Test Summary

Test Results

Expand All Collapse All
All times are UTC
2023-02-14 12:13:19 INFO
TEST-RUNNER
Test instance aE6MIlIa52Ved8Y created
baseUrl
https://www.certification.openid.net/test/a/Mindgate_Solutions
variant
{
  "client_auth_type": "client_secret_basic",
  "response_type": "code",
  "server_metadata": "discovery",
  "response_mode": "default",
  "client_registration": "static_client"
}
alias
Mindgate_Solutions
description
OpenID Core Basic Certification Test Run
planId
zs280wqop79PA
config
{
  "alias": "Mindgate_Solutions",
  "description": "OpenID Core Basic Certification Test Run",
  "server": {
    "discoveryUrl": "https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-login/login-service/service/vtiam/v5.0/authen/discovery"
  },
  "consent": {},
  "client": {
    "client_id": "VT1002",
    "client_secret": "0e857c1d-5f20-4c07-96e3-ba58bce7783b"
  },
  "client_secret_post": {
    "client_id": "VT1002",
    "client_secret": "0e857c1d-5f20-4c07-96e3-ba58bce7783b"
  },
  "client2": {
    "client_id": "VT1004",
    "client_secret": "e1bf3dca-17a7-40c1-885e-0aa51a4363a2"
  }
}
testName
oidcc-ensure-request-object-with-redirect-uri
2023-02-14 12:13:19 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/Mindgate_Solutions/callback
2023-02-14 12:13:19
GetDynamicServerConfiguration
HTTP request
request_uri
https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-login/login-service/service/vtiam/v5.0/authen/discovery
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2023-02-14 12:13:19 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-type": "application/json",
  "transfer-encoding": "chunked",
  "connection": "keep-alive",
  "date": "Tue, 14 Feb 2023 12:13:19 GMT",
  "x-amzn-requestid": "8f913b37-9841-4397-a5ea-086a718a843e",
  "x-xss-protection": "1; mode\u003dblock",
  "x-frame-options": "DENY",
  "x-envoy-upstream-service-time": "4",
  "x-amzn-remapped-connection": "keep-alive",
  "x-amz-apigw-id": "AVAjBH6BhcwFSnw\u003d",
  "cache-control": "no-cache, no-store, max-age\u003d0, must-revalidate",
  "x-amzn-remapped-server": "istio-envoy",
  "x-content-type-options": "nosniff",
  "expires": "0",
  "pragma": "no-cache",
  "x-amzn-remapped-date": "Tue, 14 Feb 2023 12:13:19 GMT",
  "vary": "Accept-Encoding",
  "x-cache": "Miss from cloudfront",
  "via": "1.1 8285570aba5e7b415ddceb68e221bf8a.cloudfront.net (CloudFront)",
  "x-amz-cf-pop": "MIA3-C4",
  "x-amz-cf-id": "N0NsbiSFtLDtAlsg_fK9g-3G552OFpGfTO22CQCknQqCd17MVzgXTQ\u003d\u003d"
}
response_body
{"issuer":"https://d26c3ruhv16ewi.cloudfront.net","authorization_endpoint":"https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-login/login-service/service/vtiam/v5.0/authen/authorize","token_endpoint":"https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-login/login-service/service/vtiam/v5.0/authen/token","userinfo_endpoint":"https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-auth/authorization-service/service/vtiam/api/v5.0/authz/userinfo","jwks_uri":"https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-login/login-service/service/vtiam/v5.0/authen/oauth/jwks","scopes_supported":["openid","profile","email","phone","address","all"],"response_types_supported":["code"],"grant_types_supported":["authorization_code","refresh_token","client_credentials","password"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS512"],"token_endpoint_auth_methods_supported":["client_secret_basic","client_secret_post"]}
2023-02-14 12:13:19 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://d26c3ruhv16ewi.cloudfront.net
authorization_endpoint
https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-login/login-service/service/vtiam/v5.0/authen/authorize
token_endpoint
https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-login/login-service/service/vtiam/v5.0/authen/token
userinfo_endpoint
https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-auth/authorization-service/service/vtiam/api/v5.0/authz/userinfo
jwks_uri
https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-login/login-service/service/vtiam/v5.0/authen/oauth/jwks
scopes_supported
[
  "openid",
  "profile",
  "email",
  "phone",
  "address",
  "all"
]
response_types_supported
[
  "code"
]
grant_types_supported
[
  "authorization_code",
  "refresh_token",
  "client_credentials",
  "password"
]
subject_types_supported
[
  "public"
]
id_token_signing_alg_values_supported
[
  "RS512"
]
token_endpoint_auth_methods_supported
[
  "client_secret_basic",
  "client_secret_post"
]
2023-02-14 12:13:19 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2023-02-14 12:13:19 SUCCESS
ExtractTLSTestValuesFromServerConfiguration
Extracted TLS information from authorization server configuration
registration_endpoint
authorization_endpoint
{
  "testHost": "d26c3ruhv16ewi.cloudfront.net",
  "testPort": 443
}
token_endpoint
{
  "testHost": "d26c3ruhv16ewi.cloudfront.net",
  "testPort": 443
}
userinfo_endpoint
{
  "testHost": "d26c3ruhv16ewi.cloudfront.net",
  "testPort": 443
}
2023-02-14 12:13:19
FetchServerKeys
Fetching server key
jwks_uri
https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-login/login-service/service/vtiam/v5.0/authen/oauth/jwks
2023-02-14 12:13:19
FetchServerKeys
HTTP request
request_uri
https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-login/login-service/service/vtiam/v5.0/authen/oauth/jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2023-02-14 12:13:20 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "content-type": "application/json",
  "content-length": "426",
  "connection": "keep-alive",
  "date": "Tue, 14 Feb 2023 12:13:20 GMT",
  "x-amzn-requestid": "8178001e-3b39-46f6-a668-069098acadc4",
  "x-xss-protection": "1; mode\u003dblock",
  "x-frame-options": "DENY",
  "x-envoy-upstream-service-time": "4",
  "x-amzn-remapped-connection": "keep-alive",
  "x-amz-apigw-id": "AVAjKEg6BcwFmKA\u003d",
  "cache-control": "no-cache, no-store, max-age\u003d0, must-revalidate",
  "x-amzn-remapped-server": "istio-envoy",
  "x-content-type-options": "nosniff",
  "expires": "0",
  "pragma": "no-cache",
  "x-amzn-remapped-date": "Tue, 14 Feb 2023 12:13:20 GMT",
  "x-cache": "Miss from cloudfront",
  "via": "1.1 6fc0aea2429e74e0c91886621936d56a.cloudfront.net (CloudFront)",
  "x-amz-cf-pop": "MIA3-C4",
  "x-amz-cf-id": "cYyzJPOTdBCxrvfwhi8DGgvuo0V7EEzFalx_DhMMf0chfoz1BlJbvg\u003d\u003d"
}
response_body
{"keys":[{"kty":"RSA","e":"AQAB","use":"sig","alg":"RS512","n":"sv63ROJCVoe4vlAf9z001KmJj5_FURpy9eKigFrLlWkErHD_5uyugO2-JvqAdZPg8flFdTqZJFLc4bXmzH9gZwktZMKXjQvuPA_kbcM62Kl0AHVndswBh1ZVbgG-RF-JpH7SZXzXv6DsN3GWqIoqOzJTM7smVU6ka04mcQ-7UPrm-o6Rn6s_GRa59Sy7IaCKPFRny11tSU_FHXqjj4TlrzcLzPNqUaPW1n-3GAzsZFo2M82Kta0UG4SLboFFcIIiLYXoQvM1Tmi3BD0bX0WsF1cTg9jXo-EaxHh_YVs5OOWCuEgEi5GZpzXieDpme92zf_XPrrCyHvn8JI8r2QCvJw","kid":"mnbvcxz"}]}
2023-02-14 12:13:20
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","e":"AQAB","use":"sig","alg":"RS512","n":"sv63ROJCVoe4vlAf9z001KmJj5_FURpy9eKigFrLlWkErHD_5uyugO2-JvqAdZPg8flFdTqZJFLc4bXmzH9gZwktZMKXjQvuPA_kbcM62Kl0AHVndswBh1ZVbgG-RF-JpH7SZXzXv6DsN3GWqIoqOzJTM7smVU6ka04mcQ-7UPrm-o6Rn6s_GRa59Sy7IaCKPFRny11tSU_FHXqjj4TlrzcLzPNqUaPW1n-3GAzsZFo2M82Kta0UG4SLboFFcIIiLYXoQvM1Tmi3BD0bX0WsF1cTg9jXo-EaxHh_YVs5OOWCuEgEi5GZpzXieDpme92zf_XPrrCyHvn8JI8r2QCvJw","kid":"mnbvcxz"}]}
2023-02-14 12:13:20 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "alg": "RS512",
      "n": "sv63ROJCVoe4vlAf9z001KmJj5_FURpy9eKigFrLlWkErHD_5uyugO2-JvqAdZPg8flFdTqZJFLc4bXmzH9gZwktZMKXjQvuPA_kbcM62Kl0AHVndswBh1ZVbgG-RF-JpH7SZXzXv6DsN3GWqIoqOzJTM7smVU6ka04mcQ-7UPrm-o6Rn6s_GRa59Sy7IaCKPFRny11tSU_FHXqjj4TlrzcLzPNqUaPW1n-3GAzsZFo2M82Kta0UG4SLboFFcIIiLYXoQvM1Tmi3BD0bX0WsF1cTg9jXo-EaxHh_YVs5OOWCuEgEi5GZpzXieDpme92zf_XPrrCyHvn8JI8r2QCvJw",
      "kid": "mnbvcxz"
    }
  ]
}
2023-02-14 12:13:20 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "alg": "RS512",
      "n": "sv63ROJCVoe4vlAf9z001KmJj5_FURpy9eKigFrLlWkErHD_5uyugO2-JvqAdZPg8flFdTqZJFLc4bXmzH9gZwktZMKXjQvuPA_kbcM62Kl0AHVndswBh1ZVbgG-RF-JpH7SZXzXv6DsN3GWqIoqOzJTM7smVU6ka04mcQ-7UPrm-o6Rn6s_GRa59Sy7IaCKPFRny11tSU_FHXqjj4TlrzcLzPNqUaPW1n-3GAzsZFo2M82Kta0UG4SLboFFcIIiLYXoQvM1Tmi3BD0bX0WsF1cTg9jXo-EaxHh_YVs5OOWCuEgEi5GZpzXieDpme92zf_XPrrCyHvn8JI8r2QCvJw",
      "kid": "mnbvcxz"
    }
  ]
}
2023-02-14 12:13:20 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2023-02-14 12:13:20 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2023-02-14 12:13:20 SUCCESS
CheckDistinctKeyIdValueInServerJWKs
Distinct 'kid' value in all keys of server_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2023-02-14 12:13:20 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2023-02-14 12:13:20 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
VT1002
client_secret
0e857c1d-5f20-4c07-96e3-ba58bce7783b
2023-02-14 12:13:20 INFO
ValidateClientJWKsPrivatePart
Skipped evaluation due to missing required element: client jwks
path
jwks
mapped
object
client
2023-02-14 12:13:20 INFO
ExtractJWKsFromStaticClientConfiguration
Skipped evaluation due to missing required element: client jwks
path
jwks
mapped
object
client
2023-02-14 12:13:20 INFO
CheckDistinctKeyIdValueInClientJWKs
Skipped evaluation due to missing required element: client jwks
path
jwks
mapped
object
client
2023-02-14 12:13:20
SetScopeInClientConfigurationToOpenId
Set scope in client configuration to "openid"
scope
openid
2023-02-14 12:13:20 SUCCESS
EnsureServerConfigurationSupportsClientSecretBasic
Contents of 'token_endpoint_auth_methods_supported' in discovery document matches expectations.
actual
[
  "client_secret_basic",
  "client_secret_post"
]
expected
[
  "client_secret_basic"
]
minimum_matches_required
1
2023-02-14 12:13:20 SUCCESS
SetProtectedResourceUrlToUserInfoEndpoint
userinfo_endpoint will be used to test access token. The user info is not a mandatory to implement feature in the OpenID Connect specification, but is mandatory for certification.
protected_resource_url
https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-auth/authorization-service/service/vtiam/api/v5.0/authz/userinfo
2023-02-14 12:13:20
oidcc-ensure-request-object-with-redirect-uri
Setup Done
Make request to authorization endpoint
2023-02-14 12:13:20 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
VT1002
redirect_uri
https://www.certification.openid.net/test/a/Mindgate_Solutions/callback
scope
openid
2023-02-14 12:13:20
CreateRandomStateValue
Created state value
requested_state_length
10
state
8aSkUwrI2w
2023-02-14 12:13:20 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
VT1002
redirect_uri
https://www.certification.openid.net/test/a/Mindgate_Solutions/callback
scope
openid
state
8aSkUwrI2w
2023-02-14 12:13:20
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
iKsCCT5K0u
2023-02-14 12:13:20 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
VT1002
redirect_uri
https://www.certification.openid.net/test/a/Mindgate_Solutions/callback
scope
openid
state
8aSkUwrI2w
nonce
iKsCCT5K0u
2023-02-14 12:13:20 SUCCESS
SetAuthorizationEndpointRequestResponseTypeFromEnvironment
Added response_type parameter to request
client_id
VT1002
redirect_uri
https://www.certification.openid.net/test/a/Mindgate_Solutions/callback
scope
openid
state
8aSkUwrI2w
nonce
iKsCCT5K0u
response_type
code
2023-02-14 12:13:20 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "client_id": "VT1002",
  "redirect_uri": "https://www.certification.openid.net/test/a/Mindgate_Solutions/callback",
  "scope": "openid",
  "state": "8aSkUwrI2w",
  "nonce": "iKsCCT5K0u",
  "response_type": "code"
}
2023-02-14 12:13:20 SUCCESS
AddInvalidRedirectUriToAuthorizationRequest
Added invalid redirect_uri to authorization endpoint request
redirect_uri
https://www.certification.openid.net/test/a/Mindgate_Solutions/callback_invalid
2023-02-14 12:13:20 SUCCESS
SerializeRequestObjectWithNullAlgorithm
Serialized the request object
request_object
{
  "claimsSet": {
    "claims": {
      "scope": "openid",
      "response_type": "code",
      "redirect_uri": "https://www.certification.openid.net/test/a/Mindgate_Solutions/callback",
      "state": "8aSkUwrI2w",
      "nonce": "iKsCCT5K0u",
      "client_id": "VT1002"
    }
  },
  "header": {
    "alg": {
      "name": "none",
      "requirement": "REQUIRED"
    },
    "customParams": {}
  },
  "payload": {
    "origin": "JSON",
    "jsonObject": {
      "scope": "openid",
      "response_type": "code",
      "redirect_uri": "https://www.certification.openid.net/test/a/Mindgate_Solutions/callback",
      "state": "8aSkUwrI2w",
      "nonce": "iKsCCT5K0u",
      "client_id": "VT1002"
    }
  }
}
request_object serialized
eyJhbGciOiJub25lIn0.eyJzY29wZSI6Im9wZW5pZCIsInJlc3BvbnNlX3R5cGUiOiJjb2RlIiwicmVkaXJlY3RfdXJpIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL01pbmRnYXRlX1NvbHV0aW9uc1wvY2FsbGJhY2siLCJzdGF0ZSI6IjhhU2tVd3JJMnciLCJub25jZSI6ImlLc0NDVDVLMHUiLCJjbGllbnRfaWQiOiJWVDEwMDIifQ.
2023-02-14 12:13:20 SUCCESS
BuildRequestObjectByValueRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-login/login-service/service/vtiam/v5.0/authen/authorize?request=eyJhbGciOiJub25lIn0.eyJzY29wZSI6Im9wZW5pZCIsInJlc3BvbnNlX3R5cGUiOiJjb2RlIiwicmVkaXJlY3RfdXJpIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL01pbmRnYXRlX1NvbHV0aW9uc1wvY2FsbGJhY2siLCJzdGF0ZSI6IjhhU2tVd3JJMnciLCJub25jZSI6ImlLc0NDVDVLMHUiLCJjbGllbnRfaWQiOiJWVDEwMDIifQ.&client_id=VT1002&scope=openid&response_type=code&redirect_uri=https://www.certification.openid.net/test/a/Mindgate_Solutions/callback_invalid
2023-02-14 12:13:20 REDIRECT
oidcc-ensure-request-object-with-redirect-uri
Redirecting to authorization endpoint
redirect_to
https://d26c3ruhv16ewi.cloudfront.net/dev/vtransact/vtransact-iam-login/login-service/service/vtiam/v5.0/authen/authorize?request=eyJhbGciOiJub25lIn0.eyJzY29wZSI6Im9wZW5pZCIsInJlc3BvbnNlX3R5cGUiOiJjb2RlIiwicmVkaXJlY3RfdXJpIjoiaHR0cHM6XC9cL3d3dy5jZXJ0aWZpY2F0aW9uLm9wZW5pZC5uZXRcL3Rlc3RcL2FcL01pbmRnYXRlX1NvbHV0aW9uc1wvY2FsbGJhY2siLCJzdGF0ZSI6IjhhU2tVd3JJMnciLCJub25jZSI6ImlLc0NDVDVLMHUiLCJjbGllbnRfaWQiOiJWVDEwMDIifQ.&client_id=VT1002&scope=openid&response_type=code&redirect_uri=https://www.certification.openid.net/test/a/Mindgate_Solutions/callback_invalid
2023-02-14 12:13:20 REVIEW IMAGE
ExpectRedirectUriErrorPage
Show redirect URI error page
img
updatedAt
1676376859326
2023-02-14 12:14:23 FINISHED
oidcc-ensure-request-object-with-redirect-uri
Test has run to completion
testmodule_result
REVIEW
Unregister dynamically registered client
2023-02-14 12:14:23
UnregisterDynamicallyRegisteredClient
Couldn't find registration_access_token.
2023-02-14 12:16:28
TEST-RUNNER
Alias has now been claimed by another test
alias
Mindgate_Solutions
new_test_id
Nu19TpyOwo0vDpe
Test Results