic registration response
client_id
0ff06c71-17c2-4045-be7e-e7c5a61ebb03
2022-05-19 13:33:19 SUCCESS
VerifyClientManagementCredentials
Verified dynamic registration management credentials
registration_client_uri
https://84-244-72-90.nip.io:60000/auth/realms/test/clients-registrations/openid-connect/0ff06c71-17c2-4045-be7e-e7c5a61ebb03
registration_access_token
eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJlZGU2NjRjNS0zN2U1LTQ3ZGItOTQzZC04ODk5ZDRmNzExNTQifQ.eyJleHAiOjAsImlhdCI6MTY1Mjk2NzE5OSwianRpIjoiMjE5OWQ2MTctOTY2Ny00MWYyLTg1NjEtMmFhMzMxOTlmNzIyIiwiaXNzIjoiaHR0cHM6Ly84NC0yNDQtNzItOTAubmlwLmlvOjYwMDAwL2F1dGgvcmVhbG1zL3Rlc3QiLCJhdWQiOiJodHRwczovLzg0LTI0NC03Mi05MC5uaXAuaW86NjAwMDAvYXV0aC9yZWFsbXMvdGVzdCIsInR5cCI6IlJlZ2lzdHJhdGlvbkFjY2Vzc1Rva2VuIiwicmVnaXN0cmF0aW9uX2F1dGgiOiJhbm9ueW1vdXMifQ.pr-Uioc-6EOxgz3w8AF5uqH16GYjI0xRVbfi3oBvEQI
2022-05-19 13:33:19
SetScopeInClientConfigurationToOpenId
Set scope in client configuration to "openid"
scope
openid
2022-05-19 13:33:19 SUCCESS
EnsureServerConfigurationSupportsClientSecretBasic
Contents of 'token_endpoint_auth_methods_supported' in discovery document matches expectations.
actual
[
  "private_key_jwt",
  "client_secret_basic",
  "client_secret_post",
  "tls_client_auth",
  "client_secret_jwt"
]
expected
[
  "client_secret_basic"
]
minimum_matches_required
1
2022-05-19 13:33:19 SUCCESS
SetProtectedResourceUrlToUserInfoEndpoint
userinfo_endpoint will be used to test access token. The user info is not a mandatory to implement feature in the OpenID Connect specification, but is mandatory for certification.
protected_resource_url
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/userinfo
2022-05-19 13:33:19
oidcc-max-age-10000
Setup Done
Make request to authorization endpoint
2022-05-19 13:33:19 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
0ff06c71-17c2-4045-be7e-e7c5a61ebb03
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
scope
openid
2022-05-19 13:33:19
CreateRandomStateValue
Created state value
requested_state_length
10
state
E23FYB1mUH
2022-05-19 13:33:19 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
0ff06c71-17c2-4045-be7e-e7c5a61ebb03
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
scope
openid
state
E23FYB1mUH
2022-05-19 13:33:19
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
UpCDeyW0NU
2022-05-19 13:33:19 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
0ff06c71-17c2-4045-be7e-e7c5a61ebb03
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
scope
openid
state
E23FYB1mUH
nonce
UpCDeyW0NU
2022-05-19 13:33:19 SUCCESS
SetAuthorizationEndpointRequestResponseTypeFromEnvironment
Added response_type parameter to request
client_id
0ff06c71-17c2-4045-be7e-e7c5a61ebb03
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
scope
openid
state
E23FYB1mUH
nonce
UpCDeyW0NU
response_type
code
2022-05-19 13:33:19 SUCCESS
AddMaxAge15000ToAuthorizationEndpointRequest
Added max_age=15000 to authorization endpoint request
client_id
0ff06c71-17c2-4045-be7e-e7c5a61ebb03
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
scope
openid
state
E23FYB1mUH
nonce
UpCDeyW0NU
response_type
code
max_age
15000
2022-05-19 13:33:19 SUCCESS
BuildPlainRedirectToAuthorizationEndpoint
Sending to authorization endpoint
auth_request
{
  "client_id": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "redirect_uri": "https://www.certification.openid.net/test/a/keycloak/callback",
  "scope": "openid",
  "state": "E23FYB1mUH",
  "nonce": "UpCDeyW0NU",
  "response_type": "code",
  "max_age": 15000
}
redirect_to_authorization_endpoint
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/auth?client_id=0ff06c71-17c2-4045-be7e-e7c5a61ebb03&redirect_uri=https://www.certification.openid.net/test/a/keycloak/callback&scope=openid&state=E23FYB1mUH&nonce=UpCDeyW0NU&response_type=code&max_age=15000
2022-05-19 13:33:19 REDIRECT
oidcc-max-age-10000
Redirecting to authorization endpoint
redirect_to
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/auth?client_id=0ff06c71-17c2-4045-be7e-e7c5a61ebb03&redirect_uri=https://www.certification.openid.net/test/a/keycloak/callback&scope=openid&state=E23FYB1mUH&nonce=UpCDeyW0NU&response_type=code&max_age=15000
2022-05-19 13:33:39 INCOMING
oidcc-max-age-10000
Incoming HTTP request to /test/a/keycloak/callback
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:100.0) Gecko/20100101 Firefox/100.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "cookie": "__utma\u003d201319536.747058366.1611919072.1652941054.1652964248.141; __utmz\u003d201319536.1647870296.126.44.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.747058366.1611919072; __utmc\u003d201319536; JSESSIONID\u003dFA6FE393C94D574E60695BF1ECA081CB",
  "upgrade-insecure-requests": "1",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "connection": "close"
}
incoming_path
/test/a/keycloak/callback
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{
  "state": "E23FYB1mUH",
  "session_state": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "code": "ec6cf00b-4255-4a9a-bdf9-b716ff677812.21487f0d-2e82-4b4c-baa2-f307686fd42a.0ff06c71-17c2-4045-be7e-e7c5a61ebb03"
}
incoming_body
2022-05-19 13:33:39 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/0ml6TvYCtVVb7TILDJNW",
  "fullUrl": "https://www.certification.openid.net/test/a/keycloak/implicit/0ml6TvYCtVVb7TILDJNW"
}
2022-05-19 13:33:39 OUTGOING
oidcc-max-age-10000
Response to HTTP request to test instance SVzX48yENnPW8Yp
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/keycloak/implicit/0ml6TvYCtVVb7TILDJNW, returnUrl=/log-detail.html?log=SVzX48yENnPW8Yp}]
outgoing_path
callback
2022-05-19 13:33:40 INCOMING
oidcc-max-age-10000
Incoming HTTP request to /test/a/keycloak/implicit/0ml6TvYCtVVb7TILDJNW
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:100.0) Gecko/20100101 Firefox/100.0",
  "accept": "*/*",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "content-type": "text/plain",
  "x-requested-with": "XMLHttpRequest",
  "origin": "https://www.certification.openid.net",
  "referer": "https://www.certification.openid.net/test/a/keycloak/callback?state\u003dE23FYB1mUH\u0026session_state\u003d21487f0d-2e82-4b4c-baa2-f307686fd42a\u0026code\u003dec6cf00b-4255-4a9a-bdf9-b716ff677812.21487f0d-2e82-4b4c-baa2-f307686fd42a.0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "cookie": "__utma\u003d201319536.747058366.1611919072.1652941054.1652964248.141; __utmz\u003d201319536.1647870296.126.44.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.747058366.1611919072; __utmc\u003d201319536; JSESSIONID\u003dFA6FE393C94D574E60695BF1ECA081CB",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "connection": "close",
  "content-length": "0"
}
incoming_path
/test/a/keycloak/implicit/0ml6TvYCtVVb7TILDJNW
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-05-19 13:33:40 OUTGOING
oidcc-max-age-10000
Response to HTTP request to test instance SVzX48yENnPW8Yp
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/0ml6TvYCtVVb7TILDJNW
2022-05-19 13:33:40 SUCCESS
ExtractImplicitHashToCallbackResponse
implicit_hash is empty
2022-05-19 13:33:40 REDIRECT-IN
oidcc-max-age-10000
Authorization endpoint response captured
url_query
{
  "state": "E23FYB1mUH",
  "session_state": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "code": "ec6cf00b-4255-4a9a-bdf9-b716ff677812.21487f0d-2e82-4b4c-baa2-f307686fd42a.0ff06c71-17c2-4045-be7e-e7c5a61ebb03"
}
headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:100.0) Gecko/20100101 Firefox/100.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "cookie": "__utma\u003d201319536.747058366.1611919072.1652941054.1652964248.141; __utmz\u003d201319536.1647870296.126.44.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.747058366.1611919072; __utmc\u003d201319536; JSESSIONID\u003dFA6FE393C94D574E60695BF1ECA081CB",
  "upgrade-insecure-requests": "1",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "x-forwarded-proto": "https",
  "x-forwarded-port": "443",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{}
post_body
Verify authorization endpoint response
2022-05-19 13:33:40 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2022-05-19 13:33:40
ValidateIssInAuthorizationResponse
No 'iss' value in authorization response.
2022-05-19 13:33:40 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2022-05-19 13:33:40 SUCCESS
CheckStateInAuthorizationResponse
State in response correctly returned
state
E23FYB1mUH
2022-05-19 13:33:40 SUCCESS
ExtractAuthorizationCodeFromAuthorizationResponse
Found authorization code
code
ec6cf00b-4255-4a9a-bdf9-b716ff677812.21487f0d-2e82-4b4c-baa2-f307686fd42a.0ff06c71-17c2-4045-be7e-e7c5a61ebb03
2022-05-19 13:33:40 SUCCESS
CreateTokenEndpointRequestForAuthorizationCodeGrant
Created token endpoint request
grant_type
authorization_code
code
ec6cf00b-4255-4a9a-bdf9-b716ff677812.21487f0d-2e82-4b4c-baa2-f307686fd42a.0ff06c71-17c2-4045-be7e-e7c5a61ebb03
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
2022-05-19 13:33:40 SUCCESS
AddBasicAuthClientSecretAuthenticationParameters
Added basic authorization header
Authorization
Basic MGZmMDZjNzEtMTdjMi00MDQ1LWJlN2UtZTdjNWE2MWViYjAzOlhpZU9jM2NFMU5tUDlONmpXRHB1dUNPQmdyeWh4dnNh
2022-05-19 13:33:40
CallTokenEndpoint
HTTP request
request_uri
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/token
request_method
POST
request_headers
{
  "accept": "application/json",
  "authorization": "Basic MGZmMDZjNzEtMTdjMi00MDQ1LWJlN2UtZTdjNWE2MWViYjAzOlhpZU9jM2NFMU5tUDlONmpXRHB1dUNPQmdyeWh4dnNh",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "234"
}
request_body
grant_type=authorization_code&code=ec6cf00b-4255-4a9a-bdf9-b716ff677812.21487f0d-2e82-4b4c-baa2-f307686fd42a.0ff06c71-17c2-4045-be7e-e7c5a61ebb03&redirect_uri=https%3A%2F%2Fwww.certification.openid.net%2Ftest%2Fa%2Fkeycloak%2Fcallback
2022-05-19 13:33:41 RESPONSE
CallTokenEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "cache-control": "no-store",
  "x-xss-protection": "1; mode\u003dblock",
  "pragma": "no-cache",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "no-referrer",
  "date": "Thu, 19 May 2022 13:33:41 GMT",
  "connection": "keep-alive",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "x-content-type-options": "nosniff",
  "content-type": "application/json",
  "content-length": "2468"
}
response_body
{"access_token":"eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.eyJleHAiOjE2NTI5Njc1MjEsImlhdCI6MTY1Mjk2NzIyMSwiYXV0aF90aW1lIjoxNjUyOTY3MTYwLCJqdGkiOiIzZTdhMWViMC03ZTExLTRiNGItYTczZC02MTg4ODcyZTBjNGEiLCJpc3MiOiJodHRwczovLzg0LTI0NC03Mi05MC5uaXAuaW86NjAwMDAvYXV0aC9yZWFsbXMvdGVzdCIsInN1YiI6IjNlY2RjZWNkLTQzZGMtNGRjOS1hYTFjLWI5NzkxZmNmNzMwZiIsInR5cCI6IkJlYXJlciIsImF6cCI6IjBmZjA2YzcxLTE3YzItNDA0NS1iZTdlLWU3YzVhNjFlYmIwMyIsIm5vbmNlIjoiVXBDRGV5VzBOVSIsInNlc3Npb25fc3RhdGUiOiIyMTQ4N2YwZC0yZTgyLTRiNGMtYmFhMi1mMzA3Njg2ZmQ0MmEiLCJhY3IiOiIwIiwiYWxsb3dlZC1vcmlnaW5zIjpbImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldCJdLCJyZWFsbV9hY2Nlc3MiOnsicm9sZXMiOlsib2ZmbGluZV9hY2Nlc3MiXX0sInNjb3BlIjoib3BlbmlkIG5hbWVfY2xhaW1zIGFjciIsInNpZCI6IjIxNDg3ZjBkLTJlODItNGI0Yy1iYWEyLWYzMDc2ODZmZDQyYSJ9.fgwIhLI3ErqYYpd8ZLnN_9vjGiNUVTqSKPt4QbT7qAWmTcENJ0gZHnfSVFPsYmHD69D7-oSU-HHUxw5mzutaB9af2VdKgkUcdwSqAg3KWKxCVEzlbnRPyTQwsQEWDP-JMxjM7UQ2lnK_MYLmxkGOug9wzZLU7ueerlI8ieMIh6B8zE1VOsqkkh4bDH0HUKrbzd3ad6b2Yp7yjq9O1tclJdqtpWWvW4dt-4j-_l3wBUbY7hWsk2HDn8DCTGM1EQ-MnFKP-yQxvjyBP0Un4eAZuuDVpov8hXEQOdGDm3w1RPH0nzRp6MukvHGdnvg8OO48zvcQA5vTXZ9LfEeVFBNYjA","expires_in":300,"refresh_expires_in":0,"token_type":"Bearer","id_token":"eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.QhNAr37J68UElojVkdaisQ_FJfw2ftpQDOf9l3k1vKSTu9u2yzTYRMh9ZDY-ekn7GpmPSrEC-l9lOu8i99qNsLkaBcPzXr0Gb55VkkO-7QolVMQT-bEHT7xxPaYFRvLwG_1k3fkjq-KcIiATVHcuh0dCniNMkkrkuqCbU36K1MRO1zcGvTx1ZS1l8xVHDrKnZmYlFhvOBstIZM12bEOtNiV6A5HyVAgIGybKt92Y8qS-f2R63V09iJVFbfM8Tfc2MKDlUX4YjpUrKsuXNMaUc0P__X2JnstuXDmMPx4b8T20-WYBgQ6xt__m3p7P-GtISuDsERWAAclkpfCLwk8E0g","not-before-policy":1652951933,"session_state":"21487f0d-2e82-4b4c-baa2-f307686fd42a","scope":"openid name_claims acr"}
2022-05-19 13:33:41 SUCCESS
CallTokenEndpoint
Parsed token endpoint response
access_token
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.fgwIhLI3ErqYYpd8ZLnN_9vjGiNUVTqSKPt4QbT7qAWmTcENJ0gZHnfSVFPsYmHD69D7-oSU-HHUxw5mzutaB9af2VdKgkUcdwSqAg3KWKxCVEzlbnRPyTQwsQEWDP-JMxjM7UQ2lnK_MYLmxkGOug9wzZLU7ueerlI8ieMIh6B8zE1VOsqkkh4bDH0HUKrbzd3ad6b2Yp7yjq9O1tclJdqtpWWvW4dt-4j-_l3wBUbY7hWsk2HDn8DCTGM1EQ-MnFKP-yQxvjyBP0Un4eAZuuDVpov8hXEQOdGDm3w1RPH0nzRp6MukvHGdnvg8OO48zvcQA5vTXZ9LfEeVFBNYjA
expires_in
300
refresh_expires_in
0
token_type
Bearer
id_token
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.QhNAr37J68UElojVkdaisQ_FJfw2ftpQDOf9l3k1vKSTu9u2yzTYRMh9ZDY-ekn7GpmPSrEC-l9lOu8i99qNsLkaBcPzXr0Gb55VkkO-7QolVMQT-bEHT7xxPaYFRvLwG_1k3fkjq-KcIiATVHcuh0dCniNMkkrkuqCbU36K1MRO1zcGvTx1ZS1l8xVHDrKnZmYlFhvOBstIZM12bEOtNiV6A5HyVAgIGybKt92Y8qS-f2R63V09iJVFbfM8Tfc2MKDlUX4YjpUrKsuXNMaUc0P__X2JnstuXDmMPx4b8T20-WYBgQ6xt__m3p7P-GtISuDsERWAAclkpfCLwk8E0g
not-before-policy
1652951933
session_state
21487f0d-2e82-4b4c-baa2-f307686fd42a
scope
openid name_claims acr
2022-05-19 13:33:41 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2022-05-19 13:33:41 SUCCESS
CheckForAccessTokenValue
Found an access token
access_token
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.fgwIhLI3ErqYYpd8ZLnN_9vjGiNUVTqSKPt4QbT7qAWmTcENJ0gZHnfSVFPsYmHD69D7-oSU-HHUxw5mzutaB9af2VdKgkUcdwSqAg3KWKxCVEzlbnRPyTQwsQEWDP-JMxjM7UQ2lnK_MYLmxkGOug9wzZLU7ueerlI8ieMIh6B8zE1VOsqkkh4bDH0HUKrbzd3ad6b2Yp7yjq9O1tclJdqtpWWvW4dt-4j-_l3wBUbY7hWsk2HDn8DCTGM1EQ-MnFKP-yQxvjyBP0Un4eAZuuDVpov8hXEQOdGDm3w1RPH0nzRp6MukvHGdnvg8OO48zvcQA5vTXZ9LfEeVFBNYjA
2022-05-19 13:33:41 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.fgwIhLI3ErqYYpd8ZLnN_9vjGiNUVTqSKPt4QbT7qAWmTcENJ0gZHnfSVFPsYmHD69D7-oSU-HHUxw5mzutaB9af2VdKgkUcdwSqAg3KWKxCVEzlbnRPyTQwsQEWDP-JMxjM7UQ2lnK_MYLmxkGOug9wzZLU7ueerlI8ieMIh6B8zE1VOsqkkh4bDH0HUKrbzd3ad6b2Yp7yjq9O1tclJdqtpWWvW4dt-4j-_l3wBUbY7hWsk2HDn8DCTGM1EQ-MnFKP-yQxvjyBP0Un4eAZuuDVpov8hXEQOdGDm3w1RPH0nzRp6MukvHGdnvg8OO48zvcQA5vTXZ9LfEeVFBNYjA
type
Bearer
2022-05-19 13:33:41 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
300
2022-05-19 13:33:41 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
300
2022-05-19 13:33:41 INFO
CheckForRefreshTokenValue
Couldn't find refresh token
2022-05-19 13:33:41 SUCCESS
ExtractIdTokenFromTokenResponse
Found and parsed the id_token from token_endpoint_response
value
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.QhNAr37J68UElojVkdaisQ_FJfw2ftpQDOf9l3k1vKSTu9u2yzTYRMh9ZDY-ekn7GpmPSrEC-l9lOu8i99qNsLkaBcPzXr0Gb55VkkO-7QolVMQT-bEHT7xxPaYFRvLwG_1k3fkjq-KcIiATVHcuh0dCniNMkkrkuqCbU36K1MRO1zcGvTx1ZS1l8xVHDrKnZmYlFhvOBstIZM12bEOtNiV6A5HyVAgIGybKt92Y8qS-f2R63V09iJVFbfM8Tfc2MKDlUX4YjpUrKsuXNMaUc0P__X2JnstuXDmMPx4b8T20-WYBgQ6xt__m3p7P-GtISuDsERWAAclkpfCLwk8E0g
header
{
  "kid": "Mb20UGZj81X9UGbs0uReFcFlUV81vJRDYFPclWBv9GY",
  "typ": "JWT",
  "alg": "RS256"
}
claims
{
  "at_hash": "a6HKsQkiF7YwiQqrmhtU3Q",
  "sub": "3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f",
  "iss": "https://84-244-72-90.nip.io:60000/auth/realms/test",
  "typ": "ID",
  "nonce": "UpCDeyW0NU",
  "sid": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "aud": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "acr": "0",
  "azp": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "auth_time": 1652967160,
  "exp": 1652967521,
  "session_state": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "iat": 1652967221,
  "jti": "df5d4c8a-fc72-4ebd-af52-19517ac1783a"
}
2022-05-19 13:33:41 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2022-05-19 13:33:41 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
UpCDeyW0NU
2022-05-19 13:33:41 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
Nothing to check; the conformance suite did not request an acr claim in request object
2022-05-19 13:33:41 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.QhNAr37J68UElojVkdaisQ_FJfw2ftpQDOf9l3k1vKSTu9u2yzTYRMh9ZDY-ekn7GpmPSrEC-l9lOu8i99qNsLkaBcPzXr0Gb55VkkO-7QolVMQT-bEHT7xxPaYFRvLwG_1k3fkjq-KcIiATVHcuh0dCniNMkkrkuqCbU36K1MRO1zcGvTx1ZS1l8xVHDrKnZmYlFhvOBstIZM12bEOtNiV6A5HyVAgIGybKt92Y8qS-f2R63V09iJVFbfM8Tfc2MKDlUX4YjpUrKsuXNMaUc0P__X2JnstuXDmMPx4b8T20-WYBgQ6xt__m3p7P-GtISuDsERWAAclkpfCLwk8E0g
2022-05-19 13:33:41 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.QhNAr37J68UElojVkdaisQ_FJfw2ftpQDOf9l3k1vKSTu9u2yzTYRMh9ZDY-ekn7GpmPSrEC-l9lOu8i99qNsLkaBcPzXr0Gb55VkkO-7QolVMQT-bEHT7xxPaYFRvLwG_1k3fkjq-KcIiATVHcuh0dCniNMkkrkuqCbU36K1MRO1zcGvTx1ZS1l8xVHDrKnZmYlFhvOBstIZM12bEOtNiV6A5HyVAgIGybKt92Y8qS-f2R63V09iJVFbfM8Tfc2MKDlUX4YjpUrKsuXNMaUc0P__X2JnstuXDmMPx4b8T20-WYBgQ6xt__m3p7P-GtISuDsERWAAclkpfCLwk8E0g
2022-05-19 13:33:41 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f
2022-05-19 13:33:41 INFO
FAPIValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
Userinfo endpoint tests
2022-05-19 13:33:41
CallProtectedResource
HTTP request
request_uri
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/userinfo
request_method
GET
request_headers
{
  "accept": "application/json",
  "authorization": "Bearer eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.fgwIhLI3ErqYYpd8ZLnN_9vjGiNUVTqSKPt4QbT7qAWmTcENJ0gZHnfSVFPsYmHD69D7-oSU-HHUxw5mzutaB9af2VdKgkUcdwSqAg3KWKxCVEzlbnRPyTQwsQEWDP-JMxjM7UQ2lnK_MYLmxkGOug9wzZLU7ueerlI8ieMIh6B8zE1VOsqkkh4bDH0HUKrbzd3ad6b2Yp7yjq9O1tclJdqtpWWvW4dt-4j-_l3wBUbY7hWsk2HDn8DCTGM1EQ-MnFKP-yQxvjyBP0Un4eAZuuDVpov8hXEQOdGDm3w1RPH0nzRp6MukvHGdnvg8OO48zvcQA5vTXZ9LfEeVFBNYjA",
  "content-length": "0"
}
request_body

                                
2022-05-19 13:33:42 RESPONSE
CallProtectedResource
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "cache-control": "no-cache",
  "x-xss-protection": "1; mode\u003dblock",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "no-referrer",
  "date": "Thu, 19 May 2022 13:33:42 GMT",
  "connection": "keep-alive",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "x-content-type-options": "nosniff",
  "content-type": "application/json",
  "content-length": "46"
}
response_body
{"sub":"3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f"}
2022-05-19 13:33:42 SUCCESS
CallProtectedResource
Got a response from the resource endpoint
status
200
endpoint_name
resource
headers
{
  "cache-control": "no-cache",
  "x-xss-protection": "1; mode\u003dblock",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "no-referrer",
  "date": "Thu, 19 May 2022 13:33:42 GMT",
  "connection": "keep-alive",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "x-content-type-options": "nosniff",
  "content-type": "application/json",
  "content-length": "46"
}
body
{"sub":"3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f"}
2022-05-19 13:33:42 SUCCESS
EnsureHttpStatusCodeIs200
resource endpoint returned the expected http status
expected_status
200
http_status
200
2022-05-19 13:33:42 SUCCESS
CheckIdTokenAuthTimeClaimPresentDueToMaxAge
auth_time is present in the id_token, as required for a authentication where the max_age parameter was used
id_token
{
  "at_hash": "a6HKsQkiF7YwiQqrmhtU3Q",
  "sub": "3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f",
  "iss": "https://84-244-72-90.nip.io:60000/auth/realms/test",
  "typ": "ID",
  "nonce": "UpCDeyW0NU",
  "sid": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "aud": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "acr": "0",
  "azp": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "auth_time": 1652967160,
  "exp": 1652967521,
  "session_state": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "iat": 1652967221,
  "jti": "df5d4c8a-fc72-4ebd-af52-19517ac1783a"
}
Second authorization: Make request to authorization endpoint
2022-05-19 13:33:42 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
0ff06c71-17c2-4045-be7e-e7c5a61ebb03
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
scope
openid
2022-05-19 13:33:42
CreateRandomStateValue
Created state value
requested_state_length
10
state
0dFz60qN3E
2022-05-19 13:33:42 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
0ff06c71-17c2-4045-be7e-e7c5a61ebb03
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
scope
openid
state
0dFz60qN3E
2022-05-19 13:33:42
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
WM5KcnRN1s
2022-05-19 13:33:42 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
0ff06c71-17c2-4045-be7e-e7c5a61ebb03
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
scope
openid
state
0dFz60qN3E
nonce
WM5KcnRN1s
2022-05-19 13:33:42 SUCCESS
SetAuthorizationEndpointRequestResponseTypeFromEnvironment
Added response_type parameter to request
client_id
0ff06c71-17c2-4045-be7e-e7c5a61ebb03
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
scope
openid
state
0dFz60qN3E
nonce
WM5KcnRN1s
response_type
code
2022-05-19 13:33:42 SUCCESS
AddMaxAge10000ToAuthorizationEndpointRequest
Added max_age=10000 to authorization endpoint request
client_id
0ff06c71-17c2-4045-be7e-e7c5a61ebb03
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
scope
openid
state
0dFz60qN3E
nonce
WM5KcnRN1s
response_type
code
max_age
10000
2022-05-19 13:33:42 SUCCESS
BuildPlainRedirectToAuthorizationEndpoint
Sending to authorization endpoint
auth_request
{
  "client_id": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "redirect_uri": "https://www.certification.openid.net/test/a/keycloak/callback",
  "scope": "openid",
  "state": "0dFz60qN3E",
  "nonce": "WM5KcnRN1s",
  "response_type": "code",
  "max_age": 10000
}
redirect_to_authorization_endpoint
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/auth?client_id=0ff06c71-17c2-4045-be7e-e7c5a61ebb03&redirect_uri=https://www.certification.openid.net/test/a/keycloak/callback&scope=openid&state=0dFz60qN3E&nonce=WM5KcnRN1s&response_type=code&max_age=10000
2022-05-19 13:33:42 REDIRECT
oidcc-max-age-10000
Redirecting to authorization endpoint
redirect_to
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/auth?client_id=0ff06c71-17c2-4045-be7e-e7c5a61ebb03&redirect_uri=https://www.certification.openid.net/test/a/keycloak/callback&scope=openid&state=0dFz60qN3E&nonce=WM5KcnRN1s&response_type=code&max_age=10000
2022-05-19 13:33:46 INCOMING
oidcc-max-age-10000
Incoming HTTP request to /test/a/keycloak/callback
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:100.0) Gecko/20100101 Firefox/100.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "cookie": "__utma\u003d201319536.747058366.1611919072.1652941054.1652964248.141; __utmz\u003d201319536.1647870296.126.44.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.747058366.1611919072; __utmc\u003d201319536; JSESSIONID\u003dFA6FE393C94D574E60695BF1ECA081CB",
  "upgrade-insecure-requests": "1",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "connection": "close"
}
incoming_path
/test/a/keycloak/callback
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{
  "state": "0dFz60qN3E",
  "session_state": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "code": "1ee98b29-19a9-4b78-aaa1-df422208bf73.21487f0d-2e82-4b4c-baa2-f307686fd42a.0ff06c71-17c2-4045-be7e-e7c5a61ebb03"
}
incoming_body
2022-05-19 13:33:46 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/BrfvgBdGuIMhrfyv3TEL",
  "fullUrl": "https://www.certification.openid.net/test/a/keycloak/implicit/BrfvgBdGuIMhrfyv3TEL"
}
2022-05-19 13:33:46 OUTGOING
oidcc-max-age-10000
Response to HTTP request to test instance SVzX48yENnPW8Yp
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/keycloak/implicit/BrfvgBdGuIMhrfyv3TEL, returnUrl=/log-detail.html?log=SVzX48yENnPW8Yp}]
outgoing_path
callback
2022-05-19 13:33:46 INCOMING
oidcc-max-age-10000
Incoming HTTP request to /test/a/keycloak/implicit/BrfvgBdGuIMhrfyv3TEL
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:100.0) Gecko/20100101 Firefox/100.0",
  "accept": "*/*",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "content-type": "text/plain",
  "x-requested-with": "XMLHttpRequest",
  "origin": "https://www.certification.openid.net",
  "referer": "https://www.certification.openid.net/test/a/keycloak/callback?state\u003d0dFz60qN3E\u0026session_state\u003d21487f0d-2e82-4b4c-baa2-f307686fd42a\u0026code\u003d1ee98b29-19a9-4b78-aaa1-df422208bf73.21487f0d-2e82-4b4c-baa2-f307686fd42a.0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "cookie": "__utma\u003d201319536.747058366.1611919072.1652941054.1652964248.141; __utmz\u003d201319536.1647870296.126.44.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.747058366.1611919072; __utmc\u003d201319536; JSESSIONID\u003dFA6FE393C94D574E60695BF1ECA081CB",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "connection": "close",
  "content-length": "0"
}
incoming_path
/test/a/keycloak/implicit/BrfvgBdGuIMhrfyv3TEL
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_tls_cert
incoming_body_json
incoming_query_string_params
{}
incoming_body
2022-05-19 13:33:46 OUTGOING
oidcc-max-age-10000
Response to HTTP request to test instance SVzX48yENnPW8Yp
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/BrfvgBdGuIMhrfyv3TEL
2022-05-19 13:33:46 SUCCESS
ExtractImplicitHashToCallbackResponse
implicit_hash is empty
2022-05-19 13:33:46 REDIRECT-IN
oidcc-max-age-10000
Authorization endpoint response captured
url_query
{
  "state": "0dFz60qN3E",
  "session_state": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "code": "1ee98b29-19a9-4b78-aaa1-df422208bf73.21487f0d-2e82-4b4c-baa2-f307686fd42a.0ff06c71-17c2-4045-be7e-e7c5a61ebb03"
}
headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:100.0) Gecko/20100101 Firefox/100.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,*/*;q\u003d0.8",
  "accept-language": "en-US,en;q\u003d0.5",
  "accept-encoding": "gzip, deflate, br",
  "cookie": "__utma\u003d201319536.747058366.1611919072.1652941054.1652964248.141; __utmz\u003d201319536.1647870296.126.44.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); _ga\u003dGA1.2.747058366.1611919072; __utmc\u003d201319536; JSESSIONID\u003dFA6FE393C94D574E60695BF1ECA081CB",
  "upgrade-insecure-requests": "1",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "x-forwarded-proto": "https",
  "x-forwarded-port": "443",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{}
post_body
Second authorization: Verify authorization endpoint response
2022-05-19 13:33:46 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2022-05-19 13:33:46
ValidateIssInAuthorizationResponse
No 'iss' value in authorization response.
2022-05-19 13:33:46 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2022-05-19 13:33:46 SUCCESS
CheckStateInAuthorizationResponse
State in response correctly returned
state
0dFz60qN3E
2022-05-19 13:33:46 SUCCESS
ExtractAuthorizationCodeFromAuthorizationResponse
Found authorization code
code
1ee98b29-19a9-4b78-aaa1-df422208bf73.21487f0d-2e82-4b4c-baa2-f307686fd42a.0ff06c71-17c2-4045-be7e-e7c5a61ebb03
2022-05-19 13:33:46 SUCCESS
CreateTokenEndpointRequestForAuthorizationCodeGrant
Created token endpoint request
grant_type
authorization_code
code
1ee98b29-19a9-4b78-aaa1-df422208bf73.21487f0d-2e82-4b4c-baa2-f307686fd42a.0ff06c71-17c2-4045-be7e-e7c5a61ebb03
redirect_uri
https://www.certification.openid.net/test/a/keycloak/callback
2022-05-19 13:33:46 SUCCESS
AddBasicAuthClientSecretAuthenticationParameters
Added basic authorization header
Authorization
Basic MGZmMDZjNzEtMTdjMi00MDQ1LWJlN2UtZTdjNWE2MWViYjAzOlhpZU9jM2NFMU5tUDlONmpXRHB1dUNPQmdyeWh4dnNh
2022-05-19 13:33:46
CallTokenEndpoint
HTTP request
request_uri
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/token
request_method
POST
request_headers
{
  "accept": "application/json",
  "authorization": "Basic MGZmMDZjNzEtMTdjMi00MDQ1LWJlN2UtZTdjNWE2MWViYjAzOlhpZU9jM2NFMU5tUDlONmpXRHB1dUNPQmdyeWh4dnNh",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "234"
}
request_body
grant_type=authorization_code&code=1ee98b29-19a9-4b78-aaa1-df422208bf73.21487f0d-2e82-4b4c-baa2-f307686fd42a.0ff06c71-17c2-4045-be7e-e7c5a61ebb03&redirect_uri=https%3A%2F%2Fwww.certification.openid.net%2Ftest%2Fa%2Fkeycloak%2Fcallback
2022-05-19 13:33:47 RESPONSE
CallTokenEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "cache-control": "no-store",
  "x-xss-protection": "1; mode\u003dblock",
  "pragma": "no-cache",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "no-referrer",
  "date": "Thu, 19 May 2022 13:33:47 GMT",
  "connection": "keep-alive",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "x-content-type-options": "nosniff",
  "content-type": "application/json",
  "content-length": "2468"
}
response_body
{"access_token":"eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.eyJleHAiOjE2NTI5Njc1MjcsImlhdCI6MTY1Mjk2NzIyNywiYXV0aF90aW1lIjoxNjUyOTY3MTYwLCJqdGkiOiI2YjhhMDQyZi1lYTg0LTQ2NjItYWVmMi05NTkxOTQ4ZWU0YWQiLCJpc3MiOiJodHRwczovLzg0LTI0NC03Mi05MC5uaXAuaW86NjAwMDAvYXV0aC9yZWFsbXMvdGVzdCIsInN1YiI6IjNlY2RjZWNkLTQzZGMtNGRjOS1hYTFjLWI5NzkxZmNmNzMwZiIsInR5cCI6IkJlYXJlciIsImF6cCI6IjBmZjA2YzcxLTE3YzItNDA0NS1iZTdlLWU3YzVhNjFlYmIwMyIsIm5vbmNlIjoiV001S2NuUk4xcyIsInNlc3Npb25fc3RhdGUiOiIyMTQ4N2YwZC0yZTgyLTRiNGMtYmFhMi1mMzA3Njg2ZmQ0MmEiLCJhY3IiOiIwIiwiYWxsb3dlZC1vcmlnaW5zIjpbImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldCJdLCJyZWFsbV9hY2Nlc3MiOnsicm9sZXMiOlsib2ZmbGluZV9hY2Nlc3MiXX0sInNjb3BlIjoib3BlbmlkIG5hbWVfY2xhaW1zIGFjciIsInNpZCI6IjIxNDg3ZjBkLTJlODItNGI0Yy1iYWEyLWYzMDc2ODZmZDQyYSJ9.QcT8bw4UfOVdfbhWvXBWgfM17Jhxhird6z1imkYY9lHarrB1A2xPjpFyULG9mwh4sjaqmYAJO1YUWnO_adN9F4vLh-QWPZ8YkuoiK1MZJyeDLoJfKaf1NhUooCARNwEvn2xkOl-4lXDS4VKPkkW3AfmY94PA1rsxaBlh4UNTi267vQ0ht1txnCo3ZzDFVhT8SQS58nb0yaPFdmRlyvgj_f27AO5RKuC0t-PVUejExcySwUeP6rdCNj1BIcxJyZVGitiHzWFKYgY0iRV-WUMMwrttLixKABC_9tAzOwuedotM_PT54l46cqfSRIGIqPxPgs0lo8t1E3p_4cjr_voliA","expires_in":300,"refresh_expires_in":0,"token_type":"Bearer","id_token":"eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.eyJleHAiOjE2NTI5Njc1MjcsImlhdCI6MTY1Mjk2NzIyNywiYXV0aF90aW1lIjoxNjUyOTY3MTYwLCJqdGkiOiJlYzA2MGE5Ni0xYzAwLTQ3MTUtYTIwNS03YWI0NTIwNDEzYmQiLCJpc3MiOiJodHRwczovLzg0LTI0NC03Mi05MC5uaXAuaW86NjAwMDAvYXV0aC9yZWFsbXMvdGVzdCIsImF1ZCI6IjBmZjA2YzcxLTE3YzItNDA0NS1iZTdlLWU3YzVhNjFlYmIwMyIsInN1YiI6IjNlY2RjZWNkLTQzZGMtNGRjOS1hYTFjLWI5NzkxZmNmNzMwZiIsInR5cCI6IklEIiwiYXpwIjoiMGZmMDZjNzEtMTdjMi00MDQ1LWJlN2UtZTdjNWE2MWViYjAzIiwibm9uY2UiOiJXTTVLY25STjFzIiwic2Vzc2lvbl9zdGF0ZSI6IjIxNDg3ZjBkLTJlODItNGI0Yy1iYWEyLWYzMDc2ODZmZDQyYSIsImF0X2hhc2giOiJPeTMzbE5BTWhCbzFpOEQ3a3V3LTd3IiwiYWNyIjoiMCIsInNpZCI6IjIxNDg3ZjBkLTJlODItNGI0Yy1iYWEyLWYzMDc2ODZmZDQyYSJ9.PBodG5gWm14L1g3ocX8TftfSwVay2YJCUk7P5R9fdvN72BET8HZAyg2IO0f7WoDEw4bqZKE2FFhPvd3_Q4eWxX_zlMTQdbaVNQNJVFCpdBG4zUd5lF2b_w8vG5lGYWMmxD89i_dbCXIrzuaDVmc1Lsu-aIQQWJEeYC_aM2CX1Sg9Kc4yhCt6zDrobY1a_QZz_ICNLNgzrFESQEIAp9QREKL_L304Ek69F5sT_TVJ8AlwtLue49K-gM-f5T4z9NpyVuhqER7R2EpRWZlLxcesduwV5fZfsJ_S05ShxSllgfq1EjcOA-LcZnsUeTsDlgO831Fbk0K929HOq14DGTlolw","not-before-policy":1652951933,"session_state":"21487f0d-2e82-4b4c-baa2-f307686fd42a","scope":"openid name_claims acr"}
2022-05-19 13:33:47 SUCCESS
CallTokenEndpoint
Parsed token endpoint response
access_token
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.QcT8bw4UfOVdfbhWvXBWgfM17Jhxhird6z1imkYY9lHarrB1A2xPjpFyULG9mwh4sjaqmYAJO1YUWnO_adN9F4vLh-QWPZ8YkuoiK1MZJyeDLoJfKaf1NhUooCARNwEvn2xkOl-4lXDS4VKPkkW3AfmY94PA1rsxaBlh4UNTi267vQ0ht1txnCo3ZzDFVhT8SQS58nb0yaPFdmRlyvgj_f27AO5RKuC0t-PVUejExcySwUeP6rdCNj1BIcxJyZVGitiHzWFKYgY0iRV-WUMMwrttLixKABC_9tAzOwuedotM_PT54l46cqfSRIGIqPxPgs0lo8t1E3p_4cjr_voliA
expires_in
300
refresh_expires_in
0
token_type
Bearer
id_token
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.eyJleHAiOjE2NTI5Njc1MjcsImlhdCI6MTY1Mjk2NzIyNywiYXV0aF90aW1lIjoxNjUyOTY3MTYwLCJqdGkiOiJlYzA2MGE5Ni0xYzAwLTQ3MTUtYTIwNS03YWI0NTIwNDEzYmQiLCJpc3MiOiJodHRwczovLzg0LTI0NC03Mi05MC5uaXAuaW86NjAwMDAvYXV0aC9yZWFsbXMvdGVzdCIsImF1ZCI6IjBmZjA2YzcxLTE3YzItNDA0NS1iZTdlLWU3YzVhNjFlYmIwMyIsInN1YiI6IjNlY2RjZWNkLTQzZGMtNGRjOS1hYTFjLWI5NzkxZmNmNzMwZiIsInR5cCI6IklEIiwiYXpwIjoiMGZmMDZjNzEtMTdjMi00MDQ1LWJlN2UtZTdjNWE2MWViYjAzIiwibm9uY2UiOiJXTTVLY25STjFzIiwic2Vzc2lvbl9zdGF0ZSI6IjIxNDg3ZjBkLTJlODItNGI0Yy1iYWEyLWYzMDc2ODZmZDQyYSIsImF0X2hhc2giOiJPeTMzbE5BTWhCbzFpOEQ3a3V3LTd3IiwiYWNyIjoiMCIsInNpZCI6IjIxNDg3ZjBkLTJlODItNGI0Yy1iYWEyLWYzMDc2ODZmZDQyYSJ9.PBodG5gWm14L1g3ocX8TftfSwVay2YJCUk7P5R9fdvN72BET8HZAyg2IO0f7WoDEw4bqZKE2FFhPvd3_Q4eWxX_zlMTQdbaVNQNJVFCpdBG4zUd5lF2b_w8vG5lGYWMmxD89i_dbCXIrzuaDVmc1Lsu-aIQQWJEeYC_aM2CX1Sg9Kc4yhCt6zDrobY1a_QZz_ICNLNgzrFESQEIAp9QREKL_L304Ek69F5sT_TVJ8AlwtLue49K-gM-f5T4z9NpyVuhqER7R2EpRWZlLxcesduwV5fZfsJ_S05ShxSllgfq1EjcOA-LcZnsUeTsDlgO831Fbk0K929HOq14DGTlolw
not-before-policy
1652951933
session_state
21487f0d-2e82-4b4c-baa2-f307686fd42a
scope
openid name_claims acr
2022-05-19 13:33:47 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2022-05-19 13:33:47 SUCCESS
CheckForAccessTokenValue
Found an access token
access_token
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.QcT8bw4UfOVdfbhWvXBWgfM17Jhxhird6z1imkYY9lHarrB1A2xPjpFyULG9mwh4sjaqmYAJO1YUWnO_adN9F4vLh-QWPZ8YkuoiK1MZJyeDLoJfKaf1NhUooCARNwEvn2xkOl-4lXDS4VKPkkW3AfmY94PA1rsxaBlh4UNTi267vQ0ht1txnCo3ZzDFVhT8SQS58nb0yaPFdmRlyvgj_f27AO5RKuC0t-PVUejExcySwUeP6rdCNj1BIcxJyZVGitiHzWFKYgY0iRV-WUMMwrttLixKABC_9tAzOwuedotM_PT54l46cqfSRIGIqPxPgs0lo8t1E3p_4cjr_voliA
2022-05-19 13:33:47 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.QcT8bw4UfOVdfbhWvXBWgfM17Jhxhird6z1imkYY9lHarrB1A2xPjpFyULG9mwh4sjaqmYAJO1YUWnO_adN9F4vLh-QWPZ8YkuoiK1MZJyeDLoJfKaf1NhUooCARNwEvn2xkOl-4lXDS4VKPkkW3AfmY94PA1rsxaBlh4UNTi267vQ0ht1txnCo3ZzDFVhT8SQS58nb0yaPFdmRlyvgj_f27AO5RKuC0t-PVUejExcySwUeP6rdCNj1BIcxJyZVGitiHzWFKYgY0iRV-WUMMwrttLixKABC_9tAzOwuedotM_PT54l46cqfSRIGIqPxPgs0lo8t1E3p_4cjr_voliA
type
Bearer
2022-05-19 13:33:47 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
300
2022-05-19 13:33:47 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
300
2022-05-19 13:33:47 INFO
CheckForRefreshTokenValue
Couldn't find refresh token
2022-05-19 13:33:47 SUCCESS
ExtractIdTokenFromTokenResponse
Found and parsed the id_token from token_endpoint_response
value
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.PBodG5gWm14L1g3ocX8TftfSwVay2YJCUk7P5R9fdvN72BET8HZAyg2IO0f7WoDEw4bqZKE2FFhPvd3_Q4eWxX_zlMTQdbaVNQNJVFCpdBG4zUd5lF2b_w8vG5lGYWMmxD89i_dbCXIrzuaDVmc1Lsu-aIQQWJEeYC_aM2CX1Sg9Kc4yhCt6zDrobY1a_QZz_ICNLNgzrFESQEIAp9QREKL_L304Ek69F5sT_TVJ8AlwtLue49K-gM-f5T4z9NpyVuhqER7R2EpRWZlLxcesduwV5fZfsJ_S05ShxSllgfq1EjcOA-LcZnsUeTsDlgO831Fbk0K929HOq14DGTlolw
header
{
  "kid": "Mb20UGZj81X9UGbs0uReFcFlUV81vJRDYFPclWBv9GY",
  "typ": "JWT",
  "alg": "RS256"
}
claims
{
  "at_hash": "Oy33lNAMhBo1i8D7kuw-7w",
  "sub": "3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f",
  "iss": "https://84-244-72-90.nip.io:60000/auth/realms/test",
  "typ": "ID",
  "nonce": "WM5KcnRN1s",
  "sid": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "aud": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "acr": "0",
  "azp": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "auth_time": 1652967160,
  "exp": 1652967527,
  "session_state": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "iat": 1652967227,
  "jti": "ec060a96-1c00-4715-a205-7ab4520413bd"
}
2022-05-19 13:33:47 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2022-05-19 13:33:47 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
WM5KcnRN1s
2022-05-19 13:33:47 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
Nothing to check; the conformance suite did not request an acr claim in request object
2022-05-19 13:33:47 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.PBodG5gWm14L1g3ocX8TftfSwVay2YJCUk7P5R9fdvN72BET8HZAyg2IO0f7WoDEw4bqZKE2FFhPvd3_Q4eWxX_zlMTQdbaVNQNJVFCpdBG4zUd5lF2b_w8vG5lGYWMmxD89i_dbCXIrzuaDVmc1Lsu-aIQQWJEeYC_aM2CX1Sg9Kc4yhCt6zDrobY1a_QZz_ICNLNgzrFESQEIAp9QREKL_L304Ek69F5sT_TVJ8AlwtLue49K-gM-f5T4z9NpyVuhqER7R2EpRWZlLxcesduwV5fZfsJ_S05ShxSllgfq1EjcOA-LcZnsUeTsDlgO831Fbk0K929HOq14DGTlolw
2022-05-19 13:33:47 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.eyJleHAiOjE2NTI5Njc1MjcsImlhdCI6MTY1Mjk2NzIyNywiYXV0aF90aW1lIjoxNjUyOTY3MTYwLCJqdGkiOiJlYzA2MGE5Ni0xYzAwLTQ3MTUtYTIwNS03YWI0NTIwNDEzYmQiLCJpc3MiOiJodHRwczovLzg0LTI0NC03Mi05MC5uaXAuaW86NjAwMDAvYXV0aC9yZWFsbXMvdGVzdCIsImF1ZCI6IjBmZjA2YzcxLTE3YzItNDA0NS1iZTdlLWU3YzVhNjFlYmIwMyIsInN1YiI6IjNlY2RjZWNkLTQzZGMtNGRjOS1hYTFjLWI5NzkxZmNmNzMwZiIsInR5cCI6IklEIiwiYXpwIjoiMGZmMDZjNzEtMTdjMi00MDQ1LWJlN2UtZTdjNWE2MWViYjAzIiwibm9uY2UiOiJXTTVLY25STjFzIiwic2Vzc2lvbl9zdGF0ZSI6IjIxNDg3ZjBkLTJlODItNGI0Yy1iYWEyLWYzMDc2ODZmZDQyYSIsImF0X2hhc2giOiJPeTMzbE5BTWhCbzFpOEQ3a3V3LTd3IiwiYWNyIjoiMCIsInNpZCI6IjIxNDg3ZjBkLTJlODItNGI0Yy1iYWEyLWYzMDc2ODZmZDQyYSJ9.PBodG5gWm14L1g3ocX8TftfSwVay2YJCUk7P5R9fdvN72BET8HZAyg2IO0f7WoDEw4bqZKE2FFhPvd3_Q4eWxX_zlMTQdbaVNQNJVFCpdBG4zUd5lF2b_w8vG5lGYWMmxD89i_dbCXIrzuaDVmc1Lsu-aIQQWJEeYC_aM2CX1Sg9Kc4yhCt6zDrobY1a_QZz_ICNLNgzrFESQEIAp9QREKL_L304Ek69F5sT_TVJ8AlwtLue49K-gM-f5T4z9NpyVuhqER7R2EpRWZlLxcesduwV5fZfsJ_S05ShxSllgfq1EjcOA-LcZnsUeTsDlgO831Fbk0K929HOq14DGTlolw
2022-05-19 13:33:47 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f
2022-05-19 13:33:47 INFO
FAPIValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
Second authorization: Userinfo endpoint tests
2022-05-19 13:33:47
CallProtectedResource
HTTP request
request_uri
https://84-244-72-90.nip.io:60000/auth/realms/test/protocol/openid-connect/userinfo
request_method
GET
request_headers
{
  "accept": "application/json",
  "authorization": "Bearer eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJNYjIwVUdaajgxWDlVR2JzMHVSZUZjRmxVVjgxdkpSRFlGUGNsV0J2OUdZIn0.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.QcT8bw4UfOVdfbhWvXBWgfM17Jhxhird6z1imkYY9lHarrB1A2xPjpFyULG9mwh4sjaqmYAJO1YUWnO_adN9F4vLh-QWPZ8YkuoiK1MZJyeDLoJfKaf1NhUooCARNwEvn2xkOl-4lXDS4VKPkkW3AfmY94PA1rsxaBlh4UNTi267vQ0ht1txnCo3ZzDFVhT8SQS58nb0yaPFdmRlyvgj_f27AO5RKuC0t-PVUejExcySwUeP6rdCNj1BIcxJyZVGitiHzWFKYgY0iRV-WUMMwrttLixKABC_9tAzOwuedotM_PT54l46cqfSRIGIqPxPgs0lo8t1E3p_4cjr_voliA",
  "content-length": "0"
}
request_body

                                
2022-05-19 13:33:48 RESPONSE
CallProtectedResource
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "cache-control": "no-cache",
  "x-xss-protection": "1; mode\u003dblock",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "no-referrer",
  "date": "Thu, 19 May 2022 13:33:48 GMT",
  "connection": "keep-alive",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "x-content-type-options": "nosniff",
  "content-type": "application/json",
  "content-length": "46"
}
response_body
{"sub":"3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f"}
2022-05-19 13:33:48 SUCCESS
CallProtectedResource
Got a response from the resource endpoint
status
200
endpoint_name
resource
headers
{
  "cache-control": "no-cache",
  "x-xss-protection": "1; mode\u003dblock",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "no-referrer",
  "date": "Thu, 19 May 2022 13:33:48 GMT",
  "connection": "keep-alive",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "x-content-type-options": "nosniff",
  "content-type": "application/json",
  "content-length": "46"
}
body
{"sub":"3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f"}
2022-05-19 13:33:48 SUCCESS
EnsureHttpStatusCodeIs200
resource endpoint returned the expected http status
expected_status
200
http_status
200
2022-05-19 13:33:48 SUCCESS
CheckIdTokenAuthTimeClaimPresentDueToMaxAge
auth_time is present in the id_token, as required for a authentication where the max_age parameter was used
id_token
{
  "at_hash": "Oy33lNAMhBo1i8D7kuw-7w",
  "sub": "3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f",
  "iss": "https://84-244-72-90.nip.io:60000/auth/realms/test",
  "typ": "ID",
  "nonce": "WM5KcnRN1s",
  "sid": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "aud": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "acr": "0",
  "azp": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "auth_time": 1652967160,
  "exp": 1652967527,
  "session_state": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "iat": 1652967227,
  "jti": "ec060a96-1c00-4715-a205-7ab4520413bd"
}
2022-05-19 13:33:48 SUCCESS
CheckIdTokenAuthTimeClaimsSameIfPresent
auth_time is the same in the second id_token
first_id_token
{
  "at_hash": "a6HKsQkiF7YwiQqrmhtU3Q",
  "sub": "3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f",
  "iss": "https://84-244-72-90.nip.io:60000/auth/realms/test",
  "typ": "ID",
  "nonce": "UpCDeyW0NU",
  "sid": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "aud": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "acr": "0",
  "azp": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "auth_time": 1652967160,
  "exp": 1652967521,
  "session_state": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "iat": 1652967221,
  "jti": "df5d4c8a-fc72-4ebd-af52-19517ac1783a"
}
second_id_token
{
  "at_hash": "Oy33lNAMhBo1i8D7kuw-7w",
  "sub": "3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f",
  "iss": "https://84-244-72-90.nip.io:60000/auth/realms/test",
  "typ": "ID",
  "nonce": "WM5KcnRN1s",
  "sid": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "aud": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "acr": "0",
  "azp": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "auth_time": 1652967160,
  "exp": 1652967527,
  "session_state": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "iat": 1652967227,
  "jti": "ec060a96-1c00-4715-a205-7ab4520413bd"
}
2022-05-19 13:33:48 SUCCESS
CheckIdTokenSubConsistentForSecondAuthorization
sub is the same in the second id_token
first_id_token
{
  "at_hash": "a6HKsQkiF7YwiQqrmhtU3Q",
  "sub": "3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f",
  "iss": "https://84-244-72-90.nip.io:60000/auth/realms/test",
  "typ": "ID",
  "nonce": "UpCDeyW0NU",
  "sid": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "aud": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "acr": "0",
  "azp": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "auth_time": 1652967160,
  "exp": 1652967521,
  "session_state": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "iat": 1652967221,
  "jti": "df5d4c8a-fc72-4ebd-af52-19517ac1783a"
}
second_id_token
{
  "at_hash": "Oy33lNAMhBo1i8D7kuw-7w",
  "sub": "3ecdcecd-43dc-4dc9-aa1c-b9791fcf730f",
  "iss": "https://84-244-72-90.nip.io:60000/auth/realms/test",
  "typ": "ID",
  "nonce": "WM5KcnRN1s",
  "sid": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "aud": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "acr": "0",
  "azp": "0ff06c71-17c2-4045-be7e-e7c5a61ebb03",
  "auth_time": 1652967160,
  "exp": 1652967527,
  "session_state": "21487f0d-2e82-4b4c-baa2-f307686fd42a",
  "iat": 1652967227,
  "jti": "ec060a96-1c00-4715-a205-7ab4520413bd"
}
2022-05-19 13:33:48 FINISHED
oidcc-max-age-10000
Test has run to completion
testmodule_result
PASSED
Unregister dynamically registered client
2022-05-19 13:33:48
UnregisterDynamicallyRegisteredClient
HTTP request
request_uri
https://84-244-72-90.nip.io:60000/auth/realms/test/clients-registrations/openid-connect/0ff06c71-17c2-4045-be7e-e7c5a61ebb03
request_method
DELETE
request_headers
{
  "accept": "application/json",
  "authorization": "Bearer eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJlZGU2NjRjNS0zN2U1LTQ3ZGItOTQzZC04ODk5ZDRmNzExNTQifQ.eyJleHAiOjAsImlhdCI6MTY1Mjk2NzE5OSwianRpIjoiMjE5OWQ2MTctOTY2Ny00MWYyLTg1NjEtMmFhMzMxOTlmNzIyIiwiaXNzIjoiaHR0cHM6Ly84NC0yNDQtNzItOTAubmlwLmlvOjYwMDAwL2F1dGgvcmVhbG1zL3Rlc3QiLCJhdWQiOiJodHRwczovLzg0LTI0NC03Mi05MC5uaXAuaW86NjAwMDAvYXV0aC9yZWFsbXMvdGVzdCIsInR5cCI6IlJlZ2lzdHJhdGlvbkFjY2Vzc1Rva2VuIiwicmVnaXN0cmF0aW9uX2F1dGgiOiJhbm9ueW1vdXMifQ.pr-Uioc-6EOxgz3w8AF5uqH16GYjI0xRVbfi3oBvEQI",
  "content-length": "0"
}
request_body

                                
2022-05-19 13:33:48 RESPONSE
UnregisterDynamicallyRegisteredClient
HTTP response
response_status_code
204 NO_CONTENT
response_status_text
No Content
response_headers
{
  "x-xss-protection": "1; mode\u003dblock",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "x-content-type-options": "nosniff",
  "referrer-policy": "no-referrer",
  "date": "Thu, 19 May 2022 13:33:48 GMT"
}
response_body

                                
2022-05-19 13:33:48 SUCCESS
UnregisterDynamicallyRegisteredClient
Client successfully unregistered
2022-05-19 13:33:56
TEST-RUNNER
Alias has now been claimed by another test
alias
keycloak
new_test_id
2YbJVt4bKHBaU9R
Test Results