Test detail

Test Name	fapi1-advanced-final-client-test-invalid-alternate-alg
Variant	client_auth_type=private_key_jwt, fapi_auth_request_method=pushed, fapi_client_type=oidc, fapi_profile=openbanking_brazil, fapi_response_mode=jarm
Test ID	DkArrrVC13Hlc3l https://www.certification.openid.net/log-detail.html?public=true&log=DkArrrVC13Hlc3l
Created	2022-11-28T13:18:56.178182Z
Description	Quanto RP
Test Version	5.0.7
Test Owner	103024967838956445061 https://accounts.google.com
Plan ID	QeCKQjRLwLWaC https://www.certification.openid.net/plan-detail.html?public=true&plan=QeCKQjRLwLWaC
Exported From	https://www.certification.openid.net
Exported By	103024967838956445061 https://accounts.google.com
Suite Version	5.0.7
Exported	2022-11-29 14:45:28 (UTC)

2022-11-28 13:18:56

(7) More

INFO

TEST-RUNNER

Test instance DkArrrVC13Hlc3l created

baseUrl	https://www.certification.openid.net/test/a/quanto_test
variant	{ "client_auth_type": "private_key_jwt", "fapi_auth_request_method": "pushed", "fapi_client_type": "oidc", "fapi_profile": "openbanking_brazil", "fapi_response_mode": "jarm" }
alias	quanto_test
description	Quanto RP
planId	QeCKQjRLwLWaC
config	{ "alias": "quanto_test", "description": "Quanto RP", "server": { "jwks": { "keys": [ { "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc", "kty": "RSA", "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00", "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q", "e": "AQAB", "alg": "PS256", "use": "sig", "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM", "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg", "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE", "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk", "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w", "x5c": [ "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\u003d\u003d" ] }, { "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic", "kty": "RSA", "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs", "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ", "e": "AQAB", "use": "enc", "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996", "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8", "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8", "alg": "RSA-OAEP", "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM", "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q" } ] } }, "client": { "client_id": "unNmFht8lVM_R29e0hYVI", "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index", "certificate": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----", "jwks": { "keys": [ { "kty": "RSA", "use": "sig", "alg": "PS256", "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE", "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw", "e": "AQAB" } ] } }, "client2": { "client_id": "3512766953869", "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index", "id_token_encrypted_response_alg": "RSA-OAEP", "certificate": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----", "jwks": { "keys": [ { "kty": "RSA", "use": "sig", "alg": "PS256", "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE", "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw", "e": "AQAB" }, { "use": "enc", "kid": "9da0283ce6957f44f26b33102fd39fbc3530050502173029b36a27ec7c518123", "alg": "RSA-OAEP", "kty": "RSA", "n": "tNNwY3N1-FJPF2SwBrBxfsutfEsWaFpbn1ztDodUSqBCHV7ZlSipSdJiCe061m2idB_jDRJL_xgUKnY0pE39gT99JEwsIayOhJuSz2HHWIS8aYfThko1oM6HcFYIEx29-xk-aJczyk4j1ExZuMml0SuHusXCtpTAhh-zTnPuoHZj5SmAIgkNo5O5aoRKoZuJmX1QaLHGyQVPWVoqHwkP0v0K06JgARNYj3k5-UM64utQyu0ijLaAQntkjLSMSUsrYdkZSNv-we0ZU838qaJo1rZQGCA8iAZga-wXFE0oMKwd5PCzUhSwGfsQj3BXTEFFsSa6aZwQK9DfNZJgkxinkw", "e": "AQAB" } ] }, "id_token_encrypted_response_enc": "A256GCM" }, "directory": { "keystore": "https://keystore.sandbox.directory.openbankingbrasil.org.br/" }, "consent": {}, "publish": "everything" }
testName	fapi1-advanced-final-client-test-invalid-alternate-alg

2022-11-28 13:18:56

(3) More

SUCCESS

GenerateServerConfigurationMTLS

Created server configuration

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  }
}

issuer

https://www.certification.openid.net/test/a/quanto_test/

discoveryUrl

https://www.certification.openid.net/test/a/quanto_test/.well-known/openid-configuration

2022-11-28 13:18:56

(3) More

SUCCESS

LoadServerJWKs

Parsed public and private JWK sets

server_jwks

{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}

server_encryption_keys

{
  "keys": [
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}

server_public_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "MIIGqzCCBZOgAwIBAgIUdUCw8bQZidnZ6uERKJuN9u4RGvcwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwxFTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNBTkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIxMDgxNjA5NTUwMFoXDTIyMDkxNTA5NTUwMFowgacxCzAJBgNVBAYTAkJSMRMwEQYDVQQKEwpJQ1AtQnJhc2lsMS8wDAYDVQQLEwUxMjM0NTAOBgNVBAsTB2NlcnRtYW4wDwYDVQQLEwhhZ29vZG9uZTEcMBoGA1UEAxMTT3BlbiBCYW5raW5nIEJyYXNpbDE0MDIGCgmSJomT8ixkAQETJDc0ZTkyOWQ5LTMzYjYtNGQ4NS04YmE3LWMxNDZjODY3YTgxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyF1agPcwq5ms99Flo82XsXUroWoD/6FX4AfmOUu113h4VOLYaO3N8HDYbKxgii2En/+O61e/Ptjn4T2PVq0iVcqiF6Gp4sKE5w/bKZRfdCe8qIPS4D+JKpFpesJvIHUeQvlAuBp5dA9nGSpxOjGe5P2+ZzNGXwvux/2ztdweGmKbtOvbYe4RVhiu6bOubog8XEBmD96EnqmoROasH1Hn9kDJIclbTP51j/TlQMzhrSfJJuE3Qq6vWhe/DaPbtmELmlDiYHjp8CjAY5oBMHLmkHvQxEBV4cwbUZj5ZpdqU8tkA78XtR4DkzrJ4fYoBb1+9ABq6GNzxWPpSQMQuBXdsCAwEAAaOCAwIwggL+MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJwv7oHX2exZL304ru+4eGVypHlxMB8GA1UdIwQYMBaAFIZ/WK0X9YK2TrQFs/uwzhFD30y+MEwGCCsGAQUFBwEBBEAwPjA8BggrBgEFBQcwAYYwaHR0cDovL29jc3Auc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwuc2FuZGJveC5wa2kub3BlbmJhbmtpbmdicmFzaWwub3JnLmJyL2lzc3Vlci5jcmwwXgYDVR0RBFcwVaAZBgVgTAEDAqAQDA5NaWNoYWVsIEZyYXNlcqAYBgVgTAEDA6APDA0xMzM1MzIzNjAwMTg5oA0GBWBMAQMEoAQMAm5voA8GBWBMAQMHoAYMBGFsb3QwDgYDVR0PAQH/BAQDAgbAMIIBoQYDVR0gBIIBmDCCAZQwggGQBgorBgEEAYO6L2QBMIIBgDCCATYGCCsGAQUFBwICMIIBKAyCASRUaGlzIENlcnRpZmljYXRlIGlzIHNvbGVseSBmb3IgdXNlIHdpdGggUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkIGFuZCBvdGhlciBwYXJ0aWNpcGF0aW5nIG9yZ2FuaXNhdGlvbnMgdXNpbmcgUmFpZGlhbSBTZXJ2aWNlcyBMaW1pdGVkcyBUcnVzdCBGcmFtZXdvcmsgU2VydmljZXMuIEl0cyByZWNlaXB0LCBwb3NzZXNzaW9uIG9yIHVzZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBSYWlkaWFtIFNlcnZpY2VzIEx0ZCBDZXJ0aWNpY2F0ZSBQb2xpY3kgYW5kIHJlbGF0ZWQgZG9jdW1lbnRzIHRoZXJlaW4uMEQGCCsGAQUFBwIBFjhodHRwOi8vY3BzLnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczANBgkqhkiG9w0BAQsFAAOCAQEAtKn/QnJqKLp52YB14x+M21qwz67utFkWjhauQe0elXupjY5NWZb5wLrGYNOZQzRe2JRzcBbGN6P7lCweRfxMkSGh9YrXbrkBXLEPtLHpTVEy65v1tWl02lC+ooVPyQpSjAQL0L69OQ7s7rnIXyb3rkSUzuGSxsLU1AXpWj0oYFB4wdeIdPAVPs83frC5s4kz42JruSAE2vsbvQURTVPChh+hO6+R6Irz+ZEZ1NSgjQkxvOXHW53CkXZSjjHbAB/nbJYi7YyK7kck99r38Ba/WBfIfywdFVVYfiiW5TS6XbQeVeilmmt5MLxBz96FxR6E6WR+cQwybEe94Fb/jD6xHA\u003d\u003d"
      ],
      "alg": "PS256",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "alg": "RSA-OAEP",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}

2022-11-28 13:18:56	SUCCESS RFC7517-1.1	ValidateServerJWKs Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url

2022-11-28 13:18:56		SetServerSigningAlgToPS256 Successfully set signing algorithm to PS256

2022-11-28 13:18:56

(1) More

FAPIBrazilSetGrantTypesSupportedInServerConfiguration

Successfully set grant_types_supported

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  },
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ]
}

2022-11-28 13:18:56

(1) More

AddClaimsParameterSupportedTrueToServerConfiguration

Successfully added claims_parameter_supported to server configuration

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  },
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true
}

2022-11-28 13:18:56

(1) More

FAPIBrazilAddBrazilSpecificSettingsToServerConfiguration

Added open banking Brazil specific server settings

server

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  },
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ]
}

2022-11-28 13:18:56

(1) More

SUCCESS

AddIdTokenSigningAlgsToServerConfiguration

Added 'id_token_signing_alg_values_supported' to server metadata as 'alg' from server jwks

value

[
  "PS256"
]

2022-11-28 13:18:56	SUCCESS FAPI2-4.3.1-9	AddTlsCertificateBoundAccessTokensTrueSupportedToServerConfiguration Added 'tls_client_certificate_bound_access_tokens' as 'true' to server metadata

2022-11-28 13:18:56

(1) More

SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly

Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration

server_configuration

{
  "issuer": "https://www.certification.openid.net/test/a/quanto_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks",
  "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register",
    "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo"
  },
  "grant_types_supported": [
    "authorization_code",
    "implicit",
    "client_credentials",
    "refresh_token"
  ],
  "claims_parameter_supported": true,
  "request_object_encryption_alg_values_supported": [
    "RSA-OAEP"
  ],
  "request_object_encryption_enc_values_supported": [
    "A256GCM"
  ],
  "claims_supported": [
    "cpf",
    "cnpj",
    "acr"
  ],
  "acr_values_supported": [
    "urn:brasil:openbanking:loa2",
    "urn:brasil:openbanking:loa3"
  ],
  "request_object_signing_alg_values_supported": [
    "PS256"
  ],
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access",
    "consents",
    "resources",
    "payments"
  ],
  "id_token_signing_alg_values_supported": [
    "PS256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ]
}

2022-11-28 13:18:56

(1) More

AddPushedAuthorizationRequestEndpointToServerConfig

Added pushed_authorization_request_endpoint to server configuration

endpoint

https://www.certification.openid.net/test/a/quanto_test/par

2022-11-28 13:18:56

(1) More

AddRequirePushedAuthorizationRequestsToServerConfig

Added require_pushed_authorization_requests to server configuration

value

true

2022-11-28 13:18:56

(1) More

SUCCESS

FAPI1-ADV-5.2.2-2

AddResponseTypeCodeToServerConfiguration

Added code as response type supported

response_types_supported

[
  "code"
]

2022-11-28 13:18:56

(1) More

SUCCESS

FAPI1-ADV-5.2.2.2

AddJARMResponseModeToServerConfiguration

Added jwt as response_modes_supported

response_modes_supported

[
  "jwt"
]

2022-11-28 13:18:56

(1) More

SUCCESS

JARM-6 FAPI1-ADV-8.6

AddAuthorizationSigningAlgValuesSupportedToServerConfiguration

Added authorization_signing_alg_values_supported to server configuration

alg_values

[
  "PS256"
]

2022-11-28 13:18:56

(1) More

SUCCESS

FAPIBrazilAddTokenEndpointAuthSigningAlgValuesSupportedToServer

Set token_endpoint_auth_signing_alg_values_supported

values

[
  "PS256"
]

2022-11-28 13:18:56

(1) More

SUCCESS

CheckServerConfiguration

Found required server configuration keys

required

[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]

2022-11-28 13:18:56

(1) More

SUCCESS

FAPI1-BASE-5.2.2-6 FAPI1-BASE-5.2.2-5

FAPIEnsureMinimumServerKeyLength

Validated minimum key lengths for server_jwks

server_jwks

{
  "keys": [
    {
      "d": "ZvivfZxJMbbdTQmxyE0lmE6ZuH8cMQOLyZxdaA5pNwm7ZEnPBEftZs8aR9ijhCDWMieui3h--rXwlXqbEm3g1sVgQ-WKTFV-NLKaJC1h-EU5HKdlOflstr7x57zhKp60ZIK69GyEXyJccUfzcD32u8raec9NplQ2MqS5MA1lnQFlocFoX1RNU4tSpEdJQq2UzqtX5WPhc88A6fTc1xu2fA5wyxzZu7fUjIETzLimcu-dDaEvvgm7c_A1ulm8EQuCN10k3FrIIe9RfuXHyxh9Rcd0aiIP9qwitxd5Cl0io7zby8MBIAaSei2co7y4tciBt4AfnzpBlGbtjgfr2gxD0Q",
      "e": "AQAB",
      "use": "sig",
      "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
      "x5c": [
        "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\u003d\u003d"
      ],
      "dp": "bQ9aXj8tHnj0qO8aAWapGokWX78OlvNzytYg4JSGyJ7pUQnRB4Ds2Lai6kgjniUiu5MX2kdceDbHykG5R-WDj0Ztv6UPV3jA3cOjDwVzwmiwBVmVQNRxzK31Ra8f4YJs9_o0bjmVvXQRchY9l9_Xkk_Hev2F2A540Fhk0tlbUBE",
      "dq": "XPYDZ_kxwZjtQb-XUBLBcvNV1jcDhba2stysXGv0SfvsxOg6G3qZ5xtsiyQxzAYen0LRttCBXkZXEtXXAodLRvJMwUXuYWtNCrBqxYDHkJogUDPnBXq-Hig6x8fsDJunH8JooCc-3WcFpHQcIZZdcwyXPVi59eAfWCwJlgHYYHk",
      "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w",
      "p": "_QaFFuyZriEWtbiKexy7pIYicgU0ePMepvyNuiiFqlsUFQ24q9gp_iWECDhi8qqss__i1LW_eHQATKWfqUc6HdDY-ickJXvVktrQiT-buvJ24iTtK_NooPMKQW976NIX39_sEPJ6ceo9ZDFxTTCkmJus3eXDJmRZT2YzSZJcvcc",
      "kty": "RSA",
      "q": "3x1_dyovnWXSr7y7ufe6AHUV0kHBYVrGW2vdNZxKrrgBW5r2mm93NnHsrG-mJlzW7kG_jR41bWf74sucGdwXTx96riRVy8bov9SzPCDl9_QCHzPpqZOxjngfzQYq1L1qJA2BAie0Sq6YZhgLJ1fWPLutEO5soIYAkLXSJ9IVb00",
      "qi": "eHhOb5NUDfMGXwNscjEcMrMFS425qsoJAXfGJ10hm8svZOkNYgVpb7Hs7oT8XytanRl0Gk8gKH0yhvya65B5ipyby17uBMkikNN-EeYoY2AkvEfM_nO0dvHbDdF11rkM5Q_SEDlGmojxnx4_Euj8WeuSgcwiCQkR23aZlQGx1Mg",
      "alg": "PS256"
    },
    {
      "p": "6-RGunw1LGXpsGIabzcG8n_ITbahS9waTzjcwLkzjWjyR5hxnTSrCMas9EsOuIt3qvkdf02psgwi-J0ZX680ujaXdeiPAeuOUbsLPBOhRuu-ySXxMTT7uiwWJmF5LtBx8Qd3hRV2sd9zOhYzSohcmWp8w_uKTOYrFzGtWMvlGic",
      "kty": "RSA",
      "q": "vn3cUU9RFc7pB3fjiEPGwYGA_h8f2X6dOqy-JYIMIiuYhPq6cT8xIlE-sHs58kZzC1QbOBc4y-qRyqj1L4StPaYH4mtJU0s_6A_b9Cai96yzYYmMr92be2nCFMxBpmpBhN21AIdGc640OxgWMdz5OVo455v1uIEQGPr2aDpOzVs",
      "d": "QrIJ9tPG7pSrt1KKSU-9EbAq-hU92FzEV9GwzuG_dbBPyRLYNVfAz-Yb8ug3YLuqec_kcB5JCep7QkYHgpNdX5WXFxARCpXa-J7Xq50oBdiAS2ehLpnYHXpJI7HqOcH9ASZML_MXjI8e_EpsI7Yk6xJ9qxk8bXGupw0C6anwL3NBe232zA7I1FnwL9tpZVOLPupeok7HMRbFc6QSR3dA54zJmkyEbyOSqzRqCK_g7AB_RcMImN0SoCg0epxZjrculIXPG0Gl1T3TG3WY-CBUtAkI1chFMGCgYF_v-FMSun8N6igilPC5O683BMcJoTK745khMCv7FcSCSFVh0H5vKQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996",
      "qi": "W6TMI3L-Ob-Jx61TdYqN5gBoBsWF6KWuCmiE9ZiwJiMVCv5ddEbFafBuiIQgRnby1VpnH9j5KVb5PT_V78ohKFmpfL7ErXQerf_pJkEtvgK9lQta1EM1HMoShrJ4GdHPym_BZzDDmt6njvwTfSg95y28h-j5epuywcwu6TwAUA8",
      "dp": "a9rjD-8srNEoKVKhvYoObiBI6GeBllrb2K8qGCBV1ulOJbgo8nUbYpbci5Ip9-0k2RKwDv3mghcUglHqQRqt5BqD5BBiGsGmP-5is6RSEEhH4lar0hDkq_nuYrwcmXALOOZuGnZ239tIJx3xc7mnhSnwQ_emA4UV3LQFC12mse8",
      "alg": "RSA-OAEP",
      "dq": "Qk8TiyY-BoZg7Z2ZEYzuOdu3qD3zW0VMu-j3w5yyVo6wZ9HTZqplkxmO5eXvNNu7Hj1nwC2tMqZzm4UW3DSmDWinI_TOsHToSQKEQUfVwLtYMeKsm2dbwSj-SzkSvTgNmI-IeyebqZcBTXTD_RV7l7BFULIkZdZfYSKy9XMejTM",
      "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q"
    }
  ]
}

2022-11-28 13:18:56

(1) More

SUCCESS

LoadUserInfo

Added user information

user_info

{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}

Verify configuration of first client

2022-11-28 13:18:56

(4) More

SUCCESS

GetStaticClientConfiguration

Found a static client object

client_id	unNmFht8lVM_R29e0hYVI
redirect_uri	https://api.platform.sbx.contaquanto.net/opb-api/index
certificate	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
jwks	{ "keys": [ { "kty": "RSA", "use": "sig", "alg": "PS256", "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE", "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw", "e": "AQAB" } ] }

2022-11-28 13:18:56	SUCCESS RFC7517-1.1	ValidateClientJWKsPublicPart Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url

2022-11-28 13:18:56

(2) More

SUCCESS

ExtractJWKsFromStaticClientConfiguration

Extracted client JWK

client_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
      "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw",
      "e": "AQAB"
    }
  ]
}

public_client_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
      "alg": "PS256",
      "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw"
    }
  ]
}

2022-11-28 13:18:56

(1) More

SUCCESS

RFC7517-4.5

CheckDistinctKeyIdValueInClientJWKs

Distinct 'kid' value in all keys of client_jwks

see	https://bitbucket.org/openid/connect/issues/1127

2022-11-28 13:18:56	SUCCESS	EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys Jwks does not contain any private or symmetric keys

2022-11-28 13:18:56

(1) More

SUCCESS

FAPI1-BASE-5.2.4-3 FAPI1-BASE-5.2.4-2

FAPIEnsureMinimumClientKeyLength

Validated minimum key lengths for client_jwks

client_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "alg": "PS256",
      "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
      "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw",
      "e": "AQAB"
    }
  ]
}

2022-11-28 13:18:56		fapi1-advanced-final-client-test-invalid-alternate-alg Setup Done

2022-11-28 13:19:10

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-alternate-alg

Incoming HTTP request to /test/a/quanto_test/.well-known/openid-configuration

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "accept-encoding": "gzip", "connection": "close" }
incoming_path	/test/a/quanto_test/.well-known/openid-configuration
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:19:10

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

2022-11-28 13:19:10

(4) More

OUTGOING

fapi1-advanced-final-client-test-invalid-alternate-alg

Response to HTTP request to test instance DkArrrVC13Hlc3l

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "issuer": "https://www.certification.openid.net/test/a/quanto_test/", "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize", "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token", "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks", "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register", "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo", "mtls_endpoint_aliases": { "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token", "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register", "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo", "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/par" }, "grant_types_supported": [ "authorization_code", "implicit", "client_credentials", "refresh_token" ], "claims_parameter_supported": true, "request_object_encryption_alg_values_supported": [ "RSA-OAEP" ], "request_object_encryption_enc_values_supported": [ "A256GCM" ], "claims_supported": [ "cpf", "cnpj", "acr" ], "acr_values_supported": [ "urn:brasil:openbanking:loa2", "urn:brasil:openbanking:loa3" ], "request_object_signing_alg_values_supported": [ "PS256" ], "scopes_supported": [ "openid", "phone", "profile", "email", "address", "offline_access", "consents", "resources", "payments" ], "id_token_signing_alg_values_supported": [ "PS256" ], "tls_client_certificate_bound_access_tokens": true, "token_endpoint_auth_methods_supported": [ "private_key_jwt" ], "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/quanto_test/par", "require_pushed_authorization_requests": true, "response_types_supported": [ "code" ], "response_modes_supported": [ "jwt" ], "authorization_signing_alg_values_supported": [ "PS256" ], "token_endpoint_auth_signing_alg_values_supported": [ "PS256" ] }
outgoing_path	.well-known/openid-configuration

2022-11-28 13:19:10

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-alternate-alg

Incoming HTTP request to /test-mtls/a/quanto_test/token

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "content-type": "application/x-www-form-urlencoded", "accept-encoding": "gzip", "connection": "close", "content-length": "921" }
incoming_path	/test-mtls/a/quanto_test/token
incoming_body_form_params	{ "client_assertion": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL3F1YW50b190ZXN0L3Rva2VuIl0sImV4cCI6MTY2OTY0NTE1MCwiaWF0IjoxNjY5NjQxNTUwLCJpc3MiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJqdGkiOiIzNzcyODJiNi0wM2FmLTQ2MWEtOTBlZS1mNTU3Mjk5MmRjYzMiLCJzdWIiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkifQ.N1_RE64eZZFp8sjmJm402v0wLtouTPHP0iNug4pHMnf4weCqLlQ4xWSxmPc8ZokwcDuf4wvB9-D3JvGct0AxGWVWWyHAalfaOebzGDDMVSwXsGAcqSYdUBc6nwdWXXv7aQg17qaAHmVCSCp66abxJkn26doNQ9awuEXsmrpZdqxhFNXJpypbL4BaWaktPbreSayPYJbe6O7YKQNGWZM3-_iTbCzmj0d7wOitQ4e1Iy_CEbXaQkfPkAAeso-hse-kO0nds-HAO3qS4L9TVjJxORLMlKJDKTj_cd2AzZoSOsNHtvkfu-j9tSpCpsobSaWXj-JBePlWO5i35jPbahwEXg", "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer", "client_id": "unNmFht8lVM_R29e0hYVI", "grant_type": "client_credentials", "scope": "payments" }
incoming_method	POST
incoming_tls_version	TLSv1.2
incoming_tls_cert	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
incoming_query_string_params	{}
incoming_body	client_assertion=eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL3F1YW50b190ZXN0L3Rva2VuIl0sImV4cCI6MTY2OTY0NTE1MCwiaWF0IjoxNjY5NjQxNTUwLCJpc3MiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJqdGkiOiIzNzcyODJiNi0wM2FmLTQ2MWEtOTBlZS1mNTU3Mjk5MmRjYzMiLCJzdWIiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkifQ.N1_RE64eZZFp8sjmJm402v0wLtouTPHP0iNug4pHMnf4weCqLlQ4xWSxmPc8ZokwcDuf4wvB9-D3JvGct0AxGWVWWyHAalfaOebzGDDMVSwXsGAcqSYdUBc6nwdWXXv7aQg17qaAHmVCSCp66abxJkn26doNQ9awuEXsmrpZdqxhFNXJpypbL4BaWaktPbreSayPYJbe6O7YKQNGWZM3-_iTbCzmj0d7wOitQ4e1Iy_CEbXaQkfPkAAeso-hse-kO0nds-HAO3qS4L9TVjJxORLMlKJDKTj_cd2AzZoSOsNHtvkfu-j9tSpCpsobSaWXj-JBePlWO5i35jPbahwEXg&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_id=unNmFht8lVM_R29e0hYVI&grant_type=client_credentials&scope=payments
incoming_tls_chain	[ "(null)", "(null)", "(null)", "(null)", "(null)", "(null)" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:19:10

(2) More

SUCCESS

FAPI1-ADV-8.5-1 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

Token endpoint

2022-11-28 13:19:10

(1) More

SUCCESS

RFC6749-3.2.1

CheckClientIdMatchesOnTokenRequestIfPresent

Extracted client_id matches the expected value

client_id

unNmFht8lVM_R29e0hYVI

2022-11-28 13:19:10

(1) More

SUCCESS

ExtractClientCertificateFromRequestHeaders

Extracted client certificate

client_certificate

{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nvRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3432303634353435303030313031,CN\u003dwww.quan.to,OU\u003d73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O\u003dQuanto Network Instituicao de Pagamento Ltda.,L\u003dSao Paulo,ST\u003dSao Paulo,C\u003dBR"
  },
  "sanDnsNames": [
    "www.quan.to"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}

2022-11-28 13:19:10	SUCCESS FAPI1-ADV-5.2.2-5	CheckForClientCertificate Found client certificate

2022-11-28 13:19:10

(1) More

SUCCESS

EnsureClientCertificateMatches

Presented certificate matches registered certificate

actual

2022-11-28 13:19:10

(1) More

SUCCESS

RFC7523-2.2

ExtractClientAssertion

Parsed client assertion

client_assertion

{
  "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL3F1YW50b190ZXN0L3Rva2VuIl0sImV4cCI6MTY2OTY0NTE1MCwiaWF0IjoxNjY5NjQxNTUwLCJpc3MiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJqdGkiOiIzNzcyODJiNi0wM2FmLTQ2MWEtOTBlZS1mNTU3Mjk5MmRjYzMiLCJzdWIiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkifQ.N1_RE64eZZFp8sjmJm402v0wLtouTPHP0iNug4pHMnf4weCqLlQ4xWSxmPc8ZokwcDuf4wvB9-D3JvGct0AxGWVWWyHAalfaOebzGDDMVSwXsGAcqSYdUBc6nwdWXXv7aQg17qaAHmVCSCp66abxJkn26doNQ9awuEXsmrpZdqxhFNXJpypbL4BaWaktPbreSayPYJbe6O7YKQNGWZM3-_iTbCzmj0d7wOitQ4e1Iy_CEbXaQkfPkAAeso-hse-kO0nds-HAO3qS4L9TVjJxORLMlKJDKTj_cd2AzZoSOsNHtvkfu-j9tSpCpsobSaWXj-JBePlWO5i35jPbahwEXg",
  "header": {
    "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "aud": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "sub": "unNmFht8lVM_R29e0hYVI",
    "iss": "unNmFht8lVM_R29e0hYVI",
    "exp": 1669645150,
    "iat": 1669641550,
    "jti": "377282b6-03af-461a-90ee-f5572992dcc3"
  }
}

2022-11-28 13:19:10		EnsureClientAssertionSignatureAlgorithmMatchesRegistered token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used

2022-11-28 13:19:10

(1) More

SUCCESS

OIDCC-9

ValidateClientAssertionSignature

client_assertion signature validated

client_assertion

eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL3F1YW50b190ZXN0L3Rva2VuIl0sImV4cCI6MTY2OTY0NTE1MCwiaWF0IjoxNjY5NjQxNTUwLCJpc3MiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJqdGkiOiIzNzcyODJiNi0wM2FmLTQ2MWEtOTBlZS1mNTU3Mjk5MmRjYzMiLCJzdWIiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkifQ.N1_RE64eZZFp8sjmJm402v0wLtouTPHP0iNug4pHMnf4weCqLlQ4xWSxmPc8ZokwcDuf4wvB9-D3JvGct0AxGWVWWyHAalfaOebzGDDMVSwXsGAcqSYdUBc6nwdWXXv7aQg17qaAHmVCSCp66abxJkn26doNQ9awuEXsmrpZdqxhFNXJpypbL4BaWaktPbreSayPYJbe6O7YKQNGWZM3-_iTbCzmj0d7wOitQ4e1Iy_CEbXaQkfPkAAeso-hse-kO0nds-HAO3qS4L9TVjJxORLMlKJDKTj_cd2AzZoSOsNHtvkfu-j9tSpCpsobSaWXj-JBePlWO5i35jPbahwEXg

2022-11-28 13:19:10

(1) More

SUCCESS

RFC7523-2.2

EnsureClientAssertionTypeIsJwt

Found JWT assertion type

assertion type

urn:ietf:params:oauth:client-assertion-type:jwt-bearer

2022-11-28 13:19:10	SUCCESS RFC7523-3 OIDCC-9	ValidateClientAssertionClaims Client Assertion passed all validation checks

2022-11-28 13:19:10

(2) More

SUCCESS

FAPIBrazilExtractRequestedScopeFromClientCredentialsGrant

Found 'payments' scope in request

actual	[ "payments" ]
expected	payments

2022-11-28 13:19:10

(1) More

SUCCESS

GenerateBearerAccessToken

Generated access token

access_token

txEJhRosIn4fjDpfmhyftD8TvPg7BkhhZxWcwj9z7lvOy78NOV

2022-11-28 13:19:10		GenerateAccessTokenExpiration Set access_token_expiration to 900

2022-11-28 13:19:10

(3) More

SUCCESS

CreateTokenEndpointResponse

Created token endpoint response

access_token	txEJhRosIn4fjDpfmhyftD8TvPg7BkhhZxWcwj9z7lvOy78NOV
token_type	Bearer
expires_in	900

2022-11-28 13:19:10		CopyAccessTokenToClientCredentialsField Condition ran but did not log anything

2022-11-28 13:19:10

(4) More

OUTGOING

fapi1-advanced-final-client-test-invalid-alternate-alg

Response to HTTP request to test instance DkArrrVC13Hlc3l

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "access_token": "txEJhRosIn4fjDpfmhyftD8TvPg7BkhhZxWcwj9z7lvOy78NOV", "token_type": "Bearer", "expires_in": 900 }
outgoing_path	token

2022-11-28 13:19:10

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-alternate-alg

Incoming HTTP request to /test-mtls/a/quanto_test/payments/v1/consents

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "go-openb", "accept": "application/jwt", "authorization": "Bearer txEJhRosIn4fjDpfmhyftD8TvPg7BkhhZxWcwj9z7lvOy78NOV", "content-type": "application/jwt", "x-idempotency-key": "dcd6e762-28ad-4db5-bd36-b992381bd82e", "accept-encoding": "gzip", "connection": "close", "content-length": "1229" }
incoming_path	/test-mtls/a/quanto_test/payments/v1/consents
incoming_body_form_params
incoming_method	POST
incoming_tls_version	TLSv1.2
incoming_tls_cert	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
incoming_query_string_params	{}
incoming_body	eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJqd3QifQ.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.axMsQIlALhrBqm9PBXqhKzXdzJAqC0GUULq7_2xJSRazcgo0xVi9NtA1-aWiNr20pRiyT4cXmbI6-tT4lratJdvizmiA2_jd9uWyQK3wYDb7RieBYySg-9vSlPkIR1MPoTND8bjuDWBrZagzIGjnKXnVpHFe2rGVWRESG7AU1gbK0phN8Kde6oZQppsePrN4i4YmXXODPcO1GSmlP3_QIIozkEk95p_PlPL-6Vjs5aGSb4M54IJb0kSZ_cPJCI4vo4R0Op-4LERpnYZtmlJFTgJvtp4a8aMNB4MLjkw6pdha9FRmhxhGcQqZrCGqrpY9CqD_U-3ao06nB7UGebV8eA
incoming_tls_chain	[ "(null)", "(null)", "(null)", "(null)", "(null)", "(null)" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:19:10

(2) More

SUCCESS

FAPI1-ADV-8.5-1 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

New consent endpoint

2022-11-28 13:19:10

(1) More

SUCCESS

ExtractClientCertificateFromRequestHeaders

Extracted client certificate

client_certificate

{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nvRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3432303634353435303030313031,CN\u003dwww.quan.to,OU\u003d73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O\u003dQuanto Network Instituicao de Pagamento Ltda.,L\u003dSao Paulo,ST\u003dSao Paulo,C\u003dBR"
  },
  "sanDnsNames": [
    "www.quan.to"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}

2022-11-28 13:19:10	SUCCESS FAPI1-ADV-5.2.2-5	CheckForClientCertificate Found client certificate

2022-11-28 13:19:10

(1) More

SUCCESS

EnsureClientCertificateMatches

Presented certificate matches registered certificate

actual

2022-11-28 13:19:10	SUCCESS	EnsureIncomingRequestMethodIsPost Client correctly used http POST method

2022-11-28 13:19:10	SUCCESS FAPI1-BASE-6.2.2-1	EnsureBearerAccessTokenNotInParams Client correctly did not send access token in query parameters or form body

2022-11-28 13:19:10

(1) More

SUCCESS

FAPI1-BASE-6.2.2-1

ExtractBearerAccessTokenFromHeader

Found access token on incoming request

access_token

txEJhRosIn4fjDpfmhyftD8TvPg7BkhhZxWcwj9z7lvOy78NOV

2022-11-28 13:19:10

(1) More

SUCCESS

RequireBearerClientCredentialsAccessToken

Found access token in request

actual

txEJhRosIn4fjDpfmhyftD8TvPg7BkhhZxWcwj9z7lvOy78NOV

2022-11-28 13:19:10

(3) More

INFO

FAPI1-BASE-6.2.2-3

ExtractFapiDateHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date

path	headers.x-fapi-auth-date
mapped
object	incoming_request

2022-11-28 13:19:10

(3) More

INFO

FAPI1-BASE-6.2.2-4

ExtractFapiIpAddressHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address

path	headers.x-fapi-customer-ip-address
mapped
object	incoming_request

2022-11-28 13:19:10

(3) More

INFO

FAPI1-BASE-6.2.2-5

ExtractFapiInteractionIdHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id

path	headers.x-fapi-interaction-id
mapped
object	incoming_request

2022-11-28 13:19:10

(3) More

SUCCESS

FAPIBrazilExtractCertificateSubjectFromServerJwks

Extracted subject from the certificate included in server jwks

subjectdn	UID=74e929d9-33b6-4d85-8ba7-c146c867a817,CN=Open Banking Brasil,OU=12345+OU=certman+OU=agoodone,O=ICP-Brasil,C=BR
ou	12345
brazil_software_id	74e929d9-33b6-4d85-8ba7-c146c867a817

2022-11-28 13:19:10

(1) More

SUCCESS

FAPIBrazilEnsureClientCredentialsScopeContainedPayments

The token request which was used to obtain the access token contained 'payments' scope

actual

[
  "payments"
]

2022-11-28 13:19:10

(1) More

SUCCESS

BrazilOB-5.2.2.2

FAPIBrazilExtractPaymentsConsentRequest

Parsed payments consent request

payments_consent_request

{
  "aud": "https://www.certification.openid.net/test-mtls/a/quanto_test/payments/v1/consents",
  "data": {
    "loggedUser": {
      "document": {
        "identification": "04745289952",
        "rel": "CPF"
      }
    },
    "creditor": {
      "name": "Rafael Argenta",
      "cpfCnpj": "04745289952",
      "personType": "PESSOA_NATURAL"
    },
    "payment": {
      "date": "2022-11-28",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "localInstrument": "MANU",
        "creditorAccount": {
          "number": "15525813306",
          "accountType": "CACC",
          "ispb": "10573521",
          "issuer": "0001"
        }
      },
      "type": "PIX"
    }
  },
  "iss": "73d7035b-3c09-40ab-b4c2-900d9f7a5f1f",
  "iat": 1669641550,
  "jti": "00ca7ea1-8740-4b91-9254-a162f97b3e93"
}

2022-11-28 13:19:10	SUCCESS BrazilOB-6.1-4	EnsureIncomingRequestContentTypeIsApplicationJwt Client correctly used application/jwt content type

2022-11-28 13:19:10

(1) More

SUCCESS

ExtractXIdempotencyKeyHeader

Found an x-idempotency-key header

idempotency_key

dcd6e762-28ad-4db5-bd36-b992381bd82e

2022-11-28 13:19:10

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilValidatePaymentConsentRequestAud

aud claim matches the endpoint url

aud	https://www.certification.openid.net/test-mtls/a/quanto_test/payments/v1/consents

2022-11-28 13:19:10

(3) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilExtractCertificateSubjectFromIncomingMTLSCertifiate

Extracted subject from the mtls client certificate

subjectdn

UID=ce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3=#13024252,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,2.5.4.5=#130e3432303634353435303030313031,CN=www.quan.to,OU=73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O=Quanto Network Instituicao de Pagamento Ltda.,L=Sao Paulo,ST=Sao Paulo,C=BR

ou

73d7035b-3c09-40ab-b4c2-900d9f7a5f1f

brazil_software_id

ce627cce-afcc-4cfb-acf4-2e05a890780c

2022-11-28 13:19:10

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilEnsureConsentRequestIssEqualsOrganizationId

iss claim in consent request matches organizationId in client certificate

iss	73d7035b-3c09-40ab-b4c2-900d9f7a5f1f

2022-11-28 13:19:10

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilEnsureConsentRequestJtiIsUUIDv4

jti claim in consent request is a UUIDv4

jti	00ca7ea1-8740-4b91-9254-a162f97b3e93

2022-11-28 13:19:10

(1) More

SUCCESS

BrazilOB-6.1-3

FAPIBrazilValidateConsentRequestIat

iat claim in consent request is valid

iat	1669641550

2022-11-28 13:19:10

(1) More

FAPIBrazilFetchClientOrganizationJwksFromDirectory

Fetching client organization keys

jwks_uri

https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/application.jwks

2022-11-28 13:19:10

(4) More

FAPIBrazilFetchClientOrganizationJwksFromDirectory

HTTP request

request_uri	https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/application.jwks
request_method	GET
request_headers	{ "accept": "text/plain, application/json, application/+json, /*", "content-length": "0" }
request_body

2022-11-28 13:19:10

(4) More

RESPONSE

FAPIBrazilFetchClientOrganizationJwksFromDirectory

HTTP response

response_status_code	200 OK
response_status_text	OK
response_headers	{ "content-type": "application/jwk-set+json", "content-length": "3016", "connection": "keep-alive", "x-amz-replication-status": "COMPLETED", "last-modified": "Wed, 06 Jul 2022 18:48:28 GMT", "x-amz-version-id": "GcwW3SBPdcSzmvatNAPIL0VfzM2KpOcB", "accept-ranges": "bytes", "server": "AmazonS3", "date": "Mon, 28 Nov 2022 13:18:39 GMT", "etag": "\"ae1a9a5325762cc94e7f690b43879db8\"", "vary": "Accept-Encoding", "x-cache": "Hit from cloudfront", "via": "1.1 9f38fc245d638f10232100c770bc84fe.cloudfront.net (CloudFront)", "x-amz-cf-pop": "MIA3-P2", "x-amz-cf-id": "BExNYmMiYcn928BvdKNAvchUVMkFAsbXvlynIhrReb3dJWK-WsIB4g\u003d\u003d", "age": "32", "x-xss-protection": "1; mode\u003dblock", "x-frame-options": "SAMEORIGIN", "referrer-policy": "strict-origin-when-cross-origin", "x-content-type-options": "nosniff", "strict-transport-security": "max-age\u003d31536000" }
response_body	{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw","e":"AQAB","kid":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE.pem","x5t#256":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE"}]}

2022-11-28 13:19:10

(1) More

FAPIBrazilFetchClientOrganizationJwksFromDirectory

Found JWK set string

jwk_string

{"keys":[{"kty":"RSA","use":"sig","x5c":["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"],"n":"0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw","e":"AQAB","kid":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE","x5u":"https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE.pem","x5t#256":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE"}]}

2022-11-28 13:19:10

(1) More

SUCCESS

BrazilOB-6.1-6

FAPIBrazilFetchClientOrganizationJwksFromDirectory

Downloaded and added client organization JWK set to environment

client_organization_jwks

{
  "keys": [
    {
      "kty": "RSA",
      "use": "sig",
      "x5c": [
        "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\u003d"
      ],
      "n": "0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw",
      "e": "AQAB",
      "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
      "x5u": "https://keystore.sandbox.directory.openbankingbrasil.org.br/73d7035b-3c09-40ab-b4c2-900d9f7a5f1f/Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE.pem",
      "x5t#256": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE"
    }
  ]
}

2022-11-28 13:19:10

(1) More

SUCCESS

BrazilOB-6.1-6

FAPIBrazilValidateJwtSignatureUsingOrganizationJwks

jwt signature validated

jwt

eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJqd3QifQ.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.axMsQIlALhrBqm9PBXqhKzXdzJAqC0GUULq7_2xJSRazcgo0xVi9NtA1-aWiNr20pRiyT4cXmbI6-tT4lratJdvizmiA2_jd9uWyQK3wYDb7RieBYySg-9vSlPkIR1MPoTND8bjuDWBrZagzIGjnKXnVpHFe2rGVWRESG7AU1gbK0phN8Kde6oZQppsePrN4i4YmXXODPcO1GSmlP3_QIIozkEk95p_PlPL-6Vjs5aGSb4M54IJb0kSZ_cPJCI4vo4R0Op-4LERpnYZtmlJFTgJvtp4a8aMNB4MLjkw6pdha9FRmhxhGcQqZrCGqrpY9CqD_U-3ao06nB7UGebV8eA

2022-11-28 13:19:10

(1) More

SUCCESS

FAPI1-BASE-6.2.1-11

CreateFapiInteractionIdIfNeeded

Created new FAPI interaction ID

fapi_interaction_id

6eb0ad3d-f25e-45ea-a242-243d27f5fd60

2022-11-28 13:19:10

(3) More

SUCCESS

BrazilOB-5.2.2.2

FAPIBrazilGenerateNewPaymentsConsentResponse

Created consent response

headers

{
  "x-fapi-interaction-id": "6eb0ad3d-f25e-45ea-a242-243d27f5fd60"
}

consentId

urn:conformance:oidf:qfghUyUXHB

consent_response

{
  "data": {
    "consentId": "urn:conformance:oidf:qfghUyUXHB",
    "creationDateTime": "2022-11-28T13:19:10Z",
    "status": "AWAITING_AUTHORISATION",
    "statusUpdateDateTime": "2022-11-28T13:19:10Z",
    "expirationDateTime": "2022-11-28T15:19:10Z",
    "transactionFromDateTime": "2022-11-28T13:14:10Z",
    "transactionToDateTime": "2022-11-28T15:19:10Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/quanto_testpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-11-28T13:19:10Z"
    },
    "creditor": {
      "name": "Rafael Argenta",
      "cpfCnpj": "04745289952",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "04745289952",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2022-11-28",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "localInstrument": "MANU",
        "creditorAccount": {
          "number": "15525813306",
          "accountType": "CACC",
          "ispb": "10573521",
          "issuer": "0001"
        }
      },
      "type": "PIX"
    }
  },
  "aud": "73d7035b-3c09-40ab-b4c2-900d9f7a5f1f",
  "iat": 1669641550,
  "jti": "7a7c615f-fa73-474c-8668-256f78e0e6b1",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}

2022-11-28 13:19:10

(1) More

SUCCESS

BrazilOB-6.1-2

FAPIBrazilSignPaymentConsentResponse

Signed the payment consent response

signed_consent_response

eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.0xMEsddNkteuKQ3c4AE5q8ENo3hIwlLnnopBJFYoD5DMl1wbvMh5n0FWr-VdciQUrZDwHJUSEWgH0vDZO5SwNsCMRPptwNg4bRhl-jQyi4VJASy_3ZSdtRViDiDGkfhPqgbz9AhomgXS8_RvitFDysB6z8pZ2LZIqjlDoN8Cgtov8r-KATKUmAnYIcmjlafHHdxahYrVMo94MxAUYF1tu045HQ41Bm_GfIrqF2did7TnYCWPCyijRQ3MMBX08T0zHmjGLSTV1dT_24pszOGUoy6i9f8MlyT9ZPWTfsWH5l6mNj0Nk6bKAPy67GQE6OE4XAcczUCzwtlD1TPjE742sg

2022-11-28 13:19:10		ClearAccessTokenFromRequest Removed incoming access token from environment

2022-11-28 13:19:10

(4) More

OUTGOING

fapi1-advanced-final-client-test-invalid-alternate-alg

Response to HTTP request to test instance DkArrrVC13Hlc3l

outgoing_status_code	201
outgoing_headers	{ "x-fapi-interaction-id": [ "6eb0ad3d-f25e-45ea-a242-243d27f5fd60" ], "Content-Type": [ "application/jwt" ] }
outgoing_body	eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUFMyNTYifQ.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.0xMEsddNkteuKQ3c4AE5q8ENo3hIwlLnnopBJFYoD5DMl1wbvMh5n0FWr-VdciQUrZDwHJUSEWgH0vDZO5SwNsCMRPptwNg4bRhl-jQyi4VJASy_3ZSdtRViDiDGkfhPqgbz9AhomgXS8_RvitFDysB6z8pZ2LZIqjlDoN8Cgtov8r-KATKUmAnYIcmjlafHHdxahYrVMo94MxAUYF1tu045HQ41Bm_GfIrqF2did7TnYCWPCyijRQ3MMBX08T0zHmjGLSTV1dT_24pszOGUoy6i9f8MlyT9ZPWTfsWH5l6mNj0Nk6bKAPy67GQE6OE4XAcczUCzwtlD1TPjE742sg
outgoing_path	payments/v1/consents

2022-11-28 13:19:11

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-alternate-alg

Incoming HTTP request to /test/a/quanto_test/.well-known/openid-configuration

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "accept-encoding": "gzip", "connection": "close" }
incoming_path	/test/a/quanto_test/.well-known/openid-configuration
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:19:11

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

2022-11-28 13:19:11

(4) More

OUTGOING

fapi1-advanced-final-client-test-invalid-alternate-alg

Response to HTTP request to test instance DkArrrVC13Hlc3l

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "issuer": "https://www.certification.openid.net/test/a/quanto_test/", "authorization_endpoint": "https://www.certification.openid.net/test/a/quanto_test/authorize", "token_endpoint": "https://www.certification.openid.net/test/a/quanto_test/token", "jwks_uri": "https://www.certification.openid.net/test/a/quanto_test/jwks", "registration_endpoint": "https://www.certification.openid.net/test/a/quanto_test/register", "userinfo_endpoint": "https://www.certification.openid.net/test/a/quanto_test/userinfo", "mtls_endpoint_aliases": { "token_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/token", "registration_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/register", "userinfo_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/userinfo", "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test-mtls/a/quanto_test/par" }, "grant_types_supported": [ "authorization_code", "implicit", "client_credentials", "refresh_token" ], "claims_parameter_supported": true, "request_object_encryption_alg_values_supported": [ "RSA-OAEP" ], "request_object_encryption_enc_values_supported": [ "A256GCM" ], "claims_supported": [ "cpf", "cnpj", "acr" ], "acr_values_supported": [ "urn:brasil:openbanking:loa2", "urn:brasil:openbanking:loa3" ], "request_object_signing_alg_values_supported": [ "PS256" ], "scopes_supported": [ "openid", "phone", "profile", "email", "address", "offline_access", "consents", "resources", "payments" ], "id_token_signing_alg_values_supported": [ "PS256" ], "tls_client_certificate_bound_access_tokens": true, "token_endpoint_auth_methods_supported": [ "private_key_jwt" ], "pushed_authorization_request_endpoint": "https://www.certification.openid.net/test/a/quanto_test/par", "require_pushed_authorization_requests": true, "response_types_supported": [ "code" ], "response_modes_supported": [ "jwt" ], "authorization_signing_alg_values_supported": [ "PS256" ], "token_endpoint_auth_signing_alg_values_supported": [ "PS256" ] }
outgoing_path	.well-known/openid-configuration

2022-11-28 13:19:11

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-alternate-alg

Incoming HTTP request to /test/a/quanto_test/jwks

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "accept-encoding": "gzip", "connection": "close" }
incoming_path	/test/a/quanto_test/jwks
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:19:11

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

2022-11-28 13:19:11

(4) More

OUTGOING

fapi1-advanced-final-client-test-invalid-alternate-alg

Response to HTTP request to test instance DkArrrVC13Hlc3l

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "keys": [ { "kty": "RSA", "e": "AQAB", "use": "sig", "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM", "x5c": [ "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\u003d\u003d" ], "alg": "PS256", "n": "3IXVqA9zCrmaz30WWjzZexdSuhagP_oVfgB-Y5S7XXeHhU4tho7c3wcNhsrGCKLYSf_47rV78-2OfhPY9WrSJVyqIXoaniwoTnD9splF90J7yog9LgP4kqkWl6wm8gdR5C-UC4Gnl0D2cZKnE6MZ7k_b5nM0ZfC-7H_bO13B4aYpu069th7hFWGK7ps65uiDxcQGYP3oSeqahE5qwfUef2QMkhyVtM_nWP9OVAzOGtJ8km4TdCrq9aF78No9u2YQuaUOJgeOnwKMBjmgEwcuaQe9DEQFXhzBtRmPlml2pTy2QDvxe1HgOTOsnh9igFvX70AGroY3PFY-lJAxC4Fd2w" }, { "kty": "RSA", "e": "AQAB", "use": "enc", "kid": "0fe502dd-14f0-4f45-80f9-feb9a216f996", "alg": "RSA-OAEP", "n": "r4dl-ApW6c-fvDbfSVxHpdV8zi8VQW4b9-uHMRq7dzqCkvP8OAG1R3plSr1N6fL_YLiIr9y621XkyRiMEKR7-DeqGsLf2ZTaqrZ1LfYgjsc2i9o3NSOeSgBwKGmT7h1OgxZSbhLzo7Xaktu3CCUZCOWLzs7LKo_CvKkcTF7tPhK9jYjdTsdsnS0RJOPjYQe7JO83Mvhd1Ty3F-Qycd-cKKMSjcQRiHt9jKd09kA2fKVlFwbm2M1PM3NdtnMaOUw31-XC4ixay47XTMqnmX7-op7qYV9wXbeZmjTsAKFuTGwJiGJrOTfqciDLBW8IpGC2BzFJ5rYmRu0kAttpvkOG3Q" } ] }
outgoing_path	jwks

2022-11-28 13:19:11

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-alternate-alg

Incoming HTTP request to /test-mtls/a/quanto_test/par

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "content-type": "application/x-www-form-urlencoded", "accept-encoding": "gzip", "connection": "close", "content-length": "2320" }
incoming_path	/test-mtls/a/quanto_test/par
incoming_body_form_params	{ "client_assertion": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9xdWFudG9fdGVzdC90b2tlbiJdLCJleHAiOjE2Njk2NDUxNTEsImlhdCI6MTY2OTY0MTU1MSwiaXNzIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIiwianRpIjoiNjBhMTk5ZDEtNmUyMC00ZWZkLTg1NWUtMWFlYzg4ZmQxMzhkIiwic3ViIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIn0.yKqFokrCOoi3kuEfoYnzHygQcFmChwZr5JbYXWrIRwuQk7g2_unFAelaOTG5Qy7FBlb4VB8v7oYr0NOjq0x7BbjG_n4T0VvYRAid1wIhkbR75igHr3LsqKSMg9mkM8H_679yDshKftQaN9Anezy0oDrmMDnGy110YNxyYAnGWaZ5VqgOHPRAcsab4Ej8Ced_FqyOJVcxTROxXopbF6plya5wW2Qd2V10eXwcjZ_MCMQGoWM4api9w7t4u6qejzG-pPL388WOLzRcaSTkExHX_G2PxBXqvlx4O8S8eQ5m36vgyFtQWJF34vuGu9ElzwmSo6SayTSQQQ0o1kV32g0f3Q", "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer", "client_id": "unNmFht8lVM_R29e0hYVI", "request": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9xdWFudG9fdGVzdC8iXSwiY2xhaW1zIjp7ImlkX3Rva2VuIjp7ImFjciI6eyJlc3NlbnRpYWwiOnRydWUsInZhbHVlcyI6WyJ1cm46YnJhc2lsOm9wZW5iYW5raW5nOmxvYTMiXX0sImNwZiI6eyJlc3NlbnRpYWwiOnRydWUsInZhbHVlIjoiMDQ3NDUyODk5NTIifX19LCJjbGllbnRfaWQiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJjb2RlX2NoYWxsZW5nZSI6ImpRWU1kbHBLc19NRVJza2tud25za3Q5OU5zVWE4Zno0OGhBam5Fd3NhaEUiLCJjb2RlX2NoYWxsZW5nZV9tZXRob2QiOiJTMjU2IiwiZXhwIjoxNjY5NjQyNzUxLCJpYXQiOjE2Njk2NDE1NTEsImlzcyI6InVuTm1GaHQ4bFZNX1IyOWUwaFlWSSIsImp0aSI6IjcwN2MxYWMzLTJiN2MtNGE4MS04MTI3LTFlNTkwYThmMzJlMCIsIm5iZiI6MTY2OTY0MTU1MSwibm9uY2UiOiIwZDM5ZDE2Yy1lYzNhLTRjODgtYjJlZi0wZmIxNmMyZjRjOGYiLCJyZWRpcmVjdF91cmkiOiJodHRwczovL2FwaS5wbGF0Zm9ybS5zYnguY29udGFxdWFudG8ubmV0L29wYi1hcGkvaW5kZXgiLCJyZXNwb25zZV90eXBlIjoiY29kZSIsInNjb3BlIjoib3BlbmlkIGNvbnNlbnQ6dXJuOmNvbmZvcm1hbmNlOm9pZGY6cWZnaFV5VVhIQiBwYXltZW50cyIsInN0YXRlIjoiNjNiOTRlNTc2Njg4MjVkZGRiNzNlYmQ3NTZlM2U3ZjQ3ZmQzNDI4NmQzMGMyZmIzYzVlODMwZjg0ZDA2NTBlOCJ9.hrUYe-Je_cH711iH8iNUEr8rrLn0PwcTZjqgPsTIUQvKGszWEYlkIO0eKuAMVAx4-0CbLLQWih9DlYLrWaMRVx2LQKHG4gN3IXYAK2RmDBZaFIR74jeCL9chrHplv7Xpu5oKkTBoXF2kHkcTpRvaQn39IWGbubXqDbtiuhwY8YHg8dWUF3U_SWsp8u222IbHMGBLyPHcG4uiIDNt8dpa1DiPP8jmhvVa38D1A9th_cLcbD5sPgF1TJU-ARbRlptYVCPQDlb-8wCdqwCodGUzxda_kcFva2zcyqWaTXs9RZMenEKPIiqbFS5vCJP0pJE2ATac4iylN4Y3KGPsc30oGw" }
incoming_method	POST
incoming_tls_version	TLSv1.2
incoming_tls_cert	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
incoming_query_string_params	{}
incoming_body	client_assertion=eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9xdWFudG9fdGVzdC90b2tlbiJdLCJleHAiOjE2Njk2NDUxNTEsImlhdCI6MTY2OTY0MTU1MSwiaXNzIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIiwianRpIjoiNjBhMTk5ZDEtNmUyMC00ZWZkLTg1NWUtMWFlYzg4ZmQxMzhkIiwic3ViIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIn0.yKqFokrCOoi3kuEfoYnzHygQcFmChwZr5JbYXWrIRwuQk7g2_unFAelaOTG5Qy7FBlb4VB8v7oYr0NOjq0x7BbjG_n4T0VvYRAid1wIhkbR75igHr3LsqKSMg9mkM8H_679yDshKftQaN9Anezy0oDrmMDnGy110YNxyYAnGWaZ5VqgOHPRAcsab4Ej8Ced_FqyOJVcxTROxXopbF6plya5wW2Qd2V10eXwcjZ_MCMQGoWM4api9w7t4u6qejzG-pPL388WOLzRcaSTkExHX_G2PxBXqvlx4O8S8eQ5m36vgyFtQWJF34vuGu9ElzwmSo6SayTSQQQ0o1kV32g0f3Q&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_id=unNmFht8lVM_R29e0hYVI&request=eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.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.hrUYe-Je_cH711iH8iNUEr8rrLn0PwcTZjqgPsTIUQvKGszWEYlkIO0eKuAMVAx4-0CbLLQWih9DlYLrWaMRVx2LQKHG4gN3IXYAK2RmDBZaFIR74jeCL9chrHplv7Xpu5oKkTBoXF2kHkcTpRvaQn39IWGbubXqDbtiuhwY8YHg8dWUF3U_SWsp8u222IbHMGBLyPHcG4uiIDNt8dpa1DiPP8jmhvVa38D1A9th_cLcbD5sPgF1TJU-ARbRlptYVCPQDlb-8wCdqwCodGUzxda_kcFva2zcyqWaTXs9RZMenEKPIiqbFS5vCJP0pJE2ATac4iylN4Y3KGPsc30oGw
incoming_tls_chain	[ "(null)", "(null)", "(null)", "(null)", "(null)", "(null)" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:19:11

(2) More

SUCCESS

FAPI1-ADV-8.5-1 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

PAR endpoint

2022-11-28 13:19:11

(1) More

SUCCESS

ExtractClientCertificateFromRequestHeaders

Extracted client certificate

client_certificate

{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nvRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3432303634353435303030313031,CN\u003dwww.quan.to,OU\u003d73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O\u003dQuanto Network Instituicao de Pagamento Ltda.,L\u003dSao Paulo,ST\u003dSao Paulo,C\u003dBR"
  },
  "sanDnsNames": [
    "www.quan.to"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}

2022-11-28 13:19:11	SUCCESS FAPI1-ADV-5.2.2-5	CheckForClientCertificate Found client certificate

2022-11-28 13:19:11

(1) More

SUCCESS

EnsureClientCertificateMatches

Presented certificate matches registered certificate

actual

2022-11-28 13:19:11

(1) More

SUCCESS

RFC7523-2.2

ExtractClientAssertion

Parsed client assertion

client_assertion

{
  "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9xdWFudG9fdGVzdC90b2tlbiJdLCJleHAiOjE2Njk2NDUxNTEsImlhdCI6MTY2OTY0MTU1MSwiaXNzIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIiwianRpIjoiNjBhMTk5ZDEtNmUyMC00ZWZkLTg1NWUtMWFlYzg4ZmQxMzhkIiwic3ViIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIn0.yKqFokrCOoi3kuEfoYnzHygQcFmChwZr5JbYXWrIRwuQk7g2_unFAelaOTG5Qy7FBlb4VB8v7oYr0NOjq0x7BbjG_n4T0VvYRAid1wIhkbR75igHr3LsqKSMg9mkM8H_679yDshKftQaN9Anezy0oDrmMDnGy110YNxyYAnGWaZ5VqgOHPRAcsab4Ej8Ced_FqyOJVcxTROxXopbF6plya5wW2Qd2V10eXwcjZ_MCMQGoWM4api9w7t4u6qejzG-pPL388WOLzRcaSTkExHX_G2PxBXqvlx4O8S8eQ5m36vgyFtQWJF34vuGu9ElzwmSo6SayTSQQQ0o1kV32g0f3Q",
  "header": {
    "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "aud": "https://www.certification.openid.net/test/a/quanto_test/token",
    "sub": "unNmFht8lVM_R29e0hYVI",
    "iss": "unNmFht8lVM_R29e0hYVI",
    "exp": 1669645151,
    "iat": 1669641551,
    "jti": "60a199d1-6e20-4efd-855e-1aec88fd138d"
  }
}

2022-11-28 13:19:11		EnsureClientAssertionSignatureAlgorithmMatchesRegistered token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used

2022-11-28 13:19:11

(1) More

SUCCESS

OIDCC-9

ValidateClientAssertionSignature

client_assertion signature validated

client_assertion

eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QvYS9xdWFudG9fdGVzdC90b2tlbiJdLCJleHAiOjE2Njk2NDUxNTEsImlhdCI6MTY2OTY0MTU1MSwiaXNzIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIiwianRpIjoiNjBhMTk5ZDEtNmUyMC00ZWZkLTg1NWUtMWFlYzg4ZmQxMzhkIiwic3ViIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIn0.yKqFokrCOoi3kuEfoYnzHygQcFmChwZr5JbYXWrIRwuQk7g2_unFAelaOTG5Qy7FBlb4VB8v7oYr0NOjq0x7BbjG_n4T0VvYRAid1wIhkbR75igHr3LsqKSMg9mkM8H_679yDshKftQaN9Anezy0oDrmMDnGy110YNxyYAnGWaZ5VqgOHPRAcsab4Ej8Ced_FqyOJVcxTROxXopbF6plya5wW2Qd2V10eXwcjZ_MCMQGoWM4api9w7t4u6qejzG-pPL388WOLzRcaSTkExHX_G2PxBXqvlx4O8S8eQ5m36vgyFtQWJF34vuGu9ElzwmSo6SayTSQQQ0o1kV32g0f3Q

2022-11-28 13:19:11

(1) More

SUCCESS

RFC7523-2.2

EnsureClientAssertionTypeIsJwt

Found JWT assertion type

assertion type

urn:ietf:params:oauth:client-assertion-type:jwt-bearer

2022-11-28 13:19:11	SUCCESS PAR-2	ValidateClientAssertionClaimsForPAREndpoint Client Assertion passed all validation checks

2022-11-28 13:19:11

(1) More

SUCCESS

PAR-2.1

ExtractRequestObjectFromPAREndpointRequest

Parsed request object

request_object

{
  "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.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.hrUYe-Je_cH711iH8iNUEr8rrLn0PwcTZjqgPsTIUQvKGszWEYlkIO0eKuAMVAx4-0CbLLQWih9DlYLrWaMRVx2LQKHG4gN3IXYAK2RmDBZaFIR74jeCL9chrHplv7Xpu5oKkTBoXF2kHkcTpRvaQn39IWGbubXqDbtiuhwY8YHg8dWUF3U_SWsp8u222IbHMGBLyPHcG4uiIDNt8dpa1DiPP8jmhvVa38D1A9th_cLcbD5sPgF1TJU-ARbRlptYVCPQDlb-8wCdqwCodGUzxda_kcFva2zcyqWaTXs9RZMenEKPIiqbFS5vCJP0pJE2ATac4iylN4Y3KGPsc30oGw",
  "header": {
    "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "iss": "unNmFht8lVM_R29e0hYVI",
    "response_type": "code",
    "code_challenge_method": "S256",
    "nonce": "0d39d16c-ec3a-4c88-b2ef-0fb16c2f4c8f",
    "client_id": "unNmFht8lVM_R29e0hYVI",
    "aud": "https://www.certification.openid.net/test/a/quanto_test/",
    "nbf": 1669641551,
    "scope": "openid consent:urn:conformance:oidf:qfghUyUXHB payments",
    "claims": {
      "id_token": {
        "acr": {
          "values": [
            "urn:brasil:openbanking:loa3"
          ],
          "essential": true
        },
        "cpf": {
          "value": "04745289952",
          "essential": true
        }
      }
    },
    "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
    "state": "63b94e57668825dddb73ebd756e3e7f47fd34286d30c2fb3c5e830f84d0650e8",
    "exp": 1669642751,
    "iat": 1669641551,
    "code_challenge": "jQYMdlpKs_MERskknwnskt99NsUa8fz48hAjnEwsahE",
    "jti": "707c1ac3-2b7c-4a81-8127-1e590a8f32e0"
  }
}

2022-11-28 13:19:11	SUCCESS PAR-2.1	EnsurePAREndpointRequestDoesNotContainRequestUriParameter PAR endpoint request does not contain a request_uri parameter

2022-11-28 13:19:11

(3) More

INFO

OIDCC-10.2 OIDCC-10.2.1

ValidateEncryptedRequestObjectHasKid

Skipped evaluation due to missing required element: authorization_request_object jwe_header

path	jwe_header
mapped
object	authorization_request_object

2022-11-28 13:19:11

(1) More

SUCCESS

FAPI1-ADV-8.6

FAPIValidateRequestObjectSigningAlg

Request object was signed with a permitted algorithm

alg

PS256

2022-11-28 13:19:11

(1) More

SUCCESS

OIDCC-5.5.1.1 FAPI1-ADV-5.2.3-5 BrazilOB-5.2.2.4

FAPIBrazilValidateRequestObjectIdTokenACRClaims

Acr value in request object is as expected

received

[
  "urn:brasil:openbanking:loa3"
]

2022-11-28 13:19:11

(1) More

SUCCESS

RFC7519-4.1.4 FAPI1-ADV-5.2.2-13

FAPIValidateRequestObjectExp

Request object contains a valid exp claim, expiry time

exp	"Nov 28, 2022, 1:39:11 PM"

2022-11-28 13:19:11

(2) More

SUCCESS

FAPI1-ADV-5.2.2-17

FAPI1AdvancedValidateRequestObjectNBFClaim

nbf claim is valid

nbf	"Nov 28, 2022, 1:19:11 PM"
now	"Nov 28, 2022, 1:19:11 PM"

2022-11-28 13:19:11		ValidateRequestObjectClaims Request object does not contain a max_age claim

2022-11-28 13:19:11	SUCCESS	ValidateRequestObjectClaims Request object claims passed all validation checks

2022-11-28 13:19:11

(1) More

SUCCESS

OIDCC-13.3

EnsureNumericRequestObjectClaimsAreNotNull

None of the claims expected to have numeric values, have null values

numeric_claims

[
  "max_age"
]

2022-11-28 13:19:11	SUCCESS OIDCC-6.1	EnsureRequestObjectDoesNotContainRequestOrRequestUri Request object does not contain request or request_uri

2022-11-28 13:19:11	SUCCESS JAR-10.8	EnsureRequestObjectDoesNotContainSubWithClientId Request object does not contain Client Id in sub

2022-11-28 13:19:11

(3) More

SUCCESS

FAPI1-ADV-5.2.2-1

ValidateRequestObjectSignature

Request object signature validated using a key in the client's JWKS and using the client's registered request_object_signing_alg

request_object	eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.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.hrUYe-Je_cH711iH8iNUEr8rrLn0PwcTZjqgPsTIUQvKGszWEYlkIO0eKuAMVAx4-0CbLLQWih9DlYLrWaMRVx2LQKHG4gN3IXYAK2RmDBZaFIR74jeCL9chrHplv7Xpu5oKkTBoXF2kHkcTpRvaQn39IWGbubXqDbtiuhwY8YHg8dWUF3U_SWsp8u222IbHMGBLyPHcG4uiIDNt8dpa1DiPP8jmhvVa38D1A9th_cLcbD5sPgF1TJU-ARbRlptYVCPQDlb-8wCdqwCodGUzxda_kcFva2zcyqWaTXs9RZMenEKPIiqbFS5vCJP0pJE2ATac4iylN4Y3KGPsc30oGw
request_object_signing_alg	PS256
jwk	{"kty":"RSA","e":"AQAB","use":"sig","kid":"Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE","alg":"PS256","n":"0WhDslPsqHj0qACEizig6z-s8DEMDzpXwb_m_JygyO-09jOjSIK2FrkMQYFZ5EI4nRskXYx30gHKr7Cvijo-ekKUMMcS5dUfkGJuZQuF8cxrgF9uSOoy7o-Objd7ZekxctOSlxxBx6MqhifeDKPHiSmeVkFNAFHVGdHGBGLrWNWU60qTLoEvkCuEh3wVva0f3hLwN-90roUlJbitVXrgiOYyRnz8h8laHcOybQ5h1BKlkILWsCHTyc2QK0zzjjNflE5eHNQQZXivMNmOnZpphlEFnl84CQg0xnJ5exnQGb77DFLBxA6hrOWzlL5QikHt5kK6cfL2uWDhqepcJ-cJfw"}

2022-11-28 13:19:11

(1) More

SUCCESS

EnsureMatchingRedirectUriInRequestObject

Redirect URI matched

actual

https://api.platform.sbx.contaquanto.net/opb-api/index

2022-11-28 13:19:11

(2) More

SUCCESS

FAPI1-ADV-5.2.3-15

EnsureRequestObjectContainsCodeChallengeWhenUsingPAR

Found required PKCE parameters in request

code_challenge_method	S256
code_challenge	jQYMdlpKs_MERskknwnskt99NsUa8fz48hAjnEwsahE

2022-11-28 13:19:11

(2) More

SUCCESS

PAR-2.2

CreatePAREndpointResponse

Created PAR endpoint response

request_uri	urn:ietf:params:oauth:request_uri:fd77b820-fdf6-4772-8941-995a7314daf3
expires_in	600

2022-11-28 13:19:11

(4) More

OUTGOING

fapi1-advanced-final-client-test-invalid-alternate-alg

Response to HTTP request to test instance DkArrrVC13Hlc3l

outgoing_status_code	201
outgoing_headers	{}
outgoing_body	{ "request_uri": "urn:ietf:params:oauth:request_uri:fd77b820-fdf6-4772-8941-995a7314daf3", "expires_in": 600 }
outgoing_path	par

2022-11-28 13:19:12

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-alternate-alg

Incoming HTTP request to /test/a/quanto_test/authorize

incoming_headers	{ "host": "www.certification.openid.net", "upgrade-insecure-requests": "1", "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36", "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/;q\u003d0.8", "sec-gpc": "1", "accept-language": "pt-BR,pt;q\u003d0.8", "sec-fetch-site": "none", "sec-fetch-mode": "navigate", "sec-fetch-user": "?1", "sec-fetch-dest": "document", "accept-encoding": "gzip, deflate, br", "cookie": "JSESSIONID\u003dEA85B3C5E82E814E2AD0173048152552", "connection": "close" }
incoming_path	/test/a/quanto_test/authorize
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{ "client_id": "unNmFht8lVM_R29e0hYVI", "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index", "request_uri": "urn:ietf:params:oauth:request_uri:fd77b820-fdf6-4772-8941-995a7314daf3", "response_type": "code", "scope": "openid consent:urn:conformance:oidf:qfghUyUXHB payments", "state": "63b94e57668825dddb73ebd756e3e7f47fd34286d30c2fb3c5e830f84d0650e8" }
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_tls_cipher	ECDHE-RSA-AES256-GCM-SHA384
incoming_body_json

2022-11-28 13:19:12

(2) More

SUCCESS

FAPI1-ADV-8.5 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES256-GCM-SHA384
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

Authorization endpoint

2022-11-28 13:19:12	SUCCESS	EnsureAuthorizationRequestDoesNotContainRequestWhenUsingPAR Request does not contain a request parameter

2022-11-28 13:19:12

(3) More

INFO

OIDCC-10.2 OIDCC-10.2.1

ValidateEncryptedRequestObjectHasKid

Skipped evaluation due to missing required element: authorization_request_object jwe_header

path	jwe_header
mapped
object	authorization_request_object

2022-11-28 13:19:12

(1) More

SUCCESS

CreateEffectiveAuthorizationRequestParameters

Merged http request parameters with request object claims

effective_authorization_endpoint_request

{
  "client_id": "unNmFht8lVM_R29e0hYVI",
  "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
  "response_type": "code",
  "scope": "openid consent:urn:conformance:oidf:qfghUyUXHB payments",
  "state": "63b94e57668825dddb73ebd756e3e7f47fd34286d30c2fb3c5e830f84d0650e8",
  "iss": "unNmFht8lVM_R29e0hYVI",
  "code_challenge_method": "S256",
  "nonce": "0d39d16c-ec3a-4c88-b2ef-0fb16c2f4c8f",
  "aud": "https://www.certification.openid.net/test/a/quanto_test/",
  "nbf": 1669641551,
  "claims": {
    "id_token": {
      "acr": {
        "values": [
          "urn:brasil:openbanking:loa3"
        ],
        "essential": true
      },
      "cpf": {
        "value": "04745289952",
        "essential": true
      }
    }
  },
  "exp": 1669642751,
  "iat": 1669641551,
  "code_challenge": "jQYMdlpKs_MERskknwnskt99NsUa8fz48hAjnEwsahE",
  "jti": "707c1ac3-2b7c-4a81-8127-1e590a8f32e0"
}

2022-11-28 13:19:12	SUCCESS FAPI1-ADV-5.2.3-16	EnsureClientIdInAuthorizationRequestParametersMatchRequestObject client_id http request parameter value matches client_id in request object

2022-11-28 13:19:12

(1) More

SUCCESS

ExtractRequestedScopes

Requested scopes

scope

openid consent:urn:conformance:oidf:qfghUyUXHB payments

2022-11-28 13:19:12

(2) More

SUCCESS

FAPIBrazilValidateConsentScope

Found consent scope in request

actual	[ "openid", "consent:urn:conformance:oidf:qfghUyUXHB", "payments" ]
expected	consent:urn:conformance:oidf:qfghUyUXHB

2022-11-28 13:19:12

(1) More

SUCCESS

EnsureScopeContainsPayments

Found payments scope in request

actual

[
  "openid",
  "consent:urn:conformance:oidf:qfghUyUXHB",
  "payments"
]

2022-11-28 13:19:12

(1) More

SUCCESS

FAPI1-ADV-5.2.2-2

EnsureResponseTypeIsCode

Response type is expected value

expected

code

2022-11-28 13:19:12

(1) More

SUCCESS

OIDCC-3.1.2.1

EnsureMatchingClientId

Client ID matched

client_id

unNmFht8lVM_R29e0hYVI

2022-11-28 13:19:12

(1) More

SUCCESS

CreateAuthorizationCode

Created authorization code

authorization_code

0mK49XKbtreCMSFYBUrMpefxl4Nfb7DF

2022-11-28 13:19:12

(1) More

SUCCESS

FAPI1-BASE-5.2.2.2

ExtractNonceFromAuthorizationRequest

Extracted nonce

nonce

0d39d16c-ec3a-4c88-b2ef-0fb16c2f4c8f

2022-11-28 13:19:12

(1) More

SUCCESS

FAPIBrazilChangeConsentStatusToAuthorized

Changed consent status to AUTHORISED

consent

{
  "data": {
    "consentId": "urn:conformance:oidf:qfghUyUXHB",
    "creationDateTime": "2022-11-28T13:19:10Z",
    "status": "AUTHORISED",
    "statusUpdateDateTime": "2022-11-28T13:19:12Z",
    "expirationDateTime": "2022-11-28T15:19:10Z",
    "transactionFromDateTime": "2022-11-28T13:14:10Z",
    "transactionToDateTime": "2022-11-28T15:19:10Z",
    "links": {
      "self": "https://www.certification.openid.net/test/a/quanto_testpayments/v1/consents"
    },
    "meta": {
      "totalRecords": 1,
      "totalPages": 1,
      "requestDateTime": "2022-11-28T13:19:10Z"
    },
    "creditor": {
      "name": "Rafael Argenta",
      "cpfCnpj": "04745289952",
      "personType": "PESSOA_NATURAL"
    },
    "loggedUser": {
      "document": {
        "identification": "04745289952",
        "rel": "CPF"
      }
    },
    "payment": {
      "date": "2022-11-28",
      "amount": "0.01",
      "currency": "BRL",
      "details": {
        "localInstrument": "MANU",
        "creditorAccount": {
          "number": "15525813306",
          "accountType": "CACC",
          "ispb": "10573521",
          "issuer": "0001"
        }
      },
      "type": "PIX"
    }
  },
  "aud": "73d7035b-3c09-40ab-b4c2-900d9f7a5f1f",
  "iat": 1669641550,
  "jti": "7a7c615f-fa73-474c-8668-256f78e0e6b1",
  "iss": "74e929d9-33b6-4d85-8ba7-c146c867a817"
}

2022-11-28 13:19:12

(1) More

SUCCESS

CreateAuthorizationEndpointResponseParams

Added authorization_endpoint_response_params to environment

params

{
  "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
  "state": "63b94e57668825dddb73ebd756e3e7f47fd34286d30c2fb3c5e830f84d0650e8"
}

2022-11-28 13:19:12

(1) More

SUCCESS

OIDCC-3.3.2.5

AddCodeToAuthorizationEndpointResponseParams

Added code to authorization endpoint response params

authorization_endpoint_response_params

{
  "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index",
  "state": "63b94e57668825dddb73ebd756e3e7f47fd34286d30c2fb3c5e830f84d0650e8",
  "code": "0mK49XKbtreCMSFYBUrMpefxl4Nfb7DF"
}

2022-11-28 13:19:12

(5) More

GenerateJARMResponseClaims

Created JARM response claims

iss	https://www.certification.openid.net/test/a/quanto_test/
aud	unNmFht8lVM_R29e0hYVI
code	0mK49XKbtreCMSFYBUrMpefxl4Nfb7DF
state	63b94e57668825dddb73ebd756e3e7f47fd34286d30c2fb3c5e830f84d0650e8
exp	1669642152

2022-11-28 13:19:12

(1) More

SUCCESS

JARM-4.2

SignJARMResponse

Signed the JARM response

jarm_response

eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvcXVhbnRvX3Rlc3RcLyIsImF1ZCI6InVuTm1GaHQ4bFZNX1IyOWUwaFlWSSIsImNvZGUiOiIwbUs0OVhLYnRyZUNNU0ZZQlVyTXBlZnhsNE5mYjdERiIsInN0YXRlIjoiNjNiOTRlNTc2Njg4MjVkZGRiNzNlYmQ3NTZlM2U3ZjQ3ZmQzNDI4NmQzMGMyZmIzYzVlODMwZjg0ZDA2NTBlOCIsImV4cCI6MTY2OTY0MjE1Mn0.TVSCmUj4QGzVzzjWBA3OmcLj9ON4Lk3y-9UdYttinHT8wQUx8jZkBv_asIzHKvx46fK0BxznVK4AhVi5Fq08p6NPNVX04Gzc1SC5N8JZwaFv16qwJMfWMsMhhFzJtqU8CoVf3v-BmjnIpjtpfo8in64UqKRQHVY31eIjMpVI5G5e7uW00eIEn4HXUxRGfmQA5c_YebmECIsF0Pfou5pc8u3Q69yE9sbYrC5WEukqvEd-ntsqHAIb6pRVDk4QERiCKfF889UmvXccCGdLVrwHXpwIP-Qc8AF5zrKBzFoXl_4pAyXfxrUZTnqh7WetLD9vszFVBg42Q7vDpHcKWrvYMg

2022-11-28 13:19:12

(3) More

INFO

JARM-5

EncryptJARMResponse

Skipped evaluation due to missing required element: client authorization_encrypted_response_alg

path	authorization_encrypted_response_alg
mapped
object	client

2022-11-28 13:19:12

(1) More

SendJARMResponseWitResponseModeQuery

Redirecting back to client

uri

https://api.platform.sbx.contaquanto.net/opb-api/index?response=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvcXVhbnRvX3Rlc3RcLyIsImF1ZCI6InVuTm1GaHQ4bFZNX1IyOWUwaFlWSSIsImNvZGUiOiIwbUs0OVhLYnRyZUNNU0ZZQlVyTXBlZnhsNE5mYjdERiIsInN0YXRlIjoiNjNiOTRlNTc2Njg4MjVkZGRiNzNlYmQ3NTZlM2U3ZjQ3ZmQzNDI4NmQzMGMyZmIzYzVlODMwZjg0ZDA2NTBlOCIsImV4cCI6MTY2OTY0MjE1Mn0.TVSCmUj4QGzVzzjWBA3OmcLj9ON4Lk3y-9UdYttinHT8wQUx8jZkBv_asIzHKvx46fK0BxznVK4AhVi5Fq08p6NPNVX04Gzc1SC5N8JZwaFv16qwJMfWMsMhhFzJtqU8CoVf3v-BmjnIpjtpfo8in64UqKRQHVY31eIjMpVI5G5e7uW00eIEn4HXUxRGfmQA5c_YebmECIsF0Pfou5pc8u3Q69yE9sbYrC5WEukqvEd-ntsqHAIb6pRVDk4QERiCKfF889UmvXccCGdLVrwHXpwIP-Qc8AF5zrKBzFoXl_4pAyXfxrUZTnqh7WetLD9vszFVBg42Q7vDpHcKWrvYMg

2022-11-28 13:19:12

(2) More

OUTGOING

fapi1-advanced-final-client-test-invalid-alternate-alg

Response to HTTP request to test instance DkArrrVC13Hlc3l

outgoing

org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://api.platform.sbx.contaquanto.net/opb-api/index?response=eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJpc3MiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvcXVhbnRvX3Rlc3RcLyIsImF1ZCI6InVuTm1GaHQ4bFZNX1IyOWUwaFlWSSIsImNvZGUiOiIwbUs0OVhLYnRyZUNNU0ZZQlVyTXBlZnhsNE5mYjdERiIsInN0YXRlIjoiNjNiOTRlNTc2Njg4MjVkZGRiNzNlYmQ3NTZlM2U3ZjQ3ZmQzNDI4NmQzMGMyZmIzYzVlODMwZjg0ZDA2NTBlOCIsImV4cCI6MTY2OTY0MjE1Mn0.TVSCmUj4QGzVzzjWBA3OmcLj9ON4Lk3y-9UdYttinHT8wQUx8jZkBv_asIzHKvx46fK0BxznVK4AhVi5Fq08p6NPNVX04Gzc1SC5N8JZwaFv16qwJMfWMsMhhFzJtqU8CoVf3v-BmjnIpjtpfo8in64UqKRQHVY31eIjMpVI5G5e7uW00eIEn4HXUxRGfmQA5c_YebmECIsF0Pfou5pc8u3Q69yE9sbYrC5WEukqvEd-ntsqHAIb6pRVDk4QERiCKfF889UmvXccCGdLVrwHXpwIP-Qc8AF5zrKBzFoXl_4pAyXfxrUZTnqh7WetLD9vszFVBg42Q7vDpHcKWrvYMg]

outgoing_path

authorize

2022-11-28 13:19:13

(11) More

INCOMING

fapi1-advanced-final-client-test-invalid-alternate-alg

Incoming HTTP request to /test-mtls/a/quanto_test/token

incoming_headers	{ "host": "www.certification.openid.net", "user-agent": "Go-http-client/1.1", "accept": "application/json", "content-type": "application/x-www-form-urlencoded", "accept-encoding": "gzip", "connection": "close", "content-length": "1101" }
incoming_path	/test-mtls/a/quanto_test/token
incoming_body_form_params	{ "client_assertion": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL3F1YW50b190ZXN0L3Rva2VuIl0sImV4cCI6MTY2OTY0MTg1MiwiaWF0IjoxNjY5NjQxNTUyLCJpc3MiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJqdGkiOiJkZjhjMDgwNC03MzdkLTQ0ODktOTUwMy1mOGQ3MDdiOTk1ZjIiLCJzdWIiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkifQ.0LGmxKhVp97DdTdUIGn5aUqvaJDq6GbGgB77m-rpwgkl4YExmzTyt1By0DOvo8jrEifI-MPt1HrUbELtGKpZ98emiDxIk5a8Nk-QaRqGD4eWHeJfudSKNnxfQsIlOjLx7oOkIdtMSYevSxyGSQM2lpaz3bN5jWoco-jfYHQrhpk64v9FAPxSPxbkZ4wUO2EpSYMQMO2FTyqFhZ_uEQB5uguvAfxthi-Uk0m1XR39Q9taZFWlujex88u3PhLrXLkAddslgV7JN64Bygtsc0MukLmZjX2OfhPilBQ5OTquNdDxKFY_slqdbUZqpw0OQCakPexkOFum81TnppK9H8zjVQ", "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer", "client_id": "unNmFht8lVM_R29e0hYVI", "code": "0mK49XKbtreCMSFYBUrMpefxl4Nfb7DF", "code_verifier": "eec7a485039b46f757163f5986c58b575fd0463ae9f64735444b729a0788e919", "grant_type": "authorization_code", "redirect_uri": "https://api.platform.sbx.contaquanto.net/opb-api/index" }
incoming_method	POST
incoming_tls_version	TLSv1.2
incoming_tls_cert	-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA== -----END CERTIFICATE-----
incoming_query_string_params	{}
incoming_body	client_assertion=eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL3F1YW50b190ZXN0L3Rva2VuIl0sImV4cCI6MTY2OTY0MTg1MiwiaWF0IjoxNjY5NjQxNTUyLCJpc3MiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJqdGkiOiJkZjhjMDgwNC03MzdkLTQ0ODktOTUwMy1mOGQ3MDdiOTk1ZjIiLCJzdWIiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkifQ.0LGmxKhVp97DdTdUIGn5aUqvaJDq6GbGgB77m-rpwgkl4YExmzTyt1By0DOvo8jrEifI-MPt1HrUbELtGKpZ98emiDxIk5a8Nk-QaRqGD4eWHeJfudSKNnxfQsIlOjLx7oOkIdtMSYevSxyGSQM2lpaz3bN5jWoco-jfYHQrhpk64v9FAPxSPxbkZ4wUO2EpSYMQMO2FTyqFhZ_uEQB5uguvAfxthi-Uk0m1XR39Q9taZFWlujex88u3PhLrXLkAddslgV7JN64Bygtsc0MukLmZjX2OfhPilBQ5OTquNdDxKFY_slqdbUZqpw0OQCakPexkOFum81TnppK9H8zjVQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_id=unNmFht8lVM_R29e0hYVI&code=0mK49XKbtreCMSFYBUrMpefxl4Nfb7DF&code_verifier=eec7a485039b46f757163f5986c58b575fd0463ae9f64735444b729a0788e919&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fapi.platform.sbx.contaquanto.net%2Fopb-api%2Findex
incoming_tls_chain	[ "(null)", "(null)", "(null)", "(null)", "(null)", "(null)" ]
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

2022-11-28 13:19:13

(2) More

SUCCESS

FAPI1-ADV-8.5-1 FAPI1-BASE-7.1

EnsureIncomingTls12WithSecureCipherOrTls13

TLS 1.2 in use and cipher is one recommended by BCP195

actual	ECDHE-RSA-AES128-GCM-SHA256
recommended	[ "DHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-AES128-GCM-SHA256", "DHE-RSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384" ]

Token endpoint

2022-11-28 13:19:13

(1) More

SUCCESS

RFC6749-3.2.1

CheckClientIdMatchesOnTokenRequestIfPresent

Extracted client_id matches the expected value

client_id

unNmFht8lVM_R29e0hYVI

2022-11-28 13:19:13

(1) More

SUCCESS

ExtractClientCertificateFromRequestHeaders

Extracted client certificate

client_certificate

{
  "cert": "-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUOoCLDp6NTb6eeCLTQl+m1XBGRiQwDQYJKoZIhvcNAQEL BQAwcTELMAkGA1UEBhMCQlIxHDAaBgNVBAoTE09wZW4gQmFua2luZyBCcmFzaWwx FTATBgNVBAsTDE9wZW4gQmFua2luZzEtMCsGA1UEAxMkT3BlbiBCYW5raW5nIFNB TkRCT1ggSXNzdWluZyBDQSAtIEcxMB4XDTIyMDcwMTE5MzUwMFoXDTIzMDczMTE5 MzUwMFowggE1MQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxvMRIwEAYD VQQHEwlTYW8gUGF1bG8xNjA0BgNVBAoTLVF1YW50byBOZXR3b3JrIEluc3RpdHVp Y2FvIGRlIFBhZ2FtZW50byBMdGRhLjEtMCsGA1UECxMkNzNkNzAzNWItM2MwOS00 MGFiLWI0YzItOTAwZDlmN2E1ZjFmMRQwEgYDVQQDEwt3d3cucXVhbi50bzEXMBUG A1UEBRMONDIwNjQ1NDUwMDAxMDExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAkJSMTQwMgYKCZImiZPyLGQBARMkY2U2Mjdj Y2UtYWZjYy00Y2ZiLWFjZjQtMmUwNWE4OTA3ODBjMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtRKsL0vZfsRrUoEo6GItYb9OdzbrRTmZj2QF7ClCy9EO Su0BXMxauN3wA7pbOlr3bUpmn3S09BJm8ROh6JFVnh0lUhujqHWJxzjcd5UAgl8W sDtL/WXefPOCsjA40v68NONUGYRVGkuLzdqtJyblZa0s9P+CokF59DWGGdAaqBNR hmYsq2eQaVMt+y/ud5NJqJVjX0wqsph97ckNPD6XFPIcYbYflkqXf9VOpWWgY4q/ BqA2aRKuIXTWp3tG0o9vHd8Byz+KmIloT6H+ifGVTgyK8tg2VFBofTGxVtP3EWtr Jp0vEq1iUtPDgWfn7Lx0qjTNU/7hV+xM2U2P4ysnBQIDAQABo4IC1jCCAtIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUq8IlBtm3WyqertAH89dwfn3Hp2swHwYDVR0j BBgwFoAUhn9YrRf1grZOtAWz+7DOEUPfTL4wTAYIKwYBBQUHAQEEQDA+MDwGCCsG AQUFBzABhjBodHRwOi8vb2NzcC5zYW5kYm94LnBraS5vcGVuYmFua2luZ2JyYXNp bC5vcmcuYnIwSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC5zYW5kYm94LnBr aS5vcGVuYmFua2luZ2JyYXNpbC5vcmcuYnIvaXNzdWVyLmNybDAWBgNVHREEDzAN ggt3d3cucXVhbi50bzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwIwggGoBgNVHSAEggGfMIIBmzCCAZcGCisGAQQBg7ovZAEwggGHMIIBNgYIKwYB BQUHAgIwggEoDIIBJFRoaXMgQ2VydGlmaWNhdGUgaXMgc29sZWx5IGZvciB1c2Ug d2l0aCBSYWlkaWFtIFNlcnZpY2VzIExpbWl0ZWQgYW5kIG90aGVyIHBhcnRpY2lw YXRpbmcgb3JnYW5pc2F0aW9ucyB1c2luZyBSYWlkaWFtIFNlcnZpY2VzIExpbWl0 ZWRzIFRydXN0IEZyYW1ld29yayBTZXJ2aWNlcy4gSXRzIHJlY2VpcHQsIHBvc3Nl c3Npb24gb3IgdXNlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJhaWRp YW0gU2VydmljZXMgTHRkIENlcnRpY2ljYXRlIFBvbGljeSBhbmQgcmVsYXRlZCBk b2N1bWVudHMgdGhlcmVpbi4wSwYIKwYBBQUHAgEWP2h0dHA6Ly9yZXBvc2l0b3J5 LnNhbmRib3gucGtpLm9wZW5iYW5raW5nYnJhc2lsLm9yZy5ici9wb2xpY2llczAN BgkqhkiG9w0BAQsFAAOCAQEAhAGFEmdBE+02O4Vf6U7wjB3NJghmGS3ZdEKA3L4K yD8u0aJAeEB7GmZsd7t+tnSvDaGSPBPsOCuTlTKcjBkjVdb5gjVnxlgyqdFz5rJB EKG9Wn+6am65mcq6zvSjBvFbMDa50OEM9ngmDTkLG/u2KuqeKA6Jk7Dqaw36xmMd lr9I2MCrNZJsulVQTwdudOX4nUHfKcQLa29TU9ZLmO5Hhe9EX82+NIqZJTbKQtWL 9xm6N3I6iwUSFAtcButPfp6jaw+RIit9xoegld+euvdEOq8JvV2uhSre1yIwuCXp vRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d -----END CERTIFICATE-----",
  "pem": "-----BEGIN CERTIFICATE-----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\nvRpIWtbZuGrLg4j9Bm5kJuBDGm2s90K+JnTgh30aDsYDjA\u003d\u003d\n-----END CERTIFICATE-----",
  "subject": {
    "dn": "UID\u003dce627cce-afcc-4cfb-acf4-2e05a890780c,1.3.6.1.4.1.311.60.2.1.3\u003d#13024252,2.5.4.15\u003d#131450726976617465204f7267616e697a6174696f6e,2.5.4.5\u003d#130e3432303634353435303030313031,CN\u003dwww.quan.to,OU\u003d73d7035b-3c09-40ab-b4c2-900d9f7a5f1f,O\u003dQuanto Network Instituicao de Pagamento Ltda.,L\u003dSao Paulo,ST\u003dSao Paulo,C\u003dBR"
  },
  "sanDnsNames": [
    "www.quan.to"
  ],
  "sanUris": [],
  "sanIPs": [],
  "sanEmails": []
}

2022-11-28 13:19:13	SUCCESS FAPI1-ADV-5.2.2-5	CheckForClientCertificate Found client certificate

2022-11-28 13:19:13

(1) More

SUCCESS

EnsureClientCertificateMatches

Presented certificate matches registered certificate

actual

2022-11-28 13:19:13

(1) More

SUCCESS

RFC7523-2.2

ExtractClientAssertion

Parsed client assertion

client_assertion

{
  "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL3F1YW50b190ZXN0L3Rva2VuIl0sImV4cCI6MTY2OTY0MTg1MiwiaWF0IjoxNjY5NjQxNTUyLCJpc3MiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJqdGkiOiJkZjhjMDgwNC03MzdkLTQ0ODktOTUwMy1mOGQ3MDdiOTk1ZjIiLCJzdWIiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkifQ.0LGmxKhVp97DdTdUIGn5aUqvaJDq6GbGgB77m-rpwgkl4YExmzTyt1By0DOvo8jrEifI-MPt1HrUbELtGKpZ98emiDxIk5a8Nk-QaRqGD4eWHeJfudSKNnxfQsIlOjLx7oOkIdtMSYevSxyGSQM2lpaz3bN5jWoco-jfYHQrhpk64v9FAPxSPxbkZ4wUO2EpSYMQMO2FTyqFhZ_uEQB5uguvAfxthi-Uk0m1XR39Q9taZFWlujex88u3PhLrXLkAddslgV7JN64Bygtsc0MukLmZjX2OfhPilBQ5OTquNdDxKFY_slqdbUZqpw0OQCakPexkOFum81TnppK9H8zjVQ",
  "header": {
    "kid": "Xv2La33stXNdi4nOF1PGbmHsA5WN2PiL-4Du9CVesKE",
    "typ": "JWT",
    "alg": "PS256"
  },
  "claims": {
    "aud": "https://www.certification.openid.net/test-mtls/a/quanto_test/token",
    "sub": "unNmFht8lVM_R29e0hYVI",
    "iss": "unNmFht8lVM_R29e0hYVI",
    "exp": 1669641852,
    "iat": 1669641552,
    "jti": "df8c0804-737d-4489-9503-f8d707b995f2"
  }
}

2022-11-28 13:19:13		EnsureClientAssertionSignatureAlgorithmMatchesRegistered token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used

2022-11-28 13:19:13

(1) More

SUCCESS

OIDCC-9

ValidateClientAssertionSignature

client_assertion signature validated

client_assertion

eyJhbGciOiJQUzI1NiIsImtpZCI6Ilh2MkxhMzNzdFhOZGk0bk9GMVBHYm1Ic0E1V04yUGlMLTREdTlDVmVzS0UiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiaHR0cHM6Ly93d3cuY2VydGlmaWNhdGlvbi5vcGVuaWQubmV0L3Rlc3QtbXRscy9hL3F1YW50b190ZXN0L3Rva2VuIl0sImV4cCI6MTY2OTY0MTg1MiwiaWF0IjoxNjY5NjQxNTUyLCJpc3MiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkiLCJqdGkiOiJkZjhjMDgwNC03MzdkLTQ0ODktOTUwMy1mOGQ3MDdiOTk1ZjIiLCJzdWIiOiJ1bk5tRmh0OGxWTV9SMjllMGhZVkkifQ.0LGmxKhVp97DdTdUIGn5aUqvaJDq6GbGgB77m-rpwgkl4YExmzTyt1By0DOvo8jrEifI-MPt1HrUbELtGKpZ98emiDxIk5a8Nk-QaRqGD4eWHeJfudSKNnxfQsIlOjLx7oOkIdtMSYevSxyGSQM2lpaz3bN5jWoco-jfYHQrhpk64v9FAPxSPxbkZ4wUO2EpSYMQMO2FTyqFhZ_uEQB5uguvAfxthi-Uk0m1XR39Q9taZFWlujex88u3PhLrXLkAddslgV7JN64Bygtsc0MukLmZjX2OfhPilBQ5OTquNdDxKFY_slqdbUZqpw0OQCakPexkOFum81TnppK9H8zjVQ

2022-11-28 13:19:13

(1) More

SUCCESS

RFC7523-2.2

EnsureClientAssertionTypeIsJwt

Found JWT assertion type

assertion type

urn:ietf:params:oauth:client-assertion-type:jwt-bearer

2022-11-28 13:19:13	SUCCESS RFC7523-3 OIDCC-9	ValidateClientAssertionClaims Client Assertion passed all validation checks

2022-11-28 13:19:13

(1) More

SUCCESS

ValidateAuthorizationCode

Found authorization code

authorization_code

0mK49XKbtreCMSFYBUrMpefxl4Nfb7DF

2022-11-28 13:19:13

(1) More

SUCCESS

ValidateRedirectUri

Found redirect uri

redirect_uri

https://api.platform.sbx.contaquanto.net/opb-api/index

2022-11-28 13:19:13

(3) More

SUCCESS

RFC7636-4.6

ValidateCodeVerifierWithS256

Validated code_verifier successfully

code_challenge_method	S256
code_verifier	eec7a485039b46f757163f5986c58b575fd0463ae9f64735444b729a0788e919
code_challenge	jQYMdlpKs_MERskknwnskt99NsUa8fz48hAjnEwsahE

2022-11-28 13:19:13

(3) More

SUCCESS

RFC7636-7.1

EnsureMinimumPkceCodeVerifierEntropy

Calculated shannon entropy seems sufficient

actual	244.05182817709934
expected	180.0
value	eec7a485039b46f757163f5986c58b575fd0463ae9f64735444b729a0788e919

2022-11-28 13:19:13

(2) More

SUCCESS

RFC7636-7.1

EnsureMinimumPkceCodeVerifierLength

PKCE code verifier is of sufficient length

actual	512
required	344

2022-11-28 13:19:13

(1) More

SUCCESS

RFC7636-4.1

EnsurePkceCodeVerifierNotUsed

Code verifier has not been used

code_verifier

eec7a485039b46f757163f5986c58b575fd0463ae9f64735444b729a0788e919

2022-11-28 13:19:13

(1) More

SUCCESS

GenerateBearerAccessToken

Generated access token

access_token

4U3i5d74SVcZDPkajetfjgmORsZ8DpXcVqGKIe4NInfRJ6KUbe

2022-11-28 13:19:13		GenerateAccessTokenExpiration Set access_token_expiration to 900

2022-11-28 13:19:13

(1) More

SUCCESS

OIDCC-3.3.2.11

CalculateAtHash

Successful at_hash encoding

at_hash

Xpl7rwjkc8boGUvyQlxzEg

2022-11-28 13:19:13

(1) More

CreateRefreshToken

Created refresh token

refresh_token

LnrxBQKorxJVsAmLiSucKrviAiCIAhOVQoYutEJVgssscNFWYJ6034536032*:?:]

2022-11-28 13:19:13

(6) More

SUCCESS

GenerateIdTokenClaims

Created ID Token Claims

iss	https://www.certification.openid.net/test/a/quanto_test/
sub	user-subject-1234531
aud	unNmFht8lVM_R29e0hYVI
nonce	0d39d16c-ec3a-4c88-b2ef-0fb16c2f4c8f
iat	1669641553
exp	1669641853

2022-11-28 13:19:13

(1) More

SUCCESS

BrazilOB-5.2.2.2 BrazilOB-5.2.2.3

FAPIBrazilAddCPFAndCPNJToIdTokenClaims

Added claims to id_token claims

id_token_claims

{
  "iss": "https://www.certification.openid.net/test/a/quanto_test/",
  "sub": "user-subject-1234531",
  "aud": "unNmFht8lVM_R29e0hYVI",
  "nonce": "0d39d16c-ec3a-4c88-b2ef-0fb16c2f4c8f",
  "iat": 1669641553,
  "exp": 1669641853,
  "cpf": "04745289952"
}

2022-11-28 13:19:13

(2) More

SUCCESS

OIDCC-3.3.2.11

AddAtHashToIdTokenClaims

Added at_hash to ID token claims

at_hash

Xpl7rwjkc8boGUvyQlxzEg

id_token_claims

{
  "iss": "https://www.certification.openid.net/test/a/quanto_test/",
  "sub": "user-subject-1234531",
  "aud": "unNmFht8lVM_R29e0hYVI",
  "nonce": "0d39d16c-ec3a-4c88-b2ef-0fb16c2f4c8f",
  "iat": 1669641553,
  "exp": 1669641853,
  "cpf": "04745289952",
  "at_hash": "Xpl7rwjkc8boGUvyQlxzEg"
}

2022-11-28 13:19:13

(2) More

SUCCESS

OIDCC-3.1.3.7-12

FAPIBrazilAddACRClaimToIdTokenClaims

Added acr value to id_token_claims

acr_value

urn:brasil:openbanking:loa3

claims

{
  "iss": "https://www.certification.openid.net/test/a/quanto_test/",
  "sub": "user-subject-1234531",
  "aud": "unNmFht8lVM_R29e0hYVI",
  "nonce": "0d39d16c-ec3a-4c88-b2ef-0fb16c2f4c8f",
  "iat": 1669641553,
  "exp": 1669641853,
  "cpf": "04745289952",
  "at_hash": "Xpl7rwjkc8boGUvyQlxzEg",
  "acr": "urn:brasil:openbanking:loa3"
}

2022-11-28 13:19:13

(1) More

SUCCESS

SignIdToken

Signed the ID token

id_token

eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwiYWxnIjoiUFMyNTYifQ.eyJhdF9oYXNoIjoiWHBsN3J3amtjOGJvR1V2eVFseHpFZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0XC8iLCJjcGYiOiIwNDc0NTI4OTk1MiIsImV4cCI6MTY2OTY0MTg1Mywibm9uY2UiOiIwZDM5ZDE2Yy1lYzNhLTRjODgtYjJlZi0wZmIxNmMyZjRjOGYiLCJpYXQiOjE2Njk2NDE1NTN9.xmOaE7ow7DhhSkkGlvGD3YU3LeyFcZ7UiUixDl_xPUdYjERXfNhWurTVEEWYr1oCcIIkoHIhv-zC8n91sb8CBKA6qmTCRUae1-2eDog2GRrgDMbo53ojkTn8Ru8GAFeRqeH6z42nRbuG0Jj3oQ_r4yLRhZPhTAK8JH_dlDz_duaofg94J2G6C6K8te9HI5Qs4jzQ2J5nohRoWgBPUq8gf3NnkK3bwZuBKVnF4hxgJDYN5agWoB72hdrKLsh_KKG07sJtlYSHxWruY-m_c3C-Hb4ChoB1ACVyYhTCaxugrqp0BiQRm2o2xB02e4HnJZNHmttbgF2gnPdYw80dQOmfVg

2022-11-28 13:19:13

(2) More

SUCCESS

OIDCC-3.1.3.7-8

ForceIdTokenToBeSignedWithRS256

Signed the ID token with alg of RS256

id_token serialized

eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUlMyNTYifQ.eyJhdF9oYXNoIjoiWHBsN3J3amtjOGJvR1V2eVFseHpFZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0XC8iLCJjcGYiOiIwNDc0NTI4OTk1MiIsImV4cCI6MTY2OTY0MTg1Mywibm9uY2UiOiIwZDM5ZDE2Yy1lYzNhLTRjODgtYjJlZi0wZmIxNmMyZjRjOGYiLCJpYXQiOjE2Njk2NDE1NTN9.v1yCU9USz6SrCKAtDKHTXZTYnuWZDD9bl6Fes4b3Xf2DwGGKY17F1CvpWNbZ42rzuREmc8G1jfDBfy6lNCVV-qUdoQO_-1rK7j5hkpBuznp1iEmcoijIVw0dkl2owLUVKHq7B2ro2dvDxgr9i0-MGT0L-_5xchfUdtCNzCGqY7krMzLOemyHt_ApEEtrt2TxqEDZWQq0G47w_zEl2isO_fxw23X39Mw2sUCEPkmSkwIvBsyITTrVbmmbTgd1aedWbsjEGz1UY7Hex3hXiF3Eu6hOrtqWmnTsU4gK5MhDU3cVmUirYU8Ttf7RjKbEVfEwNvpqCuVKwF_3buacfJbraQ

id_token

{
  "claimsSet": {
    "claims": {
      "at_hash": "Xpl7rwjkc8boGUvyQlxzEg",
      "sub": "user-subject-1234531",
      "aud": [
        "unNmFht8lVM_R29e0hYVI"
      ],
      "acr": "urn:brasil:openbanking:loa3",
      "iss": "https://www.certification.openid.net/test/a/quanto_test/",
      "cpf": "04745289952",
      "exp": "Nov 28, 2022, 1:24:13 PM",
      "nonce": "0d39d16c-ec3a-4c88-b2ef-0fb16c2f4c8f",
      "iat": "Nov 28, 2022, 1:19:13 PM"
    }
  },
  "header": {
    "b64": true,
    "kid": "X5d4vFYfLxaG1gg8_l3bFYFhUaUVmE6PaEsRWX2EYqM",
    "alg": {
      "name": "RS256",
      "requirement": "RECOMMENDED"
    },
    "typ": {
      "type": "JWT"
    },
    "customParams": {}
  },
  "signingInputString": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUlMyNTYifQ.eyJhdF9oYXNoIjoiWHBsN3J3amtjOGJvR1V2eVFseHpFZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0XC8iLCJjcGYiOiIwNDc0NTI4OTk1MiIsImV4cCI6MTY2OTY0MTg1Mywibm9uY2UiOiIwZDM5ZDE2Yy1lYzNhLTRjODgtYjJlZi0wZmIxNmMyZjRjOGYiLCJpYXQiOjE2Njk2NDE1NTN9",
  "signature": {
    "value": "v1yCU9USz6SrCKAtDKHTXZTYnuWZDD9bl6Fes4b3Xf2DwGGKY17F1CvpWNbZ42rzuREmc8G1jfDBfy6lNCVV-qUdoQO_-1rK7j5hkpBuznp1iEmcoijIVw0dkl2owLUVKHq7B2ro2dvDxgr9i0-MGT0L-_5xchfUdtCNzCGqY7krMzLOemyHt_ApEEtrt2TxqEDZWQq0G47w_zEl2isO_fxw23X39Mw2sUCEPkmSkwIvBsyITTrVbmmbTgd1aedWbsjEGz1UY7Hex3hXiF3Eu6hOrtqWmnTsU4gK5MhDU3cVmUirYU8Ttf7RjKbEVfEwNvpqCuVKwF_3buacfJbraQ"
  },
  "state": {
    "value": "SIGNED"
  },
  "payload": {
    "origin": "JSON",
    "jsonObject": {
      "at_hash": "Xpl7rwjkc8boGUvyQlxzEg",
      "sub": "user-subject-1234531",
      "aud": "unNmFht8lVM_R29e0hYVI",
      "acr": "urn:brasil:openbanking:loa3",
      "iss": "https://www.certification.openid.net/test/a/quanto_test/",
      "cpf": "04745289952",
      "exp": 1669641853,
      "nonce": "0d39d16c-ec3a-4c88-b2ef-0fb16c2f4c8f",
      "iat": 1669641553
    }
  }
}

2022-11-28 13:19:13

(6) More

SUCCESS

CreateTokenEndpointResponse

Created token endpoint response

access_token	4U3i5d74SVcZDPkajetfjgmORsZ8DpXcVqGKIe4NInfRJ6KUbe
token_type	Bearer
id_token	eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUlMyNTYifQ.eyJhdF9oYXNoIjoiWHBsN3J3amtjOGJvR1V2eVFseHpFZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0XC8iLCJjcGYiOiIwNDc0NTI4OTk1MiIsImV4cCI6MTY2OTY0MTg1Mywibm9uY2UiOiIwZDM5ZDE2Yy1lYzNhLTRjODgtYjJlZi0wZmIxNmMyZjRjOGYiLCJpYXQiOjE2Njk2NDE1NTN9.v1yCU9USz6SrCKAtDKHTXZTYnuWZDD9bl6Fes4b3Xf2DwGGKY17F1CvpWNbZ42rzuREmc8G1jfDBfy6lNCVV-qUdoQO_-1rK7j5hkpBuznp1iEmcoijIVw0dkl2owLUVKHq7B2ro2dvDxgr9i0-MGT0L-_5xchfUdtCNzCGqY7krMzLOemyHt_ApEEtrt2TxqEDZWQq0G47w_zEl2isO_fxw23X39Mw2sUCEPkmSkwIvBsyITTrVbmmbTgd1aedWbsjEGz1UY7Hex3hXiF3Eu6hOrtqWmnTsU4gK5MhDU3cVmUirYU8Ttf7RjKbEVfEwNvpqCuVKwF_3buacfJbraQ
refresh_token	LnrxBQKorxJVsAmLiSucKrviAiCIAhOVQoYutEJVgssscNFWYJ6034536032*:?:]
scope	openid consent:urn:conformance:oidf:qfghUyUXHB payments
expires_in	900

2022-11-28 13:19:13

(4) More

OUTGOING

fapi1-advanced-final-client-test-invalid-alternate-alg

Response to HTTP request to test instance DkArrrVC13Hlc3l

outgoing_status_code	200
outgoing_headers	{}
outgoing_body	{ "access_token": "4U3i5d74SVcZDPkajetfjgmORsZ8DpXcVqGKIe4NInfRJ6KUbe", "token_type": "Bearer", "id_token": "eyJraWQiOiJYNWQ0dkZZZkx4YUcxZ2c4X2wzYkZZRmhVYVVWbUU2UGFFc1JXWDJFWXFNIiwidHlwIjoiSldUIiwiYWxnIjoiUlMyNTYifQ.eyJhdF9oYXNoIjoiWHBsN3J3amtjOGJvR1V2eVFseHpFZyIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoidW5ObUZodDhsVk1fUjI5ZTBoWVZJIiwiYWNyIjoidXJuOmJyYXNpbDpvcGVuYmFua2luZzpsb2EzIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3F1YW50b190ZXN0XC8iLCJjcGYiOiIwNDc0NTI4OTk1MiIsImV4cCI6MTY2OTY0MTg1Mywibm9uY2UiOiIwZDM5ZDE2Yy1lYzNhLTRjODgtYjJlZi0wZmIxNmMyZjRjOGYiLCJpYXQiOjE2Njk2NDE1NTN9.v1yCU9USz6SrCKAtDKHTXZTYnuWZDD9bl6Fes4b3Xf2DwGGKY17F1CvpWNbZ42rzuREmc8G1jfDBfy6lNCVV-qUdoQO_-1rK7j5hkpBuznp1iEmcoijIVw0dkl2owLUVKHq7B2ro2dvDxgr9i0-MGT0L-_5xchfUdtCNzCGqY7krMzLOemyHt_ApEEtrt2TxqEDZWQq0G47w_zEl2isO_fxw23X39Mw2sUCEPkmSkwIvBsyITTrVbmmbTgd1aedWbsjEGz1UY7Hex3hXiF3Eu6hOrtqWmnTsU4gK5MhDU3cVmUirYU8Ttf7RjKbEVfEwNvpqCuVKwF_3buacfJbraQ", "refresh_token": "LnrxBQKorxJVsAmLiSucKrviAiCIAhOVQoYutEJVgssscNFWYJ6034536032*:?:]", "scope": "openid consent:urn:conformance:oidf:qfghUyUXHB payments", "expires_in": 900 }
outgoing_path	token

2022-11-28 13:19:18

(1) More

FINISHED

fapi1-advanced-final-client-test-invalid-alternate-alg

Test has run to completion

testmodule_result

PASSED

2022-11-28 13:19:21

(2) More

TEST-RUNNER

Alias has now been claimed by another test

alias	quanto_test
new_test_id	eAqEN3tkKOzpcvt

Test Summary

Test Results