Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-09-15 15:44:05 INFO
TEST-RUNNER
Test instance z505yO7CtpWaMDI created
baseUrl
https://www.certification.openid.net/test/a/u4c-staging
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "by_value",
  "fapi_client_type": "oidc",
  "fapi_profile": "openbanking_brazil",
  "fapi_response_mode": "plain_response"
}
alias
u4c-staging
description
OB Brazil RP Tests - U4C Staging RP Certification
planId
KGT81CyszYPbm
config
{
  "alias": "u4c-staging",
  "description": "OB Brazil RP Tests - U4C Staging RP Certification",
  "server": {
    "jwks": {
      "keys": [
        {
          "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
          "kty": "RSA",
          "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
          "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
          "e": "AQAB",
          "alg": "PS256",
          "use": "sig",
          "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
          "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
          "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
          "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
          "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
          "x5c": [
            "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\u003d\u003d"
          ]
        },
        {
          "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
          "kty": "RSA",
          "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
          "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
          "e": "AQAB",
          "use": "enc",
          "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
          "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
          "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
          "alg": "RSA-OAEP",
          "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
          "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
        }
      ]
    }
  },
  "client": {
    "client_id": "oXLWBP4Vx6K9VuGuQnDj7",
    "redirect_uri": "https://tpp.localhost/v1/callback",
    "certificate": "-----BEGIN CERTIFICATE-----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\npk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d\n-----END CERTIFICATE-----",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "use": "enc",
          "n": "8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw",
          "e": "AQAB"
        },
        {
          "kty": "RSA",
          "use": "sig",
          "x5c": [
            "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\u003d\u003d"
          ],
          "n": "8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw",
          "e": "AQAB",
          "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
          "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko.pem",
          "x5t#256": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko"
        }
      ]
    }
  },
  "client2": {
    "client_id": "19nb7xz7K8sv7__vNhz3c",
    "redirect_uri": "http://localhost:44444/",
    "id_token_encrypted_response_alg": "RSA-OAEP",
    "certificate": "-----BEGIN CERTIFICATE-----\nMIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz\nMDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl\nbG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F\nTlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk\nMzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT\nDjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr\nBgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx\nZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK\nAoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL\nhgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS\nli8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE\ngrg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz\ny/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt\nnfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA\nMB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it\nF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0\ndHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL\nBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r\naW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu\naWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF\nBwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG\nAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl\nIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp\ncGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p\ndGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz\nZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk\naWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg\nZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y\neS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw\nDQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV\n5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3\n4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h\n6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS\nkhP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p\npk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d\n-----END CERTIFICATE-----",
    "jwks": {
      "keys": [
        {
          "kty": "RSA",
          "alg": "PS256",
          "use": "sig",
          "x5c": [
            "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\u003d\u003d"
          ],
          "n": "8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw",
          "e": "AQAB",
          "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
          "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko.pem",
          "x5t#256": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko"
        },
        {
          "kty": "RSA",
          "kid": "U4C",
          "use": "enc",
          "alg": "A128CBC-HS256",
          "x5t": "00DuBwvEaccXIhXau1eVkkvkzuU",
          "n": "oHXe-8b-61c3z7ppNWhrdSlllAVw_2GIjy-bDR9d5eX35Zy40tjnL353ClmhqBnHeaalMdk2xuyRkplf8gZohRIzwKgDzAcstFHp3TMV2OyYl109UKxMkz_WOveaZRAWwU36Z6CHEXPA4v_0zWH71tIgktIqHVaSW_5fxDwVs21m7UVK06gN1dtBokqssTEDqLsBVq1bzu3SLBnYHyapVcOEBEL0HjHA9OeKO90YGEFjiElETuxO5k5G3D5pMkzFbZjP697swU64Idop53HNRaWZWrzzT93qIUUqrGTp52gaLUriZmCgrBTDvCrtmwjKkCI65ZOyVeUfmxQzvrjMSw",
          "e": "AQAB"
        }
      ]
    },
    "id_token_encrypted_response_enc": "A128CBC-HS256"
  },
  "directory": {
    "keystore": "https://keystore.sandbox.directory.openbankingbrasil.org.br/"
  },
  "consent": {},
  "publish": "everything"
}
testName
fapi1-advanced-final-client-refresh-token-test
2022-09-15 15:44:05 SUCCESS
GenerateServerConfigurationMTLS
Created server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  }
}
issuer
https://www.certification.openid.net/test/a/u4c-staging/
discoveryUrl
https://www.certification.openid.net/test/a/u4c-staging/.well-known/openid-configuration
2022-09-15 15:44:05
SetRequestParameterSupportedToTrueInServerConfiguration
Enabled request parameter support in server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true
}
2022-09-15 15:44:05 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_jwks
{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "MIIGqzCCBZOgAwIBAgIUdUCw8bQZidnZ6uERKJuN9u4RGvcwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMDgxNjA5NTUwMFoXDTIyMDkxNTA5NTUwMFowgacxCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMS8wDAYDVQQLEwUxMjM0NTAOBgNVBAsTB2NlcnRtYW4wDwYDVQQLEwhhZ29vZG9uZTEcMBoGA1UEAxMTT3BlbiBCYW5raW5nIEJyYXNpbDE0MDIGCgmSJomT8ixkAQETJDc0ZTkyOWQ5LTMzYjYtNGQ4NS04YmE3LWMxNDZjODY3YTgxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyF1agPcwq5ms99Flo82XsXUroWoD/6FX4AfmOUu113h4VOLYaO3N8HDYbKxgii2En/+O61e/Ptjn4T2PVq0iVcqiF6Gp4sKE5w/bKZRfdCe8qIPS4D+JKpFpesJvIHUeQvlAuBp5dA9nGSpxOjGe5P2+ZzNGXwvux/2ztdweGmKbtOvbYe4RVhiu6bOubog8XEBmD96EnqmoROasH1Hn9kDJIclbTP51j/TlQMzhrSfJJuE3Qq6vWhe/DaPbtmELmlDiYHjp8CjAY5oBMHLmkHvQxEBV4cwbUZj5ZpdqU8tkA78XtR4DkzrJ4fYoBb1+9ABq6GNzxWPpSQMQuBXdsCAwEAAaOCAwIwggL+MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJwv7oHX2exZL304ru+4eGVypHlxMB8GA1UdIwQYMBaAFIZ/WK0X9YK2TrQFs/uwzhFD30y+MEwGCCsGAQUFBwEBBEAwPjA8BggrBgEFBQcwAYYwaHR0cDovL29jc3Auc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL2lzc3Vlci5jcmwwXgYDVR0RBFcwVaAZBgVgTAEDAqAQDA5NaWNoYWVsIEZyYXNlcqAYBgVgTAEDA6APDA0xMzM1MzIzNjAwMTg5oA0GBWBMAQMEoAQMAm5voA8GBWBMAQMHoAYMBGFsb3QwDgYDVR0PAQH/BAQDAgbAMIIBoQYDVR0gBIIBmDCCAZQwggGQBgorBgEEAYO6L2QBMIIBgDCCATYGCCsGAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNlIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNpcGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3NzZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlkaWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQgZG9jdW1lbnRzIHRoZXJlaW4uMEQGCCsGAQUFBwIBFjhodHRwOi8vY3BzLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczANBgkqhkiG9w0BAQsFAAOCAQEAtKn/QnJqKLp52YB14x+M21qwz67utFkWjhauQe0elXupjY5NWZb5wLrGYNOZQzRe2JRzcBbGN6P7lCweRfxMkSGh9YrXbrkBXLEPtLHpTVEy65v1tWl02lC+ooVPyQpSjAQL0L69OQ7s7rnIXyb3rkSUzuGSxsLU1AXpWj0oYFB4wdeIdPAVPs83frC5s4kz42JruSAE2vsbvQURTVPChh+hO6+R6Irz+ZEZ1NSgjQkxvOXHW53CkXZSjjHbAB/nbJYi7YyK7kck99r38Ba/WBfIfywdFVVYfiiW5TS6XbQeVeilmmt5MLxBz96FxR6E6WR+cQwybEe94Fb/jD6xHA\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
server_encryption_keys
{
  "keys": [
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
server_public_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
2022-09-15 15:44:05 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-09-15 15:44:05
SetServerSigningAlgToPS256
Successfully set signing algorithm to PS256
2022-09-15 15:44:05
FAPIBrazilSetGrantTypesSupportedInServerConfiguration
Successfully set grant_types_supported
server
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ]
}
2022-09-15 15:44:05
AddClaimsParameterSupportedTrueToServerConfiguration
Successfully added claims_parameter_supported to server configuration
server
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true
}
2022-09-15 15:44:05
FAPIBrazilAddBrazilSpecificSettingsToServerConfiguration
Added open banking Brazil specific server settings
server
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ]
}
2022-09-15 15:44:05 SUCCESS
AddIdTokenSigningAlgsToServerConfiguration
Added 'id_token_signing_alg_values_supported' to server metadata as 'alg' from server jwks
value
[
  "PS256"
]
2022-09-15 15:44:05 SUCCESS
AddTlsCertificateBoundAccessTokensTrueSupportedToServerConfiguration
Added 'tls_client_certificate_bound_access_tokens' as 'true' to server metadata
2022-09-15 15:44:05
SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly
Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration
server_configuration
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ]
}
2022-09-15 15:44:05 SUCCESS
AddResponseTypeCodeIdTokenToServerConfiguration
Added code id_token as response type supported
response_types_supported
[
  "code id_token"
]
2022-09-15 15:44:05 SUCCESS
FAPIBrazilAddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
values
[
  "PS256"
]
2022-09-15 15:44:05 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2022-09-15 15:44:05 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
2022-09-15 15:44:05 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
Verify configuration of first client
2022-09-15 15:44:05 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
oXLWBP4Vx6K9VuGuQnDj7
redirect_uri
https://tpp.localhost/v1/callback
certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "enc",
      "n": "8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw",
      "e": "AQAB"
    },
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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\u003d\u003d"
      ],
      "n": "8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw",
      "e": "AQAB",
      "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko.pem",
      "x5t#256": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko"
    }
  ]
}
2022-09-15 15:44:05 SUCCESS
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-09-15 15:44:05 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "enc",
      "n": "8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw",
      "e": "AQAB"
    },
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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\u003d\u003d"
      ],
      "n": "8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw",
      "e": "AQAB",
      "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko.pem",
      "x5t#256": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "n": "8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
      "x5c": [
        "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\u003d\u003d"
      ],
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko.pem",
      "n": "8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw"
    }
  ]
}
2022-09-15 15:44:05 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-09-15 15:44:05 SUCCESS
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-09-15 15:44:05 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "enc",
      "n": "8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw",
      "e": "AQAB"
    },
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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\u003d\u003d"
      ],
      "n": "8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw",
      "e": "AQAB",
      "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko.pem",
      "x5t#256": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko"
    }
  ]
}
2022-09-15 15:44:05
fapi1-advanced-final-client-refresh-token-test
Setup Done
2022-09-15 15:44:14 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:14 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:14 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:44:15 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1151"
}
incoming_path
/test-mtls/a/u4c-staging/token
incoming_body_form_params
{
  "scope": "payments",
  "grant_type": "client_credentials",
  "redirect_uri": "https://tpp.localhost/v1/callback",
  "client_id": "oXLWBP4Vx6K9VuGuQnDj7",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY2NTUsImV4cCI6MTY2MzI1NjcxNSwianRpIjoiRFptOEJNZ3RJNE9XU3R3SDRuQUNpSXF6WjZXR0FjTE4yWDhOQ05Hb21TbyIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.6pUfHmXX1kkcCOKujzyOY2HsZ_2h1v-NayqSlNJY4FFxPUBKzcOTXnNWmbc429HzmeUKCH4NC2A8trVYgFbi7HgZKYsQHI-dhK5_7891IXljZNOTJx8h_IS49umBYrXjCXnFerEKfJHik909mDNhJko2BQHIyIzYYk6EpfdyGtNFFpVNlgtnNGNiUSHh8qWW3-K2CK_9xkYzGAGNcUWBj62hEsRHFreSmFxC5dIZwelPNRf-MnI0qk5xEpfLr5vL-9llIwrOnBcX4aNI0b_7wUHDNWbK59eSj2Uv3eBsJs_WZSmPCxSHzniaC2-_jMXVW897evYapvI_RPIj0HIrIA",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
scope=payments&grant_type=client_credentials&redirect_uri=https%3A%2F%2Ftpp.localhost%2Fv1%2Fcallback&client_id=oXLWBP4Vx6K9VuGuQnDj7&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY2NTUsImV4cCI6MTY2MzI1NjcxNSwianRpIjoiRFptOEJNZ3RJNE9XU3R3SDRuQUNpSXF6WjZXR0FjTE4yWDhOQ05Hb21TbyIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.6pUfHmXX1kkcCOKujzyOY2HsZ_2h1v-NayqSlNJY4FFxPUBKzcOTXnNWmbc429HzmeUKCH4NC2A8trVYgFbi7HgZKYsQHI-dhK5_7891IXljZNOTJx8h_IS49umBYrXjCXnFerEKfJHik909mDNhJko2BQHIyIzYYk6EpfdyGtNFFpVNlgtnNGNiUSHh8qWW3-K2CK_9xkYzGAGNcUWBj62hEsRHFreSmFxC5dIZwelPNRf-MnI0qk5xEpfLr5vL-9llIwrOnBcX4aNI0b_7wUHDNWbK59eSj2Uv3eBsJs_WZSmPCxSHzniaC2-_jMXVW897evYapvI_RPIj0HIrIA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:15 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-09-15 15:44:15 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
oXLWBP4Vx6K9VuGuQnDj7
2022-09-15 15:44:15 SUCCESS
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\npk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dd7c6d9f2-14fe-41f6-be1f-00c7a10348ff,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#130f427573696e65737320456e74697479,2.5.4.5\u003d#130e3330393830353339303030313135,CN\u003d*.u4c-iniciador.com.br,OU\u003d23f9e3dd-31a1-4eaf-a440-37711ad34e81,O\u003dU4C INSTITUICAO DE PAGAMENTO SA,L\u003dBelo Horizonte,ST\u003dMG,C\u003dBR"
  },
  "sanDnsNames": [
    "*.u4c-iniciador.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-09-15 15:44:15 SUCCESS
CheckForClientCertificate
Found client certificate
2022-09-15 15:44:15 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-09-15 15:44:15 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY2NTUsImV4cCI6MTY2MzI1NjcxNSwianRpIjoiRFptOEJNZ3RJNE9XU3R3SDRuQUNpSXF6WjZXR0FjTE4yWDhOQ05Hb21TbyIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.6pUfHmXX1kkcCOKujzyOY2HsZ_2h1v-NayqSlNJY4FFxPUBKzcOTXnNWmbc429HzmeUKCH4NC2A8trVYgFbi7HgZKYsQHI-dhK5_7891IXljZNOTJx8h_IS49umBYrXjCXnFerEKfJHik909mDNhJko2BQHIyIzYYk6EpfdyGtNFFpVNlgtnNGNiUSHh8qWW3-K2CK_9xkYzGAGNcUWBj62hEsRHFreSmFxC5dIZwelPNRf-MnI0qk5xEpfLr5vL-9llIwrOnBcX4aNI0b_7wUHDNWbK59eSj2Uv3eBsJs_WZSmPCxSHzniaC2-_jMXVW897evYapvI_RPIj0HIrIA",
  "header": {
    "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "oXLWBP4Vx6K9VuGuQnDj7",
    "aud": [
      "https://www.certification.openid.net/test/a/u4c-staging/",
      "https://www.certification.openid.net/test/a/u4c-staging/token",
      "https://www.certification.openid.net/test-mtls/a/u4c-staging/token"
    ],
    "iss": "oXLWBP4Vx6K9VuGuQnDj7",
    "exp": 1663256715,
    "iat": 1663256655,
    "jti": "DZm8BMgtI4OWStwH4nACiIqzZ6WGAcLN2X8NCNGomSo"
  }
}
2022-09-15 15:44:15
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-09-15 15:44:15 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY2NTUsImV4cCI6MTY2MzI1NjcxNSwianRpIjoiRFptOEJNZ3RJNE9XU3R3SDRuQUNpSXF6WjZXR0FjTE4yWDhOQ05Hb21TbyIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.6pUfHmXX1kkcCOKujzyOY2HsZ_2h1v-NayqSlNJY4FFxPUBKzcOTXnNWmbc429HzmeUKCH4NC2A8trVYgFbi7HgZKYsQHI-dhK5_7891IXljZNOTJx8h_IS49umBYrXjCXnFerEKfJHik909mDNhJko2BQHIyIzYYk6EpfdyGtNFFpVNlgtnNGNiUSHh8qWW3-K2CK_9xkYzGAGNcUWBj62hEsRHFreSmFxC5dIZwelPNRf-MnI0qk5xEpfLr5vL-9llIwrOnBcX4aNI0b_7wUHDNWbK59eSj2Uv3eBsJs_WZSmPCxSHzniaC2-_jMXVW897evYapvI_RPIj0HIrIA
2022-09-15 15:44:15 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-09-15 15:44:15 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-09-15 15:44:15 SUCCESS
FAPIBrazilExtractRequestedScopeFromClientCredentialsGrant
Found 'payments' scope in request
actual
[
  "payments"
]
expected
payments
2022-09-15 15:44:15 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
TCigDXeHqBGTZGATfFx8muSf9iZgqK1VR8uOCI6g6OyWKPCaza
2022-09-15 15:44:15 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
TCigDXeHqBGTZGATfFx8muSf9iZgqK1VR8uOCI6g6OyWKPCaza
token_type
Bearer
2022-09-15 15:44:15
CopyAccessTokenToClientCredentialsField
Condition ran but did not log anything
2022-09-15 15:44:15 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "TCigDXeHqBGTZGATfFx8muSf9iZgqK1VR8uOCI6g6OyWKPCaza",
  "token_type": "Bearer"
}
outgoing_path
token
2022-09-15 15:44:16 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/consents
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer TCigDXeHqBGTZGATfFx8muSf9iZgqK1VR8uOCI6g6OyWKPCaza",
  "content-type": "application/jwt",
  "x-idempotency-key": "92b395b7-9905-4f55-b1d8-70c5ded01a84",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1364"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/consents
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.78z7AsQI8mqkUYyWwl9-VyuD-SE3OYn_q8Nn5R_vZRO_Fw9w2HGeMXYd-KF4nSq0imw5ZcN1ZIrbNC4P8z2SxL-b6bFV1AieJvGUxcIgsyR2O1YNwVoCy2-xdJ8pLOkcimRYTJrJ4xXIpicyj0lIdxJBURxDyvzNUbtu4ziejOmDqm4sBWAAV2CWhLvxgoPucGWEas4wAdwNnykT0DaaVxVG2RpVGux2F2hpT0cOgbrTCnM8HraYXYxpZoRDklSpW-rJP5gJ0mBhmyg_mUXnk56byh8h1UNfbEzDBR0EA_FObn9-3bYm3xQkwUc909YPzbMHlT6I2x58za12aYopcg
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:16 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
New consent endpoint
2022-09-15 15:44:16 SUCCESS
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\npk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dd7c6d9f2-14fe-41f6-be1f-00c7a10348ff,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#130f427573696e65737320456e74697479,2.5.4.5\u003d#130e3330393830353339303030313135,CN\u003d*.u4c-iniciador.com.br,OU\u003d23f9e3dd-31a1-4eaf-a440-37711ad34e81,O\u003dU4C INSTITUICAO DE PAGAMENTO SA,L\u003dBelo Horizonte,ST\u003dMG,C\u003dBR"
  },
  "sanDnsNames": [
    "*.u4c-iniciador.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-09-15 15:44:16 SUCCESS
CheckForClientCertificate
Found client certificate
2022-09-15 15:44:16 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-09-15 15:44:16 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2022-09-15 15:44:16 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-09-15 15:44:16 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
TCigDXeHqBGTZGATfFx8muSf9iZgqK1VR8uOCI6g6OyWKPCaza
2022-09-15 15:44:16 SUCCESS
RequireBearerClientCredentialsAccessToken
Found access token in request
actual
TCigDXeHqBGTZGATfFx8muSf9iZgqK1VR8uOCI6g6OyWKPCaza
2022-09-15 15:44:16 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2022-09-15 15:44:16 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2022-09-15 15:44:16 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2022-09-15 15:44:16 SUCCESS
FAPIBrazilExtractCertificateSubjectFromServerJwks
Extracted subject from the certificate included in server jwks
subjectdn
UID=74e929d9-33b6-4d85-8ba7-c146c867a817,CN=Open Banking Brasil,OU=12345+OU=certman+OU=agoodone,O=ICP-Brasil,C=BR
ou
12345
brazil_software_id
74e929d9-33b6-4d85-8ba7-c146c867a817
2022-09-15 15:44:16 SUCCESS
FAPIBrazilEnsureClientCredentialsScopeContainedPayments
The token request which was used to obtain the access token contained 'payments' scope
actual
[
  "payments"
]
2022-09-15 15:44:16 SUCCESS
FAPIBrazilExtractPaymentsConsentRequest
Parsed payments consent request
payments_consent_request
{
  "aud": "https://www.certification.openid.net/test-mtls/a/u4c-staging/payments/v1/consents",
  "data": {
    "participantId": "c8f0bf49-4744-4933-8960-7add6e590841",
    "loggedUser": {
      "document": {
        "identification": "76109277673",
        "rel": "CPF"
      }
    },
    "creditor": {
      "name": "Cara que vai Receber",
      "cpfCnpj": "44471172000119",
      "personType": "PESSOA_JURIDICA"
    },
    "payment": {
      "date": "2022-09-15",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "proxy": "chave@pix.com",
        "localInstrument": "INIC",
        "creditorAccount": {
          "number": "13839200",
          "accountType": "CACC",
          "ispb": "00104123",
          "issuer": "1525"
        }
      },
      "type": "PIX"
    }
  },
  "iss": "23f9e3dd-31a1-4eaf-a440-37711ad34e81",
  "exp": 1663257554,
  "iat": 1663256654,
  "jti": "e78449b3-992e-4c5f-a911-cacef2310b38"
}
2022-09-15 15:44:16 SUCCESS
EnsureIncomingRequestContentTypeIsApplicationJwt
Client correctly used application/jwt content type
2022-09-15 15:44:16 SUCCESS
ExtractXIdempotencyKeyHeader
Found an x-idempotency-key header
idempotency_key
92b395b7-9905-4f55-b1d8-70c5ded01a84
2022-09-15 15:44:16 SUCCESS
FAPIBrazilValidatePaymentConsentRequestAud
aud claim matches the endpoint url
aud
https://www.certification.openid.net/test-mtls/a/u4c-staging/payments/v1/consents
2022-09-15 15:44:16 SUCCESS
FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate
Extracted subject from the mtls client certificate
subjectdn
UID=d7c6d9f2-14fe-41f6-be1f-00c7a10348ff,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#130f427573696e65737320456e74697479,2.5.4.5=#130e3330393830353339303030313135,CN=*.u4c-iniciador.com.br,OU=23f9e3dd-31a1-4eaf-a440-37711ad34e81,O=U4C INSTITUICAO DE PAGAMENTO SA,L=Belo Horizonte,ST=MG,C=BR
ou
23f9e3dd-31a1-4eaf-a440-37711ad34e81
brazil_software_id
d7c6d9f2-14fe-41f6-be1f-00c7a10348ff
2022-09-15 15:44:16 SUCCESS
FAPIBrazilEnsureConsentRequestIssEqualsOrganizationId
iss claim in consent request matches organizationId in client certificate
iss
23f9e3dd-31a1-4eaf-a440-37711ad34e81
2022-09-15 15:44:16 SUCCESS
FAPIBrazilEnsureConsentRequestJtiIsUUIDv4
jti claim in consent request is a UUIDv4
jti
e78449b3-992e-4c5f-a911-cacef2310b38
2022-09-15 15:44:16 SUCCESS
FAPIBrazilValidateConsentRequestIat
iat claim in consent request is valid
iat
1663256654
2022-09-15 15:44:16
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Fetching client organization keys
jwks_uri
https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/application.jwks
2022-09-15 15:44:16
FAPIBrazilFetchClientOrganizationJwksFromDirectory
HTTP request
request_uri
https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/application.jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-09-15 15:44:16 RESPONSE
FAPIBrazilFetchClientOrganizationJwksFromDirectory
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-type": "application/jwk-set+json",
  "content-length": "6038",
  "connection": "keep-alive",
  "x-amz-replication-status": "COMPLETED",
  "last-modified": "Mon, 29 Aug 2022 20:19:43 GMT",
  "x-amz-version-id": ".sdjxQkZ_Z2b.c221TYaaZaXpXaIu_L1",
  "accept-ranges": "bytes",
  "server": "AmazonS3",
  "date": "Thu, 15 Sep 2022 15:43:20 GMT",
  "etag": "\"a3b589630ca4a52e5fd4519f0015a1b2\"",
  "vary": "Accept-Encoding",
  "x-cache": "Hit from cloudfront",
  "via": "1.1 284fd7d0d63174fcd2a8845fc0a5b8ea.cloudfront.net (CloudFront)",
  "x-amz-cf-pop": "MIA3-P1",
  "x-amz-cf-id": "nnzzMo1lwEU9jnLWPO9y5znaVloRYgXysmmIEOkunCMOKZRvUHjVnw\u003d\u003d",
  "age": "57",
  "x-xss-protection": "1; mode\u003dblock",
  "x-frame-options": "SAMEORIGIN",
  "referrer-policy": "strict-origin-when-cross-origin",
  "x-content-type-options": "nosniff",
  "strict-transport-security": "max-age\u003d31536000"
}
response_body
{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"oHXe-8b-61c3z7ppNWhrdSlllAVw_2GIjy-bDR9d5eX35Zy40tjnL353ClmhqBnHeaalMdk2xuyRkplf8gZohRIzwKgDzAcstFHp3TMV2OyYl109UKxMkz_WOveaZRAWwU36Z6CHEXPA4v_0zWH71tIgktIqHVaSW_5fxDwVs21m7UVK06gN1dtBokqssTEDqLsBVq1bzu3SLBnYHyapVcOEBEL0HjHA9OeKO90YGEFjiElETuxO5k5G3D5pMkzFbZjP697swU64Idop53HNRaWZWrzzT93qIUUqrGTp52gaLUriZmCgrBTDvCrtmwjKkCI65ZOyVeUfmxQzvrjMSw","e":"AQAB","kid":"68i7DzUfmYIQagZpjIQ60gs5Lo5LeFVxYFUNYM5bxAU","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/68i7DzUfmYIQagZpjIQ60gs5Lo5LeFVxYFUNYM5bxAU.pem","x5t#256":"68i7DzUfmYIQagZpjIQ60gs5Lo5LeFVxYFUNYM5bxAU"},{"kty":"RSA","use":"sig","x5c":["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"],"n":"8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw","e":"AQAB","kid":"dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko.pem","x5t#256":"dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko"}]}
2022-09-15 15:44:16
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"oHXe-8b-61c3z7ppNWhrdSlllAVw_2GIjy-bDR9d5eX35Zy40tjnL353ClmhqBnHeaalMdk2xuyRkplf8gZohRIzwKgDzAcstFHp3TMV2OyYl109UKxMkz_WOveaZRAWwU36Z6CHEXPA4v_0zWH71tIgktIqHVaSW_5fxDwVs21m7UVK06gN1dtBokqssTEDqLsBVq1bzu3SLBnYHyapVcOEBEL0HjHA9OeKO90YGEFjiElETuxO5k5G3D5pMkzFbZjP697swU64Idop53HNRaWZWrzzT93qIUUqrGTp52gaLUriZmCgrBTDvCrtmwjKkCI65ZOyVeUfmxQzvrjMSw","e":"AQAB","kid":"68i7DzUfmYIQagZpjIQ60gs5Lo5LeFVxYFUNYM5bxAU","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/68i7DzUfmYIQagZpjIQ60gs5Lo5LeFVxYFUNYM5bxAU.pem","x5t#256":"68i7DzUfmYIQagZpjIQ60gs5Lo5LeFVxYFUNYM5bxAU"},{"kty":"RSA","use":"sig","x5c":["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"],"n":"8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw","e":"AQAB","kid":"dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko.pem","x5t#256":"dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko"}]}
2022-09-15 15:44:16 SUCCESS
FAPIBrazilFetchClientOrganizationJwksFromDirectory
Downloaded and added client organization JWK set to environment
client_organization_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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\u003d\u003d"
      ],
      "n": "oHXe-8b-61c3z7ppNWhrdSlllAVw_2GIjy-bDR9d5eX35Zy40tjnL353ClmhqBnHeaalMdk2xuyRkplf8gZohRIzwKgDzAcstFHp3TMV2OyYl109UKxMkz_WOveaZRAWwU36Z6CHEXPA4v_0zWH71tIgktIqHVaSW_5fxDwVs21m7UVK06gN1dtBokqssTEDqLsBVq1bzu3SLBnYHyapVcOEBEL0HjHA9OeKO90YGEFjiElETuxO5k5G3D5pMkzFbZjP697swU64Idop53HNRaWZWrzzT93qIUUqrGTp52gaLUriZmCgrBTDvCrtmwjKkCI65ZOyVeUfmxQzvrjMSw",
      "e": "AQAB",
      "kid": "68i7DzUfmYIQagZpjIQ60gs5Lo5LeFVxYFUNYM5bxAU",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/68i7DzUfmYIQagZpjIQ60gs5Lo5LeFVxYFUNYM5bxAU.pem",
      "x5t#256": "68i7DzUfmYIQagZpjIQ60gs5Lo5LeFVxYFUNYM5bxAU"
    },
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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\u003d\u003d"
      ],
      "n": "8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw",
      "e": "AQAB",
      "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/23f9e3dd-31a1-4eaf-a440-37711ad34e81/dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko.pem",
      "x5t#256": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko"
    }
  ]
}
2022-09-15 15:44:16 SUCCESS
FAPIBrazilValidateJwtSignatureUsingOrganizationJwks
jwt signature validated
jwt
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.78z7AsQI8mqkUYyWwl9-VyuD-SE3OYn_q8Nn5R_vZRO_Fw9w2HGeMXYd-KF4nSq0imw5ZcN1ZIrbNC4P8z2SxL-b6bFV1AieJvGUxcIgsyR2O1YNwVoCy2-xdJ8pLOkcimRYTJrJ4xXIpicyj0lIdxJBURxDyvzNUbtu4ziejOmDqm4sBWAAV2CWhLvxgoPucGWEas4wAdwNnykT0DaaVxVG2RpVGux2F2hpT0cOgbrTCnM8HraYXYxpZoRDklSpW-rJP5gJ0mBhmyg_mUXnk56byh8h1UNfbEzDBR0EA_FObn9-3bYm3xQkwUc909YPzbMHlT6I2x58za12aYopcg
2022-09-15 15:44:16 SUCCESS
CreateFapiInteractionIdIfNeeded
Created new FAPI interaction ID
fapi_interaction_id
1d4b1b0a-5044-44dc-a419-7c891d2b48be
2022-09-15 15:44:16 SUCCESS
FAPIBrazilGenerateNewPaymentsConsentResponse
Created consent response
headers
{
  "x-fapi-interaction-id": "1d4b1b0a-5044-44dc-a419-7c891d2b48be"
}
consentId
urn:conformance:oidf:zA1emPUtSd
consent_response
{
  "data": {
    "consentId": "urn:conformance:oidf:zA1emPUtSd",
    "creationDateTime": "2022-09-15T15:44:16Z",
    "status": "AWAITING_AUTHORISATION",
    "statusUpdateDateTime": "2022-09-15T15:44:16Z",
    "expirationDateTime": "2022-09-15T17:44:16Z",
    "transactionFromDateTime": "2022-09-15T15:39:16Z",
    "transactionToDateTime": "2022-09-15T17:44:16Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/u4c-stagingpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-09-15T15:44:16Z"
    },
    "creditor": {
      "name": "Cara que vai Receber",
      "cpfCnpj": "44471172000119",
      "personType": "PESSOA_JURIDICA"
    },
    "loggedUser": {
      "document": {
        "identification": "76109277673",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2022-09-15",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "proxy": "chave@pix.com",
        "localInstrument": "INIC",
        "creditorAccount": {
          "number": "13839200",
          "accountType": "CACC",
          "ispb": "00104123",
          "issuer": "1525"
        }
      },
      "type": "PIX"
    }
  },
  "aud": "23f9e3dd-31a1-4eaf-a440-37711ad34e81",
  "iat": 1663256656,
  "jti": "6eef7b7b-2049-466f-b7f7-92e18997e33f",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}
2022-09-15 15:44:16 SUCCESS
FAPIBrazilSignPaymentConsentResponse
Signed the payment consent response
signed_consent_response
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.jd9FrLAk70gt_4vVcREuCRFWnCVU25p2g7G7O35FAMUigPtBTgHkHp2QkovwmLVGon1uZG49kPhbC4rig4Qf5wnZavAnPV6mKD3q35K6aJVW4PAkE2oCSMBQpUID27nM_k1dnlsqtFVdkr7B3Yz5q5RVoLyHKZAMFgr3HwYXcPLD51vl42LXGfJBHAF2xFR92MqrwKXpEX24TJdiahdaU6bGsstShu8ZzspiWXEBsjpnYqe5jVzTwjxeVcpcvQc0uHmeq1pG6ZDp2SnGK2b5eOEhrkRje4jFWsDFIfG4vtW0w1fwuNqr_mkaFClkkffwAfoNs-uMOJ0XyXWi-hs8ZA
2022-09-15 15:44:16
ClearAccessTokenFromRequest
Removed incoming access token from environment
2022-09-15 15:44:16 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
201
outgoing_headers
{
  "x-fapi-interaction-id": [
    "1d4b1b0a-5044-44dc-a419-7c891d2b48be"
  ],
  "Content-Type": [
    "application/jwt"
  ]
}
outgoing_body
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJpc3MiOiI3NGU5MjlkOS0zM2I2LTRkODUtOGJhNy1jMTQ2Yzg2N2E4MTciLCJhdWQiOiIyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFkMzRlODEiLCJkYXRhIjp7ImNvbnNlbnRJZCI6InVybjpjb25mb3JtYW5jZTpvaWRmOnpBMWVtUFV0U2QiLCJleHBpcmF0aW9uRGF0ZVRpbWUiOiIyMDIyLTA5LTE1VDE3OjQ0OjE2WiIsInRyYW5zYWN0aW9uRnJvbURhdGVUaW1lIjoiMjAyMi0wOS0xNVQxNTozOToxNloiLCJ0cmFuc2FjdGlvblRvRGF0ZVRpbWUiOiIyMDIyLTA5LTE1VDE3OjQ0OjE2WiIsIm1ldGEiOnsidG90YWxSZWNvcmRzIjoxLCJyZXF1ZXN0RGF0ZVRpbWUiOiIyMDIyLTA5LTE1VDE1OjQ0OjE2WiIsInRvdGFsUGFnZXMiOjF9LCJzdGF0dXNVcGRhdGVEYXRlVGltZSI6IjIwMjItMDktMTVUMTU6NDQ6MTZaIiwibG9nZ2VkVXNlciI6eyJkb2N1bWVudCI6eyJpZGVudGlmaWNhdGlvbiI6Ijc2MTA5Mjc3NjczIiwicmVsIjoiQ1BGIn19LCJsaW5rcyI6eyJzZWxmIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3U0Yy1zdGFnaW5ncGF5bWVudHNcL3YxXC9jb25zZW50cyJ9LCJjcmVkaXRvciI6eyJuYW1lIjoiQ2FyYSBxdWUgdmFpIFJlY2ViZXIiLCJjcGZDbnBqIjoiNDQ0NzExNzIwMDAxMTkiLCJwZXJzb25UeXBlIjoiUEVTU09BX0pVUklESUNBIn0sInBheW1lbnQiOnsiZGF0ZSI6IjIwMjItMDktMTUiLCJhbW91bnQiOiIwLjAxIiwiY3VycmVuY3kiOiJCUkwiLCJkZXRhaWxzIjp7InByb3h5IjoiY2hhdmVAcGl4LmNvbSIsImxvY2FsSW5zdHJ1bWVudCI6IklOSUMiLCJjcmVkaXRvckFjY291bnQiOnsibnVtYmVyIjoiMTM4MzkyMDAiLCJhY2NvdW50VHlwZSI6IkNBQ0MiLCJpc3BiIjoiMDAxMDQxMjMiLCJpc3N1ZXIiOiIxNTI1In19LCJ0eXBlIjoiUElYIn0sImNyZWF0aW9uRGF0ZVRpbWUiOiIyMDIyLTA5LTE1VDE1OjQ0OjE2WiIsInN0YXR1cyI6IkFXQUlUSU5HX0FVVEhPUklTQVRJT04ifSwiaWF0IjoxNjYzMjU2NjU2LCJqdGkiOiI2ZWVmN2I3Yi0yMDQ5LTQ2NmYtYjdmNy05MmUxODk5N2UzM2YifQ.jd9FrLAk70gt_4vVcREuCRFWnCVU25p2g7G7O35FAMUigPtBTgHkHp2QkovwmLVGon1uZG49kPhbC4rig4Qf5wnZavAnPV6mKD3q35K6aJVW4PAkE2oCSMBQpUID27nM_k1dnlsqtFVdkr7B3Yz5q5RVoLyHKZAMFgr3HwYXcPLD51vl42LXGfJBHAF2xFR92MqrwKXpEX24TJdiahdaU6bGsstShu8ZzspiWXEBsjpnYqe5jVzTwjxeVcpcvQc0uHmeq1pG6ZDp2SnGK2b5eOEhrkRje4jFWsDFIfG4vtW0w1fwuNqr_mkaFClkkffwAfoNs-uMOJ0XyXWi-hs8ZA
outgoing_path
payments/v1/consents
2022-09-15 15:44:17 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/jwks
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:17 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:17 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
outgoing_path
jwks
2022-09-15 15:44:27 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/authorize
incoming_headers
{
  "host": "www.certification.openid.net",
  "sec-ch-ua": "\"Google Chrome\";v\u003d\"105\", \"Not)A;Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"105\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,*/*;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.9",
  "sec-fetch-site": "none",
  "sec-fetch-mode": "navigate",
  "sec-fetch-user": "?1",
  "sec-fetch-dest": "document",
  "accept-encoding": "gzip, deflate, br",
  "accept-language": "en-US,en;q\u003d0.9",
  "cookie": "__utmc\u003d201319536; __utma\u003d201319536.58030519.1658262888.1662396747.1662466831.7; __utmz\u003d201319536.1662466831.7.4.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); JSESSIONID\u003d64E9769AE01E286EEA31E69AE8A48638",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/authorize
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{
  "client_id": "oXLWBP4Vx6K9VuGuQnDj7",
  "scope": "openid",
  "response_type": "code id_token",
  "redirect_uri": "https://tpp.localhost/v1/callback",
  "request": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00iLCJjdHkiOiJvYXV0aC1hdXRoei1yZXErand0Iiwia2lkIjoiMGZlNTAyZGQtMTRmMC00ZjQ1LTgwZjktZmViOWEyMTZmOTk2In0.U0f7hZQfGNYItQQt99HTNc0j6lhmNxsUcyPuzIpiDJXN5aXPCkbrn4l8iZmZ5eRKkFVklTKG40KRlfwd5Nv9KqxAb4wc5LQsKAFrg-Ss8izOFDl5QRXlB2-r5kvCY74ovgKcRiC1WPXLbhelSETPtREfNn6xUqqbjvJg36DbGRLi59U4QMeZxjEpLzdF6wpSBA24dT4KW1rEm2IStcrFrH420I0NIjAbWE5cf4Hy35ptW5pvHt3n0Jyq9r-2MqpXv8snKAH4vOKzUNrp-woksJkkj7QGs-AzVOZ65ckcEn0j0cS3G5WW1ztEahOPJ0hjuPh_UJnU-dq2TCo_CIju7w.VWjcSCHr7tE6fC2d.INE3AtrjJIt0KcGpBiIux-sj4mW4iGoCgU15i2F5b2-QQ9LSSQuVSVbYpXxbyfblYrEB9E9s872ZK3zCAMPzc_3wZL3tAE1kNjD1LJ7fbK4LQskKe4vsy4rOxY4VbYwNnZo5-Lsr7HSKN_EFIUgC25oGkAIkc0AWwe-k19S8GZhKObHCGhxU8e4xJ4DDj2i2LHYlOAR28STHPeg2ZdcoerWiWLdWvUCimrVJRHkWM1egRPDY8qDzSFK-LcghctydfF9kiX0vg7qP8UMogN3s9xdc-SsWdrMvrh9p7FUJTkt5kCf-MZnahwC5qnU9MDmYnfEQCLsGBK7aIQMK5UDAefuskB7Rz2VKc11q0vz0wAx9PBWXetxy3q6jUeDOnzbjzQPUt2UXdawnBQEipbAqGyDUEnRO3PvL7PRVZXundo4AxrMT_DzJmhN4M-aUKdnHokXLyxFC2IMkpD82naUQwg6oeQSmkqGH_EuPta1GAKYs3f14PLBOwveFFyCUPwRrau-TOEGvAsZBpOY_o5zwS8xD3CN8WwX-nsGWTXitV8lC9JzHzRU-AZ_w8eewNrB5oQzw6Q79w1FNqrTKe0yQ_DndAXYo-ateSBCKjn1aERR_zjfAWVgnItn5B-9HEsXDyl_Cbq4_jQXg_WOQehdWo0Lk_jG20lwr03MQpnrJ8ZbKYeDUsHfHQeYl_yq6DjBEn7yTjS9nLLtyCQgDLCbL8fuB-OqaPqS_yATbQ-Cne7UU1vJqOFneWwER2Q1zA0uxfXVst0rp41TJs1vYkXAlMiwpftQ1kZ6WcetVfb26kkZRyYK7DL5tFZozZI07QW9qAstCP1v_Kuw32WG-ph4TRdaoyUzkGXFZJ1a3U0bZPzRn62ZEYdJLP5E0raAs4FNrCkz9uqVnrXp0qOjlBwLvYVwYh6QQo2_DrP-GPBnqF0Pj4qWPAb9U_d2tE1d1PDxkyLi9-6IlIsd_iE6NDMSJO36W4_RM4fTasC8fF9uMy1s94dqQwO7u13vzBRG79b3tFOdihNKRdpwEWwBcr5GcXTkGIYqvIp2n3Ap4cINrPzjkW9jECZo2vyf2yPbJzQuEWTcCjh6PemiZ1KIBcWqdjYaJqymLa8riDmUjfT5NfAbot_A_3aijFqcGCe8NJOF0ee_bSkfbebUa9EAGDIToWJVFHA72AsINPgJFXMXKOtNkNfYLCLuFrqgn6qLkRVdfqNWeuKs4y-9nmbigCaQp_NqnjVKDbISpSD4mcvXr41K6OgiMv9yt5IyuVuyhfJLAvZnlvl0Ghb-FUZ5kWo1oRpPnNnwUnPMLXC1yjZF32WABwOJgGMlPCUQkefMNqvCNWZgNtGTor4SrL6gGm4EZ08kivDpHB5RQ3DYQOQxyFi15lOS53-wIOxDTVJ8DXKs3F_VCdyWiMvH1OARxZCvK3JJ2Yq5BCx1dL9h2GFC_yApsUbwBqudMFVcYSj9u2SwSLH_L-Z-trR5-DZtJdA-iLzW033pOO7yNgCXdnsVSDKNjWpETm7fxrsdSZCkdPTGswB3bicenWRw8NnkvKtrPRZm2aAG9LD_YGs3JQrx7FaO1FIA8LQKXkcYvl7jJU0kP6FdBibXwf53wiS2AGsX0H46MF6U3LABjpBCGSc2bcIBbd--SfGdtFZdavIc1G4IbPoSqZs3TaBrYIL_5u3DQ6B2FWwnJqxH9-uWGZNdqLsI49KaMraV6HAuQzFb81hfwUXQOvu1an8iPH1q22657DusNUz_na7wo-DpqiYtmOhf_SHCinf4q9Dr3VbJfPhLVNmQ89MY_8xF-3f3ugQAkAp3iti10aq7xEzIvgWOiQnlpp-FTXMC_tbntQniIxZbrgf142RdkHwlZE0wrg0wOesSzlDMyWGofoSKecWvCvNe0-fddOQ-323q-rgwwwazEZgRjcy4jCGS80TgTkym-Px0Qsrqcg-LgqlrwFJwbeRcXye8gs4G3KOlaCoFX4SrDZX8u2_4TVFMm8AXOJGdq2hVH-mCDZZFDz09t7LM.BChTO7Opi98G70GyWgpIsg",
  "prompt": "consent",
  "claims": "{\"id_token\":{\"auth_time\":{\"essential\":true}},\"user_info\":{\"auth_time\":{\"essential\":true}}}",
  "response_mode": "form_post"
}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:27 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Authorization endpoint
2022-09-15 15:44:27 SUCCESS
ExtractRequestObject
Parsed request object
request_object
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJkQkFZU3dsY01FVGJtNmE1NkZTU3hWeFNLOGVyZWxmUUFqRlVxQ0NBbWtvIn0.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.PMol_UA4wl1bOVCuF0yvvgQhCbvYh-fBSfbORgNj6TJ559AWJZWKkXNFoq3UJmLjuyhqE-yE_HSTmQl5bEtsy2_-B6gMtvwNekhC3ZK_qNerC3Fa51JziVwGFTBq3f5gx7JFTKM2JLPDecqiYEwTqTZQ9p9IceZo7nBJ7ys6NBF0MW-yAm7XKs4XzxxysMV9LCjcZr_Sem9S1KerJD7SqlguBiaWqqjDvwtxjHzXg1c9lHWmR4zyxNHxbUu4aJXyM2fRo6QcH6O4sudro71abHa0W877usKpVqV_hRAMeFNEiwl2tNn-fBiMPunFfycvwQOYMO0-t1x44PO33ONXmg",
  "header": {
    "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
    "typ": "oauth-authz-req+jwt",
    "alg": "PS256"
  },
  "claims": {
    "iss": "oXLWBP4Vx6K9VuGuQnDj7",
    "response_type": "code id_token",
    "code_challenge_method": "S256",
    "nonce": "6782c8864cb37bdf255b03969ae07b92300fdf6b51eb0d056d3ef1b6751005f5",
    "client_id": "oXLWBP4Vx6K9VuGuQnDj7",
    "response_mode": "form_post",
    "max_age": 900,
    "aud": "https://www.certification.openid.net/test/a/u4c-staging/",
    "nbf": 1663256657,
    "scope": "openid consent:urn:conformance:oidf:zA1emPUtSd payments",
    "claims": "{\"id_token\":{\"auth_time\":{\"essential\":true}},\"user_info\":{\"auth_time\":{\"essential\":true}}}",
    "redirect_uri": "https://tpp.localhost/v1/callback",
    "state": "7323db89302f44097ce225623101a2860db4bc7611676adbcefbcc7a2a83d3e3",
    "exp": 1663256957,
    "iat": 1663256657,
    "code_challenge": "TAh-exkFKuN2WrdtxPfJ1jRKdxslXM7M52-WbGc9vMc",
    "jti": "p_j5b3j5mIar9P3WCEnUVES4KSypAl3HAIDQKe6Zb64"
  },
  "jwe_header": {
    "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
    "cty": "oauth-authz-req+jwt",
    "enc": "A256GCM",
    "alg": "RSA-OAEP"
  }
}
2022-09-15 15:44:27 SUCCESS
EnsureRequestObjectWasEncrypted
Request object was encrypted
jwe_header
{
  "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
  "cty": "oauth-authz-req+jwt",
  "enc": "A256GCM",
  "alg": "RSA-OAEP"
}
2022-09-15 15:44:27 SUCCESS
FAPIBrazilEnsureRequestObjectEncryptedUsingRSAOAEPA256GCM
Request object was encrypted using RSA-OAEP and A256GCM
jwe_header
{
  "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
  "cty": "oauth-authz-req+jwt",
  "enc": "A256GCM",
  "alg": "RSA-OAEP"
}
2022-09-15 15:44:27 SUCCESS
ValidateEncryptedRequestObjectHasKid
kid was found in the encrypted request object header
kid
0fe502dd-14f0-4f45-80f9-feb9a216f996
2022-09-15 15:44:27 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "oXLWBP4Vx6K9VuGuQnDj7",
  "scope": "openid consent:urn:conformance:oidf:zA1emPUtSd payments",
  "response_type": "code id_token",
  "redirect_uri": "https://tpp.localhost/v1/callback",
  "request": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00iLCJjdHkiOiJvYXV0aC1hdXRoei1yZXErand0Iiwia2lkIjoiMGZlNTAyZGQtMTRmMC00ZjQ1LTgwZjktZmViOWEyMTZmOTk2In0.U0f7hZQfGNYItQQt99HTNc0j6lhmNxsUcyPuzIpiDJXN5aXPCkbrn4l8iZmZ5eRKkFVklTKG40KRlfwd5Nv9KqxAb4wc5LQsKAFrg-Ss8izOFDl5QRXlB2-r5kvCY74ovgKcRiC1WPXLbhelSETPtREfNn6xUqqbjvJg36DbGRLi59U4QMeZxjEpLzdF6wpSBA24dT4KW1rEm2IStcrFrH420I0NIjAbWE5cf4Hy35ptW5pvHt3n0Jyq9r-2MqpXv8snKAH4vOKzUNrp-woksJkkj7QGs-AzVOZ65ckcEn0j0cS3G5WW1ztEahOPJ0hjuPh_UJnU-dq2TCo_CIju7w.VWjcSCHr7tE6fC2d.INE3AtrjJIt0KcGpBiIux-sj4mW4iGoCgU15i2F5b2-QQ9LSSQuVSVbYpXxbyfblYrEB9E9s872ZK3zCAMPzc_3wZL3tAE1kNjD1LJ7fbK4LQskKe4vsy4rOxY4VbYwNnZo5-Lsr7HSKN_EFIUgC25oGkAIkc0AWwe-k19S8GZhKObHCGhxU8e4xJ4DDj2i2LHYlOAR28STHPeg2ZdcoerWiWLdWvUCimrVJRHkWM1egRPDY8qDzSFK-LcghctydfF9kiX0vg7qP8UMogN3s9xdc-SsWdrMvrh9p7FUJTkt5kCf-MZnahwC5qnU9MDmYnfEQCLsGBK7aIQMK5UDAefuskB7Rz2VKc11q0vz0wAx9PBWXetxy3q6jUeDOnzbjzQPUt2UXdawnBQEipbAqGyDUEnRO3PvL7PRVZXundo4AxrMT_DzJmhN4M-aUKdnHokXLyxFC2IMkpD82naUQwg6oeQSmkqGH_EuPta1GAKYs3f14PLBOwveFFyCUPwRrau-TOEGvAsZBpOY_o5zwS8xD3CN8WwX-nsGWTXitV8lC9JzHzRU-AZ_w8eewNrB5oQzw6Q79w1FNqrTKe0yQ_DndAXYo-ateSBCKjn1aERR_zjfAWVgnItn5B-9HEsXDyl_Cbq4_jQXg_WOQehdWo0Lk_jG20lwr03MQpnrJ8ZbKYeDUsHfHQeYl_yq6DjBEn7yTjS9nLLtyCQgDLCbL8fuB-OqaPqS_yATbQ-Cne7UU1vJqOFneWwER2Q1zA0uxfXVst0rp41TJs1vYkXAlMiwpftQ1kZ6WcetVfb26kkZRyYK7DL5tFZozZI07QW9qAstCP1v_Kuw32WG-ph4TRdaoyUzkGXFZJ1a3U0bZPzRn62ZEYdJLP5E0raAs4FNrCkz9uqVnrXp0qOjlBwLvYVwYh6QQo2_DrP-GPBnqF0Pj4qWPAb9U_d2tE1d1PDxkyLi9-6IlIsd_iE6NDMSJO36W4_RM4fTasC8fF9uMy1s94dqQwO7u13vzBRG79b3tFOdihNKRdpwEWwBcr5GcXTkGIYqvIp2n3Ap4cINrPzjkW9jECZo2vyf2yPbJzQuEWTcCjh6PemiZ1KIBcWqdjYaJqymLa8riDmUjfT5NfAbot_A_3aijFqcGCe8NJOF0ee_bSkfbebUa9EAGDIToWJVFHA72AsINPgJFXMXKOtNkNfYLCLuFrqgn6qLkRVdfqNWeuKs4y-9nmbigCaQp_NqnjVKDbISpSD4mcvXr41K6OgiMv9yt5IyuVuyhfJLAvZnlvl0Ghb-FUZ5kWo1oRpPnNnwUnPMLXC1yjZF32WABwOJgGMlPCUQkefMNqvCNWZgNtGTor4SrL6gGm4EZ08kivDpHB5RQ3DYQOQxyFi15lOS53-wIOxDTVJ8DXKs3F_VCdyWiMvH1OARxZCvK3JJ2Yq5BCx1dL9h2GFC_yApsUbwBqudMFVcYSj9u2SwSLH_L-Z-trR5-DZtJdA-iLzW033pOO7yNgCXdnsVSDKNjWpETm7fxrsdSZCkdPTGswB3bicenWRw8NnkvKtrPRZm2aAG9LD_YGs3JQrx7FaO1FIA8LQKXkcYvl7jJU0kP6FdBibXwf53wiS2AGsX0H46MF6U3LABjpBCGSc2bcIBbd--SfGdtFZdavIc1G4IbPoSqZs3TaBrYIL_5u3DQ6B2FWwnJqxH9-uWGZNdqLsI49KaMraV6HAuQzFb81hfwUXQOvu1an8iPH1q22657DusNUz_na7wo-DpqiYtmOhf_SHCinf4q9Dr3VbJfPhLVNmQ89MY_8xF-3f3ugQAkAp3iti10aq7xEzIvgWOiQnlpp-FTXMC_tbntQniIxZbrgf142RdkHwlZE0wrg0wOesSzlDMyWGofoSKecWvCvNe0-fddOQ-323q-rgwwwazEZgRjcy4jCGS80TgTkym-Px0Qsrqcg-LgqlrwFJwbeRcXye8gs4G3KOlaCoFX4SrDZX8u2_4TVFMm8AXOJGdq2hVH-mCDZZFDz09t7LM.BChTO7Opi98G70GyWgpIsg",
  "prompt": "consent",
  "claims": "{\"id_token\":{\"auth_time\":{\"essential\":true}},\"user_info\":{\"auth_time\":{\"essential\":true}}}",
  "response_mode": "form_post",
  "iss": "oXLWBP4Vx6K9VuGuQnDj7",
  "code_challenge_method": "S256",
  "nonce": "6782c8864cb37bdf255b03969ae07b92300fdf6b51eb0d056d3ef1b6751005f5",
  "max_age": 900,
  "aud": "https://www.certification.openid.net/test/a/u4c-staging/",
  "nbf": 1663256657,
  "state": "7323db89302f44097ce225623101a2860db4bc7611676adbcefbcc7a2a83d3e3",
  "exp": 1663256957,
  "iat": 1663256657,
  "code_challenge": "TAh-exkFKuN2WrdtxPfJ1jRKdxslXM7M52-WbGc9vMc",
  "jti": "p_j5b3j5mIar9P3WCEnUVES4KSypAl3HAIDQKe6Zb64"
}
2022-09-15 15:44:27 SUCCESS
FAPIValidateRequestObjectSigningAlg
Request object was signed with a permitted algorithm
alg
PS256
2022-09-15 15:44:27
FAPIBrazilValidateRequestObjectIdTokenACRClaims
acr claim is not requested
2022-09-15 15:44:27 SUCCESS
FAPIValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Sep 15, 2022, 3:49:17 PM"
2022-09-15 15:44:27 SUCCESS
FAPI1AdvancedValidateRequestObjectNBFClaim
nbf claim is valid
nbf
"Sep 15, 2022, 3:44:17 PM"
now
"Sep 15, 2022, 3:44:27 PM"
2022-09-15 15:44:27
ValidateRequestObjectClaims
max_age is correctly encoded as a number
max_age
{
  "value": "900"
}
2022-09-15 15:44:27 SUCCESS
ValidateRequestObjectClaims
Request object claims passed all validation checks
2022-09-15 15:44:27 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2022-09-15 15:44:27 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2022-09-15 15:44:27 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2022-09-15 15:44:27 SUCCESS
ValidateRequestObjectSignature
Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg
request_object
eyJhbGciOiJQUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJraWQiOiJkQkFZU3dsY01FVGJtNmE1NkZTU3hWeFNLOGVyZWxmUUFqRlVxQ0NBbWtvIn0.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.PMol_UA4wl1bOVCuF0yvvgQhCbvYh-fBSfbORgNj6TJ559AWJZWKkXNFoq3UJmLjuyhqE-yE_HSTmQl5bEtsy2_-B6gMtvwNekhC3ZK_qNerC3Fa51JziVwGFTBq3f5gx7JFTKM2JLPDecqiYEwTqTZQ9p9IceZo7nBJ7ys6NBF0MW-yAm7XKs4XzxxysMV9LCjcZr_Sem9S1KerJD7SqlguBiaWqqjDvwtxjHzXg1c9lHWmR4zyxNHxbUu4aJXyM2fRo6QcH6O4sudro71abHa0W877usKpVqV_hRAMeFNEiwl2tNn-fBiMPunFfycvwQOYMO0-t1x44PO33ONXmg
request_object_signing_alg
PS256
jwk
{"kty":"RSA","e":"AQAB","use":"sig","kid":"dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko","x5c":["MIIHCDCCBfCgAwIBAgIUXRnn3C6taIY6hZnr2hOydLHa1NEwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDgyOTIwMTUwMFoXDTIzMDkyODIwMTUwMFowgecxCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMWMwFQYDVQQLEw4xMTExMTExMTExMTExMTAdBgNVBAsTFk9wZW4gQmFua2luZyBEaXJlY3RvcnkwKwYDVQQLEyRPcGVuIEJhbmtpbmcgU0FOREJPWCBJc3N1aW5nIENBIC0gRzExKDAmBgNVBAMTH1U0QyBJTlNUSVRVSUNBTyBERSBQQUdBTUVOVE8gU0ExNDAyBgoJkiaJk\/IsZAEBEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFkMzRlODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy1bQPiBQ+ShxdX\/BhOKWZ3nb+Gp9+Ph4dRoRlkN40u+Zf8V3AHg1gbk26VH51UX2ne1V8LlSRwx30\/yUsn\/CRKsgy7vEncL1mO8w3YB6ikhCJ\/l1ZDLBC5BHnL5LLCUI2eeAcHmJkMRPw70bo3w4uDizZbpLkwnXjUX4fsJtvDfjBrX2KPzy2uNSpYyOxp2mDahqkMRXvi+FSZn1AH1VIEoKDK0OU\/LOQ7l3rgFMvk4\/wSgH8FhhB33p\/v0s9QoOgmngJUjyYPVYOOHUvarLEhAIcIjAruHCfnDj1yrpHr\/OW\/A1n5fpiHUooD4S1DyBXZCP41fiHyLTmog3A9idLAgMBAAGjggMfMIIDGzAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRIoBUvee8eyi9x+Xu7Rd0xNXkQYDAfBgNVHSMEGDAWgBSGf1itF\/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMHQGA1UdEQRtMGugHwYFYEwBAwKgFgwURmlyc3ROYW1lIFNlY29uZE5hbWWgGQYFYEwBAwOgEAwOMzA5ODA1MzkwMDAxMTWgFgYFYEwBAwSgDQwLMTExMTExMTExMTGgFQYFYEwBAwegDAwKMTExMTExMTExMTAOBgNVHQ8BAf8EBAMCBsAwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYBBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ugd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lwYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nlc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRpYW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBkb2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczANBgkqhkiG9w0BAQsFAAOCAQEAfmTlWt0PoJ8LoNA2Fx12Wxk9PpurvqzgYD2jzluZPnUCbGSyfB67jCTOJALVOOi4TvQiFn88PPUjTJHbSbn7EYpxz4KCpo8C7mo\/kc\/G1JrwhtQY9Ys1ahFy\/x0i0unNWTcX6rR8byGXV13oyOFQqmWAh8sP\/GHJK6QZCwAZ89qqdHB6kVJ+S1N4vlNbiQSDPWKQCkXsbUW2X6BBXWdEDOiur9\/tK+olTA8lQNEhgxDu9rm3sn\/UlDpaXeZ8FANCm2oIpmU5nMjGcUAxfTMaTm38ZGKeqlJng6d4EK0NS8rZi08C+w32YUxmvN00Ry7v0m\/W4ey1hzw1qhZjo2d0iA=="],"x5u":"https:\/\/keystore.sandbox.directory.openbankingbrasil.org.br\/23f9e3dd-31a1-4eaf-a440-37711ad34e81\/dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko.pem","n":"8tW0D4gUPkocXV_wYTilmd52_hqffj4eHUaEZZDeNLvmX_FdwB4NYG5NulR-dVF9p3tVfC5UkcMd9P8lLJ_wkSrIMu7xJ3C9ZjvMN2AeopIQif5dWQywQuQR5y-SywlCNnngHB5iZDET8O9G6N8OLg4s2W6S5MJ141F-H7Cbbw34wa19ij88trjUqWMjsadpg2oapDEV74vhUmZ9QB9VSBKCgytDlPyzkO5d64BTL5OP8EoB_BYYQd96f79LPUKDoJp4CVI8mD1WDjh1L2qyxIQCHCIwK7hwn5w49cq6R6_zlvwNZ-X6Yh1KKA-EtQ8gV2Qj-NX4h8i05qINwPYnSw"}
2022-09-15 15:44:27 SUCCESS
EnsureMatchingRedirectUriInRequestObject
Redirect URI matched
actual
https://tpp.localhost/v1/callback
2022-09-15 15:44:27 SUCCESS
EnsureRequiredAuthorizationRequestParametersMatchRequestObject
Required http request parameters match request object claims
response_type
code id_token
client_id
oXLWBP4Vx6K9VuGuQnDj7
2022-09-15 15:44:27 SUCCESS
EnsureOptionalAuthorizationRequestParametersMatchRequestObject
All http request parameters and request object claims match
2022-09-15 15:44:27 SUCCESS
EnsureAuthorizationHttpRequestContainsOpenIDScope
Found 'openid' in scope http request parameter
actual
[
  "openid"
]
expected
openid
2022-09-15 15:44:27 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
openid consent:urn:conformance:oidf:zA1emPUtSd payments
2022-09-15 15:44:27 SUCCESS
FAPIBrazilValidateConsentScope
Found consent scope in request
actual
[
  "openid",
  "consent:urn:conformance:oidf:zA1emPUtSd",
  "payments"
]
expected
consent:urn:conformance:oidf:zA1emPUtSd
2022-09-15 15:44:27 SUCCESS
EnsureScopeContainsPayments
Found payments scope in request
actual
[
  "openid",
  "consent:urn:conformance:oidf:zA1emPUtSd",
  "payments"
]
2022-09-15 15:44:27 SUCCESS
EnsureResponseTypeIsCodeIdToken
Response type is expected value
expected
code id_token
2022-09-15 15:44:27 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual
[
  "openid",
  "consent:urn:conformance:oidf:zA1emPUtSd",
  "payments"
]
expected
openid
2022-09-15 15:44:27 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
oXLWBP4Vx6K9VuGuQnDj7
2022-09-15 15:44:27 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
GCwOkOWIIeTcEkNwl4WFj6ZzFlvR9Q4J
2022-09-15 15:44:27 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
6782c8864cb37bdf255b03969ae07b92300fdf6b51eb0d056d3ef1b6751005f5
2022-09-15 15:44:27 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash
4_b7Nnw7EJN3rECmiw8xBA
2022-09-15 15:44:27 SUCCESS
CalculateSHash
Successful s_hash encoding
s_hash
tfxK5kmpArC5sySWCmJ5yQ
2022-09-15 15:44:27 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/u4c-staging/
sub
user-subject-1234531
aud
oXLWBP4Vx6K9VuGuQnDj7
nonce
6782c8864cb37bdf255b03969ae07b92300fdf6b51eb0d056d3ef1b6751005f5
iat
1663256667
exp
1663256967
2022-09-15 15:44:27
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Request object does not contain a claims element.id_token
2022-09-15 15:44:27 SUCCESS
AddCHashToIdTokenClaims
Added c_hash to ID token claims
c_hash
4_b7Nnw7EJN3rECmiw8xBA
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/u4c-staging/",
  "sub": "user-subject-1234531",
  "aud": "oXLWBP4Vx6K9VuGuQnDj7",
  "nonce": "6782c8864cb37bdf255b03969ae07b92300fdf6b51eb0d056d3ef1b6751005f5",
  "iat": 1663256667,
  "exp": 1663256967,
  "c_hash": "4_b7Nnw7EJN3rECmiw8xBA"
}
2022-09-15 15:44:27 SUCCESS
AddSHashToIdTokenClaims
Added s_hash to ID token claims
s_hash
tfxK5kmpArC5sySWCmJ5yQ
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/u4c-staging/",
  "sub": "user-subject-1234531",
  "aud": "oXLWBP4Vx6K9VuGuQnDj7",
  "nonce": "6782c8864cb37bdf255b03969ae07b92300fdf6b51eb0d056d3ef1b6751005f5",
  "iat": 1663256667,
  "exp": 1663256967,
  "c_hash": "4_b7Nnw7EJN3rECmiw8xBA",
  "s_hash": "tfxK5kmpArC5sySWCmJ5yQ"
}
2022-09-15 15:44:27 INFO
AddAtHashToIdTokenClaims
Skipped evaluation due to missing required string: at_hash
expected
at_hash
2022-09-15 15:44:27 INFO
FAPIBrazilAddACRClaimToIdTokenClaims
Skipped evaluation due to missing required string: requested_id_token_acr_values
expected
requested_id_token_acr_values
2022-09-15 15:44:27 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImNfaGFzaCI6IjRfYjdObnc3RUpOM3JFQ21pdzh4QkEiLCJzX2hhc2giOiJ0ZnhLNWttcEFyQzVzeVNXQ21KNXlRIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3U0Yy1zdGFnaW5nXC8iLCJleHAiOjE2NjMyNTY5NjcsIm5vbmNlIjoiNjc4MmM4ODY0Y2IzN2JkZjI1NWIwMzk2OWFlMDdiOTIzMDBmZGY2YjUxZWIwZDA1NmQzZWYxYjY3NTEwMDVmNSIsImlhdCI6MTY2MzI1NjY2N30.C_jKQtwGlMQnJOMrV7X9iQVMZ4S5PRIEMFEVaNPr8tYxr5jDQ9CJ9bSDBIkruL-r7xjy5wvGtePXeV9I9sVIV3OOJUpou8V5HKLBefbhuOoJil2683s8_uSDi766N4NmSj8M8GIFBWuJscqjgYRL6ToU3ghEttFgZl06URjGhAjqgIUXjAvSUOOi8f0IjTOor_n7-03e7LxiI-Ogdw27dSH5mtguyuDVXSM5LmWoYdGTGvXxzvLaNd3UTbmZh7o959fydPorHJQ56yksugkvC_2PX18YuLIBYs_6Hcxv-po8DE03PozOOs1M3k_AMAA01pImX0dyvgTpcEBWZ9jiLA
2022-09-15 15:44:27 SUCCESS
FAPIBrazilChangeConsentStatusToAuthorized
Changed consent status to AUTHORISED
consent
{
  "data": {
    "consentId": "urn:conformance:oidf:zA1emPUtSd",
    "creationDateTime": "2022-09-15T15:44:16Z",
    "status": "AUTHORISED",
    "statusUpdateDateTime": "2022-09-15T15:44:27Z",
    "expirationDateTime": "2022-09-15T17:44:16Z",
    "transactionFromDateTime": "2022-09-15T15:39:16Z",
    "transactionToDateTime": "2022-09-15T17:44:16Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/u4c-stagingpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-09-15T15:44:16Z"
    },
    "creditor": {
      "name": "Cara que vai Receber",
      "cpfCnpj": "44471172000119",
      "personType": "PESSOA_JURIDICA"
    },
    "loggedUser": {
      "document": {
        "identification": "76109277673",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2022-09-15",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "proxy": "chave@pix.com",
        "localInstrument": "INIC",
        "creditorAccount": {
          "number": "13839200",
          "accountType": "CACC",
          "ispb": "00104123",
          "issuer": "1525"
        }
      },
      "type": "PIX"
    }
  },
  "aud": "23f9e3dd-31a1-4eaf-a440-37711ad34e81",
  "iat": 1663256656,
  "jti": "6eef7b7b-2049-466f-b7f7-92e18997e33f",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}
2022-09-15 15:44:27 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "https://tpp.localhost/v1/callback",
  "state": "7323db89302f44097ce225623101a2860db4bc7611676adbcefbcc7a2a83d3e3"
}
2022-09-15 15:44:27 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://tpp.localhost/v1/callback",
  "state": "7323db89302f44097ce225623101a2860db4bc7611676adbcefbcc7a2a83d3e3",
  "code": "GCwOkOWIIeTcEkNwl4WFj6ZzFlvR9Q4J"
}
2022-09-15 15:44:27 SUCCESS
AddIdTokenToAuthorizationEndpointResponseParams
Added id_token to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "https://tpp.localhost/v1/callback",
  "state": "7323db89302f44097ce225623101a2860db4bc7611676adbcefbcc7a2a83d3e3",
  "code": "GCwOkOWIIeTcEkNwl4WFj6ZzFlvR9Q4J",
  "id_token": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImNfaGFzaCI6IjRfYjdObnc3RUpOM3JFQ21pdzh4QkEiLCJzX2hhc2giOiJ0ZnhLNWttcEFyQzVzeVNXQ21KNXlRIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3U0Yy1zdGFnaW5nXC8iLCJleHAiOjE2NjMyNTY5NjcsIm5vbmNlIjoiNjc4MmM4ODY0Y2IzN2JkZjI1NWIwMzk2OWFlMDdiOTIzMDBmZGY2YjUxZWIwZDA1NmQzZWYxYjY3NTEwMDVmNSIsImlhdCI6MTY2MzI1NjY2N30.C_jKQtwGlMQnJOMrV7X9iQVMZ4S5PRIEMFEVaNPr8tYxr5jDQ9CJ9bSDBIkruL-r7xjy5wvGtePXeV9I9sVIV3OOJUpou8V5HKLBefbhuOoJil2683s8_uSDi766N4NmSj8M8GIFBWuJscqjgYRL6ToU3ghEttFgZl06URjGhAjqgIUXjAvSUOOi8f0IjTOor_n7-03e7LxiI-Ogdw27dSH5mtguyuDVXSM5LmWoYdGTGvXxzvLaNd3UTbmZh7o959fydPorHJQ56yksugkvC_2PX18YuLIBYs_6Hcxv-po8DE03PozOOs1M3k_AMAA01pImX0dyvgTpcEBWZ9jiLA"
}
2022-09-15 15:44:27
SendAuthorizationResponseWithResponseModeFragment
Redirecting back to client
uri
https://tpp.localhost/v1/callback#state=7323db89302f44097ce225623101a2860db4bc7611676adbcefbcc7a2a83d3e3&code=GCwOkOWIIeTcEkNwl4WFj6ZzFlvR9Q4J&id_token=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImNfaGFzaCI6IjRfYjdObnc3RUpOM3JFQ21pdzh4QkEiLCJzX2hhc2giOiJ0ZnhLNWttcEFyQzVzeVNXQ21KNXlRIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3U0Yy1zdGFnaW5nXC8iLCJleHAiOjE2NjMyNTY5NjcsIm5vbmNlIjoiNjc4MmM4ODY0Y2IzN2JkZjI1NWIwMzk2OWFlMDdiOTIzMDBmZGY2YjUxZWIwZDA1NmQzZWYxYjY3NTEwMDVmNSIsImlhdCI6MTY2MzI1NjY2N30.C_jKQtwGlMQnJOMrV7X9iQVMZ4S5PRIEMFEVaNPr8tYxr5jDQ9CJ9bSDBIkruL-r7xjy5wvGtePXeV9I9sVIV3OOJUpou8V5HKLBefbhuOoJil2683s8_uSDi766N4NmSj8M8GIFBWuJscqjgYRL6ToU3ghEttFgZl06URjGhAjqgIUXjAvSUOOi8f0IjTOor_n7-03e7LxiI-Ogdw27dSH5mtguyuDVXSM5LmWoYdGTGvXxzvLaNd3UTbmZh7o959fydPorHJQ56yksugkvC_2PX18YuLIBYs_6Hcxv-po8DE03PozOOs1M3k_AMAA01pImX0dyvgTpcEBWZ9jiLA
2022-09-15 15:44:27 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://tpp.localhost/v1/callback#state=7323db89302f44097ce225623101a2860db4bc7611676adbcefbcc7a2a83d3e3&code=GCwOkOWIIeTcEkNwl4WFj6ZzFlvR9Q4J&id_token=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImNfaGFzaCI6IjRfYjdObnc3RUpOM3JFQ21pdzh4QkEiLCJzX2hhc2giOiJ0ZnhLNWttcEFyQzVzeVNXQ21KNXlRIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3U0Yy1zdGFnaW5nXC8iLCJleHAiOjE2NjMyNTY5NjcsIm5vbmNlIjoiNjc4MmM4ODY0Y2IzN2JkZjI1NWIwMzk2OWFlMDdiOTIzMDBmZGY2YjUxZWIwZDA1NmQzZWYxYjY3NTEwMDVmNSIsImlhdCI6MTY2MzI1NjY2N30.C_jKQtwGlMQnJOMrV7X9iQVMZ4S5PRIEMFEVaNPr8tYxr5jDQ9CJ9bSDBIkruL-r7xjy5wvGtePXeV9I9sVIV3OOJUpou8V5HKLBefbhuOoJil2683s8_uSDi766N4NmSj8M8GIFBWuJscqjgYRL6ToU3ghEttFgZl06URjGhAjqgIUXjAvSUOOi8f0IjTOor_n7-03e7LxiI-Ogdw27dSH5mtguyuDVXSM5LmWoYdGTGvXxzvLaNd3UTbmZh7o959fydPorHJQ56yksugkvC_2PX18YuLIBYs_6Hcxv-po8DE03PozOOs1M3k_AMAA01pImX0dyvgTpcEBWZ9jiLA]
outgoing_path
authorize
2022-09-15 15:44:28 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:28 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:28 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:44:29 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/jwks
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/jwks
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:29 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:29 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}
outgoing_path
jwks
2022-09-15 15:44:30 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1065"
}
incoming_path
/test-mtls/a/u4c-staging/token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "GCwOkOWIIeTcEkNwl4WFj6ZzFlvR9Q4J",
  "redirect_uri": "https://tpp.localhost/v1/callback",
  "code_verifier": "WQZzuhwGFeyOYxl8qtvD3w7Li_M7Jt7bP4iDg-s5lcE",
  "client_id": "oXLWBP4Vx6K9VuGuQnDj7",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY2NjksImV4cCI6MTY2MzI1NjcyOSwianRpIjoiY3BXLU5YUUUzNk9zdGE1UHJNbDdSZ2RMUVlKRHFKMWFRUFRwM2xMRmJEOCIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6Imh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0LW10bHMvYS91NGMtc3RhZ2luZy90b2tlbiJ9.wN-H7diHY27qMe_4FulpgnNDO11QitDFG27bA0jh53Y3kTkjnQH09g1_ZCkQzcNqwF1d6bTaqk5wQdCT74XysbCjaj0mwHbUNvIfMg-S92-Gf7UWO2CkJpD4scBkfkBvm45VTx3-NT8RUQMbDiLuOX-F72hUSRJIeMxzGjh0RI-bc0Z3tK-Vvory9e2aOLoGiZFD75j1JyDywuBKZFfyGRo5gV_ZktLBs_YkvmSUQdFkAf5wvFFVEfiLDUnzxJlXjdj2VlBdRqjWXdZt3GY4ZaaV2vF_T0gyoLw3QxT2pfQiZbD6ZQElktriz5y0vittKjmc3eW98C1gMrXWslIt9w",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=GCwOkOWIIeTcEkNwl4WFj6ZzFlvR9Q4J&redirect_uri=https%3A%2F%2Ftpp.localhost%2Fv1%2Fcallback&code_verifier=WQZzuhwGFeyOYxl8qtvD3w7Li_M7Jt7bP4iDg-s5lcE&client_id=oXLWBP4Vx6K9VuGuQnDj7&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY2NjksImV4cCI6MTY2MzI1NjcyOSwianRpIjoiY3BXLU5YUUUzNk9zdGE1UHJNbDdSZ2RMUVlKRHFKMWFRUFRwM2xMRmJEOCIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6Imh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0LW10bHMvYS91NGMtc3RhZ2luZy90b2tlbiJ9.wN-H7diHY27qMe_4FulpgnNDO11QitDFG27bA0jh53Y3kTkjnQH09g1_ZCkQzcNqwF1d6bTaqk5wQdCT74XysbCjaj0mwHbUNvIfMg-S92-Gf7UWO2CkJpD4scBkfkBvm45VTx3-NT8RUQMbDiLuOX-F72hUSRJIeMxzGjh0RI-bc0Z3tK-Vvory9e2aOLoGiZFD75j1JyDywuBKZFfyGRo5gV_ZktLBs_YkvmSUQdFkAf5wvFFVEfiLDUnzxJlXjdj2VlBdRqjWXdZt3GY4ZaaV2vF_T0gyoLw3QxT2pfQiZbD6ZQElktriz5y0vittKjmc3eW98C1gMrXWslIt9w&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:30 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-09-15 15:44:30 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
oXLWBP4Vx6K9VuGuQnDj7
2022-09-15 15:44:30 SUCCESS
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\npk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dd7c6d9f2-14fe-41f6-be1f-00c7a10348ff,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#130f427573696e65737320456e74697479,2.5.4.5\u003d#130e3330393830353339303030313135,CN\u003d*.u4c-iniciador.com.br,OU\u003d23f9e3dd-31a1-4eaf-a440-37711ad34e81,O\u003dU4C INSTITUICAO DE PAGAMENTO SA,L\u003dBelo Horizonte,ST\u003dMG,C\u003dBR"
  },
  "sanDnsNames": [
    "*.u4c-iniciador.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-09-15 15:44:30 SUCCESS
CheckForClientCertificate
Found client certificate
2022-09-15 15:44:30 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-09-15 15:44:30 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY2NjksImV4cCI6MTY2MzI1NjcyOSwianRpIjoiY3BXLU5YUUUzNk9zdGE1UHJNbDdSZ2RMUVlKRHFKMWFRUFRwM2xMRmJEOCIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6Imh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0LW10bHMvYS91NGMtc3RhZ2luZy90b2tlbiJ9.wN-H7diHY27qMe_4FulpgnNDO11QitDFG27bA0jh53Y3kTkjnQH09g1_ZCkQzcNqwF1d6bTaqk5wQdCT74XysbCjaj0mwHbUNvIfMg-S92-Gf7UWO2CkJpD4scBkfkBvm45VTx3-NT8RUQMbDiLuOX-F72hUSRJIeMxzGjh0RI-bc0Z3tK-Vvory9e2aOLoGiZFD75j1JyDywuBKZFfyGRo5gV_ZktLBs_YkvmSUQdFkAf5wvFFVEfiLDUnzxJlXjdj2VlBdRqjWXdZt3GY4ZaaV2vF_T0gyoLw3QxT2pfQiZbD6ZQElktriz5y0vittKjmc3eW98C1gMrXWslIt9w",
  "header": {
    "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "oXLWBP4Vx6K9VuGuQnDj7",
    "aud": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "iss": "oXLWBP4Vx6K9VuGuQnDj7",
    "exp": 1663256729,
    "iat": 1663256669,
    "jti": "cpW-NXQE36Osta5PrMl7RgdLQYJDqJ1aQPTp3lLFbD8"
  }
}
2022-09-15 15:44:30
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-09-15 15:44:30 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY2NjksImV4cCI6MTY2MzI1NjcyOSwianRpIjoiY3BXLU5YUUUzNk9zdGE1UHJNbDdSZ2RMUVlKRHFKMWFRUFRwM2xMRmJEOCIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6Imh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0LW10bHMvYS91NGMtc3RhZ2luZy90b2tlbiJ9.wN-H7diHY27qMe_4FulpgnNDO11QitDFG27bA0jh53Y3kTkjnQH09g1_ZCkQzcNqwF1d6bTaqk5wQdCT74XysbCjaj0mwHbUNvIfMg-S92-Gf7UWO2CkJpD4scBkfkBvm45VTx3-NT8RUQMbDiLuOX-F72hUSRJIeMxzGjh0RI-bc0Z3tK-Vvory9e2aOLoGiZFD75j1JyDywuBKZFfyGRo5gV_ZktLBs_YkvmSUQdFkAf5wvFFVEfiLDUnzxJlXjdj2VlBdRqjWXdZt3GY4ZaaV2vF_T0gyoLw3QxT2pfQiZbD6ZQElktriz5y0vittKjmc3eW98C1gMrXWslIt9w
2022-09-15 15:44:30 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-09-15 15:44:30 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-09-15 15:44:30 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
GCwOkOWIIeTcEkNwl4WFj6ZzFlvR9Q4J
2022-09-15 15:44:30 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
https://tpp.localhost/v1/callback
2022-09-15 15:44:30 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG
2022-09-15 15:44:30 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
Sp0igVJjnhSCfViXGB0P_w
2022-09-15 15:44:30
CreateRefreshToken
Created refresh token
refresh_token
gDRXefNliEjSwzPXfeSZyAsxgOarpzglSferrDDGKiybpDqZuu2280622697`"%+{
2022-09-15 15:44:30 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss
https://www.certification.openid.net/test/a/u4c-staging/
sub
user-subject-1234531
aud
oXLWBP4Vx6K9VuGuQnDj7
nonce
6782c8864cb37bdf255b03969ae07b92300fdf6b51eb0d056d3ef1b6751005f5
iat
1663256670
exp
1663256970
2022-09-15 15:44:30
FAPIBrazilAddCPFAndCPNJToIdTokenClaims
Request object does not contain a claims element.id_token
2022-09-15 15:44:30 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash
Sp0igVJjnhSCfViXGB0P_w
id_token_claims
{
  "iss": "https://www.certification.openid.net/test/a/u4c-staging/",
  "sub": "user-subject-1234531",
  "aud": "oXLWBP4Vx6K9VuGuQnDj7",
  "nonce": "6782c8864cb37bdf255b03969ae07b92300fdf6b51eb0d056d3ef1b6751005f5",
  "iat": 1663256670,
  "exp": 1663256970,
  "at_hash": "Sp0igVJjnhSCfViXGB0P_w"
}
2022-09-15 15:44:30 INFO
FAPIBrazilAddACRClaimToIdTokenClaims
Skipped evaluation due to missing required string: requested_id_token_acr_values
expected
requested_id_token_acr_values
2022-09-15 15:44:30 SUCCESS
SignIdToken
Signed the ID token
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiU3AwaWdWSmpuaFNDZlZpWEdCMFBfdyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoib1hMV0JQNFZ4Nks5VnVHdVFuRGo3IiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3U0Yy1zdGFnaW5nXC8iLCJleHAiOjE2NjMyNTY5NzAsIm5vbmNlIjoiNjc4MmM4ODY0Y2IzN2JkZjI1NWIwMzk2OWFlMDdiOTIzMDBmZGY2YjUxZWIwZDA1NmQzZWYxYjY3NTEwMDVmNSIsImlhdCI6MTY2MzI1NjY3MH0.l-U0a5XGmt7C0oX9UJE4zssCh0Bs5d6AE_3Qk6ufGK3kWtcM3WU0EC9VprsIYwCABbiAg37ClYNlyIKehYXX-OgBUc4JIUUuQVpgu8wzcyplqUO6f-rPg9Ss2bmxhzbyPsNQtAzFNfqwdO4x_fRHCdaccUcQjJ7zMX0lyCgCQDxgRrR-N-HI7dOI64st73PWAm_NaR2QZ3pBbok-tYuNFT5QYe9aliDla5gOoCPSN5nd88NP9SB8_CIf2W76oDgnoDWmTSWBYznyoTPu4U5AYmQmLFKePg-ZdaghdylB0kdat2Oby2yljgg3941Ji_JH3tuXV69Z80-1Pr__oxIS8A
2022-09-15 15:44:30 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG
token_type
Bearer
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiU3AwaWdWSmpuaFNDZlZpWEdCMFBfdyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoib1hMV0JQNFZ4Nks5VnVHdVFuRGo3IiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3U0Yy1zdGFnaW5nXC8iLCJleHAiOjE2NjMyNTY5NzAsIm5vbmNlIjoiNjc4MmM4ODY0Y2IzN2JkZjI1NWIwMzk2OWFlMDdiOTIzMDBmZGY2YjUxZWIwZDA1NmQzZWYxYjY3NTEwMDVmNSIsImlhdCI6MTY2MzI1NjY3MH0.l-U0a5XGmt7C0oX9UJE4zssCh0Bs5d6AE_3Qk6ufGK3kWtcM3WU0EC9VprsIYwCABbiAg37ClYNlyIKehYXX-OgBUc4JIUUuQVpgu8wzcyplqUO6f-rPg9Ss2bmxhzbyPsNQtAzFNfqwdO4x_fRHCdaccUcQjJ7zMX0lyCgCQDxgRrR-N-HI7dOI64st73PWAm_NaR2QZ3pBbok-tYuNFT5QYe9aliDla5gOoCPSN5nd88NP9SB8_CIf2W76oDgnoDWmTSWBYznyoTPu4U5AYmQmLFKePg-ZdaghdylB0kdat2Oby2yljgg3941Ji_JH3tuXV69Z80-1Pr__oxIS8A
refresh_token
gDRXefNliEjSwzPXfeSZyAsxgOarpzglSferrDDGKiybpDqZuu2280622697`"%+{
scope
openid consent:urn:conformance:oidf:zA1emPUtSd payments
2022-09-15 15:44:30
RemoveIssuedAccessTokenFromEnvironment
Removed access_token and token_type from environment
2022-09-15 15:44:30 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiU3AwaWdWSmpuaFNDZlZpWEdCMFBfdyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoib1hMV0JQNFZ4Nks5VnVHdVFuRGo3IiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3U0Yy1zdGFnaW5nXC8iLCJleHAiOjE2NjMyNTY5NzAsIm5vbmNlIjoiNjc4MmM4ODY0Y2IzN2JkZjI1NWIwMzk2OWFlMDdiOTIzMDBmZGY2YjUxZWIwZDA1NmQzZWYxYjY3NTEwMDVmNSIsImlhdCI6MTY2MzI1NjY3MH0.l-U0a5XGmt7C0oX9UJE4zssCh0Bs5d6AE_3Qk6ufGK3kWtcM3WU0EC9VprsIYwCABbiAg37ClYNlyIKehYXX-OgBUc4JIUUuQVpgu8wzcyplqUO6f-rPg9Ss2bmxhzbyPsNQtAzFNfqwdO4x_fRHCdaccUcQjJ7zMX0lyCgCQDxgRrR-N-HI7dOI64st73PWAm_NaR2QZ3pBbok-tYuNFT5QYe9aliDla5gOoCPSN5nd88NP9SB8_CIf2W76oDgnoDWmTSWBYznyoTPu4U5AYmQmLFKePg-ZdaghdylB0kdat2Oby2yljgg3941Ji_JH3tuXV69Z80-1Pr__oxIS8A",
  "refresh_token": "gDRXefNliEjSwzPXfeSZyAsxgOarpzglSferrDDGKiybpDqZuu2280622697`\"%+{",
  "scope": "openid consent:urn:conformance:oidf:zA1emPUtSd payments"
}
outgoing_path
token
2022-09-15 15:44:30 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:30 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:30 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:44:31 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG",
  "content-type": "application/jwt",
  "x-idempotency-key": "7b073b43-c1ea-4001-9def-c95986c616da",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.K1yHz9ln-EGXPJhzqI2rjuk9y7h7WEsKV-xtEXduvwv2-pkomeLR_ZWPeMnaxh4ukgaJIcFX5alPePKlAQUW5M4w2IbY-_jgHAMxz9Fd6TJgzso0sO382kyQj662L-ZLQ6O-64TUL90xQRfQpBVg4sNkwhnkxPlx5bc3lydsrBxo1VZNbh3FDr0yM8xSPRgHgwo2rqXAyt4mbvTD6TV404sV0isVm-0V4D4-GvuiqQhilgUh94vnAesp25SFkFBcwo5Mrm6aub4bBhb8uykooQFqRrBy05C_-kKbNBQo_iUA7uJcHrO3K7akqoIH3Klo_NBVt_LqYBQUBOfmGuwoXQ
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:31 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-09-15 15:44:31 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-09-15 15:44:31 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-09-15 15:44:32 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:32 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:32 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:44:32 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG",
  "content-type": "application/jwt",
  "x-idempotency-key": "cf5e8fea-4356-482b-8d7d-1c4fe271b9e2",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.AqwXE3nj_BWdORv0YEl_p5jHkPkPiYMb-4qzt_B3P14DHnoScUFNiSqr_RGIRqrFfI97pGJ7Xx5GBhEkoVrPx6nvktoJo_M-z4jtbbjWxcUiQj0gn_pK_uGWQ_AIsAaAEQhSOJP8QuxOakRLn97lZd0lYNbMnrAgJvXVp3P44oTZYm-8gKTkOoIuqNytrIo1UigHfx16MXTK-eV6X5AFQvEiXk1cmzOlSeFxtCZ5C1TIZtJSkjPIGCG39-kU6jZ6rnZ1tB0GxgumllcIv4TlQ-nPWbTwvZ4J-ioI3qzCQpEUnoPK0ckptAVPTXFdsreiq2OJB3mcDikEI4pGxhpJCw
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:32 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-09-15 15:44:32 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-09-15 15:44:32 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-09-15 15:44:33 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:33 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:33 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:44:34 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG",
  "content-type": "application/jwt",
  "x-idempotency-key": "1c8f1205-1a3a-45b7-98c0-0c9e943c5aaa",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.otuTz1-r-OzJhKFLEKeVdcgOU0xl3ibak8X1wQ-HVsaaJzd2aqzCtvCvswhI37E3A-Z4jkdoWoDFmklANqZIgWsJCT-jNAIz97Q4JJq5IkFGT1Al2sLW7KyIsaabJQGxehYSrTmrp85wbaWWVJRZz8P4k4K_domFo2oubPHeRnuhFqNREGPOcv_ngYBPEkRCEvvP2at0XLCkIKe9Wbwk1bXwUWcnXharfzrX7iqY7cOrDN8KxRbjJ8hOB4h_LC3cBvHT2wcmv0M_euMtQFu6vX4zU7AMUFtb6sA9M61YB48WdNqMXVeplA_bZkWmBK5ETi_cW5q1HhfOssdHbVonDw
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:34 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-09-15 15:44:34 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-09-15 15:44:34 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-09-15 15:44:34 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:34 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:34 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:44:35 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG",
  "content-type": "application/jwt",
  "x-idempotency-key": "d1142451-5b1d-4477-ae22-867e8a96db14",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.O6PpAFaU7mptztPBWa0JjJyyr7_0sDsw-eYSr2XeH_QVvhjFyCKpn5cwXu3nIdXT-jFH-UEZ4RybJh5gvmUmmQCXknCjD8PRJwzQpQ9n3quQlKDaPQ3Eshs4tCD2n6aH8fpLKG8o6x6MsGJ8NycSgrLvSbhQHaVB2rKnYIMn24BgGmPNUWVtxdI29J8v5anrMz0ikiT8xZtWJuhKh_xcqv4Ua4eeEJ3UeWJxM05yffBxYLZdOS26VkBLAlotWm4zHBpatipqjclj3ypeq9J9pp3a5RY3nlC-7jXOAY5KHS6siJgRW4iYnfsR0DVUFoZpD2Ib8Mx4FaaXP1EFMBh-Rw
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:35 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-09-15 15:44:35 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-09-15 15:44:35 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-09-15 15:44:36 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:36 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:36 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:44:37 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG",
  "content-type": "application/jwt",
  "x-idempotency-key": "f2de9585-2d35-4f00-97ee-b1b4afe59843",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.SHjSxIB4jdCrS6X46yVq9bSSbtNekRsAzlTQERMjFdWGxT2blf5Pir2Ns9y7U9-16fD_e1RrNwqgOPIrH_fxxpb5gmV8azfonZGd-9hz8y1zUuI3KyH2EgUxsh3_ucMMVz53WP5A4SlAvgS2zipKSoaLGPd493BsGIeLtcs4mYRhCh-g1D9-dyLR_7bAZAdzkquL3PCTY1RwSGUdVL83yrJeN2CxamEnMfy0bpUOsDieu5hS2TDpeA7F8MgXjJwYEDLyO6d6PDvUcIBVuyTMN0G7So7XILnF4Bj7U6FsvrLBbwC9iRL22AJeuyDC3ng2JuXYcRHSIWSeeQ5NgaDD6Q
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:37 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-09-15 15:44:37 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-09-15 15:44:37 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-09-15 15:44:37 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:37 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:37 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:44:38 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG",
  "content-type": "application/jwt",
  "x-idempotency-key": "bf524958-d3d5-412d-b1e3-2c2f1bd518ff",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.h5HKG6hfc4j1TO4c-QiXnl8CJTZj3X8611Q_vr2ZMqLCTEI2708ftZ-wfzFcLbpNZ5NBYUNbsqJhm8-bLNrQXxzvz2GA0H-w710pr-KfjCwpc36f7Ucdl-uWCRlzv533ma-WEeWIM-SatEW_CRXyuxSyG8kSYprNn49TBZ8oM-IjzkdjRp27w1Qq619cuFMat80dG2KKsnCZw6XYhnsyEWsPG6ZDkKEbe8R7-LwspPIL_v98lj7880nw0mIuip2Dn2ze3vSFthF7Qzvlj-Jq-rEB8L_FuzPexbkVISJp5n-yIut79_gmtmyZaNExRWcuMcvELHNTZ1oqS7VVeuIv2A
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:38 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-09-15 15:44:38 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-09-15 15:44:38 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-09-15 15:44:38 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:38 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:38 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:44:39 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG",
  "content-type": "application/jwt",
  "x-idempotency-key": "c3a85beb-94c5-4215-b073-47a8ca8c8ded",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.NEBkpWVDDF_2R8UPs75zInYG7-0HkHpAniNnNFKM91WZGKE-yr2K9O1c1UrKLlPOkr_oBOxJm_gfX9PP8gUTesPN7Mgd_m-tuVKm1A44ckJ9S5mULeBuFKRFXU38J8XF97j6IK307KqECv7T2pfyJP0E1Yw6c7qRUulcrHZ-EoqhfF2KADpq2xS1RLNdKCA5kcOqF65Tvn0N7NHG4BfubsBb9L2wQw697tvNba08ekHqWkh_FQVXcHhWBLUeqLFvIlHNV2rYHz64D7Jl3DXiOSoTyPv20Za-cmtNlxRnBJ9yuJaI873EjPNuWicRAvjNwKSPphfr6CiK1zXPwuEmuQ
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:39 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-09-15 15:44:39 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-09-15 15:44:39 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-09-15 15:44:43 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:43 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:43 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:44:44 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG",
  "content-type": "application/jwt",
  "x-idempotency-key": "bc0c7d65-81a2-4405-910d-25441ddb48b4",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.A3jtEE59zvYhhCVH6RcNKtFe0cdmuITwFNenHm6T-W_rxSdQ5Luu490hLB5u5ez28NahI3QZuTYMyybb0bIEOwIBB0YG1lttJumROd3p0gHut-di88QeS4dl6VdPBKhb67Xru0iJScM-m_ap6wNxvgaFsGy9PJYKEQnGzr2YqZ_666Y4LdmoCA7EcX2qBAxmZJS9RcUgpYAz7djiuNfq78X_h5fIbgiMi8HxY0ihnHhtQP3c1UYIT9JbcQwm1kYp45xA6kMWi3EZFRl03EFyQV9gYpJIpu0_YN9DWRZ081M3yJSQ3F_TBPdyjT19FqzYTjNPpgFuapZwUXiuk-sbqA
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:44 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-09-15 15:44:44 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-09-15 15:44:44 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-09-15 15:44:56 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:56 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:56 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:44:57 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG",
  "content-type": "application/jwt",
  "x-idempotency-key": "bdf4bd59-9358-4dc7-b475-b2ee6b270998",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.0PMnFpfXiMDSlfWudZD58nsW7R0rPfr5qMm5R2BeX5T42IJIvLNaiqlV8DcuTMFMBpfDmdwH3aRk08yCpAYB-U8YqpKQb1EqXmi4GS_Dpxo61UYrS2gPhScsuSvksB-nyoR5yUzqnFigNHbpoKYDygB3enV3QpMmFmp_epdbmQKb2MFr_UxSiT6B-MWAIf6f-UBP_HwcT209-mVLQl5ADqJJcBZFmtseVmXkc_MGINjEOs6D84Kmv6WkkyLKdAdl8ThsYmRX8w9Jz-DgsN-YahhkA4ffOIi7Kp2CmW5hnXYj_PFlwh_Ovvdohq9107u-m9fG_YjxfuyMBwgnFNq53A
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:57 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-09-15 15:44:57 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-09-15 15:44:57 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-09-15 15:44:59 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:44:59 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:44:59 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:45:00 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1151"
}
incoming_path
/test-mtls/a/u4c-staging/token
incoming_body_form_params
{
  "scope": "payments",
  "grant_type": "client_credentials",
  "redirect_uri": "https://tpp.localhost/v1/callback",
  "client_id": "oXLWBP4Vx6K9VuGuQnDj7",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3MDAsImV4cCI6MTY2MzI1Njc2MCwianRpIjoiSGJmMGpJXzY5OFBJekt1S3Y5QXhIeE5fUEFzdDc1UGRkblFNTVhwd1A0cyIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.pMmZZVp6a37p9HEb-s8DNTxkhB2Pior3EvDNefFp0B8jzpSMjh4L2bObDkUBm0vumasN4BJYiZZIb3uM4sfWaV2tmzoNrOxIfOD_94z77cux1yJw2_oVepjEWqT6f1sZBS2iJ78zALbq6iJHd9QSlCqBjNgktmPgLYZWO1l37F8KJAHlDh2LyUUJg3NFIkWbJh9SI2NOmbxtsGts6UK1C6uudnjn5SPDZ4XploqrDKO3DqgUVjDWhU3YNVUdXmnA7fwD9Obt8lAicZOC5neooq3DC1i52hMqb-B7lpVqaW4WybsqsbVtyQel9XIwgkzd87SYGaNAu4pLmYeruI59oA",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
scope=payments&grant_type=client_credentials&redirect_uri=https%3A%2F%2Ftpp.localhost%2Fv1%2Fcallback&client_id=oXLWBP4Vx6K9VuGuQnDj7&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3MDAsImV4cCI6MTY2MzI1Njc2MCwianRpIjoiSGJmMGpJXzY5OFBJekt1S3Y5QXhIeE5fUEFzdDc1UGRkblFNTVhwd1A0cyIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.pMmZZVp6a37p9HEb-s8DNTxkhB2Pior3EvDNefFp0B8jzpSMjh4L2bObDkUBm0vumasN4BJYiZZIb3uM4sfWaV2tmzoNrOxIfOD_94z77cux1yJw2_oVepjEWqT6f1sZBS2iJ78zALbq6iJHd9QSlCqBjNgktmPgLYZWO1l37F8KJAHlDh2LyUUJg3NFIkWbJh9SI2NOmbxtsGts6UK1C6uudnjn5SPDZ4XploqrDKO3DqgUVjDWhU3YNVUdXmnA7fwD9Obt8lAicZOC5neooq3DC1i52hMqb-B7lpVqaW4WybsqsbVtyQel9XIwgkzd87SYGaNAu4pLmYeruI59oA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:00 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-09-15 15:45:00 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
oXLWBP4Vx6K9VuGuQnDj7
2022-09-15 15:45:00 SUCCESS
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\npk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dd7c6d9f2-14fe-41f6-be1f-00c7a10348ff,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#130f427573696e65737320456e74697479,2.5.4.5\u003d#130e3330393830353339303030313135,CN\u003d*.u4c-iniciador.com.br,OU\u003d23f9e3dd-31a1-4eaf-a440-37711ad34e81,O\u003dU4C INSTITUICAO DE PAGAMENTO SA,L\u003dBelo Horizonte,ST\u003dMG,C\u003dBR"
  },
  "sanDnsNames": [
    "*.u4c-iniciador.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-09-15 15:45:00 SUCCESS
CheckForClientCertificate
Found client certificate
2022-09-15 15:45:00 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-09-15 15:45:00 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3MDAsImV4cCI6MTY2MzI1Njc2MCwianRpIjoiSGJmMGpJXzY5OFBJekt1S3Y5QXhIeE5fUEFzdDc1UGRkblFNTVhwd1A0cyIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.pMmZZVp6a37p9HEb-s8DNTxkhB2Pior3EvDNefFp0B8jzpSMjh4L2bObDkUBm0vumasN4BJYiZZIb3uM4sfWaV2tmzoNrOxIfOD_94z77cux1yJw2_oVepjEWqT6f1sZBS2iJ78zALbq6iJHd9QSlCqBjNgktmPgLYZWO1l37F8KJAHlDh2LyUUJg3NFIkWbJh9SI2NOmbxtsGts6UK1C6uudnjn5SPDZ4XploqrDKO3DqgUVjDWhU3YNVUdXmnA7fwD9Obt8lAicZOC5neooq3DC1i52hMqb-B7lpVqaW4WybsqsbVtyQel9XIwgkzd87SYGaNAu4pLmYeruI59oA",
  "header": {
    "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "oXLWBP4Vx6K9VuGuQnDj7",
    "aud": [
      "https://www.certification.openid.net/test/a/u4c-staging/",
      "https://www.certification.openid.net/test/a/u4c-staging/token",
      "https://www.certification.openid.net/test-mtls/a/u4c-staging/token"
    ],
    "iss": "oXLWBP4Vx6K9VuGuQnDj7",
    "exp": 1663256760,
    "iat": 1663256700,
    "jti": "Hbf0jI_698PIzKuKv9AxHxN_PAst75PddnQMMXpwP4s"
  }
}
2022-09-15 15:45:00
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-09-15 15:45:00 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3MDAsImV4cCI6MTY2MzI1Njc2MCwianRpIjoiSGJmMGpJXzY5OFBJekt1S3Y5QXhIeE5fUEFzdDc1UGRkblFNTVhwd1A0cyIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.pMmZZVp6a37p9HEb-s8DNTxkhB2Pior3EvDNefFp0B8jzpSMjh4L2bObDkUBm0vumasN4BJYiZZIb3uM4sfWaV2tmzoNrOxIfOD_94z77cux1yJw2_oVepjEWqT6f1sZBS2iJ78zALbq6iJHd9QSlCqBjNgktmPgLYZWO1l37F8KJAHlDh2LyUUJg3NFIkWbJh9SI2NOmbxtsGts6UK1C6uudnjn5SPDZ4XploqrDKO3DqgUVjDWhU3YNVUdXmnA7fwD9Obt8lAicZOC5neooq3DC1i52hMqb-B7lpVqaW4WybsqsbVtyQel9XIwgkzd87SYGaNAu4pLmYeruI59oA
2022-09-15 15:45:00 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-09-15 15:45:00 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-09-15 15:45:00 SUCCESS
FAPIBrazilExtractRequestedScopeFromClientCredentialsGrant
Found 'payments' scope in request
actual
[
  "payments"
]
expected
payments
2022-09-15 15:45:00 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
pbkNsmC0mME3oA9Qv5Hlv0S0QHk1y1gQv73ldB912y4etJFBZ5
2022-09-15 15:45:00 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
pbkNsmC0mME3oA9Qv5Hlv0S0QHk1y1gQv73ldB912y4etJFBZ5
token_type
Bearer
id_token
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiU3AwaWdWSmpuaFNDZlZpWEdCMFBfdyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoib1hMV0JQNFZ4Nks5VnVHdVFuRGo3IiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3U0Yy1zdGFnaW5nXC8iLCJleHAiOjE2NjMyNTY5NzAsIm5vbmNlIjoiNjc4MmM4ODY0Y2IzN2JkZjI1NWIwMzk2OWFlMDdiOTIzMDBmZGY2YjUxZWIwZDA1NmQzZWYxYjY3NTEwMDVmNSIsImlhdCI6MTY2MzI1NjY3MH0.l-U0a5XGmt7C0oX9UJE4zssCh0Bs5d6AE_3Qk6ufGK3kWtcM3WU0EC9VprsIYwCABbiAg37ClYNlyIKehYXX-OgBUc4JIUUuQVpgu8wzcyplqUO6f-rPg9Ss2bmxhzbyPsNQtAzFNfqwdO4x_fRHCdaccUcQjJ7zMX0lyCgCQDxgRrR-N-HI7dOI64st73PWAm_NaR2QZ3pBbok-tYuNFT5QYe9aliDla5gOoCPSN5nd88NP9SB8_CIf2W76oDgnoDWmTSWBYznyoTPu4U5AYmQmLFKePg-ZdaghdylB0kdat2Oby2yljgg3941Ji_JH3tuXV69Z80-1Pr__oxIS8A
refresh_token
gDRXefNliEjSwzPXfeSZyAsxgOarpzglSferrDDGKiybpDqZuu2280622697`"%+{
scope
openid consent:urn:conformance:oidf:zA1emPUtSd payments
2022-09-15 15:45:00
CopyAccessTokenToClientCredentialsField
Condition ran but did not log anything
2022-09-15 15:45:00 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "pbkNsmC0mME3oA9Qv5Hlv0S0QHk1y1gQv73ldB912y4etJFBZ5",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiU3AwaWdWSmpuaFNDZlZpWEdCMFBfdyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoib1hMV0JQNFZ4Nks5VnVHdVFuRGo3IiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3U0Yy1zdGFnaW5nXC8iLCJleHAiOjE2NjMyNTY5NzAsIm5vbmNlIjoiNjc4MmM4ODY0Y2IzN2JkZjI1NWIwMzk2OWFlMDdiOTIzMDBmZGY2YjUxZWIwZDA1NmQzZWYxYjY3NTEwMDVmNSIsImlhdCI6MTY2MzI1NjY3MH0.l-U0a5XGmt7C0oX9UJE4zssCh0Bs5d6AE_3Qk6ufGK3kWtcM3WU0EC9VprsIYwCABbiAg37ClYNlyIKehYXX-OgBUc4JIUUuQVpgu8wzcyplqUO6f-rPg9Ss2bmxhzbyPsNQtAzFNfqwdO4x_fRHCdaccUcQjJ7zMX0lyCgCQDxgRrR-N-HI7dOI64st73PWAm_NaR2QZ3pBbok-tYuNFT5QYe9aliDla5gOoCPSN5nd88NP9SB8_CIf2W76oDgnoDWmTSWBYznyoTPu4U5AYmQmLFKePg-ZdaghdylB0kdat2Oby2yljgg3941Ji_JH3tuXV69Z80-1Pr__oxIS8A",
  "refresh_token": "gDRXefNliEjSwzPXfeSZyAsxgOarpzglSferrDDGKiybpDqZuu2280622697`\"%+{",
  "scope": "openid consent:urn:conformance:oidf:zA1emPUtSd payments"
}
outgoing_path
token
2022-09-15 15:45:01 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:01 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:45:01 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:45:02 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/consents/urn:conformance:oidf:zA1emPUtSd
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "Bearer pbkNsmC0mME3oA9Qv5Hlv0S0QHk1y1gQv73ldB912y4etJFBZ5",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/consents/urn:conformance:oidf:zA1emPUtSd
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:02 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Get consent endpoint
2022-09-15 15:45:02 SUCCESS
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\npk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dd7c6d9f2-14fe-41f6-be1f-00c7a10348ff,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#130f427573696e65737320456e74697479,2.5.4.5\u003d#130e3330393830353339303030313135,CN\u003d*.u4c-iniciador.com.br,OU\u003d23f9e3dd-31a1-4eaf-a440-37711ad34e81,O\u003dU4C INSTITUICAO DE PAGAMENTO SA,L\u003dBelo Horizonte,ST\u003dMG,C\u003dBR"
  },
  "sanDnsNames": [
    "*.u4c-iniciador.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-09-15 15:45:02 SUCCESS
CheckForClientCertificate
Found client certificate
2022-09-15 15:45:02 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-09-15 15:45:02 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-09-15 15:45:02 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
pbkNsmC0mME3oA9Qv5Hlv0S0QHk1y1gQv73ldB912y4etJFBZ5
2022-09-15 15:45:02 SUCCESS
RequireBearerClientCredentialsAccessToken
Found access token in request
actual
pbkNsmC0mME3oA9Qv5Hlv0S0QHk1y1gQv73ldB912y4etJFBZ5
2022-09-15 15:45:02 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2022-09-15 15:45:02 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2022-09-15 15:45:02 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2022-09-15 15:45:02 INFO
CreateFapiInteractionIdIfNeeded
Found existing FAPI interaction ID
fapi_interaction_id
1d4b1b0a-5044-44dc-a419-7c891d2b48be
2022-09-15 15:45:02 SUCCESS
FAPIBrazilGenerateGetPaymentConsentResponse
Created consent response
response
{
  "data": {
    "consentId": "urn:conformance:oidf:zA1emPUtSd",
    "creationDateTime": "2022-09-15T15:44:16Z",
    "status": "AUTHORISED",
    "statusUpdateDateTime": "2022-09-15T15:44:27Z",
    "expirationDateTime": "2022-09-15T17:44:16Z",
    "transactionFromDateTime": "2022-09-15T15:39:16Z",
    "transactionToDateTime": "2022-09-15T17:44:16Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/u4c-stagingpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-09-15T15:44:16Z"
    },
    "creditor": {
      "name": "Cara que vai Receber",
      "cpfCnpj": "44471172000119",
      "personType": "PESSOA_JURIDICA"
    },
    "loggedUser": {
      "document": {
        "identification": "76109277673",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2022-09-15",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "proxy": "chave@pix.com",
        "localInstrument": "INIC",
        "creditorAccount": {
          "number": "13839200",
          "accountType": "CACC",
          "ispb": "00104123",
          "issuer": "1525"
        }
      },
      "type": "PIX"
    }
  },
  "aud": "23f9e3dd-31a1-4eaf-a440-37711ad34e81",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817",
  "iat": 1663256702,
  "jti": "11abe381-d2d9-4a13-aebf-678f0958508f",
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-09-15T15:45:02Z"
  }
}
2022-09-15 15:45:02 SUCCESS
FAPIBrazilSignPaymentConsentResponse
Signed the payment consent response
signed_consent_response
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJpc3MiOiI3NGU5MjlkOS0zM2I2LTRkODUtOGJhNy1jMTQ2Yzg2N2E4MTciLCJhdWQiOiIyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFkMzRlODEiLCJkYXRhIjp7ImNvbnNlbnRJZCI6InVybjpjb25mb3JtYW5jZTpvaWRmOnpBMWVtUFV0U2QiLCJleHBpcmF0aW9uRGF0ZVRpbWUiOiIyMDIyLTA5LTE1VDE3OjQ0OjE2WiIsInRyYW5zYWN0aW9uRnJvbURhdGVUaW1lIjoiMjAyMi0wOS0xNVQxNTozOToxNloiLCJ0cmFuc2FjdGlvblRvRGF0ZVRpbWUiOiIyMDIyLTA5LTE1VDE3OjQ0OjE2WiIsIm1ldGEiOnsidG90YWxSZWNvcmRzIjoxLCJyZXF1ZXN0RGF0ZVRpbWUiOiIyMDIyLTA5LTE1VDE1OjQ0OjE2WiIsInRvdGFsUGFnZXMiOjF9LCJzdGF0dXNVcGRhdGVEYXRlVGltZSI6IjIwMjItMDktMTVUMTU6NDQ6MjdaIiwibG9nZ2VkVXNlciI6eyJkb2N1bWVudCI6eyJpZGVudGlmaWNhdGlvbiI6Ijc2MTA5Mjc3NjczIiwicmVsIjoiQ1BGIn19LCJsaW5rcyI6eyJzZWxmIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3U0Yy1zdGFnaW5ncGF5bWVudHNcL3YxXC9jb25zZW50cyJ9LCJjcmVkaXRvciI6eyJuYW1lIjoiQ2FyYSBxdWUgdmFpIFJlY2ViZXIiLCJjcGZDbnBqIjoiNDQ0NzExNzIwMDAxMTkiLCJwZXJzb25UeXBlIjoiUEVTU09BX0pVUklESUNBIn0sInBheW1lbnQiOnsiZGF0ZSI6IjIwMjItMDktMTUiLCJhbW91bnQiOiIwLjAxIiwiY3VycmVuY3kiOiJCUkwiLCJkZXRhaWxzIjp7InByb3h5IjoiY2hhdmVAcGl4LmNvbSIsImxvY2FsSW5zdHJ1bWVudCI6IklOSUMiLCJjcmVkaXRvckFjY291bnQiOnsibnVtYmVyIjoiMTM4MzkyMDAiLCJhY2NvdW50VHlwZSI6IkNBQ0MiLCJpc3BiIjoiMDAxMDQxMjMiLCJpc3N1ZXIiOiIxNTI1In19LCJ0eXBlIjoiUElYIn0sImNyZWF0aW9uRGF0ZVRpbWUiOiIyMDIyLTA5LTE1VDE1OjQ0OjE2WiIsInN0YXR1cyI6IkFVVEhPUklTRUQifSwiaWF0IjoxNjYzMjU2NjU2LCJqdGkiOiI2ZWVmN2I3Yi0yMDQ5LTQ2NmYtYjdmNy05MmUxODk5N2UzM2YifQ.z1M_oiv5kJOmMXFsuPgO81Ef4lIfTmg6_W3qqEwnrFDHijy1ZZI4dOcQJ2t1ZlDHiq5IBq3TZi8MCK4AQXBpwpVdHzUVMsmRi8w9VhGc13eLjVas2N-ZYZPl36G6fCwp24I0chhxa0HH9MjDFzQt1YB8k3EJVM5Fw_WRWCMJiMNNLBRSilTYZqv7Ip4Crcz2M_UCszmkDsbvcATH4aMu5Y9vSf8KiHHK2UDvy-HKu4MSmYEb9Kr_8lohzphqpO-1viCNpR-LbYDgNO7HJhTJmL5FOlUWKxqyaDYtbXqpDapsXpeZRDxfZBiri7GTnm01pnfYnj-B_D6EDLZpQQUJUA
2022-09-15 15:45:02
ClearAccessTokenFromRequest
Removed incoming access token from environment
2022-09-15 15:45:02 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{
  "x-fapi-interaction-id": [
    "1d4b1b0a-5044-44dc-a419-7c891d2b48be"
  ],
  "Content-Type": [
    "application/jwt"
  ]
}
outgoing_body
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.z1M_oiv5kJOmMXFsuPgO81Ef4lIfTmg6_W3qqEwnrFDHijy1ZZI4dOcQJ2t1ZlDHiq5IBq3TZi8MCK4AQXBpwpVdHzUVMsmRi8w9VhGc13eLjVas2N-ZYZPl36G6fCwp24I0chhxa0HH9MjDFzQt1YB8k3EJVM5Fw_WRWCMJiMNNLBRSilTYZqv7Ip4Crcz2M_UCszmkDsbvcATH4aMu5Y9vSf8KiHHK2UDvy-HKu4MSmYEb9Kr_8lohzphqpO-1viCNpR-LbYDgNO7HJhTJmL5FOlUWKxqyaDYtbXqpDapsXpeZRDxfZBiri7GTnm01pnfYnj-B_D6EDLZpQQUJUA
outgoing_path
payments/v1/consents/urn:conformance:oidf:zA1emPUtSd
2022-09-15 15:45:13 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:13 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:45:13 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:45:14 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG",
  "content-type": "application/jwt",
  "x-idempotency-key": "06e09ff6-120e-4487-bbda-3af58035da31",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.IxK1WrnrixpGsHsnpJtTfjI2k5cfXyTRGjWDYhQJShAujxdpO1ete1Nw6RDDNeNCXcO1NZ5QC77IbOC5nqz8PAIE_H4mqDkf83M3gz-pJxyhqYVngJ73yx6xkWxL5uhUJQNXfJMX3Jvezm4QzdE3ICcJ8WMsRca9bS8nowRT2PwIv8tjvsjatxB3IoCCV6Oih3LPkmoeURvBljjWWhpUik5iuI4jkdibPWwrmgWnRNr1F9FZQVYMA0QNYnGG-MdU_C1yUqA3mQUjil-HqO3LlfNvUb_Q7fSw51V62O5jXXa-2cD6Ue6apYXQWKr7Zn7MN8ylt7vieQiIDiAz4hn82A
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:14 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-09-15 15:45:14 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-09-15 15:45:14 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-09-15 15:45:20 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:20 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:45:20 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:45:21 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1164"
}
incoming_path
/test-mtls/a/u4c-staging/token
incoming_body_form_params
{
  "grant_type": "refresh_token",
  "refresh_token": "gDRXefNliEjSwzPXfeSZyAsxgOarpzglSferrDDGKiybpDqZuu2280622697`\"%+{",
  "client_id": "oXLWBP4Vx6K9VuGuQnDj7",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3MjEsImV4cCI6MTY2MzI1Njc4MSwianRpIjoiUkhDUzhrb0dlNzFudW82V0EySHFNVXoyVnkwaGZfS0VoRl9maFhUWTRUayIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.fyDLCdTBrbSWQeg_c3E18wQoK1JTDPQVHKBLL21kTC4teP_7xGPb_SElPpCPJqmKMio2-6BCkWQlDQ7JJyOEkpKVALeUH8rwgATNqWYHxdewlIdSZe_TTrr6s3RCmWNEGoCc31X5z9MZG_f1Gw_v14IBDrbJXfuXfQfDZFZZ6WhtAx00CcEClNf8V4KKBwRznmBxt9TG0oz3xnuzAEqjQMQQ9JDsTqZ7Q7yqUcRCYvxpHnCD6txnHVWj9-Fs3LbpvRMJILKX1UUmTgNGphJaJIvV7a0IPj8gptBksdRHMu5uQCYHgQIncR9l7Exu_zq5i5NnsyVgBakCTpa_HYK0dw",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
grant_type=refresh_token&refresh_token=gDRXefNliEjSwzPXfeSZyAsxgOarpzglSferrDDGKiybpDqZuu2280622697%60%22%25%2B%7B&client_id=oXLWBP4Vx6K9VuGuQnDj7&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3MjEsImV4cCI6MTY2MzI1Njc4MSwianRpIjoiUkhDUzhrb0dlNzFudW82V0EySHFNVXoyVnkwaGZfS0VoRl9maFhUWTRUayIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.fyDLCdTBrbSWQeg_c3E18wQoK1JTDPQVHKBLL21kTC4teP_7xGPb_SElPpCPJqmKMio2-6BCkWQlDQ7JJyOEkpKVALeUH8rwgATNqWYHxdewlIdSZe_TTrr6s3RCmWNEGoCc31X5z9MZG_f1Gw_v14IBDrbJXfuXfQfDZFZZ6WhtAx00CcEClNf8V4KKBwRznmBxt9TG0oz3xnuzAEqjQMQQ9JDsTqZ7Q7yqUcRCYvxpHnCD6txnHVWj9-Fs3LbpvRMJILKX1UUmTgNGphJaJIvV7a0IPj8gptBksdRHMu5uQCYHgQIncR9l7Exu_zq5i5NnsyVgBakCTpa_HYK0dw&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:21 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-09-15 15:45:21 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
oXLWBP4Vx6K9VuGuQnDj7
2022-09-15 15:45:21 SUCCESS
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\npk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dd7c6d9f2-14fe-41f6-be1f-00c7a10348ff,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#130f427573696e65737320456e74697479,2.5.4.5\u003d#130e3330393830353339303030313135,CN\u003d*.u4c-iniciador.com.br,OU\u003d23f9e3dd-31a1-4eaf-a440-37711ad34e81,O\u003dU4C INSTITUICAO DE PAGAMENTO SA,L\u003dBelo Horizonte,ST\u003dMG,C\u003dBR"
  },
  "sanDnsNames": [
    "*.u4c-iniciador.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-09-15 15:45:21 SUCCESS
CheckForClientCertificate
Found client certificate
2022-09-15 15:45:21 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-09-15 15:45:21 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3MjEsImV4cCI6MTY2MzI1Njc4MSwianRpIjoiUkhDUzhrb0dlNzFudW82V0EySHFNVXoyVnkwaGZfS0VoRl9maFhUWTRUayIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.fyDLCdTBrbSWQeg_c3E18wQoK1JTDPQVHKBLL21kTC4teP_7xGPb_SElPpCPJqmKMio2-6BCkWQlDQ7JJyOEkpKVALeUH8rwgATNqWYHxdewlIdSZe_TTrr6s3RCmWNEGoCc31X5z9MZG_f1Gw_v14IBDrbJXfuXfQfDZFZZ6WhtAx00CcEClNf8V4KKBwRznmBxt9TG0oz3xnuzAEqjQMQQ9JDsTqZ7Q7yqUcRCYvxpHnCD6txnHVWj9-Fs3LbpvRMJILKX1UUmTgNGphJaJIvV7a0IPj8gptBksdRHMu5uQCYHgQIncR9l7Exu_zq5i5NnsyVgBakCTpa_HYK0dw",
  "header": {
    "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "oXLWBP4Vx6K9VuGuQnDj7",
    "aud": [
      "https://www.certification.openid.net/test/a/u4c-staging/",
      "https://www.certification.openid.net/test/a/u4c-staging/token",
      "https://www.certification.openid.net/test-mtls/a/u4c-staging/token"
    ],
    "iss": "oXLWBP4Vx6K9VuGuQnDj7",
    "exp": 1663256781,
    "iat": 1663256721,
    "jti": "RHCS8koGe71nuo6WA2HqMUz2Vy0hf_KEhF_fhXTY4Tk"
  }
}
2022-09-15 15:45:21
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-09-15 15:45:21 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3MjEsImV4cCI6MTY2MzI1Njc4MSwianRpIjoiUkhDUzhrb0dlNzFudW82V0EySHFNVXoyVnkwaGZfS0VoRl9maFhUWTRUayIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.fyDLCdTBrbSWQeg_c3E18wQoK1JTDPQVHKBLL21kTC4teP_7xGPb_SElPpCPJqmKMio2-6BCkWQlDQ7JJyOEkpKVALeUH8rwgATNqWYHxdewlIdSZe_TTrr6s3RCmWNEGoCc31X5z9MZG_f1Gw_v14IBDrbJXfuXfQfDZFZZ6WhtAx00CcEClNf8V4KKBwRznmBxt9TG0oz3xnuzAEqjQMQQ9JDsTqZ7Q7yqUcRCYvxpHnCD6txnHVWj9-Fs3LbpvRMJILKX1UUmTgNGphJaJIvV7a0IPj8gptBksdRHMu5uQCYHgQIncR9l7Exu_zq5i5NnsyVgBakCTpa_HYK0dw
2022-09-15 15:45:21 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-09-15 15:45:21 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-09-15 15:45:21 SUCCESS
ValidateRefreshToken
refresh_token parameter matches the expected value.
refresh_token
gDRXefNliEjSwzPXfeSZyAsxgOarpzglSferrDDGKiybpDqZuu2280622697`"%+{
2022-09-15 15:45:21 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
dFeUNfhfRF58KDIXlSQB0OrVYsbCEpnRh9cJbBFuUl26KtamSi
2022-09-15 15:45:21 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
YQ_LXvDJGnOF0OP7Y2v51g
2022-09-15 15:45:21
CreateRefreshToken
Created refresh token
refresh_token
cfHGdnnprONlwdbDkPsjavZoisCkPmeGFBIadUORkMaPDgToVr4550009293\>/\.
2022-09-15 15:45:21 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
dFeUNfhfRF58KDIXlSQB0OrVYsbCEpnRh9cJbBFuUl26KtamSi
token_type
Bearer
refresh_token
cfHGdnnprONlwdbDkPsjavZoisCkPmeGFBIadUORkMaPDgToVr4550009293\>/\.
scope
openid consent:urn:conformance:oidf:zA1emPUtSd payments
2022-09-15 15:45:21 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "dFeUNfhfRF58KDIXlSQB0OrVYsbCEpnRh9cJbBFuUl26KtamSi",
  "token_type": "Bearer",
  "refresh_token": "cfHGdnnprONlwdbDkPsjavZoisCkPmeGFBIadUORkMaPDgToVr4550009293\\\u003e/\\.",
  "scope": "openid consent:urn:conformance:oidf:zA1emPUtSd payments"
}
outgoing_path
token
2022-09-15 15:45:21 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:21 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:45:21 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:45:22 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer E27mIUj6qKvjXSFioTFQYBGR9HHFXijpFHoQw4WB6LcO7ZMJtG",
  "content-type": "application/jwt",
  "x-idempotency-key": "f5537d0d-46fb-4941-957b-e612fa29c271",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.ZXtyPHLr21Nn0ygmvMSR9CnNE17ZJh_hti33UMffLlNAaffv1TwVKFIkjAVU3c9apHCU6KFY0wWCvxsTC672EVQtkrxc-7iHEL6_JuAwrOfM6blI1U17K1jKlLHwCrGyQgGzV15A8s4lCExEAqiESe1eytMTb_6V6ao94-1JdJJ68TO-ctpkKMmzJgmNgDeCtgI9vFUZ48MYB3wcgoUBlElyV1KmowGNzkQop1EeIJ8Ws3j0JcWX51FlUw2VLdZo2fzw9JJRkYyODSin3f17DgrpKRKilRV9sGg-FptpzqKatjDDBAmHYN3Ua_PTJrtU9KtS3gm-J8p7_VDf8zuhgQ
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:22 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-09-15 15:45:22 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-09-15 15:45:22 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-09-15 15:45:26 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:26 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:45:26 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:45:27 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer dFeUNfhfRF58KDIXlSQB0OrVYsbCEpnRh9cJbBFuUl26KtamSi",
  "content-type": "application/jwt",
  "x-idempotency-key": "c0000a05-ca53-4702-a977-20952b2fc1c4",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.5Jo0_DUYfyCKb1V_BdWE3BWXn74CHKZyc_PlaoohVVViQtzFukjsGMStsmwqctiSuJRirdncFArB72zkLfa__4q6x2CLBDwYmwayhoOvTufex17vmivL-3lw7LatckRf2xkkzhQ7XsxEJlvMs6czyUa8EHf9gRPvkwyoLzTOZA7N_pyyCjfjiMFD6qAD8RtwIQ-D1EEnrn1xr69tLIWPOfGF6kJeiLPoAvKL4e7LGuBWX6Iw8m77MlK-8WTIum4STF8zS2xW1nLL1hfcWUY-UBTeELSfXQNVBnJnMnNVdCLtgAKFg2DYykPEavRUt3tmPP2U_lwc3Kr_ZrPYR6B5kg
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:27 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Payment initiation endpoint (always rejected)
2022-09-15 15:45:27 SUCCESS
LogAccessTokenAlwaysRejectedToForceARefreshGrant
This call will be always rejected. The client must obtain a new access token twice using the refresh_token
2022-09-15 15:45:27 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
401
outgoing_headers
{
  "WWW-Authenticate": [
    "Bearer realm\u003d\"conformancesuite\", error\u003d\"invalid_token\", error_description\u003d\"Invalid access token. This test requires you to obtain a new access token twice using the refresh_token\""
  ]
}
outgoing_body
outgoing_path
payments/v1/pix/payments
2022-09-15 15:45:40 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:40 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:45:40 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:45:41 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1162"
}
incoming_path
/test-mtls/a/u4c-staging/token
incoming_body_form_params
{
  "grant_type": "refresh_token",
  "refresh_token": "cfHGdnnprONlwdbDkPsjavZoisCkPmeGFBIadUORkMaPDgToVr4550009293\\\u003e/\\.",
  "client_id": "oXLWBP4Vx6K9VuGuQnDj7",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3NDEsImV4cCI6MTY2MzI1NjgwMSwianRpIjoidjJLSldDbElLQ1phbnREMnZtTzlBaEptUHJaVERtcTV3WXFtcjFWVWp5USIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.00vRPQ9wVbUGZZ3RSAgtK7L-B2K9lQJnshM-rKHMG-Brun3uKDOie7qBAuJavTvLSxww6O2YFk3DykaYwPnw2UQjYVBXAP7HZOzhqLfSEqvxGdyteurKlYkH4RoxFngkm0Jd9WZ8oPPkMG7URomeEiSdAXnAvnzwjJzJbOYnUgigyGrnO6HZ1o6gWZ2q9LhlOCLyy_51Qot3Qd-tH_5ZFCzk-qLYCMfEDrET3Y888UNf-i8vK7l3kX6uWgmeHedeK9ryhnqy_gDO5F6MwmK2e-BV9HKBMRHpEAMkkcyvZWDv8WEUikhnuYwPaejtwNwGh3Wq41VX5PSS-DEceLmCCg",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
grant_type=refresh_token&refresh_token=cfHGdnnprONlwdbDkPsjavZoisCkPmeGFBIadUORkMaPDgToVr4550009293%5C%3E%2F%5C.&client_id=oXLWBP4Vx6K9VuGuQnDj7&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3NDEsImV4cCI6MTY2MzI1NjgwMSwianRpIjoidjJLSldDbElLQ1phbnREMnZtTzlBaEptUHJaVERtcTV3WXFtcjFWVWp5USIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.00vRPQ9wVbUGZZ3RSAgtK7L-B2K9lQJnshM-rKHMG-Brun3uKDOie7qBAuJavTvLSxww6O2YFk3DykaYwPnw2UQjYVBXAP7HZOzhqLfSEqvxGdyteurKlYkH4RoxFngkm0Jd9WZ8oPPkMG7URomeEiSdAXnAvnzwjJzJbOYnUgigyGrnO6HZ1o6gWZ2q9LhlOCLyy_51Qot3Qd-tH_5ZFCzk-qLYCMfEDrET3Y888UNf-i8vK7l3kX6uWgmeHedeK9ryhnqy_gDO5F6MwmK2e-BV9HKBMRHpEAMkkcyvZWDv8WEUikhnuYwPaejtwNwGh3Wq41VX5PSS-DEceLmCCg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:41 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-09-15 15:45:41 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
oXLWBP4Vx6K9VuGuQnDj7
2022-09-15 15:45:41 SUCCESS
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----\nMIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz\nMDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl\nbG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F\nTlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk\nMzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT\nDjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr\nBgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx\nZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK\nAoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL\nhgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS\nli8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE\ngrg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz\ny/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt\nnfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA\nMB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it\nF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0\ndHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL\nBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r\naW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu\naWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF\nBwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG\nAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl\nIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp\ncGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p\ndGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz\nZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk\naWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg\nZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y\neS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw\nDQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV\n5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3\n4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h\n6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS\nkhP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p\npk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dd7c6d9f2-14fe-41f6-be1f-00c7a10348ff,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#130f427573696e65737320456e74697479,2.5.4.5\u003d#130e3330393830353339303030313135,CN\u003d*.u4c-iniciador.com.br,OU\u003d23f9e3dd-31a1-4eaf-a440-37711ad34e81,O\u003dU4C INSTITUICAO DE PAGAMENTO SA,L\u003dBelo Horizonte,ST\u003dMG,C\u003dBR"
  },
  "sanDnsNames": [
    "*.u4c-iniciador.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-09-15 15:45:41 SUCCESS
CheckForClientCertificate
Found client certificate
2022-09-15 15:45:41 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-09-15 15:45:41 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3NDEsImV4cCI6MTY2MzI1NjgwMSwianRpIjoidjJLSldDbElLQ1phbnREMnZtTzlBaEptUHJaVERtcTV3WXFtcjFWVWp5USIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.00vRPQ9wVbUGZZ3RSAgtK7L-B2K9lQJnshM-rKHMG-Brun3uKDOie7qBAuJavTvLSxww6O2YFk3DykaYwPnw2UQjYVBXAP7HZOzhqLfSEqvxGdyteurKlYkH4RoxFngkm0Jd9WZ8oPPkMG7URomeEiSdAXnAvnzwjJzJbOYnUgigyGrnO6HZ1o6gWZ2q9LhlOCLyy_51Qot3Qd-tH_5ZFCzk-qLYCMfEDrET3Y888UNf-i8vK7l3kX6uWgmeHedeK9ryhnqy_gDO5F6MwmK2e-BV9HKBMRHpEAMkkcyvZWDv8WEUikhnuYwPaejtwNwGh3Wq41VX5PSS-DEceLmCCg",
  "header": {
    "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "oXLWBP4Vx6K9VuGuQnDj7",
    "aud": [
      "https://www.certification.openid.net/test/a/u4c-staging/",
      "https://www.certification.openid.net/test/a/u4c-staging/token",
      "https://www.certification.openid.net/test-mtls/a/u4c-staging/token"
    ],
    "iss": "oXLWBP4Vx6K9VuGuQnDj7",
    "exp": 1663256801,
    "iat": 1663256741,
    "jti": "v2KJWClIKCZantD2vmO9AhJmPrZTDmq5wYqmr1VUjyQ"
  }
}
2022-09-15 15:45:41
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-09-15 15:45:41 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3NDEsImV4cCI6MTY2MzI1NjgwMSwianRpIjoidjJLSldDbElLQ1phbnREMnZtTzlBaEptUHJaVERtcTV3WXFtcjFWVWp5USIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.00vRPQ9wVbUGZZ3RSAgtK7L-B2K9lQJnshM-rKHMG-Brun3uKDOie7qBAuJavTvLSxww6O2YFk3DykaYwPnw2UQjYVBXAP7HZOzhqLfSEqvxGdyteurKlYkH4RoxFngkm0Jd9WZ8oPPkMG7URomeEiSdAXnAvnzwjJzJbOYnUgigyGrnO6HZ1o6gWZ2q9LhlOCLyy_51Qot3Qd-tH_5ZFCzk-qLYCMfEDrET3Y888UNf-i8vK7l3kX6uWgmeHedeK9ryhnqy_gDO5F6MwmK2e-BV9HKBMRHpEAMkkcyvZWDv8WEUikhnuYwPaejtwNwGh3Wq41VX5PSS-DEceLmCCg
2022-09-15 15:45:41 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-09-15 15:45:41 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-09-15 15:45:41 SUCCESS
ValidateRefreshToken
refresh_token parameter matches the expected value.
refresh_token
cfHGdnnprONlwdbDkPsjavZoisCkPmeGFBIadUORkMaPDgToVr4550009293\>/\.
2022-09-15 15:45:41 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
6ycPukToeVda7Vjmt8yuxgbxtv1FFGo0cyQ612p9tu1P7jQr8U
2022-09-15 15:45:41 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
VpArEyf8DYUz100scTYoHA
2022-09-15 15:45:41
CreateRefreshToken
Created refresh token
refresh_token
XskmkquvmIEmHSWARbNcfZJPsTeQIzPYodLxoEVStxkRIPhrEQ5999093070{?}<$
2022-09-15 15:45:41 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
6ycPukToeVda7Vjmt8yuxgbxtv1FFGo0cyQ612p9tu1P7jQr8U
token_type
Bearer
refresh_token
XskmkquvmIEmHSWARbNcfZJPsTeQIzPYodLxoEVStxkRIPhrEQ5999093070{?}<$
scope
openid consent:urn:conformance:oidf:zA1emPUtSd payments
2022-09-15 15:45:41 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "6ycPukToeVda7Vjmt8yuxgbxtv1FFGo0cyQ612p9tu1P7jQr8U",
  "token_type": "Bearer",
  "refresh_token": "XskmkquvmIEmHSWARbNcfZJPsTeQIzPYodLxoEVStxkRIPhrEQ5999093070{?}\u003c$",
  "scope": "openid consent:urn:conformance:oidf:zA1emPUtSd payments"
}
outgoing_path
token
2022-09-15 15:45:43 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:43 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:45:43 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:45:44 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/token
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1164"
}
incoming_path
/test-mtls/a/u4c-staging/token
incoming_body_form_params
{
  "grant_type": "refresh_token",
  "refresh_token": "XskmkquvmIEmHSWARbNcfZJPsTeQIzPYodLxoEVStxkRIPhrEQ5999093070{?}\u003c$",
  "client_id": "oXLWBP4Vx6K9VuGuQnDj7",
  "client_assertion": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3NDQsImV4cCI6MTY2MzI1NjgwNCwianRpIjoia2NTWldHTDdRZGo4bFlKdU9fUk5ZajN2THBWX2JmZjY5VWllWGpTOW5mQSIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.rHQI9yfRn4JeQwzyowKfNiQoBPSML6BiNdYnxgEtrWcItw-EKs-J3D5wt84zV7EgDIaJkmYQTztT_THOQfSLfyPBL7RVU-W3ascRIyLj4fFT_lFCP3rLxVNI0-P80bWQTQwrySPUNFK8q9rJ2wMP4t11Ns-5F2t8wFiQGnJ64ke7jurOrj0MfZYQc_z4hGwRdW4EhUAh3ZtDj-N9Y_8iScpNzydhx3v0pQhsCCa524pn-KIGfKPMxupwxfugm-pln5F_KFHguAVTUa9BAY2euo0lwonN-JrY5i2hU9GwN4XJRhbfs1tp3VVzXnqNhfgqThCxwPVN34SyscQsJv8H3w",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
grant_type=refresh_token&refresh_token=XskmkquvmIEmHSWARbNcfZJPsTeQIzPYodLxoEVStxkRIPhrEQ5999093070%7B%3F%7D%3C%24&client_id=oXLWBP4Vx6K9VuGuQnDj7&client_assertion=eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3NDQsImV4cCI6MTY2MzI1NjgwNCwianRpIjoia2NTWldHTDdRZGo4bFlKdU9fUk5ZajN2THBWX2JmZjY5VWllWGpTOW5mQSIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.rHQI9yfRn4JeQwzyowKfNiQoBPSML6BiNdYnxgEtrWcItw-EKs-J3D5wt84zV7EgDIaJkmYQTztT_THOQfSLfyPBL7RVU-W3ascRIyLj4fFT_lFCP3rLxVNI0-P80bWQTQwrySPUNFK8q9rJ2wMP4t11Ns-5F2t8wFiQGnJ64ke7jurOrj0MfZYQc_z4hGwRdW4EhUAh3ZtDj-N9Y_8iScpNzydhx3v0pQhsCCa524pn-KIGfKPMxupwxfugm-pln5F_KFHguAVTUa9BAY2euo0lwonN-JrY5i2hU9GwN4XJRhbfs1tp3VVzXnqNhfgqThCxwPVN34SyscQsJv8H3w&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:44 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
Token endpoint
2022-09-15 15:45:44 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
oXLWBP4Vx6K9VuGuQnDj7
2022-09-15 15:45:44 SUCCESS
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----\nMIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz\nMDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl\nbG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F\nTlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk\nMzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT\nDjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr\nBgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx\nZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK\nAoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL\nhgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS\nli8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE\ngrg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz\ny/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt\nnfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA\nMB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it\nF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0\ndHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL\nBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r\naW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu\naWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF\nBwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG\nAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl\nIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp\ncGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p\ndGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz\nZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk\naWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg\nZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y\neS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw\nDQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV\n5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3\n4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h\n6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS\nkhP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p\npk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dd7c6d9f2-14fe-41f6-be1f-00c7a10348ff,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#130f427573696e65737320456e74697479,2.5.4.5\u003d#130e3330393830353339303030313135,CN\u003d*.u4c-iniciador.com.br,OU\u003d23f9e3dd-31a1-4eaf-a440-37711ad34e81,O\u003dU4C INSTITUICAO DE PAGAMENTO SA,L\u003dBelo Horizonte,ST\u003dMG,C\u003dBR"
  },
  "sanDnsNames": [
    "*.u4c-iniciador.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-09-15 15:45:44 SUCCESS
CheckForClientCertificate
Found client certificate
2022-09-15 15:45:44 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2022-09-15 15:45:44 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3NDQsImV4cCI6MTY2MzI1NjgwNCwianRpIjoia2NTWldHTDdRZGo4bFlKdU9fUk5ZajN2THBWX2JmZjY5VWllWGpTOW5mQSIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.rHQI9yfRn4JeQwzyowKfNiQoBPSML6BiNdYnxgEtrWcItw-EKs-J3D5wt84zV7EgDIaJkmYQTztT_THOQfSLfyPBL7RVU-W3ascRIyLj4fFT_lFCP3rLxVNI0-P80bWQTQwrySPUNFK8q9rJ2wMP4t11Ns-5F2t8wFiQGnJ64ke7jurOrj0MfZYQc_z4hGwRdW4EhUAh3ZtDj-N9Y_8iScpNzydhx3v0pQhsCCa524pn-KIGfKPMxupwxfugm-pln5F_KFHguAVTUa9BAY2euo0lwonN-JrY5i2hU9GwN4XJRhbfs1tp3VVzXnqNhfgqThCxwPVN34SyscQsJv8H3w",
  "header": {
    "kid": "dBAYSwlcMETbm6a56FSSxVxSK8erelfQAjFUqCCAmko",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "sub": "oXLWBP4Vx6K9VuGuQnDj7",
    "aud": [
      "https://www.certification.openid.net/test/a/u4c-staging/",
      "https://www.certification.openid.net/test/a/u4c-staging/token",
      "https://www.certification.openid.net/test-mtls/a/u4c-staging/token"
    ],
    "iss": "oXLWBP4Vx6K9VuGuQnDj7",
    "exp": 1663256804,
    "iat": 1663256744,
    "jti": "kcSZWGL7Qdj8lYJuO_RNYj3vLpV_bff69UieXjS9nfA"
  }
}
2022-09-15 15:45:44
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2022-09-15 15:45:44 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.eyJpYXQiOjE2NjMyNTY3NDQsImV4cCI6MTY2MzI1NjgwNCwianRpIjoia2NTWldHTDdRZGo4bFlKdU9fUk5ZajN2THBWX2JmZjY5VWllWGpTOW5mQSIsImlzcyI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsInN1YiI6Im9YTFdCUDRWeDZLOVZ1R3VRbkRqNyIsImF1ZCI6WyJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC9hL3U0Yy1zdGFnaW5nLyIsImh0dHBzOi8vd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldC90ZXN0L2EvdTRjLXN0YWdpbmcvdG9rZW4iLCJodHRwczovL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXQvdGVzdC1tdGxzL2EvdTRjLXN0YWdpbmcvdG9rZW4iXX0.rHQI9yfRn4JeQwzyowKfNiQoBPSML6BiNdYnxgEtrWcItw-EKs-J3D5wt84zV7EgDIaJkmYQTztT_THOQfSLfyPBL7RVU-W3ascRIyLj4fFT_lFCP3rLxVNI0-P80bWQTQwrySPUNFK8q9rJ2wMP4t11Ns-5F2t8wFiQGnJ64ke7jurOrj0MfZYQc_z4hGwRdW4EhUAh3ZtDj-N9Y_8iScpNzydhx3v0pQhsCCa524pn-KIGfKPMxupwxfugm-pln5F_KFHguAVTUa9BAY2euo0lwonN-JrY5i2hU9GwN4XJRhbfs1tp3VVzXnqNhfgqThCxwPVN34SyscQsJv8H3w
2022-09-15 15:45:44 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-09-15 15:45:44 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2022-09-15 15:45:44 SUCCESS
ValidateRefreshToken
refresh_token parameter matches the expected value.
refresh_token
XskmkquvmIEmHSWARbNcfZJPsTeQIzPYodLxoEVStxkRIPhrEQ5999093070{?}<$
2022-09-15 15:45:44 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token
mZc9avUM6RgBuZXtLZb6tJSiJPSKI3U1tHPTfelPAMLp4RNBK5
2022-09-15 15:45:44 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
T0-nFXHuKB4Q9PehkMlwNA
2022-09-15 15:45:44
CreateRefreshToken
Created refresh token
refresh_token
BfnpUcJOBtYreLivfVvFWAxcuwDwSdNgXGQQXKRpQWLuYphICK6509123526*:&)=
2022-09-15 15:45:44 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token
mZc9avUM6RgBuZXtLZb6tJSiJPSKI3U1tHPTfelPAMLp4RNBK5
token_type
Bearer
refresh_token
BfnpUcJOBtYreLivfVvFWAxcuwDwSdNgXGQQXKRpQWLuYphICK6509123526*:&)=
scope
openid consent:urn:conformance:oidf:zA1emPUtSd payments
2022-09-15 15:45:44 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "access_token": "mZc9avUM6RgBuZXtLZb6tJSiJPSKI3U1tHPTfelPAMLp4RNBK5",
  "token_type": "Bearer",
  "refresh_token": "BfnpUcJOBtYreLivfVvFWAxcuwDwSdNgXGQQXKRpQWLuYphICK6509123526*:\u0026)\u003d",
  "scope": "openid consent:urn:conformance:oidf:zA1emPUtSd payments"
}
outgoing_path
token
2022-09-15 15:45:46 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test/a/u4c-staging/.well-known/openid-configuration
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "accept": "application/json",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close"
}
incoming_path
/test/a/u4c-staging/.well-known/openid-configuration
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:46 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:45:46 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
200
outgoing_headers
{}
outgoing_body
{
  "issuer": "https://www.certification.openid.net/test/a/u4c-staging/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/u4c-staging/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/u4c-staging/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/u4c-staging/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "response_types_supported": [
    "code id_token"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256"
  ]
}
outgoing_path
.well-known/openid-configuration
2022-09-15 15:45:47 INCOMING
fapi1-advanced-final-client-refresh-token-test
Incoming HTTP request to /test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "openid-client/4.7.3 (https://github.com/panva/node-openid-client)",
  "authorization": "bearer mZc9avUM6RgBuZXtLZb6tJSiJPSKI3U1tHPTfelPAMLp4RNBK5",
  "content-type": "application/jwt",
  "x-idempotency-key": "0c0034b5-8f83-40df-9851-7c1f864ec28a",
  "accept-encoding": "gzip, deflate, br",
  "connection": "close",
  "content-length": "1252"
}
incoming_path
/test-mtls/a/u4c-staging/payments/v1/pix/payments
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw= -----END CERTIFICATE-----
incoming_query_string_params
{}
incoming_body
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.Kt4VWn7eYaB8FoV93yG_knvi4EBCdX975SnSS3MrpL6xfad9jb9vMm15RQS1YN2oSDnnhjNP2Ex0T5-_iJV31eYzHPxSHwQFvRaebZ1dAkvh6OCks45B5gHh4m-Z11e8-4cpdhRSpi_qN4EXhaKcGmeZx5FSXKMYuH8Uh0nlBlyKy_Uq34n_f0qCFOgBxmGn9jbliCftuPibDqr_YilU0mPVPIKfOCNuiI7OEGI9ZcmamGT6JWUAb1ZJuoICKBHAXQnuDq_BmO00Xsjpl1D2CFEMlNBcX08PvHUwvHf1AlPOC-WUV_rrM5E-pKWaFOMfJkAMk-P35MuDiiXKzAlW7Q
incoming_tls_chain
[
  "-----BEGIN CERTIFICATE----- MIIEajCCA1KgAwIBAgIUdIYzEFdw7QJcrySyq6IiEwZfTfAwDQYJKoZIhvcNAQEL BQAwazELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEnMCUGA1UEAxMeT3BlbiBCYW5raW5nIFJv b3QgU0FOREJPWCAtIEcxMB4XDTIwMTIxMTEwMDAwMFoXDTIzMTIxMTEwMDAwMFow cTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTAT BgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRC T1ggSXNzdWluZyBDQSAtIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fX+272mHX5QAcDaWkVHFWjnDIcORNUJU3OuNyeuOYhlvXJWydrXe3O+cV+P S39faMj/nfem3GfJBE7Xn0bWA/8ksxSfrg1BUBJDge4YBBw+VflI3A0g1fk9wJ3H GInsvV4serRJ/ISJTfs0uRNugX+RrbkT/T0tup4vGd3Kl2sbwUdDjokuJNJHANeO DRkQ+ra+9Wht71FBlc07yPf7qtpaWHm6aS3s47OJD35ixkG4xiZuHsScxcVtlo1V W98P2cQfH9H2lll4wWlPTVHpPThB2EYrPhwcxDh8kHkkOHNkyHO/fYM47u7H4VeQ V75LXWKa7iWmZg+WhFb8TXSr/wIDAQABo4H/MIH8MA4GA1UdDwEB/wQEAwIBBjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGf1itF/WCtk60BbP7sM4RQ99MvjAf BgNVHSMEGDAWgBSHE+yWPmLsIRwMSlY68iUM45TpyzBMBggrBgEFBQcBAQRAMD4w PAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5n YnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRi b3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMA0GCSqG SIb3DQEBCwUAA4IBAQBy4928pVPeiHItbneeOAsDoc4Obv5Q4tn0QpqTlSeCSBbH IURfEr/WaS8sv0JTbIPQEfiO/UtaN8Qxh7j5iVqTwTwgVaE/vDkHxGOen5YxAuyV 1Fpm4W4oQyybiA6puHEBcteuiYZHppGSMus3bmFYTPE+9B0+W914VZeHDujJ2Y3Y Mc32Q+PC+Zmv8RfaXp7+QCNYSXR5Ts3q3IesWGmlvAM5tLQi75JmzdWXJ1uKU4u3 Nrw5jY4UaOlvB5Re2BSmcjxdLT/5pApzkS+tO6lICnPAtk/Y6dOJ0YxQBMImtliY p02yfwRaqP8WJ4CnwUHil3ZRt8U9I+psU8b4WV/3 -----END CERTIFICATE-----",
  "(null)",
  "(null)",
  "(null)",
  "(null)",
  "(null)"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-09-15 15:45:47 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
TLS 1.2 in use and cipher is one recommended by BCP195
actual
ECDHE-RSA-AES128-GCM-SHA256
recommended
[
  "DHE-RSA-AES128-GCM-SHA256",
  "ECDHE-RSA-AES128-GCM-SHA256",
  "DHE-RSA-AES256-GCM-SHA384",
  "ECDHE-RSA-AES256-GCM-SHA384"
]
2022-09-15 15:45:47 SUCCESS
ExtractClientCertificateFromRequestHeaders
Extracted client certificate
client_certificate
{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAiMXlEzokKXLJtKl+fJ4cU/xkPUwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDkxMjEzMDAwMFoXDTIzMTAxMjEz MDAwMFowggErMQswCQYDVQQGEwJCUjELMAkGA1UECBMCTUcxFzAVBgNVBAcTDkJl bG8gSG9yaXpvbnRlMSgwJgYDVQQKEx9VNEMgSU5TVElUVUlDQU8gREUgUEFHQU1F TlRPIFNBMS0wKwYDVQQLEyQyM2Y5ZTNkZC0zMWExLTRlYWYtYTQ0MC0zNzcxMWFk MzRlODExHzAdBgNVBAMMFioudTRjLWluaWNpYWRvci5jb20uYnIxFzAVBgNVBAUT DjMwOTgwNTM5MDAwMTE1MRgwFgYDVQQPEw9CdXNpbmVzcyBFbnRpdHkxEzARBgsr BgEEAYI3PAIBAxMCQlIxNDAyBgoJkiaJk/IsZAEBEyRkN2M2ZDlmMi0xNGZlLTQx ZjYtYmUxZi0wMGM3YTEwMzQ4ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwB9ankZDJDHzdTLyI2Tr15JkYdksQsXaXqHRx7+V5ycdX9eMp4xmh0DaL hgl6VKosaJCsUTzwdUMS7Ny96So+FCNTfSGC42nYm5cwa/RjY2dJ3whdUQp6eDQS li8XoBr26W96Ro6bI2sMGoRuuRA1NJ39QgoKw9KM6xI00mQE+cRKry1sBHJmMeqE grg2+ivkaiohzmHgo5k5Jm/IvRU+76zQoF0NH6QmPq+ZBantgpAWZxYiRCZ998iz y/OZamiALf55C7Iaf0mLvwdEGvpJNWoEiYmcAcMw4ZWucKPhcxAW302hgmtJFQMt nfFRYY120SJi0/y/TFKnF9/2SuxFAgMBAAGjggLhMIIC3TAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBS8Fwju5IvluTfl3rqWjjsGAeMGETAfBgNVHSMEGDAWgBSGf1it F/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0 dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBL BgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5r aW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMCEGA1UdEQQaMBiCFioudTRjLWlu aWNpYWRvci5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF BwMCMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsG AQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNl IHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNp cGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1p dGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3Nz ZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlk aWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQg ZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9y eS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMw DQYJKoZIhvcNAQELBQADggEBAB3KkzMHZ78oFUOTCH4W7N7kvOYlG9LONVUtmJMV 5Q7tH6q3KYaY4jhhzsCvphP8S17vJagANtNBX0Gi6kRzovWudNzzt+teGwgR86+3 4k+xfKeA212d03FodVGl6QcekHsyCrccqASxIKsZO5XZm+YLXeafEqI5gvnWPt9h 6VPaJIw8ew+DEqjsK3xdnyC6vQSMCRLE2VfQTGlg+TDfnl/XYKGnSwVqbGc7nOgS khP0OW+U7eMVoHJfniWJ6EKYyUsUW09qkT/qQ3YT2Ms1kn/7vU7ZsPMTPFxMyP6p pk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\npk8ba4UXcltVvLPibojrdZjDXbCcAP+DiGaGfcxAn3uOCrw\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dd7c6d9f2-14fe-41f6-be1f-00c7a10348ff,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#130f427573696e65737320456e74697479,2.5.4.5\u003d#130e3330393830353339303030313135,CN\u003d*.u4c-iniciador.com.br,OU\u003d23f9e3dd-31a1-4eaf-a440-37711ad34e81,O\u003dU4C INSTITUICAO DE PAGAMENTO SA,L\u003dBelo Horizonte,ST\u003dMG,C\u003dBR"
  },
  "sanDnsNames": [
    "*.u4c-iniciador.com.br"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}
2022-09-15 15:45:47 SUCCESS
CheckForClientCertificate
Found client certificate
2022-09-15 15:45:47 SUCCESS
EnsureClientCertificateMatches
Presented certificate matches registered certificate
actual
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Payment initiation endpoint
2022-09-15 15:45:47 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2022-09-15 15:45:47 SUCCESS
EnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2022-09-15 15:45:47 SUCCESS
ExtractBearerAccessTokenFromHeader
Found access token on incoming request
access_token
mZc9avUM6RgBuZXtLZb6tJSiJPSKI3U1tHPTfelPAMLp4RNBK5
2022-09-15 15:45:47 SUCCESS
RequireBearerAccessToken
Found access token in request
actual
mZc9avUM6RgBuZXtLZb6tJSiJPSKI3U1tHPTfelPAMLp4RNBK5
2022-09-15 15:45:47 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2022-09-15 15:45:47 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2022-09-15 15:45:47 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2022-09-15 15:45:47 SUCCESS
FAPIBrazilEnsureAuthorizationRequestScopesContainPayments
'payments' was included in authorization request scopes
actual
openid consent:urn:conformance:oidf:zA1emPUtSd payments
expected
payments
2022-09-15 15:45:47 SUCCESS
FAPIBrazilExtractPaymentInitiationRequest
Parsed payment initiation request
payment_initiation_request
{
  "aud": "https://www.certification.openid.net/test-mtls/a/u4c-staging/payments/v1/pix/payments",
  "data": {
    "proxy": "chave@pix.com",
    "localInstrument": "INIC",
    "remittanceInformation": "GO!!",
    "creditorAccount": {
      "number": "13839200",
      "accountType": "CACC",
      "name": "Cara que vai Receber",
      "cpfCnpj": "44471172000119",
      "personType": "PESSOA_JURIDICA",
      "ispb": "00104123"
    },
    "cnpjInitiator": "59285411000113",
    "payment": {
      "amount": "0.01",
      "currency": "BRL"
    },
    "endToEndId": "E00000000202209151545U90973f798e"
  },
  "iss": "23f9e3dd-31a1-4eaf-a440-37711ad34e81",
  "exp": 1663257647,
  "iat": 1663256747,
  "jti": "1f70baa4-eb67-4457-aa35-52f4ffffa737"
}
2022-09-15 15:45:47 SUCCESS
FAPIBrazilValidateJwtSignatureUsingOrganizationJwks
jwt signature validated
jwt
eyJhbGciOiJQUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImRCQVlTd2xjTUVUYm02YTU2RlNTeFZ4U0s4ZXJlbGZRQWpGVXFDQ0Fta28ifQ.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.Kt4VWn7eYaB8FoV93yG_knvi4EBCdX975SnSS3MrpL6xfad9jb9vMm15RQS1YN2oSDnnhjNP2Ex0T5-_iJV31eYzHPxSHwQFvRaebZ1dAkvh6OCks45B5gHh4m-Z11e8-4cpdhRSpi_qN4EXhaKcGmeZx5FSXKMYuH8Uh0nlBlyKy_Uq34n_f0qCFOgBxmGn9jbliCftuPibDqr_YilU0mPVPIKfOCNuiI7OEGI9ZcmamGT6JWUAb1ZJuoICKBHAXQnuDq_BmO00Xsjpl1D2CFEMlNBcX08PvHUwvHf1AlPOC-WUV_rrM5E-pKWaFOMfJkAMk-P35MuDiiXKzAlW7Q
2022-09-15 15:45:47 SUCCESS
EnsureIncomingRequestContentTypeIsApplicationJwt
Client correctly used application/jwt content type
2022-09-15 15:45:47 SUCCESS
ExtractXIdempotencyKeyHeader
Found an x-idempotency-key header
idempotency_key
0c0034b5-8f83-40df-9851-7c1f864ec28a
2022-09-15 15:45:47 SUCCESS
FAPIBrazilValidatePaymentInitiationRequestAud
aud claim matches the endpoint url
aud
https://www.certification.openid.net/test-mtls/a/u4c-staging/payments/v1/pix/payments
2022-09-15 15:45:47 SUCCESS
FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate
Extracted subject from the mtls client certificate
subjectdn
UID=d7c6d9f2-14fe-41f6-be1f-00c7a10348ff,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#130f427573696e65737320456e74697479,2.5.4.5=#130e3330393830353339303030313135,CN=*.u4c-iniciador.com.br,OU=23f9e3dd-31a1-4eaf-a440-37711ad34e81,O=U4C INSTITUICAO DE PAGAMENTO SA,L=Belo Horizonte,ST=MG,C=BR
ou
23f9e3dd-31a1-4eaf-a440-37711ad34e81
brazil_software_id
d7c6d9f2-14fe-41f6-be1f-00c7a10348ff
2022-09-15 15:45:47 SUCCESS
FAPIBrazilEnsurePaymentInitiationRequestIssEqualsOrganizationId
iss claim in payment initiation request matches organizationId in client certificate
iss
23f9e3dd-31a1-4eaf-a440-37711ad34e81
2022-09-15 15:45:47 SUCCESS
FAPIBrazilEnsurePaymentInitiationRequestJtiIsUUIDv4
jti claim in payment initiation request is a UUIDv4
jti
1f70baa4-eb67-4457-aa35-52f4ffffa737
2022-09-15 15:45:47 SUCCESS
FAPIBrazilValidatePaymentInitiationRequestIat
iat claim in payment initiation request is valid
iat
1663256747
2022-09-15 15:45:47 SUCCESS
FAPIBrazilGenerateNewPaymentInitiationResponse
Created payment initiation response
payment_initiation_response_headers
{
  "x-fapi-interaction-id": "1d4b1b0a-5044-44dc-a419-7c891d2b48be"
}
payment_initiation_response
{
  "data": {
    "proxy": "chave@pix.com",
    "localInstrument": "INIC",
    "remittanceInformation": "GO!!",
    "creditorAccount": {
      "number": "13839200",
      "accountType": "CACC",
      "name": "Cara que vai Receber",
      "cpfCnpj": "44471172000119",
      "personType": "PESSOA_JURIDICA",
      "ispb": "00104123"
    },
    "cnpjInitiator": "59285411000113",
    "payment": {
      "amount": "0.01",
      "currency": "BRL"
    },
    "endToEndId": "E00000000202209151545U90973f798e",
    "paymentId": "1e8bca34-816c-4c06-b894-03291cb35064",
    "consentId": "urn:conformance:oidf:zA1emPUtSd",
    "creationDateTime": "2022-09-15T15:45:47Z",
    "statusUpdateDateTime": "2022-09-15T15:45:47Z",
    "status": "ACSP"
  },
  "links": {
    "self": "https://www.certification.openid.net/test/a/u4c-stagingpayments/v1/pix/payments"
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-09-15T15:45:47Z"
  },
  "aud": "23f9e3dd-31a1-4eaf-a440-37711ad34e81",
  "iat": 1663256747,
  "jti": "b3217f0c-0bcd-479d-adc7-a2ab89adce16",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}
2022-09-15 15:45:47 SUCCESS
FAPIBrazilSignPaymentInitiationResponse
Signed the payment initiation response
signed_payment_initiation_response
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.Boc7juyM_w7M_UBf1isCTd63-ylsPLFGAKUdctwL7G79qgb5tnR8QddHmb8C2OAWcsUlwZ3MkLPzatHo43sULJSctN1GWzH8sGF7mcy2tRKa4KECI6uO8nscJEqgmiTZFma-u7MhZsF9VaRaYJlRudtsZBaNcMV6gZUMsO16yCYBuflVAhUbfn6SWnXoHNmockzftOaskwte8ILJHJxWMOuDURBl6iQsIzGKxPK9HWTwgaaBnR22bxcll_g-gnS5TK1HodUJwvw7vciymnlfzabNtVy3IMaLPtiFUBhTHLmllldKeVWzlnyb9N3QwrkMM3R94eCfIVJl4EwxDS0QxA
2022-09-15 15:45:47
ClearAccessTokenFromRequest
Removed incoming access token from environment
2022-09-15 15:45:47 OUTGOING
fapi1-advanced-final-client-refresh-token-test
Response to HTTP request to test instance z505yO7CtpWaMDI
outgoing_status_code
201
outgoing_headers
{
  "x-fapi-interaction-id": [
    "1d4b1b0a-5044-44dc-a419-7c891d2b48be"
  ],
  "Content-Type": [
    "application/jwt"
  ]
}
outgoing_body
eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.Boc7juyM_w7M_UBf1isCTd63-ylsPLFGAKUdctwL7G79qgb5tnR8QddHmb8C2OAWcsUlwZ3MkLPzatHo43sULJSctN1GWzH8sGF7mcy2tRKa4KECI6uO8nscJEqgmiTZFma-u7MhZsF9VaRaYJlRudtsZBaNcMV6gZUMsO16yCYBuflVAhUbfn6SWnXoHNmockzftOaskwte8ILJHJxWMOuDURBl6iQsIzGKxPK9HWTwgaaBnR22bxcll_g-gnS5TK1HodUJwvw7vciymnlfzabNtVy3IMaLPtiFUBhTHLmllldKeVWzlnyb9N3QwrkMM3R94eCfIVJl4EwxDS0QxA
outgoing_path
payments/v1/pix/payments
2022-09-15 15:45:47 FINISHED
fapi1-advanced-final-client-refresh-token-test
Test has run to completion
testmodule_result
PASSED
2022-09-15 15:46:22
TEST-RUNNER
Alias has now been claimed by another test
alias
u4c-staging
new_test_id
SiSrlGkEZpqXKcJ
Test Results