| Test Name | oid4vci-1_0-wallet-test-credential-issuance-notification |
|---|---|
| Variant | credential_format=sd_jwt_vc, vci_credential_issuance_mode=immediate, fapi_request_method=unsigned, vci_grant_type=pre_authorization_code, vci_credential_encryption=plain, sender_constrain=dpop, client_auth_type=private_key_jwt, vci_authorization_code_flow_variant=issuer_initiated, authorization_request_type=simple, fapi_client_type=plain_oauth, vci_credential_offer_variant=by_value, fapi_profile=vci, fapi_response_mode=plain_response |
| Test ID | tzQTfpcZVrYUQqq https://localhost.emobix.co.uk:8443/log-detail.html?public=true&log=tzQTfpcZVrYUQqq |
| Created | 2026-05-24T11:40:16.120789932Z |
| Description | OID4VCI wallet conformance test for SIROS wallet [563ad8a] |
| Test Version | 5.1.44 |
| Test Owner | developer https://developer.com |
| Plan ID | HUlaWig0HuYzt https://localhost.emobix.co.uk:8443/plan-detail.html?public=true&plan=HUlaWig0HuYzt |
| Exported From | https://localhost.emobix.co.uk:8443 |
| Exported By | developer https://developer.com |
| Suite Version | 5.1.44 |
| Exported | 2026-05-24 11:41:05 (UTC) |
| Status: FINISHED Result: FAILED |
| SUCCESS 110 FAILURE 1 WARNING 0 REVIEW 0 INFO 8 |
Failure summary:
|
| 2026-05-24 11:40:16 |
INFO
|
TEST-RUNNER
Test instance tzQTfpcZVrYUQqq created
|
||||||||||||||||
|
||||||||||||||||||
| 2026-05-24 11:40:16 |
SUCCESS
|
GenerateServerConfigurationMTLS
Created server configuration
|
||||||
|
||||||||
| 2026-05-24 11:40:16 |
SUCCESS
|
LoadServerJWKs
Parsed public and private JWK sets
|
||||||
|
||||||||
| 2026-05-24 11:40:16 | SUCCESS |
ValidateServerJWKs
Valid server JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
|
|
|
||
| 2026-05-24 11:40:16 | SUCCESS |
AugmentRealJwksWithDecoys
Augmented JWKS with decoy keys.
|
||||
|
||||||
| 2026-05-24 11:40:16 |
|
SetRsaAltServerJwks
generated new alt RSA key configuration
|
|
|
||
| 2026-05-24 11:40:16 |
SUCCESS
|
SetRsaAltServerJwks
Set alt server key
|
||||||
|
||||||||
| 2026-05-24 11:40:16 | SUCCESS |
AddResponseTypeCodeToServerConfiguration
Added code as response type supported
|
||
|
||||
| 2026-05-24 11:40:16 | SUCCESS |
AddIssSupportedToServerConfiguration
Added 'authorization_response_iss_parameter_supported' as 'true' to server metadata
|
|
|
||
| 2026-05-24 11:40:16 | SUCCESS |
AddCodeChallengeMethodToServerConfiguration
Added S256 as supported code challenge method
|
||
|
||||
| 2026-05-24 11:40:16 |
SUCCESS
|
ExtractServerSigningAlg
Successfully extracted algorithm
|
||
|
||||
| 2026-05-24 11:40:16 |
SUCCESS
|
AddIdTokenSigningAlgsToServerConfiguration
Added 'id_token_signing_alg_values_supported' to server metadata as 'alg' from server jwks
|
||
|
||||
| 2026-05-24 11:40:16 | SUCCESS |
VCIEnsureCredentialSigningCertificateIsNotSelfSigned
Credential signing cert is not a self-signed cert
|
||
|
||||
| 2026-05-24 11:40:16 | SUCCESS |
AddDpopSigningAlgValuesSupportedToServerConfiguration
Set dpop_signing_alg_values_supported
|
||
|
||||
| 2026-05-24 11:40:16 |
|
SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly
Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration
|
||
|
||||
| 2026-05-24 11:40:16 |
AddPushedAuthorizationRequestEndpointToServerConfig
Added pushed_authorization_request_endpoint to server configuration
|
|||
|
||||
| 2026-05-24 11:40:16 |
AddRequirePushedAuthorizationRequestsToServerConfig
Added require_pushed_authorization_requests to server configuration
|
|||
|
||||
| 2026-05-24 11:40:16 |
SUCCESS
|
FAPI2AddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
|
||
|
||||
| 2026-05-24 11:40:16 |
|
VCIRegisterKeyAttestationTrustAnchor
Skipping registration of empty trust anchor certificate for key attestation
|
|
|
||
| 2026-05-24 11:40:16 |
VCILogGeneratedCredentialIssuerMetadata
Created credential issuer metadata
|
|||
|
||||
| 2026-05-24 11:40:16 |
VCIAddOpenIdCredentialToAuthorizationDetailsSupportedIfScopeIsMissing
No need to add openid_credential to authorization_details_types_supported in oauth authorization server metadata as all credential configurations use a scope
|
|
|
|
||
| 2026-05-24 11:40:16 |
|
VCIInjectCredentialConfigurationIdHint
Using implicit credential_configuration_id eu.europa.ec.eudi.pid.1
|
||
|
||||
| 2026-05-24 11:40:16 |
SUCCESS
|
CheckServerConfiguration
Found required server configuration keys
|
||
|
||||
| 2026-05-24 11:40:16 | SUCCESS |
FAPIEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
|
||
|
||||
| 2026-05-24 11:40:16 |
SUCCESS
|
LoadUserInfo
Added user information
|
||
|
||||
| Verify configuration of first client |
| 2026-05-24 11:40:16 |
SUCCESS
|
GetStaticClientConfiguration
Found a static client object
|
||||||||
|
||||||||||
| 2026-05-24 11:40:16 | SUCCESS |
ValidateClientJWKsPublicPart
Valid client JWKs: keys are valid JSON, contain the required fields and are correctly encoded using unpadded base64url
|
|
|
||
| 2026-05-24 11:40:16 |
SUCCESS
|
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
|
||||
|
||||||
| 2026-05-24 11:40:16 | SUCCESS |
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
|
||
|
||||
| 2026-05-24 11:40:16 |
SUCCESS
|
EnsureClientJwksDoesNotContainPrivateOrSymmetricKeys
Jwks does not contain any private or symmetric keys
|
|
|
||
| 2026-05-24 11:40:16 | SUCCESS |
FAPIEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
|
||
|
||||
| 2026-05-24 11:40:16 |
SUCCESS
|
CreateAuthorizationServerDpopNonce
Created Authorization Server DPoP nonce
|
||
|
||||
| 2026-05-24 11:40:16 |
SUCCESS
|
CreateResourceServerDpopNonce
Created Resource Server nonce
|
||
|
||||
| 2026-05-24 11:40:16 | SUCCESS |
CheckDistinctKeyIdValueInServerJWKs
Distinct 'kid' value in all keys of server_jwks
|
||
|
||||
| 2026-05-24 11:40:16 |
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Setup Done
|
|
|
||
| 2026-05-24 11:40:16 | SUCCESS |
VCIPreparePreAuthorizationCode
Prepared pre-authorized code
|
||||||
|
||||||||
| 2026-05-24 11:40:16 |
VCICreateCredentialOffer
Using credential_configuration_id eu.europa.ec.eudi.pid.1
|
|||
|
||||
| 2026-05-24 11:40:16 |
VCICreateCredentialOffer
Generated credential offer
|
|||||||
|
||||||||
| 2026-05-24 11:40:16 | SUCCESS |
VCICreateCredentialOfferRedirectUrl
Created credential offer redirect url
|
||||
|
||||||
| 2026-05-24 11:40:17 |
INCOMING
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Incoming HTTP request to /.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test/
|
||||||||||||||||||||||||
|
||||||||||||||||||||||||||
| Get OAuth Authorization Metadata |
| 2026-05-24 11:40:17 | SUCCESS |
EnsureIncomingRequestMethodIsGet
Client correctly used http GET method
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
VCICheckOAuthAuthorizationServerMetadataRequestUrl
OAuth authorization server metadata request is for correct URL
|
||
|
||||
| 2026-05-24 11:40:17 |
OUTGOING
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Response to HTTP request to test instance tzQTfpcZVrYUQqq
|
||||||||
|
||||||||||
| 2026-05-24 11:40:17 |
INCOMING
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Incoming HTTP request to /test/a/siros-wallet-vci-test/token
|
||||||||||||||||||||||||
|
||||||||||||||||||||||||||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
Found TLS 1.3 connection
|
|
|
||
| Token endpoint |
| 2026-05-24 11:40:17 | SUCCESS |
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ExtractClientAssertion
Parsed client assertion
|
||
|
||||
| 2026-05-24 11:40:17 |
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
|
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateClientAssertionSignature
client_assertion signature validated
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateClientAssertionClaims
Client Assertion passed all validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
CheckForClientAssertionJtiReuse
No reuse found for client_assertion JWT for jti=a8ab5e9d-3b9a-4a74-a124-7368cebf00bb
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateClientAssertionAudClaimIsIssuerAsString
private_key_jwt client Assertion 'aud' claim matches the authentication server issuer url
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
VCIValidateTxCode
Received tx_code matches expected tx_code
|
||||
|
||||||
| 2026-05-24 11:40:17 | SUCCESS |
ExtractDpopProofFromHeader
Found and parsed the incoming_dpop_proof from incoming_request
|
||||||
|
||||||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofTokenRequest
DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofIat
DPoP Proof iat value passed validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofNbf
DPoP Proof nbf value passed validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureDpopProofJtiNotAlreadyUsed
Proof jti seems to be unique to this request
|
||
|
||||
| 2026-05-24 11:40:17 |
|
ValidateTokenEndpointDpopProofNonce
DPoP Proof nonce not supplied
|
||
|
||||
| 2026-05-24 11:40:17 |
|
ValidateTokenEndpointDpopProofNonce
Token endpoint DPoP nonce is invalid
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofSignature
DPoP Proof signature validated
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateAuthorizationCodeDpopBindingKey
Authorization request does not use DPoP authorization code binding
|
||
|
||||
| 2026-05-24 11:40:17 |
|
CreateTokenEndpointDpopErrorResponse
Condition ran but did not log anything
|
|
|
||
| 2026-05-24 11:40:17 |
OUTGOING
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Response to HTTP request to test instance tzQTfpcZVrYUQqq
|
||||||||
|
||||||||||
| 2026-05-24 11:40:17 |
INCOMING
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Incoming HTTP request to /test/a/siros-wallet-vci-test/token
|
||||||||||||||||||||||||
|
||||||||||||||||||||||||||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
Found TLS 1.3 connection
|
|
|
||
| Token endpoint |
| 2026-05-24 11:40:17 | SUCCESS |
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ExtractClientAssertion
Parsed client assertion
|
||
|
||||
| 2026-05-24 11:40:17 |
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
|
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateClientAssertionSignature
client_assertion signature validated
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateClientAssertionClaims
Client Assertion passed all validation checks
|
|
|
||
| 2026-05-24 11:40:17 | FAILURE |
CheckForClientAssertionJtiReuse
Detected reuse of client_assertion JWT for jti=a8ab5e9d-3b9a-4a74-a124-7368cebf00bb
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateClientAssertionAudClaimIsIssuerAsString
private_key_jwt client Assertion 'aud' claim matches the authentication server issuer url
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
VCIValidateTxCode
Received tx_code matches expected tx_code
|
||||
|
||||||
| 2026-05-24 11:40:17 | SUCCESS |
ExtractDpopProofFromHeader
Found and parsed the incoming_dpop_proof from incoming_request
|
||||||
|
||||||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofTokenRequest
DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofIat
DPoP Proof iat value passed validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofNbf
DPoP Proof nbf value passed validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureDpopProofJtiNotAlreadyUsed
Proof jti seems to be unique to this request
|
||
|
||||
| 2026-05-24 11:40:17 |
SUCCESS
|
ValidateTokenEndpointDpopProofNonce
Token endpoint DPoP nonce matches expected value
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofSignature
DPoP Proof signature validated
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateAuthorizationCodeDpopBindingKey
Authorization request does not use DPoP authorization code binding
|
||
|
||||
| 2026-05-24 11:40:17 |
SUCCESS
|
VCIValidatePreAuthorizationCode
Found pre-authorized code
|
||
|
||||
| 2026-05-24 11:40:17 |
|
VCIInjectRequestScopePreAuthorizedCodeFlow
Injected scope
|
||
|
||||
| 2026-05-24 11:40:17 |
SUCCESS
|
GenerateDpopAccessToken
Generated DPoP access token and jkt for DPoP Proof JWK
|
||
|
||||
| 2026-05-24 11:40:17 |
|
GenerateAccessTokenExpiration
Set access_token_expiration to 900
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
CalculateAtHash
Successful at_hash encoding
|
||
|
||||
| 2026-05-24 11:40:17 |
|
CreateRefreshToken
Created refresh token
|
||
|
||||
| 2026-05-24 11:40:17 |
SUCCESS
|
CreateTokenEndpointResponse
|
||||
|
||||||
| 2026-05-24 11:40:17 |
|
VCIAddCredentialDataToAuthorizationDetailsForTokenEndpointResponse
Used credential_configuration from scope
|
||||||
|
||||||||
| 2026-05-24 11:40:17 |
SUCCESS
|
AddRarToTokenEndpointResponse
RAR payload included on token endpoint response
|
||||||||||
|
||||||||||||
| 2026-05-24 11:40:17 |
SUCCESS
|
CreateAuthorizationServerDpopNonce
Created Authorization Server DPoP nonce
|
||
|
||||
| 2026-05-24 11:40:17 |
OUTGOING
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Response to HTTP request to test instance tzQTfpcZVrYUQqq
|
||||||||
|
||||||||||
| 2026-05-24 11:40:17 |
INCOMING
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Incoming HTTP request to /test/a/siros-wallet-vci-test/nonce
|
||||||||||||||||||||||||
|
||||||||||||||||||||||||||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
Found TLS 1.3 connection
|
|
|
||
| Nonce endpoint |
| 2026-05-24 11:40:17 | SUCCESS |
CreateFapiInteractionIdIfNeeded
Created new FAPI interaction ID
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
GenerateCredentialNonce
Created credential nonce
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
GenerateCredentialNonceResponse
Created credential nonce response
|
||||
|
||||||
| 2026-05-24 11:40:17 |
OUTGOING
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Response to HTTP request to test instance tzQTfpcZVrYUQqq
|
||||||||
|
||||||||||
| 2026-05-24 11:40:17 |
INCOMING
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Incoming HTTP request to /test/a/siros-wallet-vci-test/credential
|
||||||||||||||||||||||||
|
||||||||||||||||||||||||||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
Found TLS 1.3 connection
|
|
|
||
| Credential endpoint |
| 2026-05-24 11:40:17 | SUCCESS |
VCIEnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ExtractDpopProofFromHeader
Found and parsed the incoming_dpop_proof from incoming_request
|
||||||
|
||||||||
| 2026-05-24 11:40:17 | SUCCESS |
ExtractDpopAccessTokenFromHeader
Found DPoP access token
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofResourceRequest
DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofIat
DPoP Proof iat value passed validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofNbf
DPoP Proof nbf value passed validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureDpopProofJtiNotAlreadyUsed
Proof jti seems to be unique to this request
|
||
|
||||
| 2026-05-24 11:40:17 |
|
ValidateResourceEndpointDpopProofNonce
DPoP Proof nonce is invalid
|
||||
|
||||||
| 2026-05-24 11:40:17 |
|
ValidateResourceEndpointDpopProofNonce
Resource endpoint DPoP nonce is invalid
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofSignature
DPoP Proof signature validated
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopAccessToken
DPoP Access Token is valid
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopAccessTokenJkt
DPoP Access Token is constrained to DPoP Proof JWK
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofAccessTokenHash
DPoP Proof ath claim matches DPoP access token hash
|
||
|
||||
| 2026-05-24 11:40:17 | INFO |
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
|
||||||
|
||||||||
| 2026-05-24 11:40:17 | INFO |
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
|
||||||
|
||||||||
| 2026-05-24 11:40:17 | INFO |
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
|
||||||
|
||||||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateFAPIInteractionIdInResourceRequest
x-fapi-interaction-id in resource request headers is a valid UUID
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
|
|
|
||
| 2026-05-24 11:40:17 |
|
CreateResourceEndpointDpopErrorResponse
Condition ran but did not log anything
|
|
|
||
| 2026-05-24 11:40:17 |
OUTGOING
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Response to HTTP request to test instance tzQTfpcZVrYUQqq
|
||||||||
|
||||||||||
| 2026-05-24 11:40:17 |
INCOMING
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Incoming HTTP request to /test/a/siros-wallet-vci-test/credential
|
||||||||||||||||||||||||
|
||||||||||||||||||||||||||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureIncomingTls12WithSecureCipherOrTls13
Found TLS 1.3 connection
|
|
|
||
| Credential endpoint |
| 2026-05-24 11:40:17 | SUCCESS |
VCIEnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ExtractDpopProofFromHeader
Found and parsed the incoming_dpop_proof from incoming_request
|
||||||
|
||||||||
| 2026-05-24 11:40:17 | SUCCESS |
ExtractDpopAccessTokenFromHeader
Found DPoP access token
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofResourceRequest
DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofIat
DPoP Proof iat value passed validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofNbf
DPoP Proof nbf value passed validation checks
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureDpopProofJtiNotAlreadyUsed
Proof jti seems to be unique to this request
|
||
|
||||
| 2026-05-24 11:40:17 |
SUCCESS
|
ValidateResourceEndpointDpopProofNonce
Resource endpoint DPoP nonce matches expected value
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofSignature
DPoP Proof signature validated
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopAccessToken
DPoP Access Token is valid
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopAccessTokenJkt
DPoP Access Token is constrained to DPoP Proof JWK
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateDpopProofAccessTokenHash
DPoP Proof ath claim matches DPoP access token hash
|
||
|
||||
| 2026-05-24 11:40:17 | INFO |
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
|
||||||
|
||||||||
| 2026-05-24 11:40:17 | INFO |
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
|
||||||
|
||||||||
| 2026-05-24 11:40:17 | INFO |
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
|
||||||
|
||||||||
| 2026-05-24 11:40:17 | SUCCESS |
ValidateFAPIInteractionIdInResourceRequest
x-fapi-interaction-id in resource request headers is a valid UUID
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
|
|
|
||
| 2026-05-24 11:40:17 | SUCCESS |
VCIEnsureCredentialRequestUsesApplicationJson
Credential request Content-Type is application/json
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
VCIEnsureCredentialRequestEncryptedIfResponseEncryptionRequested
Plaintext credential request body does not include credential_response_encryption
|
||
|
||||
| 2026-05-24 11:40:17 | SUCCESS |
VCIValidateCredentialRequestStructure
OID4VCI Credential Request input is valid
|
||||
|
||||||
| 2026-05-24 11:40:17 | SUCCESS |
CheckForUnexpectedParametersInCredentialRequest
OID4VCI Credential Request input is valid
|
||||
|
||||||
| 2026-05-24 11:40:17 |
VCIResolveRequestedCredentialConfigurationFromRequest
Found requested credential_configuration via credential_configuration_id eu.europa.ec.eudi.pid.1
|
|||||
|
||||||
| 2026-05-24 11:40:17 | SUCCESS |
VCIResolveRequestedCredentialConfigurationFromRequest
Resolved requested credential_configuration to eu.europa.ec.eudi.pid.1
|
||
|
||||
| 2026-05-24 11:40:17 |
VCIExtractCredentialRequestProof
Found proofs element in credential request
|
|||
|
||||
| 2026-05-24 11:40:17 |
VCIExtractCredentialRequestProof
Found 1 JWT(s) for 'jwt' proof.
|
|||
|
||||
| 2026-05-24 11:40:18 | SUCCESS |
VCIExtractCredentialRequestProof
Extracted 1 'jwt' proof(s) from credential request
|
||||
|
||||||
| 2026-05-24 11:40:18 |
VCIValidateCredentialRequestJwtProof
Detected proof type jwt is allowed by credential_configuration_id: eu.europa.ec.eudi.pid.1
|
|||||
|
||||||
| 2026-05-24 11:40:18 |
VCIValidateCredentialRequestJwtProof
Found expected proof type: jwt
|
|||||
|
||||||
| 2026-05-24 11:40:18 |
VCIValidateCredentialRequestJwtProof
Found expected algorithm for proof type: jwt
|
|||
|
||||
| 2026-05-24 11:40:18 |
VCIValidateCredentialRequestJwtProof
Found public key by jwk header
|
|||
|
||||
| 2026-05-24 11:40:18 |
VCIValidateCredentialRequestJwtProof
Detected an EC public key
|
|||
|
||||
| 2026-05-24 11:40:18 |
VCIValidateCredentialRequestJwtProof
Detected EC public key with curve P-256
|
|||
|
||||
| 2026-05-24 11:40:18 |
VCIValidateCredentialRequestJwtProof
Skipping nested key_attestation validation, as it is not required by credential_configuration_id: eu.europa.ec.eudi.pid.1
|
|||||
|
||||||
| 2026-05-24 11:40:18 |
VCIValidateCredentialRequestJwtProof
Detected valid proof JWT for proof type: jwt
|
|
|
|
||
| 2026-05-24 11:40:18 |
VCIValidateCredentialRequestJwtProof
Detected and invalidated expected nonce
|
|||
|
||||
| 2026-05-24 11:40:18 |
VCIValidateCredentialRequestJwtProof
JWT proof iat is within acceptable time window
|
|||||||||
|
||||||||||
| 2026-05-24 11:40:18 |
VCIValidateCredentialRequestJwtProof
Found expected audience 'https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/' for proof type: jwt
|
|||||
|
||||||
| 2026-05-24 11:40:18 | SUCCESS |
VCIValidateCredentialRequestJwtProof
Successfully validated proof jwt
|
||||
|
||||||
| 2026-05-24 11:40:18 |
VCIValidateAttestedKeysInKeyAttestationFromJwtProof
Skipping key_attestation_jwt validation, as it is not present in the environment
|
|
|
|
||
| 2026-05-24 11:40:18 | INFO |
CreateFapiInteractionIdIfNeeded
Found existing FAPI interaction ID
|
||
|
||||
| 2026-05-24 11:40:18 |
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Creating credential with format: dc+sd-jwt, credential_configuration: {"format":"dc+sd-jwt","vct":"urn:eudi:pid:1","cryptographic_binding_methods_supported":["jwk"],"credential_signing_alg_values_supported":["ES256"],"proof_types_supported":{"jwt":{"proof_signing_alg_values_supported":["ES256"]}},"credential_metadata":{"display":[{"name":"Fake PID tzQTfpcZVrYUQqq","description":"OpenID Conformance Test Fake PID description"}]},"scope":"eudi.pid.1"}, variant credential_format: sd_jwt_vc
|
|
|
||
| 2026-05-24 11:40:18 |
CreateSdJwtCredential
Found 1 JWK(s) from jwt proofs
|
|||
|
||||
| 2026-05-24 11:40:18 |
CreateSdJwtCredential
Created urn:eudi:pid:1 in SD-JWT VC format
|
|||||
|
||||||
| 2026-05-24 11:40:18 | SUCCESS |
VCICreateCredentialEndpointResponse
Created credential response object
|
||||||
|
||||||||
| 2026-05-24 11:40:18 |
VCIAddNotificationIdToCredentialEndpointResponse
Added notification_id to credential response object
|
|||||
|
||||||
| 2026-05-24 11:40:18 |
|
ClearAccessTokenFromRequest
Removed incoming access token from environment
|
|
|
||
| 2026-05-24 11:40:18 |
SUCCESS
|
CreateResourceServerDpopNonce
Created Resource Server nonce
|
||
|
||||
| 2026-05-24 11:40:18 |
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Credential delivered to wallet. Waiting up to 20 seconds for the wallet to call the notification endpoint before deciding the test outcome.
|
|
|
||
| 2026-05-24 11:40:18 |
OUTGOING
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Response to HTTP request to test instance tzQTfpcZVrYUQqq
|
||||||||
|
||||||||||
| 2026-05-24 11:40:38 |
SKIPPED
|
oid4vci-1_0-wallet-test-credential-issuance-notification
The test was skipped: The wallet did not call the notification endpoint within 20 seconds after the credential was delivered. This variant's assertions cannot be evaluated without a notification, so the test is being skipped.
|
|
|
||
| 2026-05-24 11:40:38 |
FINISHED
|
oid4vci-1_0-wallet-test-credential-issuance-notification
Test has run to completion
|
||
|
||||
| 2026-05-24 11:40:40 |
|
TEST-RUNNER
Alias has now been claimed by another test
|
||||
|
||||||