| Test Name | oid4vp-1final-verifier-invalid-credential-signature |
|---|---|
| Variant | credential_format=sd_jwt_vc, client_id_prefix=x509_hash, request_method=request_uri_signed, vp_profile=plain_vp, response_mode=direct_post.jwt |
| Test ID | adUFkq6T3FX9Qpm https://localhost.emobix.co.uk:8443/log-detail.html?public=true&log=adUFkq6T3FX9Qpm |
| Created | 2026-11-10T15:18:22.996220153Z |
| Description | OID4VP verifier/RP conformance test for SIROS VC verifier |
| Test Version | 5.3.4 |
| Test Owner | leifj |
| Plan ID | 0mZCzziD8dojl https://localhost.emobix.co.uk:8443/plan-detail.html?public=true&plan=0mZCzziD8dojl |
| Exported From | https://localhost.emobix.co.uk:8443 |
| Exported By | leifj |
| Suite Version | 5.3.4 |
| Exported | 2026-11-10 15:18:49 (UTC) |
| Status: FINISHED Result: PASSED |
| SUCCESS 51 FAILURE 0 WARNING 0 REVIEW 0 INFO 15 |
| 2026-11-10 15:18:22 |
INFO
|
TEST-RUNNER
Test instance adUFkq6T3FX9Qpm created
|
||||||||||||||||
|
||||||||||||||||||
| 2026-11-10 15:18:22 |
SUCCESS
|
OIDCCGenerateServerConfiguration
Generated default server configuration
|
||
|
||||
| 2026-11-10 15:18:22 |
SetRequestUriParameterSupportedToTrueInServerConfiguration
Enabled request_uri support in server configuration
|
|||
|
||||
| 2026-11-10 15:18:22 |
|
RegisterClientRequestObjectTrustAnchor
No client request object trust anchor configured, skipping registration
|
|
|
||
| 2026-11-10 15:18:23 |
|
RegisterRical
No RICAL configured, skipping RICAL-based verifier trust checks
|
|
|
||
| 2026-11-10 15:18:23 | INFO |
CallRicalEndpoint
Skipped evaluation due to missing required string: rical_url
|
||
|
||||
| 2026-11-10 15:18:23 | INFO |
ParseRical
Skipped evaluation due to missing required object: rical
|
||||
|
||||||
| 2026-11-10 15:18:23 |
INFO
|
DumpRicalCborDiagnostics
Skipped evaluation due to missing required object: rical
|
||||
|
||||||
| 2026-11-10 15:18:23 | INFO |
ValidateRicalSignature
Skipped evaluation due to missing required object: rical
|
||||
|
||||||
| 2026-11-10 15:18:23 | INFO |
ValidateRicalSignerCertificate
Skipped evaluation due to missing required object: rical
|
||||
|
||||||
| 2026-11-10 15:18:23 | INFO |
ValidateRicalStructure
Skipped evaluation due to missing required object: rical
|
||||
|
||||||
| 2026-11-10 15:18:23 |
|
oid4vp-1final-verifier-invalid-credential-signature
Setup Done
|
|
|
||
| 2026-11-10 15:18:24 |
INCOMING
|
oid4vp-1final-verifier-invalid-credential-signature
Incoming HTTP request to /test/a/siros-verifier-vp-test/authorize
|
||||||||||||||||||||||||
|
||||||||||||||||||||||||||
| Authorization endpoint |
| 2026-11-10 15:18:24 |
FetchRequestUriAndExtractRequestObject
Fetching request object from request_uri
|
|||
|
||||
| 2026-11-10 15:18:24 |
|
FetchRequestUriAndExtractRequestObject
HTTP request
|
||||||||
|
||||||||||
| 2026-11-10 15:18:24 |
RESPONSE
|
FetchRequestUriAndExtractRequestObject
HTTP response
|
||||||||
|
||||||||||
| 2026-11-10 15:18:24 |
FetchRequestUriAndExtractRequestObject
Downloaded request object
|
|||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
FetchRequestUriAndExtractRequestObject
Parsed request object
|
||||||
|
||||||||
| 2026-11-10 15:18:24 | SUCCESS |
EnsureRequestUriIsHttps
request_uri is a https url
|
||
|
||||
| 2026-11-10 15:18:24 |
SUCCESS
|
EnsureRequestUriHasNoFragment
request_uri does not contain a fragment
|
||
|
||||
| 2026-11-10 15:18:24 |
SUCCESS
|
ExtractAndValidateX509HashClientId
Client ID matched
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
ValidateRequestObjectTypIsOAuthQauthReqJwt
Request object typ header is valid
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
OIDCCValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
ValidateRequestObjectIat
iat claim is valid
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
|
||
|
||||
| 2026-11-10 15:18:24 |
ValidateRequestObjectMaxAge
Request object does not contain a max_age claim
|
|
|
|
||
| 2026-11-10 15:18:24 | SUCCESS |
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
|
|
|
||
| 2026-11-10 15:18:24 | SUCCESS |
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
|
|
|
||
| 2026-11-10 15:18:24 | SUCCESS |
ValidateRequestObjectIssIfPresent
Request object does not contain an 'iss' claim, which is permitted by the spec
|
|
|
||
| 2026-11-10 15:18:24 | SUCCESS |
ValidateRequestObjectAudForVP
Request object aud claim is valid
|
||||||
|
||||||||
| 2026-11-10 15:18:24 | SUCCESS |
ValidateRequestObjectSignatureAgainstX5cHeader
Request object x5c chain validated and signature verified
|
||||||
|
||||||||
| 2026-11-10 15:18:24 | INFO |
ValidateRequestObjectX5cChainAgainstRical
Skipped evaluation due to missing required object: rical
|
||||
|
||||||
| 2026-11-10 15:18:24 | INFO |
EnsureMatchedRicalEntryHasNoTrustConstraints
Skipped evaluation due to missing required object: rical
|
||||
|
||||||
| 2026-11-10 15:18:24 |
SUCCESS
|
EnsureClientIdInAuthorizationRequestParametersMatchRequestObject
client_id http request parameter value matches client_id in request object
|
|
|
||
| 2026-11-10 15:18:24 | INFO |
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
|
||||||
|
||||||||
| 2026-11-10 15:18:24 | SUCCESS |
EnsureOptionalAuthorizationRequestParametersMatchRequestObject
All http request parameters and request object claims match
|
|
|
||
| 2026-11-10 15:18:24 |
SUCCESS
|
CheckForUnexpectedParametersInVpAuthorizationEndpointHttpRequest
All HTTP authorization request parameters are expected
|
||||
|
||||||
| 2026-11-10 15:18:24 | SUCCESS |
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
ExtractNonceFromAuthorizationRequest
Extracted nonce
|
||
|
||||
| 2026-11-10 15:18:24 | INFO |
EnsureAuthorizationRequestContainsPkceCodeChallenge
Skipped evaluation due to missing required element: effective_authorization_endpoint_request code_challenge
|
||||||
|
||||||||
| 2026-11-10 15:18:24 |
SUCCESS
|
EnsureResponseTypeIsVpToken
Response type is expected value
|
||
|
||||
| 2026-11-10 15:18:24 |
SUCCESS
|
ValidateResponseMode
response_mode is direct_post.jwt
|
|
|
||
| 2026-11-10 15:18:24 |
SUCCESS
|
CheckNoClientIdSchemeParameter
client_id_scheme parameter is not present, as expected.
|
|
|
||
| 2026-11-10 15:18:24 | SUCCESS |
CheckNoScopeParameter
scope parameter is not present, as expected.
|
|
|
||
| 2026-11-10 15:18:24 | SUCCESS |
CheckRequestUriMethodParameter
request_uri_method is 'post'
|
|
|
||
| 2026-11-10 15:18:24 | INFO |
WarnIfRequestUriMethodInRequestObject
Skipped evaluation due to missing required string: authorization_request_object
|
||
|
||||
| 2026-11-10 15:18:24 |
SUCCESS
|
CheckForUnexpectedParametersInVpAuthorizationRequest
All authorization parameters are expected
|
||||
|
||||||
| 2026-11-10 15:18:24 | SUCCESS |
CheckNoTransactionDataInVpAuthorizationRequest
Authorization request does not contain transaction_data
|
|
|
||
| 2026-11-10 15:18:24 | INFO |
ExtractVerifierInfoFromAuthorizationRequest
Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info
|
||||||
|
||||||||
| 2026-11-10 15:18:24 | INFO |
ValidateVerifierInfo
Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info
|
||||||
|
||||||||
| 2026-11-10 15:18:24 | INFO |
CheckForUnexpectedParametersInVerifierInfo
Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info
|
||||||
|
||||||||
| 2026-11-10 15:18:24 | SUCCESS |
EnsureValidResponseUriForAuthorizationEndpointRequest
response_uri is valid https url with no fragment
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
CheckNoRedirectUriInVpAuthorizationRequest
Authorization request does not contain 'redirect_uri'
|
|
|
||
| 2026-11-10 15:18:24 |
SUCCESS
|
CheckNoPresentationDefinitionInVpAuthorizationRequest
Authorization request does not contain presentation_definition or presentation_definition_uri
|
|
|
||
| 2026-11-10 15:18:24 | SUCCESS |
VP1FinalCheckForUnexpectedParametersInVpClientMetadata
All client_metadata parameters are expected
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
VP1FinalValidateVpFormatsSupportedInClientMetadata
vp_formats_supported contains valid dc+sd-jwt format
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
VP1FinalCheckForKeyIdInClientMetadataJWKs
All keys in client_metadata.jwks have unique kid values
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
VP1FinalValidateClientMetadataJwksForEncryptedResponse
client_metadata.jwks contains valid encryption key(s) with alg
|
||
|
||||
| Validate the JWK set in client_metadata |
| 2026-11-10 15:18:24 |
SUCCESS
|
MapJwksToValidationLocation
Selected the JWK set in client_metadata for validation
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
EnsureJwksHasNoPrivateOrSymmetricKeyMaterial
The JWK set in client_metadata contains only public key material
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
ValidateJwksStructure
The JWK set in client_metadata is structurally valid
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
ParseUsableJwksKeys
All usable keys in the JWK set in client_metadata parse successfully
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
WarnOnUnusableJwksKeys
All keys in the JWK set in client_metadata use a supported key type, curve and algorithm
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
VP1FinalCheckEncryptionKeyNotReused
Verifier response-encryption key(s) were not seen in a previous Authorization Request
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
ExtractDCQLQueryFromAuthorizationRequest
Extracted dcql_query from authorization request
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
ValidateDCQLQuery
DCQL query input is valid
|
||||
|
||||||
| 2026-11-10 15:18:24 | SUCCESS |
CheckForUnexpectedParametersInDcqlQuery
No unknown properties were found in the DCQL query
|
||||
|
||||||
| 2026-11-10 15:18:24 | SUCCESS |
CheckForNonSelectivelyDisclosableClaimsInDcqlQuery
DCQL query does not request any SD-JWT VC claims that cannot be selectively disclosed
|
|
|
||
| 2026-11-10 15:18:24 | SUCCESS |
CheckForUnreferencedClaimsInDcqlQuery
The DCQL query does not contain claims entries unreferenced by claim_sets
|
|
|
||
| 2026-11-10 15:18:24 |
SUCCESS
|
CheckDCQLQueryCredentialFormatMatchesTestConfiguration
DCQL query credential format matches test configuration
|
||||
|
||||||
| 2026-11-10 15:18:24 |
SUCCESS
|
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
|
||
|
||||
| 2026-11-10 15:18:24 | SUCCESS |
CreateValidStatusListReference
Allocated a status list index that the served status list marks as valid
|
||
|
||||
| 2026-11-10 15:18:24 |
|
CreateSdJwtKbCredential
Filtered SD-JWT disclosures to DCQL requested claims
|
||||||
|
||||||||
| 2026-11-10 15:18:24 |
|
CreateSdJwtKbCredential
Created an SD-JWT+KB
|
||
|
||||
| 2026-11-10 15:18:24 |
|
InvalidateSdJwtCredentialSignature
Invalidated issuer signature in SD-JWT credential and recomputed KB-JWT sd_hash
|
|
|
||
| 2026-11-10 15:18:24 | SUCCESS |
VP1FinalGenerateJwtStatusListToken
Generated the Status List Token in JWT format
|
||||||||
|
||||||||||
| 2026-11-10 15:18:24 | SUCCESS |
AddVP1FinalDCQLVPTokenToAuthorizationEndpointResponseParams
Added credential in DCQL 'vp_token' authorization endpoint response parameter
|
||
|
||||
| 2026-11-10 15:18:24 |
|
VP1FinalEncryptVPResponse
Encrypted the response
|
||||||||||||||
|
||||||||||||||||
| 2026-11-10 15:18:24 |
|
CallDirectPostEndpoint
HTTP request
|
||||||||
|
||||||||||
| 2026-11-10 15:18:24 |
RESPONSE
|
CallDirectPostEndpoint
HTTP response
|
||||||||
|
||||||||||
| 2026-11-10 15:18:24 |
SUCCESS
|
CallDirectPostEndpoint
Parsed response uri endpoint response
|
||||||||||
|
||||||||||||
| 2026-11-10 15:18:24 | SUCCESS |
EnsureHttpStatusCodeIs4xx
https://conformance.example.com:9443/vp/response/wBNdZ7aLwdNEzVEvcSWsAg endpoint http status code was 400
|
|
|
||
| 2026-11-10 15:18:24 |
OUTGOING
|
oid4vp-1final-verifier-invalid-credential-signature
Response to HTTP request to test instance adUFkq6T3FX9Qpm
|
||||
|
||||||
| 2026-11-10 15:18:24 |
FINISHED
|
oid4vp-1final-verifier-invalid-credential-signature
Test has run to completion
|
||
|
||||
| 2026-11-10 15:18:25 |
|
TEST-RUNNER
Alias has now been claimed by another test
|
||||
|
||||||