Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-06-24 16:18:00 INFO
TEST-RUNNER
Test instance OLRYwpliM73o6xP created
baseUrl
https://www.certification.openid.net/test/a/fintech
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "pushed",
  "fapi_profile": "plain_fapi",
  "fapi_response_mode": "plain_response"
}
alias
fintech
description
planId
ElBN1TKt8fL85
config
{
  "browser": [
    {
      "match": "https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize*",
      "tasks": [
        {
          "task": "submit consent",
          "match": "https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize*",
          "optional": true,
          "commands": [
            [
              "click",
              "name",
              "submit_consent"
            ]
          ]
        },
        {
          "task": "Complete with redirect to RP",
          "match": "https://www.certification.openid.net*",
          "commands": [
            [
              "wait",
              "id",
              "submission_complete",
              10
            ]
          ]
        }
      ]
    }
  ],
  "server": {
    "discoveryUrl": "https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/anonymous/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "client-one",
    "client_secret": "0ne!Secret",
    "scope": "openid email",
    "jwks": {
      "keys": [
        {
          "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q",
          "kty": "RSA",
          "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ",
          "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE",
          "e": "AQAB",
          "kid": "10001",
          "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA",
          "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ",
          "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ",
          "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE",
          "alg": "PS256"
        }
      ]
    }
  },
  "tls": {
    "testHost": "5a6d91c9d0.westeurope.azurecontainer.io",
    "testPort": "8443"
  },
  "alias": "fintech",
  "resource": {
    "resourceUrl": "https://5a6d91c9d0.westeurope.azurecontainer.io:7777/fapi/rs",
    "institution_id": "foobar"
  },
  "client2": {
    "client_id": "client-two",
    "client_secret": "sEcrEt@3wo",
    "scope": "openid email",
    "client_secret_jwt_alg": "RS256",
    "jwks": {
      "keys": [
        {
          "kid": "foo",
          "p": "-YTSnw-kdbuSWDG3LbFL7oYYkBsMTEbOE8ZhRQogy5lPVUiI-EJ0pQenvjVIlFEElo0liY2POGsDWu67qBdp6gwITYMgkxg4YLvvhe2mGpBL7OfULYUIJgQ-ZVGc_wKpjXzbx6An4EeS7GNXAoMMG1KPTv-iNs4jSQuDJBvQKo4MKLrBBdEXMYO4gMZMJDs2Rog_AKyAoR912U1Ad5U6HlkHxsGlxG-3_kb7bFHCtOaF5XRMI6Pqyfzf7t5XByz0spTqhTRA45LH4TOArGXFWm1_GB6uj-K7s8NkL5VmUC-jZeGxGFthSiQHjSGWNvgM-Ors_lUIVhf-EciLdOtd_Q",
          "kty": "RSA",
          "q": "4RuJTEJMhsi5jux5wZ_zvuFJiXgA51SujdFE0Gy_f8czCg15Csfqa5Ubew5aVA8HHUoteyVkui3jkp4UQH2zhwUbrY5NF81aB_jw-n7cu5MvJywe9QJ0x7x8Ku0trYruFj6jULLJGR_jbQh_8mNxviwlrm6pBvl9aLXLBP_TKXt9ir73WNcAEh3EJ26FJPr6AY4rWdapZhZigleVmA81967RoYWJeG1pLdDp2L7SPgaxhirvYXwsOgJc8iziEJ1QBBpFYvaBNWTTrgPMi6Mmcc8UqFE1GBHN0qf3ceTUYv-YsjZrzU2pgr5sAaguigZxtuQ-PPL0lFUdRJV7zQsT-w",
          "d": "LX9UHpMiMTUtzh2VP1wgf93xjaYEm6qTwOZQGl_hfwlO0rfF4u5L1RO_JPviFnkA7JRIqZXSLON17szVRLfbhe-EQkoJA6CIUKrpmgKSL6f0p1mCt1oC-Tafvw529IfWtupWcOcSZsk0B8WJ-hOM6zfpyzuua1hKHZ7HdTIWPK1_LCBmBLfDbPR7fnDP987EgqlIfgt4poxXRUPU5997IUPu52-82RUjUlTYzh8gjHLXme9f6n0cmyL-IRwiA-mxBlp0w5Xuwy281AXQFmnetcuMja9I5_Pwf6wHw2XNLp8CHGXFPyI0VJUw-tatkLD7Zk1WM7oXdFHzg1LY7_J4XtIQHYgREzWxc7M8SGSvy-HTz19vaztOT9OOfSUyBT0cbYzUAptwVEQsUnahxloT3eK8C-oZTjWd1AZD_X4rgQKdqQyuex5p35volI3CpIrizLc6a5ljF0HM832mSW4W5SUcd2oyr3Fd41RBaoIj7wQFKPxPsnF3VBeHVAdgUw8FNerob3mmRBIL12upK_iY_tv7TONBJXRx8dHonKt0ukoxW0VPmjlorGvH_GMX7HtpY9YHvGZXPsgVnMJHxmYz7J6jBGnaczlYgPjOEgsUa2mGH40-ZTF1kcWG8VJOYnnGdAItrPG1GBt3yOcdIb1BiYNC4LJdZQXsvFS-lasEohE",
          "e": "AQAB",
          "qi": "GxvAPQ5BUOcVWxj_OJmV803BhlJreMOlXAIHSi4RYWkF2kI7uv3ALxFkPLPoadX-TAahyyv_yIzYIPKriFEB-4wHTSQRg3FZfFKV-uCrIQr3teoRm9IqV9g3U2l-Fo25s4aGMOTuahesoV2vj8fEEd6xiR83nf7sppWino7PaQ-3nMkGrhQbC7TlP016JLoBS3OQPi1NXiRHnVpaz7NuUDDxSFHbH-CayTn_ByiWpi6KbAgM4J63-flYF_F6ejWr2x4MWk2ASWWRUMgag96h9c3fEUVkBIKzZm9oVEP41JfnxodvREgqXPw4JRI8ylPNVzQ8ZReWCfx0UcWELCgI9w",
          "dp": "ypMqSFbzx13Ef3PFawRRSFJ4KK68-kRV1LoviFSjsYhDX1LnWN7jQoSHjCZISZnJJs1rF1TlXQGMlMvTcLGpnImuR_fYf3OfefG6kboSK-jQq4K_wUELD4pMegebdXHc4_DlohmFplGVl_NC1dg9AQWzMYjbUrFi9k-xZaRrCdGPT5XnVeiecuWk6m-Tq6qi8vp0ZACo4abgD87nMu7lY3QWmyfmhCfLclaAkz2B3Up2lIYptpnC6cAysgSzFTFLbJz4FbMJp3koa85bfhuV8UeKcrOeN1T13QkaEoOxsBItD27_T24I-59qvgrxoKkcJw7b39R7UyJhdGCj0AWypQ",
          "dq": "iGIAix1X9AlEsxz-n5rjOHCR9yGnmoApyW5SfNyGIUp019BV13xLwKZ0IdgOTgNU0iAQ8h0zq8EFsdzodDI0RMeJf1tJxfP6af4fMgUOgu6nkNogX1z_l8vQhslv9UbI_N0yYUAQqpIxXevaaOZrEUb6BXayHbGmk3wg5oSAUQ-qfhc5ELAiMNer8h_5tu__7FVQWnu94kYJpOKflaMRlWBrTar0IOxY3xNFurXR9xZjE-CLa8qpmPO5kFg1Fs_YnMO16kFjAxB1V2ah1LAiKK3H3DpnKpAO3WQ6fNyg-OHWh5KFObulybrJAS_-Ek3ZM2-RbafdGsl-lADlItNlZQ",
          "n": "22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8",
          "alg": "PS256"
        }
      ]
    }
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\njfy5bGXkgEKWT0gVj+LTjFrVeMFrUUpMQbKMINlMe6QJ6MNnCQ\u003d\u003d\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\ncUDXkPraq2JbdXA3Cj5UcjW9fJDav+Q2AoA/surcDkx2lC1cUNpJIOY\u003d\n-----END RSA PRIVATE KEY-----\n",
    "ca": "-----BEGIN CERTIFICATE-----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\ntrijj+gVec5maJpF1GR1r9NM+pT5lw\u003d\u003d\n-----END CERTIFICATE-----\n"
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\nWLM\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----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\nu83fx03d+2/RuA//IL7WCQ\u003d\u003d\n-----END PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----\nMIIGBjCCA+6gAwIBAgIJAOE0lOu3zhlXMA0GCSqGSIb3DQEBCwUAMIGPMQswCQYD\nVQQGEwJTRTESMBAGA1UECAwJU3RvY2tob2xtMRIwEAYDVQQHDAlTdG9ja2hvbG0x\nEjAQBgNVBAoMCUN1cml0eSBBQjEoMCYGA1UECwwfQ3VyaXR5IEFCIENlcnRpZmlj\nYXRlIEF1dGhvcml0eTEaMBgGA1UEAwwRQ3VyaXR5IEFCIFJvb3QgQ0EwHhcNMTgx\nMDE3MTcwNTQ5WhcNMzgxMDEyMTcwNTQ5WjCBjzELMAkGA1UEBhMCU0UxEjAQBgNV\nBAgMCVN0b2NraG9sbTESMBAGA1UEBwwJU3RvY2tob2xtMRIwEAYDVQQKDAlDdXJp\ndHkgQUIxKDAmBgNVBAsMH0N1cml0eSBBQiBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkx\nGjAYBgNVBAMMEUN1cml0eSBBQiBSb290IENBMIICIjANBgkqhkiG9w0BAQEFAAOC\nAg8AMIICCgKCAgEAxtk+Fm7jBcz/EJjo2wALwUVqyCG6CN7i0us4D2PdgeQe2Zyp\nWsari2G2om68pD4BZCZ4asE4oJb4yuWi30gD51M5+kJiEWHvbTXbuNaESXo7FpQQ\nFdweAUYcyYaYWNJNyqMd5nFgvd1pzLn92nCHwNjLUbRzKl1MlGfsUM6OwU7088a1\n349O6nSarHYrxLP+MGv6Myn/gmG3TDvUAK1C1SuwC8ddUGQrqU7JGvywSHWYfYt1\nG9Vlx6Q2o+/LDASelaySZxY+W4uePQL4lL7JTd1smzV3GY83ORLv+Pz/hC5P+ud5\nsWbp8uZ8IFhbwMGlGVCfpn4D2mguCBUlZh6V/Nk7zQx/hLcAmCUpTX1VjpBO52LT\ntPM/+qmdExZe+PYH3hN1g6jJ0yP6NOFvd00yL6Qxbj2RHFudb3QvxcTlDduaK5W4\nTxMUKKrBpqSQhqXvGOaessM1f5Pg8YewjkuERI+ikWheGvNpqVCjNfJeX1XIDW0W\nFkwOOcCdiJ+Y1YaF7v9hoNVPk5w2KtElq1Gmo9OY4MvNenD9YaUHzeS9KhJkaIqI\nWn1J9xXn6vGt9rdxwGYmo7e+K4A9158swzTxMzNCEm9EryKMQZiDcxZ5iva1PaGr\nPN64ePx6X4D8IeuR0E8QzpkI54cGKjRpUKjCUvlHi4dtBQ6mObpyZRGL6EUCAwEA\nAaNjMGEwHQYDVR0OBBYEFEwQXfO4WWawfvOpcuHES80mAunfMB8GA1UdIwQYMBaA\nFEwQXfO4WWawfvOpcuHES80mAunfMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/\nBAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQBw3wXV81IpJTsxvia9ywlkWfMbxXwu\nkIb0YjTdhwfS2goOS+eVCDnCPGMjngolvK9oy5a9mV78dcyM1G5CwCJd60RBd3JL\nx3+jg1q8wcYt1xd5hRElY73LeI4KEjmIH4LsokHgUBF5xzjyLwpPA/widsRXff+5\noY5Izr9pFIsqK1Uxvjr5SHKKRcAB8Xmbty9/xAucozh8lmRllVMHxjFUA8G++9vM\nhMs0a2EI1m3lC0DsvWAzNXKxvCV9hCjTqWI5Krsk81/BpD96g+mSekYYyrXjw87W\nbGQXNwDWvEVSAOZX6WuNXol2kWc6yVps7ZXezWYaryhpwZtau+1WOzyVBPZjxldw\nDU8Q54Rwj0EzGtqlIskazTdyiNVRLYYSY3B75jTNf7jtLvQjBntk4RjU32Sp17u2\nO3Fdt3noQI1fvh1HjOQYyLP49sY7ccmk0LyBvqN7AhTvVeeloDl053WfUtiSaYyA\nBoWPJHT3X5UnwSU0ayC8XHW8EeF25YK6Ul9KRb9zAD3yt50sGEhUWzW8xPIrvCNH\nkXh+kmDOnZkE7M9CSzX9Oeuxjc5zAHVOYv/h7VSB1XccvtdwQWI3LCq1SWA8xe/i\nl7pyX3oYf1NIZ7RJhopz7ktghTb5mfG39dc2NtY7cd4QDA171K0DCXPDpkxOgro8\nfP1+3+YMOs/LGA\u003d\u003d\n-----END CERTIFICATE-----"
  }
}
testName
fapi1-advanced-final-ensure-client-assertion-in-token-endpoint
2022-06-24 16:18:00 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/fintech/callback
2022-06-24 16:18:00
GetDynamicServerConfiguration
HTTP request
request_uri
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/anonymous/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-06-24 16:18:01 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Fri, 24 Jun 2022 16:18:01 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "cache-control": "public, max-age\u003d600",
  "content-type": "application/json",
  "content-length": "2545"
}
response_body
{"request_parameter_supported":true,"pushed_authorization_request_endpoint":"https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize/par","claims_parameter_supported":true,"scopes_supported":["address","read","phone","openid","profile","email"],"issuer":"https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/anonymous","acr_values_supported":["urn:mace:incommon:iap:silver"],"authorization_endpoint":"https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize","claims_supported":["sub","zoneinfo","birthdate","gender","purpose","amr","iss","preferred_username","locale","client_id","sid","acr","azp","auth_time","scope","nickname","exp","iat","email","jti","website","address","email_verified","profile","phone_number_verified","dcrm_client","given_name","middle_name","nonce","picture","aud","delegation_id","nbf","name","phone_number","family_name"],"userinfo_signing_alg_values_supported":["PS256"],"require_pushed_authorization_requests":false,"claim_types_supported":["normal"],"token_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic","private_key_jwt","tls_client_auth"],"tls_client_certificate_bound_access_tokens":true,"response_modes_supported":["fragment","fragment.jwt","jwt","form_post","query","query.jwt","form_post.jwt"],"token_endpoint":"https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/token","response_types_supported":["code","code id_token","code id_token token","code token","id_token","id_token token","token"],"mtls_endpoint_aliases":{"token_endpoint":"https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/token","pushed_authorization_request_endpoint":"https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize/par"},"request_uri_parameter_supported":true,"grant_types_supported":["refresh_token","implicit","authorization_code"],"ui_locales_supported":["sv","pt","en"],"token_endpoint_auth_signing_alg_values_supported":["PS384","ES384","ES256","ES512","PS256","PS512"],"require_request_uri_registration":true,"require_signed_request_object":true,"code_challenge_methods_supported":["S256","plain"],"jwks_uri":"https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/anonymous/jwks","subject_types_supported":["public","pairwise"],"id_token_signing_alg_values_supported":["PS256"],"authorization_signing_alg_values_supported":["PS256"],"claims_locales_supported":["sv","pt","en"],"request_object_signing_alg_values_supported":["PS256","PS384","PS512","ES256","ES384","ES512"],"prefix_scopes_supported":[]}
2022-06-24 16:18:01 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
request_parameter_supported
true
pushed_authorization_request_endpoint
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize/par
claims_parameter_supported
true
scopes_supported
[
  "address",
  "read",
  "phone",
  "openid",
  "profile",
  "email"
]
issuer
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/anonymous
acr_values_supported
[
  "urn:mace:incommon:iap:silver"
]
authorization_endpoint
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize
claims_supported
[
  "sub",
  "zoneinfo",
  "birthdate",
  "gender",
  "purpose",
  "amr",
  "iss",
  "preferred_username",
  "locale",
  "client_id",
  "sid",
  "acr",
  "azp",
  "auth_time",
  "scope",
  "nickname",
  "exp",
  "iat",
  "email",
  "jti",
  "website",
  "address",
  "email_verified",
  "profile",
  "phone_number_verified",
  "dcrm_client",
  "given_name",
  "middle_name",
  "nonce",
  "picture",
  "aud",
  "delegation_id",
  "nbf",
  "name",
  "phone_number",
  "family_name"
]
userinfo_signing_alg_values_supported
[
  "PS256"
]
require_pushed_authorization_requests
false
claim_types_supported
[
  "normal"
]
token_endpoint_auth_methods_supported
[
  "client_secret_post",
  "client_secret_basic",
  "private_key_jwt",
  "tls_client_auth"
]
tls_client_certificate_bound_access_tokens
true
response_modes_supported
[
  "fragment",
  "fragment.jwt",
  "jwt",
  "form_post",
  "query",
  "query.jwt",
  "form_post.jwt"
]
token_endpoint
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/token
response_types_supported
[
  "code",
  "code id_token",
  "code id_token token",
  "code token",
  "id_token",
  "id_token token",
  "token"
]
mtls_endpoint_aliases
{
  "token_endpoint": "https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/token",
  "pushed_authorization_request_endpoint": "https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize/par"
}
request_uri_parameter_supported
true
grant_types_supported
[
  "refresh_token",
  "implicit",
  "authorization_code"
]
ui_locales_supported
[
  "sv",
  "pt",
  "en"
]
token_endpoint_auth_signing_alg_values_supported
[
  "PS384",
  "ES384",
  "ES256",
  "ES512",
  "PS256",
  "PS512"
]
require_request_uri_registration
true
require_signed_request_object
true
code_challenge_methods_supported
[
  "S256",
  "plain"
]
jwks_uri
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/anonymous/jwks
subject_types_supported
[
  "public",
  "pairwise"
]
id_token_signing_alg_values_supported
[
  "PS256"
]
authorization_signing_alg_values_supported
[
  "PS256"
]
claims_locales_supported
[
  "sv",
  "pt",
  "en"
]
request_object_signing_alg_values_supported
[
  "PS256",
  "PS384",
  "PS512",
  "ES256",
  "ES384",
  "ES512"
]
prefix_scopes_supported
[]
2022-06-24 16:18:01 SUCCESS
AddMTLSEndpointAliasesToEnvironment
Added mtls_endpoint_aliases to environment
2022-06-24 16:18:01 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2022-06-24 16:18:01
FetchServerKeys
Fetching server key
jwks_uri
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/anonymous/jwks
2022-06-24 16:18:01
FetchServerKeys
HTTP request
request_uri
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/anonymous/jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-06-24 16:18:01 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Fri, 24 Jun 2022 16:18:01 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "content-type": "application/json",
  "content-length": "464"
}
response_body
{"keys":[{"kty":"RSA","kid":"-38074812","use":"sig","alg":"PS256","n":"yMAHZiIfbAgmZJ-_4Gj-wdS8rvaKNBbnHz_krmd-kkX51bA1EsUc0CN672-xnUb_-E_-u_GoWhJzdjiBuz9XasSfQK8WyAwbc7MLkw40A7Zxl2sfsxGTod3qi1u8mjguoc9CbVqPdYe_9YPVxoK4CeJz6V8AsPcxVJxYq6os1rI9qFx_6a1JdQEhetGtkHLFvwo80UTzKXKhGXSu96WrXnkDE8Kw5TSKvh2gI_BX4QHXjE82xldJRJ8QIXGpRNbdyzGkUdjsrhmZl3ARC9IUlxmowkcEEIzjfbOKBVGrVcJ7rHb0GYNaKtMB_MlH1uAPDxl6qKeXOAZ8YEZ1r0ToPw","e":"AQAB","x5t":"MR-pGTa866RdZLjN6Vwrfay907g"}]}
2022-06-24 16:18:01
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","kid":"-38074812","use":"sig","alg":"PS256","n":"yMAHZiIfbAgmZJ-_4Gj-wdS8rvaKNBbnHz_krmd-kkX51bA1EsUc0CN672-xnUb_-E_-u_GoWhJzdjiBuz9XasSfQK8WyAwbc7MLkw40A7Zxl2sfsxGTod3qi1u8mjguoc9CbVqPdYe_9YPVxoK4CeJz6V8AsPcxVJxYq6os1rI9qFx_6a1JdQEhetGtkHLFvwo80UTzKXKhGXSu96WrXnkDE8Kw5TSKvh2gI_BX4QHXjE82xldJRJ8QIXGpRNbdyzGkUdjsrhmZl3ARC9IUlxmowkcEEIzjfbOKBVGrVcJ7rHb0GYNaKtMB_MlH1uAPDxl6qKeXOAZ8YEZ1r0ToPw","e":"AQAB","x5t":"MR-pGTa866RdZLjN6Vwrfay907g"}]}
2022-06-24 16:18:01 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "-38074812",
      "use": "sig",
      "alg": "PS256",
      "n": "yMAHZiIfbAgmZJ-_4Gj-wdS8rvaKNBbnHz_krmd-kkX51bA1EsUc0CN672-xnUb_-E_-u_GoWhJzdjiBuz9XasSfQK8WyAwbc7MLkw40A7Zxl2sfsxGTod3qi1u8mjguoc9CbVqPdYe_9YPVxoK4CeJz6V8AsPcxVJxYq6os1rI9qFx_6a1JdQEhetGtkHLFvwo80UTzKXKhGXSu96WrXnkDE8Kw5TSKvh2gI_BX4QHXjE82xldJRJ8QIXGpRNbdyzGkUdjsrhmZl3ARC9IUlxmowkcEEIzjfbOKBVGrVcJ7rHb0GYNaKtMB_MlH1uAPDxl6qKeXOAZ8YEZ1r0ToPw",
      "e": "AQAB",
      "x5t": "MR-pGTa866RdZLjN6Vwrfay907g"
    }
  ]
}
2022-06-24 16:18:01 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "-38074812",
      "use": "sig",
      "alg": "PS256",
      "n": "yMAHZiIfbAgmZJ-_4Gj-wdS8rvaKNBbnHz_krmd-kkX51bA1EsUc0CN672-xnUb_-E_-u_GoWhJzdjiBuz9XasSfQK8WyAwbc7MLkw40A7Zxl2sfsxGTod3qi1u8mjguoc9CbVqPdYe_9YPVxoK4CeJz6V8AsPcxVJxYq6os1rI9qFx_6a1JdQEhetGtkHLFvwo80UTzKXKhGXSu96WrXnkDE8Kw5TSKvh2gI_BX4QHXjE82xldJRJ8QIXGpRNbdyzGkUdjsrhmZl3ARC9IUlxmowkcEEIzjfbOKBVGrVcJ7rHb0GYNaKtMB_MlH1uAPDxl6qKeXOAZ8YEZ1r0ToPw",
      "e": "AQAB",
      "x5t": "MR-pGTa866RdZLjN6Vwrfay907g"
    }
  ]
}
2022-06-24 16:18:01 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-06-24 16:18:01 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2022-06-24 16:18:01 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-06-24 16:18:01 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "kid": "-38074812",
      "use": "sig",
      "alg": "PS256",
      "n": "yMAHZiIfbAgmZJ-_4Gj-wdS8rvaKNBbnHz_krmd-kkX51bA1EsUc0CN672-xnUb_-E_-u_GoWhJzdjiBuz9XasSfQK8WyAwbc7MLkw40A7Zxl2sfsxGTod3qi1u8mjguoc9CbVqPdYe_9YPVxoK4CeJz6V8AsPcxVJxYq6os1rI9qFx_6a1JdQEhetGtkHLFvwo80UTzKXKhGXSu96WrXnkDE8Kw5TSKvh2gI_BX4QHXjE82xldJRJ8QIXGpRNbdyzGkUdjsrhmZl3ARC9IUlxmowkcEEIzjfbOKBVGrVcJ7rHb0GYNaKtMB_MlH1uAPDxl6qKeXOAZ8YEZ1r0ToPw",
      "e": "AQAB",
      "x5t": "MR-pGTa866RdZLjN6Vwrfay907g"
    }
  ]
}
2022-06-24 16:18:01 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
client-one
client_secret
0ne!Secret
scope
openid email
jwks
{
  "keys": [
    {
      "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q",
      "kty": "RSA",
      "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ",
      "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE",
      "e": "AQAB",
      "kid": "10001",
      "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA",
      "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ",
      "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ",
      "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE",
      "alg": "PS256"
    }
  ]
}
2022-06-24 16:18:01 SUCCESS
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
2022-06-24 16:18:01 SUCCESS
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
cert
MIIDUTCCAjkCCQCjBUJdz/MY8DANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJTRTETMBEGA1UECBMKU29tZS1TdGF0ZTESMBAGA1UEBxMJU3RvY2tob2xtMQ8wDQYDVQQKEwZDdXJpdHkxDTALBgNVBAsTBExhYnMxCzAJBgNVBAMTAmNhMB4XDTE4MTAxMjEwMTYyNVoXDTI4MTAwOTEwMTYyNVowcjELMAkGA1UEBhMCU0UxEzARBgNVBAgTClNvbWUtU3RhdGUxEjAQBgNVBAcTCVN0b2NraG9sbTEPMA0GA1UEChMGQ3VyaXR5MQ0wCwYDVQQLEwRMYWJzMRowGAYDVQQDFBFtdXR1YWxfdGxzX2NsaWVudDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMSeFZrx9D7RmyMfnaqYR8/UVxR76K5PlUddQHI27hlCcftcSlxthuqJkskzj1XhXL+Vv08nOGPNtDF0sm1Ot+9IUS0Kf3+XYZP8ErOAkbKlsllV/Q07nuk6UQmeJ8dwwlohlDg6/WqD2V9sOVYFCLIfxRU/6O9rrY/jqRSK289NSs1HtK18YM4ZoVbHLjqKfpzseSTXah9q5HXKtbwPpRPjSqOW9Poe4/BDUEwV8PlKtA5WuTMPTxnANl6He27H78q7RBLxDFRIExtEpLc65m+oGspojzD8xZb+6sWQKHIdNp8LAmB81jKAi+Y5aPPKmV2SL/FLwNfDcqm0WFLsPXsCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEACeGDaWeGhYXTocm8N1iU+TGbi16Cije8kcE+Qmr4nF1PIqnPhyOBkyeP4X1+qb8BNSH10qMtRhUVYuFd7HNOPW4DgmC5OiNpuaROBBmQ4ZyTxcmUper+ARDJckx+VzoqBAHaUSvBPMJk1eciyzQc/e4pwk4jzwAEtUREyYZg/hwKqGpwnGC7RGcyR28bV7s6K2KqB1MHMTR7uEtJadDQq+k/Ri3bu4b3PZFg9QQ5q00GMYQebn0IojWjktbNmhOr/8xr3o+UGj6AjoWKYc6XpyIg5nMuU3zbto2kjfy5bGXkgEKWT0gVj+LTjFrVeMFrUUpMQbKMINlMe6QJ6MNnCQ==
key
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
ca
MIIDQjCCAioCCQDSZMWEy1bkajANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJTRTETMBEGA1UECBMKU29tZS1TdGF0ZTESMBAGA1UEBxMJU3RvY2tob2xtMQ8wDQYDVQQKEwZDdXJpdHkxDTALBgNVBAsTBExhYnMxCzAJBgNVBAMTAmNhMB4XDTE4MTAxMTEyNTQyMFoXDTI4MTAwODEyNTQyMFowYzELMAkGA1UEBhMCU0UxEzARBgNVBAgTClNvbWUtU3RhdGUxEjAQBgNVBAcTCVN0b2NraG9sbTEPMA0GA1UEChMGQ3VyaXR5MQ0wCwYDVQQLEwRMYWJzMQswCQYDVQQDEwJjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANd1cvikCUYy0ERhbjKaRrcyS/fNDU7DEzmS16cPlG8o3D2H+30yANfPSRGG9CqampFS5SsWgnNiwxH+DQ5+W66i/sZhZ2m+mIj4ecYRbcbH8YkIRuKmX9PYNT95Nqe5OGdvRpTsrXSF84Pqkbnn2EPq5tGgsWyUNTpNEzVYI27hS8L9eN3PdCTt9GCTIrGNxt0+lCISbBuf+o/8xseJKIjkrv2Pr9Ow4L9GovxGpBgd0y6ty85vcjWzwgsuioYtpcUnRAszOxjyVATxbzYDYvcHypvCMTysHe0q+kX32/snCkpPMY5TbZHp+G/5TwriLwR2FfTshaiyKbgS+HDckosCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEAyXa8QR6ClNDC+Ei+VK1JpHh/9Wh0WxPrL2h9Uiomwkz2nVCONCvSAqT1YF91Rr0ae/ehMbl9aoAR1/t+qUQGqL1Nj2bKKI8zGXmG1cQ2kv7dejVq1WUESmjGC+P3Tb+tifQC+lIJGElbFNtrLF6mMjF7KVMXMynNLbij0T4+Mb/HbrD/udDzdtXiVizqPVQLPMTXz1EWXlF/GYtRv676V+sUnwHTtre04Km1+6/7OpoeVFdNBaJ5WUW4lQsOtFk46tVfygBkSOqS3+M8T/gA1Xcdd0qDIAL6+QMLqtha6H+BOYAyblJ/euSptrijj+gVec5maJpF1GR1r9NM+pT5lw==
2022-06-24 16:18:01 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2022-06-24 16:18:01 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q",
      "kty": "RSA",
      "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ",
      "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE",
      "e": "AQAB",
      "kid": "10001",
      "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA",
      "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ",
      "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ",
      "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE",
      "alg": "PS256"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "kid": "10001",
      "alg": "PS256",
      "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE"
    }
  ]
}
2022-06-24 16:18:01 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2022-06-24 16:18:01 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-06-24 16:18:01 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "PS256",
  "ES256"
]
2022-06-24 16:18:01 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q",
      "kty": "RSA",
      "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ",
      "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE",
      "e": "AQAB",
      "kid": "10001",
      "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA",
      "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ",
      "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ",
      "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE",
      "alg": "PS256"
    }
  ]
}
2022-06-24 16:18:01 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
Verify configuration of second client
2022-06-24 16:18:01 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
client-two
client_secret
sEcrEt@3wo
scope
openid email
client_secret_jwt_alg
RS256
jwks
{
  "keys": [
    {
      "kid": "foo",
      "p": "-YTSnw-kdbuSWDG3LbFL7oYYkBsMTEbOE8ZhRQogy5lPVUiI-EJ0pQenvjVIlFEElo0liY2POGsDWu67qBdp6gwITYMgkxg4YLvvhe2mGpBL7OfULYUIJgQ-ZVGc_wKpjXzbx6An4EeS7GNXAoMMG1KPTv-iNs4jSQuDJBvQKo4MKLrBBdEXMYO4gMZMJDs2Rog_AKyAoR912U1Ad5U6HlkHxsGlxG-3_kb7bFHCtOaF5XRMI6Pqyfzf7t5XByz0spTqhTRA45LH4TOArGXFWm1_GB6uj-K7s8NkL5VmUC-jZeGxGFthSiQHjSGWNvgM-Ors_lUIVhf-EciLdOtd_Q",
      "kty": "RSA",
      "q": "4RuJTEJMhsi5jux5wZ_zvuFJiXgA51SujdFE0Gy_f8czCg15Csfqa5Ubew5aVA8HHUoteyVkui3jkp4UQH2zhwUbrY5NF81aB_jw-n7cu5MvJywe9QJ0x7x8Ku0trYruFj6jULLJGR_jbQh_8mNxviwlrm6pBvl9aLXLBP_TKXt9ir73WNcAEh3EJ26FJPr6AY4rWdapZhZigleVmA81967RoYWJeG1pLdDp2L7SPgaxhirvYXwsOgJc8iziEJ1QBBpFYvaBNWTTrgPMi6Mmcc8UqFE1GBHN0qf3ceTUYv-YsjZrzU2pgr5sAaguigZxtuQ-PPL0lFUdRJV7zQsT-w",
      "d": "LX9UHpMiMTUtzh2VP1wgf93xjaYEm6qTwOZQGl_hfwlO0rfF4u5L1RO_JPviFnkA7JRIqZXSLON17szVRLfbhe-EQkoJA6CIUKrpmgKSL6f0p1mCt1oC-Tafvw529IfWtupWcOcSZsk0B8WJ-hOM6zfpyzuua1hKHZ7HdTIWPK1_LCBmBLfDbPR7fnDP987EgqlIfgt4poxXRUPU5997IUPu52-82RUjUlTYzh8gjHLXme9f6n0cmyL-IRwiA-mxBlp0w5Xuwy281AXQFmnetcuMja9I5_Pwf6wHw2XNLp8CHGXFPyI0VJUw-tatkLD7Zk1WM7oXdFHzg1LY7_J4XtIQHYgREzWxc7M8SGSvy-HTz19vaztOT9OOfSUyBT0cbYzUAptwVEQsUnahxloT3eK8C-oZTjWd1AZD_X4rgQKdqQyuex5p35volI3CpIrizLc6a5ljF0HM832mSW4W5SUcd2oyr3Fd41RBaoIj7wQFKPxPsnF3VBeHVAdgUw8FNerob3mmRBIL12upK_iY_tv7TONBJXRx8dHonKt0ukoxW0VPmjlorGvH_GMX7HtpY9YHvGZXPsgVnMJHxmYz7J6jBGnaczlYgPjOEgsUa2mGH40-ZTF1kcWG8VJOYnnGdAItrPG1GBt3yOcdIb1BiYNC4LJdZQXsvFS-lasEohE",
      "e": "AQAB",
      "qi": "GxvAPQ5BUOcVWxj_OJmV803BhlJreMOlXAIHSi4RYWkF2kI7uv3ALxFkPLPoadX-TAahyyv_yIzYIPKriFEB-4wHTSQRg3FZfFKV-uCrIQr3teoRm9IqV9g3U2l-Fo25s4aGMOTuahesoV2vj8fEEd6xiR83nf7sppWino7PaQ-3nMkGrhQbC7TlP016JLoBS3OQPi1NXiRHnVpaz7NuUDDxSFHbH-CayTn_ByiWpi6KbAgM4J63-flYF_F6ejWr2x4MWk2ASWWRUMgag96h9c3fEUVkBIKzZm9oVEP41JfnxodvREgqXPw4JRI8ylPNVzQ8ZReWCfx0UcWELCgI9w",
      "dp": "ypMqSFbzx13Ef3PFawRRSFJ4KK68-kRV1LoviFSjsYhDX1LnWN7jQoSHjCZISZnJJs1rF1TlXQGMlMvTcLGpnImuR_fYf3OfefG6kboSK-jQq4K_wUELD4pMegebdXHc4_DlohmFplGVl_NC1dg9AQWzMYjbUrFi9k-xZaRrCdGPT5XnVeiecuWk6m-Tq6qi8vp0ZACo4abgD87nMu7lY3QWmyfmhCfLclaAkz2B3Up2lIYptpnC6cAysgSzFTFLbJz4FbMJp3koa85bfhuV8UeKcrOeN1T13QkaEoOxsBItD27_T24I-59qvgrxoKkcJw7b39R7UyJhdGCj0AWypQ",
      "dq": "iGIAix1X9AlEsxz-n5rjOHCR9yGnmoApyW5SfNyGIUp019BV13xLwKZ0IdgOTgNU0iAQ8h0zq8EFsdzodDI0RMeJf1tJxfP6af4fMgUOgu6nkNogX1z_l8vQhslv9UbI_N0yYUAQqpIxXevaaOZrEUb6BXayHbGmk3wg5oSAUQ-qfhc5ELAiMNer8h_5tu__7FVQWnu94kYJpOKflaMRlWBrTar0IOxY3xNFurXR9xZjE-CLa8qpmPO5kFg1Fs_YnMO16kFjAxB1V2ah1LAiKK3H3DpnKpAO3WQ6fNyg-OHWh5KFObulybrJAS_-Ek3ZM2-RbafdGsl-lADlItNlZQ",
      "n": "22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8",
      "alg": "PS256"
    }
  ]
}
2022-06-24 16:18:01 SUCCESS
ValidateMTLSCertificates2Header
MTLS certificates header is valid
2022-06-24 16:18:01 SUCCESS
ExtractMTLSCertificates2FromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
ca
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
2022-06-24 16:18:01 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2022-06-24 16:18:01 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kid": "foo",
      "p": "-YTSnw-kdbuSWDG3LbFL7oYYkBsMTEbOE8ZhRQogy5lPVUiI-EJ0pQenvjVIlFEElo0liY2POGsDWu67qBdp6gwITYMgkxg4YLvvhe2mGpBL7OfULYUIJgQ-ZVGc_wKpjXzbx6An4EeS7GNXAoMMG1KPTv-iNs4jSQuDJBvQKo4MKLrBBdEXMYO4gMZMJDs2Rog_AKyAoR912U1Ad5U6HlkHxsGlxG-3_kb7bFHCtOaF5XRMI6Pqyfzf7t5XByz0spTqhTRA45LH4TOArGXFWm1_GB6uj-K7s8NkL5VmUC-jZeGxGFthSiQHjSGWNvgM-Ors_lUIVhf-EciLdOtd_Q",
      "kty": "RSA",
      "q": "4RuJTEJMhsi5jux5wZ_zvuFJiXgA51SujdFE0Gy_f8czCg15Csfqa5Ubew5aVA8HHUoteyVkui3jkp4UQH2zhwUbrY5NF81aB_jw-n7cu5MvJywe9QJ0x7x8Ku0trYruFj6jULLJGR_jbQh_8mNxviwlrm6pBvl9aLXLBP_TKXt9ir73WNcAEh3EJ26FJPr6AY4rWdapZhZigleVmA81967RoYWJeG1pLdDp2L7SPgaxhirvYXwsOgJc8iziEJ1QBBpFYvaBNWTTrgPMi6Mmcc8UqFE1GBHN0qf3ceTUYv-YsjZrzU2pgr5sAaguigZxtuQ-PPL0lFUdRJV7zQsT-w",
      "d": "LX9UHpMiMTUtzh2VP1wgf93xjaYEm6qTwOZQGl_hfwlO0rfF4u5L1RO_JPviFnkA7JRIqZXSLON17szVRLfbhe-EQkoJA6CIUKrpmgKSL6f0p1mCt1oC-Tafvw529IfWtupWcOcSZsk0B8WJ-hOM6zfpyzuua1hKHZ7HdTIWPK1_LCBmBLfDbPR7fnDP987EgqlIfgt4poxXRUPU5997IUPu52-82RUjUlTYzh8gjHLXme9f6n0cmyL-IRwiA-mxBlp0w5Xuwy281AXQFmnetcuMja9I5_Pwf6wHw2XNLp8CHGXFPyI0VJUw-tatkLD7Zk1WM7oXdFHzg1LY7_J4XtIQHYgREzWxc7M8SGSvy-HTz19vaztOT9OOfSUyBT0cbYzUAptwVEQsUnahxloT3eK8C-oZTjWd1AZD_X4rgQKdqQyuex5p35volI3CpIrizLc6a5ljF0HM832mSW4W5SUcd2oyr3Fd41RBaoIj7wQFKPxPsnF3VBeHVAdgUw8FNerob3mmRBIL12upK_iY_tv7TONBJXRx8dHonKt0ukoxW0VPmjlorGvH_GMX7HtpY9YHvGZXPsgVnMJHxmYz7J6jBGnaczlYgPjOEgsUa2mGH40-ZTF1kcWG8VJOYnnGdAItrPG1GBt3yOcdIb1BiYNC4LJdZQXsvFS-lasEohE",
      "e": "AQAB",
      "qi": "GxvAPQ5BUOcVWxj_OJmV803BhlJreMOlXAIHSi4RYWkF2kI7uv3ALxFkPLPoadX-TAahyyv_yIzYIPKriFEB-4wHTSQRg3FZfFKV-uCrIQr3teoRm9IqV9g3U2l-Fo25s4aGMOTuahesoV2vj8fEEd6xiR83nf7sppWino7PaQ-3nMkGrhQbC7TlP016JLoBS3OQPi1NXiRHnVpaz7NuUDDxSFHbH-CayTn_ByiWpi6KbAgM4J63-flYF_F6ejWr2x4MWk2ASWWRUMgag96h9c3fEUVkBIKzZm9oVEP41JfnxodvREgqXPw4JRI8ylPNVzQ8ZReWCfx0UcWELCgI9w",
      "dp": "ypMqSFbzx13Ef3PFawRRSFJ4KK68-kRV1LoviFSjsYhDX1LnWN7jQoSHjCZISZnJJs1rF1TlXQGMlMvTcLGpnImuR_fYf3OfefG6kboSK-jQq4K_wUELD4pMegebdXHc4_DlohmFplGVl_NC1dg9AQWzMYjbUrFi9k-xZaRrCdGPT5XnVeiecuWk6m-Tq6qi8vp0ZACo4abgD87nMu7lY3QWmyfmhCfLclaAkz2B3Up2lIYptpnC6cAysgSzFTFLbJz4FbMJp3koa85bfhuV8UeKcrOeN1T13QkaEoOxsBItD27_T24I-59qvgrxoKkcJw7b39R7UyJhdGCj0AWypQ",
      "dq": "iGIAix1X9AlEsxz-n5rjOHCR9yGnmoApyW5SfNyGIUp019BV13xLwKZ0IdgOTgNU0iAQ8h0zq8EFsdzodDI0RMeJf1tJxfP6af4fMgUOgu6nkNogX1z_l8vQhslv9UbI_N0yYUAQqpIxXevaaOZrEUb6BXayHbGmk3wg5oSAUQ-qfhc5ELAiMNer8h_5tu__7FVQWnu94kYJpOKflaMRlWBrTar0IOxY3xNFurXR9xZjE-CLa8qpmPO5kFg1Fs_YnMO16kFjAxB1V2ah1LAiKK3H3DpnKpAO3WQ6fNyg-OHWh5KFObulybrJAS_-Ek3ZM2-RbafdGsl-lADlItNlZQ",
      "n": "22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8",
      "alg": "PS256"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "kid": "foo",
      "alg": "PS256",
      "n": "22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8"
    }
  ]
}
2022-06-24 16:18:01 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2022-06-24 16:18:01 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-06-24 16:18:01 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "PS256",
  "ES256"
]
2022-06-24 16:18:01 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kid": "foo",
      "p": "-YTSnw-kdbuSWDG3LbFL7oYYkBsMTEbOE8ZhRQogy5lPVUiI-EJ0pQenvjVIlFEElo0liY2POGsDWu67qBdp6gwITYMgkxg4YLvvhe2mGpBL7OfULYUIJgQ-ZVGc_wKpjXzbx6An4EeS7GNXAoMMG1KPTv-iNs4jSQuDJBvQKo4MKLrBBdEXMYO4gMZMJDs2Rog_AKyAoR912U1Ad5U6HlkHxsGlxG-3_kb7bFHCtOaF5XRMI6Pqyfzf7t5XByz0spTqhTRA45LH4TOArGXFWm1_GB6uj-K7s8NkL5VmUC-jZeGxGFthSiQHjSGWNvgM-Ors_lUIVhf-EciLdOtd_Q",
      "kty": "RSA",
      "q": "4RuJTEJMhsi5jux5wZ_zvuFJiXgA51SujdFE0Gy_f8czCg15Csfqa5Ubew5aVA8HHUoteyVkui3jkp4UQH2zhwUbrY5NF81aB_jw-n7cu5MvJywe9QJ0x7x8Ku0trYruFj6jULLJGR_jbQh_8mNxviwlrm6pBvl9aLXLBP_TKXt9ir73WNcAEh3EJ26FJPr6AY4rWdapZhZigleVmA81967RoYWJeG1pLdDp2L7SPgaxhirvYXwsOgJc8iziEJ1QBBpFYvaBNWTTrgPMi6Mmcc8UqFE1GBHN0qf3ceTUYv-YsjZrzU2pgr5sAaguigZxtuQ-PPL0lFUdRJV7zQsT-w",
      "d": "LX9UHpMiMTUtzh2VP1wgf93xjaYEm6qTwOZQGl_hfwlO0rfF4u5L1RO_JPviFnkA7JRIqZXSLON17szVRLfbhe-EQkoJA6CIUKrpmgKSL6f0p1mCt1oC-Tafvw529IfWtupWcOcSZsk0B8WJ-hOM6zfpyzuua1hKHZ7HdTIWPK1_LCBmBLfDbPR7fnDP987EgqlIfgt4poxXRUPU5997IUPu52-82RUjUlTYzh8gjHLXme9f6n0cmyL-IRwiA-mxBlp0w5Xuwy281AXQFmnetcuMja9I5_Pwf6wHw2XNLp8CHGXFPyI0VJUw-tatkLD7Zk1WM7oXdFHzg1LY7_J4XtIQHYgREzWxc7M8SGSvy-HTz19vaztOT9OOfSUyBT0cbYzUAptwVEQsUnahxloT3eK8C-oZTjWd1AZD_X4rgQKdqQyuex5p35volI3CpIrizLc6a5ljF0HM832mSW4W5SUcd2oyr3Fd41RBaoIj7wQFKPxPsnF3VBeHVAdgUw8FNerob3mmRBIL12upK_iY_tv7TONBJXRx8dHonKt0ukoxW0VPmjlorGvH_GMX7HtpY9YHvGZXPsgVnMJHxmYz7J6jBGnaczlYgPjOEgsUa2mGH40-ZTF1kcWG8VJOYnnGdAItrPG1GBt3yOcdIb1BiYNC4LJdZQXsvFS-lasEohE",
      "e": "AQAB",
      "qi": "GxvAPQ5BUOcVWxj_OJmV803BhlJreMOlXAIHSi4RYWkF2kI7uv3ALxFkPLPoadX-TAahyyv_yIzYIPKriFEB-4wHTSQRg3FZfFKV-uCrIQr3teoRm9IqV9g3U2l-Fo25s4aGMOTuahesoV2vj8fEEd6xiR83nf7sppWino7PaQ-3nMkGrhQbC7TlP016JLoBS3OQPi1NXiRHnVpaz7NuUDDxSFHbH-CayTn_ByiWpi6KbAgM4J63-flYF_F6ejWr2x4MWk2ASWWRUMgag96h9c3fEUVkBIKzZm9oVEP41JfnxodvREgqXPw4JRI8ylPNVzQ8ZReWCfx0UcWELCgI9w",
      "dp": "ypMqSFbzx13Ef3PFawRRSFJ4KK68-kRV1LoviFSjsYhDX1LnWN7jQoSHjCZISZnJJs1rF1TlXQGMlMvTcLGpnImuR_fYf3OfefG6kboSK-jQq4K_wUELD4pMegebdXHc4_DlohmFplGVl_NC1dg9AQWzMYjbUrFi9k-xZaRrCdGPT5XnVeiecuWk6m-Tq6qi8vp0ZACo4abgD87nMu7lY3QWmyfmhCfLclaAkz2B3Up2lIYptpnC6cAysgSzFTFLbJz4FbMJp3koa85bfhuV8UeKcrOeN1T13QkaEoOxsBItD27_T24I-59qvgrxoKkcJw7b39R7UyJhdGCj0AWypQ",
      "dq": "iGIAix1X9AlEsxz-n5rjOHCR9yGnmoApyW5SfNyGIUp019BV13xLwKZ0IdgOTgNU0iAQ8h0zq8EFsdzodDI0RMeJf1tJxfP6af4fMgUOgu6nkNogX1z_l8vQhslv9UbI_N0yYUAQqpIxXevaaOZrEUb6BXayHbGmk3wg5oSAUQ-qfhc5ELAiMNer8h_5tu__7FVQWnu94kYJpOKflaMRlWBrTar0IOxY3xNFurXR9xZjE-CLa8qpmPO5kFg1Fs_YnMO16kFjAxB1V2ah1LAiKK3H3DpnKpAO3WQ6fNyg-OHWh5KFObulybrJAS_-Ek3ZM2-RbafdGsl-lADlItNlZQ",
      "n": "22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8",
      "alg": "PS256"
    }
  ]
}
2022-06-24 16:18:01 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2022-06-24 16:18:01 SUCCESS
ValidateClientPrivateKeysAreDifferent
Client signing JWKs have different thumbprints
jwk1
{
  "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q",
  "kty": "RSA",
  "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ",
  "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE",
  "e": "AQAB",
  "kid": "10001",
  "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA",
  "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ",
  "alg": "PS256",
  "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ",
  "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE"
}
jwk2
{
  "p": "-YTSnw-kdbuSWDG3LbFL7oYYkBsMTEbOE8ZhRQogy5lPVUiI-EJ0pQenvjVIlFEElo0liY2POGsDWu67qBdp6gwITYMgkxg4YLvvhe2mGpBL7OfULYUIJgQ-ZVGc_wKpjXzbx6An4EeS7GNXAoMMG1KPTv-iNs4jSQuDJBvQKo4MKLrBBdEXMYO4gMZMJDs2Rog_AKyAoR912U1Ad5U6HlkHxsGlxG-3_kb7bFHCtOaF5XRMI6Pqyfzf7t5XByz0spTqhTRA45LH4TOArGXFWm1_GB6uj-K7s8NkL5VmUC-jZeGxGFthSiQHjSGWNvgM-Ors_lUIVhf-EciLdOtd_Q",
  "kty": "RSA",
  "q": "4RuJTEJMhsi5jux5wZ_zvuFJiXgA51SujdFE0Gy_f8czCg15Csfqa5Ubew5aVA8HHUoteyVkui3jkp4UQH2zhwUbrY5NF81aB_jw-n7cu5MvJywe9QJ0x7x8Ku0trYruFj6jULLJGR_jbQh_8mNxviwlrm6pBvl9aLXLBP_TKXt9ir73WNcAEh3EJ26FJPr6AY4rWdapZhZigleVmA81967RoYWJeG1pLdDp2L7SPgaxhirvYXwsOgJc8iziEJ1QBBpFYvaBNWTTrgPMi6Mmcc8UqFE1GBHN0qf3ceTUYv-YsjZrzU2pgr5sAaguigZxtuQ-PPL0lFUdRJV7zQsT-w",
  "d": "LX9UHpMiMTUtzh2VP1wgf93xjaYEm6qTwOZQGl_hfwlO0rfF4u5L1RO_JPviFnkA7JRIqZXSLON17szVRLfbhe-EQkoJA6CIUKrpmgKSL6f0p1mCt1oC-Tafvw529IfWtupWcOcSZsk0B8WJ-hOM6zfpyzuua1hKHZ7HdTIWPK1_LCBmBLfDbPR7fnDP987EgqlIfgt4poxXRUPU5997IUPu52-82RUjUlTYzh8gjHLXme9f6n0cmyL-IRwiA-mxBlp0w5Xuwy281AXQFmnetcuMja9I5_Pwf6wHw2XNLp8CHGXFPyI0VJUw-tatkLD7Zk1WM7oXdFHzg1LY7_J4XtIQHYgREzWxc7M8SGSvy-HTz19vaztOT9OOfSUyBT0cbYzUAptwVEQsUnahxloT3eK8C-oZTjWd1AZD_X4rgQKdqQyuex5p35volI3CpIrizLc6a5ljF0HM832mSW4W5SUcd2oyr3Fd41RBaoIj7wQFKPxPsnF3VBeHVAdgUw8FNerob3mmRBIL12upK_iY_tv7TONBJXRx8dHonKt0ukoxW0VPmjlorGvH_GMX7HtpY9YHvGZXPsgVnMJHxmYz7J6jBGnaczlYgPjOEgsUa2mGH40-ZTF1kcWG8VJOYnnGdAItrPG1GBt3yOcdIb1BiYNC4LJdZQXsvFS-lasEohE",
  "e": "AQAB",
  "kid": "foo",
  "qi": "GxvAPQ5BUOcVWxj_OJmV803BhlJreMOlXAIHSi4RYWkF2kI7uv3ALxFkPLPoadX-TAahyyv_yIzYIPKriFEB-4wHTSQRg3FZfFKV-uCrIQr3teoRm9IqV9g3U2l-Fo25s4aGMOTuahesoV2vj8fEEd6xiR83nf7sppWino7PaQ-3nMkGrhQbC7TlP016JLoBS3OQPi1NXiRHnVpaz7NuUDDxSFHbH-CayTn_ByiWpi6KbAgM4J63-flYF_F6ejWr2x4MWk2ASWWRUMgag96h9c3fEUVkBIKzZm9oVEP41JfnxodvREgqXPw4JRI8ylPNVzQ8ZReWCfx0UcWELCgI9w",
  "dp": "ypMqSFbzx13Ef3PFawRRSFJ4KK68-kRV1LoviFSjsYhDX1LnWN7jQoSHjCZISZnJJs1rF1TlXQGMlMvTcLGpnImuR_fYf3OfefG6kboSK-jQq4K_wUELD4pMegebdXHc4_DlohmFplGVl_NC1dg9AQWzMYjbUrFi9k-xZaRrCdGPT5XnVeiecuWk6m-Tq6qi8vp0ZACo4abgD87nMu7lY3QWmyfmhCfLclaAkz2B3Up2lIYptpnC6cAysgSzFTFLbJz4FbMJp3koa85bfhuV8UeKcrOeN1T13QkaEoOxsBItD27_T24I-59qvgrxoKkcJw7b39R7UyJhdGCj0AWypQ",
  "alg": "PS256",
  "dq": "iGIAix1X9AlEsxz-n5rjOHCR9yGnmoApyW5SfNyGIUp019BV13xLwKZ0IdgOTgNU0iAQ8h0zq8EFsdzodDI0RMeJf1tJxfP6af4fMgUOgu6nkNogX1z_l8vQhslv9UbI_N0yYUAQqpIxXevaaOZrEUb6BXayHbGmk3wg5oSAUQ-qfhc5ELAiMNer8h_5tu__7FVQWnu94kYJpOKflaMRlWBrTar0IOxY3xNFurXR9xZjE-CLa8qpmPO5kFg1Fs_YnMO16kFjAxB1V2ah1LAiKK3H3DpnKpAO3WQ6fNyg-OHWh5KFObulybrJAS_-Ek3ZM2-RbafdGsl-lADlItNlZQ",
  "n": "22iT8mxKrYSiXWwAZP6HLUsc0EIMduLd0bLvsySntSfIKp8TAFeu_MoqvKgpoyb7ZVSHIwvwOkan2JGm5AdjiGb4AmEJfNh6Y-YfXN8dFtVlS1pFHJvd2iEYtWhvRbaYaJreat_GZIJBzGpGmGKwXrriyTYE4R67gW3-MO5R4bRYpED936IeAK0pYl_j1Lm-GJkE2O47CWZSPJBpG2WXDVtdTvp3mFtBgaRb1OYXptmcQHraxlbcZut9uPzujrTbRJiQ74L2ymXyskBZvtwKsX2dPXHJ9cS1W-YRskTOFsJXF8VCIuBherxApoQYZr_Xcs8R6mFWDpGlwVqJkMXftOSDy0Bmr7-Ip8ROXsP-tsxA8Jv7T2jolzokt17gcvIoKQgSrCQGCH9sxuVnmLuVgWjnnKzdTh7nS-XnAD-N-qHn9KrszgTOtClXVtgw4Kzo9uDS8E4-tmZHQIIwO13IAu_6kuypLAybDVo5-QGa5m8RKvCPFc2BNIvX5t6hsWgCjE2IwnfbLC33VnIKih0wJoEq9u21UpifpBAJ7a84pUMyL4G5mBFnbjAh2ErVudHrzu_3IsTm67b1pYmcW-dr--YcKY5ngpyZAybqC_M_3DMK1D0tXSeJTOOth-JsV4_TTeN046hTl6Og8SUJJ1GAOTrC2TMIOxD2gu7kWL2d7g8"
}
2022-06-24 16:18:01 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://5a6d91c9d0.westeurope.azurecontainer.io:7777/fapi/rs
institution_id
foobar
2022-06-24 16:18:01 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://5a6d91c9d0.westeurope.azurecontainer.io:7777/fapi/rs
2022-06-24 16:18:01 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "5a6d91c9d0.westeurope.azurecontainer.io",
  "testPort": 7777
}
2022-06-24 16:18:01 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "5a6d91c9d0.westeurope.azurecontainer.io",
  "testPort": 7777
}
accounts_request_endpoint
{
  "testHost": "5a6d91c9d0.westeurope.azurecontainer.io",
  "testPort": 7777
}
2022-06-24 16:18:01
fapi1-advanced-final-ensure-client-assertion-in-token-endpoint
Setup Done
Make request to authorization endpoint
2022-06-24 16:18:01 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
client-one
redirect_uri
https://www.certification.openid.net/test/a/fintech/callback
scope
openid email
2022-06-24 16:18:01 SUCCESS
AddAcrClaimToAuthorizationEndpointRequest
Added acr claim to authorization_endpoint_request
authorization_endpoint_request
{
  "client_id": "client-one",
  "redirect_uri": "https://www.certification.openid.net/test/a/fintech/callback",
  "scope": "openid email",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  }
}
2022-06-24 16:18:01
CreateRandomStateValue
Created state value
requested_state_length
10
state
M6lOQHBeVf
2022-06-24 16:18:01 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
client-one
redirect_uri
https://www.certification.openid.net/test/a/fintech/callback
scope
openid email
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
M6lOQHBeVf
2022-06-24 16:18:01
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
x3EMsVGQEs
2022-06-24 16:18:01 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
client-one
redirect_uri
https://www.certification.openid.net/test/a/fintech/callback
scope
openid email
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
M6lOQHBeVf
nonce
x3EMsVGQEs
2022-06-24 16:18:01 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToCodeIdtoken
Added response_type parameter to request
client_id
client-one
redirect_uri
https://www.certification.openid.net/test/a/fintech/callback
scope
openid email
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
M6lOQHBeVf
nonce
x3EMsVGQEs
response_type
code id_token
2022-06-24 16:18:01
CreateRandomCodeVerifier
Created code_verifier value
code_verifier
o_6IEfsYg_qwNExcBbDg2_CuDzHAqiaZW5_5WURC8fbeISwxcdaCGwAoTCNySfKkw3zIQ_btF3_cGOAJQiaJoS0A7YiLlYAdv47DJvBDq4G5WQ5VLUHQtL2YCU~n6pDa
2022-06-24 16:18:01
CreateS256CodeChallenge
Created code_challenge value
code_challenge
ZgUjJ2IdkekMKLAif7RJMM2NJ46PT-QVHVdPoOcblXw
2022-06-24 16:18:01 SUCCESS
AddCodeChallengeToAuthorizationEndpointRequest
Added code_challenge and code_challenge_method parameters to request
client_id
client-one
redirect_uri
https://www.certification.openid.net/test/a/fintech/callback
scope
openid email
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
M6lOQHBeVf
nonce
x3EMsVGQEs
response_type
code id_token
code_challenge
ZgUjJ2IdkekMKLAif7RJMM2NJ46PT-QVHVdPoOcblXw
code_challenge_method
S256
2022-06-24 16:18:01 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "client_id": "client-one",
  "redirect_uri": "https://www.certification.openid.net/test/a/fintech/callback",
  "scope": "openid email",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  },
  "state": "M6lOQHBeVf",
  "nonce": "x3EMsVGQEs",
  "response_type": "code id_token",
  "code_challenge": "ZgUjJ2IdkekMKLAif7RJMM2NJ46PT-QVHVdPoOcblXw",
  "code_challenge_method": "S256"
}
2022-06-24 16:18:01 SUCCESS
AddNbfToRequestObject
Added nbf to request object claims
nbf
1.656087481E9
2022-06-24 16:18:01 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.656087781E9
2022-06-24 16:18:01 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/anonymous
2022-06-24 16:18:01 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
client-one
2022-06-24 16:18:01 SUCCESS
AddClientIdToRequestObject
Added client_id to request object claims
client_id
client-one
2022-06-24 16:18:01 SUCCESS
SignRequestObject
Signed the request object
claims
{
  "iss": "client-one",
  "response_type": "code id_token",
  "code_challenge_method": "S256",
  "nonce": "x3EMsVGQEs",
  "client_id": "client-one",
  "aud": "https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/anonymous",
  "nbf": 1656087481,
  "scope": "openid email",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  },
  "redirect_uri": "https://www.certification.openid.net/test/a/fintech/callback",
  "state": "M6lOQHBeVf",
  "exp": 1656087781,
  "code_challenge": "ZgUjJ2IdkekMKLAif7RJMM2NJ46PT-QVHVdPoOcblXw"
}
header
{
  "kid": "10001",
  "alg": "PS256"
}
request_object
eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.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.ZKafMfih10oNKi-msCdDQkSHeqGHi9dj1AME7S3To5H9AB2kp-EcTECrieXxSbki3icgyRWwGNZd39N7Om-n5sb_9wCSv5SZqXSyvOtghLCytdQVKNNrYyXP4YZqX9j7V8K1ytXJU9mXXRD8g_l2nUrN2jNRm9O4vVUQMMaEWsonJvYnThID7Fb-Th64eBKGrH7c7inRJvVweg82j8PTIE4fFjmfYxus0iTtOJMnZ93R5wwGyF3mKsWga-S3Zyq--XlS8MKBOcP33t0u-g6OH0L5Ju-81sa8jN01PciTtCTFtWRZNj8cgkkqxp23GC5xBoDGNJcrEAlQbEG5Otzcd-gxERXqncmS-OyuhGm3Elb5NKNma_ROdIdBICIXYcV5vxsa-Y_qOX5Rq9rsniS14m6FfkwBPh9j8z5-8t-3F-xPY0kEIL0MyUlqfum0ASBNvLNsMbmloR0_470mZoIs4kfQIdFKuGCn-8fW8LefWSHxbKBnHkmk5p2tdaRFtGq-YqkxzH7hO5gXR3LroRfA_tcL2GCTBNxqYEouRVRb7F4pNs09820s3CUQTC4qqAqHq5mH48RgPyJfxWM1eXdYTmMrGoDXayXZRKrvFFQ3xVU5LKDIK0Ir1kz0Tyr51Vp19kL6fiVk8qPUXhd5kElNAci4Iku7C25HNDoz77JwL_M
key
{
  "p": "_5eE8_P864QBBcFbdnvmM4GpAAkRS_5ZYgTR2kLKH4exiWdrVuqrBXh2WnU_2CX9_jnrvKiuOvM9Ob2wQoNLvAiA_zmOsOvfBgWNIgV1I_BU8dF1XErdx21YBeTxkpZxw16zRcwWR9Vnd8rWnXBpIpG57Oajic36moIH59gy5DZJpg83Y6WGCNq0xjRH35QiDq754N5jiqs1BYef8Zrwk6IRC1UbJRLc47BB6EhKP6HU6-KgNFZSyAFo7GEeUbgQmel4uT9sDDXKthZ-FhfIL2ZlLmC2Oj6IB4zV8T-Xwy4be-NrsGrRlykBiF5qdbwuO0pIPE6w1nB2NlF3tPk8_Q",
  "kty": "RSA",
  "q": "rx-8s2aSmABCXzcdAqD63oY77jw0QkpHQamysY4w3HY_RwDPwHzsqYTaWbwKFq4zhCEyWmDpD5ETkWoHZWDzUfZ4Tzusedk5AkumWnU4-n_VVIw0T4jviClYhMYOaEk1M0-l6z7IdKIYcff4MNDmXH8ltQ6jx-MNtauNekwXpZIYxmihtaPG_ozfEPWgBO5f1AeLb5geLo8l4JxsMQbxPlFxE_xRsRNIWFf56Ldnh4EokFTtmeLQceluWthCJlHuA4V7Iz89pS-YIw_cCn0Ul05mFg5PX8q4wbL-Nfd6PmRPqk2-pGvKti3MGfURqkT4MLPsuOEwA6zLlQUQRKOGBQ",
  "d": "j80kyzRVuUz56V11WUtCeprWrqC7n7liq_0PhiFQyUQzrdOccfW_MSiSkRAT3POImMUIyR9z-3HlIxnB04olLeYNs7UdU8Thy6Md6qW2a1UExYtOJJrmVQmeHsTbX9kzmIlnrx-p_iizNWPt9VGifpZQrAZTXRAx9sWEXlsaa-FN1bymZkvh6rRxRqEYXjT1cBWuvfsHBD9xnAt4rDwT-kLfYvP0TfiSbNnyuPFhfKVAP2XsvW_5eyIT5ABbeKX61GoB2TeAXZ3mw9nr8jK-5Xv0eBjNBGvmx3pawl1xDWdfYeTuIPkz1sUwOgjGDeW5K6YJZVlGJOCfKXaDTbCFaZrCx04GcPFmeOz6lnAm6JyhcABWaMd802YKoYSf0107KcFZGT-Y21ZVpnBS3j28A4Zp1kDicdvj-JNL9SD-Jw_PgAWyQkDO21gFkLhmmVoeUzy8hcG242RQaniLg74Mg8mrV5jOxtcz_KSwMOwndz3TBH4zMZWjriAlb5ICtInU-6jkwBLulzGGdtBG6StpHyYW7S0OEVth5EGG7Kj0mTuVVXBg63MUoS7H-DniUzAOKN37cTWJcFLp5okMEEacgMPPM4HF9gr3hECUUaYynJZK8DmqNUn46s-xaJUxTHTHPLCxLL9wfxVO9H-xz2QmbscxhcrlOnJD02x5u1UnAzE",
  "e": "AQAB",
  "kid": "10001",
  "qi": "Y9gTCltOzXxWYG02-R8cqds_N9erOe-em9l4nqDMT7wu7ovyFaItxmku6t5xxoPWEfBoEmwx3QtiyRi5PIqDeqG_NwlNJoUqfuo5A4neB6Kl1XQEQisIxwANT-V08GhX2EVSil4vpB7yApCBqjcAT20N57wqfeDgKVEE-hb4gMn8f8a8cxT9rA5HmzmtTZWSrfyFz_H8JLXIuQ4UPw3bAgdNwd1MZAplCxcGKTEoCTj-eAL5SZvxIE4OtFCtOql5KgSbFHApzWpfAtWDvPkHNdcApGbdSoVSgpJeS1GQNkTwNR3sUfCw5UE9k77F7g6sIqJxLH6ldYGTraXwgYOnkA",
  "dp": "DiQp_P1g3v78t37NOq78O5lO6muWA2hdNakimzrayAfP8NRCAhsVv0W89qBKGgFwHiLCQjvq9-QBXTJ7kBKHnC20RWq_1FYYjtK7zkgTBRwE9yQppCOYRbJtDlZubzfXr4GL1a7HBM5v3Rbh7PANQRZi_RJ9teApn2bWXSN_HVVLmd55qA--bLr9CYJW_63IfJt9w81KIJ_8XQP1-34hFWoAG2poCBMVGZvk6Z8mTIL9rtdpGbw09E_vqDRvYwIWGQ3r2gQCTGKlhpGUBFDoiIbXzksXif1vtUs7gw-LrAbfCmm4yZf_ZKemKA9hQIZa4HjpqjyIWDT8tWCoiODJWQ",
  "alg": "PS256",
  "dq": "lPSpzO6yQhf2XIbEZjgHKr-CumD7EmebtH5jQCNx7BOoPvyxuUiJBKe8EheffSsvJnQWIEnN8y-zNTy6jcCpNk4uhzZ6vinGE-3E0axjiq6xBfk7hWs0UtzYLhdIqeubFMnqlu4QEyTNJiOFOAB38LU1nYuWQ68dOilxbVTLyEk8SYc2BQoJePrZwdMrCQa4--Bu-byp73BTB3oFjK4bBKbBR_6WfcepAXvTVd6qcNeraRjUANCr_DhRZXQM0AtgKB6hXpmsFZUmEqyqvUEnAovsyVXirdgAzsEw-TZHBErOeE0omzIUemD5-ho5rFp9wO9Jqvffn0Ca6WYlMDznAQ",
  "n": "rthDokBSSYZYCZJntmfLGZndTrgllG4HEG_C_objgFbrXSDpA_AuKNDNrYic3qHb6kY2tuIlPWyNKIgCdPWzrTQ34YC_ijlj6DgWv60suJRzAXyoQ1VH4fH8MVn1wQjYeBb9Bkym4qDBnc5KB-RDKIMLEpRvtEDy5p8JMva8zgLA2f4Shv_pKG8KwMqWcx-YrQv1UlcP5weTHwiE6DuKQ0Z01el5fspp8qzBIFR5yRS1A5idWw4YkcSZSLhQZ0dlXo0d6cAgn-CPespuFVGdblkUls99W6UcWyNGeJIIg9jBGX3ky3G13GmanVXAb8NRDkv8k9Wh7HR05z_D1b-B_D2NdPYJYgSdBg_rf0EK33aCqTcBbl8_f57e44gVu72vu0CS_PoI2ad_5AgZBZTsTE7ACXdwuVnY5pZyw_TnvMbyaSgrUemZNuYJBcSVBPiAtYsQxE1vZPiig8S4bFiXSfEYqBSjRf-kZT0afrtMExz9tNAKX-bF8XQJ_9NLPnaB2RaMPywiouAxCB2AcCpRjX6HSewgknob5ShL9nBxnA-jxRkB_CzD21vZdNU0Zj_MTYmwGva7-_bXipMK24aK9Uimnhwihc9-9oOHi7zalBq8Z7PnwKx_i-pxu4QSLgEnDM0SoOUQ44YecM3xF0jYGuI3ujScexe5tQRvxgfhnvE"
}
2022-06-24 16:18:01 SUCCESS
BuildRequestObjectPostToPAREndpoint
request
eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.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.ZKafMfih10oNKi-msCdDQkSHeqGHi9dj1AME7S3To5H9AB2kp-EcTECrieXxSbki3icgyRWwGNZd39N7Om-n5sb_9wCSv5SZqXSyvOtghLCytdQVKNNrYyXP4YZqX9j7V8K1ytXJU9mXXRD8g_l2nUrN2jNRm9O4vVUQMMaEWsonJvYnThID7Fb-Th64eBKGrH7c7inRJvVweg82j8PTIE4fFjmfYxus0iTtOJMnZ93R5wwGyF3mKsWga-S3Zyq--XlS8MKBOcP33t0u-g6OH0L5Ju-81sa8jN01PciTtCTFtWRZNj8cgkkqxp23GC5xBoDGNJcrEAlQbEG5Otzcd-gxERXqncmS-OyuhGm3Elb5NKNma_ROdIdBICIXYcV5vxsa-Y_qOX5Rq9rsniS14m6FfkwBPh9j8z5-8t-3F-xPY0kEIL0MyUlqfum0ASBNvLNsMbmloR0_470mZoIs4kfQIdFKuGCn-8fW8LefWSHxbKBnHkmk5p2tdaRFtGq-YqkxzH7hO5gXR3LroRfA_tcL2GCTBNxqYEouRVRb7F4pNs09820s3CUQTC4qqAqHq5mH48RgPyJfxWM1eXdYTmMrGoDXayXZRKrvFFQ3xVU5LKDIK0Ir1kz0Tyr51Vp19kL6fiVk8qPUXhd5kElNAci4Iku7C25HNDoz77JwL_M
2022-06-24 16:18:01 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
client-one
sub
client-one
aud
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/token
jti
QnCn6Dw5tX70HVgIynlo
iat
1656087481
exp
1656087541
2022-06-24 16:18:01 SUCCESS
UpdateClientAuthenticationAssertionClaimsWithISSAud
Updated audience in client assertion claims
iss
client-one
sub
client-one
jti
QnCn6Dw5tX70HVgIynlo
iat
1656087481
exp
1656087541
aud
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/anonymous
2022-06-24 16:18:01 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJzdWIiOiJjbGllbnQtb25lIiwiYXVkIjoiaHR0cHM6XC9cLzVhNmQ5MWM5ZDAud2VzdGV1cm9wZS5henVyZWNvbnRhaW5lci5pbzo4NDQzXC9kZXZcL29hdXRoXC9hbm9ueW1vdXMiLCJpc3MiOiJjbGllbnQtb25lIiwiZXhwIjoxNjU2MDg3NTQxLCJpYXQiOjE2NTYwODc0ODEsImp0aSI6IlFuQ242RHc1dFg3MEhWZ0l5bmxvIn0.n_Uhp8A0HrK4HYmMhvtMF6t9-fJmQIwd7-0jw7ZmtJycMReqKXWEg7AC_1ZMGHbs5R9_OtqkpWtUPZ77XEEGgt4iWhbXvvtXTmI5tr-YS4FA5VkbX3v-B-u8wHUAoWousQ-JDyAWFR9Brq3UUUe6pbr7uDAirvtYcjhtpvPt0TSUAR1M2KKqxou12TM9M45FQBqB6itcQoOEiA1xtwYFyQ83JT110MM7h-FSNG8DfCbtsKhzswS2VlNIi9LlJSJVffKwRRVD54VJUm9MmHGny9kI8iJt8GEWhPhzT2D0llVJtl8l2SYvdcyK4_v__f2U8X0gYQqTw4yEYS6OQ5RG8foUdue04Zs4nIiPSiRX3jA0IO388h-GVdJYH6pD-HhxPgP9OiKtlGhIaO0zzHugrV8WauzotuYO29cOMgKXT2uhal7Ogu1kw3vAz6HBMZOl-HkrY_c2P7Md8MD7Gcnhs3BGMx1EQ9IOUTsqRp9P1hNQXnJ2zbW3pHwAaB8PFXOtAnwmjbMAtzEly_yCxCV3XNp9xemaievav-x3COcXq4FM07Uj9gFSJ05TbJEYvBVOOWZPJC_81I6o42Keke4BU71h7nqJp_ZP6rFOHbvqkexvv0J8Rd4Lk_Dtgy7RhVGDWBc9S_UZ3-4bOILS17c7IdT2kPksnPrV_AwX6UvrQq0
2022-06-24 16:18:01 SUCCESS
AddClientAssertionToPAREndpointParameters
Added client assertion to request
request
{
  "request": "eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.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.ZKafMfih10oNKi-msCdDQkSHeqGHi9dj1AME7S3To5H9AB2kp-EcTECrieXxSbki3icgyRWwGNZd39N7Om-n5sb_9wCSv5SZqXSyvOtghLCytdQVKNNrYyXP4YZqX9j7V8K1ytXJU9mXXRD8g_l2nUrN2jNRm9O4vVUQMMaEWsonJvYnThID7Fb-Th64eBKGrH7c7inRJvVweg82j8PTIE4fFjmfYxus0iTtOJMnZ93R5wwGyF3mKsWga-S3Zyq--XlS8MKBOcP33t0u-g6OH0L5Ju-81sa8jN01PciTtCTFtWRZNj8cgkkqxp23GC5xBoDGNJcrEAlQbEG5Otzcd-gxERXqncmS-OyuhGm3Elb5NKNma_ROdIdBICIXYcV5vxsa-Y_qOX5Rq9rsniS14m6FfkwBPh9j8z5-8t-3F-xPY0kEIL0MyUlqfum0ASBNvLNsMbmloR0_470mZoIs4kfQIdFKuGCn-8fW8LefWSHxbKBnHkmk5p2tdaRFtGq-YqkxzH7hO5gXR3LroRfA_tcL2GCTBNxqYEouRVRb7F4pNs09820s3CUQTC4qqAqHq5mH48RgPyJfxWM1eXdYTmMrGoDXayXZRKrvFFQ3xVU5LKDIK0Ir1kz0Tyr51Vp19kL6fiVk8qPUXhd5kElNAci4Iku7C25HNDoz77JwL_M",
  "client_assertion": "eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJzdWIiOiJjbGllbnQtb25lIiwiYXVkIjoiaHR0cHM6XC9cLzVhNmQ5MWM5ZDAud2VzdGV1cm9wZS5henVyZWNvbnRhaW5lci5pbzo4NDQzXC9kZXZcL29hdXRoXC9hbm9ueW1vdXMiLCJpc3MiOiJjbGllbnQtb25lIiwiZXhwIjoxNjU2MDg3NTQxLCJpYXQiOjE2NTYwODc0ODEsImp0aSI6IlFuQ242RHc1dFg3MEhWZ0l5bmxvIn0.n_Uhp8A0HrK4HYmMhvtMF6t9-fJmQIwd7-0jw7ZmtJycMReqKXWEg7AC_1ZMGHbs5R9_OtqkpWtUPZ77XEEGgt4iWhbXvvtXTmI5tr-YS4FA5VkbX3v-B-u8wHUAoWousQ-JDyAWFR9Brq3UUUe6pbr7uDAirvtYcjhtpvPt0TSUAR1M2KKqxou12TM9M45FQBqB6itcQoOEiA1xtwYFyQ83JT110MM7h-FSNG8DfCbtsKhzswS2VlNIi9LlJSJVffKwRRVD54VJUm9MmHGny9kI8iJt8GEWhPhzT2D0llVJtl8l2SYvdcyK4_v__f2U8X0gYQqTw4yEYS6OQ5RG8foUdue04Zs4nIiPSiRX3jA0IO388h-GVdJYH6pD-HhxPgP9OiKtlGhIaO0zzHugrV8WauzotuYO29cOMgKXT2uhal7Ogu1kw3vAz6HBMZOl-HkrY_c2P7Md8MD7Gcnhs3BGMx1EQ9IOUTsqRp9P1hNQXnJ2zbW3pHwAaB8PFXOtAnwmjbMAtzEly_yCxCV3XNp9xemaievav-x3COcXq4FM07Uj9gFSJ05TbJEYvBVOOWZPJC_81I6o42Keke4BU71h7nqJp_ZP6rFOHbvqkexvv0J8Rd4Lk_Dtgy7RhVGDWBc9S_UZ3-4bOILS17c7IdT2kPksnPrV_AwX6UvrQq0",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
2022-06-24 16:18:01
CallPAREndpoint
HTTP request
request_uri
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize/par
request_method
POST
request_headers
{
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "2516"
}
request_body
request=eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJpc3MiOiJjbGllbnQtb25lIiwicmVzcG9uc2VfdHlwZSI6ImNvZGUgaWRfdG9rZW4iLCJjb2RlX2NoYWxsZW5nZV9tZXRob2QiOiJTMjU2Iiwibm9uY2UiOiJ4M0VNc1ZHUUVzIiwiY2xpZW50X2lkIjoiY2xpZW50LW9uZSIsImF1ZCI6Imh0dHBzOlwvXC81YTZkOTFjOWQwLndlc3RldXJvcGUuYXp1cmVjb250YWluZXIuaW86ODQ0M1wvZGV2XC9vYXV0aFwvYW5vbnltb3VzIiwibmJmIjoxNjU2MDg3NDgxLCJzY29wZSI6Im9wZW5pZCBlbWFpbCIsImNsYWltcyI6eyJpZF90b2tlbiI6eyJhY3IiOnsidmFsdWUiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiZXNzZW50aWFsIjp0cnVlfX19LCJyZWRpcmVjdF91cmkiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvZmludGVjaFwvY2FsbGJhY2siLCJzdGF0ZSI6Ik02bE9RSEJlVmYiLCJleHAiOjE2NTYwODc3ODEsImNvZGVfY2hhbGxlbmdlIjoiWmdVakoySWRrZWtNS0xBaWY3UkpNTTJOSjQ2UFQtUVZIVmRQb09jYmxYdyJ9.ZKafMfih10oNKi-msCdDQkSHeqGHi9dj1AME7S3To5H9AB2kp-EcTECrieXxSbki3icgyRWwGNZd39N7Om-n5sb_9wCSv5SZqXSyvOtghLCytdQVKNNrYyXP4YZqX9j7V8K1ytXJU9mXXRD8g_l2nUrN2jNRm9O4vVUQMMaEWsonJvYnThID7Fb-Th64eBKGrH7c7inRJvVweg82j8PTIE4fFjmfYxus0iTtOJMnZ93R5wwGyF3mKsWga-S3Zyq--XlS8MKBOcP33t0u-g6OH0L5Ju-81sa8jN01PciTtCTFtWRZNj8cgkkqxp23GC5xBoDGNJcrEAlQbEG5Otzcd-gxERXqncmS-OyuhGm3Elb5NKNma_ROdIdBICIXYcV5vxsa-Y_qOX5Rq9rsniS14m6FfkwBPh9j8z5-8t-3F-xPY0kEIL0MyUlqfum0ASBNvLNsMbmloR0_470mZoIs4kfQIdFKuGCn-8fW8LefWSHxbKBnHkmk5p2tdaRFtGq-YqkxzH7hO5gXR3LroRfA_tcL2GCTBNxqYEouRVRb7F4pNs09820s3CUQTC4qqAqHq5mH48RgPyJfxWM1eXdYTmMrGoDXayXZRKrvFFQ3xVU5LKDIK0Ir1kz0Tyr51Vp19kL6fiVk8qPUXhd5kElNAci4Iku7C25HNDoz77JwL_M&client_assertion=eyJraWQiOiIxMDAwMSIsImFsZyI6IlBTMjU2In0.eyJzdWIiOiJjbGllbnQtb25lIiwiYXVkIjoiaHR0cHM6XC9cLzVhNmQ5MWM5ZDAud2VzdGV1cm9wZS5henVyZWNvbnRhaW5lci5pbzo4NDQzXC9kZXZcL29hdXRoXC9hbm9ueW1vdXMiLCJpc3MiOiJjbGllbnQtb25lIiwiZXhwIjoxNjU2MDg3NTQxLCJpYXQiOjE2NTYwODc0ODEsImp0aSI6IlFuQ242RHc1dFg3MEhWZ0l5bmxvIn0.n_Uhp8A0HrK4HYmMhvtMF6t9-fJmQIwd7-0jw7ZmtJycMReqKXWEg7AC_1ZMGHbs5R9_OtqkpWtUPZ77XEEGgt4iWhbXvvtXTmI5tr-YS4FA5VkbX3v-B-u8wHUAoWousQ-JDyAWFR9Brq3UUUe6pbr7uDAirvtYcjhtpvPt0TSUAR1M2KKqxou12TM9M45FQBqB6itcQoOEiA1xtwYFyQ83JT110MM7h-FSNG8DfCbtsKhzswS2VlNIi9LlJSJVffKwRRVD54VJUm9MmHGny9kI8iJt8GEWhPhzT2D0llVJtl8l2SYvdcyK4_v__f2U8X0gYQqTw4yEYS6OQ5RG8foUdue04Zs4nIiPSiRX3jA0IO388h-GVdJYH6pD-HhxPgP9OiKtlGhIaO0zzHugrV8WauzotuYO29cOMgKXT2uhal7Ogu1kw3vAz6HBMZOl-HkrY_c2P7Md8MD7Gcnhs3BGMx1EQ9IOUTsqRp9P1hNQXnJ2zbW3pHwAaB8PFXOtAnwmjbMAtzEly_yCxCV3XNp9xemaievav-x3COcXq4FM07Uj9gFSJ05TbJEYvBVOOWZPJC_81I6o42Keke4BU71h7nqJp_ZP6rFOHbvqkexvv0J8Rd4Lk_Dtgy7RhVGDWBc9S_UZ3-4bOILS17c7IdT2kPksnPrV_AwX6UvrQq0&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
2022-06-24 16:18:02 RESPONSE
CallPAREndpoint
HTTP response
response_status_code
201 CREATED
response_status_text
Created
response_headers
{
  "date": "Fri, 24 Jun 2022 16:18:02 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "content-type": "application/json",
  "content-length": "104"
}
response_body
{"expires_in":60,"request_uri":"urn:ietf:params:oauth:request_uri:6280a80b-84f7-441c-baf9-434c58d52b59"}
2022-06-24 16:18:02 SUCCESS
CallPAREndpoint
Parsed pushed authorization request endpoint response
expires_in
60
request_uri
urn:ietf:params:oauth:request_uri:6280a80b-84f7-441c-baf9-434c58d52b59
2022-06-24 16:18:02 SUCCESS
CheckPAREndpointResponse201WithNoError
pushed authorization request endpoint correct response.
2022-06-24 16:18:02 SUCCESS
CheckForRequestUriValue
Found valid request_uri
request_uri
urn:ietf:params:oauth:request_uri:6280a80b-84f7-441c-baf9-434c58d52b59
2022-06-24 16:18:02 SUCCESS
CheckForPARResponseExpiresIn
Found expires_in
expires_in
60
2022-06-24 16:18:02 SUCCESS
ExtractRequestUriFromPARResponse
Extracted the request_uri: urn:ietf:params:oauth:request_uri:6280a80b-84f7-441c-baf9-434c58d52b59
2022-06-24 16:18:02 SUCCESS
EnsureMinimumRequestUriEntropy
Calculated shannon entropy seems sufficient
actual
326.4464522520198
expected
128.0
value
urn:ietf:params:oauth:request_uri:6280a80b-84f7-441c-baf9-434c58d52b59
2022-06-24 16:18:02 SUCCESS
BuildRequestObjectByReferenceRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize?request_uri=urn:ietf:params:oauth:request_uri:6280a80b-84f7-441c-baf9-434c58d52b59&client_id=client-one&redirect_uri=https://www.certification.openid.net/test/a/fintech/callback&scope=openid%20email&response_type=code%20id_token
2022-06-24 16:18:02 REDIRECT
fapi1-advanced-final-ensure-client-assertion-in-token-endpoint
Redirecting to authorization endpoint
redirect_to
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize?request_uri=urn:ietf:params:oauth:request_uri:6280a80b-84f7-441c-baf9-434c58d52b59&client_id=client-one&redirect_uri=https://www.certification.openid.net/test/a/fintech/callback&scope=openid%20email&response_type=code%20id_token
2022-06-24 16:18:02
WebRunner
Scripted browser HTTP request
browser
goToUrl
request_method
GET
request_uri
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize?request_uri=urn:ietf:params:oauth:request_uri:6280a80b-84f7-441c-baf9-434c58d52b59&client_id=client-one&redirect_uri=https://www.certification.openid.net/test/a/fintech/callback&scope=openid%20email&response_type=code%20id_token
2022-06-24 16:18:03 INCOMING
fapi1-advanced-final-ensure-client-assertion-in-token-endpoint
Incoming HTTP request to /test/a/fintech/callback
incoming_headers
{
  "host": "www.certification.openid.net",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.72 Safari/537.36",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,*/*;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.9",
  "sec-fetch-site": "same-origin",
  "sec-fetch-mode": "navigate",
  "sec-fetch-user": "?1",
  "sec-fetch-dest": "document",
  "referer": "https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/authn/authenticate/testAuth1",
  "accept-encoding": "gzip, deflate, br",
  "accept-language": "en-US,en;q\u003d0.9",
  "origin": "https://5a6d91c9d0.westeurope.azurecontainer.io:8443",
  "cache-control": "max-age\u003d0",
  "connection": "close"
}
incoming_path
/test/a/fintech/callback
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_body_json
2022-06-24 16:18:03 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/pipVzyq9OcJVP8GvVPNe",
  "fullUrl": "https://www.certification.openid.net/test/a/fintech/implicit/pipVzyq9OcJVP8GvVPNe"
}
2022-06-24 16:18:03 OUTGOING
fapi1-advanced-final-ensure-client-assertion-in-token-endpoint
Response to HTTP request to test instance OLRYwpliM73o6xP
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/fintech/implicit/pipVzyq9OcJVP8GvVPNe, returnUrl=/log-detail.html?log=OLRYwpliM73o6xP}]
outgoing_path
callback
2022-06-24 16:18:03 RESPONSE
WebRunner
Scripted browser HTTP response
response_content
<!DOCTYPE html>
<html lang="en" xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta charset="UTF-8">
    <title>OIDF Conformance: Processing Implicit Callback</title>

    <!-- Latest compiled and minified CSS -->
    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">

    <!-- Optional theme -->
    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css" integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous">
    <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=PT+Sans">
    <link rel="stylesheet" type="text/css" href="/css/layout.css">



</head>
<body>
    <div class="pageHeader container-fluid">
        <div class="row-fluid">
            <div class="col-md-8">
                <a href="index.html"><img src="/images/openid.png"></a>
            </div>
        </div>
    </div>
    <div class="clearfix"></div>

    <div class="container-fluid">
        <div class="row">
            <div class="col-xs-12 col-md-6 col-md-offset-3 center-block center-text">
                <h1 class="text-center">Please wait...</h1>
                <h2 class="text-center">Processing response from authorization server<sup><span class="glyphicon glyphicon-question-sign" data-toggle="tooltip" title="The server should have returned its results as part of a URI fragment. This data normally stays in the browser and needs to be explicitly sent to the test framework for further processing." data-placement="right"></span></sup></h2>
                <p id="complete" class="bg-info collapse">The response has been sent to the server for processing. You may return to <a href="">the test results page.</a></p>
            </div>
        </div>
    </div>
    <!-- jQuery (necessary for Bootstrap's JavaScript plugins) -->
    <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js"></script>
    <!-- Include all compiled plugins (below), or include individual files as needed -->
    <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>

    <footer class="pageFooter">
        <span class="muted">OpenID Foundation conformance suite</span>
    </footer>

    <script type="text/javascript">
        var submitComplete = false;
        function assumeComplete() {
            if (submitComplete) {
                return;
            }
            console.log("assumeComplete workaround for https://gitlab.com/openid/conformance-suite/-/issues/766 activated - assuming post has completed as 5 seconds have elapsed")
            // add a hidden tag so that Selenium can detect we're done processing
            $('#complete').append('<span id="submission_complete" class="hidden"></span>');
        }

        $(function() {

            var hash = window.location.hash;

            var returnUrl = "\/log-detail.html?log=OLRYwpliM73o6xP";

            // workaround https://gitlab.com/openid/conformance-suite/-/issues/766 by assuming that the post completes
            // after 5 seconds
            setTimeout(function(){ assumeComplete(); }, 5000);

            $.post({
                url: "https:\/\/www.certification.openid.net\/test\/a\/fintech\/implicit\/pipVzyq9OcJVP8GvVPNe",
                data: hash,
                contentType: "text/plain", // this will be parsed on the server side, no need to wrap it
            }).always(function () {
                console.log("implicit submit complete")
                $('#complete a').attr('href', returnUrl); // provide the link only after the page is rendered.
                $('#complete').show();
                submitComplete = true;
                // add a hidden tag so that Selenium can detect we're done processing
                $('#complete').append('<span id="submission_complete" class="hidden"></span>');
            });


        });
    </script>


</body>
</html>
response_content_type
text/html
response_status_text
200-
response_status_code
200
2022-06-24 16:18:03
WebRunner
Skipping optional task due to URL mismatch
task
submit consent
browser
skip
match
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/authorize*
url
https://www.certification.openid.net/test/a/fintech/callback#id_token=eyJraWQiOiItMzgwNzQ4MTIiLCJ4NXQiOiJNUi1wR1RhODY2UmRaTGpONlZ3cmZheTkwN2ciLCJhbGciOiJQUzI1NiJ9.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.nye7RLtJ7g6ElUBgh1qITh1-lQd4WYWzMLs0yHGvDgBZpYl1b3MbBhXHclnJ0D-EQGYPJLbwiIvajMIZHdG5wnV0-v21o1Mfndum-qllr0K1bavflB68wBr1tS11pjMDssVZC9ysAFuZrk5fbrDmqRBc9DG0jxNNcmz56flzQuMK6OPFBKFbio8OfmCfW7cn2sgVC0dUP-D140ANG5_IqNg94nP4eCa6twWdkbd8G579Ls1I3xuQcOUrbkIGlr1FrVmwK2poO2YL3E3eeLlMXI9WHToUc1dy-K5jP-PaSc3qJVEBqf2hgLkyjO4urWxd3fqphttwIJnJ3xMAFpbyfQ&code=h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1&state=M6lOQHBeVf
commands
[
  [
    "click",
    "name",
    "submit_consent"
  ]
]
2022-06-24 16:18:03 INFO
WebRunner
Waiting
regexp
seconds
10
task
Complete with redirect to RP
browser
wait
action
element_type
id
url
https://www.certification.openid.net/test/a/fintech/callback#id_token=eyJraWQiOiItMzgwNzQ4MTIiLCJ4NXQiOiJNUi1wR1RhODY2UmRaTGpONlZ3cmZheTkwN2ciLCJhbGciOiJQUzI1NiJ9.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.nye7RLtJ7g6ElUBgh1qITh1-lQd4WYWzMLs0yHGvDgBZpYl1b3MbBhXHclnJ0D-EQGYPJLbwiIvajMIZHdG5wnV0-v21o1Mfndum-qllr0K1bavflB68wBr1tS11pjMDssVZC9ysAFuZrk5fbrDmqRBc9DG0jxNNcmz56flzQuMK6OPFBKFbio8OfmCfW7cn2sgVC0dUP-D140ANG5_IqNg94nP4eCa6twWdkbd8G579Ls1I3xuQcOUrbkIGlr1FrVmwK2poO2YL3E3eeLlMXI9WHToUc1dy-K5jP-PaSc3qJVEBqf2hgLkyjO4urWxd3fqphttwIJnJ3xMAFpbyfQ&code=h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1&state=M6lOQHBeVf
target
submission_complete
2022-06-24 16:18:03 INCOMING
fapi1-advanced-final-ensure-client-assertion-in-token-endpoint
Incoming HTTP request to /test/a/fintech/implicit/pipVzyq9OcJVP8GvVPNe
incoming_headers
{
  "host": "www.certification.openid.net",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.72 Safari/537.36",
  "accept": "*/*",
  "sec-fetch-site": "same-origin",
  "sec-fetch-mode": "navigate",
  "sec-fetch-user": "?1",
  "sec-fetch-dest": "document",
  "referer": "https://www.certification.openid.net/test/a/fintech/callback",
  "accept-encoding": "gzip, deflate, br",
  "accept-language": "en-US,en;q\u003d0.9",
  "cookie": "JSESSIONID\u003d96BF961994E5F616DB0510E83B9FB44A",
  "x-requested-with": "XMLHttpRequest",
  "content-type": "text/plain",
  "connection": "close",
  "content-length": "1224"
}
incoming_path
/test/a/fintech/implicit/pipVzyq9OcJVP8GvVPNe
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
#id_token=eyJraWQiOiItMzgwNzQ4MTIiLCJ4NXQiOiJNUi1wR1RhODY2UmRaTGpONlZ3cmZheTkwN2ciLCJhbGciOiJQUzI1NiJ9.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.nye7RLtJ7g6ElUBgh1qITh1-lQd4WYWzMLs0yHGvDgBZpYl1b3MbBhXHclnJ0D-EQGYPJLbwiIvajMIZHdG5wnV0-v21o1Mfndum-qllr0K1bavflB68wBr1tS11pjMDssVZC9ysAFuZrk5fbrDmqRBc9DG0jxNNcmz56flzQuMK6OPFBKFbio8OfmCfW7cn2sgVC0dUP-D140ANG5_IqNg94nP4eCa6twWdkbd8G579Ls1I3xuQcOUrbkIGlr1FrVmwK2poO2YL3E3eeLlMXI9WHToUc1dy-K5jP-PaSc3qJVEBqf2hgLkyjO4urWxd3fqphttwIJnJ3xMAFpbyfQ&code=h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1&state=M6lOQHBeVf
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES256-GCM-SHA384
incoming_body_json
2022-06-24 16:18:03 OUTGOING
fapi1-advanced-final-ensure-client-assertion-in-token-endpoint
Response to HTTP request to test instance OLRYwpliM73o6xP
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/pipVzyq9OcJVP8GvVPNe
2022-06-24 16:18:03
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "id_token",
    "value": "eyJraWQiOiItMzgwNzQ4MTIiLCJ4NXQiOiJNUi1wR1RhODY2UmRaTGpONlZ3cmZheTkwN2ciLCJhbGciOiJQUzI1NiJ9.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.nye7RLtJ7g6ElUBgh1qITh1-lQd4WYWzMLs0yHGvDgBZpYl1b3MbBhXHclnJ0D-EQGYPJLbwiIvajMIZHdG5wnV0-v21o1Mfndum-qllr0K1bavflB68wBr1tS11pjMDssVZC9ysAFuZrk5fbrDmqRBc9DG0jxNNcmz56flzQuMK6OPFBKFbio8OfmCfW7cn2sgVC0dUP-D140ANG5_IqNg94nP4eCa6twWdkbd8G579Ls1I3xuQcOUrbkIGlr1FrVmwK2poO2YL3E3eeLlMXI9WHToUc1dy-K5jP-PaSc3qJVEBqf2hgLkyjO4urWxd3fqphttwIJnJ3xMAFpbyfQ"
  },
  {
    "name": "code",
    "value": "h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1"
  },
  {
    "name": "state",
    "value": "M6lOQHBeVf"
  }
]
2022-06-24 16:18:03 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
id_token
eyJraWQiOiItMzgwNzQ4MTIiLCJ4NXQiOiJNUi1wR1RhODY2UmRaTGpONlZ3cmZheTkwN2ciLCJhbGciOiJQUzI1NiJ9.eyJleHAiOjE2NTYwOTEwODMsIm5iZiI6MTY1NjA4NzQ4MywianRpIjoiN2IzZjExNGItNjc2NC00ZjJiLThmNjgtZGE0YjI1YzBlNDVlIiwiaXNzIjoiaHR0cHM6Ly81YTZkOTFjOWQwLndlc3RldXJvcGUuYXp1cmVjb250YWluZXIuaW86ODQ0My9kZXYvb2F1dGgvYW5vbnltb3VzIiwiYXVkIjoiY2xpZW50LW9uZSIsInN1YiI6ImxhcnNkb2UiLCJhdXRoX3RpbWUiOjE2NTYwODc0ODIsImlhdCI6MTY1NjA4NzQ4MywicHVycG9zZSI6ImlkIiwiYWNyIjoidXJuOm1hY2U6aW5jb21tb246aWFwOnNpbHZlciIsImNfaGFzaCI6IkVrbW1yeW5wLXpYVGgtR2tvd3Zyb3ciLCJkZWxlZ2F0aW9uX2lkIjoiMDY5MDA0YzgtMjEzYS00MjU4LWEwNDAtMTRlMTQ3ZWZjMDcyIiwic19oYXNoIjoieDBSYlF2ZUc1LUtrTklnMXdReldIZyIsImVtYWlsX3ZlcmlmaWVkIjpmYWxzZSwiYXpwIjoiY2xpZW50LW9uZSIsImFtciI6InVybjptYWNlOmluY29tbW9uOmlhcDpzaWx2ZXIiLCJub25jZSI6IngzRU1zVkdRRXMiLCJlbWFpbCI6ImxhcnMuZG9lQGV4YW1wbGUuY29tIn0.nye7RLtJ7g6ElUBgh1qITh1-lQd4WYWzMLs0yHGvDgBZpYl1b3MbBhXHclnJ0D-EQGYPJLbwiIvajMIZHdG5wnV0-v21o1Mfndum-qllr0K1bavflB68wBr1tS11pjMDssVZC9ysAFuZrk5fbrDmqRBc9DG0jxNNcmz56flzQuMK6OPFBKFbio8OfmCfW7cn2sgVC0dUP-D140ANG5_IqNg94nP4eCa6twWdkbd8G579Ls1I3xuQcOUrbkIGlr1FrVmwK2poO2YL3E3eeLlMXI9WHToUc1dy-K5jP-PaSc3qJVEBqf2hgLkyjO4urWxd3fqphttwIJnJ3xMAFpbyfQ
code
h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1
state
M6lOQHBeVf
2022-06-24 16:18:03 REDIRECT-IN
fapi1-advanced-final-ensure-client-assertion-in-token-endpoint
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.72 Safari/537.36",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,*/*;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.9",
  "sec-fetch-site": "same-origin",
  "sec-fetch-mode": "navigate",
  "sec-fetch-user": "?1",
  "sec-fetch-dest": "document",
  "referer": "https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/authn/authenticate/testAuth1",
  "accept-encoding": "gzip, deflate, br",
  "accept-language": "en-US,en;q\u003d0.9",
  "origin": "https://5a6d91c9d0.westeurope.azurecontainer.io:8443",
  "cache-control": "max-age\u003d0",
  "x-ssl-cipher": "ECDHE-RSA-AES256-GCM-SHA384",
  "x-ssl-protocol": "TLSv1.2",
  "x-forwarded-proto": "https",
  "x-forwarded-port": "443",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "id_token": "eyJraWQiOiItMzgwNzQ4MTIiLCJ4NXQiOiJNUi1wR1RhODY2UmRaTGpONlZ3cmZheTkwN2ciLCJhbGciOiJQUzI1NiJ9.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.nye7RLtJ7g6ElUBgh1qITh1-lQd4WYWzMLs0yHGvDgBZpYl1b3MbBhXHclnJ0D-EQGYPJLbwiIvajMIZHdG5wnV0-v21o1Mfndum-qllr0K1bavflB68wBr1tS11pjMDssVZC9ysAFuZrk5fbrDmqRBc9DG0jxNNcmz56flzQuMK6OPFBKFbio8OfmCfW7cn2sgVC0dUP-D140ANG5_IqNg94nP4eCa6twWdkbd8G579Ls1I3xuQcOUrbkIGlr1FrVmwK2poO2YL3E3eeLlMXI9WHToUc1dy-K5jP-PaSc3qJVEBqf2hgLkyjO4urWxd3fqphttwIJnJ3xMAFpbyfQ",
  "code": "h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1",
  "state": "M6lOQHBeVf"
}
post_body
Verify authorization endpoint response
2022-06-24 16:18:03 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2022-06-24 16:18:03 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2022-06-24 16:18:03 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2022-06-24 16:18:03 SUCCESS
RejectStateInUrlQueryForHybridFlow
state is correctly not present in URL query returned from authorization endpoint (as in the hybrid flow it must be returned in the URL fragment/hash only)
2022-06-24 16:18:03 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2022-06-24 16:18:03 SUCCESS
ValidateSuccessfulHybridResponseFromAuthorizationEndpoint
authorization endpoint response does not include unexpected parameters
id_token
eyJraWQiOiItMzgwNzQ4MTIiLCJ4NXQiOiJNUi1wR1RhODY2UmRaTGpONlZ3cmZheTkwN2ciLCJhbGciOiJQUzI1NiJ9.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.nye7RLtJ7g6ElUBgh1qITh1-lQd4WYWzMLs0yHGvDgBZpYl1b3MbBhXHclnJ0D-EQGYPJLbwiIvajMIZHdG5wnV0-v21o1Mfndum-qllr0K1bavflB68wBr1tS11pjMDssVZC9ysAFuZrk5fbrDmqRBc9DG0jxNNcmz56flzQuMK6OPFBKFbio8OfmCfW7cn2sgVC0dUP-D140ANG5_IqNg94nP4eCa6twWdkbd8G579Ls1I3xuQcOUrbkIGlr1FrVmwK2poO2YL3E3eeLlMXI9WHToUc1dy-K5jP-PaSc3qJVEBqf2hgLkyjO4urWxd3fqphttwIJnJ3xMAFpbyfQ
code
h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1
state
M6lOQHBeVf
2022-06-24 16:18:03 SUCCESS
CheckStateInAuthorizationResponse
State in response correctly returned
state
M6lOQHBeVf
2022-06-24 16:18:03
ValidateIssInAuthorizationResponse
No 'iss' value in authorization response.
2022-06-24 16:18:03 SUCCESS
ExtractAuthorizationCodeFromAuthorizationResponse
Found authorization code
code
h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1
2022-06-24 16:18:03 SUCCESS
EnsureMinimumAuthorizationCodeLength
Authorization code is of sufficient length
actual
256
required
128
2022-06-24 16:18:03 SUCCESS
EnsureMinimumAuthorizationCodeEntropy
Calculated shannon entropy seems sufficient
actual
152.0
expected
96.0
value
h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1
2022-06-24 16:18:03 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJraWQiOiItMzgwNzQ4MTIiLCJ4NXQiOiJNUi1wR1RhODY2UmRaTGpONlZ3cmZheTkwN2ciLCJhbGciOiJQUzI1NiJ9.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.nye7RLtJ7g6ElUBgh1qITh1-lQd4WYWzMLs0yHGvDgBZpYl1b3MbBhXHclnJ0D-EQGYPJLbwiIvajMIZHdG5wnV0-v21o1Mfndum-qllr0K1bavflB68wBr1tS11pjMDssVZC9ysAFuZrk5fbrDmqRBc9DG0jxNNcmz56flzQuMK6OPFBKFbio8OfmCfW7cn2sgVC0dUP-D140ANG5_IqNg94nP4eCa6twWdkbd8G579Ls1I3xuQcOUrbkIGlr1FrVmwK2poO2YL3E3eeLlMXI9WHToUc1dy-K5jP-PaSc3qJVEBqf2hgLkyjO4urWxd3fqphttwIJnJ3xMAFpbyfQ
header
{
  "x5t": "MR-pGTa866RdZLjN6Vwrfay907g",
  "kid": "-38074812",
  "alg": "PS256"
}
claims
{
  "sub": "larsdoe",
  "email_verified": false,
  "purpose": "id",
  "amr": "urn:mace:incommon:iap:silver",
  "iss": "https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/anonymous",
  "nonce": "x3EMsVGQEs",
  "aud": "client-one",
  "acr": "urn:mace:incommon:iap:silver",
  "c_hash": "Ekmmrynp-zXTh-Gkowvrow",
  "delegation_id": "069004c8-213a-4258-a040-14e147efc072",
  "s_hash": "x0RbQveG5-KkNIg1wQzWHg",
  "nbf": 1656087483,
  "azp": "client-one",
  "auth_time": 1656087482,
  "exp": 1656091083,
  "iat": 1656087483,
  "jti": "7b3f114b-6764-4f2b-8f68-da4b25c0e45e",
  "email": "lars.doe@example.com"
}
2022-06-24 16:18:03 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2022-06-24 16:18:03
ValidateIdTokenStandardClaims
sub is a string with content
2022-06-24 16:18:03
ValidateIdTokenStandardClaims
email_verified is a boolean
2022-06-24 16:18:03
ValidateIdTokenStandardClaims
Skipping unknown claim: purpose
2022-06-24 16:18:03
ValidateIdTokenStandardClaims
Skipping unknown claim: delegation_id
2022-06-24 16:18:03
ValidateIdTokenStandardClaims
Skipping unknown claim: nbf
2022-06-24 16:18:03
ValidateIdTokenStandardClaims
Skipping unknown claim: jti
2022-06-24 16:18:03
ValidateIdTokenStandardClaims
email is a string with content
2022-06-24 16:18:03 SUCCESS
ValidateIdTokenStandardClaims
id_token claims are valid
2022-06-24 16:18:03 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
x3EMsVGQEs
2022-06-24 16:18:03 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
acr value in id_token is (one of) the requested values
actual
urn:mace:incommon:iap:silver
requested
[
  "urn:mace:incommon:iap:silver"
]
2022-06-24 16:18:03 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJraWQiOiItMzgwNzQ4MTIiLCJ4NXQiOiJNUi1wR1RhODY2UmRaTGpONlZ3cmZheTkwN2ciLCJhbGciOiJQUzI1NiJ9.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.nye7RLtJ7g6ElUBgh1qITh1-lQd4WYWzMLs0yHGvDgBZpYl1b3MbBhXHclnJ0D-EQGYPJLbwiIvajMIZHdG5wnV0-v21o1Mfndum-qllr0K1bavflB68wBr1tS11pjMDssVZC9ysAFuZrk5fbrDmqRBc9DG0jxNNcmz56flzQuMK6OPFBKFbio8OfmCfW7cn2sgVC0dUP-D140ANG5_IqNg94nP4eCa6twWdkbd8G579Ls1I3xuQcOUrbkIGlr1FrVmwK2poO2YL3E3eeLlMXI9WHToUc1dy-K5jP-PaSc3qJVEBqf2hgLkyjO4urWxd3fqphttwIJnJ3xMAFpbyfQ
2022-06-24 16:18:03 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJraWQiOiItMzgwNzQ4MTIiLCJ4NXQiOiJNUi1wR1RhODY2UmRaTGpONlZ3cmZheTkwN2ciLCJhbGciOiJQUzI1NiJ9.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.nye7RLtJ7g6ElUBgh1qITh1-lQd4WYWzMLs0yHGvDgBZpYl1b3MbBhXHclnJ0D-EQGYPJLbwiIvajMIZHdG5wnV0-v21o1Mfndum-qllr0K1bavflB68wBr1tS11pjMDssVZC9ysAFuZrk5fbrDmqRBc9DG0jxNNcmz56flzQuMK6OPFBKFbio8OfmCfW7cn2sgVC0dUP-D140ANG5_IqNg94nP4eCa6twWdkbd8G579Ls1I3xuQcOUrbkIGlr1FrVmwK2poO2YL3E3eeLlMXI9WHToUc1dy-K5jP-PaSc3qJVEBqf2hgLkyjO4urWxd3fqphttwIJnJ3xMAFpbyfQ
2022-06-24 16:18:03 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
larsdoe
2022-06-24 16:18:03
EnsureIdTokenUpdatedAtValid
id_token response does not contain 'updated_at'
2022-06-24 16:18:03 INFO
ValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2022-06-24 16:18:03 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
-38074812
2022-06-24 16:18:03 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "PS256",
  "ES256"
]
alg
PS256
2022-06-24 16:18:03 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2022-06-24 16:18:03 SUCCESS
ExtractSHash
Extracted s_hash from ID Token
s_hash
x0RbQveG5-KkNIg1wQzWHg
alg
PS256
2022-06-24 16:18:03 SUCCESS
ValidateSHash
s_hash validated successfully
expected_hash
x0RbQveG5-KkNIg1wQzWHg
unhashed_value
M6lOQHBeVf
id_token_hash
x0RbQveG5-KkNIg1wQzWHg
2022-06-24 16:18:03 SUCCESS
ExtractCHash
Extracted c_hash from ID Token
c_hash
Ekmmrynp-zXTh-Gkowvrow
alg
PS256
2022-06-24 16:18:03 SUCCESS
ValidateCHash
c_hash validated successfully
expected_hash
Ekmmrynp-zXTh-Gkowvrow
unhashed_value
h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1
id_token_hash
Ekmmrynp-zXTh-Gkowvrow
2022-06-24 16:18:03 SUCCESS
CreateTokenEndpointRequestForAuthorizationCodeGrant
Created token endpoint request
grant_type
authorization_code
code
h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1
redirect_uri
https://www.certification.openid.net/test/a/fintech/callback
2022-06-24 16:18:03
AddClientIdToTokenEndpointRequest
grant_type
authorization_code
code
h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1
redirect_uri
https://www.certification.openid.net/test/a/fintech/callback
client_id
client-one
2022-06-24 16:18:03
AddCodeVerifierToTokenEndpointRequest
grant_type
authorization_code
code
h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1
redirect_uri
https://www.certification.openid.net/test/a/fintech/callback
client_id
client-one
code_verifier
o_6IEfsYg_qwNExcBbDg2_CuDzHAqiaZW5_5WURC8fbeISwxcdaCGwAoTCNySfKkw3zIQ_btF3_cGOAJQiaJoS0A7YiLlYAdv47DJvBDq4G5WQ5VLUHQtL2YCU~n6pDa
2022-06-24 16:18:03
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://5a6d91c9d0.westeurope.azurecontainer.io:8443/dev/oauth/token
request_method
POST
request_headers
{
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "321"
}
request_body
grant_type=authorization_code&code=h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1&redirect_uri=https%3A%2F%2Fwww.certification.openid.net%2Ftest%2Fa%2Ffintech%2Fcallback&client_id=client-one&code_verifier=o_6IEfsYg_qwNExcBbDg2_CuDzHAqiaZW5_5WURC8fbeISwxcdaCGwAoTCNySfKkw3zIQ_btF3_cGOAJQiaJoS0A7YiLlYAdv47DJvBDq4G5WQ5VLUHQtL2YCU%7En6pDa
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d",
  "ca": "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\u003d\u003d"
}
2022-06-24 16:18:03 INFO
WebRunner
Completed processing of webpage
task
Complete with redirect to RP
browser
complete
response_status_text
200-
match
https://www.certification.openid.net*
url
https://www.certification.openid.net/test/a/fintech/callback#id_token=eyJraWQiOiItMzgwNzQ4MTIiLCJ4NXQiOiJNUi1wR1RhODY2UmRaTGpONlZ3cmZheTkwN2ciLCJhbGciOiJQUzI1NiJ9.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.nye7RLtJ7g6ElUBgh1qITh1-lQd4WYWzMLs0yHGvDgBZpYl1b3MbBhXHclnJ0D-EQGYPJLbwiIvajMIZHdG5wnV0-v21o1Mfndum-qllr0K1bavflB68wBr1tS11pjMDssVZC9ysAFuZrk5fbrDmqRBc9DG0jxNNcmz56flzQuMK6OPFBKFbio8OfmCfW7cn2sgVC0dUP-D140ANG5_IqNg94nP4eCa6twWdkbd8G579Ls1I3xuQcOUrbkIGlr1FrVmwK2poO2YL3E3eeLlMXI9WHToUc1dy-K5jP-PaSc3qJVEBqf2hgLkyjO4urWxd3fqphttwIJnJ3xMAFpbyfQ&code=h0ApzRV2TmKCBxgtkhd8ejTZEDuvxqj1&state=M6lOQHBeVf
response_status_code
200
2022-06-24 16:18:04 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
401 UNAUTHORIZED
response_status_text
Unauthorized
response_headers
{
  "date": "Fri, 24 Jun 2022 16:18:04 GMT",
  "x-content-type-options": "nosniff",
  "x-xss-protection": "1; mode\u003dblock",
  "content-security-policy": "frame-ancestors \u0027none\u0027",
  "x-frame-options": "DENY",
  "cache-control": "private, no-cache, no-store, must-revalidate",
  "pragma": "no-cache",
  "expires": "Thu, 01 Jan 1970 00:00:00 GMT",
  "www-authenticate": "Basic realm\u003doauth-dev",
  "content-type": "application/json",
  "content-length": "123"
}
response_body
{"error":"invalid_client","error_description":"Field \u0027client_assertion_type\u0027 is missing or has unsupported type"}
2022-06-24 16:18:04 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
invalid_client
error_description
Field 'client_assertion_type' is missing or has unsupported type
2022-06-24 16:18:04 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2022-06-24 16:18:04 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
invalid_client
2022-06-24 16:18:04 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
Field 'client_assertion_type' is missing or has unsupported type
2022-06-24 16:18:04 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
Field 'client_assertion_type' is missing or has unsupported type
2022-06-24 16:18:04 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2022-06-24 16:18:04 SUCCESS
CheckTokenEndpointHttpStatusIs400Allowing401ForInvalidClientError
Token endpoint http status code was 401 for error 'invalid_client'
2022-06-24 16:18:04 SUCCESS
CheckErrorFromTokenEndpointResponseErrorInvalidClientOrInvalidRequest
Token Endpoint response error returned expected 'error' of 'invalid_client'
expected
[
  "invalid_request",
  "invalid_client"
]
2022-06-24 16:18:04 FINISHED
fapi1-advanced-final-ensure-client-assertion-in-token-endpoint
Test has run to completion
testmodule_result
PASSED
2022-06-24 16:18:05
TEST-RUNNER
Alias has now been claimed by another test
alias
fintech
new_test_id
sYXPCgK60fKnTGj
Test Results