Test detail

Test Name	fapi1-advanced-final-client-test-invalid-secondary-aud
Variant	client_auth_type=mtls, fapi_auth_request_method=by_value, fapi_client_type=oidc, fapi_profile=openbanking_brazil, fapi_response_mode=plain_response
Test ID	QkTgjI2i4acRzKB https://www.certification.openid.net/log-detail.html?public=true&log=QkTgjI2i4acRzKB
Created	2022-11-25T16:38:14.410963Z
Description	Quanto RP
Test Version	5.0.7
Test Owner	103024967838956445061 https://accounts.google.com
Plan ID	GTeBXIWNMpj7B https://www.certification.openid.net/plan-detail.html?public=true&plan=GTeBXIWNMpj7B
Exported From	https://www.certification.openid.net
Exported By	103024967838956445061 https://accounts.google.com
Suite Version	5.0.7
Exported	2022-11-29 14:07:45 (UTC)

2022-11-25 16:38:14

(7) More

INFO

TEST-RUNNER

Test instance QkTgjI2i4acRzKB created

baseUrl	https://www.certification.openid.net/test/a/quanto_test
variant	{ "client_auth_type": "mtls", "fapi_auth_request_method": "by_value", "fapi_client_type": "oidc", "fapi_profile": "openbanking_brazil", "fapi_response_mode": "plain_response" }
alias	quanto_test
description	Quanto RP
planId	GTeBXIWNMpj7B
config	{ "alias": "quanto_test", "description": "Quanto RP", "server": { "jwks": { "keys": [ { "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc", "kty": "RSA", "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00", "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q", "e": "AQAB", "alg": "PS256", "use": "sig", "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM", "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg", "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE", "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk", "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w", "x5c": [ "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\u003d\u003d" ] }, { "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic", "kty": "RSA", "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs", "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ", "e": "AQAB", "use": "enc", "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996", "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8", "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8", "alg": "RSA-OAEP", "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM", "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q" } ] } }, "client": { "client_id": "unNmFht8lVM_R29e0hYVI", "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index", "certificate": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----", "jwks": { "keys": [ { "kty": "RSA", "use": "sig", "alg": "PS256", "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE", "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw", "e": "AQAB" } ] } }, "client2": { "client_id": "3512766953869", "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index", "id_token_encrypted_response_alg": "RSA-OAEP", "certificate": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----", "jwks": { "keys": [ { "kty": "RSA", "use": "sig", "alg": "PS256", "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE", "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw", "e": "AQAB" }, { "use": "enc", "kid": "9da0283ce6957f44f26b33102fd39fbc3530050502173029b36a27ec7c518123", "alg": "RSA-OAEP", "kty": "RSA", "n": "tNNwY3N1-FJPF2SwBrBxfsutfEsWaFpbn1ztDodUSqBCHV7ZlSipSdJiCe061m2idB_jDRJL_xgUKnY0pE39gT99JEwsIayOhJuSz2HHWIS8aYfThko1oM6HcFYIEx29-xk-aJczyk4j1ExZuMml0SuHusXCtpTAhh-zTnPuoHZj5SmAIgkNo5O5aoRKoZuJmX1QaLHGyQVPWVoqHwkP0v0K06JgARNYj3k5-UM64utQyu0ijLaAQntkjLSMSUsrYdkZSNv-we0ZU838qaJo1rZQGCA8iAZga-wXFE0oMKwd5PCzUhSwGfsQj3BXTEFFsSa6aZwQK9DfNZJgkxinkw", "e": "AQAB" } ] }, "id_token_encrypted_response_enc": "A256GCM" }, "directory": { "keystore": "https://keystore.sandbox.directory.openbankingbrasil.org.br/" }, "consent": {}, "publish": "everything" }
testName	fapi1-advanced-final-client-test-invalid-secondary-aud

2022-11-25 16:38:14

(3) More

SUCCESS

GenerateServerConfigurationMTLS

Created server configuration

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  }
}

issuer

https://www.certification.openid.net/test/a/quanto_test/

discoveryUrl

https://www.certification.openid.net/test/a/quanto_test/.well-known/openid-configuration

2022-11-25 16:38:14

(1) More

SetRequestParameterSupportedToTrueInServerConfiguration

Enabled request parameter support in server configuration

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  },
  "request_parameter_supported": true
}

2022-11-25 16:38:14

(3) More

SUCCESS

LoadServerJWKs

Parsed public and private JWK sets

server_jwks

{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "MIIGqzCCBZOgAwIBAgIUdUCw8bQZidnZ6uERKJuN9u4RGvcwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMDgxNjA5NTUwMFoXDTIyMDkxNTA5NTUwMFowgacxCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMS8wDAYDVQQLEwUxMjM0NTAOBgNVBAsTB2NlcnRtYW4wDwYDVQQLEwhhZ29vZG9uZTEcMBoGA1UEAxMTT3BlbiBCYW5raW5nIEJyYXNpbDE0MDIGCgmSJomT8ixkAQETJDc0ZTkyOWQ5LTMzYjYtNGQ4NS04YmE3LWMxNDZjODY3YTgxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyF1agPcwq5ms99Flo82XsXUroWoD/6FX4AfmOUu113h4VOLYaO3N8HDYbKxgii2En/+O61e/Ptjn4T2PVq0iVcqiF6Gp4sKE5w/bKZRfdCe8qIPS4D+JKpFpesJvIHUeQvlAuBp5dA9nGSpxOjGe5P2+ZzNGXwvux/2ztdweGmKbtOvbYe4RVhiu6bOubog8XEBmD96EnqmoROasH1Hn9kDJIclbTP51j/TlQMzhrSfJJuE3Qq6vWhe/DaPbtmELmlDiYHjp8CjAY5oBMHLmkHvQxEBV4cwbUZj5ZpdqU8tkA78XtR4DkzrJ4fYoBb1+9ABq6GNzxWPpSQMQuBXdsCAwEAAaOCAwIwggL+MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJwv7oHX2exZL304ru+4eGVypHlxMB8GA1UdIwQYMBaAFIZ/WK0X9YK2TrQFs/uwzhFD30y+MEwGCCsGAQUFBwEBBEAwPjA8BggrBgEFBQcwAYYwaHR0cDovL29jc3Auc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL2lzc3Vlci5jcmwwXgYDVR0RBFcwVaAZBgVgTAEDAqAQDA5NaWNoYWVsIEZyYXNlcqAYBgVgTAEDA6APDA0xMzM1MzIzNjAwMTg5oA0GBWBMAQMEoAQMAm5voA8GBWBMAQMHoAYMBGFsb3QwDgYDVR0PAQH/BAQDAgbAMIIBoQYDVR0gBIIBmDCCAZQwggGQBgorBgEEAYO6L2QBMIIBgDCCATYGCCsGAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNlIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNpcGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3NzZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlkaWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQgZG9jdW1lbnRzIHRoZXJlaW4uMEQGCCsGAQUFBwIBFjhodHRwOi8vY3BzLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczANBgkqhkiG9w0BAQsFAAOCAQEAtKn/QnJqKLp52YB14x+M21qwz67utFkWjhauQe0elXupjY5NWZb5wLrGYNOZQzRe2JRzcBbGN6P7lCweRfxMkSGh9YrXbrkBXLEPtLHpTVEy65v1tWl02lC+ooVPyQpSjAQL0L69OQ7s7rnIXyb3rkSUzuGSxsLU1AXpWj0oYFB4wdeIdPAVPs83frC5s4kz42JruSAE2vsbvQURTVPChh+hO6+R6Irz+ZEZ1NSgjQkxvOXHW53CkXZSjjHbAB/nbJYi7YyK7kck99r38Ba/WBfIfywdFVVYfiiW5TS6XbQeVeilmmt5MLxBz96FxR6E6WR+cQwybEe94Fb/jD6xHA\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}

server_encryption_keys

{
  "keys": [
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}

server_public_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "MIIGqzCCBZOgAwIBAgIUdUCw8bQZidnZ6uERKJuN9u4RGvcwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMDgxNjA5NTUwMFoXDTIyMDkxNTA5NTUwMFowgacxCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMS8wDAYDVQQLEwUxMjM0NTAOBgNVBAsTB2NlcnRtYW4wDwYDVQQLEwhhZ29vZG9uZTEcMBoGA1UEAxMTT3BlbiBCYW5raW5nIEJyYXNpbDE0MDIGCgmSJomT8ixkAQETJDc0ZTkyOWQ5LTMzYjYtNGQ4NS04YmE3LWMxNDZjODY3YTgxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyF1agPcwq5ms99Flo82XsXUroWoD/6FX4AfmOUu113h4VOLYaO3N8HDYbKxgii2En/+O61e/Ptjn4T2PVq0iVcqiF6Gp4sKE5w/bKZRfdCe8qIPS4D+JKpFpesJvIHUeQvlAuBp5dA9nGSpxOjGe5P2+ZzNGXwvux/2ztdweGmKbtOvbYe4RVhiu6bOubog8XEBmD96EnqmoROasH1Hn9kDJIclbTP51j/TlQMzhrSfJJuE3Qq6vWhe/DaPbtmELmlDiYHjp8CjAY5oBMHLmkHvQxEBV4cwbUZj5ZpdqU8tkA78XtR4DkzrJ4fYoBb1+9ABq6GNzxWPpSQMQuBXdsCAwEAAaOCAwIwggL+MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJwv7oHX2exZL304ru+4eGVypHlxMB8GA1UdIwQYMBaAFIZ/WK0X9YK2TrQFs/uwzhFD30y+MEwGCCsGAQUFBwEBBEAwPjA8BggrBgEFBQcwAYYwaHR0cDovL29jc3Auc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL2lzc3Vlci5jcmwwXgYDVR0RBFcwVaAZBgVgTAEDAqAQDA5NaWNoYWVsIEZyYXNlcqAYBgVgTAEDA6APDA0xMzM1MzIzNjAwMTg5oA0GBWBMAQMEoAQMAm5voA8GBWBMAQMHoAYMBGFsb3QwDgYDVR0PAQH/BAQDAgbAMIIBoQYDVR0gBIIBmDCCAZQwggGQBgorBgEEAYO6L2QBMIIBgDCCATYGCCsGAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNlIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNpcGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3NzZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlkaWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQgZG9jdW1lbnRzIHRoZXJlaW4uMEQGCCsGAQUFBwIBFjhodHRwOi8vY3BzLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczANBgkqhkiG9w0BAQsFAAOCAQEAtKn/QnJqKLp52YB14x+M21qwz67utFkWjhauQe0elXupjY5NWZb5wLrGYNOZQzRe2JRzcBbGN6P7lCweRfxMkSGh9YrXbrkBXLEPtLHpTVEy65v1tWl02lC+ooVPyQpSjAQL0L69OQ7s7rnIXyb3rkSUzuGSxsLU1AXpWj0oYFB4wdeIdPAVPs83frC5s4kz42JruSAE2vsbvQURTVPChh+hO6+R6Irz+ZEZ1NSgjQkxvOXHW53CkXZSjjHbAB/nbJYi7YyK7kck99r38Ba/WBfIfywdFVVYfiiW5TS6XbQeVeilmmt5MLxBz96FxR6E6WR+cQwybEe94Fb/jD6xHA\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}

2022-11-25 16:38:14	SUCCESS RFC7517-1.1	ValidateServerJWKs Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url

2022-11-25 16:38:14		SetServerSigningAlgToPS256 Successfully set signing algorithm to PS256

2022-11-25 16:38:14

(1) More

FAPIBrazilSetGrantTypesSupportedInServerConfiguration

Successfully set grant_types_supported

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ]
}

2022-11-25 16:38:14

(1) More

AddClaimsParameterSupportedTrueToServerConfiguration

Successfully added claims_parameter_supported to server configuration

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true
}

2022-11-25 16:38:14

(1) More

FAPIBrazilAddBrazilSpecificSettingsToServerConfiguration

Added open banking Brazil specific server settings

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  },
  "request_parameter_supported": true,
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ]
}

2022-11-25 16:38:14

(1) More

SUCCESS

AddIdTokenSigningAlgsToServerConfiguration

Added 'id_token_signing_alg_values_supported' to server metadata as 'alg' from server jwks

value

[
  "PS256"
]

2022-11-25 16:38:14	SUCCESS FAPI2-4.3.1-9	AddTlsCertificateBoundAccessTokensTrueSupportedToServerConfiguration Added 'tls_client_certificate_bound_access_tokens' as 'true' to server metadata

2022-11-25 16:38:14	SUCCESS	AddTLSClientAuthToServerConfiguration Added tls_client_auth for token_endpoint_auth_methods_supported

2022-11-25 16:38:14

(1) More

SUCCESS

FAPI1-ADV-5.2.2-2

AddResponseTypeCodeIdTokenToServerConfiguration

Added code id_token as response type supported

response_types_supported

[
  "code id_token"
]

2022-11-25 16:38:14

(1) More

SUCCESS

FAPIBrazilAddTokenEndpointAuthSigningAlgValuesSupportedToServer

Set token_endpoint_auth_signing_alg_values_supported

values

[
  "PS256"
]

2022-11-25 16:38:14

(1) More

SUCCESS

CheckServerConfiguration

Found required server configuration keys

required

[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]

2022-11-25 16:38:14

(1) More

SUCCESS

FAPI1-BASE-5.2.2-6 FAPI1-BASE-5.2.2-5

FAPIEnsureMinimumServerKeyLength

Validated minimum key lengths for server_jwks

server_jwks

{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "MIIGqzCCBZOgAwIBAgIUdUCw8bQZidnZ6uERKJuN9u4RGvcwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMDgxNjA5NTUwMFoXDTIyMDkxNTA5NTUwMFowgacxCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMS8wDAYDVQQLEwUxMjM0NTAOBgNVBAsTB2NlcnRtYW4wDwYDVQQLEwhhZ29vZG9uZTEcMBoGA1UEAxMTT3BlbiBCYW5raW5nIEJyYXNpbDE0MDIGCgmSJomT8ixkAQETJDc0ZTkyOWQ5LTMzYjYtNGQ4NS04YmE3LWMxNDZjODY3YTgxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyF1agPcwq5ms99Flo82XsXUroWoD/6FX4AfmOUu113h4VOLYaO3N8HDYbKxgii2En/+O61e/Ptjn4T2PVq0iVcqiF6Gp4sKE5w/bKZRfdCe8qIPS4D+JKpFpesJvIHUeQvlAuBp5dA9nGSpxOjGe5P2+ZzNGXwvux/2ztdweGmKbtOvbYe4RVhiu6bOubog8XEBmD96EnqmoROasH1Hn9kDJIclbTP51j/TlQMzhrSfJJuE3Qq6vWhe/DaPbtmELmlDiYHjp8CjAY5oBMHLmkHvQxEBV4cwbUZj5ZpdqU8tkA78XtR4DkzrJ4fYoBb1+9ABq6GNzxWPpSQMQuBXdsCAwEAAaOCAwIwggL+MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJwv7oHX2exZL304ru+4eGVypHlxMB8GA1UdIwQYMBaAFIZ/WK0X9YK2TrQFs/uwzhFD30y+MEwGCCsGAQUFBwEBBEAwPjA8BggrBgEFBQcwAYYwaHR0cDovL29jc3Auc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL2lzc3Vlci5jcmwwXgYDVR0RBFcwVaAZBgVgTAEDAqAQDA5NaWNoYWVsIEZyYXNlcqAYBgVgTAEDA6APDA0xMzM1MzIzNjAwMTg5oA0GBWBMAQMEoAQMAm5voA8GBWBMAQMHoAYMBGFsb3QwDgYDVR0PAQH/BAQDAgbAMIIBoQYDVR0gBIIBmDCCAZQwggGQBgorBgEEAYO6L2QBMIIBgDCCATYGCCsGAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNlIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNpcGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3NzZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlkaWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQgZG9jdW1lbnRzIHRoZXJlaW4uMEQGCCsGAQUFBwIBFjhodHRwOi8vY3BzLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczANBgkqhkiG9w0BAQsFAAOCAQEAtKn/QnJqKLp52YB14x+M21qwz67utFkWjhauQe0elXupjY5NWZb5wLrGYNOZQzRe2JRzcBbGN6P7lCweRfxMkSGh9YrXbrkBXLEPtLHpTVEy65v1tWl02lC+ooVPyQpSjAQL0L69OQ7s7rnIXyb3rkSUzuGSxsLU1AXpWj0oYFB4wdeIdPAVPs83frC5s4kz42JruSAE2vsbvQURTVPChh+hO6+R6Irz+ZEZ1NSgjQkxvOXHW53CkXZSjjHbAB/nbJYi7YyK7kck99r38Ba/WBfIfywdFVVYfiiW5TS6XbQeVeilmmt5MLxBz96FxR6E6WR+cQwybEe94Fb/jD6xHA\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}

2022-11-25 16:38:14

(1) More

SUCCESS

LoadUserInfo

Added user information

user_info

{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}

Verify configuration of first client

2022-11-25 16:38:14

(4) More

SUCCESS

GetStaticClientConfiguration

Found a static client object

client_id	unNmFht8lVM_R29e0hYVI
redirect_uri	https://api.platform.sbx.contaquanto.net/opb-api/index
certificate	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
jwks	{ "keys": [ { "kty": "RSA", "use": "sig", "alg": "PS256", "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE", "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw", "e": "AQAB" } ] }

2022-11-25 16:38:14	SUCCESS RFC7517-1.1	ValidateClientJWKsPublicPart Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url

2022-11-25 16:38:14

(2) More

SUCCESS

ExtractJWKsFromStaticClientConfiguration

Extracted client JWK

client_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
      "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw",
      "e": "AQAB"
    }
  ]
}

public_client_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
      "alg": "PS256",
      "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw"
    }
  ]
}

2022-11-25 16:38:14

(1) More

SUCCESS

RFC7517-4.5

CheckDistinctKeyIdValueInClientJWKs

Distinct 'kid' value in all keys of client_jwks

see	https://bitbucket.org/openid/connect/issues/1127

2022-11-25 16:38:14	SUCCESS	EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys Jwks does not contain any private or symmetric keys

2022-11-25 16:38:14

(1) More

SUCCESS

FAPI1-BASE-5.2.4-3 FAPI1-BASE-5.2.4-2

FAPIEnsureMinimumClientKeyLength

Validated minimum key lengths for client_jwks

client_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
      "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw",
      "e": "AQAB"
    }
  ]
}

2022-11-25 16:38:14		fapi1-advanced-final-client-test-invalid-secondary-aud Setup Done

2022-11-25 16:38:56

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-secondary-aud

Incoming HTTP request to /test/a/quanto_test/.well-known/openid-configuration

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "accept-encoding": "gzip", "connection": "close" }
incoming_path	/test/a/quanto_test/.well-known/openid-configuration
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-25 16:38:56

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

2022-11-25 16:38:56

(4) More

OUTGOING

fapi1-advanced-final-client-test-invalid-secondary-aud

Response to HTTP request to test instance QkTgjI2i4acRzKB

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "issuer": "https://www.certification.openid.net/test/a/quanto_test/", "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize", "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token", "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks", "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register", "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo", "mtls_endpoint_aliases": { "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token", "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register", "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo" }, "request_parameter_supported": true, "grant_types_supported": [ "authorization_code", "implicit", "client_credentials", "refresh_token" ], "claims_parameter_supported": true, "request_object_encryption_alg_values_supported": [ "RSA-OAEP" ], "request_object_encryption_enc_values_supported": [ "A256GCM" ], "claims_supported": [ "cpf", "cnpj", "acr" ], "acr_values_supported": [ "urn:brasil:openbanking:loa2", "urn:brasil:openbanking:loa3" ], "request_object_signing_alg_values_supported": [ "PS256" ], "scopes_supported": [ "openid", "phone", "profile", "email", "address", "offline_access", "consents", "resources", "payments" ], "id_token_signing_alg_values_supported": [ "PS256" ], "tls_client_certificate_bound_access_tokens": true, "token_endpoint_auth_methods_supported": [ "tls_client_auth" ], "response_types_supported": [ "code id_token" ], "token_endpoint_auth_signing_alg_values_supported": [ "PS256" ] }
outgoing_path	.well-known/openid-configuration

2022-11-25 16:38:57

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-secondary-aud

Incoming HTTP request to /test-mtls/a/quanto_test/token

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "content-type": "application/x-www-form-urlencoded", "accept-encoding": "gzip", "connection": "close", "content-length": "76" }
incoming_path	/test-mtls/a/quanto_test/token
incoming_body_form_params	{ "client_id": "unNmFht8lVM_R29e0hYVI", "grant_type": "client_credentials", "scope": "payments" }
incoming_method	POST
incoming_tls_version	TLSv1.2
incoming_tls_cert	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
incoming_query_string_params	{}
incoming_body	client_id=unNmFht8lVM_R29e0hYVI&grant_type=client_credentials&scope=payments
incoming_tls_chain	[ "(null)", "(null)", "(null)", "(null)", "(null)", "(null)" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-25 16:38:57

(2) More

SUCCESS

FAPI1-ADV-8.5-1 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

Token endpoint

2022-11-25 16:38:57

(1) More

SUCCESS

RFC6749-3.2.1

CheckClientIdMatchesOnTokenRequestIfPresent

Extracted client_id matches the expected value

client_id

unNmFht8lVM_R29e0hYVI

2022-11-25 16:38:57

(1) More

SUCCESS

ExtractClientCertificateFromRequestHeaders

Extracted client certificate

client_certificate

{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nvRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3432303634353435303030313031,CN\u003dwww.quan.to,OU\u003d73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O\u003dQuanto Network Instituicao de Pagamento Ltda.,L\u003dSao Paulo,ST\u003dSao Paulo,C\u003dBR"
  },
  "sanDnsNames": [
    "www.quan.to"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}

2022-11-25 16:38:57	SUCCESS FAPI1-ADV-5.2.2-5	CheckForClientCertificate Found client certificate

2022-11-25 16:38:57

(1) More

SUCCESS

EnsureClientCertificateMatches

Presented certificate matches registered certificate

actual

2022-11-25 16:38:57	SUCCESS RFC8705-2	EnsureClientIdIsPresentOnTokenRequest Parameter client_id found on the request

2022-11-25 16:38:57	SUCCESS	EnsureNoClientAssertionSentToTokenEndpoint Client did not send a client_assertion to token endpoint

2022-11-25 16:38:57

(2) More

SUCCESS

FAPIBrazilExtractRequestedScopeFromClientCredentialsGrant

Found 'payments' scope in request

actual	[ "payments" ]
expected	payments

2022-11-25 16:38:57

(1) More

SUCCESS

GenerateBearerAccessToken

Generated access token

access_token

OrXrLDBv5UxainpzEBMFoD7piyN0T4tgLwrCXS9AzITMk2Jyul

2022-11-25 16:38:57		GenerateAccessTokenExpiration Set access_token_expiration to 900

2022-11-25 16:38:57

(3) More

SUCCESS

CreateTokenEndpointResponse

Created token endpoint response

access_token	OrXrLDBv5UxainpzEBMFoD7piyN0T4tgLwrCXS9AzITMk2Jyul
token_type	Bearer
expires_in	900

2022-11-25 16:38:57		CopyAccessTokenToClientCredentialsField Condition ran but did not log anything

2022-11-25 16:38:57

(4) More

OUTGOING

fapi1-advanced-final-client-test-invalid-secondary-aud

Response to HTTP request to test instance QkTgjI2i4acRzKB

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "access_token": "OrXrLDBv5UxainpzEBMFoD7piyN0T4tgLwrCXS9AzITMk2Jyul", "token_type": "Bearer", "expires_in": 900 }
outgoing_path	token

2022-11-25 16:38:57

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-secondary-aud

Incoming HTTP request to /test-mtls/a/quanto_test/payments/v1/consents

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "go-openb", "accept": "application/jwt", "authorization": "Bearer OrXrLDBv5UxainpzEBMFoD7piyN0T4tgLwrCXS9AzITMk2Jyul", "content-type": "application/jwt", "x-idempotency-key": "7e88d671-71a0-4ec5-9ce4-163d59e710bd", "accept-encoding": "gzip", "connection": "close", "content-length": "1229" }
incoming_path	/test-mtls/a/quanto_test/payments/v1/consents
incoming_body_form_params
incoming_method	POST
incoming_tls_version	TLSv1.2
incoming_tls_cert	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
incoming_query_string_params	{}
incoming_body	eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJqd3QifQ.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.d6Bw5stF1ThImrSNti638HB9MZe_gYJk2049n2uUkOt63XJNES8qzSccihSpQzp8jhVyN3V9SyBG6clwLimpbr1de4E9wE1B73G-W6ZWussguVyKxDDDzRCKgZaQH0BqpXk_n9sUHAqGfPKjvkD4ixLpyLfyxBiSzoZMJuAkEHsyLZy4qNXouq0wFJReuv4CU54SYU6I0P20z8inIFAeNqH1cKlOQ_-szWO8NzcP1jaxVkz4CoNLeOa_vBh5FbDi99NbXlPaF-OqllTjofXfgr0VbQdj8xEtuOUo6dMs2gGRws9SqR4aJvN5A_tsW_OfeBR6v5tci50XskUogT5gcw
incoming_tls_chain	[ "(null)", "(null)", "(null)", "(null)", "(null)", "(null)" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-25 16:38:57

(2) More

SUCCESS

FAPI1-ADV-8.5-1 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

New consent endpoint

2022-11-25 16:38:57

(1) More

SUCCESS

ExtractClientCertificateFromRequestHeaders

Extracted client certificate

client_certificate

{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nvRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3432303634353435303030313031,CN\u003dwww.quan.to,OU\u003d73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O\u003dQuanto Network Instituicao de Pagamento Ltda.,L\u003dSao Paulo,ST\u003dSao Paulo,C\u003dBR"
  },
  "sanDnsNames": [
    "www.quan.to"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}

2022-11-25 16:38:57	SUCCESS FAPI1-ADV-5.2.2-5	CheckForClientCertificate Found client certificate

2022-11-25 16:38:57

(1) More

SUCCESS

EnsureClientCertificateMatches

Presented certificate matches registered certificate

actual

2022-11-25 16:38:57	SUCCESS	EnsureIncomingRequestMethodIsPost Client correctly used http POST method

2022-11-25 16:38:57	SUCCESS FAPI1-BASE-6.2.2-1	EnsureBearerAccessTokenNotInParams Client correctly did not send access token in query parameters or form body

2022-11-25 16:38:57

(1) More

SUCCESS

FAPI1-BASE-6.2.2-1

ExtractBearerAccessTokenFromHeader

Found access token on incoming request

access_token

OrXrLDBv5UxainpzEBMFoD7piyN0T4tgLwrCXS9AzITMk2Jyul

2022-11-25 16:38:57

(1) More

SUCCESS

RequireBearerClientCredentialsAccessToken

Found access token in request

actual

OrXrLDBv5UxainpzEBMFoD7piyN0T4tgLwrCXS9AzITMk2Jyul

2022-11-25 16:38:57

(3) More

INFO

FAPI1-BASE-6.2.2-3

ExtractFapiDateHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date

path	headers.x-fapi-auth-date
mapped
object	incoming_request

2022-11-25 16:38:57

(3) More

INFO

FAPI1-BASE-6.2.2-4

ExtractFapiIpAddressHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address

path	headers.x-fapi-customer-ip-address
mapped
object	incoming_request

2022-11-25 16:38:57

(3) More

INFO

FAPI1-BASE-6.2.2-5

ExtractFapiInteractionIdHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id

path	headers.x-fapi-interaction-id
mapped
object	incoming_request

2022-11-25 16:38:57

(3) More

SUCCESS

FAPIBrazilExtractCertificateSubjectFromServerJwks

Extracted subject from the certificate included in server jwks

subjectdn	UID=74e929d9-33b6-4d85-8ba7-c146c867a817,CN=Open Banking Brasil,OU=12345+OU=certman+OU=agoodone,O=ICP-Brasil,C=BR
ou	12345
brazil_software_id	74e929d9-33b6-4d85-8ba7-c146c867a817

2022-11-25 16:38:57

(1) More

SUCCESS

FAPIBrazilEnsureClientCredentialsScopeContainedPayments

The token request which was used to obtain the access token contained 'payments' scope

actual

[
  "payments"
]

2022-11-25 16:38:57

(1) More

SUCCESS

BrazilOB-5.2.2.2

FAPIBrazilExtractPaymentsConsentRequest

Parsed payments consent request

payments_consent_request

{
  "aud": "https://www.certification.openid.net/test-mtls/a/quanto_test/payments/v1/consents",
  "data": {
    "loggedUser": {
      "document": {
        "identification": "04745289952",
        "rel": "CPF"
      }
    },
    "creditor": {
      "name": "Rafael Argenta",
      "cpfCnpj": "04745289952",
      "personType": "PESSOA_NATURAL"
    },
    "payment": {
      "date": "2022-11-25",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "localInstrument": "MANU",
        "creditorAccount": {
          "number": "15525813306",
          "accountType": "CACC",
          "ispb": "10573521",
          "issuer": "0001"
        }
      },
      "type": "PIX"
    }
  },
  "iss": "73d7035b-3c09-40ab-b4c2-900d9f7a5f1f",
  "iat": 1669394337,
  "jti": "13ca0c78-43d8-4c45-bb21-d62de5684704"
}

2022-11-25 16:38:57	SUCCESS BrazilOB-6.1-4	EnsureIncomingRequestContentTypeIsApplicationJwt Client correctly used application/jwt content type

2022-11-25 16:38:57

(1) More

SUCCESS

ExtractXIdempotencyKeyHeader

Found an x-idempotency-key header

idempotency_key

7e88d671-71a0-4ec5-9ce4-163d59e710bd

2022-11-25 16:38:57

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilValidatePaymentConsentRequestAud

aud claim matches the endpoint url

aud	https://www.certification.openid.net/test-mtls/a/quanto_test/payments/v1/consents

2022-11-25 16:38:57

(3) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate

Extracted subject from the mtls client certificate

subjectdn

UID=ce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,2.5.4.5=#130e3432303634353435303030313031,CN=www.quan.to,OU=73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O=Quanto Network Instituicao de Pagamento Ltda.,L=Sao Paulo,ST=Sao Paulo,C=BR

ou

73d7035b-3c09-40ab-b4c2-900d9f7a5f1f

brazil_software_id

ce627cce-afcc-4cfb-acf4-2e05a890780c

2022-11-25 16:38:57

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilEnsureConsentRequestIssEqualsOrganizationId

iss claim in consent request matches organizationId in client certificate

iss	73d7035b-3c09-40ab-b4c2-900d9f7a5f1f

2022-11-25 16:38:57

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilEnsureConsentRequestJtiIsUUIDv4

jti claim in consent request is a UUIDv4

jti	13ca0c78-43d8-4c45-bb21-d62de5684704

2022-11-25 16:38:57

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilValidateConsentRequestIat

iat claim in consent request is valid

iat	1669394337

2022-11-25 16:38:57

(1) More

FAPIBrazilFetchClientOrganizationJwksFromDirectory

Fetching client organization keys

jwks_uri

https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/application.jwks

2022-11-25 16:38:57

(4) More

FAPIBrazilFetchClientOrganizationJwksFromDirectory

HTTP request

request_uri	https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/application.jwks
request_method	GET
request_headers	{ "accept": "text/plain, application/json, application/+json, /*", "content-length": "0" }
request_body

2022-11-25 16:38:57

(4) More

RESPONSE

FAPIBrazilFetchClientOrganizationJwksFromDirectory

HTTP response

response_status_code	200 OK
response_status_text	OK
response_headers	{ "content-type": "application/jwk-set+json", "content-length": "3016", "connection": "keep-alive", "x-amz-replication-status": "COMPLETED", "last-modified": "Wed, 06 Jul 2022 18:48:28 GMT", "x-amz-version-id": "GcwW3SBPdcSzmvatNAPIL0VfzM2KpOcB", "accept-ranges": "bytes", "server": "AmazonS3", "date": "Fri, 25 Nov 2022 16:38:05 GMT", "etag": "\"ae1a9a5325762cc94e7f690b43879db8\"", "vary": "Accept-Encoding", "x-cache": "Hit from cloudfront", "via": "1.1 c8bcdad2cb88c57a5e39f7757d2e9f6a.cloudfront.net (CloudFront)", "x-amz-cf-pop": "MIA3-P2", "x-amz-cf-id": "UMOlAZbNMe9KjF2msz9McVLX2MYtiLmdXw8cJfNqZ6buRwdOrKK5oA\u003d\u003d", "age": "53", "x-xss-protection": "1; mode\u003dblock", "x-frame-options": "SAMEORIGIN", "referrer-policy": "strict-origin-when-cross-origin", "x-content-type-options": "nosniff", "strict-transport-security": "max-age\u003d31536000" }
response_body	{"keys":[{"kty":"RSA","use":"sig","x5c":["MIIG3DCCBcSgAwIBAgIUBVuUPPp/WdKpO4QC/pBFOfGSWxkwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwNjE4MzcwMFoXDTIzMDgwNTE4MzcwMFowgb0xCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMU0wEAYDVQQLEwlJbiBQZXJzb24wEQYDVQQLEwpJQ1AtQnJhc2lsMCYGA1UECxMfRGlyZWN0b3J5IENlcnRpZmljYXRlIEF1dGhvcml0eTEUMBIGA1UEAxMLd3d3LnF1YW4udG8xNDAyBgoJkiaJk/IsZAEBEyQ3M2Q3MDM1Yi0zYzA5LTQwYWItYjRjMi05MDBkOWY3YTVmMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRaEOyU+yoePSoAISLOKDrP6zwMQwPOlfBv+b8nKDI77T2M6NIgrYWuQxBgVnkQjidGyRdjHfSAcqvsK+KOj56QpQwxxLl1R+QYm5lC4XxzGuAX25I6jLuj45uN3tl6TFy05KXHEHHoyqGJ94Mo8eJKZ5WQU0AUdUZ0cYEYutY1ZTrSpMugS+QK4SHfBW9rR/eEvA373SuhSUluK1VeuCI5jJGfPyHyVodw7JtDmHUEqWQgtawIdPJzZArTPOOM1+UTl4c1BBleK8w2Y6dmmmGUQWeXzgJCDTGcnl7GdAZvvsMUsHEDqGs5bOUvlCKQe3mQrpx8va5YOGp6lwn5wl/AgMBAAGjggMdMIIDGTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT0aymC05thUUfM+SMlSyf4hRH54TAfBgNVHSMEGDAWgBSGf1itF/WCtk60BbP7sM4RQ99MvjBMBggrBgEFBQcBAQRAMD4wPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5icjBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9pc3N1ZXIuY3JsMHIGA1UdEQRrMGmgHAYFYEwBAwKgEwwRR3VpbGhlcm1lIFBlcmVpcmGgGQYFYEwBAwOgEAwONDIwNjQ1NDUwMDAxMDGgFgYFYEwBAwSgDQwLMzg4MzkzOTI4NTigFgYFYEwBAwegDQwLMzg4MzkzOTI4NTgwDgYDVR0PAQH/BAQDAgbAMIIBqAYDVR0gBIIBnzCCAZswggGXBgorBgEEAYO6L2QBMIIBhzCCATYGCCsGAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNlIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNpcGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3NzZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlkaWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQgZG9jdW1lbnRzIHRoZXJlaW4uMEsGCCsGAQUFBwIBFj9odHRwOi8vcmVwb3NpdG9yeS5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvcG9saWNpZXMwDQYJKoZIhvcNAQELBQADggEBAGVg3K69GfCqPBnVTGbwfDZ7AQ67aqVDX/8SmqIQIj7EcS9LrKhxXnW3Mqt06wXhnQ81TCCXuS1JUZI+a9jmiAtGKstPwx8CW0xJQNcVs9mXEmjbT4NWcfGDtanLg0HVJCt81bq5AnFMEQdKmc9NvLvwLd7wvTAM3ZNJa0S9vyyWwEx98Vq1oSY2FoPQkePl2GxpRM8R5fNEcW+F8RY51W6c5vPXy8rGhzlgt5vaCvdRjmXZXKwn5r+cijskVun6svdVCiCc0/B17nL4uvERTrMtd2IA5QdGNT0v9RuIlpWfFo7daJrNbtkiTZVoLXMIbMfbD80wB/l11PHZMFoS6/w="],"n":"0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw","e":"AQAB","kid":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE.pem","x5t#256":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE"}]}

2022-11-25 16:38:57

(1) More

FAPIBrazilFetchClientOrganizationJwksFromDirectory

Found JWK set string

jwk_string

{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw","e":"AQAB","kid":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE.pem","x5t#256":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE"}]}

2022-11-25 16:38:57

(1) More

SUCCESS

BrazilOB-6.1-6

FAPIBrazilFetchClientOrganizationJwksFromDirectory

Downloaded and added client organization JWK set to environment

client_organization_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw",
      "e": "AQAB",
      "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE.pem",
      "x5t#256": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE"
    }
  ]
}

2022-11-25 16:38:57

(1) More

SUCCESS

BrazilOB-6.1-6

FAPIBrazilValidateJwtSignatureUsingOrganizationJwks

jwt signature validated

jwt

eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJqd3QifQ.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.d6Bw5stF1ThImrSNti638HB9MZe_gYJk2049n2uUkOt63XJNES8qzSccihSpQzp8jhVyN3V9SyBG6clwLimpbr1de4E9wE1B73G-W6ZWussguVyKxDDDzRCKgZaQH0BqpXk_n9sUHAqGfPKjvkD4ixLpyLfyxBiSzoZMJuAkEHsyLZy4qNXouq0wFJReuv4CU54SYU6I0P20z8inIFAeNqH1cKlOQ_-szWO8NzcP1jaxVkz4CoNLeOa_vBh5FbDi99NbXlPaF-OqllTjofXfgr0VbQdj8xEtuOUo6dMs2gGRws9SqR4aJvN5A_tsW_OfeBR6v5tci50XskUogT5gcw

2022-11-25 16:38:57

(1) More

SUCCESS

FAPI1-BASE-6.2.1-11

CreateFapiInteractionIdIfNeeded

Created new FAPI interaction ID

fapi_interaction_id

62685f66-a7d4-408b-9ce4-29e7165a8ee7

2022-11-25 16:38:57

(3) More

SUCCESS

BrazilOB-5.2.2.2

FAPIBrazilGenerateNewPaymentsConsentResponse

Created consent response

headers

{
  "x-fapi-interaction-id": "62685f66-a7d4-408b-9ce4-29e7165a8ee7"
}

consentId

urn:conformance:oidf:K23o3dobey

consent_response

{
  "data": {
    "consentId": "urn:conformance:oidf:K23o3dobey",
    "creationDateTime": "2022-11-25T16:38:57Z",
    "status": "AWAITING_AUTHORISATION",
    "statusUpdateDateTime": "2022-11-25T16:38:57Z",
    "expirationDateTime": "2022-11-25T18:38:57Z",
    "transactionFromDateTime": "2022-11-25T16:33:57Z",
    "transactionToDateTime": "2022-11-25T18:38:57Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/quanto_testpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-11-25T16:38:57Z"
    },
    "creditor": {
      "name": "Rafael Argenta",
      "cpfCnpj": "04745289952",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "04745289952",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2022-11-25",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "localInstrument": "MANU",
        "creditorAccount": {
          "number": "15525813306",
          "accountType": "CACC",
          "ispb": "10573521",
          "issuer": "0001"
        }
      },
      "type": "PIX"
    }
  },
  "aud": "73d7035b-3c09-40ab-b4c2-900d9f7a5f1f",
  "iat": 1669394337,
  "jti": "ebf4c337-6ddd-4270-a4e7-64d2cb23cf76",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}

2022-11-25 16:38:57

(1) More

SUCCESS

BrazilOB-6.1-2

FAPIBrazilSignPaymentConsentResponse

Signed the payment consent response

signed_consent_response

eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJpc3MiOiI3NGU5MjlkOS0zM2I2LTRkODUtOGJhNy1jMTQ2Yzg2N2E4MTciLCJhdWQiOiI3M2Q3MDM1Yi0zYzA5LTQwYWItYjRjMi05MDBkOWY3YTVmMWYiLCJkYXRhIjp7ImNvbnNlbnRJZCI6InVybjpjb25mb3JtYW5jZTpvaWRmOksyM28zZG9iZXkiLCJleHBpcmF0aW9uRGF0ZVRpbWUiOiIyMDIyLTExLTI1VDE4OjM4OjU3WiIsInRyYW5zYWN0aW9uRnJvbURhdGVUaW1lIjoiMjAyMi0xMS0yNVQxNjozMzo1N1oiLCJ0cmFuc2FjdGlvblRvRGF0ZVRpbWUiOiIyMDIyLTExLTI1VDE4OjM4OjU3WiIsIm1ldGEiOnsidG90YWxSZWNvcmRzIjoxLCJyZXF1ZXN0RGF0ZVRpbWUiOiIyMDIyLTExLTI1VDE2OjM4OjU3WiIsInRvdGFsUGFnZXMiOjF9LCJzdGF0dXNVcGRhdGVEYXRlVGltZSI6IjIwMjItMTEtMjVUMTY6Mzg6NTdaIiwibG9nZ2VkVXNlciI6eyJkb2N1bWVudCI6eyJpZGVudGlmaWNhdGlvbiI6IjA0NzQ1Mjg5OTUyIiwicmVsIjoiQ1BGIn19LCJsaW5rcyI6eyJzZWxmIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0cGF5bWVudHNcL3YxXC9jb25zZW50cyJ9LCJjcmVkaXRvciI6eyJuYW1lIjoiUmFmYWVsIEFyZ2VudGEiLCJjcGZDbnBqIjoiMDQ3NDUyODk5NTIiLCJwZXJzb25UeXBlIjoiUEVTU09BX05BVFVSQUwifSwicGF5bWVudCI6eyJkYXRlIjoiMjAyMi0xMS0yNSIsImFtb3VudCI6IjAuMDEiLCJjdXJyZW5jeSI6IkJSTCIsImRldGFpbHMiOnsibG9jYWxJbnN0cnVtZW50IjoiTUFOVSIsImNyZWRpdG9yQWNjb3VudCI6eyJudW1iZXIiOiIxNTUyNTgxMzMwNiIsImFjY291bnRUeXBlIjoiQ0FDQyIsImlzcGIiOiIxMDU3MzUyMSIsImlzc3VlciI6IjAwMDEifX0sInR5cGUiOiJQSVgifSwiY3JlYXRpb25EYXRlVGltZSI6IjIwMjItMTEtMjVUMTY6Mzg6NTdaIiwic3RhdHVzIjoiQVdBSVRJTkdfQVVUSE9SSVNBVElPTiJ9LCJpYXQiOjE2NjkzOTQzMzcsImp0aSI6ImViZjRjMzM3LTZkZGQtNDI3MC1hNGU3LTY0ZDJjYjIzY2Y3NiJ9.aqFfWT5ESwYSDgpTAPrTF8Q2hb1R7lIAYezHdF9QKQOgyjVFSzQRtTYF-WULILi-CPggsd6CfSNDoGiqnNaAMEHCXz5ONEWHJB1P8i9RyaZMQ7J5MzV9EpsbnGP6WH5BG2Ymy-SJ95ssZI2Qs-I3grhTurZk2ZIJpSABQ53oR16d6wrlq2XI0rQIecHuIo1dfmVP9VDK48nJ58sIFGUErKhcUiu3b1MHQCRSxeHeNgHuY58FqZh-fm3SJxREC4o7yfr4WdNrhWwRV9z5OBrnig8sd8WEiGjYtsaecb1HEcxs3rQzwjfpp2SUyIPDCh10hU6Wfr_Mk6727c5y4hTAHA

2022-11-25 16:38:57		ClearAccessTokenFromRequest Removed incoming access token from environment

2022-11-25 16:38:57

(4) More

OUTGOING

fapi1-advanced-final-client-test-invalid-secondary-aud

Response to HTTP request to test instance QkTgjI2i4acRzKB

outgoing_status_code	201
outgoing_headers	{ "x-fapi-interaction-id": [ "62685f66-a7d4-408b-9ce4-29e7165a8ee7" ], "Content-Type": [ "application/jwt" ] }
outgoing_body	eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.aqFfWT5ESwYSDgpTAPrTF8Q2hb1R7lIAYezHdF9QKQOgyjVFSzQRtTYF-WULILi-CPggsd6CfSNDoGiqnNaAMEHCXz5ONEWHJB1P8i9RyaZMQ7J5MzV9EpsbnGP6WH5BG2Ymy-SJ95ssZI2Qs-I3grhTurZk2ZIJpSABQ53oR16d6wrlq2XI0rQIecHuIo1dfmVP9VDK48nJ58sIFGUErKhcUiu3b1MHQCRSxeHeNgHuY58FqZh-fm3SJxREC4o7yfr4WdNrhWwRV9z5OBrnig8sd8WEiGjYtsaecb1HEcxs3rQzwjfpp2SUyIPDCh10hU6Wfr_Mk6727c5y4hTAHA
outgoing_path	payments/v1/consents

2022-11-25 16:38:57

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-secondary-aud

Incoming HTTP request to /test/a/quanto_test/.well-known/openid-configuration

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "accept-encoding": "gzip", "connection": "close" }
incoming_path	/test/a/quanto_test/.well-known/openid-configuration
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-25 16:38:57

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

2022-11-25 16:38:57

(4) More

OUTGOING

fapi1-advanced-final-client-test-invalid-secondary-aud

Response to HTTP request to test instance QkTgjI2i4acRzKB

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "issuer": "https://www.certification.openid.net/test/a/quanto_test/", "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize", "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token", "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks", "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register", "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo", "mtls_endpoint_aliases": { "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token", "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register", "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo" }, "request_parameter_supported": true, "grant_types_supported": [ "authorization_code", "implicit", "client_credentials", "refresh_token" ], "claims_parameter_supported": true, "request_object_encryption_alg_values_supported": [ "RSA-OAEP" ], "request_object_encryption_enc_values_supported": [ "A256GCM" ], "claims_supported": [ "cpf", "cnpj", "acr" ], "acr_values_supported": [ "urn:brasil:openbanking:loa2", "urn:brasil:openbanking:loa3" ], "request_object_signing_alg_values_supported": [ "PS256" ], "scopes_supported": [ "openid", "phone", "profile", "email", "address", "offline_access", "consents", "resources", "payments" ], "id_token_signing_alg_values_supported": [ "PS256" ], "tls_client_certificate_bound_access_tokens": true, "token_endpoint_auth_methods_supported": [ "tls_client_auth" ], "response_types_supported": [ "code id_token" ], "token_endpoint_auth_signing_alg_values_supported": [ "PS256" ] }
outgoing_path	.well-known/openid-configuration

2022-11-25 16:38:57

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-secondary-aud

Incoming HTTP request to /test/a/quanto_test/jwks

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "accept-encoding": "gzip", "connection": "close" }
incoming_path	/test/a/quanto_test/jwks
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-25 16:38:57

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

2022-11-25 16:38:57

(4) More

OUTGOING

fapi1-advanced-final-client-test-invalid-secondary-aud

Response to HTTP request to test instance QkTgjI2i4acRzKB

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "keys": [ { "kty": "RSA", "e": "AQAB", "use": "sig", "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM", "x5c": [ "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\u003d\u003d" ], "alg": "PS256", "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w" }, { "kty": "RSA", "e": "AQAB", "use": "enc", "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996", "alg": "RSA-OAEP", "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q" } ] }
outgoing_path	jwks

2022-11-25 16:38:59

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-secondary-aud

Incoming HTTP request to /test/a/quanto_test/authorize

incoming_headers	{ "host": "www.certification.openid.net", "upgrade-insecure-requests": "1", "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36", "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/;q\u003d0.8", "sec-gpc": "1", "accept-language": "pt-BR,pt;q\u003d0.7", "sec-fetch-site": "none", "sec-fetch-mode": "navigate", "sec-fetch-user": "?1", "sec-fetch-dest": "document", "accept-encoding": "gzip, deflate, br", "cookie": "JSESSIONID\u003d577B56F42CC024CF5492E8DE74D6A9FE", "connection": "close" }
incoming_path	/test/a/quanto_test/authorize
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{ "client_id": "unNmFht8lVM_R29e0hYVI", "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index", "request": "eyJhbGciOiJSU0EtT0FFUCIsImN0eSI6IkpXVCIsImVuYyI6IkEyNTZHQ00iLCJraWQiOiIwZmU1MDJkZC0xNGYwLTRmNDUtODBmOS1mZWI5YTIxNmY5OTYifQ.E2f3_5yN-VeXI-rBEcVmlCjiBY5s0aFGnPjm4JFKr--nWkXTXT2jiGS6P9Df6DaNd7p0IcAVdyOTu15T8mEqARILbcpRx9F8MC5xykv4w4fOQiOd9AuRsFn-1mkp9lMypYZYWfOfCaSKshVq72GWcYok4l5n8UhhXc3oBQYWUMEWin-yORpUjYGxEeAoA4NdsWDabXt-szlEOiDaXLzfnJpFVINaWJPQrlgrz0uChDlb13mqWaziAiWnV1qysVnIqrxXgy-GYKGi7-6YfhNKkVTturlYFOVMRnYsYTf6O8838Gp6ij_zBmcWzoaMoOuskhfwXsQKm8FhKvy1PPc83w.0Oz6_ZND2sVtyWK2.W17rcfByFems2jUuEtjz3pwOK5P-N6fGAgNVXd0J9xkW9hBhHifyB_Big-5PMuVCHsEr5szpTSM5QweeMbia9L7y1lgvPzqDnq8Ji2VADEZV7u7nKPKcbnJS5M5_ble0a1OVgVitp8vuyLQaaaitnjrMiaJdum7RpHKGP0RyU_uY3u6iWSdWVRkZ5HjBq-QwYrWObhSI-9Uy-weFq4VMrgeFP0std--5IAjEm0XXDwU6HOg8FDPn2WL94w4fZkL4ouvhQW9ndq6B8JADPGsDGFk6X2_daKTmDtBV10y2KcERVO48dVRz5Oad8Jg2irTnulJqOFanL5mmj8Uv2ihy9VHBO8hujIeGPnmxKXqUBAIX0osZwOlPM1SeFhL7VkGndSFzOx76YdeSNTsQP91Y4XZoeRLuAFurUYGOhZSlHVe9IcKc1EC-e31vgiXZLJ5DalYcLwlswtZ9E7Ly8cfaQiIIJ-FbgRjEtOdPM70PbjAqoXGYlMG7DHZ9EKMfDlzhXKioIVMjTElhZTuRkPgjtI_VfPQksf6KR9VFB7JsnB0yldo0GsG0eQvo_m8JUKTu_SZCBE8i6H7s-AKBL8uPnWve5SmZAfAUXbXdF8dq0bKxBN-CPs0sBgYRVscbovjW6BEremce6ALBeO4UwciHFIHiZxBJUbA6kzmArm7s58H6SCHZ9Xe2MMnwYrj4Hhx_1TGSbkCPtYOh8nm9weh9erGTIzq5pw_eOXdZTQiqNXSVUZiVJa6MPzCKVXn7KziHCvxaAjb86apCooafoYg9kDbtSQOlEI2VjW3HFfrcKrYxjgpr0TR7nMrm8I5f32NfNbAK4DvoVi2Io9VElHPz3lXmBxABjICriA-yzwyD-J6zeIYfG_kBSF1n_NYaoLHKfYPGTXm1oJ-z6cmc0Wa-StaO3JhReRXKNrDAOYUQlh-wMXcJCsCEvGAz8nQSHHW27sVNSfFYnjfSOO6vOsH1SQzVxt79DKOrFcbY7mPswkiM66XeYvSEqjJnEma1Hutr9o_OlSar3mBxZmNgsVxo43e7-GlhIzJTWv1SQtB_Vsk7xeWDE7Q9ygBtG4AX6RQcjswLGsamSIfJ2NvoEnFkLKm3b26aH0AzX0nY8rXc7yOTykIW_Cbt9wP08oKlw36oPEMHqGij_3kkR4rMho7XMmIVd83p08iSu7voWggVQukEIgCzs7fBaQW8ocMfYl4BxEKr63sUilopDV6BOuimfS_w0dhAJuiRaFJz3zUmeOkDj8dvu89FoG1gs42aTtjZT7Txmf3-HlshyPaMoN8r6u7J7ZNDqVrCA8VKbEkp55lh1Q-SHfEfEKiJjfLHQr7GCmoi40J-TuYMhw4tmt32GT-7jJ2vRorIWOMu1oeDVVeJFmAwb_9t46IezZtTIihrkE2seRKkhTNs7XGOzI6vcykasFmaQY1j8Y47I5PUQHekXFH5F-B9xEXOr5OjeOfrFXX7I0Xd8Z7E9aXVqPYjvUAGk40rrq-m1zgs749ZhrqSoOhV13iU6cX_FhH3tQeFqx5_TLok_cVM0pPH7zcQfe7iH7LyIOdgOUUfxbRdUZ-s6druGCYvYnh-d6_I2qNuEV2wgS7oTRMZXmXEJ1u9Z9istQgESq2bJ7iZoSReERRVrkqa_OwqXXxqxWT-IfxxReVzqjbQm2ev57z4o44JW9c26qgj6WkKNr28lI5AQn15veAeFmcA9O2fzZpwQw_2sbIj_DmF3lmxhWOUNcv5r8vSWYWCPr4L5N_OzAFd8tSeJae9I9U61q-tLeu19HDbdUEEqUPaYCsXMGakyKbcWAIEmuEze4P_sk9cE4DAblnHn8EDw-bpQrCXxuZecmuGS6V_EkxNYKRh1D6iycwzNFFnDxvRWU__iWR3PCgMLrU-3Q98H5OOLRhzI96hLPFHCUqwZ2WMUQjvUT9N4Wg.pKA09oyIjPRosQfAqKY1Mw", "response_type": "code id_token", "scope": "openid consent:urn:conformance:oidf:K23o3dobey payments", "state": "daae1c4cef834529f578eba5c1b0ab520c0735d2b0beee3b80daf59b2ab0b2f7" }
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES256-GCM-SHA384
incoming_body_json

2022-11-25 16:38:59

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES256-GCM-SHA384
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

Authorization endpoint

2022-11-25 16:38:59

(1) More

SUCCESS

FAPI1-ADV-5.2.2-10

ExtractRequestObject

Parsed request object

request_object

{
  "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9xdWFudG9fdGVzdC8iXSwiY2xhaW1zIjp7ImlkX3Rva2VuIjp7ImFjciI6eyJlc3NlbnRpYWwiOnRydWUsInZhbHVlcyI6WyJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiXX0sImNwZiI6eyJlc3NlbnRpYWwiOnRydWUsInZhbHVlIjoiMDQ3NDUyODk5NTIifX19LCJjbGllbnRfaWQiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJjb2RlX2NoYWxsZW5nZSI6IjRqeEZyQUFnZm1sMXdKRjNOTENPb1JMRlVJMGZVYWo1cnVBZXRlQTNfNmMiLCJjb2RlX2NoYWxsZW5nZV9tZXRob2QiOiJTMjU2IiwiZXhwIjoxNjY5Mzk1NTM3LCJpYXQiOjE2NjkzOTQzMzcsImlzcyI6InVuTm1GaHQ4bFZNX1IyOWUwaFlWSSIsImp0aSI6ImNmZmIyMTE2LThlYmQtNDViMC04NmFkLTc0MDJmYWM1MTJiMyIsIm5iZiI6MTY2OTM5NDMzNywibm9uY2UiOiJkMmFkNjBhZi01Y2VkLTQ0OTAtODIxYS1iZDZkNWYyMGRiZjMiLCJyZWRpcmVjdF91cmkiOiJodHRwczovL2FwaS5wbGF0Zm9ybS5zYnguY29udGFxdWFudG8ubmV0L29wYi1hcGkvaW5kZXgiLCJyZXNwb25zZV90eXBlIjoiY29kZSBpZF90b2tlbiIsInNjb3BlIjoib3BlbmlkIGNvbnNlbnQ6dXJuOmNvbmZvcm1hbmNlOm9pZGY6SzIzbzNkb2JleSBwYXltZW50cyIsInN0YXRlIjoiZGFhZTFjNGNlZjgzNDUyOWY1NzhlYmE1YzFiMGFiNTIwYzA3MzVkMmIwYmVlZTNiODBkYWY1OWIyYWIwYjJmNyJ9.pT4a3-J1J-K3NDSXitpxsDZzlFn7B3miq_mkYOQj-8hdaQMcK9hipFZdJC29TtIFtVnq7L6Fig0v-NtiT5nAkzWO3h44gATB_WJz_KlPeiv_UejPkA4uHxaiRWmDbFXr3YSHFSUlkWrjvR9Y0nKvp4xNiQGAJPVBpb8DjTOhRVH5S22tMnjDQIXXNto5Bglxp4XQSu9STxAjgsbKic_Z32FRG0tweW3exCTSXvLqVYwdoazX84DKRso_Xu3E7EA3h6SQ3JY6e0qbGAEf9AlRtkgsgComnbrdXPJ99m5foufQhl7wVFhYhCsj1SApazpRWAx9RqpIZxix4lmk78QCUw",
  "header": {
    "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "iss": "unNmFht8lVM_R29e0hYVI",
    "response_type": "code id_token",
    "code_challenge_method": "S256",
    "nonce": "d2ad60af-5ced-4490-821a-bd6d5f20dbf3",
    "client_id": "unNmFht8lVM_R29e0hYVI",
    "aud": "https://www.certification.openid.net/test/a/quanto_test/",
    "nbf": 1669394337,
    "scope": "openid consent:urn:conformance:oidf:K23o3dobey payments",
    "claims": {
      "id_token": {
        "acr": {
          "values": [
            "urn:brasil:openbanking:loa3"
          ],
          "essential": true
        },
        "cpf": {
          "value": "04745289952",
          "essential": true
        }
      }
    },
    "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
    "state": "daae1c4cef834529f578eba5c1b0ab520c0735d2b0beee3b80daf59b2ab0b2f7",
    "exp": 1669395537,
    "iat": 1669394337,
    "code_challenge": "4jxFrAAgfml1wJF3NLCOoRLFUI0fUaj5ruAeteA3_6c",
    "jti": "cffb2116-8ebd-45b0-86ad-7402fac512b3"
  },
  "jwe_header": {
    "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
    "cty": "JWT",
    "enc": "A256GCM",
    "alg": "RSA-OAEP"
  }
}

2022-11-25 16:38:59

(1) More

SUCCESS

BrazilOB-5.2.3-3

EnsureRequestObjectWasEncrypted

Request object was encrypted

jwe_header

{
  "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
  "cty": "JWT",
  "enc": "A256GCM",
  "alg": "RSA-OAEP"
}

2022-11-25 16:38:59

(1) More

SUCCESS

BrazilOB-6.1.1-1

FAPIBrazilEnsureRequestObjectEncryptedUsingRSAOAEPA256GCM

Request object was encrypted using RSA-OAEP and A256GCM

jwe_header

{
  "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
  "cty": "JWT",
  "enc": "A256GCM",
  "alg": "RSA-OAEP"
}

2022-11-25 16:38:59

(1) More

SUCCESS

OIDCC-10.2 OIDCC-10.2.1

ValidateEncryptedRequestObjectHasKid

kid was found in the encrypted request object header

kid	0fe502dd-14f0-4f45-80f9-feb9a216f996

2022-11-25 16:38:59

(1) More

SUCCESS

CreateEffectiveAuthorizationRequestParameters

Merged http request parameters with request object claims

effective_authorization_endpoint_request

{
  "client_id": "unNmFht8lVM_R29e0hYVI",
  "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
  "request": "eyJhbGciOiJSU0EtT0FFUCIsImN0eSI6IkpXVCIsImVuYyI6IkEyNTZHQ00iLCJraWQiOiIwZmU1MDJkZC0xNGYwLTRmNDUtODBmOS1mZWI5YTIxNmY5OTYifQ.E2f3_5yN-VeXI-rBEcVmlCjiBY5s0aFGnPjm4JFKr--nWkXTXT2jiGS6P9Df6DaNd7p0IcAVdyOTu15T8mEqARILbcpRx9F8MC5xykv4w4fOQiOd9AuRsFn-1mkp9lMypYZYWfOfCaSKshVq72GWcYok4l5n8UhhXc3oBQYWUMEWin-yORpUjYGxEeAoA4NdsWDabXt-szlEOiDaXLzfnJpFVINaWJPQrlgrz0uChDlb13mqWaziAiWnV1qysVnIqrxXgy-GYKGi7-6YfhNKkVTturlYFOVMRnYsYTf6O8838Gp6ij_zBmcWzoaMoOuskhfwXsQKm8FhKvy1PPc83w.0Oz6_ZND2sVtyWK2.W17rcfByFems2jUuEtjz3pwOK5P-N6fGAgNVXd0J9xkW9hBhHifyB_Big-5PMuVCHsEr5szpTSM5QweeMbia9L7y1lgvPzqDnq8Ji2VADEZV7u7nKPKcbnJS5M5_ble0a1OVgVitp8vuyLQaaaitnjrMiaJdum7RpHKGP0RyU_uY3u6iWSdWVRkZ5HjBq-QwYrWObhSI-9Uy-weFq4VMrgeFP0std--5IAjEm0XXDwU6HOg8FDPn2WL94w4fZkL4ouvhQW9ndq6B8JADPGsDGFk6X2_daKTmDtBV10y2KcERVO48dVRz5Oad8Jg2irTnulJqOFanL5mmj8Uv2ihy9VHBO8hujIeGPnmxKXqUBAIX0osZwOlPM1SeFhL7VkGndSFzOx76YdeSNTsQP91Y4XZoeRLuAFurUYGOhZSlHVe9IcKc1EC-e31vgiXZLJ5DalYcLwlswtZ9E7Ly8cfaQiIIJ-FbgRjEtOdPM70PbjAqoXGYlMG7DHZ9EKMfDlzhXKioIVMjTElhZTuRkPgjtI_VfPQksf6KR9VFB7JsnB0yldo0GsG0eQvo_m8JUKTu_SZCBE8i6H7s-AKBL8uPnWve5SmZAfAUXbXdF8dq0bKxBN-CPs0sBgYRVscbovjW6BEremce6ALBeO4UwciHFIHiZxBJUbA6kzmArm7s58H6SCHZ9Xe2MMnwYrj4Hhx_1TGSbkCPtYOh8nm9weh9erGTIzq5pw_eOXdZTQiqNXSVUZiVJa6MPzCKVXn7KziHCvxaAjb86apCooafoYg9kDbtSQOlEI2VjW3HFfrcKrYxjgpr0TR7nMrm8I5f32NfNbAK4DvoVi2Io9VElHPz3lXmBxABjICriA-yzwyD-J6zeIYfG_kBSF1n_NYaoLHKfYPGTXm1oJ-z6cmc0Wa-StaO3JhReRXKNrDAOYUQlh-wMXcJCsCEvGAz8nQSHHW27sVNSfFYnjfSOO6vOsH1SQzVxt79DKOrFcbY7mPswkiM66XeYvSEqjJnEma1Hutr9o_OlSar3mBxZmNgsVxo43e7-GlhIzJTWv1SQtB_Vsk7xeWDE7Q9ygBtG4AX6RQcjswLGsamSIfJ2NvoEnFkLKm3b26aH0AzX0nY8rXc7yOTykIW_Cbt9wP08oKlw36oPEMHqGij_3kkR4rMho7XMmIVd83p08iSu7voWggVQukEIgCzs7fBaQW8ocMfYl4BxEKr63sUilopDV6BOuimfS_w0dhAJuiRaFJz3zUmeOkDj8dvu89FoG1gs42aTtjZT7Txmf3-HlshyPaMoN8r6u7J7ZNDqVrCA8VKbEkp55lh1Q-SHfEfEKiJjfLHQr7GCmoi40J-TuYMhw4tmt32GT-7jJ2vRorIWOMu1oeDVVeJFmAwb_9t46IezZtTIihrkE2seRKkhTNs7XGOzI6vcykasFmaQY1j8Y47I5PUQHekXFH5F-B9xEXOr5OjeOfrFXX7I0Xd8Z7E9aXVqPYjvUAGk40rrq-m1zgs749ZhrqSoOhV13iU6cX_FhH3tQeFqx5_TLok_cVM0pPH7zcQfe7iH7LyIOdgOUUfxbRdUZ-s6druGCYvYnh-d6_I2qNuEV2wgS7oTRMZXmXEJ1u9Z9istQgESq2bJ7iZoSReERRVrkqa_OwqXXxqxWT-IfxxReVzqjbQm2ev57z4o44JW9c26qgj6WkKNr28lI5AQn15veAeFmcA9O2fzZpwQw_2sbIj_DmF3lmxhWOUNcv5r8vSWYWCPr4L5N_OzAFd8tSeJae9I9U61q-tLeu19HDbdUEEqUPaYCsXMGakyKbcWAIEmuEze4P_sk9cE4DAblnHn8EDw-bpQrCXxuZecmuGS6V_EkxNYKRh1D6iycwzNFFnDxvRWU__iWR3PCgMLrU-3Q98H5OOLRhzI96hLPFHCUqwZ2WMUQjvUT9N4Wg.pKA09oyIjPRosQfAqKY1Mw",
  "response_type": "code id_token",
  "scope": "openid consent:urn:conformance:oidf:K23o3dobey payments",
  "state": "daae1c4cef834529f578eba5c1b0ab520c0735d2b0beee3b80daf59b2ab0b2f7",
  "iss": "unNmFht8lVM_R29e0hYVI",
  "code_challenge_method": "S256",
  "nonce": "d2ad60af-5ced-4490-821a-bd6d5f20dbf3",
  "aud": "https://www.certification.openid.net/test/a/quanto_test/",
  "nbf": 1669394337,
  "claims": {
    "id_token": {
      "acr": {
        "values": [
          "urn:brasil:openbanking:loa3"
        ],
        "essential": true
      },
      "cpf": {
        "value": "04745289952",
        "essential": true
      }
    }
  },
  "exp": 1669395537,
  "iat": 1669394337,
  "code_challenge": "4jxFrAAgfml1wJF3NLCOoRLFUI0fUaj5ruAeteA3_6c",
  "jti": "cffb2116-8ebd-45b0-86ad-7402fac512b3"
}

2022-11-25 16:38:59

(1) More

SUCCESS

FAPI1-ADV-8.6

FAPIValidateRequestObjectSigningAlg

Request object was signed with a permitted algorithm

alg

PS256

2022-11-25 16:38:59

(1) More

SUCCESS

OIDCC-5.5.1.1 FAPI1-ADV-5.2.3-5 BrazilOB-5.2.2.4

FAPIBrazilValidateRequestObjectIdTokenACRClaims

Acr value in request object is as expected

received

[
  "urn:brasil:openbanking:loa3"
]

2022-11-25 16:38:59

(1) More

SUCCESS

RFC7519-4.1.4 FAPI1-ADV-5.2.2-13

FAPIValidateRequestObjectExp

Request object contains a valid exp claim, expiry time

exp	"Nov 25, 2022, 4:58:57 PM"

2022-11-25 16:38:59

(2) More

SUCCESS

FAPI1-ADV-5.2.2-17

FAPI1AdvancedValidateRequestObjectNBFClaim

nbf claim is valid

nbf	"Nov 25, 2022, 4:38:57 PM"
now	"Nov 25, 2022, 4:38:59 PM"

2022-11-25 16:38:59		ValidateRequestObjectClaims Request object does not contain a max_age claim

2022-11-25 16:38:59	SUCCESS	ValidateRequestObjectClaims Request object claims passed all validation checks

2022-11-25 16:38:59

(1) More

SUCCESS

OIDCC-13.3

EnsureNumericRequestObjectClaimsAreNotNull

None of the claims expected to have numeric values, have null values

numeric_claims

[
  "max_age"
]

2022-11-25 16:38:59	SUCCESS OIDCC-6.1	EnsureRequestObjectDoesNotContainRequestOrRequestUri Request object does not contain request or request_uri

2022-11-25 16:38:59	SUCCESS JAR-10.8	EnsureRequestObjectDoesNotContainSubWithClientId Request object does not contain Client Id in sub

2022-11-25 16:38:59

(3) More

SUCCESS

FAPI1-ADV-5.2.2-1

ValidateRequestObjectSignature

Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg

request_object	eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.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.pT4a3-J1J-K3NDSXitpxsDZzlFn7B3miq_mkYOQj-8hdaQMcK9hipFZdJC29TtIFtVnq7L6Fig0v-NtiT5nAkzWO3h44gATB_WJz_KlPeiv_UejPkA4uHxaiRWmDbFXr3YSHFSUlkWrjvR9Y0nKvp4xNiQGAJPVBpb8DjTOhRVH5S22tMnjDQIXXNto5Bglxp4XQSu9STxAjgsbKic_Z32FRG0tweW3exCTSXvLqVYwdoazX84DKRso_Xu3E7EA3h6SQ3JY6e0qbGAEf9AlRtkgsgComnbrdXPJ99m5foufQhl7wVFhYhCsj1SApazpRWAx9RqpIZxix4lmk78QCUw
request_object_signing_alg	PS256
jwk	{"kty":"RSA","e":"AQAB","use":"sig","kid":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE","alg":"PS256","n":"0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw"}

2022-11-25 16:38:59

(1) More

SUCCESS

EnsureMatchingRedirectUriInRequestObject

Redirect URI matched

actual

https://api.platform.sbx.contaquanto.net/opb-api/index

2022-11-25 16:38:59

(2) More

SUCCESS

OIDCC-6.1 FAPI1-ADV-5.2.3-9

EnsureRequiredAuthorizationRequestParametersMatchRequestObject

Required http request parameters match request object claims

response_type	code id_token
client_id	unNmFht8lVM_R29e0hYVI

2022-11-25 16:38:59	SUCCESS OIDCC-6.2 OIDCC-6.1	EnsureOptionalAuthorizationRequestParametersMatchRequestObject All http request parameters and request object claims match

2022-11-25 16:38:59

(2) More

SUCCESS

OIDCC-6.2 OIDCC-6.1

EnsureAuthorizationHttpRequestContainsOpenIDScope

Found 'openid' in scope http request parameter

actual	[ "openid", "consent:urn:conformance:oidf:K23o3dobey", "payments" ]
expected	openid

2022-11-25 16:38:59

(1) More

SUCCESS

ExtractRequestedScopes

Requested scopes

scope

openid consent:urn:conformance:oidf:K23o3dobey payments

2022-11-25 16:38:59

(2) More

SUCCESS

FAPIBrazilValidateConsentScope

Found consent scope in request

actual	[ "openid", "consent:urn:conformance:oidf:K23o3dobey", "payments" ]
expected	consent:urn:conformance:oidf:K23o3dobey

2022-11-25 16:38:59

(1) More

SUCCESS

EnsureScopeContainsPayments

Found payments scope in request

actual

[
  "openid",
  "consent:urn:conformance:oidf:K23o3dobey",
  "payments"
]

2022-11-25 16:38:59

(1) More

SUCCESS

FAPI1-ADV-5.2.2-1 OIDCC-6.1

EnsureResponseTypeIsCodeIdToken

Response type is expected value

expected

code id_token

2022-11-25 16:38:59

(2) More

SUCCESS

FAPI1-BASE-5.2.3-7

EnsureOpenIDInScopeRequest

Found 'openid' scope in request

actual	[ "openid", "consent:urn:conformance:oidf:K23o3dobey", "payments" ]
expected	openid

2022-11-25 16:38:59

(1) More

SUCCESS

OIDCC-3.1.2.1

EnsureMatchingClientId

Client ID matched

client_id

unNmFht8lVM_R29e0hYVI

2022-11-25 16:38:59

(1) More

SUCCESS

CreateAuthorizationCode

Created authorization code

authorization_code

Uh5Y6fUyLsH2F8ObpaIDhlgkNVzkifNk

2022-11-25 16:38:59

(1) More

SUCCESS

FAPI1-BASE-5.2.2.2

ExtractNonceFromAuthorizationRequest

Extracted nonce

nonce

d2ad60af-5ced-4490-821a-bd6d5f20dbf3

2022-11-25 16:38:59

(1) More

SUCCESS

OIDCC-3.3.2.11

CalculateCHash

Successful c_hash encoding

c_hash

h8HcvKmdf1CWw6ti70qRNg

2022-11-25 16:38:59

(1) More

SUCCESS

FAPI1-ADV-5.2.2.1-5

CalculateSHash

Successful s_hash encoding

s_hash

qsSTnzbbMwm7BVVBgp0rOw

2022-11-25 16:38:59

(6) More

SUCCESS

GenerateIdTokenClaims

Created ID Token Claims

iss	https://www.certification.openid.net/test/a/quanto_test/
sub	user-subject-1234531
aud	unNmFht8lVM_R29e0hYVI
nonce	d2ad60af-5ced-4490-821a-bd6d5f20dbf3
iat	1669394339
exp	1669394639

2022-11-25 16:38:59

(1) More

SUCCESS

BrazilOB-5.2.2.2 BrazilOB-5.2.2.3

FAPIBrazilAddCPFAndCPNJToIdTokenClaims

Added claims to id_token claims

id_token_claims

{
  "iss": "https://www.certification.openid.net/test/a/quanto_test/",
  "sub": "user-subject-1234531",
  "aud": "unNmFht8lVM_R29e0hYVI",
  "nonce": "d2ad60af-5ced-4490-821a-bd6d5f20dbf3",
  "iat": 1669394339,
  "exp": 1669394639,
  "cpf": "04745289952"
}

2022-11-25 16:38:59

(2) More

SUCCESS

OIDCC-3.3.2.11

AddCHashToIdTokenClaims

Added c_hash to ID token claims

c_hash

h8HcvKmdf1CWw6ti70qRNg

id_token_claims

{
  "iss": "https://www.certification.openid.net/test/a/quanto_test/",
  "sub": "user-subject-1234531",
  "aud": "unNmFht8lVM_R29e0hYVI",
  "nonce": "d2ad60af-5ced-4490-821a-bd6d5f20dbf3",
  "iat": 1669394339,
  "exp": 1669394639,
  "cpf": "04745289952",
  "c_hash": "h8HcvKmdf1CWw6ti70qRNg"
}

2022-11-25 16:38:59

(2) More

SUCCESS

FAPI1-ADV-5.2.2.1-5

AddSHashToIdTokenClaims

Added s_hash to ID token claims

s_hash

qsSTnzbbMwm7BVVBgp0rOw

id_token_claims

{
  "iss": "https://www.certification.openid.net/test/a/quanto_test/",
  "sub": "user-subject-1234531",
  "aud": "unNmFht8lVM_R29e0hYVI",
  "nonce": "d2ad60af-5ced-4490-821a-bd6d5f20dbf3",
  "iat": 1669394339,
  "exp": 1669394639,
  "cpf": "04745289952",
  "c_hash": "h8HcvKmdf1CWw6ti70qRNg",
  "s_hash": "qsSTnzbbMwm7BVVBgp0rOw"
}

2022-11-25 16:38:59

(1) More

INFO

OIDCC-3.3.2.11

AddAtHashToIdTokenClaims

Skipped evaluation due to missing required string: at_hash

expected

at_hash

2022-11-25 16:38:59

(2) More

SUCCESS

OIDCC-3.1.3.7-3

AddUntrustedSecondAudValueToIdToken

Added a second, invalid aud value in ID token claims

aud

[
  "unNmFht8lVM_R29e0hYVI",
  "unNmFht8lVM_R29e0hYVI1"
]

id_token_claims

{
  "iss": "https://www.certification.openid.net/test/a/quanto_test/",
  "sub": "user-subject-1234531",
  "aud": [
    "unNmFht8lVM_R29e0hYVI",
    "unNmFht8lVM_R29e0hYVI1"
  ],
  "nonce": "d2ad60af-5ced-4490-821a-bd6d5f20dbf3",
  "iat": 1669394339,
  "exp": 1669394639,
  "cpf": "04745289952",
  "c_hash": "h8HcvKmdf1CWw6ti70qRNg",
  "s_hash": "qsSTnzbbMwm7BVVBgp0rOw"
}

2022-11-25 16:38:59

(2) More

SUCCESS

OIDCC-3.1.3.7-12

FAPIBrazilAddACRClaimToIdTokenClaims

Added acr value to id_token_claims

acr_value

urn:brasil:openbanking:loa3

claims

{
  "iss": "https://www.certification.openid.net/test/a/quanto_test/",
  "sub": "user-subject-1234531",
  "aud": [
    "unNmFht8lVM_R29e0hYVI",
    "unNmFht8lVM_R29e0hYVI1"
  ],
  "nonce": "d2ad60af-5ced-4490-821a-bd6d5f20dbf3",
  "iat": 1669394339,
  "exp": 1669394639,
  "cpf": "04745289952",
  "c_hash": "h8HcvKmdf1CWw6ti70qRNg",
  "s_hash": "qsSTnzbbMwm7BVVBgp0rOw",
  "acr": "urn:brasil:openbanking:loa3"
}

2022-11-25 16:38:59

(1) More

SUCCESS

SignIdToken

Signed the ID token

id_token

eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6WyJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJ1bk5tRmh0OGxWTV9SMjllMGhZVkkxIl0sImNfaGFzaCI6Img4SGN2S21kZjFDV3c2dGk3MHFSTmciLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJxc1NUbnpiYk13bTdCVlZCZ3Awck93IiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0XC8iLCJjcGYiOiIwNDc0NTI4OTk1MiIsImV4cCI6MTY2OTM5NDYzOSwibm9uY2UiOiJkMmFkNjBhZi01Y2VkLTQ0OTAtODIxYS1iZDZkNWYyMGRiZjMiLCJpYXQiOjE2NjkzOTQzMzl9.OTfz0KGD47lEl79jXHoV-pP5JdNGXOIcwjo45nPDiIJs0pL6IHMLk1RssVU7Ne45G-Rd670b83rNkkMzieBVJCLicYxSBDuktSFqPPAKh74AvxHO6uZ_wXmzvtPL7akbE-TED0jWqCa9OuNtShJpo_sZasCpek8dHhr0PwSw_9O3_seXNz1BWMq4bdL604HbrfeYMHIKogJfVQ23dYDs3K2woqkYxPY3-YOjC_GEcuO4r0At1D1b0WerC9WZXDLPvPAmGQIYYVYxnrYXtlBuR0ezXelf0C3RLRgaHAasCAIG7-4ut5Ogx_MfeC-ccR8zd7nApUlxZOh6Kr-sDBEeww

2022-11-25 16:38:59

(1) More

SUCCESS

FAPIBrazilChangeConsentStatusToAuthorized

Changed consent status to AUTHORISED

consent

{
  "data": {
    "consentId": "urn:conformance:oidf:K23o3dobey",
    "creationDateTime": "2022-11-25T16:38:57Z",
    "status": "AUTHORISED",
    "statusUpdateDateTime": "2022-11-25T16:38:59Z",
    "expirationDateTime": "2022-11-25T18:38:57Z",
    "transactionFromDateTime": "2022-11-25T16:33:57Z",
    "transactionToDateTime": "2022-11-25T18:38:57Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/quanto_testpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-11-25T16:38:57Z"
    },
    "creditor": {
      "name": "Rafael Argenta",
      "cpfCnpj": "04745289952",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "04745289952",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2022-11-25",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "localInstrument": "MANU",
        "creditorAccount": {
          "number": "15525813306",
          "accountType": "CACC",
          "ispb": "10573521",
          "issuer": "0001"
        }
      },
      "type": "PIX"
    }
  },
  "aud": "73d7035b-3c09-40ab-b4c2-900d9f7a5f1f",
  "iat": 1669394337,
  "jti": "ebf4c337-6ddd-4270-a4e7-64d2cb23cf76",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}

2022-11-25 16:38:59

(1) More

SUCCESS

CreateAuthorizationEndpointResponseParams

Added authorization_endpoint_response_params to environment

params

{
  "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
  "state": "daae1c4cef834529f578eba5c1b0ab520c0735d2b0beee3b80daf59b2ab0b2f7"
}

2022-11-25 16:38:59

(1) More

SUCCESS

OIDCC-3.3.2.5

AddCodeToAuthorizationEndpointResponseParams

Added code to authorization endpoint response params

authorization_endpoint_response_params

{
  "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
  "state": "daae1c4cef834529f578eba5c1b0ab520c0735d2b0beee3b80daf59b2ab0b2f7",
  "code": "Uh5Y6fUyLsH2F8ObpaIDhlgkNVzkifNk"
}

2022-11-25 16:38:59

(1) More

SUCCESS

OIDCC-3.3.2.5

AddIdTokenToAuthorizationEndpointResponseParams

Added id_token to authorization endpoint response params

authorization_endpoint_response_params

{
  "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
  "state": "daae1c4cef834529f578eba5c1b0ab520c0735d2b0beee3b80daf59b2ab0b2f7",
  "code": "Uh5Y6fUyLsH2F8ObpaIDhlgkNVzkifNk",
  "id_token": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6WyJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJ1bk5tRmh0OGxWTV9SMjllMGhZVkkxIl0sImNfaGFzaCI6Img4SGN2S21kZjFDV3c2dGk3MHFSTmciLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJxc1NUbnpiYk13bTdCVlZCZ3Awck93IiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0XC8iLCJjcGYiOiIwNDc0NTI4OTk1MiIsImV4cCI6MTY2OTM5NDYzOSwibm9uY2UiOiJkMmFkNjBhZi01Y2VkLTQ0OTAtODIxYS1iZDZkNWYyMGRiZjMiLCJpYXQiOjE2NjkzOTQzMzl9.OTfz0KGD47lEl79jXHoV-pP5JdNGXOIcwjo45nPDiIJs0pL6IHMLk1RssVU7Ne45G-Rd670b83rNkkMzieBVJCLicYxSBDuktSFqPPAKh74AvxHO6uZ_wXmzvtPL7akbE-TED0jWqCa9OuNtShJpo_sZasCpek8dHhr0PwSw_9O3_seXNz1BWMq4bdL604HbrfeYMHIKogJfVQ23dYDs3K2woqkYxPY3-YOjC_GEcuO4r0At1D1b0WerC9WZXDLPvPAmGQIYYVYxnrYXtlBuR0ezXelf0C3RLRgaHAasCAIG7-4ut5Ogx_MfeC-ccR8zd7nApUlxZOh6Kr-sDBEeww"
}

2022-11-25 16:38:59

(1) More

SendAuthorizationResponseWithResponseModeFragment

Redirecting back to client

uri

https://api.platform.sbx.contaquanto.net/opb-api/index#state=daae1c4cef834529f578eba5c1b0ab520c0735d2b0beee3b80daf59b2ab0b2f7&code=Uh5Y6fUyLsH2F8ObpaIDhlgkNVzkifNk&id_token=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6WyJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJ1bk5tRmh0OGxWTV9SMjllMGhZVkkxIl0sImNfaGFzaCI6Img4SGN2S21kZjFDV3c2dGk3MHFSTmciLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJxc1NUbnpiYk13bTdCVlZCZ3Awck93IiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0XC8iLCJjcGYiOiIwNDc0NTI4OTk1MiIsImV4cCI6MTY2OTM5NDYzOSwibm9uY2UiOiJkMmFkNjBhZi01Y2VkLTQ0OTAtODIxYS1iZDZkNWYyMGRiZjMiLCJpYXQiOjE2NjkzOTQzMzl9.OTfz0KGD47lEl79jXHoV-pP5JdNGXOIcwjo45nPDiIJs0pL6IHMLk1RssVU7Ne45G-Rd670b83rNkkMzieBVJCLicYxSBDuktSFqPPAKh74AvxHO6uZ_wXmzvtPL7akbE-TED0jWqCa9OuNtShJpo_sZasCpek8dHhr0PwSw_9O3_seXNz1BWMq4bdL604HbrfeYMHIKogJfVQ23dYDs3K2woqkYxPY3-YOjC_GEcuO4r0At1D1b0WerC9WZXDLPvPAmGQIYYVYxnrYXtlBuR0ezXelf0C3RLRgaHAasCAIG7-4ut5Ogx_MfeC-ccR8zd7nApUlxZOh6Kr-sDBEeww

2022-11-25 16:38:59

(2) More

OUTGOING

fapi1-advanced-final-client-test-invalid-secondary-aud

Response to HTTP request to test instance QkTgjI2i4acRzKB

outgoing

org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://api.platform.sbx.contaquanto.net/opb-api/index#state=daae1c4cef834529f578eba5c1b0ab520c0735d2b0beee3b80daf59b2ab0b2f7&code=Uh5Y6fUyLsH2F8ObpaIDhlgkNVzkifNk&id_token=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJzdWIiOiJ1c2VyLXN1YmplY3QtMTIzNDUzMSIsImF1ZCI6WyJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJ1bk5tRmh0OGxWTV9SMjllMGhZVkkxIl0sImNfaGFzaCI6Img4SGN2S21kZjFDV3c2dGk3MHFSTmciLCJhY3IiOiJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiLCJzX2hhc2giOiJxc1NUbnpiYk13bTdCVlZCZ3Awck93IiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0XC8iLCJjcGYiOiIwNDc0NTI4OTk1MiIsImV4cCI6MTY2OTM5NDYzOSwibm9uY2UiOiJkMmFkNjBhZi01Y2VkLTQ0OTAtODIxYS1iZDZkNWYyMGRiZjMiLCJpYXQiOjE2NjkzOTQzMzl9.OTfz0KGD47lEl79jXHoV-pP5JdNGXOIcwjo45nPDiIJs0pL6IHMLk1RssVU7Ne45G-Rd670b83rNkkMzieBVJCLicYxSBDuktSFqPPAKh74AvxHO6uZ_wXmzvtPL7akbE-TED0jWqCa9OuNtShJpo_sZasCpek8dHhr0PwSw_9O3_seXNz1BWMq4bdL604HbrfeYMHIKogJfVQ23dYDs3K2woqkYxPY3-YOjC_GEcuO4r0At1D1b0WerC9WZXDLPvPAmGQIYYVYxnrYXtlBuR0ezXelf0C3RLRgaHAasCAIG7-4ut5Ogx_MfeC-ccR8zd7nApUlxZOh6Kr-sDBEeww]

outgoing_path

authorize

2022-11-25 16:39:04

(1) More

FINISHED

fapi1-advanced-final-client-test-invalid-secondary-aud

Test has run to completion

testmodule_result

PASSED

2022-11-25 16:39:07

(2) More

TEST-RUNNER

Alias has now been claimed by another test

alias	quanto_test
new_test_id	rQzsw3nhoJkg9Mt

Test Summary

Test Results