Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-10-17 09:21:02 INFO
TEST-RUNNER
Test instance A4LZIWEkt9wnQRf created
baseUrl
https://www.certification.openid.net/test/a/ISVAOP
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "by_value",
  "fapi_profile": "openbanking_uk",
  "fapi_response_mode": "plain_response"
}
alias
ISVAOP
description
planId
Efsx4j3w9wbcb
config
{
  "alias": "ISVAOP",
  "automated_ciba_approval_url": "http://119.81.74.189:31811/authenticator/userResponse?action\u003d{action}\u0026token\u003d{auth_req_id}",
  "server": {
    "discoveryUrl": "https://isamfed.com:6443/isvaop/oauth2/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "client_ukob01",
    "scope": "openid email",
    "jwks": {
      "keys": [
        {
          "p": "5POsvBfNiTqioCBLGaWsOQwTCPkGAECgCeWXqQykp6Cfbfoi1mvbRDAbNPjoLP88bOOt9v528Tpsi8ZuwQRn9XiK8IyyuxIrDaGBvfZCLCK513R8rX3gj-raer-FMaEIpr1bYCTOKBhyhcP46nTwfXNxTwfKFY7O0H8sWcBfF_M",
          "kty": "RSA",
          "q": "oqadQZ4jqFife7hlA2viAEGjJMu8ZRRIx15U19XKw4LbgHYAs3p965WO2lHJqkRUwD1YXZwqOcapUs2samp8JmoZ9j3OavwuRV7qW68_xV3W5xG8lV41RfKLX0c1ny7jJhPWOAbuJzjp3okjqy3hUBZ8Y2B25A2u8fxuhf7U3x0",
          "d": "Z-mgweEYkai9vr_dBYL0LaaHcfVv4D0X638cQIl99VNzZ8h3GqwtLC_zN6kx89S9C8nprfP2NvTegKxs-2bh-FN08k16zolcx6jEkZSgmUOhMLlpmB0qhHWOnYT047y-h9rQ9rZCVxIClJu5Whh8pa_Xlm3BDlbgJBEZSZAwbuWojQ3a-1J6Z8dP6aGqICUxOofz8z2KGxfQnCTmDIyfdCePmBlx7zdFvgq7SI9fDywkfo0ReBmVA4UX9DIbeR2nShZ53Q54rAPzbBLdwD3NzGeGN7Fk53PT3uYVBUq8nNzIwtdaeTRJ7_QxBBy769uG6I2yKIEE3hHldQT0hTs5AQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "ristrettotest",
          "qi": "uzQHF2KOelrHJhOYBmoHkbiQqczkA3AQXOwAQME3P32dFJgOOB6QdCfrg1C2JTobx8Q3EVoko1j96QE2XCrWEBs9oW-4gg4CPGaU7BmVFt0lB88-ZD6E2N0byg2mekYtdGR3ifispEZHdIBP7TxW82in3fn-nB08YMqQAqqIGes",
          "dp": "UcoLBxapwkBEIFfo_DyHDcoWcrojPqvXgDGYwDdYCtoCmlMlZtwY9H8K-R2CM7DqcSvU1cuJyhtI85XrsuBUEwkA-XYJ03JmFvR_WNFESmgNY76lW4UAV-laK0eH2XbhlE9I-Uusqf4xyz97CKbF0ssOy2DI_HKLx0fnHBjw36k",
          "alg": "PS256",
          "dq": "KSaoYMKm2N_bMc0cWXpBCrmQki2ts5EnPLHEG3tuunpwGJdCZCZYl3MWWmwY7qgtHRooMj7hfA6kJlv9BEt-r6VmfiNzByRYfJqgBqRXKRMt3PZi1ROpvNG5q1hz25tcQvT_3Nr8BBZlLTVbPeL0v3OA8w-j5N0FZxnryKEJsI0",
          "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
        }
      ]
    },
    "hint_type": "login_hint",
    "hint_value": "testuser"
  },
  "client2": {
    "client_id": "client_ukob02",
    "scope": "openid",
    "jwks": {
      "keys": [
        {
          "p": "_a4hJlGIgqTgO5MjxTa4j4-rnui8ofinPAs2lh5D3YQEQfpVPrEYlv8eo_sPpwkeU1M-PXVT2U59Os56IiKzDhqdQgaIRbq6Si8fhPxPrI4ei-wXuihqF1QDbbAuXf7ZV8_Yx1XCPKadrRNa8TKZWO4vDR30EdDsjL2uhyxdcI8",
          "kty": "RSA",
          "q": "x4GpCUG5Kwo6xv6Wl5UWUuV817mccDDnWVSLqK7Msb58BSfcK7kLrdzSFxBuo_DoK4RYu5K34HbAIzoZuC4cRJXR5QDf6BKxuyyF0qMNrHWpoXSpQOXHR6UowPaNHKfa4pXhcRCj4yo47VkipXEm2tD9bdTB0ydVZTJXrRKw9IE",
          "d": "moWnAjS47_t0jdjYHaubEY3f0MI5lVKwZblDqbkKoYUVfguFTI55opUg6EUGJDX74SM1acfPRpe6P7V9Iet_PoGpunQ4TdD3H4yCetqLBniZPNDn8oeVKkhhj97v-GyLyAWumaEDntO0O566TGUL-a0GwrcfT63Z_A4e0-NCTNyrn-hyy5Ljlw17r9MehxwXhi6wZdZJnu7iPT2UJGYeO9R-qedE_UiBzPYsXCjXV6FrY4awDGvWAr4R24hkI9naj6hIcmJhL-34xh6_hWomFtCHtKkNRSVHjMcIP5HOeK4yUqlRssvr61xzDwxrtv32Tj5JCDFUCc-NM8YVYy3oAQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "conformancetest",
          "qi": "ZIgXA-QKu5WscOoA4paq3INWIFNf34tPa1I2MTe30_fLShaDwwF3F_CzUscVd1k7Mbn_VpuKfK2C5Vqupoyj7uyk1gm-iuWtJYcxTkE61udn5vRq4lnjNzxtQCjHm48ZRnVmpFCMrSbcb2oJMzWFH1aM2vyCwuMcrSckR7YVVUI",
          "dp": "HSWmtWpkzu32vaGYWI6DAiu1wlpnYgzZ2jJHoVP05DzI6HPE26EpfB_v-1NbZwvLKjPEUPdsHOnBxcH3knh-Lj6slut9ONXNlbx4WKVM2jyyEc2cpE0Ec425nx7BFRe1DTvaYnzeBm32a-5vYos3x1oGmfE5G9rvcvRQW0OjsM0",
          "alg": "PS256",
          "dq": "XyYfkCKgRT6jubRB7hlUhESevePwEDHCpIAF-3UiesL2Mx9HijK-tzTRnd5gZh_HGroL96mJuKvqBuL20ThskulBKY65Ot1vlm0thb_uDYowVKhm8GSmHi1Ounjb5AbKBbalxl7BSt4gOFKCi5TjiwiRVYhayHHB8HmKByka7AE",
          "n": "xbLYBJ3SXWsNcLG03ieLj3UcqOQa0z4KHgjDSIytAv9GgKotTJU9skUvXWLJJuHlAh1MjI9rBZenMuUTqvaHvxMxMpDn5sc2GOLxmoM_dJBAPKmLWhNPNlKAJCVDAWHGcydBNLu8_ZkGCKaXbLStWjPl2djokKNU7gJLGEdv_PaT8-DUKH65xJ7sAaEqgsaFjXUuK7eLQG3Dxd64CLpfiCl9szHZldQkV3t44zfdB9KdaZyWiHwqRUe0mdc4Nn3-QZ7PhfY1z2q0fxEetcMyjr_5RLDWgOltneNmxyrbaxNHUMuiSnroemaRXZMxLyx_c8rDL8YRZ5VXToQw2q4EDw"
        }
      ]
    },
    "acr_value": "urn:acr2"
  },
  "resource": {
    "resourceUrl": "https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/",
    "resourceUrlAccountRequests": "https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/",
    "resourceUrlAccountsResource": "https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\nflhKfJxQl0EQTjXaXR4kRw+zB4OzNIjv3FD2F4kq7qsxzyFb14z8bkp/gA\u003d\u003d\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\nSrJe3uU+IC74iHff9XHmwiHwcpmgsDclyg4Ga5eCf1XNKmZLtu/4Xg\u003d\u003d\n-----END RSA PRIVATE KEY-----\n",
    "ca": "-----BEGIN CERTIFICATE-----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\nflhKfJxQl0EQTjXaXR4kRw+zB4OzNIjv3FD2F4kq7qsxzyFb14z8bkp/gA\u003d\u003d\n-----END CERTIFICATE-----\n"
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----\nMIIDtzCCAp+gAwIBAgIUWzVEE6ZzNUl6kwxJgrUgERqiDXkwDQYJKoZIhvcNAQEL\nBQAwazELMAkGA1UEBhMCU0cxEjAQBgNVBAgMCXNpbmdhcG9yZTESMBAGA1UEBwwJ\nc2luZ2Fwb3JlMQwwCgYDVQQKDANJQk0xETAPBgNVBAsMCHNlY3VyaXR5MRMwEQYD\nVQQDDApjbGllbnRJRDAyMB4XDTIyMDEwNDA0MzQxNloXDTQxMDkyMTA0MzQxNlow\nazELMAkGA1UEBhMCU0cxEjAQBgNVBAgMCXNpbmdhcG9yZTESMBAGA1UEBwwJc2lu\nZ2Fwb3JlMQwwCgYDVQQKDANJQk0xETAPBgNVBAsMCHNlY3VyaXR5MRMwEQYDVQQD\nDApjbGllbnRJRDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFSV\n37045EHSIKgQ+yofftUN/Ym1kv17rx1G92uepLHgw1Ar+Qvoq2w6La1k9tGZuMMY\nC8RmlqT+7S6Z5LP4AjKByW+1vX6zJPN6xmEnDFDd420MIqC56cqs3JyfJEybhVRd\nLCgGvz3uZ7dewKm+oiLECOGAST0jzMc5szzxtvkN5jyURUAaYhLqjlsqpS2XM79A\nsJIRQy/XsYux1wf42CFvS1Ves3N/aTbO5N6VA5h4KA1k+7/F1HlP+J1rB2dk7zsS\nnwvsGLvV1r5Eb5XP8DphKZ+xtJmANNo3NiNONxuV0T7HOXzrqgp2VDt9tXuJOClr\nEJEJJnAUJ7cYXtn8uQIDAQABo1MwUTAdBgNVHQ4EFgQUAZeJHIZu9VunYouyoHf/\nQODzbREwHwYDVR0jBBgwFoAUAZeJHIZu9VunYouyoHf/QODzbREwDwYDVR0TAQH/\nBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAft9Mp/WpGdRF1sCzVG2r7SHxaxTG\nfWC+iZJBVZfFTJcthDawCW3xIfQb0RUrtGWTKBgpCp8GSCxFYPuri/nZn2vRbujn\n3woK2siXWS64bYDUOJ3xHvt3/j0PPGRfQ3faSXjdvtkE7ayLRKdb132rBd2k7oBq\nIZkM3ezvXg49KupJfOYTaqNezA4TTXaLFL+7BbY8IFPYHE+t66K68DNbypr3Q8pP\n2ZCHE3YLS3RG+Ql2EYSGABKNbeRcipONYPvtsiZt4k44vCDRUC5DXdC6C9KeEjrL\np5ycJYgdT+YqD34Rd89u/yjgvlo3Bcv0mhEO1sS4jaG3IRkZZsCoUEFSvQ\u003d\u003d\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\n7/QZejw68iLHZWQMH57daNZL9X/8VwmF/C8tawAvXmflv+ra3Ec\u003d\n-----END RSA PRIVATE KEY-----\n",
    "ca": "-----BEGIN CERTIFICATE-----\nMIIDtzCCAp+gAwIBAgIUWzVEE6ZzNUl6kwxJgrUgERqiDXkwDQYJKoZIhvcNAQEL\nBQAwazELMAkGA1UEBhMCU0cxEjAQBgNVBAgMCXNpbmdhcG9yZTESMBAGA1UEBwwJ\nc2luZ2Fwb3JlMQwwCgYDVQQKDANJQk0xETAPBgNVBAsMCHNlY3VyaXR5MRMwEQYD\nVQQDDApjbGllbnRJRDAyMB4XDTIyMDEwNDA0MzQxNloXDTQxMDkyMTA0MzQxNlow\nazELMAkGA1UEBhMCU0cxEjAQBgNVBAgMCXNpbmdhcG9yZTESMBAGA1UEBwwJc2lu\nZ2Fwb3JlMQwwCgYDVQQKDANJQk0xETAPBgNVBAsMCHNlY3VyaXR5MRMwEQYDVQQD\nDApjbGllbnRJRDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFSV\n37045EHSIKgQ+yofftUN/Ym1kv17rx1G92uepLHgw1Ar+Qvoq2w6La1k9tGZuMMY\nC8RmlqT+7S6Z5LP4AjKByW+1vX6zJPN6xmEnDFDd420MIqC56cqs3JyfJEybhVRd\nLCgGvz3uZ7dewKm+oiLECOGAST0jzMc5szzxtvkN5jyURUAaYhLqjlsqpS2XM79A\nsJIRQy/XsYux1wf42CFvS1Ves3N/aTbO5N6VA5h4KA1k+7/F1HlP+J1rB2dk7zsS\nnwvsGLvV1r5Eb5XP8DphKZ+xtJmANNo3NiNONxuV0T7HOXzrqgp2VDt9tXuJOClr\nEJEJJnAUJ7cYXtn8uQIDAQABo1MwUTAdBgNVHQ4EFgQUAZeJHIZu9VunYouyoHf/\nQODzbREwHwYDVR0jBBgwFoAUAZeJHIZu9VunYouyoHf/QODzbREwDwYDVR0TAQH/\nBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAft9Mp/WpGdRF1sCzVG2r7SHxaxTG\nfWC+iZJBVZfFTJcthDawCW3xIfQb0RUrtGWTKBgpCp8GSCxFYPuri/nZn2vRbujn\n3woK2siXWS64bYDUOJ3xHvt3/j0PPGRfQ3faSXjdvtkE7ayLRKdb132rBd2k7oBq\nIZkM3ezvXg49KupJfOYTaqNezA4TTXaLFL+7BbY8IFPYHE+t66K68DNbypr3Q8pP\n2ZCHE3YLS3RG+Ql2EYSGABKNbeRcipONYPvtsiZt4k44vCDRUC5DXdC6C9KeEjrL\np5ycJYgdT+YqD34Rd89u/yjgvlo3Bcv0mhEO1sS4jaG3IRkZZsCoUEFSvQ\u003d\u003d\n-----END CERTIFICATE-----\n"
  },
  "consent": {}
}
testName
fapi1-advanced-final-ensure-valid-pkce-succeeds
2022-10-17 09:21:02 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
2022-10-17 09:21:02
GetDynamicServerConfiguration
HTTP request
request_uri
https://isamfed.com:6443/isvaop/oauth2/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-10-17 09:21:03 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-type": "application/json",
  "date": "Mon, 17 Oct 2022 09:21:03 GMT",
  "p3p": "CP\u003d\"NON CUR OTPi OUR NOR UNI\"",
  "transfer-encoding": "chunked",
  "x-correlation-id": "CORR_ID-5a4a09f0-4819-4df3-b9b2-c00f561b60ef",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains"
}
response_body
{"authorization_encryption_alg_values_supported":["none"],"authorization_encryption_enc_values_supported":["none"],"authorization_endpoint":"https://isamfed.com:6443/isvaop/oauth2/authorize","authorization_signing_alg_values_supported":["PS256"],"backchannel_authentication_endpoint":"https://isamfed.com:6443/isvaop/oauth2/ciba","backchannel_authentication_request_signing_alg_values_supported":["RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES384","ES512"],"backchannel_token_delivery_modes_supported":["poll","ping"],"backchannel_user_code_parameter_supported":false,"claim_types_supported":["normal"],"claims_parameter_supported":true,"claims_supported":["acr","openbanking_intent_id"],"dpop_signing_alg_values_supported":["RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES384","ES512"],"grant_types_supported":["authorization_code","implicit","password","client_credentials","refresh_token","urn:openid:params:grant-type:ciba"],"id_token_encryption_alg_values_supported":["none"],"id_token_encryption_enc_values_supported":["none"],"id_token_signing_alg_values_supported":["PS256"],"introspection_endpoint":"https://isamfed.com:6443/isvaop/oauth2/introspect","issuer":"https://isamfed.com:6443/isvaop/oauth2","jwks_uri":"https://isamfed.com:6443/isvaop/oauth2/jwks","mtls_endpoint_aliases":{"backchannel_authentication_endpoint":"https://isamfed.com:6443/isvaop/oauth2/ciba","introspection_endpoint":"https://isamfed.com:6443/isvaop/oauth2/introspect","pushed_authorization_request_endpoint":"https://isamfed.com:6443/isvaop/oauth2/par","registration_endpoint":"https://isamfed.com:6443/isvaop/oauth2/register","revocation_endpoint":"https://isamfed.com:6443/isvaop/oauth2/revoke","token_endpoint":"https://isamfed.com:6443/isvaop/oauth2/token"},"pushed_authorization_request_endpoint":"https://isamfed.com:6443/isvaop/oauth2/par","registration_endpoint":"https://isamfed.com:6443/isvaop/oauth2/register","request_object_encryption_alg_values_supported":["none","RSA-OAEP","RSA-OAEP-256"],"request_object_encryption_enc_values_supported":["none","A128GCM","A192GCM","A256GCM"],"request_object_signing_alg_values_supported":["RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES384","ES512"],"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_pushed_authorization_requests":false,"require_request_uri_registration":false,"response_modes_supported":["query","fragment","form_post","jwt","query.jwt","fragment.jwt","form_post.jwt"],"response_types_supported":["none","code","token","id_token","code token","code id_token","token id_token","code token id_token"],"revocation_endpoint":"https://isamfed.com:6443/isvaop/oauth2/revoke","scopes_supported":["openid","accounts"],"subject_types_supported":["public"],"tls_client_certificate_bound_access_tokens":true,"token_endpoint":"https://isamfed.com:6443/isvaop/oauth2/token","token_endpoint_auth_methods_supported":["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],"token_endpoint_auth_signing_alg_values_supported":["RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES384","ES512"],"userinfo_encryption_alg_values_supported":["none"],"userinfo_encryption_enc_values_supported":["none"],"userinfo_endpoint":"https://isamfed.com:6443/isvaop/oauth2/userinfo","userinfo_signing_alg_values_supported":["PS256"]}
2022-10-17 09:21:03 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
authorization_encryption_alg_values_supported
[
  "none"
]
authorization_encryption_enc_values_supported
[
  "none"
]
authorization_endpoint
https://isamfed.com:6443/isvaop/oauth2/authorize
authorization_signing_alg_values_supported
[
  "PS256"
]
backchannel_authentication_endpoint
https://isamfed.com:6443/isvaop/oauth2/ciba
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "PS256",
  "PS384",
  "PS512",
  "ES256",
  "ES384",
  "ES512"
]
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_user_code_parameter_supported
false
claim_types_supported
[
  "normal"
]
claims_parameter_supported
true
claims_supported
[
  "acr",
  "openbanking_intent_id"
]
dpop_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "PS256",
  "PS384",
  "PS512",
  "ES256",
  "ES384",
  "ES512"
]
grant_types_supported
[
  "authorization_code",
  "implicit",
  "password",
  "client_credentials",
  "refresh_token",
  "urn:openid:params:grant-type:ciba"
]
id_token_encryption_alg_values_supported
[
  "none"
]
id_token_encryption_enc_values_supported
[
  "none"
]
id_token_signing_alg_values_supported
[
  "PS256"
]
introspection_endpoint
https://isamfed.com:6443/isvaop/oauth2/introspect
issuer
https://isamfed.com:6443/isvaop/oauth2
jwks_uri
https://isamfed.com:6443/isvaop/oauth2/jwks
mtls_endpoint_aliases
{
  "backchannel_authentication_endpoint": "https://isamfed.com:6443/isvaop/oauth2/ciba",
  "introspection_endpoint": "https://isamfed.com:6443/isvaop/oauth2/introspect",
  "pushed_authorization_request_endpoint": "https://isamfed.com:6443/isvaop/oauth2/par",
  "registration_endpoint": "https://isamfed.com:6443/isvaop/oauth2/register",
  "revocation_endpoint": "https://isamfed.com:6443/isvaop/oauth2/revoke",
  "token_endpoint": "https://isamfed.com:6443/isvaop/oauth2/token"
}
pushed_authorization_request_endpoint
https://isamfed.com:6443/isvaop/oauth2/par
registration_endpoint
https://isamfed.com:6443/isvaop/oauth2/register
request_object_encryption_alg_values_supported
[
  "none",
  "RSA-OAEP",
  "RSA-OAEP-256"
]
request_object_encryption_enc_values_supported
[
  "none",
  "A128GCM",
  "A192GCM",
  "A256GCM"
]
request_object_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "PS256",
  "PS384",
  "PS512",
  "ES256",
  "ES384",
  "ES512"
]
request_parameter_supported
true
request_uri_parameter_supported
false
require_pushed_authorization_requests
false
require_request_uri_registration
false
response_modes_supported
[
  "query",
  "fragment",
  "form_post",
  "jwt",
  "query.jwt",
  "fragment.jwt",
  "form_post.jwt"
]
response_types_supported
[
  "none",
  "code",
  "token",
  "id_token",
  "code token",
  "code id_token",
  "token id_token",
  "code token id_token"
]
revocation_endpoint
https://isamfed.com:6443/isvaop/oauth2/revoke
scopes_supported
[
  "openid",
  "accounts"
]
subject_types_supported
[
  "public"
]
tls_client_certificate_bound_access_tokens
true
token_endpoint
https://isamfed.com:6443/isvaop/oauth2/token
token_endpoint_auth_methods_supported
[
  "client_secret_basic",
  "client_secret_post",
  "private_key_jwt",
  "tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "PS256",
  "PS384",
  "PS512",
  "ES256",
  "ES384",
  "ES512"
]
userinfo_encryption_alg_values_supported
[
  "none"
]
userinfo_encryption_enc_values_supported
[
  "none"
]
userinfo_endpoint
https://isamfed.com:6443/isvaop/oauth2/userinfo
userinfo_signing_alg_values_supported
[
  "PS256"
]
2022-10-17 09:21:03 SUCCESS
AddMTLSEndpointAliasesToEnvironment
Added mtls_endpoint_aliases to environment
2022-10-17 09:21:03 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2022-10-17 09:21:03
FetchServerKeys
Fetching server key
jwks_uri
https://isamfed.com:6443/isvaop/oauth2/jwks
2022-10-17 09:21:03
FetchServerKeys
HTTP request
request_uri
https://isamfed.com:6443/isvaop/oauth2/jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-10-17 09:21:04 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "419",
  "content-type": "application/json",
  "date": "Mon, 17 Oct 2022 09:21:04 GMT",
  "p3p": "CP\u003d\"NON CUR OTPi OUR NOR UNI\"",
  "x-correlation-id": "CORR_ID-9f2e050f-e29f-4037-b451-bed6e89a24c2",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains"
}
response_body
{"keys":[{"use":"sig","kty":"RSA","kid":"httpserverkey","n":"3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ","e":"AQAB"}]}
2022-10-17 09:21:04
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"use":"sig","kty":"RSA","kid":"httpserverkey","n":"3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ","e":"AQAB"}]}
2022-10-17 09:21:04 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "use": "sig",
      "kty": "RSA",
      "kid": "httpserverkey",
      "n": "3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ",
      "e": "AQAB"
    }
  ]
}
2022-10-17 09:21:04 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "use": "sig",
      "kty": "RSA",
      "kid": "httpserverkey",
      "n": "3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ",
      "e": "AQAB"
    }
  ]
}
2022-10-17 09:21:04 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-10-17 09:21:04 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2022-10-17 09:21:04 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-10-17 09:21:04 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "use": "sig",
      "kty": "RSA",
      "kid": "httpserverkey",
      "n": "3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ",
      "e": "AQAB"
    }
  ]
}
2022-10-17 09:21:04 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
client_ukob01
scope
openid email
jwks
{
  "keys": [
    {
      "p": "5POsvBfNiTqioCBLGaWsOQwTCPkGAECgCeWXqQykp6Cfbfoi1mvbRDAbNPjoLP88bOOt9v528Tpsi8ZuwQRn9XiK8IyyuxIrDaGBvfZCLCK513R8rX3gj-raer-FMaEIpr1bYCTOKBhyhcP46nTwfXNxTwfKFY7O0H8sWcBfF_M",
      "kty": "RSA",
      "q": "oqadQZ4jqFife7hlA2viAEGjJMu8ZRRIx15U19XKw4LbgHYAs3p965WO2lHJqkRUwD1YXZwqOcapUs2samp8JmoZ9j3OavwuRV7qW68_xV3W5xG8lV41RfKLX0c1ny7jJhPWOAbuJzjp3okjqy3hUBZ8Y2B25A2u8fxuhf7U3x0",
      "d": "Z-mgweEYkai9vr_dBYL0LaaHcfVv4D0X638cQIl99VNzZ8h3GqwtLC_zN6kx89S9C8nprfP2NvTegKxs-2bh-FN08k16zolcx6jEkZSgmUOhMLlpmB0qhHWOnYT047y-h9rQ9rZCVxIClJu5Whh8pa_Xlm3BDlbgJBEZSZAwbuWojQ3a-1J6Z8dP6aGqICUxOofz8z2KGxfQnCTmDIyfdCePmBlx7zdFvgq7SI9fDywkfo0ReBmVA4UX9DIbeR2nShZ53Q54rAPzbBLdwD3NzGeGN7Fk53PT3uYVBUq8nNzIwtdaeTRJ7_QxBBy769uG6I2yKIEE3hHldQT0hTs5AQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "ristrettotest",
      "qi": "uzQHF2KOelrHJhOYBmoHkbiQqczkA3AQXOwAQME3P32dFJgOOB6QdCfrg1C2JTobx8Q3EVoko1j96QE2XCrWEBs9oW-4gg4CPGaU7BmVFt0lB88-ZD6E2N0byg2mekYtdGR3ifispEZHdIBP7TxW82in3fn-nB08YMqQAqqIGes",
      "dp": "UcoLBxapwkBEIFfo_DyHDcoWcrojPqvXgDGYwDdYCtoCmlMlZtwY9H8K-R2CM7DqcSvU1cuJyhtI85XrsuBUEwkA-XYJ03JmFvR_WNFESmgNY76lW4UAV-laK0eH2XbhlE9I-Uusqf4xyz97CKbF0ssOy2DI_HKLx0fnHBjw36k",
      "alg": "PS256",
      "dq": "KSaoYMKm2N_bMc0cWXpBCrmQki2ts5EnPLHEG3tuunpwGJdCZCZYl3MWWmwY7qgtHRooMj7hfA6kJlv9BEt-r6VmfiNzByRYfJqgBqRXKRMt3PZi1ROpvNG5q1hz25tcQvT_3Nr8BBZlLTVbPeL0v3OA8w-j5N0FZxnryKEJsI0",
      "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
    }
  ]
}
hint_type
login_hint
hint_value
testuser
2022-10-17 09:21:04 SUCCESS
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
2022-10-17 09:21:04 SUCCESS
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
ca
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
2022-10-17 09:21:04 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2022-10-17 09:21:04 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "p": "5POsvBfNiTqioCBLGaWsOQwTCPkGAECgCeWXqQykp6Cfbfoi1mvbRDAbNPjoLP88bOOt9v528Tpsi8ZuwQRn9XiK8IyyuxIrDaGBvfZCLCK513R8rX3gj-raer-FMaEIpr1bYCTOKBhyhcP46nTwfXNxTwfKFY7O0H8sWcBfF_M",
      "kty": "RSA",
      "q": "oqadQZ4jqFife7hlA2viAEGjJMu8ZRRIx15U19XKw4LbgHYAs3p965WO2lHJqkRUwD1YXZwqOcapUs2samp8JmoZ9j3OavwuRV7qW68_xV3W5xG8lV41RfKLX0c1ny7jJhPWOAbuJzjp3okjqy3hUBZ8Y2B25A2u8fxuhf7U3x0",
      "d": "Z-mgweEYkai9vr_dBYL0LaaHcfVv4D0X638cQIl99VNzZ8h3GqwtLC_zN6kx89S9C8nprfP2NvTegKxs-2bh-FN08k16zolcx6jEkZSgmUOhMLlpmB0qhHWOnYT047y-h9rQ9rZCVxIClJu5Whh8pa_Xlm3BDlbgJBEZSZAwbuWojQ3a-1J6Z8dP6aGqICUxOofz8z2KGxfQnCTmDIyfdCePmBlx7zdFvgq7SI9fDywkfo0ReBmVA4UX9DIbeR2nShZ53Q54rAPzbBLdwD3NzGeGN7Fk53PT3uYVBUq8nNzIwtdaeTRJ7_QxBBy769uG6I2yKIEE3hHldQT0hTs5AQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "ristrettotest",
      "qi": "uzQHF2KOelrHJhOYBmoHkbiQqczkA3AQXOwAQME3P32dFJgOOB6QdCfrg1C2JTobx8Q3EVoko1j96QE2XCrWEBs9oW-4gg4CPGaU7BmVFt0lB88-ZD6E2N0byg2mekYtdGR3ifispEZHdIBP7TxW82in3fn-nB08YMqQAqqIGes",
      "dp": "UcoLBxapwkBEIFfo_DyHDcoWcrojPqvXgDGYwDdYCtoCmlMlZtwY9H8K-R2CM7DqcSvU1cuJyhtI85XrsuBUEwkA-XYJ03JmFvR_WNFESmgNY76lW4UAV-laK0eH2XbhlE9I-Uusqf4xyz97CKbF0ssOy2DI_HKLx0fnHBjw36k",
      "alg": "PS256",
      "dq": "KSaoYMKm2N_bMc0cWXpBCrmQki2ts5EnPLHEG3tuunpwGJdCZCZYl3MWWmwY7qgtHRooMj7hfA6kJlv9BEt-r6VmfiNzByRYfJqgBqRXKRMt3PZi1ROpvNG5q1hz25tcQvT_3Nr8BBZlLTVbPeL0v3OA8w-j5N0FZxnryKEJsI0",
      "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "ristrettotest",
      "alg": "PS256",
      "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
    }
  ]
}
2022-10-17 09:21:04 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2022-10-17 09:21:04 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-10-17 09:21:04 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "ES256",
  "PS256"
]
2022-10-17 09:21:04 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "5POsvBfNiTqioCBLGaWsOQwTCPkGAECgCeWXqQykp6Cfbfoi1mvbRDAbNPjoLP88bOOt9v528Tpsi8ZuwQRn9XiK8IyyuxIrDaGBvfZCLCK513R8rX3gj-raer-FMaEIpr1bYCTOKBhyhcP46nTwfXNxTwfKFY7O0H8sWcBfF_M",
      "kty": "RSA",
      "q": "oqadQZ4jqFife7hlA2viAEGjJMu8ZRRIx15U19XKw4LbgHYAs3p965WO2lHJqkRUwD1YXZwqOcapUs2samp8JmoZ9j3OavwuRV7qW68_xV3W5xG8lV41RfKLX0c1ny7jJhPWOAbuJzjp3okjqy3hUBZ8Y2B25A2u8fxuhf7U3x0",
      "d": "Z-mgweEYkai9vr_dBYL0LaaHcfVv4D0X638cQIl99VNzZ8h3GqwtLC_zN6kx89S9C8nprfP2NvTegKxs-2bh-FN08k16zolcx6jEkZSgmUOhMLlpmB0qhHWOnYT047y-h9rQ9rZCVxIClJu5Whh8pa_Xlm3BDlbgJBEZSZAwbuWojQ3a-1J6Z8dP6aGqICUxOofz8z2KGxfQnCTmDIyfdCePmBlx7zdFvgq7SI9fDywkfo0ReBmVA4UX9DIbeR2nShZ53Q54rAPzbBLdwD3NzGeGN7Fk53PT3uYVBUq8nNzIwtdaeTRJ7_QxBBy769uG6I2yKIEE3hHldQT0hTs5AQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "ristrettotest",
      "qi": "uzQHF2KOelrHJhOYBmoHkbiQqczkA3AQXOwAQME3P32dFJgOOB6QdCfrg1C2JTobx8Q3EVoko1j96QE2XCrWEBs9oW-4gg4CPGaU7BmVFt0lB88-ZD6E2N0byg2mekYtdGR3ifispEZHdIBP7TxW82in3fn-nB08YMqQAqqIGes",
      "dp": "UcoLBxapwkBEIFfo_DyHDcoWcrojPqvXgDGYwDdYCtoCmlMlZtwY9H8K-R2CM7DqcSvU1cuJyhtI85XrsuBUEwkA-XYJ03JmFvR_WNFESmgNY76lW4UAV-laK0eH2XbhlE9I-Uusqf4xyz97CKbF0ssOy2DI_HKLx0fnHBjw36k",
      "alg": "PS256",
      "dq": "KSaoYMKm2N_bMc0cWXpBCrmQki2ts5EnPLHEG3tuunpwGJdCZCZYl3MWWmwY7qgtHRooMj7hfA6kJlv9BEt-r6VmfiNzByRYfJqgBqRXKRMt3PZi1ROpvNG5q1hz25tcQvT_3Nr8BBZlLTVbPeL0v3OA8w-j5N0FZxnryKEJsI0",
      "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
    }
  ]
}
2022-10-17 09:21:04 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
Verify configuration of second client
2022-10-17 09:21:04 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
client_ukob02
scope
openid
jwks
{
  "keys": [
    {
      "p": "_a4hJlGIgqTgO5MjxTa4j4-rnui8ofinPAs2lh5D3YQEQfpVPrEYlv8eo_sPpwkeU1M-PXVT2U59Os56IiKzDhqdQgaIRbq6Si8fhPxPrI4ei-wXuihqF1QDbbAuXf7ZV8_Yx1XCPKadrRNa8TKZWO4vDR30EdDsjL2uhyxdcI8",
      "kty": "RSA",
      "q": "x4GpCUG5Kwo6xv6Wl5UWUuV817mccDDnWVSLqK7Msb58BSfcK7kLrdzSFxBuo_DoK4RYu5K34HbAIzoZuC4cRJXR5QDf6BKxuyyF0qMNrHWpoXSpQOXHR6UowPaNHKfa4pXhcRCj4yo47VkipXEm2tD9bdTB0ydVZTJXrRKw9IE",
      "d": "moWnAjS47_t0jdjYHaubEY3f0MI5lVKwZblDqbkKoYUVfguFTI55opUg6EUGJDX74SM1acfPRpe6P7V9Iet_PoGpunQ4TdD3H4yCetqLBniZPNDn8oeVKkhhj97v-GyLyAWumaEDntO0O566TGUL-a0GwrcfT63Z_A4e0-NCTNyrn-hyy5Ljlw17r9MehxwXhi6wZdZJnu7iPT2UJGYeO9R-qedE_UiBzPYsXCjXV6FrY4awDGvWAr4R24hkI9naj6hIcmJhL-34xh6_hWomFtCHtKkNRSVHjMcIP5HOeK4yUqlRssvr61xzDwxrtv32Tj5JCDFUCc-NM8YVYy3oAQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "conformancetest",
      "qi": "ZIgXA-QKu5WscOoA4paq3INWIFNf34tPa1I2MTe30_fLShaDwwF3F_CzUscVd1k7Mbn_VpuKfK2C5Vqupoyj7uyk1gm-iuWtJYcxTkE61udn5vRq4lnjNzxtQCjHm48ZRnVmpFCMrSbcb2oJMzWFH1aM2vyCwuMcrSckR7YVVUI",
      "dp": "HSWmtWpkzu32vaGYWI6DAiu1wlpnYgzZ2jJHoVP05DzI6HPE26EpfB_v-1NbZwvLKjPEUPdsHOnBxcH3knh-Lj6slut9ONXNlbx4WKVM2jyyEc2cpE0Ec425nx7BFRe1DTvaYnzeBm32a-5vYos3x1oGmfE5G9rvcvRQW0OjsM0",
      "alg": "PS256",
      "dq": "XyYfkCKgRT6jubRB7hlUhESevePwEDHCpIAF-3UiesL2Mx9HijK-tzTRnd5gZh_HGroL96mJuKvqBuL20ThskulBKY65Ot1vlm0thb_uDYowVKhm8GSmHi1Ounjb5AbKBbalxl7BSt4gOFKCi5TjiwiRVYhayHHB8HmKByka7AE",
      "n": "xbLYBJ3SXWsNcLG03ieLj3UcqOQa0z4KHgjDSIytAv9GgKotTJU9skUvXWLJJuHlAh1MjI9rBZenMuUTqvaHvxMxMpDn5sc2GOLxmoM_dJBAPKmLWhNPNlKAJCVDAWHGcydBNLu8_ZkGCKaXbLStWjPl2djokKNU7gJLGEdv_PaT8-DUKH65xJ7sAaEqgsaFjXUuK7eLQG3Dxd64CLpfiCl9szHZldQkV3t44zfdB9KdaZyWiHwqRUe0mdc4Nn3-QZ7PhfY1z2q0fxEetcMyjr_5RLDWgOltneNmxyrbaxNHUMuiSnroemaRXZMxLyx_c8rDL8YRZ5VXToQw2q4EDw"
    }
  ]
}
acr_value
urn:acr2
2022-10-17 09:21:04 SUCCESS
ValidateMTLSCertificates2Header
MTLS certificates header is valid
2022-10-17 09:21:04 SUCCESS
ExtractMTLSCertificates2FromConfiguration
Mutual TLS authentication credentials loaded
cert
MIIDtzCCAp+gAwIBAgIUWzVEE6ZzNUl6kwxJgrUgERqiDXkwDQYJKoZIhvcNAQELBQAwazELMAkGA1UEBhMCU0cxEjAQBgNVBAgMCXNpbmdhcG9yZTESMBAGA1UEBwwJc2luZ2Fwb3JlMQwwCgYDVQQKDANJQk0xETAPBgNVBAsMCHNlY3VyaXR5MRMwEQYDVQQDDApjbGllbnRJRDAyMB4XDTIyMDEwNDA0MzQxNloXDTQxMDkyMTA0MzQxNlowazELMAkGA1UEBhMCU0cxEjAQBgNVBAgMCXNpbmdhcG9yZTESMBAGA1UEBwwJc2luZ2Fwb3JlMQwwCgYDVQQKDANJQk0xETAPBgNVBAsMCHNlY3VyaXR5MRMwEQYDVQQDDApjbGllbnRJRDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFSV37045EHSIKgQ+yofftUN/Ym1kv17rx1G92uepLHgw1Ar+Qvoq2w6La1k9tGZuMMYC8RmlqT+7S6Z5LP4AjKByW+1vX6zJPN6xmEnDFDd420MIqC56cqs3JyfJEybhVRdLCgGvz3uZ7dewKm+oiLECOGAST0jzMc5szzxtvkN5jyURUAaYhLqjlsqpS2XM79AsJIRQy/XsYux1wf42CFvS1Ves3N/aTbO5N6VA5h4KA1k+7/F1HlP+J1rB2dk7zsSnwvsGLvV1r5Eb5XP8DphKZ+xtJmANNo3NiNONxuV0T7HOXzrqgp2VDt9tXuJOClrEJEJJnAUJ7cYXtn8uQIDAQABo1MwUTAdBgNVHQ4EFgQUAZeJHIZu9VunYouyoHf/QODzbREwHwYDVR0jBBgwFoAUAZeJHIZu9VunYouyoHf/QODzbREwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAft9Mp/WpGdRF1sCzVG2r7SHxaxTGfWC+iZJBVZfFTJcthDawCW3xIfQb0RUrtGWTKBgpCp8GSCxFYPuri/nZn2vRbujn3woK2siXWS64bYDUOJ3xHvt3/j0PPGRfQ3faSXjdvtkE7ayLRKdb132rBd2k7oBqIZkM3ezvXg49KupJfOYTaqNezA4TTXaLFL+7BbY8IFPYHE+t66K68DNbypr3Q8pP2ZCHE3YLS3RG+Ql2EYSGABKNbeRcipONYPvtsiZt4k44vCDRUC5DXdC6C9KeEjrLp5ycJYgdT+YqD34Rd89u/yjgvlo3Bcv0mhEO1sS4jaG3IRkZZsCoUEFSvQ==
key
MIIEogIBAAKCAQEAxFSV37045EHSIKgQ+yofftUN/Ym1kv17rx1G92uepLHgw1Ar+Qvoq2w6La1k9tGZuMMYC8RmlqT+7S6Z5LP4AjKByW+1vX6zJPN6xmEnDFDd420MIqC56cqs3JyfJEybhVRdLCgGvz3uZ7dewKm+oiLECOGAST0jzMc5szzxtvkN5jyURUAaYhLqjlsqpS2XM79AsJIRQy/XsYux1wf42CFvS1Ves3N/aTbO5N6VA5h4KA1k+7/F1HlP+J1rB2dk7zsSnwvsGLvV1r5Eb5XP8DphKZ+xtJmANNo3NiNONxuV0T7HOXzrqgp2VDt9tXuJOClrEJEJJnAUJ7cYXtn8uQIDAQABAoIBABZVROM5pCIa9qsuUxgvF3wXAktoAdahrRMjcnIstNQpQ9cT5Jyk5Sey3P9bLRQCjcj9sFuOUNksFa+nUGw6qKifVDI02eifZAN9CudMH+P/wu3e9rVtsRhOLNG/oz6+1CYbjam7N+FDSz5TFp018fCBoekctbofEVZ3BzJDaX+VrBn6TSBpzMzibDfnnfbkFkep+91okF9TTLIZ+Bjl/f1dVfbMZ6scs2rc7Slp52Od0HZ69gerc7l4IFxCiH2pMMbI6lRESYXlaf4j/mTJR/sFnDvbyET1UVU5paAhZ/TLGougAGzLtOEhlxLSjNv/5RfFIs1NPLW8iu68OgKL94ECgYEA6Ya6XBXydFof+aeHub7AlYdEA9qnQdqQR88AHlHcLIxkyNlVsPh+5/t0SrkJtrspBp233Ne9JTflQYk8/+wBE59NutnKJfzzV04ftm1bmW+gBHT36rZRW8WT2Kto73A9SLzhhQSp1a14ff9vULoRwQLtWpAANkqTCUD0Zwe4v+kCgYEA1zl7LSMmUpjjR1thITcfHnVtI+0U4ilqcDXUZzoaJsSQ4/oSr8Xc2EbF2KsxqPhq6HKOhINsPeN+iA1F0F3+oc32k4PI8NrQtIfLsVEvTQ2LuYsR4a8TNyGH/zk0i/XpRy632BrKcYp6iyb3qQgGMdjsK+PW6PChTa6TaopUpFECgYAWozHTlWkQcGAjImNc1Sn0FM26FesaziYoX9+iEMtoIh/u/Gp7IkujD1Qhnjhb117NvmJBbURvpDB8HuKj6GveTBYL4+rdrdyk/PTECWvUvuZjKDeUMCJI5ClF2q/sbhPyxiSScXZJOWyxwh43VCI+dJsvqT/sA2Sng/1tM2lsaQKBgGitkWZTuTjlGW3EWQpxp9YFoO6fSc/x+s3WsJcAYGXIpvvqzhnlr1MVoPaP1RhssnqZ9Q0oaoXzVsBPTExa2xTRewMmTp4unuGfRofYh5v/YZz9sdXFdCAVU/LjXNZR5YL0iwA1j48HnjB95Gi2+WRXMA7swsMK/jktFo/z9dTxAoGAYk2kwzCs7xwhsa3/xH5xJauvlclDqelC4R1cS2pzQI+MQIfjR4JccZ8xly7HMv+2D9vBModxo/msXGq3QJaAmDHzNhee2+OTuKcDLd7wlwSwqZ9EBvxHuLwI7/QZejw68iLHZWQMH57daNZL9X/8VwmF/C8tawAvXmflv+ra3Ec=
ca
MIIDtzCCAp+gAwIBAgIUWzVEE6ZzNUl6kwxJgrUgERqiDXkwDQYJKoZIhvcNAQELBQAwazELMAkGA1UEBhMCU0cxEjAQBgNVBAgMCXNpbmdhcG9yZTESMBAGA1UEBwwJc2luZ2Fwb3JlMQwwCgYDVQQKDANJQk0xETAPBgNVBAsMCHNlY3VyaXR5MRMwEQYDVQQDDApjbGllbnRJRDAyMB4XDTIyMDEwNDA0MzQxNloXDTQxMDkyMTA0MzQxNlowazELMAkGA1UEBhMCU0cxEjAQBgNVBAgMCXNpbmdhcG9yZTESMBAGA1UEBwwJc2luZ2Fwb3JlMQwwCgYDVQQKDANJQk0xETAPBgNVBAsMCHNlY3VyaXR5MRMwEQYDVQQDDApjbGllbnRJRDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFSV37045EHSIKgQ+yofftUN/Ym1kv17rx1G92uepLHgw1Ar+Qvoq2w6La1k9tGZuMMYC8RmlqT+7S6Z5LP4AjKByW+1vX6zJPN6xmEnDFDd420MIqC56cqs3JyfJEybhVRdLCgGvz3uZ7dewKm+oiLECOGAST0jzMc5szzxtvkN5jyURUAaYhLqjlsqpS2XM79AsJIRQy/XsYux1wf42CFvS1Ves3N/aTbO5N6VA5h4KA1k+7/F1HlP+J1rB2dk7zsSnwvsGLvV1r5Eb5XP8DphKZ+xtJmANNo3NiNONxuV0T7HOXzrqgp2VDt9tXuJOClrEJEJJnAUJ7cYXtn8uQIDAQABo1MwUTAdBgNVHQ4EFgQUAZeJHIZu9VunYouyoHf/QODzbREwHwYDVR0jBBgwFoAUAZeJHIZu9VunYouyoHf/QODzbREwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAft9Mp/WpGdRF1sCzVG2r7SHxaxTGfWC+iZJBVZfFTJcthDawCW3xIfQb0RUrtGWTKBgpCp8GSCxFYPuri/nZn2vRbujn3woK2siXWS64bYDUOJ3xHvt3/j0PPGRfQ3faSXjdvtkE7ayLRKdb132rBd2k7oBqIZkM3ezvXg49KupJfOYTaqNezA4TTXaLFL+7BbY8IFPYHE+t66K68DNbypr3Q8pP2ZCHE3YLS3RG+Ql2EYSGABKNbeRcipONYPvtsiZt4k44vCDRUC5DXdC6C9KeEjrLp5ycJYgdT+YqD34Rd89u/yjgvlo3Bcv0mhEO1sS4jaG3IRkZZsCoUEFSvQ==
2022-10-17 09:21:04 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2022-10-17 09:21:04 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "p": "_a4hJlGIgqTgO5MjxTa4j4-rnui8ofinPAs2lh5D3YQEQfpVPrEYlv8eo_sPpwkeU1M-PXVT2U59Os56IiKzDhqdQgaIRbq6Si8fhPxPrI4ei-wXuihqF1QDbbAuXf7ZV8_Yx1XCPKadrRNa8TKZWO4vDR30EdDsjL2uhyxdcI8",
      "kty": "RSA",
      "q": "x4GpCUG5Kwo6xv6Wl5UWUuV817mccDDnWVSLqK7Msb58BSfcK7kLrdzSFxBuo_DoK4RYu5K34HbAIzoZuC4cRJXR5QDf6BKxuyyF0qMNrHWpoXSpQOXHR6UowPaNHKfa4pXhcRCj4yo47VkipXEm2tD9bdTB0ydVZTJXrRKw9IE",
      "d": "moWnAjS47_t0jdjYHaubEY3f0MI5lVKwZblDqbkKoYUVfguFTI55opUg6EUGJDX74SM1acfPRpe6P7V9Iet_PoGpunQ4TdD3H4yCetqLBniZPNDn8oeVKkhhj97v-GyLyAWumaEDntO0O566TGUL-a0GwrcfT63Z_A4e0-NCTNyrn-hyy5Ljlw17r9MehxwXhi6wZdZJnu7iPT2UJGYeO9R-qedE_UiBzPYsXCjXV6FrY4awDGvWAr4R24hkI9naj6hIcmJhL-34xh6_hWomFtCHtKkNRSVHjMcIP5HOeK4yUqlRssvr61xzDwxrtv32Tj5JCDFUCc-NM8YVYy3oAQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "conformancetest",
      "qi": "ZIgXA-QKu5WscOoA4paq3INWIFNf34tPa1I2MTe30_fLShaDwwF3F_CzUscVd1k7Mbn_VpuKfK2C5Vqupoyj7uyk1gm-iuWtJYcxTkE61udn5vRq4lnjNzxtQCjHm48ZRnVmpFCMrSbcb2oJMzWFH1aM2vyCwuMcrSckR7YVVUI",
      "dp": "HSWmtWpkzu32vaGYWI6DAiu1wlpnYgzZ2jJHoVP05DzI6HPE26EpfB_v-1NbZwvLKjPEUPdsHOnBxcH3knh-Lj6slut9ONXNlbx4WKVM2jyyEc2cpE0Ec425nx7BFRe1DTvaYnzeBm32a-5vYos3x1oGmfE5G9rvcvRQW0OjsM0",
      "alg": "PS256",
      "dq": "XyYfkCKgRT6jubRB7hlUhESevePwEDHCpIAF-3UiesL2Mx9HijK-tzTRnd5gZh_HGroL96mJuKvqBuL20ThskulBKY65Ot1vlm0thb_uDYowVKhm8GSmHi1Ounjb5AbKBbalxl7BSt4gOFKCi5TjiwiRVYhayHHB8HmKByka7AE",
      "n": "xbLYBJ3SXWsNcLG03ieLj3UcqOQa0z4KHgjDSIytAv9GgKotTJU9skUvXWLJJuHlAh1MjI9rBZenMuUTqvaHvxMxMpDn5sc2GOLxmoM_dJBAPKmLWhNPNlKAJCVDAWHGcydBNLu8_ZkGCKaXbLStWjPl2djokKNU7gJLGEdv_PaT8-DUKH65xJ7sAaEqgsaFjXUuK7eLQG3Dxd64CLpfiCl9szHZldQkV3t44zfdB9KdaZyWiHwqRUe0mdc4Nn3-QZ7PhfY1z2q0fxEetcMyjr_5RLDWgOltneNmxyrbaxNHUMuiSnroemaRXZMxLyx_c8rDL8YRZ5VXToQw2q4EDw"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "conformancetest",
      "alg": "PS256",
      "n": "xbLYBJ3SXWsNcLG03ieLj3UcqOQa0z4KHgjDSIytAv9GgKotTJU9skUvXWLJJuHlAh1MjI9rBZenMuUTqvaHvxMxMpDn5sc2GOLxmoM_dJBAPKmLWhNPNlKAJCVDAWHGcydBNLu8_ZkGCKaXbLStWjPl2djokKNU7gJLGEdv_PaT8-DUKH65xJ7sAaEqgsaFjXUuK7eLQG3Dxd64CLpfiCl9szHZldQkV3t44zfdB9KdaZyWiHwqRUe0mdc4Nn3-QZ7PhfY1z2q0fxEetcMyjr_5RLDWgOltneNmxyrbaxNHUMuiSnroemaRXZMxLyx_c8rDL8YRZ5VXToQw2q4EDw"
    }
  ]
}
2022-10-17 09:21:04 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2022-10-17 09:21:04 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-10-17 09:21:04 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "ES256",
  "PS256"
]
2022-10-17 09:21:04 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "_a4hJlGIgqTgO5MjxTa4j4-rnui8ofinPAs2lh5D3YQEQfpVPrEYlv8eo_sPpwkeU1M-PXVT2U59Os56IiKzDhqdQgaIRbq6Si8fhPxPrI4ei-wXuihqF1QDbbAuXf7ZV8_Yx1XCPKadrRNa8TKZWO4vDR30EdDsjL2uhyxdcI8",
      "kty": "RSA",
      "q": "x4GpCUG5Kwo6xv6Wl5UWUuV817mccDDnWVSLqK7Msb58BSfcK7kLrdzSFxBuo_DoK4RYu5K34HbAIzoZuC4cRJXR5QDf6BKxuyyF0qMNrHWpoXSpQOXHR6UowPaNHKfa4pXhcRCj4yo47VkipXEm2tD9bdTB0ydVZTJXrRKw9IE",
      "d": "moWnAjS47_t0jdjYHaubEY3f0MI5lVKwZblDqbkKoYUVfguFTI55opUg6EUGJDX74SM1acfPRpe6P7V9Iet_PoGpunQ4TdD3H4yCetqLBniZPNDn8oeVKkhhj97v-GyLyAWumaEDntO0O566TGUL-a0GwrcfT63Z_A4e0-NCTNyrn-hyy5Ljlw17r9MehxwXhi6wZdZJnu7iPT2UJGYeO9R-qedE_UiBzPYsXCjXV6FrY4awDGvWAr4R24hkI9naj6hIcmJhL-34xh6_hWomFtCHtKkNRSVHjMcIP5HOeK4yUqlRssvr61xzDwxrtv32Tj5JCDFUCc-NM8YVYy3oAQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "conformancetest",
      "qi": "ZIgXA-QKu5WscOoA4paq3INWIFNf34tPa1I2MTe30_fLShaDwwF3F_CzUscVd1k7Mbn_VpuKfK2C5Vqupoyj7uyk1gm-iuWtJYcxTkE61udn5vRq4lnjNzxtQCjHm48ZRnVmpFCMrSbcb2oJMzWFH1aM2vyCwuMcrSckR7YVVUI",
      "dp": "HSWmtWpkzu32vaGYWI6DAiu1wlpnYgzZ2jJHoVP05DzI6HPE26EpfB_v-1NbZwvLKjPEUPdsHOnBxcH3knh-Lj6slut9ONXNlbx4WKVM2jyyEc2cpE0Ec425nx7BFRe1DTvaYnzeBm32a-5vYos3x1oGmfE5G9rvcvRQW0OjsM0",
      "alg": "PS256",
      "dq": "XyYfkCKgRT6jubRB7hlUhESevePwEDHCpIAF-3UiesL2Mx9HijK-tzTRnd5gZh_HGroL96mJuKvqBuL20ThskulBKY65Ot1vlm0thb_uDYowVKhm8GSmHi1Ounjb5AbKBbalxl7BSt4gOFKCi5TjiwiRVYhayHHB8HmKByka7AE",
      "n": "xbLYBJ3SXWsNcLG03ieLj3UcqOQa0z4KHgjDSIytAv9GgKotTJU9skUvXWLJJuHlAh1MjI9rBZenMuUTqvaHvxMxMpDn5sc2GOLxmoM_dJBAPKmLWhNPNlKAJCVDAWHGcydBNLu8_ZkGCKaXbLStWjPl2djokKNU7gJLGEdv_PaT8-DUKH65xJ7sAaEqgsaFjXUuK7eLQG3Dxd64CLpfiCl9szHZldQkV3t44zfdB9KdaZyWiHwqRUe0mdc4Nn3-QZ7PhfY1z2q0fxEetcMyjr_5RLDWgOltneNmxyrbaxNHUMuiSnroemaRXZMxLyx_c8rDL8YRZ5VXToQw2q4EDw"
    }
  ]
}
2022-10-17 09:21:04 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2022-10-17 09:21:04 SUCCESS
ValidateClientPrivateKeysAreDifferent
Client signing JWKs have different thumbprints
jwk1
{
  "p": "5POsvBfNiTqioCBLGaWsOQwTCPkGAECgCeWXqQykp6Cfbfoi1mvbRDAbNPjoLP88bOOt9v528Tpsi8ZuwQRn9XiK8IyyuxIrDaGBvfZCLCK513R8rX3gj-raer-FMaEIpr1bYCTOKBhyhcP46nTwfXNxTwfKFY7O0H8sWcBfF_M",
  "kty": "RSA",
  "q": "oqadQZ4jqFife7hlA2viAEGjJMu8ZRRIx15U19XKw4LbgHYAs3p965WO2lHJqkRUwD1YXZwqOcapUs2samp8JmoZ9j3OavwuRV7qW68_xV3W5xG8lV41RfKLX0c1ny7jJhPWOAbuJzjp3okjqy3hUBZ8Y2B25A2u8fxuhf7U3x0",
  "d": "Z-mgweEYkai9vr_dBYL0LaaHcfVv4D0X638cQIl99VNzZ8h3GqwtLC_zN6kx89S9C8nprfP2NvTegKxs-2bh-FN08k16zolcx6jEkZSgmUOhMLlpmB0qhHWOnYT047y-h9rQ9rZCVxIClJu5Whh8pa_Xlm3BDlbgJBEZSZAwbuWojQ3a-1J6Z8dP6aGqICUxOofz8z2KGxfQnCTmDIyfdCePmBlx7zdFvgq7SI9fDywkfo0ReBmVA4UX9DIbeR2nShZ53Q54rAPzbBLdwD3NzGeGN7Fk53PT3uYVBUq8nNzIwtdaeTRJ7_QxBBy769uG6I2yKIEE3hHldQT0hTs5AQ",
  "e": "AQAB",
  "use": "sig",
  "kid": "ristrettotest",
  "qi": "uzQHF2KOelrHJhOYBmoHkbiQqczkA3AQXOwAQME3P32dFJgOOB6QdCfrg1C2JTobx8Q3EVoko1j96QE2XCrWEBs9oW-4gg4CPGaU7BmVFt0lB88-ZD6E2N0byg2mekYtdGR3ifispEZHdIBP7TxW82in3fn-nB08YMqQAqqIGes",
  "dp": "UcoLBxapwkBEIFfo_DyHDcoWcrojPqvXgDGYwDdYCtoCmlMlZtwY9H8K-R2CM7DqcSvU1cuJyhtI85XrsuBUEwkA-XYJ03JmFvR_WNFESmgNY76lW4UAV-laK0eH2XbhlE9I-Uusqf4xyz97CKbF0ssOy2DI_HKLx0fnHBjw36k",
  "alg": "PS256",
  "dq": "KSaoYMKm2N_bMc0cWXpBCrmQki2ts5EnPLHEG3tuunpwGJdCZCZYl3MWWmwY7qgtHRooMj7hfA6kJlv9BEt-r6VmfiNzByRYfJqgBqRXKRMt3PZi1ROpvNG5q1hz25tcQvT_3Nr8BBZlLTVbPeL0v3OA8w-j5N0FZxnryKEJsI0",
  "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
}
jwk2
{
  "p": "_a4hJlGIgqTgO5MjxTa4j4-rnui8ofinPAs2lh5D3YQEQfpVPrEYlv8eo_sPpwkeU1M-PXVT2U59Os56IiKzDhqdQgaIRbq6Si8fhPxPrI4ei-wXuihqF1QDbbAuXf7ZV8_Yx1XCPKadrRNa8TKZWO4vDR30EdDsjL2uhyxdcI8",
  "kty": "RSA",
  "q": "x4GpCUG5Kwo6xv6Wl5UWUuV817mccDDnWVSLqK7Msb58BSfcK7kLrdzSFxBuo_DoK4RYu5K34HbAIzoZuC4cRJXR5QDf6BKxuyyF0qMNrHWpoXSpQOXHR6UowPaNHKfa4pXhcRCj4yo47VkipXEm2tD9bdTB0ydVZTJXrRKw9IE",
  "d": "moWnAjS47_t0jdjYHaubEY3f0MI5lVKwZblDqbkKoYUVfguFTI55opUg6EUGJDX74SM1acfPRpe6P7V9Iet_PoGpunQ4TdD3H4yCetqLBniZPNDn8oeVKkhhj97v-GyLyAWumaEDntO0O566TGUL-a0GwrcfT63Z_A4e0-NCTNyrn-hyy5Ljlw17r9MehxwXhi6wZdZJnu7iPT2UJGYeO9R-qedE_UiBzPYsXCjXV6FrY4awDGvWAr4R24hkI9naj6hIcmJhL-34xh6_hWomFtCHtKkNRSVHjMcIP5HOeK4yUqlRssvr61xzDwxrtv32Tj5JCDFUCc-NM8YVYy3oAQ",
  "e": "AQAB",
  "use": "sig",
  "kid": "conformancetest",
  "qi": "ZIgXA-QKu5WscOoA4paq3INWIFNf34tPa1I2MTe30_fLShaDwwF3F_CzUscVd1k7Mbn_VpuKfK2C5Vqupoyj7uyk1gm-iuWtJYcxTkE61udn5vRq4lnjNzxtQCjHm48ZRnVmpFCMrSbcb2oJMzWFH1aM2vyCwuMcrSckR7YVVUI",
  "dp": "HSWmtWpkzu32vaGYWI6DAiu1wlpnYgzZ2jJHoVP05DzI6HPE26EpfB_v-1NbZwvLKjPEUPdsHOnBxcH3knh-Lj6slut9ONXNlbx4WKVM2jyyEc2cpE0Ec425nx7BFRe1DTvaYnzeBm32a-5vYos3x1oGmfE5G9rvcvRQW0OjsM0",
  "alg": "PS256",
  "dq": "XyYfkCKgRT6jubRB7hlUhESevePwEDHCpIAF-3UiesL2Mx9HijK-tzTRnd5gZh_HGroL96mJuKvqBuL20ThskulBKY65Ot1vlm0thb_uDYowVKhm8GSmHi1Ounjb5AbKBbalxl7BSt4gOFKCi5TjiwiRVYhayHHB8HmKByka7AE",
  "n": "xbLYBJ3SXWsNcLG03ieLj3UcqOQa0z4KHgjDSIytAv9GgKotTJU9skUvXWLJJuHlAh1MjI9rBZenMuUTqvaHvxMxMpDn5sc2GOLxmoM_dJBAPKmLWhNPNlKAJCVDAWHGcydBNLu8_ZkGCKaXbLStWjPl2djokKNU7gJLGEdv_PaT8-DUKH65xJ7sAaEqgsaFjXUuK7eLQG3Dxd64CLpfiCl9szHZldQkV3t44zfdB9KdaZyWiHwqRUe0mdc4Nn3-QZ7PhfY1z2q0fxEetcMyjr_5RLDWgOltneNmxyrbaxNHUMuiSnroemaRXZMxLyx_c8rDL8YRZ5VXToQw2q4EDw"
}
2022-10-17 09:21:04 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/
resourceUrlAccountRequests
https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/
resourceUrlAccountsResource
https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/
2022-10-17 09:21:04 SUCCESS
SetProtectedResourceUrlToAccountsEndpoint
Set protected resource URL
protected_resource_url
https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/accounts
2022-10-17 09:21:04 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "isamfed.com",
  "testPort": 6443
}
2022-10-17 09:21:04 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "isamfed.com",
  "testPort": 6443
}
accounts_request_endpoint
{
  "testHost": "isamfed.com",
  "testPort": 6443
}
2022-10-17 09:21:04
fapi1-advanced-final-ensure-valid-pkce-succeeds
Setup Done
Use client_credentials grant to obtain OpenBanking UK intent_id
2022-10-17 09:21:04 SUCCESS
CreateTokenEndpointRequestForClientCredentialsGrant
Created token endpoint request
grant_type
client_credentials
scope
openid email
2022-10-17 09:21:04 SUCCESS
SetAccountScopeOnTokenEndpointRequest
Set scope parameter to accounts for OB testing
grant_type
client_credentials
scope
accounts
2022-10-17 09:21:04 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
client_ukob01
sub
client_ukob01
aud
https://isamfed.com:6443/isvaop/oauth2/token
jti
RoxT45WIHNGUflfdYfrs
iat
1665998464
exp
1665998524
2022-10-17 09:21:04 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJjbGllbnRfdWtvYjAxIiwiYXVkIjoiaHR0cHM6XC9cL2lzYW1mZWQuY29tOjY0NDNcL2lzdmFvcFwvb2F1dGgyXC90b2tlbiIsImlzcyI6ImNsaWVudF91a29iMDEiLCJleHAiOjE2NjU5OTg1MjQsImlhdCI6MTY2NTk5ODQ2NCwianRpIjoiUm94VDQ1V0lITkdVZmxmZFlmcnMifQ.fQUXnL97hpdKjczKEGtOJXdicqsVL8SsnrQUixTQiKzY7IIa9Fh1QChVWC1qB-gGXy8ezOV1-0OEOp3843ot-QtVRWAszUExwBiH4ppfOomlHsDBiaqxJxcKT5L7slP0Fl0_YlXgUDsb10ns0fkAgwPKxMyXriV1mI2VMNTOv6Oi4-LT119Qn2K7ewZfegdRaMn5HaDq6-41L32YThKWEbpJ7VvZUBHMIHCswLoDOPtnRjwLblQDoBl5sqasRLaFI7CY3cjULP-Dzqeca4s9omYInO_05wjOJmFojaBIbQlw5keuzzlcQqgAqHHruHLOlMdfXAL_wmEVC0MUbbI2sA
2022-10-17 09:21:04
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
client_credentials
scope
accounts
client_assertion
eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJjbGllbnRfdWtvYjAxIiwiYXVkIjoiaHR0cHM6XC9cL2lzYW1mZWQuY29tOjY0NDNcL2lzdmFvcFwvb2F1dGgyXC90b2tlbiIsImlzcyI6ImNsaWVudF91a29iMDEiLCJleHAiOjE2NjU5OTg1MjQsImlhdCI6MTY2NTk5ODQ2NCwianRpIjoiUm94VDQ1V0lITkdVZmxmZFlmcnMifQ.fQUXnL97hpdKjczKEGtOJXdicqsVL8SsnrQUixTQiKzY7IIa9Fh1QChVWC1qB-gGXy8ezOV1-0OEOp3843ot-QtVRWAszUExwBiH4ppfOomlHsDBiaqxJxcKT5L7slP0Fl0_YlXgUDsb10ns0fkAgwPKxMyXriV1mI2VMNTOv6Oi4-LT119Qn2K7ewZfegdRaMn5HaDq6-41L32YThKWEbpJ7VvZUBHMIHCswLoDOPtnRjwLblQDoBl5sqasRLaFI7CY3cjULP-Dzqeca4s9omYInO_05wjOJmFojaBIbQlw5keuzzlcQqgAqHHruHLOlMdfXAL_wmEVC0MUbbI2sA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-10-17 09:21:04
CallTokenEndpoint
HTTP request
request_uri
https://isamfed.com:6443/isvaop/oauth2/token
request_method
POST
request_headers
{
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "765"
}
request_body
grant_type=client_credentials&scope=accounts&client_assertion=eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJjbGllbnRfdWtvYjAxIiwiYXVkIjoiaHR0cHM6XC9cL2lzYW1mZWQuY29tOjY0NDNcL2lzdmFvcFwvb2F1dGgyXC90b2tlbiIsImlzcyI6ImNsaWVudF91a29iMDEiLCJleHAiOjE2NjU5OTg1MjQsImlhdCI6MTY2NTk5ODQ2NCwianRpIjoiUm94VDQ1V0lITkdVZmxmZFlmcnMifQ.fQUXnL97hpdKjczKEGtOJXdicqsVL8SsnrQUixTQiKzY7IIa9Fh1QChVWC1qB-gGXy8ezOV1-0OEOp3843ot-QtVRWAszUExwBiH4ppfOomlHsDBiaqxJxcKT5L7slP0Fl0_YlXgUDsb10ns0fkAgwPKxMyXriV1mI2VMNTOv6Oi4-LT119Qn2K7ewZfegdRaMn5HaDq6-41L32YThKWEbpJ7VvZUBHMIHCswLoDOPtnRjwLblQDoBl5sqasRLaFI7CY3cjULP-Dzqeca4s9omYInO_05wjOJmFojaBIbQlw5keuzzlcQqgAqHHruHLOlMdfXAL_wmEVC0MUbbI2sA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2022-10-17 09:21:06 RESPONSE
CallTokenEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "208",
  "content-type": "application/json;charset\u003dUTF-8",
  "date": "Mon, 17 Oct 2022 09:21:05 GMT",
  "p3p": "CP\u003d\"NON CUR OTPi OUR NOR UNI\"",
  "cache-control": "no-store",
  "x-correlation-id": "CORR_ID-ac9a53af-57cb-42f2-b262-701c8cfde231",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "pragma": "no-cache",
  "set-cookie": "PD-S-SESSION-ID\u003d1_2_1_uI7GKIqvkg4vRLj8GJhCBHYaJMiUKELV7zlJLKGiipIPOyHV; Path\u003d/; Secure; HttpOnly"
}
response_body
{"access_token":"cHoZLNGanUxb1QHQf_yHjmdYcj_2-zosYDlcdizljyM.enxyPJNRa8alolRpei1kYwS-3vwZyevQBQNlOcdqIyDInhA9WMp8a_O29RP6uPzsTbly-jl1WHPENbVlXaLcDQ","expires_in":7199,"scope":"accounts","token_type":"bearer"}
2022-10-17 09:21:06 SUCCESS
CallTokenEndpoint
Parsed token endpoint response
access_token
cHoZLNGanUxb1QHQf_yHjmdYcj_2-zosYDlcdizljyM.enxyPJNRa8alolRpei1kYwS-3vwZyevQBQNlOcdqIyDInhA9WMp8a_O29RP6uPzsTbly-jl1WHPENbVlXaLcDQ
expires_in
7199
scope
accounts
token_type
bearer
2022-10-17 09:21:06 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2022-10-17 09:21:06 SUCCESS
CheckForAccessTokenValue
Found an access token
access_token
cHoZLNGanUxb1QHQf_yHjmdYcj_2-zosYDlcdizljyM.enxyPJNRa8alolRpei1kYwS-3vwZyevQBQNlOcdqIyDInhA9WMp8a_O29RP6uPzsTbly-jl1WHPENbVlXaLcDQ
2022-10-17 09:21:06 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
cHoZLNGanUxb1QHQf_yHjmdYcj_2-zosYDlcdizljyM.enxyPJNRa8alolRpei1kYwS-3vwZyevQBQNlOcdqIyDInhA9WMp8a_O29RP6uPzsTbly-jl1WHPENbVlXaLcDQ
type
bearer
2022-10-17 09:21:06 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
7199
2022-10-17 09:21:06 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
7199
2022-10-17 09:21:06
CreateEmptyResourceEndpointRequestHeaders
Created empty headers
resource_endpoint_request_headers
{}
2022-10-17 09:21:06 SUCCESS
AddFAPIAuthDateToResourceEndpointRequest
Added x-fapi-auth-date to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Mon, 17 Oct 2022 09:21:06 GMT"
}
2022-10-17 09:21:06 SUCCESS
CreateCreateAccountRequestRequest
account_requests_endpoint_request
{
  "Data": {
    "Permissions": [
      "ReadAccountsBasic"
    ]
  },
  "Risk": {}
}
2022-10-17 09:21:06
CallAccountRequestsEndpointWithBearerToken
Found '/v3.' in the resource url, using OB V3 API 'account-access-consents'
resource_endpoint
https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/
2022-10-17 09:21:06
CallAccountRequestsEndpointWithBearerToken
HTTP request
request_uri
https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/account-access-consents
request_method
POST
request_headers
{
  "accept": "application/json",
  "x-fapi-auth-date": "Mon, 17 Oct 2022 09:21:06 GMT",
  "content-type": "application/json",
  "authorization": "Bearer cHoZLNGanUxb1QHQf_yHjmdYcj_2-zosYDlcdizljyM.enxyPJNRa8alolRpei1kYwS-3vwZyevQBQNlOcdqIyDInhA9WMp8a_O29RP6uPzsTbly-jl1WHPENbVlXaLcDQ",
  "content-length": "56"
}
request_body
{"Data":{"Permissions":["ReadAccountsBasic"]},"Risk":{}}
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2022-10-17 09:21:09 RESPONSE
CallAccountRequestsEndpointWithBearerToken
HTTP response
response_status_code
201 CREATED
response_status_text
Created
response_headers
{
  "content-length": "276",
  "content-type": "application/json;charset\u003dUTF-8",
  "date": "Mon, 17 Oct 2022 09:21:08 GMT",
  "p3p": "CP\u003d\"NON CUR OTPi OUR NOR UNI\"",
  "x-correlation-id": "CORR_ID-bb67e484-71e1-4c4b-b757-d1e62f489b37",
  "x-fapi-interaction-id": "302bb4a0-1a25-48e8-a9bc-c29b8abb49b7",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "set-cookie": "PD-S-SESSION-ID\u003d1_2_1_tQrFl2sHH6ajzGm2TEboTp+qKt4Qzf8mpbD1KA0nXHtdzpKb; Path\u003d/; Secure; HttpOnly"
}
response_body
{"Data":{"Permissions":["ReadAccountsBasic"],"ConsentId":"client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5","Status":"AwaitingAuthorisation","CreationDateTime":"2022-10-17T09:21:08+07:00","StatusUpdateDateTime":"2022-10-17T09:21:08+07:00"},"Meta":{"TotalPages":1},"Risk":{}}
2022-10-17 09:21:09
CallAccountRequestsEndpointWithBearerToken
Account requests endpoint response
account_requests_endpoint_response
{"Data":{"Permissions":["ReadAccountsBasic"],"ConsentId":"client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5","Status":"AwaitingAuthorisation","CreationDateTime":"2022-10-17T09:21:08+07:00","StatusUpdateDateTime":"2022-10-17T09:21:08+07:00"},"Meta":{"TotalPages":1},"Risk":{}}
2022-10-17 09:21:09 SUCCESS
CallAccountRequestsEndpointWithBearerToken
Parsed account requests endpoint response
headers
{
  "content-length": "276",
  "content-type": "application/json;charset\u003dUTF-8",
  "date": "Mon, 17 Oct 2022 09:21:08 GMT",
  "p3p": "CP\u003d\"NON CUR OTPi OUR NOR UNI\"",
  "x-correlation-id": "CORR_ID-bb67e484-71e1-4c4b-b757-d1e62f489b37",
  "x-fapi-interaction-id": "302bb4a0-1a25-48e8-a9bc-c29b8abb49b7",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "set-cookie": "PD-S-SESSION-ID\u003d1_2_1_tQrFl2sHH6ajzGm2TEboTp+qKt4Qzf8mpbD1KA0nXHtdzpKb; Path\u003d/; Secure; HttpOnly"
}
body
{"Data":{"Permissions":["ReadAccountsBasic"],"ConsentId":"client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5","Status":"AwaitingAuthorisation","CreationDateTime":"2022-10-17T09:21:08+07:00","StatusUpdateDateTime":"2022-10-17T09:21:08+07:00"},"Meta":{"TotalPages":1},"Risk":{}}
2022-10-17 09:21:09 SUCCESS
CheckIfAccountRequestsEndpointResponseError
No error from account requests endpoint
2022-10-17 09:21:09 SUCCESS
CheckForFAPIInteractionIdInResourceResponse
Found x-fapi-interaction-id
interaction_id
302bb4a0-1a25-48e8-a9bc-c29b8abb49b7
2022-10-17 09:21:09 SUCCESS
ExtractAccountRequestIdFromAccountRequestsEndpointResponse
Extracted the account request ID
account_request_id
client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5
Make request to authorization endpoint
2022-10-17 09:21:09 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
client_ukob01
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
scope
openid email
2022-10-17 09:21:09 SUCCESS
AddAccountRequestIdToAuthorizationEndpointRequest
Added openbanking_intent_id claim to authorization_endpoint_request
authorization_endpoint_request
{
  "client_id": "client_ukob01",
  "redirect_uri": "https://www.certification.openid.net/test/a/ISVAOP/callback",
  "scope": "openid email",
  "claims": {
    "id_token": {
      "openbanking_intent_id": {
        "value": "client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5",
        "essential": true
      }
    }
  }
}
2022-10-17 09:21:09 SUCCESS
OpenBankingUkAddMultipleAcrClaimsToAuthorizationEndpointRequest
Added acr to request as an essential id_token claim
authorization_endpoint_request
{
  "client_id": "client_ukob01",
  "redirect_uri": "https://www.certification.openid.net/test/a/ISVAOP/callback",
  "scope": "openid email",
  "claims": {
    "id_token": {
      "openbanking_intent_id": {
        "value": "client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5",
        "essential": true
      },
      "acr": {
        "values": [
          "urn:openbanking:psd2:sca",
          "urn:openbanking:psd2:ca"
        ],
        "essential": true
      }
    }
  }
}
2022-10-17 09:21:09
CreateRandomStateValue
Created state value
requested_state_length
10
state
BmsD7zXek2
2022-10-17 09:21:09 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
client_ukob01
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
scope
openid email
claims
{
  "id_token": {
    "openbanking_intent_id": {
      "value": "client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5",
      "essential": true
    },
    "acr": {
      "values": [
        "urn:openbanking:psd2:sca",
        "urn:openbanking:psd2:ca"
      ],
      "essential": true
    }
  }
}
state
BmsD7zXek2
2022-10-17 09:21:09
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
QgHRx8N3gN
2022-10-17 09:21:09 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
client_ukob01
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
scope
openid email
claims
{
  "id_token": {
    "openbanking_intent_id": {
      "value": "client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5",
      "essential": true
    },
    "acr": {
      "values": [
        "urn:openbanking:psd2:sca",
        "urn:openbanking:psd2:ca"
      ],
      "essential": true
    }
  }
}
state
BmsD7zXek2
nonce
QgHRx8N3gN
2022-10-17 09:21:09 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToCodeIdtoken
Added response_type parameter to request
client_id
client_ukob01
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
scope
openid email
claims
{
  "id_token": {
    "openbanking_intent_id": {
      "value": "client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5",
      "essential": true
    },
    "acr": {
      "values": [
        "urn:openbanking:psd2:sca",
        "urn:openbanking:psd2:ca"
      ],
      "essential": true
    }
  }
}
state
BmsD7zXek2
nonce
QgHRx8N3gN
response_type
code id_token
2022-10-17 09:21:09
CreateRandomCodeVerifier
Created code_verifier value
code_verifier
KtUGnCH3AnN1eG-FFMR5vpNuJRfkF5DJfoiWFB6E8vM1Ev4yY~VenZ._QM-YB21Qf_6CV7x7tF166dP72xdx8YpmX~WwnKFBnFF7p0BdNXp5UVBzW_pJJyQKHvU.kQoo
2022-10-17 09:21:09
CreateS256CodeChallenge
Created code_challenge value
code_challenge
ny-ob0fJioEFU7iYc9nJX4NlwWkws08y_qlcQl42qQw
2022-10-17 09:21:09 SUCCESS
AddCodeChallengeToAuthorizationEndpointRequest
Added code_challenge and code_challenge_method parameters to request
client_id
client_ukob01
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
scope
openid email
claims
{
  "id_token": {
    "openbanking_intent_id": {
      "value": "client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5",
      "essential": true
    },
    "acr": {
      "values": [
        "urn:openbanking:psd2:sca",
        "urn:openbanking:psd2:ca"
      ],
      "essential": true
    }
  }
}
state
BmsD7zXek2
nonce
QgHRx8N3gN
response_type
code id_token
code_challenge
ny-ob0fJioEFU7iYc9nJX4NlwWkws08y_qlcQl42qQw
code_challenge_method
S256
2022-10-17 09:21:09 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "client_id": "client_ukob01",
  "redirect_uri": "https://www.certification.openid.net/test/a/ISVAOP/callback",
  "scope": "openid email",
  "claims": {
    "id_token": {
      "openbanking_intent_id": {
        "value": "client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5",
        "essential": true
      },
      "acr": {
        "values": [
          "urn:openbanking:psd2:sca",
          "urn:openbanking:psd2:ca"
        ],
        "essential": true
      }
    }
  },
  "state": "BmsD7zXek2",
  "nonce": "QgHRx8N3gN",
  "response_type": "code id_token",
  "code_challenge": "ny-ob0fJioEFU7iYc9nJX4NlwWkws08y_qlcQl42qQw",
  "code_challenge_method": "S256"
}
2022-10-17 09:21:09 SUCCESS
AddNbfToRequestObject
Added nbf to request object claims
nbf
1.665998469E9
2022-10-17 09:21:09 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.665998769E9
2022-10-17 09:21:09 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://isamfed.com:6443/isvaop/oauth2
2022-10-17 09:21:09 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
client_ukob01
2022-10-17 09:21:09 SUCCESS
AddClientIdToRequestObject
Added client_id to request object claims
client_id
client_ukob01
2022-10-17 09:21:09 SUCCESS
SignRequestObject
Signed the request object
claims
{
  "iss": "client_ukob01",
  "response_type": "code id_token",
  "code_challenge_method": "S256",
  "nonce": "QgHRx8N3gN",
  "client_id": "client_ukob01",
  "aud": "https://isamfed.com:6443/isvaop/oauth2",
  "nbf": 1665998469,
  "scope": "openid email",
  "claims": {
    "id_token": {
      "acr": {
        "values": [
          "urn:openbanking:psd2:sca",
          "urn:openbanking:psd2:ca"
        ],
        "essential": true
      },
      "openbanking_intent_id": {
        "value": "client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5",
        "essential": true
      }
    }
  },
  "redirect_uri": "https://www.certification.openid.net/test/a/ISVAOP/callback",
  "state": "BmsD7zXek2",
  "exp": 1665998769,
  "code_challenge": "ny-ob0fJioEFU7iYc9nJX4NlwWkws08y_qlcQl42qQw"
}
header
{
  "kid": "ristrettotest",
  "alg": "PS256"
}
request_object
eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.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.KRH7a_4w2bIPoag0FIbZgeNl35rtDRxHkWQsaW--sEZAHbGpn7yeDNxcabNDMq5q2S-feS77AMPWDDY5OyjViwas1YDwRX7LsqfgTa5hdh8MsexTf2but7CbxYozmp6x3svWLOmPwH1tWnr-uI0-DCY3O66WL36hnpDhIwELnhTAuYVg0j8ZD_sdAl7Wo4HBjGXq3dTDbVf-TLsNpB4N8QGG_3CXUbHkR725o0LMXLNLwcG6TH8TMEWT1D9cenX-t2kessIuJiO1GVDmQIaiiNDw9SPu1PrJ64M5cJ2zPuz0_A7Ckg68Aznn_uIFiILJXJKBJwc7l2JPE1h6BG0rRQ
key
{
  "p": "5POsvBfNiTqioCBLGaWsOQwTCPkGAECgCeWXqQykp6Cfbfoi1mvbRDAbNPjoLP88bOOt9v528Tpsi8ZuwQRn9XiK8IyyuxIrDaGBvfZCLCK513R8rX3gj-raer-FMaEIpr1bYCTOKBhyhcP46nTwfXNxTwfKFY7O0H8sWcBfF_M",
  "kty": "RSA",
  "q": "oqadQZ4jqFife7hlA2viAEGjJMu8ZRRIx15U19XKw4LbgHYAs3p965WO2lHJqkRUwD1YXZwqOcapUs2samp8JmoZ9j3OavwuRV7qW68_xV3W5xG8lV41RfKLX0c1ny7jJhPWOAbuJzjp3okjqy3hUBZ8Y2B25A2u8fxuhf7U3x0",
  "d": "Z-mgweEYkai9vr_dBYL0LaaHcfVv4D0X638cQIl99VNzZ8h3GqwtLC_zN6kx89S9C8nprfP2NvTegKxs-2bh-FN08k16zolcx6jEkZSgmUOhMLlpmB0qhHWOnYT047y-h9rQ9rZCVxIClJu5Whh8pa_Xlm3BDlbgJBEZSZAwbuWojQ3a-1J6Z8dP6aGqICUxOofz8z2KGxfQnCTmDIyfdCePmBlx7zdFvgq7SI9fDywkfo0ReBmVA4UX9DIbeR2nShZ53Q54rAPzbBLdwD3NzGeGN7Fk53PT3uYVBUq8nNzIwtdaeTRJ7_QxBBy769uG6I2yKIEE3hHldQT0hTs5AQ",
  "e": "AQAB",
  "use": "sig",
  "kid": "ristrettotest",
  "qi": "uzQHF2KOelrHJhOYBmoHkbiQqczkA3AQXOwAQME3P32dFJgOOB6QdCfrg1C2JTobx8Q3EVoko1j96QE2XCrWEBs9oW-4gg4CPGaU7BmVFt0lB88-ZD6E2N0byg2mekYtdGR3ifispEZHdIBP7TxW82in3fn-nB08YMqQAqqIGes",
  "dp": "UcoLBxapwkBEIFfo_DyHDcoWcrojPqvXgDGYwDdYCtoCmlMlZtwY9H8K-R2CM7DqcSvU1cuJyhtI85XrsuBUEwkA-XYJ03JmFvR_WNFESmgNY76lW4UAV-laK0eH2XbhlE9I-Uusqf4xyz97CKbF0ssOy2DI_HKLx0fnHBjw36k",
  "alg": "PS256",
  "dq": "KSaoYMKm2N_bMc0cWXpBCrmQki2ts5EnPLHEG3tuunpwGJdCZCZYl3MWWmwY7qgtHRooMj7hfA6kJlv9BEt-r6VmfiNzByRYfJqgBqRXKRMt3PZi1ROpvNG5q1hz25tcQvT_3Nr8BBZlLTVbPeL0v3OA8w-j5N0FZxnryKEJsI0",
  "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
}
2022-10-17 09:21:09 SUCCESS
BuildRequestObjectByValueRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
https://isamfed.com:6443/isvaop/oauth2/authorize?request=eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.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.KRH7a_4w2bIPoag0FIbZgeNl35rtDRxHkWQsaW--sEZAHbGpn7yeDNxcabNDMq5q2S-feS77AMPWDDY5OyjViwas1YDwRX7LsqfgTa5hdh8MsexTf2but7CbxYozmp6x3svWLOmPwH1tWnr-uI0-DCY3O66WL36hnpDhIwELnhTAuYVg0j8ZD_sdAl7Wo4HBjGXq3dTDbVf-TLsNpB4N8QGG_3CXUbHkR725o0LMXLNLwcG6TH8TMEWT1D9cenX-t2kessIuJiO1GVDmQIaiiNDw9SPu1PrJ64M5cJ2zPuz0_A7Ckg68Aznn_uIFiILJXJKBJwc7l2JPE1h6BG0rRQ&client_id=client_ukob01&redirect_uri=https://www.certification.openid.net/test/a/ISVAOP/callback&scope=openid%20email&response_type=code%20id_token
2022-10-17 09:21:09 REDIRECT
fapi1-advanced-final-ensure-valid-pkce-succeeds
Redirecting to authorization endpoint
redirect_to
https://isamfed.com:6443/isvaop/oauth2/authorize?request=eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.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.KRH7a_4w2bIPoag0FIbZgeNl35rtDRxHkWQsaW--sEZAHbGpn7yeDNxcabNDMq5q2S-feS77AMPWDDY5OyjViwas1YDwRX7LsqfgTa5hdh8MsexTf2but7CbxYozmp6x3svWLOmPwH1tWnr-uI0-DCY3O66WL36hnpDhIwELnhTAuYVg0j8ZD_sdAl7Wo4HBjGXq3dTDbVf-TLsNpB4N8QGG_3CXUbHkR725o0LMXLNLwcG6TH8TMEWT1D9cenX-t2kessIuJiO1GVDmQIaiiNDw9SPu1PrJ64M5cJ2zPuz0_A7Ckg68Aznn_uIFiILJXJKBJwc7l2JPE1h6BG0rRQ&client_id=client_ukob01&redirect_uri=https://www.certification.openid.net/test/a/ISVAOP/callback&scope=openid%20email&response_type=code%20id_token
2022-10-17 09:21:22 INCOMING
fapi1-advanced-final-ensure-valid-pkce-succeeds
Incoming HTTP request to /test/a/ISVAOP/callback
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,*/*;q\u003d0.8",
  "accept-language": "en,fr;q\u003d0.8,et;q\u003d0.5,en-US;q\u003d0.3",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://isamfed.com:6443/",
  "cookie": "__utma\u003d201319536.734078888.1579071622.1665495005.1665619380.47; __utmz\u003d201319536.1660655184.40.23.utmcsr\u003dcertification.openid.net|utmccn\u003d(referral)|utmcmd\u003dreferral|utmcct\u003d/; _ga\u003dGA1.2.734078888.1579071622; JSESSIONID\u003dE4A71C0427A072DDA46C3AA210D26FBB",
  "upgrade-insecure-requests": "1",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "sec-fetch-user": "?1",
  "connection": "close"
}
incoming_path
/test/a/ISVAOP/callback
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-10-17 09:21:22 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/yVD9oJHOHmZozWL7vcEG",
  "fullUrl": "https://www.certification.openid.net/test/a/ISVAOP/implicit/yVD9oJHOHmZozWL7vcEG"
}
2022-10-17 09:21:22 OUTGOING
fapi1-advanced-final-ensure-valid-pkce-succeeds
Response to HTTP request to test instance A4LZIWEkt9wnQRf
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/ISVAOP/implicit/yVD9oJHOHmZozWL7vcEG, returnUrl=/log-detail.html?log=A4LZIWEkt9wnQRf}]
outgoing_path
callback
2022-10-17 09:21:22 INCOMING
fapi1-advanced-final-ensure-valid-pkce-succeeds
Incoming HTTP request to /test/a/ISVAOP/implicit/yVD9oJHOHmZozWL7vcEG
incoming_headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0",
  "accept": "*/*",
  "accept-language": "en,fr;q\u003d0.8,et;q\u003d0.5,en-US;q\u003d0.3",
  "accept-encoding": "gzip, deflate, br",
  "content-type": "text/plain",
  "x-requested-with": "XMLHttpRequest",
  "origin": "https://www.certification.openid.net",
  "referer": "https://www.certification.openid.net/test/a/ISVAOP/callback",
  "cookie": "__utma\u003d201319536.734078888.1579071622.1665495005.1665619380.47; __utmz\u003d201319536.1660655184.40.23.utmcsr\u003dcertification.openid.net|utmccn\u003d(referral)|utmcmd\u003dreferral|utmcct\u003d/; _ga\u003dGA1.2.734078888.1579071622; JSESSIONID\u003dE4A71C0427A072DDA46C3AA210D26FBB",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "connection": "close",
  "content-length": "1152"
}
incoming_path
/test/a/ISVAOP/implicit/yVD9oJHOHmZozWL7vcEG
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
#code=zcQPDvrZTCxGrVeK4bMXS9u4YKlm72TuYay1kjxvYjI.qTAgvWelxU3n9aRRDcm7WqxOof-uODkW9FRfB7mEi8SdvpKnepACoGbyqX5YCugQhCeVREO9Luuca6Y5UIb8sw&id_token=eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.eyJhY3IiOiJ1cm46b3BlbmJhbmtpbmc6cHNkMjpjYSIsImF1ZCI6WyJjbGllbnRfdWtvYjAxIl0sImF1dGhfdGltZSI6MTY2NTk5ODQ4MSwiY19oYXNoIjoiVTdXdFpJZHliVzNNUWd5UXpkSVIydyIsImVtYWlsX3ZlcmlmaWVkIjp0cnVlLCJleHAiOjE2NjYwMDIwODEsImlhdCI6MTY2NTk5ODQ4MSwiaXNzIjoiaHR0cHM6Ly9pc2FtZmVkLmNvbTo2NDQzL2lzdmFvcC9vYXV0aDIiLCJqdGkiOiJiMTYxMmY0NC1jNzI3LTQyYmYtODE1Mi04NjQ4NjNiOTU1N2MiLCJub25jZSI6IlFnSFJ4OE4zZ04iLCJvcGVuYmFua2luZ19pbnRlbnRfaWQiOiJjbGllbnRfdWtvYjAxLjUxMGNkM2ExLWE4NTAtNGFlYy1iMjMwLTI0OWE1ODQyMThmNSIsInJhdCI6MTY2NTk5ODQ3Mywic19oYXNoIjoiSmhtMkNUYzRfZGFWYjNjMUZKaWtmQSIsInN1YiI6ImNsaWVudGNlcnR1c2VyIn0.bQ94oE3D4FogIrEkqFgMlzErRIy28XFpg1a8bHEYr89htmCwDEa5S9KC6Zw-CCETJimZK3LiytM30nhS-YnGXT7thAeHJl7dy3YMBhMpD9wtL4q0dKC6J-ox2dlsHfZK5WXylI1iFUMzr0H0Ee58Nken9OAiK5eByZ0naedldw7h5UvxP4l0bzgPExgWk-MvpFdHGXigB29dMnxt7a68CUsGMy_XiyyBaQGffgU9Vum6nlQ5KEI0sxqIboazNf5DL8kTwVhQ5jK3S9KUKGCrRhwW77ze4xhldrDcz9B7lgrQ-3vzA5HwOjluN37SbPrA-Rv0wz0_g_4eRzwX9ZNnrQ&state=BmsD7zXek2
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2022-10-17 09:21:22 OUTGOING
fapi1-advanced-final-ensure-valid-pkce-succeeds
Response to HTTP request to test instance A4LZIWEkt9wnQRf
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/yVD9oJHOHmZozWL7vcEG
2022-10-17 09:21:22
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "code",
    "value": "zcQPDvrZTCxGrVeK4bMXS9u4YKlm72TuYay1kjxvYjI.qTAgvWelxU3n9aRRDcm7WqxOof-uODkW9FRfB7mEi8SdvpKnepACoGbyqX5YCugQhCeVREO9Luuca6Y5UIb8sw"
  },
  {
    "name": "id_token",
    "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.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.bQ94oE3D4FogIrEkqFgMlzErRIy28XFpg1a8bHEYr89htmCwDEa5S9KC6Zw-CCETJimZK3LiytM30nhS-YnGXT7thAeHJl7dy3YMBhMpD9wtL4q0dKC6J-ox2dlsHfZK5WXylI1iFUMzr0H0Ee58Nken9OAiK5eByZ0naedldw7h5UvxP4l0bzgPExgWk-MvpFdHGXigB29dMnxt7a68CUsGMy_XiyyBaQGffgU9Vum6nlQ5KEI0sxqIboazNf5DL8kTwVhQ5jK3S9KUKGCrRhwW77ze4xhldrDcz9B7lgrQ-3vzA5HwOjluN37SbPrA-Rv0wz0_g_4eRzwX9ZNnrQ"
  },
  {
    "name": "state",
    "value": "BmsD7zXek2"
  }
]
2022-10-17 09:21:22 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
code
zcQPDvrZTCxGrVeK4bMXS9u4YKlm72TuYay1kjxvYjI.qTAgvWelxU3n9aRRDcm7WqxOof-uODkW9FRfB7mEi8SdvpKnepACoGbyqX5YCugQhCeVREO9Luuca6Y5UIb8sw
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.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.bQ94oE3D4FogIrEkqFgMlzErRIy28XFpg1a8bHEYr89htmCwDEa5S9KC6Zw-CCETJimZK3LiytM30nhS-YnGXT7thAeHJl7dy3YMBhMpD9wtL4q0dKC6J-ox2dlsHfZK5WXylI1iFUMzr0H0Ee58Nken9OAiK5eByZ0naedldw7h5UvxP4l0bzgPExgWk-MvpFdHGXigB29dMnxt7a68CUsGMy_XiyyBaQGffgU9Vum6nlQ5KEI0sxqIboazNf5DL8kTwVhQ5jK3S9KUKGCrRhwW77ze4xhldrDcz9B7lgrQ-3vzA5HwOjluN37SbPrA-Rv0wz0_g_4eRzwX9ZNnrQ
state
BmsD7zXek2
2022-10-17 09:21:22 REDIRECT-IN
fapi1-advanced-final-ensure-valid-pkce-succeeds
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,*/*;q\u003d0.8",
  "accept-language": "en,fr;q\u003d0.8,et;q\u003d0.5,en-US;q\u003d0.3",
  "accept-encoding": "gzip, deflate, br",
  "referer": "https://isamfed.com:6443/",
  "cookie": "__utma\u003d201319536.734078888.1579071622.1665495005.1665619380.47; __utmz\u003d201319536.1660655184.40.23.utmcsr\u003dcertification.openid.net|utmccn\u003d(referral)|utmcmd\u003dreferral|utmcct\u003d/; _ga\u003dGA1.2.734078888.1579071622; JSESSIONID\u003dE4A71C0427A072DDA46C3AA210D26FBB",
  "upgrade-insecure-requests": "1",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "sec-fetch-user": "?1",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "x-forwarded-proto": "https",
  "x-forwarded-port": "443",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "code": "zcQPDvrZTCxGrVeK4bMXS9u4YKlm72TuYay1kjxvYjI.qTAgvWelxU3n9aRRDcm7WqxOof-uODkW9FRfB7mEi8SdvpKnepACoGbyqX5YCugQhCeVREO9Luuca6Y5UIb8sw",
  "id_token": "eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.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.bQ94oE3D4FogIrEkqFgMlzErRIy28XFpg1a8bHEYr89htmCwDEa5S9KC6Zw-CCETJimZK3LiytM30nhS-YnGXT7thAeHJl7dy3YMBhMpD9wtL4q0dKC6J-ox2dlsHfZK5WXylI1iFUMzr0H0Ee58Nken9OAiK5eByZ0naedldw7h5UvxP4l0bzgPExgWk-MvpFdHGXigB29dMnxt7a68CUsGMy_XiyyBaQGffgU9Vum6nlQ5KEI0sxqIboazNf5DL8kTwVhQ5jK3S9KUKGCrRhwW77ze4xhldrDcz9B7lgrQ-3vzA5HwOjluN37SbPrA-Rv0wz0_g_4eRzwX9ZNnrQ",
  "state": "BmsD7zXek2"
}
post_body
Verify authorization endpoint response
2022-10-17 09:21:22 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2022-10-17 09:21:22 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2022-10-17 09:21:22 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2022-10-17 09:21:22 SUCCESS
RejectStateInUrlQueryForHybridFlow
state is correctly not present in URL query returned from authorization endpoint (as in the hybrid flow it must be returned in the URL fragment/hash only)
2022-10-17 09:21:22 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2022-10-17 09:21:22 SUCCESS
ValidateSuccessfulHybridResponseFromAuthorizationEndpoint
authorization endpoint response does not include unexpected parameters
code
zcQPDvrZTCxGrVeK4bMXS9u4YKlm72TuYay1kjxvYjI.qTAgvWelxU3n9aRRDcm7WqxOof-uODkW9FRfB7mEi8SdvpKnepACoGbyqX5YCugQhCeVREO9Luuca6Y5UIb8sw
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.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.bQ94oE3D4FogIrEkqFgMlzErRIy28XFpg1a8bHEYr89htmCwDEa5S9KC6Zw-CCETJimZK3LiytM30nhS-YnGXT7thAeHJl7dy3YMBhMpD9wtL4q0dKC6J-ox2dlsHfZK5WXylI1iFUMzr0H0Ee58Nken9OAiK5eByZ0naedldw7h5UvxP4l0bzgPExgWk-MvpFdHGXigB29dMnxt7a68CUsGMy_XiyyBaQGffgU9Vum6nlQ5KEI0sxqIboazNf5DL8kTwVhQ5jK3S9KUKGCrRhwW77ze4xhldrDcz9B7lgrQ-3vzA5HwOjluN37SbPrA-Rv0wz0_g_4eRzwX9ZNnrQ
state
BmsD7zXek2
2022-10-17 09:21:22 SUCCESS
CheckStateInAuthorizationResponse
State in response correctly returned
state
BmsD7zXek2
2022-10-17 09:21:22
ValidateIssInAuthorizationResponse
No 'iss' value in authorization response.
2022-10-17 09:21:22 SUCCESS
ExtractAuthorizationCodeFromAuthorizationResponse
Found authorization code
code
zcQPDvrZTCxGrVeK4bMXS9u4YKlm72TuYay1kjxvYjI.qTAgvWelxU3n9aRRDcm7WqxOof-uODkW9FRfB7mEi8SdvpKnepACoGbyqX5YCugQhCeVREO9Luuca6Y5UIb8sw
2022-10-17 09:21:22 SUCCESS
EnsureMinimumAuthorizationCodeLength
Authorization code is of sufficient length
actual
1040
required
128
2022-10-17 09:21:22 SUCCESS
EnsureMinimumAuthorizationCodeEntropy
Calculated shannon entropy seems sufficient
actual
741.4846376911373
expected
96.0
value
zcQPDvrZTCxGrVeK4bMXS9u4YKlm72TuYay1kjxvYjI.qTAgvWelxU3n9aRRDcm7WqxOof-uODkW9FRfB7mEi8SdvpKnepACoGbyqX5YCugQhCeVREO9Luuca6Y5UIb8sw
2022-10-17 09:21:22 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.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.bQ94oE3D4FogIrEkqFgMlzErRIy28XFpg1a8bHEYr89htmCwDEa5S9KC6Zw-CCETJimZK3LiytM30nhS-YnGXT7thAeHJl7dy3YMBhMpD9wtL4q0dKC6J-ox2dlsHfZK5WXylI1iFUMzr0H0Ee58Nken9OAiK5eByZ0naedldw7h5UvxP4l0bzgPExgWk-MvpFdHGXigB29dMnxt7a68CUsGMy_XiyyBaQGffgU9Vum6nlQ5KEI0sxqIboazNf5DL8kTwVhQ5jK3S9KUKGCrRhwW77ze4xhldrDcz9B7lgrQ-3vzA5HwOjluN37SbPrA-Rv0wz0_g_4eRzwX9ZNnrQ
header
{
  "kid": "httpserverkey",
  "typ": "JWT",
  "alg": "PS256"
}
claims
{
  "sub": "clientcertuser",
  "email_verified": true,
  "rat": 1665998473,
  "iss": "https://isamfed.com:6443/isvaop/oauth2",
  "nonce": "QgHRx8N3gN",
  "acr": "urn:openbanking:psd2:ca",
  "aud": "client_ukob01",
  "c_hash": "U7WtZIdybW3MQgyQzdIR2w",
  "openbanking_intent_id": "client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5",
  "s_hash": "Jhm2CTc4_daVb3c1FJikfA",
  "auth_time": 1665998481,
  "exp": 1666002081,
  "iat": 1665998481,
  "jti": "b1612f44-c727-42bf-8152-864863b9557c"
}
2022-10-17 09:21:22 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2022-10-17 09:21:22
ValidateIdTokenStandardClaims
sub is a string with content
2022-10-17 09:21:22
ValidateIdTokenStandardClaims
email_verified is a boolean
2022-10-17 09:21:22
ValidateIdTokenStandardClaims
Skipping unknown claim: rat
2022-10-17 09:21:22
ValidateIdTokenStandardClaims
Skipping unknown claim: openbanking_intent_id
2022-10-17 09:21:22 SUCCESS
ValidateIdTokenStandardClaims
id_token claims are valid
2022-10-17 09:21:22 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
QgHRx8N3gN
2022-10-17 09:21:22 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
acr value in id_token is (one of) the requested values
actual
urn:openbanking:psd2:ca
requested
[
  "urn:openbanking:psd2:sca",
  "urn:openbanking:psd2:ca"
]
2022-10-17 09:21:22 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.eyJhY3IiOiJ1cm46b3BlbmJhbmtpbmc6cHNkMjpjYSIsImF1ZCI6WyJjbGllbnRfdWtvYjAxIl0sImF1dGhfdGltZSI6MTY2NTk5ODQ4MSwiY19oYXNoIjoiVTdXdFpJZHliVzNNUWd5UXpkSVIydyIsImVtYWlsX3ZlcmlmaWVkIjp0cnVlLCJleHAiOjE2NjYwMDIwODEsImlhdCI6MTY2NTk5ODQ4MSwiaXNzIjoiaHR0cHM6Ly9pc2FtZmVkLmNvbTo2NDQzL2lzdmFvcC9vYXV0aDIiLCJqdGkiOiJiMTYxMmY0NC1jNzI3LTQyYmYtODE1Mi04NjQ4NjNiOTU1N2MiLCJub25jZSI6IlFnSFJ4OE4zZ04iLCJvcGVuYmFua2luZ19pbnRlbnRfaWQiOiJjbGllbnRfdWtvYjAxLjUxMGNkM2ExLWE4NTAtNGFlYy1iMjMwLTI0OWE1ODQyMThmNSIsInJhdCI6MTY2NTk5ODQ3Mywic19oYXNoIjoiSmhtMkNUYzRfZGFWYjNjMUZKaWtmQSIsInN1YiI6ImNsaWVudGNlcnR1c2VyIn0.bQ94oE3D4FogIrEkqFgMlzErRIy28XFpg1a8bHEYr89htmCwDEa5S9KC6Zw-CCETJimZK3LiytM30nhS-YnGXT7thAeHJl7dy3YMBhMpD9wtL4q0dKC6J-ox2dlsHfZK5WXylI1iFUMzr0H0Ee58Nken9OAiK5eByZ0naedldw7h5UvxP4l0bzgPExgWk-MvpFdHGXigB29dMnxt7a68CUsGMy_XiyyBaQGffgU9Vum6nlQ5KEI0sxqIboazNf5DL8kTwVhQ5jK3S9KUKGCrRhwW77ze4xhldrDcz9B7lgrQ-3vzA5HwOjluN37SbPrA-Rv0wz0_g_4eRzwX9ZNnrQ
2022-10-17 09:21:22 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.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.bQ94oE3D4FogIrEkqFgMlzErRIy28XFpg1a8bHEYr89htmCwDEa5S9KC6Zw-CCETJimZK3LiytM30nhS-YnGXT7thAeHJl7dy3YMBhMpD9wtL4q0dKC6J-ox2dlsHfZK5WXylI1iFUMzr0H0Ee58Nken9OAiK5eByZ0naedldw7h5UvxP4l0bzgPExgWk-MvpFdHGXigB29dMnxt7a68CUsGMy_XiyyBaQGffgU9Vum6nlQ5KEI0sxqIboazNf5DL8kTwVhQ5jK3S9KUKGCrRhwW77ze4xhldrDcz9B7lgrQ-3vzA5HwOjluN37SbPrA-Rv0wz0_g_4eRzwX9ZNnrQ
2022-10-17 09:21:22 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
clientcertuser
2022-10-17 09:21:22
EnsureIdTokenUpdatedAtValid
id_token response does not contain 'updated_at'
2022-10-17 09:21:22 INFO
ValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2022-10-17 09:21:22 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
httpserverkey
2022-10-17 09:21:22 SUCCESS
OBValidateIdTokenIntentId
openbanking_intent_id passed all validation checks
2022-10-17 09:21:22 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "ES256",
  "PS256"
]
alg
PS256
2022-10-17 09:21:22 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2022-10-17 09:21:22 SUCCESS
ExtractSHash
Extracted s_hash from ID Token
s_hash
Jhm2CTc4_daVb3c1FJikfA
alg
PS256
2022-10-17 09:21:22 SUCCESS
ValidateSHash
s_hash validated successfully
expected_hash
Jhm2CTc4_daVb3c1FJikfA
unhashed_value
BmsD7zXek2
id_token_hash
Jhm2CTc4_daVb3c1FJikfA
2022-10-17 09:21:22 SUCCESS
ExtractCHash
Extracted c_hash from ID Token
c_hash
U7WtZIdybW3MQgyQzdIR2w
alg
PS256
2022-10-17 09:21:22 SUCCESS
ValidateCHash
c_hash validated successfully
expected_hash
U7WtZIdybW3MQgyQzdIR2w
unhashed_value
zcQPDvrZTCxGrVeK4bMXS9u4YKlm72TuYay1kjxvYjI.qTAgvWelxU3n9aRRDcm7WqxOof-uODkW9FRfB7mEi8SdvpKnepACoGbyqX5YCugQhCeVREO9Luuca6Y5UIb8sw
id_token_hash
U7WtZIdybW3MQgyQzdIR2w
Call token endpoint
2022-10-17 09:21:22 SUCCESS
CreateTokenEndpointRequestForAuthorizationCodeGrant
Created token endpoint request
grant_type
authorization_code
code
zcQPDvrZTCxGrVeK4bMXS9u4YKlm72TuYay1kjxvYjI.qTAgvWelxU3n9aRRDcm7WqxOof-uODkW9FRfB7mEi8SdvpKnepACoGbyqX5YCugQhCeVREO9Luuca6Y5UIb8sw
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
2022-10-17 09:21:22 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
client_ukob01
sub
client_ukob01
aud
https://isamfed.com:6443/isvaop/oauth2/token
jti
EP3sGmk7nN0NP4Qv9AdW
iat
1665998482
exp
1665998542
2022-10-17 09:21:22 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJjbGllbnRfdWtvYjAxIiwiYXVkIjoiaHR0cHM6XC9cL2lzYW1mZWQuY29tOjY0NDNcL2lzdmFvcFwvb2F1dGgyXC90b2tlbiIsImlzcyI6ImNsaWVudF91a29iMDEiLCJleHAiOjE2NjU5OTg1NDIsImlhdCI6MTY2NTk5ODQ4MiwianRpIjoiRVAzc0dtazduTjBOUDRRdjlBZFcifQ.bvJ0KsWkGharno62cQCjRJbEi_d3tvaJmYuFqICtdrMl8v8o0xfbAJ2v-LSfmLzr2pk8QmZ4U0SxSV19s2J_4z8e7U0RTQcpvsYWWl_xzt8-GcWR47fvYV0CGzCNvqMsjaBiUC61n9YBCPn0Ow-bilWoE9f730VXH6tD6R-rRHfmlgSuoz58R6Rm4GAQCDL2-awgevx2TudftUurlXrJQfI_KZWahbctvlVdKnkqpQkxg9wl9ELBnGcQGJE7cG--2ci4kunpWY3erbh0Pab_wF4sIrzMpeVbboMz0vOlRixprueao-91STjMxqjIrbIDd-DUaIqahIe2h6JTDRW0NQ
2022-10-17 09:21:22
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
authorization_code
code
zcQPDvrZTCxGrVeK4bMXS9u4YKlm72TuYay1kjxvYjI.qTAgvWelxU3n9aRRDcm7WqxOof-uODkW9FRfB7mEi8SdvpKnepACoGbyqX5YCugQhCeVREO9Luuca6Y5UIb8sw
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
client_assertion
eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJjbGllbnRfdWtvYjAxIiwiYXVkIjoiaHR0cHM6XC9cL2lzYW1mZWQuY29tOjY0NDNcL2lzdmFvcFwvb2F1dGgyXC90b2tlbiIsImlzcyI6ImNsaWVudF91a29iMDEiLCJleHAiOjE2NjU5OTg1NDIsImlhdCI6MTY2NTk5ODQ4MiwianRpIjoiRVAzc0dtazduTjBOUDRRdjlBZFcifQ.bvJ0KsWkGharno62cQCjRJbEi_d3tvaJmYuFqICtdrMl8v8o0xfbAJ2v-LSfmLzr2pk8QmZ4U0SxSV19s2J_4z8e7U0RTQcpvsYWWl_xzt8-GcWR47fvYV0CGzCNvqMsjaBiUC61n9YBCPn0Ow-bilWoE9f730VXH6tD6R-rRHfmlgSuoz58R6Rm4GAQCDL2-awgevx2TudftUurlXrJQfI_KZWahbctvlVdKnkqpQkxg9wl9ELBnGcQGJE7cG--2ci4kunpWY3erbh0Pab_wF4sIrzMpeVbboMz0vOlRixprueao-91STjMxqjIrbIDd-DUaIqahIe2h6JTDRW0NQ
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2022-10-17 09:21:22
AddCodeVerifierToTokenEndpointRequest
grant_type
authorization_code
code
zcQPDvrZTCxGrVeK4bMXS9u4YKlm72TuYay1kjxvYjI.qTAgvWelxU3n9aRRDcm7WqxOof-uODkW9FRfB7mEi8SdvpKnepACoGbyqX5YCugQhCeVREO9Luuca6Y5UIb8sw
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
client_assertion
eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJjbGllbnRfdWtvYjAxIiwiYXVkIjoiaHR0cHM6XC9cL2lzYW1mZWQuY29tOjY0NDNcL2lzdmFvcFwvb2F1dGgyXC90b2tlbiIsImlzcyI6ImNsaWVudF91a29iMDEiLCJleHAiOjE2NjU5OTg1NDIsImlhdCI6MTY2NTk5ODQ4MiwianRpIjoiRVAzc0dtazduTjBOUDRRdjlBZFcifQ.bvJ0KsWkGharno62cQCjRJbEi_d3tvaJmYuFqICtdrMl8v8o0xfbAJ2v-LSfmLzr2pk8QmZ4U0SxSV19s2J_4z8e7U0RTQcpvsYWWl_xzt8-GcWR47fvYV0CGzCNvqMsjaBiUC61n9YBCPn0Ow-bilWoE9f730VXH6tD6R-rRHfmlgSuoz58R6Rm4GAQCDL2-awgevx2TudftUurlXrJQfI_KZWahbctvlVdKnkqpQkxg9wl9ELBnGcQGJE7cG--2ci4kunpWY3erbh0Pab_wF4sIrzMpeVbboMz0vOlRixprueao-91STjMxqjIrbIDd-DUaIqahIe2h6JTDRW0NQ
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
code_verifier
KtUGnCH3AnN1eG-FFMR5vpNuJRfkF5DJfoiWFB6E8vM1Ev4yY~VenZ._QM-YB21Qf_6CV7x7tF166dP72xdx8YpmX~WwnKFBnFF7p0BdNXp5UVBzW_pJJyQKHvU.kQoo
2022-10-17 09:21:22
CallTokenEndpoint
HTTP request
request_uri
https://isamfed.com:6443/isvaop/oauth2/token
request_method
POST
request_headers
{
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "1120"
}
request_body
grant_type=authorization_code&code=zcQPDvrZTCxGrVeK4bMXS9u4YKlm72TuYay1kjxvYjI.qTAgvWelxU3n9aRRDcm7WqxOof-uODkW9FRfB7mEi8SdvpKnepACoGbyqX5YCugQhCeVREO9Luuca6Y5UIb8sw&redirect_uri=https%3A%2F%2Fwww.certification.openid.net%2Ftest%2Fa%2FISVAOP%2Fcallback&client_assertion=eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJjbGllbnRfdWtvYjAxIiwiYXVkIjoiaHR0cHM6XC9cL2lzYW1mZWQuY29tOjY0NDNcL2lzdmFvcFwvb2F1dGgyXC90b2tlbiIsImlzcyI6ImNsaWVudF91a29iMDEiLCJleHAiOjE2NjU5OTg1NDIsImlhdCI6MTY2NTk5ODQ4MiwianRpIjoiRVAzc0dtazduTjBOUDRRdjlBZFcifQ.bvJ0KsWkGharno62cQCjRJbEi_d3tvaJmYuFqICtdrMl8v8o0xfbAJ2v-LSfmLzr2pk8QmZ4U0SxSV19s2J_4z8e7U0RTQcpvsYWWl_xzt8-GcWR47fvYV0CGzCNvqMsjaBiUC61n9YBCPn0Ow-bilWoE9f730VXH6tD6R-rRHfmlgSuoz58R6Rm4GAQCDL2-awgevx2TudftUurlXrJQfI_KZWahbctvlVdKnkqpQkxg9wl9ELBnGcQGJE7cG--2ci4kunpWY3erbh0Pab_wF4sIrzMpeVbboMz0vOlRixprueao-91STjMxqjIrbIDd-DUaIqahIe2h6JTDRW0NQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&code_verifier=KtUGnCH3AnN1eG-FFMR5vpNuJRfkF5DJfoiWFB6E8vM1Ev4yY%7EVenZ._QM-YB21Qf_6CV7x7tF166dP72xdx8YpmX%7EWwnKFBnFF7p0BdNXp5UVBzW_pJJyQKHvU.kQoo
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2022-10-17 09:21:23 RESPONSE
CallTokenEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "1412",
  "content-type": "application/json;charset\u003dUTF-8",
  "date": "Mon, 17 Oct 2022 09:21:23 GMT",
  "p3p": "CP\u003d\"NON CUR OTPi OUR NOR UNI\"",
  "cache-control": "no-store",
  "x-correlation-id": "CORR_ID-b6e749a2-08b3-4a38-b1d4-a0230c2c6b72",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "pragma": "no-cache",
  "set-cookie": "PD-S-SESSION-ID\u003d1_2_1_0FgRkdgg2b8FsPqRdwHipmGd-xSuC-30zUNUrfHnG-ZMd++g; Path\u003d/; Secure; HttpOnly"
}
response_body
{"access_token":"ONOBaPPxPqRBnNDD7HVeI1RI_uCOwxWGxOKsNyh7L2o._1RJ5TKFLq_o52jxQurnfidwpeWKUNRBvkRTsJTX-XbGwyRhREkuatY868hJoP5xMXdsfyPV8opCddMab5Hhlg","expires_in":7200,"id_token":"eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.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.gj7nm3aRYJBmLX3swFhcNbaoUAsNVs2fSNHMvkePjhwT8aPj5S_cqbecQpQOLCJx71xlh9hvcw390ujKAtDjNEvi-m5_QFkKENnIhGtaGlyiCsuxZxZLKuuoeaYkHNI_BuEEwr9u1WXVEtSTSMlfcw9AM6VdxUuRetZXJFFUhruO_6eYOBvimbON4z3grNfEQ1K4oSlgxCyC-Qo8V_NRWZ4hWAyQuAZlmp2gYxxmE_BTfrAT0Ami55dwXc8xqOG5iTgFTF6XBX_7gDSKH5XRvc6dVIUX2tKwttQ8p20GibKhjoZSGyhoqrUmCmrQhi3cOCudP9tFcU7Z4YBQo1b11g","refresh_token":"PVLYXsnoLvT-9DAd4G2unhfXHvSDm_VtAm9aKki_KOs.uBsEnDyGSD6lbciZ1QyIT-sMFq0ifRovmLBA1vspwACW5-iyxDr7ZycuWQ0Uyzq9_2HLmIVGlXLl2CYHXvgOKw","scope":"openid email","token_type":"bearer"}
2022-10-17 09:21:23 SUCCESS
CallTokenEndpoint
Parsed token endpoint response
access_token
ONOBaPPxPqRBnNDD7HVeI1RI_uCOwxWGxOKsNyh7L2o._1RJ5TKFLq_o52jxQurnfidwpeWKUNRBvkRTsJTX-XbGwyRhREkuatY868hJoP5xMXdsfyPV8opCddMab5Hhlg
expires_in
7200
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.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.gj7nm3aRYJBmLX3swFhcNbaoUAsNVs2fSNHMvkePjhwT8aPj5S_cqbecQpQOLCJx71xlh9hvcw390ujKAtDjNEvi-m5_QFkKENnIhGtaGlyiCsuxZxZLKuuoeaYkHNI_BuEEwr9u1WXVEtSTSMlfcw9AM6VdxUuRetZXJFFUhruO_6eYOBvimbON4z3grNfEQ1K4oSlgxCyC-Qo8V_NRWZ4hWAyQuAZlmp2gYxxmE_BTfrAT0Ami55dwXc8xqOG5iTgFTF6XBX_7gDSKH5XRvc6dVIUX2tKwttQ8p20GibKhjoZSGyhoqrUmCmrQhi3cOCudP9tFcU7Z4YBQo1b11g
refresh_token
PVLYXsnoLvT-9DAd4G2unhfXHvSDm_VtAm9aKki_KOs.uBsEnDyGSD6lbciZ1QyIT-sMFq0ifRovmLBA1vspwACW5-iyxDr7ZycuWQ0Uyzq9_2HLmIVGlXLl2CYHXvgOKw
scope
openid email
token_type
bearer
Verify token endpoint response
2022-10-17 09:21:23 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2022-10-17 09:21:23 SUCCESS
CheckForAccessTokenValue
Found an access token
access_token
ONOBaPPxPqRBnNDD7HVeI1RI_uCOwxWGxOKsNyh7L2o._1RJ5TKFLq_o52jxQurnfidwpeWKUNRBvkRTsJTX-XbGwyRhREkuatY868hJoP5xMXdsfyPV8opCddMab5Hhlg
2022-10-17 09:21:23 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
ONOBaPPxPqRBnNDD7HVeI1RI_uCOwxWGxOKsNyh7L2o._1RJ5TKFLq_o52jxQurnfidwpeWKUNRBvkRTsJTX-XbGwyRhREkuatY868hJoP5xMXdsfyPV8opCddMab5Hhlg
type
bearer
2022-10-17 09:21:23 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
7200
2022-10-17 09:21:23 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
7200
2022-10-17 09:21:23 SUCCESS
CheckForRefreshTokenValue
Found a refresh token
refresh_token
PVLYXsnoLvT-9DAd4G2unhfXHvSDm_VtAm9aKki_KOs.uBsEnDyGSD6lbciZ1QyIT-sMFq0ifRovmLBA1vspwACW5-iyxDr7ZycuWQ0Uyzq9_2HLmIVGlXLl2CYHXvgOKw
2022-10-17 09:21:23 SUCCESS
EnsureMinimumRefreshTokenLength
Refresh token is of sufficient length
actual
1040
required
128
2022-10-17 09:21:23 SUCCESS
EnsureMinimumRefreshTokenEntropy
Calculated shannon entropy seems sufficient
actual
736.5558507977171
expected
96.0
value
PVLYXsnoLvT-9DAd4G2unhfXHvSDm_VtAm9aKki_KOs.uBsEnDyGSD6lbciZ1QyIT-sMFq0ifRovmLBA1vspwACW5-iyxDr7ZycuWQ0Uyzq9_2HLmIVGlXLl2CYHXvgOKw
2022-10-17 09:21:23 SUCCESS
EnsureMinimumAccessTokenLength
Access token is of sufficient length
actual
1040
required
128
2022-10-17 09:21:23 SUCCESS
EnsureMinimumAccessTokenEntropy
Calculated shannon entropy seems sufficient
actual
726.9784002644607
expected
96.0
value
ONOBaPPxPqRBnNDD7HVeI1RI_uCOwxWGxOKsNyh7L2o._1RJ5TKFLq_o52jxQurnfidwpeWKUNRBvkRTsJTX-XbGwyRhREkuatY868hJoP5xMXdsfyPV8opCddMab5Hhlg
2022-10-17 09:21:23 SUCCESS
ExtractIdTokenFromTokenResponse
Found and parsed the id_token from token_endpoint_response
value
eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.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.gj7nm3aRYJBmLX3swFhcNbaoUAsNVs2fSNHMvkePjhwT8aPj5S_cqbecQpQOLCJx71xlh9hvcw390ujKAtDjNEvi-m5_QFkKENnIhGtaGlyiCsuxZxZLKuuoeaYkHNI_BuEEwr9u1WXVEtSTSMlfcw9AM6VdxUuRetZXJFFUhruO_6eYOBvimbON4z3grNfEQ1K4oSlgxCyC-Qo8V_NRWZ4hWAyQuAZlmp2gYxxmE_BTfrAT0Ami55dwXc8xqOG5iTgFTF6XBX_7gDSKH5XRvc6dVIUX2tKwttQ8p20GibKhjoZSGyhoqrUmCmrQhi3cOCudP9tFcU7Z4YBQo1b11g
header
{
  "kid": "httpserverkey",
  "typ": "JWT",
  "alg": "PS256"
}
claims
{
  "at_hash": "VSMyB0BIjtEVTpa-qQUXXw",
  "sub": "clientcertuser",
  "email_verified": true,
  "rat": 1665998473,
  "iss": "https://isamfed.com:6443/isvaop/oauth2",
  "nonce": "QgHRx8N3gN",
  "rt_hash": "CndDUGfnHPG62RkjCpekhA",
  "acr": "urn:openbanking:psd2:ca",
  "aud": "client_ukob01",
  "openbanking_intent_id": "client_ukob01.510cd3a1-a850-4aec-b230-249a584218f5",
  "s_hash": "Jhm2CTc4_daVb3c1FJikfA",
  "auth_time": 1665998483,
  "exp": 1666002083,
  "iat": 1665998483,
  "jti": "fbaa4046-249b-4d36-9568-74c51c91d19e"
}
2022-10-17 09:21:23 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2022-10-17 09:21:23
ValidateIdTokenStandardClaims
sub is a string with content
2022-10-17 09:21:23
ValidateIdTokenStandardClaims
email_verified is a boolean
2022-10-17 09:21:23
ValidateIdTokenStandardClaims
Skipping unknown claim: rat
2022-10-17 09:21:23
ValidateIdTokenStandardClaims
Skipping unknown claim: rt_hash
2022-10-17 09:21:23
ValidateIdTokenStandardClaims
Skipping unknown claim: openbanking_intent_id
2022-10-17 09:21:23 SUCCESS
ValidateIdTokenStandardClaims
id_token claims are valid
2022-10-17 09:21:23 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
QgHRx8N3gN
2022-10-17 09:21:23 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
acr value in id_token is (one of) the requested values
actual
urn:openbanking:psd2:ca
requested
[
  "urn:openbanking:psd2:sca",
  "urn:openbanking:psd2:ca"
]
2022-10-17 09:21:23 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.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.gj7nm3aRYJBmLX3swFhcNbaoUAsNVs2fSNHMvkePjhwT8aPj5S_cqbecQpQOLCJx71xlh9hvcw390ujKAtDjNEvi-m5_QFkKENnIhGtaGlyiCsuxZxZLKuuoeaYkHNI_BuEEwr9u1WXVEtSTSMlfcw9AM6VdxUuRetZXJFFUhruO_6eYOBvimbON4z3grNfEQ1K4oSlgxCyC-Qo8V_NRWZ4hWAyQuAZlmp2gYxxmE_BTfrAT0Ami55dwXc8xqOG5iTgFTF6XBX_7gDSKH5XRvc6dVIUX2tKwttQ8p20GibKhjoZSGyhoqrUmCmrQhi3cOCudP9tFcU7Z4YBQo1b11g
2022-10-17 09:21:23 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6Imh0dHBzZXJ2ZXJrZXkiLCJ0eXAiOiJKV1QifQ.eyJhY3IiOiJ1cm46b3BlbmJhbmtpbmc6cHNkMjpjYSIsImF0X2hhc2giOiJWU015QjBCSWp0RVZUcGEtcVFVWFh3IiwiYXVkIjpbImNsaWVudF91a29iMDEiXSwiYXV0aF90aW1lIjoxNjY1OTk4NDgzLCJlbWFpbF92ZXJpZmllZCI6dHJ1ZSwiZXhwIjoxNjY2MDAyMDgzLCJpYXQiOjE2NjU5OTg0ODMsImlzcyI6Imh0dHBzOi8vaXNhbWZlZC5jb206NjQ0My9pc3Zhb3Avb2F1dGgyIiwianRpIjoiZmJhYTQwNDYtMjQ5Yi00ZDM2LTk1NjgtNzRjNTFjOTFkMTllIiwibm9uY2UiOiJRZ0hSeDhOM2dOIiwib3BlbmJhbmtpbmdfaW50ZW50X2lkIjoiY2xpZW50X3Vrb2IwMS41MTBjZDNhMS1hODUwLTRhZWMtYjIzMC0yNDlhNTg0MjE4ZjUiLCJyYXQiOjE2NjU5OTg0NzMsInJ0X2hhc2giOiJDbmREVUdmbkhQRzYyUmtqQ3Bla2hBIiwic19oYXNoIjoiSmhtMkNUYzRfZGFWYjNjMUZKaWtmQSIsInN1YiI6ImNsaWVudGNlcnR1c2VyIn0.gj7nm3aRYJBmLX3swFhcNbaoUAsNVs2fSNHMvkePjhwT8aPj5S_cqbecQpQOLCJx71xlh9hvcw390ujKAtDjNEvi-m5_QFkKENnIhGtaGlyiCsuxZxZLKuuoeaYkHNI_BuEEwr9u1WXVEtSTSMlfcw9AM6VdxUuRetZXJFFUhruO_6eYOBvimbON4z3grNfEQ1K4oSlgxCyC-Qo8V_NRWZ4hWAyQuAZlmp2gYxxmE_BTfrAT0Ami55dwXc8xqOG5iTgFTF6XBX_7gDSKH5XRvc6dVIUX2tKwttQ8p20GibKhjoZSGyhoqrUmCmrQhi3cOCudP9tFcU7Z4YBQo1b11g
2022-10-17 09:21:23 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
clientcertuser
2022-10-17 09:21:23
EnsureIdTokenUpdatedAtValid
id_token response does not contain 'updated_at'
2022-10-17 09:21:23 INFO
ValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2022-10-17 09:21:23 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
httpserverkey
2022-10-17 09:21:23 SUCCESS
OBValidateIdTokenIntentId
openbanking_intent_id passed all validation checks
2022-10-17 09:21:23 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "ES256",
  "PS256"
]
alg
PS256
2022-10-17 09:21:23 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2022-10-17 09:21:23 INFO
ExtractCHash
Couldn't find c_hash in ID token
2022-10-17 09:21:23 SUCCESS
ExtractSHash
Extracted s_hash from ID Token
s_hash
Jhm2CTc4_daVb3c1FJikfA
alg
PS256
2022-10-17 09:21:23 SUCCESS
ExtractAtHash
Extracted at_hash from ID Token
at_hash
VSMyB0BIjtEVTpa-qQUXXw
alg
PS256
2022-10-17 09:21:23 INFO
ValidateCHash
Skipped evaluation due to missing required object: c_hash
expected
c_hash
mapped
2022-10-17 09:21:23 SUCCESS
ValidateSHash
s_hash validated successfully
expected_hash
Jhm2CTc4_daVb3c1FJikfA
unhashed_value
BmsD7zXek2
id_token_hash
Jhm2CTc4_daVb3c1FJikfA
2022-10-17 09:21:23 SUCCESS
ValidateAtHash
at_hash validated successfully
expected_hash
VSMyB0BIjtEVTpa-qQUXXw
unhashed_value
ONOBaPPxPqRBnNDD7HVeI1RI_uCOwxWGxOKsNyh7L2o._1RJ5TKFLq_o52jxQurnfidwpeWKUNRBvkRTsJTX-XbGwyRhREkuatY868hJoP5xMXdsfyPV8opCddMab5Hhlg
id_token_hash
VSMyB0BIjtEVTpa-qQUXXw
Verify at_hash in the authorization endpoint id_token
2022-10-17 09:21:23 INFO
ExtractAtHash
Couldn't find at_hash in ID token
2022-10-17 09:21:23 INFO
ValidateAtHash
Skipped evaluation due to missing required object: at_hash
expected
at_hash
mapped
Resource server endpoint tests
2022-10-17 09:21:23
CreateEmptyResourceEndpointRequestHeaders
Created empty headers
resource_endpoint_request_headers
{}
2022-10-17 09:21:23 SUCCESS
AddFAPIAuthDateToResourceEndpointRequest
Added x-fapi-auth-date to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Mon, 17 Oct 2022 09:21:23 GMT"
}
2022-10-17 09:21:23
AddIpV4FapiCustomerIpAddressToResourceEndpointRequest
Added x-fapi-customer-ip-address containing IPv4 address to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Mon, 17 Oct 2022 09:21:23 GMT",
  "x-fapi-customer-ip-address": "198.51.100.119"
}
2022-10-17 09:21:23
CreateRandomFAPIInteractionId
Created interaction ID
fapi_interaction_id
d5c664d8-23a5-47fc-b838-743190b04c11
2022-10-17 09:21:23 SUCCESS
AddFAPIInteractionIdToResourceEndpointRequest
Added x-fapi-interaction-id to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Mon, 17 Oct 2022 09:21:23 GMT",
  "x-fapi-customer-ip-address": "198.51.100.119",
  "x-fapi-interaction-id": "d5c664d8-23a5-47fc-b838-743190b04c11"
}
2022-10-17 09:21:23
CallProtectedResource
HTTP request
request_uri
https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/accounts
request_method
GET
request_headers
{
  "accept": "application/json",
  "authorization": "bearer ONOBaPPxPqRBnNDD7HVeI1RI_uCOwxWGxOKsNyh7L2o._1RJ5TKFLq_o52jxQurnfidwpeWKUNRBvkRTsJTX-XbGwyRhREkuatY868hJoP5xMXdsfyPV8opCddMab5Hhlg",
  "x-fapi-auth-date": "Mon, 17 Oct 2022 09:21:23 GMT",
  "x-fapi-customer-ip-address": "198.51.100.119",
  "x-fapi-interaction-id": "d5c664d8-23a5-47fc-b838-743190b04c11",
  "content-length": "0"
}
request_body

                                
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2022-10-17 09:21:26 RESPONSE
CallProtectedResource
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "39",
  "content-type": "application/json;charset\u003dUTF-8",
  "date": "Mon, 17 Oct 2022 09:21:26 GMT",
  "p3p": "CP\u003d\"NON CUR OTPi OUR NOR UNI\"",
  "x-correlation-id": "CORR_ID-b4804052-355e-4c5f-99d4-81e5679c16e3",
  "x-fapi-interaction-id": "d5c664d8-23a5-47fc-b838-743190b04c11",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "set-cookie": "PD-S-SESSION-ID\u003d1_2_1_yDSkzSr6vAVODIKIxJhCMsf6t617Y-CLdjd4fiDpYVIT0XtQ; Path\u003d/; Secure; HttpOnly"
}
response_body
{"content":"This is a sample resource"}
2022-10-17 09:21:26 SUCCESS
CallProtectedResource
Got a response from the resource endpoint
status
200
endpoint_name
resource
headers
{
  "content-length": "39",
  "content-type": "application/json;charset\u003dUTF-8",
  "date": "Mon, 17 Oct 2022 09:21:26 GMT",
  "p3p": "CP\u003d\"NON CUR OTPi OUR NOR UNI\"",
  "x-correlation-id": "CORR_ID-b4804052-355e-4c5f-99d4-81e5679c16e3",
  "x-fapi-interaction-id": "d5c664d8-23a5-47fc-b838-743190b04c11",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "set-cookie": "PD-S-SESSION-ID\u003d1_2_1_yDSkzSr6vAVODIKIxJhCMsf6t617Y-CLdjd4fiDpYVIT0XtQ; Path\u003d/; Secure; HttpOnly"
}
body
{"content":"This is a sample resource"}
2022-10-17 09:21:26 SUCCESS
EnsureHttpStatusCodeIs200or201
resource endpoint http status code was 200
2022-10-17 09:21:26 SUCCESS
CheckForDateHeaderInResourceResponse
Date header present and validated
date
Mon, 17 Oct 2022 09:21:26 GMT
skew
991
2022-10-17 09:21:26 SUCCESS
CheckForFAPIInteractionIdInResourceResponse
Found x-fapi-interaction-id
interaction_id
d5c664d8-23a5-47fc-b838-743190b04c11
2022-10-17 09:21:26 SUCCESS
EnsureMatchingFAPIInteractionId
Interaction ID matched
fapi_interaction_id
d5c664d8-23a5-47fc-b838-743190b04c11
2022-10-17 09:21:26 SUCCESS
EnsureResourceResponseReturnedJsonContentType
Response content type is json
content_type
application/json;charset=UTF-8
2022-10-17 09:21:27 FINISHED
fapi1-advanced-final-ensure-valid-pkce-succeeds
Test has run to completion
testmodule_result
PASSED
2022-10-17 09:21:33
TEST-RUNNER
Alias has now been claimed by another test
alias
ISVAOP
new_test_id
CfjTvZqWTfgpj0i
Test Results