Test detail

Test Name	fapi1-advanced-final-client-test
Variant	client_auth_type=mtls, fapi_auth_request_method=pushed, fapi_client_type=oidc, fapi_profile=openbanking_brazil, fapi_response_mode=jarm
Test ID	qBAVsfW4iMPgEWf https://www.certification.openid.net/log-detail.html?public=true&log=qBAVsfW4iMPgEWf
Created	2022-11-28T13:53:54.759308Z
Description	Quanto RP
Test Version	5.0.7
Test Owner	103024967838956445061 https://accounts.google.com
Plan ID	ljPMfBpe82Xhn https://www.certification.openid.net/plan-detail.html?public=true&plan=ljPMfBpe82Xhn
Exported From	https://www.certification.openid.net
Exported By	103024967838956445061 https://accounts.google.com
Suite Version	5.0.7
Exported	2022-11-29 14:37:01 (UTC)

2022-11-28 13:53:54

(7) More

INFO

TEST-RUNNER

Test instance qBAVsfW4iMPgEWf created

baseUrl	https://www.certification.openid.net/test/a/quanto_test
variant	{ "client_auth_type": "mtls", "fapi_auth_request_method": "pushed", "fapi_client_type": "oidc", "fapi_profile": "openbanking_brazil", "fapi_response_mode": "jarm" }
alias	quanto_test
description	Quanto RP
planId	ljPMfBpe82Xhn
config	{ "alias": "quanto_test", "description": "Quanto RP", "server": { "jwks": { "keys": [ { "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc", "kty": "RSA", "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00", "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q", "e": "AQAB", "alg": "PS256", "use": "sig", "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM", "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg", "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE", "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk", "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w", "x5c": [ "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\u003d\u003d" ] }, { "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic", "kty": "RSA", "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs", "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ", "e": "AQAB", "use": "enc", "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996", "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8", "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8", "alg": "RSA-OAEP", "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM", "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q" } ] } }, "client": { "client_id": "unNmFht8lVM_R29e0hYVI", "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index", "certificate": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----", "jwks": { "keys": [ { "kty": "RSA", "use": "sig", "alg": "PS256", "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE", "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw", "e": "AQAB" } ] } }, "client2": { "client_id": "3512766953869", "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index", "id_token_encrypted_response_alg": "RSA-OAEP", "certificate": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----", "jwks": { "keys": [ { "kty": "RSA", "use": "sig", "alg": "PS256", "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE", "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw", "e": "AQAB" }, { "use": "enc", "kid": "9da0283ce6957f44f26b33102fd39fbc3530050502173029b36a27ec7c518123", "alg": "RSA-OAEP", "kty": "RSA", "n": "tNNwY3N1-FJPF2SwBrBxfsutfEsWaFpbn1ztDodUSqBCHV7ZlSipSdJiCe061m2idB_jDRJL_xgUKnY0pE39gT99JEwsIayOhJuSz2HHWIS8aYfThko1oM6HcFYIEx29-xk-aJczyk4j1ExZuMml0SuHusXCtpTAhh-zTnPuoHZj5SmAIgkNo5O5aoRKoZuJmX1QaLHGyQVPWVoqHwkP0v0K06JgARNYj3k5-UM64utQyu0ijLaAQntkjLSMSUsrYdkZSNv-we0ZU838qaJo1rZQGCA8iAZga-wXFE0oMKwd5PCzUhSwGfsQj3BXTEFFsSa6aZwQK9DfNZJgkxinkw", "e": "AQAB" } ] }, "id_token_encrypted_response_enc": "A256GCM" }, "directory": { "keystore": "https://keystore.sandbox.directory.openbankingbrasil.org.br/" }, "consent": {}, "publish": "everything" }
testName	fapi1-advanced-final-client-test

2022-11-28 13:53:54

(3) More

SUCCESS

GenerateServerConfigurationMTLS

Created server configuration

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  }
}

issuer

https://www.certification.openid.net/test/a/quanto_test/

discoveryUrl

https://www.certification.openid.net/test/a/quanto_test/.well-known/openid-configuration

2022-11-28 13:53:54

(3) More

SUCCESS

LoadServerJWKs

Parsed public and private JWK sets

server_jwks

{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}

server_encryption_keys

{
  "keys": [
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}

server_public_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}

2022-11-28 13:53:54	SUCCESS RFC7517-1.1	ValidateServerJWKs Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url

2022-11-28 13:53:54		SetServerSigningAlgToPS256 Successfully set signing algorithm to PS256

2022-11-28 13:53:54

(1) More

FAPIBrazilSetGrantTypesSupportedInServerConfiguration

Successfully set grant_types_supported

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  },
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ]
}

2022-11-28 13:53:54

(1) More

AddClaimsParameterSupportedTrueToServerConfiguration

Successfully added claims_parameter_supported to server configuration

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  },
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true
}

2022-11-28 13:53:54

(1) More

FAPIBrazilAddBrazilSpecificSettingsToServerConfiguration

Added open banking Brazil specific server settings

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  },
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ]
}

2022-11-28 13:53:54

(1) More

SUCCESS

AddIdTokenSigningAlgsToServerConfiguration

Added 'id_token_signing_alg_values_supported' to server metadata as 'alg' from server jwks

value

[
  "PS256"
]

2022-11-28 13:53:54	SUCCESS FAPI2-4.3.1-9	AddTlsCertificateBoundAccessTokensTrueSupportedToServerConfiguration Added 'tls_client_certificate_bound_access_tokens' as 'true' to server metadata

2022-11-28 13:53:54	SUCCESS	AddTLSClientAuthToServerConfiguration Added tls_client_auth for token_endpoint_auth_methods_supported

2022-11-28 13:53:54

(1) More

AddPushedAuthorizationRequestEndpointToServerConfig

Added pushed_authorization_request_endpoint to server configuration

endpoint

https://www.certification.openid.net/test/a/quanto_test/par

2022-11-28 13:53:54

(1) More

AddRequirePushedAuthorizationRequestsToServerConfig

Added require_pushed_authorization_requests to server configuration

value

true

2022-11-28 13:53:54

(1) More

SUCCESS

FAPI1-ADV-5.2.2-2

AddResponseTypeCodeToServerConfiguration

Added code as response type supported

response_types_supported

[
  "code"
]

2022-11-28 13:53:54

(1) More

SUCCESS

FAPI1-ADV-5.2.2.2

AddJARMResponseModeToServerConfiguration

Added jwt as response_modes_supported

response_modes_supported

[
  "jwt"
]

2022-11-28 13:53:54

(1) More

SUCCESS

JARM-6 FAPI1-ADV-8.6

AddAuthorizationSigningAlgValuesSupportedToServerConfiguration

Added authorization_signing_alg_values_supported to server configuration

alg_values

[
  "PS256"
]

2022-11-28 13:53:54

(1) More

SUCCESS

FAPIBrazilAddTokenEndpointAuthSigningAlgValuesSupportedToServer

Set token_endpoint_auth_signing_alg_values_supported

values

[
  "PS256"
]

2022-11-28 13:53:54

(1) More

SUCCESS

CheckServerConfiguration

Found required server configuration keys

required

[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]

2022-11-28 13:53:54

(1) More

SUCCESS

FAPI1-BASE-5.2.2-6 FAPI1-BASE-5.2.2-5

FAPIEnsureMinimumServerKeyLength

Validated minimum key lengths for server_jwks

server_jwks

{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}

2022-11-28 13:53:54

(1) More

SUCCESS

LoadUserInfo

Added user information

user_info

{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}

Verify configuration of first client

2022-11-28 13:53:54

(4) More

SUCCESS

GetStaticClientConfiguration

Found a static client object

client_id	unNmFht8lVM_R29e0hYVI
redirect_uri	https://api.platform.sbx.contaquanto.net/opb-api/index
certificate	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
jwks	{ "keys": [ { "kty": "RSA", "use": "sig", "alg": "PS256", "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE", "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw", "e": "AQAB" } ] }

2022-11-28 13:53:54	SUCCESS RFC7517-1.1	ValidateClientJWKsPublicPart Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url

2022-11-28 13:53:54

(2) More

SUCCESS

ExtractJWKsFromStaticClientConfiguration

Extracted client JWK

client_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
      "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw",
      "e": "AQAB"
    }
  ]
}

public_client_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
      "alg": "PS256",
      "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw"
    }
  ]
}

2022-11-28 13:53:54

(1) More

SUCCESS

RFC7517-4.5

CheckDistinctKeyIdValueInClientJWKs

Distinct 'kid' value in all keys of client_jwks

see	https://bitbucket.org/openid/connect/issues/1127

2022-11-28 13:53:54	SUCCESS	EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys Jwks does not contain any private or symmetric keys

2022-11-28 13:53:54

(1) More

SUCCESS

FAPI1-BASE-5.2.4-3 FAPI1-BASE-5.2.4-2

FAPIEnsureMinimumClientKeyLength

Validated minimum key lengths for client_jwks

client_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
      "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw",
      "e": "AQAB"
    }
  ]
}

2022-11-28 13:53:54		fapi1-advanced-final-client-test Setup Done

2022-11-28 13:54:41

(11) More

INCOMING

fapi1-advanced-final-client-test

Incoming HTTP request to /test/a/quanto_test/.well-known/openid-configuration

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "accept-encoding": "gzip", "connection": "close" }
incoming_path	/test/a/quanto_test/.well-known/openid-configuration
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:54:41

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

2022-11-28 13:54:41

(4) More

OUTGOING

fapi1-advanced-final-client-test

Response to HTTP request to test instance qBAVsfW4iMPgEWf

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "issuer": "https://www.certification.openid.net/test/a/quanto_test/", "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize", "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token", "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks", "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register", "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo", "mtls_endpoint_aliases": { "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token", "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register", "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo", "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/par" }, "grant_types_supported": [ "authorization_code", "implicit", "client_credentials", "refresh_token" ], "claims_parameter_supported": true, "request_object_encryption_alg_values_supported": [ "RSA-OAEP" ], "request_object_encryption_enc_values_supported": [ "A256GCM" ], "claims_supported": [ "cpf", "cnpj", "acr" ], "acr_values_supported": [ "urn:brasil:openbanking:loa2", "urn:brasil:openbanking:loa3" ], "request_object_signing_alg_values_supported": [ "PS256" ], "scopes_supported": [ "openid", "phone", "profile", "email", "address", "offline_access", "consents", "resources", "payments" ], "id_token_signing_alg_values_supported": [ "PS256" ], "tls_client_certificate_bound_access_tokens": true, "token_endpoint_auth_methods_supported": [ "tls_client_auth" ], "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/quanto_test/par", "require_pushed_authorization_requests": true, "response_types_supported": [ "code" ], "response_modes_supported": [ "jwt" ], "authorization_signing_alg_values_supported": [ "PS256" ], "token_endpoint_auth_signing_alg_values_supported": [ "PS256" ] }
outgoing_path	.well-known/openid-configuration

2022-11-28 13:54:41

(11) More

INCOMING

fapi1-advanced-final-client-test

Incoming HTTP request to /test-mtls/a/quanto_test/token

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "content-type": "application/x-www-form-urlencoded", "accept-encoding": "gzip", "connection": "close", "content-length": "76" }
incoming_path	/test-mtls/a/quanto_test/token
incoming_body_form_params	{ "client_id": "unNmFht8lVM_R29e0hYVI", "grant_type": "client_credentials", "scope": "payments" }
incoming_method	POST
incoming_tls_version	TLSv1.2
incoming_tls_cert	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
incoming_query_string_params	{}
incoming_body	client_id=unNmFht8lVM_R29e0hYVI&grant_type=client_credentials&scope=payments
incoming_tls_chain	[ "(null)", "(null)", "(null)", "(null)", "(null)", "(null)" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:54:41

(2) More

SUCCESS

FAPI1-ADV-8.5-1 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

Token endpoint

2022-11-28 13:54:41

(1) More

SUCCESS

RFC6749-3.2.1

CheckClientIdMatchesOnTokenRequestIfPresent

Extracted client_id matches the expected value

client_id

unNmFht8lVM_R29e0hYVI

2022-11-28 13:54:41

(1) More

SUCCESS

ExtractClientCertificateFromRequestHeaders

Extracted client certificate

client_certificate

{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nvRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3432303634353435303030313031,CN\u003dwww.quan.to,OU\u003d73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O\u003dQuanto Network Instituicao de Pagamento Ltda.,L\u003dSao Paulo,ST\u003dSao Paulo,C\u003dBR"
  },
  "sanDnsNames": [
    "www.quan.to"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}

2022-11-28 13:54:41	SUCCESS FAPI1-ADV-5.2.2-5	CheckForClientCertificate Found client certificate

2022-11-28 13:54:41

(1) More

SUCCESS

EnsureClientCertificateMatches

Presented certificate matches registered certificate

actual

2022-11-28 13:54:41	SUCCESS RFC8705-2	EnsureClientIdIsPresentOnTokenRequest Parameter client_id found on the request

2022-11-28 13:54:41	SUCCESS	EnsureNoClientAssertionSentToTokenEndpoint Client did not send a client_assertion to token endpoint

2022-11-28 13:54:41

(2) More

SUCCESS

FAPIBrazilExtractRequestedScopeFromClientCredentialsGrant

Found 'payments' scope in request

actual	[ "payments" ]
expected	payments

2022-11-28 13:54:41

(1) More

SUCCESS

GenerateBearerAccessToken

Generated access token

access_token

VenFOo2V158D2to9BvCsF2ltOmvTp07eRMuARRJMolnUYqXUqM

2022-11-28 13:54:41		GenerateAccessTokenExpiration Set access_token_expiration to 900

2022-11-28 13:54:41

(3) More

SUCCESS

CreateTokenEndpointResponse

Created token endpoint response

access_token	VenFOo2V158D2to9BvCsF2ltOmvTp07eRMuARRJMolnUYqXUqM
token_type	Bearer
expires_in	900

2022-11-28 13:54:41		CopyAccessTokenToClientCredentialsField Condition ran but did not log anything

2022-11-28 13:54:41

(4) More

OUTGOING

fapi1-advanced-final-client-test

Response to HTTP request to test instance qBAVsfW4iMPgEWf

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "access_token": "VenFOo2V158D2to9BvCsF2ltOmvTp07eRMuARRJMolnUYqXUqM", "token_type": "Bearer", "expires_in": 900 }
outgoing_path	token

2022-11-28 13:54:41

(11) More

INCOMING

fapi1-advanced-final-client-test

Incoming HTTP request to /test-mtls/a/quanto_test/payments/v1/consents

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "go-openb", "accept": "application/jwt", "authorization": "Bearer VenFOo2V158D2to9BvCsF2ltOmvTp07eRMuARRJMolnUYqXUqM", "content-type": "application/jwt", "x-idempotency-key": "448f7361-0b4b-457b-83a5-c6f5a9c89b6c", "accept-encoding": "gzip", "connection": "close", "content-length": "1229" }
incoming_path	/test-mtls/a/quanto_test/payments/v1/consents
incoming_body_form_params
incoming_method	POST
incoming_tls_version	TLSv1.2
incoming_tls_cert	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
incoming_query_string_params	{}
incoming_body	eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJqd3QifQ.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.y7PYz3cs5YwtVxYWXfV8_L-Prm0E0zmYWBMURMRvgEwpd1R0QqUuOgVr1O92ky_nwVgN6OxHs1sq4pduG7_esWHixGbotUz0XTiWTV4zriye2NTLcstVVLoyzFHeJt8ly55ncFwVgewoCCyU66IBGgXuPobMjF3c0WLFfUp9nYiQvkdLvxbWMAfN6RCNC2ku6BWO3rp5jMWBwUtD6ywQWdXKP4e0-aj8eNp20TsN6Rw4PfKlV24VFf0vrNuYBkqtAUu3hPHHljR5-bQYhW8H1OphgRTVHe-7-IBS04XLJJ3yPc1xSEctharJiLJZi4OAu3vc_-n_tBex4anpm5jYBg
incoming_tls_chain	[ "(null)", "(null)", "(null)", "(null)", "(null)", "(null)" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:54:41

(2) More

SUCCESS

FAPI1-ADV-8.5-1 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

New consent endpoint

2022-11-28 13:54:41

(1) More

SUCCESS

ExtractClientCertificateFromRequestHeaders

Extracted client certificate

client_certificate

{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nvRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3432303634353435303030313031,CN\u003dwww.quan.to,OU\u003d73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O\u003dQuanto Network Instituicao de Pagamento Ltda.,L\u003dSao Paulo,ST\u003dSao Paulo,C\u003dBR"
  },
  "sanDnsNames": [
    "www.quan.to"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}

2022-11-28 13:54:41	SUCCESS FAPI1-ADV-5.2.2-5	CheckForClientCertificate Found client certificate

2022-11-28 13:54:41

(1) More

SUCCESS

EnsureClientCertificateMatches

Presented certificate matches registered certificate

actual

2022-11-28 13:54:41	SUCCESS	EnsureIncomingRequestMethodIsPost Client correctly used http POST method

2022-11-28 13:54:41	SUCCESS FAPI1-BASE-6.2.2-1	EnsureBearerAccessTokenNotInParams Client correctly did not send access token in query parameters or form body

2022-11-28 13:54:41

(1) More

SUCCESS

FAPI1-BASE-6.2.2-1

ExtractBearerAccessTokenFromHeader

Found access token on incoming request

access_token

VenFOo2V158D2to9BvCsF2ltOmvTp07eRMuARRJMolnUYqXUqM

2022-11-28 13:54:41

(1) More

SUCCESS

RequireBearerClientCredentialsAccessToken

Found access token in request

actual

VenFOo2V158D2to9BvCsF2ltOmvTp07eRMuARRJMolnUYqXUqM

2022-11-28 13:54:41

(3) More

INFO

FAPI1-BASE-6.2.2-3

ExtractFapiDateHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date

path	headers.x-fapi-auth-date
mapped
object	incoming_request

2022-11-28 13:54:41

(3) More

INFO

FAPI1-BASE-6.2.2-4

ExtractFapiIpAddressHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address

path	headers.x-fapi-customer-ip-address
mapped
object	incoming_request

2022-11-28 13:54:41

(3) More

INFO

FAPI1-BASE-6.2.2-5

ExtractFapiInteractionIdHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id

path	headers.x-fapi-interaction-id
mapped
object	incoming_request

2022-11-28 13:54:41

(3) More

SUCCESS

FAPIBrazilExtractCertificateSubjectFromServerJwks

Extracted subject from the certificate included in server jwks

subjectdn	UID=74e929d9-33b6-4d85-8ba7-c146c867a817,CN=Open Banking Brasil,OU=12345+OU=certman+OU=agoodone,O=ICP-Brasil,C=BR
ou	12345
brazil_software_id	74e929d9-33b6-4d85-8ba7-c146c867a817

2022-11-28 13:54:41

(1) More

SUCCESS

FAPIBrazilEnsureClientCredentialsScopeContainedPayments

The token request which was used to obtain the access token contained 'payments' scope

actual

[
  "payments"
]

2022-11-28 13:54:41

(1) More

SUCCESS

BrazilOB-5.2.2.2

FAPIBrazilExtractPaymentsConsentRequest

Parsed payments consent request

payments_consent_request

{
  "aud": "https://www.certification.openid.net/test-mtls/a/quanto_test/payments/v1/consents",
  "data": {
    "loggedUser": {
      "document": {
        "identification": "04745289952",
        "rel": "CPF"
      }
    },
    "creditor": {
      "name": "Rafael Argenta",
      "cpfCnpj": "04745289952",
      "personType": "PESSOA_NATURAL"
    },
    "payment": {
      "date": "2022-11-28",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "localInstrument": "MANU",
        "creditorAccount": {
          "number": "15525813306",
          "accountType": "CACC",
          "ispb": "10573521",
          "issuer": "0001"
        }
      },
      "type": "PIX"
    }
  },
  "iss": "73d7035b-3c09-40ab-b4c2-900d9f7a5f1f",
  "iat": 1669643681,
  "jti": "b1bb7f9e-4382-42fb-8272-e3c075db5f90"
}

2022-11-28 13:54:41	SUCCESS BrazilOB-6.1-4	EnsureIncomingRequestContentTypeIsApplicationJwt Client correctly used application/jwt content type

2022-11-28 13:54:41

(1) More

SUCCESS

ExtractXIdempotencyKeyHeader

Found an x-idempotency-key header

idempotency_key

448f7361-0b4b-457b-83a5-c6f5a9c89b6c

2022-11-28 13:54:41

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilValidatePaymentConsentRequestAud

aud claim matches the endpoint url

aud	https://www.certification.openid.net/test-mtls/a/quanto_test/payments/v1/consents

2022-11-28 13:54:41

(3) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate

Extracted subject from the mtls client certificate

subjectdn

UID=ce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,2.5.4.5=#130e3432303634353435303030313031,CN=www.quan.to,OU=73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O=Quanto Network Instituicao de Pagamento Ltda.,L=Sao Paulo,ST=Sao Paulo,C=BR

ou

73d7035b-3c09-40ab-b4c2-900d9f7a5f1f

brazil_software_id

ce627cce-afcc-4cfb-acf4-2e05a890780c

2022-11-28 13:54:41

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilEnsureConsentRequestIssEqualsOrganizationId

iss claim in consent request matches organizationId in client certificate

iss	73d7035b-3c09-40ab-b4c2-900d9f7a5f1f

2022-11-28 13:54:41

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilEnsureConsentRequestJtiIsUUIDv4

jti claim in consent request is a UUIDv4

jti	b1bb7f9e-4382-42fb-8272-e3c075db5f90

2022-11-28 13:54:41

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilValidateConsentRequestIat

iat claim in consent request is valid

iat	1669643681

2022-11-28 13:54:41

(1) More

FAPIBrazilFetchClientOrganizationJwksFromDirectory

Fetching client organization keys

jwks_uri

https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/application.jwks

2022-11-28 13:54:41

(4) More

FAPIBrazilFetchClientOrganizationJwksFromDirectory

HTTP request

request_uri	https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/application.jwks
request_method	GET
request_headers	{ "accept": "text/plain, application/json, application/+json, /*", "content-length": "0" }
request_body

2022-11-28 13:54:42

(4) More

RESPONSE

FAPIBrazilFetchClientOrganizationJwksFromDirectory

HTTP response

response_status_code	200 OK
response_status_text	OK
response_headers	{ "content-type": "application/jwk-set+json", "content-length": "3016", "connection": "keep-alive", "x-amz-replication-status": "COMPLETED", "last-modified": "Wed, 06 Jul 2022 18:48:28 GMT", "x-amz-version-id": "GcwW3SBPdcSzmvatNAPIL0VfzM2KpOcB", "accept-ranges": "bytes", "server": "AmazonS3", "date": "Mon, 28 Nov 2022 13:54:43 GMT", "etag": "\"ae1a9a5325762cc94e7f690b43879db8\"", "vary": "Accept-Encoding", "x-cache": "RefreshHit from cloudfront", "via": "1.1 349199c2d4bce4eb0554ad238203d5e4.cloudfront.net (CloudFront)", "x-amz-cf-pop": "MIA3-P2", "x-amz-cf-id": "lbrJWbNcUzwAAz2nQjVK61rm8Ykq51yiyvDyMmxx7Cvb2IMDRdDMNw\u003d\u003d", "x-xss-protection": "1; mode\u003dblock", "x-frame-options": "SAMEORIGIN", "referrer-policy": "strict-origin-when-cross-origin", "x-content-type-options": "nosniff", "strict-transport-security": "max-age\u003d31536000" }
response_body	{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw","e":"AQAB","kid":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE.pem","x5t#256":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE"}]}

2022-11-28 13:54:42

(1) More

FAPIBrazilFetchClientOrganizationJwksFromDirectory

Found JWK set string

jwk_string

{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw","e":"AQAB","kid":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE.pem","x5t#256":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE"}]}

2022-11-28 13:54:42

(1) More

SUCCESS

BrazilOB-6.1-6

FAPIBrazilFetchClientOrganizationJwksFromDirectory

Downloaded and added client organization JWK set to environment

client_organization_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw",
      "e": "AQAB",
      "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE.pem",
      "x5t#256": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE"
    }
  ]
}

2022-11-28 13:54:42

(1) More

SUCCESS

BrazilOB-6.1-6

FAPIBrazilValidateJwtSignatureUsingOrganizationJwks

jwt signature validated

jwt

eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJqd3QifQ.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.y7PYz3cs5YwtVxYWXfV8_L-Prm0E0zmYWBMURMRvgEwpd1R0QqUuOgVr1O92ky_nwVgN6OxHs1sq4pduG7_esWHixGbotUz0XTiWTV4zriye2NTLcstVVLoyzFHeJt8ly55ncFwVgewoCCyU66IBGgXuPobMjF3c0WLFfUp9nYiQvkdLvxbWMAfN6RCNC2ku6BWO3rp5jMWBwUtD6ywQWdXKP4e0-aj8eNp20TsN6Rw4PfKlV24VFf0vrNuYBkqtAUu3hPHHljR5-bQYhW8H1OphgRTVHe-7-IBS04XLJJ3yPc1xSEctharJiLJZi4OAu3vc_-n_tBex4anpm5jYBg

2022-11-28 13:54:42

(1) More

SUCCESS

FAPI1-BASE-6.2.1-11

CreateFapiInteractionIdIfNeeded

Created new FAPI interaction ID

fapi_interaction_id

55f8d14f-279f-4ad8-b0bc-0c75282cf088

2022-11-28 13:54:42

(3) More

SUCCESS

BrazilOB-5.2.2.2

FAPIBrazilGenerateNewPaymentsConsentResponse

Created consent response

headers

{
  "x-fapi-interaction-id": "55f8d14f-279f-4ad8-b0bc-0c75282cf088"
}

consentId

urn:conformance:oidf:SziLJFuOpE

consent_response

{
  "data": {
    "consentId": "urn:conformance:oidf:SziLJFuOpE",
    "creationDateTime": "2022-11-28T13:54:42Z",
    "status": "AWAITING_AUTHORISATION",
    "statusUpdateDateTime": "2022-11-28T13:54:42Z",
    "expirationDateTime": "2022-11-28T15:54:42Z",
    "transactionFromDateTime": "2022-11-28T13:49:42Z",
    "transactionToDateTime": "2022-11-28T15:54:42Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/quanto_testpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-11-28T13:54:42Z"
    },
    "creditor": {
      "name": "Rafael Argenta",
      "cpfCnpj": "04745289952",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "04745289952",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2022-11-28",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "localInstrument": "MANU",
        "creditorAccount": {
          "number": "15525813306",
          "accountType": "CACC",
          "ispb": "10573521",
          "issuer": "0001"
        }
      },
      "type": "PIX"
    }
  },
  "aud": "73d7035b-3c09-40ab-b4c2-900d9f7a5f1f",
  "iat": 1669643682,
  "jti": "dd402fb9-08ba-48a7-bf18-ac638531be4c",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}

2022-11-28 13:54:42

(1) More

SUCCESS

BrazilOB-6.1-2

FAPIBrazilSignPaymentConsentResponse

Signed the payment consent response

signed_consent_response

eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.Bs1DMcHi_IwixjbLjUBysn-oSlz5ULV8Y0TO7R75EqsBLgHW4yapbZ-Hfwki2aEr4OWeHsIRq8IYZwa_-Wws5csjPXGzK_b341JQq2R_MtGFPSID_vutv120TAaAEYyvs1xnzhfYV5YDaUXd5-mUhVo3hL7ns8eR_bELcbbR9v9TKI0hs4mmKBPXBZyktUpOcJmyEFn8AS43g9HU9-BDsik7TZwNa7NcK6pkNsOxHzp76gRRVebBOJPJbNTIUgFI7VBtojCIn6nZfeNLtvEE7UsipbsisJMefKxAy62kKstuCEjZtbaEVqUhGbKnL7DrIQTl3TvwUv45bCxjVCWLfQ

2022-11-28 13:54:42		ClearAccessTokenFromRequest Removed incoming access token from environment

2022-11-28 13:54:42

(4) More

OUTGOING

fapi1-advanced-final-client-test

Response to HTTP request to test instance qBAVsfW4iMPgEWf

outgoing_status_code	201
outgoing_headers	{ "x-fapi-interaction-id": [ "55f8d14f-279f-4ad8-b0bc-0c75282cf088" ], "Content-Type": [ "application/jwt" ] }
outgoing_body	eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJpc3MiOiI3NGU5MjlkOS0zM2I2LTRkODUtOGJhNy1jMTQ2Yzg2N2E4MTciLCJhdWQiOiI3M2Q3MDM1Yi0zYzA5LTQwYWItYjRjMi05MDBkOWY3YTVmMWYiLCJkYXRhIjp7ImNvbnNlbnRJZCI6InVybjpjb25mb3JtYW5jZTpvaWRmOlN6aUxKRnVPcEUiLCJleHBpcmF0aW9uRGF0ZVRpbWUiOiIyMDIyLTExLTI4VDE1OjU0OjQyWiIsInRyYW5zYWN0aW9uRnJvbURhdGVUaW1lIjoiMjAyMi0xMS0yOFQxMzo0OTo0MloiLCJ0cmFuc2FjdGlvblRvRGF0ZVRpbWUiOiIyMDIyLTExLTI4VDE1OjU0OjQyWiIsIm1ldGEiOnsidG90YWxSZWNvcmRzIjoxLCJyZXF1ZXN0RGF0ZVRpbWUiOiIyMDIyLTExLTI4VDEzOjU0OjQyWiIsInRvdGFsUGFnZXMiOjF9LCJzdGF0dXNVcGRhdGVEYXRlVGltZSI6IjIwMjItMTEtMjhUMTM6NTQ6NDJaIiwibG9nZ2VkVXNlciI6eyJkb2N1bWVudCI6eyJpZGVudGlmaWNhdGlvbiI6IjA0NzQ1Mjg5OTUyIiwicmVsIjoiQ1BGIn19LCJsaW5rcyI6eyJzZWxmIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0cGF5bWVudHNcL3YxXC9jb25zZW50cyJ9LCJjcmVkaXRvciI6eyJuYW1lIjoiUmFmYWVsIEFyZ2VudGEiLCJjcGZDbnBqIjoiMDQ3NDUyODk5NTIiLCJwZXJzb25UeXBlIjoiUEVTU09BX05BVFVSQUwifSwicGF5bWVudCI6eyJkYXRlIjoiMjAyMi0xMS0yOCIsImFtb3VudCI6IjAuMDEiLCJjdXJyZW5jeSI6IkJSTCIsImRldGFpbHMiOnsibG9jYWxJbnN0cnVtZW50IjoiTUFOVSIsImNyZWRpdG9yQWNjb3VudCI6eyJudW1iZXIiOiIxNTUyNTgxMzMwNiIsImFjY291bnRUeXBlIjoiQ0FDQyIsImlzcGIiOiIxMDU3MzUyMSIsImlzc3VlciI6IjAwMDEifX0sInR5cGUiOiJQSVgifSwiY3JlYXRpb25EYXRlVGltZSI6IjIwMjItMTEtMjhUMTM6NTQ6NDJaIiwic3RhdHVzIjoiQVdBSVRJTkdfQVVUSE9SSVNBVElPTiJ9LCJpYXQiOjE2Njk2NDM2ODIsImp0aSI6ImRkNDAyZmI5LTA4YmEtNDhhNy1iZjE4LWFjNjM4NTMxYmU0YyJ9.Bs1DMcHi_IwixjbLjUBysn-oSlz5ULV8Y0TO7R75EqsBLgHW4yapbZ-Hfwki2aEr4OWeHsIRq8IYZwa_-Wws5csjPXGzK_b341JQq2R_MtGFPSID_vutv120TAaAEYyvs1xnzhfYV5YDaUXd5-mUhVo3hL7ns8eR_bELcbbR9v9TKI0hs4mmKBPXBZyktUpOcJmyEFn8AS43g9HU9-BDsik7TZwNa7NcK6pkNsOxHzp76gRRVebBOJPJbNTIUgFI7VBtojCIn6nZfeNLtvEE7UsipbsisJMefKxAy62kKstuCEjZtbaEVqUhGbKnL7DrIQTl3TvwUv45bCxjVCWLfQ
outgoing_path	payments/v1/consents

2022-11-28 13:54:42

(11) More

INCOMING

fapi1-advanced-final-client-test

Incoming HTTP request to /test/a/quanto_test/.well-known/openid-configuration

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "accept-encoding": "gzip", "connection": "close" }
incoming_path	/test/a/quanto_test/.well-known/openid-configuration
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:54:42

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

2022-11-28 13:54:42

(4) More

OUTGOING

fapi1-advanced-final-client-test

Response to HTTP request to test instance qBAVsfW4iMPgEWf

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "issuer": "https://www.certification.openid.net/test/a/quanto_test/", "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize", "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token", "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks", "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register", "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo", "mtls_endpoint_aliases": { "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token", "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register", "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo", "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/par" }, "grant_types_supported": [ "authorization_code", "implicit", "client_credentials", "refresh_token" ], "claims_parameter_supported": true, "request_object_encryption_alg_values_supported": [ "RSA-OAEP" ], "request_object_encryption_enc_values_supported": [ "A256GCM" ], "claims_supported": [ "cpf", "cnpj", "acr" ], "acr_values_supported": [ "urn:brasil:openbanking:loa2", "urn:brasil:openbanking:loa3" ], "request_object_signing_alg_values_supported": [ "PS256" ], "scopes_supported": [ "openid", "phone", "profile", "email", "address", "offline_access", "consents", "resources", "payments" ], "id_token_signing_alg_values_supported": [ "PS256" ], "tls_client_certificate_bound_access_tokens": true, "token_endpoint_auth_methods_supported": [ "tls_client_auth" ], "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/quanto_test/par", "require_pushed_authorization_requests": true, "response_types_supported": [ "code" ], "response_modes_supported": [ "jwt" ], "authorization_signing_alg_values_supported": [ "PS256" ], "token_endpoint_auth_signing_alg_values_supported": [ "PS256" ] }
outgoing_path	.well-known/openid-configuration

2022-11-28 13:54:42

(11) More

INCOMING

fapi1-advanced-final-client-test

Incoming HTTP request to /test/a/quanto_test/jwks

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "accept-encoding": "gzip", "connection": "close" }
incoming_path	/test/a/quanto_test/jwks
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:54:42

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

2022-11-28 13:54:42

(4) More

OUTGOING

fapi1-advanced-final-client-test

Response to HTTP request to test instance qBAVsfW4iMPgEWf

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "keys": [ { "kty": "RSA", "e": "AQAB", "use": "sig", "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM", "x5c": [ "MIIGqzCCBZOgAwIBAgIUdUCw8bQZidnZ6uERKJuN9u4RGvcwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMDgxNjA5NTUwMFoXDTIyMDkxNTA5NTUwMFowgacxCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMS8wDAYDVQQLEwUxMjM0NTAOBgNVBAsTB2NlcnRtYW4wDwYDVQQLEwhhZ29vZG9uZTEcMBoGA1UEAxMTT3BlbiBCYW5raW5nIEJyYXNpbDE0MDIGCgmSJomT8ixkAQETJDc0ZTkyOWQ5LTMzYjYtNGQ4NS04YmE3LWMxNDZjODY3YTgxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyF1agPcwq5ms99Flo82XsXUroWoD/6FX4AfmOUu113h4VOLYaO3N8HDYbKxgii2En/+O61e/Ptjn4T2PVq0iVcqiF6Gp4sKE5w/bKZRfdCe8qIPS4D+JKpFpesJvIHUeQvlAuBp5dA9nGSpxOjGe5P2+ZzNGXwvux/2ztdweGmKbtOvbYe4RVhiu6bOubog8XEBmD96EnqmoROasH1Hn9kDJIclbTP51j/TlQMzhrSfJJuE3Qq6vWhe/DaPbtmELmlDiYHjp8CjAY5oBMHLmkHvQxEBV4cwbUZj5ZpdqU8tkA78XtR4DkzrJ4fYoBb1+9ABq6GNzxWPpSQMQuBXdsCAwEAAaOCAwIwggL+MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJwv7oHX2exZL304ru+4eGVypHlxMB8GA1UdIwQYMBaAFIZ/WK0X9YK2TrQFs/uwzhFD30y+MEwGCCsGAQUFBwEBBEAwPjA8BggrBgEFBQcwAYYwaHR0cDovL29jc3Auc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL2lzc3Vlci5jcmwwXgYDVR0RBFcwVaAZBgVgTAEDAqAQDA5NaWNoYWVsIEZyYXNlcqAYBgVgTAEDA6APDA0xMzM1MzIzNjAwMTg5oA0GBWBMAQMEoAQMAm5voA8GBWBMAQMHoAYMBGFsb3QwDgYDVR0PAQH/BAQDAgbAMIIBoQYDVR0gBIIBmDCCAZQwggGQBgorBgEEAYO6L2QBMIIBgDCCATYGCCsGAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNlIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNpcGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3NzZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlkaWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQgZG9jdW1lbnRzIHRoZXJlaW4uMEQGCCsGAQUFBwIBFjhodHRwOi8vY3BzLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczANBgkqhkiG9w0BAQsFAAOCAQEAtKn/QnJqKLp52YB14x+M21qwz67utFkWjhauQe0elXupjY5NWZb5wLrGYNOZQzRe2JRzcBbGN6P7lCweRfxMkSGh9YrXbrkBXLEPtLHpTVEy65v1tWl02lC+ooVPyQpSjAQL0L69OQ7s7rnIXyb3rkSUzuGSxsLU1AXpWj0oYFB4wdeIdPAVPs83frC5s4kz42JruSAE2vsbvQURTVPChh+hO6+R6Irz+ZEZ1NSgjQkxvOXHW53CkXZSjjHbAB/nbJYi7YyK7kck99r38Ba/WBfIfywdFVVYfiiW5TS6XbQeVeilmmt5MLxBz96FxR6E6WR+cQwybEe94Fb/jD6xHA\u003d\u003d" ], "alg": "PS256", "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w" }, { "kty": "RSA", "e": "AQAB", "use": "enc", "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996", "alg": "RSA-OAEP", "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q" } ] }
outgoing_path	jwks

2022-11-28 13:54:43

(11) More

INCOMING

fapi1-advanced-final-client-test

Incoming HTTP request to /test-mtls/a/quanto_test/par

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "content-type": "application/x-www-form-urlencoded", "accept-encoding": "gzip", "connection": "close", "content-length": "1482" }
incoming_path	/test-mtls/a/quanto_test/par
incoming_body_form_params	{ "client_id": "unNmFht8lVM_R29e0hYVI", "request": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9xdWFudG9fdGVzdC8iXSwiY2xhaW1zIjp7ImlkX3Rva2VuIjp7ImFjciI6eyJlc3NlbnRpYWwiOnRydWUsInZhbHVlcyI6WyJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiXX0sImNwZiI6eyJlc3NlbnRpYWwiOnRydWUsInZhbHVlIjoiMDQ3NDUyODk5NTIifX19LCJjbGllbnRfaWQiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJjb2RlX2NoYWxsZW5nZSI6Ik5sd0stNFBnLXc1eWYxMmFtOE9OTXFrUzJFajN0OGJNajhVY0YzcHF2NHciLCJjb2RlX2NoYWxsZW5nZV9tZXRob2QiOiJTMjU2IiwiZXhwIjoxNjY5NjQ0ODgyLCJpYXQiOjE2Njk2NDM2ODIsImlzcyI6InVuTm1GaHQ4bFZNX1IyOWUwaFlWSSIsImp0aSI6IjNiNmNkNzc0LWQwNjMtNGQ5ZC04NmQ4LTdjMmM1M2E5MjhmNiIsIm5iZiI6MTY2OTY0MzY4Miwibm9uY2UiOiIxNTkyOTE5MC02Y2QzLTRmOWYtOGIyNi0yMDgwNzExOTkxOWUiLCJyZWRpcmVjdF91cmkiOiJodHRwczovL2FwaS5wbGF0Zm9ybS5zYnguY29udGFxdWFudG8ubmV0L29wYi1hcGkvaW5kZXgiLCJyZXNwb25zZV90eXBlIjoiY29kZSIsInNjb3BlIjoib3BlbmlkIGNvbnNlbnQ6dXJuOmNvbmZvcm1hbmNlOm9pZGY6U3ppTEpGdU9wRSBwYXltZW50cyIsInN0YXRlIjoiMzVmNjNmMDIzZjdhMmMxZDhmZTQwNzI1Yzg2NjdiMmYwZjlhY2VkYzdkNGZkMTA0MTAyNmE1MWQ0MGYzY2MwZSJ9.O1IiT0yvmNtv2xv4diXS0-ydONMR7VD1yOJYeKtRHFollvorIC9wyH5lL1aBlBBYSBTDJ5hKzElBHt_uirSWjv9EqdlQm7Kzt038WyveJUhnmJryfnzmbbpza3vaMHMiBvDGg26LHPUe-mEGuK13oJzYPo4V1yUUhGfBOFvYJXFWlsp7DMEosyXwFI59hfE4TYKvyoOoXW85nE82i34CE_Z6CFTEj-dt5esVaJJG5x-WPEwsJ_LYVf1igwRYXFuhaA44zDQGxXtTIbEhngytyuSdHQotflRQ4qHwoAXtRJ8Z9PZtG8QQEs0Y7aspOs2FlAHjG1Cp1dHgdeLJ6mCvog" }
incoming_method	POST
incoming_tls_version	TLSv1.2
incoming_tls_cert	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
incoming_query_string_params	{}
incoming_body	client_id=unNmFht8lVM_R29e0hYVI&request=eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.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.O1IiT0yvmNtv2xv4diXS0-ydONMR7VD1yOJYeKtRHFollvorIC9wyH5lL1aBlBBYSBTDJ5hKzElBHt_uirSWjv9EqdlQm7Kzt038WyveJUhnmJryfnzmbbpza3vaMHMiBvDGg26LHPUe-mEGuK13oJzYPo4V1yUUhGfBOFvYJXFWlsp7DMEosyXwFI59hfE4TYKvyoOoXW85nE82i34CE_Z6CFTEj-dt5esVaJJG5x-WPEwsJ_LYVf1igwRYXFuhaA44zDQGxXtTIbEhngytyuSdHQotflRQ4qHwoAXtRJ8Z9PZtG8QQEs0Y7aspOs2FlAHjG1Cp1dHgdeLJ6mCvog
incoming_tls_chain	[ "(null)", "(null)", "(null)", "(null)", "(null)", "(null)" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:54:43

(2) More

SUCCESS

FAPI1-ADV-8.5-1 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

PAR endpoint

2022-11-28 13:54:43

(1) More

SUCCESS

ExtractClientCertificateFromRequestHeaders

Extracted client certificate

client_certificate

{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nvRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3432303634353435303030313031,CN\u003dwww.quan.to,OU\u003d73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O\u003dQuanto Network Instituicao de Pagamento Ltda.,L\u003dSao Paulo,ST\u003dSao Paulo,C\u003dBR"
  },
  "sanDnsNames": [
    "www.quan.to"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}

2022-11-28 13:54:43	SUCCESS FAPI1-ADV-5.2.2-5	CheckForClientCertificate Found client certificate

2022-11-28 13:54:43

(1) More

SUCCESS

EnsureClientCertificateMatches

Presented certificate matches registered certificate

actual

2022-11-28 13:54:43	SUCCESS RFC8705-2	EnsureClientIdIsPresentOnTokenRequest Parameter client_id found on the request

2022-11-28 13:54:43	SUCCESS	EnsureNoClientAssertionSentToTokenEndpoint Client did not send a client_assertion to token endpoint

2022-11-28 13:54:43

(1) More

SUCCESS

PAR-2.1

ExtractRequestObjectFromPAREndpointRequest

Parsed request object

request_object

{
  "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.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.O1IiT0yvmNtv2xv4diXS0-ydONMR7VD1yOJYeKtRHFollvorIC9wyH5lL1aBlBBYSBTDJ5hKzElBHt_uirSWjv9EqdlQm7Kzt038WyveJUhnmJryfnzmbbpza3vaMHMiBvDGg26LHPUe-mEGuK13oJzYPo4V1yUUhGfBOFvYJXFWlsp7DMEosyXwFI59hfE4TYKvyoOoXW85nE82i34CE_Z6CFTEj-dt5esVaJJG5x-WPEwsJ_LYVf1igwRYXFuhaA44zDQGxXtTIbEhngytyuSdHQotflRQ4qHwoAXtRJ8Z9PZtG8QQEs0Y7aspOs2FlAHjG1Cp1dHgdeLJ6mCvog",
  "header": {
    "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "iss": "unNmFht8lVM_R29e0hYVI",
    "response_type": "code",
    "code_challenge_method": "S256",
    "nonce": "15929190-6cd3-4f9f-8b26-20807119919e",
    "client_id": "unNmFht8lVM_R29e0hYVI",
    "aud": "https://www.certification.openid.net/test/a/quanto_test/",
    "nbf": 1669643682,
    "scope": "openid consent:urn:conformance:oidf:SziLJFuOpE payments",
    "claims": {
      "id_token": {
        "acr": {
          "values": [
            "urn:brasil:openbanking:loa3"
          ],
          "essential": true
        },
        "cpf": {
          "value": "04745289952",
          "essential": true
        }
      }
    },
    "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
    "state": "35f63f023f7a2c1d8fe40725c8667b2f0f9acedc7d4fd1041026a51d40f3cc0e",
    "exp": 1669644882,
    "iat": 1669643682,
    "code_challenge": "NlwK-4Pg-w5yf12am8ONMqkS2Ej3t8bMj8UcF3pqv4w",
    "jti": "3b6cd774-d063-4d9d-86d8-7c2c53a928f6"
  }
}

2022-11-28 13:54:43	SUCCESS PAR-2.1	EnsurePAREndpointRequestDoesNotContainRequestUriParameter PAR endpoint request does not contain a request_uri parameter

2022-11-28 13:54:43

(3) More

INFO

OIDCC-10.2 OIDCC-10.2.1

ValidateEncryptedRequestObjectHasKid

Skipped evaluation due to missing required element: authorization_request_object jwe_header

path	jwe_header
mapped
object	authorization_request_object

2022-11-28 13:54:43

(1) More

SUCCESS

FAPI1-ADV-8.6

FAPIValidateRequestObjectSigningAlg

Request object was signed with a permitted algorithm

alg

PS256

2022-11-28 13:54:43

(1) More

SUCCESS

OIDCC-5.5.1.1 FAPI1-ADV-5.2.3-5 BrazilOB-5.2.2.4

FAPIBrazilValidateRequestObjectIdTokenACRClaims

Acr value in request object is as expected

received

[
  "urn:brasil:openbanking:loa3"
]

2022-11-28 13:54:43

(1) More

SUCCESS

RFC7519-4.1.4 FAPI1-ADV-5.2.2-13

FAPIValidateRequestObjectExp

Request object contains a valid exp claim, expiry time

exp	"Nov 28, 2022, 2:14:42 PM"

2022-11-28 13:54:43

(2) More

SUCCESS

FAPI1-ADV-5.2.2-17

FAPI1AdvancedValidateRequestObjectNBFClaim

nbf claim is valid

nbf	"Nov 28, 2022, 1:54:42 PM"
now	"Nov 28, 2022, 1:54:43 PM"

2022-11-28 13:54:43		ValidateRequestObjectClaims Request object does not contain a max_age claim

2022-11-28 13:54:43	SUCCESS	ValidateRequestObjectClaims Request object claims passed all validation checks

2022-11-28 13:54:43

(1) More

SUCCESS

OIDCC-13.3

EnsureNumericRequestObjectClaimsAreNotNull

None of the claims expected to have numeric values, have null values

numeric_claims

[
  "max_age"
]

2022-11-28 13:54:43	SUCCESS OIDCC-6.1	EnsureRequestObjectDoesNotContainRequestOrRequestUri Request object does not contain request or request_uri

2022-11-28 13:54:43	SUCCESS JAR-10.8	EnsureRequestObjectDoesNotContainSubWithClientId Request object does not contain Client Id in sub

2022-11-28 13:54:43

(3) More

SUCCESS

FAPI1-ADV-5.2.2-1

ValidateRequestObjectSignature

Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg

request_object	eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.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.O1IiT0yvmNtv2xv4diXS0-ydONMR7VD1yOJYeKtRHFollvorIC9wyH5lL1aBlBBYSBTDJ5hKzElBHt_uirSWjv9EqdlQm7Kzt038WyveJUhnmJryfnzmbbpza3vaMHMiBvDGg26LHPUe-mEGuK13oJzYPo4V1yUUhGfBOFvYJXFWlsp7DMEosyXwFI59hfE4TYKvyoOoXW85nE82i34CE_Z6CFTEj-dt5esVaJJG5x-WPEwsJ_LYVf1igwRYXFuhaA44zDQGxXtTIbEhngytyuSdHQotflRQ4qHwoAXtRJ8Z9PZtG8QQEs0Y7aspOs2FlAHjG1Cp1dHgdeLJ6mCvog
request_object_signing_alg	PS256
jwk	{"kty":"RSA","e":"AQAB","use":"sig","kid":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE","alg":"PS256","n":"0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw"}

2022-11-28 13:54:43

(1) More

SUCCESS

EnsureMatchingRedirectUriInRequestObject

Redirect URI matched

actual

https://api.platform.sbx.contaquanto.net/opb-api/index

2022-11-28 13:54:43

(2) More

SUCCESS

FAPI1-ADV-5.2.3-15

EnsureRequestObjectContainsCodeChallengeWhenUsingPAR

Found required PKCE parameters in request

code_challenge_method	S256
code_challenge	NlwK-4Pg-w5yf12am8ONMqkS2Ej3t8bMj8UcF3pqv4w

2022-11-28 13:54:43

(2) More

SUCCESS

PAR-2.2

CreatePAREndpointResponse

Created PAR endpoint response

request_uri	urn:ietf:params:oauth:request_uri:9587743b-00fe-4299-b268-16ac0e6aeeae
expires_in	600

2022-11-28 13:54:43

(4) More

OUTGOING

fapi1-advanced-final-client-test

Response to HTTP request to test instance qBAVsfW4iMPgEWf

outgoing_status_code	201
outgoing_headers	{}
outgoing_body	{ "request_uri": "urn:ietf:params:oauth:request_uri:9587743b-00fe-4299-b268-16ac0e6aeeae", "expires_in": 600 }
outgoing_path	par

2022-11-28 13:54:45

(11) More

INCOMING

fapi1-advanced-final-client-test

Incoming HTTP request to /test/a/quanto_test/authorize

incoming_headers	{ "host": "www.certification.openid.net", "upgrade-insecure-requests": "1", "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36", "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/;q\u003d0.8", "sec-gpc": "1", "accept-language": "pt-BR,pt;q\u003d0.8", "sec-fetch-site": "none", "sec-fetch-mode": "navigate", "sec-fetch-user": "?1", "sec-fetch-dest": "document", "accept-encoding": "gzip, deflate, br", "cookie": "JSESSIONID\u003dEA85B3C5E82E814E2AD0173048152552", "connection": "close" }
incoming_path	/test/a/quanto_test/authorize
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{ "client_id": "unNmFht8lVM_R29e0hYVI", "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index", "request_uri": "urn:ietf:params:oauth:request_uri:9587743b-00fe-4299-b268-16ac0e6aeeae", "response_type": "code", "scope": "openid consent:urn:conformance:oidf:SziLJFuOpE payments", "state": "35f63f023f7a2c1d8fe40725c8667b2f0f9acedc7d4fd1041026a51d40f3cc0e" }
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES256-GCM-SHA384
incoming_body_json

2022-11-28 13:54:45

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES256-GCM-SHA384
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

Authorization endpoint

2022-11-28 13:54:45	SUCCESS	EnsureAuthorizationRequestDoesNotContainRequestWhenUsingPAR Request does not contain a request parameter

2022-11-28 13:54:45

(3) More

INFO

OIDCC-10.2 OIDCC-10.2.1

ValidateEncryptedRequestObjectHasKid

Skipped evaluation due to missing required element: authorization_request_object jwe_header

path	jwe_header
mapped
object	authorization_request_object

2022-11-28 13:54:45

(1) More

SUCCESS

CreateEffectiveAuthorizationRequestParameters

Merged http request parameters with request object claims

effective_authorization_endpoint_request

{
  "client_id": "unNmFht8lVM_R29e0hYVI",
  "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
  "response_type": "code",
  "scope": "openid consent:urn:conformance:oidf:SziLJFuOpE payments",
  "state": "35f63f023f7a2c1d8fe40725c8667b2f0f9acedc7d4fd1041026a51d40f3cc0e",
  "iss": "unNmFht8lVM_R29e0hYVI",
  "code_challenge_method": "S256",
  "nonce": "15929190-6cd3-4f9f-8b26-20807119919e",
  "aud": "https://www.certification.openid.net/test/a/quanto_test/",
  "nbf": 1669643682,
  "claims": {
    "id_token": {
      "acr": {
        "values": [
          "urn:brasil:openbanking:loa3"
        ],
        "essential": true
      },
      "cpf": {
        "value": "04745289952",
        "essential": true
      }
    }
  },
  "exp": 1669644882,
  "iat": 1669643682,
  "code_challenge": "NlwK-4Pg-w5yf12am8ONMqkS2Ej3t8bMj8UcF3pqv4w",
  "jti": "3b6cd774-d063-4d9d-86d8-7c2c53a928f6"
}

2022-11-28 13:54:45	SUCCESS FAPI1-ADV-5.2.3-16	EnsureClientIdInAuthorizationRequestParametersMatchRequestObject client_id http request parameter value matches client_id in request object

2022-11-28 13:54:45

(1) More

SUCCESS

ExtractRequestedScopes

Requested scopes

scope

openid consent:urn:conformance:oidf:SziLJFuOpE payments

2022-11-28 13:54:45

(2) More

SUCCESS

FAPIBrazilValidateConsentScope

Found consent scope in request

actual	[ "openid", "consent:urn:conformance:oidf:SziLJFuOpE", "payments" ]
expected	consent:urn:conformance:oidf:SziLJFuOpE

2022-11-28 13:54:45

(1) More

SUCCESS

EnsureScopeContainsPayments

Found payments scope in request

actual

[
  "openid",
  "consent:urn:conformance:oidf:SziLJFuOpE",
  "payments"
]

2022-11-28 13:54:45

(1) More

SUCCESS

FAPI1-ADV-5.2.2-2

EnsureResponseTypeIsCode

Response type is expected value

expected

code

2022-11-28 13:54:45

(1) More

SUCCESS

OIDCC-3.1.2.1

EnsureMatchingClientId

Client ID matched

client_id

unNmFht8lVM_R29e0hYVI

2022-11-28 13:54:45

(1) More

SUCCESS

CreateAuthorizationCode

Created authorization code

authorization_code

zrLqo2I8wvqLkPhwvyQ6mteQVFurUCpw

2022-11-28 13:54:45

(1) More

SUCCESS

FAPI1-BASE-5.2.2.2

ExtractNonceFromAuthorizationRequest

Extracted nonce

nonce

15929190-6cd3-4f9f-8b26-20807119919e

2022-11-28 13:54:45

(1) More

SUCCESS

FAPIBrazilChangeConsentStatusToAuthorized

Changed consent status to AUTHORISED

consent

{
  "data": {
    "consentId": "urn:conformance:oidf:SziLJFuOpE",
    "creationDateTime": "2022-11-28T13:54:42Z",
    "status": "AUTHORISED",
    "statusUpdateDateTime": "2022-11-28T13:54:45Z",
    "expirationDateTime": "2022-11-28T15:54:42Z",
    "transactionFromDateTime": "2022-11-28T13:49:42Z",
    "transactionToDateTime": "2022-11-28T15:54:42Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/quanto_testpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-11-28T13:54:42Z"
    },
    "creditor": {
      "name": "Rafael Argenta",
      "cpfCnpj": "04745289952",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "04745289952",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2022-11-28",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "localInstrument": "MANU",
        "creditorAccount": {
          "number": "15525813306",
          "accountType": "CACC",
          "ispb": "10573521",
          "issuer": "0001"
        }
      },
      "type": "PIX"
    }
  },
  "aud": "73d7035b-3c09-40ab-b4c2-900d9f7a5f1f",
  "iat": 1669643682,
  "jti": "dd402fb9-08ba-48a7-bf18-ac638531be4c",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}

2022-11-28 13:54:45

(1) More

SUCCESS

CreateAuthorizationEndpointResponseParams

Added authorization_endpoint_response_params to environment

params

{
  "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
  "state": "35f63f023f7a2c1d8fe40725c8667b2f0f9acedc7d4fd1041026a51d40f3cc0e"
}

2022-11-28 13:54:45

(1) More

SUCCESS

OIDCC-3.3.2.5

AddCodeToAuthorizationEndpointResponseParams

Added code to authorization endpoint response params

authorization_endpoint_response_params

{
  "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
  "state": "35f63f023f7a2c1d8fe40725c8667b2f0f9acedc7d4fd1041026a51d40f3cc0e",
  "code": "zrLqo2I8wvqLkPhwvyQ6mteQVFurUCpw"
}

2022-11-28 13:54:45

(5) More

GenerateJARMResponseClaims

Created JARM response claims

iss	https://www.certification.openid.net/test/a/quanto_test/
aud	unNmFht8lVM_R29e0hYVI
code	zrLqo2I8wvqLkPhwvyQ6mteQVFurUCpw
state	35f63f023f7a2c1d8fe40725c8667b2f0f9acedc7d4fd1041026a51d40f3cc0e
exp	1669644285

2022-11-28 13:54:45

(1) More

SUCCESS

JARM-4.2

SignJARMResponse

Signed the JARM response

jarm_response

eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvcXVhbnRvX3Rlc3RcLyIsImF1ZCI6InVuTm1GaHQ4bFZNX1IyOWUwaFlWSSIsImNvZGUiOiJ6ckxxbzJJOHd2cUxrUGh3dnlRNm10ZVFWRnVyVUNwdyIsInN0YXRlIjoiMzVmNjNmMDIzZjdhMmMxZDhmZTQwNzI1Yzg2NjdiMmYwZjlhY2VkYzdkNGZkMTA0MTAyNmE1MWQ0MGYzY2MwZSIsImV4cCI6MTY2OTY0NDI4NX0.BWCLeoRvFhi3P-Fhir1wp6-UfNB70fBxLjBH8TfP5dnq2zYzNyu7vnaJ1Yb0EvhEEzAjH6XZ3eWUU5BpOsoe5bDGX4AN0lAfWJEEMMDiqaJttTW6rw0t6swEuMpg86Wb9atQsgNclo3xgxQPo0UxXgicsXfat9aKdbnOFzhCjNyVrUyIzrLZJiNjyId-wu959LzfYLgkNNFyjbsYxlWkrK1vxgQWqlARAplX8Y17PMJmHc9ZOnb0AIx13rXqpQvKqEpykXtwiy-FZUA3edRogaC7u-yAtg7Qkj9_OJ2xDeK6S_Xbf-YompumCw5VEQpUpzCy2ueb35dN1yyPLmZHrQ

2022-11-28 13:54:45

(3) More

INFO

JARM-5

EncryptJARMResponse

Skipped evaluation due to missing required element: client authorization_encrypted_response_alg

path	authorization_encrypted_response_alg
mapped
object	client

2022-11-28 13:54:45

(1) More

SendJARMResponseWitResponseModeQuery

Redirecting back to client

uri

https://api.platform.sbx.contaquanto.net/opb-api/index?response=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvcXVhbnRvX3Rlc3RcLyIsImF1ZCI6InVuTm1GaHQ4bFZNX1IyOWUwaFlWSSIsImNvZGUiOiJ6ckxxbzJJOHd2cUxrUGh3dnlRNm10ZVFWRnVyVUNwdyIsInN0YXRlIjoiMzVmNjNmMDIzZjdhMmMxZDhmZTQwNzI1Yzg2NjdiMmYwZjlhY2VkYzdkNGZkMTA0MTAyNmE1MWQ0MGYzY2MwZSIsImV4cCI6MTY2OTY0NDI4NX0.BWCLeoRvFhi3P-Fhir1wp6-UfNB70fBxLjBH8TfP5dnq2zYzNyu7vnaJ1Yb0EvhEEzAjH6XZ3eWUU5BpOsoe5bDGX4AN0lAfWJEEMMDiqaJttTW6rw0t6swEuMpg86Wb9atQsgNclo3xgxQPo0UxXgicsXfat9aKdbnOFzhCjNyVrUyIzrLZJiNjyId-wu959LzfYLgkNNFyjbsYxlWkrK1vxgQWqlARAplX8Y17PMJmHc9ZOnb0AIx13rXqpQvKqEpykXtwiy-FZUA3edRogaC7u-yAtg7Qkj9_OJ2xDeK6S_Xbf-YompumCw5VEQpUpzCy2ueb35dN1yyPLmZHrQ

2022-11-28 13:54:45

(2) More

OUTGOING

fapi1-advanced-final-client-test

Response to HTTP request to test instance qBAVsfW4iMPgEWf

outgoing

org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://api.platform.sbx.contaquanto.net/opb-api/index?response=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvcXVhbnRvX3Rlc3RcLyIsImF1ZCI6InVuTm1GaHQ4bFZNX1IyOWUwaFlWSSIsImNvZGUiOiJ6ckxxbzJJOHd2cUxrUGh3dnlRNm10ZVFWRnVyVUNwdyIsInN0YXRlIjoiMzVmNjNmMDIzZjdhMmMxZDhmZTQwNzI1Yzg2NjdiMmYwZjlhY2VkYzdkNGZkMTA0MTAyNmE1MWQ0MGYzY2MwZSIsImV4cCI6MTY2OTY0NDI4NX0.BWCLeoRvFhi3P-Fhir1wp6-UfNB70fBxLjBH8TfP5dnq2zYzNyu7vnaJ1Yb0EvhEEzAjH6XZ3eWUU5BpOsoe5bDGX4AN0lAfWJEEMMDiqaJttTW6rw0t6swEuMpg86Wb9atQsgNclo3xgxQPo0UxXgicsXfat9aKdbnOFzhCjNyVrUyIzrLZJiNjyId-wu959LzfYLgkNNFyjbsYxlWkrK1vxgQWqlARAplX8Y17PMJmHc9ZOnb0AIx13rXqpQvKqEpykXtwiy-FZUA3edRogaC7u-yAtg7Qkj9_OJ2xDeK6S_Xbf-YompumCw5VEQpUpzCy2ueb35dN1yyPLmZHrQ]

outgoing_path

authorize

2022-11-28 13:54:46

(11) More

INCOMING

fapi1-advanced-final-client-test

Incoming HTTP request to /test-mtls/a/quanto_test/token

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "content-type": "application/x-www-form-urlencoded", "accept-encoding": "gzip", "connection": "close", "content-length": "256" }
incoming_path	/test-mtls/a/quanto_test/token
incoming_body_form_params	{ "client_id": "unNmFht8lVM_R29e0hYVI", "code": "zrLqo2I8wvqLkPhwvyQ6mteQVFurUCpw", "code_verifier": "4f85275c05cb60e1813a8d278d85c29dcd52a3399c19d92b5d7d84ac084975c2", "grant_type": "authorization_code", "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index" }
incoming_method	POST
incoming_tls_version	TLSv1.2
incoming_tls_cert	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
incoming_query_string_params	{}
incoming_body	client_id=unNmFht8lVM_R29e0hYVI&code=zrLqo2I8wvqLkPhwvyQ6mteQVFurUCpw&code_verifier=4f85275c05cb60e1813a8d278d85c29dcd52a3399c19d92b5d7d84ac084975c2&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fapi.platform.sbx.contaquanto.net%2Fopb-api%2Findex
incoming_tls_chain	[ "(null)", "(null)", "(null)", "(null)", "(null)", "(null)" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:54:46

(2) More

SUCCESS

FAPI1-ADV-8.5-1 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

Token endpoint

2022-11-28 13:54:46

(1) More

SUCCESS

RFC6749-3.2.1

CheckClientIdMatchesOnTokenRequestIfPresent

Extracted client_id matches the expected value

client_id

unNmFht8lVM_R29e0hYVI

2022-11-28 13:54:46

(1) More

SUCCESS

ExtractClientCertificateFromRequestHeaders

Extracted client certificate

client_certificate

{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nvRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3432303634353435303030313031,CN\u003dwww.quan.to,OU\u003d73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O\u003dQuanto Network Instituicao de Pagamento Ltda.,L\u003dSao Paulo,ST\u003dSao Paulo,C\u003dBR"
  },
  "sanDnsNames": [
    "www.quan.to"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}

2022-11-28 13:54:46	SUCCESS FAPI1-ADV-5.2.2-5	CheckForClientCertificate Found client certificate

2022-11-28 13:54:46

(1) More

SUCCESS

EnsureClientCertificateMatches

Presented certificate matches registered certificate

actual

2022-11-28 13:54:46	SUCCESS RFC8705-2	EnsureClientIdIsPresentOnTokenRequest Parameter client_id found on the request

2022-11-28 13:54:46	SUCCESS	EnsureNoClientAssertionSentToTokenEndpoint Client did not send a client_assertion to token endpoint

2022-11-28 13:54:46

(1) More

SUCCESS

ValidateAuthorizationCode

Found authorization code

authorization_code

zrLqo2I8wvqLkPhwvyQ6mteQVFurUCpw

2022-11-28 13:54:46

(1) More

SUCCESS

ValidateRedirectUri

Found redirect uri

redirect_uri

https://api.platform.sbx.contaquanto.net/opb-api/index

2022-11-28 13:54:46

(3) More

SUCCESS

RFC7636-4.6

ValidateCodeVerifierWithS256

Validated code_verifier successfully

code_challenge_method	S256
code_verifier	4f85275c05cb60e1813a8d278d85c29dcd52a3399c19d92b5d7d84ac084975c2
code_challenge	NlwK-4Pg-w5yf12am8ONMqkS2Ej3t8bMj8UcF3pqv4w

2022-11-28 13:54:46

(3) More

SUCCESS

RFC7636-7.1

EnsureMinimumPkceCodeVerifierEntropy

Calculated shannon entropy seems sufficient

actual	240.60007466291586
expected	180.0
value	4f85275c05cb60e1813a8d278d85c29dcd52a3399c19d92b5d7d84ac084975c2

2022-11-28 13:54:46

(2) More

SUCCESS

RFC7636-7.1

EnsureMinimumPkceCodeVerifierLength

PKCE code verifier is of sufficient length

actual	512
required	344

2022-11-28 13:54:46

(1) More

SUCCESS

RFC7636-4.1

EnsurePkceCodeVerifierNotUsed

Code verifier has not been used

code_verifier

4f85275c05cb60e1813a8d278d85c29dcd52a3399c19d92b5d7d84ac084975c2

2022-11-28 13:54:46

(1) More

SUCCESS

GenerateBearerAccessToken

Generated access token

access_token

Mb3H6JqWMDGHrZtLCTfPP7fIAn5mnbMdcT1OQkI82EVwLMQBeB

2022-11-28 13:54:46		GenerateAccessTokenExpiration Set access_token_expiration to 900

2022-11-28 13:54:46

(1) More

SUCCESS

OIDCC-3.3.2.11

CalculateAtHash

Successful at_hash encoding

at_hash

VYLSwjmwDSQl8x8DaoSTxw

2022-11-28 13:54:46

(1) More

CreateRefreshToken

Created refresh token

refresh_token

YGutKAjwUsvLDostjomnRjMaoKDbUYVvCrZklOpINiGAaqKiAZ3107019417:].>@

2022-11-28 13:54:46

(6) More

SUCCESS

GenerateIdTokenClaims

Created ID Token Claims

iss	https://www.certification.openid.net/test/a/quanto_test/
sub	user-subject-1234531
aud	unNmFht8lVM_R29e0hYVI
nonce	15929190-6cd3-4f9f-8b26-20807119919e
iat	1669643686
exp	1669643986

2022-11-28 13:54:46

(1) More

SUCCESS

BrazilOB-5.2.2.2 BrazilOB-5.2.2.3

FAPIBrazilAddCPFAndCPNJToIdTokenClaims

Added claims to id_token claims

id_token_claims

{
  "iss": "https://www.certification.openid.net/test/a/quanto_test/",
  "sub": "user-subject-1234531",
  "aud": "unNmFht8lVM_R29e0hYVI",
  "nonce": "15929190-6cd3-4f9f-8b26-20807119919e",
  "iat": 1669643686,
  "exp": 1669643986,
  "cpf": "04745289952"
}

2022-11-28 13:54:46

(2) More

SUCCESS

OIDCC-3.3.2.11

AddAtHashToIdTokenClaims

Added at_hash to ID token claims

at_hash

VYLSwjmwDSQl8x8DaoSTxw

id_token_claims

{
  "iss": "https://www.certification.openid.net/test/a/quanto_test/",
  "sub": "user-subject-1234531",
  "aud": "unNmFht8lVM_R29e0hYVI",
  "nonce": "15929190-6cd3-4f9f-8b26-20807119919e",
  "iat": 1669643686,
  "exp": 1669643986,
  "cpf": "04745289952",
  "at_hash": "VYLSwjmwDSQl8x8DaoSTxw"
}

2022-11-28 13:54:46

(2) More

SUCCESS

OIDCC-3.1.3.7-12

FAPIBrazilAddACRClaimToIdTokenClaims

Added acr value to id_token_claims

acr_value

urn:brasil:openbanking:loa3

claims

{
  "iss": "https://www.certification.openid.net/test/a/quanto_test/",
  "sub": "user-subject-1234531",
  "aud": "unNmFht8lVM_R29e0hYVI",
  "nonce": "15929190-6cd3-4f9f-8b26-20807119919e",
  "iat": 1669643686,
  "exp": 1669643986,
  "cpf": "04745289952",
  "at_hash": "VYLSwjmwDSQl8x8DaoSTxw",
  "acr": "urn:brasil:openbanking:loa3"
}

2022-11-28 13:54:46

(1) More

SUCCESS

SignIdToken

Signed the ID token

id_token

eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiVllMU3dqbXdEU1FsOHg4RGFvU1R4dyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0XC8iLCJjcGYiOiIwNDc0NTI4OTk1MiIsImV4cCI6MTY2OTY0Mzk4Niwibm9uY2UiOiIxNTkyOTE5MC02Y2QzLTRmOWYtOGIyNi0yMDgwNzExOTkxOWUiLCJpYXQiOjE2Njk2NDM2ODZ9.VmNx5X5cpjLmiK_b19JozY32MBHUfjqerDpc8oYADcEl88-upwK3SUybWdXE62yXpeOsspEc46hsnutRMQ2ZY0TkKrYlQkmJKemOx6AyWvHqty3JOpkSrV37EeB1sep5PtHLpHGTX7VopnAMniB8A_qN9UoLoCdKnohu5ZyPR7RaMILrVhz5qVFE4Lbv2-q732FmwKWWYMPcVEZByv2qTgLcG4R7dpFgb9ym9qfMOkbH9CzM1z-R-68Mqrh58LP36mh4Ii1yv_Ux2pOFb2w6MXad-finGd6bB1pMHmVNBT38e7zFFVeLYeKsN-pz-0OJWfI14ZmxUTY1okDOznrWBg

2022-11-28 13:54:46

(6) More

SUCCESS

CreateTokenEndpointResponse

Created token endpoint response

access_token	Mb3H6JqWMDGHrZtLCTfPP7fIAn5mnbMdcT1OQkI82EVwLMQBeB
token_type	Bearer
id_token	eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiVllMU3dqbXdEU1FsOHg4RGFvU1R4dyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0XC8iLCJjcGYiOiIwNDc0NTI4OTk1MiIsImV4cCI6MTY2OTY0Mzk4Niwibm9uY2UiOiIxNTkyOTE5MC02Y2QzLTRmOWYtOGIyNi0yMDgwNzExOTkxOWUiLCJpYXQiOjE2Njk2NDM2ODZ9.VmNx5X5cpjLmiK_b19JozY32MBHUfjqerDpc8oYADcEl88-upwK3SUybWdXE62yXpeOsspEc46hsnutRMQ2ZY0TkKrYlQkmJKemOx6AyWvHqty3JOpkSrV37EeB1sep5PtHLpHGTX7VopnAMniB8A_qN9UoLoCdKnohu5ZyPR7RaMILrVhz5qVFE4Lbv2-q732FmwKWWYMPcVEZByv2qTgLcG4R7dpFgb9ym9qfMOkbH9CzM1z-R-68Mqrh58LP36mh4Ii1yv_Ux2pOFb2w6MXad-finGd6bB1pMHmVNBT38e7zFFVeLYeKsN-pz-0OJWfI14ZmxUTY1okDOznrWBg
refresh_token	YGutKAjwUsvLDostjomnRjMaoKDbUYVvCrZklOpINiGAaqKiAZ3107019417:].>@
scope	openid consent:urn:conformance:oidf:SziLJFuOpE payments
expires_in	900

2022-11-28 13:54:46

(4) More

OUTGOING

fapi1-advanced-final-client-test

Response to HTTP request to test instance qBAVsfW4iMPgEWf

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "access_token": "Mb3H6JqWMDGHrZtLCTfPP7fIAn5mnbMdcT1OQkI82EVwLMQBeB", "token_type": "Bearer", "id_token": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiVllMU3dqbXdEU1FsOHg4RGFvU1R4dyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0XC8iLCJjcGYiOiIwNDc0NTI4OTk1MiIsImV4cCI6MTY2OTY0Mzk4Niwibm9uY2UiOiIxNTkyOTE5MC02Y2QzLTRmOWYtOGIyNi0yMDgwNzExOTkxOWUiLCJpYXQiOjE2Njk2NDM2ODZ9.VmNx5X5cpjLmiK_b19JozY32MBHUfjqerDpc8oYADcEl88-upwK3SUybWdXE62yXpeOsspEc46hsnutRMQ2ZY0TkKrYlQkmJKemOx6AyWvHqty3JOpkSrV37EeB1sep5PtHLpHGTX7VopnAMniB8A_qN9UoLoCdKnohu5ZyPR7RaMILrVhz5qVFE4Lbv2-q732FmwKWWYMPcVEZByv2qTgLcG4R7dpFgb9ym9qfMOkbH9CzM1z-R-68Mqrh58LP36mh4Ii1yv_Ux2pOFb2w6MXad-finGd6bB1pMHmVNBT38e7zFFVeLYeKsN-pz-0OJWfI14ZmxUTY1okDOznrWBg", "refresh_token": "YGutKAjwUsvLDostjomnRjMaoKDbUYVvCrZklOpINiGAaqKiAZ3107019417:].\u003e@", "scope": "openid consent:urn:conformance:oidf:SziLJFuOpE payments", "expires_in": 900 }
outgoing_path	token

2022-11-28 13:54:46

(11) More

INCOMING

fapi1-advanced-final-client-test

Incoming HTTP request to /test/a/quanto_test/jwks

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "accept-encoding": "gzip", "connection": "close" }
incoming_path	/test/a/quanto_test/jwks
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:54:46

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

2022-11-28 13:54:46

(4) More

OUTGOING

fapi1-advanced-final-client-test

Response to HTTP request to test instance qBAVsfW4iMPgEWf

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "keys": [ { "kty": "RSA", "e": "AQAB", "use": "sig", "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM", "x5c": [ "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\u003d\u003d" ], "alg": "PS256", "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w" }, { "kty": "RSA", "e": "AQAB", "use": "enc", "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996", "alg": "RSA-OAEP", "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q" } ] }
outgoing_path	jwks

2022-11-28 13:54:46

(11) More

INCOMING

fapi1-advanced-final-client-test

Incoming HTTP request to /test-mtls/a/quanto_test/payments/v1/consents/urn:conformance:oidf:SziLJFuOpE

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "go-openb", "accept": "application/jwt", "authorization": "Bearer VenFOo2V158D2to9BvCsF2ltOmvTp07eRMuARRJMolnUYqXUqM", "accept-encoding": "gzip", "connection": "close" }
incoming_path	/test-mtls/a/quanto_test/payments/v1/consents/urn:conformance:oidf:SziLJFuOpE
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "(null)", "(null)", "(null)", "(null)", "(null)", "(null)" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:54:47

(2) More

SUCCESS

FAPI1-ADV-8.5-1 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

Get consent endpoint

2022-11-28 13:54:47

(1) More

SUCCESS

ExtractClientCertificateFromRequestHeaders

Extracted client certificate

client_certificate

{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----\nMIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL\nBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx\nFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB\nTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5\nMzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD\nVQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp\nY2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00\nMGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG\nA1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0\naW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj\nY2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF\nAAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO\nSu0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W\nsDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR\nhmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/\nBqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr\nJp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD\nVR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j\nBBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG\nAQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp\nbC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr\naS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN\nggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH\nAwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB\nBQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug\nd2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw\nYXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0\nZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl\nc3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp\nYW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk\nb2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5\nLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN\nBgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K\nyD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB\nEKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd\nlr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL\n9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp\nvRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3432303634353435303030313031,CN\u003dwww.quan.to,OU\u003d73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O\u003dQuanto Network Instituicao de Pagamento Ltda.,L\u003dSao Paulo,ST\u003dSao Paulo,C\u003dBR"
  },
  "sanDnsNames": [
    "www.quan.to"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}

2022-11-28 13:54:47	SUCCESS FAPI1-ADV-5.2.2-5	CheckForClientCertificate Found client certificate

2022-11-28 13:54:47

(1) More

SUCCESS

EnsureClientCertificateMatches

Presented certificate matches registered certificate

actual

2022-11-28 13:54:47	SUCCESS FAPI1-BASE-6.2.2-1	EnsureBearerAccessTokenNotInParams Client correctly did not send access token in query parameters or form body

2022-11-28 13:54:47

(1) More

SUCCESS

FAPI1-BASE-6.2.2-1

ExtractBearerAccessTokenFromHeader

Found access token on incoming request

access_token

VenFOo2V158D2to9BvCsF2ltOmvTp07eRMuARRJMolnUYqXUqM

2022-11-28 13:54:47

(1) More

SUCCESS

RequireBearerClientCredentialsAccessToken

Found access token in request

actual

VenFOo2V158D2to9BvCsF2ltOmvTp07eRMuARRJMolnUYqXUqM

2022-11-28 13:54:47

(3) More

INFO

FAPI1-BASE-6.2.2-3

ExtractFapiDateHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date

path	headers.x-fapi-auth-date
mapped
object	incoming_request

2022-11-28 13:54:47

(3) More

INFO

FAPI1-BASE-6.2.2-4

ExtractFapiIpAddressHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address

path	headers.x-fapi-customer-ip-address
mapped
object	incoming_request

2022-11-28 13:54:47

(3) More

INFO

FAPI1-BASE-6.2.2-5

ExtractFapiInteractionIdHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id

path	headers.x-fapi-interaction-id
mapped
object	incoming_request

2022-11-28 13:54:47

(1) More

INFO

CreateFapiInteractionIdIfNeeded

Found existing FAPI interaction ID

fapi_interaction_id

55f8d14f-279f-4ad8-b0bc-0c75282cf088

2022-11-28 13:54:47

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilGenerateGetPaymentConsentResponse

Created consent response

response

{
  "data": {
    "consentId": "urn:conformance:oidf:SziLJFuOpE",
    "creationDateTime": "2022-11-28T13:54:42Z",
    "status": "AUTHORISED",
    "statusUpdateDateTime": "2022-11-28T13:54:45Z",
    "expirationDateTime": "2022-11-28T15:54:42Z",
    "transactionFromDateTime": "2022-11-28T13:49:42Z",
    "transactionToDateTime": "2022-11-28T15:54:42Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/quanto_testpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-11-28T13:54:42Z"
    },
    "creditor": {
      "name": "Rafael Argenta",
      "cpfCnpj": "04745289952",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "04745289952",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2022-11-28",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "localInstrument": "MANU",
        "creditorAccount": {
          "number": "15525813306",
          "accountType": "CACC",
          "ispb": "10573521",
          "issuer": "0001"
        }
      },
      "type": "PIX"
    }
  },
  "aud": "73d7035b-3c09-40ab-b4c2-900d9f7a5f1f",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817",
  "iat": 1669643687,
  "jti": "1290a4e9-b470-43b3-9a32-ed36d627d60b",
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-11-28T13:54:47Z"
  }
}

2022-11-28 13:54:47

(1) More

SUCCESS

BrazilOB-6.1-2

FAPIBrazilSignPaymentConsentResponse

Signed the payment consent response

signed_consent_response

eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.f5YsMK5qKmhpGtRtJqNvOrAmb3IynYua7XYzerMKNlN7BVW0CG_2LKn9dDI1YEeEPbMFoORLp9pIlo_Kix1PCxiwhZ2DIJMF-cBJPWIJe-Wi-SFgic4D-vVD2RuKzq7qboT7e73yWn_uSee9sBrjmkLxS8vNqbL4TiEv23YzwSl7DMs2q_CkmNV--fDbTTezev--xpip4At6F0echMMJh7VSY_GnNcyLqZSEJAXoZIOOCJN1ExrcVoi5i13pglrnIRy_txlSietTVXqJFHtJlsBCyvslD39kp0GNPIUAL0XzB7rvlwhUjaRnjpGx5KSEq6Q39rptRpJ2qp0AhRkw4A

2022-11-28 13:54:47		ClearAccessTokenFromRequest Removed incoming access token from environment

2022-11-28 13:54:47

(4) More

OUTGOING

fapi1-advanced-final-client-test

Response to HTTP request to test instance qBAVsfW4iMPgEWf

outgoing_status_code	200
outgoing_headers	{ "x-fapi-interaction-id": [ "55f8d14f-279f-4ad8-b0bc-0c75282cf088" ], "Content-Type": [ "application/jwt" ] }
outgoing_body	eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJpc3MiOiI3NGU5MjlkOS0zM2I2LTRkODUtOGJhNy1jMTQ2Yzg2N2E4MTciLCJhdWQiOiI3M2Q3MDM1Yi0zYzA5LTQwYWItYjRjMi05MDBkOWY3YTVmMWYiLCJkYXRhIjp7ImNvbnNlbnRJZCI6InVybjpjb25mb3JtYW5jZTpvaWRmOlN6aUxKRnVPcEUiLCJleHBpcmF0aW9uRGF0ZVRpbWUiOiIyMDIyLTExLTI4VDE1OjU0OjQyWiIsInRyYW5zYWN0aW9uRnJvbURhdGVUaW1lIjoiMjAyMi0xMS0yOFQxMzo0OTo0MloiLCJ0cmFuc2FjdGlvblRvRGF0ZVRpbWUiOiIyMDIyLTExLTI4VDE1OjU0OjQyWiIsIm1ldGEiOnsidG90YWxSZWNvcmRzIjoxLCJyZXF1ZXN0RGF0ZVRpbWUiOiIyMDIyLTExLTI4VDEzOjU0OjQyWiIsInRvdGFsUGFnZXMiOjF9LCJzdGF0dXNVcGRhdGVEYXRlVGltZSI6IjIwMjItMTEtMjhUMTM6NTQ6NDVaIiwibG9nZ2VkVXNlciI6eyJkb2N1bWVudCI6eyJpZGVudGlmaWNhdGlvbiI6IjA0NzQ1Mjg5OTUyIiwicmVsIjoiQ1BGIn19LCJsaW5rcyI6eyJzZWxmIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0cGF5bWVudHNcL3YxXC9jb25zZW50cyJ9LCJjcmVkaXRvciI6eyJuYW1lIjoiUmFmYWVsIEFyZ2VudGEiLCJjcGZDbnBqIjoiMDQ3NDUyODk5NTIiLCJwZXJzb25UeXBlIjoiUEVTU09BX05BVFVSQUwifSwicGF5bWVudCI6eyJkYXRlIjoiMjAyMi0xMS0yOCIsImFtb3VudCI6IjAuMDEiLCJjdXJyZW5jeSI6IkJSTCIsImRldGFpbHMiOnsibG9jYWxJbnN0cnVtZW50IjoiTUFOVSIsImNyZWRpdG9yQWNjb3VudCI6eyJudW1iZXIiOiIxNTUyNTgxMzMwNiIsImFjY291bnRUeXBlIjoiQ0FDQyIsImlzcGIiOiIxMDU3MzUyMSIsImlzc3VlciI6IjAwMDEifX0sInR5cGUiOiJQSVgifSwiY3JlYXRpb25EYXRlVGltZSI6IjIwMjItMTEtMjhUMTM6NTQ6NDJaIiwic3RhdHVzIjoiQVVUSE9SSVNFRCJ9LCJpYXQiOjE2Njk2NDM2ODIsImp0aSI6ImRkNDAyZmI5LTA4YmEtNDhhNy1iZjE4LWFjNjM4NTMxYmU0YyJ9.f5YsMK5qKmhpGtRtJqNvOrAmb3IynYua7XYzerMKNlN7BVW0CG_2LKn9dDI1YEeEPbMFoORLp9pIlo_Kix1PCxiwhZ2DIJMF-cBJPWIJe-Wi-SFgic4D-vVD2RuKzq7qboT7e73yWn_uSee9sBrjmkLxS8vNqbL4TiEv23YzwSl7DMs2q_CkmNV--fDbTTezev--xpip4At6F0echMMJh7VSY_GnNcyLqZSEJAXoZIOOCJN1ExrcVoi5i13pglrnIRy_txlSietTVXqJFHtJlsBCyvslD39kp0GNPIUAL0XzB7rvlwhUjaRnjpGx5KSEq6Q39rptRpJ2qp0AhRkw4A
outgoing_path	payments/v1/consents/urn:conformance:oidf:SziLJFuOpE

2022-11-28 13:54:47

(11) More

INCOMING

fapi1-advanced-final-client-test

Incoming HTTP request to /test-mtls/a/quanto_test/payments/v1/pix/payments

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "go-openb", "accept": "application/jwt", "authorization": "Bearer Mb3H6JqWMDGHrZtLCTfPP7fIAn5mnbMdcT1OQkI82EVwLMQBeB", "content-type": "application/jwt", "x-idempotency-key": "1523fab2-38a3-4410-b306-d3e0f9b45c18", "accept-encoding": "gzip", "connection": "close", "content-length": "1066" }
incoming_path	/test-mtls/a/quanto_test/payments/v1/pix/payments
incoming_body_form_params
incoming_method	POST
incoming_tls_version	TLSv1.2
incoming_tls_cert	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
incoming_query_string_params	{}
incoming_body	eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJqd3QifQ.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.l_nx0A9vPK-iOjlmKcAjJulQ4nUCtngoH1jsCTx6VXZLfOnXK-BMGCYW5CIvyuHEAlMlMTJlTrH-LvD7kgMkPtd5_iAeLoJg4ecoI6GZBPzVj25rtliCgv4bxZAri1eQeWQ7PiL-XIl1Y4xVBuhxgumERm3VJIhsg93GbHIlOtBBHeHt0XPjcJrLzMuh6H0_gGWBoFtgW92U5uc6jhunRzyJGKeV0xFIc7gAKERRuBBfARWZDi8JIXHkV_1FXmyE_CSmW8f8HL1Gw70x1D4jsuE6iXHtDkP7Ex804WbGKYDMSPTIa7JPtZ9sfa9sI-AWrVve089pY2gP9TZ2NEnTPQ
incoming_tls_chain	[ "(null)", "(null)", "(null)", "(null)", "(null)", "(null)" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:54:47

(2) More

SUCCESS

FAPI1-ADV-8.5-1 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

2022-11-28 13:54:47

(1) More

SUCCESS

ExtractClientCertificateFromRequestHeaders

Extracted client certificate

client_certificate

{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nvRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3432303634353435303030313031,CN\u003dwww.quan.to,OU\u003d73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O\u003dQuanto Network Instituicao de Pagamento Ltda.,L\u003dSao Paulo,ST\u003dSao Paulo,C\u003dBR"
  },
  "sanDnsNames": [
    "www.quan.to"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}

2022-11-28 13:54:47	SUCCESS FAPI1-ADV-5.2.2-5	CheckForClientCertificate Found client certificate

2022-11-28 13:54:47

(1) More

SUCCESS

EnsureClientCertificateMatches

Presented certificate matches registered certificate

actual

Payment initiation endpoint

2022-11-28 13:54:47	SUCCESS	EnsureIncomingRequestMethodIsPost Client correctly used http POST method

2022-11-28 13:54:47	SUCCESS FAPI1-BASE-6.2.2-1	EnsureBearerAccessTokenNotInParams Client correctly did not send access token in query parameters or form body

2022-11-28 13:54:47

(1) More

SUCCESS

FAPI1-BASE-6.2.2-1

ExtractBearerAccessTokenFromHeader

Found access token on incoming request

access_token

Mb3H6JqWMDGHrZtLCTfPP7fIAn5mnbMdcT1OQkI82EVwLMQBeB

2022-11-28 13:54:47

(1) More

SUCCESS

RequireBearerAccessToken

Found access token in request

actual

Mb3H6JqWMDGHrZtLCTfPP7fIAn5mnbMdcT1OQkI82EVwLMQBeB

2022-11-28 13:54:47

(3) More

INFO

FAPI1-BASE-6.2.2-3

ExtractFapiDateHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date

path	headers.x-fapi-auth-date
mapped
object	incoming_request

2022-11-28 13:54:47

(3) More

INFO

FAPI1-BASE-6.2.2-4

ExtractFapiIpAddressHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address

path	headers.x-fapi-customer-ip-address
mapped
object	incoming_request

2022-11-28 13:54:47

(3) More

INFO

FAPI1-BASE-6.2.2-5

ExtractFapiInteractionIdHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id

path	headers.x-fapi-interaction-id
mapped
object	incoming_request

2022-11-28 13:54:47

(2) More

SUCCESS

FAPIBrazilEnsureAuthorizationRequestScopesContainPayments

'payments' was included in authorization request scopes

actual	openid consent:urn:conformance:oidf:SziLJFuOpE payments
expected	payments

2022-11-28 13:54:47

(1) More

SUCCESS

BrazilOB-5.2.2.2

FAPIBrazilExtractPaymentInitiationRequest

Parsed payment initiation request

payment_initiation_request

{
  "aud": "https://www.certification.openid.net/test-mtls/a/quanto_test/payments/v1/pix/payments",
  "data": {
    "localInstrument": "MANU",
    "creditorAccount": {
      "number": "15525813306",
      "accountType": "CACC",
      "ispb": "10573521",
      "issuer": "0001"
    },
    "cnpjInitiator": "42064545000101",
    "payment": {
      "amount": "0.01",
      "currency": "BRL"
    },
    "endToEndId": "E42064545202211281354NkV1d4NK0aW"
  },
  "iss": "73d7035b-3c09-40ab-b4c2-900d9f7a5f1f",
  "iat": 1669643687,
  "jti": "dbb807d4-72dd-495e-9e74-4b45a291dcce"
}

2022-11-28 13:54:47

(1) More

SUCCESS

BrazilOB-6.1-6

FAPIBrazilValidateJwtSignatureUsingOrganizationJwks

jwt signature validated

jwt

eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJqd3QifQ.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.l_nx0A9vPK-iOjlmKcAjJulQ4nUCtngoH1jsCTx6VXZLfOnXK-BMGCYW5CIvyuHEAlMlMTJlTrH-LvD7kgMkPtd5_iAeLoJg4ecoI6GZBPzVj25rtliCgv4bxZAri1eQeWQ7PiL-XIl1Y4xVBuhxgumERm3VJIhsg93GbHIlOtBBHeHt0XPjcJrLzMuh6H0_gGWBoFtgW92U5uc6jhunRzyJGKeV0xFIc7gAKERRuBBfARWZDi8JIXHkV_1FXmyE_CSmW8f8HL1Gw70x1D4jsuE6iXHtDkP7Ex804WbGKYDMSPTIa7JPtZ9sfa9sI-AWrVve089pY2gP9TZ2NEnTPQ

2022-11-28 13:54:47	SUCCESS BrazilOB-6.1-4	EnsureIncomingRequestContentTypeIsApplicationJwt Client correctly used application/jwt content type

2022-11-28 13:54:47

(1) More

SUCCESS

ExtractXIdempotencyKeyHeader

Found an x-idempotency-key header

idempotency_key

1523fab2-38a3-4410-b306-d3e0f9b45c18

2022-11-28 13:54:47

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilValidatePaymentInitiationRequestAud

aud claim matches the endpoint url

aud	https://www.certification.openid.net/test-mtls/a/quanto_test/payments/v1/pix/payments

2022-11-28 13:54:47

(3) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate

Extracted subject from the mtls client certificate

subjectdn

UID=ce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,2.5.4.5=#130e3432303634353435303030313031,CN=www.quan.to,OU=73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O=Quanto Network Instituicao de Pagamento Ltda.,L=Sao Paulo,ST=Sao Paulo,C=BR

ou

73d7035b-3c09-40ab-b4c2-900d9f7a5f1f

brazil_software_id

ce627cce-afcc-4cfb-acf4-2e05a890780c

2022-11-28 13:54:47

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilEnsurePaymentInitiationRequestIssEqualsOrganizationId

iss claim in payment initiation request matches organizationId in client certificate

iss	73d7035b-3c09-40ab-b4c2-900d9f7a5f1f

2022-11-28 13:54:47

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilEnsurePaymentInitiationRequestJtiIsUUIDv4

jti claim in payment initiation request is a UUIDv4

jti	dbb807d4-72dd-495e-9e74-4b45a291dcce

2022-11-28 13:54:47

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilValidatePaymentInitiationRequestIat

iat claim in payment initiation request is valid

iat	1669643687

2022-11-28 13:54:47

(2) More

SUCCESS

BrazilOB-5.2.2.2

FAPIBrazilGenerateNewPaymentInitiationResponse

Created payment initiation response

payment_initiation_response_headers

{
  "x-fapi-interaction-id": "55f8d14f-279f-4ad8-b0bc-0c75282cf088"
}

payment_initiation_response

{
  "data": {
    "localInstrument": "MANU",
    "creditorAccount": {
      "number": "15525813306",
      "accountType": "CACC",
      "ispb": "10573521",
      "issuer": "0001"
    },
    "cnpjInitiator": "42064545000101",
    "payment": {
      "amount": "0.01",
      "currency": "BRL"
    },
    "endToEndId": "E42064545202211281354NkV1d4NK0aW",
    "paymentId": "0ee2083b-71e6-466f-91dd-fc2c51a43a59",
    "consentId": "urn:conformance:oidf:SziLJFuOpE",
    "creationDateTime": "2022-11-28T13:54:47Z",
    "statusUpdateDateTime": "2022-11-28T13:54:47Z",
    "status": "ACSP"
  },
  "links": {
    "self": "https://www.certification.openid.net/test/a/quanto_testpayments/v1/pix/payments"
  },
  "meta": {
    "totalRecords": 1,
    "totalPages": 1,
    "requestDateTime": "2022-11-28T13:54:47Z"
  },
  "aud": "73d7035b-3c09-40ab-b4c2-900d9f7a5f1f",
  "iat": 1669643687,
  "jti": "9d192aaa-30a3-494e-8242-5d31872992f6",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}

2022-11-28 13:54:47

(1) More

SUCCESS

BrazilOB-6.1-2

FAPIBrazilSignPaymentInitiationResponse

Signed the payment initiation response

signed_payment_initiation_response

eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJhdWQiOiI3M2Q3MDM1Yi0zYzA5LTQwYWItYjRjMi05MDBkOWY3YTVmMWYiLCJkYXRhIjp7ImNvbnNlbnRJZCI6InVybjpjb25mb3JtYW5jZTpvaWRmOlN6aUxKRnVPcEUiLCJsb2NhbEluc3RydW1lbnQiOiJNQU5VIiwicGF5bWVudElkIjoiMGVlMjA4M2ItNzFlNi00NjZmLTkxZGQtZmMyYzUxYTQzYTU5IiwiY3JlZGl0b3JBY2NvdW50Ijp7Im51bWJlciI6IjE1NTI1ODEzMzA2IiwiYWNjb3VudFR5cGUiOiJDQUNDIiwiaXNwYiI6IjEwNTczNTIxIiwiaXNzdWVyIjoiMDAwMSJ9LCJzdGF0dXNVcGRhdGVEYXRlVGltZSI6IjIwMjItMTEtMjhUMTM6NTQ6NDdaIiwiY25wakluaXRpYXRvciI6IjQyMDY0NTQ1MDAwMTAxIiwicGF5bWVudCI6eyJhbW91bnQiOiIwLjAxIiwiY3VycmVuY3kiOiJCUkwifSwiZW5kVG9FbmRJZCI6IkU0MjA2NDU0NTIwMjIxMTI4MTM1NE5rVjFkNE5LMGFXIiwiY3JlYXRpb25EYXRlVGltZSI6IjIwMjItMTEtMjhUMTM6NTQ6NDdaIiwic3RhdHVzIjoiQUNTUCJ9LCJtZXRhIjp7InRvdGFsUmVjb3JkcyI6MSwicmVxdWVzdERhdGVUaW1lIjoiMjAyMi0xMS0yOFQxMzo1NDo0N1oiLCJ0b3RhbFBhZ2VzIjoxfSwiaXNzIjoiNzRlOTI5ZDktMzNiNi00ZDg1LThiYTctYzE0NmM4NjdhODE3IiwibGlua3MiOnsic2VsZiI6Imh0dHBzOlwvXC93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0XC90ZXN0XC9hXC9xdWFudG9fdGVzdHBheW1lbnRzXC92MVwvcGl4XC9wYXltZW50cyJ9LCJpYXQiOjE2Njk2NDM2ODcsImp0aSI6IjlkMTkyYWFhLTMwYTMtNDk0ZS04MjQyLTVkMzE4NzI5OTJmNiJ9.MGoklXMqrsmTXB3h-2_TSBkkbo_4lGE1JPpxJgmLfIl56phCW8U72ze3ApCNle1LMIoDaBXRt2Ia752AKfI3-B4X1OkyySfKY418BO4kln4zHfeedA_E7fiQXLkZ0yt41XFh97ELolKMRtV3sq9buzhUfKcCbABqlJR0aa4n1msKcRMRIx0u1TSVmZ8Ct1p_Y2uVhpWGCzSf99TpxKwtMz9p6CafUYMRATX5g6mQeokWUiCLjebjBuHgZSSBgGqoecBaI7rHaAWlIDWxoZSr_aOCFa26R_9NvSN7MPdUkcvnLJbttmOjNgQrqOSHtwBaG9NEhqKCdWNOgIbbljHIvg

2022-11-28 13:54:47		ClearAccessTokenFromRequest Removed incoming access token from environment

2022-11-28 13:54:47

(4) More

OUTGOING

fapi1-advanced-final-client-test

Response to HTTP request to test instance qBAVsfW4iMPgEWf

outgoing_status_code	201
outgoing_headers	{ "x-fapi-interaction-id": [ "55f8d14f-279f-4ad8-b0bc-0c75282cf088" ], "Content-Type": [ "application/jwt" ] }
outgoing_body	eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.eyJhdWQiOiI3M2Q3MDM1Yi0zYzA5LTQwYWItYjRjMi05MDBkOWY3YTVmMWYiLCJkYXRhIjp7ImNvbnNlbnRJZCI6InVybjpjb25mb3JtYW5jZTpvaWRmOlN6aUxKRnVPcEUiLCJsb2NhbEluc3RydW1lbnQiOiJNQU5VIiwicGF5bWVudElkIjoiMGVlMjA4M2ItNzFlNi00NjZmLTkxZGQtZmMyYzUxYTQzYTU5IiwiY3JlZGl0b3JBY2NvdW50Ijp7Im51bWJlciI6IjE1NTI1ODEzMzA2IiwiYWNjb3VudFR5cGUiOiJDQUNDIiwiaXNwYiI6IjEwNTczNTIxIiwiaXNzdWVyIjoiMDAwMSJ9LCJzdGF0dXNVcGRhdGVEYXRlVGltZSI6IjIwMjItMTEtMjhUMTM6NTQ6NDdaIiwiY25wakluaXRpYXRvciI6IjQyMDY0NTQ1MDAwMTAxIiwicGF5bWVudCI6eyJhbW91bnQiOiIwLjAxIiwiY3VycmVuY3kiOiJCUkwifSwiZW5kVG9FbmRJZCI6IkU0MjA2NDU0NTIwMjIxMTI4MTM1NE5rVjFkNE5LMGFXIiwiY3JlYXRpb25EYXRlVGltZSI6IjIwMjItMTEtMjhUMTM6NTQ6NDdaIiwic3RhdHVzIjoiQUNTUCJ9LCJtZXRhIjp7InRvdGFsUmVjb3JkcyI6MSwicmVxdWVzdERhdGVUaW1lIjoiMjAyMi0xMS0yOFQxMzo1NDo0N1oiLCJ0b3RhbFBhZ2VzIjoxfSwiaXNzIjoiNzRlOTI5ZDktMzNiNi00ZDg1LThiYTctYzE0NmM4NjdhODE3IiwibGlua3MiOnsic2VsZiI6Imh0dHBzOlwvXC93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0XC90ZXN0XC9hXC9xdWFudG9fdGVzdHBheW1lbnRzXC92MVwvcGl4XC9wYXltZW50cyJ9LCJpYXQiOjE2Njk2NDM2ODcsImp0aSI6IjlkMTkyYWFhLTMwYTMtNDk0ZS04MjQyLTVkMzE4NzI5OTJmNiJ9.MGoklXMqrsmTXB3h-2_TSBkkbo_4lGE1JPpxJgmLfIl56phCW8U72ze3ApCNle1LMIoDaBXRt2Ia752AKfI3-B4X1OkyySfKY418BO4kln4zHfeedA_E7fiQXLkZ0yt41XFh97ELolKMRtV3sq9buzhUfKcCbABqlJR0aa4n1msKcRMRIx0u1TSVmZ8Ct1p_Y2uVhpWGCzSf99TpxKwtMz9p6CafUYMRATX5g6mQeokWUiCLjebjBuHgZSSBgGqoecBaI7rHaAWlIDWxoZSr_aOCFa26R_9NvSN7MPdUkcvnLJbttmOjNgQrqOSHtwBaG9NEhqKCdWNOgIbbljHIvg
outgoing_path	payments/v1/pix/payments

2022-11-28 13:54:47

(1) More

FINISHED

fapi1-advanced-final-client-test

Test has run to completion

testmodule_result

PASSED

2022-11-28 13:54:51

(2) More

TEST-RUNNER

Alias has now been claimed by another test

alias	quanto_test
new_test_id	LSdCDCXG6g8Vogd

Test Summary

Test Results