Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-11-22 08:19:50 INFO
TEST-RUNNER
Test instance IGPAOC2XFg3HiHb created
baseUrl 
https://www.certification.openid.net/test/a/tal_test
variant 
{
  "client_auth_type": "client_secret_basic",
  "response_type": "code",
  "request_type": "plain_http_request",
  "response_mode": "default",
  "client_registration": "static_client"
}
alias 
tal_test
description 
OIDC basic RP
planId 
e8h4aJW3KlCcO
config 
{
  "keys": [
    {
      "kty": "RSA",
      "n": "pD35mn3PUlIIRrShaxHkggSi1QdIElCRlfVNogupS2PidMDqnO7MDW3hEteZPzxHuARva09X8lSzoT8Ad5zl8fGO0WP0YXTTJKMEqpAHoBmimOX6XnVs7USSxPLVGIGO4pdjKQUeUlTXEcuRUuABa6h13Dj2v0TB6ako8Fa_YDvRxsqkd73SCaDp7Isnx3uy9PlyO9Uc5pupyf2Tq1oqP-NnxYgYl7F8AMgtpZhTqLT3b6xw4I4vjQy3vKBo3kJK8LacnVtKdXJDTZat75qATDDS0Pht8mtwpGPBN0T_j06k7Hx5tZVQHJn1FZGbOzr5THCTKSoz_3Tay5ZN3vgDNw",
      "e": "AQAB",
      "alg": "RS256",
      "use": "sig",
      "kid": "QjA0MzI4REU2NTQzMDkzMzAxRDExRTJGRkY5ODNERkI0MkNFRkJENA"
    }
  ],
  "alias": "tal_test",
  "description": "OIDC basic RP",
  "server": {
    "issuer": "https://us-oidc-op-tal.com/",
    "authorization_endpoint": "https://fidm.us1.gigya.com/oidc/op/v1.0/4_r4_M9P7uNb9K50G4XFmyEw/authorize",
    "token_endpoint": "https://fidm.us1.gigya.com/oidc/op/v1.0/4_r4_M9P7uNb9K50G4XFmyEw/token",
    "userinfo_endpoint": "https://fidm.us1.gigya.com/oidc/op/v1.0/4_r4_M9P7uNb9K50G4XFmyEw/userinfo",
    "jwks_uri": "https://fidm.us1.gigya.com/oidc/op/v1.0/4_r4_M9P7uNb9K50G4XFmyEw/.well-known/jwks"
  },
  "client": {
    "client_id": "hPNHrtzZmktTOROQam3V6jsB",
    "client_secret": "Pm2tl7mD0KVT1fgcuqIzw8h1_odnk6j6j3lf8Dqo0rw31pHfHQX_UbNsIca9MkffsX3jjgVW1zZnNT4dbG_kPA",
    "redirect_uri": "https://socialize.gigya.com/socialize.finalizeOidcLogin?"
  },
  "client_secret_post": {
    "client_id": "hPNHrtzZmktTOROQam3V6jsB",
    "client_secret": "Pm2tl7mD0KVT1fgcuqIzw8h1_odnk6j6j3lf8Dqo0rw31pHfHQX_UbNsIca9MkffsX3jjgVW1zZnNT4dbG_kPA"
  },
  "client2": {
    "client_secret": "OsfJrq6QX1PITBWKKkAUbetQMZ5A3TQmr_18ldff8LkZqSfL7IBb5d7xsyB-HV4I3ppgrODHCKm-BfDLIHWl-g",
    "client_id": "u-NyAWylVfYwyPjl4tqKS9GY"
  },
  "consent": {}
}
testName 
oidcc-client-test-idtoken-sig-rs256
2022-11-22 08:19:50 SUCCESS
OIDCCGenerateServerConfigurationIdTokenSigningAlgRS256Only
Generated default server configuration
server_configuration 
{
  "issuer": "https://www.certification.openid.net/test/a/tal_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/tal_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/tal_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/tal_test/jwks",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/tal_test/userinfo",
  "registration_endpoint": "https://www.certification.openid.net/test/a/tal_test/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "preferred_username",
    "gender",
    "birthdate",
    "address",
    "zoneinfo",
    "locale",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified",
    "website",
    "profile",
    "updated_at"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ]
}
2022-11-22 08:19:50
SetTokenEndpointAuthMethodsSupportedToClientSecretBasicOnly
Changed token_endpoint_auth_methods_supported to client_secret_basic only in server configuration
server_configuration 
{
  "issuer": "https://www.certification.openid.net/test/a/tal_test/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/tal_test/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/tal_test/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/tal_test/jwks",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/tal_test/userinfo",
  "registration_endpoint": "https://www.certification.openid.net/test/a/tal_test/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "preferred_username",
    "gender",
    "birthdate",
    "address",
    "zoneinfo",
    "locale",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified",
    "website",
    "profile",
    "updated_at"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ]
}
2022-11-22 08:19:51
OIDCCGenerateServerJWKs
Generated server public private JWK sets
server_jwks 
{
  "keys": [
    {
      "p": "6SgDG9zLIGKiuVogtm-sdnexs99sFeJRJtnKdM5n-C2DUp66Ct6SwlsJZZJxFK4RDQDR7GW7TrnWEHsMq5_O8k1AYgEmNrQ5vYtHmlogBqJpnUdZ0OVLjOF0OH7cUlAVMileeYU7yr0SqOYjmQGoc1uwfUhLYZEEsPpic8M9FIs",
      "kty": "RSA",
      "q": "qL_P1HiIUt3uStZTtWt4_wHK89TDxasUIRcwI9_woar_5RCi4DC-dZl0vv46VuarBWm8FyK9Jz1Fd8dy03MeD8DhNc368mqX30dorHBEADmVrY5ZbnYw3qR6bx5MPvDxZvbl1UM47WS_IkU1xPoKKJZQyybmDIs5JQV1pN5FBLU",
      "d": "MBRRbuACNqanmwB29cBpzilWLD0MK9hi0hqoP4uRRRCg9Q_7HvgklP9k9NhOWxBB3_nItZu1SuuqzPzQNoluii4MuZXeKBnEsv5E2JmNUoAyuF03Xpl-yIeChys2B-DvGtAIyYnn6eG54szMvApXkLqUGvCbvM6n_MLXkZ5SOYOa9mSgyV2cxqWXssVQTxM4xMP6ozoR69KYiCdvDxGsF2TcabS1JOHzcbSuqzWU0H_atMOuBQngcVSy1rB6Nv2XlnziyLttmwrcbnvqGGynnwJ4S7ymnch1X7wfkq6rpK2nQHhI9qmvxRwHwT_5oi7BEAnG45X0tPOUas6cE1KmsQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "e2f74094-adac-479d-ad04-320e7b028cb6",
      "qi": "Na8T0RhRun80d--KfkgyG6B0wpTAibyOogKrH7ORxX75AqT7rct44wVS96ZT2eO9Ud2YuBV77K4Moe4y53i_YV9EglTZKlhNTWBxKDVfZENmO6_eu0DGJKyjwvBFEehiRIlmDXO2R4io5HzAtuTzMmrO9WP2QzXkvjBZ06a0RP4",
      "dp": "am7-hFCVVXJRcCVpe36dDvNy5naeY5sNipuvJQU4Rv2XzjZxHRcfjaN7NafVASi41ePC8JQ8HiMNSjaxwQLRuKB1PIfjxuMc3J7hD-AGcKDhb4-ru4WAqI4evM-EifrOwjhKTVT5x4HqK7nrFCTCne6EMZy39JD7wEJ8gPXmQyM",
      "dq": "RDFfV0luLa6pwWxjX4kS2FptHaP5iUPdWpH4TkcNAwgLaRIT_-0yyms9FoG-KagFrKZR8DeFoPnNvN3ItVJr74nOeOPIaXZR8VT2I9kqYbzjk8NWuKDiltZ487aWsUjFBQr5TflgY-62nq7BT9yLhmNYOwB5LtCEQ0W1iO6ZjZE",
      "n": "mbD0LXgcDZijpRk48QiCpFARc3D1co8UYlzhL4WKrxXtPcU3JxLmKsD3lkeDYEEXgK64i046K516M7CM4_nFKInwKZZ1zE356oKbkZk8At2tWIdzf6YQW5SNuzIWEJ6EWsqtYic53DV9WNArqeGHHkTvtiNlO-P9cgmxlwlQIwqXWYWPyXTKiWSRhFowIAQ3tzreSQkwQo63R_XESlzV_pVlRKRAkBe1naM7kGXlLSd_IdZyH46Un1dR9d8uDedfDmluhg-Ipg3qjmqPBGmr2lmi97m4TtAlAFgux129Rgleil8_KWKLULEQiSuAn3oCseJnF-wiGnJyT7I5EfiyRw"
    },
    {
      "kty": "EC",
      "d": "eRtXlhe6-VAx6ZaqXOZ4CLNz4bnVUJ2xQPJC7pzinIU",
      "use": "sig",
      "crv": "P-256",
      "kid": "e30fb486-4ad7-42d3-972c-cdb046d32bc4",
      "x": "iuzsu_xjr218AlS8P4_d5Kib0ijLuCu71tX9ksTw44U",
      "y": "ldGXUKWLkGdWrEAvI6QiAcWAO13RAI8etPeHHGIRIG0"
    },
    {
      "kty": "EC",
      "d": "k2EAVBw2IcdtBINg2PWkzyHbM9BAo0UAxVRjHGFwbio",
      "use": "sig",
      "crv": "secp256k1",
      "kid": "5a568427-3f89-4fae-bed5-30257f2f553b",
      "x": "ocBbuMYSNL-VtSy40YKuzqlainlA4A1pFcrgTIpFaAM",
      "y": "QJVW2dPAN2biJaIof6sUi2Zy7yVaTHCzhnFBn1X3r9w"
    },
    {
      "kty": "OKP",
      "d": "ubymSXtyPFBR3bqy2_s8FeFGimdFMTdmPIVIn8quZJA",
      "use": "sig",
      "crv": "Ed25519",
      "kid": "6d55a120-2a04-471f-a8d5-662439179a44",
      "x": "_M8CrgAPHVi4NpQhjN8P8m-RmLXuZJ56MV-CrBIzDLo"
    }
  ]
}
server_encryption_keys 
{
  "keys": [
    {
      "p": "2OLpDQtn1GSPW7c9Z-iMmDBmN9Xdi-Kehj02M4CIa00nz2T8NKYAwXovNrIPS05qvQqY3S8_Ocqkv8AYXtWdCXTtwEyS5oyMimEH-8qvReRj0fY3LBoklUMJPV-WhuU6Wv2f-HIuDT2d4CltqhrzzYsRBnmEo6_4WGFKzFua-fs",
      "kty": "RSA",
      "q": "yC2g__oQJMZa6DLhJdPhXHnhvGkaRIl7dVcGfD3k7BFF435xV9vAOOA_5zFb0oPvTe89YXqKf_HRTslVvJqBhjbYjjNGt6eG13AsJFm8X7qe3NWlt8qFJk9z3uQy0vfQspJt2TWjxhhLuiMLyZvV1KLnLMchREy-gLhD2SwpAQk",
      "d": "A6a8wAd2EwbBcvsRn7TVaAUqy3glHnWfAI781G3_F4DOorxtYMsuZQ6OT60j3GuNP0rsYPQSkd3_7ePCxvSwc24VYba-T2lJhzAO1AYa1jhD7dQloEYX55jGXxJT9A_cZFEUo4jJ_RBUMT1GgMTKd-NEIs2If6W5zJR-TigP_XZQYolNpWpsJ0w3euW8F8g2HFZyFDBcMmC1D5wPQwV7wUSI54BrmpwR7VSVaog3r5oGGU4LCwjdDVpZng55ki7Py8sagLwoQHo3Tajz6ir8ktZ-aWX2K1s3JN_k87pK2OiH3svJRL0aFyL5k_CLmsAHYShoPXALGpUBne90zfhVcQ",
      "e": "AQAB",
      "use": "enc",
      "kid": "17bbe9c0-faed-4bf9-ad6e-674af9f4aa9c",
      "qi": "keruPFOC8jdBWDCOZr5el619QzVVwfLCTGIi6FY_XfQVqJpX7binzrgDi0ul07X-rmkOqXxXG9mOAJvDM2ZcRfQmhPxDivOTIPJcGTbq-QNRU-IvHadcd67S3wSnGqgaAVZm_5vgOaKThsROqUo6SaOKaUiKXv7pk6hkbAGg3-s",
      "dp": "Zi1Ic-_Ko6IYc7H5COniypQKpAVqUUubOUy_KzZDjqGTvr4pnzgRpRTGB3ONhwHTgWnrqFBo7fYM9ZUvJgZm7BydIXoxvtG6KDscQsAzIK8_Y5wmU-2hDHy_bp2I0dZOTq2r3qUUEwLTTNbXpkr6TvxUMgOvvFnbmu-DCJGjil8",
      "alg": "RSA-OAEP",
      "dq": "IWjMKCzaKOkaHwru3NtiD4cgD8wS4EF543mk0XObE3NGkNN3o0w_5r42rCVmx9nRRNabDfvfxb7cSiP8NUAsQfRBbGpOcTR6otZL5706XVfOT9kwkV4xntU_54F6og9OO5-IyenT7an8aZKT0xA5PgX6Q1Twzm9olB8s48AlD9E",
      "n": "qZfuW9e9rztqFvRRDyROiIpmFH2oS_kCB0FixkXyHtM2Kkj0ypRDiSdBifhLwjTq7PsKrp58FpnRK6s2A-UKXP1tAO4K6flGqb6wAOUfclIIucy8w-UuNXbU-Q0RToa0YBAjrBMlKrGrAvzecXK1MR6qjuh39YSGrYBuyotdtsNe0J5ngTerGe19oWd8xnalHcXDAv5qaP_vqXyG77r0FKNvCiG6xwBlG5Hn172GqAaHrdfCZY2BiBmz5RHfUm8c7z-89kNj5cg6yXLS39JKVEXblyJM0YBGkK5tqLT0HeICX4ymwGFOkije3Ud5wT5_vc5clz4LTGH5YlMXAJ_E0w"
    },
    {
      "kty": "EC",
      "d": "y_b3MHUJuizNpqfwJ_U1CGPq78jtmk1kP1SpNax881A",
      "use": "enc",
      "crv": "P-256",
      "kid": "2609c6e2-8f02-43b9-a185-9bc8acdba07b",
      "x": "kpdvHm1vr4giiXfB2ojGB2eKu_s2dTpwgNu00iat_70",
      "y": "jbNSjmpu4B4O9Pjm9uODpiTdWSj3k4aGtXFu8j16NN8",
      "alg": "ECDH-ES"
    }
  ]
}
server_public_jwks 
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "e2f74094-adac-479d-ad04-320e7b028cb6",
      "n": "mbD0LXgcDZijpRk48QiCpFARc3D1co8UYlzhL4WKrxXtPcU3JxLmKsD3lkeDYEEXgK64i046K516M7CM4_nFKInwKZZ1zE356oKbkZk8At2tWIdzf6YQW5SNuzIWEJ6EWsqtYic53DV9WNArqeGHHkTvtiNlO-P9cgmxlwlQIwqXWYWPyXTKiWSRhFowIAQ3tzreSQkwQo63R_XESlzV_pVlRKRAkBe1naM7kGXlLSd_IdZyH46Un1dR9d8uDedfDmluhg-Ipg3qjmqPBGmr2lmi97m4TtAlAFgux129Rgleil8_KWKLULEQiSuAn3oCseJnF-wiGnJyT7I5EfiyRw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "1c75665a-3151-49f2-9f1b-077a36abe554",
      "n": "iGmYqXhIeQ7i2PfH0Yy5x-TQQcefZeg1rgj6K4ZXZI0CnfkulorA2ujqy5lowneRM6VirJLK2PBoLs0_EEzTu4L_V9_G05UJ22q16N0gTZNXp3GSiYFINyGVlHU9cQ7S0hnR8PYZ8Nca51WUCVs3mzPhvjKwmD_SIzKKmonZJdAl4s2GTi5Y_Wnx0_x36UTGyEDen_4hMM4G5Tt3siF5XnYoTQnL2_6Mm0Rolad7WqznEmz-rTCeakM594qjiAsA6-o9CC3W-sGB1Ur79mfgAjgC1LcnVaF4nuh3niEV88qMYMeL7wAlec8YgcrDPu_2pw9xtvvNrsvtL2PXtWZkow"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "e30fb486-4ad7-42d3-972c-cdb046d32bc4",
      "x": "iuzsu_xjr218AlS8P4_d5Kib0ijLuCu71tX9ksTw44U",
      "y": "ldGXUKWLkGdWrEAvI6QiAcWAO13RAI8etPeHHGIRIG0"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "a1f52a13-c3f4-4d87-8c48-924864588787",
      "x": "QWuBPrhu3fTq5dHLxKtoycy9EndLgnCI3qR2ZavZicA",
      "y": "aq3IkO14a_brZQ-5Ovj80BUvjjGCoNiOQojTj3FEVYs"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "secp256k1",
      "kid": "5a568427-3f89-4fae-bed5-30257f2f553b",
      "x": "ocBbuMYSNL-VtSy40YKuzqlainlA4A1pFcrgTIpFaAM",
      "y": "QJVW2dPAN2biJaIof6sUi2Zy7yVaTHCzhnFBn1X3r9w"
    },
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "kid": "6d55a120-2a04-471f-a8d5-662439179a44",
      "x": "_M8CrgAPHVi4NpQhjN8P8m-RmLXuZJ56MV-CrBIzDLo"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "17bbe9c0-faed-4bf9-ad6e-674af9f4aa9c",
      "alg": "RSA-OAEP",
      "n": "qZfuW9e9rztqFvRRDyROiIpmFH2oS_kCB0FixkXyHtM2Kkj0ypRDiSdBifhLwjTq7PsKrp58FpnRK6s2A-UKXP1tAO4K6flGqb6wAOUfclIIucy8w-UuNXbU-Q0RToa0YBAjrBMlKrGrAvzecXK1MR6qjuh39YSGrYBuyotdtsNe0J5ngTerGe19oWd8xnalHcXDAv5qaP_vqXyG77r0FKNvCiG6xwBlG5Hn172GqAaHrdfCZY2BiBmz5RHfUm8c7z-89kNj5cg6yXLS39JKVEXblyJM0YBGkK5tqLT0HeICX4ymwGFOkije3Ud5wT5_vc5clz4LTGH5YlMXAJ_E0w"
    },
    {
      "kty": "EC",
      "use": "enc",
      "crv": "P-256",
      "kid": "2609c6e2-8f02-43b9-a185-9bc8acdba07b",
      "x": "kpdvHm1vr4giiXfB2ojGB2eKu_s2dTpwgNu00iat_70",
      "y": "jbNSjmpu4B4O9Pjm9uODpiTdWSj3k4aGtXFu8j16NN8",
      "alg": "ECDH-ES"
    }
  ]
}
2022-11-22 08:19:51 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-11-22 08:19:51 SUCCESS
CheckDistinctKeyIdValueInServerJWKs
Distinct 'kid' value in all keys of server_jwks
see 
https://bitbucket.org/openid/connect/issues/1127
2022-11-22 08:19:51 SUCCESS
OIDCCLoadUserInfo
Added user information
user_info 
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "given_name": "Demo",
  "family_name": "User",
  "middle_name": "Theresa",
  "nickname": "Dee",
  "preferred_username": "d.tu",
  "gender": "female",
  "birthdate": "2000-02-03",
  "address": {
    "street_address": "100 Universal City Plaza",
    "locality": "Hollywood",
    "region": "CA",
    "postal_code": "91608",
    "country": "USA"
  },
  "zoneinfo": "America/Los_Angeles",
  "locale": "en-US",
  "phone_number": "+1 555 5550000",
  "phone_number_verified": false,
  "email": "user@example.com",
  "email_verified": false,
  "website": "https://openid.net/",
  "profile": "https://example.com/user",
  "updated_at": 1580000000
}
2022-11-22 08:19:51 SUCCESS
OIDCCGetStaticClientConfigurationForRPTests
Found a static client object
client_id 
hPNHrtzZmktTOROQam3V6jsB
client_secret 
Pm2tl7mD0KVT1fgcuqIzw8h1_odnk6j6j3lf8Dqo0rw31pHfHQX_UbNsIca9MkffsX3jjgVW1zZnNT4dbG_kPA
redirect_uris 
[
  "https://socialize.gigya.com/socialize.finalizeOidcLogin?"
]
2022-11-22 08:19:51 SUCCESS
EnsureClientDoesNotHaveBothJwksAndJwksUri
Client does not have both jwks and jwks_uri set
client 
{
  "client_id": "hPNHrtzZmktTOROQam3V6jsB",
  "client_secret": "Pm2tl7mD0KVT1fgcuqIzw8h1_odnk6j6j3lf8Dqo0rw31pHfHQX_UbNsIca9MkffsX3jjgVW1zZnNT4dbG_kPA",
  "redirect_uris": [
    "https://socialize.gigya.com/socialize.finalizeOidcLogin?"
  ]
}
2022-11-22 08:19:51 INFO
FetchClientKeys
Skipped evaluation due to missing required element: client jwks_uri
path 
jwks_uri
mapped
object 
client
2022-11-22 08:19:51 SUCCESS
ValidateClientGrantTypes
grant_types match response_types
grant_types 
[
  "authorization_code"
]
response_types 
[
  "code"
]
2022-11-22 08:19:51 SUCCESS
OIDCCValidateClientRedirectUris
Valid redirect_uri(s) provided in registration request
redirect_uris 
[
  "https://socialize.gigya.com/socialize.finalizeOidcLogin?"
]
2022-11-22 08:19:51 SUCCESS
ValidateClientLogoUris
Client does not contain any logo_uri
2022-11-22 08:19:51 SUCCESS
ValidateClientUris
Client does not contain any client_uri
2022-11-22 08:19:51 SUCCESS
ValidateClientPolicyUris
Client does not contain any policy_uri
2022-11-22 08:19:51 SUCCESS
ValidateClientTosUris
Client does not contain any tos_uri
2022-11-22 08:19:51 SUCCESS
ValidateClientSubjectType
A subject_type was not provided
2022-11-22 08:19:51 INFO
ValidateIdTokenSignedResponseAlg
Skipped evaluation due to missing required element: client id_token_signed_response_alg
path 
id_token_signed_response_alg
mapped
object 
client
2022-11-22 08:19:51 SUCCESS
EnsureIdTokenEncryptedResponseAlgIsSetIfEncIsSet
id_token_encrypted_response_enc is not set
2022-11-22 08:19:51 INFO
ValidateUserinfoSignedResponseAlg
Skipped evaluation due to missing required element: client userinfo_signed_response_alg
path 
userinfo_signed_response_alg
mapped
object 
client
2022-11-22 08:19:51 SUCCESS
EnsureUserinfoEncryptedResponseAlgIsSetIfEncIsSet
userinfo_encrypted_response_enc is not set
2022-11-22 08:19:51 INFO
ValidateRequestObjectSigningAlg
Skipped evaluation due to missing required element: client request_object_signing_alg
path 
request_object_signing_alg
mapped
object 
client
2022-11-22 08:19:51 SUCCESS
EnsureRequestObjectEncryptionAlgIsSetIfEncIsSet
request_object_encryption_enc is not set
2022-11-22 08:19:51 INFO
ValidateTokenEndpointAuthSigningAlg
Skipped evaluation due to missing required element: client token_endpoint_auth_signing_alg
path 
token_endpoint_auth_signing_alg
mapped
object 
client
2022-11-22 08:19:51 SUCCESS
ValidateDefaultMaxAge
default_max_age is not set
2022-11-22 08:19:51 INFO
ValidateRequireAuthTime
Skipped evaluation due to missing required element: client require_auth_time
path 
require_auth_time
mapped
object 
client
2022-11-22 08:19:51 INFO
ValidateDefaultAcrValues
Skipped evaluation due to missing required element: client default_acr_values
path 
default_acr_values
mapped
object 
client
2022-11-22 08:19:51 INFO
ValidateInitiateLoginUri
Skipped evaluation due to missing required element: client initiate_login_uri
path 
initiate_login_uri
mapped
object 
client
2022-11-22 08:19:51 INFO
ValidateRequestUris
Skipped evaluation due to missing required element: client request_uris
path 
request_uris
mapped
object 
client
2022-11-22 08:19:51
SetServerSigningAlgToRS256
Successfully set signing algorithm to RS256
2022-11-22 08:19:51
SetClientIdTokenSignedResponseAlgToServerSigningAlg
Set id_token_signed_response_alg for the registered client
id_token_signed_response_alg 
RS256
2022-11-22 08:19:51
oidcc-client-test-idtoken-sig-rs256
Setup Done
2022-11-22 08:19:55 INCOMING
oidcc-client-test-idtoken-sig-rs256
Incoming HTTP request to /test/a/tal_test/jwks
incoming_headers 
{
  "host": "www.certification.openid.net",
  "user-agent": "PostmanRuntime/7.29.2",
  "accept": "*/*",
  "postman-token": "4cce7d75-5d09-4d3e-945e-a4bd79c69221",
  "accept-encoding": "gzip, deflate, br",
  "cookie": "JSESSIONID\u003d257ED7B888E67176B6F9F3421FBF063F",
  "connection": "close"
}
incoming_path 
/test/a/tal_test/jwks
incoming_body_form_params
incoming_method 
GET
incoming_tls_version 
TLSv1.2
incoming_tls_cert
incoming_query_string_params 
{}
incoming_body
incoming_tls_chain 
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher 
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
Jwks endpoint
2022-11-22 08:19:55 OUTGOING
oidcc-client-test-idtoken-sig-rs256
Response to HTTP request to test instance IGPAOC2XFg3HiHb
outgoing_status_code 
200
outgoing_headers 
{}
outgoing_body 
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "e2f74094-adac-479d-ad04-320e7b028cb6",
      "n": "mbD0LXgcDZijpRk48QiCpFARc3D1co8UYlzhL4WKrxXtPcU3JxLmKsD3lkeDYEEXgK64i046K516M7CM4_nFKInwKZZ1zE356oKbkZk8At2tWIdzf6YQW5SNuzIWEJ6EWsqtYic53DV9WNArqeGHHkTvtiNlO-P9cgmxlwlQIwqXWYWPyXTKiWSRhFowIAQ3tzreSQkwQo63R_XESlzV_pVlRKRAkBe1naM7kGXlLSd_IdZyH46Un1dR9d8uDedfDmluhg-Ipg3qjmqPBGmr2lmi97m4TtAlAFgux129Rgleil8_KWKLULEQiSuAn3oCseJnF-wiGnJyT7I5EfiyRw"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "1c75665a-3151-49f2-9f1b-077a36abe554",
      "n": "iGmYqXhIeQ7i2PfH0Yy5x-TQQcefZeg1rgj6K4ZXZI0CnfkulorA2ujqy5lowneRM6VirJLK2PBoLs0_EEzTu4L_V9_G05UJ22q16N0gTZNXp3GSiYFINyGVlHU9cQ7S0hnR8PYZ8Nca51WUCVs3mzPhvjKwmD_SIzKKmonZJdAl4s2GTi5Y_Wnx0_x36UTGyEDen_4hMM4G5Tt3siF5XnYoTQnL2_6Mm0Rolad7WqznEmz-rTCeakM594qjiAsA6-o9CC3W-sGB1Ur79mfgAjgC1LcnVaF4nuh3niEV88qMYMeL7wAlec8YgcrDPu_2pw9xtvvNrsvtL2PXtWZkow"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "e30fb486-4ad7-42d3-972c-cdb046d32bc4",
      "x": "iuzsu_xjr218AlS8P4_d5Kib0ijLuCu71tX9ksTw44U",
      "y": "ldGXUKWLkGdWrEAvI6QiAcWAO13RAI8etPeHHGIRIG0"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "a1f52a13-c3f4-4d87-8c48-924864588787",
      "x": "QWuBPrhu3fTq5dHLxKtoycy9EndLgnCI3qR2ZavZicA",
      "y": "aq3IkO14a_brZQ-5Ovj80BUvjjGCoNiOQojTj3FEVYs"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "secp256k1",
      "kid": "5a568427-3f89-4fae-bed5-30257f2f553b",
      "x": "ocBbuMYSNL-VtSy40YKuzqlainlA4A1pFcrgTIpFaAM",
      "y": "QJVW2dPAN2biJaIof6sUi2Zy7yVaTHCzhnFBn1X3r9w"
    },
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "kid": "6d55a120-2a04-471f-a8d5-662439179a44",
      "x": "_M8CrgAPHVi4NpQhjN8P8m-RmLXuZJ56MV-CrBIzDLo"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "enc",
      "kid": "17bbe9c0-faed-4bf9-ad6e-674af9f4aa9c",
      "alg": "RSA-OAEP",
      "n": "qZfuW9e9rztqFvRRDyROiIpmFH2oS_kCB0FixkXyHtM2Kkj0ypRDiSdBifhLwjTq7PsKrp58FpnRK6s2A-UKXP1tAO4K6flGqb6wAOUfclIIucy8w-UuNXbU-Q0RToa0YBAjrBMlKrGrAvzecXK1MR6qjuh39YSGrYBuyotdtsNe0J5ngTerGe19oWd8xnalHcXDAv5qaP_vqXyG77r0FKNvCiG6xwBlG5Hn172GqAaHrdfCZY2BiBmz5RHfUm8c7z-89kNj5cg6yXLS39JKVEXblyJM0YBGkK5tqLT0HeICX4ymwGFOkije3Ud5wT5_vc5clz4LTGH5YlMXAJ_E0w"
    },
    {
      "kty": "EC",
      "use": "enc",
      "crv": "P-256",
      "kid": "2609c6e2-8f02-43b9-a185-9bc8acdba07b",
      "x": "kpdvHm1vr4giiXfB2ojGB2eKu_s2dTpwgNu00iat_70",
      "y": "jbNSjmpu4B4O9Pjm9uODpiTdWSj3k4aGtXFu8j16NN8",
      "alg": "ECDH-ES"
    }
  ]
}
outgoing_path 
jwks
2022-11-22 08:20:14 INCOMING
oidcc-client-test-idtoken-sig-rs256
Incoming HTTP request to /test/a/tal_test/authorize
incoming_headers 
{
  "host": "www.certification.openid.net",
  "sec-ch-ua": "\"Google Chrome\";v\u003d\"107\", \"Chromium\";v\u003d\"107\", \"Not\u003dA?Brand\";v\u003d\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,*/*;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.9",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "navigate",
  "sec-fetch-dest": "document",
  "referer": "https://socialize.us1.gigya.com/",
  "accept-encoding": "gzip, deflate, br",
  "accept-language": "en-US,en;q\u003d0.9,he;q\u003d0.8",
  "cookie": "__utma\u003d201319536.76864017.1658307142.1664786690.1665555850.13; __utmz\u003d201319536.1665555850.13.6.utmcsr\u003dgoogle|utmccn\u003d(organic)|utmcmd\u003dorganic|utmctr\u003d(not%20provided); JSESSIONID\u003d119918A143D359300525FD5835CE0195",
  "connection": "close"
}
incoming_path 
/test/a/tal_test/authorize
incoming_body_form_params
incoming_method 
GET
incoming_tls_version 
TLSv1.2
incoming_tls_cert
incoming_query_string_params 
{
  "client_id": "hPNHrtzZmktTOROQam3V6jsB",
  "redirect_uri": "https://socialize.gigya.com/socialize.finalizeOidcLogin?",
  "scope": "openid email profile address phone",
  "state": "tk2.oi.AcbH4rgdSw.3B4l38lkFM0t5NIfM3-L03-R1cr9C_FpMyMeLPEsdf0UiLgTS70f3UvBbS08uON8.JHH52RIJJ28W8V01eBEzYOZPKixsm5GSrJeU1nlvwicN_2vfPlk3kni_PbcsXhtKiUuCmvMWlQVa2opLL0vxmw.sc3yc463l70n4055151h7",
  "response_type": "code",
  "nonce": "b53094385c494a2e913b99b181fcca01"
}
incoming_body
incoming_tls_chain 
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher 
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
Authorization endpoint
2022-11-22 08:20:14 SUCCESS
EnsureRequestDoesNotContainRequestObject
Request does not contain a request parameter
2022-11-22 08:20:14 SUCCESS
EnsureAuthorizationHttpRequestContainsOpenIDScope
Found 'openid' in scope http request parameter
actual 
[
  "openid",
  "email",
  "profile",
  "address",
  "phone"
]
expected 
openid
2022-11-22 08:20:14 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request 
{
  "client_id": "hPNHrtzZmktTOROQam3V6jsB",
  "redirect_uri": "https://socialize.gigya.com/socialize.finalizeOidcLogin?",
  "scope": "openid email profile address phone",
  "state": "tk2.oi.AcbH4rgdSw.3B4l38lkFM0t5NIfM3-L03-R1cr9C_FpMyMeLPEsdf0UiLgTS70f3UvBbS08uON8.JHH52RIJJ28W8V01eBEzYOZPKixsm5GSrJeU1nlvwicN_2vfPlk3kni_PbcsXhtKiUuCmvMWlQVa2opLL0vxmw.sc3yc463l70n4055151h7",
  "response_type": "code",
  "nonce": "b53094385c494a2e913b99b181fcca01"
}
2022-11-22 08:20:14 SUCCESS
ExtractRequestedScopes
Requested scopes
scope 
openid email profile address phone
2022-11-22 08:20:14 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce 
b53094385c494a2e913b99b181fcca01
2022-11-22 08:20:14 INFO
EnsureAuthorizationRequestContainsPkceCodeChallenge
Skipped evaluation due to missing required element: effective_authorization_endpoint_request code_challenge
path 
code_challenge
mapped
object 
effective_authorization_endpoint_request
2022-11-22 08:20:14 SUCCESS
EnsureResponseTypeIsCode
Response type is expected value
expected 
code
2022-11-22 08:20:14 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id 
hPNHrtzZmktTOROQam3V6jsB
2022-11-22 08:20:14 SUCCESS
EnsureValidRedirectUriForAuthorizationEndpointRequest
redirect_uri is one of the allowed redirect uris
actual 
https://socialize.gigya.com/socialize.finalizeOidcLogin?
expected 
[
  "https://socialize.gigya.com/socialize.finalizeOidcLogin?"
]
2022-11-22 08:20:14 SUCCESS
EnsureOpenIDInScopeRequest
Found 'openid' scope in request
actual 
[
  "openid",
  "email",
  "profile",
  "address",
  "phone"
]
expected 
openid
2022-11-22 08:20:14 SUCCESS
DisallowMaxAgeEqualsZeroAndPromptNone
The client did not send max_age=0 and prompt=none parameters as expected
2022-11-22 08:20:14 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code 
QRCYt8LCbnarBRnTzS2IfRURZPzxbea7
2022-11-22 08:20:14 SUCCESS
CalculateCHash
Successful c_hash encoding
c_hash 
SWRbrUYIT3EcVXyo6MtGbA
2022-11-22 08:20:14 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params 
{
  "redirect_uri": "https://socialize.gigya.com/socialize.finalizeOidcLogin?",
  "state": "tk2.oi.AcbH4rgdSw.3B4l38lkFM0t5NIfM3-L03-R1cr9C_FpMyMeLPEsdf0UiLgTS70f3UvBbS08uON8.JHH52RIJJ28W8V01eBEzYOZPKixsm5GSrJeU1nlvwicN_2vfPlk3kni_PbcsXhtKiUuCmvMWlQVa2opLL0vxmw.sc3yc463l70n4055151h7"
}
2022-11-22 08:20:14 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params 
{
  "redirect_uri": "https://socialize.gigya.com/socialize.finalizeOidcLogin?",
  "state": "tk2.oi.AcbH4rgdSw.3B4l38lkFM0t5NIfM3-L03-R1cr9C_FpMyMeLPEsdf0UiLgTS70f3UvBbS08uON8.JHH52RIJJ28W8V01eBEzYOZPKixsm5GSrJeU1nlvwicN_2vfPlk3kni_PbcsXhtKiUuCmvMWlQVa2opLL0vxmw.sc3yc463l70n4055151h7",
  "code": "QRCYt8LCbnarBRnTzS2IfRURZPzxbea7"
}
2022-11-22 08:20:14
SendAuthorizationResponseWithResponseModeQuery
Redirecting back to client
uri 
https://socialize.gigya.com/socialize.finalizeOidcLogin?state=tk2.oi.AcbH4rgdSw.3B4l38lkFM0t5NIfM3-L03-R1cr9C_FpMyMeLPEsdf0UiLgTS70f3UvBbS08uON8.JHH52RIJJ28W8V01eBEzYOZPKixsm5GSrJeU1nlvwicN_2vfPlk3kni_PbcsXhtKiUuCmvMWlQVa2opLL0vxmw.sc3yc463l70n4055151h7&code=QRCYt8LCbnarBRnTzS2IfRURZPzxbea7
2022-11-22 08:20:14 OUTGOING
oidcc-client-test-idtoken-sig-rs256
Response to HTTP request to test instance IGPAOC2XFg3HiHb
outgoing 
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [https://socialize.gigya.com/socialize.finalizeOidcLogin?state=tk2.oi.AcbH4rgdSw.3B4l38lkFM0t5NIfM3-L03-R1cr9C_FpMyMeLPEsdf0UiLgTS70f3UvBbS08uON8.JHH52RIJJ28W8V01eBEzYOZPKixsm5GSrJeU1nlvwicN_2vfPlk3kni_PbcsXhtKiUuCmvMWlQVa2opLL0vxmw.sc3yc463l70n4055151h7&code=QRCYt8LCbnarBRnTzS2IfRURZPzxbea7]
outgoing_path 
authorize
2022-11-22 08:20:14 INCOMING
oidcc-client-test-idtoken-sig-rs256
Incoming HTTP request to /test/a/tal_test/token
incoming_headers 
{
  "host": "www.certification.openid.net",
  "authorization": "Basic aFBOSHJ0elpta3RUT1JPUWFtM1Y2anNCOlBtMnRsN21EMEtWVDFmZ2N1cUl6dzhoMV9vZG5rNmo2ajNsZjhEcW8wcnczMXBIZkhRWF9VYk5zSWNhOU1rZmZzWDNqamdWVzF6Wm5OVDRkYkdfa1BB",
  "accept": "application/json, application/json",
  "cookie": "JSESSIONID\u003d9B191115A14BE432CE4273D7653201F7",
  "content-type": "application/x-www-form-urlencoded",
  "connection": "close",
  "content-length": "147"
}
incoming_path 
/test/a/tal_test/token
incoming_body_form_params 
{
  "code": "QRCYt8LCbnarBRnTzS2IfRURZPzxbea7",
  "grant_type": "authorization_code",
  "redirect_uri": "https://socialize.gigya.com/socialize.finalizeOidcLogin?"
}
incoming_method 
POST
incoming_tls_version 
TLSv1.2
incoming_tls_cert
incoming_query_string_params 
{}
incoming_body 
code=QRCYt8LCbnarBRnTzS2IfRURZPzxbea7&grant_type=authorization_code&redirect_uri=https%3A%2F%2Fsocialize.gigya.com%2Fsocialize.finalizeOidcLogin%3F
incoming_tls_chain 
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher 
ECDHE-RSA-AES256-GCM-SHA384
incoming_body_json
Token endpoint
2022-11-22 08:20:14
CheckClientIdMatchesOnTokenRequestIfPresent
client_id not present, nothing to check
2022-11-22 08:20:14 SUCCESS
ExtractClientCredentialsFromBasicAuthorizationHeader
Extracted client authentication
client_id 
hPNHrtzZmktTOROQam3V6jsB
client_secret 
Pm2tl7mD0KVT1fgcuqIzw8h1_odnk6j6j3lf8Dqo0rw31pHfHQX_UbNsIca9MkffsX3jjgVW1zZnNT4dbG_kPA
method 
client_secret_basic
2022-11-22 08:20:14 SUCCESS
ValidateClientIdAndSecret
Client id and secret match
2022-11-22 08:20:14 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code 
QRCYt8LCbnarBRnTzS2IfRURZPzxbea7
2022-11-22 08:20:14 SUCCESS
ValidateRedirectUriForTokenEndpointRequest
redirect_uri is the same as the one used in the authorization request
actual 
https://socialize.gigya.com/socialize.finalizeOidcLogin?
2022-11-22 08:20:14 SUCCESS
GenerateBearerAccessToken
Generated access token
access_token 
Q60wRyHxXkDaw6NwM8CVTDEZDpiiCcGpVCx8YeC4uyfq3KpYGq
2022-11-22 08:20:14 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash 
wIHHCSDIQRd6LUeQeAXS9Q
2022-11-22 08:20:14 SUCCESS
GenerateIdTokenClaims
Created ID Token Claims
iss 
https://www.certification.openid.net/test/a/tal_test/
sub 
user-subject-1234531
aud 
hPNHrtzZmktTOROQam3V6jsB
nonce 
b53094385c494a2e913b99b181fcca01
iat 
1669105214
exp 
1669105514
2022-11-22 08:20:14 SUCCESS
AddAtHashToIdTokenClaims
Added at_hash to ID token claims
at_hash 
wIHHCSDIQRd6LUeQeAXS9Q
id_token_claims 
{
  "iss": "https://www.certification.openid.net/test/a/tal_test/",
  "sub": "user-subject-1234531",
  "aud": "hPNHrtzZmktTOROQam3V6jsB",
  "nonce": "b53094385c494a2e913b99b181fcca01",
  "iat": 1669105214,
  "exp": 1669105514,
  "at_hash": "wIHHCSDIQRd6LUeQeAXS9Q"
}
2022-11-22 08:20:14 SUCCESS
OIDCCSignIdToken
Signed the ID token
id_token
eyJraWQiOiJlMmY3NDA5NC1hZGFjLTQ3OWQtYWQwNC0zMjBlN2IwMjhjYjYiLCJhbGciOiJSUzI1NiJ9.eyJhdF9oYXNoIjoid0lISENTRElRUmQ2TFVlUWVBWFM5USIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiaFBOSHJ0elpta3RUT1JPUWFtM1Y2anNCIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3RhbF90ZXN0XC8iLCJleHAiOjE2NjkxMDU1MTQsIm5vbmNlIjoiYjUzMDk0Mzg1YzQ5NGEyZTkxM2I5OWIxODFmY2NhMDEiLCJpYXQiOjE2NjkxMDUyMTR9.f4yiyycSIX3_LR-4jpAHGgNCMl2j9ClPlceUOv-ZPxqLa5d3PjvC82CIguVWl13V6K0m0P_a_Ff0hHwkF-noct-OkhriZwlCMQe7mUsBIPooxxmAgRTIU3fX8Ltkz4W6Ug7eCKPw3vb9o9woOvggLm3YWaNp21rZdDpKhhOnq4RpVnp51Je0bovLCWgPGlHBiHQqVPVqp-BK9b17aEidnFUnpL0lROw_SEsUe3FDX3hH__tgMzg0RJ7q-1SSdCQ34QRUcLzpgNXsJePI1azGScz9fx3CV7-B3QxyiTgzyKJYhkAdSOTEbCfZweD9fZt8S2vrb1-Xdft38jprBHMCEA
key 
{"p":"6SgDG9zLIGKiuVogtm-sdnexs99sFeJRJtnKdM5n-C2DUp66Ct6SwlsJZZJxFK4RDQDR7GW7TrnWEHsMq5_O8k1AYgEmNrQ5vYtHmlogBqJpnUdZ0OVLjOF0OH7cUlAVMileeYU7yr0SqOYjmQGoc1uwfUhLYZEEsPpic8M9FIs","kty":"RSA","q":"qL_P1HiIUt3uStZTtWt4_wHK89TDxasUIRcwI9_woar_5RCi4DC-dZl0vv46VuarBWm8FyK9Jz1Fd8dy03MeD8DhNc368mqX30dorHBEADmVrY5ZbnYw3qR6bx5MPvDxZvbl1UM47WS_IkU1xPoKKJZQyybmDIs5JQV1pN5FBLU","d":"MBRRbuACNqanmwB29cBpzilWLD0MK9hi0hqoP4uRRRCg9Q_7HvgklP9k9NhOWxBB3_nItZu1SuuqzPzQNoluii4MuZXeKBnEsv5E2JmNUoAyuF03Xpl-yIeChys2B-DvGtAIyYnn6eG54szMvApXkLqUGvCbvM6n_MLXkZ5SOYOa9mSgyV2cxqWXssVQTxM4xMP6ozoR69KYiCdvDxGsF2TcabS1JOHzcbSuqzWU0H_atMOuBQngcVSy1rB6Nv2XlnziyLttmwrcbnvqGGynnwJ4S7ymnch1X7wfkq6rpK2nQHhI9qmvxRwHwT_5oi7BEAnG45X0tPOUas6cE1KmsQ","e":"AQAB","use":"sig","kid":"e2f74094-adac-479d-ad04-320e7b028cb6","qi":"Na8T0RhRun80d--KfkgyG6B0wpTAibyOogKrH7ORxX75AqT7rct44wVS96ZT2eO9Ud2YuBV77K4Moe4y53i_YV9EglTZKlhNTWBxKDVfZENmO6_eu0DGJKyjwvBFEehiRIlmDXO2R4io5HzAtuTzMmrO9WP2QzXkvjBZ06a0RP4","dp":"am7-hFCVVXJRcCVpe36dDvNy5naeY5sNipuvJQU4Rv2XzjZxHRcfjaN7NafVASi41ePC8JQ8HiMNSjaxwQLRuKB1PIfjxuMc3J7hD-AGcKDhb4-ru4WAqI4evM-EifrOwjhKTVT5x4HqK7nrFCTCne6EMZy39JD7wEJ8gPXmQyM","dq":"RDFfV0luLa6pwWxjX4kS2FptHaP5iUPdWpH4TkcNAwgLaRIT_-0yyms9FoG-KagFrKZR8DeFoPnNvN3ItVJr74nOeOPIaXZR8VT2I9kqYbzjk8NWuKDiltZ487aWsUjFBQr5TflgY-62nq7BT9yLhmNYOwB5LtCEQ0W1iO6ZjZE","n":"mbD0LXgcDZijpRk48QiCpFARc3D1co8UYlzhL4WKrxXtPcU3JxLmKsD3lkeDYEEXgK64i046K516M7CM4_nFKInwKZZ1zE356oKbkZk8At2tWIdzf6YQW5SNuzIWEJ6EWsqtYic53DV9WNArqeGHHkTvtiNlO-P9cgmxlwlQIwqXWYWPyXTKiWSRhFowIAQ3tzreSQkwQo63R_XESlzV_pVlRKRAkBe1naM7kGXlLSd_IdZyH46Un1dR9d8uDedfDmluhg-Ipg3qjmqPBGmr2lmi97m4TtAlAFgux129Rgleil8_KWKLULEQiSuAn3oCseJnF-wiGnJyT7I5EfiyRw"}
algorithm 
RS256
2022-11-22 08:20:14 INFO
EncryptIdToken
Skipped evaluation due to missing required element: client id_token_encrypted_response_alg
path 
id_token_encrypted_response_alg
mapped
object 
client
2022-11-22 08:20:14 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
access_token 
Q60wRyHxXkDaw6NwM8CVTDEZDpiiCcGpVCx8YeC4uyfq3KpYGq
token_type 
Bearer
id_token
eyJraWQiOiJlMmY3NDA5NC1hZGFjLTQ3OWQtYWQwNC0zMjBlN2IwMjhjYjYiLCJhbGciOiJSUzI1NiJ9.eyJhdF9oYXNoIjoid0lISENTRElRUmQ2TFVlUWVBWFM5USIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiaFBOSHJ0elpta3RUT1JPUWFtM1Y2anNCIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3RhbF90ZXN0XC8iLCJleHAiOjE2NjkxMDU1MTQsIm5vbmNlIjoiYjUzMDk0Mzg1YzQ5NGEyZTkxM2I5OWIxODFmY2NhMDEiLCJpYXQiOjE2NjkxMDUyMTR9.f4yiyycSIX3_LR-4jpAHGgNCMl2j9ClPlceUOv-ZPxqLa5d3PjvC82CIguVWl13V6K0m0P_a_Ff0hHwkF-noct-OkhriZwlCMQe7mUsBIPooxxmAgRTIU3fX8Ltkz4W6Ug7eCKPw3vb9o9woOvggLm3YWaNp21rZdDpKhhOnq4RpVnp51Je0bovLCWgPGlHBiHQqVPVqp-BK9b17aEidnFUnpL0lROw_SEsUe3FDX3hH__tgMzg0RJ7q-1SSdCQ34QRUcLzpgNXsJePI1azGScz9fx3CV7-B3QxyiTgzyKJYhkAdSOTEbCfZweD9fZt8S2vrb1-Xdft38jprBHMCEA
scope 
openid email profile address phone
2022-11-22 08:20:14 OUTGOING
oidcc-client-test-idtoken-sig-rs256
Response to HTTP request to test instance IGPAOC2XFg3HiHb
outgoing_status_code 
200
outgoing_headers 
{}
outgoing_body 
{
  "access_token": "Q60wRyHxXkDaw6NwM8CVTDEZDpiiCcGpVCx8YeC4uyfq3KpYGq",
  "token_type": "Bearer",
  "id_token": "eyJraWQiOiJlMmY3NDA5NC1hZGFjLTQ3OWQtYWQwNC0zMjBlN2IwMjhjYjYiLCJhbGciOiJSUzI1NiJ9.eyJhdF9oYXNoIjoid0lISENTRElRUmQ2TFVlUWVBWFM5USIsInN1YiI6InVzZXItc3ViamVjdC0xMjM0NTMxIiwiYXVkIjoiaFBOSHJ0elpta3RUT1JPUWFtM1Y2anNCIiwiaXNzIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL3RhbF90ZXN0XC8iLCJleHAiOjE2NjkxMDU1MTQsIm5vbmNlIjoiYjUzMDk0Mzg1YzQ5NGEyZTkxM2I5OWIxODFmY2NhMDEiLCJpYXQiOjE2NjkxMDUyMTR9.f4yiyycSIX3_LR-4jpAHGgNCMl2j9ClPlceUOv-ZPxqLa5d3PjvC82CIguVWl13V6K0m0P_a_Ff0hHwkF-noct-OkhriZwlCMQe7mUsBIPooxxmAgRTIU3fX8Ltkz4W6Ug7eCKPw3vb9o9woOvggLm3YWaNp21rZdDpKhhOnq4RpVnp51Je0bovLCWgPGlHBiHQqVPVqp-BK9b17aEidnFUnpL0lROw_SEsUe3FDX3hH__tgMzg0RJ7q-1SSdCQ34QRUcLzpgNXsJePI1azGScz9fx3CV7-B3QxyiTgzyKJYhkAdSOTEbCfZweD9fZt8S2vrb1-Xdft38jprBHMCEA",
  "scope": "openid email profile address phone"
}
outgoing_path 
token
2022-11-22 08:20:14 INCOMING
oidcc-client-test-idtoken-sig-rs256
Incoming HTTP request to /test/a/tal_test/userinfo
incoming_headers 
{
  "host": "www.certification.openid.net",
  "authorization": "Bearer Q60wRyHxXkDaw6NwM8CVTDEZDpiiCcGpVCx8YeC4uyfq3KpYGq",
  "accept": "application/json, application/json",
  "cookie": "JSESSIONID\u003d9B191115A14BE432CE4273D7653201F7",
  "connection": "close"
}
incoming_path 
/test/a/tal_test/userinfo
incoming_body_form_params
incoming_method 
GET
incoming_tls_version 
TLSv1.2
incoming_tls_cert
incoming_query_string_params 
{}
incoming_body
incoming_tls_chain 
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher 
ECDHE-RSA-AES256-GCM-SHA384
incoming_body_json
Userinfo endpoint
2022-11-22 08:20:14 SUCCESS
OIDCCExtractBearerAccessTokenFromRequest
Found access token on incoming request
access_token 
Q60wRyHxXkDaw6NwM8CVTDEZDpiiCcGpVCx8YeC4uyfq3KpYGq
2022-11-22 08:20:14 SUCCESS
RequireBearerAccessToken
Found access token in request
actual 
Q60wRyHxXkDaw6NwM8CVTDEZDpiiCcGpVCx8YeC4uyfq3KpYGq
2022-11-22 08:20:14 SUCCESS
FilterUserInfoForScopes
User info endpoint output
sub 
user-subject-1234531
email 
user@example.com
email_verified 
false
website 
https://openid.net/
zoneinfo 
America/Los_Angeles
birthdate 
2000-02-03
gender 
female
profile 
https://example.com/user
preferred_username 
d.tu
given_name 
Demo
middle_name 
Theresa
locale 
en-US
updated_at 
1580000000
name 
Demo T. User
nickname 
Dee
family_name 
User
address 
{
  "street_address": "100 Universal City Plaza",
  "locality": "Hollywood",
  "region": "CA",
  "postal_code": "91608",
  "country": "USA"
}
phone_number_verified 
false
phone_number 
+1 555 5550000
2022-11-22 08:20:14
ClearAccessTokenFromRequest
Removed incoming access token from environment
2022-11-22 08:20:14 INFO
AddIssAndAudToUserInfoResponse
Skipped evaluation due to missing required element: client userinfo_signed_response_alg
path 
userinfo_signed_response_alg
mapped
object 
client
2022-11-22 08:20:14 INFO
SignUserInfoResponse
Skipped evaluation due to missing required element: client userinfo_signed_response_alg
path 
userinfo_signed_response_alg
mapped
object 
client
2022-11-22 08:20:14 INFO
EncryptUserInfoResponse
Skipped evaluation due to missing required element: client userinfo_encrypted_response_alg
path 
userinfo_encrypted_response_alg
mapped
object 
client
2022-11-22 08:20:14 OUTGOING
oidcc-client-test-idtoken-sig-rs256
Response to HTTP request to test instance IGPAOC2XFg3HiHb
outgoing_status_code 
200
outgoing_headers 
{}
outgoing_body 
{
  "sub": "user-subject-1234531",
  "email": "user@example.com",
  "email_verified": false,
  "website": "https://openid.net/",
  "zoneinfo": "America/Los_Angeles",
  "birthdate": "2000-02-03",
  "gender": "female",
  "profile": "https://example.com/user",
  "preferred_username": "d.tu",
  "given_name": "Demo",
  "middle_name": "Theresa",
  "locale": "en-US",
  "updated_at": 1580000000,
  "name": "Demo T. User",
  "nickname": "Dee",
  "family_name": "User",
  "address": {
    "street_address": "100 Universal City Plaza",
    "locality": "Hollywood",
    "region": "CA",
    "postal_code": "91608",
    "country": "USA"
  },
  "phone_number_verified": false,
  "phone_number": "+1 555 5550000"
}
outgoing_path 
userinfo
2022-11-22 08:20:14 FINISHED
oidcc-client-test-idtoken-sig-rs256
Test has run to completion
testmodule_result 
PASSED
2022-11-22 08:20:19
TEST-RUNNER
Alias has now been claimed by another test
alias 
tal_test
new_test_id 
llsXtJWcg71FYKN
Test Results