Test Name | fapi1-advanced-final-client-brazildcr-happypath-test |
---|---|
Variant | client_auth_type=private_key_jwt, fapi_auth_request_method=pushed, fapi_client_type=oidc, fapi_profile=openbanking_brazil, fapi_response_mode=plain_response |
Test ID | jwcAsVfPTiIGuT4 https://www.certification.openid.net/log-detail.html?public=true&log=jwcAsVfPTiIGuT4 |
Created | 2022-09-26T17:04:01.870680Z |
Description | Banco do Brasil - FAPI1 Advanced Final - Relying Party (Client) - Accounts - Private Key |
Test Version | 5.0.4 |
Test Owner | 10230557 https://gitlab.com |
Plan ID | 1RL7xEnN63MFF https://www.certification.openid.net/plan-detail.html?public=true&plan=1RL7xEnN63MFF |
Exported From | https://www.certification.openid.net |
Exported By | 10230557 https://gitlab.com |
Suite Version | 5.0.4 |
Exported | 2022-09-26 19:27:06 (UTC) |
Status: FINISHED Result: PASSED |
SUCCESS 164 FAILURE 0 WARNING 0 REVIEW 0 INFO 14 |
2022-09-26 17:04:01 |
INFO
|
TEST-RUNNER
Test instance jwcAsVfPTiIGuT4 created
|
||||||||||||||
|
2022-09-26 17:04:01 |
SUCCESS
|
GenerateServerConfigurationMTLS
Created server configuration
|
||||||
|
2022-09-26 17:04:01 |
SUCCESS
|
LoadServerJWKs
Parsed public and private JWK sets
|
||||||
|
2022-09-26 17:04:01 | SUCCESS |
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
|
|
2022-09-26 17:04:01 |
|
SetServerSigningAlgToPS256
Successfully set signing algorithm to PS256
|
|
2022-09-26 17:04:01 |
|
FAPIBrazilSetGrantTypesSupportedInServerConfiguration
Successfully set grant_types_supported
|
||
|
2022-09-26 17:04:01 |
|
AddClaimsParameterSupportedTrueToServerConfiguration
Successfully added claims_parameter_supported to server configuration
|
||
|
2022-09-26 17:04:01 |
|
FAPIBrazilAddBrazilSpecificSettingsToServerConfiguration
Added open banking Brazil specific server settings
|
||
|
2022-09-26 17:04:01 |
SUCCESS
|
AddIdTokenSigningAlgsToServerConfiguration
Added 'id_token_signing_alg_values_supported' to server metadata as 'alg' from server jwks
|
||
|
2022-09-26 17:04:01 | SUCCESS |
AddTlsCertificateBoundAccessTokensTrueSupportedToServerConfiguration
Added 'tls_client_certificate_bound_access_tokens' as 'true' to server metadata
|
|
2022-09-26 17:04:01 |
|
SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly
Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration
|
||
|
2022-09-26 17:04:01 |
|
AddPushedAuthorizationRequestEndpointToServerConfig
Added pushed_authorization_request_endpoint to server configuration
|
||
|
2022-09-26 17:04:01 |
|
AddRequirePushedAuthorizationRequestsToServerConfig
Added require_pushed_authorization_requests to server configuration
|
||
|
2022-09-26 17:04:01 | SUCCESS |
AddResponseTypeCodeIdTokenToServerConfiguration
Added code id_token as response type supported
|
||
|
2022-09-26 17:04:01 |
SUCCESS
|
FAPIBrazilAddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
|
||
|
2022-09-26 17:04:01 |
SUCCESS
|
CheckServerConfiguration
Found required server configuration keys
|
||
|
2022-09-26 17:04:01 | SUCCESS |
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
|
||
|
2022-09-26 17:04:01 |
SUCCESS
|
LoadUserInfo
Added user information
|
||
|
2022-09-26 17:04:01 |
SUCCESS
|
FAPIBrazilCheckDirectoryKeystore
Directory keystore matches the Brazil directory.
|
||
|
2022-09-26 17:04:01 |
|
fapi1-advanced-final-client-brazildcr-happypath-test
Setup Done
|
|
2022-09-26 17:04:04 |
INCOMING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Incoming HTTP request to /test/a/bancodobrasil-fapi1adv-obb-rp-accounts-private-key/.well-known/openid-configuration
|
||||||||||||||||||||||
|
2022-09-26 17:04:04 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
|
||||
|
2022-09-26 17:04:04 |
OUTGOING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Response to HTTP request to test instance jwcAsVfPTiIGuT4
|
||||||||
|
2022-09-26 17:04:05 |
INCOMING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Incoming HTTP request to /test/a/bancodobrasil-fapi1adv-obb-rp-accounts-private-key/jwks
|
||||||||||||||||||||||
|
2022-09-26 17:04:05 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
|
||||
|
2022-09-26 17:04:05 |
OUTGOING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Response to HTTP request to test instance jwcAsVfPTiIGuT4
|
||||||||
|
2022-09-26 17:04:16 |
INCOMING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Incoming HTTP request to /test-mtls/a/bancodobrasil-fapi1adv-obb-rp-accounts-private-key/register
|
||||||||||||||||||||||
|
2022-09-26 17:04:16 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
|
||||
|
Registration endpoint |
2022-09-26 17:04:16 |
SUCCESS
|
OIDCCExtractDynamicRegistrationRequest
Extracted dynamic client registration request
|
||
|
2022-09-26 17:04:16 |
SUCCESS
|
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
|
||
|
2022-09-26 17:04:16 | SUCCESS |
CheckForClientCertificate
Found client certificate
|
|
2022-09-26 17:04:16 |
SUCCESS
|
EnsureClientCertificateMatches
Presented certificate matches registered certificate
|
||
|
2022-09-26 17:04:16 |
SUCCESS
|
FAPIBrazilExtractSSAFromDynamicRegistrationRequest
Extracted software statement assertion from dynamic client registration request
|
||
|
2022-09-26 17:04:16 |
|
FAPIBrazilFetchDirectorySSAJwks
Fetching directory jwks
|
||
|
2022-09-26 17:04:16 |
|
FAPIBrazilFetchDirectorySSAJwks
HTTP request
|
||||||||
|
2022-09-26 17:04:16 |
RESPONSE
|
FAPIBrazilFetchDirectorySSAJwks
HTTP response
|
||||||||
|
2022-09-26 17:04:16 |
|
FAPIBrazilFetchDirectorySSAJwks
Found JWK set string
|
||
|
2022-09-26 17:04:16 |
SUCCESS
|
FAPIBrazilFetchDirectorySSAJwks
Downloaded and added directory SSA JWK set to environment
|
||
|
2022-09-26 17:04:17 |
SUCCESS
|
FAPIBrazilValidateSSASignature
software statement signature validated
|
||
|
2022-09-26 17:04:17 |
SUCCESS
|
FAPIBrazilExtractSoftwareStatement
Parsed software_statement
|
||
|
2022-09-26 17:04:17 | SUCCESS |
ValidateClientGrantTypes
grant_types match response_types
|
||||
|
2022-09-26 17:04:17 | SUCCESS |
OIDCCValidateClientRedirectUris
Valid redirect_uri(s) provided in registration request
|
||
|
2022-09-26 17:04:17 | SUCCESS |
ValidateClientLogoUris
Client does not contain any logo_uri
|
|
2022-09-26 17:04:17 | SUCCESS |
ValidateClientUris
Client does not contain any client_uri
|
|
2022-09-26 17:04:17 | SUCCESS |
ValidateClientPolicyUris
Client does not contain any policy_uri
|
|
2022-09-26 17:04:17 | SUCCESS |
ValidateClientTosUris
Client does not contain any tos_uri
|
|
2022-09-26 17:04:17 | SUCCESS |
ValidateClientSubjectType
A subject_type was not provided
|
|
2022-09-26 17:04:17 | SUCCESS |
FAPIBrazilValidateIdTokenSignedResponseAlg
id_token_signed_response_alg is PS256
|
|
2022-09-26 17:04:17 | SUCCESS |
EnsureIdTokenEncryptedResponseAlgIsSetIfEncIsSet
id_token_encrypted_response_enc is not set
|
|
2022-09-26 17:04:17 | INFO |
ValidateUserinfoSignedResponseAlg
Skipped evaluation due to missing required element: client userinfo_signed_response_alg
|
||||||
|
2022-09-26 17:04:17 | INFO |
FAPIBrazilValidateUserinfoSignedResponseAlg
Skipped evaluation due to missing required element: client userinfo_signed_response_alg
|
||||||
|
2022-09-26 17:04:17 | SUCCESS |
EnsureUserinfoEncryptedResponseAlgIsSetIfEncIsSet
userinfo_encrypted_response_enc is not set
|
|
2022-09-26 17:04:17 | SUCCESS |
FAPIBrazilValidateRequestObjectSigningAlg
request_object_signing_alg is PS256
|
|
2022-09-26 17:04:17 | SUCCESS |
EnsureRequestObjectEncryptionAlgIsSetIfEncIsSet
request_object_encryption_alg is set
|
||||
|
2022-09-26 17:04:17 | INFO |
FAPIBrazilValidateTokenEndpointAuthSigningAlg
Skipped evaluation due to missing required element: client token_endpoint_auth_signing_alg
|
||||||
|
2022-09-26 17:04:17 | SUCCESS |
ValidateDefaultMaxAge
default_max_age is not set
|
|
2022-09-26 17:04:17 | INFO |
ValidateRequireAuthTime
Skipped evaluation due to missing required element: client require_auth_time
|
||||||
|
2022-09-26 17:04:17 | INFO |
FAPIBrazilValidateDefaultAcrValues
Skipped evaluation due to missing required element: client default_acr_values
|
||||||
|
2022-09-26 17:04:17 | INFO |
ValidateInitiateLoginUri
Skipped evaluation due to missing required element: client initiate_login_uri
|
||||||
|
2022-09-26 17:04:17 | SUCCESS |
FAPIBrazilValidateSoftwareStatementIat
Software statement was issued (iat) not more than 5 minutes ago
|
||||
|
2022-09-26 17:04:17 | SUCCESS |
FAPIBrazilEnsureRegistrationRequestDoesNotIncludeJwks
Registration request does not contain a jwks
|
|
2022-09-26 17:04:17 | SUCCESS |
FAPIBrazilEnsureJwksUriMatchesSoftwareJwksUri
jwks_uri matches software_jwks_uri
|
|
2022-09-26 17:04:17 | SUCCESS |
FAPIBrazilEnsureRedirectUrisMatchSoftwareRedirectUris
redirect_uris match or contain a sub set of software_redirect_uris
|
|
2022-09-26 17:04:17 | SUCCESS |
FAPIBrazilValidateClientAuthenticationMethods
token_endpoint_auth_method is valid
|
||
|
2022-09-26 17:04:17 | SUCCESS |
FAPIBrazilEnsureClientMetadataMatchSoftwareStatement
Client metadata matches software statement
|
|
2022-09-26 17:04:17 |
|
FAPIBrazilEnsureTlsClientAuthSubjectDnOnly
token_endpoint_auth_method is not tls_client_auth
|
|
2022-09-26 17:04:17 | SUCCESS |
GenerateRegistrationAccessToken
Generated registration access token
|
||
|
2022-09-26 17:04:17 |
|
CreateRandomRegistrationClientUri
Created random URL for registration_client_uri
|
||||
|
2022-09-26 17:04:17 |
SUCCESS
|
FAPIBrazilRegisterClient
Registered client
|
||
|
2022-09-26 17:04:17 |
|
FetchClientKeys
Fetching client keys
|
||
|
2022-09-26 17:04:17 |
|
FetchClientKeys
HTTP request
|
||||||||
|
2022-09-26 17:04:17 |
RESPONSE
|
FetchClientKeys
HTTP response
|
||||||||
|
2022-09-26 17:04:17 |
|
FetchClientKeys
Found JWK set string
|
||
|
2022-09-26 17:04:17 |
SUCCESS
|
FetchClientKeys
Downloaded and added client JWK set to client
|
||
|
2022-09-26 17:04:17 | SUCCESS |
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
|
|
2022-09-26 17:04:17 |
SUCCESS
|
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
|
||||
|
2022-09-26 17:04:17 | SUCCESS |
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
|
||
|
2022-09-26 17:04:17 |
SUCCESS
|
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
|
|
2022-09-26 17:04:17 | SUCCESS |
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
|
||
|
2022-09-26 17:04:17 |
OUTGOING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Response to HTTP request to test instance jwcAsVfPTiIGuT4
|
||||||||
|
2022-09-26 17:04:18 |
INCOMING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Incoming HTTP request to /test-mtls/a/bancodobrasil-fapi1adv-obb-rp-accounts-private-key/token
|
||||||||||||||||||||||
|
2022-09-26 17:04:18 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
|
||||
|
Token endpoint |
2022-09-26 17:04:18 |
|
CheckClientIdMatchesOnTokenRequestIfPresent
client_id not present, nothing to check
|
|
2022-09-26 17:04:18 |
SUCCESS
|
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
|
||
|
2022-09-26 17:04:18 | SUCCESS |
CheckForClientCertificate
Found client certificate
|
|
2022-09-26 17:04:18 |
SUCCESS
|
EnsureClientCertificateMatches
Presented certificate matches registered certificate
|
||
|
2022-09-26 17:04:18 | SUCCESS |
ExtractClientAssertion
Parsed client assertion
|
||
|
2022-09-26 17:04:18 |
|
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
|
|
2022-09-26 17:04:18 | SUCCESS |
ValidateClientAssertionSignature
client_assertion signature validated
|
||
|
2022-09-26 17:04:18 | SUCCESS |
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
|
||
|
2022-09-26 17:04:18 | SUCCESS |
ValidateClientAssertionClaims
Client Assertion passed all validation checks
|
|
2022-09-26 17:04:18 |
SUCCESS
|
FAPIBrazilExtractRequestedScopeFromClientCredentialsGrant
Found 'consents' scope in request
|
||||
|
2022-09-26 17:04:18 |
SUCCESS
|
GenerateBearerAccessToken
Generated access token
|
||
|
2022-09-26 17:04:18 |
|
GenerateAccessTokenExpiration
Set access_token_expiration to 900
|
|
2022-09-26 17:04:18 |
SUCCESS
|
CreateTokenEndpointResponse
Created token endpoint response
|
||||||
|
2022-09-26 17:04:18 |
|
CopyAccessTokenToClientCredentialsField
Condition ran but did not log anything
|
|
2022-09-26 17:04:18 |
OUTGOING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Response to HTTP request to test instance jwcAsVfPTiIGuT4
|
||||||||
|
2022-09-26 17:04:19 |
INCOMING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Incoming HTTP request to /test-mtls/a/bancodobrasil-fapi1adv-obb-rp-accounts-private-key/consents/v1/consents
|
||||||||||||||||||||||
|
2022-09-26 17:04:19 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
|
||||
|
New consent endpoint |
2022-09-26 17:04:19 |
SUCCESS
|
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
|
||
|
2022-09-26 17:04:19 | SUCCESS |
CheckForClientCertificate
Found client certificate
|
|
2022-09-26 17:04:19 |
SUCCESS
|
EnsureClientCertificateMatches
Presented certificate matches registered certificate
|
||
|
2022-09-26 17:04:19 |
SUCCESS
|
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
|
|
2022-09-26 17:04:19 | SUCCESS |
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
|
|
2022-09-26 17:04:19 | SUCCESS |
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
|
||
|
2022-09-26 17:04:19 |
SUCCESS
|
RequireBearerClientCredentialsAccessToken
Found access token in request
|
||
|
2022-09-26 17:04:19 | SUCCESS |
ExtractFapiDateHeader
Found a FAPI auth date header
|
||
|
2022-09-26 17:04:19 | SUCCESS |
ExtractFapiIpAddressHeader
Found a FAPI ip address header
|
||||
|
2022-09-26 17:04:19 | SUCCESS |
ExtractFapiInteractionIdHeader
Found a FAPI interaction ID header
|
||
|
2022-09-26 17:04:19 |
SUCCESS
|
FAPIBrazilEnsureClientCredentialsScopeContainedConsents
The token request which was used to obtain the access token contained 'consents' scope
|
||
|
2022-09-26 17:04:19 | SUCCESS |
FAPIBrazilExtractConsentRequest
Consent successfully extracted from the request.
|
||
|
2022-09-26 17:04:19 |
INFO
|
CreateFapiInteractionIdIfNeeded
Found existing FAPI interaction ID
|
||
|
2022-09-26 17:04:19 | SUCCESS |
FAPIBrazilGenerateNewConsentResponse
Created consent response
|
||||||
|
2022-09-26 17:04:19 |
|
ClearAccessTokenFromRequest
Removed incoming access token from environment
|
|
2022-09-26 17:04:19 |
OUTGOING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Response to HTTP request to test instance jwcAsVfPTiIGuT4
|
||||||||
|
2022-09-26 17:04:21 |
INCOMING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Incoming HTTP request to /test-mtls/a/bancodobrasil-fapi1adv-obb-rp-accounts-private-key/par
|
||||||||||||||||||||||
|
2022-09-26 17:04:21 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
|
||||
|
PAR endpoint |
2022-09-26 17:04:21 |
SUCCESS
|
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
|
||
|
2022-09-26 17:04:21 | SUCCESS |
CheckForClientCertificate
Found client certificate
|
|
2022-09-26 17:04:21 |
SUCCESS
|
EnsureClientCertificateMatches
Presented certificate matches registered certificate
|
||
|
2022-09-26 17:04:21 | SUCCESS |
ExtractClientAssertion
Parsed client assertion
|
||
|
2022-09-26 17:04:21 |
|
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
|
|
2022-09-26 17:04:21 | SUCCESS |
ValidateClientAssertionSignature
client_assertion signature validated
|
||
|
2022-09-26 17:04:21 | SUCCESS |
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
|
||
|
2022-09-26 17:04:21 | SUCCESS |
ValidateClientAssertionClaimsForPAREndpoint
Client Assertion passed all validation checks
|
|
2022-09-26 17:04:21 | SUCCESS |
ExtractRequestObjectFromPAREndpointRequest
Parsed request object
|
||
|
2022-09-26 17:04:21 | SUCCESS |
EnsurePAREndpointRequestDoesNotContainRequestUriParameter
PAR endpoint request does not contain a request_uri parameter
|
|
2022-09-26 17:04:21 | INFO |
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
|
||||||
|
2022-09-26 17:04:21 | SUCCESS |
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
|
||
|
2022-09-26 17:04:21 |
|
FAPIBrazilValidateRequestObjectIdTokenACRClaims
acr claim is not requested
|
|
2022-09-26 17:04:21 | SUCCESS |
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
|
||
|
2022-09-26 17:04:21 | SUCCESS |
FAPI1AdvancedValidateRequestObjectNBFClaim
nbf claim is valid
|
||||
|
2022-09-26 17:04:21 |
|
ValidateRequestObjectClaims
Request object does not contain a max_age claim
|
|
2022-09-26 17:04:21 |
SUCCESS
|
ValidateRequestObjectClaims
Request object claims passed all validation checks
|
|
2022-09-26 17:04:21 | SUCCESS |
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
|
||
|
2022-09-26 17:04:21 | SUCCESS |
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
|
|
2022-09-26 17:04:21 | SUCCESS |
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
|
|
2022-09-26 17:04:21 | SUCCESS |
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
|
||||||
|
2022-09-26 17:04:21 |
SUCCESS
|
EnsureRedirectUriInRequestObjectMatchesOneOfClientRedirectUris
Redirect URI matched one of client redirect_uris
|
||
|
2022-09-26 17:04:21 | SUCCESS |
EnsureRequestObjectContainsCodeChallengeWhenUsingPAR
Found required PKCE parameters in request
|
||||
|
2022-09-26 17:04:21 | SUCCESS |
CreatePAREndpointResponse
Created PAR endpoint response
|
||||
|
2022-09-26 17:04:21 |
OUTGOING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Response to HTTP request to test instance jwcAsVfPTiIGuT4
|
||||||||
|
2022-09-26 17:04:22 |
INCOMING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Incoming HTTP request to /test/a/bancodobrasil-fapi1adv-obb-rp-accounts-private-key/authorize
|
||||||||||||||||||||||
|
2022-09-26 17:04:22 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
|
||||
|
Authorization endpoint |
2022-09-26 17:04:22 |
SUCCESS
|
EnsureAuthorizationRequestDoesNotContainRequestWhenUsingPAR
Request does not contain a request parameter
|
|
2022-09-26 17:04:22 | INFO |
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
|
||||||
|
2022-09-26 17:04:22 |
SUCCESS
|
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
|
||
|
2022-09-26 17:04:22 | SUCCESS |
EnsureClientIdInAuthorizationRequestParametersMatchRequestObject
client_id http request parameter value matches client_id in request object
|
|
2022-09-26 17:04:22 |
SUCCESS
|
ExtractRequestedScopes
Requested scopes
|
||
|
2022-09-26 17:04:22 |
SUCCESS
|
FAPIBrazilValidateConsentScope
Found consent scope in request
|
||||
|
2022-09-26 17:04:22 |
SUCCESS
|
EnsureScopeContainsAccounts
Found accounts scope in request
|
||
|
2022-09-26 17:04:22 | SUCCESS |
EnsureResponseTypeIsCodeIdToken
Response type is expected value
|
||
|
2022-09-26 17:04:22 | SUCCESS |
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
|
||||
|
2022-09-26 17:04:22 | SUCCESS |
EnsureMatchingClientId
Client ID matched
|
||
|
2022-09-26 17:04:22 |
SUCCESS
|
CreateAuthorizationCode
Created authorization code
|
||
|
2022-09-26 17:04:22 | SUCCESS |
ExtractNonceFromAuthorizationRequest
Extracted nonce
|
||
|
2022-09-26 17:04:22 | SUCCESS |
CalculateCHash
Successful c_hash encoding
|
||
|
2022-09-26 17:04:22 | SUCCESS |
CalculateSHash
Successful s_hash encoding
|
||
|
2022-09-26 17:04:22 |
SUCCESS
|
GenerateIdTokenClaims
Created ID Token Claims
|
||||||||||||
|
2022-09-26 17:04:22 |
|
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Request object does not contain a claims element.id_token
|
|
2022-09-26 17:04:22 | SUCCESS |
AddCHashToIdTokenClaims
Added c_hash to ID token claims
|
||||
|
2022-09-26 17:04:22 | SUCCESS |
AddSHashToIdTokenClaims
Added s_hash to ID token claims
|
||||
|
2022-09-26 17:04:22 | INFO |
AddAtHashToIdTokenClaims
Skipped evaluation due to missing required string: at_hash
|
||
|
2022-09-26 17:04:22 | INFO |
FAPIBrazilAddACRClaimToIdTokenClaims
Skipped evaluation due to missing required string: requested_id_token_acr_values
|
||
|
2022-09-26 17:04:22 |
SUCCESS
|
SignIdToken
Signed the ID token
|
||
|
2022-09-26 17:04:22 |
SUCCESS
|
FAPIBrazilChangeConsentStatusToAuthorized
Changed consent status to AUTHORISED
|
||
|
2022-09-26 17:04:22 |
SUCCESS
|
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
|
||
|
2022-09-26 17:04:22 | SUCCESS |
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
|
||
|
2022-09-26 17:04:22 | SUCCESS |
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
|
||
|
2022-09-26 17:04:22 |
|
SendAuthorizationResponseWithResponseModeFragment
Redirecting back to client
|
||
|
2022-09-26 17:04:22 |
OUTGOING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Response to HTTP request to test instance jwcAsVfPTiIGuT4
|
||||
|
2022-09-26 17:04:23 |
INCOMING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Incoming HTTP request to /test-mtls/a/bancodobrasil-fapi1adv-obb-rp-accounts-private-key/token
|
||||||||||||||||||||||
|
2022-09-26 17:04:23 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
|
||||
|
Token endpoint |
2022-09-26 17:04:23 |
|
CheckClientIdMatchesOnTokenRequestIfPresent
client_id not present, nothing to check
|
|
2022-09-26 17:04:23 |
SUCCESS
|
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
|
||
|
2022-09-26 17:04:23 | SUCCESS |
CheckForClientCertificate
Found client certificate
|
|
2022-09-26 17:04:23 |
SUCCESS
|
EnsureClientCertificateMatches
Presented certificate matches registered certificate
|
||
|
2022-09-26 17:04:23 | SUCCESS |
ExtractClientAssertion
Parsed client assertion
|
||
|
2022-09-26 17:04:23 |
|
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
|
|
2022-09-26 17:04:23 | SUCCESS |
ValidateClientAssertionSignature
client_assertion signature validated
|
||
|
2022-09-26 17:04:23 | SUCCESS |
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
|
||
|
2022-09-26 17:04:23 | SUCCESS |
ValidateClientAssertionClaims
Client Assertion passed all validation checks
|
|
2022-09-26 17:04:23 |
SUCCESS
|
ValidateAuthorizationCode
Found authorization code
|
||
|
2022-09-26 17:04:23 |
SUCCESS
|
ValidateRedirectUriForTokenEndpointRequest
redirect_uri is the same as the one used in the authorization request
|
||
|
2022-09-26 17:04:23 | SUCCESS |
ValidateCodeVerifierWithS256
Validated code_verifier successfully
|
||||||
|
2022-09-26 17:04:23 | SUCCESS |
EnsureMinimumPkceCodeVerifierEntropy
Calculated shannon entropy seems sufficient
|
||||||
|
2022-09-26 17:04:23 | SUCCESS |
EnsureMinimumPkceCodeVerifierLength
PKCE code verifier is of sufficient length
|
||||
|
2022-09-26 17:04:23 | SUCCESS |
EnsurePkceCodeVerifierNotUsed
Code verifier has not been used
|
||
|
2022-09-26 17:04:23 |
SUCCESS
|
GenerateBearerAccessToken
Generated access token
|
||
|
2022-09-26 17:04:23 |
|
GenerateAccessTokenExpiration
Set access_token_expiration to 900
|
|
2022-09-26 17:04:23 | SUCCESS |
CalculateAtHash
Successful at_hash encoding
|
||
|
2022-09-26 17:04:23 |
|
CreateRefreshToken
Created refresh token
|
||
|
2022-09-26 17:04:23 |
SUCCESS
|
GenerateIdTokenClaims
Created ID Token Claims
|
||||||||||||
|
2022-09-26 17:04:23 |
|
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Request object does not contain a claims element.id_token
|
|
2022-09-26 17:04:23 | SUCCESS |
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
|
||||
|
2022-09-26 17:04:23 | INFO |
FAPIBrazilAddACRClaimToIdTokenClaims
Skipped evaluation due to missing required string: requested_id_token_acr_values
|
||
|
2022-09-26 17:04:23 |
SUCCESS
|
SignIdToken
Signed the ID token
|
||
|
2022-09-26 17:04:23 |
SUCCESS
|
CreateTokenEndpointResponse
Created token endpoint response
|
||||||||||||
|
2022-09-26 17:04:23 |
OUTGOING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Response to HTTP request to test instance jwcAsVfPTiIGuT4
|
||||||||
|
2022-09-26 17:04:24 |
INCOMING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Incoming HTTP request to /test-mtls/a/bancodobrasil-fapi1adv-obb-rp-accounts-private-key/accounts/v1/accounts
|
||||||||||||||||||||||
|
2022-09-26 17:04:24 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
|
||||
|
Accounts endpoint |
2022-09-26 17:04:24 |
SUCCESS
|
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
|
||
|
2022-09-26 17:04:24 | SUCCESS |
CheckForClientCertificate
Found client certificate
|
|
2022-09-26 17:04:24 |
SUCCESS
|
EnsureClientCertificateMatches
Presented certificate matches registered certificate
|
||
|
2022-09-26 17:04:24 | SUCCESS |
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
|
|
2022-09-26 17:04:24 | SUCCESS |
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
|
||
|
2022-09-26 17:04:24 |
SUCCESS
|
RequireBearerAccessToken
Found access token in request
|
||
|
2022-09-26 17:04:24 | SUCCESS |
ExtractFapiDateHeader
Found a FAPI auth date header
|
||
|
2022-09-26 17:04:24 | SUCCESS |
ExtractFapiIpAddressHeader
Found a FAPI ip address header
|
||||
|
2022-09-26 17:04:24 | SUCCESS |
ExtractFapiInteractionIdHeader
Found a FAPI interaction ID header
|
||
|
2022-09-26 17:04:24 |
SUCCESS
|
FAPIBrazilEnsureAuthorizationRequestScopesContainAccounts
'accounts' was included in authorization request scopes
|
||||
|
2022-09-26 17:04:24 |
INFO
|
CreateFapiInteractionIdIfNeeded
Found existing FAPI interaction ID
|
||
|
2022-09-26 17:04:24 |
SUCCESS
|
CreateFAPIAccountEndpointResponse
Created account response object
|
||||
|
2022-09-26 17:04:24 |
SUCCESS
|
CreateBrazilAccountsEndpointResponse
Created Brazil accounts response (Please note that this is a hardcoded response copied from API documentation)
|
||||
|
2022-09-26 17:04:24 |
|
ClearAccessTokenFromRequest
Removed incoming access token from environment
|
|
2022-09-26 17:04:24 |
OUTGOING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Response to HTTP request to test instance jwcAsVfPTiIGuT4
|
||||||||
|
2022-09-26 17:04:25 |
INCOMING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Incoming HTTP request to /test-mtls/a/bancodobrasil-fapi1adv-obb-rp-accounts-private-key/clienturi/31c8Zv6MA5E68MpKhl81V9ywmSomojIbdX4tgnqAtDAwRj1hBGPyzPYhssS4TW90
|
||||||||||||||||||||||
|
Registration endpoint |
2022-09-26 17:04:25 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
|
||||
|
2022-09-26 17:04:25 |
SUCCESS
|
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
|
||
|
2022-09-26 17:04:25 | SUCCESS |
CheckForClientCertificate
Found client certificate
|
|
2022-09-26 17:04:25 |
SUCCESS
|
EnsureClientCertificateMatches
Presented certificate matches registered certificate
|
||
|
2022-09-26 17:04:25 | SUCCESS |
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
|
||
|
2022-09-26 17:04:25 | SUCCESS |
RequireBearerRegistrationAccessToken
Found access token in request
|
||
|
2022-09-26 17:04:25 | SUCCESS |
GenerateRegistrationAccessToken
Generated registration access token
|
||
|
2022-09-26 17:04:25 |
OUTGOING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Response to HTTP request to test instance jwcAsVfPTiIGuT4
|
||||||||
|
2022-09-26 17:04:26 |
INCOMING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Incoming HTTP request to /test-mtls/a/bancodobrasil-fapi1adv-obb-rp-accounts-private-key/clienturi/31c8Zv6MA5E68MpKhl81V9ywmSomojIbdX4tgnqAtDAwRj1hBGPyzPYhssS4TW90
|
||||||||||||||||||||||
|
Registration endpoint |
2022-09-26 17:04:26 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
|
||||
|
2022-09-26 17:04:26 |
SUCCESS
|
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
|
||
|
2022-09-26 17:04:26 | SUCCESS |
CheckForClientCertificate
Found client certificate
|
|
2022-09-26 17:04:26 |
SUCCESS
|
EnsureClientCertificateMatches
Presented certificate matches registered certificate
|
||
|
2022-09-26 17:04:26 | SUCCESS |
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
|
||
|
2022-09-26 17:04:26 | SUCCESS |
RequireBearerRegistrationAccessToken
Found access token in request
|
||
|
2022-09-26 17:04:26 | SUCCESS |
GenerateRegistrationAccessToken
Generated registration access token
|
||
|
2022-09-26 17:04:26 |
OUTGOING
|
fapi1-advanced-final-client-brazildcr-happypath-test
Response to HTTP request to test instance jwcAsVfPTiIGuT4
|
||||||||
|
2022-09-26 17:04:26 |
FINISHED
|
fapi1-advanced-final-client-brazildcr-happypath-test
Test has run to completion
|
||
|
2022-09-26 17:04:28 |
|
TEST-RUNNER
Alias has now been claimed by another test
|
||||
|