Test Summary

Test Results

Expand All Collapse All
All times are UTC
2023-03-14 09:33:34 INFO
TEST-RUNNER
Test instance xgoqsPdMOQi8Zri created
baseUrl
https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4
variant
{
  "client_auth_type": "private_key_jwt",
  "fapi_auth_request_method": "pushed",
  "fapi_profile": "openbanking_ksa",
  "fapi_response_mode": "plain_response"
}
alias
KSAsXGTGnH6Wg9pzaT4
description
Conformance Suite Test of SNB for Certification
planId
nNVye7WMhotBS
config
{
  "alias": "KSAsXGTGnH6Wg9pzaT4",
  "server": {
    "discoveryUrl": "https://openbankinguat.alahli.com:9443/consent-manager/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "daf67ffe-0d32-4642-a6eb-08e5880cf4e2",
    "scope": "openid accounts",
    "jwks": {
      "keys": [
        {
          "p": "4IESJOF4Y6lC6UEFEejW0NYtEZN2CCh-XkeA0CXD_yvIDoYj10CN03tZgFogpHXJaTmBg1JWeEckheonsCjfEs2GW6YLQjYNxy2IqEyxcodvAyVeFw7NVQ_4maVsMcbUh9EAZS4oBIQDWS8S5uqx7jK8qrmyflpZHXp8RWLb9h0",
          "kty": "RSA",
          "q": "yjH2h2bHnRRCOiLkQKAGVf0floEabjZbDmtGI4MUysXRtWlmtso8hMJMqyRXvrU1pNts2X5TABpQSuvqTPMT24yo_u74qoiNRNG2SL5lSp8yNw-9CvpuTW3u0IzuOqLKtMUX9kbvVo_2e-i6c_f2IefBqkm-1QkzvlJlBebl-5E",
          "d": "F6c_RcUqAby5emJgH3AzuE-MKb2v1lLIKCyFIImZ7IvQUENkc9pHHq6Sqfc1w4d3k8oWQnfUCWZg9Cfs892DMfs65_rTDtbahKBdZJ_LQ9jokCz3ouaOJM8nm1r1YOzCoddpCu4wU3zP48PrkWXeCNXI2bnvWa33y7eT0oVNUXx_ybMtildjCT0ehYyCJBY-5oKq3U2STubENY0-jXAVzxHKKY-pbMGonZSOkTLVXcFVHvJNL4yQHT0R-55bhObv9fN7UB-AyFAsHT98MrDlcrCXp4F-WbVLsQpOUh3VldeWRLlkezG7FPNBNU78jMRGo1JiH2HNHyF7boEZ4wdHcQ",
          "e": "AQAB",
          "use": "sig",
          "kid": "04b7dcd7-e883-4ef8-bf42-36fc61fdba99",
          "qi": "aQSQIIiRGVKoVrShQohQXBdtBRsNB8Gd1nIYTL_pokcst4lRCP9SwbDjyVoh4oH0vDtCllqMA4-f7u6Ovw7zv6pyO0pjxmBvv_F__5L9vZowUMlfVk1cY7ZkRCDrEl-85wsvHaS6Cdiz4G9g-wXGKxw6rB0Eb6XQz_XKdrb0AnQ",
          "dp": "mzNfUbO1QGBw60ORt7HZX4HQokfo3vbvdUnFGSAigLLJmJDPEi2EXmD1nK-xxT_QPzgL-rbfJEM6UoFvcm6u2BbQ_WaqfdlUaQ9nW8G5Ik3SRsB8bUBEXrutxrn_M-IaZtHrjgb8jzKcBflu_cfdvafBmdzKMmNPG_vjESyol1k",
          "alg": "PS256",
          "dq": "T5LaMu-AH5GZfse8jLJty-mSROkKPdWmgEY3lEJCLIstvPd-NPHiX10YT0I-Rg-KzRaOAAp3H9M7RkESNLZ1WjJBUBM8SeDzt-HQm1BTDMsaOBE5lNh6EH7zPaA5IVpv7DSk-YdxKd_-YUV2G626cB2FWj8rmyvD8WL73xa_7AE",
          "n": "sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"
        }
      ]
    }
  },
  "mtls": {
    "cert": "-----BEGIN CERTIFICATE-----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\nLofXX0i4VmdT8WWgYRucbo6GoSQ\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----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\nvVQODYgjWk52YRGCk1HabpUI\n-----END PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----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\nLofXX0i4VmdT8WWgYRucbo6GoSQ\u003d\n-----END CERTIFICATE-----"
  },
  "client2": {
    "client_id": "12de8761-7107-4f0b-a16a-3c7e90e3b1c6",
    "scope": "openid accounts",
    "jwks": {
      "keys": [
        {
          "p": "_DwdmXsVIri1WF3W1Tq89PRchs5748SdO4tHryKOCnH-QZFuqrs9zL48A4i0pnoZVNeTZ3mju-r8h3HuRCShNN0mp3FW5Ewc_swOq15SnyR30rr3R04TI4ITcz6dGZg7QW2PpWTY2D9vtviUbyxp8hIXLGbxlMm7hhzp0Hy-bPs",
          "kty": "RSA",
          "q": "w1RSUzJxQBqN0ql7tBsLaKXr3CUgO-E6vF7fm_Pvzc8xHmKJTfaq137on8MdjQfLdKEGcHPCDh0Nu7UMmx98D2RLL2RhWAGhup542g6Y1qWXb2G3h3_JgtMz5d_QmlGRdGVR2meUq4ryPF-Sk_Y7_cElf99wOVmpvKCZ9fqts0s",
          "d": "CYohgoRaFferSxiljBO43cy4QhUM7mLNMGNoL4uw1PWdkdlL3kXM9WnICr0xX_nT9OvP4nhjrJKdHGMpR0ZRBi9cOImIbnVoMofsqxKp8eiwTe2ywOEnOiJReVyOeCq8AucCSGr_iJf2BRq86qA-TNAoAAF2j3gwQM7DSXuPqeunkddc-yGSLLXP-mVbSiXHyv49VCsdYoGapnMBlDQjyG3YHZBrFwbX4_T9TYJZU2o6o7EPQhm6MsH1mcEcGC68zMWyLKsELMZz3E5CCgxhBzux93L2v_t7xc5M1I0JZ4nIT48WlDh4VgCQ-BECW-MuKWRUGPTwrX7jKBdQXhYl4w",
          "e": "AQAB",
          "use": "sig",
          "kid": "ee6071d8-d623-4b7a-8ee8-ee1843a25e81",
          "qi": "lQDbU9Q8Zhf78UWXH0b4Qk8BoB4JPePMnmn15nB_TL8LXYUc8EW3nNm_FfUNyDfN7ss3UO9u89740RxlEfRup_T9kacvV6C6x8wTZGBrxkhveccaJe6hJtIOAf4JnKnRbrlPF3vvfngPlzL2iiFkppNHw3xl67p6YOa9iLCSnJY",
          "dp": "eAbbRvfM_PLMSLqOynTjCeVmSjfjuGUNNRJ4EBzvXoUUKntcIB5tsAouYLgizr13ZGoZGLpHcdrGRGWwrfiIRbGe_Trv0D9v5MeRi3ac9mHSKxMRLHs4nEL_om1_MHjCacYK_vdYQL8fGAB-EdEesTRulpB-EQFWHOGRWcaijxU",
          "alg": "PS256",
          "dq": "e_4Q7GM-5NR2Zt3TevcX_Owmlu6yUZCd-mm3RIZLGbiGk6U1R9pnhLg47wGqxpXGH1kAf23cJ51l1FwPjoEj_ZlK6OCtsnIGujJSwQk3GDqxsLC1EjyaLIPpk-jJwMw6q0qN9Th_dY2US6LXpzlNx71OEqhB0wYJ64V_dlgU35U",
          "n": "wHTfYtnJkgv_vr6GGvkFcHZe3ciFnCHaWIuwUuTNayvlov-zrqWCju7RHL4-5nGNtkxtFtX39XZ1k_qdaL14404_HX5IlEymlxR3O5BVeGztGIxT5QqHaSFX4eYPRDjpZMEqySJQ5rP2J4qU0Eu58j6266pN2siyLd26HmgxSp8VOb7pwvbTihchbkTWww1a8eC0J01IZl1mDLjZd3qm7YDnGO5ei_99GJt1Md3Z9zM-BLGPXChiPkVQ4Zuz0-vaqCre3L-XbQp3mCrLT47osltSR0-qbl4v1RFWbX_dLIX4ZujCnFIiYnhAEnJ2dY4F75EcwMUmeWq_69mhdZxuiQ"
        }
      ]
    }
  },
  "mtls2": {
    "cert": "-----BEGIN CERTIFICATE-----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\nVTrb8FG3TIg\u003d\n-----END CERTIFICATE-----",
    "key": "-----BEGIN PRIVATE KEY-----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\nZhKITW7eOC1L8g9tf7RcHlpWNBnqCNax3dYKZGv6+YXeeTBAzeIV\n-----END PRIVATE KEY-----",
    "ca": "-----BEGIN CERTIFICATE-----\nMIIDBDCCAeygAwIBAgIEY4RxFjANBgkqhkiG9w0BAQsFADBEMQswCQYDVQQGEwJz\nYTELMAkGA1UECAwCcmgxDDAKBgNVBAoMA2VtYzEMMAoGA1UECwwDZW1jMQwwCgYD\nVQQDDANlbWMwHhcNMjIxMTI4MDgyODA2WhcNMjYxMTI4MDgyODA2WjBEMQswCQYD\nVQQGEwJzYTELMAkGA1UECAwCcmgxDDAKBgNVBAoMA2VtYzEMMAoGA1UECwwDZW1j\nMQwwCgYDVQQDDANlbWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx\no9fnOu/LUhUb1w3F8xyqolVeZyHDPnARBIxfKBzvWhY36zXz9alGtCnSYswUOH5t\n4rfeGxERKLybJ9MpGMHywOWmu8DcwEELJtcXmxq/ZXMqQDBkVnMWQM0W9szSIgJh\nX+VSX4HyzhWOS2StjPaLltPLVhdziK6bQ+D/S2rfDU1IYBP2jtlIFQnhTaATRhSM\nPvZgRW9/q0TGXsvDcEaUDwd3GTfR+qeVs8bh10K/F9wsYogGgw9v44/6achjMU1B\nyNyoQh6GTiUNHNW58kVoqt7qVWsy2FTpNkd3IQEV1hrkIR43/Wqs7qyllEc1o7WS\nLPrcuC4RGCvF8fHYBtVdAgMBAAEwDQYJKoZIhvcNAQELBQADggEBALFrVWESDWIP\nlOckn/umRf4gYOxgEhuAA33Wg3yInaA6BchF4KWWzQIp0HCFDVSU5F/vuY40LYL2\nLNnRRMaojykWLOGDjV9hjU6DMGmiWhVXE/TI5Jms7vPa/Ash+m3DCR0MTLgPwVYW\nf7jl+nsvPfcH4R2/8cO41+LcoiQwCe6dJteeU1EjXF4SlOIVEjpQGpZhA2+b6GtO\nP+ull77Tzuch+eysyELQpZAiebg+yutwvy7dURh3klsW3cz+AO6CRgjA9QJtPdHw\nQCayf17HxCzxw18Zkz83KuLt23UahmU4OE942VCwlnl0k+kxutVl11m/ZyIdLmRF\nVTrb8FG3TIg\u003d\n-----END CERTIFICATE-----"
  },
  "resource": {
    "resourceUrl": "https://openbankinguat.alahli.com:9443/consent-manager/userinfo",
    "resourceUrlAccountRequests": "https://openbankinguat.alahli.com:9443/consent-manager/open-banking/account-information/2022.11.01-final/account-access-consents"
  },
  "consent": {},
  "description": "Conformance Suite Test of SNB for Certification"
}
testName
fapi1-advanced-final-ensure-client-assertion-with-no-sub-fails
2023-03-14 09:33:34 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri
https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback
2023-03-14 09:33:34
GetDynamicServerConfiguration
HTTP request
request_uri
https://openbankinguat.alahli.com:9443/consent-manager/.well-known/openid-configuration
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2023-03-14 09:33:34 RESPONSE
GetDynamicServerConfiguration
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "x-powered-by": "Servlet/3.1",
  "content-type": "application/json",
  "content-length": "1295",
  "content-language": "en-US",
  "date": "Tue, 14 Mar 2023 09:33:34 GMT",
  "set-cookie": "NCB_Cookie\u003d!0o2MzoC4T7e+e1atEiReu2aLkBf/hiAXPESn9pvH4u5D4WBEmcSEuoAtAPoe1verUztWMcjsUKXPkhiwpIBJSThyWKaWqlxaS/9DtHXYLg\u003d\u003d; path\u003d/; Httponly; Secure"
}
response_body
{"issuer":"https://openbankinguat.alahli.com:9443/consent-manager","authorization_endpoint":"https://openbankinguat.alahli.com:9443/cap/v/1/authorize","token_endpoint":"https://openbankinguat.alahli.com:9443/consent-manager/token","userinfo_endpoint":"https://openbankinguat.alahli.com:9443/consent-manager/userinfo","jwks_uri":"https://openbankinguat.alahli.com:9443/consent-manager/jwks","pushed_authorization_request_endpoint":"https://openbankinguat.alahli.com:9443/consent-manager/open-banking/v1/par","scopes_supported":["openid","accounts","payments"],"response_types_supported":["code","code id_token"],"response_modes_supported":["form_post"],"grant_types_supported":["client_credentials","authorization_code","refresh_token"],"acr_values_supported":["urn:openbanking:psd2:sca"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["PS256"],"token_endpoint_auth_methods_supported":["private_key_jwt","tls_client_auth"],"token_endpoint_auth_signing_alg_values_supported":["PS256"],"claims_supported":["iss","aud","sub","openbanking_intent_id","psu_identifiers","auth_time","azp","refresh_token_expires_at","c_hash","s_hash","acr","iat","exp","jti"],"tls_client_certificate_bound_access_tokens":true,"request_object_signing_alg_values_supported":["none","PS256"]}
2023-03-14 09:33:34 SUCCESS
GetDynamicServerConfiguration
Successfully parsed server configuration
issuer
https://openbankinguat.alahli.com:9443/consent-manager
authorization_endpoint
https://openbankinguat.alahli.com:9443/cap/v/1/authorize
token_endpoint
https://openbankinguat.alahli.com:9443/consent-manager/token
userinfo_endpoint
https://openbankinguat.alahli.com:9443/consent-manager/userinfo
jwks_uri
https://openbankinguat.alahli.com:9443/consent-manager/jwks
pushed_authorization_request_endpoint
https://openbankinguat.alahli.com:9443/consent-manager/open-banking/v1/par
scopes_supported
[
  "openid",
  "accounts",
  "payments"
]
response_types_supported
[
  "code",
  "code id_token"
]
response_modes_supported
[
  "form_post"
]
grant_types_supported
[
  "client_credentials",
  "authorization_code",
  "refresh_token"
]
acr_values_supported
[
  "urn:openbanking:psd2:sca"
]
subject_types_supported
[
  "public"
]
id_token_signing_alg_values_supported
[
  "PS256"
]
token_endpoint_auth_methods_supported
[
  "private_key_jwt",
  "tls_client_auth"
]
token_endpoint_auth_signing_alg_values_supported
[
  "PS256"
]
claims_supported
[
  "iss",
  "aud",
  "sub",
  "openbanking_intent_id",
  "psu_identifiers",
  "auth_time",
  "azp",
  "refresh_token_expires_at",
  "c_hash",
  "s_hash",
  "acr",
  "iat",
  "exp",
  "jti"
]
tls_client_certificate_bound_access_tokens
true
request_object_signing_alg_values_supported
[
  "none",
  "PS256"
]
2023-03-14 09:33:34 SUCCESS
AddMTLSEndpointAliasesToEnvironment
Added mtls_endpoint_aliases to environment
2023-03-14 09:33:34 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2023-03-14 09:33:34
FetchServerKeys
Fetching server key
jwks_uri
https://openbankinguat.alahli.com:9443/consent-manager/jwks
2023-03-14 09:33:34
FetchServerKeys
HTTP request
request_uri
https://openbankinguat.alahli.com:9443/consent-manager/jwks
request_method
GET
request_headers
{
  "accept": "text/plain, application/json, application/*+json, */*",
  "content-length": "0"
}
request_body

                                
2023-03-14 09:33:35 RESPONSE
FetchServerKeys
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "x-powered-by": "Servlet/3.1",
  "content-type": "application/json",
  "content-length": "429",
  "content-language": "en-US",
  "date": "Tue, 14 Mar 2023 09:33:34 GMT",
  "set-cookie": "NCB_Cookie\u003d!42yMUAFIgmX1mXGtEiReu2aLkBf/hjrAGSxlGb+3L98JdUYvbIZDJ0FV/BsRhlgRKn0qe5aNN3OlF+7ISbBOIpPLh1IE8hPz9Xx4g3TXWg\u003d\u003d; path\u003d/; Httponly; Secure"
}
response_body
{"keys":[{"kty":"RSA","e":"AQAB","kid":"81f8e64f-50e6-4f6a-a11c-28ff466c4662","n":"sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"}]}
2023-03-14 09:33:35
FetchServerKeys
Found JWK set string
jwk_string
{"keys":[{"kty":"RSA","e":"AQAB","kid":"81f8e64f-50e6-4f6a-a11c-28ff466c4662","n":"sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"}]}
2023-03-14 09:33:35 SUCCESS
FetchServerKeys
Found server JWK set
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "kid": "81f8e64f-50e6-4f6a-a11c-28ff466c4662",
      "n": "sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"
    }
  ]
}
2023-03-14 09:33:35 SUCCESS
CheckServerKeysIsValid
Server JWKs is valid
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "kid": "81f8e64f-50e6-4f6a-a11c-28ff466c4662",
      "n": "sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"
    }
  ]
}
2023-03-14 09:33:35 SUCCESS
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
2023-03-14 09:33:35 SUCCESS
CheckForKeyIdInServerJWKs
All keys contain kids
2023-03-14 09:33:35 SUCCESS
EnsureServerJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
2023-03-14 09:33:35 SUCCESS
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "kid": "81f8e64f-50e6-4f6a-a11c-28ff466c4662",
      "n": "sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"
    }
  ]
}
2023-03-14 09:33:35 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
scope
openid accounts
jwks
{
  "keys": [
    {
      "p": "4IESJOF4Y6lC6UEFEejW0NYtEZN2CCh-XkeA0CXD_yvIDoYj10CN03tZgFogpHXJaTmBg1JWeEckheonsCjfEs2GW6YLQjYNxy2IqEyxcodvAyVeFw7NVQ_4maVsMcbUh9EAZS4oBIQDWS8S5uqx7jK8qrmyflpZHXp8RWLb9h0",
      "kty": "RSA",
      "q": "yjH2h2bHnRRCOiLkQKAGVf0floEabjZbDmtGI4MUysXRtWlmtso8hMJMqyRXvrU1pNts2X5TABpQSuvqTPMT24yo_u74qoiNRNG2SL5lSp8yNw-9CvpuTW3u0IzuOqLKtMUX9kbvVo_2e-i6c_f2IefBqkm-1QkzvlJlBebl-5E",
      "d": "F6c_RcUqAby5emJgH3AzuE-MKb2v1lLIKCyFIImZ7IvQUENkc9pHHq6Sqfc1w4d3k8oWQnfUCWZg9Cfs892DMfs65_rTDtbahKBdZJ_LQ9jokCz3ouaOJM8nm1r1YOzCoddpCu4wU3zP48PrkWXeCNXI2bnvWa33y7eT0oVNUXx_ybMtildjCT0ehYyCJBY-5oKq3U2STubENY0-jXAVzxHKKY-pbMGonZSOkTLVXcFVHvJNL4yQHT0R-55bhObv9fN7UB-AyFAsHT98MrDlcrCXp4F-WbVLsQpOUh3VldeWRLlkezG7FPNBNU78jMRGo1JiH2HNHyF7boEZ4wdHcQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "04b7dcd7-e883-4ef8-bf42-36fc61fdba99",
      "qi": "aQSQIIiRGVKoVrShQohQXBdtBRsNB8Gd1nIYTL_pokcst4lRCP9SwbDjyVoh4oH0vDtCllqMA4-f7u6Ovw7zv6pyO0pjxmBvv_F__5L9vZowUMlfVk1cY7ZkRCDrEl-85wsvHaS6Cdiz4G9g-wXGKxw6rB0Eb6XQz_XKdrb0AnQ",
      "dp": "mzNfUbO1QGBw60ORt7HZX4HQokfo3vbvdUnFGSAigLLJmJDPEi2EXmD1nK-xxT_QPzgL-rbfJEM6UoFvcm6u2BbQ_WaqfdlUaQ9nW8G5Ik3SRsB8bUBEXrutxrn_M-IaZtHrjgb8jzKcBflu_cfdvafBmdzKMmNPG_vjESyol1k",
      "alg": "PS256",
      "dq": "T5LaMu-AH5GZfse8jLJty-mSROkKPdWmgEY3lEJCLIstvPd-NPHiX10YT0I-Rg-KzRaOAAp3H9M7RkESNLZ1WjJBUBM8SeDzt-HQm1BTDMsaOBE5lNh6EH7zPaA5IVpv7DSk-YdxKd_-YUV2G626cB2FWj8rmyvD8WL73xa_7AE",
      "n": "sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"
    }
  ]
}
2023-03-14 09:33:35 SUCCESS
ValidateMTLSCertificatesHeader
MTLS certificates header is valid
2023-03-14 09:33:35 SUCCESS
ExtractMTLSCertificatesFromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
ca
MIIDQDCCAiigAwIBAgIEYq9IEDANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJTQTEPMA0GA1UECAwGUml5YWRoMQ8wDQYDVQQHDAZlTWNSRVkxDzANBgNVBAoMBmVNY1JFWTEPMA0GA1UECwwGZU1jUkVZMQ8wDQYDVQQDDAZlTWNSRVkwHhcNMjIwNjE5MTYwMDE2WhcNMjYwNjE5MTYwMDE2WjBiMQswCQYDVQQGEwJTQTEPMA0GA1UECAwGUml5YWRoMQ8wDQYDVQQHDAZlTWNSRVkxDzANBgNVBAoMBmVNY1JFWTEPMA0GA1UECwwGZU1jUkVZMQ8wDQYDVQQDDAZlTWNSRVkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCRq6L6HV8fbWiqomUAwrxdJMM3B7d7T5BDlkwyX95QShLMvwsPEYp+MI3yC6RmqCfucRWAEGP3OaN+e7KjO/DDF9Y2eTkuez8H8uS60d3PbNZfCb9TBkSPUTqIdwBVubaAuAhOt05Xh9X5lnE1YLpq9U09QVfPKFedp1iCr4H8pSuy535kXyhSz6n7/6/W91oeBSDAxwO3Oy/vaBbBSFGfw3jr6oE3taXSpo9nLUwuNHwb3cl7p/ZASAVuXAFPUFh3+DNIKZVFoZY9kXqHoT5Mde6k3+Le4K5ibEmM5wRWMZLyY/2vS+u8oWJrjkVGHNuUiKsqbZrFVmX9o1C2cjAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAMHre8SHuNS3UQD8wRCtQa/s1NQTy7s3sNd26svt6+X8dExRQ6oi31+AhKBIvFknyHyieNjPSB6yDC3+75nZhK4G1EVoO5hVErE8G6jlXE1P6YtrtxWdXTDaxXrg/7ebQD/6ZKTmhGEP70/LWgSgIIUaWx4zwwbznEl3kGhbNOIqUrcKX/ugNq+4cC4rET8HkV5A9F9YiKoG9NCOpwQVYMu1DK1ucs2bqJXnM+Flwe1D/cKI5i3xvDxMVl61KZIwFegxL66QavAn4lS6aRvwWd0z92PYqnpQ6GJT/cARi+uG50jy+DbikjNGAU4QLofXX0i4VmdT8WWgYRucbo6GoSQ=
2023-03-14 09:33:35 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2023-03-14 09:33:35 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "p": "4IESJOF4Y6lC6UEFEejW0NYtEZN2CCh-XkeA0CXD_yvIDoYj10CN03tZgFogpHXJaTmBg1JWeEckheonsCjfEs2GW6YLQjYNxy2IqEyxcodvAyVeFw7NVQ_4maVsMcbUh9EAZS4oBIQDWS8S5uqx7jK8qrmyflpZHXp8RWLb9h0",
      "kty": "RSA",
      "q": "yjH2h2bHnRRCOiLkQKAGVf0floEabjZbDmtGI4MUysXRtWlmtso8hMJMqyRXvrU1pNts2X5TABpQSuvqTPMT24yo_u74qoiNRNG2SL5lSp8yNw-9CvpuTW3u0IzuOqLKtMUX9kbvVo_2e-i6c_f2IefBqkm-1QkzvlJlBebl-5E",
      "d": "F6c_RcUqAby5emJgH3AzuE-MKb2v1lLIKCyFIImZ7IvQUENkc9pHHq6Sqfc1w4d3k8oWQnfUCWZg9Cfs892DMfs65_rTDtbahKBdZJ_LQ9jokCz3ouaOJM8nm1r1YOzCoddpCu4wU3zP48PrkWXeCNXI2bnvWa33y7eT0oVNUXx_ybMtildjCT0ehYyCJBY-5oKq3U2STubENY0-jXAVzxHKKY-pbMGonZSOkTLVXcFVHvJNL4yQHT0R-55bhObv9fN7UB-AyFAsHT98MrDlcrCXp4F-WbVLsQpOUh3VldeWRLlkezG7FPNBNU78jMRGo1JiH2HNHyF7boEZ4wdHcQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "04b7dcd7-e883-4ef8-bf42-36fc61fdba99",
      "qi": "aQSQIIiRGVKoVrShQohQXBdtBRsNB8Gd1nIYTL_pokcst4lRCP9SwbDjyVoh4oH0vDtCllqMA4-f7u6Ovw7zv6pyO0pjxmBvv_F__5L9vZowUMlfVk1cY7ZkRCDrEl-85wsvHaS6Cdiz4G9g-wXGKxw6rB0Eb6XQz_XKdrb0AnQ",
      "dp": "mzNfUbO1QGBw60ORt7HZX4HQokfo3vbvdUnFGSAigLLJmJDPEi2EXmD1nK-xxT_QPzgL-rbfJEM6UoFvcm6u2BbQ_WaqfdlUaQ9nW8G5Ik3SRsB8bUBEXrutxrn_M-IaZtHrjgb8jzKcBflu_cfdvafBmdzKMmNPG_vjESyol1k",
      "alg": "PS256",
      "dq": "T5LaMu-AH5GZfse8jLJty-mSROkKPdWmgEY3lEJCLIstvPd-NPHiX10YT0I-Rg-KzRaOAAp3H9M7RkESNLZ1WjJBUBM8SeDzt-HQm1BTDMsaOBE5lNh6EH7zPaA5IVpv7DSk-YdxKd_-YUV2G626cB2FWj8rmyvD8WL73xa_7AE",
      "n": "sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "04b7dcd7-e883-4ef8-bf42-36fc61fdba99",
      "alg": "PS256",
      "n": "sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"
    }
  ]
}
2023-03-14 09:33:35 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2023-03-14 09:33:35 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2023-03-14 09:33:35 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "PS256",
  "ES256"
]
2023-03-14 09:33:35 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "4IESJOF4Y6lC6UEFEejW0NYtEZN2CCh-XkeA0CXD_yvIDoYj10CN03tZgFogpHXJaTmBg1JWeEckheonsCjfEs2GW6YLQjYNxy2IqEyxcodvAyVeFw7NVQ_4maVsMcbUh9EAZS4oBIQDWS8S5uqx7jK8qrmyflpZHXp8RWLb9h0",
      "kty": "RSA",
      "q": "yjH2h2bHnRRCOiLkQKAGVf0floEabjZbDmtGI4MUysXRtWlmtso8hMJMqyRXvrU1pNts2X5TABpQSuvqTPMT24yo_u74qoiNRNG2SL5lSp8yNw-9CvpuTW3u0IzuOqLKtMUX9kbvVo_2e-i6c_f2IefBqkm-1QkzvlJlBebl-5E",
      "d": "F6c_RcUqAby5emJgH3AzuE-MKb2v1lLIKCyFIImZ7IvQUENkc9pHHq6Sqfc1w4d3k8oWQnfUCWZg9Cfs892DMfs65_rTDtbahKBdZJ_LQ9jokCz3ouaOJM8nm1r1YOzCoddpCu4wU3zP48PrkWXeCNXI2bnvWa33y7eT0oVNUXx_ybMtildjCT0ehYyCJBY-5oKq3U2STubENY0-jXAVzxHKKY-pbMGonZSOkTLVXcFVHvJNL4yQHT0R-55bhObv9fN7UB-AyFAsHT98MrDlcrCXp4F-WbVLsQpOUh3VldeWRLlkezG7FPNBNU78jMRGo1JiH2HNHyF7boEZ4wdHcQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "04b7dcd7-e883-4ef8-bf42-36fc61fdba99",
      "qi": "aQSQIIiRGVKoVrShQohQXBdtBRsNB8Gd1nIYTL_pokcst4lRCP9SwbDjyVoh4oH0vDtCllqMA4-f7u6Ovw7zv6pyO0pjxmBvv_F__5L9vZowUMlfVk1cY7ZkRCDrEl-85wsvHaS6Cdiz4G9g-wXGKxw6rB0Eb6XQz_XKdrb0AnQ",
      "dp": "mzNfUbO1QGBw60ORt7HZX4HQokfo3vbvdUnFGSAigLLJmJDPEi2EXmD1nK-xxT_QPzgL-rbfJEM6UoFvcm6u2BbQ_WaqfdlUaQ9nW8G5Ik3SRsB8bUBEXrutxrn_M-IaZtHrjgb8jzKcBflu_cfdvafBmdzKMmNPG_vjESyol1k",
      "alg": "PS256",
      "dq": "T5LaMu-AH5GZfse8jLJty-mSROkKPdWmgEY3lEJCLIstvPd-NPHiX10YT0I-Rg-KzRaOAAp3H9M7RkESNLZ1WjJBUBM8SeDzt-HQm1BTDMsaOBE5lNh6EH7zPaA5IVpv7DSk-YdxKd_-YUV2G626cB2FWj8rmyvD8WL73xa_7AE",
      "n": "sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"
    }
  ]
}
2023-03-14 09:33:35 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
Verify configuration of second client
2023-03-14 09:33:35 SUCCESS
GetStaticClient2Configuration
Found a static second client object
client_id
12de8761-7107-4f0b-a16a-3c7e90e3b1c6
scope
openid accounts
jwks
{
  "keys": [
    {
      "p": "_DwdmXsVIri1WF3W1Tq89PRchs5748SdO4tHryKOCnH-QZFuqrs9zL48A4i0pnoZVNeTZ3mju-r8h3HuRCShNN0mp3FW5Ewc_swOq15SnyR30rr3R04TI4ITcz6dGZg7QW2PpWTY2D9vtviUbyxp8hIXLGbxlMm7hhzp0Hy-bPs",
      "kty": "RSA",
      "q": "w1RSUzJxQBqN0ql7tBsLaKXr3CUgO-E6vF7fm_Pvzc8xHmKJTfaq137on8MdjQfLdKEGcHPCDh0Nu7UMmx98D2RLL2RhWAGhup542g6Y1qWXb2G3h3_JgtMz5d_QmlGRdGVR2meUq4ryPF-Sk_Y7_cElf99wOVmpvKCZ9fqts0s",
      "d": "CYohgoRaFferSxiljBO43cy4QhUM7mLNMGNoL4uw1PWdkdlL3kXM9WnICr0xX_nT9OvP4nhjrJKdHGMpR0ZRBi9cOImIbnVoMofsqxKp8eiwTe2ywOEnOiJReVyOeCq8AucCSGr_iJf2BRq86qA-TNAoAAF2j3gwQM7DSXuPqeunkddc-yGSLLXP-mVbSiXHyv49VCsdYoGapnMBlDQjyG3YHZBrFwbX4_T9TYJZU2o6o7EPQhm6MsH1mcEcGC68zMWyLKsELMZz3E5CCgxhBzux93L2v_t7xc5M1I0JZ4nIT48WlDh4VgCQ-BECW-MuKWRUGPTwrX7jKBdQXhYl4w",
      "e": "AQAB",
      "use": "sig",
      "kid": "ee6071d8-d623-4b7a-8ee8-ee1843a25e81",
      "qi": "lQDbU9Q8Zhf78UWXH0b4Qk8BoB4JPePMnmn15nB_TL8LXYUc8EW3nNm_FfUNyDfN7ss3UO9u89740RxlEfRup_T9kacvV6C6x8wTZGBrxkhveccaJe6hJtIOAf4JnKnRbrlPF3vvfngPlzL2iiFkppNHw3xl67p6YOa9iLCSnJY",
      "dp": "eAbbRvfM_PLMSLqOynTjCeVmSjfjuGUNNRJ4EBzvXoUUKntcIB5tsAouYLgizr13ZGoZGLpHcdrGRGWwrfiIRbGe_Trv0D9v5MeRi3ac9mHSKxMRLHs4nEL_om1_MHjCacYK_vdYQL8fGAB-EdEesTRulpB-EQFWHOGRWcaijxU",
      "alg": "PS256",
      "dq": "e_4Q7GM-5NR2Zt3TevcX_Owmlu6yUZCd-mm3RIZLGbiGk6U1R9pnhLg47wGqxpXGH1kAf23cJ51l1FwPjoEj_ZlK6OCtsnIGujJSwQk3GDqxsLC1EjyaLIPpk-jJwMw6q0qN9Th_dY2US6LXpzlNx71OEqhB0wYJ64V_dlgU35U",
      "n": "wHTfYtnJkgv_vr6GGvkFcHZe3ciFnCHaWIuwUuTNayvlov-zrqWCju7RHL4-5nGNtkxtFtX39XZ1k_qdaL14404_HX5IlEymlxR3O5BVeGztGIxT5QqHaSFX4eYPRDjpZMEqySJQ5rP2J4qU0Eu58j6266pN2siyLd26HmgxSp8VOb7pwvbTihchbkTWww1a8eC0J01IZl1mDLjZd3qm7YDnGO5ei_99GJt1Md3Z9zM-BLGPXChiPkVQ4Zuz0-vaqCre3L-XbQp3mCrLT47osltSR0-qbl4v1RFWbX_dLIX4ZujCnFIiYnhAEnJ2dY4F75EcwMUmeWq_69mhdZxuiQ"
    }
  ]
}
2023-03-14 09:33:35 SUCCESS
ValidateMTLSCertificates2Header
MTLS certificates header is valid
2023-03-14 09:33:35 SUCCESS
ExtractMTLSCertificates2FromConfiguration
Mutual TLS authentication credentials loaded
cert
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
key
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
ca
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
2023-03-14 09:33:35 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2023-03-14 09:33:35 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "p": "_DwdmXsVIri1WF3W1Tq89PRchs5748SdO4tHryKOCnH-QZFuqrs9zL48A4i0pnoZVNeTZ3mju-r8h3HuRCShNN0mp3FW5Ewc_swOq15SnyR30rr3R04TI4ITcz6dGZg7QW2PpWTY2D9vtviUbyxp8hIXLGbxlMm7hhzp0Hy-bPs",
      "kty": "RSA",
      "q": "w1RSUzJxQBqN0ql7tBsLaKXr3CUgO-E6vF7fm_Pvzc8xHmKJTfaq137on8MdjQfLdKEGcHPCDh0Nu7UMmx98D2RLL2RhWAGhup542g6Y1qWXb2G3h3_JgtMz5d_QmlGRdGVR2meUq4ryPF-Sk_Y7_cElf99wOVmpvKCZ9fqts0s",
      "d": "CYohgoRaFferSxiljBO43cy4QhUM7mLNMGNoL4uw1PWdkdlL3kXM9WnICr0xX_nT9OvP4nhjrJKdHGMpR0ZRBi9cOImIbnVoMofsqxKp8eiwTe2ywOEnOiJReVyOeCq8AucCSGr_iJf2BRq86qA-TNAoAAF2j3gwQM7DSXuPqeunkddc-yGSLLXP-mVbSiXHyv49VCsdYoGapnMBlDQjyG3YHZBrFwbX4_T9TYJZU2o6o7EPQhm6MsH1mcEcGC68zMWyLKsELMZz3E5CCgxhBzux93L2v_t7xc5M1I0JZ4nIT48WlDh4VgCQ-BECW-MuKWRUGPTwrX7jKBdQXhYl4w",
      "e": "AQAB",
      "use": "sig",
      "kid": "ee6071d8-d623-4b7a-8ee8-ee1843a25e81",
      "qi": "lQDbU9Q8Zhf78UWXH0b4Qk8BoB4JPePMnmn15nB_TL8LXYUc8EW3nNm_FfUNyDfN7ss3UO9u89740RxlEfRup_T9kacvV6C6x8wTZGBrxkhveccaJe6hJtIOAf4JnKnRbrlPF3vvfngPlzL2iiFkppNHw3xl67p6YOa9iLCSnJY",
      "dp": "eAbbRvfM_PLMSLqOynTjCeVmSjfjuGUNNRJ4EBzvXoUUKntcIB5tsAouYLgizr13ZGoZGLpHcdrGRGWwrfiIRbGe_Trv0D9v5MeRi3ac9mHSKxMRLHs4nEL_om1_MHjCacYK_vdYQL8fGAB-EdEesTRulpB-EQFWHOGRWcaijxU",
      "alg": "PS256",
      "dq": "e_4Q7GM-5NR2Zt3TevcX_Owmlu6yUZCd-mm3RIZLGbiGk6U1R9pnhLg47wGqxpXGH1kAf23cJ51l1FwPjoEj_ZlK6OCtsnIGujJSwQk3GDqxsLC1EjyaLIPpk-jJwMw6q0qN9Th_dY2US6LXpzlNx71OEqhB0wYJ64V_dlgU35U",
      "n": "wHTfYtnJkgv_vr6GGvkFcHZe3ciFnCHaWIuwUuTNayvlov-zrqWCju7RHL4-5nGNtkxtFtX39XZ1k_qdaL14404_HX5IlEymlxR3O5BVeGztGIxT5QqHaSFX4eYPRDjpZMEqySJQ5rP2J4qU0Eu58j6266pN2siyLd26HmgxSp8VOb7pwvbTihchbkTWww1a8eC0J01IZl1mDLjZd3qm7YDnGO5ei_99GJt1Md3Z9zM-BLGPXChiPkVQ4Zuz0-vaqCre3L-XbQp3mCrLT47osltSR0-qbl4v1RFWbX_dLIX4ZujCnFIiYnhAEnJ2dY4F75EcwMUmeWq_69mhdZxuiQ"
    }
  ]
}
public_client_jwks
{
  "keys": [
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "ee6071d8-d623-4b7a-8ee8-ee1843a25e81",
      "alg": "PS256",
      "n": "wHTfYtnJkgv_vr6GGvkFcHZe3ciFnCHaWIuwUuTNayvlov-zrqWCju7RHL4-5nGNtkxtFtX39XZ1k_qdaL14404_HX5IlEymlxR3O5BVeGztGIxT5QqHaSFX4eYPRDjpZMEqySJQ5rP2J4qU0Eu58j6266pN2siyLd26HmgxSp8VOb7pwvbTihchbkTWww1a8eC0J01IZl1mDLjZd3qm7YDnGO5ei_99GJt1Md3Z9zM-BLGPXChiPkVQ4Zuz0-vaqCre3L-XbQp3mCrLT47osltSR0-qbl4v1RFWbX_dLIX4ZujCnFIiYnhAEnJ2dY4F75EcwMUmeWq_69mhdZxuiQ"
    }
  ]
}
2023-03-14 09:33:35 SUCCESS
CheckForKeyIdInClientJWKs
All keys contain kids
2023-03-14 09:33:35 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2023-03-14 09:33:35 SUCCESS
FAPICheckKeyAlgInClientJWKs
Keys in client JWKS all have permitted 'alg'
permitted
[
  "PS256",
  "ES256"
]
2023-03-14 09:33:35 SUCCESS
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "p": "_DwdmXsVIri1WF3W1Tq89PRchs5748SdO4tHryKOCnH-QZFuqrs9zL48A4i0pnoZVNeTZ3mju-r8h3HuRCShNN0mp3FW5Ewc_swOq15SnyR30rr3R04TI4ITcz6dGZg7QW2PpWTY2D9vtviUbyxp8hIXLGbxlMm7hhzp0Hy-bPs",
      "kty": "RSA",
      "q": "w1RSUzJxQBqN0ql7tBsLaKXr3CUgO-E6vF7fm_Pvzc8xHmKJTfaq137on8MdjQfLdKEGcHPCDh0Nu7UMmx98D2RLL2RhWAGhup542g6Y1qWXb2G3h3_JgtMz5d_QmlGRdGVR2meUq4ryPF-Sk_Y7_cElf99wOVmpvKCZ9fqts0s",
      "d": "CYohgoRaFferSxiljBO43cy4QhUM7mLNMGNoL4uw1PWdkdlL3kXM9WnICr0xX_nT9OvP4nhjrJKdHGMpR0ZRBi9cOImIbnVoMofsqxKp8eiwTe2ywOEnOiJReVyOeCq8AucCSGr_iJf2BRq86qA-TNAoAAF2j3gwQM7DSXuPqeunkddc-yGSLLXP-mVbSiXHyv49VCsdYoGapnMBlDQjyG3YHZBrFwbX4_T9TYJZU2o6o7EPQhm6MsH1mcEcGC68zMWyLKsELMZz3E5CCgxhBzux93L2v_t7xc5M1I0JZ4nIT48WlDh4VgCQ-BECW-MuKWRUGPTwrX7jKBdQXhYl4w",
      "e": "AQAB",
      "use": "sig",
      "kid": "ee6071d8-d623-4b7a-8ee8-ee1843a25e81",
      "qi": "lQDbU9Q8Zhf78UWXH0b4Qk8BoB4JPePMnmn15nB_TL8LXYUc8EW3nNm_FfUNyDfN7ss3UO9u89740RxlEfRup_T9kacvV6C6x8wTZGBrxkhveccaJe6hJtIOAf4JnKnRbrlPF3vvfngPlzL2iiFkppNHw3xl67p6YOa9iLCSnJY",
      "dp": "eAbbRvfM_PLMSLqOynTjCeVmSjfjuGUNNRJ4EBzvXoUUKntcIB5tsAouYLgizr13ZGoZGLpHcdrGRGWwrfiIRbGe_Trv0D9v5MeRi3ac9mHSKxMRLHs4nEL_om1_MHjCacYK_vdYQL8fGAB-EdEesTRulpB-EQFWHOGRWcaijxU",
      "alg": "PS256",
      "dq": "e_4Q7GM-5NR2Zt3TevcX_Owmlu6yUZCd-mm3RIZLGbiGk6U1R9pnhLg47wGqxpXGH1kAf23cJ51l1FwPjoEj_ZlK6OCtsnIGujJSwQk3GDqxsLC1EjyaLIPpk-jJwMw6q0qN9Th_dY2US6LXpzlNx71OEqhB0wYJ64V_dlgU35U",
      "n": "wHTfYtnJkgv_vr6GGvkFcHZe3ciFnCHaWIuwUuTNayvlov-zrqWCju7RHL4-5nGNtkxtFtX39XZ1k_qdaL14404_HX5IlEymlxR3O5BVeGztGIxT5QqHaSFX4eYPRDjpZMEqySJQ5rP2J4qU0Eu58j6266pN2siyLd26HmgxSp8VOb7pwvbTihchbkTWww1a8eC0J01IZl1mDLjZd3qm7YDnGO5ei_99GJt1Md3Z9zM-BLGPXChiPkVQ4Zuz0-vaqCre3L-XbQp3mCrLT47osltSR0-qbl4v1RFWbX_dLIX4ZujCnFIiYnhAEnJ2dY4F75EcwMUmeWq_69mhdZxuiQ"
    }
  ]
}
2023-03-14 09:33:35 SUCCESS
ValidateMTLSCertificatesAsX509
Mutual TLS authentication cert validated as X.509
2023-03-14 09:33:35 SUCCESS
ValidateClientPrivateKeysAreDifferent
Client signing JWKs have different thumbprints
jwk1
{
  "p": "4IESJOF4Y6lC6UEFEejW0NYtEZN2CCh-XkeA0CXD_yvIDoYj10CN03tZgFogpHXJaTmBg1JWeEckheonsCjfEs2GW6YLQjYNxy2IqEyxcodvAyVeFw7NVQ_4maVsMcbUh9EAZS4oBIQDWS8S5uqx7jK8qrmyflpZHXp8RWLb9h0",
  "kty": "RSA",
  "q": "yjH2h2bHnRRCOiLkQKAGVf0floEabjZbDmtGI4MUysXRtWlmtso8hMJMqyRXvrU1pNts2X5TABpQSuvqTPMT24yo_u74qoiNRNG2SL5lSp8yNw-9CvpuTW3u0IzuOqLKtMUX9kbvVo_2e-i6c_f2IefBqkm-1QkzvlJlBebl-5E",
  "d": "F6c_RcUqAby5emJgH3AzuE-MKb2v1lLIKCyFIImZ7IvQUENkc9pHHq6Sqfc1w4d3k8oWQnfUCWZg9Cfs892DMfs65_rTDtbahKBdZJ_LQ9jokCz3ouaOJM8nm1r1YOzCoddpCu4wU3zP48PrkWXeCNXI2bnvWa33y7eT0oVNUXx_ybMtildjCT0ehYyCJBY-5oKq3U2STubENY0-jXAVzxHKKY-pbMGonZSOkTLVXcFVHvJNL4yQHT0R-55bhObv9fN7UB-AyFAsHT98MrDlcrCXp4F-WbVLsQpOUh3VldeWRLlkezG7FPNBNU78jMRGo1JiH2HNHyF7boEZ4wdHcQ",
  "e": "AQAB",
  "use": "sig",
  "kid": "04b7dcd7-e883-4ef8-bf42-36fc61fdba99",
  "qi": "aQSQIIiRGVKoVrShQohQXBdtBRsNB8Gd1nIYTL_pokcst4lRCP9SwbDjyVoh4oH0vDtCllqMA4-f7u6Ovw7zv6pyO0pjxmBvv_F__5L9vZowUMlfVk1cY7ZkRCDrEl-85wsvHaS6Cdiz4G9g-wXGKxw6rB0Eb6XQz_XKdrb0AnQ",
  "dp": "mzNfUbO1QGBw60ORt7HZX4HQokfo3vbvdUnFGSAigLLJmJDPEi2EXmD1nK-xxT_QPzgL-rbfJEM6UoFvcm6u2BbQ_WaqfdlUaQ9nW8G5Ik3SRsB8bUBEXrutxrn_M-IaZtHrjgb8jzKcBflu_cfdvafBmdzKMmNPG_vjESyol1k",
  "alg": "PS256",
  "dq": "T5LaMu-AH5GZfse8jLJty-mSROkKPdWmgEY3lEJCLIstvPd-NPHiX10YT0I-Rg-KzRaOAAp3H9M7RkESNLZ1WjJBUBM8SeDzt-HQm1BTDMsaOBE5lNh6EH7zPaA5IVpv7DSk-YdxKd_-YUV2G626cB2FWj8rmyvD8WL73xa_7AE",
  "n": "sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"
}
jwk2
{
  "p": "_DwdmXsVIri1WF3W1Tq89PRchs5748SdO4tHryKOCnH-QZFuqrs9zL48A4i0pnoZVNeTZ3mju-r8h3HuRCShNN0mp3FW5Ewc_swOq15SnyR30rr3R04TI4ITcz6dGZg7QW2PpWTY2D9vtviUbyxp8hIXLGbxlMm7hhzp0Hy-bPs",
  "kty": "RSA",
  "q": "w1RSUzJxQBqN0ql7tBsLaKXr3CUgO-E6vF7fm_Pvzc8xHmKJTfaq137on8MdjQfLdKEGcHPCDh0Nu7UMmx98D2RLL2RhWAGhup542g6Y1qWXb2G3h3_JgtMz5d_QmlGRdGVR2meUq4ryPF-Sk_Y7_cElf99wOVmpvKCZ9fqts0s",
  "d": "CYohgoRaFferSxiljBO43cy4QhUM7mLNMGNoL4uw1PWdkdlL3kXM9WnICr0xX_nT9OvP4nhjrJKdHGMpR0ZRBi9cOImIbnVoMofsqxKp8eiwTe2ywOEnOiJReVyOeCq8AucCSGr_iJf2BRq86qA-TNAoAAF2j3gwQM7DSXuPqeunkddc-yGSLLXP-mVbSiXHyv49VCsdYoGapnMBlDQjyG3YHZBrFwbX4_T9TYJZU2o6o7EPQhm6MsH1mcEcGC68zMWyLKsELMZz3E5CCgxhBzux93L2v_t7xc5M1I0JZ4nIT48WlDh4VgCQ-BECW-MuKWRUGPTwrX7jKBdQXhYl4w",
  "e": "AQAB",
  "use": "sig",
  "kid": "ee6071d8-d623-4b7a-8ee8-ee1843a25e81",
  "qi": "lQDbU9Q8Zhf78UWXH0b4Qk8BoB4JPePMnmn15nB_TL8LXYUc8EW3nNm_FfUNyDfN7ss3UO9u89740RxlEfRup_T9kacvV6C6x8wTZGBrxkhveccaJe6hJtIOAf4JnKnRbrlPF3vvfngPlzL2iiFkppNHw3xl67p6YOa9iLCSnJY",
  "dp": "eAbbRvfM_PLMSLqOynTjCeVmSjfjuGUNNRJ4EBzvXoUUKntcIB5tsAouYLgizr13ZGoZGLpHcdrGRGWwrfiIRbGe_Trv0D9v5MeRi3ac9mHSKxMRLHs4nEL_om1_MHjCacYK_vdYQL8fGAB-EdEesTRulpB-EQFWHOGRWcaijxU",
  "alg": "PS256",
  "dq": "e_4Q7GM-5NR2Zt3TevcX_Owmlu6yUZCd-mm3RIZLGbiGk6U1R9pnhLg47wGqxpXGH1kAf23cJ51l1FwPjoEj_ZlK6OCtsnIGujJSwQk3GDqxsLC1EjyaLIPpk-jJwMw6q0qN9Th_dY2US6LXpzlNx71OEqhB0wYJ64V_dlgU35U",
  "n": "wHTfYtnJkgv_vr6GGvkFcHZe3ciFnCHaWIuwUuTNayvlov-zrqWCju7RHL4-5nGNtkxtFtX39XZ1k_qdaL14404_HX5IlEymlxR3O5BVeGztGIxT5QqHaSFX4eYPRDjpZMEqySJQ5rP2J4qU0Eu58j6266pN2siyLd26HmgxSp8VOb7pwvbTihchbkTWww1a8eC0J01IZl1mDLjZd3qm7YDnGO5ei_99GJt1Md3Z9zM-BLGPXChiPkVQ4Zuz0-vaqCre3L-XbQp3mCrLT47osltSR0-qbl4v1RFWbX_dLIX4ZujCnFIiYnhAEnJ2dY4F75EcwMUmeWq_69mhdZxuiQ"
}
2023-03-14 09:33:35 SUCCESS
GetResourceEndpointConfiguration
Found a resource endpoint object
resourceUrl
https://openbankinguat.alahli.com:9443/consent-manager/userinfo
resourceUrlAccountRequests
https://openbankinguat.alahli.com:9443/consent-manager/open-banking/account-information/2022.11.01-final/account-access-consents
2023-03-14 09:33:35 SUCCESS
SetProtectedResourceUrlToSingleResourceEndpoint
Set protected resource URL
protected_resource_url
https://openbankinguat.alahli.com:9443/consent-manager/userinfo
2023-03-14 09:33:35 SUCCESS
ExtractTLSTestValuesFromResourceConfiguration
Extracted TLS information from resource endpoint
resource_endpoint
{
  "testHost": "openbankinguat.alahli.com",
  "testPort": 9443
}
2023-03-14 09:33:35 SUCCESS
ExtractTLSTestValuesFromOBResourceConfiguration
Extracted TLS information from resource endpoint
accounts_resource_endpoint
{
  "testHost": "openbankinguat.alahli.com",
  "testPort": 9443
}
accounts_request_endpoint
{
  "testHost": "openbankinguat.alahli.com",
  "testPort": 9443
}
2023-03-14 09:33:35
fapi1-advanced-final-ensure-client-assertion-with-no-sub-fails
Setup Done
Use client_credentials grant to obtain OpenBanking KSA consent scope
2023-03-14 09:33:35 SUCCESS
CreateTokenEndpointRequestForClientCredentialsGrant
Created token endpoint request
grant_type
client_credentials
scope
openid accounts
2023-03-14 09:33:35 SUCCESS
SetAccountScopeOnTokenEndpointRequest
Set scope parameter to accounts for OB testing
grant_type
client_credentials
scope
accounts
2023-03-14 09:33:35 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
sub
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
aud
https://openbankinguat.alahli.com:9443/consent-manager/token
jti
uhNthyveAykTmePmKmnP
iat
1678786415
exp
1678786475
2023-03-14 09:33:35 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJhdWQiOiJodHRwczpcL1wvb3BlbmJhbmtpbmd1YXQuYWxhaGxpLmNvbTo5NDQzXC9jb25zZW50LW1hbmFnZXJcL3Rva2VuIiwiaXNzIjoiZGFmNjdmZmUtMGQzMi00NjQyLWE2ZWItMDhlNTg4MGNmNGUyIiwiZXhwIjoxNjc4Nzg2NDc1LCJpYXQiOjE2Nzg3ODY0MTUsImp0aSI6InVoTnRoeXZlQXlrVG1lUG1LbW5QIn0.CiP0Bml2blvjcTLqN0qvrCre06mGgf4Y-cTn3WWYCZC2p7k6r2p4UfJsf3xAM75MGCwdFnr9l2P0m9c11OCygud2og08MgCHfvn-IhFpwS8w7pZmWWq7y7zYRh2e1uAhMdQprnalu0QtuuGYe0Ltfi6putYT5g5DP57R8zdOezS_FbA2Up_cox4-W1U4d_-uJnjFf-z4xGeUD6J0zJvFWtrgDblA3B74LT4HHXewAThEM75jOL7hM_kJaSMHEDkUzI1PPzm11GdcGzCNZBQHEqIAsLkOiKmXNf5NxCcDE3oI7uuNX_-zSS12RvonLLa2_pge3ecj9zpD7DGHQi-e2w
2023-03-14 09:33:35
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
client_credentials
scope
accounts
client_assertion
eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJhdWQiOiJodHRwczpcL1wvb3BlbmJhbmtpbmd1YXQuYWxhaGxpLmNvbTo5NDQzXC9jb25zZW50LW1hbmFnZXJcL3Rva2VuIiwiaXNzIjoiZGFmNjdmZmUtMGQzMi00NjQyLWE2ZWItMDhlNTg4MGNmNGUyIiwiZXhwIjoxNjc4Nzg2NDc1LCJpYXQiOjE2Nzg3ODY0MTUsImp0aSI6InVoTnRoeXZlQXlrVG1lUG1LbW5QIn0.CiP0Bml2blvjcTLqN0qvrCre06mGgf4Y-cTn3WWYCZC2p7k6r2p4UfJsf3xAM75MGCwdFnr9l2P0m9c11OCygud2og08MgCHfvn-IhFpwS8w7pZmWWq7y7zYRh2e1uAhMdQprnalu0QtuuGYe0Ltfi6putYT5g5DP57R8zdOezS_FbA2Up_cox4-W1U4d_-uJnjFf-z4xGeUD6J0zJvFWtrgDblA3B74LT4HHXewAThEM75jOL7hM_kJaSMHEDkUzI1PPzm11GdcGzCNZBQHEqIAsLkOiKmXNf5NxCcDE3oI7uuNX_-zSS12RvonLLa2_pge3ecj9zpD7DGHQi-e2w
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2023-03-14 09:33:35
CallTokenEndpoint
HTTP request
request_uri
https://openbankinguat.alahli.com:9443/consent-manager/token
request_method
POST
request_headers
{
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "876"
}
request_body
grant_type=client_credentials&scope=accounts&client_assertion=eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJhdWQiOiJodHRwczpcL1wvb3BlbmJhbmtpbmd1YXQuYWxhaGxpLmNvbTo5NDQzXC9jb25zZW50LW1hbmFnZXJcL3Rva2VuIiwiaXNzIjoiZGFmNjdmZmUtMGQzMi00NjQyLWE2ZWItMDhlNTg4MGNmNGUyIiwiZXhwIjoxNjc4Nzg2NDc1LCJpYXQiOjE2Nzg3ODY0MTUsImp0aSI6InVoTnRoeXZlQXlrVG1lUG1LbW5QIn0.CiP0Bml2blvjcTLqN0qvrCre06mGgf4Y-cTn3WWYCZC2p7k6r2p4UfJsf3xAM75MGCwdFnr9l2P0m9c11OCygud2og08MgCHfvn-IhFpwS8w7pZmWWq7y7zYRh2e1uAhMdQprnalu0QtuuGYe0Ltfi6putYT5g5DP57R8zdOezS_FbA2Up_cox4-W1U4d_-uJnjFf-z4xGeUD6J0zJvFWtrgDblA3B74LT4HHXewAThEM75jOL7hM_kJaSMHEDkUzI1PPzm11GdcGzCNZBQHEqIAsLkOiKmXNf5NxCcDE3oI7uuNX_-zSS12RvonLLa2_pge3ecj9zpD7DGHQi-e2w&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "MIIDQDCCAiigAwIBAgIEYq9IEDANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJTQTEPMA0GA1UECAwGUml5YWRoMQ8wDQYDVQQHDAZlTWNSRVkxDzANBgNVBAoMBmVNY1JFWTEPMA0GA1UECwwGZU1jUkVZMQ8wDQYDVQQDDAZlTWNSRVkwHhcNMjIwNjE5MTYwMDE2WhcNMjYwNjE5MTYwMDE2WjBiMQswCQYDVQQGEwJTQTEPMA0GA1UECAwGUml5YWRoMQ8wDQYDVQQHDAZlTWNSRVkxDzANBgNVBAoMBmVNY1JFWTEPMA0GA1UECwwGZU1jUkVZMQ8wDQYDVQQDDAZlTWNSRVkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCRq6L6HV8fbWiqomUAwrxdJMM3B7d7T5BDlkwyX95QShLMvwsPEYp+MI3yC6RmqCfucRWAEGP3OaN+e7KjO/DDF9Y2eTkuez8H8uS60d3PbNZfCb9TBkSPUTqIdwBVubaAuAhOt05Xh9X5lnE1YLpq9U09QVfPKFedp1iCr4H8pSuy535kXyhSz6n7/6/W91oeBSDAxwO3Oy/vaBbBSFGfw3jr6oE3taXSpo9nLUwuNHwb3cl7p/ZASAVuXAFPUFh3+DNIKZVFoZY9kXqHoT5Mde6k3+Le4K5ibEmM5wRWMZLyY/2vS+u8oWJrjkVGHNuUiKsqbZrFVmX9o1C2cjAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAMHre8SHuNS3UQD8wRCtQa/s1NQTy7s3sNd26svt6+X8dExRQ6oi31+AhKBIvFknyHyieNjPSB6yDC3+75nZhK4G1EVoO5hVErE8G6jlXE1P6YtrtxWdXTDaxXrg/7ebQD/6ZKTmhGEP70/LWgSgIIUaWx4zwwbznEl3kGhbNOIqUrcKX/ugNq+4cC4rET8HkV5A9F9YiKoG9NCOpwQVYMu1DK1ucs2bqJXnM+Flwe1D/cKI5i3xvDxMVl61KZIwFegxL66QavAn4lS6aRvwWd0z92PYqnpQ6GJT/cARi+uG50jy+DbikjNGAU4QLofXX0i4VmdT8WWgYRucbo6GoSQ\u003d",
  "key": "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",
  "ca": "MIIDQDCCAiigAwIBAgIEYq9IEDANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJTQTEPMA0GA1UECAwGUml5YWRoMQ8wDQYDVQQHDAZlTWNSRVkxDzANBgNVBAoMBmVNY1JFWTEPMA0GA1UECwwGZU1jUkVZMQ8wDQYDVQQDDAZlTWNSRVkwHhcNMjIwNjE5MTYwMDE2WhcNMjYwNjE5MTYwMDE2WjBiMQswCQYDVQQGEwJTQTEPMA0GA1UECAwGUml5YWRoMQ8wDQYDVQQHDAZlTWNSRVkxDzANBgNVBAoMBmVNY1JFWTEPMA0GA1UECwwGZU1jUkVZMQ8wDQYDVQQDDAZlTWNSRVkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCRq6L6HV8fbWiqomUAwrxdJMM3B7d7T5BDlkwyX95QShLMvwsPEYp+MI3yC6RmqCfucRWAEGP3OaN+e7KjO/DDF9Y2eTkuez8H8uS60d3PbNZfCb9TBkSPUTqIdwBVubaAuAhOt05Xh9X5lnE1YLpq9U09QVfPKFedp1iCr4H8pSuy535kXyhSz6n7/6/W91oeBSDAxwO3Oy/vaBbBSFGfw3jr6oE3taXSpo9nLUwuNHwb3cl7p/ZASAVuXAFPUFh3+DNIKZVFoZY9kXqHoT5Mde6k3+Le4K5ibEmM5wRWMZLyY/2vS+u8oWJrjkVGHNuUiKsqbZrFVmX9o1C2cjAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAMHre8SHuNS3UQD8wRCtQa/s1NQTy7s3sNd26svt6+X8dExRQ6oi31+AhKBIvFknyHyieNjPSB6yDC3+75nZhK4G1EVoO5hVErE8G6jlXE1P6YtrtxWdXTDaxXrg/7ebQD/6ZKTmhGEP70/LWgSgIIUaWx4zwwbznEl3kGhbNOIqUrcKX/ugNq+4cC4rET8HkV5A9F9YiKoG9NCOpwQVYMu1DK1ucs2bqJXnM+Flwe1D/cKI5i3xvDxMVl61KZIwFegxL66QavAn4lS6aRvwWd0z92PYqnpQ6GJT/cARi+uG50jy+DbikjNGAU4QLofXX0i4VmdT8WWgYRucbo6GoSQ\u003d"
}
2023-03-14 09:33:36 RESPONSE
CallTokenEndpoint
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "x-powered-by": "Servlet/3.1",
  "content-type": "application/json",
  "content-length": "101",
  "content-language": "en-US",
  "date": "Tue, 14 Mar 2023 09:33:35 GMT",
  "set-cookie": "NCB_Cookie\u003d!b/N2C5O/yGeC5OitEiReu2aLkBf/hrAFEDwXfdUpLCXaT0nejCZMaYrrFLplodCFUwn95nzfKXsZVj/mA/3Y+W89Zx8cZWHc+Ro5+7NzeA\u003d\u003d; path\u003d/; Httponly; Secure"
}
response_body
{"access_token":"46679973-488c-4546-9705-ee1a60caeef4","expires_in":1678790016,"token_type":"Bearer"}
2023-03-14 09:33:36 SUCCESS
CallTokenEndpoint
Parsed token endpoint response
access_token
46679973-488c-4546-9705-ee1a60caeef4
expires_in
1678790016
token_type
Bearer
2023-03-14 09:33:36 SUCCESS
CheckIfTokenEndpointResponseError
No error from token endpoint
2023-03-14 09:33:36 SUCCESS
CheckForAccessTokenValue
Found an access token
access_token
46679973-488c-4546-9705-ee1a60caeef4
2023-03-14 09:33:36 SUCCESS
ExtractAccessTokenFromTokenResponse
Extracted the access token
value
46679973-488c-4546-9705-ee1a60caeef4
type
Bearer
2023-03-14 09:33:36 SUCCESS
ExtractExpiresInFromTokenEndpointResponse
Extracted 'expires_in'
expires_in
1678790016
2023-03-14 09:33:36 SUCCESS
ValidateExpiresIn
expires_in passed all validation checks
expires_in
1678790016
2023-03-14 09:33:36
CreateEmptyResourceEndpointRequestHeaders
Created empty headers
resource_endpoint_request_headers
{}
2023-03-14 09:33:36 SUCCESS
AddFAPIAuthDateToResourceEndpointRequest
Added x-fapi-auth-date to resource endpoint request headers
resource_endpoint_request_headers
{
  "x-fapi-auth-date": "Tue, 14 Mar 2023 09:33:36 GMT"
}
2023-03-14 09:33:36 SUCCESS
CreateKSACreateAccountRequestRequest
account_requests_endpoint_request
{
  "Data": {
    "Permissions": [
      "ReadAccountsBasic"
    ]
  }
}
2023-03-14 09:33:36
CallKSAAccountRequestsEndpointWithBearerToken
HTTP request
request_uri
https://openbankinguat.alahli.com:9443/consent-manager/open-banking/account-information/2022.11.01-final/account-access-consents
request_method
POST
request_headers
{
  "accept": "application/json",
  "authorization": "Bearer 46679973-488c-4546-9705-ee1a60caeef4",
  "x-fapi-auth-date": "Tue, 14 Mar 2023 09:33:36 GMT",
  "content-type": "application/json",
  "content-length": "46"
}
request_body
{"Data":{"Permissions":["ReadAccountsBasic"]}}
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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",
  "ca": "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\u003d"
}
2023-03-14 09:33:37 RESPONSE
CallKSAAccountRequestsEndpointWithBearerToken
HTTP response
response_status_code
201 CREATED
response_status_text
Created
response_headers
{
  "x-powered-by": "Servlet/3.1",
  "x-fapi-interaction-id": "2ce1a23e-727d-4180-ad03-6b94e2605867",
  "content-type": "application/json",
  "content-length": "495",
  "content-language": "en-US",
  "date": "Tue, 14 Mar 2023 09:33:36 GMT",
  "set-cookie": "NCB_Cookie\u003d!h3mOhQVpuVGcMzVGHri8Lnk5Xfq5LYhNGnwpWAzmE53pRLToAS1ZgjtT0J1HDkHLaGQCO/oJ/VtAwgvNeXsxYksoi99pv5WtKKzNqB6DeA\u003d\u003d; path\u003d/; Httponly; Secure"
}
response_body
{"Data":{"ConsentId":"6a07b9cd-18f0-49e0-9a61-b8722edbe2e1","CreationDateTime":"2023-03-14T12:33:37.230Z","Status":"AwaitingAuthorization","StatusUpdateDateTime":"2023-03-14T12:33:37.230Z","Permissions":["ReadAccountsBasic"],"ExpirationDateTime":"2023-06-12T12:33:37.215Z","TransactionFromDateTime":"2022-12-14T12:33:37.215Z","TransactionToDateTime":"2023-06-12T12:33:37.215Z"},"Links":{"Self":"/open-banking/account-information/2022.11.01-final/6a07b9cd-18f0-49e0-9a61-b8722edbe2e1"},"Meta":{}}
2023-03-14 09:33:37
CallKSAAccountRequestsEndpointWithBearerToken
Account requests endpoint response
account_requests_endpoint_response
{"Data":{"ConsentId":"6a07b9cd-18f0-49e0-9a61-b8722edbe2e1","CreationDateTime":"2023-03-14T12:33:37.230Z","Status":"AwaitingAuthorization","StatusUpdateDateTime":"2023-03-14T12:33:37.230Z","Permissions":["ReadAccountsBasic"],"ExpirationDateTime":"2023-06-12T12:33:37.215Z","TransactionFromDateTime":"2022-12-14T12:33:37.215Z","TransactionToDateTime":"2023-06-12T12:33:37.215Z"},"Links":{"Self":"/open-banking/account-information/2022.11.01-final/6a07b9cd-18f0-49e0-9a61-b8722edbe2e1"},"Meta":{}}
2023-03-14 09:33:37 SUCCESS
CallKSAAccountRequestsEndpointWithBearerToken
Parsed account requests endpoint response
headers
{
  "x-powered-by": "Servlet/3.1",
  "x-fapi-interaction-id": "2ce1a23e-727d-4180-ad03-6b94e2605867",
  "content-type": "application/json",
  "content-length": "495",
  "content-language": "en-US",
  "date": "Tue, 14 Mar 2023 09:33:36 GMT",
  "set-cookie": "NCB_Cookie\u003d!h3mOhQVpuVGcMzVGHri8Lnk5Xfq5LYhNGnwpWAzmE53pRLToAS1ZgjtT0J1HDkHLaGQCO/oJ/VtAwgvNeXsxYksoi99pv5WtKKzNqB6DeA\u003d\u003d; path\u003d/; Httponly; Secure"
}
body
{"Data":{"ConsentId":"6a07b9cd-18f0-49e0-9a61-b8722edbe2e1","CreationDateTime":"2023-03-14T12:33:37.230Z","Status":"AwaitingAuthorization","StatusUpdateDateTime":"2023-03-14T12:33:37.230Z","Permissions":["ReadAccountsBasic"],"ExpirationDateTime":"2023-06-12T12:33:37.215Z","TransactionFromDateTime":"2022-12-14T12:33:37.215Z","TransactionToDateTime":"2023-06-12T12:33:37.215Z"},"Links":{"Self":"/open-banking/account-information/2022.11.01-final/6a07b9cd-18f0-49e0-9a61-b8722edbe2e1"},"Meta":{}}
2023-03-14 09:33:37 SUCCESS
CheckIfAccountRequestsEndpointResponseError
No error from account requests endpoint
2023-03-14 09:33:37 SUCCESS
CheckForFAPIInteractionIdInResourceResponse
Found x-fapi-interaction-id
interaction_id
2ce1a23e-727d-4180-ad03-6b94e2605867
2023-03-14 09:33:37 SUCCESS
ExtractAccountRequestIdFromKSAAccountRequestsEndpointResponse
Extracted the account request ID
account_request_id
6a07b9cd-18f0-49e0-9a61-b8722edbe2e1
2023-03-14 09:33:37 SUCCESS
FAPIKSASetClientScopeToAccountsConsentIdOpenId
Set client's scope to 'accounts:6a07b9cd-18f0-49e0-9a61-b8722edbe2e1 openid'
client_id
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
scope
accounts:6a07b9cd-18f0-49e0-9a61-b8722edbe2e1 openid
jwks
{
  "keys": [
    {
      "p": "4IESJOF4Y6lC6UEFEejW0NYtEZN2CCh-XkeA0CXD_yvIDoYj10CN03tZgFogpHXJaTmBg1JWeEckheonsCjfEs2GW6YLQjYNxy2IqEyxcodvAyVeFw7NVQ_4maVsMcbUh9EAZS4oBIQDWS8S5uqx7jK8qrmyflpZHXp8RWLb9h0",
      "kty": "RSA",
      "q": "yjH2h2bHnRRCOiLkQKAGVf0floEabjZbDmtGI4MUysXRtWlmtso8hMJMqyRXvrU1pNts2X5TABpQSuvqTPMT24yo_u74qoiNRNG2SL5lSp8yNw-9CvpuTW3u0IzuOqLKtMUX9kbvVo_2e-i6c_f2IefBqkm-1QkzvlJlBebl-5E",
      "d": "F6c_RcUqAby5emJgH3AzuE-MKb2v1lLIKCyFIImZ7IvQUENkc9pHHq6Sqfc1w4d3k8oWQnfUCWZg9Cfs892DMfs65_rTDtbahKBdZJ_LQ9jokCz3ouaOJM8nm1r1YOzCoddpCu4wU3zP48PrkWXeCNXI2bnvWa33y7eT0oVNUXx_ybMtildjCT0ehYyCJBY-5oKq3U2STubENY0-jXAVzxHKKY-pbMGonZSOkTLVXcFVHvJNL4yQHT0R-55bhObv9fN7UB-AyFAsHT98MrDlcrCXp4F-WbVLsQpOUh3VldeWRLlkezG7FPNBNU78jMRGo1JiH2HNHyF7boEZ4wdHcQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "04b7dcd7-e883-4ef8-bf42-36fc61fdba99",
      "qi": "aQSQIIiRGVKoVrShQohQXBdtBRsNB8Gd1nIYTL_pokcst4lRCP9SwbDjyVoh4oH0vDtCllqMA4-f7u6Ovw7zv6pyO0pjxmBvv_F__5L9vZowUMlfVk1cY7ZkRCDrEl-85wsvHaS6Cdiz4G9g-wXGKxw6rB0Eb6XQz_XKdrb0AnQ",
      "dp": "mzNfUbO1QGBw60ORt7HZX4HQokfo3vbvdUnFGSAigLLJmJDPEi2EXmD1nK-xxT_QPzgL-rbfJEM6UoFvcm6u2BbQ_WaqfdlUaQ9nW8G5Ik3SRsB8bUBEXrutxrn_M-IaZtHrjgb8jzKcBflu_cfdvafBmdzKMmNPG_vjESyol1k",
      "alg": "PS256",
      "dq": "T5LaMu-AH5GZfse8jLJty-mSROkKPdWmgEY3lEJCLIstvPd-NPHiX10YT0I-Rg-KzRaOAAp3H9M7RkESNLZ1WjJBUBM8SeDzt-HQm1BTDMsaOBE5lNh6EH7zPaA5IVpv7DSk-YdxKd_-YUV2G626cB2FWj8rmyvD8WL73xa_7AE",
      "n": "sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"
    }
  ]
}
Make request to authorization endpoint
2023-03-14 09:33:37 SUCCESS
CreateAuthorizationEndpointRequestFromClientInformation
Created authorization endpoint request
client_id
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
redirect_uri
https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback
scope
accounts:6a07b9cd-18f0-49e0-9a61-b8722edbe2e1 openid
2023-03-14 09:33:37
CreateRandomStateValue
Created state value
requested_state_length
10
state
2UNzk94RfB
2023-03-14 09:33:37 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
redirect_uri
https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback
scope
accounts:6a07b9cd-18f0-49e0-9a61-b8722edbe2e1 openid
state
2UNzk94RfB
2023-03-14 09:33:37
CreateRandomNonceValue
Created nonce value
requested_nonce_length
10
nonce
QYk71LvVFE
2023-03-14 09:33:37 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
redirect_uri
https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback
scope
accounts:6a07b9cd-18f0-49e0-9a61-b8722edbe2e1 openid
state
2UNzk94RfB
nonce
QYk71LvVFE
2023-03-14 09:33:37 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToCodeIdtoken
Added response_type parameter to request
client_id
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
redirect_uri
https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback
scope
accounts:6a07b9cd-18f0-49e0-9a61-b8722edbe2e1 openid
state
2UNzk94RfB
nonce
QYk71LvVFE
response_type
code id_token
2023-03-14 09:33:37
CreateRandomCodeVerifier
Created code_verifier value
code_verifier
kd5syqDKE8qBHYKiL9.HmraLXz7EepQqFmm2tYw1OmlAw2cr4JxuORL8FZw3h6hf7z8qu6hO.FOuV7hO0ts-cBKcKcmR_tkwTG9obfAVPmS_Kru3IYNFwrdSjLW6erxA
2023-03-14 09:33:37
CreateS256CodeChallenge
Created code_challenge value
code_challenge
o91NZvIDJMHBVenWEAacWqlXt4Fv1_-obfsX--pBsf0
2023-03-14 09:33:37 SUCCESS
AddCodeChallengeToAuthorizationEndpointRequest
Added code_challenge and code_challenge_method parameters to request
client_id
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
redirect_uri
https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback
scope
accounts:6a07b9cd-18f0-49e0-9a61-b8722edbe2e1 openid
state
2UNzk94RfB
nonce
QYk71LvVFE
response_type
code id_token
code_challenge
o91NZvIDJMHBVenWEAacWqlXt4Fv1_-obfsX--pBsf0
code_challenge_method
S256
2023-03-14 09:33:37 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "client_id": "daf67ffe-0d32-4642-a6eb-08e5880cf4e2",
  "redirect_uri": "https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback",
  "scope": "accounts:6a07b9cd-18f0-49e0-9a61-b8722edbe2e1 openid",
  "state": "2UNzk94RfB",
  "nonce": "QYk71LvVFE",
  "response_type": "code id_token",
  "code_challenge": "o91NZvIDJMHBVenWEAacWqlXt4Fv1_-obfsX--pBsf0",
  "code_challenge_method": "S256"
}
2023-03-14 09:33:37 SUCCESS
AddNbfToRequestObject
Added nbf to request object claims
nbf
1.678786417E9
2023-03-14 09:33:37 SUCCESS
AddExpToRequestObject
Added exp to request object claims
exp
1.678786717E9
2023-03-14 09:33:37 SUCCESS
AddAudToRequestObject
Added aud to request object claims
aud
https://openbankinguat.alahli.com:9443/consent-manager
2023-03-14 09:33:37 SUCCESS
AddIssToRequestObject
Added iss to request object claims
iss
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
2023-03-14 09:33:37 SUCCESS
AddClientIdToRequestObject
Added client_id to request object claims
client_id
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
2023-03-14 09:33:37 SUCCESS
SignRequestObject
Signed the request object
claims
{
  "aud": "https://openbankinguat.alahli.com:9443/consent-manager",
  "nbf": 1678786417,
  "scope": "accounts:6a07b9cd-18f0-49e0-9a61-b8722edbe2e1 openid",
  "iss": "daf67ffe-0d32-4642-a6eb-08e5880cf4e2",
  "response_type": "code id_token",
  "redirect_uri": "https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback",
  "state": "2UNzk94RfB",
  "code_challenge_method": "S256",
  "exp": 1678786717,
  "nonce": "QYk71LvVFE",
  "client_id": "daf67ffe-0d32-4642-a6eb-08e5880cf4e2",
  "code_challenge": "o91NZvIDJMHBVenWEAacWqlXt4Fv1_-obfsX--pBsf0"
}
header
{
  "kid": "04b7dcd7-e883-4ef8-bf42-36fc61fdba99",
  "alg": "PS256"
}
request_object
eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.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.QULClmr1luuYhmUr-dTfiPlQ5TL3H-ECiIJzafNPMosanlus19NkEUcPgiirBe7HMZB5SFgCL6GWaRD4fLlzFQ4FefgH5Moo4oOy6TDWt9s-1N4MCaM84q4Ktnlpz3lR5dcnpUWa8Ov0fgPh00SduOP4uIXfxhA7NNwBhC-5CRoWW6V9EiULHE5Q4AGJ01uGkPhpynfP3Y-bMOQnwHRozSVpg0kxBApzgtSL8FXcfV66ARIGLjuzQW69YeiECrmJJQ1B3p5zZ7EkyKhYPPoNzs8HVYXfpwkIYOnaaBBajwE4OUwdUHwIB6vkariTQDIK6DKureE3ZgbT3gqjvEwicA
key
{
  "p": "4IESJOF4Y6lC6UEFEejW0NYtEZN2CCh-XkeA0CXD_yvIDoYj10CN03tZgFogpHXJaTmBg1JWeEckheonsCjfEs2GW6YLQjYNxy2IqEyxcodvAyVeFw7NVQ_4maVsMcbUh9EAZS4oBIQDWS8S5uqx7jK8qrmyflpZHXp8RWLb9h0",
  "kty": "RSA",
  "q": "yjH2h2bHnRRCOiLkQKAGVf0floEabjZbDmtGI4MUysXRtWlmtso8hMJMqyRXvrU1pNts2X5TABpQSuvqTPMT24yo_u74qoiNRNG2SL5lSp8yNw-9CvpuTW3u0IzuOqLKtMUX9kbvVo_2e-i6c_f2IefBqkm-1QkzvlJlBebl-5E",
  "d": "F6c_RcUqAby5emJgH3AzuE-MKb2v1lLIKCyFIImZ7IvQUENkc9pHHq6Sqfc1w4d3k8oWQnfUCWZg9Cfs892DMfs65_rTDtbahKBdZJ_LQ9jokCz3ouaOJM8nm1r1YOzCoddpCu4wU3zP48PrkWXeCNXI2bnvWa33y7eT0oVNUXx_ybMtildjCT0ehYyCJBY-5oKq3U2STubENY0-jXAVzxHKKY-pbMGonZSOkTLVXcFVHvJNL4yQHT0R-55bhObv9fN7UB-AyFAsHT98MrDlcrCXp4F-WbVLsQpOUh3VldeWRLlkezG7FPNBNU78jMRGo1JiH2HNHyF7boEZ4wdHcQ",
  "e": "AQAB",
  "use": "sig",
  "kid": "04b7dcd7-e883-4ef8-bf42-36fc61fdba99",
  "qi": "aQSQIIiRGVKoVrShQohQXBdtBRsNB8Gd1nIYTL_pokcst4lRCP9SwbDjyVoh4oH0vDtCllqMA4-f7u6Ovw7zv6pyO0pjxmBvv_F__5L9vZowUMlfVk1cY7ZkRCDrEl-85wsvHaS6Cdiz4G9g-wXGKxw6rB0Eb6XQz_XKdrb0AnQ",
  "dp": "mzNfUbO1QGBw60ORt7HZX4HQokfo3vbvdUnFGSAigLLJmJDPEi2EXmD1nK-xxT_QPzgL-rbfJEM6UoFvcm6u2BbQ_WaqfdlUaQ9nW8G5Ik3SRsB8bUBEXrutxrn_M-IaZtHrjgb8jzKcBflu_cfdvafBmdzKMmNPG_vjESyol1k",
  "alg": "PS256",
  "dq": "T5LaMu-AH5GZfse8jLJty-mSROkKPdWmgEY3lEJCLIstvPd-NPHiX10YT0I-Rg-KzRaOAAp3H9M7RkESNLZ1WjJBUBM8SeDzt-HQm1BTDMsaOBE5lNh6EH7zPaA5IVpv7DSk-YdxKd_-YUV2G626cB2FWj8rmyvD8WL73xa_7AE",
  "n": "sVGpOFiapBvxPph6Kd6i9fEYGeHAu_T5bpXdbtm39At5kEqEYZ80N8Z4CFANUPAYV3zuLO_9V4gvGlRLZdaUswUZaqI-dzG2D0SHwYtvej1u62DXSQuAkhoeOG4vNy5C-S-EBoHzgFRvJWzvfICfuwD25o3Vt_VTWjXLTtdMk48AlcsxX9e8pWy1iiuu9G6UEOub2LFz-c9rnAt4TXc3r8ZxiTxTH0ifzQ-KxEVZTzmtFRjiraWO877OUsof7zIgk6p9Vjv95iiQApoIRvuY94O2eRsKeBacVIqieBwsbylcYdgdvu9KOx2C2nH3OHNovSlfd8v4u9lcyris3tXVbQ"
}
2023-03-14 09:33:37 SUCCESS
BuildRequestObjectPostToPAREndpoint
request
eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.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.QULClmr1luuYhmUr-dTfiPlQ5TL3H-ECiIJzafNPMosanlus19NkEUcPgiirBe7HMZB5SFgCL6GWaRD4fLlzFQ4FefgH5Moo4oOy6TDWt9s-1N4MCaM84q4Ktnlpz3lR5dcnpUWa8Ov0fgPh00SduOP4uIXfxhA7NNwBhC-5CRoWW6V9EiULHE5Q4AGJ01uGkPhpynfP3Y-bMOQnwHRozSVpg0kxBApzgtSL8FXcfV66ARIGLjuzQW69YeiECrmJJQ1B3p5zZ7EkyKhYPPoNzs8HVYXfpwkIYOnaaBBajwE4OUwdUHwIB6vkariTQDIK6DKureE3ZgbT3gqjvEwicA
2023-03-14 09:33:37 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
sub
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
aud
https://openbankinguat.alahli.com:9443/consent-manager/token
jti
0pCJya6ExiBz0vCwiYtV
iat
1678786417
exp
1678786477
2023-03-14 09:33:37 SUCCESS
UpdateClientAuthenticationAssertionClaimsWithISSAud
Updated audience in client assertion claims
iss
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
sub
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
jti
0pCJya6ExiBz0vCwiYtV
iat
1678786417
exp
1678786477
aud
https://openbankinguat.alahli.com:9443/consent-manager
2023-03-14 09:33:37 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJhdWQiOiJodHRwczpcL1wvb3BlbmJhbmtpbmd1YXQuYWxhaGxpLmNvbTo5NDQzXC9jb25zZW50LW1hbmFnZXIiLCJpc3MiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJleHAiOjE2Nzg3ODY0NzcsImlhdCI6MTY3ODc4NjQxNywianRpIjoiMHBDSnlhNkV4aUJ6MHZDd2lZdFYifQ.qkC-SotUYmFpZfZ9SELLj10hfT0wtmjMXPt0LT0UgBzHAt5cHdxBMYXgm89HctSg6-HDlCAG2zR32_4LNqY9pxUdyyHAaLSxYCh2cnxufgCL3aiW0c5vENm2gDk_uInG3H7t44FLx3Inf6aVjxp1m3EQ_y49iKK0Qe8zNRSa-2veGrireybXLcQxnIiuy8INHUG8bRFF4_RQWcL4OipZ0kLJFcb_a5ZiEiitobMhki4c_M7Oh01jTVoj-1VCTcFF6j0u_xC15-79_KzOW0LvEovYQ48VjabkZi_AjeJdPg4DksZUiVMZuQxg6oMuPyK8tfdyr2X87_6XMOjdYVXLzQ
2023-03-14 09:33:37 SUCCESS
AddClientAssertionToPAREndpointParameters
Added client assertion to request
request
{
  "request": "eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.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.QULClmr1luuYhmUr-dTfiPlQ5TL3H-ECiIJzafNPMosanlus19NkEUcPgiirBe7HMZB5SFgCL6GWaRD4fLlzFQ4FefgH5Moo4oOy6TDWt9s-1N4MCaM84q4Ktnlpz3lR5dcnpUWa8Ov0fgPh00SduOP4uIXfxhA7NNwBhC-5CRoWW6V9EiULHE5Q4AGJ01uGkPhpynfP3Y-bMOQnwHRozSVpg0kxBApzgtSL8FXcfV66ARIGLjuzQW69YeiECrmJJQ1B3p5zZ7EkyKhYPPoNzs8HVYXfpwkIYOnaaBBajwE4OUwdUHwIB6vkariTQDIK6DKureE3ZgbT3gqjvEwicA",
  "client_assertion": "eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJhdWQiOiJodHRwczpcL1wvb3BlbmJhbmtpbmd1YXQuYWxhaGxpLmNvbTo5NDQzXC9jb25zZW50LW1hbmFnZXIiLCJpc3MiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJleHAiOjE2Nzg3ODY0NzcsImlhdCI6MTY3ODc4NjQxNywianRpIjoiMHBDSnlhNkV4aUJ6MHZDd2lZdFYifQ.qkC-SotUYmFpZfZ9SELLj10hfT0wtmjMXPt0LT0UgBzHAt5cHdxBMYXgm89HctSg6-HDlCAG2zR32_4LNqY9pxUdyyHAaLSxYCh2cnxufgCL3aiW0c5vENm2gDk_uInG3H7t44FLx3Inf6aVjxp1m3EQ_y49iKK0Qe8zNRSa-2veGrireybXLcQxnIiuy8INHUG8bRFF4_RQWcL4OipZ0kLJFcb_a5ZiEiitobMhki4c_M7Oh01jTVoj-1VCTcFF6j0u_xC15-79_KzOW0LvEovYQ48VjabkZi_AjeJdPg4DksZUiVMZuQxg6oMuPyK8tfdyr2X87_6XMOjdYVXLzQ",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
}
2023-03-14 09:33:37
CallPAREndpoint
HTTP request
request_uri
https://openbankinguat.alahli.com:9443/consent-manager/open-banking/v1/par
request_method
POST
request_headers
{
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "1954"
}
request_body
request=eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.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.QULClmr1luuYhmUr-dTfiPlQ5TL3H-ECiIJzafNPMosanlus19NkEUcPgiirBe7HMZB5SFgCL6GWaRD4fLlzFQ4FefgH5Moo4oOy6TDWt9s-1N4MCaM84q4Ktnlpz3lR5dcnpUWa8Ov0fgPh00SduOP4uIXfxhA7NNwBhC-5CRoWW6V9EiULHE5Q4AGJ01uGkPhpynfP3Y-bMOQnwHRozSVpg0kxBApzgtSL8FXcfV66ARIGLjuzQW69YeiECrmJJQ1B3p5zZ7EkyKhYPPoNzs8HVYXfpwkIYOnaaBBajwE4OUwdUHwIB6vkariTQDIK6DKureE3ZgbT3gqjvEwicA&client_assertion=eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.eyJzdWIiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJhdWQiOiJodHRwczpcL1wvb3BlbmJhbmtpbmd1YXQuYWxhaGxpLmNvbTo5NDQzXC9jb25zZW50LW1hbmFnZXIiLCJpc3MiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJleHAiOjE2Nzg3ODY0NzcsImlhdCI6MTY3ODc4NjQxNywianRpIjoiMHBDSnlhNkV4aUJ6MHZDd2lZdFYifQ.qkC-SotUYmFpZfZ9SELLj10hfT0wtmjMXPt0LT0UgBzHAt5cHdxBMYXgm89HctSg6-HDlCAG2zR32_4LNqY9pxUdyyHAaLSxYCh2cnxufgCL3aiW0c5vENm2gDk_uInG3H7t44FLx3Inf6aVjxp1m3EQ_y49iKK0Qe8zNRSa-2veGrireybXLcQxnIiuy8INHUG8bRFF4_RQWcL4OipZ0kLJFcb_a5ZiEiitobMhki4c_M7Oh01jTVoj-1VCTcFF6j0u_xC15-79_KzOW0LvEovYQ48VjabkZi_AjeJdPg4DksZUiVMZuQxg6oMuPyK8tfdyr2X87_6XMOjdYVXLzQ&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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",
  "ca": "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\u003d"
}
2023-03-14 09:33:38 RESPONSE
CallPAREndpoint
HTTP response
response_status_code
201 CREATED
response_status_text
Created
response_headers
{
  "x-powered-by": "Servlet/3.1",
  "content-type": "application/json",
  "content-length": "96",
  "content-language": "en-US",
  "date": "Tue, 14 Mar 2023 09:33:37 GMT",
  "set-cookie": "NCB_Cookie\u003d!qaP0sWkuoabn0jpGHri8Lnk5Xfq5LVpnRf7EJOt+XGtRjlbKTruCUB64sDj5KPd2ZJvx9EDBRURQ2Bg0YFW7Oi61HeBegN4P9lmsHC+l2A\u003d\u003d; path\u003d/; Httponly; Secure"
}
response_body
{"request_uri":"urn:ietf:params:oauth:request_uri:cg23OcYyFn0OfhXxvWCyag3QHaq","expires_in":600}
2023-03-14 09:33:38 SUCCESS
CallPAREndpoint
Parsed pushed authorization request endpoint response
request_uri
urn:ietf:params:oauth:request_uri:cg23OcYyFn0OfhXxvWCyag3QHaq
expires_in
600
2023-03-14 09:33:38 SUCCESS
CheckPAREndpointResponse201WithNoError
pushed authorization request endpoint correct response.
2023-03-14 09:33:38 SUCCESS
CheckForRequestUriValue
Found valid request_uri
request_uri
urn:ietf:params:oauth:request_uri:cg23OcYyFn0OfhXxvWCyag3QHaq
2023-03-14 09:33:38 SUCCESS
CheckForPARResponseExpiresIn
Found expires_in
expires_in
600
2023-03-14 09:33:38 SUCCESS
ExtractRequestUriFromPARResponse
Extracted the request_uri: urn:ietf:params:oauth:request_uri:cg23OcYyFn0OfhXxvWCyag3QHaq
2023-03-14 09:33:38 SUCCESS
EnsureMinimumRequestUriEntropy
Calculated shannon entropy seems sufficient
actual
291.0459216381355
expected
128.0
value
urn:ietf:params:oauth:request_uri:cg23OcYyFn0OfhXxvWCyag3QHaq
2023-03-14 09:33:38 SUCCESS
BuildRequestObjectByReferenceRedirectToAuthorizationEndpoint
Sending to authorization endpoint
redirect_to_authorization_endpoint
https://openbankinguat.alahli.com:9443/cap/v/1/authorize?request_uri=urn:ietf:params:oauth:request_uri:cg23OcYyFn0OfhXxvWCyag3QHaq&client_id=daf67ffe-0d32-4642-a6eb-08e5880cf4e2&redirect_uri=https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback&scope=accounts:6a07b9cd-18f0-49e0-9a61-b8722edbe2e1%20openid&response_type=code%20id_token
2023-03-14 09:33:38 REDIRECT
fapi1-advanced-final-ensure-client-assertion-with-no-sub-fails
Redirecting to authorization endpoint
redirect_to
https://openbankinguat.alahli.com:9443/cap/v/1/authorize?request_uri=urn:ietf:params:oauth:request_uri:cg23OcYyFn0OfhXxvWCyag3QHaq&client_id=daf67ffe-0d32-4642-a6eb-08e5880cf4e2&redirect_uri=https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback&scope=accounts:6a07b9cd-18f0-49e0-9a61-b8722edbe2e1%20openid&response_type=code%20id_token
2023-03-14 09:34:52 INCOMING
fapi1-advanced-final-ensure-client-assertion-with-no-sub-fails
Incoming HTTP request to /test/a/KSAsXGTGnH6Wg9pzaT4/callback
incoming_headers
{
  "host": "www.certification.openid.net",
  "sec-ch-ua": "\"Google Chrome\";v\u003d\"89\", \"Chromium\";v\u003d\"89\", \";Not A Brand\";v\u003d\"99\"",
  "sec-ch-ua-mobile": "?0",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,*/*;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.9",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "navigate",
  "sec-fetch-user": "?1",
  "sec-fetch-dest": "document",
  "referer": "https://openbankinguat.alahli.com:9443/",
  "accept-encoding": "gzip, deflate, br",
  "accept-language": "en-US,en;q\u003d0.9",
  "cookie": "JSESSIONID\u003d30A2CE3FCA7696DF0C1066E905FE2235",
  "cache-control": "max-stale\u003d0",
  "x-bluecoat-via": "32126a4bb4650382",
  "connection": "close"
}
incoming_path
/test/a/KSAsXGTGnH6Wg9pzaT4/callback
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2023-03-14 09:34:52 SUCCESS
CreateRandomImplicitSubmitUrl
Created random implicit submission URL
implicit_submit
{
  "path": "implicit/STya57e9hCFbnVbO2pEX",
  "fullUrl": "https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/implicit/STya57e9hCFbnVbO2pEX"
}
2023-03-14 09:34:52 OUTGOING
fapi1-advanced-final-ensure-client-assertion-with-no-sub-fails
Response to HTTP request to test instance xgoqsPdMOQi8Zri
outgoing
ModelAndView [view="implicitCallback"; model={implicitSubmitUrl=https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/implicit/STya57e9hCFbnVbO2pEX, returnUrl=/log-detail.html?log=xgoqsPdMOQi8Zri}]
outgoing_path
callback
2023-03-14 09:34:54 INCOMING
fapi1-advanced-final-ensure-client-assertion-with-no-sub-fails
Incoming HTTP request to /test/a/KSAsXGTGnH6Wg9pzaT4/implicit/STya57e9hCFbnVbO2pEX
incoming_headers
{
  "host": "www.certification.openid.net",
  "sec-ch-ua": "\"Google Chrome\";v\u003d\"89\", \"Chromium\";v\u003d\"89\", \";Not A Brand\";v\u003d\"99\"",
  "accept": "*/*",
  "x-requested-with": "XMLHttpRequest",
  "sec-ch-ua-mobile": "?0",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36",
  "content-type": "text/plain",
  "origin": "https://www.certification.openid.net",
  "sec-fetch-site": "same-origin",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback",
  "accept-encoding": "gzip, deflate, br",
  "accept-language": "en-US,en;q\u003d0.9",
  "cookie": "JSESSIONID\u003d30A2CE3FCA7696DF0C1066E905FE2235",
  "x-bluecoat-via": "32126a4bb4650382",
  "connection": "close",
  "content-length": "863"
}
incoming_path
/test/a/KSAsXGTGnH6Wg9pzaT4/implicit/STya57e9hCFbnVbO2pEX
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.2
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
#id_token=eyJhbGciOiJQUzI1NiIsImtpZCI6IjgxZjhlNjRmLTUwZTYtNGY2YS1hMTFjLTI4ZmY0NjZjNDY2MiJ9.eyJpc3MiOiJodHRwczovL29wZW5iYW5raW5ndWF0LmFsYWhsaS5jb206OTQ0My9jb25zZW50LW1hbmFnZXIiLCJhdWQiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJub25jZSI6IlFZazcxTHZWRkUiLCJzX2hhc2giOiJsQ0J0ZC02MVJlMUI3OWtRN0ZEcDZRIiwiY19oYXNoIjoiTlc2VEJXNWNEOUlVZjRCNEdOOWVJZyIsInN1YiI6ImRhZjY3ZmZlLTBkMzItNDY0Mi1hNmViLTA4ZTU4ODBjZjRlMiIsImV4cCI6MTY3ODc4NzA4OSwiaWF0IjoxNjc4Nzg2NDg5fQ.Pu57D_EMf6izTvjaFbw238CvDt2q5q_2Q3R2Z0aBVJ3nMNPtuOAYNzbWVHdWyrI0N2spV2e6LrixNHOGGVyeonHE1I8jWLZaMPFDxMwuopkHdH4XxBPvPMWkfVYAsQjSD91dVAiEX4HXR1lac4rrqqXB3shpz64FWamPY7Ahfnfd5tcmU1ULDfQF0Q1nX5RyJAA37Kpmt54QnO1IHEtwkXKqTSbE8jVSmT_9Qz8z5P4ey0f3BRI1krlCydP2AbAWsiblt2mySeY-P4CHJU3xEgNh8G8mqUDaTXPHZy9Q9mTFDAmy8DqXfrUTzVUXpAZNEIwlTpHtT1RK_uILTsaZOg&state=2UNzk94RfB&code=2faa1606-5f6f-4d83-a7e1-3ad31a62f313
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_tls_cipher
ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json
2023-03-14 09:34:54 OUTGOING
fapi1-advanced-final-ensure-client-assertion-with-no-sub-fails
Response to HTTP request to test instance xgoqsPdMOQi8Zri
outgoing_status_code
204
outgoing_headers
{}
outgoing_body

                                
outgoing_path
implicit/STya57e9hCFbnVbO2pEX
2023-03-14 09:34:54
ExtractImplicitHashToCallbackResponse
Extracted response from URL fragment
parameters
[
  {
    "name": "id_token",
    "value": "eyJhbGciOiJQUzI1NiIsImtpZCI6IjgxZjhlNjRmLTUwZTYtNGY2YS1hMTFjLTI4ZmY0NjZjNDY2MiJ9.eyJpc3MiOiJodHRwczovL29wZW5iYW5raW5ndWF0LmFsYWhsaS5jb206OTQ0My9jb25zZW50LW1hbmFnZXIiLCJhdWQiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJub25jZSI6IlFZazcxTHZWRkUiLCJzX2hhc2giOiJsQ0J0ZC02MVJlMUI3OWtRN0ZEcDZRIiwiY19oYXNoIjoiTlc2VEJXNWNEOUlVZjRCNEdOOWVJZyIsInN1YiI6ImRhZjY3ZmZlLTBkMzItNDY0Mi1hNmViLTA4ZTU4ODBjZjRlMiIsImV4cCI6MTY3ODc4NzA4OSwiaWF0IjoxNjc4Nzg2NDg5fQ.Pu57D_EMf6izTvjaFbw238CvDt2q5q_2Q3R2Z0aBVJ3nMNPtuOAYNzbWVHdWyrI0N2spV2e6LrixNHOGGVyeonHE1I8jWLZaMPFDxMwuopkHdH4XxBPvPMWkfVYAsQjSD91dVAiEX4HXR1lac4rrqqXB3shpz64FWamPY7Ahfnfd5tcmU1ULDfQF0Q1nX5RyJAA37Kpmt54QnO1IHEtwkXKqTSbE8jVSmT_9Qz8z5P4ey0f3BRI1krlCydP2AbAWsiblt2mySeY-P4CHJU3xEgNh8G8mqUDaTXPHZy9Q9mTFDAmy8DqXfrUTzVUXpAZNEIwlTpHtT1RK_uILTsaZOg"
  },
  {
    "name": "state",
    "value": "2UNzk94RfB"
  },
  {
    "name": "code",
    "value": "2faa1606-5f6f-4d83-a7e1-3ad31a62f313"
  }
]
2023-03-14 09:34:54 SUCCESS
ExtractImplicitHashToCallbackResponse
Extracted the hash values
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IjgxZjhlNjRmLTUwZTYtNGY2YS1hMTFjLTI4ZmY0NjZjNDY2MiJ9.eyJpc3MiOiJodHRwczovL29wZW5iYW5raW5ndWF0LmFsYWhsaS5jb206OTQ0My9jb25zZW50LW1hbmFnZXIiLCJhdWQiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJub25jZSI6IlFZazcxTHZWRkUiLCJzX2hhc2giOiJsQ0J0ZC02MVJlMUI3OWtRN0ZEcDZRIiwiY19oYXNoIjoiTlc2VEJXNWNEOUlVZjRCNEdOOWVJZyIsInN1YiI6ImRhZjY3ZmZlLTBkMzItNDY0Mi1hNmViLTA4ZTU4ODBjZjRlMiIsImV4cCI6MTY3ODc4NzA4OSwiaWF0IjoxNjc4Nzg2NDg5fQ.Pu57D_EMf6izTvjaFbw238CvDt2q5q_2Q3R2Z0aBVJ3nMNPtuOAYNzbWVHdWyrI0N2spV2e6LrixNHOGGVyeonHE1I8jWLZaMPFDxMwuopkHdH4XxBPvPMWkfVYAsQjSD91dVAiEX4HXR1lac4rrqqXB3shpz64FWamPY7Ahfnfd5tcmU1ULDfQF0Q1nX5RyJAA37Kpmt54QnO1IHEtwkXKqTSbE8jVSmT_9Qz8z5P4ey0f3BRI1krlCydP2AbAWsiblt2mySeY-P4CHJU3xEgNh8G8mqUDaTXPHZy9Q9mTFDAmy8DqXfrUTzVUXpAZNEIwlTpHtT1RK_uILTsaZOg
state
2UNzk94RfB
code
2faa1606-5f6f-4d83-a7e1-3ad31a62f313
2023-03-14 09:34:54 REDIRECT-IN
fapi1-advanced-final-ensure-client-assertion-with-no-sub-fails
Authorization endpoint response captured
url_query
{}
headers
{
  "host": "www.certification.openid.net",
  "sec-ch-ua": "\"Google Chrome\";v\u003d\"89\", \"Chromium\";v\u003d\"89\", \";Not A Brand\";v\u003d\"99\"",
  "sec-ch-ua-mobile": "?0",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,*/*;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.9",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "navigate",
  "sec-fetch-user": "?1",
  "sec-fetch-dest": "document",
  "referer": "https://openbankinguat.alahli.com:9443/",
  "accept-encoding": "gzip, deflate, br",
  "accept-language": "en-US,en;q\u003d0.9",
  "cookie": "JSESSIONID\u003d30A2CE3FCA7696DF0C1066E905FE2235",
  "cache-control": "max-stale\u003d0",
  "x-bluecoat-via": "32126a4bb4650382",
  "x-ssl-cipher": "ECDHE-RSA-AES128-GCM-SHA256",
  "x-ssl-protocol": "TLSv1.2",
  "x-forwarded-proto": "https",
  "x-forwarded-port": "443",
  "connection": "close",
  "x-forwarded-host": "www.certification.openid.net",
  "x-forwarded-server": "www.certification.openid.net"
}
http_method
GET
url_fragment
{
  "id_token": "eyJhbGciOiJQUzI1NiIsImtpZCI6IjgxZjhlNjRmLTUwZTYtNGY2YS1hMTFjLTI4ZmY0NjZjNDY2MiJ9.eyJpc3MiOiJodHRwczovL29wZW5iYW5raW5ndWF0LmFsYWhsaS5jb206OTQ0My9jb25zZW50LW1hbmFnZXIiLCJhdWQiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJub25jZSI6IlFZazcxTHZWRkUiLCJzX2hhc2giOiJsQ0J0ZC02MVJlMUI3OWtRN0ZEcDZRIiwiY19oYXNoIjoiTlc2VEJXNWNEOUlVZjRCNEdOOWVJZyIsInN1YiI6ImRhZjY3ZmZlLTBkMzItNDY0Mi1hNmViLTA4ZTU4ODBjZjRlMiIsImV4cCI6MTY3ODc4NzA4OSwiaWF0IjoxNjc4Nzg2NDg5fQ.Pu57D_EMf6izTvjaFbw238CvDt2q5q_2Q3R2Z0aBVJ3nMNPtuOAYNzbWVHdWyrI0N2spV2e6LrixNHOGGVyeonHE1I8jWLZaMPFDxMwuopkHdH4XxBPvPMWkfVYAsQjSD91dVAiEX4HXR1lac4rrqqXB3shpz64FWamPY7Ahfnfd5tcmU1ULDfQF0Q1nX5RyJAA37Kpmt54QnO1IHEtwkXKqTSbE8jVSmT_9Qz8z5P4ey0f3BRI1krlCydP2AbAWsiblt2mySeY-P4CHJU3xEgNh8G8mqUDaTXPHZy9Q9mTFDAmy8DqXfrUTzVUXpAZNEIwlTpHtT1RK_uILTsaZOg",
  "state": "2UNzk94RfB",
  "code": "2faa1606-5f6f-4d83-a7e1-3ad31a62f313"
}
post_body
Verify authorization endpoint response
2023-03-14 09:34:54 SUCCESS
RejectErrorInUrlQuery
'error' is not present in URL query returned from authorization endpoint
2023-03-14 09:34:54 SUCCESS
RejectAuthCodeInUrlQuery
Authorization code is not present in URL query returned from authorization endpoint
2023-03-14 09:34:54 SUCCESS
CheckMatchingCallbackParameters
Callback parameters successfully verified
2023-03-14 09:34:54 SUCCESS
RejectStateInUrlQueryForHybridFlow
state is correctly not present in URL query returned from authorization endpoint (as in the hybrid flow it must be returned in the URL fragment/hash only)
2023-03-14 09:34:54 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2023-03-14 09:34:54 SUCCESS
ValidateSuccessfulHybridResponseFromAuthorizationEndpoint
authorization endpoint response does not include unexpected parameters
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IjgxZjhlNjRmLTUwZTYtNGY2YS1hMTFjLTI4ZmY0NjZjNDY2MiJ9.eyJpc3MiOiJodHRwczovL29wZW5iYW5raW5ndWF0LmFsYWhsaS5jb206OTQ0My9jb25zZW50LW1hbmFnZXIiLCJhdWQiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJub25jZSI6IlFZazcxTHZWRkUiLCJzX2hhc2giOiJsQ0J0ZC02MVJlMUI3OWtRN0ZEcDZRIiwiY19oYXNoIjoiTlc2VEJXNWNEOUlVZjRCNEdOOWVJZyIsInN1YiI6ImRhZjY3ZmZlLTBkMzItNDY0Mi1hNmViLTA4ZTU4ODBjZjRlMiIsImV4cCI6MTY3ODc4NzA4OSwiaWF0IjoxNjc4Nzg2NDg5fQ.Pu57D_EMf6izTvjaFbw238CvDt2q5q_2Q3R2Z0aBVJ3nMNPtuOAYNzbWVHdWyrI0N2spV2e6LrixNHOGGVyeonHE1I8jWLZaMPFDxMwuopkHdH4XxBPvPMWkfVYAsQjSD91dVAiEX4HXR1lac4rrqqXB3shpz64FWamPY7Ahfnfd5tcmU1ULDfQF0Q1nX5RyJAA37Kpmt54QnO1IHEtwkXKqTSbE8jVSmT_9Qz8z5P4ey0f3BRI1krlCydP2AbAWsiblt2mySeY-P4CHJU3xEgNh8G8mqUDaTXPHZy9Q9mTFDAmy8DqXfrUTzVUXpAZNEIwlTpHtT1RK_uILTsaZOg
state
2UNzk94RfB
code
2faa1606-5f6f-4d83-a7e1-3ad31a62f313
2023-03-14 09:34:54 SUCCESS
CheckStateInAuthorizationResponse
State in response correctly returned
state
2UNzk94RfB
2023-03-14 09:34:54
ValidateIssInAuthorizationResponse
No 'iss' value in authorization response.
2023-03-14 09:34:54 SUCCESS
ExtractAuthorizationCodeFromAuthorizationResponse
Found authorization code
code
2faa1606-5f6f-4d83-a7e1-3ad31a62f313
2023-03-14 09:34:54 SUCCESS
EnsureMinimumAuthorizationCodeLength
Authorization code is of sufficient length
actual
288
required
128
2023-03-14 09:34:54 SUCCESS
EnsureMinimumAuthorizationCodeEntropy
Calculated shannon entropy seems sufficient
actual
126.89801910304959
expected
96.0
value
2faa1606-5f6f-4d83-a7e1-3ad31a62f313
2023-03-14 09:34:54 SUCCESS
ExtractIdTokenFromAuthorizationResponse
Found and parsed the id_token from authorization_endpoint_response
value
eyJhbGciOiJQUzI1NiIsImtpZCI6IjgxZjhlNjRmLTUwZTYtNGY2YS1hMTFjLTI4ZmY0NjZjNDY2MiJ9.eyJpc3MiOiJodHRwczovL29wZW5iYW5raW5ndWF0LmFsYWhsaS5jb206OTQ0My9jb25zZW50LW1hbmFnZXIiLCJhdWQiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJub25jZSI6IlFZazcxTHZWRkUiLCJzX2hhc2giOiJsQ0J0ZC02MVJlMUI3OWtRN0ZEcDZRIiwiY19oYXNoIjoiTlc2VEJXNWNEOUlVZjRCNEdOOWVJZyIsInN1YiI6ImRhZjY3ZmZlLTBkMzItNDY0Mi1hNmViLTA4ZTU4ODBjZjRlMiIsImV4cCI6MTY3ODc4NzA4OSwiaWF0IjoxNjc4Nzg2NDg5fQ.Pu57D_EMf6izTvjaFbw238CvDt2q5q_2Q3R2Z0aBVJ3nMNPtuOAYNzbWVHdWyrI0N2spV2e6LrixNHOGGVyeonHE1I8jWLZaMPFDxMwuopkHdH4XxBPvPMWkfVYAsQjSD91dVAiEX4HXR1lac4rrqqXB3shpz64FWamPY7Ahfnfd5tcmU1ULDfQF0Q1nX5RyJAA37Kpmt54QnO1IHEtwkXKqTSbE8jVSmT_9Qz8z5P4ey0f3BRI1krlCydP2AbAWsiblt2mySeY-P4CHJU3xEgNh8G8mqUDaTXPHZy9Q9mTFDAmy8DqXfrUTzVUXpAZNEIwlTpHtT1RK_uILTsaZOg
header
{
  "kid": "81f8e64f-50e6-4f6a-a11c-28ff466c4662",
  "alg": "PS256"
}
claims
{
  "aud": "daf67ffe-0d32-4642-a6eb-08e5880cf4e2",
  "c_hash": "NW6TBW5cD9IUf4B4GN9eIg",
  "sub": "daf67ffe-0d32-4642-a6eb-08e5880cf4e2",
  "s_hash": "lCBtd-61Re1B79kQ7FDp6Q",
  "iss": "https://openbankinguat.alahli.com:9443/consent-manager",
  "exp": 1678787089,
  "nonce": "QYk71LvVFE",
  "iat": 1678786489
}
2023-03-14 09:34:54 SUCCESS
ValidateIdToken
ID token iss, aud, exp, iat, auth_time, acr & nbf claims passed validation checks
2023-03-14 09:34:54
ValidateIdTokenStandardClaims
sub is a string with content
2023-03-14 09:34:54 SUCCESS
ValidateIdTokenStandardClaims
id_token claims are valid
2023-03-14 09:34:54 SUCCESS
ValidateIdTokenNonce
Nonce values match
nonce
QYk71LvVFE
2023-03-14 09:34:54 SUCCESS
ValidateIdTokenACRClaimAgainstRequest
Nothing to check; the conformance suite did not request an acr claim in request object
2023-03-14 09:34:54 SUCCESS
ValidateIdTokenSignature
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IjgxZjhlNjRmLTUwZTYtNGY2YS1hMTFjLTI4ZmY0NjZjNDY2MiJ9.eyJpc3MiOiJodHRwczovL29wZW5iYW5raW5ndWF0LmFsYWhsaS5jb206OTQ0My9jb25zZW50LW1hbmFnZXIiLCJhdWQiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJub25jZSI6IlFZazcxTHZWRkUiLCJzX2hhc2giOiJsQ0J0ZC02MVJlMUI3OWtRN0ZEcDZRIiwiY19oYXNoIjoiTlc2VEJXNWNEOUlVZjRCNEdOOWVJZyIsInN1YiI6ImRhZjY3ZmZlLTBkMzItNDY0Mi1hNmViLTA4ZTU4ODBjZjRlMiIsImV4cCI6MTY3ODc4NzA4OSwiaWF0IjoxNjc4Nzg2NDg5fQ.Pu57D_EMf6izTvjaFbw238CvDt2q5q_2Q3R2Z0aBVJ3nMNPtuOAYNzbWVHdWyrI0N2spV2e6LrixNHOGGVyeonHE1I8jWLZaMPFDxMwuopkHdH4XxBPvPMWkfVYAsQjSD91dVAiEX4HXR1lac4rrqqXB3shpz64FWamPY7Ahfnfd5tcmU1ULDfQF0Q1nX5RyJAA37Kpmt54QnO1IHEtwkXKqTSbE8jVSmT_9Qz8z5P4ey0f3BRI1krlCydP2AbAWsiblt2mySeY-P4CHJU3xEgNh8G8mqUDaTXPHZy9Q9mTFDAmy8DqXfrUTzVUXpAZNEIwlTpHtT1RK_uILTsaZOg
2023-03-14 09:34:54 SUCCESS
ValidateIdTokenSignatureUsingKid
id_token signature validated
id_token
eyJhbGciOiJQUzI1NiIsImtpZCI6IjgxZjhlNjRmLTUwZTYtNGY2YS1hMTFjLTI4ZmY0NjZjNDY2MiJ9.eyJpc3MiOiJodHRwczovL29wZW5iYW5raW5ndWF0LmFsYWhsaS5jb206OTQ0My9jb25zZW50LW1hbmFnZXIiLCJhdWQiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJub25jZSI6IlFZazcxTHZWRkUiLCJzX2hhc2giOiJsQ0J0ZC02MVJlMUI3OWtRN0ZEcDZRIiwiY19oYXNoIjoiTlc2VEJXNWNEOUlVZjRCNEdOOWVJZyIsInN1YiI6ImRhZjY3ZmZlLTBkMzItNDY0Mi1hNmViLTA4ZTU4ODBjZjRlMiIsImV4cCI6MTY3ODc4NzA4OSwiaWF0IjoxNjc4Nzg2NDg5fQ.Pu57D_EMf6izTvjaFbw238CvDt2q5q_2Q3R2Z0aBVJ3nMNPtuOAYNzbWVHdWyrI0N2spV2e6LrixNHOGGVyeonHE1I8jWLZaMPFDxMwuopkHdH4XxBPvPMWkfVYAsQjSD91dVAiEX4HXR1lac4rrqqXB3shpz64FWamPY7Ahfnfd5tcmU1ULDfQF0Q1nX5RyJAA37Kpmt54QnO1IHEtwkXKqTSbE8jVSmT_9Qz8z5P4ey0f3BRI1krlCydP2AbAWsiblt2mySeY-P4CHJU3xEgNh8G8mqUDaTXPHZy9Q9mTFDAmy8DqXfrUTzVUXpAZNEIwlTpHtT1RK_uILTsaZOg
2023-03-14 09:34:54 SUCCESS
CheckForSubjectInIdToken
Found 'sub' in id_token
sub
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
2023-03-14 09:34:54
EnsureIdTokenUpdatedAtValid
id_token response does not contain 'updated_at'
2023-03-14 09:34:54 INFO
ValidateEncryptedIdTokenHasKid
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2023-03-14 09:34:54 SUCCESS
EnsureIdTokenContainsKid
kid was found in the ID token header
kid
81f8e64f-50e6-4f6a-a11c-28ff466c4662
2023-03-14 09:34:54 SUCCESS
FAPIValidateIdTokenSigningAlg
id_token was signed with a permitted algorithm
permitted
[
  "PS256",
  "ES256"
]
alg
PS256
2023-03-14 09:34:54 INFO
FAPIValidateIdTokenEncryptionAlg
Skipped evaluation due to missing required element: id_token jwe_header
path
jwe_header
mapped
object
id_token
2023-03-14 09:34:54 SUCCESS
ExtractSHash
Extracted s_hash from ID Token
s_hash
lCBtd-61Re1B79kQ7FDp6Q
alg
PS256
2023-03-14 09:34:54 SUCCESS
ValidateSHash
s_hash validated successfully
expected_hash
lCBtd-61Re1B79kQ7FDp6Q
unhashed_value
2UNzk94RfB
id_token_hash
lCBtd-61Re1B79kQ7FDp6Q
2023-03-14 09:34:54 SUCCESS
ExtractCHash
Extracted c_hash from ID Token
c_hash
NW6TBW5cD9IUf4B4GN9eIg
alg
PS256
2023-03-14 09:34:54 SUCCESS
ValidateCHash
c_hash validated successfully
expected_hash
NW6TBW5cD9IUf4B4GN9eIg
unhashed_value
2faa1606-5f6f-4d83-a7e1-3ad31a62f313
id_token_hash
NW6TBW5cD9IUf4B4GN9eIg
2023-03-14 09:34:54 SUCCESS
CreateTokenEndpointRequestForAuthorizationCodeGrant
Created token endpoint request
grant_type
authorization_code
code
2faa1606-5f6f-4d83-a7e1-3ad31a62f313
redirect_uri
https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback
2023-03-14 09:34:54 SUCCESS
CreateClientAuthenticationAssertionClaims
Created client assertion claims
iss
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
sub
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
aud
https://openbankinguat.alahli.com:9443/consent-manager/token
jti
xNTzNU7ogVW3Q3RCCmGD
iat
1678786494
exp
1678786554
2023-03-14 09:34:54
RemoveSubFromClientAssertionClaims
Removed 'sub' from client_assertion_claims, making it invalid
iss
daf67ffe-0d32-4642-a6eb-08e5880cf4e2
aud
https://openbankinguat.alahli.com:9443/consent-manager/token
jti
xNTzNU7ogVW3Q3RCCmGD
iat
1678786494
exp
1678786554
2023-03-14 09:34:54 SUCCESS
SignClientAuthenticationAssertion
Signed the client assertion
client_assertion
eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.eyJpc3MiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJhdWQiOiJodHRwczpcL1wvb3BlbmJhbmtpbmd1YXQuYWxhaGxpLmNvbTo5NDQzXC9jb25zZW50LW1hbmFnZXJcL3Rva2VuIiwiZXhwIjoxNjc4Nzg2NTU0LCJpYXQiOjE2Nzg3ODY0OTQsImp0aSI6InhOVHpOVTdvZ1ZXM1EzUkNDbUdEIn0.QKcyI-miL97XEfMhzAGpQ2wQQucFJfANPkiRADBfCRxyGqDC1ZmatEsDjrj2HtYqLPCkOzXQoRVuq1LKjTxjoRMBZu3lxmsHA2KSeTtaeletqpVaDtdzGgC0WyCv5v26Y-Y1luACwW571iIP_Wd6CiZq_tkrMPRS3DCJDvRKgjby5CnNybeXB0XXleJrGpZdp-Nec4PsFkVB4OzGTrl7IDMFykgWTlnWAjCCy8nht6clkqWQAJNUrpp_zEKCcVw-VsMv-pNWEE0zoFET3c3YctolpZUsuiqKqZZDmpa2HsqO8qQulieGjUwN0hvKvIRlJkzucZG-OCoHvgyfzI0qNA
2023-03-14 09:34:54
AddClientAssertionToTokenEndpointRequest
Added client assertion
grant_type
authorization_code
code
2faa1606-5f6f-4d83-a7e1-3ad31a62f313
redirect_uri
https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback
client_assertion
eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.eyJpc3MiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJhdWQiOiJodHRwczpcL1wvb3BlbmJhbmtpbmd1YXQuYWxhaGxpLmNvbTo5NDQzXC9jb25zZW50LW1hbmFnZXJcL3Rva2VuIiwiZXhwIjoxNjc4Nzg2NTU0LCJpYXQiOjE2Nzg3ODY0OTQsImp0aSI6InhOVHpOVTdvZ1ZXM1EzUkNDbUdEIn0.QKcyI-miL97XEfMhzAGpQ2wQQucFJfANPkiRADBfCRxyGqDC1ZmatEsDjrj2HtYqLPCkOzXQoRVuq1LKjTxjoRMBZu3lxmsHA2KSeTtaeletqpVaDtdzGgC0WyCv5v26Y-Y1luACwW571iIP_Wd6CiZq_tkrMPRS3DCJDvRKgjby5CnNybeXB0XXleJrGpZdp-Nec4PsFkVB4OzGTrl7IDMFykgWTlnWAjCCy8nht6clkqWQAJNUrpp_zEKCcVw-VsMv-pNWEE0zoFET3c3YctolpZUsuiqKqZZDmpa2HsqO8qQulieGjUwN0hvKvIRlJkzucZG-OCoHvgyfzI0qNA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2023-03-14 09:34:54
AddCodeVerifierToTokenEndpointRequest
grant_type
authorization_code
code
2faa1606-5f6f-4d83-a7e1-3ad31a62f313
redirect_uri
https://www.certification.openid.net/test/a/KSAsXGTGnH6Wg9pzaT4/callback
client_assertion
eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.eyJpc3MiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJhdWQiOiJodHRwczpcL1wvb3BlbmJhbmtpbmd1YXQuYWxhaGxpLmNvbTo5NDQzXC9jb25zZW50LW1hbmFnZXJcL3Rva2VuIiwiZXhwIjoxNjc4Nzg2NTU0LCJpYXQiOjE2Nzg3ODY0OTQsImp0aSI6InhOVHpOVTdvZ1ZXM1EzUkNDbUdEIn0.QKcyI-miL97XEfMhzAGpQ2wQQucFJfANPkiRADBfCRxyGqDC1ZmatEsDjrj2HtYqLPCkOzXQoRVuq1LKjTxjoRMBZu3lxmsHA2KSeTtaeletqpVaDtdzGgC0WyCv5v26Y-Y1luACwW571iIP_Wd6CiZq_tkrMPRS3DCJDvRKgjby5CnNybeXB0XXleJrGpZdp-Nec4PsFkVB4OzGTrl7IDMFykgWTlnWAjCCy8nht6clkqWQAJNUrpp_zEKCcVw-VsMv-pNWEE0zoFET3c3YctolpZUsuiqKqZZDmpa2HsqO8qQulieGjUwN0hvKvIRlJkzucZG-OCoHvgyfzI0qNA
client_assertion_type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
code_verifier
kd5syqDKE8qBHYKiL9.HmraLXz7EepQqFmm2tYw1OmlAw2cr4JxuORL8FZw3h6hf7z8qu6hO.FOuV7hO0ts-cBKcKcmR_tkwTG9obfAVPmS_Kru3IYNFwrdSjLW6erxA
2023-03-14 09:34:54
CallTokenEndpointAndReturnFullResponse
HTTP request
request_uri
https://openbankinguat.alahli.com:9443/consent-manager/token
request_method
POST
request_headers
{
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded;charset\u003dUTF-8",
  "content-length": "1086"
}
request_body
grant_type=authorization_code&code=2faa1606-5f6f-4d83-a7e1-3ad31a62f313&redirect_uri=https%3A%2F%2Fwww.certification.openid.net%2Ftest%2Fa%2FKSAsXGTGnH6Wg9pzaT4%2Fcallback&client_assertion=eyJraWQiOiIwNGI3ZGNkNy1lODgzLTRlZjgtYmY0Mi0zNmZjNjFmZGJhOTkiLCJhbGciOiJQUzI1NiJ9.eyJpc3MiOiJkYWY2N2ZmZS0wZDMyLTQ2NDItYTZlYi0wOGU1ODgwY2Y0ZTIiLCJhdWQiOiJodHRwczpcL1wvb3BlbmJhbmtpbmd1YXQuYWxhaGxpLmNvbTo5NDQzXC9jb25zZW50LW1hbmFnZXJcL3Rva2VuIiwiZXhwIjoxNjc4Nzg2NTU0LCJpYXQiOjE2Nzg3ODY0OTQsImp0aSI6InhOVHpOVTdvZ1ZXM1EzUkNDbUdEIn0.QKcyI-miL97XEfMhzAGpQ2wQQucFJfANPkiRADBfCRxyGqDC1ZmatEsDjrj2HtYqLPCkOzXQoRVuq1LKjTxjoRMBZu3lxmsHA2KSeTtaeletqpVaDtdzGgC0WyCv5v26Y-Y1luACwW571iIP_Wd6CiZq_tkrMPRS3DCJDvRKgjby5CnNybeXB0XXleJrGpZdp-Nec4PsFkVB4OzGTrl7IDMFykgWTlnWAjCCy8nht6clkqWQAJNUrpp_zEKCcVw-VsMv-pNWEE0zoFET3c3YctolpZUsuiqKqZZDmpa2HsqO8qQulieGjUwN0hvKvIRlJkzucZG-OCoHvgyfzI0qNA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&code_verifier=kd5syqDKE8qBHYKiL9.HmraLXz7EepQqFmm2tYw1OmlAw2cr4JxuORL8FZw3h6hf7z8qu6hO.FOuV7hO0ts-cBKcKcmR_tkwTG9obfAVPmS_Kru3IYNFwrdSjLW6erxA
request_mutual_tls
{
  "cert": "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\u003d",
  "key": "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",
  "ca": "MIIDQDCCAiigAwIBAgIEYq9IEDANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJTQTEPMA0GA1UECAwGUml5YWRoMQ8wDQYDVQQHDAZlTWNSRVkxDzANBgNVBAoMBmVNY1JFWTEPMA0GA1UECwwGZU1jUkVZMQ8wDQYDVQQDDAZlTWNSRVkwHhcNMjIwNjE5MTYwMDE2WhcNMjYwNjE5MTYwMDE2WjBiMQswCQYDVQQGEwJTQTEPMA0GA1UECAwGUml5YWRoMQ8wDQYDVQQHDAZlTWNSRVkxDzANBgNVBAoMBmVNY1JFWTEPMA0GA1UECwwGZU1jUkVZMQ8wDQYDVQQDDAZlTWNSRVkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCRq6L6HV8fbWiqomUAwrxdJMM3B7d7T5BDlkwyX95QShLMvwsPEYp+MI3yC6RmqCfucRWAEGP3OaN+e7KjO/DDF9Y2eTkuez8H8uS60d3PbNZfCb9TBkSPUTqIdwBVubaAuAhOt05Xh9X5lnE1YLpq9U09QVfPKFedp1iCr4H8pSuy535kXyhSz6n7/6/W91oeBSDAxwO3Oy/vaBbBSFGfw3jr6oE3taXSpo9nLUwuNHwb3cl7p/ZASAVuXAFPUFh3+DNIKZVFoZY9kXqHoT5Mde6k3+Le4K5ibEmM5wRWMZLyY/2vS+u8oWJrjkVGHNuUiKsqbZrFVmX9o1C2cjAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAMHre8SHuNS3UQD8wRCtQa/s1NQTy7s3sNd26svt6+X8dExRQ6oi31+AhKBIvFknyHyieNjPSB6yDC3+75nZhK4G1EVoO5hVErE8G6jlXE1P6YtrtxWdXTDaxXrg/7ebQD/6ZKTmhGEP70/LWgSgIIUaWx4zwwbznEl3kGhbNOIqUrcKX/ugNq+4cC4rET8HkV5A9F9YiKoG9NCOpwQVYMu1DK1ucs2bqJXnM+Flwe1D/cKI5i3xvDxMVl61KZIwFegxL66QavAn4lS6aRvwWd0z92PYqnpQ6GJT/cARi+uG50jy+DbikjNGAU4QLofXX0i4VmdT8WWgYRucbo6GoSQ\u003d"
}
2023-03-14 09:34:55 RESPONSE
CallTokenEndpointAndReturnFullResponse
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "x-powered-by": "Servlet/3.1",
  "content-type": "application/json",
  "content-length": "158",
  "content-language": "en-US",
  "connection": "Close",
  "date": "Tue, 14 Mar 2023 09:34:54 GMT",
  "set-cookie": "NCB_Cookie\u003d!4qfoDbYtO4MtHcBGHri8Lnk5Xfq5LbHSnDeKOwXxSQtyOa+7kFMbRYVlUXUTarLUsv3KUTrSvX+KYUORBuB7NJECvamMRLx5tKqQ2Y6HRg\u003d\u003d; path\u003d/; Httponly; Secure"
}
response_body
{"error":"invalid_request","error_description":"sub may not be null","Code":"KSAOB.JWS.Malformed","Message":"sub may not be null","Path":"sub","Url":"/token"}
2023-03-14 09:34:55 SUCCESS
CallTokenEndpointAndReturnFullResponse
Parsed token endpoint response
error
invalid_request
error_description
sub may not be null
Code
KSAOB.JWS.Malformed
Message
sub may not be null
Path
sub
Url
/token
2023-03-14 09:34:55 SUCCESS
CheckTokenEndpointReturnedJsonContentType
token_endpoint_response_headers Content-Type: header is application/json
2023-03-14 09:34:55 SUCCESS
ValidateErrorFromTokenEndpointResponseError
Token endpoint response error returned valid 'error' field
error
invalid_request
2023-03-14 09:34:55 SUCCESS
CheckErrorDescriptionFromTokenEndpointResponseErrorContainsCRLFTAB
token_endpoint_response 'error_description' field does not include CR/LF/TAB
error_description
sub may not be null
2023-03-14 09:34:55 SUCCESS
ValidateErrorDescriptionFromTokenEndpointResponseError
token_endpoint_response error returned valid 'error_description' field
error_description
sub may not be null
2023-03-14 09:34:55 SUCCESS
ValidateErrorUriFromTokenEndpointResponseError
token_endpoint_response did not include optional 'error_uri' field
2023-03-14 09:34:55 SUCCESS
CheckTokenEndpointHttpStatusIs400Allowing401ForInvalidClientError
Token endpoint http status code was 400 for error 'invalid_request'
2023-03-14 09:34:55 SUCCESS
CheckErrorFromTokenEndpointResponseErrorInvalidClientOrInvalidRequest
Token Endpoint response error returned expected 'error' of 'invalid_request'
expected
[
  "invalid_request",
  "invalid_client"
]
2023-03-14 09:34:55 FINISHED
fapi1-advanced-final-ensure-client-assertion-with-no-sub-fails
Test has run to completion
testmodule_result
PASSED
2023-03-14 09:34:59
TEST-RUNNER
Alias has now been claimed by another test
alias
KSAsXGTGnH6Wg9pzaT4
new_test_id
TB6ttT6pBs2i9JL
Test Results