Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-09-29 06:04:40 INFO
TEST-RUNNER
Test instance WOTdL8YAi2ZZPOE created
baseUrl
https://www.certification.openid.net/test/a/icewall-conformance
variant
{
  "server_metadata": "discovery",
  "client_registration": "static_client"
}
alias
icewall-conformance
description
planId
UrmPgVJUk3pT9
config
{
  "alias": "icewall-conformance",
  "server": {
    "discoveryUrl": "https://table2.iw02.net/.well-known/openid-configuration"
  },
  "consent": {}
}
testName
oidcc-discovery-endpoint-verification
2022-09-29 06:04:40
GetDynamicServerConfiguration
HTTP request
request_uri
https://table2.iw02.net/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-09-29 06:04:42 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Thu, 29 Sep 2022 06:04:42 GMT",
  "content-type": "application/json;charset\u003dUTF-8",
  "content-length": "1443",
  "connection": "keep-alive",
  "server": "Apache-Coyote/1.1"
}
response_body

{
    "issuer": "https://table2.iw02.net",
    "jwks_uri": "https://table2.iw02.net/iwproxy/OIDC/op/jwks",
    "authorization_endpoint": "https://table2.iw02.net/iwproxy/OIDC/op/auth",
    "token_endpoint": "https://table2.iw02.net/iwproxy/OIDC/op/token",
    "userinfo_endpoint": "https://table2.iw02.net/iwproxy/OIDC/userinfo/userinfo",
    "scopes_supported": [
        "openid"
    ],
    "response_types_supported": [
        "code",
        "token",
        "id_token",
        "code token",
        "code id_token",
        "token id_token",
        "code token id_token"
    ],
    "response_modes_supported": [
        "query"
    ],
    "grant_types_supported": [
        "authorization_code",
        "implicit"
    ],
    "token_endpoint_auth_methods_supported": [
        "client_secret_post",
        "client_secret_basic"
    ],
    "request_parameter_supported": false,
    "request_uri_parameter_supported": true,
    "require_request_uri_registration": false,
    "tls_client_certificate_bound_access_tokens": false,
    "subject_types_supported": [
        "public"
    ],
    "id_token_signing_alg_values_supported": [
        "RS256",
        "HS256"
    ],
    "claim_types_supported": [
        "normal"
    ],
    "claims_parameter_supported": false,
    "frontchannel_logout_supported": false,
    "backchannel_logout_supported": false,
    "claims_supported": []
}
2022-09-29 06:04:42 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://table2.iw02.net
jwks_uri
https://table2.iw02.net/iwproxy/OIDC/op/jwks
authorization_endpoint
https://table2.iw02.net/iwproxy/OIDC/op/auth
token_endpoint
https://table2.iw02.net/iwproxy/OIDC/op/token
userinfo_endpoint
https://table2.iw02.net/iwproxy/OIDC/userinfo/userinfo
scopes_supported
[
  "openid"
]
response_types_supported
[
  "code",
  "token",
  "id_token",
  "code token",
  "code id_token",
  "token id_token",
  "code token id_token"
]
response_modes_supported
[
  "query"
]
grant_types_supported
[
  "authorization_code",
  "implicit"
]
token_endpoint_auth_methods_supported
[
  "client_secret_post",
  "client_secret_basic"
]
request_parameter_supported
false
request_uri_parameter_supported
true
require_request_uri_registration
false
tls_client_certificate_bound_access_tokens
false
subject_types_supported
[
  "public"
]
id_token_signing_alg_values_supported
[
  "RS256",
  "HS256"
]
claim_types_supported
[
  "normal"
]
claims_parameter_supported
false
frontchannel_logout_supported
false
backchannel_logout_supported
false
claims_supported
[]
2022-09-29 06:04:42 SUCCESS
EnsureDiscoveryEndpointResponseStatusCodeIs200
discovery_endpoint_response returned http 200 as expected
http_status
200
2022-09-29 06:04:42 SUCCESS
CheckDiscoveryEndpointReturnedJsonContentType
discovery_endpoint_response Content-Type: header is application/json
2022-09-29 06:04:42
oidcc-discovery-endpoint-verification
Setup Done
2022-09-29 06:04:42 SUCCESS
OIDCCCheckDiscEndpointResponseTypesSupported
Contents of 'response_types_supported' in discovery document matches expectations.
actual
[
  "code",
  "token",
  "id_token",
  "code token",
  "code id_token",
  "token id_token",
  "code token id_token"
]
expected
[
  "code",
  "code id_token",
  "id_token",
  "token id_token",
  "code id_token token",
  "code token"
]
minimum_matches_required
1
2022-09-29 06:04:42 SUCCESS
CheckDiscEndpointDiscoveryUrl
discoveryUrl
actual
https://table2.iw02.net/.well-known/openid-configuration
2022-09-29 06:04:42 SUCCESS
CheckDiscEndpointIssuer
issuer is consistent with the discovery endpoint
2022-09-29 06:04:42 SUCCESS
OIDCCCheckDiscEndpointSubjectTypesSupported
Contents of 'subject_types_supported' in discovery document matches expectations.
actual
[
  "public"
]
expected
[
  "public",
  "pairwise"
]
minimum_matches_required
1
2022-09-29 06:04:42 SUCCESS
OIDCCCheckDiscEndpointIdTokenSigningAlgValuesSupported
Contents of 'id_token_signing_alg_values_supported' in discovery document matches expectations.
actual
[
  "RS256",
  "HS256"
]
expected
[
  "RS256"
]
minimum_matches_required
1
2022-09-29 06:04:42 INFO
OIDCCCheckDiscEndpointUserinfoSigningAlgValuesSupported
Skipped evaluation due to missing required element: server userinfo_signing_alg_values_supported
path
userinfo_signing_alg_values_supported
mapped
object
server
2022-09-29 06:04:42 SUCCESS
CheckDiscEndpointAuthorizationEndpoint
authorization_endpoint
actual
https://table2.iw02.net/iwproxy/OIDC/op/auth
2022-09-29 06:04:42 SUCCESS
CheckDiscEndpointTokenEndpoint
token_endpoint
actual
https://table2.iw02.net/iwproxy/OIDC/op/token
2022-09-29 06:04:42 SUCCESS
CheckDiscEndpointUserinfoEndpoint
userinfo_endpoint
actual
https://table2.iw02.net/iwproxy/OIDC/userinfo/userinfo
2022-09-29 06:04:42 INFO
CheckDiscEndpointRegistrationEndpoint
Skipped evaluation due to missing required element: server registration_endpoint
path
registration_endpoint
mapped
object
server
2022-09-29 06:04:42 SUCCESS
CheckJwksUri
jwks_uri
actual
https://table2.iw02.net/iwproxy/OIDC/op/jwks
2022-09-29 06:04:42
FetchServerKeys
Fetching server key
jwks_uri
https://table2.iw02.net/iwproxy/OIDC/op/jwks
2022-09-29 06:04:42
FetchServerKeys
HTTP request
request_uri
https://table2.iw02.net/iwproxy/OIDC/op/jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-09-29 06:04:43 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "date": "Thu, 29 Sep 2022 06:04:43 GMT",
  "content-type": "application/json;charset\u003dISO-8859-1",
  "content-length": "986",
  "connection": "keep-alive",
  "server": "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips",
  "cache-control": "no-store",
  "pragma": "no-cache"
}
response_body
{
	"keys": [
		{
			"kty": "RSA",
			"e": "AQAB",
			"use": "sig",
			"kid": "HbrE0WE8XtFr1VN9IN4RTM8Q0MRRMdqX6oEasnfs",
			"alg": "RS256",
			"n": "iRRmze76cDZSOWeiKzSpAKerIfQYdcy6zIGyF7qRLt_qS6ZYEIipOKGtSqBAIXbGJg70Q8I0WS2I0fNXqBLuo9J14Ez2JpXtijxX6tkg9tNkvxRr8IS8oTVrbJdcEMemn_G3GCKKtKDIpWjgtm0edLbmURpNguytI-ElFATKIhXcM549edX0H3sXEnTEFGJqd0JD2oquZB-7GWH1eqyD5qtwT1Ybx4EWvGw5m3QLjUD-hwtF6kYwMuqw9UlJU0W-R2g3PDy4vVQHJHPjn9n958gj5yF0bl3q8FXEEtMhSKBlxT3oLG8sSdEM1b4FXtzg6-773DmCeob554KFWhuRnw"
		},
		{
			"kty": "RSA",
			"e": "AQAB",
			"use": "sig",
			"kid": "3WXhLp5oAlQN6D53qfAAU8zrt6TcM5sYTLONWs5O",
			"alg": "RS256",
			"n": "mBR6GLjSNSynrRK--4cwp3s6IycMmB07mMIgdsSInIO2RZC6jm8uTdSN8Lp9fQgqyku5PzlnwpKUrnO-yC7F4RjaxUVb3R2AXocuQPkWlXHGeQk1rD2hsxPIeHDmwPqnBKN5ZeWTFS1zw5MoFWVXQ3-gMI7K6Z5Y11Hf3lWu9M1Z4WO3BKmMsZ24PVRLMcpkqrv8accI-bK6TjYAw1rAW2TYEYx44xfW0U_v7JMsm-QQsWyJsHy1HmLdHC0O3xO0rJ-qq5juev1Lnnrm_4P1-T80hDB8mU7jiO269iwwcigQSjrm5kmVMtNyEkyLxXkcU6OeiYornTa8O0YaFawW_Q"
		}
	]
}
2022-09-29 06:04:43
FetchServerKeys
Found JWK set string
jwk_string
{
	"keys": [
		{
			"kty": "RSA",
			"e": "AQAB",
			"use": "sig",
			"kid": "HbrE0WE8XtFr1VN9IN4RTM8Q0MRRMdqX6oEasnfs",
			"alg": "RS256",
			"n": "iRRmze76cDZSOWeiKzSpAKerIfQYdcy6zIGyF7qRLt_qS6ZYEIipOKGtSqBAIXbGJg70Q8I0WS2I0fNXqBLuo9J14Ez2JpXtijxX6tkg9tNkvxRr8IS8oTVrbJdcEMemn_G3GCKKtKDIpWjgtm0edLbmURpNguytI-ElFATKIhXcM549edX0H3sXEnTEFGJqd0JD2oquZB-7GWH1eqyD5qtwT1Ybx4EWvGw5m3QLjUD-hwtF6kYwMuqw9UlJU0W-R2g3PDy4vVQHJHPjn9n958gj5yF0bl3q8FXEEtMhSKBlxT3oLG8sSdEM1b4FXtzg6-773DmCeob554KFWhuRnw"
		},
		{
			"kty": "RSA",
			"e": "AQAB",
			"use": "sig",
			"kid": "3WXhLp5oAlQN6D53qfAAU8zrt6TcM5sYTLONWs5O",
			"alg": "RS256",
			"n": "mBR6GLjSNSynrRK--4cwp3s6IycMmB07mMIgdsSInIO2RZC6jm8uTdSN8Lp9fQgqyku5PzlnwpKUrnO-yC7F4RjaxUVb3R2AXocuQPkWlXHGeQk1rD2hsxPIeHDmwPqnBKN5ZeWTFS1zw5MoFWVXQ3-gMI7K6Z5Y11Hf3lWu9M1Z4WO3BKmMsZ24PVRLMcpkqrv8accI-bK6TjYAw1rAW2TYEYx44xfW0U_v7JMsm-QQsWyJsHy1HmLdHC0O3xO0rJ-qq5juev1Lnnrm_4P1-T80hDB8mU7jiO269iwwcigQSjrm5kmVMtNyEkyLxXkcU6OeiYornTa8O0YaFawW_Q"
		}
	]
}
2022-09-29 06:04:43 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "HbrE0WE8XtFr1VN9IN4RTM8Q0MRRMdqX6oEasnfs",
      "alg": "RS256",
      "n": "iRRmze76cDZSOWeiKzSpAKerIfQYdcy6zIGyF7qRLt_qS6ZYEIipOKGtSqBAIXbGJg70Q8I0WS2I0fNXqBLuo9J14Ez2JpXtijxX6tkg9tNkvxRr8IS8oTVrbJdcEMemn_G3GCKKtKDIpWjgtm0edLbmURpNguytI-ElFATKIhXcM549edX0H3sXEnTEFGJqd0JD2oquZB-7GWH1eqyD5qtwT1Ybx4EWvGw5m3QLjUD-hwtF6kYwMuqw9UlJU0W-R2g3PDy4vVQHJHPjn9n958gj5yF0bl3q8FXEEtMhSKBlxT3oLG8sSdEM1b4FXtzg6-773DmCeob554KFWhuRnw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "3WXhLp5oAlQN6D53qfAAU8zrt6TcM5sYTLONWs5O",
      "alg": "RS256",
      "n": "mBR6GLjSNSynrRK--4cwp3s6IycMmB07mMIgdsSInIO2RZC6jm8uTdSN8Lp9fQgqyku5PzlnwpKUrnO-yC7F4RjaxUVb3R2AXocuQPkWlXHGeQk1rD2hsxPIeHDmwPqnBKN5ZeWTFS1zw5MoFWVXQ3-gMI7K6Z5Y11Hf3lWu9M1Z4WO3BKmMsZ24PVRLMcpkqrv8accI-bK6TjYAw1rAW2TYEYx44xfW0U_v7JMsm-QQsWyJsHy1HmLdHC0O3xO0rJ-qq5juev1Lnnrm_4P1-T80hDB8mU7jiO269iwwcigQSjrm5kmVMtNyEkyLxXkcU6OeiYornTa8O0YaFawW_Q"
    }
  ]
}
2022-09-29 06:04:43 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-09-29 06:04:43 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-09-29 06:04:43 INFO
CheckDiscEndpointRequestParameterSupported
request_parameter_supported must be: true
discovery_metadata_key
request_parameter_supported
actual
false
expected
true
2022-09-29 06:04:43 SUCCESS
CheckDiscEndpointRequestUriParameterSupported
request_uri_parameter_supported has correct value
request_uri_parameter_supported
true
2022-09-29 06:04:43 INFO
CheckDiscEndpointRequestObjectSigningAlgValuesSupportedIncludesRS256
Skipped evaluation due to missing required element: server request_object_signing_alg_values_supported
path
request_object_signing_alg_values_supported
mapped
object
server
2022-09-29 06:04:43 INFO
CheckDiscEndpointClaimsParameterSupported
claims_parameter_supported must be: true
discovery_metadata_key
claims_parameter_supported
actual
false
expected
true
2022-09-29 06:04:43 SUCCESS
OIDCCCheckDiscEndpointClaimsSupported
Contents of 'claims_supported' in discovery document matches expectations.
actual
[]
expected
[]
minimum_matches_required
0
2022-09-29 06:04:43 SUCCESS
OIDCCCheckDiscEndpointGrantTypesSupported
grant_types_supported is a non-empty array.
grant_types_supported
[
  "authorization_code",
  "implicit"
]
2022-09-29 06:04:43 SUCCESS
CheckDiscEndpointScopesSupportedContainsOpenId
Contents of 'scopes_supported' in discovery document matches expectations.
actual
[
  "openid"
]
expected
[
  "openid"
]
minimum_matches_required
1
2022-09-29 06:04:43 SUCCESS
CheckDiscEndpointAllEndpointsAreHttps
authorization_endpoint
actual
https://table2.iw02.net/iwproxy/OIDC/op/auth
2022-09-29 06:04:43 SUCCESS
CheckDiscEndpointAllEndpointsAreHttps
token_endpoint
actual
https://table2.iw02.net/iwproxy/OIDC/op/auth
2022-09-29 06:04:43 SUCCESS
CheckDiscEndpointAllEndpointsAreHttps
userinfo_endpoint
actual
https://table2.iw02.net/iwproxy/OIDC/op/auth
2022-09-29 06:04:43 FINISHED
oidcc-discovery-endpoint-verification
Test has run to completion
testmodule_result
PASSED
Test Results