Test Summary

Test Results

Expand All Collapse All
All times are UTC
2026-11-10 15:18:31 INFO
TEST-RUNNER
Test instance mvArF6CVzMkfDIm created
baseUrl
https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test
variant
{
  "credential_format": "sd_jwt_vc",
  "request_method": "request_uri_signed",
  "vp_profile": "plain_vp",
  "client_id_prefix": "x509_hash",
  "response_mode": "direct_post.jwt"
}
alias
siros-verifier-vp-test
description
OID4VP verifier/RP conformance test for SIROS VC verifier
planId
0mZCzziD8dojl
config
{
  "alias": "siros-verifier-vp-test",
  "description": "OID4VP verifier/RP conformance test for SIROS VC verifier",
  "server": {
    "discoveryUrl": "https://conformance.example.com:9443/OIDC/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "conformance.example.com",
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "crv": "P-256",
          "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
          "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
          "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
          "kid": "vp-verifier-key-1",
          "use": "sig",
          "alg": "ES256",
          "x5c": [
            "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"
          ]
        }
      ]
    }
  },
  "credential": {
    "signing_jwk": {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "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"
      ]
    }
  },
  "resource": {
    "resourceUrl": "https://conformance.example.com:9443"
  },
  "waitTimeoutSeconds": 120
}
baseMtlsUrl
https://localhost:8444/test-mtls/a/siros-verifier-vp-test
testName
oid4vp-1final-verifier-invalid-kb-jwt-aud
2026-11-10 15:18:31 SUCCESS
OIDCCGenerateServerConfiguration
Generated default server configuration
server_configuration
{
  "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/",
  "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/authorize",
  "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/token",
  "jwks_uri": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/jwks",
  "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/userinfo",
  "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "HS256",
    "HS384",
    "HS512",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "preferred_username",
    "gender",
    "birthdate",
    "address",
    "zoneinfo",
    "locale",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified",
    "website",
    "profile",
    "updated_at",
    "txn"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ]
}
2026-11-10 15:18:31
SetRequestUriParameterSupportedToTrueInServerConfiguration
Enabled request_uri support in server configuration
server
{
  "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/",
  "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/authorize",
  "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/token",
  "jwks_uri": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/jwks",
  "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/userinfo",
  "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "HS256",
    "HS384",
    "HS512",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "preferred_username",
    "gender",
    "birthdate",
    "address",
    "zoneinfo",
    "locale",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified",
    "website",
    "profile",
    "updated_at",
    "txn"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_uri_parameter_supported": true,
  "require_request_uri_registration": false
}
2026-11-10 15:18:31
RegisterClientRequestObjectTrustAnchor
No client request object trust anchor configured, skipping registration
2026-11-10 15:18:31
RegisterRical
No RICAL configured, skipping RICAL-based verifier trust checks
2026-11-10 15:18:31 INFO
CallRicalEndpoint
Skipped evaluation due to missing required string: rical_url
expected
rical_url
2026-11-10 15:18:31 INFO
ParseRical
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:31 INFO
DumpRicalCborDiagnostics
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:31 INFO
ValidateRicalSignature
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:31 INFO
ValidateRicalSignerCertificate
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:31 INFO
ValidateRicalStructure
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:31
oid4vp-1final-verifier-invalid-kb-jwt-aud
Setup Done
2026-11-10 15:18:33 INCOMING
oid4vp-1final-verifier-invalid-kb-jwt-aud
Incoming HTTP request to /test/a/siros-verifier-vp-test/authorize
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-verifier-vp-test/authorize?client_id\u003dx509_hash%3AVQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM\u0026request_uri\u003dhttps%3A%2F%2Fconformance.example.com%3A9443%2Fvp%2Frequest%2FOySTcwcf4YgrtDKY69heBg\u0026request_uri_method\u003dpost",
  "forwarded": "by\u003d172.18.0.6;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "sec-ch-ua": "\"Not-A.Brand\";v\u003d\"99\", \"Google Chrome\";v\u003d\"157\", \"Chromium\";v\u003d\"157\"",
  "accept-language": "en-US",
  "sec-ch-ua-mobile": "?0",
  "accept": "*/*",
  "sec-fetch-site": "same-origin",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "https://localhost.emobix.co.uk:8443/log-detail.html?log\u003dmvArF6CVzMkfDIm",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "JSESSIONID\u003dA3052104D7DAC17B74019F0E1FAF4D67"
}
incoming_path
/test/a/siros-verifier-vp-test/authorize
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{
  "client_id": "x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM",
  "request_uri": "https://conformance.example.com:9443/vp/request/OySTcwcf4YgrtDKY69heBg",
  "request_uri_method": "post"
}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
Authorization endpoint
2026-11-10 15:18:33
FetchRequestUriAndExtractRequestObject
Fetching request object from request_uri
request_uri
https://conformance.example.com:9443/vp/request/OySTcwcf4YgrtDKY69heBg
2026-11-10 15:18:33
FetchRequestUriAndExtractRequestObject
HTTP request
request_uri
https://conformance.example.com:9443/vp/request/OySTcwcf4YgrtDKY69heBg
request_method
GET
request_headers
{
  "Accept": "text/plain, application/json, application/yaml, application/*+json, */*",
  "Content-Length": "0"
}
request_body

                                
2026-11-10 15:18:33 RESPONSE
FetchRequestUriAndExtractRequestObject
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "server": "nginx/1.29.8",
  "date": "Tue, 10 Nov 2026 15:18:33 GMT",
  "content-type": "application/oauth-authz-req+jwt",
  "content-length": "2274",
  "connection": "keep-alive",
  "set-cookie": "SIROS_VERIFIER_STATE\u003deyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0..eY2vH705UnRbuT0i.QM6bnxYlLNI_d1gpHQvDuE-_ZsEhv-vBRidARIwf9hHC0pHwG4IpXw.nUBwcdfm9YKa2Mt-sywElA; Path\u003d/; HttpOnly; SameSite\u003dLax; Max-Age\u003d900",
  "cache-control": "no-store"
}
response_body
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.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.TSJ2LUuml3uxpvMTmordvwePDB8hEi6ReAX5ds2_mYXnRjpCpcmo1DU5SLOJwiyaXODgV3HjHL5n9THYJekk7Q
2026-11-10 15:18:33
FetchRequestUriAndExtractRequestObject
Downloaded request object
request_object
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.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.TSJ2LUuml3uxpvMTmordvwePDB8hEi6ReAX5ds2_mYXnRjpCpcmo1DU5SLOJwiyaXODgV3HjHL5n9THYJekk7Q
2026-11-10 15:18:33 SUCCESS
FetchRequestUriAndExtractRequestObject
Parsed request object
value
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.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.TSJ2LUuml3uxpvMTmordvwePDB8hEi6ReAX5ds2_mYXnRjpCpcmo1DU5SLOJwiyaXODgV3HjHL5n9THYJekk7Q
header
{
  "x5c": [
    "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\u003d\u003d"
  ],
  "typ": "oauth-authz-req+jwt",
  "alg": "ES256"
}
claims
{
  "response_uri": "https://conformance.example.com:9443/vp/response/OySTcwcf4YgrtDKY69heBg",
  "aud": "https://self-issued.me/v2",
  "response_type": "vp_token",
  "state": "qhjh31KfNOoVH0zfqdA-FcQL9q7DfSROrYFFYhIY_R0",
  "dcql_query": {
    "credentials": [
      {
        "id": "eudi_pid",
        "format": "dc+sd-jwt",
        "meta": {
          "vct_values": [
            "urn:eudi:pid:1"
          ]
        },
        "claims": [
          {
            "path": [
              "given_name"
            ]
          }
        ]
      }
    ]
  },
  "exp": 1794324212,
  "iat": 1794323912,
  "nonce": "G4SYrAIa71NguzR8gq2yxpft73VW3tfkaYzpq6cSEPc",
  "client_id": "x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM",
  "client_metadata": {
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "use": "enc",
          "alg": "ECDH-ES",
          "kid": "OwmBcscZB_Eb7dwQqNjfB8Mwv31XkUIh1-RvK4Xk_zE",
          "crv": "P-256",
          "x": "4qBx4wFOLCO-d1J7KWR1EBxOzMaQlymQWup6GpGscCM",
          "y": "mVwH_Pe4n9sCaFtyRgQvJfxRTDJ1bn7p6ti0pakIeZU"
        }
      ]
    },
    "encrypted_response_enc_values_supported": [
      "A128GCM",
      "A256GCM"
    ],
    "vp_formats_supported": {
      "dc+sd-jwt": {
        "sd-jwt_alg_values": [
          "ES256"
        ],
        "kb-jwt_alg_values": [
          "ES256"
        ]
      }
    }
  },
  "response_mode": "direct_post.jwt"
}
2026-11-10 15:18:33 SUCCESS
EnsureRequestUriIsHttps
request_uri is a https url
request_uri
https://conformance.example.com:9443/vp/request/OySTcwcf4YgrtDKY69heBg
2026-11-10 15:18:33 SUCCESS
EnsureRequestUriHasNoFragment
request_uri does not contain a fragment
request_uri
https://conformance.example.com:9443/vp/request/OySTcwcf4YgrtDKY69heBg
2026-11-10 15:18:33 SUCCESS
ExtractAndValidateX509HashClientId
Client ID matched
client_id
x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM
2026-11-10 15:18:33 SUCCESS
ValidateRequestObjectTypIsOAuthQauthReqJwt
Request object typ header is valid
typ
oauth-authz-req+jwt
2026-11-10 15:18:33 SUCCESS
OIDCCValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Nov 10, 2026, 3:23:32 PM"
2026-11-10 15:18:33 SUCCESS
ValidateRequestObjectIat
iat claim is valid
iat
1794323912
2026-11-10 15:18:33 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2026-11-10 15:18:33
ValidateRequestObjectMaxAge
Request object does not contain a max_age claim
2026-11-10 15:18:33 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2026-11-10 15:18:33 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2026-11-10 15:18:33 SUCCESS
ValidateRequestObjectIssIfPresent
Request object does not contain an 'iss' claim, which is permitted by the spec
2026-11-10 15:18:33 SUCCESS
ValidateRequestObjectAudForVP
Request object aud claim is valid
aud
https://self-issued.me/v2
expected_self_issued
https://self-issued.me/v2
expected_wallet_issuer
https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/
2026-11-10 15:18:33 SUCCESS
ValidateRequestObjectSignatureAgainstX5cHeader
Request object x5c chain validated and signature verified
chain_length
1
leaf_cert_subject
CN=E2E Test Credential Signer
request_object_signing_alg
ES256
2026-11-10 15:18:33 INFO
ValidateRequestObjectX5cChainAgainstRical
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:33 INFO
EnsureMatchedRicalEntryHasNoTrustConstraints
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:33 SUCCESS
EnsureClientIdInAuthorizationRequestParametersMatchRequestObject
client_id http request parameter value matches client_id in request object
2026-11-10 15:18:33 INFO
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
path
jwe_header
mapped
object
authorization_request_object
2026-11-10 15:18:33 SUCCESS
EnsureOptionalAuthorizationRequestParametersMatchRequestObject
All http request parameters and request object claims match
2026-11-10 15:18:33 SUCCESS
CheckForUnexpectedParametersInVpAuthorizationEndpointHttpRequest
All HTTP authorization request parameters are expected
known_params
[
  "client_id",
  "request_uri",
  "request_uri_method"
]
parameters
[
  "client_id",
  "request_uri",
  "request_uri_method"
]
2026-11-10 15:18:33 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM",
  "request_uri_method": "post",
  "response_uri": "https://conformance.example.com:9443/vp/response/OySTcwcf4YgrtDKY69heBg",
  "aud": "https://self-issued.me/v2",
  "response_type": "vp_token",
  "state": "qhjh31KfNOoVH0zfqdA-FcQL9q7DfSROrYFFYhIY_R0",
  "dcql_query": {
    "credentials": [
      {
        "id": "eudi_pid",
        "format": "dc+sd-jwt",
        "meta": {
          "vct_values": [
            "urn:eudi:pid:1"
          ]
        },
        "claims": [
          {
            "path": [
              "given_name"
            ]
          }
        ]
      }
    ]
  },
  "exp": 1794324212,
  "iat": 1794323912,
  "nonce": "G4SYrAIa71NguzR8gq2yxpft73VW3tfkaYzpq6cSEPc",
  "client_metadata": {
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "use": "enc",
          "alg": "ECDH-ES",
          "kid": "OwmBcscZB_Eb7dwQqNjfB8Mwv31XkUIh1-RvK4Xk_zE",
          "crv": "P-256",
          "x": "4qBx4wFOLCO-d1J7KWR1EBxOzMaQlymQWup6GpGscCM",
          "y": "mVwH_Pe4n9sCaFtyRgQvJfxRTDJ1bn7p6ti0pakIeZU"
        }
      ]
    },
    "encrypted_response_enc_values_supported": [
      "A128GCM",
      "A256GCM"
    ],
    "vp_formats_supported": {
      "dc+sd-jwt": {
        "sd-jwt_alg_values": [
          "ES256"
        ],
        "kb-jwt_alg_values": [
          "ES256"
        ]
      }
    }
  },
  "response_mode": "direct_post.jwt"
}
2026-11-10 15:18:33 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
G4SYrAIa71NguzR8gq2yxpft73VW3tfkaYzpq6cSEPc
2026-11-10 15:18:33 INFO
EnsureAuthorizationRequestContainsPkceCodeChallenge
Skipped evaluation due to missing required element: effective_authorization_endpoint_request code_challenge
path
code_challenge
mapped
object
effective_authorization_endpoint_request
2026-11-10 15:18:33 SUCCESS
EnsureResponseTypeIsVpToken
Response type is expected value
expected
vp_token
2026-11-10 15:18:33 SUCCESS
ValidateResponseMode
response_mode is direct_post.jwt
2026-11-10 15:18:33 SUCCESS
CheckNoClientIdSchemeParameter
client_id_scheme parameter is not present, as expected.
2026-11-10 15:18:33 SUCCESS
CheckNoScopeParameter
scope parameter is not present, as expected.
2026-11-10 15:18:33 SUCCESS
CheckRequestUriMethodParameter
request_uri_method is 'post'
2026-11-10 15:18:33 INFO
WarnIfRequestUriMethodInRequestObject
Skipped evaluation due to missing required string: authorization_request_object
expected
authorization_request_object
2026-11-10 15:18:33 SUCCESS
CheckForUnexpectedParametersInVpAuthorizationRequest
All authorization parameters are expected
known_params
[
  "presentation_definition",
  "dcql_query",
  "client_id",
  "client_id_scheme",
  "response_uri",
  "client_metadata",
  "nonce",
  "state",
  "response_type",
  "response_mode",
  "verifier_info",
  "scope",
  "request_uri_method",
  "wallet_nonce",
  "aud",
  "iss",
  "iat",
  "nbf",
  "exp",
  "jti"
]
parameters
[
  "client_id",
  "request_uri_method",
  "response_uri",
  "aud",
  "response_type",
  "state",
  "dcql_query",
  "exp",
  "iat",
  "nonce",
  "client_metadata",
  "response_mode"
]
2026-11-10 15:18:33 SUCCESS
CheckNoTransactionDataInVpAuthorizationRequest
Authorization request does not contain transaction_data
2026-11-10 15:18:33 INFO
ExtractVerifierInfoFromAuthorizationRequest
Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info
path
verifier_info
mapped
object
effective_authorization_endpoint_request
2026-11-10 15:18:33 INFO
ValidateVerifierInfo
Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info
path
verifier_info
mapped
object
effective_authorization_endpoint_request
2026-11-10 15:18:33 INFO
CheckForUnexpectedParametersInVerifierInfo
Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info
path
verifier_info
mapped
object
effective_authorization_endpoint_request
2026-11-10 15:18:33 SUCCESS
EnsureValidResponseUriForAuthorizationEndpointRequest
response_uri is valid https url with no fragment
actual
https://conformance.example.com:9443/vp/response/OySTcwcf4YgrtDKY69heBg
2026-11-10 15:18:33 SUCCESS
CheckNoRedirectUriInVpAuthorizationRequest
Authorization request does not contain 'redirect_uri'
2026-11-10 15:18:33 SUCCESS
CheckNoPresentationDefinitionInVpAuthorizationRequest
Authorization request does not contain presentation_definition or presentation_definition_uri
2026-11-10 15:18:33 SUCCESS
VP1FinalCheckForUnexpectedParametersInVpClientMetadata
All client_metadata parameters are expected
parameters
[
  "jwks",
  "encrypted_response_enc_values_supported",
  "vp_formats_supported"
]
2026-11-10 15:18:33 SUCCESS
VP1FinalValidateVpFormatsSupportedInClientMetadata
vp_formats_supported contains valid dc+sd-jwt format
dc+sd-jwt
{
  "sd-jwt_alg_values": [
    "ES256"
  ],
  "kb-jwt_alg_values": [
    "ES256"
  ]
}
2026-11-10 15:18:33 SUCCESS
VP1FinalCheckForKeyIdInClientMetadataJWKs
All keys in client_metadata.jwks have unique kid values
jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "enc",
      "alg": "ECDH-ES",
      "kid": "OwmBcscZB_Eb7dwQqNjfB8Mwv31XkUIh1-RvK4Xk_zE",
      "crv": "P-256",
      "x": "4qBx4wFOLCO-d1J7KWR1EBxOzMaQlymQWup6GpGscCM",
      "y": "mVwH_Pe4n9sCaFtyRgQvJfxRTDJ1bn7p6ti0pakIeZU"
    }
  ]
}
2026-11-10 15:18:33 SUCCESS
VP1FinalValidateClientMetadataJwksForEncryptedResponse
client_metadata.jwks contains valid encryption key(s) with alg
jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "enc",
      "alg": "ECDH-ES",
      "kid": "OwmBcscZB_Eb7dwQqNjfB8Mwv31XkUIh1-RvK4Xk_zE",
      "crv": "P-256",
      "x": "4qBx4wFOLCO-d1J7KWR1EBxOzMaQlymQWup6GpGscCM",
      "y": "mVwH_Pe4n9sCaFtyRgQvJfxRTDJ1bn7p6ti0pakIeZU"
    }
  ]
}
Validate the JWK set in client_metadata
2026-11-10 15:18:33 SUCCESS
MapJwksToValidationLocation
Selected the JWK set in client_metadata for validation
jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "enc",
      "alg": "ECDH-ES",
      "kid": "OwmBcscZB_Eb7dwQqNjfB8Mwv31XkUIh1-RvK4Xk_zE",
      "crv": "P-256",
      "x": "4qBx4wFOLCO-d1J7KWR1EBxOzMaQlymQWup6GpGscCM",
      "y": "mVwH_Pe4n9sCaFtyRgQvJfxRTDJ1bn7p6ti0pakIeZU"
    }
  ]
}
2026-11-10 15:18:33 SUCCESS
EnsureJwksHasNoPrivateOrSymmetricKeyMaterial
The JWK set in client_metadata contains only public key material
jwks_source
client_metadata
2026-11-10 15:18:33 SUCCESS
ValidateJwksStructure
The JWK set in client_metadata is structurally valid
jwks_source
client_metadata
2026-11-10 15:18:33 SUCCESS
ParseUsableJwksKeys
All usable keys in the JWK set in client_metadata parse successfully
jwks_source
client_metadata
2026-11-10 15:18:33 SUCCESS
WarnOnUnusableJwksKeys
All keys in the JWK set in client_metadata use a supported key type, curve and algorithm
jwks_source
client_metadata
2026-11-10 15:18:33 SUCCESS
VP1FinalCheckEncryptionKeyNotReused
Verifier response-encryption key(s) were not seen in a previous Authorization Request
jwk_thumbprints
[
  "LJjEszFnYlIlo8G0KpVJB0NPPVlf6Dc9ythzpJucIxY"
]
2026-11-10 15:18:33 SUCCESS
ExtractDCQLQueryFromAuthorizationRequest
Extracted dcql_query from authorization request
dcql
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
2026-11-10 15:18:33 SUCCESS
ValidateDCQLQuery
DCQL query input is valid
input
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
schema_link
/json-schemas/oid4vp/dcql_request.json
2026-11-10 15:18:33 SUCCESS
CheckForUnexpectedParametersInDcqlQuery
No unknown properties were found in the DCQL query
input
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
schema_link
/json-schemas/oid4vp/dcql_request.json
2026-11-10 15:18:33 SUCCESS
CheckForNonSelectivelyDisclosableClaimsInDcqlQuery
DCQL query does not request any SD-JWT VC claims that cannot be selectively disclosed
2026-11-10 15:18:33 SUCCESS
CheckForUnreferencedClaimsInDcqlQuery
The DCQL query does not contain claims entries unreferenced by claim_sets
2026-11-10 15:18:33 SUCCESS
CheckDCQLQueryCredentialFormatMatchesTestConfiguration
DCQL query credential format matches test configuration
expected_format
dc+sd-jwt
credential_count
1
2026-11-10 15:18:33 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "state": "qhjh31KfNOoVH0zfqdA-FcQL9q7DfSROrYFFYhIY_R0"
}
2026-11-10 15:18:33 SUCCESS
CreateValidStatusListReference
Allocated a status list index that the served status list marks as valid
revocation_list_reference
{
  "mechanism": "status_list",
  "uri": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/statuslists/lQy2YJQJy8ymxJyDsLRE",
  "idx": 148
}
2026-11-10 15:18:33
CreateSdJwtKbCredentialWithInvalidAud
Filtered SD-JWT disclosures to DCQL requested claims
filtered_disclosures
1
requested_claims
[
  "given_name"
]
total_disclosures
10
2026-11-10 15:18:33
CreateSdJwtKbCredentialWithInvalidAud
Using invalid aud in key binding JWT
invalid_aud
x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUMINVALID
original_aud
x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM
2026-11-10 15:18:33
CreateSdJwtKbCredentialWithInvalidAud
Created an SD-JWT+KB
sdjwt
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.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.Wk6y2x9ddwCF1MyVdhE2IPq-HnqUuRvGWx7V9RW29mW2kcGQ8MrlYTMmwxFJu5EiGYHM44RiySTJmWX7u0bIBA~WyJ5S191VDNCSFRDM0VQdkppbVlzLWZRIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJzZF9oYXNoIjoicy1jYS16bENMMUw2dDNJcTNtYjZObUxHaHBUcS1vR2ptZHJpN2VUUXlUOCIsImF1ZCI6Ing1MDlfaGFzaDpWUVdjRFd0OVZTVkt6azdhdms3YmJ1YlFub2dKUTY5SFZxbk9BcWNYS1VNSU5WQUxJRCIsImlhdCI6MTc5NDMyMzkxMywibm9uY2UiOiJHNFNZckFJYTcxTmd1elI4Z3EyeXhwZnQ3M1ZXM3Rma2FZenBxNmNTRVBjIn0.SeAZu9xQ7Hgz1z6F604NDIEsjQc8exvLrHCICvtBZzS4nv6T0aum-h6DbjOxnTNi2S4Nvf4KqfBNy6aOwlQb-A
2026-11-10 15:18:33 SUCCESS
VP1FinalGenerateJwtStatusListToken
Generated the Status List Token in JWT format
sub
https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/statuslists/lQy2YJQJy8ymxJyDsLRE
status_list_token
eyJ4NWMiOlsiTUlJQnZqQ0NBV09nQXdJQkFnSVVmdzRpbjJ4YmJhTzRCUlZ6Q01KOWpjeCtNWVV3Q2dZSUtvWkl6ajBFQXdJd0lqRWdNQjRHQTFVRUF3d1hZMjl1Wm05eWJXRnVZMlV1WlhoaGJYQnNaUzVqYjIwd0hoY05Nall3TlRFMU1EYzFNelExV2hjTk1qY3dOVEUxTURjMU16UTFXakFpTVNBd0hnWURWUVFEREJkamIyNW1iM0p0WVc1alpTNWxlR0Z0Y0d4bExtTnZiVEJaTUJNR0J5cUdTTTQ5QWdFR0NDcUdTTTQ5QXdFSEEwSUFCQno3UkdCQkVEUm5EaGhyVUY1NXZGVzI2OGxtRGhlM1paa3luQThDTVpPdEtudjAyOTY4WFNpRW1OU29HUGFIWDNMWGwrYm9RenRzSzBEQjQ2VmhFNitqZHpCMU1CMEdBMVVkRGdRV0JCUi96QTdoMytpa0tCb2EzanlNaVNYN3NGZGt5ekFmQmdOVkhTTUVHREFXZ0JSL3pBN2gzK2lrS0JvYTNqeU1pU1g3c0Zka3l6QVBCZ05WSFJNQkFmOEVCVEFEQVFIL01DSUdBMVVkRVFRYk1CbUNGMk52Ym1admNtMWhibU5sTG1WNFlXMXdiR1V1WTI5dE1Bb0dDQ3FHU000OUJBTUNBMGtBTUVZQ0lRQzRsaHh3aVF5MytHUHR6ZFFXOUlsRFNyUW9Fbm5jb202WXNLWjNpekh1SWdJaEFLWklqTllXVEcweElwRnJTNERWa3ZvMXFpVjlrTmYxUXZwOFN0T1c2cEVyIl0sInR5cCI6InN0YXR1c2xpc3Qrand0IiwiYWxnIjoiRVMyNTYiLCJqd2siOnsia3R5IjoiRUMiLCJ1c2UiOiJzaWciLCJjcnYiOiJQLTI1NiIsImtpZCI6InZwLXZlcmlmaWVyLWtleS0xIiwieDVjIjpbIk1JSUJ2akNDQVdPZ0F3SUJBZ0lVZnc0aW4yeGJiYU80QlJWekNNSjlqY3grTVlVd0NnWUlLb1pJemowRUF3SXdJakVnTUI0R0ExVUVBd3dYWTI5dVptOXliV0Z1WTJVdVpYaGhiWEJzWlM1amIyMHdIaGNOTWpZd05URTFNRGMxTXpRMVdoY05NamN3TlRFMU1EYzFNelExV2pBaU1TQXdIZ1lEVlFRRERCZGpiMjVtYjNKdFlXNWpaUzVsZUdGdGNHeGxMbU52YlRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkJ6N1JHQkJFRFJuRGhoclVGNTV2RlcyNjhsbURoZTNaWmt5bkE4Q01aT3RLbnYwMjk2OFhTaUVtTlNvR1BhSFgzTFhsK2JvUXp0c0swREI0NlZoRTYramR6QjFNQjBHQTFVZERnUVdCQlIvekE3aDMraWtLQm9hM2p5TWlTWDdzRmRreXpBZkJnTlZIU01FR0RBV2dCUi96QTdoMytpa0tCb2EzanlNaVNYN3NGZGt5ekFQQmdOVkhSTUJBZjhFQlRBREFRSC9NQ0lHQTFVZEVRUWJNQm1DRjJOdmJtWnZjbTFoYm1ObExtVjRZVzF3YkdVdVkyOXRNQW9HQ0NxR1NNNDlCQU1DQTBrQU1FWUNJUUM0bGh4d2lReTMrR1B0emRRVzlJbERTclFvRW5uY29tNllzS1ozaXpIdUlnSWhBS1pJak5ZV1RHMHhJcEZyUzREVmt2bzFxaVY5a05mMVF2cDhTdE9XNnBFciJdLCJ4IjoiSFB0RVlFRVFOR2NPR0d0UVhubThWYmJyeVdZT0Y3ZGxtVEtjRHdJeGs2MCIsInkiOiJLbnYwMjk2OFhTaUVtTlNvR1BhSFgzTFhsLWJvUXp0c0swREI0NlZoRTY4IiwiYWxnIjoiRVMyNTYifX0.eyJzdWIiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3MtdmVyaWZpZXItdnAtdGVzdC9zdGF0dXNsaXN0cy9sUXkyWUpRSnk4eW14SnlEc0xSRSIsImV4cCI6MTc5NDQxMDMxMywiaWF0IjoxNzk0MzIzOTEzLCJ0dGwiOjMwMCwic3RhdHVzX2xpc3QiOnsiYml0cyI6MSwibHN0IjoiZU5wYnRRb19BQUJlenhWQiJ9fQ.r2Llxc9-QO3KJOjZHgxmQjDF6_hjOXii56_OXCaY-DPDPrEApjFqM49B72YdyPKIj3mQvpqyPmhjAQZ8UnaWSA
exp
1794410313
algorithm
ES256
2026-11-10 15:18:33 SUCCESS
AddVP1FinalDCQLVPTokenToAuthorizationEndpointResponseParams
Added credential in DCQL 'vp_token' authorization endpoint response parameter
authorization_endpoint_response_params
{
  "state": "qhjh31KfNOoVH0zfqdA-FcQL9q7DfSROrYFFYhIY_R0",
  "vp_token": {
    "eudi_pid": [
      "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.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.Wk6y2x9ddwCF1MyVdhE2IPq-HnqUuRvGWx7V9RW29mW2kcGQ8MrlYTMmwxFJu5EiGYHM44RiySTJmWX7u0bIBA~WyJ5S191VDNCSFRDM0VQdkppbVlzLWZRIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJzZF9oYXNoIjoicy1jYS16bENMMUw2dDNJcTNtYjZObUxHaHBUcS1vR2ptZHJpN2VUUXlUOCIsImF1ZCI6Ing1MDlfaGFzaDpWUVdjRFd0OVZTVkt6azdhdms3YmJ1YlFub2dKUTY5SFZxbk9BcWNYS1VNSU5WQUxJRCIsImlhdCI6MTc5NDMyMzkxMywibm9uY2UiOiJHNFNZckFJYTcxTmd1elI4Z3EyeXhwZnQ3M1ZXM3Rma2FZenBxNmNTRVBjIn0.SeAZu9xQ7Hgz1z6F604NDIEsjQc8exvLrHCICvtBZzS4nv6T0aum-h6DbjOxnTNi2S4Nvf4KqfBNy6aOwlQb-A"
    ]
  }
}
2026-11-10 15:18:33
VP1FinalEncryptVPResponse
Encrypted the response
authorization_encrypted_response_alg
ECDH-ES
authorization_encrypted_response_enc
A128GCM
response
eyJlcGsiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJuVEZsXy1ESXJ5N1lTcFpGd3lpSmZyRDZxMjJWb1MyLTJheUJHWVduQXdNIiwieSI6Im94NHNRd2Y0ZWtGaXdOZ0g1RUZfUjRrbXRZVnZabUpIdkRlWllTbE5seWsifSwiYXB2IjoiT1hrd01HWXhSV2gxTlcxb2FrWTRlUSIsImtpZCI6Ik93bUJjc2NaQl9FYjdkd1FxTmpmQjhNd3YzMVhrVUloMS1Sdks0WGtfekUiLCJhcHUiOiJjMnhLV20xak0yUmFNVXRsZW1wQ1JnIiwiY3R5IjoianNvbiIsImVuYyI6IkExMjhHQ00iLCJhbGciOiJFQ0RILUVTIn0..dLp5GZKbGHyQZPCJ._FxpIRLkpLYbX0tOxXfWePmSsmzHQ_TXZ3D7L_-Lg4DjRexSXViyVSiPDlKAdGucuYseGBlOIjbWqk6q2XtJrNQux0UcYtiT0C1p_GLXGEp0owCtJq5hM1aO3XommorFloVZhmpbCI-HbTq39aDlkAzp7TCBSa-RGEycGL8TH6fruJHC5zhO3LmAaVyLCrQfYO83x9uBLW8yq7qZVUwlGT9POJuhiHpHBkJWjtTKcAjnyhQZDv8PfXftoWNNejSDW95mwaWMRsuySniGZPlMYIYUFcG29Uf0n94rG8-CoYZe4mMFAL8B1MZfxoORCICV9QV-gFVLT3wAgp78imEJqXq4CbOIkvcCU9LKBRiAowJls1nUzoXh1SH8jB5cZRpIODpC-vRsU5Emd59JBQlHDFsx_yTb9Z09yJWaKZx03_hLgkjp6uqzhZ2Uh0-L0lhghTRwDx0rfB6GzT7sTwrZDIiuIu8POVUYQ8ftta-nP4hF7nr-wBTZiY1-_Oce9M4Irepz6BNmylQFgHqrcnOwvLlS3DRU2xZ4T8-qpN3wZg5QuS9NJuhIBQeve3EPI2WrfRZKtO_ln3g78Sh1SLMCuQzmK5dLk035Am8G7bB2MRthEC5bcfnZlPG1LeWyJTsRIR_dOyQU0UhK8R03s3uUGpFS4lZXRv2BWWcI4xYdUpgUTjUaJMxaEazJ9eUatmzmq79cYtRsWzOQCuAxlcmRhv2IN5JA_0mmMPwxOJ4fjlq8UC2p-rKL8wCIn4hlCDpuHF9DWBDo9R5Y2yl4S6w3Ai_kwa6d8e4QxBU0868UPCykzLryrDBVQQvkL7TgHbbrEjRCh5EKP9e4ht5mWbdyJoofkWab_pi4akS1F92YtJkqXSWYqK6_FlmnkYkkXa7BIAdaATO9IBL6EXcf8DCkCL-wwzKTKnZv0ySTBnnftxcxTpvRUuvHNAf1plZySC7auIgv7CqaEO41WftvRfJ_kwrKqSYEUUw_BHJ4i4mEW-4TCXSU-J0mABseyNBnaOJBvmikkAxMd9XL5GWlL_f8d2IRXrQ8bLORbt6EKy3A4-aN1w67ikUkTGvDTVwQM5sM2tEpvrXLfpDKw3O7GJ2fWGQ8zwY0l3u4t9gVj5PUi_ktePtyCohANmJV4VWI0CQ6i58YImwed7pscuwW1fbPACE_VhQ4uvsn0AEkkAs8nyv3mVbeBf7BLmDXuOpBqR2CavSrydI3BrvtjhZULJU-IqDzaIs-npMXtg8PLtyX0Q9xu-fkTdmgeulj7p5QTeOEHlT2ybgF3R_wxUW7YES7p7kNNFJagzSddE4OvypQ0ibERKOpFSN5AgRrOxOLYBFLmzKGDKC07Xo8qLb7sGdSv0dSzc4kykeyip_upEeafx1nH3DS4o3r6bEBcqNIja_S1-xRpls09lMkVQqsrAGDNEDinVEJG7S2ZfJd19wTKpiKs8oY_KxvsivIiIW58rjxIdwMMBJxs-EHZOLKqj9jnD9TeqmZqsGZI3y3Rz01v5_ukfB1n8kjGgXyF1UX5hbcs3kQQ7sAAsf-3peSsa_JL30xNU_KEGIn4u0BSfsfPo_T3nSh5A2PS05G0WNXunoZxEWBk7d1tp8Mxzm6YBJM0ztK9n-f4wLiu9nH2VP0OMS4ie9L7VfJoa2DhmEjBhKMJEHcSxjIeq-6V_qBDIBe7rfvXFq-LVOnZVQRXYR2aWTEWogR9aiRZrj0Y_n-TfJh2c6SWCPTK0t6pLID1vfmSbUjgt-x2K0LWLOwVvlOGd8qNBi1f8y2zCc8biLFVxwC3-K3pWwjHp-ufGYWFJmiYNR-7AxXyq-eAF0Y90-Fv3EFAx8SeawiSNT7hoCnjIkbxLfpC59SmoRmbnUi3NqS6ZkdVc2r5GlHShYAw-SxlPLm7D0sK60l2PPXxFpmbRE2Cu-5rOGhc-xgo9wiMLgzuKwF0MQdhVnBByqQ4ilsqjmamWz8WvMU_l9gtRSFqiuMrsBvDaDtmavgr6_Foir8vEIj92xIl2rZmqDgSTWMPt5Kp6K9OF1slgxAqXipbpiX9HZNlWaJ2GeARl3coNfxbpKKqKAwbcNrKM2blIgw8It3G1MgGytamCGCkrwrhAZOItjYkXVJezf8Fuh6a3vJmJpMsRPiZi4BElzeprHMvqgdimng-LJ87u8eHRgQlOL9O4miY9SQDI8XFByJ55BHz6xheIYbwdPI9VVfz0OGXV_bRoJY6_DId-0pbllWHvyrapp355zr_-TbBbiUow9hwM3yhjMC_UuCuR74URyjonfUdQNObhdYwuKbJQPLepzjUPIyh0X23O8M4fRKxVm9N3zVa__8fM4b_ngX90occNS0x8gBtXTHuUPueo1xDpvYyCMWGYYvWIEaUG2PMbMvcfljEkzeqLHHtIsyJVdZ--9t1PrOJziu5UMtHBBNBVp1ckLb3j3xWC0onq21BIs1h3p0qq282wIg3MNsTVT05PTimR85ifqfjuJgFiR0sHfjGTaVQXzfTImOc45PDfrDoKcbriQtyU4enWZ-8CbpvKMT1YGFn3sJz38nFCw7RYWNvjL3qGpD7EePjMHmwzsalfU8LmRrytkR4H67G_5Izxr6j1f0RRaL_Tk6KAbDKY28UjtKcsWGrH33WQ0LcR-eT4nsVojVtea_xcUScdtTCPwyPGJ7i8Mtr1omlrB6Jhx6p2GBzjZWbh6qI9LvtQ1vlFOyaEmMycBikjhppWxVYw8_52G_hB70KFs2_NXqNs7aWUBX_5eZ9g_fizQ3HY76m5JQUKWUcF3dLaKgGxW75uQQ3i0jYqor4UjnepaWaxIG90xEKb-LKnCf7fwKPcHW10KypbhnYbDMd1pDYVXdeMa4RUhTj2ITG__WvNzV7RTTq0zSozcsHI-7mLAvTP1UVoYhB5mks0-NCIPRizMyor9Vhk1EIEjmV9fV8PFXVWc8rPF9k3fdrtsV_grVF0JzCSQxqBI_CVpLBowqDT-0T_3QRGDVAIGsUjq5t803DlFJl0Utb4uSAqlCofZRhPTiK685Z8cJOJpNHbv2hfgj4otLK7Jwu5uwdMoUaFMxOec7INwzmzi8PXzMQ53dlGzYiDG2_JrunFAIg5jGRQDPck-AelDZvofuNpibQAH22yTRbRbNFMB29NPZlE-IuOloo6HiZOoLjbgQnwJMS-VGUQ7MFheaJwXlGK5fs0hP4BN7n1fTOIpd50bgRdc3mq33xP-A2QgIjxE4Qz4VDO8ophAlFESTVwDa_3MCxwmA7N6VxjsW2ZBdVgxIqJaYBpwrtKYTB8lIh0LN3td2wNtn_5V5SPOuDgm-YXQQbdtwzGsfoR4zFou93wKcpuQk6jZktBYK_SMt4p1I91HxbvBwadLAe6RxrvXxA-4Idd1wlmX9bFCKnYZ8yt3s7JoogKB-GctrdaXJXH5SG0gNu9DjF71FdqRncWu6AqkYCVv-mhjUzSVUjhn8VLfrW-jsHaDQdRMZcWzWM83giUKYFfMs0OPV6F8WyQq7OWqYHsCmuuiQXiO43nfNKlpRVhmmk6-T4PLPd7rW3PPVTxSiPUJ4H0ZB0TDNs2CNN824Vjajz0QWz7TfHL1wk7Rgk-T0Vrh_aLBYEOxCeiGCNWN396HqKryOV8mwuMjarA.HQGyi5WGdd-sxPMNyYF2Rw
apv
9y00f1Ehu5mhjF8y
apu
slJZmc3dZ1KezjBF
apv_b64
{
  "value": "OXkwMGYxRWh1NW1oakY4eQ"
}
apu_b64
{
  "value": "c2xKWm1jM2RaMUtlempCRg"
}
2026-11-10 15:18:33
CallDirectPostEndpoint
HTTP request
request_uri
https://conformance.example.com:9443/vp/response/OySTcwcf4YgrtDKY69heBg
request_method
POST
request_headers
{
  "Accept": "application/json",
  "Content-Type": "application/x-www-form-urlencoded",
  "Content-Length": "4080"
}
request_body
response=eyJlcGsiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJuVEZsXy1ESXJ5N1lTcFpGd3lpSmZyRDZxMjJWb1MyLTJheUJHWVduQXdNIiwieSI6Im94NHNRd2Y0ZWtGaXdOZ0g1RUZfUjRrbXRZVnZabUpIdkRlWllTbE5seWsifSwiYXB2IjoiT1hrd01HWXhSV2gxTlcxb2FrWTRlUSIsImtpZCI6Ik93bUJjc2NaQl9FYjdkd1FxTmpmQjhNd3YzMVhrVUloMS1Sdks0WGtfekUiLCJhcHUiOiJjMnhLV20xak0yUmFNVXRsZW1wQ1JnIiwiY3R5IjoianNvbiIsImVuYyI6IkExMjhHQ00iLCJhbGciOiJFQ0RILUVTIn0..dLp5GZKbGHyQZPCJ._FxpIRLkpLYbX0tOxXfWePmSsmzHQ_TXZ3D7L_-Lg4DjRexSXViyVSiPDlKAdGucuYseGBlOIjbWqk6q2XtJrNQux0UcYtiT0C1p_GLXGEp0owCtJq5hM1aO3XommorFloVZhmpbCI-HbTq39aDlkAzp7TCBSa-RGEycGL8TH6fruJHC5zhO3LmAaVyLCrQfYO83x9uBLW8yq7qZVUwlGT9POJuhiHpHBkJWjtTKcAjnyhQZDv8PfXftoWNNejSDW95mwaWMRsuySniGZPlMYIYUFcG29Uf0n94rG8-CoYZe4mMFAL8B1MZfxoORCICV9QV-gFVLT3wAgp78imEJqXq4CbOIkvcCU9LKBRiAowJls1nUzoXh1SH8jB5cZRpIODpC-vRsU5Emd59JBQlHDFsx_yTb9Z09yJWaKZx03_hLgkjp6uqzhZ2Uh0-L0lhghTRwDx0rfB6GzT7sTwrZDIiuIu8POVUYQ8ftta-nP4hF7nr-wBTZiY1-_Oce9M4Irepz6BNmylQFgHqrcnOwvLlS3DRU2xZ4T8-qpN3wZg5QuS9NJuhIBQeve3EPI2WrfRZKtO_ln3g78Sh1SLMCuQzmK5dLk035Am8G7bB2MRthEC5bcfnZlPG1LeWyJTsRIR_dOyQU0UhK8R03s3uUGpFS4lZXRv2BWWcI4xYdUpgUTjUaJMxaEazJ9eUatmzmq79cYtRsWzOQCuAxlcmRhv2IN5JA_0mmMPwxOJ4fjlq8UC2p-rKL8wCIn4hlCDpuHF9DWBDo9R5Y2yl4S6w3Ai_kwa6d8e4QxBU0868UPCykzLryrDBVQQvkL7TgHbbrEjRCh5EKP9e4ht5mWbdyJoofkWab_pi4akS1F92YtJkqXSWYqK6_FlmnkYkkXa7BIAdaATO9IBL6EXcf8DCkCL-wwzKTKnZv0ySTBnnftxcxTpvRUuvHNAf1plZySC7auIgv7CqaEO41WftvRfJ_kwrKqSYEUUw_BHJ4i4mEW-4TCXSU-J0mABseyNBnaOJBvmikkAxMd9XL5GWlL_f8d2IRXrQ8bLORbt6EKy3A4-aN1w67ikUkTGvDTVwQM5sM2tEpvrXLfpDKw3O7GJ2fWGQ8zwY0l3u4t9gVj5PUi_ktePtyCohANmJV4VWI0CQ6i58YImwed7pscuwW1fbPACE_VhQ4uvsn0AEkkAs8nyv3mVbeBf7BLmDXuOpBqR2CavSrydI3BrvtjhZULJU-IqDzaIs-npMXtg8PLtyX0Q9xu-fkTdmgeulj7p5QTeOEHlT2ybgF3R_wxUW7YES7p7kNNFJagzSddE4OvypQ0ibERKOpFSN5AgRrOxOLYBFLmzKGDKC07Xo8qLb7sGdSv0dSzc4kykeyip_upEeafx1nH3DS4o3r6bEBcqNIja_S1-xRpls09lMkVQqsrAGDNEDinVEJG7S2ZfJd19wTKpiKs8oY_KxvsivIiIW58rjxIdwMMBJxs-EHZOLKqj9jnD9TeqmZqsGZI3y3Rz01v5_ukfB1n8kjGgXyF1UX5hbcs3kQQ7sAAsf-3peSsa_JL30xNU_KEGIn4u0BSfsfPo_T3nSh5A2PS05G0WNXunoZxEWBk7d1tp8Mxzm6YBJM0ztK9n-f4wLiu9nH2VP0OMS4ie9L7VfJoa2DhmEjBhKMJEHcSxjIeq-6V_qBDIBe7rfvXFq-LVOnZVQRXYR2aWTEWogR9aiRZrj0Y_n-TfJh2c6SWCPTK0t6pLID1vfmSbUjgt-x2K0LWLOwVvlOGd8qNBi1f8y2zCc8biLFVxwC3-K3pWwjHp-ufGYWFJmiYNR-7AxXyq-eAF0Y90-Fv3EFAx8SeawiSNT7hoCnjIkbxLfpC59SmoRmbnUi3NqS6ZkdVc2r5GlHShYAw-SxlPLm7D0sK60l2PPXxFpmbRE2Cu-5rOGhc-xgo9wiMLgzuKwF0MQdhVnBByqQ4ilsqjmamWz8WvMU_l9gtRSFqiuMrsBvDaDtmavgr6_Foir8vEIj92xIl2rZmqDgSTWMPt5Kp6K9OF1slgxAqXipbpiX9HZNlWaJ2GeARl3coNfxbpKKqKAwbcNrKM2blIgw8It3G1MgGytamCGCkrwrhAZOItjYkXVJezf8Fuh6a3vJmJpMsRPiZi4BElzeprHMvqgdimng-LJ87u8eHRgQlOL9O4miY9SQDI8XFByJ55BHz6xheIYbwdPI9VVfz0OGXV_bRoJY6_DId-0pbllWHvyrapp355zr_-TbBbiUow9hwM3yhjMC_UuCuR74URyjonfUdQNObhdYwuKbJQPLepzjUPIyh0X23O8M4fRKxVm9N3zVa__8fM4b_ngX90occNS0x8gBtXTHuUPueo1xDpvYyCMWGYYvWIEaUG2PMbMvcfljEkzeqLHHtIsyJVdZ--9t1PrOJziu5UMtHBBNBVp1ckLb3j3xWC0onq21BIs1h3p0qq282wIg3MNsTVT05PTimR85ifqfjuJgFiR0sHfjGTaVQXzfTImOc45PDfrDoKcbriQtyU4enWZ-8CbpvKMT1YGFn3sJz38nFCw7RYWNvjL3qGpD7EePjMHmwzsalfU8LmRrytkR4H67G_5Izxr6j1f0RRaL_Tk6KAbDKY28UjtKcsWGrH33WQ0LcR-eT4nsVojVtea_xcUScdtTCPwyPGJ7i8Mtr1omlrB6Jhx6p2GBzjZWbh6qI9LvtQ1vlFOyaEmMycBikjhppWxVYw8_52G_hB70KFs2_NXqNs7aWUBX_5eZ9g_fizQ3HY76m5JQUKWUcF3dLaKgGxW75uQQ3i0jYqor4UjnepaWaxIG90xEKb-LKnCf7fwKPcHW10KypbhnYbDMd1pDYVXdeMa4RUhTj2ITG__WvNzV7RTTq0zSozcsHI-7mLAvTP1UVoYhB5mks0-NCIPRizMyor9Vhk1EIEjmV9fV8PFXVWc8rPF9k3fdrtsV_grVF0JzCSQxqBI_CVpLBowqDT-0T_3QRGDVAIGsUjq5t803DlFJl0Utb4uSAqlCofZRhPTiK685Z8cJOJpNHbv2hfgj4otLK7Jwu5uwdMoUaFMxOec7INwzmzi8PXzMQ53dlGzYiDG2_JrunFAIg5jGRQDPck-AelDZvofuNpibQAH22yTRbRbNFMB29NPZlE-IuOloo6HiZOoLjbgQnwJMS-VGUQ7MFheaJwXlGK5fs0hP4BN7n1fTOIpd50bgRdc3mq33xP-A2QgIjxE4Qz4VDO8ophAlFESTVwDa_3MCxwmA7N6VxjsW2ZBdVgxIqJaYBpwrtKYTB8lIh0LN3td2wNtn_5V5SPOuDgm-YXQQbdtwzGsfoR4zFou93wKcpuQk6jZktBYK_SMt4p1I91HxbvBwadLAe6RxrvXxA-4Idd1wlmX9bFCKnYZ8yt3s7JoogKB-GctrdaXJXH5SG0gNu9DjF71FdqRncWu6AqkYCVv-mhjUzSVUjhn8VLfrW-jsHaDQdRMZcWzWM83giUKYFfMs0OPV6F8WyQq7OWqYHsCmuuiQXiO43nfNKlpRVhmmk6-T4PLPd7rW3PPVTxSiPUJ4H0ZB0TDNs2CNN824Vjajz0QWz7TfHL1wk7Rgk-T0Vrh_aLBYEOxCeiGCNWN396HqKryOV8mwuMjarA.HQGyi5WGdd-sxPMNyYF2Rw
2026-11-10 15:18:33 RESPONSE
CallDirectPostEndpoint
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "server": "nginx/1.29.8",
  "date": "Tue, 10 Nov 2026 15:18:33 GMT",
  "content-type": "application/json",
  "content-length": "57",
  "connection": "keep-alive",
  "set-cookie": "SIROS_VERIFIER_STATE\u003deyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0..d97mpUKqfX8jZN9f.hh_2VB-72dP_Oue0ikqQ62ZKD3Cy7RlmBxPCqkrVRLyYVhKWjXBrZA.GhmUKdUFH8YfLY9TBzEgiQ; Path\u003d/; HttpOnly; SameSite\u003dLax; Max-Age\u003d900"
}
response_body
{"error":"policy","error_description":"invalid response"}
2026-11-10 15:18:33 SUCCESS
CallDirectPostEndpoint
Parsed response uri endpoint response
status
400
endpoint_name
https://conformance.example.com:9443/vp/response/OySTcwcf4YgrtDKY69heBg
headers
{
  "server": "nginx/1.29.8",
  "date": "Tue, 10 Nov 2026 15:18:33 GMT",
  "content-type": "application/json",
  "content-length": "57",
  "connection": "keep-alive",
  "set-cookie": "SIROS_VERIFIER_STATE\u003deyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0..d97mpUKqfX8jZN9f.hh_2VB-72dP_Oue0ikqQ62ZKD3Cy7RlmBxPCqkrVRLyYVhKWjXBrZA.GhmUKdUFH8YfLY9TBzEgiQ; Path\u003d/; HttpOnly; SameSite\u003dLax; Max-Age\u003d900"
}
body
{"error":"policy","error_description":"invalid response"}
body_json
{
  "error": "policy",
  "error_description": "invalid response"
}
2026-11-10 15:18:33 SUCCESS
EnsureHttpStatusCodeIs4xx
https://conformance.example.com:9443/vp/response/OySTcwcf4YgrtDKY69heBg endpoint http status code was 400
2026-11-10 15:18:33 OUTGOING
oid4vp-1final-verifier-invalid-kb-jwt-aud
Response to HTTP request to test instance mvArF6CVzMkfDIm
outgoing
ModelAndView [view="resultCaptured"; model={returnUrl=/log-detail.html?log=mvArF6CVzMkfDIm}]
outgoing_path
authorize
2026-11-10 15:18:33 FINISHED
oid4vp-1final-verifier-invalid-kb-jwt-aud
Test has run to completion
testmodule_result
PASSED
2026-11-10 15:18:34
TEST-RUNNER
Alias has now been claimed by another test
alias
siros-verifier-vp-test
new_test_id
ja5YJIX0UCARiml
Test Results