Started by user Javier Blum Building on master in workspace /home/tomcat/.jenkins/jobs/oxAuth/workspace > git rev-parse --is-inside-work-tree # timeout=10 Fetching changes from the remote Git repository > git config remote.origin.url https://github.com/GluuFederation/oxAuth # timeout=10 Fetching upstream changes from https://github.com/GluuFederation/oxAuth > git --version # timeout=10 > git fetch --tags --progress https://github.com/GluuFederation/oxAuth +refs/heads/*:refs/remotes/origin/* > git rev-parse refs/remotes/origin/version_3.1.4^{commit} # timeout=10 > git rev-parse refs/remotes/origin/origin/version_3.1.4^{commit} # timeout=10 Checking out Revision 87bb78eb5e2c1773b7d5ca6428042e05a59d7b74 (refs/remotes/origin/version_3.1.4) > git config core.sparsecheckout # timeout=10 > git checkout -f 87bb78eb5e2c1773b7d5ca6428042e05a59d7b74 Commit message: "oxAuth #812 Restrict requesting claims individually Test updated" > git rev-list --no-walk b7d59ca46539d4809260102d42a39d33c8760cdb # timeout=10 [workspace] $ /bin/bash /opt/tomcat/temp/jenkins4002960994041952192.sh Cloning into 'oxHudsonProfiles'... [workspace] $ /home/tomcat/.jenkins/tools/hudson.tasks.Maven_MavenInstallation/maven_3.3.9/bin/mvn -DVERSION_NAME=version_3.1.4 -DPROFILE_NAME=ce-dev4 -DDEVELOPMENT_BUILD=true -DMAVEN_SKIP_TESTS=false -Dpython.import.site=false -DPYTHON_HOME=/opt/jython -Dcfg=ce-dev4 -Dmaven.test.skip=false -Ddevelopment-build=true clean compile install findbugs:findbugs javadoc:javadoc site [INFO] Scanning for projects... [WARNING] [WARNING] Some problems were encountered while building the effective model for org.xdi:oxauth-rp:war:3.1.4-SNAPSHOT [WARNING] 'build.plugins.plugin.version' for org.mortbay.jetty:jetty-maven-plugin is missing. @ org.xdi:oxauth-rp:[unknown-version], /home/tomcat/.jenkins/jobs/oxAuth/workspace/RP/pom.xml, line 74, column 12 [WARNING] [WARNING] It is highly recommended to fix these problems because they threaten the stability of your build. [WARNING] [WARNING] For this reason, future Maven versions might no longer support building such malformed projects. [WARNING] [INFO] ------------------------------------------------------------------------ [INFO] Reactor Build Order: [INFO] [INFO] oxAuth [INFO] oxAuth Model [INFO] oxAuth Client [INFO] oxauth-static [INFO] oxAuth RP [INFO] oxAuth RP Demo [INFO] oxAuth Server [INFO] [INFO] ------------------------------------------------------------------------ [INFO] Building oxAuth 3.1.4-SNAPSHOT [INFO] ------------------------------------------------------------------------ [INFO] [INFO] --- maven-clean-plugin:2.5:clean (default-clean) @ oxauth --- [INFO] Deleting /home/tomcat/.jenkins/jobs/oxAuth/workspace/target [INFO] [INFO] --- maven-install-plugin:2.3.1:install (default-install) @ oxauth --- [INFO] Installing /home/tomcat/.jenkins/jobs/oxAuth/workspace/pom.xml to /var/www/html/maven/org/xdi/oxauth/3.1.4-SNAPSHOT/oxauth-3.1.4-SNAPSHOT.pom [INFO] [INFO] --- findbugs-maven-plugin:3.0.4:findbugs (default-cli) @ oxauth --- [INFO] [INFO] >>> maven-javadoc-plugin:2.10.4:javadoc (default-cli) > generate-sources @ oxauth >>> [INFO] [INFO] <<< maven-javadoc-plugin:2.10.4:javadoc (default-cli) < generate-sources @ oxauth <<< [INFO] [INFO] --- maven-javadoc-plugin:2.10.4:javadoc (default-cli) @ oxauth --- [INFO] [INFO] --- maven-site-plugin:2.1.1:site (default-site) @ oxauth --- [INFO] [INFO] ------------------------------------------------------------------------ [INFO] Building oxAuth Model 3.1.4-SNAPSHOT [INFO] ------------------------------------------------------------------------ [INFO] [INFO] --- maven-clean-plugin:2.5:clean (default-clean) @ oxauth-model --- [INFO] Deleting /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target [INFO] [INFO] --- maven-resources-plugin:2.6:resources (default-resources) @ oxauth-model --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] Copying 1 resource [INFO] [INFO] --- maven-compiler-plugin:2.3.2:compile (default-compile) @ oxauth-model --- [INFO] Compiling 158 source files to /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/classes [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/crypto/AbstractCryptoProvider.java:[21,23] RSAPublicKeyImpl is internal proprietary API and may be removed in a future release [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/crypto/AbstractCryptoProvider.java:[21,23] RSAPublicKeyImpl is internal proprietary API and may be removed in a future release [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/crypto/AbstractCryptoProvider.java:[21,23] RSAPublicKeyImpl is internal proprietary API and may be removed in a future release [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/crypto/AbstractCryptoProvider.java:[144,36] RSAPublicKeyImpl is internal proprietary API and may be removed in a future release [INFO] [INFO] --- maven-resources-plugin:2.6:resources (default-resources) @ oxauth-model --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] Copying 1 resource [INFO] [INFO] --- maven-compiler-plugin:2.3.2:compile (default-compile) @ oxauth-model --- [INFO] Nothing to compile - all classes are up to date [INFO] [INFO] --- maven-resources-plugin:2.6:testResources (default-testResources) @ oxauth-model --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] Copying 4 resources [INFO] [INFO] --- maven-compiler-plugin:2.3.2:testCompile (default-testCompile) @ oxauth-model --- [INFO] Compiling 5 source files to /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/test-classes [INFO] [INFO] --- maven-surefire-plugin:2.19.1:test (default-test) @ oxauth-model --- ------------------------------------------------------- T E S T S ------------------------------------------------------- Running TestSuite CodeVerifier{codeVerifier='fyzkfCr-Ug4eXW-if6AAzu7TY43WgA3b1T_xWcCr2~NZEDekTAskuGaZ5AYj.ExWyq0OUTXz3ERWrVQGCU5gOYh2a1tTFQoG2oVXvsk6YjtJ2vUlSnv58r-o4b4Ww4ul', codeChallenge='fyzkfCr-Ug4eXW-if6AAzu7TY43WgA3b1T_xWcCr2~NZEDekTAskuGaZ5AYj.ExWyq0OUTXz3ERWrVQGCU5gOYh2a1tTFQoG2oVXvsk6YjtJ2vUlSnv58r-o4b4Ww4ul', transformationType=PLAIN} CodeVerifier{codeVerifier='THWIweCmYvcDaG~HnOeh4hCwQ4fTF2elvoQzSktCHZ6wdU9hFis5CuvtS1cIR1twEaoGx-quu4EL5o~8T4UAN5WMq23thN1cyvxfQRkZP_8FnlaZ~WwNFrpJqYhyfQ.1', codeChallenge='gvM2LFvZgryaopTw8CmdPGdKeX5w43yEctz0BcsgaOA', transformationType=S256} SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder". SLF4J: Defaulting to no-operation (NOP) logger implementation SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further details. Hi there from Javascript, ERROR StatusLogger No log4j2 configuration file found. Using default configuration: logging only errors to the console. Set system property 'org.apache.logging.log4j.simplelog.StatusLogger.level' to TRACE to show Log4j2 internal initialization logging. Tests run: 7, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 2.378 sec - in TestSuite Results : Tests run: 7, Failures: 0, Errors: 0, Skipped: 0 [INFO] [INFO] --- maven-jar-plugin:2.4:jar (default-jar) @ oxauth-model --- [INFO] Building jar: /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/oxauth-model.jar [INFO] [INFO] --- maven-jar-plugin:2.4:test-jar (default) @ oxauth-model --- [INFO] Building jar: /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/oxauth-model-tests.jar [INFO] [INFO] --- maven-install-plugin:2.3.1:install (default-install) @ oxauth-model --- [INFO] Installing /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/oxauth-model.jar to /var/www/html/maven/org/xdi/oxauth-model/3.1.4-SNAPSHOT/oxauth-model-3.1.4-SNAPSHOT.jar [INFO] Installing /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/pom.xml to /var/www/html/maven/org/xdi/oxauth-model/3.1.4-SNAPSHOT/oxauth-model-3.1.4-SNAPSHOT.pom [INFO] Installing /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/oxauth-model-tests.jar to /var/www/html/maven/org/xdi/oxauth-model/3.1.4-SNAPSHOT/oxauth-model-3.1.4-SNAPSHOT-tests.jar [INFO] [INFO] --- findbugs-maven-plugin:3.0.4:findbugs (default-cli) @ oxauth-model --- [INFO] Fork Value is true [java] Warnings generated: 53 [INFO] Done FindBugs Analysis.... [INFO] [INFO] >>> maven-javadoc-plugin:2.10.4:javadoc (default-cli) > generate-sources @ oxauth-model >>> [INFO] [INFO] <<< maven-javadoc-plugin:2.10.4:javadoc (default-cli) < generate-sources @ oxauth-model <<< [INFO] [INFO] --- maven-javadoc-plugin:2.10.4:javadoc (default-cli) @ oxauth-model --- [INFO] Loading source files for package org.xdi.oxauth.model.uma... Loading source files for package org.xdi.oxauth.model.uma.wrapper... Loading source files for package org.xdi.oxauth.model.uma.persistence... Loading source files for package org.xdi.oxauth.model.jwt... Loading source files for package org.xdi.oxauth.model.common... Loading source files for package org.xdi.oxauth.model.jwk... Loading source files for package org.xdi.oxauth.model.exception... Loading source files for package org.xdi.oxauth.model.session... Loading source files for package org.xdi.oxauth.model.fido.u2f... Loading source files for package org.xdi.oxauth.model.fido.u2f.message... Loading source files for package org.xdi.oxauth.model.fido.u2f.exception... Loading source files for package org.xdi.oxauth.model.fido.u2f.protocol... Loading source files for package org.xdi.oxauth.model.gluu... Loading source files for package org.xdi.oxauth.model.register... Loading source files for package org.xdi.oxauth.model.discovery... Loading source files for package org.xdi.oxauth.model.jwe... Loading source files for package org.xdi.oxauth.model.userinfo... Loading source files for package org.xdi.oxauth.model.util... Loading source files for package org.xdi.oxauth.model.authorize... Loading source files for package org.xdi.oxauth.model.configuration... Loading source files for package org.xdi.oxauth.model.error... Loading source files for package org.xdi.oxauth.model.jws... Loading source files for package org.xdi.oxauth.model.token... Loading source files for package org.xdi.oxauth.model.crypto... Loading source files for package org.xdi.oxauth.model.crypto.signature... Loading source files for package org.xdi.oxauth.model.crypto.binding... Loading source files for package org.xdi.oxauth.model.crypto.encryption... Constructing Javadoc information... Standard Doclet version 1.8.0_121 Building tree for all the packages and classes... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/ClaimTokenFormatType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/JsonLogic.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/JsonLogicNode.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/JsonLogicNodeParser.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/PermissionTicket.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/RptIntrospectionResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/RptProfiles.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/RPTResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaConstants.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaErrorResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaMetadata.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaNeedInfoResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaPermission.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaPermissionList.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaResource.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaResourceResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaResourceWithId.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaScopeDescription.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaScopeType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/UmaTokenResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/wrapper/Token.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/persistence/UmaPermission.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/persistence/UmaResource.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/persistence/UmaScopeDescription.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/Jwt.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/JwtClaimName.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/JwtClaims.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/JwtClaimSet.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/JwtHeader.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/JwtHeaderName.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/JwtStateClaimName.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/JwtSubClaimObject.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/JwtType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/PureJwt.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/AuthenticationMethod.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/AuthorizationMethod.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/Display.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/GrantType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/HasParamName.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/Holder.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/Id.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/IdType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/IntrospectionResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/JSONable.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/PairwiseIdType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/ProgrammingLanguage.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/Prompt.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/ResponseMode.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/ResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/ScopeType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/SubjectType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/TokenType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/WebKeyStorage.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/JSONWebKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/JSONWebKeySet.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/JWKParameter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/KeyType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/Use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/InvalidClaimException.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/InvalidJweException.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/InvalidJwtException.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/InvalidParameterException.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/SignatureException.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/session/EndSessionErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/session/EndSessionRequestParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/session/EndSessionResponseParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/DeviceRegistrationStatus.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/U2fConfiguration.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/U2fConstants.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/U2fErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/message/RawAuthenticateResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/message/RawRegisterResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/exception/BadInputException.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/exception/RegistrationNotAllowed.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/AuthenticateRequest.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/AuthenticateRequestMessage.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/AuthenticateResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/AuthenticateStatus.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/ClientData.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/DeviceData.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/RegisterRequest.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/RegisterRequestMessage.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/RegisterResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/RegisterStatus.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/gluu/GluuConfiguration.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/gluu/GluuErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/register/ApplicationType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/register/RegisterErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/register/RegisterRequestParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/register/RegisterResponseParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/discovery/OAuth2Discovery.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/discovery/WebFingerLink.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/discovery/WebFingerParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/AbstractJweDecrypter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/AbstractJweEncrypter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/Jwe.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/JweDecrypter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/JweDecrypterImpl.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/JweEncrypter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/JweEncrypterImpl.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/KeyDerivationFunction.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/userinfo/Schema.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/userinfo/UserInfoErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/Base64Util.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/JwtUtil.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/LocaleUtil.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/Pair.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/SecurityProviderUtility.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/StringUtils.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/SubjectIdentifierGenerator.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/URLPatternList.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/Util.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/AuthorizeErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/AuthorizeRequestParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/AuthorizeResponseParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/CodeVerifier.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/CodeVerifier.CodeChallengeMethod.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/AppConfiguration.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/AuthenticationFilter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/BaseFilter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/ClientAuthenticationFilter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/Configuration.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/ConfigurationResponseClaim.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/CorsConfigurationFilter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/error/IErrorType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/AbstractJwsSigner.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/ECDSASigner.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/HMACSigner.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/JwsSigner.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/PlainTextSignature.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/RSASigner.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/token/ClientAssertionType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/token/JsonWebResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/token/TokenErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/AbstractCryptoProvider.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/Certificate.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/CryptoProviderFactory.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/Key.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/KeyFactory.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/OxAuthCryptoProvider.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/OxElevenCryptoProvider.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/PrivateKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/PublicKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/AbstractSigner.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/ECDSAKeyFactory.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/ECDSAPrivateKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/ECDSAPublicKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/ECEllipticCurve.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/RSAKeyFactory.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/RSAPrivateKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/RSAPublicKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/SignatureAlgorithm.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/SignatureAlgorithmFamily.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/Signer.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/binding/TokenBindingExtensionType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/binding/TokenBindingType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/encryption/BlockEncryptionAlgorithm.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/encryption/KeyEncryptionAlgorithm.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/overview-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/binding/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/binding/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/binding/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/encryption/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/encryption/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/encryption/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/discovery/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/discovery/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/discovery/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/error/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/error/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/error/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/exception/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/exception/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/exception/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/message/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/message/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/message/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/gluu/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/gluu/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/gluu/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/register/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/register/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/register/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/session/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/session/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/session/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/token/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/token/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/token/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/persistence/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/persistence/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/persistence/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/wrapper/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/wrapper/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/wrapper/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/userinfo/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/userinfo/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/userinfo/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/package-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/package-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/package-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/constant-values.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/serialized-form.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/JsonLogic.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaScopeDescription.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaResourceResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/JsonLogicNodeParser.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaPermission.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/RptIntrospectionResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaConstants.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaErrorResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaScopeType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/PermissionTicket.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/ClaimTokenFormatType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaResourceWithId.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaResource.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/JsonLogicNode.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/RptProfiles.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaTokenResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaMetadata.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaNeedInfoResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/UmaPermissionList.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/class-use/RPTResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/wrapper/class-use/Token.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/persistence/class-use/UmaScopeDescription.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/persistence/class-use/UmaPermission.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/persistence/class-use/UmaResource.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/class-use/Jwt.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/class-use/JwtHeader.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/class-use/PureJwt.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/class-use/JwtStateClaimName.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/class-use/JwtClaimSet.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/class-use/JwtType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/class-use/JwtSubClaimObject.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/class-use/JwtClaims.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/class-use/JwtClaimName.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/class-use/JwtHeaderName.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/ProgrammingLanguage.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/IntrospectionResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/HasParamName.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/IdType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/GrantType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/AuthorizationMethod.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/ResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/PairwiseIdType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/Holder.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/JSONable.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/TokenType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/Id.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/Prompt.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/ResponseMode.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/WebKeyStorage.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/ScopeType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/Display.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/SubjectType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/class-use/AuthenticationMethod.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/class-use/JSONWebKeySet.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/class-use/JWKParameter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/class-use/Use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/class-use/KeyType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/class-use/JSONWebKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/class-use/InvalidParameterException.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/class-use/SignatureException.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/class-use/InvalidJwtException.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/class-use/InvalidJweException.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/class-use/InvalidClaimException.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/session/class-use/EndSessionErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/session/class-use/EndSessionRequestParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/session/class-use/EndSessionResponseParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/class-use/U2fConstants.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/class-use/U2fConfiguration.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/class-use/DeviceRegistrationStatus.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/class-use/U2fErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/message/class-use/RawAuthenticateResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/message/class-use/RawRegisterResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/exception/class-use/RegistrationNotAllowed.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/exception/class-use/BadInputException.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/class-use/AuthenticateRequestMessage.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/class-use/DeviceData.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/class-use/AuthenticateRequest.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/class-use/RegisterResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/class-use/RegisterStatus.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/class-use/AuthenticateResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/class-use/ClientData.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/class-use/AuthenticateStatus.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/class-use/RegisterRequestMessage.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/class-use/RegisterRequest.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/gluu/class-use/GluuConfiguration.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/gluu/class-use/GluuErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/register/class-use/RegisterRequestParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/register/class-use/ApplicationType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/register/class-use/RegisterErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/register/class-use/RegisterResponseParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/discovery/class-use/WebFingerParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/discovery/class-use/OAuth2Discovery.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/discovery/class-use/WebFingerLink.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/class-use/AbstractJweEncrypter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/class-use/JweEncrypterImpl.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/class-use/JweEncrypter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/class-use/JweDecrypter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/class-use/KeyDerivationFunction.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/class-use/JweDecrypterImpl.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/class-use/Jwe.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/class-use/AbstractJweDecrypter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/userinfo/class-use/UserInfoErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/userinfo/class-use/Schema.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/class-use/URLPatternList.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/class-use/Base64Util.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/class-use/SecurityProviderUtility.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/class-use/LocaleUtil.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/class-use/Util.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/class-use/StringUtils.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/class-use/SubjectIdentifierGenerator.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/class-use/JwtUtil.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/class-use/Pair.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/class-use/AuthorizeResponseParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/class-use/CodeVerifier.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/class-use/CodeVerifier.CodeChallengeMethod.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/class-use/AuthorizeErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/class-use/AuthorizeRequestParam.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/class-use/AuthenticationFilter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/class-use/Configuration.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/class-use/BaseFilter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/class-use/AppConfiguration.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/class-use/CorsConfigurationFilter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/class-use/ConfigurationResponseClaim.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/class-use/ClientAuthenticationFilter.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/error/class-use/IErrorType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/class-use/RSASigner.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/class-use/HMACSigner.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/class-use/AbstractJwsSigner.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/class-use/PlainTextSignature.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/class-use/ECDSASigner.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/class-use/JwsSigner.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/token/class-use/JsonWebResponse.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/token/class-use/TokenErrorResponseType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/token/class-use/ClientAssertionType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/class-use/OxElevenCryptoProvider.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/class-use/OxAuthCryptoProvider.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/class-use/PrivateKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/class-use/AbstractCryptoProvider.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/class-use/Key.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/class-use/PublicKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/class-use/CryptoProviderFactory.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/class-use/Certificate.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/class-use/KeyFactory.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/class-use/RSAKeyFactory.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/class-use/ECDSAPrivateKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/class-use/ECDSAPublicKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/class-use/ECDSAKeyFactory.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/class-use/SignatureAlgorithm.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/class-use/SignatureAlgorithmFamily.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/class-use/RSAPrivateKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/class-use/Signer.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/class-use/RSAPublicKey.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/class-use/AbstractSigner.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/class-use/ECEllipticCurve.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/binding/class-use/TokenBindingExtensionType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/binding/class-use/TokenBindingType.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/encryption/class-use/BlockEncryptionAlgorithm.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/encryption/class-use/KeyEncryptionAlgorithm.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/authorize/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/common/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/configuration/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/binding/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/encryption/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/crypto/signature/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/discovery/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/error/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/exception/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/exception/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/message/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/fido/u2f/protocol/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/gluu/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwe/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwk/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jws/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/jwt/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/register/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/session/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/token/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/persistence/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/uma/wrapper/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/userinfo/package-use.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/org/xdi/oxauth/model/util/package-use.html... Building index for all the packages and classes... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/overview-tree.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/index-all.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/deprecated-list.html... Building index for all classes... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/allclasses-frame.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/allclasses-noframe.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/index.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/overview-summary.html... Generating /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/target/site/apidocs/help-doc.html... 12 warnings [WARNING] Javadoc Warnings [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/uma/UmaNeedInfoResponse.java:65: warning: no @param for clientId [WARNING] public String buildClaimsGatheringUrl(String clientId, String claimsRedirectUri) { [WARNING] ^ [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/uma/UmaNeedInfoResponse.java:65: warning: no @param for claimsRedirectUri [WARNING] public String buildClaimsGatheringUrl(String clientId, String claimsRedirectUri) { [WARNING] ^ [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/jwt/JwtHeader.java:44: warning: no @return [WARNING] public JwtHeader setType(JwtType type) { [WARNING] ^ [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/jwt/JwtHeader.java:63: warning: no @return [WARNING] public JwtHeader setAlgorithm(SignatureAlgorithm algorithm) { [WARNING] ^ [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/jwt/JwtHeader.java:77: warning: no @return [WARNING] public JwtHeader setAlgorithm(KeyEncryptionAlgorithm algorithm) { [WARNING] ^ [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/jwt/JwtHeader.java:96: warning: no @return [WARNING] public JwtHeader setKeyId(String keyId) { [WARNING] ^ [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/common/ScopeType.java:30: warning: empty

tag [WARNING] *

[WARNING] ^ [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/fido/u2f/message/RawAuthenticateResponse.java:37: warning: no @return [WARNING] public byte getUserPresence() { [WARNING] ^ [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/fido/u2f/message/RawAuthenticateResponse.java:45: warning: no @return [WARNING] public long getCounter() { [WARNING] ^ [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/fido/u2f/message/RawAuthenticateResponse.java:52: warning: no @return [WARNING] public byte[] getSignature() { [WARNING] ^ [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/util/Util.java:210: warning: no description for @return [WARNING] * @return [WARNING] ^ [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Model/src/main/java/org/xdi/oxauth/model/util/Util.java:212: warning: no @throws for org.codehaus.jettison.json.JSONException [WARNING] public static Map jsonObjectArrayStringAsMap(String jsonString) throws JSONException { [WARNING] ^ [INFO] [INFO] --- maven-site-plugin:2.1.1:site (default-site) @ oxauth-model --- [INFO] [INFO] ------------------------------------------------------------------------ [INFO] Building oxAuth Client 3.1.4-SNAPSHOT [INFO] ------------------------------------------------------------------------ [INFO] [INFO] --- maven-clean-plugin:2.5:clean (default-clean) @ oxauth-client --- [INFO] Deleting /home/tomcat/.jenkins/jobs/oxAuth/workspace/Client/target [INFO] [INFO] --- maven-resources-plugin:2.6:resources (default-resources) @ oxauth-client --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] skip non existing resourceDirectory /home/tomcat/.jenkins/jobs/oxAuth/workspace/Client/src/main/resources [INFO] [INFO] --- maven-compiler-plugin:2.3.2:compile (default-compile) @ oxauth-client --- [INFO] Compiling 59 source files to /home/tomcat/.jenkins/jobs/oxAuth/workspace/Client/target/classes [INFO] [INFO] --- maven-resources-plugin:2.6:resources (default-resources) @ oxauth-client --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] skip non existing resourceDirectory /home/tomcat/.jenkins/jobs/oxAuth/workspace/Client/src/main/resources [INFO] [INFO] --- maven-compiler-plugin:2.3.2:compile (default-compile) @ oxauth-client --- [INFO] Nothing to compile - all classes are up to date [INFO] [INFO] --- maven-resources-plugin:2.6:testResources (default-testResources) @ oxauth-client --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] Copying 17 resources [INFO] [INFO] --- maven-compiler-plugin:2.3.2:testCompile (default-testCompile) @ oxauth-client --- [INFO] Compiling 145 source files to /home/tomcat/.jenkins/jobs/oxAuth/workspace/Client/target/test-classes [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Client/src/test/java/org/xdi/oxauth/ws/rs/WebKeysTest.java:[14,24] X509CertImpl is internal proprietary API and may be removed in a future release [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Client/src/test/java/org/xdi/oxauth/ws/rs/WebKeysTest.java:[14,24] X509CertImpl is internal proprietary API and may be removed in a future release [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Client/src/test/java/org/xdi/oxauth/ws/rs/WebKeysTest.java:[14,24] X509CertImpl is internal proprietary API and may be removed in a future release [WARNING] /home/tomcat/.jenkins/jobs/oxAuth/workspace/Client/src/test/java/org/xdi/oxauth/ws/rs/WebKeysTest.java:[47,35] X509CertImpl is internal proprietary API and may be removed in a future release [INFO] [INFO] --- maven-surefire-plugin:2.19.1:test (default-test) @ oxauth-client --- ------------------------------------------------------- T E S T S ------------------------------------------------------- Running TestSuite ERROR StatusLogger No log4j2 configuration file found. Using default configuration: logging only errors to the console. Set system property 'org.apache.logging.log4j.simplelog.StatusLogger.level' to TRACE to show Log4j2 internal initialization logging. Invoked init test suite method ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:02:36 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:36 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: applicationTypeNativeSubjectTypePairwise ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "native", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "scope": "openid profile address email user_name" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1344 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:36 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!120F.9405.9F22.81B4", "client_secret": "a5f93c03-0e3d-43aa-b5f6-d7d9b09d3519", "registration_access_token": "f81833d3-cabd-48e6-84e7-04665bd45c41", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!120F.9405.9F22.81B4", "client_id_issued_at": 1530745356, "client_secret_expires_at": 1530831756, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "native", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "openid profile address email user_name", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer f81833d3-cabd-48e6-84e7-04665bd45c41 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1344 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:36 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!120F.9405.9F22.81B4", "client_secret": "a5f93c03-0e3d-43aa-b5f6-d7d9b09d3519", "registration_access_token": "f81833d3-cabd-48e6-84e7-04665bd45c41", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!120F.9405.9F22.81B4", "client_id_issued_at": 1530745356, "client_secret_expires_at": 1530831756, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "native", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "openid profile address email user_name", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21120F.9405.9F22.81B4&scope=openid+profile+address+email+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=51cfef23-5833-4f98-9277-20a0a0d3d52b&nonce=4a9dc631-3095-4319-90c4-12d22b60e200 19:02:59.421 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:3a266a22-cffe-4092-a332-4faa01d80776 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21120F.9405.9F22.81B4&scope=openid+profile+address+email+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=51cfef23-5833-4f98-9277-20a0a0d3d52b&nonce=4a9dc631-3095-4319-90c4-12d22b60e200 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=14200ff5-e2af-4d20-9ea4-a5beb97d9f51&scope=address+openid+user_name+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCExMjBGLjk0MDUuOUYyMi44MUI0IiwiZXhwIjoxNTMwNzQ4OTYzLCJpYXQiOjE1MzA3NDUzNjMsIm5vbmNlIjoiNGE5ZGM2MzEtMzA5NS00MzE5LTkwYzQtMTJkMjJiNjBlMjAwIiwiYXV0aF90aW1lIjoxNTMwNzQ1MzYzLCJjX2hhc2giOiJ2eG93LU1LRWUyWjRBMy14djUxZlJBIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiSDBVeF9XcHdwQTU0cEN2WFAxbEthU01RSE1lMnYyQXY0d2owcDZXal91NCJ9.DtjTNv4R-UCmCpV6v3rGSnEUkZRArms8b43LImzZwQdDS0H3JjXMPOiC0KxB8TKqZs0FSboVI-HIAvzAiojucayX5hV-t9yQXVLiVFETlxdXu9iTFH-k4tog7Sj80H99EWB-favqlhbb19OEhLaxKM1XLntKyxCP9gNXvP5ydy1ruyvMSzCPzcwKiAsY2iJDqFg7VyR0-pXRNa9qH5bv28b_d3c_DawJkoV-om1A4BsQMEekp_-bvaU6GiX3IQpjsgFvA5UptN1TeJDe5L-gd8k-lA_-A1xRsUVlS7bLbXEKcH0IpA9BqZTYI3x6sHh2IrfMAxjIyxtSbC2h0JGYFg&session_id=cf1c37d8-5eee-4199-8a65-f6ce8a81acf0&state=51cfef23-5833-4f98-9277-20a0a0d3d52b&session_state=3a266a22-cffe-4092-a332-4faa01d80776 ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxMTIwRi45NDA1LjlGMjIuODFCNDphNWY5M2MwMy0wZTNkLTQzYWEtYjVmNi1kN2Q5YjA5ZDM1MTk= grant_type=authorization_code&code=14200ff5-e2af-4d20-9ea4-a5beb97d9f51&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:43 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"534e6447-26b4-4380-9f7b-61b4b3d8f5e9","token_type":"bearer","expires_in":299,"refresh_token":"ab80eb83-a42c-4ed4-8b1f-f0d4de070795","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCExMjBGLjk0MDUuOUYyMi44MUI0IiwiZXhwIjoxNTMwNzQ4OTYzLCJpYXQiOjE1MzA3NDUzNjMsIm5vbmNlIjoiNGE5ZGM2MzEtMzA5NS00MzE5LTkwYzQtMTJkMjJiNjBlMjAwIiwiYXV0aF90aW1lIjoxNTMwNzQ1MzYzLCJhdF9oYXNoIjoicVhnbUxMRE5VYTRfR3Fxc3p3aU1udyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IkgwVXhfV3B3cEE1NHBDdlhQMWxLYVNNUUhNZTJ2MkF2NHdqMHA2V2pfdTQifQ.btmI3jnVsBcKn76K45CgHGu8xbfi5mTb4gPwiFByX9pBr8ZNvboZlKF4-8OThcjy4-BA92WHIvLGmq6zpUSJVw8LGN119QtwVysF5qVe1dpHq8-OE4_t5WONDZTJVUF_yihQJDoVKo_D-RzBoro_JPxyOz5gCyD8odmpw8oiVM6Wx8PlSiAnBQ2DRdCF_a6a69UCb6eauLMajUKDmBB3jBz-hpO9ionpAEuhLJ9dWeaqbx6txKXnLbpFDNNCdF26XF8xbwTDdiwWq1X89HUL92vSvcip655WAQLDV48ilMpBPCIH9SKUCPuGTpG_6MUlDFIuvAfKzBJaX0cckAdztA"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxMTIwRi45NDA1LjlGMjIuODFCNDphNWY5M2MwMy0wZTNkLTQzYWEtYjVmNi1kN2Q5YjA5ZDM1MTk= grant_type=refresh_token&scope=address+openid+user_name+profile+email&refresh_token=ab80eb83-a42c-4ed4-8b1f-f0d4de070795 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 198 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:44 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"56275cd2-c708-480f-bb5a-9acaeebbabfa","token_type":"bearer","expires_in":299,"refresh_token":"e22e0816-f099-47ec-88d6-30aa71738628","scope":"address openid user_name profile email"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/userinfo HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 56275cd2-c708-480f-bb5a-9acaeebbabfa ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 634 Content-Type: application/json;charset=utf-8 Date: Wed, 04 Jul 2018 23:02:44 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"address":{"street_address":"621 East 6th Street","country":"US","locality":"Austin","region":"Texas"},"sub":"H0Ux_WpwpA54pCvXP1lKaSMQHMe2v2Av4wj0p6Wj_u4","user_name":"test_user","website":"http://www.gluu.org","zoneinfo":"America/Chicago","birthdate":"19830106010101.253Z","gender":"Male","profile":"http://www.mywebsite.com/profile","preferred_username":"user","given_name":"Test","middle_name":"User","locale":"en-US","picture":"http://www.gluu.org/wp-content/uploads/2012/04/mike3.png","updated_at":1526659613066,"name":"oxAuth Test User","nickname":"user","family_name":"User","email_verified":true,"email":"test_user@test.org"} ####################################################### TEST: applicationTypeNativeSubjectTypePublic ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "native", "client_name": "oxAuth test app", "subject_type": "public", "scope": "openid profile address email user_name" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1209 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:44 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0509.DEA5.8CE7.7E72", "client_secret": "40594769-d40b-4616-a48f-86222d286a92", "registration_access_token": "7f99c62e-0815-4a44-a091-7510d8a41efe", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0509.DEA5.8CE7.7E72", "client_id_issued_at": 1530745364, "client_secret_expires_at": 1530831764, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "native", "client_name": "oxAuth test app", "subject_type": "public", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "openid profile address email user_name", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 7f99c62e-0815-4a44-a091-7510d8a41efe ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1209 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:44 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0509.DEA5.8CE7.7E72", "client_secret": "40594769-d40b-4616-a48f-86222d286a92", "registration_access_token": "7f99c62e-0815-4a44-a091-7510d8a41efe", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0509.DEA5.8CE7.7E72", "client_id_issued_at": 1530745364, "client_secret_expires_at": 1530831764, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "native", "client_name": "oxAuth test app", "subject_type": "public", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "openid profile address email user_name", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210509.DEA5.8CE7.7E72&scope=openid+profile+address+email+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=7e4ec331-ce29-4125-8678-cc33a65a15b1&nonce=d3278b0d-f8f6-449c-b412-711dc4a8dcbe 19:03:05.162 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:a902faf9-0c99-4932-87c4-f3e30d115cac ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210509.DEA5.8CE7.7E72&scope=openid+profile+address+email+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=7e4ec331-ce29-4125-8678-cc33a65a15b1&nonce=d3278b0d-f8f6-449c-b412-711dc4a8dcbe ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=11a6d028-4d28-430f-a539-61bc82bd66ce&scope=address+openid+user_name+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwNTA5LkRFQTUuOENFNy43RTcyIiwiZXhwIjoxNTMwNzQ4OTY3LCJpYXQiOjE1MzA3NDUzNjcsIm5vbmNlIjoiZDMyNzhiMGQtZjhmNi00NDljLWI0MTItNzExZGM0YThkY2JlIiwiYXV0aF90aW1lIjoxNTMwNzQ1MzY2LCJjX2hhc2giOiJ4LVlSMU9tUkJyRDA0QjNKblFiUzRRIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDAhQjFGMy5BRUFFLkI3OTgifQ.Q3BnEKAdKXLiEqapvn3yD0N-Z2OS9-RhjzJe2ApOFPVpfeCkS8f9rNpyy2RGZ7abr3Y6i1MDVSCGs8KXW0SQT2xkOZU2G9m9Q5x8aEOeUgRB7R6tuBPcYPFatiYIYyQCqDLUOp5Dp6jefSKXeEgS556N4KOp5I9Ai8hvi6cdFYxUx5vnhcNAa4CfLUcuaXW_XyHyeKRG6eIK7Y_HWcFPVcpPlTnAEOKrVJjeOwszfeMbmk1eMaPwwG7jQSqsipZk-_ANHE-vx1V0Yc5dPFqOd3bDypVnM7XTdpxQz62wGL6K56yrzTZPC7iEFn6JNsJFsz2sXuIQBGErYGXKJgNEzA&session_id=7f0e4bad-ee12-44c8-99ce-6664ad9d2caa&state=7e4ec331-ce29-4125-8678-cc33a65a15b1&session_state=a902faf9-0c99-4932-87c4-f3e30d115cac ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxMDUwOS5ERUE1LjhDRTcuN0U3Mjo0MDU5NDc2OS1kNDBiLTQ2MTYtYTQ4Zi04NjIyMmQyODZhOTI= grant_type=authorization_code&code=11a6d028-4d28-430f-a539-61bc82bd66ce&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1074 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:47 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"3628cdd6-15a5-4559-9633-103063d6a1e4","token_type":"bearer","expires_in":299,"refresh_token":"9bd30865-0e30-487f-8492-78bd55ada8f8","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwNTA5LkRFQTUuOENFNy43RTcyIiwiZXhwIjoxNTMwNzQ4OTY3LCJpYXQiOjE1MzA3NDUzNjcsIm5vbmNlIjoiZDMyNzhiMGQtZjhmNi00NDljLWI0MTItNzExZGM0YThkY2JlIiwiYXV0aF90aW1lIjoxNTMwNzQ1MzY2LCJhdF9oYXNoIjoiaHJJY1JPcGZuZE1MaTFvQWZWcUtrZyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IkAhMzhENC40MTBDLjFENDMuODkzMiEwMDAxITM3RjIuQjc0NCEwMDAwIUIxRjMuQUVBRS5CNzk4In0.ZC84GD4vbNLBde3Vlwz-E6GLZhkx9kBC0Bk4cE7RUPWczeADzUjVXwZCYV0KdARuVvBix234NjA_Ux2p8PnhBt2pQaUiq1mNZFDjH5OMUquX7JZpjULkA5y3eMNU4fD0fDPllCzVkPFslICSV0gzwB5n4cQont_pdI4RSXM7hAFh2pYyl2TKpKjhuuNEvSKMxkaQuCBmpEdwDUCriYiwMIjF6SLC9R7KZREYfaTkbiYEf5ElCNhAJraBesl5XlZkC-XFG3fQW-GS5odavsa53PQP9jaC01ti2TKWTWKKUcUbfNyMSleKsw9f518-1UInDawKJYmGvz6zzM9Wl3zKKw"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxMDUwOS5ERUE1LjhDRTcuN0U3Mjo0MDU5NDc2OS1kNDBiLTQ2MTYtYTQ4Zi04NjIyMmQyODZhOTI= grant_type=refresh_token&scope=address+openid+user_name+profile+email&refresh_token=9bd30865-0e30-487f-8492-78bd55ada8f8 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 198 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:47 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"ae9e21c4-0b72-4e47-9116-700c2d1d304d","token_type":"bearer","expires_in":299,"refresh_token":"18ad65dd-f6b9-4697-97d8-912057c00c66","scope":"address openid user_name profile email"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/userinfo HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer ae9e21c4-0b72-4e47-9116-700c2d1d304d ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 647 Content-Type: application/json;charset=utf-8 Date: Wed, 04 Jul 2018 23:02:47 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"address":{"street_address":"621 East 6th Street","country":"US","locality":"Austin","region":"Texas"},"sub":"@!38D4.410C.1D43.8932!0001!37F2.B744!0000!B1F3.AEAE.B798","user_name":"test_user","website":"http://www.gluu.org","zoneinfo":"America/Chicago","birthdate":"19830106010101.253Z","gender":"Male","profile":"http://www.mywebsite.com/profile","preferred_username":"user","given_name":"Test","middle_name":"User","locale":"en-US","picture":"http://www.gluu.org/wp-content/uploads/2012/04/mike3.png","updated_at":1526659613066,"name":"oxAuth Test User","nickname":"user","family_name":"User","email_verified":true,"email":"test_user@test.org"} ####################################################### TEST: applicationTypeWeb ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:47 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!4548.D7A7.91CE.7BEB", "client_secret": "87c975e7-5915-4965-829c-4821538e2542", "registration_access_token": "06c95033-e204-4abe-8a86-e6ae3f34acae", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!4548.D7A7.91CE.7BEB", "client_id_issued_at": 1530745367, "client_secret_expires_at": 1530831767, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 06c95033-e204-4abe-8a86-e6ae3f34acae ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:47 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!4548.D7A7.91CE.7BEB", "client_secret": "87c975e7-5915-4965-829c-4821538e2542", "registration_access_token": "06c95033-e204-4abe-8a86-e6ae3f34acae", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!4548.D7A7.91CE.7BEB", "client_id_issued_at": 1530745367, "client_secret_expires_at": 1530831767, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ####################################################### TEST: applicationTypeWebFail1 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": ["http://client.example.com/cb"], "application_type": "web", "client_name": "oxAuth test app" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 400 Cache-Control: no-store Connection: close Content-Length: 101 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:47 GMT Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_redirect_uri","error_description":"Value of one or more redirect_uris is invalid."} ####################################################### TEST: omittedApplicationType ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:47 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!7C71.692B.5476.5ABB", "client_secret": "f0d9f8cb-85c1-4306-8539-fea844ae6ff8", "registration_access_token": "6cdcb6c2-7099-48ab-9e29-d5a0c4bba44e", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!7C71.692B.5476.5ABB", "client_id_issued_at": 1530745368, "client_secret_expires_at": 1530831768, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 6cdcb6c2-7099-48ab-9e29-d5a0c4bba44e ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:48 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!7C71.692B.5476.5ABB", "client_secret": "f0d9f8cb-85c1-4306-8539-fea844ae6ff8", "registration_access_token": "6cdcb6c2-7099-48ab-9e29-d5a0c4bba44e", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!7C71.692B.5476.5ABB", "client_id_issued_at": 1530745368, "client_secret_expires_at": 1530831768, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:02:48 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:48 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: authorizationCodeDynamicScopeFlow ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "scope": "openid profile address email user_name org_name work_phone" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1361 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:48 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!DB2E.6B87.191A.B566", "client_secret": "72d33b85-6768-41ce-bf23-55572d688ee2", "registration_access_token": "3b47ff1a-d398-4177-a3f7-3fadde9870ed", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!DB2E.6B87.191A.B566", "client_id_issued_at": 1530745368, "client_secret_expires_at": 1530831768, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "openid profile address email user_name org_name work_phone", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21DB2E.6B87.191A.B566&scope=openid+profile+address+email+user_name+org_name+work_phone&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=70c527e0-5fdb-4778-8977-64dad74ee500&nonce=2011257c-4398-4679-8cd1-3533c1a2ad64 19:03:08.787 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:023a5cb2-9e1f-4d8f-b9a2-1628b17c81e4 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21DB2E.6B87.191A.B566&scope=openid+profile+address+email+user_name+org_name+work_phone&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=70c527e0-5fdb-4778-8977-64dad74ee500&nonce=2011257c-4398-4679-8cd1-3533c1a2ad64 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=f8593e9b-1ae0-4c32-9685-6c01304c1972&scope=address+openid+user_name+profile+work_phone+org_name+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFEQjJFLjZCODcuMTkxQS5CNTY2IiwiZXhwIjoxNTMwNzQ4OTcwLCJpYXQiOjE1MzA3NDUzNzAsIm5vbmNlIjoiMjAxMTI1N2MtNDM5OC00Njc5LThjZDEtMzUzM2MxYTJhZDY0IiwiYXV0aF90aW1lIjoxNTMwNzQ1MzcwLCJjX2hhc2giOiJuY2hmTGhtcU5jLVJuazNNazdNWVBBIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoieXJvZG5sZTQ5ckdEVTcwTzF1dngyUXNfSXY4azl4RE03Y2xQWVBuS0E0OCJ9.Be2pgZT8wUubC39YEWnl7EoGGaSig4bgHH7ls3NkYTBRH8VZacS5uL9p8EUvzOLQ6usyRWdIqAadVhWWox7fJVgM6utRgbFN157DC3tRk9W5VMqomTC8azyKQteRzNo-w-FSMNh3MxVfzTDt3exOsCxZCTo6rw4OOP10Y-O-TrGmuF0q77UhIVbCSpkFKSAiQ-qmP-OmQdts97fIqodOFHIuZOc4IRYnh1YOv44yoBo8lxc9ks5mJxKyKFfyzzZS-EtdbhHZRFzPtKpNNN5AChs9Le1OlVrQJ_6BZji8TQ6gXmizV_44KlI-GlxgmC_HxrbC8-SnGQVAkk8X5THIAg&session_id=6baafc11-79ea-44c6-992d-6a265b123092&state=70c527e0-5fdb-4778-8977-64dad74ee500&session_state=023a5cb2-9e1f-4d8f-b9a2-1628b17c81e4 ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxREIyRS42Qjg3LjE5MUEuQjU2Njo3MmQzM2I4NS02NzY4LTQxY2UtYmYyMy01NTU3MmQ2ODhlZTI= grant_type=authorization_code&code=f8593e9b-1ae0-4c32-9685-6c01304c1972&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:50 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"d944e83d-181a-4ea5-aa9c-68681759dfbf","token_type":"bearer","expires_in":299,"refresh_token":"17c1fafe-823a-4ebd-9de4-f06056354abb","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFEQjJFLjZCODcuMTkxQS5CNTY2IiwiZXhwIjoxNTMwNzQ4OTcwLCJpYXQiOjE1MzA3NDUzNzAsIm5vbmNlIjoiMjAxMTI1N2MtNDM5OC00Njc5LThjZDEtMzUzM2MxYTJhZDY0IiwiYXV0aF90aW1lIjoxNTMwNzQ1MzcwLCJhdF9oYXNoIjoiMXNSbzlScDU2amZBLUJ5R0ptZDZTdyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6Inlyb2RubGU0OXJHRFU3ME8xdXZ4MlFzX0l2OGs5eERNN2NsUFlQbktBNDgifQ.Wrt_3xuOTgrDZMs2WH1PH2C2geLei90gPMlj-C2nkA4DYJCXCCwERtKNvbukyEj1qursFpR4blfUW7vyQVD1tFyy385LUjYk7uNZsI-mO_fvcQH2cWEeVpxrVR-dBZ-aFm65IWPmvfleaw61ef-cAUFUZLv0Kvz7vEXW7cWMU8JqpVv8L1iFOZGIPjyAKtkz_tX5YK1Fi1wn9B5xoTy-99NOItQTvgTdP5gVehycOiPOXfXxhg_S45gdGNEmYTB6KznHsIs2ZSmPyDCfUKCVmYcq2S097HPDjC5D2etsMmA5p5EisDmZBdqdv5GRseB2bdBU7rt4fuJHB9WFAA_28A"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/userinfo HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer d944e83d-181a-4ea5-aa9c-68681759dfbf ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 690 Content-Type: application/json;charset=utf-8 Date: Wed, 04 Jul 2018 23:02:51 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"address":{"street_address":"621 East 6th Street","country":"US","locality":"Austin","region":"Texas"},"sub":"yrodnle49rGDU70O1uvx2Qs_Iv8k9xDM7clPYPnKA48","user_name":"test_user","website":"http://www.gluu.org","zoneinfo":"America/Chicago","birthdate":"19830106010101.253Z","gender":"Male","profile":"http://www.mywebsite.com/profile","preferred_username":"user","given_name":"Test","middle_name":"User","locale":"en-US","picture":"http://www.gluu.org/wp-content/uploads/2012/04/mike3.png","updated_at":1526659613066,"name":"oxAuth Test User","nickname":"user","family_name":"User","email_verified":true,"email":"test_user@test.org","work_phone":["(512) 516-2413"],"org_name":"Gluu, Inc."} ####################################################### TEST: authorizationCodeFlow ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "scope": "openid profile address email phone user_name" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1347 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:51 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D71F.4645.BE1F.9AC6", "client_secret": "3540ccf3-c2ea-4219-898d-3aac60b2a1e7", "registration_access_token": "958fc8e6-8c57-4a80-acb2-e21cddd83e8b", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D71F.4645.BE1F.9AC6", "client_id_issued_at": 1530745371, "client_secret_expires_at": 1530831771, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "openid profile address email phone user_name", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21D71F.4645.BE1F.9AC6&scope=openid+profile+address+email+phone+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=ffb23967-8e5f-4d1f-a8b3-932b577b99e1&nonce=659c2274-2a90-4e65-b185-393ce848122a 19:03:11.580 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:54ff3cd7-b12f-447a-92b9-c40c31fafe9c ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21D71F.4645.BE1F.9AC6&scope=openid+profile+address+email+phone+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=ffb23967-8e5f-4d1f-a8b3-932b577b99e1&nonce=659c2274-2a90-4e65-b185-393ce848122a ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=e0810d46-2d70-4a55-88e7-47a412cc4e08&scope=address+phone+openid+user_name+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFENzFGLjQ2NDUuQkUxRi45QUM2IiwiZXhwIjoxNTMwNzQ4OTczLCJpYXQiOjE1MzA3NDUzNzMsIm5vbmNlIjoiNjU5YzIyNzQtMmE5MC00ZTY1LWIxODUtMzkzY2U4NDgxMjJhIiwiYXV0aF90aW1lIjoxNTMwNzQ1MzczLCJjX2hhc2giOiJUeWk4N19ZYkVBT2F3b1N0LXc4cnJ3Iiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiNTQ0MFhnLW8tM1JjRzd5VHRMYjBVYlVlWXFHdHlZRWlRSFNma1BCMUtxRSJ9.huPFcqVgXBFtf1KS-DimgbNmKA_LslecUQKaFKFh3_aaDqmW7ceNfzQl34PZuPr7geHiLBarXvgFLZEuEvx6v74vKgj23u0kp6HS-B1HfRJRdN_Eu12EyxNSMPl4j2-8tVI6mzjMJlC6INOeX5SyDBlibyB9in912-mHG6T4esIChCLEdHSyjZ2gjbAUqYhpwwi8jT3MS0eT5s3K50NQM74YTkbSoU9NRWV2HP7KtH2qTTeefUpJl88ymIgX3iKMyO2xJAn2qA56tdLo_tww8hpES612efYnSfKBbtFgtxtEuItcQ6Kui3z-WZZBPtBHsqDjS_C3PeORdFT-ZizVow&session_id=962c1bb1-ca05-4c2a-88f1-c76d58927769&state=ffb23967-8e5f-4d1f-a8b3-932b577b99e1&session_state=54ff3cd7-b12f-447a-92b9-c40c31fafe9c ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxRDcxRi40NjQ1LkJFMUYuOUFDNjozNTQwY2NmMy1jMmVhLTQyMTktODk4ZC0zYWFjNjBiMmExZTc= grant_type=authorization_code&code=e0810d46-2d70-4a55-88e7-47a412cc4e08&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:53 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"f735cf3f-7ffc-46c9-b9cb-4762bac657dc","token_type":"bearer","expires_in":299,"refresh_token":"0d30fab3-27e4-4b78-bdcf-eacfc7e8ff59","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFENzFGLjQ2NDUuQkUxRi45QUM2IiwiZXhwIjoxNTMwNzQ4OTczLCJpYXQiOjE1MzA3NDUzNzMsIm5vbmNlIjoiNjU5YzIyNzQtMmE5MC00ZTY1LWIxODUtMzkzY2U4NDgxMjJhIiwiYXV0aF90aW1lIjoxNTMwNzQ1MzczLCJhdF9oYXNoIjoibHNoWVdFQkNBRWFuVkFKYzNIU1dMQSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IjU0NDBYZy1vLTNSY0c3eVR0TGIwVWJVZVlxR3R5WUVpUUhTZmtQQjFLcUUifQ.bnOS8ymOTTKsBOv29FiWfLfxTJNZ8EvXPangaPLGacBmfc_D0uXXWo4BM9iSdwWPf37Zx7Y88aaf0oV6PThTc-nKEMN5CTzMl1LUU-xEr7H9KVPFw1XbLLCFYQA0gnev1hMnDA6_mPuDbPgI67cifWSupvZYhA-ejmkEmXhU43j_wOqTXQHXshHcFpyOJHTRwKdxgYakn-R64akhvajSeKP59XpDZX5NG1WL5Yc74aIN3WxCz4s51xgoofT7-tVdSk-KHqIJcVojpN5fGZMNDBHrXZHKc1q5qIq3pzooojjd-OrU5v2AOmCNu7EFFo6div4w0ggS0M5xHFOlx13esQ"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxRDcxRi40NjQ1LkJFMUYuOUFDNjozNTQwY2NmMy1jMmVhLTQyMTktODk4ZC0zYWFjNjBiMmExZTc= grant_type=refresh_token&scope=address+phone+openid+user_name+profile+email&refresh_token=0d30fab3-27e4-4b78-bdcf-eacfc7e8ff59 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 204 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:54 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"2273e6c8-b809-4fc9-8aa6-0f3a95381d14","token_type":"bearer","expires_in":299,"refresh_token":"a61e05e1-05f2-4ba0-b71f-17f086e69e68","scope":"address phone openid user_name profile email"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/userinfo HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 2273e6c8-b809-4fc9-8aa6-0f3a95381d14 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 695 Content-Type: application/json;charset=utf-8 Date: Wed, 04 Jul 2018 23:02:54 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"address":{"street_address":"621 East 6th Street","country":"US","locality":"Austin","region":"Texas"},"sub":"5440Xg-o-3RcG7yTtLb0UbUeYqGtyYEiQHSfkPB1KqE","phone_number_verified":true,"phone_number":"(512) 516-2413","user_name":"test_user","website":"http://www.gluu.org","zoneinfo":"America/Chicago","birthdate":"19830106010101.253Z","gender":"Male","profile":"http://www.mywebsite.com/profile","preferred_username":"user","given_name":"Test","middle_name":"User","locale":"en-US","picture":"http://www.gluu.org/wp-content/uploads/2012/04/mike3.png","updated_at":1526659613066,"name":"oxAuth Test User","nickname":"user","family_name":"User","email_verified":true,"email":"test_user@test.org"} ####################################################### TEST: authorizationCodeFlowLoginHint ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "scope": "openid profile address email user_name" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1341 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:54 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!536D.D770.DE8C.D9DC", "client_secret": "7d018f07-5090-4753-8d48-7607935f34d1", "registration_access_token": "93f0010b-29db-4229-9000-7e32e50c1459", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!536D.D770.DE8C.D9DC", "client_id_issued_at": 1530745374, "client_secret_expires_at": 1530831774, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "openid profile address email user_name", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21536D.D770.DE8C.D9DC&scope=openid+profile+address+email+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=4f1d21ce-5283-475e-ac82-918b44db566f&nonce=719ffa02-936c-4212-8ce6-ec39043915cf&login_hint=test_user 19:03:14.722 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:0d7d1ed4-19e7-4a94-9b7c-d7d794def73c ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21536D.D770.DE8C.D9DC&scope=openid+profile+address+email+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=4f1d21ce-5283-475e-ac82-918b44db566f&nonce=719ffa02-936c-4212-8ce6-ec39043915cf&login_hint=test_user ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=ef0ecbbd-a2f6-4b22-a083-22f4040be497&scope=address+openid+user_name+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE1MzZELkQ3NzAuREU4Qy5EOURDIiwiZXhwIjoxNTMwNzQ4OTc2LCJpYXQiOjE1MzA3NDUzNzYsIm5vbmNlIjoiNzE5ZmZhMDItOTM2Yy00MjEyLThjZTYtZWMzOTA0MzkxNWNmIiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzc1LCJjX2hhc2giOiJOMzNVUnpvV1JHSllyckE4OHNLRkhBIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiQ1h5RUs0cElaa1UxUUVzcXpQemtGSzA2ekpsWlpSSGhHUTRXVjlvSHRmTSJ9.CbQt9iM7WDBoLF9AKpC_WVV6nYky8FZXesPTmFJZQmRhzFE0Q-086I5uBC3V4PhmOlMks6YHlmUaaNAPKZWaloJdTXaIBR12tXtk6bhl1j0ZxP74mhI6jrpyD-A7YZcGYwk2pEASDWGpvwe1Bb-kL5AScAWkNqhPL7x36KfNjO0HgVd-LDAb5C3F_hsBnAFkRprmBUYbYDMOa2_C386aZZJ5PCPVBqZwQ8sNnwpqeRC31L_W5nPi6pXXQn3_msfofSntp74jJ8PvCQgwNTJguD4q1iTue9n0WXXcCVI9e031vAz3GMdMlv1ilhVKlcZfUjZS2YvimkANySHYwgaNQQ&session_id=f44e876a-4cef-4e3a-8b82-1dea1a38264a&state=4f1d21ce-5283-475e-ac82-918b44db566f&session_state=0d7d1ed4-19e7-4a94-9b7c-d7d794def73c ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxNTM2RC5ENzcwLkRFOEMuRDlEQzo3ZDAxOGYwNy01MDkwLTQ3NTMtOGQ0OC03NjA3OTM1ZjM0ZDE= grant_type=authorization_code&code=ef0ecbbd-a2f6-4b22-a083-22f4040be497&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:56 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"9b534b28-3dfc-4121-8e51-2832c9dc6cd6","token_type":"bearer","expires_in":299,"refresh_token":"50c29839-f40f-40ba-88d0-ec1001f93be6","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE1MzZELkQ3NzAuREU4Qy5EOURDIiwiZXhwIjoxNTMwNzQ4OTc2LCJpYXQiOjE1MzA3NDUzNzYsIm5vbmNlIjoiNzE5ZmZhMDItOTM2Yy00MjEyLThjZTYtZWMzOTA0MzkxNWNmIiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzc1LCJhdF9oYXNoIjoiWVZhQ0ZCX0JiS3pTMG9Ndmc3bHBZQSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IkNYeUVLNHBJWmtVMVFFc3F6UHprRkswNnpKbFpaUkhoR1E0V1Y5b0h0Zk0ifQ.F0MAum9sTe2sPOeerezDN9bad1JLFDoz8sjBCbZOKvi5MePnZDNAKI4cIiVLQNh-MKC29tFTcU8P0wEr_7oESgIKFEGo1PBV6rUIcAA61VpMijvpBvoSJgyuj3oxhn_B9h3GnYjOn-ux-FfWTbOc99AJSI1qxxEOkr942lOgzkF0f7NjEQbaIZ_5aTVt4i0M4ryIV-lKVMXsRyzpGiOTXG9QyY3_s5rzY0enmQz18mARJSZhrV6uO9KTW0bWTw526cI7pZp9RqFiythkQ9ww6haEM87iGjP2YoaS-V0kGSsN1j8iCW5PyKiockSRS-yA1Pi2pEKXhy5TxitTjJ2QUw"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxNTM2RC5ENzcwLkRFOEMuRDlEQzo3ZDAxOGYwNy01MDkwLTQ3NTMtOGQ0OC03NjA3OTM1ZjM0ZDE= grant_type=refresh_token&scope=address+openid+user_name+profile+email&refresh_token=50c29839-f40f-40ba-88d0-ec1001f93be6 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 198 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:56 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"89371216-06a8-42c9-8531-b9957db7b48a","token_type":"bearer","expires_in":299,"refresh_token":"bfa84312-5689-415b-bcec-404ae95513c2","scope":"address openid user_name profile email"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/userinfo HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 89371216-06a8-42c9-8531-b9957db7b48a ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 634 Content-Type: application/json;charset=utf-8 Date: Wed, 04 Jul 2018 23:02:56 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"address":{"street_address":"621 East 6th Street","country":"US","locality":"Austin","region":"Texas"},"sub":"CXyEK4pIZkU1QEsqzPzkFK06zJlZZRHhGQ4WV9oHtfM","user_name":"test_user","website":"http://www.gluu.org","zoneinfo":"America/Chicago","birthdate":"19830106010101.253Z","gender":"Male","profile":"http://www.mywebsite.com/profile","preferred_username":"user","given_name":"Test","middle_name":"User","locale":"en-US","picture":"http://www.gluu.org/wp-content/uploads/2012/04/mike3.png","updated_at":1526659613066,"name":"oxAuth Test User","nickname":"user","family_name":"User","email_verified":true,"email":"test_user@test.org"} ####################################################### TEST: authorizationCodeFlowNegativeTest ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "scope": "openid" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1309 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:56 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!414E.3DC5.3334.8FA2", "client_secret": "b3a8f407-4984-4959-b172-2fa8190ecc1e", "registration_access_token": "0f556a74-2c42-443a-adbc-f464a4764d8c", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!414E.3DC5.3334.8FA2", "client_id_issued_at": 1530745376, "client_secret_expires_at": 1530831776, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "openid", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21414E.3DC5.3334.8FA2&scope=openid+profile+address+email+phone+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=b4baf7b6-cc25-41b8-a374-1de3502b2362&nonce=85237620-29ad-4e26-9783-6cf924c22844 19:03:17.070 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:1532c4c2-1632-4440-8433-949378652e48 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21414E.3DC5.3334.8FA2&scope=openid+profile+address+email+phone+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=b4baf7b6-cc25-41b8-a374-1de3502b2362&nonce=85237620-29ad-4e26-9783-6cf924c22844 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=ad81ced1-a9d2-4d0f-8981-603e6ada380c&scope=openid&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE0MTRFLjNEQzUuMzMzNC44RkEyIiwiZXhwIjoxNTMwNzQ4OTc4LCJpYXQiOjE1MzA3NDUzNzgsIm5vbmNlIjoiODUyMzc2MjAtMjlhZC00ZTI2LTk3ODMtNmNmOTI0YzIyODQ0IiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzc4LCJjX2hhc2giOiJEaDVjOUJoZm1tVXRiMnh0dGU1X01BIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiT2wybE5fMG5WWFNlV1BFOVRpRlpyM2pGNkNINHNibUdUckRnVmIybTVxbyJ9.TN4CQmfRsfBK3nv3do_cPNwq73Jk7U0zcUodVD-swHmH3pfxHMoikXVyuNjuLDsQLzXuZyI35-OZII7rJC9lFZbuQJVQfNkQD_cVzWgkuzL1D5zhVT6Rhcq0tWsQu637x4_YQ4fBKefnjihheuxuggRutTHtSrpXC1BkbzHzIlVVaeUwTqUO4LtlaNEcWX-y8SHzOrhG1UH_LUz659NMMWZOt_RsiMewg4ftl2CTHAUBiASzLEvCUrPWYrbXv5ga6hHxKDfks_qaSrK5ZIsdmR2XFP5v_ySgY2lYQfkG-dnsB_fWWUCVDfhAKB2HGzxuwek2KoBdWIO2qhQ5KhIYpA&session_id=1ab4fc39-2b9f-45eb-bc4a-665262e949ef&state=b4baf7b6-cc25-41b8-a374-1de3502b2362&session_state=1532c4c2-1632-4440-8433-949378652e48 ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxNDE0RS4zREM1LjMzMzQuOEZBMjpiM2E4ZjQwNy00OTg0LTQ5NTktYjE3Mi0yZmE4MTkwZWNjMWU= grant_type=authorization_code&code=ad81ced1-a9d2-4d0f-8981-603e6ada380c&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:58 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"1a43efdc-789c-4a5b-9cb2-0f9db32fdcef","token_type":"bearer","expires_in":299,"refresh_token":"838cfdba-9279-4de5-88b0-b040662d39b5","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE0MTRFLjNEQzUuMzMzNC44RkEyIiwiZXhwIjoxNTMwNzQ4OTc4LCJpYXQiOjE1MzA3NDUzNzgsIm5vbmNlIjoiODUyMzc2MjAtMjlhZC00ZTI2LTk3ODMtNmNmOTI0YzIyODQ0IiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzc4LCJhdF9oYXNoIjoiMGhwNi1TNXpuQUJKX1BlYnFyM3VUQSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6Ik9sMmxOXzBuVlhTZVdQRTlUaUZacjNqRjZDSDRzYm1HVHJEZ1ZiMm01cW8ifQ.ZeuQMZD_GxNYIgxL55sDcAT-utgPLOFaPGYTbR59OAlsG0979AqBSuGa-NU63SvI-lrZUacXOXOUVoZS2grBGO4oicf7vwUEibby4yIP5-Wf0ceWYVD_VfXSbyO5cg-nGbWZUORyoy4VP6OVgG_6BuK_pSvjnYdzSyiRxrVk11VSbUIZZS_vP8cj9Du1msk0KRoqbEr2r3RthdnJk6h-7UHvkIU56gh6hUr3vZJJNq070QFzu-feZ03c5if2np6mlcNktyb5dRLiJwES8M1OswdqynrAo5q_1E1T5DNxZBmqKoWNPSqm-rGrkvM2_WSulucXz53gE8JJ7EZal8SWvQ"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxNDE0RS4zREM1LjMzMzQuOEZBMjpiM2E4ZjQwNy00OTg0LTQ5NTktYjE3Mi0yZmE4MTkwZWNjMWU= grant_type=refresh_token&scope=openid&refresh_token=838cfdba-9279-4de5-88b0-b040662d39b5 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 166 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:59 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"d74cb532-1c2c-42b5-89dc-e897098ff341","token_type":"bearer","expires_in":299,"refresh_token":"473b4f3d-8954-4010-aa72-ea5043e59543","scope":"openid"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/userinfo HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer d74cb532-1c2c-42b5-89dc-e897098ff341 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 53 Content-Type: application/json;charset=utf-8 Date: Wed, 04 Jul 2018 23:02:59 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"sub":"Ol2lN_0nVXSeWPE9TiFZr3jF6CH4sbmGTrDgVb2m5qo"} ####################################################### TEST: authorizationCodeFlowWithOptionalNonce ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:02:59 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!31C6.7EDC.68C7.49B8", "client_secret": "cd8a6307-e74d-46e8-bb46-299e59f8e562", "registration_access_token": "64b76bd2-5d52-47e3-960f-a70d78819910", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!31C6.7EDC.68C7.49B8", "client_id_issued_at": 1530745379, "client_secret_expires_at": 1530831779, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2131C6.7EDC.68C7.49B8&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=116d77b9-13f3-4236-8b74-2cb013bf23f4&nonce=243bd7c0-1ddd-4dd0-895b-8dd4bf8d6c54 19:03:19.652 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:b4a67ecc-4d1c-4fc4-ad9e-69f6707961b6 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2131C6.7EDC.68C7.49B8&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=116d77b9-13f3-4236-8b74-2cb013bf23f4&nonce=243bd7c0-1ddd-4dd0-895b-8dd4bf8d6c54 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=304f6893-82bf-496b-8792-30c783e3b6fa&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEzMUM2LjdFREMuNjhDNy40OUI4IiwiZXhwIjoxNTMwNzQ4OTgxLCJpYXQiOjE1MzA3NDUzODEsIm5vbmNlIjoiMjQzYmQ3YzAtMWRkZC00ZGQwLTg5NWItOGRkNGJmOGQ2YzU0IiwiYXV0aF90aW1lIjoxNTMwNzQ1MzgxLCJjX2hhc2giOiJfRUlvTlo3ZGQ4ckIySnJOQU1PRlpRIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiOTd5ZFlxWUM2djVqdldZdGV0WHhjUjhyWFRKVndSRzBDNzExTWM5X3RXcyJ9.bs5Kia249I8zABpNd3TwfRZVOoJRImi33m5yx57V9vU29NqoZ-EsXN645TR8ITSktGzRbjIbTPlIzG_BAHttBPktiI58jVLQhgY_rka26LHBUeW5Uv9I4eA-mrkXPzCDgUjuD7INn692gSdzridFNqoayxCkXZgUwe0uI4Z9zo4NZxMZ9Kt-shWJWEhPPcl1R2cx8kStgZVs8Ef-aXMJdTFI_GiEv6IXrt5S2luwYmQDdW5acle79wPI20bBn7kupCqzfLNYcbhdsQci52DxNo7oyOnZ4pv-jxgVEh5fUyixAmL8sN6HGK3so-fBnmwNn5fVuUntChwXXEnVpoyieA&session_id=184cd6bb-817f-4195-8f4f-937e9de8b2d0&state=116d77b9-13f3-4236-8b74-2cb013bf23f4&session_state=b4a67ecc-4d1c-4fc4-ad9e-69f6707961b6 ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxMzFDNi43RURDLjY4QzcuNDlCODpjZDhhNjMwNy1lNzRkLTQ2ZTgtYmI0Ni0yOTllNTlmOGU1NjI= grant_type=authorization_code&code=304f6893-82bf-496b-8792-30c783e3b6fa&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:01 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"3bf1fe49-e1bc-4be7-8a4d-bd9cff580296","token_type":"bearer","expires_in":299,"refresh_token":"8d21321d-c926-4bc6-9d1e-8589f75abe31","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEzMUM2LjdFREMuNjhDNy40OUI4IiwiZXhwIjoxNTMwNzQ4OTgxLCJpYXQiOjE1MzA3NDUzODEsIm5vbmNlIjoiMjQzYmQ3YzAtMWRkZC00ZGQwLTg5NWItOGRkNGJmOGQ2YzU0IiwiYXV0aF90aW1lIjoxNTMwNzQ1MzgxLCJhdF9oYXNoIjoiT1NFb2d5cjVTWHJMQ2o0WGFIdjItUSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6Ijk3eWRZcVlDNnY1anZXWXRldFh4Y1I4clhUSlZ3UkcwQzcxMU1jOV90V3MifQ.SF-8jHSQtZdtdSe1WDQHwLqEdPFRl8N8RmHo9Up6zRbFcv8sYBFByIU3Lz3xlvjPMjB2SWmG-BL2BzyhY3E_5_E8-5YM_Y6ukb7kdG0FoP-UDJibiK0p0nV5aJ_VIIsomgs5R1bmK-qkhfZ9qPP_8-PuEABzh0zbN69gJHBgAVKK8aCoBT_IQVFckAYz5-ZtrEnPQCSgJQu0jHhoqHx8zoNYz11mWm6NHtUVgNHXT1RJJAl4A---Jo8e5xK5xJvotdHfAURwYGcKCiDPh6WiDCQkRvtiBE_UtYoijG_d5XKUrke7A00Bay7V8H5j5VC09lBrha5B5_efiZIPdeiqTw"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxMzFDNi43RURDLjY4QzcuNDlCODpjZDhhNjMwNy1lNzRkLTQ2ZTgtYmI0Ni0yOTllNTlmOGU1NjI= grant_type=refresh_token&scope=address+openid+profile+email&refresh_token=8d21321d-c926-4bc6-9d1e-8589f75abe31 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 188 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:01 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"0957c46a-8734-47fe-9078-b743dbb737d1","token_type":"bearer","expires_in":299,"refresh_token":"2166c85b-9782-4fe9-a32d-e167ef0be9a8","scope":"address openid profile email"} ####################################################### TEST: authorizationCodeWithNotAllowedScopeFlow ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "scope": "openid profile address email user_name" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1341 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:01 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3B78.CF5F.F1CB.72E8", "client_secret": "6aab660f-9c97-449a-a7e3-d25edcb0a145", "registration_access_token": "5d146f88-ffbb-4a0e-873d-a4ead1d238d2", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3B78.CF5F.F1CB.72E8", "client_id_issued_at": 1530745381, "client_secret_expires_at": 1530831781, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "openid profile address email user_name", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%213B78.CF5F.F1CB.72E8&scope=openid+profile+address+email+user_name+mobile_phone&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=8b2fb596-0af7-4d64-b3c4-491c272bcbfe&nonce=df61af78-0bff-44f5-a3b9-d3409805ba92 19:03:22.196 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:7cb09544-849d-4a4e-b94e-6b17b65cbd83 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%213B78.CF5F.F1CB.72E8&scope=openid+profile+address+email+user_name+mobile_phone&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=8b2fb596-0af7-4d64-b3c4-491c272bcbfe&nonce=df61af78-0bff-44f5-a3b9-d3409805ba92 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=0be7de07-f534-4769-8b37-b48fc479a585&scope=address+openid+user_name+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEzQjc4LkNGNUYuRjFDQi43MkU4IiwiZXhwIjoxNTMwNzQ4OTgzLCJpYXQiOjE1MzA3NDUzODMsIm5vbmNlIjoiZGY2MWFmNzgtMGJmZi00NGY1LWEzYjktZDM0MDk4MDViYTkyIiwiYXV0aF90aW1lIjoxNTMwNzQ1MzgzLCJjX2hhc2giOiI5MmlwSDJGZWRBWmpISkU0ejRSdE53Iiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiejg5MmtSWjBPS3B1ZjFWZUdDNE1QVFFUR0VYaTRtaW03N3Q2UmpLZWNGZyJ9.PK30SBqi0a6n6NEm8V4hKKq0xRSmQvIH6d9jx_4yvbzQ7XNvXEKo5AULPPhk3TwcmVj-RlH5Hf_bRItYQJ6BHmO86XKH5cAqS_xOG7R9MgesU5_vk9g5ZygSSgZYy7issmJ1FWEP2BN3eqo62kJZqYr02WdM4BFpE78wYBQznWKYztVDzL5lzOMjY0GpasaMYxjXjLUJxCNncK1erSL_ss3A71Quzrssy42cvSU5nk6Q_z-vX0iTtyueBweqfzsg2S586_gOBmyld-4DHuZU9q7J3W7OhPHoMLDWfalFwZLLC6nLu7Ehy5ZjjIrmrVWTjr2NaHFEDvH1lZTxLAAckg&session_id=271e525d-06d5-4e71-9d59-935b24217a83&state=8b2fb596-0af7-4d64-b3c4-491c272bcbfe&session_state=7cb09544-849d-4a4e-b94e-6b17b65cbd83 ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxM0I3OC5DRjVGLkYxQ0IuNzJFODo2YWFiNjYwZi05Yzk3LTQ0OWEtYTdlMy1kMjVlZGNiMGExNDU= grant_type=authorization_code&code=0be7de07-f534-4769-8b37-b48fc479a585&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:03 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"cf9a22ad-48a4-4dc9-97af-41fdf6443455","token_type":"bearer","expires_in":299,"refresh_token":"3679c5c5-5ec1-49b9-9e8a-b7ac7175ba57","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEzQjc4LkNGNUYuRjFDQi43MkU4IiwiZXhwIjoxNTMwNzQ4OTgzLCJpYXQiOjE1MzA3NDUzODMsIm5vbmNlIjoiZGY2MWFmNzgtMGJmZi00NGY1LWEzYjktZDM0MDk4MDViYTkyIiwiYXV0aF90aW1lIjoxNTMwNzQ1MzgzLCJhdF9oYXNoIjoickFvZFVvd0VvVkIwSm84YWN1TzE5dyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6Ino4OTJrUlowT0twdWYxVmVHQzRNUFRRVEdFWGk0bWltNzd0NlJqS2VjRmcifQ.RUliZl3wMTvzFVXakaE2AUIVNd-ucE9gLF5r1bxoRXmlmRxkI99_mDVWpF3EdseOoRHLbiz1jeLGkeQ1SIf2rMBl8hIzJdWgTAJovOqz-eMaGUv_TsPP8NUUaAQQWkapIXCx8_f6MkDfo9ncInVXVubD6LE7MXTXdUPtvulClPOkxgjYBE3M17dv7g4qLK_U_PXD5_58lnfJZW9l45bYdMBBGHsv5KkYvhveISAaf8_LALSoF3lujw4q-ePBH9Kj_jYDIfQhKtZy15mpRG0KODi6WtZ7yjeC8Rk4LFMCMSVMZLvLRrOzP8C7VWEC70BbU_qqObqMlPp7-OKG86VQDA"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/userinfo HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer cf9a22ad-48a4-4dc9-97af-41fdf6443455 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 634 Content-Type: application/json;charset=utf-8 Date: Wed, 04 Jul 2018 23:03:03 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"address":{"street_address":"621 East 6th Street","country":"US","locality":"Austin","region":"Texas"},"sub":"z892kRZ0OKpuf1VeGC4MPTQTGEXi4mim77t6RjKecFg","user_name":"test_user","website":"http://www.gluu.org","zoneinfo":"America/Chicago","birthdate":"19830106010101.253Z","gender":"Male","profile":"http://www.mywebsite.com/profile","preferred_username":"user","given_name":"Test","middle_name":"User","locale":"en-US","picture":"http://www.gluu.org/wp-content/uploads/2012/04/mike3.png","updated_at":1526659613066,"name":"oxAuth Test User","nickname":"user","family_name":"User","email_verified":true,"email":"test_user@test.org"} ####################################################### TEST: revokeTokens ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:04 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!4037.03BA.4092.72ED", "client_secret": "e5f01c37-55d5-4e7a-bcaf-b05ded6e113b", "registration_access_token": "b829ac9a-bc1b-4df4-8243-9b4174523bed", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!4037.03BA.4092.72ED", "client_id_issued_at": 1530745384, "client_secret_expires_at": 1530831784, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer b829ac9a-bc1b-4df4-8243-9b4174523bed ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:04 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!4037.03BA.4092.72ED", "client_secret": "e5f01c37-55d5-4e7a-bcaf-b05ded6e113b", "registration_access_token": "b829ac9a-bc1b-4df4-8243-9b4174523bed", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!4037.03BA.4092.72ED", "client_id_issued_at": 1530745384, "client_secret_expires_at": 1530831784, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%214037.03BA.4092.72ED&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=409afcbf-9a0c-4bde-b736-000398f39eb1&nonce=b5701212-296e-4ca1-8e15-a81f93cecbe4 19:03:24.557 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:1b9d0c24-6ba7-4dd1-8548-ecbfbcbdd222 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%214037.03BA.4092.72ED&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=409afcbf-9a0c-4bde-b736-000398f39eb1&nonce=b5701212-296e-4ca1-8e15-a81f93cecbe4 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=64524581-0a4b-4c00-ad60-df767c16efde&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE0MDM3LjAzQkEuNDA5Mi43MkVEIiwiZXhwIjoxNTMwNzQ4OTg2LCJpYXQiOjE1MzA3NDUzODYsIm5vbmNlIjoiYjU3MDEyMTItMjk2ZS00Y2ExLThlMTUtYTgxZjkzY2VjYmU0IiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzg2LCJjX2hhc2giOiJwNktGUFc4cnBpb2pJbEFQa05ScjZRIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiWnFLM3VVblVHTkNaNEQxWlVOaFVkSnRyMFZIOVhCaHN5ejZJZGFRa2cwWSJ9.T_aT8PXeiWGL8Qrp-PhnNPACXiGyEC1GyfdIg2UV0lYRgjOEFibtAhvmCHaCMiyxuB3O6Uw8iIpYdPa_UsoP5Z6lL0VkkQAFX4Fkd5RlbiQaAm9KMpsQU2RbimQyR94mw5lRTLGqJyTe80bbS6i5kI-f1scfCNe1l9S-VNqLxjyxb6i0u1Ibb-pZwIK63A9eSG5wp3nofPIBlW3DpjW0ar1RvzIETbQNrmDcHP-klVB9t-brZSmbfJxh70IULEQtfZTSAkGoaa7bNGLIK9CaRcEw4J_9_Fuq1QxWz9hDyFZQf9dDBWfU1jG81e3RaNPZCFuJAFuAEg6gWVWUJFsyJg&session_id=07cccddf-885e-4f10-8ad1-e83dbc01c772&state=409afcbf-9a0c-4bde-b736-000398f39eb1&session_state=1b9d0c24-6ba7-4dd1-8548-ecbfbcbdd222 ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxNDAzNy4wM0JBLjQwOTIuNzJFRDplNWYwMWMzNy01NWQ1LTRlN2EtYmNhZi1iMDVkZWQ2ZTExM2I= grant_type=authorization_code&code=64524581-0a4b-4c00-ad60-df767c16efde&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:06 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"e3a7395b-6ad4-4784-a317-eddc24ce15e5","token_type":"bearer","expires_in":299,"refresh_token":"5479e234-a3be-4b0b-8837-feac6c38c07b","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE0MDM3LjAzQkEuNDA5Mi43MkVEIiwiZXhwIjoxNTMwNzQ4OTg2LCJpYXQiOjE1MzA3NDUzODYsIm5vbmNlIjoiYjU3MDEyMTItMjk2ZS00Y2ExLThlMTUtYTgxZjkzY2VjYmU0IiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzg2LCJhdF9oYXNoIjoiTXNmeFVnYXhtejZRTTJoOHBzYTluQSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IlpxSzN1VW5VR05DWjREMVpVTmhVZEp0cjBWSDlYQmhzeXo2SWRhUWtnMFkifQ.Ef4wCQxmNDexHQYn2Ijq71DuanTY5X87lJ8UOHXR5J6ZNtpTa7tzT_phbyv4o3dR9E3ILAU3iesA7WwuMuowPZpGeY0ExZtFg5msWyxKT2w4M6y6mpE3cna4s2-lAKOzI5WihSp94WDU5squUCiL79eKZEoMAMlilR_Itw0OU20MB635W4HKEPF3RiutqbpFuCNPfyBvjoy9bwUl047-oGlmEFv0UMyVPrBrREWGEnYFtkgoc8bwH0QUgHOViS6XSQ87fapjPfbwj0Dd9ZyOpnaE5qmEfloygj4T4oa3JyoJkS8pws360dIXx5r_pSoXzTinbTuz3giWT9HCYeYVVQ"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxNDAzNy4wM0JBLjQwOTIuNzJFRDplNWYwMWMzNy01NWQ1LTRlN2EtYmNhZi1iMDVkZWQ2ZTExM2I= grant_type=authorization_code&code=64524581-0a4b-4c00-ad60-df767c16efde&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 400 Cache-Control: no-store Connection: close Content-Length: 213 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:06 GMT Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_grant","error_description":"The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client."} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxNDAzNy4wM0JBLjQwOTIuNzJFRDplNWYwMWMzNy01NWQ1LTRlN2EtYmNhZi1iMDVkZWQ2ZTExM2I= grant_type=refresh_token&scope=address+openid+profile+email&refresh_token=5479e234-a3be-4b0b-8837-feac6c38c07b ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Cache-Control: no-store Connection: Keep-Alive Content-Length: 213 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:06 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_grant","error_description":"The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client."} ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/userinfo HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer e3a7395b-6ad4-4784-a317-eddc24ce15e5 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 400 Connection: close Content-Length: 203 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:06 GMT Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_token","error_description":"The access token provided is expired, revoked, malformed, or invalid for other reasons. Try to request a new access token and retry the protected resource."} ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:03:07 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:07 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: AuthorizationResponseCustomHeaderTest ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "oxAuthTrustedClient": "true" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:07 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5A53.7B31.499E.9406", "client_secret": "24558a60-b6bf-48cf-af13-1565b3e58b3e", "registration_access_token": "51a0107f-5ac8-4731-ad7b-dd377fac27a9", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5A53.7B31.499E.9406", "client_id_issued_at": 1530745387, "client_secret_expires_at": 1530831787, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%215A53.7B31.499E.9406&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=ff96dcc8-3e1a-4823-b67e-6fcb61f07422&nonce=b3fed138-beec-4228-b50b-e3fe67dc157c&prompt=none&custom_response_headers=%5B%7B%22CustomHeader1%22%3A%22custom_header_value_1%22%7D%2C%7B%22CustomHeader3%22%3A%22custom_header_value_3%22%7D%2C%7B%22CustomHeader2%22%3A%22custom_header_value_2%22%7D%5D ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 CustomHeader1: custom_header_value_1 CustomHeader2: custom_header_value_2 CustomHeader3: custom_header_value_3 Date: Wed, 04 Jul 2018 23:03:07 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=065e4215-8e93-4029-bb87-da7fbe5b665a&scope=address+openid+profile+email&session_id=c4f05cc0-ee18-4296-8f99-19b740ea628d&state=ff96dcc8-3e1a-4823-b67e-6fcb61f07422&session_state=6f522840-1554-4e43-96df-2f3ad0a4df33 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: AuthorizationResponseCustomHeaderTest ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["token"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "oxAuthTrustedClient": "true" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1306 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:07 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F6FE.690E.01F0.8872", "client_secret": "bac2897c-6652-4ef1-a138-27620c5060c2", "registration_access_token": "7cad7381-a81a-465b-b8e1-2fa8f87236ab", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F6FE.690E.01F0.8872", "client_id_issued_at": 1530745387, "client_secret_expires_at": 1530831787, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["token"], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21F6FE.690E.01F0.8872&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=31c9bcb2-e4d9-474d-bd90-f66dae46473b&nonce=7cfe88b2-286b-4987-bb74-6e61618e2e27&prompt=none&custom_response_headers=%5B%7B%22CustomHeader1%22%3A%22custom_header_value_1%22%7D%2C%7B%22CustomHeader3%22%3A%22custom_header_value_3%22%7D%2C%7B%22CustomHeader2%22%3A%22custom_header_value_2%22%7D%5D ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 CustomHeader1: custom_header_value_1 CustomHeader2: custom_header_value_2 CustomHeader3: custom_header_value_3 Date: Wed, 04 Jul 2018 23:03:07 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=94cadc95-140d-4f30-b352-e99132fbb53f&scope=address+openid+profile+email&session_id=8658c77c-c26f-42ee-9fb1-32fda5e49e5a&state=31c9bcb2-e4d9-474d-bd90-f66dae46473b&token_type=bearer&session_state=5d2d3602-7186-4319-89c2-da7d8f74c80b&expires_in=299 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: AuthorizationResponseCustomHeaderTest ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["id_token"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "oxAuthTrustedClient": "true" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:07 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!E1DF.ECE1.0834.0913", "client_secret": "aaf6ce1c-ad24-4e13-9c23-ba22ac8ae0f3", "registration_access_token": "0c80124d-5f10-4ea7-be7a-de06f76d7202", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!E1DF.ECE1.0834.0913", "client_id_issued_at": 1530745387, "client_secret_expires_at": 1530831787, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21E1DF.ECE1.0834.0913&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=67df980b-41c3-41a4-84d0-39352334665b&nonce=3dcffc12-42a4-493a-a0c3-5fe668c12cb2&prompt=none&custom_response_headers=%5B%7B%22CustomHeader1%22%3A%22custom_header_value_1%22%7D%2C%7B%22CustomHeader3%22%3A%22custom_header_value_3%22%7D%2C%7B%22CustomHeader2%22%3A%22custom_header_value_2%22%7D%5D ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 CustomHeader1: custom_header_value_1 CustomHeader2: custom_header_value_2 CustomHeader3: custom_header_value_3 Date: Wed, 04 Jul 2018 23:03:07 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFFMURGLkVDRTEuMDgzNC4wOTEzIiwiZXhwIjoxNTMwNzQ4OTg4LCJpYXQiOjE1MzA3NDUzODgsIm5vbmNlIjoiM2RjZmZjMTItNDJhNC00OTNhLWEwYzMtNWZlNjY4YzEyY2IyIiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzg3LCJveE9wZW5JRENvbm5lY3RWZXJzaW9uIjoib3BlbmlkY29ubmVjdC0xLjAiLCJzdWIiOiJUVjhXSnNJWHhMVktUWlRLcThzdVVydDlvWXNIZVhyaWhQR1ptYWk5WE5FIn0.LPGtYPP9S31sZ_Lz9sO432kTE5SBEF7TVCHZEqqRrDDWyVU_gErsv3lewq973zzsmDTLtlfELVmu82xWUVVG7JUgzjwLeLDzLYmc_WCaZX5T39VzZ78F7vOhf_YpPfPIfvuZggwni3Zh4lE4H_DroqWOLwBhdmoR5veLSwB8bYMu01amB-9yk4TweuKXxx_J9e5TqW3fEio8E0Fg6pzei8shIKXk32N7wGg9T7PoT6Jld1p3h00x6WAAvo24agO5gyCh0LRvW4-MXPlJPNS_5HD4FDPXGPaM-mtQutLs5bn65CxvBq-NSR2YtaDszjZvKgL4vXJUkW9_NxHJYYF6LA&session_id=297e3345-f080-4a62-addb-78a46a78936e&state=67df980b-41c3-41a4-84d0-39352334665b&session_state=c2983c47-d67a-4407-b9c3-e4db11a691cf Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: AuthorizationResponseCustomHeaderTest ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "oxAuthTrustedClient": "true" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1405 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:08 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!19ED.184C.0A51.1568", "client_secret": "36e71a58-4709-4da9-b05e-9b857b59d967", "registration_access_token": "254fcbe1-f4a3-43ef-b995-d1c147059153", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!19ED.184C.0A51.1568", "client_id_issued_at": 1530745388, "client_secret_expires_at": 1530831788, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=code+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2119ED.184C.0A51.1568&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=608e9e1a-f06d-4fbe-a0f9-897fe1459d46&nonce=b78d8435-422a-4d32-ba48-22eb2fad7bcf&prompt=none&custom_response_headers=%5B%7B%22CustomHeader1%22%3A%22custom_header_value_1%22%7D%2C%7B%22CustomHeader3%22%3A%22custom_header_value_3%22%7D%2C%7B%22CustomHeader2%22%3A%22custom_header_value_2%22%7D%5D ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 CustomHeader1: custom_header_value_1 CustomHeader2: custom_header_value_2 CustomHeader3: custom_header_value_3 Date: Wed, 04 Jul 2018 23:03:08 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=50bfe430-9d1b-4c06-87cb-674e05fda684&code=a0198c1f-4207-4b9c-a952-9c7b9a12f43f&scope=address+openid+profile+email&session_id=ad8a31da-d00f-444a-8968-95fe805ddb9f&state=608e9e1a-f06d-4fbe-a0f9-897fe1459d46&token_type=bearer&session_state=57e4f4d8-b940-4caa-a45f-0a98fb96a352&expires_in=299 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: AuthorizationResponseCustomHeaderTest ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "oxAuthTrustedClient": "true" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:08 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2F5C.59D5.FE56.C83C", "client_secret": "fe3780fc-35b9-4286-b3b8-0e7f7eb09542", "registration_access_token": "f46108b1-ed5d-40fa-9400-e7989af440bc", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2F5C.59D5.FE56.C83C", "client_id_issued_at": 1530745388, "client_secret_expires_at": 1530831788, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212F5C.59D5.FE56.C83C&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=5f6d1076-d06d-470b-b403-3a39e8cb7899&nonce=47d23053-d0f0-460a-baa2-2cb9c2af1225&prompt=none&custom_response_headers=%5B%7B%22CustomHeader1%22%3A%22custom_header_value_1%22%7D%2C%7B%22CustomHeader3%22%3A%22custom_header_value_3%22%7D%2C%7B%22CustomHeader2%22%3A%22custom_header_value_2%22%7D%5D ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 CustomHeader1: custom_header_value_1 CustomHeader2: custom_header_value_2 CustomHeader3: custom_header_value_3 Date: Wed, 04 Jul 2018 23:03:08 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=53ee32df-2705-45ea-8604-0551e4781c93&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEyRjVDLjU5RDUuRkU1Ni5DODNDIiwiZXhwIjoxNTMwNzQ4OTg4LCJpYXQiOjE1MzA3NDUzODgsIm5vbmNlIjoiNDdkMjMwNTMtZDBmMC00NjBhLWJhYTItMmNiOWMyYWYxMjI1IiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzg4LCJjX2hhc2giOiJXVlZXelB2MldLd3dOaUFnMFNzUHlBIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiVm00Unp2dVVtTVd6X0FDaTRDdmREWmV3OGtCY1JHdzAxRTVhT0FJVmxiMCJ9.pdxiZnU9IW39UQYpdDYwSZGfE3qkaVsjeHRCq4kx28lR_0EUNwZJd3HqLQQwj9UUZrenECdnNDvRgssaik6Y55IRTnjO7VYee0NPJal50OEl51-EXUH3XITSz97DvYlgDggc7CTyEuBkBzxk2Whh6xG-qWuTCqZeGnuyG9MkT-i68zfIo7YMfnelA-ArTBecPTCqYLsHyw5oU6_AmSBQX9QKDcZ2r_FjfYlPV5P2U45C0BVE2UaAx527vvrCpuoWlgDI7Sn1y9xKLgMMy62ADU-UYLTMWEr0nP0Fk25TIY-ugeQ5CmApuCGtfYNkeqLLpaxaboozk3bxHU6GdGOfQQ&session_id=83b1ac52-4c76-4923-88e8-af626dcb52a1&state=5f6d1076-d06d-470b-b403-3a39e8cb7899&session_state=5b8d74af-f854-4318-ac5a-803245f4b6d6 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: AuthorizationResponseCustomHeaderTest ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "oxAuthTrustedClient": "true" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:08 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!FA3A.0308.C9C9.72B7", "client_secret": "aec3eef5-f3f9-4d08-a3b7-802a82111b61", "registration_access_token": "237de018-99e1-4f1f-97ae-7b2057a42954", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!FA3A.0308.C9C9.72B7", "client_id_issued_at": 1530745388, "client_secret_expires_at": 1530831788, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21FA3A.0308.C9C9.72B7&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=adfbb8ca-bd92-49cd-97fe-43785932431b&nonce=c6b37fc2-6a84-4849-8534-0024017bf519&prompt=none&custom_response_headers=%5B%7B%22CustomHeader1%22%3A%22custom_header_value_1%22%7D%2C%7B%22CustomHeader3%22%3A%22custom_header_value_3%22%7D%2C%7B%22CustomHeader2%22%3A%22custom_header_value_2%22%7D%5D ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 CustomHeader1: custom_header_value_1 CustomHeader2: custom_header_value_2 CustomHeader3: custom_header_value_3 Date: Wed, 04 Jul 2018 23:03:08 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=ee16eab4-e024-40ff-8eac-70c4bb343d2f&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFGQTNBLjAzMDguQzlDOS43MkI3IiwiZXhwIjoxNTMwNzQ4OTg4LCJpYXQiOjE1MzA3NDUzODgsIm5vbmNlIjoiYzZiMzdmYzItNmE4NC00ODQ5LTg1MzQtMDAyNDAxN2JmNTE5IiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzg4LCJhdF9oYXNoIjoiekpQV0RVSER1WEpVUEFhX0pkTVRJdyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6ImJLQkV5U2N6M01SYWtST2NOM0lxODhPS0pIUUdNMWRDZ3hweVZRSEc1WVEifQ.kKSSMar8A8Og3DW7B7G27sgKx0S-mMiVQM42xabFn-0kxUG2hRSRhmCAm-gmdkSZ1MNMgDRD1ycIpnopy6rGDFbiONBfoaVfTGhWPClOfd0GxruaQSJ5o0UoQwtRUTArgauhUCB7_67vm16v-4_wXxuFQjcf9OHTAGNG2dcr6kbfU2ttRgj3hApDatsmNt8SgyRJEshlwtSf0VqGMwBL111d2uZiDLD-kXNPIJb3m1JILzAYBz-vN34q1FzqF3FfNRoZerabd9y3vd68KiF3PWfKScXGYdqTUsrEH63HlGw0DvYq5SPNWa8xDuQWGAOueD9PYNgJq39MgGJpMof1Uw&session_id=d266d069-048f-4edc-8401-771a7019227b&state=adfbb8ca-bd92-49cd-97fe-43785932431b&token_type=bearer&session_state=bba8f512-426e-4c12-b3a4-1657cf0f1c97&expires_in=299 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: AuthorizationResponseCustomHeaderTest ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "oxAuthTrustedClient": "true" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:08 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3AAD.8138.39B4.2DF8", "client_secret": "2bf2a198-e9ba-41fa-9192-d7176b71763c", "registration_access_token": "65c87a13-e113-4ef1-a6cc-d8468c658bdf", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3AAD.8138.39B4.2DF8", "client_id_issued_at": 1530745388, "client_secret_expires_at": 1530831788, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=code+token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%213AAD.8138.39B4.2DF8&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=d3b5faf6-8847-4f50-8ec3-de1b9f548347&nonce=537e1c88-973f-4441-acb0-616b106a5f36&prompt=none&custom_response_headers=%5B%7B%22CustomHeader1%22%3A%22custom_header_value_1%22%7D%2C%7B%22CustomHeader3%22%3A%22custom_header_value_3%22%7D%2C%7B%22CustomHeader2%22%3A%22custom_header_value_2%22%7D%5D ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 CustomHeader1: custom_header_value_1 CustomHeader2: custom_header_value_2 CustomHeader3: custom_header_value_3 Date: Wed, 04 Jul 2018 23:03:09 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=27cfbaf5-ad1d-45ce-88de-82c6541786bd&code=de38cbb2-2684-45a7-92d5-559b523ec6c2&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEzQUFELjgxMzguMzlCNC4yREY4IiwiZXhwIjoxNTMwNzQ4OTg5LCJpYXQiOjE1MzA3NDUzODksIm5vbmNlIjoiNTM3ZTFjODgtOTczZi00NDQxLWFjYjAtNjE2YjEwNmE1ZjM2IiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzg5LCJjX2hhc2giOiJqY2JoRktLakJCdjB6dm5tbVBDRmp3IiwiYXRfaGFzaCI6IkMzbFl4eEJvRWpSSHVWSDhwbzRtMHciLCJveE9wZW5JRENvbm5lY3RWZXJzaW9uIjoib3BlbmlkY29ubmVjdC0xLjAiLCJzdWIiOiJTdzZJcUc1czRTN1gtY0dGdWZ5bFRWVjQ1Y3pXWVQ1M1BtRWRGMTdJMmJRIn0.Xk3Asg7PdxA6zkFrauwHp7nPE42XEggVY7eJ5qh84xkPnYkDnw3PG5p7JMhOGu3ci3KKdFq9Ho2Pz_7CJbppt7S3bjDZSHbXq4ZAN12gCVbtGyhKgpayQubWDoAMfUdQqwF7IjQxyNuC4R4LQdt67AeUmIgYyZ3CQ2vnv_PzvI2TleeRgKOR6j96_5GQ0LY9R1vitwAboHOL94KVhL9dwCuXFELwf8290IqmaM_KJuJ5g3vuUADdvauRB_VtbJBpmvX-sirnzTKyuycly1XQGQw3QGCgQ7mpamL_fqZ3Gfkjn-gNfaMsLeuFnCldZT4U0Q474MqCITgDWGO43TEegQ&session_id=9410585e-6281-4b0a-8190-0194dfa9b1a4&state=d3b5faf6-8847-4f50-8ec3-de1b9f548347&token_type=bearer&session_state=f18f668c-9800-48b2-9bf2-4b3af4f86280&expires_in=299 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:03:09 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:09 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: defaultResponseModeBasicCode ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:09 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!23D9.9D03.FE74.E62E", "client_secret": "b2f2ad60-7732-4561-acd7-1ab974ce9de5", "registration_access_token": "c15618fd-d34f-45dc-8ded-28b860bb53cb", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!23D9.9D03.FE74.E62E", "client_id_issued_at": 1530745389, "client_secret_expires_at": 1530831789, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2123D9.9D03.FE74.E62E&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=87e93f45-b73b-4b09-bcc9-950dc314d352 19:03:29.716 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:4b48b2df-0985-482a-b58b-e9322a2713c1 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2123D9.9D03.FE74.E62E&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=87e93f45-b73b-4b09-bcc9-950dc314d352 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=f61e61b9-95b6-4bfd-87ac-d24869158d58&scope=address+openid+profile+email&session_id=2ea3c969-db11-47d9-9734-2932fa1c00ab&state=87e93f45-b73b-4b09-bcc9-950dc314d352&session_state=4b48b2df-0985-482a-b58b-e9322a2713c1 ####################################################### TEST: defaultResponseModeHybridCodeIdToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:11 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!17AD.1466.26C1.16C2", "client_secret": "78a4c9d2-7ecc-41cd-88ca-8f649dadea4c", "registration_access_token": "4945f8f2-a720-41e9-96b7-8d0368838697", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!17AD.1466.26C1.16C2", "client_id_issued_at": 1530745391, "client_secret_expires_at": 1530831791, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2117AD.1466.26C1.16C2&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=37defe79-74db-48e9-8ea9-b429b1b8d511&nonce=dbc09de8-16c6-42db-8b62-d538925d54fe 19:03:31.614 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:5fb2e1ba-e291-4968-8eba-c42d0dddef34 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2117AD.1466.26C1.16C2&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=37defe79-74db-48e9-8ea9-b429b1b8d511&nonce=dbc09de8-16c6-42db-8b62-d538925d54fe ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=f5712a68-a9b2-4664-b488-e99dc79bd0cd&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCExN0FELjE0NjYuMjZDMS4xNkMyIiwiZXhwIjoxNTMwNzQ4OTkyLCJpYXQiOjE1MzA3NDUzOTIsIm5vbmNlIjoiZGJjMDlkZTgtMTZjNi00MmRiLThiNjItZDUzODkyNWQ1NGZlIiwiYXV0aF90aW1lIjoxNTMwNzQ1MzkyLCJjX2hhc2giOiIwWXkzRUFlMWt2QWtFME1LMzI5NDR3Iiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoieHoxTGg4NEpjZnYwVG1KWWtNd2RVYWJwQkIzbzJCaThEQm5BVERNbVJ5TSJ9.NEO6re3bAsxniCBexiTouk_jl5Pes06GZSbS9kTXbdjZHlDHRiIzYP-3snGrW0zZ-PxVpfv3-6fJDL9eIEwrl78K7A9ESoNgfPT2D3T2GwRLCbHkI5UVTZZvfdMwsvfwCw9ScbqyxnNGXC32HherNHs7Xamws54RurwkMBKKdZA9C1m8aiMRgepnG0qH6v3U1W6YV8xRsz65e-DoO-vgozDcrpxj9fNE-xzQSetOVIS15Ief_RjIKZsEo4jVCUc6j-iprh18d20V_kdDEKTH9rQTc9SINOVC4kKHN8Ey5nRR1o5x1QcOrtKoKoB5JZ_CDSDHLd97O93JzA2otVdh6A&session_id=0323b64f-3384-4d38-9939-e21f09728159&state=37defe79-74db-48e9-8ea9-b429b1b8d511&session_state=5fb2e1ba-e291-4968-8eba-c42d0dddef34 ####################################################### TEST: defaultResponseModeHybridCodeIdTokenToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:13 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B0F0.9B73.378D.103E", "client_secret": "20c3cfc5-0dbf-4959-957b-14bad7b226ad", "registration_access_token": "d4a6195a-ac52-47b7-95f8-f5781acedd6c", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B0F0.9B73.378D.103E", "client_id_issued_at": 1530745393, "client_secret_expires_at": 1530831793, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21B0F0.9B73.378D.103E&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=3b69a3e5-38bc-4f2c-baae-dd780ee65043&nonce=823f2ce7-7316-4c8a-a38f-39c0a519a5a2 19:03:33.427 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:d8ced9ea-ab1e-4665-9fd1-a985727bed1f ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21B0F0.9B73.378D.103E&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=3b69a3e5-38bc-4f2c-baae-dd780ee65043&nonce=823f2ce7-7316-4c8a-a38f-39c0a519a5a2 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=07c665f3-c31b-416d-9fe7-a0b0d6d0f9d1&code=c8a49833-7c59-4f66-9fb1-07033bf8313a&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFCMEYwLjlCNzMuMzc4RC4xMDNFIiwiZXhwIjoxNTMwNzQ4OTk0LCJpYXQiOjE1MzA3NDUzOTQsIm5vbmNlIjoiODIzZjJjZTctNzMxNi00YzhhLWEzOGYtMzljMGE1MTlhNWEyIiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzk0LCJjX2hhc2giOiJKVVB0LTl6RjlSYTF2eW5jQjQ0WlVBIiwiYXRfaGFzaCI6Im1GRlRpUnhmbHZUYVR6VHM5UVp6NkEiLCJveE9wZW5JRENvbm5lY3RWZXJzaW9uIjoib3BlbmlkY29ubmVjdC0xLjAiLCJzdWIiOiIxRlZwVjhUbXNTLTk1RGJPV01aeVZGYUM1S2NsNGE4UFpobW9wOWFYNklBIn0.gPsREQFb_1WWnl4Eex62nRv5uwIZNP0XJc_3EA6zHV3R3Wk3Vxbz_jluXYVrg-ZSssoFicGBEqWsQxJmR_PUE8ogzP9r5ldx0yjvQz3wpsj4bbSaaqvl4rC6msDHtg7Prugs7Gu7WrRClbUZIiEI32bHbmONbgW3TJb8KPIDOUW4A99kuRPcYCtoDqO7FHe90CCdKzTSPkTkthk9JNTDC8rpOXRyzdMVkNo332EOYhH8zD25AIwnbSNYcKEE9gvdFOSxWHjSbOF0OrtAe-5onTaS6yjE-fAm2nRxes2Ou_s7sFLQ5-UruHo6Yc74gUTBAZJbP4IUxy6va9vnlN7x6Q&session_id=cbb33199-634b-4393-8b15-5ca450342807&state=3b69a3e5-38bc-4f2c-baae-dd780ee65043&token_type=bearer&session_state=d8ced9ea-ab1e-4665-9fd1-a985727bed1f&expires_in=299 ####################################################### TEST: defaultResponseModeHybridCodeToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1405 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:14 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2269.0DEA.B5B9.D364", "client_secret": "e835c9db-7f80-4445-b976-0c091688af0d", "registration_access_token": "50cda55a-780d-4372-8964-2fdcd1ff2228", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2269.0DEA.B5B9.D364", "client_id_issued_at": 1530745394, "client_secret_expires_at": 1530831794, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212269.0DEA.B5B9.D364&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=f4212d73-63ee-47d0-98fc-e1034625c33d&nonce=f67e2641-730d-42cf-9ce7-ae6b7146cb97 19:03:34.957 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:2717ac57-2cb3-42ca-9d7c-9c6537f8b9da ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212269.0DEA.B5B9.D364&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=f4212d73-63ee-47d0-98fc-e1034625c33d&nonce=f67e2641-730d-42cf-9ce7-ae6b7146cb97 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=942cbfcd-58e2-44bb-b25e-18378b2b3bc0&code=9768286c-f93c-435c-94fa-e2e8407950dc&scope=address+openid+profile+email&session_id=5b4a07ba-b8a2-48e0-bf20-d623762a70c3&state=f4212d73-63ee-47d0-98fc-e1034625c33d&token_type=bearer&session_state=2717ac57-2cb3-42ca-9d7c-9c6537f8b9da&expires_in=299 ####################################################### TEST: defaultResponseModeImplicitIdToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["id_token"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:16 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!56AA.3B7D.4EBD.E902", "client_secret": "6b57926f-3525-4ef9-a567-b88eda74e77f", "registration_access_token": "91245eec-6ccf-4632-8230-179a7a702f61", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!56AA.3B7D.4EBD.E902", "client_id_issued_at": 1530745396, "client_secret_expires_at": 1530831796, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2156AA.3B7D.4EBD.E902&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=a87b4496-6962-40b5-94a1-0afc56903cee&nonce=14fee299-37fd-468d-bb38-ca2111454624 19:03:36.647 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:5fa75eb8-c263-4e03-8ba4-3987652342cf ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2156AA.3B7D.4EBD.E902&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=a87b4496-6962-40b5-94a1-0afc56903cee&nonce=14fee299-37fd-468d-bb38-ca2111454624 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE1NkFBLjNCN0QuNEVCRC5FOTAyIiwiZXhwIjoxNTMwNzQ4OTk3LCJpYXQiOjE1MzA3NDUzOTcsIm5vbmNlIjoiMTRmZWUyOTktMzdmZC00NjhkLWJiMzgtY2EyMTExNDU0NjI0IiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzk3LCJveE9wZW5JRENvbm5lY3RWZXJzaW9uIjoib3BlbmlkY29ubmVjdC0xLjAiLCJzdWIiOiJJMXViZ0sxQm5uWVlXSHZXWUl4bC1lT0IzMjhZaXV0ajNGV2hEQlFpYm5zIn0.A-oYD0bYeIkTh7ylpaQL3jY0u3bswqIN3S3vVC8LDN6S4k6UAWJ26ZWW56rjwT7EbIL21gLbf4sF4RULrtcmTrQu2ZVRmjyHhAQXd9FrquSDWUD9zu6UAOZstgPJK3wJhIou8CUqSGCCffzYDsrzAGHykCeEgm_F5jVFy2KeRARijEmNseLKqF5of3rvFPFUgScDmLrh9Ug6lpw-Yw1I55ST-soGGbx2D-Ym-4AmNVAUExn-fY2VavSf2MhNbmDSINCov_vN8VvTFhukGI0JBzQw6Zll5N6BS2tOH5ZVoVRf17y0CdEJDE5DtmhfbDhD0DqvJhxKjk5K_0TVjhTBUQ&session_id=45152926-80ac-41bf-a63b-89649a0bd895&state=a87b4496-6962-40b5-94a1-0afc56903cee&session_state=5fa75eb8-c263-4e03-8ba4-3987652342cf ####################################################### TEST: defaultResponseModeImplicitIdTokenToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "id_token", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:17 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!95D5.CEC9.491E.3745", "client_secret": "3e198473-0473-465c-94e4-1efec2aafaf0", "registration_access_token": "0014e9b1-2f87-49e8-a540-ae3727887b46", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!95D5.CEC9.491E.3745", "client_id_issued_at": 1530745397, "client_secret_expires_at": 1530831797, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2195D5.CEC9.491E.3745&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=0451c32a-213b-4a3b-a91d-66927b422c55&nonce=ec15f787-c588-496d-949f-5bd175b51ca2 19:03:38.097 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:2ff0abcf-db8b-4ed3-82a0-9462a40d02e8 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2195D5.CEC9.491E.3745&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=0451c32a-213b-4a3b-a91d-66927b422c55&nonce=ec15f787-c588-496d-949f-5bd175b51ca2 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=87778091-3539-4fa7-9881-c4da657bf5d7&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE5NUQ1LkNFQzkuNDkxRS4zNzQ1IiwiZXhwIjoxNTMwNzQ4OTk5LCJpYXQiOjE1MzA3NDUzOTksIm5vbmNlIjoiZWMxNWY3ODctYzU4OC00OTZkLTk0OWYtNWJkMTc1YjUxY2EyIiwiYXV0aF90aW1lIjoxNTMwNzQ1Mzk4LCJhdF9oYXNoIjoieTJHbzZXaUxsaFBWemlEWGxOODlEUSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6InpHQnZJLUlTck4xemhuR090TFI1Tm5xQjQ3NjE5cHNiald5VjVXWV9neTAifQ.BVkmNyOQKRY_XKwfyD6uge11TCFYs90RdjBTyVe3kma2LFJMwADKvbEy33gDAsY6pPT9a9MTAKJ0YnQJGot3wbZT--S3RiMH5FqwouA7oax3Mr8zuDatvSZAIgGSrdPvTOD0tz7C7HeZaEVrc6w1ACt-vIQMZKdav58URBq1ku3YIKBMD8D0-b-uxKOsJ-3W1fD3a9nvXaPUG4GSOcEeWYDerwYcagPiGHransm2Pu6jkjD0cq67Q9zVhklhOI_wzax8yBcAqNQKD1RB6puEQlNaBE4ipGQwFzk-uJGkuS7kEt41qKUDtwtUhJ0_9NBbB8gC_LH7jASGu-Ua1DjU7g&session_id=dde197cb-6d53-482d-af15-546c283bc634&state=0451c32a-213b-4a3b-a91d-66927b422c55&token_type=bearer&session_state=2ff0abcf-db8b-4ed3-82a0-9462a40d02e8&expires_in=299 ####################################################### TEST: formPostResponseModeBasicCode ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:19 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5960.56C3.3617.A7C3", "client_secret": "e11777a6-a774-4a7f-832b-e63dde47e93e", "registration_access_token": "31a78f27-cabd-4ccf-88e1-9cf116ccc884", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5960.56C3.3617.A7C3", "client_id_issued_at": 1530745399, "client_secret_expires_at": 1530831799, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%215960.56C3.3617.A7C3&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=5d432e16-7160-4ced-b104-f4c8a0d227df&response_mode=form_post 19:03:39.628 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:f5a386ff-616d-448e-b6a3-bb0d8aeec1b1 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%215960.56C3.3617.A7C3&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=5d432e16-7160-4ced-b104-f4c8a0d227df&response_mode=form_post ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm ####################################################### TEST: formPostResponseModeHybridCodeIdToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:20 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!BB9E.4CB0.9A11.F79D", "client_secret": "80bb286a-b5f4-479f-914e-8cf980d8df23", "registration_access_token": "c72f0983-91de-4b91-af74-8ffc03542ec6", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!BB9E.4CB0.9A11.F79D", "client_id_issued_at": 1530745400, "client_secret_expires_at": 1530831800, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21BB9E.4CB0.9A11.F79D&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=5f9da286-697c-44ef-a0ad-9e10f6fa34b0&response_mode=form_post&nonce=86905ce8-1308-4689-abb2-f221146aa966 19:03:41.045 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:db239765-9b1e-4d6e-86e6-a8e521931d67 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21BB9E.4CB0.9A11.F79D&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=5f9da286-697c-44ef-a0ad-9e10f6fa34b0&response_mode=form_post&nonce=86905ce8-1308-4689-abb2-f221146aa966 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm ####################################################### TEST: formPostResponseModeHybridCodeIdTokenToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:22 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B78E.C4FE.15B4.AC39", "client_secret": "de734a19-f62f-4f9a-a8d3-5e2bc1e80852", "registration_access_token": "d1540d7f-fbee-4047-8724-2970c213db10", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B78E.C4FE.15B4.AC39", "client_id_issued_at": 1530745402, "client_secret_expires_at": 1530831802, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21B78E.C4FE.15B4.AC39&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=4816683e-bd6e-40cc-8425-2827afd5d493&response_mode=form_post&nonce=3c1cc558-ed80-4f7d-ae59-64ab347d4e85 19:03:42.895 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:c0a1f12f-9ed5-4f4b-a6f1-7871824c4368 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21B78E.C4FE.15B4.AC39&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=4816683e-bd6e-40cc-8425-2827afd5d493&response_mode=form_post&nonce=3c1cc558-ed80-4f7d-ae59-64ab347d4e85 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm ####################################################### TEST: formPostResponseModeHybridCodeToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1405 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:24 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D670.FC69.8A85.7FCC", "client_secret": "f4f8b256-3790-4b55-8f83-3d18c1064f95", "registration_access_token": "40e4d44f-f3f6-4948-82c8-b14f71855498", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D670.FC69.8A85.7FCC", "client_id_issued_at": 1530745404, "client_secret_expires_at": 1530831804, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21D670.FC69.8A85.7FCC&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=df7a38d3-c2d3-497d-9fef-84d18b0a747c&response_mode=form_post&nonce=845ac560-4c89-43e4-9ac0-b4fafafdd755 19:03:44.678 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:66fecbe7-222c-42d7-b103-4d1e241ce38f ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21D670.FC69.8A85.7FCC&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=df7a38d3-c2d3-497d-9fef-84d18b0a747c&response_mode=form_post&nonce=845ac560-4c89-43e4-9ac0-b4fafafdd755 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm ####################################################### TEST: formPostResponseModeImplicitIdToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["id_token"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:26 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!914B.AA7B.013C.7C99", "client_secret": "9e39d7b8-1423-4407-b78e-08c54ab02089", "registration_access_token": "a1c67794-111d-4436-9583-ebec43dd6acd", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!914B.AA7B.013C.7C99", "client_id_issued_at": 1530745406, "client_secret_expires_at": 1530831806, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21914B.AA7B.013C.7C99&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=b5021195-e2f3-4170-afc0-16733d0dfb6f&response_mode=form_post&nonce=2be5cb05-f7ad-48e7-a280-f41697238928 19:03:46.699 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:36e39090-374c-449f-8bc9-0016743d6e90 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21914B.AA7B.013C.7C99&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=b5021195-e2f3-4170-afc0-16733d0dfb6f&response_mode=form_post&nonce=2be5cb05-f7ad-48e7-a280-f41697238928 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm ####################################################### TEST: formPostResponseModeImplicitIdTokenToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "id_token", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:28 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!E44D.5F58.1AD2.8DDE", "client_secret": "2a6988fe-c376-4310-b491-0dd11b0ebd7b", "registration_access_token": "7d367a24-ab76-44ef-aa41-7332cd5dafac", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!E44D.5F58.1AD2.8DDE", "client_id_issued_at": 1530745408, "client_secret_expires_at": 1530831808, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21E44D.5F58.1AD2.8DDE&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=e3874a3f-562e-4673-86e8-a0b009555cba&response_mode=form_post&nonce=54608cba-d7ed-49d3-8a73-d42d801fa03c 19:03:48.896 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:03f45711-86d5-464a-bb53-570205c7cbc8 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21E44D.5F58.1AD2.8DDE&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=e3874a3f-562e-4673-86e8-a0b009555cba&response_mode=form_post&nonce=54608cba-d7ed-49d3-8a73-d42d801fa03c ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm ####################################################### TEST: fragmentResponseModeBasicCode ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:30 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2AF0.C851.9C77.B9E0", "client_secret": "2d480274-c8a5-45cb-b088-c553d6439f4b", "registration_access_token": "dff070b9-d8aa-4eb2-8e08-394ac20ea556", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2AF0.C851.9C77.B9E0", "client_id_issued_at": 1530745410, "client_secret_expires_at": 1530831810, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212AF0.C851.9C77.B9E0&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=9b44897c-cb99-46bc-a44f-439e7abacc0b&response_mode=fragment 19:03:50.612 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:8843cddb-c4c0-4a86-bfdb-1184233fcaca ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212AF0.C851.9C77.B9E0&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=9b44897c-cb99-46bc-a44f-439e7abacc0b&response_mode=fragment ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=31327222-7aca-4ad3-96ae-cd36e343b14c&scope=address+openid+profile+email&session_id=8b84f3ba-edf1-4d0a-815c-e7c4b3c7b850&state=9b44897c-cb99-46bc-a44f-439e7abacc0b&session_state=8843cddb-c4c0-4a86-bfdb-1184233fcaca ####################################################### TEST: fragmentResponseModeHybridCodeIdToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:31 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5755.BABF.9942.5800", "client_secret": "758c65ee-6154-420e-9497-56ca5591e4d1", "registration_access_token": "679a73c4-08f9-45f8-9d53-df08b3efa1d2", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5755.BABF.9942.5800", "client_id_issued_at": 1530745411, "client_secret_expires_at": 1530831811, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%215755.BABF.9942.5800&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=6df2cdd9-ba70-46ae-9740-74575606aab2&response_mode=fragment&nonce=067fa8c7-7a6d-44e2-a8e3-183f4ae2d193 19:03:52.276 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:2becf59c-0225-46e2-812d-978737c152db ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%215755.BABF.9942.5800&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=6df2cdd9-ba70-46ae-9740-74575606aab2&response_mode=fragment&nonce=067fa8c7-7a6d-44e2-a8e3-183f4ae2d193 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=c0976188-1edf-462c-8318-95adc70c95d0&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE1NzU1LkJBQkYuOTk0Mi41ODAwIiwiZXhwIjoxNTMwNzQ5MDEzLCJpYXQiOjE1MzA3NDU0MTMsIm5vbmNlIjoiMDY3ZmE4YzctN2E2ZC00NGUyLWE4ZTMtMTgzZjRhZTJkMTkzIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDEzLCJjX2hhc2giOiJoenRMMjlnd04wUFRLUW5HX011LU5nIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoieGxLOGswLTFLYVlnd0FiNFZJdFp4c05wbzZta092T1VSYlJKVHdLY2ZLbyJ9.b8dCRuMaJq8gjJJcSwJpcxg3g35Mxak6RcS8QNqKGorSA2VAdNJVAfnxsEiylYB2TwLplt4ShPH71n3hgC3jwqprYepeg_Hp0HSKWBcZGY5Vs01-WAL-gLTnAf19u6yCvYTI0F4GAdc7HszqEDE6amh-ZaojCBH05WtyO0j8JNPlLWkxEhtOpKCcoDqUOqtCpiSPA9mU23_UBeBagcTwS7tNtf765o19kz8g52Akftuiw2sPv1OFpO9_BMQAhZFXTuftLoxi5chVC5bIHi2Iu3lyTmiLkRWTrDetQ_NVLyyz0YpPuDEgUOpEpaUzSRSYsNLayZY7rNRsdcVxjB9lfg&session_id=e5f4d99d-e6fa-4c0a-9f55-f340251186a4&state=6df2cdd9-ba70-46ae-9740-74575606aab2&session_state=2becf59c-0225-46e2-812d-978737c152db ####################################################### TEST: fragmentResponseModeHybridCodeIdTokenToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:33 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2FF2.ADC7.2943.BFDD", "client_secret": "586b064e-4e97-49ee-a572-9409f61723c8", "registration_access_token": "fc421345-826f-410f-8b13-5bf1d2be501f", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2FF2.ADC7.2943.BFDD", "client_id_issued_at": 1530745413, "client_secret_expires_at": 1530831813, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212FF2.ADC7.2943.BFDD&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=92bbda0e-a375-40f4-87b7-e03f0e625542&response_mode=fragment&nonce=91d8fa84-d295-4648-ae8b-9f63e41da228 19:03:53.733 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:8c212d08-c725-4398-a984-869c65d9bcb4 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212FF2.ADC7.2943.BFDD&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=92bbda0e-a375-40f4-87b7-e03f0e625542&response_mode=fragment&nonce=91d8fa84-d295-4648-ae8b-9f63e41da228 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=9bc540b5-61be-48f8-94b9-30ad148d70c6&code=c5cfec7e-1993-4d21-8c17-0b66b1082ccb&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEyRkYyLkFEQzcuMjk0My5CRkREIiwiZXhwIjoxNTMwNzQ5MDE0LCJpYXQiOjE1MzA3NDU0MTQsIm5vbmNlIjoiOTFkOGZhODQtZDI5NS00NjQ4LWFlOGItOWY2M2U0MWRhMjI4IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDE0LCJjX2hhc2giOiJNcUpmem0zZEppSWxKWUlhSmhHbHhRIiwiYXRfaGFzaCI6IlRXY3VaMFc4WGkxeTVUN2JDUi1Pc0EiLCJveE9wZW5JRENvbm5lY3RWZXJzaW9uIjoib3BlbmlkY29ubmVjdC0xLjAiLCJzdWIiOiJyRW1CbDNMV19VQXhZUUcybTFYNDBYbFRtM3hWbzd5UW4xZjlUWjI1S3JFIn0.UsG9wWwW56kN12DIoJtt8P20uCwqyCDpCYhd0N7T9oshrdAHi6zGt9CLFFbFNxGz8m5yxX9aZ9JlAnQtihj-X_3WsyvA4yC2Eg0dWCx8c2RnHEioeu29HLDP6WgKoLZsCxmIGh-DzuqPIoNCGvp6JM2og-RVYJ9GRZJLutUZhxMGhIT6Mh0_oy_Jw1FbUAysx3F_-uOc3UbZ7CL4ZaZ-S6ZEBMvu5x_sQ0N6J6z35bVcQ74LXWlD8oiJFTQJq97_NpCC7cObLZ7w_lUJAbTa0EjACXj9uVHISnjtPJQltTsVyPqCMWqvF9FCz7iMSkgXRjkR0gXvv2CfWWmz65su9w&session_id=78556575-dd64-4cf1-a576-c79c92bd78d8&state=92bbda0e-a375-40f4-87b7-e03f0e625542&token_type=bearer&session_state=8c212d08-c725-4398-a984-869c65d9bcb4&expires_in=299 ####################################################### TEST: fragmentResponseModeHybridCodeToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1405 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:35 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2D00.ACC9.8F76.2E9B", "client_secret": "bf764e33-6f4e-49ab-8b24-3592da3e0a53", "registration_access_token": "202c3d33-ce27-4e1b-a229-fdb9c3ebf63a", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2D00.ACC9.8F76.2E9B", "client_id_issued_at": 1530745415, "client_secret_expires_at": 1530831815, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212D00.ACC9.8F76.2E9B&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=68bc66f1-d692-43a4-909e-4e316590f99c&response_mode=fragment&nonce=954fe067-fea9-494f-b3bb-98a1448a5bc8 19:03:55.417 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:bdc78a59-4560-4823-b954-5d97538f7ffc ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212D00.ACC9.8F76.2E9B&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=68bc66f1-d692-43a4-909e-4e316590f99c&response_mode=fragment&nonce=954fe067-fea9-494f-b3bb-98a1448a5bc8 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=42d5675b-f92e-45e1-b82d-d0e03a1a4b50&code=cc866f98-06ad-45f9-b9f5-5892fc23b4ba&scope=address+openid+profile+email&session_id=5d5cfd14-4eda-4276-a397-471ef0be3233&state=68bc66f1-d692-43a4-909e-4e316590f99c&token_type=bearer&session_state=bdc78a59-4560-4823-b954-5d97538f7ffc&expires_in=299 ####################################################### TEST: fragmentResponseModeImplicitIdToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["id_token"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:36 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0F34.5174.5AC4.DCD1", "client_secret": "ed110302-f21f-4e15-ae61-ffab2fd8b3f6", "registration_access_token": "a732c7f9-9bc1-4b2b-8210-5a5b5de47656", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0F34.5174.5AC4.DCD1", "client_id_issued_at": 1530745416, "client_secret_expires_at": 1530831816, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210F34.5174.5AC4.DCD1&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=40a57db4-9ae4-4a5a-8ada-0917945231b4&response_mode=fragment&nonce=9de275ad-fb1c-4dfd-a0d8-7d7f379928a1 19:03:57.032 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:58e354a3-3748-4673-bcc3-54b566c4996f ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210F34.5174.5AC4.DCD1&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=40a57db4-9ae4-4a5a-8ada-0917945231b4&response_mode=fragment&nonce=9de275ad-fb1c-4dfd-a0d8-7d7f379928a1 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwRjM0LjUxNzQuNUFDNC5EQ0QxIiwiZXhwIjoxNTMwNzQ5MDE3LCJpYXQiOjE1MzA3NDU0MTcsIm5vbmNlIjoiOWRlMjc1YWQtZmIxYy00ZGZkLWEwZDgtN2Q3ZjM3OTkyOGExIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDE3LCJveE9wZW5JRENvbm5lY3RWZXJzaW9uIjoib3BlbmlkY29ubmVjdC0xLjAiLCJzdWIiOiIzMU9rMHRPa3JDTVBXT2U0bnhKMkRZVWp0UWhJallSc0dLaHhIV2liYmJJIn0.Wflxu7-R8qvrOgy9ZAq4u4NqsfDi24_P6Ri9AYtz7ckD7GxhnPsnfLrU-SmvwLIvZwnAwurCXBMl9c-a7F9LjZjkmd5EcfFgLdNCC3XsxgS-7oXXbH5j0va6yqlmDXL4256UdqsFL8KW-QVjYLZ6m2WpxVgYvdWrXz5qRLB_tElEX9dTXnxV179cztGuRUyv6WNc9saT2E9KkPm1Vqms7HpISqIaZ_CiBbw6VwqkE6YX3NGJtEjcGY0zJPXJqLwTQ56hMD8m6PNtj35HVrKzWYusQZp02nuQf1-ScB7EzisBEP2JbCtfe6VJav1kHJg-AT9qDjIZeSqwvSKAgdx4XA&session_id=6da2c002-373f-4759-b72a-766f500cd318&state=40a57db4-9ae4-4a5a-8ada-0917945231b4&session_state=58e354a3-3748-4673-bcc3-54b566c4996f ####################################################### TEST: fragmentResponseModeImplicitIdTokenToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "id_token", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:38 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2EED.03F7.244D.08C7", "client_secret": "341f118c-ffee-46c1-9db9-7fef8fc74323", "registration_access_token": "32377981-cf04-4a35-aea2-93a446afb757", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2EED.03F7.244D.08C7", "client_id_issued_at": 1530745418, "client_secret_expires_at": 1530831818, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212EED.03F7.244D.08C7&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=077308a8-8ab6-442a-a864-9166f89dadc4&response_mode=fragment&nonce=640115b0-7208-401b-b291-90fced3f15f9 19:03:58.422 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:a8bd4cd1-05d4-446e-904f-1248e02a3f00 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212EED.03F7.244D.08C7&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=077308a8-8ab6-442a-a864-9166f89dadc4&response_mode=fragment&nonce=640115b0-7208-401b-b291-90fced3f15f9 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=8c2510e4-5853-4bee-908d-17888e811a8a&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEyRUVELjAzRjcuMjQ0RC4wOEM3IiwiZXhwIjoxNTMwNzQ5MDE5LCJpYXQiOjE1MzA3NDU0MTksIm5vbmNlIjoiNjQwMTE1YjAtNzIwOC00MDFiLWIyOTEtOTBmY2VkM2YxNWY5IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDE5LCJhdF9oYXNoIjoibF9aSlBuRm9udWhWLTBRV1drdkRPdyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IjJDN3BhdnA1cDl4ZXV4WGZUeGRXQnRwNHBudEhOdkxIdzFqQkJkc2pENlEifQ.DxWSAOgq5ETdIDfib3-uKxWbFCA_DU0BChD1u-VjewL5AqN9rJjMol4gQ8vlanAwqAOim2XTMY5ibkuo9R_XII4YjlGnQsI-_yFSYaXotg_16QRl0JL0g_z6j11Y0DkPJCOIgBpuKKh1jrSdDVeoq3tsz5izrOdsrGHYqQ7fKdXtglHR-ABiyXzRDzSZ02U85RqTp6diXG2-UsQtNXzMO7tbWmzF3b_hLGs7rgLcQQN7bP4AVKaZKMi_d4oG2IZp9QLzBs0GpJRrAiyEtaIheMQ4lh_NoN6huhcfXEwBoCHL91XMU23hCUEmDrlTWq6vj5CLmemn9pTb3p0e13DDug&session_id=2bb2994d-7012-4e32-84dd-6a6d04f2a5e7&state=077308a8-8ab6-442a-a864-9166f89dadc4&token_type=bearer&session_state=a8bd4cd1-05d4-446e-904f-1248e02a3f00&expires_in=299 ####################################################### TEST: queryResponseModeBasicCode ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:39 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!4B5B.1875.E879.9F63", "client_secret": "5f664c1f-89d5-447b-ae0f-210b5d37e82c", "registration_access_token": "9883a3e5-f6bc-4ea8-b3fc-c55216ff138a", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!4B5B.1875.E879.9F63", "client_id_issued_at": 1530745419, "client_secret_expires_at": 1530831819, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%214B5B.1875.E879.9F63&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=d2843262-b9d0-4b59-8d5b-7af62b08615a&response_mode=query 19:04:00.003 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:034fef5c-8a0b-4ad8-9b5b-e069b5e417e5 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%214B5B.1875.E879.9F63&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=d2843262-b9d0-4b59-8d5b-7af62b08615a&response_mode=query ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=51f8b579-3273-46c3-bb1f-00931bd9a8c8&scope=address+openid+profile+email&session_id=56afd0d0-655d-4432-a2d1-ef38c7227565&state=d2843262-b9d0-4b59-8d5b-7af62b08615a&session_state=034fef5c-8a0b-4ad8-9b5b-e069b5e417e5 ####################################################### TEST: queryResponseModeHybridCodeIdToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:41 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D2BF.704D.4E85.9E5A", "client_secret": "471a1344-6f36-47df-9e25-6d1c8c4970a8", "registration_access_token": "aa9328f1-3911-48eb-afcd-a097f93d868f", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D2BF.704D.4E85.9E5A", "client_id_issued_at": 1530745421, "client_secret_expires_at": 1530831821, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21D2BF.704D.4E85.9E5A&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=c4052d50-35d1-4f40-b693-dd8c0c3222df&response_mode=query&nonce=fec53da9-be3c-4aab-8e2f-349601591da1 19:04:02.388 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:fbcbbc58-4632-4d04-80a6-f8530e373efd ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21D2BF.704D.4E85.9E5A&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=c4052d50-35d1-4f40-b693-dd8c0c3222df&response_mode=query&nonce=fec53da9-be3c-4aab-8e2f-349601591da1 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=eb2f29fc-f6a7-4c6c-8610-185a648d7a63&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFEMkJGLjcwNEQuNEU4NS45RTVBIiwiZXhwIjoxNTMwNzQ5MDI0LCJpYXQiOjE1MzA3NDU0MjQsIm5vbmNlIjoiZmVjNTNkYTktYmUzYy00YWFiLThlMmYtMzQ5NjAxNTkxZGExIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDIzLCJjX2hhc2giOiJ6aEEtaUR1NXZuZ3dCYkpZVndTa3RBIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiZ2oydkNMNEVkNkV5XzNSSU1kR2ZqUGtpSE1KOVpLTXdxNDBtZTZRcDlIQSJ9.k0wGroA2FYU3qlm42mo6t4akKDI1dE3bcT-VbOqdqB6utDDpOt3iiY4EhmbIxEvBzqs1Yn7Yx5reEDASa9pkPVcOCvVwnC4GDmoU_CxY35w1UYkck3advONQP2Ev1N3V266LlwOIaeyCMau9QPEveps5T_dr4ZOWdKAl8cgRwQrSq3tbaqULyRJbGgdElXDekEiYYjS_sFs-tHTOKrnYSkEdOO_SqlH7smI-50I8hRLJiZaDQTrhllFI92gBM30-3CMuW7sfmfe2QvUVi3xiNmfL71WkA5ruBxuz0AF2--2eL-T_NbFYBN38eX7KkO7CqgyQ32Ew5j6v1Fr6_NLCtA&session_id=e200ecc2-7243-4511-b2e0-b0ee52383916&state=c4052d50-35d1-4f40-b693-dd8c0c3222df&session_state=fbcbbc58-4632-4d04-80a6-f8530e373efd ####################################################### TEST: queryResponseModeHybridCodeIdTokenToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:44 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F0CF.BE45.9911.4B51", "client_secret": "0c8c3ecf-3259-4246-9ea0-1fe66ed24603", "registration_access_token": "4aae932d-b48a-4812-97fb-bc905171437b", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F0CF.BE45.9911.4B51", "client_id_issued_at": 1530745424, "client_secret_expires_at": 1530831824, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21F0CF.BE45.9911.4B51&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=ee8e1f9b-761c-447d-a7ee-c99852e5d3da&response_mode=query&nonce=9466142c-4b36-450c-9be1-1d0f1a8ed92a 19:04:04.473 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:c4c0c24f-1c00-4e1a-a3c7-59fbf54ac99f ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21F0CF.BE45.9911.4B51&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=ee8e1f9b-761c-447d-a7ee-c99852e5d3da&response_mode=query&nonce=9466142c-4b36-450c-9be1-1d0f1a8ed92a ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?access_token=22627f5b-6931-44a1-9f26-000af48931f4&code=6c2b92bc-ef70-4db4-bc74-d0811a463621&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFGMENGLkJFNDUuOTkxMS40QjUxIiwiZXhwIjoxNTMwNzQ5MDI1LCJpYXQiOjE1MzA3NDU0MjUsIm5vbmNlIjoiOTQ2NjE0MmMtNGIzNi00NTBjLTliZTEtMWQwZjFhOGVkOTJhIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDI1LCJjX2hhc2giOiJ6alFxV2NmTlpkNEdKV3ZGbXl0OVR3IiwiYXRfaGFzaCI6IlBNbEo2a0txRFpQYWNXUGNQUVYtX0EiLCJveE9wZW5JRENvbm5lY3RWZXJzaW9uIjoib3BlbmlkY29ubmVjdC0xLjAiLCJzdWIiOiIxb2ZidnBkSVlNWmprTnQzRnY0Tm5xLUVoTElMaXJtN2ktcW1yYzJUcWI0In0.jwylzIltupb6D0sY1oQwGGeZ4byZEFMVkAoKFiG5JzV7VhvKy_AaHHQFMIghGPbVUcMDr9X6MIlnRT_mYLZJqbJeFjMKl2qaDDOENOXGVBykQP7EBWRTRpbxFkRhndXI_91cNFJBd7QkS1MivFXTl1Vk0PMHSWMLrjYWwK0ZxAAoJMvtOH8AAZoXVEhcOp1Xv5_RmAwJSk4FfHKt64hUXxv-9_pnGEDk9PKxA1SgWPe6yJ-b4sxb9xvTIIegmjyuRFugoiS8A3F3FGBqaFytBDpYCyW5bgmR27cnFBSRcq3vOX6u7G1Vi1wISLrIQbM5EXa-_KfH2QiCcrXFbc231Q&session_id=2862bc59-2fe9-4d80-8701-55acd3abca02&state=ee8e1f9b-761c-447d-a7ee-c99852e5d3da&token_type=bearer&session_state=c4c0c24f-1c00-4e1a-a3c7-59fbf54ac99f&expires_in=299 ####################################################### TEST: queryResponseModeHybridCodeToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1405 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:45 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!12FC.2B4C.5051.F34A", "client_secret": "8595eeb8-f452-4045-bc74-e3042c1d6b5c", "registration_access_token": "1431e2fc-fc01-4ee9-8981-86cc653b6f97", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!12FC.2B4C.5051.F34A", "client_id_issued_at": 1530745425, "client_secret_expires_at": 1530831825, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2112FC.2B4C.5051.F34A&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=1a9d430a-48a3-4152-85df-041e72a3102f&response_mode=query&nonce=1cc735a6-58ed-47fc-942d-7b7e13a8a5be 19:04:06.148 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:568ef653-b677-4e67-970f-556cf3445a10 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2112FC.2B4C.5051.F34A&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=1a9d430a-48a3-4152-85df-041e72a3102f&response_mode=query&nonce=1cc735a6-58ed-47fc-942d-7b7e13a8a5be ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?access_token=c4bea564-5078-409a-acd6-8531cbf30c60&code=51606738-e9c5-4658-949d-f0dab9bbd6dc&scope=address+openid+profile+email&session_id=09e075d5-9dcd-45f3-b6d7-e509fee4f484&state=1a9d430a-48a3-4152-85df-041e72a3102f&token_type=bearer&session_state=568ef653-b677-4e67-970f-556cf3445a10&expires_in=299 ####################################################### TEST: queryResponseModeImplicitIdToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["id_token"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:47 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!C804.B7F7.05A8.A574", "client_secret": "342ceba0-6026-4bf0-9e6e-7f2a7819b414", "registration_access_token": "58db9b60-a6c8-4b08-8114-fd12e9aaac57", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!C804.B7F7.05A8.A574", "client_id_issued_at": 1530745427, "client_secret_expires_at": 1530831827, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21C804.B7F7.05A8.A574&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eb567dd1-c80b-4f9e-b68f-cae9d627b21f&response_mode=query&nonce=0f5c830a-bc6b-4d24-b152-99038df9a510 19:04:07.732 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:76421f93-f290-4ef8-babf-760678d40c7e ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21C804.B7F7.05A8.A574&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eb567dd1-c80b-4f9e-b68f-cae9d627b21f&response_mode=query&nonce=0f5c830a-bc6b-4d24-b152-99038df9a510 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFDODA0LkI3RjcuMDVBOC5BNTc0IiwiZXhwIjoxNTMwNzQ5MDI4LCJpYXQiOjE1MzA3NDU0MjgsIm5vbmNlIjoiMGY1YzgzMGEtYmM2Yi00ZDI0LWIxNTItOTkwMzhkZjlhNTEwIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDI4LCJveE9wZW5JRENvbm5lY3RWZXJzaW9uIjoib3BlbmlkY29ubmVjdC0xLjAiLCJzdWIiOiJPTGdJdThOOUtmWmJBRDlHUHZUVkE3X1JlcE5uUHRzTG1vN1hQSFktallzIn0.J-iYlRDNIfMtcE0tuDmWxK0MsMNZ7jzCAgrtIgit7L20L-_dzzGYx-S7om4VP2BqJ_oKHYwhD9vu65rCI52cl7eWvumkvvbwVgWRBF6Lbcs0aWFObPwQut_PVwQId0dC9b93fNDFvNndCx3vS_FysMdk7GwZR-Gd828Ta7XHJ4xu6tGJR3CcaQ8skdsYlnumysG7IvMIqCTpd-DRo8mLguKZsgdZVsmFROlgXUxBpPe6OwUw3da_IoTd5mHH2olLUY0D8GT_XxnsNyBmEsmg-D8ieH0dGhv-1Z57pEexcCjixk68Hofxu2kUoFbEGgWVC-BQ6XHiSS1zqYdjV2z9pA&session_id=40630ad1-31d4-486a-94a6-2350b4a3f4e3&state=eb567dd1-c80b-4f9e-b68f-cae9d627b21f&session_state=76421f93-f290-4ef8-babf-760678d40c7e ####################################################### TEST: queryResponseModeImplicitIdTokenToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "id_token", "token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:48 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!96DF.BF9C.C1A9.02AD", "client_secret": "ea5b417f-7a45-4c24-94d6-5a3ca24e90b9", "registration_access_token": "fff266f0-2921-449f-89c9-356fe70b6961", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!96DF.BF9C.C1A9.02AD", "client_id_issued_at": 1530745428, "client_secret_expires_at": 1530831828, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2196DF.BF9C.C1A9.02AD&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=1fecbf15-f6ec-4a71-9440-405e5635bd0b&response_mode=query&nonce=b7a1f6a4-b3ac-4e3e-8260-707d279d742f 19:04:09.290 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:35c892ed-7f45-4a99-a6b7-ee47b40ef77a ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token+token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2196DF.BF9C.C1A9.02AD&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=1fecbf15-f6ec-4a71-9440-405e5635bd0b&response_mode=query&nonce=b7a1f6a4-b3ac-4e3e-8260-707d279d742f ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?access_token=a7fc9eaf-fad0-479c-bd1f-d931ba71d895&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE5NkRGLkJGOUMuQzFBOS4wMkFEIiwiZXhwIjoxNTMwNzQ5MDMwLCJpYXQiOjE1MzA3NDU0MzAsIm5vbmNlIjoiYjdhMWY2YTQtYjNhYy00ZTNlLTgyNjAtNzA3ZDI3OWQ3NDJmIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDMwLCJhdF9oYXNoIjoia1pYVjFtRWhIQjVMZS1zMk5DUmdCUSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6ImlneVNpSTdEREtXWEdJaEZ2dDdwZW5BeWI3Ul9tUlpKemU1WV9MNWtVdXcifQ.Bz87II4ZItISZjjeXjLQS0FSmdAaGNbvCeD0HduPH-SVbslJhr_lOCrmBK1t01HZstQ47SFY1WJxuSnkYRILaAouDStBZ5FcPBDdxLD2zHR3u7ubedxV1oUtaGcDxFey_TvzTjm_7NhCSOefoXYmlAYOWhWOqwULcQUt8WckhB-T3UOeKgeHOj2iLnp4yvhjdrMzPIRJQGb6DvC83oYXDspXIetdOWqnBaHVvaiAUoSK24MBpAug2AxSKLIBgdWcfGRJ5CZ0sI1NWVD0GDZiJFOhnc0Keb0wbcQSpx-W4fZHjvYEQi6HAgQsERZ09ujPgHGs9PtloPi1fUkasoBJYg&session_id=69aa11fd-0a67-49e5-84d4-4ad017542ba7&state=1fecbf15-f6ec-4a71-9440-405e5635bd0b&token_type=bearer&session_state=35c892ed-7f45-4a99-a6b7-ee47b40ef77a&expires_in=299 ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:03:50 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:50 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: requestAuthorizationAccessToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:50 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D66D.18F6.141E.15DF", "client_secret": "705e4007-e4eb-4f04-9da2-2bb5070cb9a0", "registration_access_token": "b95a9b2e-9c7b-4fd1-ac75-ce89645d44a4", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D66D.18F6.141E.15DF", "client_id_issued_at": 1530745430, "client_secret_expires_at": 1530831830, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer b95a9b2e-9c7b-4fd1-ac75-ce89645d44a4 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:50 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D66D.18F6.141E.15DF", "client_secret": "705e4007-e4eb-4f04-9da2-2bb5070cb9a0", "registration_access_token": "b95a9b2e-9c7b-4fd1-ac75-ce89645d44a4", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D66D.18F6.141E.15DF", "client_id_issued_at": 1530745430, "client_secret_expires_at": 1530831830, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21D66D.18F6.141E.15DF&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=34a3b436-1eef-4f28-b87d-6774c774b1d2&nonce=c1546590-c5f8-438d-8472-80446c8a6d41 19:04:10.978 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:2e75f87a-d3de-488e-892d-ddc1a882f15b ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21D66D.18F6.141E.15DF&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=34a3b436-1eef-4f28-b87d-6774c774b1d2&nonce=c1546590-c5f8-438d-8472-80446c8a6d41 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=7175cc56-efa6-487c-ac56-2eb0a085e5b4&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFENjZELjE4RjYuMTQxRS4xNURGIiwiZXhwIjoxNTMwNzQ5MDMxLCJpYXQiOjE1MzA3NDU0MzEsIm5vbmNlIjoiYzE1NDY1OTAtYzVmOC00MzhkLTg0NzItODA0NDZjOGE2ZDQxIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDMxLCJhdF9oYXNoIjoidzNxWGVSRlBNR3RHRGdkSi1KVVY0dyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6ImFWVHhhNXBxaDdzNmZNOEp6eC0tVm8tMWFUZDB4SE9hR0lqYUV2OGUydjAifQ.kwgo1qepTltsGxNJHJnB8JDxcTN6p3ywtL7qBgNObHBXDLq14n-hlG4g-3yTYkoJSU6NvYxwGtmLKNzIWzNPbiIcNpdifLm8Nn_OX8dJ0ADHOk-91CscfiGXxIRm5BwPhRk9e3EbBMSvVoTkNStwueyq4UdNRLzBQAFtXl33f30-rKIMyVB5uABO9C6bg8EAj8bsgAyHmz-titqL73O8gZqRkrigMuoP0xgkCOvLAxcGm4vOYENwR3V9JaAOnpcRDzQzP77hCVZJUW_iSzuL9BrBX8tr09vi0M_fzUwR3HtbcYecgmkvL-d-ezGie4VreaofR1F9mYfA2BKi9j1eog&session_id=51c1a0d6-8e3c-4742-9d34-16d8df9a00cd&state=34a3b436-1eef-4f28-b87d-6774c774b1d2&token_type=bearer&session_state=2e75f87a-d3de-488e-892d-ddc1a882f15b&expires_in=299 ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21D66D.18F6.141E.15DF&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=09ac637f-c4d3-4e3f-8ff1-f3745c4664b8&nonce=7927c345-e474-4e52-bd63-2ddf534981e4&prompt=none&access_token=7175cc56-efa6-487c-ac56-2eb0a085e5b4 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 Date: Wed, 04 Jul 2018 23:03:52 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=c7d745bf-ebf5-4644-9afd-7599a3219a9b&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFENjZELjE4RjYuMTQxRS4xNURGIiwiZXhwIjoxNTMwNzQ5MDMyLCJpYXQiOjE1MzA3NDU0MzIsIm5vbmNlIjoiNzkyN2MzNDUtZTQ3NC00ZTUyLWJkNjMtMmRkZjUzNDk4MWU0IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDMyLCJjX2hhc2giOiI5WEozZDdvWlNhZm9EeEFkU09fWFBRIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiYVZUeGE1cHFoN3M2Zk04Snp4LS1Wby0xYVRkMHhIT2FHSWphRXY4ZTJ2MCJ9.lCtrxfEBadjF-bx1JII83-UDA3Td8gggO_0oHrzreQKdoqfL6p56yR49_Bsauf81sX399VQVnhJUKeDfmqaJapsFOxSQa0K_kWrSSevuB64ar-SW--mbboDADrZ4CH1xWwnTJbOnj4Flyk_9wMrPffAzfGqHxEEheOFAJYpwmAaQis5GcpeBI2pz7wpMWM6TaucjB0PoLziOfGN1OlNBPFzpJqJPcuHpB58abF-myJFhOI1m2XX0wm05BP1bRtJiRdDtAlMVfAGd1eEfNJWdLZJfGOAeU1fc5HLs1GBEgQ7plPJ1jJEbo3EtvDRdsdMhdgs_VslbsIIWpr3-Cqdo8Q&session_id=33bd01bc-2ddc-4a8e-9896-b58fdc85b8f5&state=09ac637f-c4d3-4e3f-8ff1-f3745c4664b8&session_state=f90ec59b-13f4-4f73-9fa1-ec0dc2e5c790 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxRDY2RC4xOEY2LjE0MUUuMTVERjo3MDVlNDAwNy1lNGViLTRmMDQtOWRhMi0yYmI1MDcwY2I5YTA= grant_type=authorization_code&code=c7d745bf-ebf5-4644-9afd-7599a3219a9b&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:52 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"1e512e36-d8b3-4ee6-85ba-2580a93af59b","token_type":"bearer","expires_in":299,"refresh_token":"81ab53a3-dae9-4935-9a72-41a13f6bbcd0","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFENjZELjE4RjYuMTQxRS4xNURGIiwiZXhwIjoxNTMwNzQ5MDMyLCJpYXQiOjE1MzA3NDU0MzIsIm5vbmNlIjoiNzkyN2MzNDUtZTQ3NC00ZTUyLWJkNjMtMmRkZjUzNDk4MWU0IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDMyLCJhdF9oYXNoIjoibmdTVk05a0ZIQzVHMlVvMzhMeTU3USIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6ImFWVHhhNXBxaDdzNmZNOEp6eC0tVm8tMWFUZDB4SE9hR0lqYUV2OGUydjAifQ.JZWBjgXLC5nwM_QSeDIyITQ8BoX3zYRCCbPfGAG_f-1pER6rnHugLPxTVVPqrvqZKny3XvmnD-tXFGyzPvXnWBzua8FhmItvNBi_P1Jahz1as_NNlfgxcPhrzM1u7IgDtR-VpolG6LTwQcYyrZR08n4k2ZckVHzMn7eA85_bXm_tl4-RUPsshU_7i6RK97eDgU1RveR10tWSEXtxyUizBZDIkt7CVu5O2IXDjliAPweNvfQkoV_7SSi0Q4mI_O9IEcmkMCKbHlJiqu6ZnzA7mtT43bNw-eVobFJ6arpj4oHM4SQ7nN3bHrcyzkNxkLYLkQVE0--QX-oKCW94UWo6Hw"} ####################################################### TEST: requestAuthorizationAccessTokenFail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:52 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!320E.BFD3.CFB5.5933", "client_secret": "7b6169ab-922b-42ee-b42b-dbebf6f02dc3", "registration_access_token": "3d129a02-ec17-4e04-bd85-b381b32650ad", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!320E.BFD3.CFB5.5933", "client_id_issued_at": 1530745432, "client_secret_expires_at": 1530831832, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 3d129a02-ec17-4e04-bd85-b381b32650ad ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:52 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!320E.BFD3.CFB5.5933", "client_secret": "7b6169ab-922b-42ee-b42b-dbebf6f02dc3", "registration_access_token": "3d129a02-ec17-4e04-bd85-b381b32650ad", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!320E.BFD3.CFB5.5933", "client_id_issued_at": 1530745432, "client_secret_expires_at": 1530831832, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21320E.BFD3.CFB5.5933&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=167a2913-fda0-43a1-8f29-2c6a9b4cb295&prompt=none&access_token=INVALID_ACCESS_TOKEN ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 Date: Wed, 04 Jul 2018 23:03:52 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#error_description=The+request+is+missing+a+required+parameter%2C+includes+an+unsupported+parameter+or+parameter+value%2C+or+is+otherwise+malformed.&state=167a2913-fda0-43a1-8f29-2c6a9b4cb295&error=invalid_request Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: requestAuthorizationAccessTokenUserBasicAuth ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:52 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EEA1.0C93.5B49.823E", "client_secret": "042940c8-c11b-4161-acb2-a884fd353012", "registration_access_token": "9d4752a0-3ead-4a45-b8b3-651a6bdb97c8", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EEA1.0C93.5B49.823E", "client_id_issued_at": 1530745432, "client_secret_expires_at": 1530831832, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 9d4752a0-3ead-4a45-b8b3-651a6bdb97c8 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:52 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EEA1.0C93.5B49.823E", "client_secret": "042940c8-c11b-4161-acb2-a884fd353012", "registration_access_token": "9d4752a0-3ead-4a45-b8b3-651a6bdb97c8", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EEA1.0C93.5B49.823E", "client_id_issued_at": 1530745432, "client_secret_expires_at": 1530831832, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21EEA1.0C93.5B49.823E&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=ff9a04fb-1070-4233-b69c-cb480f92ac46&nonce=acb18afe-e3ae-4e7b-a6b8-51e9d8ae6a3a 19:04:13.041 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:4650611f-5637-438b-9c74-88aee88f5c98 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21EEA1.0C93.5B49.823E&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=ff9a04fb-1070-4233-b69c-cb480f92ac46&nonce=acb18afe-e3ae-4e7b-a6b8-51e9d8ae6a3a ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=2ccc56aa-eaf0-4790-9e42-e8019125f534&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFFRUExLjBDOTMuNUI0OS44MjNFIiwiZXhwIjoxNTMwNzQ5MDM0LCJpYXQiOjE1MzA3NDU0MzQsIm5vbmNlIjoiYWNiMThhZmUtZTNhZS00ZTdiLWE2YjgtNTFlOWQ4YWU2YTNhIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDMzLCJhdF9oYXNoIjoiQ0JZWEJ4dEI0N0F3cThaZVlJM0xiUSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6ImgwTmhIS1hYYzV4SVBCZzF2X3JkYmt0Si1YU2pTR3pYN1ZldkpkMklRRVUifQ.PzaTYgE8VYoG24d2BWUB1B6jN6RosAxY4sWzigFUqUH4FiggaTFBh82LtQ9DYfxc58K_lf1eo56PhrjD8ZRt4bKXuoiV17umkKFjmFiouujM5R3nn2_Z9Q_zrg4GPhoXCqCdfLr7rTwB3Oe8_3yFWcQ81u4uLzofqENyawb6Os4WvSW-sdoLPDcnL4MAcqzezJQ7dIqIDSXLNEz_M2XuGtxbfnxsl-GhbfbPhJSy5557YNxNcIUbcmg7RAVvcLNpvSfD7Xt-0bw5plXCyIJ9iUaWULIdFn_I63FEIVKorIv8Eh7aK-b_VG_R_N01dalAvNsoHyZWXbyLYoRUKrMdNw&session_id=2ac9b9a1-60da-4458-be75-8ef9954b5099&state=ff9a04fb-1070-4233-b69c-cb480f92ac46&token_type=bearer&session_state=4650611f-5637-438b-9c74-88aee88f5c98&expires_in=299 ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21EEA1.0C93.5B49.823E&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=ef9e48a4-45c8-4081-8326-458ea2ee2014&nonce=22362edb-2376-40de-8fa6-2f5df939762d&prompt=none&access_token=2ccc56aa-eaf0-4790-9e42-e8019125f534 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 Date: Wed, 04 Jul 2018 23:03:54 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=2efa68d6-371a-4d96-b186-d72b0ac346b4&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFFRUExLjBDOTMuNUI0OS44MjNFIiwiZXhwIjoxNTMwNzQ5MDM0LCJpYXQiOjE1MzA3NDU0MzQsIm5vbmNlIjoiMjIzNjJlZGItMjM3Ni00MGRlLThmYTYtMmY1ZGY5Mzk3NjJkIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDM0LCJjX2hhc2giOiJ2RUVLaUd6Sm5WYmFWaUdqTDdIYkZBIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiaDBOaEhLWFhjNXhJUEJnMXZfcmRia3RKLVhTalNHelg3VmV2SmQySVFFVSJ9.S8BpfqnSCT47dNVAA9CliohQUlYPcYbTm2lyT0QQDCYne8_prnFtXLP9AKEhwGKvLAgrDWWPGfLP0eS0JzdWzc4GhPmktAGYj28DFt-5raAubNeUFq1osBjw57vpKbzqofaclR4bzAtEOMRmklRxgpTRk-jniRrS4JnyQGXowd2553S67AcdiD0BKKfCdHEjl-WQa2aKbYdTXcMllx-KfUIzR4g48ZRBMMjep1WcgzbKlrr2eiZWcZ8IvLjr1N3zEg9VGtuy_KPPYkLdKGOeyw-gnbjOKI4N0Fdn_gPl_Lu2M8Yf6_aIc5GLPjXW10yPCEUuFdwkDLZCacwbdAFrTg&session_id=2ded0a81-9d47-4bb3-b597-2ff3c1250417&state=ef9e48a4-45c8-4081-8326-458ea2ee2014&session_state=c082f3dd-9065-4d9b-8a76-e0b4bf661c50 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxRUVBMS4wQzkzLjVCNDkuODIzRTowNDI5NDBjOC1jMTFiLTQxNjEtYWNiMi1hODg0ZmQzNTMwMTI= grant_type=authorization_code&code=2efa68d6-371a-4d96-b186-d72b0ac346b4&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:54 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"2f14c165-8acf-412c-b283-f8872640cf7c","token_type":"bearer","expires_in":299,"refresh_token":"f0b9a237-07f3-44fb-af96-3fb060f26026","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFFRUExLjBDOTMuNUI0OS44MjNFIiwiZXhwIjoxNTMwNzQ5MDM0LCJpYXQiOjE1MzA3NDU0MzQsIm5vbmNlIjoiMjIzNjJlZGItMjM3Ni00MGRlLThmYTYtMmY1ZGY5Mzk3NjJkIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDM0LCJhdF9oYXNoIjoiUWUxbVlGTFlGQTFRQzNNVHdtUllJZyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6ImgwTmhIS1hYYzV4SVBCZzF2X3JkYmt0Si1YU2pTR3pYN1ZldkpkMklRRVUifQ.p2XNgEpl2qi8lQk_dkwpf3o4gh0TdDYxmXb28tP1Zsw3PmsSrP3BIIvBXyJflvAEnX1m5iXWA111R4mXx2m4Umn29hBfPCw9ID6kR2q3ujK5OEJw8iq-I5NOGP_PNM0colNbSJPqwqE2z2Em5ztxAdWsnY6UAOr62R6uIE9Cbcmqedvr7S-b6avjTKSbfbDIQokJiBnG9i-SXVdQBsIsCuYw05t1NbBJMv9LKrJ-HUxVrI_nDqVM9X0tuKFc_bI2NRt8Y9gXjwLjJXu2SJA-SqkdVvJfynQ8eabNN5nbOTiulyKzTPXSHzln0Oq7OMhkJDHZ0vk6xyvbpwA4-O3NCA"} ####################################################### TEST: requestAuthorizationCode ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:54 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!DA2E.984E.E0F5.D0A0", "client_secret": "4666cf65-3dca-4564-bf82-cf5c45be0a92", "registration_access_token": "d8a6b734-d56c-429d-9f20-c00be6407d2b", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!DA2E.984E.E0F5.D0A0", "client_id_issued_at": 1530745434, "client_secret_expires_at": 1530831834, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer d8a6b734-d56c-429d-9f20-c00be6407d2b ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:54 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!DA2E.984E.E0F5.D0A0", "client_secret": "4666cf65-3dca-4564-bf82-cf5c45be0a92", "registration_access_token": "d8a6b734-d56c-429d-9f20-c00be6407d2b", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!DA2E.984E.E0F5.D0A0", "client_id_issued_at": 1530745434, "client_secret_expires_at": 1530831834, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21DA2E.984E.E0F5.D0A0&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=a9ee2d02-1b9e-4842-bba3-7b08018d8036 19:04:14.806 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:32c84b0a-d882-441a-b206-52f170116774 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21DA2E.984E.E0F5.D0A0&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=a9ee2d02-1b9e-4842-bba3-7b08018d8036 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=cd6971f8-1aae-429b-9bc1-f6145e38b3d2&scope=address+openid+profile+email&session_id=eb041c01-77cd-4f30-8d67-bdc3a6790c04&state=a9ee2d02-1b9e-4842-bba3-7b08018d8036&session_state=32c84b0a-d882-441a-b206-52f170116774 ####################################################### TEST: requestAuthorizationCodeFail1 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=code ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 400 Connection: close Content-Length: 175 Content-Type: text/plain Date: Wed, 04 Jul 2018 23:03:55 GMT Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_request","error_description":"The request is missing a required parameter, includes an unsupported parameter or parameter value, or is otherwise malformed."} ####################################################### TEST: requestAuthorizationCodeFail2 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:55 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EFE1.AA6C.48D5.2ECB", "client_secret": "5d668150-b8d4-4f84-97ce-4091b60a53a3", "registration_access_token": "f346a5ef-36a4-47e4-a708-d82e4154b854", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EFE1.AA6C.48D5.2ECB", "client_id_issued_at": 1530745435, "client_secret_expires_at": 1530831835, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer f346a5ef-36a4-47e4-a708-d82e4154b854 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:55 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EFE1.AA6C.48D5.2ECB", "client_secret": "5d668150-b8d4-4f84-97ce-4091b60a53a3", "registration_access_token": "f346a5ef-36a4-47e4-a708-d82e4154b854", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EFE1.AA6C.48D5.2ECB", "client_id_issued_at": 1530745435, "client_secret_expires_at": 1530831835, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21EFE1.AA6C.48D5.2ECB&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2FINVALID_REDIRECT_URI&state=01ac47ad-a654-48d7-945d-2b3a69a8593d&prompt=none ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 400 Connection: close Content-Length: 220 Content-Type: text/plain Date: Wed, 04 Jul 2018 23:03:55 GMT Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_request_redirect_uri","error_description":"The redirect_uri in the Authorization Request does not match any of the Client's pre-registered redirect_uris.","state":"01ac47ad-a654-48d7-945d-2b3a69a8593d"} ####################################################### TEST: requestAuthorizationCodeFail3 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org response_type=code&client_id=%40%211111%210008%21INVALID_VALUE&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=422fadc1-8bf7-47fe-8a46-b62cde59ee93 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 175 Content-Type: text/plain Date: Wed, 04 Jul 2018 23:03:56 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"unauthorized_client","error_description":"The client is not authorized to request an access token using this method.","state":"422fadc1-8bf7-47fe-8a46-b62cde59ee93"} ####################################################### TEST: requestAuthorizationCodeIdToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:56 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9179.7A73.3681.2E9C", "client_secret": "7f10d614-3910-41a9-9fc1-a95cb2b9ca8d", "registration_access_token": "5a441293-987c-4cdf-ba92-7b77fefbb8d8", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9179.7A73.3681.2E9C", "client_id_issued_at": 1530745436, "client_secret_expires_at": 1530831836, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 5a441293-987c-4cdf-ba92-7b77fefbb8d8 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:56 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9179.7A73.3681.2E9C", "client_secret": "7f10d614-3910-41a9-9fc1-a95cb2b9ca8d", "registration_access_token": "5a441293-987c-4cdf-ba92-7b77fefbb8d8", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9179.7A73.3681.2E9C", "client_id_issued_at": 1530745436, "client_secret_expires_at": 1530831836, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%219179.7A73.3681.2E9C&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=7bd809c6-d2d7-4e39-b55d-ce4f0f1c3df1&nonce=93c6e1b0-3aa6-4e56-bd67-1837b1840ff0 19:04:16.623 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:d1b00e9d-30a3-4677-8eea-59c0ee71ef95 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%219179.7A73.3681.2E9C&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=7bd809c6-d2d7-4e39-b55d-ce4f0f1c3df1&nonce=93c6e1b0-3aa6-4e56-bd67-1837b1840ff0 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=ca936e9d-d36d-44be-9200-0909347553af&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE5MTc5LjdBNzMuMzY4MS4yRTlDIiwiZXhwIjoxNTMwNzQ5MDM3LCJpYXQiOjE1MzA3NDU0MzcsIm5vbmNlIjoiOTNjNmUxYjAtM2FhNi00ZTU2LWJkNjctMTgzN2IxODQwZmYwIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDM3LCJjX2hhc2giOiJuWDVLTHI5UVRIZmp0RzF1azh1YURnIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiYU5HMmlHOU5JMUFwZU5MVXBHUW5ieHJXWDRXTDhZNW0xa2ZaUjAzTTRxQSJ9.LQ6flxGKy1bs9rZI6ZHvXKAFbPF7JaFkvdr2hNVaQ8W2Qpc3RveeEgi83PStRfV87ulb3JSD-ygHzcomhc0YW21d5jZGlUW9PmKyVP2trlwU2GXTWCETN6-01SdhYRMkuuQ3VNV-8PXHlMkp3o_odZGBWyzto9GnXD7yaao5gSY7UHJX4PI6qbJuCTKPkQ36s1PH55fzSPatdscUnK5BfuWXnaROXRbmd0f5i00d8wUq_z_3Xsazvm3f3fQqPi9ZhvTM8DPwOBIdLbKyBRaW_o3spNGvam7gZptFAsfpCP_q_8OYM_r2_tdwBMKGDbJg2lLhq-bANkZXmOIthmwhPg&session_id=eb333cb1-5204-4f97-999b-d033f6e50fff&state=7bd809c6-d2d7-4e39-b55d-ce4f0f1c3df1&session_state=d1b00e9d-30a3-4677-8eea-59c0ee71ef95 ####################################################### TEST: requestAuthorizationCodeIdTokenUserBasicAuth ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:57 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A1C3.A64F.42B8.C7EB", "client_secret": "13231a7b-3c73-4bf8-9f9c-cec5f59526d7", "registration_access_token": "e42982a4-f0e6-41bd-a6f3-26c8d12d82d3", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A1C3.A64F.42B8.C7EB", "client_id_issued_at": 1530745437, "client_secret_expires_at": 1530831837, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer e42982a4-f0e6-41bd-a6f3-26c8d12d82d3 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:57 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A1C3.A64F.42B8.C7EB", "client_secret": "13231a7b-3c73-4bf8-9f9c-cec5f59526d7", "registration_access_token": "e42982a4-f0e6-41bd-a6f3-26c8d12d82d3", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A1C3.A64F.42B8.C7EB", "client_id_issued_at": 1530745437, "client_secret_expires_at": 1530831837, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21A1C3.A64F.42B8.C7EB&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=4fa35925-a54e-4f78-91e2-713fb4e2dded&nonce=de631593-0762-493e-a208-bf23a4780663 19:04:18.254 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:48f002bf-7394-418b-a5c8-2a2942eceb14 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21A1C3.A64F.42B8.C7EB&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=4fa35925-a54e-4f78-91e2-713fb4e2dded&nonce=de631593-0762-493e-a208-bf23a4780663 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=c893b4e3-e257-47f4-b2f9-1afe7d7e12d6&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFBMUMzLkE2NEYuNDJCOC5DN0VCIiwiZXhwIjoxNTMwNzQ5MDM5LCJpYXQiOjE1MzA3NDU0MzksIm5vbmNlIjoiZGU2MzE1OTMtMDc2Mi00OTNlLWEyMDgtYmYyM2E0NzgwNjYzIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDM5LCJjX2hhc2giOiJaMHVibGd4UUxQTDRGbGY2QlQ4YWhBIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiS1NhN212Z0VkdEVIaDR2Y0xQMmFCY1FiSTdGODluaGpOWWxZdEw0VW83ayJ9.MvfsTmafe8-D2Ey6V-auoaLBOhznP6qmRQmi2h9sgnK9_A76HFPj2IDASci-VY9-MIvEYnKEM5vH2_opbkT23q3nhjgnoeW9Jt4a39UC36k6XvPfpM8q5vjKaf4SK_YF-ScqhvwlYmU3gKymslnDnzB5-DFQAZD3kVjKCjyp-GbggBr2vDCUd1e19kMeoL32DJlj5sxlRcxZpZ9wbj80Q5-wRmUkoNx4sU1sPaVgAcXwHfk8-mrOhzA--Owi-wC1LyfpYGEjbgxLZtcjcwbnoVATIiQLYugZgwbIqQhCPVYFBDnNWszI3RPxR3W47XQ1NV4kCSpTutd173cHIpTmcw&session_id=64dbf73b-82f0-4356-a495-63d7c0e5cc1e&state=4fa35925-a54e-4f78-91e2-713fb4e2dded&session_state=48f002bf-7394-418b-a5c8-2a2942eceb14 ####################################################### TEST: requestAuthorizationCodeNoRedirection ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:59 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F039.F64C.F92B.79FE", "client_secret": "88372b84-5b17-460e-b9a9-9fb27e123fa9", "registration_access_token": "da958ee8-6106-4a05-9ec2-e6aed3f0d134", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F039.F64C.F92B.79FE", "client_id_issued_at": 1530745439, "client_secret_expires_at": 1530831839, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer da958ee8-6106-4a05-9ec2-e6aed3f0d134 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:03:59 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F039.F64C.F92B.79FE", "client_secret": "88372b84-5b17-460e-b9a9-9fb27e123fa9", "registration_access_token": "da958ee8-6106-4a05-9ec2-e6aed3f0d134", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F039.F64C.F92B.79FE", "client_id_issued_at": 1530745439, "client_secret_expires_at": 1530831839, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21F039.F64C.F92B.79FE&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=f4c6c083-07e2-4a3e-83c0-e20e98aa6afa 19:04:19.813 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:dbe592fc-8031-4dab-a20a-b9f5e713a7f2 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21F039.F64C.F92B.79FE&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=f4c6c083-07e2-4a3e-83c0-e20e98aa6afa ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=f76c76fd-9aa4-4041-babd-08f0957db277&scope=address+openid+profile+email&session_id=a39888c9-cd30-4d3e-83da-1dd03c7370f3&state=f4c6c083-07e2-4a3e-83c0-e20e98aa6afa&session_state=dbe592fc-8031-4dab-a20a-b9f5e713a7f2 ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org X-Gluu-NoRedirect: true response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21F039.F64C.F92B.79FE&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=f4c6c083-07e2-4a3e-83c0-e20e98aa6afa ------------------------------------------------------- RESPONSE: ------------------------------------------------------- ####################################################### TEST: requestAuthorizationCodeUserBasicAuth ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:00 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3BC0.8703.3062.0B18", "client_secret": "c80875c1-bd85-43e2-b871-f61e964066f7", "registration_access_token": "d4de5b98-f6f9-4040-8d1c-83bb9d100ea5", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3BC0.8703.3062.0B18", "client_id_issued_at": 1530745440, "client_secret_expires_at": 1530831840, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer d4de5b98-f6f9-4040-8d1c-83bb9d100ea5 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:00 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3BC0.8703.3062.0B18", "client_secret": "c80875c1-bd85-43e2-b871-f61e964066f7", "registration_access_token": "d4de5b98-f6f9-4040-8d1c-83bb9d100ea5", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3BC0.8703.3062.0B18", "client_id_issued_at": 1530745440, "client_secret_expires_at": 1530831840, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%213BC0.8703.3062.0B18&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=7c93feb5-acd8-43db-83cc-1316f7a6967c 19:04:21.245 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:824e5621-f29f-4bb1-b470-d627dc55242f ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%213BC0.8703.3062.0B18&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=7c93feb5-acd8-43db-83cc-1316f7a6967c ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=d49daef4-8058-42a6-94ec-0519487341fa&scope=address+openid+profile+email&session_id=c3288501-ed02-45fd-8e39-e235004d6599&state=7c93feb5-acd8-43db-83cc-1316f7a6967c&session_state=824e5621-f29f-4bb1-b470-d627dc55242f ####################################################### TEST: requestAuthorizationCodeWithoutRedirectUri ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": ["https://ce-dev4.gluu.org/oxauth-rp/home.htm"], "application_type": "web", "client_name": "oxAuth test app" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1082 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:02 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!97A2.CA65.67EA.E22A", "client_secret": "ff20fc2c-3cb0-4075-8072-8666698bf011", "registration_access_token": "1231b3be-329b-42a7-be47-26a9637de252", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!97A2.CA65.67EA.E22A", "client_id_issued_at": 1530745442, "client_secret_expires_at": 1530831842, "redirect_uris": ["https://ce-dev4.gluu.org/oxauth-rp/home.htm"], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2197A2.CA65.67EA.E22A&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=7af07a0a-82de-4707-ba6c-594fd995c7f2 19:04:22.608 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:5723f999-f2b1-4fc9-8b5e-3f3eb69d4728 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2197A2.CA65.67EA.E22A&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=7af07a0a-82de-4707-ba6c-594fd995c7f2 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=a206df22-f6be-4397-97c0-d57ee1bffff5&scope=address+openid+profile+email&session_id=d2ec7ff4-b4c2-4bb6-a42d-2426ce077dee&state=7af07a0a-82de-4707-ba6c-594fd995c7f2&session_state=5723f999-f2b1-4fc9-8b5e-3f3eb69d4728 ####################################################### TEST: requestAuthorizationCodeWithoutRedirectUriFail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "oxAuthTrustedClient": "true" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:03 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A0A6.7157.C671.13AC", "client_secret": "ad36de31-62b1-4eb6-ac45-6e4a9000a56a", "registration_access_token": "4ac4deb7-b0ca-4221-b28e-126b4416c1a6", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A0A6.7157.C671.13AC", "client_id_issued_at": 1530745443, "client_secret_expires_at": 1530831843, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21A0A6.7157.C671.13AC&scope=openid+profile+address+email&state=4458cb71-9dff-44bd-8dd1-34550b090d78&prompt=none ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 400 Connection: close Content-Length: 220 Content-Type: text/plain Date: Wed, 04 Jul 2018 23:04:03 GMT Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_request_redirect_uri","error_description":"The redirect_uri in the Authorization Request does not match any of the Client's pre-registered redirect_uris.","state":"4458cb71-9dff-44bd-8dd1-34550b090d78"} ####################################################### TEST: requestAuthorizationCodeWithoutRedirectUriUserBasicAuth ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": ["https://ce-dev4.gluu.org/oxauth-rp/home.htm"], "application_type": "web", "client_name": "oxAuth test app", "subject_type": "public", "oxAuthTrustedClient": "true" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1080 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:03 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!36A1.EA2F.6D5E.F205", "client_secret": "033a1eb1-4f98-4d69-9cf3-2949b03c110f", "registration_access_token": "c9821bbb-a30c-4a2b-b2d2-88e55dc9162c", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!36A1.EA2F.6D5E.F205", "client_id_issued_at": 1530745443, "client_secret_expires_at": 1530831843, "redirect_uris": ["https://ce-dev4.gluu.org/oxauth-rp/home.htm"], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "subject_type": "public", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2136A1.EA2F.6D5E.F205&scope=openid+profile+address+email&state=76e47b92-3f8c-478c-a714-ee2b9eed7ac0&prompt=none ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 Date: Wed, 04 Jul 2018 23:04:03 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=28abf582-04c6-493b-9459-929deb95c11a&scope=address+openid+profile+email&session_id=c6ca7c3a-3d47-4b52-837b-3a8d1f2a2838&state=76e47b92-3f8c-478c-a714-ee2b9eed7ac0&session_state=97d0bcd0-91c2-48a8-b7d1-1123391dd477 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: requestAuthorizationDenyAccessThenGrantAccess ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:04 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9959.AC8F.511F.5372", "client_secret": "4a41f507-4b0e-462e-b4a1-12e58abd3828", "registration_access_token": "4639edab-cf65-49e4-952f-e0c25da5fc34", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9959.AC8F.511F.5372", "client_id_issued_at": 1530745444, "client_secret_expires_at": 1530831844, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndDenyAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%219959.AC8F.511F.5372&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=e227fb8f-29e7-44a6-b169-c0b5be5826fd 19:04:24.405 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndDenyAccess: sessionId:6b83b3c9-9695-4d89-9927-439ee5c62a76 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%219959.AC8F.511F.5372&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=e227fb8f-29e7-44a6-b169-c0b5be5826fd ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?error=access_denied&error_description=The+resource+owner+or+authorization+server+denied+the+request.&state=e227fb8f-29e7-44a6-b169-c0b5be5826fd authorizationRequestAndDenyAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%219959.AC8F.511F.5372&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=d6671601-e5a6-45b3-bcf9-e0d3ab9a2137&session_id=6b83b3c9-9695-4d89-9927-439ee5c62a76 authorizationRequestAndDenyAccess: sessionState:null ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%219959.AC8F.511F.5372&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=d6671601-e5a6-45b3-bcf9-e0d3ab9a2137&session_id=6b83b3c9-9695-4d89-9927-439ee5c62a76 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?error=access_denied&error_description=The+resource+owner+or+authorization+server+denied+the+request.&state=d6671601-e5a6-45b3-bcf9-e0d3ab9a2137 authorizationRequestAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%219959.AC8F.511F.5372&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=7e961b65-5903-4d7a-9aca-99aa8a585c7b&session_id=6b83b3c9-9695-4d89-9927-439ee5c62a76 authorizationRequestAndGrantAccess: sessionState:c143d004-04cc-425a-82d1-822888b2b12f ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%219959.AC8F.511F.5372&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=7e961b65-5903-4d7a-9aca-99aa8a585c7b&session_id=6b83b3c9-9695-4d89-9927-439ee5c62a76 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=a78c21fc-ee23-454c-ab93-0fa252772c8c&scope=address+openid+profile+email&session_id=6b83b3c9-9695-4d89-9927-439ee5c62a76&state=7e961b65-5903-4d7a-9aca-99aa8a585c7b&session_state=c143d004-04cc-425a-82d1-822888b2b12f ####################################################### TEST: requestAuthorizationIdToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["id_token"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:06 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!C4C6.1F45.1F24.33FE", "client_secret": "2fb2bdcf-cccf-423e-96ac-205ff7bb0ccd", "registration_access_token": "17c2e85f-be87-4905-9262-49fb229c6bc8", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!C4C6.1F45.1F24.33FE", "client_id_issued_at": 1530745446, "client_secret_expires_at": 1530831846, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 17c2e85f-be87-4905-9262-49fb229c6bc8 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:06 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!C4C6.1F45.1F24.33FE", "client_secret": "2fb2bdcf-cccf-423e-96ac-205ff7bb0ccd", "registration_access_token": "17c2e85f-be87-4905-9262-49fb229c6bc8", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!C4C6.1F45.1F24.33FE", "client_id_issued_at": 1530745446, "client_secret_expires_at": 1530831846, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21C4C6.1F45.1F24.33FE&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=2d8eb1e3-3d07-47ff-a3dc-1ddbeb7c127d&nonce=c85331b4-8d61-4912-887a-32e732e40dba 19:04:26.729 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:549fa92f-030c-4af5-90be-8ff8320d9693 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21C4C6.1F45.1F24.33FE&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=2d8eb1e3-3d07-47ff-a3dc-1ddbeb7c127d&nonce=c85331b4-8d61-4912-887a-32e732e40dba ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFDNEM2LjFGNDUuMUYyNC4zM0ZFIiwiZXhwIjoxNTMwNzQ5MDQ3LCJpYXQiOjE1MzA3NDU0NDcsIm5vbmNlIjoiYzg1MzMxYjQtOGQ2MS00OTEyLTg4N2EtMzJlNzMyZTQwZGJhIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDQ3LCJveE9wZW5JRENvbm5lY3RWZXJzaW9uIjoib3BlbmlkY29ubmVjdC0xLjAiLCJzdWIiOiJSNEJQaU82emVpRy1KYlVnUVI2anU5NkdKeXBzTFFfaDNlMkd1eVNnSHFZIn0.f7IaPBrQAvUVhBAl3NjC7eaoTS_oFAk6IKQaFe7MqN_To3dih4GC8GXxyeB_AUV2QwnbNBPuxvmZJMfmvPZAOsDtwBTZZVQ6TvSoHxH2zxwnkKowX9iEmRqLXpEHo50wYgynkykfyOBttwJrsrOQ_4DT69kzAIRX7L3RNJj2WLAi0JMb4IzQxOpiIRjFcV9hoiKc_jffZVDSXlj_xik1YANH-tET6-Tn1mYAXXvzya9aXuY0qdM_n5X1rFoR2a2s4BTl1mXWCpwxnYwEve3mEiZfA9vkIG6FdJ1PdIQa6vNWHB_iAFvflarHaj51gHjNDnPULFMyfTHHMd8tBCOpUw&session_id=26f55828-ab4e-4e9f-acf3-0c7ec1abea3a&state=2d8eb1e3-3d07-47ff-a3dc-1ddbeb7c127d&session_state=549fa92f-030c-4af5-90be-8ff8320d9693 ####################################################### TEST: requestAuthorizationIdTokenUserBasicAuth ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["id_token"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:08 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D19C.4374.6156.8878", "client_secret": "023b6b54-cad4-4e7d-9b3f-c842d7da661e", "registration_access_token": "e03a8f1c-1ffb-438d-838b-9ab6199ca3f2", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D19C.4374.6156.8878", "client_id_issued_at": 1530745448, "client_secret_expires_at": 1530831848, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer e03a8f1c-1ffb-438d-838b-9ab6199ca3f2 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:08 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D19C.4374.6156.8878", "client_secret": "023b6b54-cad4-4e7d-9b3f-c842d7da661e", "registration_access_token": "e03a8f1c-1ffb-438d-838b-9ab6199ca3f2", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D19C.4374.6156.8878", "client_id_issued_at": 1530745448, "client_secret_expires_at": 1530831848, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21D19C.4374.6156.8878&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=f070cedc-df20-4142-b35d-cae9189a5d4b&nonce=c56e07b6-aebf-419a-9202-836c9d7b6545 19:04:28.563 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:af607a8e-d8be-4243-b7b1-fbdafae7c077 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21D19C.4374.6156.8878&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=f070cedc-df20-4142-b35d-cae9189a5d4b&nonce=c56e07b6-aebf-419a-9202-836c9d7b6545 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFEMTlDLjQzNzQuNjE1Ni44ODc4IiwiZXhwIjoxNTMwNzQ5MDQ5LCJpYXQiOjE1MzA3NDU0NDksIm5vbmNlIjoiYzU2ZTA3YjYtYWViZi00MTlhLTkyMDItODM2YzlkN2I2NTQ1IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDQ5LCJveE9wZW5JRENvbm5lY3RWZXJzaW9uIjoib3BlbmlkY29ubmVjdC0xLjAiLCJzdWIiOiJxYlJKbHljTjVMaFo3WFZsZlRFaC1ZUUxBVE05Y2NsbHFkVFMxSlo1dWtjIn0.TnwPOTugWP4fhid0SqfZnz5pivznH3XfluFmqrgBzI9UGjAn7BTCFhexhdE76suPfmkTQRAniI-UtyOUcc3UhlcYIuDEYb3_9EzVOVHFglm3yug7uB-ZpZKfbfjd84ddaxmcBplYVxDh3ZptNGyFQNYBaBQqeu9P_KQIJYbvVE0iOuFSlHPBuTXQHorO5-H_XFJERmMMdnGR4B-71jDIIdvdngZUt1UxxTsf2CBcQMAKN5vL4FTLX0zmJuXn0vYW2OZiuMqBPq_XwPTl57gIC_1qn_grazdIuHLH5gQk8VkawTzEg0STyL9sDBOOMChRKKGsGNISduGglMQf9ud4Ww&session_id=c593d76e-f4de-45cd-99f1-a23c96efe1db&state=f070cedc-df20-4142-b35d-cae9189a5d4b&session_state=af607a8e-d8be-4243-b7b1-fbdafae7c077 ####################################################### TEST: requestAuthorizationPromptConsent ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:09 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2519.DDC7.1D62.C705", "client_secret": "36f1dc19-46a3-4da9-a8d3-3549c9d0ddb6", "registration_access_token": "172108b6-dfb2-48f1-8212-914c6e192b67", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2519.DDC7.1D62.C705", "client_id_issued_at": 1530745449, "client_secret_expires_at": 1530831849, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 172108b6-dfb2-48f1-8212-914c6e192b67 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:09 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2519.DDC7.1D62.C705", "client_secret": "36f1dc19-46a3-4da9-a8d3-3549c9d0ddb6", "registration_access_token": "172108b6-dfb2-48f1-8212-914c6e192b67", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2519.DDC7.1D62.C705", "client_id_issued_at": 1530745449, "client_secret_expires_at": 1530831849, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212519.DDC7.1D62.C705&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=f721d4dc-5510-4f6d-a286-450bd2a58db2&prompt=consent 19:04:29.912 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:b20abbbc-f26e-4188-bc97-c38df280a51e ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212519.DDC7.1D62.C705&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=f721d4dc-5510-4f6d-a286-450bd2a58db2&prompt=consent ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=f592b48f-b148-4b90-a9a9-b1c51e29adf2&scope=address+openid+profile+email&session_id=052e1d10-2dd1-49eb-bbf1-8e1d00b743b1&state=f721d4dc-5510-4f6d-a286-450bd2a58db2&session_state=b20abbbc-f26e-4188-bc97-c38df280a51e ####################################################### TEST: requestAuthorizationPromptConsentTrustedClient ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "oxAuthTrustedClient": "true" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:10 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!392D.225A.1A70.1431", "client_secret": "8d58015f-6f9a-475e-83ee-11fa83eb836e", "registration_access_token": "60f5652d-6a2a-4101-8b4e-2773b6150581", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!392D.225A.1A70.1431", "client_id_issued_at": 1530745450, "client_secret_expires_at": 1530831850, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 60f5652d-6a2a-4101-8b4e-2773b6150581 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:10 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!392D.225A.1A70.1431", "client_secret": "8d58015f-6f9a-475e-83ee-11fa83eb836e", "registration_access_token": "60f5652d-6a2a-4101-8b4e-2773b6150581", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!392D.225A.1A70.1431", "client_id_issued_at": 1530745450, "client_secret_expires_at": 1530831850, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21392D.225A.1A70.1431&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=618e56f1-bb0b-4d35-8338-a945624f36f9&prompt=consent 19:04:31.312 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:91a06a74-8c7d-4638-ac8c-e3c5a9a29d38 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21392D.225A.1A70.1431&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=618e56f1-bb0b-4d35-8338-a945624f36f9&prompt=consent ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=6a234a58-8cfd-4488-a3e9-f027d6df13f4&scope=address+openid+profile+email&session_id=68a5d797-dcb2-42ea-9081-40aa69bc9d65&state=618e56f1-bb0b-4d35-8338-a945624f36f9&session_state=91a06a74-8c7d-4638-ac8c-e3c5a9a29d38 ####################################################### TEST: requestAuthorizationPromptLogin ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:12 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A9D9.948C.4DD5.5BFA", "client_secret": "bc6dcc07-f29e-4dba-98cf-bc98c1002568", "registration_access_token": "479189a4-d7e8-496a-807d-b3315dcaf9e2", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A9D9.948C.4DD5.5BFA", "client_id_issued_at": 1530745452, "client_secret_expires_at": 1530831852, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 479189a4-d7e8-496a-807d-b3315dcaf9e2 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:12 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A9D9.948C.4DD5.5BFA", "client_secret": "bc6dcc07-f29e-4dba-98cf-bc98c1002568", "registration_access_token": "479189a4-d7e8-496a-807d-b3315dcaf9e2", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A9D9.948C.4DD5.5BFA", "client_id_issued_at": 1530745452, "client_secret_expires_at": 1530831852, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21A9D9.948C.4DD5.5BFA&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=6eadce20-f92b-4568-96e0-7ad50d83cd40&prompt=login 19:04:32.696 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:15eb3a4e-75d2-42d4-a112-a63018349d7a ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21A9D9.948C.4DD5.5BFA&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=6eadce20-f92b-4568-96e0-7ad50d83cd40&prompt=login ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=805e38d7-cb20-4de2-9a0d-11759722c74e&scope=address+openid+profile+email&session_id=f01dd8fa-6f45-488e-835b-13466f29b81c&state=6eadce20-f92b-4568-96e0-7ad50d83cd40&session_state=15eb3a4e-75d2-42d4-a112-a63018349d7a ####################################################### TEST: requestAuthorizationPromptLoginConsent ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:13 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!6E2E.D548.CAD7.62BA", "client_secret": "30753e51-eaeb-432b-bab9-95c8a5fcb67a", "registration_access_token": "ee09e433-098d-4dd2-9eb7-b2efb12f23a3", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!6E2E.D548.CAD7.62BA", "client_id_issued_at": 1530745453, "client_secret_expires_at": 1530831853, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer ee09e433-098d-4dd2-9eb7-b2efb12f23a3 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:13 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!6E2E.D548.CAD7.62BA", "client_secret": "30753e51-eaeb-432b-bab9-95c8a5fcb67a", "registration_access_token": "ee09e433-098d-4dd2-9eb7-b2efb12f23a3", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!6E2E.D548.CAD7.62BA", "client_id_issued_at": 1530745453, "client_secret_expires_at": 1530831853, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%216E2E.D548.CAD7.62BA&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=0d6b35cb-22ab-43c0-b615-db55ec262885&prompt=login+consent 19:04:34.171 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:4306e1e8-b7d1-463d-8ffd-744a8bd82177 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%216E2E.D548.CAD7.62BA&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=0d6b35cb-22ab-43c0-b615-db55ec262885&prompt=login+consent ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=8bdef108-d578-4a50-b155-57f01c2c246f&scope=address+openid+profile+email&session_id=7d2cb385-4295-491a-8084-c4a18ac57c37&state=0d6b35cb-22ab-43c0-b615-db55ec262885&session_state=4306e1e8-b7d1-463d-8ffd-744a8bd82177 ####################################################### TEST: requestAuthorizationPromptLoginConsentTrustedClient ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "oxAuthTrustedClient": "true" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:15 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!7201.2D2E.A591.2ECE", "client_secret": "47075de6-c106-481a-96af-9d700dcf0776", "registration_access_token": "cb9aee6c-d76c-4ed0-b16f-8686d26256a9", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!7201.2D2E.A591.2ECE", "client_id_issued_at": 1530745455, "client_secret_expires_at": 1530831855, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer cb9aee6c-d76c-4ed0-b16f-8686d26256a9 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:15 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!7201.2D2E.A591.2ECE", "client_secret": "47075de6-c106-481a-96af-9d700dcf0776", "registration_access_token": "cb9aee6c-d76c-4ed0-b16f-8686d26256a9", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!7201.2D2E.A591.2ECE", "client_id_issued_at": 1530745455, "client_secret_expires_at": 1530831855, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%217201.2D2E.A591.2ECE&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=df9cec31-e659-4813-96cd-5d239a6dd0b3&prompt=login+consent 19:04:35.601 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:2a5c80bb-b320-4efa-b271-bb0dbd3833db ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%217201.2D2E.A591.2ECE&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=df9cec31-e659-4813-96cd-5d239a6dd0b3&prompt=login+consent ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=0730d2c8-bef8-4123-add2-ea439c0f0fb5&scope=address+openid+profile+email&session_id=99713064-dc0a-4dde-a6f5-702714d269bf&state=df9cec31-e659-4813-96cd-5d239a6dd0b3&session_state=2a5c80bb-b320-4efa-b271-bb0dbd3833db ####################################################### TEST: requestAuthorizationPromptNoneFail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:16 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!487A.A1DF.F477.AD29", "client_secret": "302c4129-f28b-46bc-ae21-405b08a93469", "registration_access_token": "a7de283c-e35d-4d3c-a6fb-ac7e4eab1471", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!487A.A1DF.F477.AD29", "client_id_issued_at": 1530745456, "client_secret_expires_at": 1530831856, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer a7de283c-e35d-4d3c-a6fb-ac7e4eab1471 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:16 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!487A.A1DF.F477.AD29", "client_secret": "302c4129-f28b-46bc-ae21-405b08a93469", "registration_access_token": "a7de283c-e35d-4d3c-a6fb-ac7e4eab1471", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!487A.A1DF.F477.AD29", "client_id_issued_at": 1530745456, "client_secret_expires_at": 1530831856, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21487A.A1DF.F477.AD29&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=f18fe0e8-a26c-4aa2-9e44-697572b8c3bd&prompt=none ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 Date: Wed, 04 Jul 2018 23:04:16 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?error_description=The+Authorization+Server+requires+End-User+authentication.+This+error+MAY+be+returned+when+the+prompt+parameter+in+the+Authorization+Request+is+set+to+none+to+request+that+the+Authorization+Server+should+not+display+any+user+interfaces+to+the+End-User%2C+but+the+Authorization+Request+cannot+be+completed+without+displaying+a+user+interface+for+user+authentication.&state=f18fe0e8-a26c-4aa2-9e44-697572b8c3bd&error=login_required Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: requestAuthorizationPromptLoginConsent ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:16 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!8541.BBB6.E1E9.F869", "client_secret": "2b452d3e-2784-4409-a24e-3795d52ffbe8", "registration_access_token": "8668d29c-5089-4943-96c8-8a7df7200578", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!8541.BBB6.E1E9.F869", "client_id_issued_at": 1530745456, "client_secret_expires_at": 1530831856, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 8668d29c-5089-4943-96c8-8a7df7200578 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:16 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!8541.BBB6.E1E9.F869", "client_secret": "2b452d3e-2784-4409-a24e-3795d52ffbe8", "registration_access_token": "8668d29c-5089-4943-96c8-8a7df7200578", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!8541.BBB6.E1E9.F869", "client_id_issued_at": 1530745456, "client_secret_expires_at": 1530831856, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%218541.BBB6.E1E9.F869&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eb9ab04f-aa01-4482-bf0b-51883e735571&prompt=none+login+consent ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 Date: Wed, 04 Jul 2018 23:04:17 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?error_description=The+request+is+missing+a+required+parameter%2C+includes+an+unsupported+parameter+or+parameter+value%2C+or+is+otherwise+malformed.&state=eb9ab04f-aa01-4482-bf0b-51883e735571&error=invalid_request Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: requestAuthorizationPromptNoneTrustedClient ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "oxAuthTrustedClient": "true" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:17 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5947.B4CB.0F0F.DEAB", "client_secret": "7ed9cf2a-5e47-4cef-9f23-5c85e6ed5d82", "registration_access_token": "bf432e4b-a92e-4bc5-800e-6d8269ab53ba", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5947.B4CB.0F0F.DEAB", "client_id_issued_at": 1530745457, "client_secret_expires_at": 1530831857, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer bf432e4b-a92e-4bc5-800e-6d8269ab53ba ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:17 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5947.B4CB.0F0F.DEAB", "client_secret": "7ed9cf2a-5e47-4cef-9f23-5c85e6ed5d82", "registration_access_token": "bf432e4b-a92e-4bc5-800e-6d8269ab53ba", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5947.B4CB.0F0F.DEAB", "client_id_issued_at": 1530745457, "client_secret_expires_at": 1530831857, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%215947.B4CB.0F0F.DEAB&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=29abfc2b-13b9-4a88-9934-fa38ea9548d6&prompt=none ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 Date: Wed, 04 Jul 2018 23:04:17 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=5b37710b-a9a6-434f-9f33-65e7647d3b37&scope=address+openid+profile+email&session_id=e0c0e480-6bba-4b20-986b-dc19a4ec6b2c&state=29abfc2b-13b9-4a88-9934-fa38ea9548d6&session_state=239dc8b1-17e2-4d29-94f2-9375bf6cb4f5 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: requestAuthorizationToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["token"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1306 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:17 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B430.E39A.4126.A0AF", "client_secret": "6b967b8e-3a8d-40b1-a322-7bcbd34ee164", "registration_access_token": "8b6efcca-e78e-459e-9d72-940343d82ebf", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B430.E39A.4126.A0AF", "client_id_issued_at": 1530745457, "client_secret_expires_at": 1530831857, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["token"], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 8b6efcca-e78e-459e-9d72-940343d82ebf ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1306 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:17 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B430.E39A.4126.A0AF", "client_secret": "6b967b8e-3a8d-40b1-a322-7bcbd34ee164", "registration_access_token": "8b6efcca-e78e-459e-9d72-940343d82ebf", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B430.E39A.4126.A0AF", "client_id_issued_at": 1530745457, "client_secret_expires_at": 1530831857, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["token"], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21B430.E39A.4126.A0AF&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=9ad54e2e-5f9a-4800-9718-c46a84bd3e22&nonce=e82b57a1-844a-40e5-9bf4-6a3f2513a88f 19:04:37.905 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:18fe301c-648a-4b20-a397-16cb9f0db700 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21B430.E39A.4126.A0AF&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=9ad54e2e-5f9a-4800-9718-c46a84bd3e22&nonce=e82b57a1-844a-40e5-9bf4-6a3f2513a88f ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=01591741-deef-4079-9b98-9aa9e28a97a5&scope=address+openid+profile+email&session_id=3fd3cdd2-04fe-44a2-93e7-0e162feeefc1&state=9ad54e2e-5f9a-4800-9718-c46a84bd3e22&token_type=bearer&session_state=18fe301c-648a-4b20-a397-16cb9f0db700&expires_in=299 ####################################################### TEST: requestAuthorizationTokenCode ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1405 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:18 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!181C.314D.B5DF.B71B", "client_secret": "933858d0-3f15-4529-9837-9aa312a19d42", "registration_access_token": "f0b5859b-b603-4810-8ce0-a2edbfbbe7ee", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!181C.314D.B5DF.B71B", "client_id_issued_at": 1530745458, "client_secret_expires_at": 1530831858, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer f0b5859b-b603-4810-8ce0-a2edbfbbe7ee ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1405 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:18 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!181C.314D.B5DF.B71B", "client_secret": "933858d0-3f15-4529-9837-9aa312a19d42", "registration_access_token": "f0b5859b-b603-4810-8ce0-a2edbfbbe7ee", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!181C.314D.B5DF.B71B", "client_id_issued_at": 1530745458, "client_secret_expires_at": 1530831858, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21181C.314D.B5DF.B71B&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=17bfb28a-9fd4-4baa-9b43-b6de44856dc5&nonce=691f8bee-824a-42d4-ac3e-6d7fc644137a 19:04:39.156 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:573de3d0-c04a-42e7-a34e-20b566c82274 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21181C.314D.B5DF.B71B&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=17bfb28a-9fd4-4baa-9b43-b6de44856dc5&nonce=691f8bee-824a-42d4-ac3e-6d7fc644137a ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=be50a22b-1375-4c60-afa8-790dbeada689&code=1a6c5be1-7c47-4bc2-aff6-00d64644695c&scope=address+openid+profile+email&session_id=cb1b41ef-2f36-428c-97f2-cdf29d13bbb1&state=17bfb28a-9fd4-4baa-9b43-b6de44856dc5&token_type=bearer&session_state=573de3d0-c04a-42e7-a34e-20b566c82274&expires_in=299 ####################################################### TEST: requestAuthorizationTokenCodeIdToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:20 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5309.CB53.B156.44E0", "client_secret": "b26c2f42-bffa-4768-b28e-48fac857c63c", "registration_access_token": "ff0f33d8-42e9-421f-89cd-277382dc384f", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5309.CB53.B156.44E0", "client_id_issued_at": 1530745460, "client_secret_expires_at": 1530831860, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer ff0f33d8-42e9-421f-89cd-277382dc384f ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:20 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5309.CB53.B156.44E0", "client_secret": "b26c2f42-bffa-4768-b28e-48fac857c63c", "registration_access_token": "ff0f33d8-42e9-421f-89cd-277382dc384f", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5309.CB53.B156.44E0", "client_id_issued_at": 1530745460, "client_secret_expires_at": 1530831860, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%215309.CB53.B156.44E0&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=46441e42-9b0f-440f-b774-6d64df668de3&nonce=b2a36d9e-4b4c-440a-9ac3-11b9ae233ea6 19:04:40.589 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:a79b8385-be34-4dfa-bd1b-513cbef1b502 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%215309.CB53.B156.44E0&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=46441e42-9b0f-440f-b774-6d64df668de3&nonce=b2a36d9e-4b4c-440a-9ac3-11b9ae233ea6 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=75c68974-bee9-4925-bb5c-596e3eb78214&code=69e7168d-3b72-42c2-beb9-0be8fd9c4bd8&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE1MzA5LkNCNTMuQjE1Ni40NEUwIiwiZXhwIjoxNTMwNzQ5MDYxLCJpYXQiOjE1MzA3NDU0NjEsIm5vbmNlIjoiYjJhMzZkOWUtNGI0Yy00NDBhLTlhYzMtMTFiOWFlMjMzZWE2IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDYxLCJjX2hhc2giOiIwNWN6OFFoa29Sb0JDV1RuVHZPU0Z3IiwiYXRfaGFzaCI6Ild4YTBjcF9yYVRkVmoyU1hXYjZQLVEiLCJveE9wZW5JRENvbm5lY3RWZXJzaW9uIjoib3BlbmlkY29ubmVjdC0xLjAiLCJzdWIiOiJXQmZvSDVIQ0t3d1dEc2lGRC1LdUdZeXhEMFFxc1VaZ2FNaHRIZ1lFU29rIn0.lPg140eqjhzbgxtSugdrpORvYpldigqvsyACz2K7fXOuxDXJNVBbiu2GfK9-qzQgHgqAgUJ3dDNH1oJUEuafYXlFk88HeHtOnhkb838ou0ym5m6cz-vaKfH0qbPLrKOyF2aqBfuFzpyWhubcTV3-NK_ywSbsPGeJ2U1fJQx_yDsiQzYwA2A7fEHYZl7lZ9pSg814LabQ3wgDA1-SksHEVVUuvEohaFtndpAToOoC8jk9cCf_qcn4ov0Udkj7Nmo1n6-0OT-CwSZ2YMm-L4jv85hMyC07upnxNl0gZt_9blKaj33S44aopdipiCwjm_JS7xVYypRLtHeOW3ElOjBCgA&session_id=2de4a357-bcb2-420c-9373-0241bcc5b63a&state=46441e42-9b0f-440f-b774-6d64df668de3&token_type=bearer&session_state=a79b8385-be34-4dfa-bd1b-513cbef1b502&expires_in=299 ####################################################### TEST: requestAuthorizationTokenCodeIdTokenUserBasicAuth ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:21 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!1BBA.D834.0277.4E3B", "client_secret": "f4a5bd2a-03fb-4954-94e1-ae6c6e92c2d4", "registration_access_token": "b57111ac-f434-4d3d-ba7a-3f51295b2893", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!1BBA.D834.0277.4E3B", "client_id_issued_at": 1530745461, "client_secret_expires_at": 1530831861, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer b57111ac-f434-4d3d-ba7a-3f51295b2893 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:21 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!1BBA.D834.0277.4E3B", "client_secret": "f4a5bd2a-03fb-4954-94e1-ae6c6e92c2d4", "registration_access_token": "b57111ac-f434-4d3d-ba7a-3f51295b2893", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!1BBA.D834.0277.4E3B", "client_id_issued_at": 1530745461, "client_secret_expires_at": 1530831861, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%211BBA.D834.0277.4E3B&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=7a1ffbf6-c081-4b8b-8f41-9dd63fbabb62&nonce=930fe67d-62e4-4a5c-9ea6-73bad16c4251 19:04:41.892 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:f397f692-40b8-4540-b8db-af8002cdfe2c ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%211BBA.D834.0277.4E3B&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=7a1ffbf6-c081-4b8b-8f41-9dd63fbabb62&nonce=930fe67d-62e4-4a5c-9ea6-73bad16c4251 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=5babdecb-5e77-43dd-8d0f-bf5a8dae3a20&code=beccb9d1-8b61-411b-a7b2-018d88e713b7&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCExQkJBLkQ4MzQuMDI3Ny40RTNCIiwiZXhwIjoxNTMwNzQ5MDYyLCJpYXQiOjE1MzA3NDU0NjIsIm5vbmNlIjoiOTMwZmU2N2QtNjJlNC00YTVjLTllYTYtNzNiYWQxNmM0MjUxIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDYyLCJjX2hhc2giOiJBUzk4eUNMNjFJTXA3RnAyajhSV253IiwiYXRfaGFzaCI6ImhtUGNNSE9KZTZDdmJMbXNNWGpzWVEiLCJveE9wZW5JRENvbm5lY3RWZXJzaW9uIjoib3BlbmlkY29ubmVjdC0xLjAiLCJzdWIiOiJ3R0I3ejYxRXlpWGRFTWtCTVNWeEh0T1VsY0NLY2lMUnFLV2I5cjZhSFY0In0.rMID1--gnrOC3OiIr7nA8Bo49WnV1fUKi7xIxB45VVLgUaCU3zCWIji0GLMKlrqw5EgZnarg5xSj2S9eHckyl5xfsf1qRydHEnaWbYaSP0GsBxs_3HcZeUI4tIT7QLtrP3B2qZdEbF_qwhKvWpEzBB3xMU8cp0eVBVHPnptZfJSS7oBHjaKHWy0uIhCdBeYIZIcP7rEqqA818d1lFdynFm-5bUabd58wCnHIYVfdX4OeoU85s5SQziL8EC4TCzDG-zHEmbtYwqV383tcwMKvJigTydBxl0wBkS5c2LhZyumrUekFExFidS4SiDOJ4fQgb_a_xBEcGhDJ6yb-H64Idw&session_id=4aceca25-4ac6-4215-a025-0bb8f137889d&state=7a1ffbf6-c081-4b8b-8f41-9dd63fbabb62&token_type=bearer&session_state=f397f692-40b8-4540-b8db-af8002cdfe2c&expires_in=299 ####################################################### TEST: requestAuthorizationTokenCodeUserBasicAuth ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1405 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:22 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9105.5E3A.A77B.A163", "client_secret": "98de05ec-a972-47b2-9416-c6424dc63e89", "registration_access_token": "79225ed3-ba12-4f1e-be35-7e187b5eed89", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9105.5E3A.A77B.A163", "client_id_issued_at": 1530745462, "client_secret_expires_at": 1530831862, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 79225ed3-ba12-4f1e-be35-7e187b5eed89 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1405 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:23 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9105.5E3A.A77B.A163", "client_secret": "98de05ec-a972-47b2-9416-c6424dc63e89", "registration_access_token": "79225ed3-ba12-4f1e-be35-7e187b5eed89", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9105.5E3A.A77B.A163", "client_id_issued_at": 1530745462, "client_secret_expires_at": 1530831862, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%219105.5E3A.A77B.A163&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=23a80e00-178a-436b-b210-649c4e3bf8e2&nonce=60b69021-64c2-4015-bcfd-e4cab8cde9ae 19:04:43.343 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:044cf51d-bbae-4335-acac-8d548650ce88 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%219105.5E3A.A77B.A163&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=23a80e00-178a-436b-b210-649c4e3bf8e2&nonce=60b69021-64c2-4015-bcfd-e4cab8cde9ae ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=8b64c194-9ecd-4405-94d7-a9516d87a134&code=989d2c47-e7ff-42ec-ae09-0856775c14f5&scope=address+openid+profile+email&session_id=1e789ad8-2e71-48de-9a57-0d90a81eea10&state=23a80e00-178a-436b-b210-649c4e3bf8e2&token_type=bearer&session_state=044cf51d-bbae-4335-acac-8d548650ce88&expires_in=299 ####################################################### TEST: requestAuthorizationTokenFail1 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=token&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=8060f864-e3f8-4bb7-bd83-40c0751cd0ed ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 400 Connection: close Content-Length: 222 Content-Type: text/plain Date: Wed, 04 Jul 2018 23:04:24 GMT Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_request","error_description":"The request is missing a required parameter, includes an unsupported parameter or parameter value, or is otherwise malformed.","state":"8060f864-e3f8-4bb7-bd83-40c0751cd0ed"} ####################################################### TEST: requestAuthorizationTokenFail2 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["token"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1306 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:24 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EE72.13AB.E06D.6E14", "client_secret": "b58aa536-2751-46ad-ac34-855784f779eb", "registration_access_token": "96430786-61a8-4695-b366-3c2079a8464e", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EE72.13AB.E06D.6E14", "client_id_issued_at": 1530745464, "client_secret_expires_at": 1530831864, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["token"], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 96430786-61a8-4695-b366-3c2079a8464e ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1306 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:24 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EE72.13AB.E06D.6E14", "client_secret": "b58aa536-2751-46ad-ac34-855784f779eb", "registration_access_token": "96430786-61a8-4695-b366-3c2079a8464e", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EE72.13AB.E06D.6E14", "client_id_issued_at": 1530745464, "client_secret_expires_at": 1530831864, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["token"], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21EE72.13AB.E06D.6E14&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=5f8d043b-344c-496c-9216-335ce43d29c4&prompt=none ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 Date: Wed, 04 Jul 2018 23:04:24 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#error_description=The+request+is+missing+a+required+parameter%2C+includes+an+unsupported+parameter+or+parameter+value%2C+or+is+otherwise+malformed.&state=5f8d043b-344c-496c-9216-335ce43d29c4&error=invalid_request Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ####################################################### TEST: requestAuthorizationTokenIdToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:24 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!02B8.262B.0C41.6719", "client_secret": "8e05e5fd-9f8b-4f8d-b9f9-cfbb835179d4", "registration_access_token": "d3a4b5fb-4175-453f-b714-20c492c4be01", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!02B8.262B.0C41.6719", "client_id_issued_at": 1530745464, "client_secret_expires_at": 1530831864, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer d3a4b5fb-4175-453f-b714-20c492c4be01 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:24 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!02B8.262B.0C41.6719", "client_secret": "8e05e5fd-9f8b-4f8d-b9f9-cfbb835179d4", "registration_access_token": "d3a4b5fb-4175-453f-b714-20c492c4be01", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!02B8.262B.0C41.6719", "client_id_issued_at": 1530745464, "client_secret_expires_at": 1530831864, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2102B8.262B.0C41.6719&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=bd7cbd16-5f97-4e93-957b-a68c8bb9211d&nonce=216ebc39-176f-4f8e-b8ae-a358ae8a43f6 19:04:45.109 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:0e2ab194-1fdd-47c8-945b-91813d8833cf ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2102B8.262B.0C41.6719&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=bd7cbd16-5f97-4e93-957b-a68c8bb9211d&nonce=216ebc39-176f-4f8e-b8ae-a358ae8a43f6 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=ede70024-c6c1-4473-92af-942f1a1331c0&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwMkI4LjI2MkIuMEM0MS42NzE5IiwiZXhwIjoxNTMwNzQ5MDY2LCJpYXQiOjE1MzA3NDU0NjYsIm5vbmNlIjoiMjE2ZWJjMzktMTc2Zi00ZjhlLWI4YWUtYTM1OGFlOGE0M2Y2IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDY2LCJhdF9oYXNoIjoiVjlITGF1aEY3QjRZdkhVelY1eXduQSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6ImhBMklmZElBOG5RM2lqWXN2aGcxVndyOHRJOEVaRm15cURZc29lQ2tLSHMifQ.nWDzRdDeYMqTZjdRYVZGVTt9o14WbjPz912my278XRCRw1CF6FvAnRtAE8vf-UTDxoCC1ZcFQFa-LGsq1iS_sccfmpfCcvxNQJr0mkkgCcckbbhnUhUQTyQeqKzDHcvJuJ7mAQdwk6SRws8dX6VdUZTxO0-XUHH9i6H--nJAmqZIeTjJ2HlYmQ_HevbGeyUxqhBDCkMmQjLSmw-SFNc3kicUEOPJyDo5Ds3uaIbHhaHlo6Xc0qN6RcBF59iGqKwnf4QzhY2HWhxU0DT946PtDTB6lNQE6kgRCyD9BrWav_hqwwmN980mNRorfZjWBbsdAODPUqP2_-e3Av9kqulnrQ&session_id=3e76bb2d-723e-4404-9ff2-d5b76215634a&state=bd7cbd16-5f97-4e93-957b-a68c8bb9211d&token_type=bearer&session_state=0e2ab194-1fdd-47c8-945b-91813d8833cf&expires_in=299 ####################################################### TEST: requestAuthorizationTokenIdTokenUserBasicAuth ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:26 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!1394.E708.E157.9A9D", "client_secret": "70c3a357-1b9e-4b73-acbc-c9bedcccbdf9", "registration_access_token": "7f17af0f-003d-43f7-a44e-5cd85f7881ff", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!1394.E708.E157.9A9D", "client_id_issued_at": 1530745466, "client_secret_expires_at": 1530831866, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 7f17af0f-003d-43f7-a44e-5cd85f7881ff ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:26 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!1394.E708.E157.9A9D", "client_secret": "70c3a357-1b9e-4b73-acbc-c9bedcccbdf9", "registration_access_token": "7f17af0f-003d-43f7-a44e-5cd85f7881ff", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!1394.E708.E157.9A9D", "client_id_issued_at": 1530745466, "client_secret_expires_at": 1530831866, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%211394.E708.E157.9A9D&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=27ef5491-8e92-4e21-a0b8-8013de08040a&nonce=af6511bb-9804-431e-bcfe-646fb04b4969 19:04:47.307 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:35a56e89-b3a4-4dc8-b949-ecae5903889d ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%211394.E708.E157.9A9D&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=27ef5491-8e92-4e21-a0b8-8013de08040a&nonce=af6511bb-9804-431e-bcfe-646fb04b4969 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=8075cf44-78b1-421b-bd25-bf0845df495d&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCExMzk0LkU3MDguRTE1Ny45QTlEIiwiZXhwIjoxNTMwNzQ5MDY4LCJpYXQiOjE1MzA3NDU0NjgsIm5vbmNlIjoiYWY2NTExYmItOTgwNC00MzFlLWJjZmUtNjQ2ZmIwNGI0OTY5IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDY4LCJhdF9oYXNoIjoiR082QWJiaFVydXp4UHRMaE1vX1V6QSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IkJqaWJWTHo1LU04bHJUMnVFOVJRNkQ1LXpfS0JPMk0ybzFBYURNbEplLUEifQ.nbcp3RgO7vB3u2hh35wABhk2tOgV0KD6jvCWaTItoQQDY2JA7j9oi0i1fLoXxWsJ0Y9jiLJ7yTJLZkGmKny-CPC6tK65MSy6bb-0qJ6FfF-4w4rTpurWVycQpkeT_UD4OvO6IMz_f7hwbGPEyf19CJtYN_kfV_oSniIaI6k4PLuWn5IakWr7VBXae9D02n1PD_1cjR8IhminyccXkWEWZNay1xSbxQsDuPuo4R6LUpQcPLapq0GO-RRXi84_bYdpuUE8KC6CCDtRcgEB3h8leZ7E_vV_1lmCYgCvPal9TTmleH9wOSswG9GcNUZWHTUAcZ0d7uL1zCgeBgYTyXlKPA&session_id=b54287e1-5a0e-4c6f-b8e7-798b4cf92b98&state=27ef5491-8e92-4e21-a0b8-8013de08040a&token_type=bearer&session_state=35a56e89-b3a4-4dc8-b949-ecae5903889d&expires_in=299 ####################################################### TEST: requestAuthorizationTokenUserBasicAuth ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["token"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1306 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:28 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3973.B080.FF79.5669", "client_secret": "938569b9-d180-46f8-9b1d-c00b62bb736d", "registration_access_token": "c9478afb-af8a-4559-a837-9b34ab52ffd1", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3973.B080.FF79.5669", "client_id_issued_at": 1530745468, "client_secret_expires_at": 1530831868, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["token"], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer c9478afb-af8a-4559-a837-9b34ab52ffd1 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1306 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:28 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3973.B080.FF79.5669", "client_secret": "938569b9-d180-46f8-9b1d-c00b62bb736d", "registration_access_token": "c9478afb-af8a-4559-a837-9b34ab52ffd1", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3973.B080.FF79.5669", "client_id_issued_at": 1530745468, "client_secret_expires_at": 1530831868, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["token"], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%213973.B080.FF79.5669&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=6f4ec1ca-acb6-431e-a192-53e3618b27dd&nonce=09727d28-9a8c-4bda-8a0b-d3583ca2dfc6 19:04:48.827 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:6cd17029-60dc-4abd-a1cd-9d297fed74b8 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%213973.B080.FF79.5669&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=6f4ec1ca-acb6-431e-a192-53e3618b27dd&nonce=09727d28-9a8c-4bda-8a0b-d3583ca2dfc6 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=9668593d-8aa6-432a-b51a-05d8f57e9939&scope=address+openid+profile+email&session_id=2c9781c5-1a58-41a4-8f19-6247c222ce0f&state=6f4ec1ca-acb6-431e-a192-53e3618b27dd&token_type=bearer&session_state=6cd17029-60dc-4abd-a1cd-9d297fed74b8&expires_in=299 ####################################################### TEST: requestAuthorizationWithoutScope ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:29 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!07F5.25D3.AD6B.1B2C", "client_secret": "293e2f53-7fed-4319-bf1c-31abf328161f", "registration_access_token": "8aa80f2e-aa0d-49da-a119-b0d4637c7296", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!07F5.25D3.AD6B.1B2C", "client_id_issued_at": 1530745469, "client_secret_expires_at": 1530831869, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 8aa80f2e-aa0d-49da-a119-b0d4637c7296 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1425 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:29 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!07F5.25D3.AD6B.1B2C", "client_secret": "293e2f53-7fed-4319-bf1c-31abf328161f", "registration_access_token": "8aa80f2e-aa0d-49da-a119-b0d4637c7296", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!07F5.25D3.AD6B.1B2C", "client_id_issued_at": 1530745469, "client_secret_expires_at": 1530831869, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2107F5.25D3.AD6B.1B2C&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=f2f242f6-e0c1-49b4-92c5-99e64dbcf211&nonce=54e8a99c-d559-49ca-a534-dd2a01e3bc57 19:04:50.221 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:f3a4887e-7174-48b8-a407-0b8d9c752f32 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2107F5.25D3.AD6B.1B2C&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=f2f242f6-e0c1-49b4-92c5-99e64dbcf211&nonce=54e8a99c-d559-49ca-a534-dd2a01e3bc57 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=1af28af0-338f-47c0-bde8-24faa752e75c&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwN0Y1LjI1RDMuQUQ2Qi4xQjJDIiwiZXhwIjoxNTMwNzQ5MDcxLCJpYXQiOjE1MzA3NDU0NzEsIm5vbmNlIjoiNTRlOGE5OWMtZDU1OS00OWNhLWE1MzQtZGQyYTAxZTNiYzU3IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDcwLCJjX2hhc2giOiJNWmRSckN5U2s2cnkwZWJrSk5mdDF3Iiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiQXhETlFoOTlrMElZMzBoeXVHbThEc05VbnpxYnpGeWk3T0lnQndYRXZlSSJ9.SVYw1HUrDmQ9T1lfKgeOlJ8IKjKulv0vqScnnGTE74VnT1_6EnS4z_ov99nsDTh3BnR4ExKx-VWqZSikptPn0wSLQVLbu7hNoCBxluxKP2gWO118ax-UB3JJ6711yV1CM4ncR1z1A-B1b5grQyYjKyHC7llN0H5gdpcloWVrM28lMoX1OlKCI2-7-xNP60Cc-4amCTnJbqADl5_o94Ol_g3WypYwGoZTw4z-a4qlklkFlqrnYU2WyCoX_1cgN5kEatYyz24r6qDLpsPTd-1dUEY3DCcp8587g-b7Dabo8NTQL-L5j8-MH8zSKi23hR7Mz0FPiV0WpiyzeQY672SDdg&session_id=12ecd414-d053-4acc-885e-2c227cea4609&state=f2f242f6-e0c1-49b4-92c5-99e64dbcf211&session_state=f3a4887e-7174-48b8-a407-0b8d9c752f32 ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:31 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:31 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: requestSessionIdAuthorizationCode1 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:31 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!17A0.AF02.68AF.A34F", "client_secret": "5a91abf4-0294-4bc9-b2ea-978301477d1c", "registration_access_token": "a6cb7fa6-aee3-41f6-b4ae-c095afe0f76a", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!17A0.AF02.68AF.A34F", "client_id_issued_at": 1530745471, "client_secret_expires_at": 1530831871, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer a6cb7fa6-aee3-41f6-b4ae-c095afe0f76a ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:31 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!17A0.AF02.68AF.A34F", "client_secret": "5a91abf4-0294-4bc9-b2ea-978301477d1c", "registration_access_token": "a6cb7fa6-aee3-41f6-b4ae-c095afe0f76a", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!17A0.AF02.68AF.A34F", "client_id_issued_at": 1530745471, "client_secret_expires_at": 1530831871, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } waitForResourceOwnerAndGrantLoginForm: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2117A0.AF02.68AF.A34F&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=9e35e2a5-3246-4248-8f57-0750119830c4 19:04:51.851 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] waitForResourceOwnerAndGrantLoginForm: sessionState:aeac185c-71c7-4a96-8b33-3083402e2815 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2117A0.AF02.68AF.A34F&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=9e35e2a5-3246-4248-8f57-0750119830c4 authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2117A0.AF02.68AF.A34F&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=c250867e-1c96-4481-800b-7fb4cdc5efdb 19:04:52.104 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:771c264b-9e55-47ae-9cca-977e51b8618c ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2117A0.AF02.68AF.A34F&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=c250867e-1c96-4481-800b-7fb4cdc5efdb ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=c07e019d-3aec-483f-b501-e66a569286c0&scope=address+openid+profile+email&session_id=ad94962c-85e5-40c0-8e3e-ab8199cba8a5&state=c250867e-1c96-4481-800b-7fb4cdc5efdb&session_state=771c264b-9e55-47ae-9cca-977e51b8618c ####################################################### TEST: requestSessionIdAuthorizationCode2 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": ["code"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:33 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3FAA.8972.2B02.E7CC", "client_secret": "f9dcdce8-3efb-4e52-83f7-a560d8fa2d70", "registration_access_token": "0e1f48a0-8cd7-4433-a387-3af3c0024a2b", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3FAA.8972.2B02.E7CC", "client_id_issued_at": 1530745473, "client_secret_expires_at": 1530831873, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/register?{} HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 0e1f48a0-8cd7-4433-a387-3af3c0024a2b ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:33 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3FAA.8972.2B02.E7CC", "client_secret": "f9dcdce8-3efb-4e52-83f7-a560d8fa2d70", "registration_access_token": "0e1f48a0-8cd7-4433-a387-3af3c0024a2b", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3FAA.8972.2B02.E7CC", "client_id_issued_at": 1530745473, "client_secret_expires_at": 1530831873, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } waitForResourceOwnerAndGrantLoginForm: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%213FAA.8972.2B02.E7CC&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=ccf8ee4b-44f2-4d59-998d-127b8f9273a6 19:04:53.470 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] waitForResourceOwnerAndGrantLoginForm: sessionState:b0967613-33fd-43f3-a534-d440e972630e ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%213FAA.8972.2B02.E7CC&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=ccf8ee4b-44f2-4d59-998d-127b8f9273a6 authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%213FAA.8972.2B02.E7CC&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=027fa65c-72d3-4282-9043-45e76d956f86 19:04:53.713 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:ba1e94aa-3565-4def-af9d-d689bfa52069 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%213FAA.8972.2B02.E7CC&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=027fa65c-72d3-4282-9043-45e76d956f86 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm?code=6a387ed8-e53c-4e42-988f-0d254f76b0f0&scope=address+openid+profile+email&session_id=5f513962-6305-4a70-b009-068bb0613c6e&state=027fa65c-72d3-4282-9043-45e76d956f86&session_state=ba1e94aa-3565-4def-af9d-d689bfa52069 ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:34 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:34 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: requestClientRegistrationWithCustomAttributes ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "token", "id_token" ], "grant_types": ["password"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "oxAuthTrustedClient": "true", "myCustomAttr1": "58ddf70b-dfa1-4f46-acd5-749a8a111e11" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1445 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:34 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F8D7.FE31.A1E0.1312", "client_secret": "a75fcc1d-5e78-4535-8b61-57ce5666452d", "registration_access_token": "e3a2ca2c-3d21-44b7-aa7f-6d4b13a3dfba", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F8D7.FE31.A1E0.1312", "client_id_issued_at": 1530745474, "client_secret_expires_at": 1530831874, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "password", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ####################################################### TEST: requestAccessTokenCustomClientAuth1 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/authorize HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Basic dGVzdF91c2VyOnRlc3RfdXNlcl9wYXNzd29yZA== response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21F8D7.FE31.A1E0.1312&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=8e9385f1-8ba3-4582-a5d9-b67598216a2c&nonce=3b3d6b65-1b2d-40e4-845a-2dd00dd6ceaf&prompt=none ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Connection: Keep-Alive Content-Length: 0 Date: Wed, 04 Jul 2018 23:04:35 GMT Keep-Alive: timeout=5, max=100 Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=8f4d00ed-de78-42ed-a555-82473f4aa01d&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFGOEQ3LkZFMzEuQTFFMC4xMzEyIiwiZXhwIjoxNTMwNzQ5MDc1LCJpYXQiOjE1MzA3NDU0NzUsIm5vbmNlIjoiM2IzZDZiNjUtMWIyZC00MGU0LTg0NWEtMmRkMDBkZDZjZWFmIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDc1LCJjX2hhc2giOiJ2SUwwRUNSSmVYb3lmbEx0ZTNRMFJRIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoicmxxWmtPNno3aDJIZDc5Z1lZemJZbGtGemx2b0ZZUy1JcUtwckVoYm9IUSJ9.gMFmipyu3l7xQ1ss3ascY5t9Aw5qv9baB_h-H0SROK6bOUY3o4PweV1ydNSjoiZFVAbgcWxkPcfpWKA948llp_diZvCgLi5njMiGPLdCJjUnJ68zHqyvtZaEH12d1XHOkZgYTXhJNh7MzKgp9BHiUBK4gzd03zR6FP4JIfcaAYRkYoaB1xzdloBKHNDPIuP7NBbXTBVPLp42mykQfUADES_Bi2eniQuAkIQCf1lWXT2sErqnpci3Vm2YL8RlXGv7trfVsLNTe8LXzVGpEHC1TyGdYA7rb4FOREWWV0bU0BKTLy-wT-ZmwOS-3K1ODjTD6jCz-mJO47w-T-E1dqOClg&session_id=f6165029-0dd4-43f3-8dd1-826b5968ec83&state=8e9385f1-8ba3-4582-a5d9-b67598216a2c&session_state=fd39f543-7880-4908-b1ce-f4721d439122 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=authorization_code&code=8f4d00ed-de78-42ed-a555-82473f4aa01d&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&myCustomAttr1=58ddf70b-dfa1-4f46-acd5-749a8a111e11 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:35 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"ee31d421-8cf4-4a00-8f05-5e3a257bfa43","token_type":"bearer","expires_in":299,"refresh_token":"764a4397-a2c0-48ec-854f-9b5ba44ddf4f","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFGOEQ3LkZFMzEuQTFFMC4xMzEyIiwiZXhwIjoxNTMwNzQ5MDc1LCJpYXQiOjE1MzA3NDU0NzUsIm5vbmNlIjoiM2IzZDZiNjUtMWIyZC00MGU0LTg0NWEtMmRkMDBkZDZjZWFmIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDc1LCJhdF9oYXNoIjoiYTRzQU5meloxT3Y3ei1SSVV2U3VVdyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6InJscVprTzZ6N2gySGQ3OWdZWXpiWWxrRnpsdm9GWVMtSXFLcHJFaGJvSFEifQ.SUXNGwq1a35PT20qWCbHI4dwaRD7SyYOoim_clUYWkiXrSPmxvnsbw5vdGJh3G9axFo715YAaW39qvNvFS8hQP74QVKU6BJFn8TMY_pPwJOIrtv6HH2P59bLMPOlZxan75OPuTtNexwfzsR0hsgU6QCojvs23y9fvObFQvtrihysIGKcxz5uArLPRq--hBB_68u71Dg1ZuwYPg1Nmud_cNd1DDSR2ElVRoHKdPcRXP90oacz5esxTX3Ns1MvyznjHrIChr9Q2ynIk7X5n6RtXUZSyhX4eJHOY5p5jHy6rige7-3IxQFmE9GzyOtsl8zOvsOAtR2yAuZATMJouXuftA"} ####################################################### TEST: requestAccessTokenCustomClientAuth2 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=password&scope=openid&username=test_user&password=test_user_password&myCustomAttr1=58ddf70b-dfa1-4f46-acd5-749a8a111e11 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 934 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:35 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"ed831be5-76e5-4cef-aad5-47de95ce1d62","token_type":"bearer","expires_in":299,"refresh_token":"21d55177-c36e-47b3-b4ac-ed7b780c9460","scope":"openid","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFGOEQ3LkZFMzEuQTFFMC4xMzEyIiwiZXhwIjoxNTMwNzQ5MDc1LCJpYXQiOjE1MzA3NDU0NzUsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6InJscVprTzZ6N2gySGQ3OWdZWXpiWWxrRnpsdm9GWVMtSXFLcHJFaGJvSFEifQ.jET2N9a9twd9EO5whOARhZBnQsSAHWzpJXPmCcEiqd3L9dSPvdfTnQCxf8JarjlPWSNlRB1XvXL03VooqyTj8oxDZwbKjyFoUBJEr1fNTf4IFsyRtAeEHoxd0I59pxG3A_OjC3a50Y1aAjOdoyRtmRLRolC3reZW2CEagM7diURQuNDUuBUwz4G2z78BTuguiWFAR5voZZ6j95Wnesimgwla5S_qLXm5wedpv_mjzeiUjWR4jD8jUgZXyyTkfVZbeR-S-L3Uqqy-mMEPFchc6V7TTdzA2ioWmxd0mdzriVvIE-wM0mw917tTJJhkzAR8SFRd2Bu0mlVf_YyI4y_YGA"} ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:35 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:35 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: clientSecretBasicAuthenticationMethod ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "client_secret_basic", "scope": "openid profile address email clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1226 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:35 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F266.384E.9D12.D98B", "client_secret": "9d0d39da-3783-4a42-8993-d38f91f477b3", "registration_access_token": "49b401f0-6417-484d-9d8f-833b7824f32f", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F266.384E.9D12.D98B", "client_id_issued_at": 1530745475, "client_secret_expires_at": 1530831875, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "openid profile address email clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxRjI2Ni4zODRFLjlEMTIuRDk4Qjo5ZDBkMzlkYS0zNzgzLTRhNDItODk5My1kMzhmOTFmNDc3YjM= grant_type=client_credentials&scope=clientinfo ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 115 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:35 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"657d0efe-b270-4957-88b7-3ab391a51ada","token_type":"bearer","expires_in":299,"scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 412 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:35 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F266.384E.9D12.D98B","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["openid","profile","address","email","clientinfo"]} ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/userinfo HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 657d0efe-b270-4957-88b7-3ab391a51ada ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 403 Connection: Keep-Alive Content-Length: 126 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:35 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"insufficient_scope","error_description":"The request requires higher privileges than provided by the access token."} ####################################################### TEST: clientSecretBasicAuthenticationMethodFail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "client_secret_basic", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1242 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:35 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!61F1.B3A4.FF9D.00D2", "client_secret": "b6ec853e-4300-4d5c-81dc-502ff089eb48", "registration_access_token": "89dc6e4f-8f2c-439e-bddf-46d205449404", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!61F1.B3A4.FF9D.00D2", "client_id_issued_at": 1530745475, "client_secret_expires_at": 1530831875, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxNjFGMS5CM0E0LkZGOUQuMDBEMjpJTlZBTElEX0NMSUVOVF9TRUNSRVQ= grant_type=client_credentials&scope=clientinfo ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:36 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: clientSecretJwtAuthenticationMethodHS256 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "client_secret_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1195 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:36 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D233.01F3.C9F1.6121", "client_secret": "32b2791e-5c7f-47c0-8de9-af3539f69d37", "registration_access_token": "8a4d6119-2241-4db5-8a42-5b5d8dbb7a8b", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D233.01F3.C9F1.6121", "client_id_issued_at": 1530745476, "client_secret_expires_at": 1530831876, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFEMjMzLjAxRjMuQzlGMS42MTIxIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghRDIzMy4wMUYzLkM5RjEuNjEyMSIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiOWM3YmE5ZTYtZWIzYi00Y2Q2LWI1MzMtZmVhYWNmYjg3MTlkIiwiZXhwIjoxNTMwNzQ1Nzk2LCJpYXQiOjE1MzA3NDU0OTZ9.IQL_wntMKiRdqzYdfVkmQ_8jQEXnNW-Pivz91O8Am0Y ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 115 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:36 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"aa2e5644-3617-4a5c-ac38-39cc4c16af6b","token_type":"bearer","expires_in":299,"scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 375 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:36 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D233.01F3.C9F1.6121","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["clientinfo"]} ####################################################### TEST: clientSecretJwtAuthenticationMethodHS256Fail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "client_secret_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1240 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:36 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2062.289A.C051.B8A8", "client_secret": "45699d97-ec4f-47c1-91f9-5241867f969a", "registration_access_token": "4ca24a96-cadc-4f10-a08c-bd94e3e2aed1", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2062.289A.C051.B8A8", "client_id_issued_at": 1530745476, "client_secret_expires_at": 1530831876, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEyMDYyLjI4OUEuQzA1MS5COEE4Iiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghMjA2Mi4yODlBLkMwNTEuQjhBOCIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiZWQwMzYyYWUtZTcxZC00ZmMyLTk0NGQtODc1Y2Q0ZGRmY2VjIiwiZXhwIjoxNTMwNzQ1Nzk2LCJpYXQiOjE1MzA3NDU0OTZ9.xrS0GaOrKzR3ZN8fTkzuy9Zk2Izknj9lnMatPYw3Abw ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:36 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: clientSecretJwtAuthenticationMethodHS384 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "client_secret_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1195 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:36 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A42C.0D58.3F92.A5AE", "client_secret": "8f6519c6-4b8e-4827-a664-bd8f6520f5ba", "registration_access_token": "043aff1c-e647-45ed-925e-c397d37b7197", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A42C.0D58.3F92.A5AE", "client_id_issued_at": 1530745476, "client_secret_expires_at": 1530831876, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzM4NCJ9.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFBNDJDLjBENTguM0Y5Mi5BNUFFIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghQTQyQy4wRDU4LjNGOTIuQTVBRSIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiNWQ0ZTZlNGYtYjc4Zi00NWRiLWFiZmUtOWYyNDI0NDEwOWQxIiwiZXhwIjoxNTMwNzQ1Nzk2LCJpYXQiOjE1MzA3NDU0OTZ9.kovV9kh1as8i8uC_2F232cOGq7YOkib0bnioXyHCyo9sOClDEDo-UrSiLyfTAtdt ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 115 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:36 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"637d4b11-46c2-48de-9ef7-4db25660f5f7","token_type":"bearer","expires_in":299,"scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 375 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:36 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!A42C.0D58.3F92.A5AE","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["clientinfo"]} ####################################################### TEST: clientSecretJwtAuthenticationMethodHS384Fail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "client_secret_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1240 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:36 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!310A.DD71.409D.6114", "client_secret": "b5a6855b-23c8-42da-ba53-197cbdc8e6be", "registration_access_token": "553e4d20-d2a3-4456-8439-0e16963852b2", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!310A.DD71.409D.6114", "client_id_issued_at": 1530745476, "client_secret_expires_at": 1530831876, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzM4NCJ9.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEzMTBBLkRENzEuNDA5RC42MTE0Iiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghMzEwQS5ERDcxLjQwOUQuNjExNCIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiOTQ3YWM1NTEtZGI4NS00NWY2LWJkMWEtZTA5OTYxNzNhMzdhIiwiZXhwIjoxNTMwNzQ1Nzk3LCJpYXQiOjE1MzA3NDU0OTd9.s1ntZ8Q87x-nze5ujdNz16sX5M5k8krNz5uGgp4Ya2rFRrqjdlGoCCWhEj_DZB97 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:36 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: clientSecretJwtAuthenticationMethodHS512 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "client_secret_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1195 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:36 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B3A2.3606.4644.7B7B", "client_secret": "7dc4f021-37b9-4d52-a1ac-08b49ce43021", "registration_access_token": "22fd134c-5819-4e9b-96e4-94936e8d7364", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B3A2.3606.4644.7B7B", "client_id_issued_at": 1530745476, "client_secret_expires_at": 1530831876, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFCM0EyLjM2MDYuNDY0NC43QjdCIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghQjNBMi4zNjA2LjQ2NDQuN0I3QiIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiMzc1MTYxZTctMGVlZC00Yjg2LTk2YmItMTk1YmQwNmVjYmY0IiwiZXhwIjoxNTMwNzQ1Nzk3LCJpYXQiOjE1MzA3NDU0OTd9.XBUFdPaZ6HLJTZWGBFxtle3CXHUwfWqne_9zZLnYuHOcFHMala6vQwEv4ZDqSiKPI91uwdM3rMDmYTjY-epHdw ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 115 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:37 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"8e47428b-c4a7-4456-9322-3314582e6b72","token_type":"bearer","expires_in":299,"scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 375 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:37 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B3A2.3606.4644.7B7B","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["clientinfo"]} ####################################################### TEST: clientSecretJwtAuthenticationMethodHS512Fail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "client_secret_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1240 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:37 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!7F56.B07B.3919.48C2", "client_secret": "956ffa01-6031-4d36-a303-ca44f1ca7260", "registration_access_token": "62ef3304-5a35-4e0c-9c9c-b87e2092fcab", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!7F56.B07B.3919.48C2", "client_id_issued_at": 1530745477, "client_secret_expires_at": 1530831877, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE3RjU2LkIwN0IuMzkxOS40OEMyIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghN0Y1Ni5CMDdCLjM5MTkuNDhDMiIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiMTYzZWJlZGMtNzk4Mi00MWE1LTlkZjQtYThiMjEzZWZjMDI0IiwiZXhwIjoxNTMwNzQ1Nzk3LCJpYXQiOjE1MzA3NDU0OTd9.igUe-NxEzz8LB5a5batqeIGlGLxT0PYOo7jywktx5sl9KPpPZX-tYm1feD90W6qS4jyjyjIFjtqHMuzm4Jey3Q ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:37 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: clientSecretPostAuthenticationMethod ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "client_secret_post", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1196 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:37 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!BEBC.FFB4.3E00.9DCB", "client_secret": "52e71bb5-06fb-4707-8e14-6e3a179224ba", "registration_access_token": "d2453586-5bb4-4368-8dc9-a0ff8560ed70", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!BEBC.FFB4.3E00.9DCB", "client_id_issued_at": 1530745477, "client_secret_expires_at": 1530831877, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_post", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21BEBC.FFB4.3E00.9DCB&client_secret=52e71bb5-06fb-4707-8e14-6e3a179224ba ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 115 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:37 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"914770cd-e0c1-48b7-b909-024d559ec4fb","token_type":"bearer","expires_in":299,"scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 375 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:37 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!BEBC.FFB4.3E00.9DCB","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["clientinfo"]} ####################################################### TEST: clientSecretPostAuthenticationMethodFail1 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "client_secret_post", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1241 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:37 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!4607.D764.7D86.A62D", "client_secret": "5948397e-b056-4e5c-8e0b-a4b6d7a02ffd", "registration_access_token": "9acf051c-da7f-4478-93e9-70999baf9f9e", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!4607.D764.7D86.A62D", "client_id_issued_at": 1530745477, "client_secret_expires_at": 1530831877, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_post", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%214607.D764.7D86.A62D&client_secret=INVALID_CLIENT_SECRET ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:37 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: clientSecretPostAuthenticationMethodFail2 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "client_secret_post", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1241 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:37 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!6B30.4C59.BA39.F2AD", "client_secret": "19144d71-0514-4b36-acd4-0e67d345970f", "registration_access_token": "307d09c0-836c-4ea0-ba78-401e43723593", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!6B30.4C59.BA39.F2AD", "client_id_issued_at": 1530745477, "client_secret_expires_at": 1530831877, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_post", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%216B30.4C59.BA39.F2AD ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:37 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: clientSecretPostAuthenticationMethodFail3 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "client_secret_post", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1241 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:37 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!FF21.297E.B0B5.0F3D", "client_secret": "754a2759-8470-4426-8845-a5c0b9584027", "registration_access_token": "101631a8-4e68-4827-b44b-632d8b9bde4d", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!FF21.297E.B0B5.0F3D", "client_id_issued_at": 1530745478, "client_secret_expires_at": 1530831878, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_post", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:38 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: defaultAuthenticationMethod ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1197 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:38 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!BD9C.6B36.54B5.88C5", "client_secret": "f117ed80-7404-442a-888c-98c024fa6ba0", "registration_access_token": "9eebf4f7-5fba-4753-98c1-8e6214f44fab", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!BD9C.6B36.54B5.88C5", "client_id_issued_at": 1530745478, "client_secret_expires_at": 1530831878, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxQkQ5Qy42QjM2LjU0QjUuODhDNTpmMTE3ZWQ4MC03NDA0LTQ0MmEtODg4Yy05OGMwMjRmYTZiYTA= grant_type=client_credentials&scope=clientinfo ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 115 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:38 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"833d19d9-1d47-4bdd-af6a-fa22bd1b15c5","token_type":"bearer","expires_in":299,"scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 375 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:38 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!BD9C.6B36.54B5.88C5","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["clientinfo"]} ####################################################### TEST: defaultAuthenticationMethodFail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1242 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:38 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B0DB.E258.8AF4.CA90", "client_secret": "8609d5ad-11a3-4602-a8a5-cc58c00cbc6e", "registration_access_token": "52bc2edb-91ee-439f-a3b0-8a45b9147496", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B0DB.E258.8AF4.CA90", "client_id_issued_at": 1530745478, "client_secret_expires_at": 1530831878, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxQjBEQi5FMjU4LjhBRjQuQ0E5MDpJTlZBTElEX0NMSUVOVF9TRUNSRVQ= grant_type=client_credentials&scope=clientinfo ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:38 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: privateKeyJwtAuthenticationMethodES256 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "private_key_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1276 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:38 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F2D6.BB22.57D2.4493", "client_secret": "f5e0f990-319b-4447-aa51-47c3e4543c11", "registration_access_token": "34977f91-8f63-4352-8bbb-81769fc0c087", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F2D6.BB22.57D2.4493", "client_id_issued_at": 1530745478, "client_secret_expires_at": 1530831878, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "private_key_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiIsImtpZCI6IjU0N2IyODM4LWE4NDgtNDY3MS04YTQ3LWQ1MzYxNzM4ZjJhZSJ9.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFGMkQ2LkJCMjIuNTdEMi40NDkzIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghRjJENi5CQjIyLjU3RDIuNDQ5MyIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiNDVjNjQxOGMtNTc4YS00ZjA0LWI3MDEtMGMxNTIyODRmYTI2IiwiZXhwIjoxNTMwNzQ1Nzk5LCJpYXQiOjE1MzA3NDU0OTl9.MEQCIGCvfX0S6VvroGIkHupKDsbnv3RHL0flLbcNNuaGDFlIAiABjsK7qcBmgrEJIRchwkpVVcNw8lqDP-QrxID4yse3kg ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 115 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:38 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"ff57e258-fb3f-46f6-9fd3-941d03af2dc4","token_type":"bearer","expires_in":299,"scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 375 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:39 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!F2D6.BB22.57D2.4493","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["clientinfo"]} ####################################################### TEST: privateKeyJwtAuthenticationMethodES256Fail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "private_key_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1321 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:39 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!591B.077E.4629.8EA1", "client_secret": "26c2ecaf-5ab7-4a76-ab33-58c9adc077a2", "registration_access_token": "cfa19378-8322-443b-b8a5-3587b5f302de", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!591B.077E.4629.8EA1", "client_id_issued_at": 1530745479, "client_secret_expires_at": 1530831879, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "private_key_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } 19:04:59.448 [main] ERROR org.xdi.oxauth.client.TokenRequest - cannot identify EC private key: java.lang.NullPointerException java.security.InvalidKeyException: cannot identify EC private key: java.lang.NullPointerException at org.bouncycastle.jcajce.provider.asymmetric.util.ECUtil.generatePrivateKeyParameter(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at org.bouncycastle.jcajce.provider.asymmetric.ec.SignatureSpi.engineInitSign(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at java.security.Signature$Delegate.engineInitSign(Signature.java:1174) ~[?:1.8.0_121] at java.security.Signature.initSign(Signature.java:527) ~[?:1.8.0_121] at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:171) ~[oxauth-model.jar:?] at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) [classes/:?] at org.xdi.oxauth.client.TokenClient.exec(TokenClient.java:265) [classes/:?] at org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodES256Fail(ClientCredentialsGrantHttpTest.java:1312) [test-classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:108) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeMethod(Invoker.java:661) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:869) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1193) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:126) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109) [testng-6.11.jar:?] at org.testng.TestRunner.privateRun(TestRunner.java:744) [testng-6.11.jar:?] at org.testng.TestRunner.run(TestRunner.java:602) [testng-6.11.jar:?] at org.testng.SuiteRunner.runTest(SuiteRunner.java:380) [testng-6.11.jar:?] at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:375) [testng-6.11.jar:?] at org.testng.SuiteRunner.privateRun(SuiteRunner.java:340) [testng-6.11.jar:?] at org.testng.SuiteRunner.run(SuiteRunner.java:289) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesSequentially(TestNG.java:1301) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesLocally(TestNG.java:1226) [testng-6.11.jar:?] at org.testng.TestNG.runSuites(TestNG.java:1144) [testng-6.11.jar:?] at org.testng.TestNG.run(TestNG.java:1115) [testng-6.11.jar:?] at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:281) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGXmlTestSuite.execute(TestNGXmlTestSuite.java:75) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:121) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121) [surefire-booter-2.19.1.jar:2.19.1] ------------------------------------------------------- REQUEST: ------------------------------------------------------- 19:04:59.579 [main] ERROR org.xdi.oxauth.client.TokenRequest - cannot identify EC private key: java.lang.NullPointerException java.security.InvalidKeyException: cannot identify EC private key: java.lang.NullPointerException at org.bouncycastle.jcajce.provider.asymmetric.util.ECUtil.generatePrivateKeyParameter(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at org.bouncycastle.jcajce.provider.asymmetric.ec.SignatureSpi.engineInitSign(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at java.security.Signature$Delegate.engineInitSign(Signature.java:1174) ~[?:1.8.0_121] at java.security.Signature.initSign(Signature.java:527) ~[?:1.8.0_121] at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:171) ~[oxauth-model.jar:?] at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) [classes/:?] at org.xdi.oxauth.client.TokenRequest.getQueryString(TokenRequest.java:409) [classes/:?] at org.xdi.oxauth.client.BaseClient.getRequestAsString(BaseClient.java:158) [classes/:?] at org.xdi.oxauth.client.ClientUtils.showClient(ClientUtils.java:25) [classes/:?] at org.xdi.oxauth.BaseTest.showClient(BaseTest.java:766) [test-classes/:?] at org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodES256Fail(ClientCredentialsGrantHttpTest.java:1314) [test-classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:108) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeMethod(Invoker.java:661) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:869) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1193) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:126) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109) [testng-6.11.jar:?] at org.testng.TestRunner.privateRun(TestRunner.java:744) [testng-6.11.jar:?] at org.testng.TestRunner.run(TestRunner.java:602) [testng-6.11.jar:?] at org.testng.SuiteRunner.runTest(SuiteRunner.java:380) [testng-6.11.jar:?] at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:375) [testng-6.11.jar:?] at org.testng.SuiteRunner.privateRun(SuiteRunner.java:340) [testng-6.11.jar:?] at org.testng.SuiteRunner.run(SuiteRunner.java:289) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesSequentially(TestNG.java:1301) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesLocally(TestNG.java:1226) [testng-6.11.jar:?] at org.testng.TestNG.runSuites(TestNG.java:1144) [testng-6.11.jar:?] at org.testng.TestNG.run(TestNG.java:1115) [testng-6.11.jar:?] at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:281) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGXmlTestSuite.execute(TestNGXmlTestSuite.java:75) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:121) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121) [surefire-booter-2.19.1.jar:2.19.1] POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiIsImtpZCI6IkVTMjU2U0lHX0lOVkFMSURfS0VZSUQifQ.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE1OTFCLjA3N0UuNDYyOS44RUExIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghNTkxQi4wNzdFLjQ2MjkuOEVBMSIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiY2NmZjJlYzEtNTRkYy00NWU2LTg0YzAtZmU4MmI0YTZiNWI4IiwiZXhwIjoxNTMwNzQ1Nzk5LCJpYXQiOjE1MzA3NDU0OTl9. ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:39 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: privateKeyJwtAuthenticationMethodES384 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "private_key_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1276 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:39 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2354.228E.8B1C.97EC", "client_secret": "3925978c-5ae3-4857-8c56-f4279164278e", "registration_access_token": "57eb6eb3-b1d5-4285-ba80-9f2f0d2eb56a", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2354.228E.8B1C.97EC", "client_id_issued_at": 1530745479, "client_secret_expires_at": 1530831879, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "private_key_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzM4NCIsImtpZCI6ImM0ZmU0MTEwLWViNTYtNDFjNi1iYWMzLTUzMTZmNmIxNDQzZCJ9.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEyMzU0LjIyOEUuOEIxQy45N0VDIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghMjM1NC4yMjhFLjhCMUMuOTdFQyIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiZWZlODg0NDMtZTQ1YS00YTlhLTgxZjgtNzkzNWVhODFiNzA4IiwiZXhwIjoxNTMwNzQ1Nzk5LCJpYXQiOjE1MzA3NDU0OTl9.MGQCMGnKZIJBjKKMRa9_aih59MlQNiqxRYde_etyWX_bH_503cFnJcDn37Sl1G46S7GKDgIwJECJY1jwIs2yXOxF1KcSO8bHElxj6DKBjStCsKkyLgeS5N-_b0wKYe85dAdM-CEW ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 115 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:39 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"90426b7d-bcb4-4b02-af90-983a4d33b0b0","token_type":"bearer","expires_in":299,"scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 375 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:39 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2354.228E.8B1C.97EC","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["clientinfo"]} ####################################################### TEST: privateKeyJwtAuthenticationMethodES384Fail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "private_key_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1321 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:39 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5D43.7F90.C818.DC92", "client_secret": "ec502249-444c-43fa-a199-0fe7fcbcead4", "registration_access_token": "50c40209-c180-450e-896e-11ccb583ce5d", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5D43.7F90.C818.DC92", "client_id_issued_at": 1530745479, "client_secret_expires_at": 1530831879, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "private_key_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } 19:05:00.123 [main] ERROR org.xdi.oxauth.client.TokenRequest - cannot identify EC private key: java.lang.NullPointerException java.security.InvalidKeyException: cannot identify EC private key: java.lang.NullPointerException at org.bouncycastle.jcajce.provider.asymmetric.util.ECUtil.generatePrivateKeyParameter(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at org.bouncycastle.jcajce.provider.asymmetric.ec.SignatureSpi.engineInitSign(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at java.security.Signature$Delegate.engineInitSign(Signature.java:1174) ~[?:1.8.0_121] at java.security.Signature.initSign(Signature.java:527) ~[?:1.8.0_121] at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:171) ~[oxauth-model.jar:?] at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) [classes/:?] at org.xdi.oxauth.client.TokenClient.exec(TokenClient.java:265) [classes/:?] at org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodES384Fail(ClientCredentialsGrantHttpTest.java:1437) [test-classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:108) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeMethod(Invoker.java:661) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:869) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1193) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:126) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109) [testng-6.11.jar:?] at org.testng.TestRunner.privateRun(TestRunner.java:744) [testng-6.11.jar:?] at org.testng.TestRunner.run(TestRunner.java:602) [testng-6.11.jar:?] at org.testng.SuiteRunner.runTest(SuiteRunner.java:380) [testng-6.11.jar:?] at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:375) [testng-6.11.jar:?] at org.testng.SuiteRunner.privateRun(SuiteRunner.java:340) [testng-6.11.jar:?] at org.testng.SuiteRunner.run(SuiteRunner.java:289) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesSequentially(TestNG.java:1301) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesLocally(TestNG.java:1226) [testng-6.11.jar:?] at org.testng.TestNG.runSuites(TestNG.java:1144) [testng-6.11.jar:?] at org.testng.TestNG.run(TestNG.java:1115) [testng-6.11.jar:?] at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:281) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGXmlTestSuite.execute(TestNGXmlTestSuite.java:75) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:121) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121) [surefire-booter-2.19.1.jar:2.19.1] ------------------------------------------------------- REQUEST: ------------------------------------------------------- 19:05:00.227 [main] ERROR org.xdi.oxauth.client.TokenRequest - cannot identify EC private key: java.lang.NullPointerException java.security.InvalidKeyException: cannot identify EC private key: java.lang.NullPointerException at org.bouncycastle.jcajce.provider.asymmetric.util.ECUtil.generatePrivateKeyParameter(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at org.bouncycastle.jcajce.provider.asymmetric.ec.SignatureSpi.engineInitSign(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at java.security.Signature$Delegate.engineInitSign(Signature.java:1174) ~[?:1.8.0_121] at java.security.Signature.initSign(Signature.java:527) ~[?:1.8.0_121] at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:171) ~[oxauth-model.jar:?] at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) [classes/:?] at org.xdi.oxauth.client.TokenRequest.getQueryString(TokenRequest.java:409) [classes/:?] at org.xdi.oxauth.client.BaseClient.getRequestAsString(BaseClient.java:158) [classes/:?] at org.xdi.oxauth.client.ClientUtils.showClient(ClientUtils.java:25) [classes/:?] at org.xdi.oxauth.BaseTest.showClient(BaseTest.java:766) [test-classes/:?] at org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodES384Fail(ClientCredentialsGrantHttpTest.java:1439) [test-classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:108) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeMethod(Invoker.java:661) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:869) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1193) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:126) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109) [testng-6.11.jar:?] at org.testng.TestRunner.privateRun(TestRunner.java:744) [testng-6.11.jar:?] at org.testng.TestRunner.run(TestRunner.java:602) [testng-6.11.jar:?] at org.testng.SuiteRunner.runTest(SuiteRunner.java:380) [testng-6.11.jar:?] at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:375) [testng-6.11.jar:?] at org.testng.SuiteRunner.privateRun(SuiteRunner.java:340) [testng-6.11.jar:?] at org.testng.SuiteRunner.run(SuiteRunner.java:289) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesSequentially(TestNG.java:1301) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesLocally(TestNG.java:1226) [testng-6.11.jar:?] at org.testng.TestNG.runSuites(TestNG.java:1144) [testng-6.11.jar:?] at org.testng.TestNG.run(TestNG.java:1115) [testng-6.11.jar:?] at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:281) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGXmlTestSuite.execute(TestNGXmlTestSuite.java:75) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:121) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121) [surefire-booter-2.19.1.jar:2.19.1] POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzM4NCIsImtpZCI6IkVTMzg0U0lHX0lOVkFMSURfS0VZSUQifQ.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE1RDQzLjdGOTAuQzgxOC5EQzkyIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghNUQ0My43RjkwLkM4MTguREM5MiIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiNDU4ODY1NjYtYjFhMi00NDBjLWEzNjgtNjNhNWRiYjdkZmFmIiwiZXhwIjoxNTMwNzQ1ODAwLCJpYXQiOjE1MzA3NDU1MDB9. ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:40 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: privateKeyJwtAuthenticationMethodES512 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "private_key_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1276 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:40 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9C4C.36BC.F032.A966", "client_secret": "095c2f2f-cd1d-4012-9d19-cc3aec1627f0", "registration_access_token": "0fccec54-29e7-4904-9498-8d369ba62c45", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9C4C.36BC.F032.A966", "client_id_issued_at": 1530745480, "client_secret_expires_at": 1530831880, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "private_key_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzUxMiIsImtpZCI6IjI2ZjgwNDBjLWFlOGItNGRhYS04ZjcxLWE3ZmRmMTRkZjY0MyJ9.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE5QzRDLjM2QkMuRjAzMi5BOTY2Iiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghOUM0Qy4zNkJDLkYwMzIuQTk2NiIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiNDhiMzkwMWMtZDZlMC00ZTVlLWIwNGItMWExMGI4YzI0YzU5IiwiZXhwIjoxNTMwNzQ1ODAwLCJpYXQiOjE1MzA3NDU1MDB9.MIGIAkIBTQ1Wi5PpILHVGU3sF2fzxTDIOS1ZtYr2XgmiX2-ls-Ir1hlozLQWaL0UFXynVf2W5NaM72i12wf1jG7il3XOP_oCQgEDbu6jkGBUTQw0hWiQ7mlVqIOb2GApy0F_CSa9cbpkL_pG0qDrC3HyTRxa-vt8Koc0pws1CQaaOBmZZhuCL1GaFA ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 115 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:40 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"d9fd5320-1cd8-40c1-9442-d4bf57efc0b6","token_type":"bearer","expires_in":299,"scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 375 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:40 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9C4C.36BC.F032.A966","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["clientinfo"]} ####################################################### TEST: privateKeyJwtAuthenticationMethodES512Fail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "private_key_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1321 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:40 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!1BFA.08D9.04F7.4D11", "client_secret": "dd0de93c-4c79-4bdd-91b0-b104bd572547", "registration_access_token": "e95b7eb7-d5c1-414d-8e43-d22b4376045c", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!1BFA.08D9.04F7.4D11", "client_id_issued_at": 1530745480, "client_secret_expires_at": 1530831880, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "private_key_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } 19:05:00.910 [main] ERROR org.xdi.oxauth.client.TokenRequest - cannot identify EC private key: java.lang.NullPointerException java.security.InvalidKeyException: cannot identify EC private key: java.lang.NullPointerException at org.bouncycastle.jcajce.provider.asymmetric.util.ECUtil.generatePrivateKeyParameter(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at org.bouncycastle.jcajce.provider.asymmetric.ec.SignatureSpi.engineInitSign(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at java.security.Signature$Delegate.engineInitSign(Signature.java:1174) ~[?:1.8.0_121] at java.security.Signature.initSign(Signature.java:527) ~[?:1.8.0_121] at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:171) ~[oxauth-model.jar:?] at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) [classes/:?] at org.xdi.oxauth.client.TokenClient.exec(TokenClient.java:265) [classes/:?] at org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodES512Fail(ClientCredentialsGrantHttpTest.java:1562) [test-classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:108) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeMethod(Invoker.java:661) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:869) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1193) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:126) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109) [testng-6.11.jar:?] at org.testng.TestRunner.privateRun(TestRunner.java:744) [testng-6.11.jar:?] at org.testng.TestRunner.run(TestRunner.java:602) [testng-6.11.jar:?] at org.testng.SuiteRunner.runTest(SuiteRunner.java:380) [testng-6.11.jar:?] at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:375) [testng-6.11.jar:?] at org.testng.SuiteRunner.privateRun(SuiteRunner.java:340) [testng-6.11.jar:?] at org.testng.SuiteRunner.run(SuiteRunner.java:289) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesSequentially(TestNG.java:1301) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesLocally(TestNG.java:1226) [testng-6.11.jar:?] at org.testng.TestNG.runSuites(TestNG.java:1144) [testng-6.11.jar:?] at org.testng.TestNG.run(TestNG.java:1115) [testng-6.11.jar:?] at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:281) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGXmlTestSuite.execute(TestNGXmlTestSuite.java:75) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:121) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121) [surefire-booter-2.19.1.jar:2.19.1] ------------------------------------------------------- REQUEST: ------------------------------------------------------- 19:05:01.048 [main] ERROR org.xdi.oxauth.client.TokenRequest - cannot identify EC private key: java.lang.NullPointerException java.security.InvalidKeyException: cannot identify EC private key: java.lang.NullPointerException at org.bouncycastle.jcajce.provider.asymmetric.util.ECUtil.generatePrivateKeyParameter(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at org.bouncycastle.jcajce.provider.asymmetric.ec.SignatureSpi.engineInitSign(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at java.security.Signature$Delegate.engineInitSign(Signature.java:1174) ~[?:1.8.0_121] at java.security.Signature.initSign(Signature.java:527) ~[?:1.8.0_121] at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:171) ~[oxauth-model.jar:?] at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) [classes/:?] at org.xdi.oxauth.client.TokenRequest.getQueryString(TokenRequest.java:409) [classes/:?] at org.xdi.oxauth.client.BaseClient.getRequestAsString(BaseClient.java:158) [classes/:?] at org.xdi.oxauth.client.ClientUtils.showClient(ClientUtils.java:25) [classes/:?] at org.xdi.oxauth.BaseTest.showClient(BaseTest.java:766) [test-classes/:?] at org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodES512Fail(ClientCredentialsGrantHttpTest.java:1564) [test-classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:108) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeMethod(Invoker.java:661) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:869) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1193) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:126) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109) [testng-6.11.jar:?] at org.testng.TestRunner.privateRun(TestRunner.java:744) [testng-6.11.jar:?] at org.testng.TestRunner.run(TestRunner.java:602) [testng-6.11.jar:?] at org.testng.SuiteRunner.runTest(SuiteRunner.java:380) [testng-6.11.jar:?] at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:375) [testng-6.11.jar:?] at org.testng.SuiteRunner.privateRun(SuiteRunner.java:340) [testng-6.11.jar:?] at org.testng.SuiteRunner.run(SuiteRunner.java:289) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesSequentially(TestNG.java:1301) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesLocally(TestNG.java:1226) [testng-6.11.jar:?] at org.testng.TestNG.runSuites(TestNG.java:1144) [testng-6.11.jar:?] at org.testng.TestNG.run(TestNG.java:1115) [testng-6.11.jar:?] at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:281) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGXmlTestSuite.execute(TestNGXmlTestSuite.java:75) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:121) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121) [surefire-booter-2.19.1.jar:2.19.1] POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzUxMiIsImtpZCI6IkVTNTEyU0lHX0lOVkFMSURfS0VZSUQifQ.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCExQkZBLjA4RDkuMDRGNy40RDExIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghMUJGQS4wOEQ5LjA0RjcuNEQxMSIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiZjY3N2U4NGUtMWNlOS00OTA3LTk0M2ItNmZjMWYwNWVkZGU3IiwiZXhwIjoxNTMwNzQ1ODAxLCJpYXQiOjE1MzA3NDU1MDF9. ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:40 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: privateKeyJwtAuthenticationMethodRS256 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "private_key_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1276 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:40 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3EDE.43CF.C13E.4F4B", "client_secret": "b745505a-bac6-45bd-aeb2-d0b215ded5df", "registration_access_token": "cc27042b-89e4-49d0-9e8f-2ba1630cc2fc", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3EDE.43CF.C13E.4F4B", "client_id_issued_at": 1530745480, "client_secret_expires_at": 1530831880, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "private_key_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjQ4YmZhOGE0LWM4YTctNGEwOS1hZTk4LWJmMzI1ZDc0OTExOSJ9.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEzRURFLjQzQ0YuQzEzRS40RjRCIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghM0VERS40M0NGLkMxM0UuNEY0QiIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiZjFkZGUzYjItYWQ0OS00MmVjLTg0YmYtOGQ3OTRhNTQ1YjI0IiwiZXhwIjoxNTMwNzQ1ODAxLCJpYXQiOjE1MzA3NDU1MDF9.m2FFsdHWDs-g81uLPcVJGc4u595MEUG6scoNQaV-PDxKGzXfDYtbq9U2TWzbPTmn1RgSkLC1fSFmu13lOgqnFdva7oyBafm2EZsZQCGSIsaynEbNoEN1W2a2MYwsXIfAORhmtOR1aHPt46SxxZ-KmZr58ko4uMmTVsats39_TVxMB4rvp0YeE1HF4KS6B_jvopwegjRocEsP0jSwqUeV264JgAKKMDoAIa9LgDbxprp69yPeVo5Y-d048iCo6G_jfRxLE_zNYJEgkdkSUHgQvEdyBm8qI1LJ_QaCrHQGV-c7K7-pWLs28c5TMImCt4doJcCxNCybWa00CToohio_QQ ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 115 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:41 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"f59c456b-37c9-47c8-ace4-209e749887bb","token_type":"bearer","expires_in":299,"scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 375 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:41 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3EDE.43CF.C13E.4F4B","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["clientinfo"]} ####################################################### TEST: privateKeyJwtAuthenticationMethodRS256Fail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "private_key_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1321 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:41 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3B6B.9388.DD8A.1A47", "client_secret": "e8d80587-f2b3-49a0-88e7-596d1b5b561d", "registration_access_token": "a64f6392-56c4-40bd-a19d-813d529d6cf8", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!3B6B.9388.DD8A.1A47", "client_id_issued_at": 1530745481, "client_secret_expires_at": 1530831881, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "private_key_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } 19:05:01.646 [main] ERROR org.xdi.oxauth.client.TokenRequest - Supplied key (null) is not a RSAPrivateKey instance java.security.InvalidKeyException: Supplied key (null) is not a RSAPrivateKey instance at org.bouncycastle.jcajce.provider.asymmetric.rsa.DigestSignatureSpi.engineInitSign(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at java.security.Signature$Delegate.engineInitSign(Signature.java:1174) ~[?:1.8.0_121] at java.security.Signature.initSign(Signature.java:527) ~[?:1.8.0_121] at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:171) ~[oxauth-model.jar:?] at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) [classes/:?] at org.xdi.oxauth.client.TokenClient.exec(TokenClient.java:265) [classes/:?] at org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodRS256Fail(ClientCredentialsGrantHttpTest.java:937) [test-classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:108) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeMethod(Invoker.java:661) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:869) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1193) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:126) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109) [testng-6.11.jar:?] at org.testng.TestRunner.privateRun(TestRunner.java:744) [testng-6.11.jar:?] at org.testng.TestRunner.run(TestRunner.java:602) [testng-6.11.jar:?] at org.testng.SuiteRunner.runTest(SuiteRunner.java:380) [testng-6.11.jar:?] at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:375) [testng-6.11.jar:?] at org.testng.SuiteRunner.privateRun(SuiteRunner.java:340) [testng-6.11.jar:?] at org.testng.SuiteRunner.run(SuiteRunner.java:289) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesSequentially(TestNG.java:1301) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesLocally(TestNG.java:1226) [testng-6.11.jar:?] at org.testng.TestNG.runSuites(TestNG.java:1144) [testng-6.11.jar:?] at org.testng.TestNG.run(TestNG.java:1115) [testng-6.11.jar:?] at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:281) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGXmlTestSuite.execute(TestNGXmlTestSuite.java:75) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:121) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121) [surefire-booter-2.19.1.jar:2.19.1] ------------------------------------------------------- REQUEST: ------------------------------------------------------- 19:05:01.784 [main] ERROR org.xdi.oxauth.client.TokenRequest - Supplied key (null) is not a RSAPrivateKey instance java.security.InvalidKeyException: Supplied key (null) is not a RSAPrivateKey instance at org.bouncycastle.jcajce.provider.asymmetric.rsa.DigestSignatureSpi.engineInitSign(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at java.security.Signature$Delegate.engineInitSign(Signature.java:1174) ~[?:1.8.0_121] at java.security.Signature.initSign(Signature.java:527) ~[?:1.8.0_121] at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:171) ~[oxauth-model.jar:?] at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) [classes/:?] at org.xdi.oxauth.client.TokenRequest.getQueryString(TokenRequest.java:409) [classes/:?] at org.xdi.oxauth.client.BaseClient.getRequestAsString(BaseClient.java:158) [classes/:?] at org.xdi.oxauth.client.ClientUtils.showClient(ClientUtils.java:25) [classes/:?] at org.xdi.oxauth.BaseTest.showClient(BaseTest.java:766) [test-classes/:?] at org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodRS256Fail(ClientCredentialsGrantHttpTest.java:939) [test-classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:108) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeMethod(Invoker.java:661) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:869) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1193) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:126) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109) [testng-6.11.jar:?] at org.testng.TestRunner.privateRun(TestRunner.java:744) [testng-6.11.jar:?] at org.testng.TestRunner.run(TestRunner.java:602) [testng-6.11.jar:?] at org.testng.SuiteRunner.runTest(SuiteRunner.java:380) [testng-6.11.jar:?] at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:375) [testng-6.11.jar:?] at org.testng.SuiteRunner.privateRun(SuiteRunner.java:340) [testng-6.11.jar:?] at org.testng.SuiteRunner.run(SuiteRunner.java:289) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesSequentially(TestNG.java:1301) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesLocally(TestNG.java:1226) [testng-6.11.jar:?] at org.testng.TestNG.runSuites(TestNG.java:1144) [testng-6.11.jar:?] at org.testng.TestNG.run(TestNG.java:1115) [testng-6.11.jar:?] at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:281) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGXmlTestSuite.execute(TestNGXmlTestSuite.java:75) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:121) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121) [surefire-booter-2.19.1.jar:2.19.1] POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IlJTMjU2U0lHX0lOVkFMSURfS0VZSUQifQ.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEzQjZCLjkzODguREQ4QS4xQTQ3Iiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghM0I2Qi45Mzg4LkREOEEuMUE0NyIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiZGQwYzcxNWQtN2U4Mi00YWVmLWI5NjMtYzYwODYwZTY1YjdmIiwiZXhwIjoxNTMwNzQ1ODAxLCJpYXQiOjE1MzA3NDU1MDF9. ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:41 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: privateKeyJwtAuthenticationMethodRS384 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "private_key_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1276 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:41 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D507.1D4A.D2F2.B594", "client_secret": "d4a8c320-5e33-44fb-b28a-0d890d6c8d4f", "registration_access_token": "6b6f04d8-b102-42d7-8240-08dd7da52500", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D507.1D4A.D2F2.B594", "client_id_issued_at": 1530745481, "client_secret_expires_at": 1530831881, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "private_key_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzM4NCIsImtpZCI6ImM0NjIxNDNmLWExOTctNGY3YS1hZjk5LTBiMTA4NzM2ODYxNiJ9.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFENTA3LjFENEEuRDJGMi5CNTk0Iiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghRDUwNy4xRDRBLkQyRjIuQjU5NCIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiMjZlZTcxNTUtNTZiNy00MTA0LTljMDMtMjdlZjlmOTEzNmIzIiwiZXhwIjoxNTMwNzQ1ODAyLCJpYXQiOjE1MzA3NDU1MDJ9.b32dz0ViIfkaV-KaANLbw-jsfpB1gER5EhQJpg6qfAKqFDpM9lzvCBFityDa7MzNDp1iomoqVt5Fo5qiLWzIYRybHrvNGLd3qrnOEbPFxq3oVLwKZb-CYUuixFzf43HTZMc8BYNW2aO3KE8i_SjN_T85kmBzPaWDHSy3SR4XzUAB0I0GVLu7O9NOJkHW5U7w_lh3osHlAM49_17oaPAqvFkQ9yKK0b1ISz72qYCZBsoj7khbleUbf7VxUlOl1IhZUNYmc8IQV2lPhsAfHoFGWg7ETPJk3plc3C7zvoP3WuJA2Bik9gSZWZNUGcm9xyEwj9DqbpbmxnlCfFBvLlnu-g ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 115 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:41 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"fdcf0ea2-e085-4a95-ae02-50a48c014ce6","token_type":"bearer","expires_in":299,"scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 375 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:42 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!D507.1D4A.D2F2.B594","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["clientinfo"]} ####################################################### TEST: privateKeyJwtAuthenticationMethodRS384Fail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "private_key_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1321 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:42 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!6F17.88E5.130E.4C0F", "client_secret": "b7b026b2-0942-4ad5-941c-06c12fc7e3ad", "registration_access_token": "6f0ef0e4-739f-4d92-8931-545175e90e78", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!6F17.88E5.130E.4C0F", "client_id_issued_at": 1530745482, "client_secret_expires_at": 1530831882, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "private_key_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } 19:05:02.387 [main] ERROR org.xdi.oxauth.client.TokenRequest - Supplied key (null) is not a RSAPrivateKey instance java.security.InvalidKeyException: Supplied key (null) is not a RSAPrivateKey instance at org.bouncycastle.jcajce.provider.asymmetric.rsa.DigestSignatureSpi.engineInitSign(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at java.security.Signature$Delegate.engineInitSign(Signature.java:1174) ~[?:1.8.0_121] at java.security.Signature.initSign(Signature.java:527) ~[?:1.8.0_121] at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:171) ~[oxauth-model.jar:?] at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) [classes/:?] at org.xdi.oxauth.client.TokenClient.exec(TokenClient.java:265) [classes/:?] at org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodRS384Fail(ClientCredentialsGrantHttpTest.java:1062) [test-classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:108) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeMethod(Invoker.java:661) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:869) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1193) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:126) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109) [testng-6.11.jar:?] at org.testng.TestRunner.privateRun(TestRunner.java:744) [testng-6.11.jar:?] at org.testng.TestRunner.run(TestRunner.java:602) [testng-6.11.jar:?] at org.testng.SuiteRunner.runTest(SuiteRunner.java:380) [testng-6.11.jar:?] at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:375) [testng-6.11.jar:?] at org.testng.SuiteRunner.privateRun(SuiteRunner.java:340) [testng-6.11.jar:?] at org.testng.SuiteRunner.run(SuiteRunner.java:289) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesSequentially(TestNG.java:1301) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesLocally(TestNG.java:1226) [testng-6.11.jar:?] at org.testng.TestNG.runSuites(TestNG.java:1144) [testng-6.11.jar:?] at org.testng.TestNG.run(TestNG.java:1115) [testng-6.11.jar:?] at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:281) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGXmlTestSuite.execute(TestNGXmlTestSuite.java:75) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:121) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121) [surefire-booter-2.19.1.jar:2.19.1] ------------------------------------------------------- REQUEST: ------------------------------------------------------- 19:05:02.512 [main] ERROR org.xdi.oxauth.client.TokenRequest - Supplied key (null) is not a RSAPrivateKey instance java.security.InvalidKeyException: Supplied key (null) is not a RSAPrivateKey instance at org.bouncycastle.jcajce.provider.asymmetric.rsa.DigestSignatureSpi.engineInitSign(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at java.security.Signature$Delegate.engineInitSign(Signature.java:1174) ~[?:1.8.0_121] at java.security.Signature.initSign(Signature.java:527) ~[?:1.8.0_121] at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:171) ~[oxauth-model.jar:?] at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) [classes/:?] at org.xdi.oxauth.client.TokenRequest.getQueryString(TokenRequest.java:409) [classes/:?] at org.xdi.oxauth.client.BaseClient.getRequestAsString(BaseClient.java:158) [classes/:?] at org.xdi.oxauth.client.ClientUtils.showClient(ClientUtils.java:25) [classes/:?] at org.xdi.oxauth.BaseTest.showClient(BaseTest.java:766) [test-classes/:?] at org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodRS384Fail(ClientCredentialsGrantHttpTest.java:1064) [test-classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:108) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeMethod(Invoker.java:661) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:869) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1193) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:126) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109) [testng-6.11.jar:?] at org.testng.TestRunner.privateRun(TestRunner.java:744) [testng-6.11.jar:?] at org.testng.TestRunner.run(TestRunner.java:602) [testng-6.11.jar:?] at org.testng.SuiteRunner.runTest(SuiteRunner.java:380) [testng-6.11.jar:?] at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:375) [testng-6.11.jar:?] at org.testng.SuiteRunner.privateRun(SuiteRunner.java:340) [testng-6.11.jar:?] at org.testng.SuiteRunner.run(SuiteRunner.java:289) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesSequentially(TestNG.java:1301) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesLocally(TestNG.java:1226) [testng-6.11.jar:?] at org.testng.TestNG.runSuites(TestNG.java:1144) [testng-6.11.jar:?] at org.testng.TestNG.run(TestNG.java:1115) [testng-6.11.jar:?] at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:281) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGXmlTestSuite.execute(TestNGXmlTestSuite.java:75) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:121) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121) [surefire-booter-2.19.1.jar:2.19.1] POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzM4NCIsImtpZCI6IlJTMzg0U0lHX0lOVkFMSURfS0VZSUQifQ.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE2RjE3Ljg4RTUuMTMwRS40QzBGIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghNkYxNy44OEU1LjEzMEUuNEMwRiIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiMWE3ZDQwNjMtMTkzYi00ODM2LWI0ZDEtZGMyOWQzNjY0YWU2IiwiZXhwIjoxNTMwNzQ1ODAyLCJpYXQiOjE1MzA3NDU1MDJ9. ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:42 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: privateKeyJwtAuthenticationMethodRS512 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "private_key_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1276 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:42 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0C16.1E80.0419.FC4F", "client_secret": "14421f25-38f7-4866-95ff-62682660ce30", "registration_access_token": "2a38e369-fc19-4b9b-a5b2-5e4cd37fd325", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0C16.1E80.0419.FC4F", "client_id_issued_at": 1530745482, "client_secret_expires_at": 1530831882, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["client_credentials"], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "private_key_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzUxMiIsImtpZCI6Ijg1YjA4NDgzLTY4OTAtNDg0My05YmFmLTgzN2EyNGEzYzZkMiJ9.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwQzE2LjFFODAuMDQxOS5GQzRGIiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghMEMxNi4xRTgwLjA0MTkuRkM0RiIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiNDNlYWZkMDUtYWNkYS00ZmVjLTljMGQtOTBkZDBkM2RiZWVmIiwiZXhwIjoxNTMwNzQ1ODAyLCJpYXQiOjE1MzA3NDU1MDJ9.gWr6zUc60lUUO0lZQ3p2M98GIa1Wd8sZzLBAidBN1hI1OSk8hTeiLZtQ8HEGaZDICxs_BRMrmILQmpvmNmc6IDCvQPW2mZ_TOr1eKpsVZ6usP3waJ3NLFMao86zW8nc9EIZYLbTr_V8taU-r6oQryrzHQYKeNIXSY1GPDWGWB62akFkxRQbi6qDXifg9xIN03eqCGKNhI52wa1Qo0ZCF3u4Dt_ZgYWeM9vKWHntRA_MXNsqoLlJvracMUPIIDHY891UmTYIYH7vTJindedLWdTcszr8w46WEeWbBHiNQaP_Q5ipXcgBsu3O5DwQZmXdfQz0womAQ5lmOkTGOSzdTxw ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 115 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:42 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"e2227539-ab00-4fd2-9030-d27601aac456","token_type":"bearer","expires_in":299,"scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 375 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:42 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0C16.1E80.0419.FC4F","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["clientinfo"]} ####################################################### TEST: privateKeyJwtAuthenticationMethodRS512Fail ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "token_endpoint_auth_method": "private_key_jwt", "scope": "clientinfo" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1321 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:42 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!7B07.9706.7350.4815", "client_secret": "e27d22bc-a733-4223-bca4-2f955593c6e8", "registration_access_token": "fa87ef74-c194-4007-bdd5-c94695055120", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!7B07.9706.7350.4815", "client_id_issued_at": 1530745482, "client_secret_expires_at": 1530831882, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "jwks_uri": "https://ce-dev4.gluu.org/oxauth-client/test/resources/jwks.json", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "private_key_jwt", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "clientinfo", "claims": "" } 19:05:03.058 [main] ERROR org.xdi.oxauth.client.TokenRequest - Supplied key (null) is not a RSAPrivateKey instance java.security.InvalidKeyException: Supplied key (null) is not a RSAPrivateKey instance at org.bouncycastle.jcajce.provider.asymmetric.rsa.DigestSignatureSpi.engineInitSign(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at java.security.Signature$Delegate.engineInitSign(Signature.java:1174) ~[?:1.8.0_121] at java.security.Signature.initSign(Signature.java:527) ~[?:1.8.0_121] at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:171) ~[oxauth-model.jar:?] at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) [classes/:?] at org.xdi.oxauth.client.TokenClient.exec(TokenClient.java:265) [classes/:?] at org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodRS512Fail(ClientCredentialsGrantHttpTest.java:1187) [test-classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:108) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeMethod(Invoker.java:661) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:869) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1193) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:126) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109) [testng-6.11.jar:?] at org.testng.TestRunner.privateRun(TestRunner.java:744) [testng-6.11.jar:?] at org.testng.TestRunner.run(TestRunner.java:602) [testng-6.11.jar:?] at org.testng.SuiteRunner.runTest(SuiteRunner.java:380) [testng-6.11.jar:?] at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:375) [testng-6.11.jar:?] at org.testng.SuiteRunner.privateRun(SuiteRunner.java:340) [testng-6.11.jar:?] at org.testng.SuiteRunner.run(SuiteRunner.java:289) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesSequentially(TestNG.java:1301) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesLocally(TestNG.java:1226) [testng-6.11.jar:?] at org.testng.TestNG.runSuites(TestNG.java:1144) [testng-6.11.jar:?] at org.testng.TestNG.run(TestNG.java:1115) [testng-6.11.jar:?] at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:281) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGXmlTestSuite.execute(TestNGXmlTestSuite.java:75) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:121) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121) [surefire-booter-2.19.1.jar:2.19.1] ------------------------------------------------------- REQUEST: ------------------------------------------------------- 19:05:03.176 [main] ERROR org.xdi.oxauth.client.TokenRequest - Supplied key (null) is not a RSAPrivateKey instance java.security.InvalidKeyException: Supplied key (null) is not a RSAPrivateKey instance at org.bouncycastle.jcajce.provider.asymmetric.rsa.DigestSignatureSpi.engineInitSign(Unknown Source) ~[bcprov-jdk15on-1.54.jar:1.54.0] at java.security.Signature$Delegate.engineInitSign(Signature.java:1174) ~[?:1.8.0_121] at java.security.Signature.initSign(Signature.java:527) ~[?:1.8.0_121] at org.xdi.oxauth.model.crypto.OxAuthCryptoProvider.sign(OxAuthCryptoProvider.java:171) ~[oxauth-model.jar:?] at org.xdi.oxauth.client.TokenRequest.getClientAssertion(TokenRequest.java:338) [classes/:?] at org.xdi.oxauth.client.TokenRequest.getQueryString(TokenRequest.java:409) [classes/:?] at org.xdi.oxauth.client.BaseClient.getRequestAsString(BaseClient.java:158) [classes/:?] at org.xdi.oxauth.client.ClientUtils.showClient(ClientUtils.java:25) [classes/:?] at org.xdi.oxauth.BaseTest.showClient(BaseTest.java:766) [test-classes/:?] at org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodRS512Fail(ClientCredentialsGrantHttpTest.java:1189) [test-classes/:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:108) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeMethod(Invoker.java:661) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:869) [testng-6.11.jar:?] at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1193) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:126) [testng-6.11.jar:?] at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109) [testng-6.11.jar:?] at org.testng.TestRunner.privateRun(TestRunner.java:744) [testng-6.11.jar:?] at org.testng.TestRunner.run(TestRunner.java:602) [testng-6.11.jar:?] at org.testng.SuiteRunner.runTest(SuiteRunner.java:380) [testng-6.11.jar:?] at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:375) [testng-6.11.jar:?] at org.testng.SuiteRunner.privateRun(SuiteRunner.java:340) [testng-6.11.jar:?] at org.testng.SuiteRunner.run(SuiteRunner.java:289) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-6.11.jar:?] at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesSequentially(TestNG.java:1301) [testng-6.11.jar:?] at org.testng.TestNG.runSuitesLocally(TestNG.java:1226) [testng-6.11.jar:?] at org.testng.TestNG.runSuites(TestNG.java:1144) [testng-6.11.jar:?] at org.testng.TestNG.run(TestNG.java:1115) [testng-6.11.jar:?] at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:281) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGXmlTestSuite.execute(TestNGXmlTestSuite.java:75) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:121) [surefire-testng-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:290) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:242) [surefire-booter-2.19.1.jar:2.19.1] at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:121) [surefire-booter-2.19.1.jar:2.19.1] POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org grant_type=client_credentials&scope=clientinfo&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzUxMiIsImtpZCI6IlJTNTEyU0lHX0lOVkFMSURfS0VZSUQifQ.eyJpc3MiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE3QjA3Ljk3MDYuNzM1MC40ODE1Iiwic3ViIjoiQCEzOEQ0LjQxMEMuMUQ0My44OTMyITAwMDEhMzdGMi5CNzQ0ITAwMDghN0IwNy45NzA2LjczNTAuNDgxNSIsImF1ZCI6Imh0dHBzOi8vY2UtZGV2NC5nbHV1Lm9yZy9veGF1dGgvcmVzdHYxL3Rva2VuIiwianRpIjoiNzJlMTRmYjItNWUxZi00NTBiLWI3MzItZTBiMTFjNmE0NjM3IiwiZXhwIjoxNTMwNzQ1ODAzLCJpYXQiOjE1MzA3NDU1MDN9. ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 401 Connection: Keep-Alive Content-Length: 586 Content-Type: application/json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:42 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains WWW-Authenticate: Basic realm="oxAuth" X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client","error_description":"Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client."} ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:43 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:43 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: requestClientInfoImplicitFlow ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:43 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2327.330C.F91F.EAC4", "client_secret": "7121126f-e7fd-4d5f-8ed7-b781dd625663", "registration_access_token": "0597dda1-1ce8-4fe5-9783-1385081307b8", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2327.330C.F91F.EAC4", "client_id_issued_at": 1530745483, "client_secret_expires_at": 1530831883, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212327.330C.F91F.EAC4&scope=clientinfo&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=ae8b374b-15d1-44a5-a756-780fc89c346d&nonce=39e628bf-1927-4fd9-b366-9ead909f8684 19:05:03.724 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:0f462c1d-434d-4e84-b958-87f090ba710d ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%212327.330C.F91F.EAC4&scope=clientinfo&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=ae8b374b-15d1-44a5-a756-780fc89c346d&nonce=39e628bf-1927-4fd9-b366-9ead909f8684 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=29a8440d-ff78-459c-9afd-081a51edd902&scope=clientinfo&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEyMzI3LjMzMEMuRjkxRi5FQUM0IiwiZXhwIjoxNTMwNzQ5MDg0LCJpYXQiOjE1MzA3NDU0ODQsIm5vbmNlIjoiMzllNjI4YmYtMTkyNy00ZmQ5LWIzNjYtOWVhZDkwOWY4Njg0IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDg0LCJhdF9oYXNoIjoiNl9aN0ZZUVJyUDVyX0NnTFgtRWZ6USIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IjRUS2FOOEMwYTEtOFJlaEx2a3ZUNy1EN09LLWRpR2tUWXdlMUZuT0JRUUkifQ.J5B1CiEvxa5Vw1Sd6gahazwQLbeuzXa650cyTiOFvTZQhEMy3se33nAchTrJaeFiXPJIYs2zyTTEdtNt1hYqDVzOKzFXJ1IJURHTTxhJqYm6Yt7pgZwNOYkuxdxZGZkxIKZtwLOV6ky_g4cYuvAlmzZtDaitAmUNr0ga7bluggcHEjtU5g-pQgfhZjJbhg9XNbMjSxM0Sl-MAaqjzy2VgZh5eEAYT3rJUzIGT0cj7RV_fdjLXo0LkOxCiirzU4QXfdsUdVE6q2VQ0o2eXXDExL9FHbNBJUMJTwn1k6ufzKIdXZAaPtyRFayDd9Kh0dbOpfnnQ45j8cDvB9mwZ5vKSg&session_id=c38054ff-b1b8-4d6b-9655-62cfdab5ed4a&state=ae8b374b-15d1-44a5-a756-780fc89c346d&token_type=bearer&session_state=0f462c1d-434d-4e84-b958-87f090ba710d&expires_in=299 ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 513 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:44 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!2327.330C.F91F.EAC4","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["permission","uma_protection","clientinfo","email","user_name","sub","org_name","address","openid","test_scope1","work_phone","phone","profile","test"]} ####################################################### TEST: requestClientInfoInvalidRequest ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 400 Connection: close Content-Length: 260 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:45 GMT Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_request","error_description":"The request is missing a required parameter, includes an unsupported parameter or parameter value, repeats the same parameter, uses more than one method for including an access token, or is otherwise malformed."} ####################################################### TEST: requestClientInfoInvalidToken ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 400 Connection: close Content-Length: 203 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:45 GMT Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_token","error_description":"The access token provided is expired, revoked, malformed, or invalid for other reasons. Try to request a new access token and retry the protected resource."} ####################################################### TEST: requestClientInfoPasswordFlow ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "grant_types": ["password"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1299 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:45 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!FD7F.21A2.810D.FD6D", "client_secret": "e51ee011-aa1b-44e7-aba8-86b62b166715", "registration_access_token": "89220ec9-4d91-4a80-8c03-286f8c28cf0b", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!FD7F.21A2.810D.FD6D", "client_id_issued_at": 1530745485, "client_secret_expires_at": 1530831885, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [], "grant_types": ["password"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxRkQ3Ri4yMUEyLjgxMEQuRkQ2RDplNTFlZTAxMS1hYTFiLTQ0ZTctYWJhOC04NmI2MmIxNjY3MTU= grant_type=password&scope=clientinfo&username=test_user&password=test_user_password ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 170 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:45 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"f76f356f-0c4b-4a7d-8ed6-696779069c35","token_type":"bearer","expires_in":299,"refresh_token":"e6008c8a-7a3c-44d5-800c-cb088241759b","scope":"clientinfo"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/clientinfo HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 513 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:45 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"displayName":"oxAuth test app","inum":"@!38D4.410C.1D43.8932!0001!37F2.B744!0008!FD7F.21A2.810D.FD6D","oxAuthAppType":"web","oxAuthIdTokenSignedResponseAlg":"RS256","oxAuthRedirectURI":["https:\/\/client.example.com\/cb2","https:\/\/client.example.com\/cb1","https:\/\/client.example.com\/cb","https:\/\/ce-dev4.gluu.org\/oxauth-rp\/home.htm"],"oxAuthScope":["permission","uma_protection","clientinfo","email","user_name","sub","org_name","address","openid","test_scope1","work_phone","phone","profile","test"]} ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:45 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:45 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: authorizationCodeFlow ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "scope": "openid profile address email phone user_name" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1347 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:45 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5F98.4407.C1E2.225A", "client_secret": "b5cc9a0e-da98-4a6b-a8cb-bd629db74f99", "registration_access_token": "47d24873-fc0c-4bf2-b352-b81f16d043fa", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!5F98.4407.C1E2.225A", "client_id_issued_at": 1530745485, "client_secret_expires_at": 1530831885, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "openid profile address email phone user_name", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%215F98.4407.C1E2.225A&scope=openid+profile+address+email+phone+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=faeaa77b-c524-4525-b118-e5fb4c5198df&nonce=52e220e3-c9a0-4c33-9a85-2f1e3df62290 19:05:05.930 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:5c08b6f7-b188-4258-8271-6041e6282681 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%215F98.4407.C1E2.225A&scope=openid+profile+address+email+phone+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=faeaa77b-c524-4525-b118-e5fb4c5198df&nonce=52e220e3-c9a0-4c33-9a85-2f1e3df62290 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=3be21789-7460-4b0e-8e85-f646fb4a843c&scope=address+phone+openid+user_name+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE1Rjk4LjQ0MDcuQzFFMi4yMjVBIiwiZXhwIjoxNTMwNzQ5MDg2LCJpYXQiOjE1MzA3NDU0ODYsIm5vbmNlIjoiNTJlMjIwZTMtYzlhMC00YzMzLTlhODUtMmYxZTNkZjYyMjkwIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDg2LCJjX2hhc2giOiJJS2piMFdsdWF0ekpiTWJfR3hyUTJRIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoiZzVVTnVpUzRjejl0TFBjRENIUVJZRThlRFJSaHFCbmE3d2lvSWVUTUVmcyJ9.X_rlzzN_3zZLpskN2vrno0V4p2qHNdqXkvtIUPrl_JBej2gSyW9G0uWf7mK-LbRKQHijFBgFM-f-n0Yaa-aoy_mNSJ3Trk4StjX3Chv2qTQPznYtC15IR4h8VjEcxw01taAFJr2NIZ3gQW9AHvjsngP-9W5B4MFVcDLNrUfjlNICWjBsbI6T5RlrD0aZaLBsZPiXV49QivstsZSYStM4LIsqkbW4eUH2lc8pLji99fs-rA4kuJ0Hxus7v1XR4NoGf3E0wwkJhHX4lVy9syAFFmzLDlGZDKDUVZQ9tEjvaEG_DSctRj1qHIPWzMn-Ubxq3F8lCKBePsqqFE8a2rPp2g&session_id=66e23841-57eb-46f4-96e9-a5a0aad9e230&state=faeaa77b-c524-4525-b118-e5fb4c5198df&session_state=5c08b6f7-b188-4258-8271-6041e6282681 ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxNUY5OC40NDA3LkMxRTIuMjI1QTpiNWNjOWEwZS1kYTk4LTRhNmItYThjYi1iZDYyOWRiNzRmOTk= grant_type=authorization_code&code=3be21789-7460-4b0e-8e85-f646fb4a843c&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:47 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"7fe663db-84cb-4dbd-9ec3-b5fe8bd9ec22","token_type":"bearer","expires_in":299,"refresh_token":"0641d590-d91e-49d5-a942-9eb12eb741b2","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE1Rjk4LjQ0MDcuQzFFMi4yMjVBIiwiZXhwIjoxNTMwNzQ5MDg3LCJpYXQiOjE1MzA3NDU0ODcsIm5vbmNlIjoiNTJlMjIwZTMtYzlhMC00YzMzLTlhODUtMmYxZTNkZjYyMjkwIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDg2LCJhdF9oYXNoIjoicWgtZGp5cnhhRzMtNVctRU05R2lLQSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6Imc1VU51aVM0Y3o5dExQY0RDSFFSWUU4ZURSUmhxQm5hN3dpb0llVE1FZnMifQ.B36mYXEZQhpmuoYoiejRaIKYrSVJWsSdsRkvrYFmXTxR-TqdO82So60GRCsKa_NCchaDrNhgCofBhSxvo4qkXWbTuJVq2nxBvmUQVAKDE4kVyyzgXomYqC-ilMDmyFLEBjBtk5WQdxIdMK04x0VEisgtqufv44gKlMz2A9yqZm0g16H_iVciIMBW77npTHmjKbiWYV1mPBi138Z1uMJj4d1fnjb2q6oTqerZVKEAgAynL6k3HsW1lGzANqooEuqKSAr3ausDuMWgJ5D21s1pF_40phZILcLy3gFCh0KwnT6cWyCoXF1JsSwLo4uACEgAh1ZzfwEFXpmZD8F5_3yaMQ"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxNUY5OC40NDA3LkMxRTIuMjI1QTpiNWNjOWEwZS1kYTk4LTRhNmItYThjYi1iZDYyOWRiNzRmOTk= grant_type=refresh_token&scope=address+phone+openid+user_name+profile+email&refresh_token=0641d590-d91e-49d5-a942-9eb12eb741b2 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 204 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:47 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"6eeabdd1-5112-472d-af05-1b91c3825287","token_type":"bearer","expires_in":299,"refresh_token":"c23a962c-7164-49ac-a270-2024f711f773","scope":"address phone openid user_name profile email"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/userinfo HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 6eeabdd1-5112-472d-af05-1b91c3825287 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 695 Content-Type: application/json;charset=utf-8 Date: Wed, 04 Jul 2018 23:04:47 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"address":{"street_address":"621 East 6th Street","country":"US","locality":"Austin","region":"Texas"},"sub":"g5UNuiS4cz9tLPcDCHQRYE8eDRRhqBna7wioIeTMEfs","phone_number_verified":true,"phone_number":"(512) 516-2413","user_name":"test_user","website":"http://www.gluu.org","zoneinfo":"America/Chicago","birthdate":"19830106010101.253Z","gender":"Male","profile":"http://www.mywebsite.com/profile","preferred_username":"user","given_name":"Test","middle_name":"User","locale":"en-US","picture":"http://www.gluu.org/wp-content/uploads/2012/04/mike3.png","updated_at":1526659613066,"name":"oxAuth Test User","nickname":"user","family_name":"User","email_verified":true,"email":"test_user@test.org"} ####################################################### TEST: testEncode1 ####################################################### ####################################################### TEST: testEncode2 ####################################################### ####################################################### TEST: testEncode3 ####################################################### ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:47 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:47 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: requestClientAssociate ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1354 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:47 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!49E1.A124.1FAE.2DC7", "client_secret": "5c3715fa-012b-4eaf-b848-fed9084f4abd", "registration_access_token": "ded5b71f-71c8-4cd7-ac87-6f5464cf310f", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!49E1.A124.1FAE.2DC7", "client_id_issued_at": 1530745487, "client_secret_expires_at": 1530831887, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": ["code"], "grant_types": [ "refresh_token", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } ####################################################### TEST: requestClientAssociateInBlackList ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": ["https://www.attacker.com"], "application_type": "web", "client_name": "oxAuth test app" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 400 Cache-Control: no-store Connection: close Content-Length: 101 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:47 GMT Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_redirect_uri","error_description":"Value of one or more redirect_uris is invalid."} ####################################################### TEST: testUrlPatterList ####################################################### ####################################################### TEST: requestClientUpdate ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 400 Connection: close Content-Length: 282 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:47 GMT Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_client_metadata","error_description":"The value of one of the Client Metadata fields is invalid and the server has rejected this request. Note that an Authorization Server MAY choose to substitute a valid value for any requested parameter of a Client's Metadata."} ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:47 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:47 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:47 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } ####################################################### TEST: OpenID Connect Configuration ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:47 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:47 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:47 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: enableClientToRestrictJavascriptOrigin ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "code", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "authorized_origins": ["https://ce.gluu.info:8443"], "scope": "openid profile address email phone user_name" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1404 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:48 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!E72A.2D93.59A9.BD92", "client_secret": "dd98d233-7f8a-4f02-b257-07e468a1d31f", "registration_access_token": "4219c447-1fc5-48e2-ae89-f65f64f97d8d", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!E72A.2D93.59A9.BD92", "client_id_issued_at": 1530745488, "client_secret_expires_at": 1530831888, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "code", "token" ], "grant_types": [ "refresh_token", "implicit", "authorization_code" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "authorized_origins": ["https://ce.gluu.info:8443"], "frontchannel_logout_session_required": false, "scope": "openid profile address email phone user_name", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21E72A.2D93.59A9.BD92&scope=openid+profile+address+email+phone+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=caa11621-2c3e-41b3-b5ff-f1db4d5a7b9b&nonce=86b74588-10c8-4cf2-9d03-b924fab8f1ab 19:05:08.458 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:99fdec6c-88b1-4df4-9c2a-df57b668a10c ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=code+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21E72A.2D93.59A9.BD92&scope=openid+profile+address+email+phone+user_name&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=caa11621-2c3e-41b3-b5ff-f1db4d5a7b9b&nonce=86b74588-10c8-4cf2-9d03-b924fab8f1ab ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#code=f707f39d-4b05-4156-87ab-52f16c2b82fc&scope=address+phone+openid+user_name+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFFNzJBLjJEOTMuNTlBOS5CRDkyIiwiZXhwIjoxNTMwNzQ5MDg5LCJpYXQiOjE1MzA3NDU0ODksIm5vbmNlIjoiODZiNzQ1ODgtMTBjOC00Y2YyLTlkMDMtYjkyNGZhYjhmMWFiIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDg5LCJjX2hhc2giOiI5bENlRmVUQjR0UENJZ2c5Z1FIQlhnIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIiwic3ViIjoibUZETUJVSjlrZVV5X2hiZ2pzb1ctTVN0cjdYRDBzdWJFX2VPVE5qZnc0RSJ9.jY11HkKI6TERcZaGwv4d8vVbjv_Y46I79zqmNbmKwlJcJT3mJ4WzaNAw7SG5_1K1PLdGPog2bZWhTGkHmHodjaNe8rVilIUWKe8sdwE6iO6uUbRmZp04OqFv0Fo4uPwlVk0lNNOzc4oCFdz3Qw2FLClIGf2rSTnt1o10thAJHB2Gj3uq4ZZVslDiKKkbZlu9xIrJYnhjIxGxMhbqIPwjrqv18Epb8uXmTDbK0f9aJmk1cI77QuDw_tcCbNFvEIc6aKmuJQRK1B-azp_pqSVxYv5y4O2gW6iutU3x0bLYPbhzddr1UoLFujnS07R3GY1GozjRubk0qBaPdDQ52JiG8w&session_id=2898759e-bd3c-4397-927a-7f1bd8eb0b4c&state=caa11621-2c3e-41b3-b5ff-f1db4d5a7b9b&session_state=99fdec6c-88b1-4df4-9c2a-df57b668a10c ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxRTcyQS4yRDkzLjU5QTkuQkQ5MjpkZDk4ZDIzMy03ZjhhLTRmMDItYjI1Ny0wN2U0NjhhMWQzMWY= grant_type=authorization_code&code=f707f39d-4b05-4156-87ab-52f16c2b82fc&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1057 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:49 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"6c002fc9-b2e1-4ddd-8196-351a441a883b","token_type":"bearer","expires_in":299,"refresh_token":"83999069-aae3-4569-b1c1-98f691cca182","id_token":"eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFFNzJBLjJEOTMuNTlBOS5CRDkyIiwiZXhwIjoxNTMwNzQ5MDg5LCJpYXQiOjE1MzA3NDU0ODksIm5vbmNlIjoiODZiNzQ1ODgtMTBjOC00Y2YyLTlkMDMtYjkyNGZhYjhmMWFiIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDg5LCJhdF9oYXNoIjoiVFJfNWlJQjgyMWYwZEVMd0g2Q3R5ZyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6Im1GRE1CVUo5a2VVeV9oYmdqc29XLU1TdHI3WEQwc3ViRV9lT1ROamZ3NEUifQ.fyKS-_WUGmay1Fe4atQSNA0nsUnX1SCU2fD1rIbV7X5POyabwh5IHu2fPvtBxpWJQ6biFe5MbA04a4DgjCOxMw3gvdchQVfDYt3eWTE8OYNlgE9_LL6G6ASHE8s_dPHIM8SduYZGdJWKBflT6F5WvUC9I_RugwuBYexxBihKcmtGXV5yX3pC8pjGpwiGz9cVBrVWgyQFN9bxrDW0oa3b8l0D1FvzeRHVPylMSo3ZcL5L0IomFunaOQN4_LC-j_Qcs-fQ-DBCjgTbf3FlaczUvAdMFRj5lDz77ki3xeFDSQgipyqQ4iCRDdVTxovlTmV1oX6mAKnnfxA7QTQu179u0Q"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/token HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: ce-dev4.gluu.org Authorization: Basic JTQwJTIxMzhENC40MTBDLjFENDMuODkzMiUyMTAwMDElMjEzN0YyLkI3NDQlMjEwMDA4JTIxRTcyQS4yRDkzLjU5QTkuQkQ5MjpkZDk4ZDIzMy03ZjhhLTRmMDItYjI1Ny0wN2U0NjhhMWQzMWY= grant_type=refresh_token&scope=address+phone+openid+user_name+profile+email&refresh_token=83999069-aae3-4569-b1c1-98f691cca182 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 204 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:49 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"access_token":"2b8f424d-2f35-4f05-9fe7-ddfc46b7af7f","token_type":"bearer","expires_in":299,"refresh_token":"99bf1090-0182-4a6a-8557-e6b67b9541d4","scope":"address phone openid user_name profile email"} ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/userinfo HTTP/1.1 Host: ce-dev4.gluu.org Authorization: Bearer 2b8f424d-2f35-4f05-9fe7-ddfc46b7af7f ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store, private Connection: Keep-Alive Content-Length: 695 Content-Type: application/json;charset=utf-8 Date: Wed, 04 Jul 2018 23:04:49 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"address":{"street_address":"621 East 6th Street","country":"US","locality":"Austin","region":"Texas"},"sub":"mFDMBUJ9keUy_hbgjsoW-MStr7XD0subE_eOTNjfw4E","phone_number_verified":true,"phone_number":"(512) 516-2413","user_name":"test_user","website":"http://www.gluu.org","zoneinfo":"America/Chicago","birthdate":"19830106010101.253Z","gender":"Male","profile":"http://www.mywebsite.com/profile","preferred_username":"user","given_name":"Test","middle_name":"User","locale":"en-US","picture":"http://www.gluu.org/wp-content/uploads/2012/04/mike3.png","updated_at":1526659613066,"name":"oxAuth Test User","nickname":"user","family_name":"User","email_verified":true,"email":"test_user@test.org"} ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:04:49 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:49 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: encodeClaimsInStateParameterAlgA128KWEncA128GCM ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:49 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0E9B.B15A.36E6.9047", "client_secret": "cb277214-c22e-496a-9f01-deb7cc9d99aa", "registration_access_token": "e59614e8-040c-4979-b221-245dbf38d25f", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0E9B.B15A.36E6.9047", "client_id_issued_at": 1530745489, "client_secret_expires_at": 1530831889, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210E9B.B15A.36E6.9047&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.cwoLgB2PPi-eKe3XDTmabajqQyhiQKZZ.zGuFtff6JPhhUD03.gVejA_ga8fcHmyP8K7xwI_ydFH9P0b3P9jlUHt5cdtaPxDEezlQwlvzLdrh5CkzXXGH9lYknC8ilEpppv5ID2We38AgG2vQg97ZqVjdtOSRDruPhZLcmAw_dJY_Lh7A5R4BfOlw2KvqVe5ScatqyRQ0hJ3W5buL1E1AA6IV4aqxcjmvNzQPeB29FzAoSDq2x_yyzzfal7esPsS1p-OIEivt_BdzIdqNXmnldGXYx9rxL9mW6Tw6sgHHxPAo20j3ux-ICLTJnM3KUJo1JlX0JRIA3ABfo3qeW-C7iC5mEmNcuqR90Z0gbn5TeaCgSqXJMh4H3be67UA.ipTiQs9CiXH7ymtzL1x4hw&nonce=f4395253-c23e-4c46-bbd3-b165c87a183d 19:05:10.219 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:0f9091ad-3ef0-4e3d-93b3-e95f8d124f69 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210E9B.B15A.36E6.9047&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.cwoLgB2PPi-eKe3XDTmabajqQyhiQKZZ.zGuFtff6JPhhUD03.gVejA_ga8fcHmyP8K7xwI_ydFH9P0b3P9jlUHt5cdtaPxDEezlQwlvzLdrh5CkzXXGH9lYknC8ilEpppv5ID2We38AgG2vQg97ZqVjdtOSRDruPhZLcmAw_dJY_Lh7A5R4BfOlw2KvqVe5ScatqyRQ0hJ3W5buL1E1AA6IV4aqxcjmvNzQPeB29FzAoSDq2x_yyzzfal7esPsS1p-OIEivt_BdzIdqNXmnldGXYx9rxL9mW6Tw6sgHHxPAo20j3ux-ICLTJnM3KUJo1JlX0JRIA3ABfo3qeW-C7iC5mEmNcuqR90Z0gbn5TeaCgSqXJMh4H3be67UA.ipTiQs9CiXH7ymtzL1x4hw&nonce=f4395253-c23e-4c46-bbd3-b165c87a183d ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=d18da621-8c6f-45bf-9c30-18fc844be291&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwRTlCLkIxNUEuMzZFNi45MDQ3IiwiZXhwIjoxNTMwNzQ5MDkxLCJpYXQiOjE1MzA3NDU0OTEsIm5vbmNlIjoiZjQzOTUyNTMtYzIzZS00YzQ2LWJiZDMtYjE2NWM4N2ExODNkIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDkxLCJhdF9oYXNoIjoiS2xrVkp2NS1uNUZ1M2FvV2lEbjNQQSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IlFiUDA3b21hNVpYYmVZVFVPZE5IbXNSMlZkN3NrcVRBR2RtUk1yRVVMRjAifQ.Dj_yHbLyJRuqMPimOJqu0JwwClVzVQyUwljp8PgYzRGgx2vorZtcLIUZ2lS3NucFIyOF_jzGaTVt0tG-FLSZzUP50u1DfF4gqTABcus-8X3dJnrM8bfFxk9rpkMqO1gEaBElhNmq8fCqmAb-I6mPfAyNH7sGPNz2KN9z7JRieZ8ZjZv1SJo2oBBaa_snhfLiCA4Yq1nqfj4wbdafhNzlxiZ0vmMzcaRvod8i91S6CKqJWrOmg5uEPZC9rNFeFfaUB3t24uf1TN5Xg-toCB6k1XwgseTMLNrJ6QNCJHSxu0yMlrikGx_9yq41AjrE7khXdmByFtWFoz-fGjciJjAwow&session_id=111af1d3-a23c-4f8b-972b-d55b5e02757e&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.cwoLgB2PPi-eKe3XDTmabajqQyhiQKZZ.zGuFtff6JPhhUD03.gVejA_ga8fcHmyP8K7xwI_ydFH9P0b3P9jlUHt5cdtaPxDEezlQwlvzLdrh5CkzXXGH9lYknC8ilEpppv5ID2We38AgG2vQg97ZqVjdtOSRDruPhZLcmAw_dJY_Lh7A5R4BfOlw2KvqVe5ScatqyRQ0hJ3W5buL1E1AA6IV4aqxcjmvNzQPeB29FzAoSDq2x_yyzzfal7esPsS1p-OIEivt_BdzIdqNXmnldGXYx9rxL9mW6Tw6sgHHxPAo20j3ux-ICLTJnM3KUJo1JlX0JRIA3ABfo3qeW-C7iC5mEmNcuqR90Z0gbn5TeaCgSqXJMh4H3be67UA.ipTiQs9CiXH7ymtzL1x4hw&token_type=bearer&session_state=0f9091ad-3ef0-4e3d-93b3-e95f8d124f69&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterAlgA256KWEncA256GCM ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:51 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!DDE8.6AA8.1EC5.3BD4", "client_secret": "34364e94-efb1-4b18-a4cd-fb9bf2ff8383", "registration_access_token": "505010e1-f9b4-4ea6-8561-58ddf56128e0", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!DDE8.6AA8.1EC5.3BD4", "client_id_issued_at": 1530745491, "client_secret_expires_at": 1530831891, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21DDE8.6AA8.1EC5.3BD4&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMjU2R0NNIn0.9W-nUlzzTelApt9U9GaSdp2Crl6y2r4RyvpG49GIVOD6RgdCMOezyw.lfv28P3IrtRJZ8ft.AE17cXKhotfbqjlDe-2GHJTztT2jAAfT5DE62ncpJ7fJ3nAsHr5wqCkCMtwTDxFpLQOmioYnP7osNDITqM_fLe2DqpkScwtMFAt5XclaKBXOgszHe3RyD0Gv57P7M3rtW1RdHus93aHroPO0VpIT2aL_mC8W6pPFC5Rj_KBye1fvSvfaFWWFXZW-wiB3WX88oEh7HLFEdG1H9zkY-VI7IUQseK5SpBkmsrR8_LRpZO_uJ0GPuAvzYVYFT8ZuXKlBEyE_kr3a_l0pJROxVR2wGMd-5QrewSNNpagiUqV2fE_aZez0uwP-z8dCYxO1UFH3lllkrHe0Cg.K3mMQMFfloDvgxv081Q4mw&nonce=8980bbcf-fc6c-4ff0-bf52-37eaf7742019 19:05:11.878 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:4e5b36e3-137e-4537-8662-e5f5f0944132 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21DDE8.6AA8.1EC5.3BD4&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMjU2R0NNIn0.9W-nUlzzTelApt9U9GaSdp2Crl6y2r4RyvpG49GIVOD6RgdCMOezyw.lfv28P3IrtRJZ8ft.AE17cXKhotfbqjlDe-2GHJTztT2jAAfT5DE62ncpJ7fJ3nAsHr5wqCkCMtwTDxFpLQOmioYnP7osNDITqM_fLe2DqpkScwtMFAt5XclaKBXOgszHe3RyD0Gv57P7M3rtW1RdHus93aHroPO0VpIT2aL_mC8W6pPFC5Rj_KBye1fvSvfaFWWFXZW-wiB3WX88oEh7HLFEdG1H9zkY-VI7IUQseK5SpBkmsrR8_LRpZO_uJ0GPuAvzYVYFT8ZuXKlBEyE_kr3a_l0pJROxVR2wGMd-5QrewSNNpagiUqV2fE_aZez0uwP-z8dCYxO1UFH3lllkrHe0Cg.K3mMQMFfloDvgxv081Q4mw&nonce=8980bbcf-fc6c-4ff0-bf52-37eaf7742019 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=3a805ca1-0f90-4426-9c6a-71cae94b21ba&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFEREU4LjZBQTguMUVDNS4zQkQ0IiwiZXhwIjoxNTMwNzQ5MDkyLCJpYXQiOjE1MzA3NDU0OTIsIm5vbmNlIjoiODk4MGJiY2YtZmM2Yy00ZmYwLWJmNTItMzdlYWY3NzQyMDE5IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDkyLCJhdF9oYXNoIjoiVVNTVWtwUllwRmNlQU5JM21CRXlLZyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IjV0eUxmTldKVTlPM0pMd2N0NnlzOTFPaW9VRHhsNnZ0VjFvclhRRk1KNjAifQ.kTfSaFTCWul5I9MiKVGMc9x0NHHb3vy5cXZPEin-nQAajkFZgUDy8Gp3ZehwHqy_SNYAXOLzSIGs7_9ie47uYOmHRdl7-HpTQY4gpDqoncuLlioYV4Nu7GL1E_IUPwYnL56axWNmM46oGnSlLgBejXwKI0cClT2RMhS_TfZbBRMU93TEM0Ov20Hz5QLZcebAlRujqCKF5L3EmoHGvKU7-c-FvoPseweLMjNcK2cUU7HRpmyR3gxs1CPsRPbvBsVO2FdjWVD0xEJW6JwwzcHLj3I5gaMKYLujIn6yUVaemkZz9ZVc6gz3OVjHGVZGnHSVumQsAquV4Ep4p9-LuNf3Kg&session_id=89c632e9-d5cb-4fe8-be7e-a1b4cd454c61&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMjU2R0NNIn0.9W-nUlzzTelApt9U9GaSdp2Crl6y2r4RyvpG49GIVOD6RgdCMOezyw.lfv28P3IrtRJZ8ft.AE17cXKhotfbqjlDe-2GHJTztT2jAAfT5DE62ncpJ7fJ3nAsHr5wqCkCMtwTDxFpLQOmioYnP7osNDITqM_fLe2DqpkScwtMFAt5XclaKBXOgszHe3RyD0Gv57P7M3rtW1RdHus93aHroPO0VpIT2aL_mC8W6pPFC5Rj_KBye1fvSvfaFWWFXZW-wiB3WX88oEh7HLFEdG1H9zkY-VI7IUQseK5SpBkmsrR8_LRpZO_uJ0GPuAvzYVYFT8ZuXKlBEyE_kr3a_l0pJROxVR2wGMd-5QrewSNNpagiUqV2fE_aZez0uwP-z8dCYxO1UFH3lllkrHe0Cg.K3mMQMFfloDvgxv081Q4mw&token_type=bearer&session_state=4e5b36e3-137e-4537-8662-e5f5f0944132&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterAlgRSA15EncA128CBCPLUSHS256 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:53 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0979.0047.5D31.8E59", "client_secret": "b877dccd-9b0a-4be1-81b6-0e0d8536a226", "registration_access_token": "d94356a1-ca9c-4396-9d14-6bfdeca98a65", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0979.0047.5D31.8E59", "client_id_issued_at": 1530745493, "client_secret_expires_at": 1530831893, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210979.0047.5D31.8E59&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSU0ExXzUiLCJlbmMiOiJBMTI4Q0JDK0hTMjU2Iiwia2lkIjoiNDhiZmE4YTQtYzhhNy00YTA5LWFlOTgtYmYzMjVkNzQ5MTE5In0.UGZt9yLk9cRM9h8AUScl-NS_lHDM18QvoIpVig-bGsmojR29TRwreo82iJbP9rsW-aTuPIcH13ZTWB8JP-2YQuU6Rfg04KvoDPDbGKnoSsb0q-Ro6bvpX6opO1EhuaklOg1l80LeophQmdt_oLxzpJa1EOBpNABzvi9hZ7BoiH4fVBBKFpK-znFi-4qwf8fqhR9yL3tJVddJjFXnWJ-urUhtq25RHtHRqUp3Ekrw1xziB9eek4Q0ipiOMUpg6YagviF5P9nxPTRhxRMCrDdWJaasTOU6pJ5PCssBVMLQ4kb5BW2-cYkB8F_ZhemYrHEt7FApdRrGQ2jKmvQfYvS4dA.WSnQn7fMFkvJgTT35-MdNQ.M66SyVUF1bJWExRXMVF2oOHmnUaK6SV4unkc0dWxIiDj7WR4I0NUFHDW_sXOM1_NTukHd6BUnUjW5Fpau-WgNUiLhTfjCNp01m21QwyGg0TvYAlRRwo5vCluYqK3GjX4OKgC3tK-ID8HPXdK78KrV-0mfhfOR2t1WJQUEqgNAnfXLIKHPB9f2X-EWPXgL5s-q2rJcm8g14XGiHW-YvTTX6jKEmFl8TXjbTWKXEon-IhYzupkoDILJvwCU1X8gRCXAzvPmrOCfFfnANiRJ0ZX8s8TYgNwPxhNPUVJ24AVYmJa6yYYboxF76qrnsoBa2t4UKxp04NDGHA6WaxlChcgZ0_eLpQO6jNGx4jK13zoVxf9xln8fSq7BrM7izDlwgu5PDbBOCUEyTFLL5u4LZXMkqwrJeMjZ4VmXf_j4u_Od6I.WuoC3rYChhJz-vC3p-89CHxdXZYPtrtY4pQbNhJSYBQ&nonce=cb28660d-fee1-4845-ab91-156e4f35ec09 19:05:13.592 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:b35d1e1d-887a-4547-a90c-750a981b24f7 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210979.0047.5D31.8E59&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSU0ExXzUiLCJlbmMiOiJBMTI4Q0JDK0hTMjU2Iiwia2lkIjoiNDhiZmE4YTQtYzhhNy00YTA5LWFlOTgtYmYzMjVkNzQ5MTE5In0.UGZt9yLk9cRM9h8AUScl-NS_lHDM18QvoIpVig-bGsmojR29TRwreo82iJbP9rsW-aTuPIcH13ZTWB8JP-2YQuU6Rfg04KvoDPDbGKnoSsb0q-Ro6bvpX6opO1EhuaklOg1l80LeophQmdt_oLxzpJa1EOBpNABzvi9hZ7BoiH4fVBBKFpK-znFi-4qwf8fqhR9yL3tJVddJjFXnWJ-urUhtq25RHtHRqUp3Ekrw1xziB9eek4Q0ipiOMUpg6YagviF5P9nxPTRhxRMCrDdWJaasTOU6pJ5PCssBVMLQ4kb5BW2-cYkB8F_ZhemYrHEt7FApdRrGQ2jKmvQfYvS4dA.WSnQn7fMFkvJgTT35-MdNQ.M66SyVUF1bJWExRXMVF2oOHmnUaK6SV4unkc0dWxIiDj7WR4I0NUFHDW_sXOM1_NTukHd6BUnUjW5Fpau-WgNUiLhTfjCNp01m21QwyGg0TvYAlRRwo5vCluYqK3GjX4OKgC3tK-ID8HPXdK78KrV-0mfhfOR2t1WJQUEqgNAnfXLIKHPB9f2X-EWPXgL5s-q2rJcm8g14XGiHW-YvTTX6jKEmFl8TXjbTWKXEon-IhYzupkoDILJvwCU1X8gRCXAzvPmrOCfFfnANiRJ0ZX8s8TYgNwPxhNPUVJ24AVYmJa6yYYboxF76qrnsoBa2t4UKxp04NDGHA6WaxlChcgZ0_eLpQO6jNGx4jK13zoVxf9xln8fSq7BrM7izDlwgu5PDbBOCUEyTFLL5u4LZXMkqwrJeMjZ4VmXf_j4u_Od6I.WuoC3rYChhJz-vC3p-89CHxdXZYPtrtY4pQbNhJSYBQ&nonce=cb28660d-fee1-4845-ab91-156e4f35ec09 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=fa6ff862-c2c3-453f-802e-7c9f4ffe20fc&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwOTc5LjAwNDcuNUQzMS44RTU5IiwiZXhwIjoxNTMwNzQ5MDk0LCJpYXQiOjE1MzA3NDU0OTQsIm5vbmNlIjoiY2IyODY2MGQtZmVlMS00ODQ1LWFiOTEtMTU2ZTRmMzVlYzA5IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDk0LCJhdF9oYXNoIjoiOGtFQ25kM2xDMWhWZ2Q2U3Uza1l5USIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IlJ5dndxZzJFb3EySVdMVDEycG9UTHFJb0FzdjFSQVB5MDREWmlKYzdwMkkifQ.FoPi6fDInY9rqNWICijp0IlXywsJkC6o3wVc5YshZXrLGbbTjQghMyegyl1RMG38OaRbt9ddPKhRmXxz7cY-qgn6yhW9ud3kJmYF647oSVNeQlG5f8HfHp-26BHaZGWBAQ9tW_OjzJM3tJIGgsWueNyYAmjLwRydzPJkAVm-XyGYmLKOq39MWSACs9ZkB_YuZp4M6qI9CIFydXq96H5lMoUffPWTSpJ3v-8Ivf_2ETalLslMGh3FpQIyctGDuMY7Qj7YB4Tt4cpgYAgHIMrbEMsvakUwjiE1SwTNxF64g_EtW4UpW4VX7TNf3yZ6BtOraw7jkKyD_y5G1jtqptBAdQ&session_id=4a6d50e4-33ae-4110-a78f-e1d4aa214d8e&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSU0ExXzUiLCJlbmMiOiJBMTI4Q0JDK0hTMjU2Iiwia2lkIjoiNDhiZmE4YTQtYzhhNy00YTA5LWFlOTgtYmYzMjVkNzQ5MTE5In0.UGZt9yLk9cRM9h8AUScl-NS_lHDM18QvoIpVig-bGsmojR29TRwreo82iJbP9rsW-aTuPIcH13ZTWB8JP-2YQuU6Rfg04KvoDPDbGKnoSsb0q-Ro6bvpX6opO1EhuaklOg1l80LeophQmdt_oLxzpJa1EOBpNABzvi9hZ7BoiH4fVBBKFpK-znFi-4qwf8fqhR9yL3tJVddJjFXnWJ-urUhtq25RHtHRqUp3Ekrw1xziB9eek4Q0ipiOMUpg6YagviF5P9nxPTRhxRMCrDdWJaasTOU6pJ5PCssBVMLQ4kb5BW2-cYkB8F_ZhemYrHEt7FApdRrGQ2jKmvQfYvS4dA.WSnQn7fMFkvJgTT35-MdNQ.M66SyVUF1bJWExRXMVF2oOHmnUaK6SV4unkc0dWxIiDj7WR4I0NUFHDW_sXOM1_NTukHd6BUnUjW5Fpau-WgNUiLhTfjCNp01m21QwyGg0TvYAlRRwo5vCluYqK3GjX4OKgC3tK-ID8HPXdK78KrV-0mfhfOR2t1WJQUEqgNAnfXLIKHPB9f2X-EWPXgL5s-q2rJcm8g14XGiHW-YvTTX6jKEmFl8TXjbTWKXEon-IhYzupkoDILJvwCU1X8gRCXAzvPmrOCfFfnANiRJ0ZX8s8TYgNwPxhNPUVJ24AVYmJa6yYYboxF76qrnsoBa2t4UKxp04NDGHA6WaxlChcgZ0_eLpQO6jNGx4jK13zoVxf9xln8fSq7BrM7izDlwgu5PDbBOCUEyTFLL5u4LZXMkqwrJeMjZ4VmXf_j4u_Od6I.WuoC3rYChhJz-vC3p-89CHxdXZYPtrtY4pQbNhJSYBQ&token_type=bearer&session_state=b35d1e1d-887a-4547-a90c-750a981b24f7&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterAlgRSA15EncA256CBCPLUSHS512 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:54 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EF70.3285.886B.03D8", "client_secret": "280d198e-b4f4-49e6-9a57-2866713c6ddc", "registration_access_token": "b62315ca-538d-4b3b-83c1-0226f060be6a", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!EF70.3285.886B.03D8", "client_id_issued_at": 1530745494, "client_secret_expires_at": 1530831894, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21EF70.3285.886B.03D8&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSU0ExXzUiLCJlbmMiOiJBMjU2Q0JDK0hTNTEyIiwia2lkIjoiNDhiZmE4YTQtYzhhNy00YTA5LWFlOTgtYmYzMjVkNzQ5MTE5In0.Vd0h-0tA-HSeTcEK04mD3UUwVSsMLKYRrNmDYOWsEI1eQJy9aVqdpTYkw38G-0YWcSmGXgsmEeIuSpLhmFWZIyERKz6iMLpJupBGwF3kKsTmTUwgiuGQ01jiSxW4Ll1TE3-zvTG3H4quNUTuhcGduDWGjjrAXg470lkZ6gxDTodqiGPhPSkkvMUkOLwUKEzWUBl2hY9dAGe-Ndok9JHIv8LF3wFgyh6vbXhaX897C-tlgY6-hN7hxMNGJJgfGWB6Up703iOZA_wwRuZ_XPqw4yCQ2iLovNcP-BLg6MfSCeDiKvx61vvFE8MT7O6WoPleKnxeoxA5-vd-8iyYoPpMbQ.mS1w4vuWRj21fGCUsJ8DzA.LQRSqoGt65jYcdfVBTFUuIMKyVxtpT23FOQAVhLDxSO2C9bc_upCVsHFKxmmN2eyKBik4caqzgLxWQGyjaHTrCupHXq8AhBs0jJgdzPeyGQP0LJwa9k8oN9wYWBWfaYn7E8gU-iRfXWVbYql8t7YGzgmz7cu1qZ0DTMq0GmQUyXsMl-uCy-PMqsCvdLVnCsuc2j6YgbPZQyzI_cvnc_qsoz8oq9WEd1KI8w5RiC4uWy7HI71wQ3lN0JQvYwnSIFuyrYuHqAV29B2LD36AhbMEjbhgJUFT3F2jGFGNyKqJsVn6XqTf3c2yvdbpCThQ7KV6OYZeKyuE7cJynzQ2tUyB1xKvmqu4LD1r9zKdoC4A3ZD-sASH2v1cymev6rgziq716yb6lUjFmae789KCwGWYAD8hw_nzfUb-08CfGA6XEs.psRhEpHwijAgPC53XK6Pm-Z8AaywI7c4NBotwIdWCd6dYDSfWTVEPIHP-C0Kj8OW94wKGI-Xp6G4ktouKFYdfQ&nonce=939928ec-5948-4919-8a9e-d64958e9a3f1 19:05:15.071 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:8408a173-1ebc-48e0-ae62-3649845a4f11 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21EF70.3285.886B.03D8&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSU0ExXzUiLCJlbmMiOiJBMjU2Q0JDK0hTNTEyIiwia2lkIjoiNDhiZmE4YTQtYzhhNy00YTA5LWFlOTgtYmYzMjVkNzQ5MTE5In0.Vd0h-0tA-HSeTcEK04mD3UUwVSsMLKYRrNmDYOWsEI1eQJy9aVqdpTYkw38G-0YWcSmGXgsmEeIuSpLhmFWZIyERKz6iMLpJupBGwF3kKsTmTUwgiuGQ01jiSxW4Ll1TE3-zvTG3H4quNUTuhcGduDWGjjrAXg470lkZ6gxDTodqiGPhPSkkvMUkOLwUKEzWUBl2hY9dAGe-Ndok9JHIv8LF3wFgyh6vbXhaX897C-tlgY6-hN7hxMNGJJgfGWB6Up703iOZA_wwRuZ_XPqw4yCQ2iLovNcP-BLg6MfSCeDiKvx61vvFE8MT7O6WoPleKnxeoxA5-vd-8iyYoPpMbQ.mS1w4vuWRj21fGCUsJ8DzA.LQRSqoGt65jYcdfVBTFUuIMKyVxtpT23FOQAVhLDxSO2C9bc_upCVsHFKxmmN2eyKBik4caqzgLxWQGyjaHTrCupHXq8AhBs0jJgdzPeyGQP0LJwa9k8oN9wYWBWfaYn7E8gU-iRfXWVbYql8t7YGzgmz7cu1qZ0DTMq0GmQUyXsMl-uCy-PMqsCvdLVnCsuc2j6YgbPZQyzI_cvnc_qsoz8oq9WEd1KI8w5RiC4uWy7HI71wQ3lN0JQvYwnSIFuyrYuHqAV29B2LD36AhbMEjbhgJUFT3F2jGFGNyKqJsVn6XqTf3c2yvdbpCThQ7KV6OYZeKyuE7cJynzQ2tUyB1xKvmqu4LD1r9zKdoC4A3ZD-sASH2v1cymev6rgziq716yb6lUjFmae789KCwGWYAD8hw_nzfUb-08CfGA6XEs.psRhEpHwijAgPC53XK6Pm-Z8AaywI7c4NBotwIdWCd6dYDSfWTVEPIHP-C0Kj8OW94wKGI-Xp6G4ktouKFYdfQ&nonce=939928ec-5948-4919-8a9e-d64958e9a3f1 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=d8bfff47-2dbb-4dcc-aa63-92eafb5a037e&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFFRjcwLjMyODUuODg2Qi4wM0Q4IiwiZXhwIjoxNTMwNzQ5MDk2LCJpYXQiOjE1MzA3NDU0OTYsIm5vbmNlIjoiOTM5OTI4ZWMtNTk0OC00OTE5LThhOWUtZDY0OTU4ZTlhM2YxIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDk1LCJhdF9oYXNoIjoidExtcVFSZ20yemV1dzhscUp2OGZRQSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6ImlFSFdIY3MzMFpBajZ5VHozeUNFbnlReWs5QW8ya1lLTXl4cTlqblFaZHMifQ.hkMoTxiCiEYhxUHD-rnpynx60y5KfYwg0_z2CZrklKoOzYDGtpj50Rb5obiBYrmh-tPNqeLoaOD_NLVqfE7Hp0Az8FYheloxaaujrey15BNxfJxr8bcMj8b1LAn1QhZnNdLqFVwuHYwtW7Yj_kajfTjBM3QyMz3SU75iccjdD7CoVFn9B8eKv5d-BEG4UgZ4XJSpHRn5Iam4A5XsBv1lncrMdPfUOPJhgXpCL-jriOkhMwLUhGvHjhizRKxCgUq97IQDvcDwaKIHi62-zHvetX-rbQgA3qhHu5p0AXfLXlscO2uRN1o_KC9t5uRA15VfhilpyPRrDAo_MnqB2znyMw&session_id=447fd8cc-e893-45d7-a83a-97bf7ca4fe64&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSU0ExXzUiLCJlbmMiOiJBMjU2Q0JDK0hTNTEyIiwia2lkIjoiNDhiZmE4YTQtYzhhNy00YTA5LWFlOTgtYmYzMjVkNzQ5MTE5In0.Vd0h-0tA-HSeTcEK04mD3UUwVSsMLKYRrNmDYOWsEI1eQJy9aVqdpTYkw38G-0YWcSmGXgsmEeIuSpLhmFWZIyERKz6iMLpJupBGwF3kKsTmTUwgiuGQ01jiSxW4Ll1TE3-zvTG3H4quNUTuhcGduDWGjjrAXg470lkZ6gxDTodqiGPhPSkkvMUkOLwUKEzWUBl2hY9dAGe-Ndok9JHIv8LF3wFgyh6vbXhaX897C-tlgY6-hN7hxMNGJJgfGWB6Up703iOZA_wwRuZ_XPqw4yCQ2iLovNcP-BLg6MfSCeDiKvx61vvFE8MT7O6WoPleKnxeoxA5-vd-8iyYoPpMbQ.mS1w4vuWRj21fGCUsJ8DzA.LQRSqoGt65jYcdfVBTFUuIMKyVxtpT23FOQAVhLDxSO2C9bc_upCVsHFKxmmN2eyKBik4caqzgLxWQGyjaHTrCupHXq8AhBs0jJgdzPeyGQP0LJwa9k8oN9wYWBWfaYn7E8gU-iRfXWVbYql8t7YGzgmz7cu1qZ0DTMq0GmQUyXsMl-uCy-PMqsCvdLVnCsuc2j6YgbPZQyzI_cvnc_qsoz8oq9WEd1KI8w5RiC4uWy7HI71wQ3lN0JQvYwnSIFuyrYuHqAV29B2LD36AhbMEjbhgJUFT3F2jGFGNyKqJsVn6XqTf3c2yvdbpCThQ7KV6OYZeKyuE7cJynzQ2tUyB1xKvmqu4LD1r9zKdoC4A3ZD-sASH2v1cymev6rgziq716yb6lUjFmae789KCwGWYAD8hw_nzfUb-08CfGA6XEs.psRhEpHwijAgPC53XK6Pm-Z8AaywI7c4NBotwIdWCd6dYDSfWTVEPIHP-C0Kj8OW94wKGI-Xp6G4ktouKFYdfQ&token_type=bearer&session_state=8408a173-1ebc-48e0-ae62-3649845a4f11&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterAlgRSAOAEPEncA256GCM ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:56 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0DC9.6621.27BC.702B", "client_secret": "6f74529c-1e11-4002-afb6-4e6c0b822919", "registration_access_token": "e1816cc0-f4ce-4580-b3b5-a44e8f35c1bb", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0DC9.6621.27BC.702B", "client_id_issued_at": 1530745496, "client_secret_expires_at": 1530831896, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210DC9.6621.27BC.702B&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00iLCJraWQiOiI0OGJmYThhNC1jOGE3LTRhMDktYWU5OC1iZjMyNWQ3NDkxMTkifQ.DKYhGS58SDpk5zbLhq-55w4EeHs2Zn0hR5Y0jwQ0aOUzIns-vSHPK_SxPIcQZa-JKsT46v1_pkKmBHEV6Z_ASDRzhN382Ugw3zAg0GQeZRLSpNxUhvhOzJyJ2arIZQDCsQg8RtSvX2czCLgBprYjeXuezDTLu1XURT10ZgOK3PF7KCHevxqRXlISV1T6zSwb-3hMBtGOdeH1TIi2RgY_QKdT3cu1_0zOtlc-7L-CNf9GncZ9VOYbdZEDN-OPrOZl1JB5a0xo8V9IvXMS74QmyeDAPhdQcwhfZMCGyzok7KqwiolpldGmtg81gXdIsBSAP1CvOAsVTfKCbXTbQxcr7Q.iriHlp3jux6VCs3u.6ygbYxk509jQu_bu5TySSTyu1j2pRsOFywJ-EzLh5T42_j0PVAAphT9ppxUR2RLku1yDbiVCG-tvRDGFIjGg3jIGDCz2xLpPXLRDE0mRg1UrhdrqxifqTU71IUI5B53kbu7ySMZ78ckavHp5AQdZVDmj4jbv-MjlGiqY71tFxdhP98ZHDFP2uM01VEIX8V3up-HOgSnJQ0j7gj7a-S-Mhyb8vibkIM1EZ-XOt34c2W2qefSUdk2-YnYbQgBbbRMhn1GIr21gYfGqmSaBqLcGOC1r31M1rS2HHu5lrPjU8k714GH9J9hPPiTsWIScZSmbu9W4hi4LS-ZFX1JICygMyE4qxUmYZa9tnT1f-YhbuTSY3Q4hM19umMCwXsHyk_vDhj6sJ9tCyqiLfLU-MHNdMW6xZg.85BdF6Z8jJUT89-9a2fhHA&nonce=c6dbb9fa-8928-412d-b766-1881e15cdeca 19:05:16.663 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:17b69f4f-7d00-436b-a57e-f9064cfecc50 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210DC9.6621.27BC.702B&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00iLCJraWQiOiI0OGJmYThhNC1jOGE3LTRhMDktYWU5OC1iZjMyNWQ3NDkxMTkifQ.DKYhGS58SDpk5zbLhq-55w4EeHs2Zn0hR5Y0jwQ0aOUzIns-vSHPK_SxPIcQZa-JKsT46v1_pkKmBHEV6Z_ASDRzhN382Ugw3zAg0GQeZRLSpNxUhvhOzJyJ2arIZQDCsQg8RtSvX2czCLgBprYjeXuezDTLu1XURT10ZgOK3PF7KCHevxqRXlISV1T6zSwb-3hMBtGOdeH1TIi2RgY_QKdT3cu1_0zOtlc-7L-CNf9GncZ9VOYbdZEDN-OPrOZl1JB5a0xo8V9IvXMS74QmyeDAPhdQcwhfZMCGyzok7KqwiolpldGmtg81gXdIsBSAP1CvOAsVTfKCbXTbQxcr7Q.iriHlp3jux6VCs3u.6ygbYxk509jQu_bu5TySSTyu1j2pRsOFywJ-EzLh5T42_j0PVAAphT9ppxUR2RLku1yDbiVCG-tvRDGFIjGg3jIGDCz2xLpPXLRDE0mRg1UrhdrqxifqTU71IUI5B53kbu7ySMZ78ckavHp5AQdZVDmj4jbv-MjlGiqY71tFxdhP98ZHDFP2uM01VEIX8V3up-HOgSnJQ0j7gj7a-S-Mhyb8vibkIM1EZ-XOt34c2W2qefSUdk2-YnYbQgBbbRMhn1GIr21gYfGqmSaBqLcGOC1r31M1rS2HHu5lrPjU8k714GH9J9hPPiTsWIScZSmbu9W4hi4LS-ZFX1JICygMyE4qxUmYZa9tnT1f-YhbuTSY3Q4hM19umMCwXsHyk_vDhj6sJ9tCyqiLfLU-MHNdMW6xZg.85BdF6Z8jJUT89-9a2fhHA&nonce=c6dbb9fa-8928-412d-b766-1881e15cdeca ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=1dcb9837-7253-406f-929f-99fed503ed31&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwREM5LjY2MjEuMjdCQy43MDJCIiwiZXhwIjoxNTMwNzQ5MDk3LCJpYXQiOjE1MzA3NDU0OTcsIm5vbmNlIjoiYzZkYmI5ZmEtODkyOC00MTJkLWI3NjYtMTg4MWUxNWNkZWNhIiwiYXV0aF90aW1lIjoxNTMwNzQ1NDk3LCJhdF9oYXNoIjoiNW5TOEtTU3lwZnJNVWZrV3hLRWM5dyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6ImE3YXJQaWZEMTBOWnNrUGJyeG1HS0plMU9icEtQRmtGTEJQWGdhSHF1VmcifQ.cjc5DEFr_33olF8i4MUys0krl8y-z4ulGNr6miWXCsRgqzqOfq1A_4X3a6Q2TWtTCSW-xYNjHXfth0sRUsc9sCtUQb2inCSsd4d_j1-LBxC4J61t6TXH8xuqZh_nmVjejzwCIIxgUF7A7E4Au0jD_7lQFtTxFwgk2ZmHiI9hyVYUdw-eW551Yah75ZxtxxnUn5lEqj5bciNofPJwqMXNAhenjIlKge24P7vWCZtqoJ7B_JJ7g4X-6XfntNz6cjEhOxEFCh39HvN6Ndx-sP0JcIdkEG0mA-21uPwbHU_H1DCsse2aVkZ0qQdVKXYFbwCQ6j1q87xsKMCMvU13IkqmXQ&session_id=9745ea44-256f-4bb0-8d85-4d2779bb6bb3&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00iLCJraWQiOiI0OGJmYThhNC1jOGE3LTRhMDktYWU5OC1iZjMyNWQ3NDkxMTkifQ.DKYhGS58SDpk5zbLhq-55w4EeHs2Zn0hR5Y0jwQ0aOUzIns-vSHPK_SxPIcQZa-JKsT46v1_pkKmBHEV6Z_ASDRzhN382Ugw3zAg0GQeZRLSpNxUhvhOzJyJ2arIZQDCsQg8RtSvX2czCLgBprYjeXuezDTLu1XURT10ZgOK3PF7KCHevxqRXlISV1T6zSwb-3hMBtGOdeH1TIi2RgY_QKdT3cu1_0zOtlc-7L-CNf9GncZ9VOYbdZEDN-OPrOZl1JB5a0xo8V9IvXMS74QmyeDAPhdQcwhfZMCGyzok7KqwiolpldGmtg81gXdIsBSAP1CvOAsVTfKCbXTbQxcr7Q.iriHlp3jux6VCs3u.6ygbYxk509jQu_bu5TySSTyu1j2pRsOFywJ-EzLh5T42_j0PVAAphT9ppxUR2RLku1yDbiVCG-tvRDGFIjGg3jIGDCz2xLpPXLRDE0mRg1UrhdrqxifqTU71IUI5B53kbu7ySMZ78ckavHp5AQdZVDmj4jbv-MjlGiqY71tFxdhP98ZHDFP2uM01VEIX8V3up-HOgSnJQ0j7gj7a-S-Mhyb8vibkIM1EZ-XOt34c2W2qefSUdk2-YnYbQgBbbRMhn1GIr21gYfGqmSaBqLcGOC1r31M1rS2HHu5lrPjU8k714GH9J9hPPiTsWIScZSmbu9W4hi4LS-ZFX1JICygMyE4qxUmYZa9tnT1f-YhbuTSY3Q4hM19umMCwXsHyk_vDhj6sJ9tCyqiLfLU-MHNdMW6xZg.85BdF6Z8jJUT89-9a2fhHA&token_type=bearer&session_state=17b69f4f-7d00-436b-a57e-f9064cfecc50&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterES256 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:57 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B295.BB83.AA5F.BF59", "client_secret": "4a3bceb7-39c7-4a08-8b03-443565c1bab7", "registration_access_token": "8b214be4-6286-455f-8bfa-0f34555b51e4", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B295.BB83.AA5F.BF59", "client_id_issued_at": 1530745497, "client_secret_expires_at": 1530831897, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21B295.BB83.AA5F.BF59&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiIsImtpZCI6IjU0N2IyODM4LWE4NDgtNDY3MS04YTQ3LWQ1MzYxNzM4ZjJhZSJ9.eyJyZnAiOiI0YjcyMjk3MS0yMTlmLTRhYjUtOWU4ZC01MTBkMDNkNTNmMTkiLCJraWQiOiI1NDdiMjgzOC1hODQ4LTQ2NzEtOGE0Ny1kNTM2MTczOGYyYWUiLCJqdGkiOiI5YTRhMTMzMS1mMWRjLTQ2NmEtYjU1MS01MjE1Y2Q1NTNmNjAiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.MEUCIEikG7pFZCIw2CQ--EEbqlBeyuKcg-LXNR7rBJYKQp4gAiEAhYzlc-sRsV96OJp00XVxUms4X1lS3DTv4Xdz9L2GlUM&nonce=b0054e52-3fbc-4da3-a21d-08ddec058b94 19:05:18.289 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:ed7631b4-2dad-43b9-b11b-cc0d61c05a8b ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21B295.BB83.AA5F.BF59&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiIsImtpZCI6IjU0N2IyODM4LWE4NDgtNDY3MS04YTQ3LWQ1MzYxNzM4ZjJhZSJ9.eyJyZnAiOiI0YjcyMjk3MS0yMTlmLTRhYjUtOWU4ZC01MTBkMDNkNTNmMTkiLCJraWQiOiI1NDdiMjgzOC1hODQ4LTQ2NzEtOGE0Ny1kNTM2MTczOGYyYWUiLCJqdGkiOiI5YTRhMTMzMS1mMWRjLTQ2NmEtYjU1MS01MjE1Y2Q1NTNmNjAiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.MEUCIEikG7pFZCIw2CQ--EEbqlBeyuKcg-LXNR7rBJYKQp4gAiEAhYzlc-sRsV96OJp00XVxUms4X1lS3DTv4Xdz9L2GlUM&nonce=b0054e52-3fbc-4da3-a21d-08ddec058b94 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=1874286e-91e7-4c9e-b5b1-e4a2752ebb89&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFCMjk1LkJCODMuQUE1Ri5CRjU5IiwiZXhwIjoxNTMwNzQ5MDk5LCJpYXQiOjE1MzA3NDU0OTksIm5vbmNlIjoiYjAwNTRlNTItM2ZiYy00ZGEzLWEyMWQtMDhkZGVjMDU4Yjk0IiwiYXV0aF90aW1lIjoxNTMwNzQ1NDk5LCJhdF9oYXNoIjoiMEE2b2h4MXFra0VMTmhtcWdtU0N1QSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IkFFYk1EczdyM2x0d2JKem1fR3REX0ZCaTJ1UGhlTm9IMS1jekRzbGNlb2sifQ.NME7gBKv__IXmXgXW_HKwnZ2w1h0gyCAuYlPkLds06vlKmjQNVLp7SwxYyscKk-fou4WZ9EB7uUSm4oMIvPYajby68UDdCgrwf-gQH6z-Xqps3LOvELTupcEN5dXd_VaYW0nylkGg98PiMeS_8MZOYNXoolkxkgRLQMSBODW_5gu6xbMKJ3alV8Bt7OJPBRv2eyjee8v_RrQWSCGo_jXAs8KTA_udtRyTMiQICZnzz88rCeZYfjCF3jkmMNB8i48T2UJAGgWCZVIpJh5kc_NIn5SFgtCnvszuviYxWy6kXfNAuBvXwAGWSE9FN4IM_UZV06LCvdu2kuNbhh9WOnsjg&session_id=07cd1600-97e7-45e9-ac5e-74b0563a47ca&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiIsImtpZCI6IjU0N2IyODM4LWE4NDgtNDY3MS04YTQ3LWQ1MzYxNzM4ZjJhZSJ9.eyJyZnAiOiI0YjcyMjk3MS0yMTlmLTRhYjUtOWU4ZC01MTBkMDNkNTNmMTkiLCJraWQiOiI1NDdiMjgzOC1hODQ4LTQ2NzEtOGE0Ny1kNTM2MTczOGYyYWUiLCJqdGkiOiI5YTRhMTMzMS1mMWRjLTQ2NmEtYjU1MS01MjE1Y2Q1NTNmNjAiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.MEUCIEikG7pFZCIw2CQ--EEbqlBeyuKcg-LXNR7rBJYKQp4gAiEAhYzlc-sRsV96OJp00XVxUms4X1lS3DTv4Xdz9L2GlUM&token_type=bearer&session_state=ed7631b4-2dad-43b9-b11b-cc0d61c05a8b&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterES384 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:04:59 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!27BC.374E.A957.DE52", "client_secret": "9d83dbd7-be9d-41ed-b7f6-ca3d9d2ee9e0", "registration_access_token": "6efd6645-8404-4653-81fe-1a5da991277b", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!27BC.374E.A957.DE52", "client_id_issued_at": 1530745499, "client_secret_expires_at": 1530831899, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2127BC.374E.A957.DE52&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzM4NCIsImtpZCI6ImM0ZmU0MTEwLWViNTYtNDFjNi1iYWMzLTUzMTZmNmIxNDQzZCJ9.eyJyZnAiOiIxMTQ0OTVkMC1mYTc0LTRiMGItODdmZi1hNDJkZDVmNTUzOGUiLCJraWQiOiJjNGZlNDExMC1lYjU2LTQxYzYtYmFjMy01MzE2ZjZiMTQ0M2QiLCJqdGkiOiJlNzIyYTEyMC00ZWYwLTQwN2ItOWFhOS1hZTkzMjhjNjcyMDciLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.MGUCMQDgiF9dq88hb4hvKeP70F0MW9cG5AzbfQL10rPTXPZScj7Mpc0hAISbr_V7gp14TqcCMArJ1-SkW9XdzVr3tMft5FmV94SSoDMMBWVeIVjI29lXAJ8X-GGhtuYHYwiAoqg89w&nonce=67c59af2-6fe6-45d6-96e9-b64721f22cab 19:05:19.699 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:64373a7f-eddd-42b3-a7af-81017064d593 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2127BC.374E.A957.DE52&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzM4NCIsImtpZCI6ImM0ZmU0MTEwLWViNTYtNDFjNi1iYWMzLTUzMTZmNmIxNDQzZCJ9.eyJyZnAiOiIxMTQ0OTVkMC1mYTc0LTRiMGItODdmZi1hNDJkZDVmNTUzOGUiLCJraWQiOiJjNGZlNDExMC1lYjU2LTQxYzYtYmFjMy01MzE2ZjZiMTQ0M2QiLCJqdGkiOiJlNzIyYTEyMC00ZWYwLTQwN2ItOWFhOS1hZTkzMjhjNjcyMDciLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.MGUCMQDgiF9dq88hb4hvKeP70F0MW9cG5AzbfQL10rPTXPZScj7Mpc0hAISbr_V7gp14TqcCMArJ1-SkW9XdzVr3tMft5FmV94SSoDMMBWVeIVjI29lXAJ8X-GGhtuYHYwiAoqg89w&nonce=67c59af2-6fe6-45d6-96e9-b64721f22cab ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=dddda22f-419c-4408-bdd2-a0d77cbac17f&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEyN0JDLjM3NEUuQTk1Ny5ERTUyIiwiZXhwIjoxNTMwNzQ5MTAwLCJpYXQiOjE1MzA3NDU1MDAsIm5vbmNlIjoiNjdjNTlhZjItNmZlNi00NWQ2LTk2ZTktYjY0NzIxZjIyY2FiIiwiYXV0aF90aW1lIjoxNTMwNzQ1NTAwLCJhdF9oYXNoIjoiOXlYSkU5Q1lVbFlEMm5hR2J4UmRoZyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IldCZHBvQ19oOTN3VzJnMVJncTFIQ0tlWWVVb3BUM1NnSVlWc1prOEVZWGMifQ.rWqGVN69geo9SmKIk2KZCaNKKmD8jXsGSG1fHu6Kf9cstjlwgLZ8kYUhIJV7vCHRYcNRaurCYlFeIf8eoqEOjmH5-vJHzW-GMypdWKNbdaGx8COkjIFeBeoVtBbHbwbMUl4trJFaESTn_SJoC46UCSEP2iSzU9nQ0LkOy9DIFv9GUWkjoNnFaLT-Uwo-NM4mqLWRQOx2uA-9WqxBb6lBJ0HnchlvhFY4jE50yRWp_I9rUDI-VYvxorx5mGQA4e7EbVZ-AQK-dwdPvacjBjPKsDuTxnseoj_RWc6lNhvVtqcE39xygUt5rlwWIc665w8Zem2ywEGc70HTc3Xeo_e5sg&session_id=9bfa90c3-c4ac-4c7e-ae9d-1fdb5843d510&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzM4NCIsImtpZCI6ImM0ZmU0MTEwLWViNTYtNDFjNi1iYWMzLTUzMTZmNmIxNDQzZCJ9.eyJyZnAiOiIxMTQ0OTVkMC1mYTc0LTRiMGItODdmZi1hNDJkZDVmNTUzOGUiLCJraWQiOiJjNGZlNDExMC1lYjU2LTQxYzYtYmFjMy01MzE2ZjZiMTQ0M2QiLCJqdGkiOiJlNzIyYTEyMC00ZWYwLTQwN2ItOWFhOS1hZTkzMjhjNjcyMDciLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.MGUCMQDgiF9dq88hb4hvKeP70F0MW9cG5AzbfQL10rPTXPZScj7Mpc0hAISbr_V7gp14TqcCMArJ1-SkW9XdzVr3tMft5FmV94SSoDMMBWVeIVjI29lXAJ8X-GGhtuYHYwiAoqg89w&token_type=bearer&session_state=64373a7f-eddd-42b3-a7af-81017064d593&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterES512 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:05:00 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!FA86.E21B.CEC1.F199", "client_secret": "2db69788-0c2b-4c3f-b2cf-70342fb86e47", "registration_access_token": "b19aa8a5-5446-4ffe-bc76-7f4c08a3e81d", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!FA86.E21B.CEC1.F199", "client_id_issued_at": 1530745500, "client_secret_expires_at": 1530831900, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21FA86.E21B.CEC1.F199&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzUxMiIsImtpZCI6IjI2ZjgwNDBjLWFlOGItNGRhYS04ZjcxLWE3ZmRmMTRkZjY0MyJ9.eyJyZnAiOiI2M2QwNGIzYS1jZDYwLTRiYTItODJjOS0yNzBmZGUzZjllOTkiLCJraWQiOiIyNmY4MDQwYy1hZThiLTRkYWEtOGY3MS1hN2ZkZjE0ZGY2NDMiLCJqdGkiOiIxYzAyZGE4ZC04ODM4LTQzZTUtYTQxYS03ZTNiMjlhZTczZmUiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.MIGHAkF0eTNCizyOcwdr9QFc2uvYalnOivmEr67RtZPzzpM7SK_d-lxxNsIQXD0ZIM1_IHBqZ1CbtEX6L9GkqTofJkpv9AJCARb92DUWRaqV5ev8khHlKOaY7fFKekbC_nIwgxE1X6D7EFK189Ukw5R5jFfUBnKqdeihNXV2oUjO2zx-EeHwXhCj&nonce=3cf17b09-0760-4350-a716-b2a48df12819 19:05:21.181 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:f21f30e9-2de8-4e2c-bd73-64718cd40191 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21FA86.E21B.CEC1.F199&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzUxMiIsImtpZCI6IjI2ZjgwNDBjLWFlOGItNGRhYS04ZjcxLWE3ZmRmMTRkZjY0MyJ9.eyJyZnAiOiI2M2QwNGIzYS1jZDYwLTRiYTItODJjOS0yNzBmZGUzZjllOTkiLCJraWQiOiIyNmY4MDQwYy1hZThiLTRkYWEtOGY3MS1hN2ZkZjE0ZGY2NDMiLCJqdGkiOiIxYzAyZGE4ZC04ODM4LTQzZTUtYTQxYS03ZTNiMjlhZTczZmUiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.MIGHAkF0eTNCizyOcwdr9QFc2uvYalnOivmEr67RtZPzzpM7SK_d-lxxNsIQXD0ZIM1_IHBqZ1CbtEX6L9GkqTofJkpv9AJCARb92DUWRaqV5ev8khHlKOaY7fFKekbC_nIwgxE1X6D7EFK189Ukw5R5jFfUBnKqdeihNXV2oUjO2zx-EeHwXhCj&nonce=3cf17b09-0760-4350-a716-b2a48df12819 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=b7546866-b4ca-4454-97bd-31610832edcc&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFGQTg2LkUyMUIuQ0VDMS5GMTk5IiwiZXhwIjoxNTMwNzQ5MTAyLCJpYXQiOjE1MzA3NDU1MDIsIm5vbmNlIjoiM2NmMTdiMDktMDc2MC00MzUwLWE3MTYtYjJhNDhkZjEyODE5IiwiYXV0aF90aW1lIjoxNTMwNzQ1NTAyLCJhdF9oYXNoIjoiRGw1SVFmdFNwcF9wam5BQzNoRlc4dyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IlM3UUZSZUppZUw3RzBqSFBhbzlYakxpcDZ6bUl2MnpEbmlYSEVCanlycWMifQ.AIY0PpDbwoVoaV3M1vleM507yaY4vq5bIERLVZE69dhd0qDTLW2dhzeGfxWH6e8wQ6Mt2t7VhlwBByzqd6yVh2H-0oNxMyt8JXEQSEpSzHQcnknCLJdrrcR-GSUjFQqftkOOeG-a0NoJdCLW4WzBbLBwHiMYN4SVJRkhGu4931V_YheL8ATnkSrirTIm-UjqGOBIcNe_QUAHnFsQ_3fLbj-NKWe8KtNPd4YiSDnLYTCTD9Fa5PD7tupA5PdMqPaDLX8tJwQpYFbd_yzkXRPZ5ZGhRCTS47bbB4eQxpbZc9nXR2H9EJo0wNzHXFyMKpFkW9A7u3QSirnTujrRDi99TQ&session_id=d27dd159-630e-41f5-8d40-c77712aac1ad&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzUxMiIsImtpZCI6IjI2ZjgwNDBjLWFlOGItNGRhYS04ZjcxLWE3ZmRmMTRkZjY0MyJ9.eyJyZnAiOiI2M2QwNGIzYS1jZDYwLTRiYTItODJjOS0yNzBmZGUzZjllOTkiLCJraWQiOiIyNmY4MDQwYy1hZThiLTRkYWEtOGY3MS1hN2ZkZjE0ZGY2NDMiLCJqdGkiOiIxYzAyZGE4ZC04ODM4LTQzZTUtYTQxYS03ZTNiMjlhZTczZmUiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.MIGHAkF0eTNCizyOcwdr9QFc2uvYalnOivmEr67RtZPzzpM7SK_d-lxxNsIQXD0ZIM1_IHBqZ1CbtEX6L9GkqTofJkpv9AJCARb92DUWRaqV5ev8khHlKOaY7fFKekbC_nIwgxE1X6D7EFK189Ukw5R5jFfUBnKqdeihNXV2oUjO2zx-EeHwXhCj&token_type=bearer&session_state=f21f30e9-2de8-4e2c-bd73-64718cd40191&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterHS256 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:05:02 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!17A1.30F1.B9AB.CC69", "client_secret": "f671b1c9-79a3-4216-a900-92358ee6bd88", "registration_access_token": "3aa94ea4-9902-48b8-95bd-6ba2f5b0ed44", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!17A1.30F1.B9AB.CC69", "client_id_issued_at": 1530745502, "client_secret_expires_at": 1530831902, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2117A1.30F1.B9AB.CC69&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyZnAiOiIwYzBjMWZjYS0wZGMxLTQ1NGUtODU0NC02ZWFiNzAzNjhiOGQiLCJqdGkiOiJjODIxZmJjMC0yNTNiLTRlMTgtOGU0YS01YmM4ZjU2NGI5NzUiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.0cOEYIg5aeMzTeSmB57ozeh60-GStWeQHDtJgWY1m8A&nonce=252f385f-8347-4692-9490-422189921256 19:05:22.789 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:94c46874-75cd-4050-a89f-ee48ea9ca7de ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%2117A1.30F1.B9AB.CC69&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyZnAiOiIwYzBjMWZjYS0wZGMxLTQ1NGUtODU0NC02ZWFiNzAzNjhiOGQiLCJqdGkiOiJjODIxZmJjMC0yNTNiLTRlMTgtOGU0YS01YmM4ZjU2NGI5NzUiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.0cOEYIg5aeMzTeSmB57ozeh60-GStWeQHDtJgWY1m8A&nonce=252f385f-8347-4692-9490-422189921256 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=748aeb98-4b70-4295-98d7-da52a2ac7e07&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCExN0ExLjMwRjEuQjlBQi5DQzY5IiwiZXhwIjoxNTMwNzQ5MTA0LCJpYXQiOjE1MzA3NDU1MDQsIm5vbmNlIjoiMjUyZjM4NWYtODM0Ny00NjkyLTk0OTAtNDIyMTg5OTIxMjU2IiwiYXV0aF90aW1lIjoxNTMwNzQ1NTA0LCJhdF9oYXNoIjoiVTV1R1M2Nlo2SW82ZDFzWXBoRllBQSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IkNpRERoTEgwNXZNV1I2cVZPNHRydTBZU3JrZ2RTZ2JMUk9nNXdmcEswTDgifQ.ZtvhB96MiAkhUMUy4kuqPwTLAU6cYTRXj-_NtVeVq-SRpDL65TjSTD9At9lC-ktSf-KZwhuFqPauMNpMSV9J3_YuXGgmvjwkvO7e6QKCd0jlTbyjsnSKuQy7NAgTt0mEvIOYTPHR5_Sfx4eEbn_6jrJ3hsqFwFwZgD2efKQ3N1cZU8SBRVk4e3klugpNorbkofikpXBSPDlo3Bdv-Fjjzu3StbkhqCIGEw0uKGzo_BzGBad6u-M6GOru8jR92SPuMmWMUVi3pjwosX_NdvelVuTsS2NDer-9d8A5f8kKd79o0Kf0Ctc0ySUD0N8Qe40yvALqSmmwtNg2t0twn1z3aA&session_id=0513e914-82da-4a5a-80cb-6ab695215564&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyZnAiOiIwYzBjMWZjYS0wZGMxLTQ1NGUtODU0NC02ZWFiNzAzNjhiOGQiLCJqdGkiOiJjODIxZmJjMC0yNTNiLTRlMTgtOGU0YS01YmM4ZjU2NGI5NzUiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.0cOEYIg5aeMzTeSmB57ozeh60-GStWeQHDtJgWY1m8A&token_type=bearer&session_state=94c46874-75cd-4050-a89f-ee48ea9ca7de&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterHS384 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:05:04 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0E1B.1EAE.B026.5A4D", "client_secret": "7ba2f265-c805-4b82-9029-d64021db8841", "registration_access_token": "8adac937-5a77-4f9e-a2d3-90e1e050c119", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0E1B.1EAE.B026.5A4D", "client_id_issued_at": 1530745504, "client_secret_expires_at": 1530831904, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210E1B.1EAE.B026.5A4D&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzM4NCJ9.eyJyZnAiOiI1Y2ZkOTQ3OC05ZjYyLTQ2NDktOGE2ZC02NDUzODgwMDM0NzkiLCJqdGkiOiIzZTNlMDY5Ni1lZjI4LTRhZmMtOGFhNi05NDA2ZDUzNGI3YjUiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.F5Bz1C_jv1ypy3GQfbKBB8n61Q7cOjDcrrekCmnrjHb8deVS7OMG12n-hbqi0rLJ&nonce=2e2a91db-760e-4444-99fa-41b394be70f0 19:05:24.728 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:e32d99a0-93b3-4992-84cb-f21112cec8ab ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210E1B.1EAE.B026.5A4D&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzM4NCJ9.eyJyZnAiOiI1Y2ZkOTQ3OC05ZjYyLTQ2NDktOGE2ZC02NDUzODgwMDM0NzkiLCJqdGkiOiIzZTNlMDY5Ni1lZjI4LTRhZmMtOGFhNi05NDA2ZDUzNGI3YjUiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.F5Bz1C_jv1ypy3GQfbKBB8n61Q7cOjDcrrekCmnrjHb8deVS7OMG12n-hbqi0rLJ&nonce=2e2a91db-760e-4444-99fa-41b394be70f0 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=82821095-67dc-4859-b713-fd7135239e5a&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwRTFCLjFFQUUuQjAyNi41QTREIiwiZXhwIjoxNTMwNzQ5MTA2LCJpYXQiOjE1MzA3NDU1MDYsIm5vbmNlIjoiMmUyYTkxZGItNzYwZS00NDQ0LTk5ZmEtNDFiMzk0YmU3MGYwIiwiYXV0aF90aW1lIjoxNTMwNzQ1NTA1LCJhdF9oYXNoIjoiNWN1SGlnbzFjZ2ViNkhyNnNhZ0hzUSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IlR1dXo5QksxcjE2VUpveFBXZ1NZaHRybEg0OS0ybmFFS1I4SmxBY016NEkifQ.Exfqm04R5CQKUB09RT6ujZORXW8PieMpfnFdd167wSEIJ0oa5J8FBs2rUjZrXBRg4ApXssZVs5EMbGRK2lSuRulTprUQMGP480msnakjcdBxBK1Yx0T3JT53FUTa8eq29Lmp6y8HtX9AJcGDOtmd5_7l2SVaAW79qe-iVDzHliEzvyOiP5iZP_Ru3vVhLWJDOs-9dJhoQarbUPeXa3Z9HiBDGB8JBplfxRfUvH4iNOqGG5lva0mVs5dgFKI6CN6tLBzIA9GuO3mx9ep9mNddUu8FO_xOvgcV_vKkhV3PuJlwdPxJBlMrJc7bq1q5aezAT7cyxVvh7bzEcUbuILwGPw&session_id=a773463e-b7f5-4d45-a9d8-a4ac9993cc04&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzM4NCJ9.eyJyZnAiOiI1Y2ZkOTQ3OC05ZjYyLTQ2NDktOGE2ZC02NDUzODgwMDM0NzkiLCJqdGkiOiIzZTNlMDY5Ni1lZjI4LTRhZmMtOGFhNi05NDA2ZDUzNGI3YjUiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.F5Bz1C_jv1ypy3GQfbKBB8n61Q7cOjDcrrekCmnrjHb8deVS7OMG12n-hbqi0rLJ&token_type=bearer&session_state=e32d99a0-93b3-4992-84cb-f21112cec8ab&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterHS512 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:05:06 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9A3D.A816.C213.4CA6", "client_secret": "c1718512-6dfd-4f1b-b2a4-2cadae22d125", "registration_access_token": "47d82f9f-f26a-466f-9756-58cd91bbf4a8", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!9A3D.A816.C213.4CA6", "client_id_issued_at": 1530745506, "client_secret_expires_at": 1530831906, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%219A3D.A816.C213.4CA6&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJyZnAiOiI0OGUzYTFiNC1jZmE2LTRmZDMtOTk0Yi00YTQyMGNkN2M3ODgiLCJqdGkiOiIwYzk4ZjBkMi05ZjRiLTQ1NzktYmVlZi1lYWY0N2IzMWEwYTkiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.BdWhVsBhjfoy4-n1n_i4c-FHvdLz342PBrzOOF_L4aeaMgroH1CdTRqAyeDEUXcjkLUZZSFYXSeBKCb5zdLdIw&nonce=c710ec2e-7ff8-4c0f-9d6e-3b17b68e76a4 19:05:26.514 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:c4283931-5cd3-46c3-b06d-c7b632fcc400 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%219A3D.A816.C213.4CA6&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJyZnAiOiI0OGUzYTFiNC1jZmE2LTRmZDMtOTk0Yi00YTQyMGNkN2M3ODgiLCJqdGkiOiIwYzk4ZjBkMi05ZjRiLTQ1NzktYmVlZi1lYWY0N2IzMWEwYTkiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.BdWhVsBhjfoy4-n1n_i4c-FHvdLz342PBrzOOF_L4aeaMgroH1CdTRqAyeDEUXcjkLUZZSFYXSeBKCb5zdLdIw&nonce=c710ec2e-7ff8-4c0f-9d6e-3b17b68e76a4 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=c58de57e-1cab-4195-9ce6-bd3c1ce5c74a&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCE5QTNELkE4MTYuQzIxMy40Q0E2IiwiZXhwIjoxNTMwNzQ5MTA3LCJpYXQiOjE1MzA3NDU1MDcsIm5vbmNlIjoiYzcxMGVjMmUtN2ZmOC00YzBmLTlkNmUtM2IxN2I2OGU3NmE0IiwiYXV0aF90aW1lIjoxNTMwNzQ1NTA3LCJhdF9oYXNoIjoiM2JHX0x0enZ3SzBZbUNibnJ6emh4QSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6Ikg2YTR3V0RsSHY2b0N1bV9HWFNKWTE1bjNnSk5pR1hsM3d5NjQ1NG5MaGsifQ.WZPJFpT3JcJcMyCPQ2HGkJv-1gG4-wrCKXUQXZlXXox0hDbFWy5YiYxYQLPPDfijY7C3S63D4oDaEcGoBtv5wiLJuzpNTpA267bq2CYpqkb0ZyWVDYvPR3t6F9bNM8pSL37Dui7o0Y-m87HVFEt04cEzDDGJfLqkfbg5BejlKiKgjDgBNUgSM9D_uKcwoCD-gzik11A27_gZmPmvZ6iwdwitTlk0iQrrTPVDTSmZ3OuDIe0vGfiW1pzmobDHrNMtQYrb2cpMNVLHPHD3vurDqayDVHwkkgBBH9-3zBT8P2WV5KEv9ag8FhHQKJfABBta8EXu1fOkA7JjpBKtv9gwmA&session_id=7a0171c3-968c-468f-a369-dc1ebb11ef5d&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJyZnAiOiI0OGUzYTFiNC1jZmE2LTRmZDMtOTk0Yi00YTQyMGNkN2M3ODgiLCJqdGkiOiIwYzk4ZjBkMi05ZjRiLTQ1NzktYmVlZi1lYWY0N2IzMWEwYTkiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.BdWhVsBhjfoy4-n1n_i4c-FHvdLz342PBrzOOF_L4aeaMgroH1CdTRqAyeDEUXcjkLUZZSFYXSeBKCb5zdLdIw&token_type=bearer&session_state=c4283931-5cd3-46c3-b06d-c7b632fcc400&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterRS256 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:05:07 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B0A7.2871.BB47.7A2B", "client_secret": "ad74c84e-cdf3-4387-a568-236b1fc4a347", "registration_access_token": "f1c97344-4140-4414-be59-e4002590d7e5", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B0A7.2871.BB47.7A2B", "client_id_issued_at": 1530745507, "client_secret_expires_at": 1530831907, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21B0A7.2871.BB47.7A2B&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjQ4YmZhOGE0LWM4YTctNGEwOS1hZTk4LWJmMzI1ZDc0OTExOSJ9.eyJyZnAiOiJjNjg5MzgwYS0zZjU2LTRhMjMtYTc4My03NTJhNGE0NzhlM2EiLCJraWQiOiI0OGJmYThhNC1jOGE3LTRhMDktYWU5OC1iZjMyNWQ3NDkxMTkiLCJqdGkiOiJjZmM1N2QwNy0yOWQ4LTRlYTItYmMxNS1lZTQxYWRmN2MwNTYiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.Snfck1u0xu3_hafIviMW9BQQMRxrPBbGtwAHHcasgLZzGqx296D6EuEK7bGmbMO3SrYhSpOp3HZC-Yi8O8w4Ny0IMSZydhZp94O1-j1P-ZMRBsNhlY2VWOr9clqio-nMomv1P1Rk2I75wku1D4j3ILKdZ2t_8d9GJsvQuT6PzvhIPlFSfQaXc-spuD3MAeuWJHhQ37sOohKlVwguahhpeLrzjkBf4yM1ZKWmBktyLN59ZiWPBGbTR600WaAPTuHFy26bf-VSeAYpdrnH7635YrayZ3yJYC9ef_q-16Xt_QtzRNw8nTtYHnatMl0kpjAg6Ez7MC_JQkOJf4ZBuuKaFQ&nonce=7b66a2fb-b9c2-4b7e-926c-95b9e16f0897 19:05:27.841 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:b3c9b885-9688-4690-a228-676464216430 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21B0A7.2871.BB47.7A2B&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjQ4YmZhOGE0LWM4YTctNGEwOS1hZTk4LWJmMzI1ZDc0OTExOSJ9.eyJyZnAiOiJjNjg5MzgwYS0zZjU2LTRhMjMtYTc4My03NTJhNGE0NzhlM2EiLCJraWQiOiI0OGJmYThhNC1jOGE3LTRhMDktYWU5OC1iZjMyNWQ3NDkxMTkiLCJqdGkiOiJjZmM1N2QwNy0yOWQ4LTRlYTItYmMxNS1lZTQxYWRmN2MwNTYiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.Snfck1u0xu3_hafIviMW9BQQMRxrPBbGtwAHHcasgLZzGqx296D6EuEK7bGmbMO3SrYhSpOp3HZC-Yi8O8w4Ny0IMSZydhZp94O1-j1P-ZMRBsNhlY2VWOr9clqio-nMomv1P1Rk2I75wku1D4j3ILKdZ2t_8d9GJsvQuT6PzvhIPlFSfQaXc-spuD3MAeuWJHhQ37sOohKlVwguahhpeLrzjkBf4yM1ZKWmBktyLN59ZiWPBGbTR600WaAPTuHFy26bf-VSeAYpdrnH7635YrayZ3yJYC9ef_q-16Xt_QtzRNw8nTtYHnatMl0kpjAg6Ez7MC_JQkOJf4ZBuuKaFQ&nonce=7b66a2fb-b9c2-4b7e-926c-95b9e16f0897 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=9a492c02-8ed4-4b64-b55a-ad31350726f4&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCFCMEE3LjI4NzEuQkI0Ny43QTJCIiwiZXhwIjoxNTMwNzQ5MTA4LCJpYXQiOjE1MzA3NDU1MDgsIm5vbmNlIjoiN2I2NmEyZmItYjljMi00YjdlLTkyNmMtOTViOWUxNmYwODk3IiwiYXV0aF90aW1lIjoxNTMwNzQ1NTA4LCJhdF9oYXNoIjoicC1tcDZwWVhBbUlTaVBSMEVRNjNjUSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6InpqSW1NeURpV2JSLVRMZTFoVVlYNTRZT2ZVVUNqMmlKN3NiQm5yVzl3REUifQ.dtWanBqYa1GGj-1Moq390FhNpKgLEI2ia2mBEr6WYJ28iJlLej4OKLX3kj6mv_0kbPTC0G52E22jFIO9OLz-fmCySA7f58t9Ez73QkZWNcej7mf-1PmbhjY0N71UvzbSB72PhlAnxGqF0elNR9yzR0_J09e-aJkqxDDDPAUrp-1O92GT_SfEM0g6UVcgckUlkClSPfJP_4uH0z8led1A1Bc9n4qzhb2yfEumzFCQJ6woI77utIke46ysDePJ2SK3tBpTD4oSWzrj0jzqaLNzn7T1dzYnjZ1gNMAmh93PhYMuQ6tF1bMAsQ5mN43MDo03_LdYQo1B5_EKX8KTZLTEyg&session_id=1b120ea2-cf21-4c2c-a45e-e12f79b5f873&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjQ4YmZhOGE0LWM4YTctNGEwOS1hZTk4LWJmMzI1ZDc0OTExOSJ9.eyJyZnAiOiJjNjg5MzgwYS0zZjU2LTRhMjMtYTc4My03NTJhNGE0NzhlM2EiLCJraWQiOiI0OGJmYThhNC1jOGE3LTRhMDktYWU5OC1iZjMyNWQ3NDkxMTkiLCJqdGkiOiJjZmM1N2QwNy0yOWQ4LTRlYTItYmMxNS1lZTQxYWRmN2MwNTYiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.Snfck1u0xu3_hafIviMW9BQQMRxrPBbGtwAHHcasgLZzGqx296D6EuEK7bGmbMO3SrYhSpOp3HZC-Yi8O8w4Ny0IMSZydhZp94O1-j1P-ZMRBsNhlY2VWOr9clqio-nMomv1P1Rk2I75wku1D4j3ILKdZ2t_8d9GJsvQuT6PzvhIPlFSfQaXc-spuD3MAeuWJHhQ37sOohKlVwguahhpeLrzjkBf4yM1ZKWmBktyLN59ZiWPBGbTR600WaAPTuHFy26bf-VSeAYpdrnH7635YrayZ3yJYC9ef_q-16Xt_QtzRNw8nTtYHnatMl0kpjAg6Ez7MC_JQkOJf4ZBuuKaFQ&token_type=bearer&session_state=b3c9b885-9688-4690-a228-676464216430&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterRS384 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:05:08 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0402.AA98.8E32.8CE6", "client_secret": "8663d929-d2b1-4040-ac9e-cea6f307310b", "registration_access_token": "68f1ac01-f201-4c11-be12-b0873ffbd586", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0402.AA98.8E32.8CE6", "client_id_issued_at": 1530745508, "client_secret_expires_at": 1530831908, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210402.AA98.8E32.8CE6&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzM4NCIsImtpZCI6ImM0NjIxNDNmLWExOTctNGY3YS1hZjk5LTBiMTA4NzM2ODYxNiJ9.eyJyZnAiOiIxZjU5N2M5OC1jMTE3LTQ5MjUtYmY0YS0zNmRmZTMxNzk0YjYiLCJraWQiOiJjNDYyMTQzZi1hMTk3LTRmN2EtYWY5OS0wYjEwODczNjg2MTYiLCJqdGkiOiIxMTA0N2QxZS1mOGEwLTQzNjMtYTQ3OS1iNzBkZTE2OTk1ZTYiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.ZtBTfOiIJMDOAtr2SN_Ea_4zSdUCHA0gltge8ZxPbg1JtMFGpqM-ULwTFSI9k_xavTET-GVenPdgUiH703trzjKEawv6asIE54Htgvh8BAt69ENalAccfp77eU2eMhMF3ydYImiAgouoMhE3M6lxFgJjim4rooYwj3kLf52K7h4TpLgtUes_W6203aA2ovtEOWCEBo2NQZD4lZ8wsbizG8cxxourWcASHf37ddmFZiYK8t10M8SbeVlalZtNJ1eussDZMcUTsR3GSKWKL2oZvXGKBGdbOefHpa3U4sy64HGpEMimcJ7C1EcxitjoLRQ_nbOHvrjbqnOUlni4hMeG-A&nonce=032335d3-910d-4f93-b595-2cab53075ddb 19:05:29.187 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:e589e71e-0bcb-439a-a05c-bf3a37ee39aa ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210402.AA98.8E32.8CE6&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzM4NCIsImtpZCI6ImM0NjIxNDNmLWExOTctNGY3YS1hZjk5LTBiMTA4NzM2ODYxNiJ9.eyJyZnAiOiIxZjU5N2M5OC1jMTE3LTQ5MjUtYmY0YS0zNmRmZTMxNzk0YjYiLCJraWQiOiJjNDYyMTQzZi1hMTk3LTRmN2EtYWY5OS0wYjEwODczNjg2MTYiLCJqdGkiOiIxMTA0N2QxZS1mOGEwLTQzNjMtYTQ3OS1iNzBkZTE2OTk1ZTYiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.ZtBTfOiIJMDOAtr2SN_Ea_4zSdUCHA0gltge8ZxPbg1JtMFGpqM-ULwTFSI9k_xavTET-GVenPdgUiH703trzjKEawv6asIE54Htgvh8BAt69ENalAccfp77eU2eMhMF3ydYImiAgouoMhE3M6lxFgJjim4rooYwj3kLf52K7h4TpLgtUes_W6203aA2ovtEOWCEBo2NQZD4lZ8wsbizG8cxxourWcASHf37ddmFZiYK8t10M8SbeVlalZtNJ1eussDZMcUTsR3GSKWKL2oZvXGKBGdbOefHpa3U4sy64HGpEMimcJ7C1EcxitjoLRQ_nbOHvrjbqnOUlni4hMeG-A&nonce=032335d3-910d-4f93-b595-2cab53075ddb ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=ad1986fe-8797-4db5-b5a2-681b48bca9b6&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwNDAyLkFBOTguOEUzMi44Q0U2IiwiZXhwIjoxNTMwNzQ5MTEwLCJpYXQiOjE1MzA3NDU1MTAsIm5vbmNlIjoiMDMyMzM1ZDMtOTEwZC00ZjkzLWI1OTUtMmNhYjUzMDc1ZGRiIiwiYXV0aF90aW1lIjoxNTMwNzQ1NTEwLCJhdF9oYXNoIjoid3VsZWx3WjJVV0ZmYTRocGR6YWtNdyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6Im5TeFpIM0R6NUg3MUtNLWE5LUpKT2lJUExZMG1zaUZLQnlJLXFkczgwaUUifQ.FR5SchlnDE7OU8jPOh48D-h77MFc1LaS4yqXuJuPxQEothSKKWRUCrrNXjEsQV3EtTv3414joKNsx8fECQBVcUsoxXHjTzDHCYwD8Nkv2nkW7Su0SJAvqPNq3OhoSbkIrjyzucFwUPaOgkCzNrrAyi9W9NKPW3StviW8jS4Zg8YbFwloCAwU_f4FYb84Y8xz7aD4zMmjnkZ2bZ3LVaV0gzsQeJdon1GacroofX5MedRt1rSFhY9uFpLHZJyIVRnWJfWTDGOBiFf7TedRb0__8QtbrdvvwS6LWJFnyjs0L_vm8wD3SEpzYpLd9nKdT9f7wFumQYRrxaJJ6bbSTXPoxQ&session_id=3e8f1556-f48f-46dd-8a5c-7e22cb526e2a&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzM4NCIsImtpZCI6ImM0NjIxNDNmLWExOTctNGY3YS1hZjk5LTBiMTA4NzM2ODYxNiJ9.eyJyZnAiOiIxZjU5N2M5OC1jMTE3LTQ5MjUtYmY0YS0zNmRmZTMxNzk0YjYiLCJraWQiOiJjNDYyMTQzZi1hMTk3LTRmN2EtYWY5OS0wYjEwODczNjg2MTYiLCJqdGkiOiIxMTA0N2QxZS1mOGEwLTQzNjMtYTQ3OS1iNzBkZTE2OTk1ZTYiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.ZtBTfOiIJMDOAtr2SN_Ea_4zSdUCHA0gltge8ZxPbg1JtMFGpqM-ULwTFSI9k_xavTET-GVenPdgUiH703trzjKEawv6asIE54Htgvh8BAt69ENalAccfp77eU2eMhMF3ydYImiAgouoMhE3M6lxFgJjim4rooYwj3kLf52K7h4TpLgtUes_W6203aA2ovtEOWCEBo2NQZD4lZ8wsbizG8cxxourWcASHf37ddmFZiYK8t10M8SbeVlalZtNJ1eussDZMcUTsR3GSKWKL2oZvXGKBGdbOefHpa3U4sy64HGpEMimcJ7C1EcxitjoLRQ_nbOHvrjbqnOUlni4hMeG-A&token_type=bearer&session_state=e589e71e-0bcb-439a-a05c-bf3a37ee39aa&expires_in=299 ####################################################### TEST: encodeClaimsInStateParameterRS512 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD" } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1340 Content-Type: application/json Date: Wed, 04 Jul 2018 23:05:10 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!374F.40FB.66E8.8C83", "client_secret": "ec112366-a456-4192-9954-73f1e6d08920", "registration_access_token": "204268e7-8e76-4584-873a-9018db3e11a1", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!374F.40FB.66E8.8C83", "client_id_issued_at": 1530745510, "client_secret_expires_at": 1530831910, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21374F.40FB.66E8.8C83&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzUxMiIsImtpZCI6Ijg1YjA4NDgzLTY4OTAtNDg0My05YmFmLTgzN2EyNGEzYzZkMiJ9.eyJyZnAiOiIyMWM0OGMzYi1mZjUzLTQ2MTUtOGVhNy1jYjk1NzQ0ODNhODMiLCJraWQiOiI4NWIwODQ4My02ODkwLTQ4NDMtOWJhZi04MzdhMjRhM2M2ZDIiLCJqdGkiOiJiODJlNWEyNi1iYWQ3LTQxNWUtOTgwYi0xZjM4ZWYwOTcyMTEiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.T7M0DGkgKjsa8RRoNKQWQT2xa7_iITGKJYvnMS5sSYGsVnZ8aWQtO43drxzUq7tlhIa87jIn0LupbJv6uDsM52hG1-xLGHphhi0G6PVkEdyhjkDpV5fYsa8iL_o5MmMuNrHreutNMsS0JU4d4YmNfIU_PhF6FYPmMmkFgZq15V7tqYyV1RhnIyc2A2hhG7O_nnRaeoVwTfB9Mb6IA2nkONLZU4DBg8HnjqUz2mJA9vsZOn8FwG5OqM3zz4BFV3NP6_eaa2yjVkmzbPT4rwJsrMBnENl2K35wI07cREV7HCpvUDj9-Z1TfCztsOKv0ledb1yVM7nZ201ZgliD76Y6iw&nonce=7b61c13e-6d46-4d44-ac08-5b9b068ae107 19:05:30.703 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:2e329e53-ba4d-4c8d-b8b4-b3c1592beafa ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%21374F.40FB.66E8.8C83&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzUxMiIsImtpZCI6Ijg1YjA4NDgzLTY4OTAtNDg0My05YmFmLTgzN2EyNGEzYzZkMiJ9.eyJyZnAiOiIyMWM0OGMzYi1mZjUzLTQ2MTUtOGVhNy1jYjk1NzQ0ODNhODMiLCJraWQiOiI4NWIwODQ4My02ODkwLTQ4NDMtOWJhZi04MzdhMjRhM2M2ZDIiLCJqdGkiOiJiODJlNWEyNi1iYWQ3LTQxNWUtOTgwYi0xZjM4ZWYwOTcyMTEiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.T7M0DGkgKjsa8RRoNKQWQT2xa7_iITGKJYvnMS5sSYGsVnZ8aWQtO43drxzUq7tlhIa87jIn0LupbJv6uDsM52hG1-xLGHphhi0G6PVkEdyhjkDpV5fYsa8iL_o5MmMuNrHreutNMsS0JU4d4YmNfIU_PhF6FYPmMmkFgZq15V7tqYyV1RhnIyc2A2hhG7O_nnRaeoVwTfB9Mb6IA2nkONLZU4DBg8HnjqUz2mJA9vsZOn8FwG5OqM3zz4BFV3NP6_eaa2yjVkmzbPT4rwJsrMBnENl2K35wI07cREV7HCpvUDj9-Z1TfCztsOKv0ledb1yVM7nZ201ZgliD76Y6iw&nonce=7b61c13e-6d46-4d44-ac08-5b9b068ae107 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=2b0512c5-6d3f-4fde-b433-3227677d9e10&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEzNzRGLjQwRkIuNjZFOC44QzgzIiwiZXhwIjoxNTMwNzQ5MTExLCJpYXQiOjE1MzA3NDU1MTEsIm5vbmNlIjoiN2I2MWMxM2UtNmQ0Ni00ZDQ0LWFjMDgtNWI5YjA2OGFlMTA3IiwiYXV0aF90aW1lIjoxNTMwNzQ1NTExLCJhdF9oYXNoIjoia0Q3ZWQ1OHk3RWtmdG96aG5pNnBPQSIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6IktuTFVEdFNIRjJhMUFfcllieFJfb2ZZYS1ZMGozV0tIRzU2Tnk2NWRWQXMifQ.sg8cP3pjpdD6s7mwliODmOrn_Ht1LpFjQfD_BJRgsV_wnbUI7SWVCCFJ6KIx-hXD1zjwPUZSCo-49sdtkiDiu1j8IotldFnBxz07c1ezzH3mTodq_l1G_1MdMeJA7hwtvd32o7KB_ik13Zsvl_yi5VMpcpkri1hEagVijOMbUIfypRppy5cxw4YvQtBYQL4CcgF9BmcATF602KuRkPTD9k6-7JPxyXm55EbVOUPf3fqLsueVOR7jYYglwoRivtfTlEcaAjHqvAGF3yZn0HQhq5d9xuYMDcVyUF8aVppGivQTiR6Vs7P3jO5xGkCrBWyGVwBF7ouaUSICfScQd32F8g&session_id=7cb06c24-7a81-4fed-9725-f05ca41ea5a7&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzUxMiIsImtpZCI6Ijg1YjA4NDgzLTY4OTAtNDg0My05YmFmLTgzN2EyNGEzYzZkMiJ9.eyJyZnAiOiIyMWM0OGMzYi1mZjUzLTQ2MTUtOGVhNy1jYjk1NzQ0ODNhODMiLCJraWQiOiI4NWIwODQ4My02ODkwLTQ4NDMtOWJhZi04MzdhMjRhM2M2ZDIiLCJqdGkiOiJiODJlNWEyNi1iYWQ3LTQxNWUtOTgwYi0xZjM4ZWYwOTcyMTEiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.T7M0DGkgKjsa8RRoNKQWQT2xa7_iITGKJYvnMS5sSYGsVnZ8aWQtO43drxzUq7tlhIa87jIn0LupbJv6uDsM52hG1-xLGHphhi0G6PVkEdyhjkDpV5fYsa8iL_o5MmMuNrHreutNMsS0JU4d4YmNfIU_PhF6FYPmMmkFgZq15V7tqYyV1RhnIyc2A2hhG7O_nnRaeoVwTfB9Mb6IA2nkONLZU4DBg8HnjqUz2mJA9vsZOn8FwG5OqM3zz4BFV3NP6_eaa2yjVkmzbPT4rwJsrMBnENl2K35wI07cREV7HCpvUDj9-Z1TfCztsOKv0ledb1yVM7nZ201ZgliD76Y6iw&token_type=bearer&session_state=2e329e53-ba4d-4c8d-b8b4-b3c1592beafa&expires_in=299 ####################################################### TEST: jwtStateAlgA128KWEncA128GCMTest ####################################################### Encrypted JWE State: eyJ0eXAiOiJKV1QiLCJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.ISDfiAouYNsK4lU8s30FfGsBw9llNxXx.wKWqTZLaOxszuUhj.UgRJddwIr-8zRu7hwQVbi54pyvnzIMgMr-RPNa6D91UQkFOB2fvQPUTQPuaknLDfUeya7MTnEZsI6srzKifzS7hWvYjZgB_oO8yl3QVKtTWQpAtWNCF5aepJzd6Ufp2vYjLiq9N65BcY7h1UGHqloMfik6UzyJ3-dW7yZECqwF00xkz3C_p7OwNfMloBotczBYGK80PUcYRuzXQTC5qd5BdksoxJ-y7YBl22qMEhMTNJ6ZH3n5xw_6UV39FUJlX79Kt9i3eTxUIR-Dgkpd2tAAYYD5T9hkL45Tim7HK2x9jfunVnXVwoTYT1IHAuKEMtJqJoVi1HTQ.k83LQ8_IHiaMDS7E-n82nw ####################################################### TEST: jwtStateAlgA256KWEncA256GCMTest ####################################################### Encrypted JWE State: eyJ0eXAiOiJKV1QiLCJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMjU2R0NNIn0.k7JLYvAwpYzjjPG1GyXdYUfSVGa_N2p7tjQMpwpHSZ7zEOFWXCOWmQ.eXHMMMKlJKfHbBVo._mCmGUFDex-VZrb82IUMHw_xBt6amgpZboYDS5mD-m_e0ts9m9iHL4A2e6dOmDozpthJyzoadRHM-C-MmtVKqJj4CW89xKVrmiX7-PakmYr8a9FCx641fH9ZAeqV-RHYmJvkqO8UszlU1WhvfYpwAhhf6TXrjLd_1v4pDZsX4nroP2xniNLIfJbJzsFkaC-MWK_o10eYRqZRWq0Wxky15WAGOAdHBL1orhOo1QlSPgUPihJrJ46tW3fYbGbHcaaWwTryiZ9POSSHW9TEMMDJoCTr_l3zfznb2JqfT-aQOGlB76YZnK_hSPGNY47ZuBVGDb77yIU5gg.VX4S--wGOq3UEKxZLyuc1A ####################################################### TEST: jwtStateAlgRSA15EncA128CBCPLUSHS256Test ####################################################### Encrypted JWE State: eyJ0eXAiOiJKV1QiLCJhbGciOiJSU0ExXzUiLCJlbmMiOiJBMTI4Q0JDK0hTMjU2Iiwia2lkIjoiNDhiZmE4YTQtYzhhNy00YTA5LWFlOTgtYmYzMjVkNzQ5MTE5In0.KN2hJBKL5hQzN52rXgkEtxB1GYoHcoVOS8WTuTJXdddz9DC5--zjivZrzq2k5eTXkHs8doCx_hHyJ3qtWN0P9AsIB_zQh36dNXghcO-rFcr6iPTQPuDzr_Sjux2Vt90Aryjl6DkGIyEESXMbzXQt9aAScavHtw-ssKrkYaplG5LOIsENzltXsJY9l6FbaGU8TfgRJCcwyuGimbSB7xxUHdpSpkR4lv7zs8MfZ1Nev19elWJWd2_pskzfxKZtpX91v4YQkzjoqJQdE9MvwAWUHrlPbqGFA0XkOXALZuAKFq7M1hcmddhD0sElF_aXqkiNCcnw-gVdvBHJEJeczxfFRg.8F1CL08pobGAjRZSmLeAEA.yQlvUGePuUBuW2eaMQCcHObW0Z9xt3Q7jE6tTascG_HBpgfw10TjmiGLzNAEAqVeXvPWKL7tEgEltfjdRe73Za15zj1MgC4xImd4Sx3hEdBWaNfPdr3kvfaGgo5_GDU4NjDwGtjNEp2pLCDz1jlluUBmuaWdPnWbCLEaqRiUnKQLzNzeCSktnm4uXAFp-dIpWzCAGoIHI5rzTtJrHi9dgqBjatjftzMxmIw21XfFJagBx3d-KW7rSOr7STJqCaZm6toWDTEqacGq44bCKmXSo-nrHzedEtU7VBjYoPmUl_1dCH8UfzrfHDuMOMghNOYgM0B4qS2wbw2xA8Jm_Z6TRbhiIuzb0ML8xdPu2_MfTF0-bUMFl3jkOrWkV5VsHR1-uGYHQDmnTwZifjSXgzAyb0pHff5993rjofwtTE_EIx0.Mb0MjQgTTia7i5xauXnTWEBHAQm7X1pd8g-T3qYoOA0 ####################################################### TEST: jwtStateAlgRSA15EncA256CBCPLUSHS512Test ####################################################### Encrypted JWE State: eyJ0eXAiOiJKV1QiLCJhbGciOiJSU0ExXzUiLCJlbmMiOiJBMjU2Q0JDK0hTNTEyIiwia2lkIjoiNDhiZmE4YTQtYzhhNy00YTA5LWFlOTgtYmYzMjVkNzQ5MTE5In0.W0CgjGyLkpif2Ux0ToGcMJnnWmeBIBDWa3kQulE1kA_CAQlfhK06RAlrZFSqjwRwsig4dyPUOQepdOk1YXdc1RnAOvE5P5kCjqNeXVRzT5xZuCzssdHwfwIzPrjJRzqjLwz29gaAS1yP4CKFquk90ZgP-Q6tSSX5dPVzgyC5-TIBRV5mxyH1VedmwfhizR9l9RuslcyQHtrZCdaXJ8lqAT-9HPBfheq8tuvu1gMsTiZb-BLxgKBHdiFD5fwAUnCcv9Q_w53L8GltEnRtbh4F5JQOsVw0QpP1rmn96n_PVmtn8KsFc8-JD-0UGRy2pi_GSTPfuUEqcdboAz2wVhGUCQ.R5hgAb-YNaqtiC-ptbHyaQ.UWhOWDB4_wpm2bcbmMRqWBh49g6tCIRkIwo7fUJjDCpTUvavvAZqnR7qwBmDzZ8o-LFrlhUrXkcjo1eifiIOztlqXNxk6a8xMm1nWaxrjTdbU-7zaDjZBYsMptiLTxAYjv72WWBpYbbm1lAZnqr1x1GL6VHfzZsKIqKykC5hHvLIFlWgO5c61fsMW2gcdoP5ScOx176JJXqhEqo2ujsXZMz1o_fQTbYsiuctsbtbZB_dRPQbY-FEFgDtS21bgEJV9PUs2dNlPBJ5fif4H4fsXVOE-jeIEGl0Fu1qkt7PnHD3WPX8DJbqILN1koTN_8F2RfhmnXAmE7h7-kSJe6odeirGdltdBQTWK_YSK6yAFeIxNS5XngTOsHDnDVRVxG3Xo-WhqEq5VdAFlQigiqNTJdegXkdS_iPvjB3Xff3qgik.kpUM8Yai58i96_3tQTNM0Dnf9BLxGwOi3sV64fNnF8F6bGvCboGLn_-8EblxCA1EHH34YPSMatBejWjT4S6sxw ####################################################### TEST: jwtStateAlgRSAOAEPEncA256GCMTest ####################################################### Encrypted JWE State: eyJ0eXAiOiJKV1QiLCJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00iLCJraWQiOiI0OGJmYThhNC1jOGE3LTRhMDktYWU5OC1iZjMyNWQ3NDkxMTkifQ.Rh0PO5DHNvMfF7BVGGS_PKgHP4DlRnrUzwz9F0zVrRt0Imw9mnT0e6YU3ITvhoGndAoL2LYgGRUpHN9h9KDXMV3vbQHHp6aXew7D03BQzeIhpNAkku3own0ksoG-GJwys3hLOTJsY2b19UnK3iGb89EFyIcxeEla-UV0-zlVHfa6rkTuTJIHFNB8c1QVNu7o0DL90RSQgUFXZllRDIZdrihVXP-O6_l0sNicKKxKjkSix3IKnCdkn3tesCcodi_kMDVSuisNSDiYImNkHAyDjvm_Tb8lyUz2KMzT5nHVuc496cjP-HbTItHNTlsu-DdLd6KsOh9_aeco1YWErR1DdQ.vWs5Ij2YH6A6taCR.L7DL6G7MsWSIaEoVvnaupottWv0q_OyvkoRJRQOl9fOUQB7RUTuVIeiBuxfpoLJoKwohUKj4CdQStUDMgoRHdYqMtJtxWiTrk2acad5xYPkB23j9USxRJ-lbZt8ojzGm_8r3nXiaduM2R0zct1IL4Ppx45N6g9_mjPU1j1-cwWBpECT6YFYKsHLE6VHZDHGc9FRiRo384_lh4q3Z9GZA4CLSN9D0C-JoB_JBFiymeq3VfIkngp3JhsN8xdlSYjLdzCGsNRJa65_KX_oOCP-s2yi3MQv-4lkgW_bKIpeVzaWJJgIIwnbqwcwGRO9BI6ASNvfFGAe7sHhS7kef6RyHLeVcZhEKVhvulBYwQvxgCZglEhFUfqSG5s9c8P4O8vW8NTGqOO10MwV0XQs0GGOgQYKyYw.z8oEQ-XVxZmMTBCh4XvXCQ ####################################################### TEST: jwtStateES256Test ####################################################### Signed JWS State: eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiIsImtpZCI6IjU0N2IyODM4LWE4NDgtNDY3MS04YTQ3LWQ1MzYxNzM4ZjJhZSJ9.eyJyZnAiOiI3N2U1NWNmOS04YzJmLTQ1YTEtOWEwZS1mN2I1NjIyMTI5MmQiLCJraWQiOiI1NDdiMjgzOC1hODQ4LTQ2NzEtOGE0Ny1kNTM2MTczOGYyYWUiLCJqdGkiOiJmOTcxZTY0OS04MjQwLTQ3ZTUtOGJlMC03MzExNTMwYjE2YTkiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.MEUCIQCQopUjHwO3XRR5RUxA-fI5lDdLc2liQRsPXIUF5FR1WQIgAeQ3U_gA00IhJdZLiwzismHoWbN1tLK9Gza5AeNhUkk ####################################################### TEST: jwtStateES384Test ####################################################### Signed JWS State: eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzM4NCIsImtpZCI6ImM0ZmU0MTEwLWViNTYtNDFjNi1iYWMzLTUzMTZmNmIxNDQzZCJ9.eyJyZnAiOiI5NGYzZThhYi1kNzE3LTQ0ZjQtOTliOC0xNGUxODU1NDgzYjgiLCJraWQiOiJjNGZlNDExMC1lYjU2LTQxYzYtYmFjMy01MzE2ZjZiMTQ0M2QiLCJqdGkiOiIwOTdhMjAwZi0xNTQ1LTQzYzAtYjE0ZS02N2M5ZTkyODI1Y2IiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.MGQCMDHjLkhqbjRRK_tzsnrfhvzqIzJ1XqLHftuSDuaRQI9AYFW_70Pwjhta5OmNssbS4QIwP-chDJuL6inKfz2jZyfS5tGiVHuvNbUci82STshSnoanjx6cn_o-_3uF5mOIsKzD ####################################################### TEST: jwtStateES512Test ####################################################### Signed JWS State: eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzUxMiIsImtpZCI6IjI2ZjgwNDBjLWFlOGItNGRhYS04ZjcxLWE3ZmRmMTRkZjY0MyJ9.eyJyZnAiOiIxNWQzMTg2OS1iZTgxLTQ5YTUtYTM2ZC05ZTU5YTY4YWU3ODkiLCJraWQiOiIyNmY4MDQwYy1hZThiLTRkYWEtOGY3MS1hN2ZkZjE0ZGY2NDMiLCJqdGkiOiJlY2E1MzQ3My01M2NhLTRkNGEtOGY0Zi0yYWEyOTY1MmE0Y2IiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.MIGHAkIAoUrL00wvCukIC0nCwLiE-E2o063YnKDoMppotqEHcb468bs8eiNbryzWjfwFOvqy-vmJ1NaIm7sZHvchKF6tucsCQW8qU4VdR4p4_MgjVkJ_XHAWYLhYjTg4XlQjJidgoWPUhCDCfKyrirSY5hZq3pN3S-AL-aFMqq5EZ0JOEnItwM57 ####################################################### TEST: jwtStateHS256Test ####################################################### Signed JWS State: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyZnAiOiJjYTU0OWQ1My03MWNiLTQyMzAtODk0OS01MDQxYWU0M2M2ZWQiLCJqdGkiOiIwY2RmZjU4Yy0zMGI3LTQxM2MtYTE0ZC0wMDQyNjEzZTRmZDYiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.qFm0O-QLcDzt89WufFDQ9C-ViNDA-L89q6oZ57DbLng ####################################################### TEST: jwtStateHS384Test ####################################################### Signed JWS State: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzM4NCJ9.eyJyZnAiOiIzMjhhOTg4YS1lMWNlLTQzMTktYjczYy03NmU4N2IwODBjMzMiLCJqdGkiOiJjYzM3NDU5OS03ODdkLTRkYzEtOGUxNS0yMjgzZTdkN2U4NDUiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.DhvDSIbwA_ciH2M_EncMKAdvpV5yFUjkTpGubn5Mpjq6UXKWyzoutbl5bUFy-Sv9 ####################################################### TEST: jwtStateHS512Test ####################################################### Signed JWS State: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJyZnAiOiI0YWNkZWNiYi0wYjQzLTRlZWQtOGQ4OS0xYjNkMjdmMjViNDYiLCJqdGkiOiI5MGJjNDc3ZS1kNjk1LTRlODYtOGFkNS1lNDczMmEyNDFhMTciLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.3vCWSh5xJ8QFDnph7z_oa33hQEADT-Av4ZFQ_t9yec9uPIo06SCg-5buwLBDCPgu4gBwVYcdW03vPmAbVFg5zQ ####################################################### TEST: jwtStateNONETest ####################################################### Encoded State: eyJ0eXAiOiJKV1QiLCJhbGciOiJub25lIn0.eyJyZnAiOiIxYzNiYTU1MC0xZjIxLTQ0MDEtYWQxMi1mZGFjMzVhZmIxMTQiLCJqdGkiOiJlODlmMmNkNC03ZDEzLTQ5ODAtYjkwMC0yYTM4OTNkMjYwMzQiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0. ####################################################### TEST: jwtStateRS256Test ####################################################### Signed JWS State: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjQ4YmZhOGE0LWM4YTctNGEwOS1hZTk4LWJmMzI1ZDc0OTExOSJ9.eyJyZnAiOiJiZjFiMmZiMi1lYjllLTQyMDYtOGY5Ni0yN2NkNTRhNzRmYjYiLCJraWQiOiI0OGJmYThhNC1jOGE3LTRhMDktYWU5OC1iZjMyNWQ3NDkxMTkiLCJqdGkiOiJlNTQ2MDE4Ni03NjBmLTRjMWQtOGQ3MS0xOThmYmQyYjRiMmEiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.PaYJ4899jKbxbsnV8gdaMrKgHMpINBYYV9e5PQ2z96t7R0mroqYBPA-aHY_-UoyREWoFihCuD0lhw4Q8hshVqtdC02Le09jIACo2UzhCLTypmykzbPBwT6pV9lHvoY5TTwxe5fxz64EKccPsv2jBcFkONd8v0YDXIjbc6WbXINQUEU0br1pl8ucEYg6wH482ydZTCtCr27Wa7p_k1t-_0lYgaaqniR3qwj86mfsuY8tBZFSCwgfl1JbEUVb-57LGuiIlwlz8lrNkouJTq_IxnasaqHkOBOD1QNm3hEFziV7xpYAkry-nU36MxXKwhlSSwJGzDUI3oAAkOyhfu0kWwA ####################################################### TEST: jwtStateRS384Test ####################################################### Signed JWS State: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzM4NCIsImtpZCI6ImM0NjIxNDNmLWExOTctNGY3YS1hZjk5LTBiMTA4NzM2ODYxNiJ9.eyJyZnAiOiJhNGExMjk5Yy1iNWU2LTQ2OTYtOTE3Ni1iYjJlOWJlNjE0NzkiLCJraWQiOiJjNDYyMTQzZi1hMTk3LTRmN2EtYWY5OS0wYjEwODczNjg2MTYiLCJqdGkiOiI4MGExMTQzOS1hMjNhLTQ2ZTAtOTEwNy03OGE4ZWVlNTg3NTEiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.qjFPq2rNYjQhv3YYI1VSoD1rer6l7DbanvQJMdGbBQy8oXE3ANd2w4duoKiHQ3WEAMUTTl927T1fSCKSQHeGlJ7KPeFqr83z1iOmgsF7Guw-VsmcENF-ZZvqsCAJaax6W97L8a0E10OpcwLTIj3LA3SnzZaNpnYyq27UcHfoOrRMoOpUqOcepiOXCFFx5NWpGaOanswQiicDqFQ7niYnm9MK-EqbwV481O_XmWbZewpJw_zaZLWpQA8a9HWUeShJj_AnWK4_vJLOeTeTji9jFZ2zIyI8s47Erab5X9z3N319sfmMVIXRBIfDd9mYD9BLDcUh12WvoL0ZaISwfWh9hg ####################################################### TEST: jwtStateRS512Test ####################################################### Signed JWS State: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzUxMiIsImtpZCI6Ijg1YjA4NDgzLTY4OTAtNDg0My05YmFmLTgzN2EyNGEzYzZkMiJ9.eyJyZnAiOiIyZmI5OTFlMy0yMzJkLTQwZmUtYjc5Zi1kODVjZjFmODJmMDciLCJraWQiOiI4NWIwODQ4My02ODkwLTQ4NDMtOWJhZi04MzdhMjRhM2M2ZDIiLCJqdGkiOiI0YTY1MzFlZS04ZDUxLTQ2YmEtYmE3Yi04ZjBjNWRlOGEyZDEiLCJhZGRpdGlvbmFsX2NsYWltcyI6eyJmaXJzdF9uYW1lIjoiSmF2aWVyIiwibGFzdF9uYW1lIjoiUm9qYXMiLCJhZ2UiOjM0LCJtb3JlIjpbImZvbyIsImJhciJdfX0.g9RgOH8vsmctTJ8qPpyiAx6LH_K9UPapnCEb8-UTDn9OJxV3QndGvyU4fwlKpbbTLkHiSNHf52OovPBFclmbn_8t74-_uEjdtW5xFbSe4SdBmS1T8zdm7N9NZp45wzbhR3hs3HleYkjFYXHAnw6VZFVpnkz3O5YINXKKh9W1mquOInaOx_SwVThsNeWysF4IBPmO5FmyIq-bjCDNe17pbJBkMgRVHhBCdTmrIJQxNRysl2_t6IxuSyFn7juQlL9KSgbhOgdiqDolehBisH8DcgcabIGGq26nfITOOwylU53Lh8ROl0cI5PX0lN7TG1h3QT4i191_OZ23YW-Q_rdpcw ####################################################### TEST: OpenID Connect Discovery ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/webfinger?resource=acct%3Atest_user%40ce-dev4.gluu.org&rel=http%3A%2F%2Fopenid.net%2Fspecs%2Fconnect%2F1.0%2Fissuer HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 181 Content-Type: application/jrd+json;charset=iso-8859-1 Date: Wed, 04 Jul 2018 23:05:11 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "subject": "acct:test_user@ce-dev4.gluu.org", "links": [{ "rel": "http://openid.net/specs/connect/1.0/issuer", "href": "https://ce-dev4.gluu.org" }] } OpenID Connect Configuration ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /.well-known/openid-configuration HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Connection: Keep-Alive Content-Length: 6342 Content-Type: application/json Date: Wed, 04 Jul 2018 23:05:11 GMT Keep-Alive: timeout=5, max=100 Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "issuer": "https://ce-dev4.gluu.org", "authorization_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/authorize", "token_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/token", "userinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/userinfo", "clientinfo_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/clientinfo", "check_session_iframe": "https://ce-dev4.gluu.org/oxauth/opiframe", "end_session_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/end_session", "jwks_uri": "https://ce-dev4.gluu.org/oxauth/restv1/jwks", "registration_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/register", "id_generation_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/id", "introspection_endpoint": "https://ce-dev4.gluu.org/oxauth/restv1/introspection", "scopes_supported": [ "permission", "clientinfo", "email", "user_name", "sub", "org_name", "address", "openid", "test_scope1", "work_phone", "phone", "profile", "mobile_phone", "test" ], "response_types_supported": [ "id_token", "code", "id_token code token", "id_token code", "code token", "id_token token", "token" ], "grant_types_supported": [ "implicit", "refresh_token", "urn:ietf:params:oauth:grant-type:uma-ticket", "client_credentials", "authorization_code", "password" ], "acr_values_supported": [ "super_gluu", "u2f", "otp", "basic", "auth_ldap_server" ], "auth_level_mapping": { "-1": ["auth_ldap_server"], "50": ["otp"], "100": ["basic"], "10": ["u2f"], "15": ["super_gluu"] }, "subject_types_supported": [ "public", "pairwise" ], "userinfo_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "userinfo_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "userinfo_encryption_enc_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "id_token_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "request_object_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported": [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "request_object_encryption_enc_values_supported": [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "token_endpoint_auth_signing_alg_values_supported": [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "display_values_supported": [ "page", "popup" ], "claim_types_supported": ["normal"], "claims_supported": [ "birthdate", "country", "name", "email", "email_verified", "given_name", "gender", "inum", "family_name", "updated_at", "locale", "member_of", "middle_name", "nickname", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope", "phone_number_verified", "picture", "preferred_username", "profile", "zoneinfo", "user_name", "website" ], "service_documentation": "http://gluu.org/docs", "claims_locales_supported": ["en"], "ui_locales_supported": [ "en", "es" ], "scope_to_claims_mapping": [ {"permission": []}, {"uma_protection": []}, {"clientinfo": [ "name", "inum", "oxAuthAppType", "oxAuthIdTokenSignedResponseAlg", "oxAuthRedirectURI", "oxAuthScope" ]}, {"email": [ "email_verified", "email" ]}, {"user_name": ["user_name"]}, {"sub": []}, {"org_name": []}, {"address": [ "formatted", "postal_code", "street_address", "locality", "country", "region" ]}, {"openid": []}, {"test_scope1": []}, {"work_phone": []}, {"phone": [ "phone_number_verified", "phone_number" ]}, {"profile": [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ]}, {"mobile_phone": ["phone_mobile_number"]}, {"test": ["member_of"]} ], "claims_parameter_supported": true, "request_parameter_supported": true, "request_uri_parameter_supported": true, "require_request_uri_registration": false, "op_policy_uri": "http://ox.gluu.org/doku.php?id=oxauth:policy", "op_tos_uri": "http://ox.gluu.org/doku.php?id=oxauth:tos", "frontchannel_logout_supported": true, "frontchannel_logout_session_supported": true } ####################################################### TEST: requestEndSession by id_token ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "post_logout_redirect_uris": ["https://client.example.com/pl"], "frontchannel_logout_uri": ["https://ce-dev4.gluu.org/oxauth-rp/home.htm"] } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1488 Content-Type: application/json Date: Wed, 04 Jul 2018 23:05:12 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0DA0.54AF.73AC.94DC", "client_secret": "3bbc37a2-0005-4b44-8e12-25d20ce53c7d", "registration_access_token": "f9346740-4770-4fb1-9beb-24b88adec6b9", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!0DA0.54AF.73AC.94DC", "client_id_issued_at": 1530745512, "client_secret_expires_at": 1530831912, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "id_token_signed_response_alg": "RS256", "token_endpoint_auth_method": "client_secret_basic", "require_auth_time": false, "post_logout_redirect_uris": ["https://client.example.com/pl"], "frontchannel_logout_uri": ["https://ce-dev4.gluu.org/oxauth-rp/home.htm"], "frontchannel_logout_session_required": false, "scope": "permission uma_protection clientinfo email user_name sub org_name address openid test_scope1 work_phone phone profile test", "claims": "" } authenticateResourceOwnerAndGrantAccess: Cleaning cookies authenticateResourceOwnerAndGrantAccess: authorizationRequestUrl:https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210DA0.54AF.73AC.94DC&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=8a1cae5d-3cc3-4d13-a74f-37e5eb5ba03c&nonce=e26a281d-791d-439b-85cf-de2be4fc7b04 19:05:32.425 [main] ERROR com.gargoylesoftware.htmlunit.javascript.StrictErrorReporter - runtimeError: message=[An invalid or illegal selector was specified (selector: '*,:x' error: Invalid selector: :x).] sourceName=[https://ce-dev4.gluu.org/oxauth/js/jquery-1.12.4.min.js] line=[2] lineSource=[null] lineOffset=[0] authenticateResourceOwnerAndGrantAccess: sessionState:9790812b-d1a3-47df-9175-22329b93cde0 ------------------------------------------------------- REQUEST: ------------------------------------------------------- https://ce-dev4.gluu.org/oxauth/restv1/authorize?response_type=token+id_token&client_id=%40%2138D4.410C.1D43.8932%210001%2137F2.B744%210008%210DA0.54AF.73AC.94DC&scope=openid+profile+address+email&redirect_uri=https%3A%2F%2Fce-dev4.gluu.org%2Foxauth-rp%2Fhome.htm&state=8a1cae5d-3cc3-4d13-a74f-37e5eb5ba03c&nonce=e26a281d-791d-439b-85cf-de2be4fc7b04 ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 302 Found Location: https://ce-dev4.gluu.org/oxauth-rp/home.htm#access_token=c8e5c1f9-606e-4539-979d-865b2456bb43&scope=address+openid+profile+email&id_token=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwREEwLjU0QUYuNzNBQy45NERDIiwiZXhwIjoxNTMwNzQ5MTEzLCJpYXQiOjE1MzA3NDU1MTMsIm5vbmNlIjoiZTI2YTI4MWQtNzkxZC00MzliLTg1Y2YtZGUyYmU0ZmM3YjA0IiwiYXV0aF90aW1lIjoxNTMwNzQ1NTEzLCJhdF9oYXNoIjoiTkdqb1pjb2RoMVczM3ctZFlXZHd2dyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6InhveV9tMlV2aU4xY0lzNjY0QnZUSUZYU1FldVVUSzZQajdfaWlSRWZZbEUifQ.eua8m4xQo6HuAOrWiSK8uIiXdDCBFnlR1a9ycM_x32sR9nq6uz8S2PSaFo0n9R1PVIX3B3mgbrbzmioHQcRzYfm_lZ3SgtMIl0f4Eiz7Ki_m07EA-S9sI9UhQxL1blzMrkhJ9LJ9LXdrsyGG9Tacxv0LN44bCCrY1vxRk2ADidcbWjADoS9KVAVrBrlTGTHGfUXxi7yltGUV2qRx2cAsOJ9bPxepHvumTLNAzHhk62Z03Pw2yykl5AYvdNyorFDoHFbzSfPmErr1ynoVsxOd8XC-eocg7cZGwYOQBkCMQeg__9hlt1dTk5EYlUPM-KWAiCFAFLQqgKvIEIb-_zxt6A&session_id=36fb7503-6b86-4662-ba34-79f49b2954ab&state=8a1cae5d-3cc3-4d13-a74f-37e5eb5ba03c&token_type=bearer&session_state=9790812b-d1a3-47df-9175-22329b93cde0&expires_in=299 ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/end_session?id_token_hint=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwREEwLjU0QUYuNzNBQy45NERDIiwiZXhwIjoxNTMwNzQ5MTEzLCJpYXQiOjE1MzA3NDU1MTMsIm5vbmNlIjoiZTI2YTI4MWQtNzkxZC00MzliLTg1Y2YtZGUyYmU0ZmM3YjA0IiwiYXV0aF90aW1lIjoxNTMwNzQ1NTEzLCJhdF9oYXNoIjoiTkdqb1pjb2RoMVczM3ctZFlXZHd2dyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6InhveV9tMlV2aU4xY0lzNjY0QnZUSUZYU1FldVVUSzZQajdfaWlSRWZZbEUifQ.eua8m4xQo6HuAOrWiSK8uIiXdDCBFnlR1a9ycM_x32sR9nq6uz8S2PSaFo0n9R1PVIX3B3mgbrbzmioHQcRzYfm_lZ3SgtMIl0f4Eiz7Ki_m07EA-S9sI9UhQxL1blzMrkhJ9LJ9LXdrsyGG9Tacxv0LN44bCCrY1vxRk2ADidcbWjADoS9KVAVrBrlTGTHGfUXxi7yltGUV2qRx2cAsOJ9bPxepHvumTLNAzHhk62Z03Pw2yykl5AYvdNyorFDoHFbzSfPmErr1ynoVsxOd8XC-eocg7cZGwYOQBkCMQeg__9hlt1dTk5EYlUPM-KWAiCFAFLQqgKvIEIb-_zxt6A&post_logout_redirect_uri=https%3A%2F%2Fclient.example.com%2Fpl&state=12c2629c-ac85-4e51-ab9e-65041b929ed6&session_id=36fb7503-6b86-4662-ba34-79f49b2954ab HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-transform, no-store Connection: Keep-Alive Content-Length: 343 Content-Type: text/html Date: Wed, 04 Jul 2018 23:05:13 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Set-Cookie: session_id=;Path=/;Expires=Thu, 01-Jan-1970 00:00:00 GMT;Max-Age=0;HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Gluu Generated logout pageLogout requests sent.
------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/end_session?id_token_hint=eyJraWQiOiI4NzE2OGJjMS1lNTU4LTQxNjktOGRkMS05ZmJkNDUxZGU1ZDciLCJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2NlLWRldjQuZ2x1dS5vcmciLCJhdWQiOiJAITM4RDQuNDEwQy4xRDQzLjg5MzIhMDAwMSEzN0YyLkI3NDQhMDAwOCEwREEwLjU0QUYuNzNBQy45NERDIiwiZXhwIjoxNTMwNzQ5MTEzLCJpYXQiOjE1MzA3NDU1MTMsIm5vbmNlIjoiZTI2YTI4MWQtNzkxZC00MzliLTg1Y2YtZGUyYmU0ZmM3YjA0IiwiYXV0aF90aW1lIjoxNTMwNzQ1NTEzLCJhdF9oYXNoIjoiTkdqb1pjb2RoMVczM3ctZFlXZHd2dyIsIm94T3BlbklEQ29ubmVjdFZlcnNpb24iOiJvcGVuaWRjb25uZWN0LTEuMCIsInN1YiI6InhveV9tMlV2aU4xY0lzNjY0QnZUSUZYU1FldVVUSzZQajdfaWlSRWZZbEUifQ.eua8m4xQo6HuAOrWiSK8uIiXdDCBFnlR1a9ycM_x32sR9nq6uz8S2PSaFo0n9R1PVIX3B3mgbrbzmioHQcRzYfm_lZ3SgtMIl0f4Eiz7Ki_m07EA-S9sI9UhQxL1blzMrkhJ9LJ9LXdrsyGG9Tacxv0LN44bCCrY1vxRk2ADidcbWjADoS9KVAVrBrlTGTHGfUXxi7yltGUV2qRx2cAsOJ9bPxepHvumTLNAzHhk62Z03Pw2yykl5AYvdNyorFDoHFbzSfPmErr1ynoVsxOd8XC-eocg7cZGwYOQBkCMQeg__9hlt1dTk5EYlUPM-KWAiCFAFLQqgKvIEIb-_zxt6A&post_logout_redirect_uri=https%3A%2F%2Fclient.example.com%2Fpl&state=d54ec222-1b8f-4cf4-94fb-be63970cec8a&session_id=36fb7503-6b86-4662-ba34-79f49b2954ab HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 307 Connection: Keep-Alive Content-Length: 149 Content-Type: text/plain Date: Wed, 04 Jul 2018 23:05:13 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Keep-Alive: timeout=5, max=100 Location: https://client.example.com/pl Server: Jetty(9.4.9.v20180320) Set-Cookie: session_id=;Path=/;Expires=Thu, 01-Jan-1970 00:00:00 GMT;Max-Age=0;HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_grant_and_session","error_description":"The provided access token and session state are invalid or were issued to another client."} ####################################################### TEST: requestEndSessionFail1 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/end_session HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 400 Connection: close Content-Length: 149 Content-Type: text/plain Date: Wed, 04 Jul 2018 23:05:13 GMT Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_grant_and_session","error_description":"The provided access token and session state are invalid or were issued to another client."} ####################################################### TEST: requestEndSessionFail2 ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- GET /oxauth/restv1/end_session?id_token_hint=INVALID_ACCESS_TOKEN&post_logout_redirect_uri=https%3A%2F%2Fclient.example.com%2Fpl&state=dea7ab00-069c-474d-bbbe-27e4190f7047 HTTP/1.1 Host: ce-dev4.gluu.org ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 307 Connection: Keep-Alive Content-Length: 149 Content-Type: text/plain Date: Wed, 04 Jul 2018 23:05:13 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Keep-Alive: timeout=5, max=100 Location: https://client.example.com/pl Server: Jetty(9.4.9.v20180320) Set-Cookie: session_id=;Path=/;Expires=Thu, 01-Jan-1970 00:00:00 GMT;Max-Age=0;HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block {"error":"invalid_grant_and_session","error_description":"The provided access token and session state are invalid or were issued to another client."} ####################################################### TEST: requestEndSession by session_id ####################################################### ------------------------------------------------------- REQUEST: ------------------------------------------------------- POST /oxauth/restv1/register HTTP/1.1 Content-Type: application/json Accept: application/json Host: ce-dev4.gluu.org { "redirect_uris": [ "https://ce-dev4.gluu.org/oxauth-rp/home.htm", "https://client.example.com/cb", "https://client.example.com/cb1", "https://client.example.com/cb2" ], "response_types": [ "token", "id_token" ], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "post_logout_redirect_uris": ["https://client.example.com/pl"], "frontchannel_logout_uri": ["https://ce-dev4.gluu.org/oxauth-rp/home.htm"] } ------------------------------------------------------- RESPONSE: ------------------------------------------------------- HTTP/1.1 200 Cache-Control: no-store Connection: Keep-Alive Content-Length: 1488 Content-Type: application/json Date: Wed, 04 Jul 2018 23:05:13 GMT Keep-Alive: timeout=5, max=100 Pragma: no-cache Server: Jetty(9.4.9.v20180320) Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block { "client_id": "@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B1FB.FD07.4BA6.DDBF", "client_secret": "cb870eeb-01b6-431e-aed3-918474b68108", "registration_access_token": "6746e57e-9847-4897-9c34-a10912894d0d", "registration_client_uri": "https://ce-dev4.gluu.org/oxauth/restv1/register?client_id=@!38D4.410C.1D43.8932!0001!37F2.B744!0008!B1FB.FD07.4BA6.DDBF", "client_id_issued_at": 1530745513, "client_secret_expires_at": 1530831913, "redirect_uris": [ "https://client.example.com/cb2", "https://client.example.com/cb1", "https://client.example.com/cb", "https://ce-dev4.gluu.org/oxauth-rp/home.htm" ], "response_types": [ "id_token", "token" ], "grant_types": ["implicit"], "application_type": "web", "client_name": "oxAuth test app", "sector_identifier_uri": "https://ce-dev4.gluu.org/oxauth/sectoridentifier/@!38D4.410C.1D43.8932!0001!37F2.B744!0012!D426.70FD", "subject_type": "pairwise", "