Test Summary

Test Results

Expand All Collapse All
All times are UTC
2022-11-17 08:00:15 INFO
TEST-RUNNER
Test instance 4laCf6QgM8lgXZe created
baseUrl
https://www.certification.openid.net/test/a/ISVAOP
variant
{
  "client_auth_type": "mtls",
  "fapi_auth_request_method": "pushed",
  "fapi_profile": "plain_fapi",
  "fapi_response_mode": "jarm"
}
alias
ISVAOP
description
planId
MSTOCQmfu1DvE
config
{
  "alias": "ISVAOP",
  "automated_ciba_approval_url": "http://119.81.74.189:31811/authenticator/userResponse?action\u003d{action}\u0026token\u003d{auth_req_id}",
  "server": {
    "discoveryUrl": "https://isamfed.com:6443/isvaop/oauth2/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "client_mtls_jarm01",
    "scope": "openid email",
    "jwks": {
      "keys": [
        {
          "p": "5POsvBfNiTqioCBLGaWsOQwTCPkGAECgCeWXqQykp6Cfbfoi1mvbRDAbNPjoLP88bOOt9v528Tpsi8ZuwQRn9XiK8IyyuxIrDaGBvfZCLCK513R8rX3gj-raer-FMaEIpr1bYCTOKBhyhcP46nTwfXNxTwfKFY7O0H8sWcBfF_M",
          "kty": "RSA",
          "q": "oqadQZ4jqFife7hlA2viAEGjJMu8ZRRIx15U19XKw4LbgHYAs3p965WO2lHJqkRUwD1YXZwqOcapUs2samp8JmoZ9j3OavwuRV7qW68_xV3W5xG8lV41RfKLX0c1ny7jJhPWOAbuJzjp3okjqy3hUBZ8Y2B25A2u8fxuhf7U3x0",
          "d": "Z-mgweEYkai9vr_dBYL0LaaHcfVv4D0X638cQIl99VNzZ8h3GqwtLC_zN6kx89S9C8nprfP2NvTegKxs-2bh-FN08k16zolcx6jEkZSgmUOhMLlpmB0qhHWOnYT047y-h9rQ9rZCVxIClJu5Whh8pa_Xlm3BDlbgJBEZSZAwbuWojQ3a-1J6Z8dP6aGqICUxOofz8z2KGxfQnCTmDIyfdCePmBlx7zdFvgq7SI9fDywkfo0ReBmVA4UX9DIbeR2nShZ53Q54rAPzbBLdwD3NzGeGN7Fk53PT3uYVBUq8nNzIwtdaeTRJ7_QxBBy769uG6I2yKIEE3hHldQT0hTs5AQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "ristrettotest",
          "qi": "uzQHF2KOelrHJhOYBmoHkbiQqczkA3AQXOwAQME3P32dFJgOOB6QdCfrg1C2JTobx8Q3EVoko1j96QE2XCrWEBs9oW-4gg4CPGaU7BmVFt0lB88-ZD6E2N0byg2mekYtdGR3ifispEZHdIBP7TxW82in3fn-nB08YMqQAqqIGes",
          "dp": "UcoLBxapwkBEIFfo_DyHDcoWcrojPqvXgDGYwDdYCtoCmlMlZtwY9H8K-R2CM7DqcSvU1cuJyhtI85XrsuBUEwkA-XYJ03JmFvR_WNFESmgNY76lW4UAV-laK0eH2XbhlE9I-Uusqf4xyz97CKbF0ssOy2DI_HKLx0fnHBjw36k",
          "alg": "PS256",
          "dq": "KSaoYMKm2N_bMc0cWXpBCrmQki2ts5EnPLHEG3tuunpwGJdCZCZYl3MWWmwY7qgtHRooMj7hfA6kJlv9BEt-r6VmfiNzByRYfJqgBqRXKRMt3PZi1ROpvNG5q1hz25tcQvT_3Nr8BBZlLTVbPeL0v3OA8w-j5N0FZxnryKEJsI0",
          "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
        }
      ]
    },
    "hint_type": "login_hint",
    "hint_value": "testuser"
  },
  "client2": {
    "client_id": "client_mtls_jarm02",
    "scope": "openid",
    "jwks": {
      "keys": [
        {
          "p": "_a4hJlGIgqTgO5MjxTa4j4-rnui8ofinPAs2lh5D3YQEQfpVPrEYlv8eo_sPpwkeU1M-PXVT2U59Os56IiKzDhqdQgaIRbq6Si8fhPxPrI4ei-wXuihqF1QDbbAuXf7ZV8_Yx1XCPKadrRNa8TKZWO4vDR30EdDsjL2uhyxdcI8",
          "kty": "RSA",
          "q": "x4GpCUG5Kwo6xv6Wl5UWUuV817mccDDnWVSLqK7Msb58BSfcK7kLrdzSFxBuo_DoK4RYu5K34HbAIzoZuC4cRJXR5QDf6BKxuyyF0qMNrHWpoXSpQOXHR6UowPaNHKfa4pXhcRCj4yo47VkipXEm2tD9bdTB0ydVZTJXrRKw9IE",
          "d": "moWnAjS47_t0jdjYHaubEY3f0MI5lVKwZblDqbkKoYUVfguFTI55opUg6EUGJDX74SM1acfPRpe6P7V9Iet_PoGpunQ4TdD3H4yCetqLBniZPNDn8oeVKkhhj97v-GyLyAWumaEDntO0O566TGUL-a0GwrcfT63Z_A4e0-NCTNyrn-hyy5Ljlw17r9MehxwXhi6wZdZJnu7iPT2UJGYeO9R-qedE_UiBzPYsXCjXV6FrY4awDGvWAr4R24hkI9naj6hIcmJhL-34xh6_hWomFtCHtKkNRSVHjMcIP5HOeK4yUqlRssvr61xzDwxrtv32Tj5JCDFUCc-NM8YVYy3oAQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "conformancetest",
          "qi": "ZIgXA-QKu5WscOoA4paq3INWIFNf34tPa1I2MTe30_fLShaDwwF3F_CzUscVd1k7Mbn_VpuKfK2C5Vqupoyj7uyk1gm-iuWtJYcxTkE61udn5vRq4lnjNzxtQCjHm48ZRnVmpFCMrSbcb2oJMzWFH1aM2vyCwuMcrSckR7YVVUI",
          "dp": "HSWmtWpkzu32vaGYWI6DAiu1wlpnYgzZ2jJHoVP05DzI6HPE26EpfB_v-1NbZwvLKjPEUPdsHOnBxcH3knh-Lj6slut9ONXNlbx4WKVM2jyyEc2cpE0Ec425nx7BFRe1DTvaYnzeBm32a-5vYos3x1oGmfE5G9rvcvRQW0OjsM0",
          "alg": "PS256",
          "dq": "XyYfkCKgRT6jubRB7hlUhESevePwEDHCpIAF-3UiesL2Mx9HijK-tzTRnd5gZh_HGroL96mJuKvqBuL20ThskulBKY65Ot1vlm0thb_uDYowVKhm8GSmHi1Ounjb5AbKBbalxl7BSt4gOFKCi5TjiwiRVYhayHHB8HmKByka7AE",
          "n": "xbLYBJ3SXWsNcLG03ieLj3UcqOQa0z4KHgjDSIytAv9GgKotTJU9skUvXWLJJuHlAh1MjI9rBZenMuUTqvaHvxMxMpDn5sc2GOLxmoM_dJBAPKmLWhNPNlKAJCVDAWHGcydBNLu8_ZkGCKaXbLStWjPl2djokKNU7gJLGEdv_PaT8-DUKH65xJ7sAaEqgsaFjXUuK7eLQG3Dxd64CLpfiCl9szHZldQkV3t44zfdB9KdaZyWiHwqRUe0mdc4Nn3-QZ7PhfY1z2q0fxEetcMyjr_5RLDWgOltneNmxyrbaxNHUMuiSnroemaRXZMxLyx_c8rDL8YRZ5VXToQw2q4EDw"
        }
      ]
    },
    "acr_value": "urn:acr2"
  },
  "resource": {
    "resourceUrl": "https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/accounts"
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\nflhKfJxQl0EQTjXaXR4kRw+zB4OzNIjv3FD2F4kq7qsxzyFb14z8bkp/gA\u003d\u003d\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN RSA PRIVATE KEY-----\nMIIEpAIBAAKCAQEAp2CIojMF5NdBrY48wKHtvzUHUPlMcHSYgJM4wv67sDXVSCQO\nZd07spVW6VG4OdDLvCK+fhdX+EH5+jUkCfCxn1vCiyK/T6ArZJzdcsjFTtEbqAH+\njbITYLa1Og38EI0ARvWyPbU4jRd53PKliCRYoZXoKHnEL2fz6voUlIgyBh+0Et++\nA3RLWPDUnFslJpwwDZl4NkttpTrAgbxMt07vyZuO9nmsiC/Ax9u9lFNrtUtX87Nj\nd957IoLE+hOgEKpNp0cwrw/P8y0/Vk8HtdzHWf6mqmw4gxnmk9s2MIUxoYRJewqg\nDU4/f7ukY2Kl++ptLUDRUfCuTckS7r+aLIipxQIDAQABAoIBAEOmr/MnPlWdb41v\ntTyC9q5XB6sB6JR3fABUARhHj6MMTzWGZU9k2TE4TVWm0xiDPSXAwVADrWnJePlZ\nq0RdRd3MX9iO5daQPZnAEX3Iin9t44jHrZSmClEH6D4b0ur5osgLnMx2R/I3L+lP\nJfrd/fjpt1lMxjAHCz7Jb7INTnLMjBl8Lji9witoeQseo2+SRLanNckCw9t2/Wkq\nlpyTUnVg6icB9QLAh0ASE/zlMdFMYlo1llfxToRpZKQuE0zTXtvMqfkutqSUb8hL\nSBTYuMHOh8aycMB//JgiAMwrHVSVcRn2oMqnk5vm08i/sLK8TT8AGAf8Evn0GJJ8\n8kKHvqECgYEA2Xnd/4+98ZiEnLbkgRPVX7pWVa2ZqCAZ4Cf75cv+IlQ3crJniX0I\nEOpFS71fF8/Ei7DIAELe9zeopQvkUdfzMlC7Rg5AuhJzRIL+FaUFlLJOMz+S7eqi\nLeabclYGIbZrX+n8Xic01oQxRipgV1XMKj+D3MROUoRCWNMS1Xqghe0CgYEAxQbF\nsTjipyvk6ZvrpucqAZ1IVIGiVELGMlUEGmyJ8CgXd3gwmU88RahmwBes0GNzm5hw\ns9J+C/S/zt6gu1pP1g/lEpx4/yxg6MZk8AQEk3VG63Tg2rEzjEIQsz0fTXbO1AVS\nJvEuReB8VCgQEKNYMxrqdHXvpSFHOhQLbvebODkCgYEAgK7e0IjCkQF5fq2t+j69\nJD7DNUFayaPtC7k9EVWqk6+Xe7PbFfy42CF3TYDJkvJqz2mUfqsS+d+iV774pAEP\nM3eXyLVIUZH3SNPl+vLBoaH8KdD1ZPhQbK6mznneePZTBNcUcLXsSv6/lVAf362x\n+FHK+cfivGrsQ1jqLQ25jGUCgYBVrLY2dDgK3YlzE/wK3aZkgVI8fQprfYXVySY5\nn0z0A1sA9mCbqdrZp3rWuPTKwRQ6arVHXJa2+DyX5jMahREGUm8YAraSr2eMkQi/\nXd/nhy3JoU9NiZSSvv+oEUIVWz5g79djW6j1dcJajfk+Yuktf9zHu6jzs17XoHPA\nUydJ8QKBgQCreujKz7G5EEXkwdEqFFolM9A8ZMB2k3t6FaM4P/lEUs+nFkxYz2+r\nxI4HMCE0UOCw58ukQjNmXJhumAAB0HIC28gFVuk8FXPRI46ZRQ4uuqQcSCr3/0yP\nSrJe3uU+IC74iHff9XHmwiHwcpmgsDclyg4Ga5eCf1XNKmZLtu/4Xg\u003d\u003d\n-----END RSA PRIVATE KEY-----\n",
    "ca": "-----BEGIN CERTIFICATE-----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\nflhKfJxQl0EQTjXaXR4kRw+zB4OzNIjv3FD2F4kq7qsxzyFb14z8bkp/gA\u003d\u003d\n-----END CERTIFICATE-----\n"
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\np5ycJYgdT+YqD34Rd89u/yjgvlo3Bcv0mhEO1sS4jaG3IRkZZsCoUEFSvQ\u003d\u003d\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN RSA PRIVATE KEY-----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\n7/QZejw68iLHZWQMH57daNZL9X/8VwmF/C8tawAvXmflv+ra3Ec\u003d\n-----END RSA PRIVATE KEY-----\n",
    "ca": "-----BEGIN CERTIFICATE-----\nMIIDtzCCAp+gAwIBAgIUWzVEE6ZzNUl6kwxJgrUgERqiDXkwDQYJKoZIhvcNAQEL\nBQAwazELMAkGA1UEBhMCU0cxEjAQBgNVBAgMCXNpbmdhcG9yZTESMBAGA1UEBwwJ\nc2luZ2Fwb3JlMQwwCgYDVQQKDANJQk0xETAPBgNVBAsMCHNlY3VyaXR5MRMwEQYD\nVQQDDApjbGllbnRJRDAyMB4XDTIyMDEwNDA0MzQxNloXDTQxMDkyMTA0MzQxNlow\nazELMAkGA1UEBhMCU0cxEjAQBgNVBAgMCXNpbmdhcG9yZTESMBAGA1UEBwwJc2lu\nZ2Fwb3JlMQwwCgYDVQQKDANJQk0xETAPBgNVBAsMCHNlY3VyaXR5MRMwEQYDVQQD\nDApjbGllbnRJRDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFSV\n37045EHSIKgQ+yofftUN/Ym1kv17rx1G92uepLHgw1Ar+Qvoq2w6La1k9tGZuMMY\nC8RmlqT+7S6Z5LP4AjKByW+1vX6zJPN6xmEnDFDd420MIqC56cqs3JyfJEybhVRd\nLCgGvz3uZ7dewKm+oiLECOGAST0jzMc5szzxtvkN5jyURUAaYhLqjlsqpS2XM79A\nsJIRQy/XsYux1wf42CFvS1Ves3N/aTbO5N6VA5h4KA1k+7/F1HlP+J1rB2dk7zsS\nnwvsGLvV1r5Eb5XP8DphKZ+xtJmANNo3NiNONxuV0T7HOXzrqgp2VDt9tXuJOClr\nEJEJJnAUJ7cYXtn8uQIDAQABo1MwUTAdBgNVHQ4EFgQUAZeJHIZu9VunYouyoHf/\nQODzbREwHwYDVR0jBBgwFoAUAZeJHIZu9VunYouyoHf/QODzbREwDwYDVR0TAQH/\nBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAft9Mp/WpGdRF1sCzVG2r7SHxaxTG\nfWC+iZJBVZfFTJcthDawCW3xIfQb0RUrtGWTKBgpCp8GSCxFYPuri/nZn2vRbujn\n3woK2siXWS64bYDUOJ3xHvt3/j0PPGRfQ3faSXjdvtkE7ayLRKdb132rBd2k7oBq\nIZkM3ezvXg49KupJfOYTaqNezA4TTXaLFL+7BbY8IFPYHE+t66K68DNbypr3Q8pP\n2ZCHE3YLS3RG+Ql2EYSGABKNbeRcipONYPvtsiZt4k44vCDRUC5DXdC6C9KeEjrL\np5ycJYgdT+YqD34Rd89u/yjgvlo3Bcv0mhEO1sS4jaG3IRkZZsCoUEFSvQ\u003d\u003d\n-----END CERTIFICATE-----\n"
  },
  "consent": {}
}
testName
fapi1-advanced-final-ensure-expired-request-object-fails
2022-11-17 08:00:15 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
2022-11-17 08:00:15
GetDynamicServerConfiguration
HTTP request
request_uri
https://isamfed.com:6443/isvaop/oauth2/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-11-17 08:00:16 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-type": "application/json",
  "date": "Thu, 17 Nov 2022 08:00:16 GMT",
  "p3p": "CP\u003d\"NON CUR OTPi OUR NOR UNI\"",
  "transfer-encoding": "chunked",
  "x-correlation-id": "CORR_ID-ff9e22c9-4f08-4875-a86a-79e347b4f648",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains"
}
response_body
{"authorization_encryption_alg_values_supported":["none","RSA-OAEP"],"authorization_encryption_enc_values_supported":["none","A256GCM"],"authorization_endpoint":"https://isamfed.com:6443/isvaop/oauth2/authorize","authorization_signing_alg_values_supported":["PS256"],"backchannel_authentication_endpoint":"https://isamfed.com:6443/isvaop/oauth2/ciba","backchannel_authentication_request_signing_alg_values_supported":["RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES384","ES512"],"backchannel_token_delivery_modes_supported":["poll","ping"],"backchannel_user_code_parameter_supported":false,"claim_types_supported":["normal"],"claims_parameter_supported":true,"claims_supported":["acr","openbanking_intent_id","sharing_duration"],"dpop_signing_alg_values_supported":["RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES384","ES512"],"grant_types_supported":["authorization_code","implicit","password","client_credentials","refresh_token","urn:openid:params:grant-type:ciba"],"id_token_encryption_alg_values_supported":["none","RSA-OAEP"],"id_token_encryption_enc_values_supported":["none","A256GCM"],"id_token_signing_alg_values_supported":["PS256"],"introspection_endpoint":"https://isamfed.com:6443/isvaop/oauth2/introspect","issuer":"https://isamfed.com:6443/isvaop/oauth2","jwks_uri":"https://isamfed.com:6443/isvaop/oauth2/jwks","mtls_endpoint_aliases":{"backchannel_authentication_endpoint":"https://isamfed.com:6443/isvaop/oauth2/ciba","introspection_endpoint":"https://isamfed.com:6443/isvaop/oauth2/introspect","pushed_authorization_request_endpoint":"https://isamfed.com:6443/isvaop/oauth2/par","registration_endpoint":"https://isamfed.com:6443/isvaop/oauth2/register","revocation_endpoint":"https://isamfed.com:6443/isvaop/oauth2/revoke","token_endpoint":"https://isamfed.com:6443/isvaop/oauth2/token"},"pushed_authorization_request_endpoint":"https://isamfed.com:6443/isvaop/oauth2/par","registration_endpoint":"https://isamfed.com:6443/isvaop/oauth2/register","request_object_encryption_alg_values_supported":["none","RSA-OAEP","RSA-OAEP-256"],"request_object_encryption_enc_values_supported":["none","A128GCM","A192GCM","A256GCM"],"request_object_signing_alg_values_supported":["RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES384","ES512"],"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_pushed_authorization_requests":true,"require_request_uri_registration":false,"response_modes_supported":["query","fragment","form_post","jwt","query.jwt","fragment.jwt","form_post.jwt"],"response_types_supported":["none","code","token","id_token","code token","code id_token","token id_token","code token id_token"],"revocation_endpoint":"https://isamfed.com:6443/isvaop/oauth2/revoke","scopes_supported":["openid","accounts"],"subject_types_supported":["public"],"tls_client_certificate_bound_access_tokens":true,"token_endpoint":"https://isamfed.com:6443/isvaop/oauth2/token","token_endpoint_auth_methods_supported":["client_secret_basic","client_secret_post","private_key_jwt","tls_client_auth"],"token_endpoint_auth_signing_alg_values_supported":["RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES384","ES512"],"userinfo_encryption_alg_values_supported":["none","RSA-OAEP"],"userinfo_encryption_enc_values_supported":["none","A256GCM"],"userinfo_endpoint":"https://isamfed.com:6443/isvaop/oauth2/userinfo","userinfo_signing_alg_values_supported":["PS256"]}
2022-11-17 08:00:16 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
authorization_encryption_alg_values_supported
[
  "none",
  "RSA-OAEP"
]
authorization_encryption_enc_values_supported
[
  "none",
  "A256GCM"
]
authorization_endpoint
https://isamfed.com:6443/isvaop/oauth2/authorize
authorization_signing_alg_values_supported
[
  "PS256"
]
backchannel_authentication_endpoint
https://isamfed.com:6443/isvaop/oauth2/ciba
backchannel_authentication_request_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "PS256",
  "PS384",
  "PS512",
  "ES256",
  "ES384",
  "ES512"
]
backchannel_token_delivery_modes_supported
[
  "poll",
  "ping"
]
backchannel_user_code_parameter_supported
false
claim_types_supported
[
  "normal"
]
claims_parameter_supported
true
claims_supported
[
  "acr",
  "openbanking_intent_id",
  "sharing_duration"
]
dpop_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "PS256",
  "PS384",
  "PS512",
  "ES256",
  "ES384",
  "ES512"
]
grant_types_supported
[
  "authorization_code",
  "implicit",
  "password",
  "client_credentials",
  "refresh_token",
  "urn:openid:params:grant-type:ciba"
]
id_token_encryption_alg_values_supported
[
  "none",
  "RSA-OAEP"
]
id_token_encryption_enc_values_supported
[
  "none",
  "A256GCM"
]
id_token_signing_alg_values_supported
[
  "PS256"
]
introspection_endpoint
https://isamfed.com:6443/isvaop/oauth2/introspect
issuer
https://isamfed.com:6443/isvaop/oauth2
jwks_uri
https://isamfed.com:6443/isvaop/oauth2/jwks
mtls_endpoint_aliases
{
  "backchannel_authentication_endpoint": "https://isamfed.com:6443/isvaop/oauth2/ciba",
  "introspection_endpoint": "https://isamfed.com:6443/isvaop/oauth2/introspect",
  "pushed_authorization_request_endpoint": "https://isamfed.com:6443/isvaop/oauth2/par",
  "registration_endpoint": "https://isamfed.com:6443/isvaop/oauth2/register",
  "revocation_endpoint": "https://isamfed.com:6443/isvaop/oauth2/revoke",
  "token_endpoint": "https://isamfed.com:6443/isvaop/oauth2/token"
}
pushed_authorization_request_endpoint
https://isamfed.com:6443/isvaop/oauth2/par
registration_endpoint
https://isamfed.com:6443/isvaop/oauth2/register
request_object_encryption_alg_values_supported
[
  "none",
  "RSA-OAEP",
  "RSA-OAEP-256"
]
request_object_encryption_enc_values_supported
[
  "none",
  "A128GCM",
  "A192GCM",
  "A256GCM"
]
request_object_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "PS256",
  "PS384",
  "PS512",
  "ES256",
  "ES384",
  "ES512"
]
request_parameter_supported
true
request_uri_parameter_supported
false
require_pushed_authorization_requests
true
require_request_uri_registration
false
response_modes_supported
[
  "query",
  "fragment",
  "form_post",
  "jwt",
  "query.jwt",
  "fragment.jwt",
  "form_post.jwt"
]
response_types_supported
[
  "none",
  "code",
  "token",
  "id_token",
  "code token",
  "code id_token",
  "token id_token",
  "code token id_token"
]
revocation_endpoint
https://isamfed.com:6443/isvaop/oauth2/revoke
scopes_supported
[
  "openid",
  "accounts"
]
subject_types_supported
[
  "public"
]
tls_client_certificate_bound_access_tokens
true
token_endpoint
https://isamfed.com:6443/isvaop/oauth2/token
token_endpoint_auth_methods_supported
[
  "client_secret_basic",
  "client_secret_post",
  "private_key_jwt",
  "tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "RS256",
  "RS384",
  "RS512",
  "PS256",
  "PS384",
  "PS512",
  "ES256",
  "ES384",
  "ES512"
]
userinfo_encryption_alg_values_supported
[
  "none",
  "RSA-OAEP"
]
userinfo_encryption_enc_values_supported
[
  "none",
  "A256GCM"
]
userinfo_endpoint
https://isamfed.com:6443/isvaop/oauth2/userinfo
userinfo_signing_alg_values_supported
[
  "PS256"
]
2022-11-17 08:00:16 SUCCESS
AddMTLSEndpointAliasesToEnvironment
Added mtls_endpoint_aliases to environment
2022-11-17 08:00:16 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2022-11-17 08:00:16
FetchServerKeys
Fetching server key
jwks_uri
https://isamfed.com:6443/isvaop/oauth2/jwks
2022-11-17 08:00:16
FetchServerKeys
HTTP request
request_uri
https://isamfed.com:6443/isvaop/oauth2/jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2022-11-17 08:00:17 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-length": "827",
  "content-type": "application/json",
  "date": "Thu, 17 Nov 2022 08:00:17 GMT",
  "p3p": "CP\u003d\"NON CUR OTPi OUR NOR UNI\"",
  "x-correlation-id": "CORR_ID-73c7d2f9-be66-49e0-bd53-3ef4492fce10",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains"
}
response_body
{"keys":[{"use":"sig","kty":"RSA","kid":"httpserverkey","n":"3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ","e":"AQAB"},{"use":"enc","kty":"RSA","kid":"httpserverkey","n":"3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ","e":"AQAB"}]}
2022-11-17 08:00:17
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"use":"sig","kty":"RSA","kid":"httpserverkey","n":"3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ","e":"AQAB"},{"use":"enc","kty":"RSA","kid":"httpserverkey","n":"3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ","e":"AQAB"}]}
2022-11-17 08:00:17 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "use": "sig",
      "kty": "RSA",
      "kid": "httpserverkey",
      "n": "3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ",
      "e": "AQAB"
    },
    {
      "use": "enc",
      "kty": "RSA",
      "kid": "httpserverkey",
      "n": "3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ",
      "e": "AQAB"
    }
  ]
}
2022-11-17 08:00:17 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "use": "sig",
      "kty": "RSA",
      "kid": "httpserverkey",
      "n": "3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ",
      "e": "AQAB"
    },
    {
      "use": "enc",
      "kty": "RSA",
      "kid": "httpserverkey",
      "n": "3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ",
      "e": "AQAB"
    }
  ]
}
2022-11-17 08:00:17 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2022-11-17 08:00:17 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2022-11-17 08:00:17 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2022-11-17 08:00:17 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "use": "sig",
      "kty": "RSA",
      "kid": "httpserverkey",
      "n": "3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ",
      "e": "AQAB"
    },
    {
      "use": "enc",
      "kty": "RSA",
      "kid": "httpserverkey",
      "n": "3H8uKbaU0gNgxIzNOI8z19pzicShxM4nd_cs4DqmQU9SCxtjfzyVHpxe-Arg8gr01YoEkIOrz2JJ1G12fNDu7Fepgyy_ZCfqqqstPCj7vmQFC7_XHrDi_xooPT2kfrzHgxUANMe1Kd0Ry2gVexQCrJyDHnLvuYGyA_wQwN3GTHhwB2SfECwnTL87-HICyviTfEqlIU3ymu3u3YeTB5J765i9uT2JtZco9VMtoiR4Hm_e5xSnQmNx3StTiUQrsMo28IxLFgNKAq-aUDvaZ0ulgOp9V-DOlGpBnxSd0G2I58otDC7J7oQ5xhkX6FB1RnMBHgiFSZ492fyJgILkxoUCwQ",
      "e": "AQAB"
    }
  ]
}
2022-11-17 08:00:17 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
client_mtls_jarm01
scope
openid email
jwks
{
  "keys": [
    {
      "p": "5POsvBfNiTqioCBLGaWsOQwTCPkGAECgCeWXqQykp6Cfbfoi1mvbRDAbNPjoLP88bOOt9v528Tpsi8ZuwQRn9XiK8IyyuxIrDaGBvfZCLCK513R8rX3gj-raer-FMaEIpr1bYCTOKBhyhcP46nTwfXNxTwfKFY7O0H8sWcBfF_M",
      "kty": "RSA",
      "q": "oqadQZ4jqFife7hlA2viAEGjJMu8ZRRIx15U19XKw4LbgHYAs3p965WO2lHJqkRUwD1YXZwqOcapUs2samp8JmoZ9j3OavwuRV7qW68_xV3W5xG8lV41RfKLX0c1ny7jJhPWOAbuJzjp3okjqy3hUBZ8Y2B25A2u8fxuhf7U3x0",
      "d": "Z-mgweEYkai9vr_dBYL0LaaHcfVv4D0X638cQIl99VNzZ8h3GqwtLC_zN6kx89S9C8nprfP2NvTegKxs-2bh-FN08k16zolcx6jEkZSgmUOhMLlpmB0qhHWOnYT047y-h9rQ9rZCVxIClJu5Whh8pa_Xlm3BDlbgJBEZSZAwbuWojQ3a-1J6Z8dP6aGqICUxOofz8z2KGxfQnCTmDIyfdCePmBlx7zdFvgq7SI9fDywkfo0ReBmVA4UX9DIbeR2nShZ53Q54rAPzbBLdwD3NzGeGN7Fk53PT3uYVBUq8nNzIwtdaeTRJ7_QxBBy769uG6I2yKIEE3hHldQT0hTs5AQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "ristrettotest",
      "qi": "uzQHF2KOelrHJhOYBmoHkbiQqczkA3AQXOwAQME3P32dFJgOOB6QdCfrg1C2JTobx8Q3EVoko1j96QE2XCrWEBs9oW-4gg4CPGaU7BmVFt0lB88-ZD6E2N0byg2mekYtdGR3ifispEZHdIBP7TxW82in3fn-nB08YMqQAqqIGes",
      "dp": "UcoLBxapwkBEIFfo_DyHDcoWcrojPqvXgDGYwDdYCtoCmlMlZtwY9H8K-R2CM7DqcSvU1cuJyhtI85XrsuBUEwkA-XYJ03JmFvR_WNFESmgNY76lW4UAV-laK0eH2XbhlE9I-Uusqf4xyz97CKbF0ssOy2DI_HKLx0fnHBjw36k",
      "alg": "PS256",
      "dq": "KSaoYMKm2N_bMc0cWXpBCrmQki2ts5EnPLHEG3tuunpwGJdCZCZYl3MWWmwY7qgtHRooMj7hfA6kJlv9BEt-r6VmfiNzByRYfJqgBqRXKRMt3PZi1ROpvNG5q1hz25tcQvT_3Nr8BBZlLTVbPeL0v3OA8w-j5N0FZxnryKEJsI0",
      "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
    }
  ]
}
hint_type
login_hint
hint_value
testuser
2022-11-17 08:00:17 SUCCESS
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
2022-11-17 08:00:17 SUCCESS
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
cert
MIIDtzCCAp+gAwIBAgIUecoZmREQNgLwFH/TMEWLTwb1CB8wDQYJKoZIhvcNAQELBQAwazELMAkGA1UEBhMCU0cxEjAQBgNVBAgMCXNpbmdhcG9yZTESMBAGA1UEBwwJc2luZ2Fwb3JlMQwwCgYDVQQKDANJQk0xETAPBgNVBAsMCHNlY3VyaXR5MRMwEQYDVQQDDApjbGllbnRJRDAxMB4XDTIyMDEwNDA0MzE1M1oXDTQxMDkyMTA0MzE1M1owazELMAkGA1UEBhMCU0cxEjAQBgNVBAgMCXNpbmdhcG9yZTESMBAGA1UEBwwJc2luZ2Fwb3JlMQwwCgYDVQQKDANJQk0xETAPBgNVBAsMCHNlY3VyaXR5MRMwEQYDVQQDDApjbGllbnRJRDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2CIojMF5NdBrY48wKHtvzUHUPlMcHSYgJM4wv67sDXVSCQOZd07spVW6VG4OdDLvCK+fhdX+EH5+jUkCfCxn1vCiyK/T6ArZJzdcsjFTtEbqAH+jbITYLa1Og38EI0ARvWyPbU4jRd53PKliCRYoZXoKHnEL2fz6voUlIgyBh+0Et++A3RLWPDUnFslJpwwDZl4NkttpTrAgbxMt07vyZuO9nmsiC/Ax9u9lFNrtUtX87Njd957IoLE+hOgEKpNp0cwrw/P8y0/Vk8HtdzHWf6mqmw4gxnmk9s2MIUxoYRJewqgDU4/f7ukY2Kl++ptLUDRUfCuTckS7r+aLIipxQIDAQABo1MwUTAdBgNVHQ4EFgQU/UtMjt5v2kVdyNfPDjijZi42WIQwHwYDVR0jBBgwFoAU/UtMjt5v2kVdyNfPDjijZi42WIQwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAWex3c0yfWkszPtF6B4cPUwwTMiwQ2GyQxxeV9iOuXoMQ6Nf7IBi3KijaWb17E690/Es4cS0P6WWyWa0pd9e/OWq/7HtA86TTiHUp8lkYM0Bc6317SjOYR3E0oIx53pHXtM/afK+ROzAux9xzztKjGyE13cNJYErSggLeMhW0kwUwRU3Wsl4DYwfqbuT62vvbya/Zf6u/lGvMGHoFozRTqPXtboFKoPLmQXzo92tw1UxRyPmeFiZfIjzee7gOShseCuD2dS59Ie+aD/ymI1FdElDB29J4flhKfJxQl0EQTjXaXR4kRw+zB4OzNIjv3FD2F4kq7qsxzyFb14z8bkp/gA==
key
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
ca
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
2022-11-17 08:00:17 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2022-11-17 08:00:17 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "p": "5POsvBfNiTqioCBLGaWsOQwTCPkGAECgCeWXqQykp6Cfbfoi1mvbRDAbNPjoLP88bOOt9v528Tpsi8ZuwQRn9XiK8IyyuxIrDaGBvfZCLCK513R8rX3gj-raer-FMaEIpr1bYCTOKBhyhcP46nTwfXNxTwfKFY7O0H8sWcBfF_M",
      "kty": "RSA",
      "q": "oqadQZ4jqFife7hlA2viAEGjJMu8ZRRIx15U19XKw4LbgHYAs3p965WO2lHJqkRUwD1YXZwqOcapUs2samp8JmoZ9j3OavwuRV7qW68_xV3W5xG8lV41RfKLX0c1ny7jJhPWOAbuJzjp3okjqy3hUBZ8Y2B25A2u8fxuhf7U3x0",
      "d": "Z-mgweEYkai9vr_dBYL0LaaHcfVv4D0X638cQIl99VNzZ8h3GqwtLC_zN6kx89S9C8nprfP2NvTegKxs-2bh-FN08k16zolcx6jEkZSgmUOhMLlpmB0qhHWOnYT047y-h9rQ9rZCVxIClJu5Whh8pa_Xlm3BDlbgJBEZSZAwbuWojQ3a-1J6Z8dP6aGqICUxOofz8z2KGxfQnCTmDIyfdCePmBlx7zdFvgq7SI9fDywkfo0ReBmVA4UX9DIbeR2nShZ53Q54rAPzbBLdwD3NzGeGN7Fk53PT3uYVBUq8nNzIwtdaeTRJ7_QxBBy769uG6I2yKIEE3hHldQT0hTs5AQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "ristrettotest",
      "qi": "uzQHF2KOelrHJhOYBmoHkbiQqczkA3AQXOwAQME3P32dFJgOOB6QdCfrg1C2JTobx8Q3EVoko1j96QE2XCrWEBs9oW-4gg4CPGaU7BmVFt0lB88-ZD6E2N0byg2mekYtdGR3ifispEZHdIBP7TxW82in3fn-nB08YMqQAqqIGes",
      "dp": "UcoLBxapwkBEIFfo_DyHDcoWcrojPqvXgDGYwDdYCtoCmlMlZtwY9H8K-R2CM7DqcSvU1cuJyhtI85XrsuBUEwkA-XYJ03JmFvR_WNFESmgNY76lW4UAV-laK0eH2XbhlE9I-Uusqf4xyz97CKbF0ssOy2DI_HKLx0fnHBjw36k",
      "alg": "PS256",
      "dq": "KSaoYMKm2N_bMc0cWXpBCrmQki2ts5EnPLHEG3tuunpwGJdCZCZYl3MWWmwY7qgtHRooMj7hfA6kJlv9BEt-r6VmfiNzByRYfJqgBqRXKRMt3PZi1ROpvNG5q1hz25tcQvT_3Nr8BBZlLTVbPeL0v3OA8w-j5N0FZxnryKEJsI0",
      "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "ristrettotest",
      "alg": "PS256",
      "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
    }
  ]
}
2022-11-17 08:00:17 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2022-11-17 08:00:17 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-11-17 08:00:17 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "PS256",
  "ES256"
]
2022-11-17 08:00:17 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "5POsvBfNiTqioCBLGaWsOQwTCPkGAECgCeWXqQykp6Cfbfoi1mvbRDAbNPjoLP88bOOt9v528Tpsi8ZuwQRn9XiK8IyyuxIrDaGBvfZCLCK513R8rX3gj-raer-FMaEIpr1bYCTOKBhyhcP46nTwfXNxTwfKFY7O0H8sWcBfF_M",
      "kty": "RSA",
      "q": "oqadQZ4jqFife7hlA2viAEGjJMu8ZRRIx15U19XKw4LbgHYAs3p965WO2lHJqkRUwD1YXZwqOcapUs2samp8JmoZ9j3OavwuRV7qW68_xV3W5xG8lV41RfKLX0c1ny7jJhPWOAbuJzjp3okjqy3hUBZ8Y2B25A2u8fxuhf7U3x0",
      "d": "Z-mgweEYkai9vr_dBYL0LaaHcfVv4D0X638cQIl99VNzZ8h3GqwtLC_zN6kx89S9C8nprfP2NvTegKxs-2bh-FN08k16zolcx6jEkZSgmUOhMLlpmB0qhHWOnYT047y-h9rQ9rZCVxIClJu5Whh8pa_Xlm3BDlbgJBEZSZAwbuWojQ3a-1J6Z8dP6aGqICUxOofz8z2KGxfQnCTmDIyfdCePmBlx7zdFvgq7SI9fDywkfo0ReBmVA4UX9DIbeR2nShZ53Q54rAPzbBLdwD3NzGeGN7Fk53PT3uYVBUq8nNzIwtdaeTRJ7_QxBBy769uG6I2yKIEE3hHldQT0hTs5AQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "ristrettotest",
      "qi": "uzQHF2KOelrHJhOYBmoHkbiQqczkA3AQXOwAQME3P32dFJgOOB6QdCfrg1C2JTobx8Q3EVoko1j96QE2XCrWEBs9oW-4gg4CPGaU7BmVFt0lB88-ZD6E2N0byg2mekYtdGR3ifispEZHdIBP7TxW82in3fn-nB08YMqQAqqIGes",
      "dp": "UcoLBxapwkBEIFfo_DyHDcoWcrojPqvXgDGYwDdYCtoCmlMlZtwY9H8K-R2CM7DqcSvU1cuJyhtI85XrsuBUEwkA-XYJ03JmFvR_WNFESmgNY76lW4UAV-laK0eH2XbhlE9I-Uusqf4xyz97CKbF0ssOy2DI_HKLx0fnHBjw36k",
      "alg": "PS256",
      "dq": "KSaoYMKm2N_bMc0cWXpBCrmQki2ts5EnPLHEG3tuunpwGJdCZCZYl3MWWmwY7qgtHRooMj7hfA6kJlv9BEt-r6VmfiNzByRYfJqgBqRXKRMt3PZi1ROpvNG5q1hz25tcQvT_3Nr8BBZlLTVbPeL0v3OA8w-j5N0FZxnryKEJsI0",
      "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
    }
  ]
}
2022-11-17 08:00:17 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
Verify configuration of second client
2022-11-17 08:00:17 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
client_mtls_jarm02
scope
openid
jwks
{
  "keys": [
    {
      "p": "_a4hJlGIgqTgO5MjxTa4j4-rnui8ofinPAs2lh5D3YQEQfpVPrEYlv8eo_sPpwkeU1M-PXVT2U59Os56IiKzDhqdQgaIRbq6Si8fhPxPrI4ei-wXuihqF1QDbbAuXf7ZV8_Yx1XCPKadrRNa8TKZWO4vDR30EdDsjL2uhyxdcI8",
      "kty": "RSA",
      "q": "x4GpCUG5Kwo6xv6Wl5UWUuV817mccDDnWVSLqK7Msb58BSfcK7kLrdzSFxBuo_DoK4RYu5K34HbAIzoZuC4cRJXR5QDf6BKxuyyF0qMNrHWpoXSpQOXHR6UowPaNHKfa4pXhcRCj4yo47VkipXEm2tD9bdTB0ydVZTJXrRKw9IE",
      "d": "moWnAjS47_t0jdjYHaubEY3f0MI5lVKwZblDqbkKoYUVfguFTI55opUg6EUGJDX74SM1acfPRpe6P7V9Iet_PoGpunQ4TdD3H4yCetqLBniZPNDn8oeVKkhhj97v-GyLyAWumaEDntO0O566TGUL-a0GwrcfT63Z_A4e0-NCTNyrn-hyy5Ljlw17r9MehxwXhi6wZdZJnu7iPT2UJGYeO9R-qedE_UiBzPYsXCjXV6FrY4awDGvWAr4R24hkI9naj6hIcmJhL-34xh6_hWomFtCHtKkNRSVHjMcIP5HOeK4yUqlRssvr61xzDwxrtv32Tj5JCDFUCc-NM8YVYy3oAQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "conformancetest",
      "qi": "ZIgXA-QKu5WscOoA4paq3INWIFNf34tPa1I2MTe30_fLShaDwwF3F_CzUscVd1k7Mbn_VpuKfK2C5Vqupoyj7uyk1gm-iuWtJYcxTkE61udn5vRq4lnjNzxtQCjHm48ZRnVmpFCMrSbcb2oJMzWFH1aM2vyCwuMcrSckR7YVVUI",
      "dp": "HSWmtWpkzu32vaGYWI6DAiu1wlpnYgzZ2jJHoVP05DzI6HPE26EpfB_v-1NbZwvLKjPEUPdsHOnBxcH3knh-Lj6slut9ONXNlbx4WKVM2jyyEc2cpE0Ec425nx7BFRe1DTvaYnzeBm32a-5vYos3x1oGmfE5G9rvcvRQW0OjsM0",
      "alg": "PS256",
      "dq": "XyYfkCKgRT6jubRB7hlUhESevePwEDHCpIAF-3UiesL2Mx9HijK-tzTRnd5gZh_HGroL96mJuKvqBuL20ThskulBKY65Ot1vlm0thb_uDYowVKhm8GSmHi1Ounjb5AbKBbalxl7BSt4gOFKCi5TjiwiRVYhayHHB8HmKByka7AE",
      "n": "xbLYBJ3SXWsNcLG03ieLj3UcqOQa0z4KHgjDSIytAv9GgKotTJU9skUvXWLJJuHlAh1MjI9rBZenMuUTqvaHvxMxMpDn5sc2GOLxmoM_dJBAPKmLWhNPNlKAJCVDAWHGcydBNLu8_ZkGCKaXbLStWjPl2djokKNU7gJLGEdv_PaT8-DUKH65xJ7sAaEqgsaFjXUuK7eLQG3Dxd64CLpfiCl9szHZldQkV3t44zfdB9KdaZyWiHwqRUe0mdc4Nn3-QZ7PhfY1z2q0fxEetcMyjr_5RLDWgOltneNmxyrbaxNHUMuiSnroemaRXZMxLyx_c8rDL8YRZ5VXToQw2q4EDw"
    }
  ]
}
acr_value
urn:acr2
2022-11-17 08:00:17 SUCCESS
ValidateMTLSCertificates2Header
MTLS certificates header is valid
2022-11-17 08:00:17 SUCCESS
ExtractMTLSCertificates2FromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
ca
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
2022-11-17 08:00:17 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2022-11-17 08:00:17 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "p": "_a4hJlGIgqTgO5MjxTa4j4-rnui8ofinPAs2lh5D3YQEQfpVPrEYlv8eo_sPpwkeU1M-PXVT2U59Os56IiKzDhqdQgaIRbq6Si8fhPxPrI4ei-wXuihqF1QDbbAuXf7ZV8_Yx1XCPKadrRNa8TKZWO4vDR30EdDsjL2uhyxdcI8",
      "kty": "RSA",
      "q": "x4GpCUG5Kwo6xv6Wl5UWUuV817mccDDnWVSLqK7Msb58BSfcK7kLrdzSFxBuo_DoK4RYu5K34HbAIzoZuC4cRJXR5QDf6BKxuyyF0qMNrHWpoXSpQOXHR6UowPaNHKfa4pXhcRCj4yo47VkipXEm2tD9bdTB0ydVZTJXrRKw9IE",
      "d": "moWnAjS47_t0jdjYHaubEY3f0MI5lVKwZblDqbkKoYUVfguFTI55opUg6EUGJDX74SM1acfPRpe6P7V9Iet_PoGpunQ4TdD3H4yCetqLBniZPNDn8oeVKkhhj97v-GyLyAWumaEDntO0O566TGUL-a0GwrcfT63Z_A4e0-NCTNyrn-hyy5Ljlw17r9MehxwXhi6wZdZJnu7iPT2UJGYeO9R-qedE_UiBzPYsXCjXV6FrY4awDGvWAr4R24hkI9naj6hIcmJhL-34xh6_hWomFtCHtKkNRSVHjMcIP5HOeK4yUqlRssvr61xzDwxrtv32Tj5JCDFUCc-NM8YVYy3oAQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "conformancetest",
      "qi": "ZIgXA-QKu5WscOoA4paq3INWIFNf34tPa1I2MTe30_fLShaDwwF3F_CzUscVd1k7Mbn_VpuKfK2C5Vqupoyj7uyk1gm-iuWtJYcxTkE61udn5vRq4lnjNzxtQCjHm48ZRnVmpFCMrSbcb2oJMzWFH1aM2vyCwuMcrSckR7YVVUI",
      "dp": "HSWmtWpkzu32vaGYWI6DAiu1wlpnYgzZ2jJHoVP05DzI6HPE26EpfB_v-1NbZwvLKjPEUPdsHOnBxcH3knh-Lj6slut9ONXNlbx4WKVM2jyyEc2cpE0Ec425nx7BFRe1DTvaYnzeBm32a-5vYos3x1oGmfE5G9rvcvRQW0OjsM0",
      "alg": "PS256",
      "dq": "XyYfkCKgRT6jubRB7hlUhESevePwEDHCpIAF-3UiesL2Mx9HijK-tzTRnd5gZh_HGroL96mJuKvqBuL20ThskulBKY65Ot1vlm0thb_uDYowVKhm8GSmHi1Ounjb5AbKBbalxl7BSt4gOFKCi5TjiwiRVYhayHHB8HmKByka7AE",
      "n": "xbLYBJ3SXWsNcLG03ieLj3UcqOQa0z4KHgjDSIytAv9GgKotTJU9skUvXWLJJuHlAh1MjI9rBZenMuUTqvaHvxMxMpDn5sc2GOLxmoM_dJBAPKmLWhNPNlKAJCVDAWHGcydBNLu8_ZkGCKaXbLStWjPl2djokKNU7gJLGEdv_PaT8-DUKH65xJ7sAaEqgsaFjXUuK7eLQG3Dxd64CLpfiCl9szHZldQkV3t44zfdB9KdaZyWiHwqRUe0mdc4Nn3-QZ7PhfY1z2q0fxEetcMyjr_5RLDWgOltneNmxyrbaxNHUMuiSnroemaRXZMxLyx_c8rDL8YRZ5VXToQw2q4EDw"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "conformancetest",
      "alg": "PS256",
      "n": "xbLYBJ3SXWsNcLG03ieLj3UcqOQa0z4KHgjDSIytAv9GgKotTJU9skUvXWLJJuHlAh1MjI9rBZenMuUTqvaHvxMxMpDn5sc2GOLxmoM_dJBAPKmLWhNPNlKAJCVDAWHGcydBNLu8_ZkGCKaXbLStWjPl2djokKNU7gJLGEdv_PaT8-DUKH65xJ7sAaEqgsaFjXUuK7eLQG3Dxd64CLpfiCl9szHZldQkV3t44zfdB9KdaZyWiHwqRUe0mdc4Nn3-QZ7PhfY1z2q0fxEetcMyjr_5RLDWgOltneNmxyrbaxNHUMuiSnroemaRXZMxLyx_c8rDL8YRZ5VXToQw2q4EDw"
    }
  ]
}
2022-11-17 08:00:17 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2022-11-17 08:00:17 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2022-11-17 08:00:17 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "PS256",
  "ES256"
]
2022-11-17 08:00:17 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "_a4hJlGIgqTgO5MjxTa4j4-rnui8ofinPAs2lh5D3YQEQfpVPrEYlv8eo_sPpwkeU1M-PXVT2U59Os56IiKzDhqdQgaIRbq6Si8fhPxPrI4ei-wXuihqF1QDbbAuXf7ZV8_Yx1XCPKadrRNa8TKZWO4vDR30EdDsjL2uhyxdcI8",
      "kty": "RSA",
      "q": "x4GpCUG5Kwo6xv6Wl5UWUuV817mccDDnWVSLqK7Msb58BSfcK7kLrdzSFxBuo_DoK4RYu5K34HbAIzoZuC4cRJXR5QDf6BKxuyyF0qMNrHWpoXSpQOXHR6UowPaNHKfa4pXhcRCj4yo47VkipXEm2tD9bdTB0ydVZTJXrRKw9IE",
      "d": "moWnAjS47_t0jdjYHaubEY3f0MI5lVKwZblDqbkKoYUVfguFTI55opUg6EUGJDX74SM1acfPRpe6P7V9Iet_PoGpunQ4TdD3H4yCetqLBniZPNDn8oeVKkhhj97v-GyLyAWumaEDntO0O566TGUL-a0GwrcfT63Z_A4e0-NCTNyrn-hyy5Ljlw17r9MehxwXhi6wZdZJnu7iPT2UJGYeO9R-qedE_UiBzPYsXCjXV6FrY4awDGvWAr4R24hkI9naj6hIcmJhL-34xh6_hWomFtCHtKkNRSVHjMcIP5HOeK4yUqlRssvr61xzDwxrtv32Tj5JCDFUCc-NM8YVYy3oAQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "conformancetest",
      "qi": "ZIgXA-QKu5WscOoA4paq3INWIFNf34tPa1I2MTe30_fLShaDwwF3F_CzUscVd1k7Mbn_VpuKfK2C5Vqupoyj7uyk1gm-iuWtJYcxTkE61udn5vRq4lnjNzxtQCjHm48ZRnVmpFCMrSbcb2oJMzWFH1aM2vyCwuMcrSckR7YVVUI",
      "dp": "HSWmtWpkzu32vaGYWI6DAiu1wlpnYgzZ2jJHoVP05DzI6HPE26EpfB_v-1NbZwvLKjPEUPdsHOnBxcH3knh-Lj6slut9ONXNlbx4WKVM2jyyEc2cpE0Ec425nx7BFRe1DTvaYnzeBm32a-5vYos3x1oGmfE5G9rvcvRQW0OjsM0",
      "alg": "PS256",
      "dq": "XyYfkCKgRT6jubRB7hlUhESevePwEDHCpIAF-3UiesL2Mx9HijK-tzTRnd5gZh_HGroL96mJuKvqBuL20ThskulBKY65Ot1vlm0thb_uDYowVKhm8GSmHi1Ounjb5AbKBbalxl7BSt4gOFKCi5TjiwiRVYhayHHB8HmKByka7AE",
      "n": "xbLYBJ3SXWsNcLG03ieLj3UcqOQa0z4KHgjDSIytAv9GgKotTJU9skUvXWLJJuHlAh1MjI9rBZenMuUTqvaHvxMxMpDn5sc2GOLxmoM_dJBAPKmLWhNPNlKAJCVDAWHGcydBNLu8_ZkGCKaXbLStWjPl2djokKNU7gJLGEdv_PaT8-DUKH65xJ7sAaEqgsaFjXUuK7eLQG3Dxd64CLpfiCl9szHZldQkV3t44zfdB9KdaZyWiHwqRUe0mdc4Nn3-QZ7PhfY1z2q0fxEetcMyjr_5RLDWgOltneNmxyrbaxNHUMuiSnroemaRXZMxLyx_c8rDL8YRZ5VXToQw2q4EDw"
    }
  ]
}
2022-11-17 08:00:17 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2022-11-17 08:00:17 SUCCESS
ValidateClientPrivateKeysAreDifferent
Client signing JWKs have different thumbprints
jwk1
{
  "p": "5POsvBfNiTqioCBLGaWsOQwTCPkGAECgCeWXqQykp6Cfbfoi1mvbRDAbNPjoLP88bOOt9v528Tpsi8ZuwQRn9XiK8IyyuxIrDaGBvfZCLCK513R8rX3gj-raer-FMaEIpr1bYCTOKBhyhcP46nTwfXNxTwfKFY7O0H8sWcBfF_M",
  "kty": "RSA",
  "q": "oqadQZ4jqFife7hlA2viAEGjJMu8ZRRIx15U19XKw4LbgHYAs3p965WO2lHJqkRUwD1YXZwqOcapUs2samp8JmoZ9j3OavwuRV7qW68_xV3W5xG8lV41RfKLX0c1ny7jJhPWOAbuJzjp3okjqy3hUBZ8Y2B25A2u8fxuhf7U3x0",
  "d": "Z-mgweEYkai9vr_dBYL0LaaHcfVv4D0X638cQIl99VNzZ8h3GqwtLC_zN6kx89S9C8nprfP2NvTegKxs-2bh-FN08k16zolcx6jEkZSgmUOhMLlpmB0qhHWOnYT047y-h9rQ9rZCVxIClJu5Whh8pa_Xlm3BDlbgJBEZSZAwbuWojQ3a-1J6Z8dP6aGqICUxOofz8z2KGxfQnCTmDIyfdCePmBlx7zdFvgq7SI9fDywkfo0ReBmVA4UX9DIbeR2nShZ53Q54rAPzbBLdwD3NzGeGN7Fk53PT3uYVBUq8nNzIwtdaeTRJ7_QxBBy769uG6I2yKIEE3hHldQT0hTs5AQ",
  "e": "AQAB",
  "use": "sig",
  "kid": "ristrettotest",
  "qi": "uzQHF2KOelrHJhOYBmoHkbiQqczkA3AQXOwAQME3P32dFJgOOB6QdCfrg1C2JTobx8Q3EVoko1j96QE2XCrWEBs9oW-4gg4CPGaU7BmVFt0lB88-ZD6E2N0byg2mekYtdGR3ifispEZHdIBP7TxW82in3fn-nB08YMqQAqqIGes",
  "dp": "UcoLBxapwkBEIFfo_DyHDcoWcrojPqvXgDGYwDdYCtoCmlMlZtwY9H8K-R2CM7DqcSvU1cuJyhtI85XrsuBUEwkA-XYJ03JmFvR_WNFESmgNY76lW4UAV-laK0eH2XbhlE9I-Uusqf4xyz97CKbF0ssOy2DI_HKLx0fnHBjw36k",
  "alg": "PS256",
  "dq": "KSaoYMKm2N_bMc0cWXpBCrmQki2ts5EnPLHEG3tuunpwGJdCZCZYl3MWWmwY7qgtHRooMj7hfA6kJlv9BEt-r6VmfiNzByRYfJqgBqRXKRMt3PZi1ROpvNG5q1hz25tcQvT_3Nr8BBZlLTVbPeL0v3OA8w-j5N0FZxnryKEJsI0",
  "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
}
jwk2
{
  "p": "_a4hJlGIgqTgO5MjxTa4j4-rnui8ofinPAs2lh5D3YQEQfpVPrEYlv8eo_sPpwkeU1M-PXVT2U59Os56IiKzDhqdQgaIRbq6Si8fhPxPrI4ei-wXuihqF1QDbbAuXf7ZV8_Yx1XCPKadrRNa8TKZWO4vDR30EdDsjL2uhyxdcI8",
  "kty": "RSA",
  "q": "x4GpCUG5Kwo6xv6Wl5UWUuV817mccDDnWVSLqK7Msb58BSfcK7kLrdzSFxBuo_DoK4RYu5K34HbAIzoZuC4cRJXR5QDf6BKxuyyF0qMNrHWpoXSpQOXHR6UowPaNHKfa4pXhcRCj4yo47VkipXEm2tD9bdTB0ydVZTJXrRKw9IE",
  "d": "moWnAjS47_t0jdjYHaubEY3f0MI5lVKwZblDqbkKoYUVfguFTI55opUg6EUGJDX74SM1acfPRpe6P7V9Iet_PoGpunQ4TdD3H4yCetqLBniZPNDn8oeVKkhhj97v-GyLyAWumaEDntO0O566TGUL-a0GwrcfT63Z_A4e0-NCTNyrn-hyy5Ljlw17r9MehxwXhi6wZdZJnu7iPT2UJGYeO9R-qedE_UiBzPYsXCjXV6FrY4awDGvWAr4R24hkI9naj6hIcmJhL-34xh6_hWomFtCHtKkNRSVHjMcIP5HOeK4yUqlRssvr61xzDwxrtv32Tj5JCDFUCc-NM8YVYy3oAQ",
  "e": "AQAB",
  "use": "sig",
  "kid": "conformancetest",
  "qi": "ZIgXA-QKu5WscOoA4paq3INWIFNf34tPa1I2MTe30_fLShaDwwF3F_CzUscVd1k7Mbn_VpuKfK2C5Vqupoyj7uyk1gm-iuWtJYcxTkE61udn5vRq4lnjNzxtQCjHm48ZRnVmpFCMrSbcb2oJMzWFH1aM2vyCwuMcrSckR7YVVUI",
  "dp": "HSWmtWpkzu32vaGYWI6DAiu1wlpnYgzZ2jJHoVP05DzI6HPE26EpfB_v-1NbZwvLKjPEUPdsHOnBxcH3knh-Lj6slut9ONXNlbx4WKVM2jyyEc2cpE0Ec425nx7BFRe1DTvaYnzeBm32a-5vYos3x1oGmfE5G9rvcvRQW0OjsM0",
  "alg": "PS256",
  "dq": "XyYfkCKgRT6jubRB7hlUhESevePwEDHCpIAF-3UiesL2Mx9HijK-tzTRnd5gZh_HGroL96mJuKvqBuL20ThskulBKY65Ot1vlm0thb_uDYowVKhm8GSmHi1Ounjb5AbKBbalxl7BSt4gOFKCi5TjiwiRVYhayHHB8HmKByka7AE",
  "n": "xbLYBJ3SXWsNcLG03ieLj3UcqOQa0z4KHgjDSIytAv9GgKotTJU9skUvXWLJJuHlAh1MjI9rBZenMuUTqvaHvxMxMpDn5sc2GOLxmoM_dJBAPKmLWhNPNlKAJCVDAWHGcydBNLu8_ZkGCKaXbLStWjPl2djokKNU7gJLGEdv_PaT8-DUKH65xJ7sAaEqgsaFjXUuK7eLQG3Dxd64CLpfiCl9szHZldQkV3t44zfdB9KdaZyWiHwqRUe0mdc4Nn3-QZ7PhfY1z2q0fxEetcMyjr_5RLDWgOltneNmxyrbaxNHUMuiSnroemaRXZMxLyx_c8rDL8YRZ5VXToQw2q4EDw"
}
2022-11-17 08:00:17 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/accounts
2022-11-17 08:00:17 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://isamfed.com:6443/isvaop/oauth2/open-banking/v3.1/aisp/accounts
2022-11-17 08:00:17 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "isamfed.com",
  "testPort": 6443
}
2022-11-17 08:00:17 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "isamfed.com",
  "testPort": 6443
}
accounts_request_endpoint
{
  "testHost": "isamfed.com",
  "testPort": 6443
}
2022-11-17 08:00:17
fapi1-advanced-final-ensure-expired-request-object-fails
Setup Done
Make request to authorization endpoint
2022-11-17 08:00:17 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
client_mtls_jarm01
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
scope
openid email
2022-11-17 08:00:17 SUCCESS
AddAcrClaimToAuthorizationEndpointRequest
Added acr claim to authorization_endpoint_request
authorization_endpoint_request
{
  "client_id": "client_mtls_jarm01",
  "redirect_uri": "https://www.certification.openid.net/test/a/ISVAOP/callback",
  "scope": "openid email",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  }
}
2022-11-17 08:00:17
CreateRandomStateValue
Created state value
requested_state_length
10
state
DiZupeuCpb
2022-11-17 08:00:17 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
client_mtls_jarm01
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
scope
openid email
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
DiZupeuCpb
2022-11-17 08:00:17
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
1VTSe0JAJ9
2022-11-17 08:00:17 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
client_mtls_jarm01
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
scope
openid email
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
DiZupeuCpb
nonce
1VTSe0JAJ9
2022-11-17 08:00:17 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToCode
Added response_type parameter to request
client_id
client_mtls_jarm01
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
scope
openid email
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
DiZupeuCpb
nonce
1VTSe0JAJ9
response_type
code
2022-11-17 08:00:17 SUCCESS
SetAuthorizationEndpointRequestResponseModeToJWT
Added response_mode parameter to request
client_id
client_mtls_jarm01
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
scope
openid email
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
DiZupeuCpb
nonce
1VTSe0JAJ9
response_type
code
response_mode
jwt
2022-11-17 08:00:17
CreateRandomCodeVerifier
Created code_verifier value
code_verifier
GZIadl7Oq3CyFS.Nc.MrRIQPlt7Mr9xvXwXV.02gJukVKJF7Cb4J6hrQkzhJTuqHcEDj2QS4oqxmb8GU~rtElH~XpjFCQNS.CxxFSzQ__gLGInord6fKiqahpsZp-hVA
2022-11-17 08:00:17
CreateS256CodeChallenge
Created code_challenge value
code_challenge
4euWmtPRJ3lhXyXvzOSQGxxsZfJDVK1_LifPlmf18AU
2022-11-17 08:00:17 SUCCESS
AddCodeChallengeToAuthorizationEndpointRequest
Added code_challenge and code_challenge_method parameters to request
client_id
client_mtls_jarm01
redirect_uri
https://www.certification.openid.net/test/a/ISVAOP/callback
scope
openid email
claims
{
  "id_token": {
    "acr": {
      "value": "urn:mace:incommon:iap:silver",
      "essential": true
    }
  }
}
state
DiZupeuCpb
nonce
1VTSe0JAJ9
response_type
code
response_mode
jwt
code_challenge
4euWmtPRJ3lhXyXvzOSQGxxsZfJDVK1_LifPlmf18AU
code_challenge_method
S256
2022-11-17 08:00:17 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "client_id": "client_mtls_jarm01",
  "redirect_uri": "https://www.certification.openid.net/test/a/ISVAOP/callback",
  "scope": "openid email",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  },
  "state": "DiZupeuCpb",
  "nonce": "1VTSe0JAJ9",
  "response_type": "code",
  "response_mode": "jwt",
  "code_challenge": "4euWmtPRJ3lhXyXvzOSQGxxsZfJDVK1_LifPlmf18AU",
  "code_challenge_method": "S256"
}
2022-11-17 08:00:17 SUCCESS
AddNbfToRequestObject
Added nbf to request object claims
nbf
1.668672017E9
2022-11-17 08:00:17 SUCCESS
AddExpiredExpToRequestObject
Added expired exp to request object claims
exp
1.668668417E9
2022-11-17 08:00:17 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://isamfed.com:6443/isvaop/oauth2
2022-11-17 08:00:17 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
client_mtls_jarm01
2022-11-17 08:00:17 SUCCESS
AddClientIdToRequestObject
Added client_id to request object claims
client_id
client_mtls_jarm01
2022-11-17 08:00:17 SUCCESS
SignRequestObject
Signed the request object
claims
{
  "iss": "client_mtls_jarm01",
  "response_type": "code",
  "code_challenge_method": "S256",
  "nonce": "1VTSe0JAJ9",
  "client_id": "client_mtls_jarm01",
  "response_mode": "jwt",
  "aud": "https://isamfed.com:6443/isvaop/oauth2",
  "nbf": 1668672017,
  "scope": "openid email",
  "claims": {
    "id_token": {
      "acr": {
        "value": "urn:mace:incommon:iap:silver",
        "essential": true
      }
    }
  },
  "redirect_uri": "https://www.certification.openid.net/test/a/ISVAOP/callback",
  "state": "DiZupeuCpb",
  "exp": 1668668417,
  "code_challenge": "4euWmtPRJ3lhXyXvzOSQGxxsZfJDVK1_LifPlmf18AU"
}
header
{
  "kid": "ristrettotest",
  "alg": "PS256"
}
request_object
eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.eyJpc3MiOiJjbGllbnRfbXRsc19qYXJtMDEiLCJyZXNwb25zZV90eXBlIjoiY29kZSIsImNvZGVfY2hhbGxlbmdlX21ldGhvZCI6IlMyNTYiLCJub25jZSI6IjFWVFNlMEpBSjkiLCJjbGllbnRfaWQiOiJjbGllbnRfbXRsc19qYXJtMDEiLCJyZXNwb25zZV9tb2RlIjoiand0IiwiYXVkIjoiaHR0cHM6XC9cL2lzYW1mZWQuY29tOjY0NDNcL2lzdmFvcFwvb2F1dGgyIiwibmJmIjoxNjY4NjcyMDE3LCJzY29wZSI6Im9wZW5pZCBlbWFpbCIsImNsYWltcyI6eyJpZF90b2tlbiI6eyJhY3IiOnsidmFsdWUiOiJ1cm46bWFjZTppbmNvbW1vbjppYXA6c2lsdmVyIiwiZXNzZW50aWFsIjp0cnVlfX19LCJyZWRpcmVjdF91cmkiOiJodHRwczpcL1wvd3d3LmNlcnRpZmljYXRpb24ub3BlbmlkLm5ldFwvdGVzdFwvYVwvSVNWQU9QXC9jYWxsYmFjayIsInN0YXRlIjoiRGladXBldUNwYiIsImV4cCI6MTY2ODY2ODQxNywiY29kZV9jaGFsbGVuZ2UiOiI0ZXVXbXRQUkozbGhYeVh2ek9TUUd4eHNaZkpEVksxX0xpZlBsbWYxOEFVIn0.PJYsumJQbRpzpus_rUDP7roJuxghVhh1uma8mGetRusJA3Gf_zks_UkrHYegsOG9KrPvBphnFkhmusZB70quJ30Fo0IGCCOMpaGRpdvNRvikKuH1tTzm4Pz-pYVBAClx93278Td8cLdfD2PTX23RO23sT0Y12aPOUtdqsEi0Yh6sCqzxlu9EtooLtpj5JNb4D8lVjoWGsueEpX8VeGQ_iQb0ykIX9vI_byGVe8CrMUgCvM6GcxkiYJrG3yLe6pe8Pkg738-kLHsd34vZY_gdB702lBVcqnTDCo473qbL80PxYevP-9OEiNz5a3Q1rBYLd23V5PJAnQ-mbcNUczmpkg
key
{
  "p": "5POsvBfNiTqioCBLGaWsOQwTCPkGAECgCeWXqQykp6Cfbfoi1mvbRDAbNPjoLP88bOOt9v528Tpsi8ZuwQRn9XiK8IyyuxIrDaGBvfZCLCK513R8rX3gj-raer-FMaEIpr1bYCTOKBhyhcP46nTwfXNxTwfKFY7O0H8sWcBfF_M",
  "kty": "RSA",
  "q": "oqadQZ4jqFife7hlA2viAEGjJMu8ZRRIx15U19XKw4LbgHYAs3p965WO2lHJqkRUwD1YXZwqOcapUs2samp8JmoZ9j3OavwuRV7qW68_xV3W5xG8lV41RfKLX0c1ny7jJhPWOAbuJzjp3okjqy3hUBZ8Y2B25A2u8fxuhf7U3x0",
  "d": "Z-mgweEYkai9vr_dBYL0LaaHcfVv4D0X638cQIl99VNzZ8h3GqwtLC_zN6kx89S9C8nprfP2NvTegKxs-2bh-FN08k16zolcx6jEkZSgmUOhMLlpmB0qhHWOnYT047y-h9rQ9rZCVxIClJu5Whh8pa_Xlm3BDlbgJBEZSZAwbuWojQ3a-1J6Z8dP6aGqICUxOofz8z2KGxfQnCTmDIyfdCePmBlx7zdFvgq7SI9fDywkfo0ReBmVA4UX9DIbeR2nShZ53Q54rAPzbBLdwD3NzGeGN7Fk53PT3uYVBUq8nNzIwtdaeTRJ7_QxBBy769uG6I2yKIEE3hHldQT0hTs5AQ",
  "e": "AQAB",
  "use": "sig",
  "kid": "ristrettotest",
  "qi": "uzQHF2KOelrHJhOYBmoHkbiQqczkA3AQXOwAQME3P32dFJgOOB6QdCfrg1C2JTobx8Q3EVoko1j96QE2XCrWEBs9oW-4gg4CPGaU7BmVFt0lB88-ZD6E2N0byg2mekYtdGR3ifispEZHdIBP7TxW82in3fn-nB08YMqQAqqIGes",
  "dp": "UcoLBxapwkBEIFfo_DyHDcoWcrojPqvXgDGYwDdYCtoCmlMlZtwY9H8K-R2CM7DqcSvU1cuJyhtI85XrsuBUEwkA-XYJ03JmFvR_WNFESmgNY76lW4UAV-laK0eH2XbhlE9I-Uusqf4xyz97CKbF0ssOy2DI_HKLx0fnHBjw36k",
  "alg": "PS256",
  "dq": "KSaoYMKm2N_bMc0cWXpBCrmQki2ts5EnPLHEG3tuunpwGJdCZCZYl3MWWmwY7qgtHRooMj7hfA6kJlv9BEt-r6VmfiNzByRYfJqgBqRXKRMt3PZi1ROpvNG5q1hz25tcQvT_3Nr8BBZlLTVbPeL0v3OA8w-j5N0FZxnryKEJsI0",
  "n": "kXc19SlD_vUPcIA9Rf43Nd2kyvaPmsF8_BnwmX3N8svnIFlpAcSMeDKRGjpSZpOaVnrHyTeq19CFoTgRt1DT5mUJp9JmsXSZumMbcQBzCiwQvBO988nFCiZAJedAyo05PpuFQgIP0kQInEAevcduDeRWedE7pdb1TGMGnsLl7C3A7KdNBzU0sYooA04OYUGtJAdGaja-tSkZpHUAit7ywS2cBOx5UuNc2_oqWDoE7S_RfxYqouoIV36o0nR_IukvhpdGQ3aX8JVXHSdiuAgOmu3v3X6JKem20f2rt8-mKG0kqBLIYbYHErTwPtaXbs2H6vtRECrTSPlRIbh_j95jhw"
}
2022-11-17 08:00:17 SUCCESS
BuildRequestObjectPostToPAREndpoint
request
eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.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.PJYsumJQbRpzpus_rUDP7roJuxghVhh1uma8mGetRusJA3Gf_zks_UkrHYegsOG9KrPvBphnFkhmusZB70quJ30Fo0IGCCOMpaGRpdvNRvikKuH1tTzm4Pz-pYVBAClx93278Td8cLdfD2PTX23RO23sT0Y12aPOUtdqsEi0Yh6sCqzxlu9EtooLtpj5JNb4D8lVjoWGsueEpX8VeGQ_iQb0ykIX9vI_byGVe8CrMUgCvM6GcxkiYJrG3yLe6pe8Pkg738-kLHsd34vZY_gdB702lBVcqnTDCo473qbL80PxYevP-9OEiNz5a3Q1rBYLd23V5PJAnQ-mbcNUczmpkg
2022-11-17 08:00:17 SUCCESS
AddClientIdToPAREndpointRequest
request
eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.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.PJYsumJQbRpzpus_rUDP7roJuxghVhh1uma8mGetRusJA3Gf_zks_UkrHYegsOG9KrPvBphnFkhmusZB70quJ30Fo0IGCCOMpaGRpdvNRvikKuH1tTzm4Pz-pYVBAClx93278Td8cLdfD2PTX23RO23sT0Y12aPOUtdqsEi0Yh6sCqzxlu9EtooLtpj5JNb4D8lVjoWGsueEpX8VeGQ_iQb0ykIX9vI_byGVe8CrMUgCvM6GcxkiYJrG3yLe6pe8Pkg738-kLHsd34vZY_gdB702lBVcqnTDCo473qbL80PxYevP-9OEiNz5a3Q1rBYLd23V5PJAnQ-mbcNUczmpkg
client_id
client_mtls_jarm01
2022-11-17 08:00:17
CallPAREndpoint
HTTP request
request_uri
https://isamfed.com:6443/isvaop/oauth2/par
request_method
POST
request_headers
{
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "1126"
}
request_body
request=eyJraWQiOiJyaXN0cmV0dG90ZXN0IiwiYWxnIjoiUFMyNTYifQ.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.PJYsumJQbRpzpus_rUDP7roJuxghVhh1uma8mGetRusJA3Gf_zks_UkrHYegsOG9KrPvBphnFkhmusZB70quJ30Fo0IGCCOMpaGRpdvNRvikKuH1tTzm4Pz-pYVBAClx93278Td8cLdfD2PTX23RO23sT0Y12aPOUtdqsEi0Yh6sCqzxlu9EtooLtpj5JNb4D8lVjoWGsueEpX8VeGQ_iQb0ykIX9vI_byGVe8CrMUgCvM6GcxkiYJrG3yLe6pe8Pkg738-kLHsd34vZY_gdB702lBVcqnTDCo473qbL80PxYevP-9OEiNz5a3Q1rBYLd23V5PJAnQ-mbcNUczmpkg&client_id=client_mtls_jarm01
request_mutual_tls
{
  "cert": "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\u003d\u003d",
  "key": "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\u003d\u003d",
  "ca": "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\u003d\u003d"
}
2022-11-17 08:00:18 RESPONSE
CallPAREndpoint
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "content-length": "99",
  "content-type": "application/json;charset\u003dUTF-8",
  "date": "Thu, 17 Nov 2022 08:00:18 GMT",
  "p3p": "CP\u003d\"NON CUR OTPi OUR NOR UNI\"",
  "cache-control": "no-store",
  "x-correlation-id": "CORR_ID-a26bd130-0a2f-4bfe-a10b-7b4c9e293b8a",
  "strict-transport-security": "max-age\u003d31536000; includeSubDomains",
  "pragma": "no-cache",
  "set-cookie": "PD-S-SESSION-ID\u003d1_2_1_yyRENw18gFrfDJcpuzIeJAfvFP6sYP5cntyPReaKSLl1u9eI; Path\u003d/; Secure; HttpOnly"
}
response_body
{"error":"invalid_request_object","error_description":"CSIAQ5149E The request object has expired."}
2022-11-17 08:00:18 SUCCESS
CallPAREndpoint
Parsed pushed authorization request endpoint response
error
invalid_request_object
error_description
CSIAQ5149E The request object has expired.
2022-11-17 08:00:18 SUCCESS
EnsurePARInvalidRequestObjectError
Pushed Authorization Request Endpoint returned expected 'error' of '[invalid_request_object]'
expected
[
  "invalid_request_object"
]
error
invalid_request_object
2022-11-17 08:00:18 FINISHED
fapi1-advanced-final-ensure-expired-request-object-fails
Test has run to completion
testmodule_result
PASSED
2022-11-17 08:00:20
TEST-RUNNER
Alias has now been claimed by another test
alias
ISVAOP
new_test_id
sP9lvZ4CI4GjrDu
Test Results