Sign upLogin

ory-am/hydra

View on GitHub
Star
internal/certification/IT.F.T.T.s/OP-Req-max_age=1.txt

Summary

Maintainability
Test Coverage
Test tool version: 2.1.3
Issuer: https://oidc-certification.ory.sh:8443/
Profile: []
Test ID: OP-Req-max_age=1
Test description: Requesting ID Token with max_age=1 seconds restriction
Timestamp: 2018-06-23T11:25:41Z

============================================================

Trace output

0.0 phase <--<-- 0 --- Webfinger -->-->
0.0 not expected to do WebFinger
0.0 phase <--<-- 1 --- Discovery -->-->
0.0 provider_config kwargs:{'issuer': 'https://oidc-certification.ory.sh:8443/'}
0.074 http response url:https://oidc-certification.ory.sh:8443/.well-known/openid-configuration status_code:200
0.075 ProviderConfigurationResponse {
    "authorization_endpoint": "https://oidc-certification.ory.sh:8443/oauth2/auth",
    "claims_parameter_supported": false,
    "claims_supported": [
        "sub"
    ],
    "grant_types_supported": [
        "authorization_code",
        "implicit",
        "client_credentials",
        "refresh_token"
    ],
    "id_token_signing_alg_values_supported": [
        "RS256"
    ],
    "issuer": "https://oidc-certification.ory.sh:8443/",
    "jwks_uri": "https://oidc-certification.ory.sh:8443/.well-known/jwks.json",
    "registration_endpoint": "https://oidc-certification.ory.sh:8443/clients",
    "request_parameter_supported": true,
    "request_uri_parameter_supported": true,
    "require_request_uri_registration": true,
    "response_modes_supported": [
        "query",
        "fragment"
    ],
    "response_types_supported": [
        "code",
        "code id_token",
        "id_token",
        "token id_token",
        "token",
        "token id_token code"
    ],
    "scopes_supported": [
        "offline",
        "openid"
    ],
    "subject_types_supported": [
        "pairwise",
        "public"
    ],
    "token_endpoint": "https://oidc-certification.ory.sh:8443/oauth2/token",
    "token_endpoint_auth_methods_supported": [
        "client_secret_post",
        "client_secret_basic",
        "private_key_jwt",
        "none"
    ],
    "userinfo_endpoint": "https://oidc-certification.ory.sh:8443/userinfo",
    "userinfo_signing_alg_values_supported": [
        "none",
        "RS256"
    ],
    "version": "3.0"
}
0.075 phase <--<-- 2 --- Registration -->-->
0.075 register kwargs:{'application_name': 'OIC test tool', 'response_types': ['id_token token'], 'contacts': ['roland@example.com'], 'redirect_uris': ['https://op.certification.openid.net:61353/authz_cb'], 'post_logout_redirect_uris': ['https://op.certification.openid.net:61353/logout'], 'jwks_uri': 'https://op.certification.openid.net:61353/static/jwks_61353.json', 'grant_types': ['implicit'], 'application_type': 'web', 'url': 'https://oidc-certification.ory.sh:8443/clients'}
0.076 RegistrationRequest {
    "application_type": "web",
    "contacts": [
        "roland@example.com"
    ],
    "grant_types": [
        "implicit"
    ],
    "jwks_uri": "https://op.certification.openid.net:61353/static/jwks_61353.json",
    "post_logout_redirect_uris": [
        "https://op.certification.openid.net:61353/logout"
    ],
    "redirect_uris": [
        "https://op.certification.openid.net:61353/authz_cb"
    ],
    "request_uris": [
        "https://op.certification.openid.net:61353/requests/e3ecc141f5419bd33d25d760861d32323144d583feaf26eb1b5cbf20147608b9#te5CMeTaDkbzmw0b"
    ],
    "response_types": [
        "id_token token"
    ]
}
0.235 http response url:https://oidc-certification.ory.sh:8443/clients status_code:201
0.236 RegistrationResponse {
    "client_id": "1598a711-e2cb-4666-be72-482d8096aeea",
    "client_secret": "WCtE7W2ykepy",
    "client_secret_expires_at": 0,
    "contacts": [
        "roland@example.com"
    ],
    "grant_types": [
        "implicit"
    ],
    "id": "1598a711-e2cb-4666-be72-482d8096aeea",
    "jwks_uri": "https://op.certification.openid.net:61353/static/jwks_61353.json",
    "public": false,
    "redirect_uris": [
        "https://op.certification.openid.net:61353/authz_cb"
    ],
    "request_uris": [
        "https://op.certification.openid.net:61353/requests/e3ecc141f5419bd33d25d760861d32323144d583feaf26eb1b5cbf20147608b9#te5CMeTaDkbzmw0b"
    ],
    "response_types": [
        "id_token token"
    ],
    "scope": "openid offline offline_access profile email address phone",
    "token_endpoint_auth_method": "client_secret_basic",
    "userinfo_signed_response_alg": "none"
}
0.236 phase <--<-- 3 --- AsyncAuthn -->-->
0.236 AuthorizationRequest {
    "client_id": "1598a711-e2cb-4666-be72-482d8096aeea",
    "nonce": "K6HfBtRSuEu4p8Ys",
    "redirect_uri": "https://op.certification.openid.net:61353/authz_cb",
    "response_type": "id_token token",
    "scope": "openid",
    "state": "1pjPZHgnFlK1P1XN"
}
0.236 redirect url https://oidc-certification.ory.sh:8443/oauth2/auth?scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61353%2Fauthz_cb&client_id=1598a711-e2cb-4666-be72-482d8096aeea&state=1pjPZHgnFlK1P1XN&response_type=id_token+token&nonce=K6HfBtRSuEu4p8Ys
0.236 redirect https://oidc-certification.ory.sh:8443/oauth2/auth?scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61353%2Fauthz_cb&client_id=1598a711-e2cb-4666-be72-482d8096aeea&state=1pjPZHgnFlK1P1XN&response_type=id_token+token&nonce=K6HfBtRSuEu4p8Ys
3.811 http args {}
3.984 response URL with fragment
3.984 response access_token=Fdz_yLT9Qz2idCuz1E7RQubGdgQcW8NMMtrcDyvKZTc.kFsH8GfulIs2Ouas96qiMcsDFLgMq4XX3YeBv2j1kPU&expires_in=3599&id_token=eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzo0YWU0OWJmNC05ZGEwLTRhODItYmNjZS04OTNjMzcyOWYyMmEiLCJ0eXAiOiJKV1QifQ.eyJhdF9oYXNoIjoia05MV3JfdE44TTc2dWdRa1psckpadyIsImF1ZCI6WyIxNTk4YTcxMS1lMmNiLTQ2NjYtYmU3Mi00ODJkODA5NmFlZWEiXSwiYXV0aF90aW1lIjoxNTI5NzUzMDA5LCJleHAiOjE1Mjk3NTY3MzIsImlhdCI6MTUyOTc1MzEzMiwiaXNzIjoiaHR0cHM6Ly9vaWRjLWNlcnRpZmljYXRpb24ub3J5LnNoOjg0NDMvIiwianRpIjoiYjU2ODBlNGEtYTY1My00NjA1LWIwMWEtOGI1ZDQ4MDk2ODM0Iiwibm9uY2UiOiJLNkhmQnRSU3VFdTRwOFlzIiwicmF0IjoxNTI5NzUzMTI5LCJzdWIiOiJmb29AYmFyLmNvbSJ9.RD4RQdBcTUuQmC8-JBzVyL7hsqykgNpWhCj7hctLoXrsAqeBWtmPDE74gre7jWcmUENVB1X_Nqrd6T8hkJx_xwaZ54DA1eVnk_bprMPop7WlAjutL0VOo0DQvDvy-FR5liCTWlxDlLv2mBSoE6z8rt4mzsxI0qi1x_yuT7fwp4ysB1tZ-NN9UbhiH5bJR2byfxHUAJ6i7YxgVlS8JV8vhJDY8Vqz5mDdHi9KPc2jB0J_IA4bQiaeAl9MrW5-TBsWyJXkvz8T5U5Zi5W56IN2xiyAD_A2ZdYsnGibd_HGiKU7I9b4w74-EIGk-fYPE4SHkHleJ0_KDF18ktEzpCoBUvmZh7RIN_Y92PVbR9f-b2ju7nPhx_SU5qVLoKVd90g6veq6pt0lyV2E_0FVVM7LATkzo5xSnYd6G4bOs9Bn7sxNDClr6egc-eLYeIkoVcyp7tlF3d4QmmtuQ_3HceVt_WBB7HN9EiG__YlVQ5nNBnV6ZpKryHUX4Ig7-BBWX3F7FznSv1GLv5vKVVGJmW2ye3pQ4IH0s91WbrfC1bxGPjyxOK1Oj7LVq3_d9kv-UwXutqogCP24IYUYPl2aV-Mz5h-3Hq0o7kEtmuDhHlaAxDnJdVzzzUfKyV33pOWhEb02qsDjtrxrb7ahtJ-lXjs9TQX9X47BNj07nf8mLcuMolE&scope=openid&state=1pjPZHgnFlK1P1XN&token_type=bearer
3.984 response {'id_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzo0YWU0OWJmNC05ZGEwLTRhODItYmNjZS04OTNjMzcyOWYyMmEiLCJ0eXAiOiJKV1QifQ.eyJhdF9oYXNoIjoia05MV3JfdE44TTc2dWdRa1psckpadyIsImF1ZCI6WyIxNTk4YTcxMS1lMmNiLTQ2NjYtYmU3Mi00ODJkODA5NmFlZWEiXSwiYXV0aF90aW1lIjoxNTI5NzUzMDA5LCJleHAiOjE1Mjk3NTY3MzIsImlhdCI6MTUyOTc1MzEzMiwiaXNzIjoiaHR0cHM6Ly9vaWRjLWNlcnRpZmljYXRpb24ub3J5LnNoOjg0NDMvIiwianRpIjoiYjU2ODBlNGEtYTY1My00NjA1LWIwMWEtOGI1ZDQ4MDk2ODM0Iiwibm9uY2UiOiJLNkhmQnRSU3VFdTRwOFlzIiwicmF0IjoxNTI5NzUzMTI5LCJzdWIiOiJmb29AYmFyLmNvbSJ9.RD4RQdBcTUuQmC8-JBzVyL7hsqykgNpWhCj7hctLoXrsAqeBWtmPDE74gre7jWcmUENVB1X_Nqrd6T8hkJx_xwaZ54DA1eVnk_bprMPop7WlAjutL0VOo0DQvDvy-FR5liCTWlxDlLv2mBSoE6z8rt4mzsxI0qi1x_yuT7fwp4ysB1tZ-NN9UbhiH5bJR2byfxHUAJ6i7YxgVlS8JV8vhJDY8Vqz5mDdHi9KPc2jB0J_IA4bQiaeAl9MrW5-TBsWyJXkvz8T5U5Zi5W56IN2xiyAD_A2ZdYsnGibd_HGiKU7I9b4w74-EIGk-fYPE4SHkHleJ0_KDF18ktEzpCoBUvmZh7RIN_Y92PVbR9f-b2ju7nPhx_SU5qVLoKVd90g6veq6pt0lyV2E_0FVVM7LATkzo5xSnYd6G4bOs9Bn7sxNDClr6egc-eLYeIkoVcyp7tlF3d4QmmtuQ_3HceVt_WBB7HN9EiG__YlVQ5nNBnV6ZpKryHUX4Ig7-BBWX3F7FznSv1GLv5vKVVGJmW2ye3pQ4IH0s91WbrfC1bxGPjyxOK1Oj7LVq3_d9kv-UwXutqogCP24IYUYPl2aV-Mz5h-3Hq0o7kEtmuDhHlaAxDnJdVzzzUfKyV33pOWhEb02qsDjtrxrb7ahtJ-lXjs9TQX9X47BNj07nf8mLcuMolE', 'scope': 'openid', 'access_token': 'Fdz_yLT9Qz2idCuz1E7RQubGdgQcW8NMMtrcDyvKZTc.kFsH8GfulIs2Ouas96qiMcsDFLgMq4XX3YeBv2j1kPU', 'state': '1pjPZHgnFlK1P1XN', 'expires_in': 3599, 'token_type': 'bearer'}
4.066 AuthorizationResponse {
    "access_token": "Fdz_yLT9Qz2idCuz1E7RQubGdgQcW8NMMtrcDyvKZTc.kFsH8GfulIs2Ouas96qiMcsDFLgMq4XX3YeBv2j1kPU",
    "expires_in": 3599,
    "id_token": {
        "at_hash": "kNLWr_tN8M76ugQkZlrJZw",
        "aud": [
            "1598a711-e2cb-4666-be72-482d8096aeea"
        ],
        "auth_time": 1529753009,
        "exp": 1529756732,
        "iat": 1529753132,
        "iss": "https://oidc-certification.ory.sh:8443/",
        "jti": "b5680e4a-a653-4605-b01a-8b5d48096834",
        "nonce": "K6HfBtRSuEu4p8Ys",
        "rat": 1529753129,
        "sub": "foo@bar.com"
    },
    "scope": "openid",
    "state": "1pjPZHgnFlK1P1XN",
    "token_type": "bearer"
}
4.066 phase <--<-- 4 --- AccessToken -->-->
4.066 phase <--<-- 5 --- Note -->-->
5.237 phase <--<-- 6 --- Webfinger -->-->
5.238 not expected to do WebFinger
5.238 phase <--<-- 7 --- Discovery -->-->
5.238 provider_config kwargs:{'issuer': 'https://oidc-certification.ory.sh:8443/'}
5.312 http response url:https://oidc-certification.ory.sh:8443/.well-known/openid-configuration status_code:200
5.313 ProviderConfigurationResponse {
    "authorization_endpoint": "https://oidc-certification.ory.sh:8443/oauth2/auth",
    "claims_parameter_supported": false,
    "claims_supported": [
        "sub"
    ],
    "grant_types_supported": [
        "authorization_code",
        "implicit",
        "client_credentials",
        "refresh_token"
    ],
    "id_token_signing_alg_values_supported": [
        "RS256"
    ],
    "issuer": "https://oidc-certification.ory.sh:8443/",
    "jwks_uri": "https://oidc-certification.ory.sh:8443/.well-known/jwks.json",
    "registration_endpoint": "https://oidc-certification.ory.sh:8443/clients",
    "request_parameter_supported": true,
    "request_uri_parameter_supported": true,
    "require_request_uri_registration": true,
    "response_modes_supported": [
        "query",
        "fragment"
    ],
    "response_types_supported": [
        "code",
        "code id_token",
        "id_token",
        "token id_token",
        "token",
        "token id_token code"
    ],
    "scopes_supported": [
        "offline",
        "openid"
    ],
    "subject_types_supported": [
        "pairwise",
        "public"
    ],
    "token_endpoint": "https://oidc-certification.ory.sh:8443/oauth2/token",
    "token_endpoint_auth_methods_supported": [
        "client_secret_post",
        "client_secret_basic",
        "private_key_jwt",
        "none"
    ],
    "userinfo_endpoint": "https://oidc-certification.ory.sh:8443/userinfo",
    "userinfo_signing_alg_values_supported": [
        "none",
        "RS256"
    ],
    "version": "3.0"
}
5.313 phase <--<-- 8 --- Registration -->-->
5.314 register kwargs:{'application_name': 'OIC test tool', 'response_types': ['id_token token'], 'contacts': ['roland@example.com'], 'redirect_uris': ['https://op.certification.openid.net:61353/authz_cb'], 'post_logout_redirect_uris': ['https://op.certification.openid.net:61353/logout'], 'jwks_uri': 'https://op.certification.openid.net:61353/static/jwks_61353.json', 'grant_types': ['implicit'], 'application_type': 'web', 'url': 'https://oidc-certification.ory.sh:8443/clients'}
5.314 RegistrationRequest {
    "application_type": "web",
    "contacts": [
        "roland@example.com"
    ],
    "grant_types": [
        "implicit"
    ],
    "jwks_uri": "https://op.certification.openid.net:61353/static/jwks_61353.json",
    "post_logout_redirect_uris": [
        "https://op.certification.openid.net:61353/logout"
    ],
    "redirect_uris": [
        "https://op.certification.openid.net:61353/authz_cb"
    ],
    "request_uris": [
        "https://op.certification.openid.net:61353/requests/e3ecc141f5419bd33d25d760861d32323144d583feaf26eb1b5cbf20147608b9#dqJwGaR8JRmL5z5r"
    ],
    "response_types": [
        "id_token token"
    ]
}
5.491 http response url:https://oidc-certification.ory.sh:8443/clients status_code:201
5.492 RegistrationResponse {
    "client_id": "11c6985e-f3bd-4472-a91c-6e7743f0f8e0",
    "client_secret": "to3PrCgSIhyT",
    "client_secret_expires_at": 0,
    "contacts": [
        "roland@example.com"
    ],
    "grant_types": [
        "implicit"
    ],
    "id": "11c6985e-f3bd-4472-a91c-6e7743f0f8e0",
    "jwks_uri": "https://op.certification.openid.net:61353/static/jwks_61353.json",
    "public": false,
    "redirect_uris": [
        "https://op.certification.openid.net:61353/authz_cb"
    ],
    "request_uris": [
        "https://op.certification.openid.net:61353/requests/e3ecc141f5419bd33d25d760861d32323144d583feaf26eb1b5cbf20147608b9#dqJwGaR8JRmL5z5r"
    ],
    "response_types": [
        "id_token token"
    ],
    "scope": "openid offline offline_access profile email address phone",
    "token_endpoint_auth_method": "client_secret_basic",
    "userinfo_signed_response_alg": "none"
}
5.492 phase <--<-- 9 --- AsyncAuthn -->-->
5.493 AuthorizationRequest {
    "client_id": "11c6985e-f3bd-4472-a91c-6e7743f0f8e0",
    "max_age": 1,
    "nonce": "y0HZmZGyIq6zK7y9",
    "redirect_uri": "https://op.certification.openid.net:61353/authz_cb",
    "response_type": "id_token token",
    "scope": "openid",
    "state": "sX4ryu5ua0cCvhqo"
}
5.493 redirect url https://oidc-certification.ory.sh:8443/oauth2/auth?max_age=1&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61353%2Fauthz_cb&client_id=11c6985e-f3bd-4472-a91c-6e7743f0f8e0&state=sX4ryu5ua0cCvhqo&response_type=id_token+token&nonce=y0HZmZGyIq6zK7y9
5.493 redirect https://oidc-certification.ory.sh:8443/oauth2/auth?max_age=1&scope=openid&redirect_uri=https%3A%2F%2Fop.certification.openid.net%3A61353%2Fauthz_cb&client_id=11c6985e-f3bd-4472-a91c-6e7743f0f8e0&state=sX4ryu5ua0cCvhqo&response_type=id_token+token&nonce=y0HZmZGyIq6zK7y9
12.668 http args {}
12.844 response URL with fragment
12.844 response access_token=K4WFLziShcmmTmd3aTNmP_jbl2eoKRmwZNv6zhG0MvE.v_nVpIfjzS7sBifTu4mKRPKtY9Qg95cCvvK7gy7531g&expires_in=3599&id_token=eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzo0YWU0OWJmNC05ZGEwLTRhODItYmNjZS04OTNjMzcyOWYyMmEiLCJ0eXAiOiJKV1QifQ.eyJhdF9oYXNoIjoidE9pZEhFNHVjdE5pR2doN1NxN3NDQSIsImF1ZCI6WyIxMWM2OTg1ZS1mM2JkLTQ0NzItYTkxYy02ZTc3NDNmMGY4ZTAiXSwiYXV0aF90aW1lIjoxNTI5NzUzMTM2LCJleHAiOjE1Mjk3NTY3NDEsImlhdCI6MTUyOTc1MzE0MSwiaXNzIjoiaHR0cHM6Ly9vaWRjLWNlcnRpZmljYXRpb24ub3J5LnNoOjg0NDMvIiwianRpIjoiM2RjMzk5MDYtNGVhYS00YmM4LThlNjQtZjAwZjkwODQxMTBlIiwibm9uY2UiOiJ5MEhabVpHeUlxNnpLN3k5IiwicmF0IjoxNTI5NzUzMTM0LCJzdWIiOiJmb29AYmFyLmNvbSJ9.ZlzgIT_dvmp0jFqK72KH8n7DpLHk9pZa6RNE_wqaw8Smrd7j5oo0YmqOyjAHIG5jwNBsYClrm-_jIYcjnKDD47Ue7YiDfPVAmeA0Z_V_xGL_UdmKtk8_qcfb5z7K7m0vi6zCvq-lq1miXdq8h_R5jIRllj1bUNdNBJbLmpP5t87NDnB92o_vrHx3u3B7a6TTugzgb1MrK7FJA504w5OeNUTYYO3p3sQGZ3HcmJQ2ZH4Zd9YQ91Jf3GhfQF7S5EqSEuNE8uVIV1_wahqp71xh_J_xiQCsQvF3zNZqwL2AkJes6l3VltQ3dhezDVRZM0Y1nKs_OisL92bZMF4q3POuJrt87L2CPgnq3H42eMgLmbJEWIFzNTBb8Y88N8uXZonzHjOCfNDzJo1QRq4rx2knnqiJM3wlly2lcii1YakuMU2WBdaTGIEM7pUf653VqGhB31tnT-Xg0lWJjwoywZzbiirAOmZkGftt2eqGb7sXELX8Po-muq1Row_J8It0iObNtTDjAAPNzmgFqnDwf0t88Dc2TSTSXpNOevef_sdfwy4SD7a3kSCI3BmapOp_EE7lKtxIxka0Nn0x0cfVc7qlK6u_mOnv7j0zadDQftMCS7Un1cVfa20mXLfeoG307VgVj8PWCaJKynl4PQ8aGQP8_3ruDW-c_zRIJC-uM1U-Bd0&scope=openid&state=sX4ryu5ua0cCvhqo&token_type=bearer
12.845 response {'id_token': 'eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzo0YWU0OWJmNC05ZGEwLTRhODItYmNjZS04OTNjMzcyOWYyMmEiLCJ0eXAiOiJKV1QifQ.eyJhdF9oYXNoIjoidE9pZEhFNHVjdE5pR2doN1NxN3NDQSIsImF1ZCI6WyIxMWM2OTg1ZS1mM2JkLTQ0NzItYTkxYy02ZTc3NDNmMGY4ZTAiXSwiYXV0aF90aW1lIjoxNTI5NzUzMTM2LCJleHAiOjE1Mjk3NTY3NDEsImlhdCI6MTUyOTc1MzE0MSwiaXNzIjoiaHR0cHM6Ly9vaWRjLWNlcnRpZmljYXRpb24ub3J5LnNoOjg0NDMvIiwianRpIjoiM2RjMzk5MDYtNGVhYS00YmM4LThlNjQtZjAwZjkwODQxMTBlIiwibm9uY2UiOiJ5MEhabVpHeUlxNnpLN3k5IiwicmF0IjoxNTI5NzUzMTM0LCJzdWIiOiJmb29AYmFyLmNvbSJ9.ZlzgIT_dvmp0jFqK72KH8n7DpLHk9pZa6RNE_wqaw8Smrd7j5oo0YmqOyjAHIG5jwNBsYClrm-_jIYcjnKDD47Ue7YiDfPVAmeA0Z_V_xGL_UdmKtk8_qcfb5z7K7m0vi6zCvq-lq1miXdq8h_R5jIRllj1bUNdNBJbLmpP5t87NDnB92o_vrHx3u3B7a6TTugzgb1MrK7FJA504w5OeNUTYYO3p3sQGZ3HcmJQ2ZH4Zd9YQ91Jf3GhfQF7S5EqSEuNE8uVIV1_wahqp71xh_J_xiQCsQvF3zNZqwL2AkJes6l3VltQ3dhezDVRZM0Y1nKs_OisL92bZMF4q3POuJrt87L2CPgnq3H42eMgLmbJEWIFzNTBb8Y88N8uXZonzHjOCfNDzJo1QRq4rx2knnqiJM3wlly2lcii1YakuMU2WBdaTGIEM7pUf653VqGhB31tnT-Xg0lWJjwoywZzbiirAOmZkGftt2eqGb7sXELX8Po-muq1Row_J8It0iObNtTDjAAPNzmgFqnDwf0t88Dc2TSTSXpNOevef_sdfwy4SD7a3kSCI3BmapOp_EE7lKtxIxka0Nn0x0cfVc7qlK6u_mOnv7j0zadDQftMCS7Un1cVfa20mXLfeoG307VgVj8PWCaJKynl4PQ8aGQP8_3ruDW-c_zRIJC-uM1U-Bd0', 'scope': 'openid', 'access_token': 'K4WFLziShcmmTmd3aTNmP_jbl2eoKRmwZNv6zhG0MvE.v_nVpIfjzS7sBifTu4mKRPKtY9Qg95cCvvK7gy7531g', 'state': 'sX4ryu5ua0cCvhqo', 'expires_in': 3599, 'token_type': 'bearer'}
12.848 AuthorizationResponse {
    "access_token": "K4WFLziShcmmTmd3aTNmP_jbl2eoKRmwZNv6zhG0MvE.v_nVpIfjzS7sBifTu4mKRPKtY9Qg95cCvvK7gy7531g",
    "expires_in": 3599,
    "id_token": {
        "at_hash": "tOidHE4uctNiGgh7Sq7sCA",
        "aud": [
            "11c6985e-f3bd-4472-a91c-6e7743f0f8e0"
        ],
        "auth_time": 1529753136,
        "exp": 1529756741,
        "iat": 1529753141,
        "iss": "https://oidc-certification.ory.sh:8443/",
        "jti": "3dc39906-4eaa-4bc8-8e64-f00f9084110e",
        "nonce": "y0HZmZGyIq6zK7y9",
        "rat": 1529753134,
        "sub": "foo@bar.com"
    },
    "scope": "openid",
    "state": "sX4ryu5ua0cCvhqo",
    "token_type": "bearer"
}
12.848 phase <--<-- 10 --- AccessToken -->-->
12.848 phase <--<-- 11 --- Done -->-->
12.849 end 
12.849 assertion AuthTimeCheck
12.849 condition auth_time-check: status=OK [Check that the auth_time returned in the ID Token is in the expected range.]
12.849 assertion VerifyResponse
12.849 condition verify-response: status=OK [Checks that the last response was one of a possible set of OpenID Connect Responses]
12.85 assertion ClaimsCheck
12.85 condition claims-check: status=OK [Checks if specific claims is present or not]
12.85 assertion MultipleSignOn
12.85 condition multiple-sign-on: status=OK [Verifies that multiple authentications was used in the flow]
12.85 condition Done: status=OK



============================================================

Conditions

auth_time-check: status=OK [Check that the auth_time returned in the ID Token is in the expected range.]
verify-response: status=OK [Checks that the last response was one of a possible set of OpenID Connect Responses]
claims-check: status=OK [Checks if specific claims is present or not]
multiple-sign-on: status=OK [Verifies that multiple authentications was used in the flow]
Done: status=OK



============================================================

RESULT: PASSED