ory-am/hydra

View on GitHub
internal/certification/CI.F.T.T.s/OP-Req-id_token_hint.txt

Summary

Maintainability
Test Coverage
Test tool version: 2.1.3
Issuer: https://oidc-certification.ory.sh:8443/
Profile: []
Test ID: OP-Req-id_token_hint
Test description: Using prompt=none with user hint through id_token_hint
Timestamp: 2018-06-23T10:56:13Z

============================================================

Trace output

0.0 phase <--<-- 0 --- Webfinger -->-->
0.0 not expected to do WebFinger
0.0 phase <--<-- 1 --- Discovery -->-->
0.0 provider_config kwargs:{'issuer': 'https://oidc-certification.ory.sh:8443/'}
0.075 http response url:https://oidc-certification.ory.sh:8443/.well-known/openid-configuration status_code:200
0.076 ProviderConfigurationResponse {
    "authorization_endpoint": "https://oidc-certification.ory.sh:8443/oauth2/auth",
    "claims_parameter_supported": false,
    "claims_supported": [
        "sub"
    ],
    "grant_types_supported": [
        "authorization_code",
        "implicit",
        "client_credentials",
        "refresh_token"
    ],
    "id_token_signing_alg_values_supported": [
        "RS256"
    ],
    "issuer": "https://oidc-certification.ory.sh:8443/",
    "jwks_uri": "https://oidc-certification.ory.sh:8443/.well-known/jwks.json",
    "registration_endpoint": "https://oidc-certification.ory.sh:8443/clients",
    "request_parameter_supported": true,
    "request_uri_parameter_supported": true,
    "require_request_uri_registration": true,
    "response_modes_supported": [
        "query",
        "fragment"
    ],
    "response_types_supported": [
        "code",
        "code id_token",
        "id_token",
        "token id_token",
        "token",
        "token id_token code"
    ],
    "scopes_supported": [
        "offline",
        "openid"
    ],
    "subject_types_supported": [
        "pairwise",
        "public"
    ],
    "token_endpoint": "https://oidc-certification.ory.sh:8443/oauth2/token",
    "token_endpoint_auth_methods_supported": [
        "client_secret_post",
        "client_secret_basic",
        "private_key_jwt",
        "none"
    ],
    "userinfo_endpoint": "https://oidc-certification.ory.sh:8443/userinfo",
    "userinfo_signing_alg_values_supported": [
        "none",
        "RS256"
    ],
    "version": "3.0"
}
0.076 phase <--<-- 2 --- Registration -->-->
0.076 register kwargs:{'application_name': 'OIC test tool', 'response_types': ['code id_token'], 'contacts': ['roland@example.com'], 'redirect_uris': ['https://op.certification.openid.net:61353/authz_cb'], 'post_logout_redirect_uris': ['https://op.certification.openid.net:61353/logout'], 'jwks_uri': 'https://op.certification.openid.net:61353/static/jwks_61353.json', 'grant_types': ['authorization_code', 'implicit'], 'application_type': 'web', 'url': 'https://oidc-certification.ory.sh:8443/clients'}
0.076 RegistrationRequest {
    "application_type": "web",
    "contacts": [
        "roland@example.com"
    ],
    "grant_types": [
        "authorization_code",
        "implicit"
    ],
    "jwks_uri": "https://op.certification.openid.net:61353/static/jwks_61353.json",
    "post_logout_redirect_uris": [
        "https://op.certification.openid.net:61353/logout"
    ],
    "redirect_uris": [
        "https://op.certification.openid.net:61353/authz_cb"
    ],
    "request_uris": [
        "https://op.certification.openid.net:61353/requests/e3ecc141f5419bd33d25d760861d32323144d583feaf26eb1b5cbf20147608b9#yrnfli01GaFMJl6E"
    ],
    "response_types": [
        "code id_token"
    ]
}
0.242 http response url:https://oidc-certification.ory.sh:8443/clients status_code:201
0.243 RegistrationResponse {
    "client_id": "15642923-27b2-4d31-a224-ab6b32f4b0ba",
    "client_secret": "xWN.dHu6.1J8",
    "client_secret_expires_at": 0,
    "contacts": [
        "roland@example.com"
    ],
    "grant_types": [
        "authorization_code",
        "implicit"
    ],
    "id": "15642923-27b2-4d31-a224-ab6b32f4b0ba",
    "jwks_uri": "https://op.certification.openid.net:61353/static/jwks_61353.json",
    "public": false,
    "redirect_uris": [
        "https://op.certification.openid.net:61353/authz_cb"
    ],
    "request_uris": [
        "https://op.certification.openid.net:61353/requests/e3ecc141f5419bd33d25d760861d32323144d583feaf26eb1b5cbf20147608b9#yrnfli01GaFMJl6E"
    ],
    "response_types": [
        "code id_token"
    ],
    "scope": "openid offline offline_access profile email address phone",
    "token_endpoint_auth_method": "client_secret_basic",
    "userinfo_signed_response_alg": "none"
}
0.243 phase <--<-- 3 --- AsyncAuthn -->-->
0.244 AuthorizationRequest {
    "client_id": "15642923-27b2-4d31-a224-ab6b32f4b0ba",
    "nonce": "LkPfAt7CxsvuaFKU",
    "redirect_uri": "https://op.certification.openid.net:61353/authz_cb",
    "response_type": "code id_token",
    "scope": "openid",
    "state": "RnrMdXJhCMHv6zJL"
}
0.244 redirect url https://oidc-certification.ory.sh:8443/oauth2/auth?scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61353%2Fauthz_cb&client_id=15642923-27b2-4d31-a224-ab6b32f4b0ba&state=RnrMdXJhCMHv6zJL&response_type=code+id_token&nonce=LkPfAt7CxsvuaFKU
0.244 redirect https://oidc-certification.ory.sh:8443/oauth2/auth?scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61353%2Fauthz_cb&client_id=15642923-27b2-4d31-a224-ab6b32f4b0ba&state=RnrMdXJhCMHv6zJL&response_type=code+id_token&nonce=LkPfAt7CxsvuaFKU
3.907 http args {}
4.116 response URL with fragment
4.116 response code=HHLJcnI6O_1WLnfeN-XGnGjtik5rNiJt4W5yBsbtg4Q.zit8mOXOLIrENCVGC8QOpb-RFwNfPbJanYBuqZxzXSI&id_token=eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzowYWNmNmM2NC00ZDU1LTQ4ODgtYWJiOS1iMmEzZjY2MWVlN2YiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiMTU2NDI5MjMtMjdiMi00ZDMxLWEyMjQtYWI2YjMyZjRiMGJhIl0sImF1dGhfdGltZSI6MTUyOTc1MTIyNCwiY19oYXNoIjoiMDU3Tl9XdkpNRFhmWGdvcVNUR2hxUSIsImV4cCI6MTUyOTc1NDk3MCwiaWF0IjoxNTI5NzUxMzcwLCJpc3MiOiJodHRwczovL29pZGMtY2VydGlmaWNhdGlvbi5vcnkuc2g6ODQ0My8iLCJqdGkiOiI4ZTMyODZlYi0wOWVhLTQ1ODQtYmJkNC1kYjQzZGFhZWNhZjQiLCJub25jZSI6IkxrUGZBdDdDeHN2dWFGS1UiLCJyYXQiOjE1Mjk3NTEzNjcsInN1YiI6ImZvb0BiYXIuY29tIn0.vsngnkTpDZ3iyCqlVb4wtlqZkpzq-hECStHpT-vy0r3XkL0HTCt23rR7o0iwJabaHb1Ibx8O3y4msLkTbLivhB0bHhZwfZshXuDicTZQzlyfYB6aVUkUgdRaI-xWRSXgbDvD0eU5MQtLPV_Do2E48jf7mWBrzeBIjShAkSMgG5gw_2cCa7TedLTOyvmEi1_1KGZ5O33U691RoOK93eB9TyLduMXqmKPD8-FZNDtYYxP3Br8l-weuiQNMDKylliS04buqBl8eOOm32NwElYal8F1s5VC-Rq0FG5pAEupmqnipESF0exYTlUybynbXPaHpQAMUNwR_wFfL34rnOvP9BNFwugqpj_Xefkm5YSjoHYgeDOoV9FQj52RsnngJwx4K_PBnij9L359syg9YO6P3PzvNOUZUgYbcublhwfzeCcrsO-zDJSH_M9N3FmW3EqmNE2BbWc0KgUtTpEgVh0lkH8bzUe_WNWFI6EPKh8HimHrcwamna8cCjJbMSfWKw2LHdfeyxvm71QKwz5MaeCYN8shhdlENSWdEJPEDIH24XMjMyHE9VybP0BesnkVpmccS8hKFUVWpS4r89GVcJ8mAkKzSpIxtpVEgamHQgkhMGV7JfmDUibGL8XULvVzmGMEtY5toKzvO2TieXLuTKwicQuISY1sf42JuQjgatUtRdQE&state=RnrMdXJhCMHv6zJL
4.117 response {'id_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzowYWNmNmM2NC00ZDU1LTQ4ODgtYWJiOS1iMmEzZjY2MWVlN2YiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiMTU2NDI5MjMtMjdiMi00ZDMxLWEyMjQtYWI2YjMyZjRiMGJhIl0sImF1dGhfdGltZSI6MTUyOTc1MTIyNCwiY19oYXNoIjoiMDU3Tl9XdkpNRFhmWGdvcVNUR2hxUSIsImV4cCI6MTUyOTc1NDk3MCwiaWF0IjoxNTI5NzUxMzcwLCJpc3MiOiJodHRwczovL29pZGMtY2VydGlmaWNhdGlvbi5vcnkuc2g6ODQ0My8iLCJqdGkiOiI4ZTMyODZlYi0wOWVhLTQ1ODQtYmJkNC1kYjQzZGFhZWNhZjQiLCJub25jZSI6IkxrUGZBdDdDeHN2dWFGS1UiLCJyYXQiOjE1Mjk3NTEzNjcsInN1YiI6ImZvb0BiYXIuY29tIn0.vsngnkTpDZ3iyCqlVb4wtlqZkpzq-hECStHpT-vy0r3XkL0HTCt23rR7o0iwJabaHb1Ibx8O3y4msLkTbLivhB0bHhZwfZshXuDicTZQzlyfYB6aVUkUgdRaI-xWRSXgbDvD0eU5MQtLPV_Do2E48jf7mWBrzeBIjShAkSMgG5gw_2cCa7TedLTOyvmEi1_1KGZ5O33U691RoOK93eB9TyLduMXqmKPD8-FZNDtYYxP3Br8l-weuiQNMDKylliS04buqBl8eOOm32NwElYal8F1s5VC-Rq0FG5pAEupmqnipESF0exYTlUybynbXPaHpQAMUNwR_wFfL34rnOvP9BNFwugqpj_Xefkm5YSjoHYgeDOoV9FQj52RsnngJwx4K_PBnij9L359syg9YO6P3PzvNOUZUgYbcublhwfzeCcrsO-zDJSH_M9N3FmW3EqmNE2BbWc0KgUtTpEgVh0lkH8bzUe_WNWFI6EPKh8HimHrcwamna8cCjJbMSfWKw2LHdfeyxvm71QKwz5MaeCYN8shhdlENSWdEJPEDIH24XMjMyHE9VybP0BesnkVpmccS8hKFUVWpS4r89GVcJ8mAkKzSpIxtpVEgamHQgkhMGV7JfmDUibGL8XULvVzmGMEtY5toKzvO2TieXLuTKwicQuISY1sf42JuQjgatUtRdQE', 'state': 'RnrMdXJhCMHv6zJL', 'code': 'HHLJcnI6O_1WLnfeN-XGnGjtik5rNiJt4W5yBsbtg4Q.zit8mOXOLIrENCVGC8QOpb-RFwNfPbJanYBuqZxzXSI'}
4.197 AuthorizationResponse {
    "code": "HHLJcnI6O_1WLnfeN-XGnGjtik5rNiJt4W5yBsbtg4Q.zit8mOXOLIrENCVGC8QOpb-RFwNfPbJanYBuqZxzXSI",
    "id_token": {
        "aud": [
            "15642923-27b2-4d31-a224-ab6b32f4b0ba"
        ],
        "auth_time": 1529751224,
        "c_hash": "057N_WvJMDXfXgoqSTGhqQ",
        "exp": 1529754970,
        "iat": 1529751370,
        "iss": "https://oidc-certification.ory.sh:8443/",
        "jti": "8e3286eb-09ea-4584-bbd4-db43daaecaf4",
        "nonce": "LkPfAt7CxsvuaFKU",
        "rat": 1529751367,
        "sub": "foo@bar.com"
    },
    "state": "RnrMdXJhCMHv6zJL"
}
4.197 phase <--<-- 4 --- AccessToken -->-->
4.197 --> request op_args: {'state': 'RnrMdXJhCMHv6zJL'}, req_args: {'redirect_uri': 'https://op.certification.openid.net:61353/authz_cb'}
4.197 do_access_token_request kwargs:{'request_args': {'grant_type': 'authorization_code', 'state': 'RnrMdXJhCMHv6zJL', 'code': 'HHLJcnI6O_1WLnfeN-XGnGjtik5rNiJt4W5yBsbtg4Q.zit8mOXOLIrENCVGC8QOpb-RFwNfPbJanYBuqZxzXSI', 'redirect_uri': 'https://op.certification.openid.net:61353/authz_cb', 'client_id': '15642923-27b2-4d31-a224-ab6b32f4b0ba'}, 'state': 'RnrMdXJhCMHv6zJL'}
4.197 AccessTokenRequest {
    "code": "HHLJcnI6O_1WLnfeN-XGnGjtik5rNiJt4W5yBsbtg4Q.zit8mOXOLIrENCVGC8QOpb-RFwNfPbJanYBuqZxzXSI",
    "grant_type": "authorization_code",
    "redirect_uri": "https://op.certification.openid.net:61353/authz_cb",
    "state": "RnrMdXJhCMHv6zJL"
}
4.197 request_url https://oidc-certification.ory.sh:8443/oauth2/token
4.197 request_http_args {'headers': {'Authorization': 'Basic MTU2NDI5MjMtMjdiMi00ZDMxLWEyMjQtYWI2YjMyZjRiMGJhOnhXTi5kSHU2LjFKOA==', 'Content-Type': 'application/x-www-form-urlencoded'}}
4.197 request code=HHLJcnI6O_1WLnfeN-XGnGjtik5rNiJt4W5yBsbtg4Q.zit8mOXOLIrENCVGC8QOpb-RFwNfPbJanYBuqZxzXSI&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61353%2Fauthz_cb&grant_type=authorization_code&state=RnrMdXJhCMHv6zJL
4.846 http response url:https://oidc-certification.ory.sh:8443/oauth2/token status_code:200
4.847 response {'id_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzowYWNmNmM2NC00ZDU1LTQ4ODgtYWJiOS1iMmEzZjY2MWVlN2YiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiMTU2NDI5MjMtMjdiMi00ZDMxLWEyMjQtYWI2YjMyZjRiMGJhIl0sImF1dGhfdGltZSI6MTUyOTc1MTIyNCwiY19oYXNoIjoiMDU3Tl9XdkpNRFhmWGdvcVNUR2hxUSIsImV4cCI6MTUyOTc1NDk3MCwiaWF0IjoxNTI5NzUxMzcxLCJpc3MiOiJodHRwczovL29pZGMtY2VydGlmaWNhdGlvbi5vcnkuc2g6ODQ0My8iLCJqdGkiOiJhNDg3YjMwMC1mMDFkLTQ0NDAtOGNhYS03ZDU4ZGIxZDRhZGIiLCJub25jZSI6IkxrUGZBdDdDeHN2dWFGS1UiLCJyYXQiOjE1Mjk3NTEzNjcsInN1YiI6ImZvb0BiYXIuY29tIn0.zlGpK6xyHtI6ez9M_xHlba9mrMr7BvKEkcjgyXh6K8eQKO5MrwF9KuH6L1fGwYEQOX0ebjij3GZyUVjWVL8a0oSDSXnd0go7PzAQIEf04Ec7Bm9BI9s4sOcE08tJkL0Bk1aXtLvcrjbP9lVRX_DHiZCeK25gMZ-1iIfJU-42E_8zzIKIBCDBnobRiYGUUPRkc78xwsIDi0_6s57g6RFZCPtuM0mcqWc51O8XmPgciDnAeiOfAY5BW1hamp0yWJjuvI0HgQ2sYlDQtB9lI0YbDlT1SqZYveco0rdhQUg0K8ZtqHN7Yn658Oz4Wk8ecKQCxiW23ij_qyYSFCWRAcf_zLtgcvWxFlfDhsdy3RAm2jQWHJDdvAnKKKUjUNBqNcDxsGMNyA75KgqNaPADzNkONE69tPYUs21ZAGI-FbBa-AOB5vFRa75Ie4mDF1xFePpD0qYp8Y8yw3utUuaMsylxylzlTufw1WmBvDwrrUXfm5Y_seWbovKJnutwK99_HkhRvATUKGcJ-bC4aVhoWMpC6Hgtm8PPFTb5pd5qMPhKBOvNuXnVW9yicuZavt84589zvLbpi6Thdth1mgDoOtg1bvE-OxrSaguk6MQ3DUl6g-QnEgIsT5J70axU-3v0KQwOaqrP2JeJGX7vKdfYb3m68l9sIEMm6CvG9Yl6LYxxG2c', 'token_type': 'bearer', 'expires_in': 3599, 'access_token': 'J2FbFX_NmPdTQAv362pxm85O0Z351OfE9Yg1ol04oAs.qduNhhGzoEoQIdKzmozja6wQ2v3pIRopDs0E95HOjvo', 'scope': 'openid'}
4.85 AccessTokenResponse {
    "access_token": "J2FbFX_NmPdTQAv362pxm85O0Z351OfE9Yg1ol04oAs.qduNhhGzoEoQIdKzmozja6wQ2v3pIRopDs0E95HOjvo",
    "expires_in": 3599,
    "id_token": {
        "aud": [
            "15642923-27b2-4d31-a224-ab6b32f4b0ba"
        ],
        "auth_time": 1529751224,
        "c_hash": "057N_WvJMDXfXgoqSTGhqQ",
        "exp": 1529754970,
        "iat": 1529751371,
        "iss": "https://oidc-certification.ory.sh:8443/",
        "jti": "a487b300-f01d-4440-8caa-7d58db1d4adb",
        "nonce": "LkPfAt7CxsvuaFKU",
        "rat": 1529751367,
        "sub": "foo@bar.com"
    },
    "scope": "openid",
    "token_type": "bearer"
}
4.85 phase <--<-- 5 --- AsyncAuthn -->-->
4.851 AuthorizationRequest {
    "client_id": "15642923-27b2-4d31-a224-ab6b32f4b0ba",
    "id_token_hint": "eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzowYWNmNmM2NC00ZDU1LTQ4ODgtYWJiOS1iMmEzZjY2MWVlN2YiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiMTU2NDI5MjMtMjdiMi00ZDMxLWEyMjQtYWI2YjMyZjRiMGJhIl0sImF1dGhfdGltZSI6MTUyOTc1MTIyNCwiY19oYXNoIjoiMDU3Tl9XdkpNRFhmWGdvcVNUR2hxUSIsImV4cCI6MTUyOTc1NDk3MCwiaWF0IjoxNTI5NzUxMzcwLCJpc3MiOiJodHRwczovL29pZGMtY2VydGlmaWNhdGlvbi5vcnkuc2g6ODQ0My8iLCJqdGkiOiI4ZTMyODZlYi0wOWVhLTQ1ODQtYmJkNC1kYjQzZGFhZWNhZjQiLCJub25jZSI6IkxrUGZBdDdDeHN2dWFGS1UiLCJyYXQiOjE1Mjk3NTEzNjcsInN1YiI6ImZvb0BiYXIuY29tIn0.vsngnkTpDZ3iyCqlVb4wtlqZkpzq-hECStHpT-vy0r3XkL0HTCt23rR7o0iwJabaHb1Ibx8O3y4msLkTbLivhB0bHhZwfZshXuDicTZQzlyfYB6aVUkUgdRaI-xWRSXgbDvD0eU5MQtLPV_Do2E48jf7mWBrzeBIjShAkSMgG5gw_2cCa7TedLTOyvmEi1_1KGZ5O33U691RoOK93eB9TyLduMXqmKPD8-FZNDtYYxP3Br8l-weuiQNMDKylliS04buqBl8eOOm32NwElYal8F1s5VC-Rq0FG5pAEupmqnipESF0exYTlUybynbXPaHpQAMUNwR_wFfL34rnOvP9BNFwugqpj_Xefkm5YSjoHYgeDOoV9FQj52RsnngJwx4K_PBnij9L359syg9YO6P3PzvNOUZUgYbcublhwfzeCcrsO-zDJSH_M9N3FmW3EqmNE2BbWc0KgUtTpEgVh0lkH8bzUe_WNWFI6EPKh8HimHrcwamna8cCjJbMSfWKw2LHdfeyxvm71QKwz5MaeCYN8shhdlENSWdEJPEDIH24XMjMyHE9VybP0BesnkVpmccS8hKFUVWpS4r89GVcJ8mAkKzSpIxtpVEgamHQgkhMGV7JfmDUibGL8XULvVzmGMEtY5toKzvO2TieXLuTKwicQuISY1sf42JuQjgatUtRdQE",
    "nonce": "mUrJ09Kb66oqlSbJ",
    "prompt": [
        "none"
    ],
    "redirect_uri": "https://op.certification.openid.net:61353/authz_cb",
    "response_type": "code id_token",
    "scope": "openid",
    "state": "QvvHtGVIggdmK40U"
}
4.851 redirect url https://oidc-certification.ory.sh:8443/oauth2/auth?prompt=none&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61353%2Fauthz_cb&client_id=15642923-27b2-4d31-a224-ab6b32f4b0ba&state=QvvHtGVIggdmK40U&id_token_hint=eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzowYWNmNmM2NC00ZDU1LTQ4ODgtYWJiOS1iMmEzZjY2MWVlN2YiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiMTU2NDI5MjMtMjdiMi00ZDMxLWEyMjQtYWI2YjMyZjRiMGJhIl0sImF1dGhfdGltZSI6MTUyOTc1MTIyNCwiY19oYXNoIjoiMDU3Tl9XdkpNRFhmWGdvcVNUR2hxUSIsImV4cCI6MTUyOTc1NDk3MCwiaWF0IjoxNTI5NzUxMzcwLCJpc3MiOiJodHRwczovL29pZGMtY2VydGlmaWNhdGlvbi5vcnkuc2g6ODQ0My8iLCJqdGkiOiI4ZTMyODZlYi0wOWVhLTQ1ODQtYmJkNC1kYjQzZGFhZWNhZjQiLCJub25jZSI6IkxrUGZBdDdDeHN2dWFGS1UiLCJyYXQiOjE1Mjk3NTEzNjcsInN1YiI6ImZvb0BiYXIuY29tIn0.vsngnkTpDZ3iyCqlVb4wtlqZkpzq-hECStHpT-vy0r3XkL0HTCt23rR7o0iwJabaHb1Ibx8O3y4msLkTbLivhB0bHhZwfZshXuDicTZQzlyfYB6aVUkUgdRaI-xWRSXgbDvD0eU5MQtLPV_Do2E48jf7mWBrzeBIjShAkSMgG5gw_2cCa7TedLTOyvmEi1_1KGZ5O33U691RoOK93eB9TyLduMXqmKPD8-FZNDtYYxP3Br8l-weuiQNMDKylliS04buqBl8eOOm32NwElYal8F1s5VC-Rq0FG5pAEupmqnipESF0exYTlUybynbXPaHpQAMUNwR_wFfL34rnOvP9BNFwugqpj_Xefkm5YSjoHYgeDOoV9FQj52RsnngJwx4K_PBnij9L359syg9YO6P3PzvNOUZUgYbcublhwfzeCcrsO-zDJSH_M9N3FmW3EqmNE2BbWc0KgUtTpEgVh0lkH8bzUe_WNWFI6EPKh8HimHrcwamna8cCjJbMSfWKw2LHdfeyxvm71QKwz5MaeCYN8shhdlENSWdEJPEDIH24XMjMyHE9VybP0BesnkVpmccS8hKFUVWpS4r89GVcJ8mAkKzSpIxtpVEgamHQgkhMGV7JfmDUibGL8XULvVzmGMEtY5toKzvO2TieXLuTKwicQuISY1sf42JuQjgatUtRdQE&response_type=code+id_token&nonce=mUrJ09Kb66oqlSbJ
4.851 redirect https://oidc-certification.ory.sh:8443/oauth2/auth?prompt=none&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61353%2Fauthz_cb&client_id=15642923-27b2-4d31-a224-ab6b32f4b0ba&state=QvvHtGVIggdmK40U&id_token_hint=eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzowYWNmNmM2NC00ZDU1LTQ4ODgtYWJiOS1iMmEzZjY2MWVlN2YiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiMTU2NDI5MjMtMjdiMi00ZDMxLWEyMjQtYWI2YjMyZjRiMGJhIl0sImF1dGhfdGltZSI6MTUyOTc1MTIyNCwiY19oYXNoIjoiMDU3Tl9XdkpNRFhmWGdvcVNUR2hxUSIsImV4cCI6MTUyOTc1NDk3MCwiaWF0IjoxNTI5NzUxMzcwLCJpc3MiOiJodHRwczovL29pZGMtY2VydGlmaWNhdGlvbi5vcnkuc2g6ODQ0My8iLCJqdGkiOiI4ZTMyODZlYi0wOWVhLTQ1ODQtYmJkNC1kYjQzZGFhZWNhZjQiLCJub25jZSI6IkxrUGZBdDdDeHN2dWFGS1UiLCJyYXQiOjE1Mjk3NTEzNjcsInN1YiI6ImZvb0BiYXIuY29tIn0.vsngnkTpDZ3iyCqlVb4wtlqZkpzq-hECStHpT-vy0r3XkL0HTCt23rR7o0iwJabaHb1Ibx8O3y4msLkTbLivhB0bHhZwfZshXuDicTZQzlyfYB6aVUkUgdRaI-xWRSXgbDvD0eU5MQtLPV_Do2E48jf7mWBrzeBIjShAkSMgG5gw_2cCa7TedLTOyvmEi1_1KGZ5O33U691RoOK93eB9TyLduMXqmKPD8-FZNDtYYxP3Br8l-weuiQNMDKylliS04buqBl8eOOm32NwElYal8F1s5VC-Rq0FG5pAEupmqnipESF0exYTlUybynbXPaHpQAMUNwR_wFfL34rnOvP9BNFwugqpj_Xefkm5YSjoHYgeDOoV9FQj52RsnngJwx4K_PBnij9L359syg9YO6P3PzvNOUZUgYbcublhwfzeCcrsO-zDJSH_M9N3FmW3EqmNE2BbWc0KgUtTpEgVh0lkH8bzUe_WNWFI6EPKh8HimHrcwamna8cCjJbMSfWKw2LHdfeyxvm71QKwz5MaeCYN8shhdlENSWdEJPEDIH24XMjMyHE9VybP0BesnkVpmccS8hKFUVWpS4r89GVcJ8mAkKzSpIxtpVEgamHQgkhMGV7JfmDUibGL8XULvVzmGMEtY5toKzvO2TieXLuTKwicQuISY1sf42JuQjgatUtRdQE&response_type=code+id_token&nonce=mUrJ09Kb66oqlSbJ
5.995 http args {}
6.184 response URL with fragment
6.185 response code=_tGpBnhdQ367pnOJGwQuAI0VnyBmxm3RFvLDJGXFQJU.dWs0pgdOFmgmRtmkdx_ml6NXbJ1O_GAuyjzTUESpY6c&id_token=eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzowYWNmNmM2NC00ZDU1LTQ4ODgtYWJiOS1iMmEzZjY2MWVlN2YiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiMTU2NDI5MjMtMjdiMi00ZDMxLWEyMjQtYWI2YjMyZjRiMGJhIl0sImF1dGhfdGltZSI6MTUyOTc1MTIyNCwiY19oYXNoIjoiTTlUcHc1UzhjR21hTkRXb0F6b05ZQSIsImV4cCI6MTUyOTc1NDk3MiwiaWF0IjoxNTI5NzUxMzcyLCJpc3MiOiJodHRwczovL29pZGMtY2VydGlmaWNhdGlvbi5vcnkuc2g6ODQ0My8iLCJqdGkiOiIwMGJiNWRiNi1jODRhLTRiNWUtYjc3Yi00YmIyZmUxYzkyODMiLCJub25jZSI6Im1VckowOUtiNjZvcWxTYkoiLCJyYXQiOjE1Mjk3NTEzNzEsInN1YiI6ImZvb0BiYXIuY29tIn0.1gvKldXG3lM0-T8B4BXaq3cd_C-92nd_csMx7BuCJMkDxephP4nr8OXQxI7tt57DHqFN0YctuISJitWayw90c7Tx9YXMA6PjUeanp8u9DovekgjzLIsve1eGGKSe4l-9hnrpPW-xybi_V97ZfB-xec-qQQQz9H22LZ96afzLczANeZ86WZklSk3HB5sUolJcUlvntsn2TwvgAg47oTPI0GpfaRCPOzXZb25OMaqQvO7HC1CYOVv0bP_l74Wp79VrR7WBo3mIpntdRc-wZzB_dvPvGusk74tfse8a71xVUGqwUQglzUbVNTb6LXsQ-tlccVeP1lg_2bIiFzoWzsUnq38zvL18pjoUoChy4NJtMk4t055orNuCVeyJfRm0l5h24jDELxl1c20XvniSXckwL2qmiaCJTk1KlsPtUKdkV_NWsXhfUBpQdQOW5fZ7B4dLLQKs3S5d5y4ZpGvNr9ZrmmYLdo02-mfeKiqeWM1SuhhX9cTG6MAswz-SLLYlZnuLSYCCfz7vWk774YzPSM7qGGa13qWU6s9kMzoa2YETjRMViWl4xNCwnnHEyYIMoi7aNCRNgIQ5RHgSODXtAt7Gv5myMyHLHQSYoFSWVYCVNl-yWP1NvbIRrM0IAFE_leUBYmZkz8vY9JjTbT6MCuqnX8CSCqOj2vRsdonNDwlHPgU&state=QvvHtGVIggdmK40U
6.185 response {'id_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzowYWNmNmM2NC00ZDU1LTQ4ODgtYWJiOS1iMmEzZjY2MWVlN2YiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiMTU2NDI5MjMtMjdiMi00ZDMxLWEyMjQtYWI2YjMyZjRiMGJhIl0sImF1dGhfdGltZSI6MTUyOTc1MTIyNCwiY19oYXNoIjoiTTlUcHc1UzhjR21hTkRXb0F6b05ZQSIsImV4cCI6MTUyOTc1NDk3MiwiaWF0IjoxNTI5NzUxMzcyLCJpc3MiOiJodHRwczovL29pZGMtY2VydGlmaWNhdGlvbi5vcnkuc2g6ODQ0My8iLCJqdGkiOiIwMGJiNWRiNi1jODRhLTRiNWUtYjc3Yi00YmIyZmUxYzkyODMiLCJub25jZSI6Im1VckowOUtiNjZvcWxTYkoiLCJyYXQiOjE1Mjk3NTEzNzEsInN1YiI6ImZvb0BiYXIuY29tIn0.1gvKldXG3lM0-T8B4BXaq3cd_C-92nd_csMx7BuCJMkDxephP4nr8OXQxI7tt57DHqFN0YctuISJitWayw90c7Tx9YXMA6PjUeanp8u9DovekgjzLIsve1eGGKSe4l-9hnrpPW-xybi_V97ZfB-xec-qQQQz9H22LZ96afzLczANeZ86WZklSk3HB5sUolJcUlvntsn2TwvgAg47oTPI0GpfaRCPOzXZb25OMaqQvO7HC1CYOVv0bP_l74Wp79VrR7WBo3mIpntdRc-wZzB_dvPvGusk74tfse8a71xVUGqwUQglzUbVNTb6LXsQ-tlccVeP1lg_2bIiFzoWzsUnq38zvL18pjoUoChy4NJtMk4t055orNuCVeyJfRm0l5h24jDELxl1c20XvniSXckwL2qmiaCJTk1KlsPtUKdkV_NWsXhfUBpQdQOW5fZ7B4dLLQKs3S5d5y4ZpGvNr9ZrmmYLdo02-mfeKiqeWM1SuhhX9cTG6MAswz-SLLYlZnuLSYCCfz7vWk774YzPSM7qGGa13qWU6s9kMzoa2YETjRMViWl4xNCwnnHEyYIMoi7aNCRNgIQ5RHgSODXtAt7Gv5myMyHLHQSYoFSWVYCVNl-yWP1NvbIRrM0IAFE_leUBYmZkz8vY9JjTbT6MCuqnX8CSCqOj2vRsdonNDwlHPgU', 'state': 'QvvHtGVIggdmK40U', 'code': '_tGpBnhdQ367pnOJGwQuAI0VnyBmxm3RFvLDJGXFQJU.dWs0pgdOFmgmRtmkdx_ml6NXbJ1O_GAuyjzTUESpY6c'}
6.189 AuthorizationResponse {
    "code": "_tGpBnhdQ367pnOJGwQuAI0VnyBmxm3RFvLDJGXFQJU.dWs0pgdOFmgmRtmkdx_ml6NXbJ1O_GAuyjzTUESpY6c",
    "id_token": {
        "aud": [
            "15642923-27b2-4d31-a224-ab6b32f4b0ba"
        ],
        "auth_time": 1529751224,
        "c_hash": "M9Tpw5S8cGmaNDWoAzoNYA",
        "exp": 1529754972,
        "iat": 1529751372,
        "iss": "https://oidc-certification.ory.sh:8443/",
        "jti": "00bb5db6-c84a-4b5e-b77b-4bb2fe1c9283",
        "nonce": "mUrJ09Kb66oqlSbJ",
        "rat": 1529751371,
        "sub": "foo@bar.com"
    },
    "state": "QvvHtGVIggdmK40U"
}
6.189 phase <--<-- 6 --- AccessToken -->-->
6.189 --> request op_args: {'state': 'QvvHtGVIggdmK40U'}, req_args: {'redirect_uri': 'https://op.certification.openid.net:61353/authz_cb'}
6.189 do_access_token_request kwargs:{'request_args': {'grant_type': 'authorization_code', 'state': 'QvvHtGVIggdmK40U', 'code': '_tGpBnhdQ367pnOJGwQuAI0VnyBmxm3RFvLDJGXFQJU.dWs0pgdOFmgmRtmkdx_ml6NXbJ1O_GAuyjzTUESpY6c', 'redirect_uri': 'https://op.certification.openid.net:61353/authz_cb', 'client_id': '15642923-27b2-4d31-a224-ab6b32f4b0ba'}, 'state': 'QvvHtGVIggdmK40U'}
6.189 AccessTokenRequest {
    "code": "_tGpBnhdQ367pnOJGwQuAI0VnyBmxm3RFvLDJGXFQJU.dWs0pgdOFmgmRtmkdx_ml6NXbJ1O_GAuyjzTUESpY6c",
    "grant_type": "authorization_code",
    "redirect_uri": "https://op.certification.openid.net:61353/authz_cb",
    "state": "QvvHtGVIggdmK40U"
}
6.189 request_url https://oidc-certification.ory.sh:8443/oauth2/token
6.189 request_http_args {'headers': {'Authorization': 'Basic MTU2NDI5MjMtMjdiMi00ZDMxLWEyMjQtYWI2YjMyZjRiMGJhOnhXTi5kSHU2LjFKOA==', 'Content-Type': 'application/x-www-form-urlencoded'}}
6.189 request code=_tGpBnhdQ367pnOJGwQuAI0VnyBmxm3RFvLDJGXFQJU.dWs0pgdOFmgmRtmkdx_ml6NXbJ1O_GAuyjzTUESpY6c&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61353%2Fauthz_cb&grant_type=authorization_code&state=QvvHtGVIggdmK40U
6.477 http response url:https://oidc-certification.ory.sh:8443/oauth2/token status_code:200
6.478 response {'id_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzowYWNmNmM2NC00ZDU1LTQ4ODgtYWJiOS1iMmEzZjY2MWVlN2YiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOlsiMTU2NDI5MjMtMjdiMi00ZDMxLWEyMjQtYWI2YjMyZjRiMGJhIl0sImF1dGhfdGltZSI6MTUyOTc1MTIyNCwiY19oYXNoIjoiTTlUcHc1UzhjR21hTkRXb0F6b05ZQSIsImV4cCI6MTUyOTc1NDk3MiwiaWF0IjoxNTI5NzUxMzczLCJpc3MiOiJodHRwczovL29pZGMtY2VydGlmaWNhdGlvbi5vcnkuc2g6ODQ0My8iLCJqdGkiOiIxNDdiZmJkYi0xNWE4LTQ4YTQtYmI0Ny02YTQyYWIxM2ZjN2UiLCJub25jZSI6Im1VckowOUtiNjZvcWxTYkoiLCJyYXQiOjE1Mjk3NTEzNzEsInN1YiI6ImZvb0BiYXIuY29tIn0.g6YdONzd9AlBEKUztNIxyaL0AvZF-GVC7xlBGecqqbaqWS4r_ZscK14JIxLK_8qKQm2BAi_PNNVo-aVjA5byndLGVTCUrL-bLPm-Rj_3jTGMaFBLGlBI0OVuAa6MYmhxSV9caPEZO1quHbC8HM0YujUG8PmAXG3mD4qnrknAKtTitBCQSdOzxn7zQ-TrO92rUHBhVCXNTGnHDrQ6ZT0uqkfdaarc9II4xLSk4zvIN_6UImIjolNa1HQ09QUoeVPVu8tqjwvkMPIoNAJBH0IcQhYJX3GWS3OK3HG990_xgFVw20U6oSCoRNRABtmzbSrY8b5pApq7UITdx1LPQdEammYNKF-U4TDlQBtzEEMKol8hWpZ0cwwY2-KM2J_hfeJ6_gHSP2TF022lPzGBXkzJxrEJ9fO_MiBF7H4Bduv-lzAH6tgiTDLwBCGHxaM8Rj4cFNMx4rtc4kgdPbJ9Yk7RvKznL_Yn-5hXQl5aJxadK1gWAECJdzG6PKTmGdmWR9HhHCFbfPyqi5dVAKoaL4bQPsytJVl_3QIRK9jElrWr9HaFS8zsn0sIYdMt5SI4f-1VNRXQ7N78JtrxXNig_gfSkPNz3VdY_1zddtdN8_Iad9cBLCnyOdXW7nc62qZmgu1Ys40Ti2xpHJ0jg4EqJTDmkQ3wOasjZC-NqYUllL4UpJ0', 'token_type': 'bearer', 'expires_in': 3599, 'access_token': 'tUuF1kvIqKmy17FjWzgev5qCrZ6esg64x0Z6JhsykM8.rumBCnCEwZtshDZl6rFFBKR9rJpaJGg_vOfGfS3Y04k', 'scope': 'openid'}
6.481 AccessTokenResponse {
    "access_token": "tUuF1kvIqKmy17FjWzgev5qCrZ6esg64x0Z6JhsykM8.rumBCnCEwZtshDZl6rFFBKR9rJpaJGg_vOfGfS3Y04k",
    "expires_in": 3599,
    "id_token": {
        "aud": [
            "15642923-27b2-4d31-a224-ab6b32f4b0ba"
        ],
        "auth_time": 1529751224,
        "c_hash": "M9Tpw5S8cGmaNDWoAzoNYA",
        "exp": 1529754972,
        "iat": 1529751373,
        "iss": "https://oidc-certification.ory.sh:8443/",
        "jti": "147bfbdb-15a8-48a4-bb47-6a42ab13fc7e",
        "nonce": "mUrJ09Kb66oqlSbJ",
        "rat": 1529751371,
        "sub": "foo@bar.com"
    },
    "scope": "openid",
    "token_type": "bearer"
}
6.481 phase <--<-- 7 --- Done -->-->
6.482 end 
6.482 assertion VerifyResponse
6.482 condition verify-response: status=OK [Checks that the last response was one of a possible set of OpenID Connect Responses]
6.482 assertion SameAuthn
6.482 condition same-authn: status=OK [Verifies that the same authentication was used twice in the flow.]
6.482 condition Done: status=OK



============================================================

Conditions

verify-response: status=OK [Checks that the last response was one of a possible set of OpenID Connect Responses]
same-authn: status=OK [Verifies that the same authentication was used twice in the flow.]
Done: status=OK



============================================================

RESULT: PASSED