Test Name | fapi1-advanced-final-brazildcr-update-client-config-bad-jwks-uri |
---|---|
Variant | client_auth_type=mtls, fapi_auth_request_method=pushed, fapi_profile=openbanking_brazil, fapi_response_mode=plain_response |
Test ID | VgPsQZ97xif5p01 https://www.certification.openid.net/log-detail.html?public=true&log=VgPsQZ97xif5p01 |
Created | 2022-09-15T01:23:29.284373Z |
Description | BTGMAIS-FAPI1-DCR |
Test Version | 5.0.3 |
Test Owner | 110791733741294350469 https://accounts.google.com |
Plan ID | tyepjf1vBuX42 https://www.certification.openid.net/plan-detail.html?public=true&plan=tyepjf1vBuX42 |
Exported From | https://www.certification.openid.net |
Exported By | 110791733741294350469 https://accounts.google.com |
Suite Version | 5.0.3 |
Exported | 2022-09-21 13:25:01 (UTC) |
Status: FINISHED Result: PASSED |
SUCCESS 47 FAILURE 0 WARNING 0 REVIEW 0 INFO 1 |
2022-09-15 01:23:29 |
INFO
|
TEST-RUNNER
Test instance VgPsQZ97xif5p01 created
|
||||||||||||||
|
2022-09-15 01:23:29 |
SUCCESS
|
CreateRedirectUri
Created redirect URI
|
||
|
2022-09-15 01:23:29 |
|
GetDynamicServerConfiguration
HTTP request
|
||||||||
|
2022-09-15 01:25:29 |
RESPONSE
|
GetDynamicServerConfiguration
HTTP response
|
||||||||
|
2022-09-15 01:25:29 |
SUCCESS
|
GetDynamicServerConfiguration
Successfully parsed server configuration
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
2022-09-15 01:25:29 | SUCCESS |
AddMTLSEndpointAliasesToEnvironment
Added mtls_endpoint_aliases to environment
|
|
2022-09-15 01:25:29 |
SUCCESS
|
CheckServerConfiguration
Found required server configuration keys
|
||
|
2022-09-15 01:25:29 |
|
FetchServerKeys
Fetching server key
|
||
|
2022-09-15 01:25:29 |
|
FetchServerKeys
HTTP request
|
||||||||
|
2022-09-15 01:25:29 |
RESPONSE
|
FetchServerKeys
HTTP response
|
||||||||
|
2022-09-15 01:25:29 |
|
FetchServerKeys
Found JWK set string
|
||
|
2022-09-15 01:25:29 |
SUCCESS
|
FetchServerKeys
Found server JWK set
|
||
|
2022-09-15 01:25:29 |
SUCCESS
|
CheckServerKeysIsValid
Server JWKs is valid
|
||
|
2022-09-15 01:25:29 | SUCCESS |
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
|
|
2022-09-15 01:25:29 | SUCCESS |
CheckForKeyIdInServerJWKs
All keys contain kids
|
|
2022-09-15 01:25:29 | SUCCESS |
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
|
|
2022-09-15 01:25:29 | SUCCESS |
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
|
||
|
2022-09-15 01:25:29 |
SUCCESS
|
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
|
|
2022-09-15 01:25:29 |
SUCCESS
|
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
|
||||||
|
2022-09-15 01:25:29 |
SUCCESS
|
ExtractJWKSDirectFromClientConfiguration
Extracted client JWK
|
||||
|
2022-09-15 01:25:29 | SUCCESS |
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
|
||
|
Obtain access token for directory and retrieve a software statement |
2022-09-15 01:25:29 |
SUCCESS
|
ExtractDirectoryConfiguration
Extracted directory configuration parameters
|
||||
|
2022-09-15 01:25:29 | SUCCESS |
FAPIBrazilOpenBankingCheckDirectoryDiscoveryUrl
Directory Discovery URL matches the Brazil directory.
|
||
|
2022-09-15 01:25:29 | SUCCESS |
FAPIBrazilOpenBankingCheckDirectoryApiBase
Directory API base matches the Brazil directory.
|
||
|
2022-09-15 01:25:29 |
|
GetDynamicServerConfiguration
HTTP request
|
||||||||||
|
2022-09-15 01:25:30 |
RESPONSE
|
GetDynamicServerConfiguration
HTTP response
|
||||||||
|
2022-09-15 01:25:30 |
SUCCESS
|
GetDynamicServerConfiguration
Successfully parsed server configuration
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
2022-09-15 01:25:30 | SUCCESS |
AddMTLSEndpointAliasesToEnvironment
Added mtls_endpoint_aliases to environment
|
|
2022-09-15 01:25:30 |
|
CreateTokenEndpointRequestForClientCredentialsGrant
Leaving off 'scope' parameter from token request
|
|
2022-09-15 01:25:30 |
SUCCESS
|
CreateTokenEndpointRequestForClientCredentialsGrant
Created token endpoint request
|
||
|
2022-09-15 01:25:30 |
SUCCESS
|
SetDirectorySoftwareScopeOnTokenEndpointRequest
Set scope parameter to 'directory:software'
|
||||
|
2022-09-15 01:25:30 |
|
AddClientIdToTokenEndpointRequest
|
||||||
|
2022-09-15 01:25:30 |
|
CallTokenEndpoint
HTTP request
|
||||||||||
|
2022-09-15 01:25:30 |
RESPONSE
|
CallTokenEndpoint
HTTP response
|
||||||||
|
2022-09-15 01:25:30 |
SUCCESS
|
CallTokenEndpoint
Parsed token endpoint response
|
||||||||
|
2022-09-15 01:25:30 |
SUCCESS
|
CheckIfTokenEndpointResponseError
No error from token endpoint
|
|
2022-09-15 01:25:30 |
SUCCESS
|
CheckForAccessTokenValue
Found an access token
|
||
|
2022-09-15 01:25:30 |
SUCCESS
|
ExtractAccessTokenFromTokenResponse
Extracted the access token
|
||||
|
2022-09-15 01:25:30 | SUCCESS |
AddMTLSEndpointAliasesToEnvironment
Added mtls_endpoint_aliases to environment
|
|
2022-09-15 01:25:30 |
SUCCESS
|
FAPIBrazilExtractClientMTLSCertificateSubject
Extracted subject from MTLS certificate
|
||||||
|
2022-09-15 01:25:30 |
|
FAPIBrazilCallDirectorySoftwareStatementEndpointWithBearerToken
HTTP request
|
||||||||||
|
2022-09-15 01:25:31 |
RESPONSE
|
FAPIBrazilCallDirectorySoftwareStatementEndpointWithBearerToken
HTTP response
|
||||||||
|
2022-09-15 01:25:31 |
|
FAPIBrazilCallDirectorySoftwareStatementEndpointWithBearerToken
software statement endpoint response
|
||
|
2022-09-15 01:25:31 |
SUCCESS
|
FAPIBrazilCallDirectorySoftwareStatementEndpointWithBearerToken
Parsed assertion endpoint response
|
||||||
|
Perform Dynamic Client Registration |
2022-09-15 01:25:31 |
|
StoreOriginalClientConfiguration
Created original_client_config object from the client configuration.
|
||||
|
2022-09-15 01:25:31 |
|
ExtractClientNameFromStoredConfig
Extracted client_name from stored client configuration.
|
||
|
2022-09-15 01:25:31 | SUCCESS |
FAPIBrazilExtractJwksUriFromSoftwareStatement
Extracted JWKS URI from software statement
|
||
|
2022-09-15 01:25:31 |
|
CreateEmptyDynamicRegistrationRequest
Created empty dynamic registration request
|
|
2022-09-15 01:25:31 |
|
AddAuthorizationCodeGrantTypeToDynamicRegistrationRequest
Added 'authorization_code' to 'grant_types'
|
||
|
2022-09-15 01:25:31 |
|
AddImplicitGrantTypeToDynamicRegistrationRequest
Added 'implicit' to 'grant_types'
|
||
|
2022-09-15 01:25:31 |
|
AddRefreshTokenGrantTypeToDynamicRegistrationRequest
Added 'refresh_token' to 'grant_types'
|
||
|
2022-09-15 01:25:31 |
|
AddClientCredentialsGrantTypeToDynamicRegistrationRequest
Added 'client_credentials' to 'grant_types'
|
||
|
2022-09-15 01:25:31 |
|
AddTlsClientAuthSubjectDnToDynamicRegistrationRequest
Added tls_client_auth_subject_dn to dynamic registration request
|
||
|
2022-09-15 01:25:31 |
|
AddJwksUriToDynamicRegistrationRequest
Added jwks_uri to dynamic registration request
|
||
|
2022-09-15 01:25:31 |
|
AddTokenEndpointAuthMethodToDynamicRegistrationRequestFromEnvironment
Added token endpoint auth method to dynamic registration request
|
||
|
2022-09-15 01:25:31 |
|
SetResponseTypeCodeIdTokenInDynamicRegistrationRequest
Added response_type 'code id_token' to dynamic registration request
|
||
|
2022-09-15 01:25:31 |
|
FapiBrazilVerifyRedirectUriContainedInSoftwareStatement
Required redirect_uri is present in the software statement
|
||||
|
2022-09-15 01:25:31 |
|
AddRedirectUriToDynamicRegistrationRequest
Added redirect_uris array to dynamic registration request
|
||
|
2022-09-15 01:25:31 |
|
AddSoftwareStatementToDynamicRegistrationRequest
Added software_statement to dynamic registration request
|
||
|
2022-09-15 01:25:31 |
|
CallDynamicRegistrationEndpoint
HTTP request
|
||||||||||
|
2022-09-15 01:27:32 |
RESPONSE
|
CallDynamicRegistrationEndpoint
HTTP response
|
||||||||
|
2022-09-15 01:27:32 |
|
CallDynamicRegistrationEndpoint
Parsed registration endpoint response
|
||||||||||
|
2022-09-15 01:27:32 | SUCCESS |
EnsureContentTypeJson
endpoint_response Content-Type: header is application/json
|
|
2022-09-15 01:27:32 | SUCCESS |
EnsureHttpStatusCodeIs201
dynamic registration endpoint returned the expected http status
|
||||
|
2022-09-15 01:27:32 | SUCCESS |
CheckNoErrorFromDynamicRegistrationEndpoint
Dynamic registration endpoint did not return an error.
|
|
2022-09-15 01:27:32 | SUCCESS |
ExtractDynamicRegistrationResponse
Extracted client from dynamic registration response
|
||
|
2022-09-15 01:27:32 | SUCCESS |
VerifyClientManagementCredentials
Verified dynamic registration management credentials
|
||||
|
2022-09-15 01:27:32 | SUCCESS |
ClientManagementEndpointAndAccessTokenRequired
Client management endpoint and access token were provided by the authorization server.
|
||||
|
2022-09-15 01:27:32 | SUCCESS |
CheckScopesFromDynamicRegistrationEndpointContainRequiredScopes
'scope' in dynamic registration response contains the scopes specified in the test configuration.
|
||||
|
2022-09-15 01:27:32 |
|
CopyScopeFromDynamicRegistrationTemplateToClientConfiguration
Copied scope from original_client_config to client configuration
|
||
|
2022-09-15 01:27:32 |
|
CopyOrgJwksFromDynamicRegistrationTemplateToClientConfiguration
No org_jwks in original_client_config
|
|
Make PUT request to client configuration endpoint to change jwks uri to non-directory hosted one |
2022-09-15 01:27:32 |
|
CreateClientConfigurationRequestFromDynamicClientRegistrationResponse
Created client configuration request body from dynamic client registration response
|
||
|
2022-09-15 01:27:32 |
|
FAPIBrazilCallDirectorySoftwareStatementEndpointWithBearerToken
HTTP request
|
||||||||||
|
2022-09-15 01:27:34 |
RESPONSE
|
FAPIBrazilCallDirectorySoftwareStatementEndpointWithBearerToken
HTTP response
|
||||||||
|
2022-09-15 01:27:34 |
|
FAPIBrazilCallDirectorySoftwareStatementEndpointWithBearerToken
software statement endpoint response
|
||
|
2022-09-15 01:27:34 |
SUCCESS
|
FAPIBrazilCallDirectorySoftwareStatementEndpointWithBearerToken
Parsed assertion endpoint response
|
||||||
|
2022-09-15 01:27:34 |
|
AddSoftwareStatementToClientConfigurationRequest
Added software_statement to client configuration request
|
||
|
2022-09-15 01:27:34 |
SUCCESS
|
CreateJwksUri
Created JWKs URI
|
||
|
2022-09-15 01:27:34 |
|
AddJwksUriToDynamicRegistrationRequest
Added jwks_uri to dynamic registration request
|
||
|
2022-09-15 01:27:34 |
|
CallClientConfigurationEndpoint
HTTP request
|
||||||||||
|
2022-09-15 01:28:34 |
RESPONSE
|
CallClientConfigurationEndpoint
HTTP response
|
||||||||
|
2022-09-15 01:28:34 |
SUCCESS
|
CallClientConfigurationEndpoint
Called registration_client_uri
|
||||||||||
|
2022-09-15 01:28:34 | SUCCESS |
EnsureContentTypeJson
endpoint_response Content-Type: header is application/json
|
|
2022-09-15 01:28:34 | SUCCESS |
EnsureHttpStatusCodeIs400
registration_client_uri endpoint returned the expected http status
|
||||
|
2022-09-15 01:28:34 | SUCCESS |
CheckErrorFromDynamicRegistrationEndpointIsInvalidClientMetadata
Dynamic registration endpoint returned 'error'
|
||||
|
2022-09-15 01:28:34 |
SUCCESS
|
GetResourceEndpointConfiguration
Found a resource endpoint object
|
||||||
|
2022-09-15 01:28:34 |
SUCCESS
|
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
|
||
|
2022-09-15 01:28:34 |
SUCCESS
|
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
|
||
|
2022-09-15 01:28:34 |
SUCCESS
|
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
|
||||
|
2022-09-15 01:28:34 |
|
fapi1-advanced-final-brazildcr-update-client-config-bad-jwks-uri
Setup Done
|
|
2022-09-15 01:28:34 |
FINISHED
|
fapi1-advanced-final-brazildcr-update-client-config-bad-jwks-uri
Test has run to completion
|
||
|
Unregister dynamically registered client |
2022-09-15 01:28:34 |
|
UnregisterDynamicallyRegisteredClient
HTTP request
|
||||||||||
|
2022-09-15 01:28:48 |
|
TEST-RUNNER
Stopping test due to alias conflict - before this test finished, you have started another test using the same alias. You will need to rerun this test and ensure you complete all steps in this test before you move onto the next test. Please check that the alias in your test configuration is unique, for example include your company name in it.
|
||||
|
2022-09-15 01:30:23 |
|
TEST-RUNNER
Stopping test due to alias conflict - before this test finished, you have started another test using the same alias. You will need to rerun this test and ensure you complete all steps in this test before you move onto the next test. Please check that the alias in your test configuration is unique, for example include your company name in it.
|
||||
|
2022-09-15 01:30:34 |
RESPONSE
|
UnregisterDynamicallyRegisteredClient
HTTP response
|
||||||||
|
2022-09-15 01:30:34 |
SUCCESS
|
UnregisterDynamicallyRegisteredClient
Client successfully unregistered
|
|
2022-09-15 01:30:40 |
|
TEST-RUNNER
Alias has now been claimed by another test
|
||||
|