Test Summary

Test Results

Expand All Collapse All
All times are UTC
2026-11-10 15:18:20 INFO
TEST-RUNNER
Test instance SaCiMD61V1vh2H4 created
baseUrl
https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test
variant
{
  "credential_format": "sd_jwt_vc",
  "request_method": "request_uri_signed",
  "vp_profile": "plain_vp",
  "client_id_prefix": "x509_hash",
  "response_mode": "direct_post.jwt"
}
alias
siros-verifier-vp-test
description
OID4VP verifier/RP conformance test for SIROS VC verifier
planId
0mZCzziD8dojl
config
{
  "alias": "siros-verifier-vp-test",
  "description": "OID4VP verifier/RP conformance test for SIROS VC verifier",
  "server": {
    "discoveryUrl": "https://conformance.example.com:9443/OIDC/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "conformance.example.com",
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "crv": "P-256",
          "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
          "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
          "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
          "kid": "vp-verifier-key-1",
          "use": "sig",
          "alg": "ES256",
          "x5c": [
            "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"
          ]
        }
      ]
    }
  },
  "credential": {
    "signing_jwk": {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "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"
      ]
    }
  },
  "resource": {
    "resourceUrl": "https://conformance.example.com:9443"
  },
  "waitTimeoutSeconds": 120
}
baseMtlsUrl
https://localhost:8444/test-mtls/a/siros-verifier-vp-test
testName
oid4vp-1final-verifier-invalid-kb-jwt-signature
2026-11-10 15:18:20 SUCCESS
OIDCCGenerateServerConfiguration
Generated default server configuration
server_configuration
{
  "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/",
  "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/authorize",
  "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/token",
  "jwks_uri": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/jwks",
  "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/userinfo",
  "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "HS256",
    "HS384",
    "HS512",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "preferred_username",
    "gender",
    "birthdate",
    "address",
    "zoneinfo",
    "locale",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified",
    "website",
    "profile",
    "updated_at",
    "txn"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ]
}
2026-11-10 15:18:20
SetRequestUriParameterSupportedToTrueInServerConfiguration
Enabled request_uri support in server configuration
server
{
  "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/",
  "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/authorize",
  "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/token",
  "jwks_uri": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/jwks",
  "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/userinfo",
  "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "HS256",
    "HS384",
    "HS512",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "preferred_username",
    "gender",
    "birthdate",
    "address",
    "zoneinfo",
    "locale",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified",
    "website",
    "profile",
    "updated_at",
    "txn"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_uri_parameter_supported": true,
  "require_request_uri_registration": false
}
2026-11-10 15:18:20
RegisterClientRequestObjectTrustAnchor
No client request object trust anchor configured, skipping registration
2026-11-10 15:18:20
RegisterRical
No RICAL configured, skipping RICAL-based verifier trust checks
2026-11-10 15:18:20 INFO
CallRicalEndpoint
Skipped evaluation due to missing required string: rical_url
expected
rical_url
2026-11-10 15:18:20 INFO
ParseRical
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:20 INFO
DumpRicalCborDiagnostics
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:20 INFO
ValidateRicalSignature
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:20 INFO
ValidateRicalSignerCertificate
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:20 INFO
ValidateRicalStructure
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:20
oid4vp-1final-verifier-invalid-kb-jwt-signature
Setup Done
2026-11-10 15:18:21 INCOMING
oid4vp-1final-verifier-invalid-kb-jwt-signature
Incoming HTTP request to /test/a/siros-verifier-vp-test/authorize
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-verifier-vp-test/authorize?client_id\u003dx509_hash%3AVQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM\u0026request_uri\u003dhttps%3A%2F%2Fconformance.example.com%3A9443%2Fvp%2Frequest%2FM4MFSUU-X9EDg_TWf0ymzQ\u0026request_uri_method\u003dpost",
  "forwarded": "by\u003d172.18.0.6;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "sec-ch-ua": "\"Not-A.Brand\";v\u003d\"99\", \"Google Chrome\";v\u003d\"157\", \"Chromium\";v\u003d\"157\"",
  "accept-language": "en-US",
  "sec-ch-ua-mobile": "?0",
  "accept": "*/*",
  "sec-fetch-site": "same-origin",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "https://localhost.emobix.co.uk:8443/log-detail.html?log\u003dSaCiMD61V1vh2H4",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "JSESSIONID\u003dA3052104D7DAC17B74019F0E1FAF4D67"
}
incoming_path
/test/a/siros-verifier-vp-test/authorize
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{
  "client_id": "x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM",
  "request_uri": "https://conformance.example.com:9443/vp/request/M4MFSUU-X9EDg_TWf0ymzQ",
  "request_uri_method": "post"
}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
Authorization endpoint
2026-11-10 15:18:21
FetchRequestUriAndExtractRequestObject
Fetching request object from request_uri
request_uri
https://conformance.example.com:9443/vp/request/M4MFSUU-X9EDg_TWf0ymzQ
2026-11-10 15:18:21
FetchRequestUriAndExtractRequestObject
HTTP request
request_uri
https://conformance.example.com:9443/vp/request/M4MFSUU-X9EDg_TWf0ymzQ
request_method
GET
request_headers
{
  "Accept": "text/plain, application/json, application/yaml, application/*+json, */*",
  "Content-Length": "0"
}
request_body

                                
2026-11-10 15:18:21 RESPONSE
FetchRequestUriAndExtractRequestObject
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "server": "nginx/1.29.8",
  "date": "Tue, 10 Nov 2026 15:18:21 GMT",
  "content-type": "application/oauth-authz-req+jwt",
  "content-length": "2274",
  "connection": "keep-alive",
  "set-cookie": "SIROS_VERIFIER_STATE\u003deyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0..mQjsYZspOQZzVoo1.EbqlkDyRTlhAj3kZuhVIFMXlD3cs8812XSWxzepL7OIETA.lMRCQpvoHWOwtbYvI3xHww; Path\u003d/; HttpOnly; SameSite\u003dLax; Max-Age\u003d900",
  "cache-control": "no-store"
}
response_body
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.eyJpYXQiOjE3OTQzMjM5MDEsImV4cCI6MTc5NDMyNDIwMSwiYXVkIjoiaHR0cHM6Ly9zZWxmLWlzc3VlZC5tZS92MiIsImNsaWVudF9pZCI6Ing1MDlfaGFzaDpWUVdjRFd0OVZTVkt6azdhdms3YmJ1YlFub2dKUTY5SFZxbk9BcWNYS1VNIiwicmVzcG9uc2VfdHlwZSI6InZwX3Rva2VuIiwicmVzcG9uc2VfbW9kZSI6ImRpcmVjdF9wb3N0Lmp3dCIsIm5vbmNlIjoiWFd6MU1wMUZYZXc5bF9NT1RUMXEtb19NWmpyRnJ0MFg4STN4N2Jnb3A0ayIsInN0YXRlIjoiUVJsU1VOazdBN2N1emRzZ1BmbGZTTW50ekEtaUx4RmJkUlBWdzVCQnh4YyIsImRjcWxfcXVlcnkiOnsiY3JlZGVudGlhbHMiOlt7ImlkIjoiZXVkaV9waWQiLCJmb3JtYXQiOiJkYytzZC1qd3QiLCJtZXRhIjp7InZjdF92YWx1ZXMiOlsidXJuOmV1ZGk6cGlkOjEiXX0sImNsYWltcyI6W3sicGF0aCI6WyJnaXZlbl9uYW1lIl19XX1dfSwiY2xpZW50X21ldGFkYXRhIjp7Imp3a3MiOnsia2V5cyI6W3sia3R5IjoiRUMiLCJ1c2UiOiJlbmMiLCJhbGciOiJFQ0RILUVTIiwia2lkIjoiMGV4cW85blhKY3JTRXJvTzF6aXJNalZFZVUwV0hVN0hXS0hJUENPZ2dhYyIsImNydiI6IlAtMjU2IiwieCI6ImtRMTIyZ1Z2VzM3amd3WnFnbFI0NjBYTmlEMEktcnFMZ0tjN1REUS1YS0UiLCJ5IjoiYzBLeV9IYWVxd250S2Q4aEVzMXhkQXlMdkNpZGU4aTNtNENlWnpsOTJCOCJ9XX0sImVuY3J5cHRlZF9yZXNwb25zZV9lbmNfdmFsdWVzX3N1cHBvcnRlZCI6WyJBMTI4R0NNIiwiQTI1NkdDTSJdLCJ2cF9mb3JtYXRzX3N1cHBvcnRlZCI6eyJkYytzZC1qd3QiOnsic2Qtand0X2FsZ192YWx1ZXMiOlsiRVMyNTYiXSwia2Itand0X2FsZ192YWx1ZXMiOlsiRVMyNTYiXX19fSwicmVzcG9uc2VfdXJpIjoiaHR0cHM6Ly9jb25mb3JtYW5jZS5leGFtcGxlLmNvbTo5NDQzL3ZwL3Jlc3BvbnNlL000TUZTVVUtWDlFRGdfVFdmMHltelEifQ.sFWe1tFxXWjjLsYR_tdQGxqBsB3QRlE-jNE3P5uBT_9_kzl9Y1JGb_fb6n_HQQ2t9e_8TJBOPLivQ_pvb6SEfA
2026-11-10 15:18:21
FetchRequestUriAndExtractRequestObject
Downloaded request object
request_object
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.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.sFWe1tFxXWjjLsYR_tdQGxqBsB3QRlE-jNE3P5uBT_9_kzl9Y1JGb_fb6n_HQQ2t9e_8TJBOPLivQ_pvb6SEfA
2026-11-10 15:18:21 SUCCESS
FetchRequestUriAndExtractRequestObject
Parsed request object
value
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.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.sFWe1tFxXWjjLsYR_tdQGxqBsB3QRlE-jNE3P5uBT_9_kzl9Y1JGb_fb6n_HQQ2t9e_8TJBOPLivQ_pvb6SEfA
header
{
  "x5c": [
    "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\u003d\u003d"
  ],
  "typ": "oauth-authz-req+jwt",
  "alg": "ES256"
}
claims
{
  "response_uri": "https://conformance.example.com:9443/vp/response/M4MFSUU-X9EDg_TWf0ymzQ",
  "aud": "https://self-issued.me/v2",
  "response_type": "vp_token",
  "state": "QRlSUNk7A7cuzdsgPflfSMntzA-iLxFbdRPVw5BBxxc",
  "dcql_query": {
    "credentials": [
      {
        "id": "eudi_pid",
        "format": "dc+sd-jwt",
        "meta": {
          "vct_values": [
            "urn:eudi:pid:1"
          ]
        },
        "claims": [
          {
            "path": [
              "given_name"
            ]
          }
        ]
      }
    ]
  },
  "exp": 1794324201,
  "iat": 1794323901,
  "nonce": "XWz1Mp1FXew9l_MOTT1q-o_MZjrFrt0X8I3x7bgop4k",
  "client_id": "x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM",
  "client_metadata": {
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "use": "enc",
          "alg": "ECDH-ES",
          "kid": "0exqo9nXJcrSEroO1zirMjVEeU0WHU7HWKHIPCOggac",
          "crv": "P-256",
          "x": "kQ122gVvW37jgwZqglR460XNiD0I-rqLgKc7TDQ-XKE",
          "y": "c0Ky_HaeqwntKd8hEs1xdAyLvCide8i3m4CeZzl92B8"
        }
      ]
    },
    "encrypted_response_enc_values_supported": [
      "A128GCM",
      "A256GCM"
    ],
    "vp_formats_supported": {
      "dc+sd-jwt": {
        "sd-jwt_alg_values": [
          "ES256"
        ],
        "kb-jwt_alg_values": [
          "ES256"
        ]
      }
    }
  },
  "response_mode": "direct_post.jwt"
}
2026-11-10 15:18:21 SUCCESS
EnsureRequestUriIsHttps
request_uri is a https url
request_uri
https://conformance.example.com:9443/vp/request/M4MFSUU-X9EDg_TWf0ymzQ
2026-11-10 15:18:21 SUCCESS
EnsureRequestUriHasNoFragment
request_uri does not contain a fragment
request_uri
https://conformance.example.com:9443/vp/request/M4MFSUU-X9EDg_TWf0ymzQ
2026-11-10 15:18:21 SUCCESS
ExtractAndValidateX509HashClientId
Client ID matched
client_id
x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM
2026-11-10 15:18:21 SUCCESS
ValidateRequestObjectTypIsOAuthQauthReqJwt
Request object typ header is valid
typ
oauth-authz-req+jwt
2026-11-10 15:18:21 SUCCESS
OIDCCValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Nov 10, 2026, 3:23:21 PM"
2026-11-10 15:18:21 SUCCESS
ValidateRequestObjectIat
iat claim is valid
iat
1794323901
2026-11-10 15:18:21 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2026-11-10 15:18:21
ValidateRequestObjectMaxAge
Request object does not contain a max_age claim
2026-11-10 15:18:22 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2026-11-10 15:18:22 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2026-11-10 15:18:22 SUCCESS
ValidateRequestObjectIssIfPresent
Request object does not contain an 'iss' claim, which is permitted by the spec
2026-11-10 15:18:22 SUCCESS
ValidateRequestObjectAudForVP
Request object aud claim is valid
aud
https://self-issued.me/v2
expected_self_issued
https://self-issued.me/v2
expected_wallet_issuer
https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/
2026-11-10 15:18:22 SUCCESS
ValidateRequestObjectSignatureAgainstX5cHeader
Request object x5c chain validated and signature verified
chain_length
1
leaf_cert_subject
CN=E2E Test Credential Signer
request_object_signing_alg
ES256
2026-11-10 15:18:22 INFO
ValidateRequestObjectX5cChainAgainstRical
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:22 INFO
EnsureMatchedRicalEntryHasNoTrustConstraints
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-10 15:18:22 SUCCESS
EnsureClientIdInAuthorizationRequestParametersMatchRequestObject
client_id http request parameter value matches client_id in request object
2026-11-10 15:18:22 INFO
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
path
jwe_header
mapped
object
authorization_request_object
2026-11-10 15:18:22 SUCCESS
EnsureOptionalAuthorizationRequestParametersMatchRequestObject
All http request parameters and request object claims match
2026-11-10 15:18:22 SUCCESS
CheckForUnexpectedParametersInVpAuthorizationEndpointHttpRequest
All HTTP authorization request parameters are expected
known_params
[
  "client_id",
  "request_uri",
  "request_uri_method"
]
parameters
[
  "client_id",
  "request_uri",
  "request_uri_method"
]
2026-11-10 15:18:22 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM",
  "request_uri_method": "post",
  "response_uri": "https://conformance.example.com:9443/vp/response/M4MFSUU-X9EDg_TWf0ymzQ",
  "aud": "https://self-issued.me/v2",
  "response_type": "vp_token",
  "state": "QRlSUNk7A7cuzdsgPflfSMntzA-iLxFbdRPVw5BBxxc",
  "dcql_query": {
    "credentials": [
      {
        "id": "eudi_pid",
        "format": "dc+sd-jwt",
        "meta": {
          "vct_values": [
            "urn:eudi:pid:1"
          ]
        },
        "claims": [
          {
            "path": [
              "given_name"
            ]
          }
        ]
      }
    ]
  },
  "exp": 1794324201,
  "iat": 1794323901,
  "nonce": "XWz1Mp1FXew9l_MOTT1q-o_MZjrFrt0X8I3x7bgop4k",
  "client_metadata": {
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "use": "enc",
          "alg": "ECDH-ES",
          "kid": "0exqo9nXJcrSEroO1zirMjVEeU0WHU7HWKHIPCOggac",
          "crv": "P-256",
          "x": "kQ122gVvW37jgwZqglR460XNiD0I-rqLgKc7TDQ-XKE",
          "y": "c0Ky_HaeqwntKd8hEs1xdAyLvCide8i3m4CeZzl92B8"
        }
      ]
    },
    "encrypted_response_enc_values_supported": [
      "A128GCM",
      "A256GCM"
    ],
    "vp_formats_supported": {
      "dc+sd-jwt": {
        "sd-jwt_alg_values": [
          "ES256"
        ],
        "kb-jwt_alg_values": [
          "ES256"
        ]
      }
    }
  },
  "response_mode": "direct_post.jwt"
}
2026-11-10 15:18:22 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
XWz1Mp1FXew9l_MOTT1q-o_MZjrFrt0X8I3x7bgop4k
2026-11-10 15:18:22 INFO
EnsureAuthorizationRequestContainsPkceCodeChallenge
Skipped evaluation due to missing required element: effective_authorization_endpoint_request code_challenge
path
code_challenge
mapped
object
effective_authorization_endpoint_request
2026-11-10 15:18:22 SUCCESS
EnsureResponseTypeIsVpToken
Response type is expected value
expected
vp_token
2026-11-10 15:18:22 SUCCESS
ValidateResponseMode
response_mode is direct_post.jwt
2026-11-10 15:18:22 SUCCESS
CheckNoClientIdSchemeParameter
client_id_scheme parameter is not present, as expected.
2026-11-10 15:18:22 SUCCESS
CheckNoScopeParameter
scope parameter is not present, as expected.
2026-11-10 15:18:22 SUCCESS
CheckRequestUriMethodParameter
request_uri_method is 'post'
2026-11-10 15:18:22 INFO
WarnIfRequestUriMethodInRequestObject
Skipped evaluation due to missing required string: authorization_request_object
expected
authorization_request_object
2026-11-10 15:18:22 SUCCESS
CheckForUnexpectedParametersInVpAuthorizationRequest
All authorization parameters are expected
known_params
[
  "presentation_definition",
  "dcql_query",
  "client_id",
  "client_id_scheme",
  "response_uri",
  "client_metadata",
  "nonce",
  "state",
  "response_type",
  "response_mode",
  "verifier_info",
  "scope",
  "request_uri_method",
  "wallet_nonce",
  "aud",
  "iss",
  "iat",
  "nbf",
  "exp",
  "jti"
]
parameters
[
  "client_id",
  "request_uri_method",
  "response_uri",
  "aud",
  "response_type",
  "state",
  "dcql_query",
  "exp",
  "iat",
  "nonce",
  "client_metadata",
  "response_mode"
]
2026-11-10 15:18:22 SUCCESS
CheckNoTransactionDataInVpAuthorizationRequest
Authorization request does not contain transaction_data
2026-11-10 15:18:22 INFO
ExtractVerifierInfoFromAuthorizationRequest
Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info
path
verifier_info
mapped
object
effective_authorization_endpoint_request
2026-11-10 15:18:22 INFO
ValidateVerifierInfo
Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info
path
verifier_info
mapped
object
effective_authorization_endpoint_request
2026-11-10 15:18:22 INFO
CheckForUnexpectedParametersInVerifierInfo
Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info
path
verifier_info
mapped
object
effective_authorization_endpoint_request
2026-11-10 15:18:22 SUCCESS
EnsureValidResponseUriForAuthorizationEndpointRequest
response_uri is valid https url with no fragment
actual
https://conformance.example.com:9443/vp/response/M4MFSUU-X9EDg_TWf0ymzQ
2026-11-10 15:18:22 SUCCESS
CheckNoRedirectUriInVpAuthorizationRequest
Authorization request does not contain 'redirect_uri'
2026-11-10 15:18:22 SUCCESS
CheckNoPresentationDefinitionInVpAuthorizationRequest
Authorization request does not contain presentation_definition or presentation_definition_uri
2026-11-10 15:18:22 SUCCESS
VP1FinalCheckForUnexpectedParametersInVpClientMetadata
All client_metadata parameters are expected
parameters
[
  "jwks",
  "encrypted_response_enc_values_supported",
  "vp_formats_supported"
]
2026-11-10 15:18:22 SUCCESS
VP1FinalValidateVpFormatsSupportedInClientMetadata
vp_formats_supported contains valid dc+sd-jwt format
dc+sd-jwt
{
  "sd-jwt_alg_values": [
    "ES256"
  ],
  "kb-jwt_alg_values": [
    "ES256"
  ]
}
2026-11-10 15:18:22 SUCCESS
VP1FinalCheckForKeyIdInClientMetadataJWKs
All keys in client_metadata.jwks have unique kid values
jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "enc",
      "alg": "ECDH-ES",
      "kid": "0exqo9nXJcrSEroO1zirMjVEeU0WHU7HWKHIPCOggac",
      "crv": "P-256",
      "x": "kQ122gVvW37jgwZqglR460XNiD0I-rqLgKc7TDQ-XKE",
      "y": "c0Ky_HaeqwntKd8hEs1xdAyLvCide8i3m4CeZzl92B8"
    }
  ]
}
2026-11-10 15:18:22 SUCCESS
VP1FinalValidateClientMetadataJwksForEncryptedResponse
client_metadata.jwks contains valid encryption key(s) with alg
jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "enc",
      "alg": "ECDH-ES",
      "kid": "0exqo9nXJcrSEroO1zirMjVEeU0WHU7HWKHIPCOggac",
      "crv": "P-256",
      "x": "kQ122gVvW37jgwZqglR460XNiD0I-rqLgKc7TDQ-XKE",
      "y": "c0Ky_HaeqwntKd8hEs1xdAyLvCide8i3m4CeZzl92B8"
    }
  ]
}
Validate the JWK set in client_metadata
2026-11-10 15:18:22 SUCCESS
MapJwksToValidationLocation
Selected the JWK set in client_metadata for validation
jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "enc",
      "alg": "ECDH-ES",
      "kid": "0exqo9nXJcrSEroO1zirMjVEeU0WHU7HWKHIPCOggac",
      "crv": "P-256",
      "x": "kQ122gVvW37jgwZqglR460XNiD0I-rqLgKc7TDQ-XKE",
      "y": "c0Ky_HaeqwntKd8hEs1xdAyLvCide8i3m4CeZzl92B8"
    }
  ]
}
2026-11-10 15:18:22 SUCCESS
EnsureJwksHasNoPrivateOrSymmetricKeyMaterial
The JWK set in client_metadata contains only public key material
jwks_source
client_metadata
2026-11-10 15:18:22 SUCCESS
ValidateJwksStructure
The JWK set in client_metadata is structurally valid
jwks_source
client_metadata
2026-11-10 15:18:22 SUCCESS
ParseUsableJwksKeys
All usable keys in the JWK set in client_metadata parse successfully
jwks_source
client_metadata
2026-11-10 15:18:22 SUCCESS
WarnOnUnusableJwksKeys
All keys in the JWK set in client_metadata use a supported key type, curve and algorithm
jwks_source
client_metadata
2026-11-10 15:18:22 SUCCESS
VP1FinalCheckEncryptionKeyNotReused
Verifier response-encryption key(s) were not seen in a previous Authorization Request
jwk_thumbprints
[
  "MI3YaCjsueSkYe8du9T2eK4NpzpeY0UBkAb9K5yykA8"
]
2026-11-10 15:18:22 SUCCESS
ExtractDCQLQueryFromAuthorizationRequest
Extracted dcql_query from authorization request
dcql
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
2026-11-10 15:18:22 SUCCESS
ValidateDCQLQuery
DCQL query input is valid
input
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
schema_link
/json-schemas/oid4vp/dcql_request.json
2026-11-10 15:18:22 SUCCESS
CheckForUnexpectedParametersInDcqlQuery
No unknown properties were found in the DCQL query
input
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
schema_link
/json-schemas/oid4vp/dcql_request.json
2026-11-10 15:18:22 SUCCESS
CheckForNonSelectivelyDisclosableClaimsInDcqlQuery
DCQL query does not request any SD-JWT VC claims that cannot be selectively disclosed
2026-11-10 15:18:22 SUCCESS
CheckForUnreferencedClaimsInDcqlQuery
The DCQL query does not contain claims entries unreferenced by claim_sets
2026-11-10 15:18:22 SUCCESS
CheckDCQLQueryCredentialFormatMatchesTestConfiguration
DCQL query credential format matches test configuration
expected_format
dc+sd-jwt
credential_count
1
2026-11-10 15:18:22 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "state": "QRlSUNk7A7cuzdsgPflfSMntzA-iLxFbdRPVw5BBxxc"
}
2026-11-10 15:18:22 SUCCESS
CreateValidStatusListReference
Allocated a status list index that the served status list marks as valid
revocation_list_reference
{
  "mechanism": "status_list",
  "uri": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/statuslists/kKF6I36OyyVbn7q7osrD",
  "idx": 110
}
2026-11-10 15:18:22
CreateSdJwtKbCredential
Filtered SD-JWT disclosures to DCQL requested claims
filtered_disclosures
1
requested_claims
[
  "given_name"
]
total_disclosures
10
2026-11-10 15:18:22
CreateSdJwtKbCredential
Created an SD-JWT+KB
sdjwt
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.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.gjaxDRdk8jGKOXs4jAbVU_PxvWCTHI90giMpwGiceXK_RuVVlVhvyE7nhWcNmxunOUzu7JGQHe7MPVrP6Puy-Q~WyJWRllzeTNBNHU5MkJkUl9sOF9qTTN3IiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJzZF9oYXNoIjoiWEZneGxQR3oxQWdJaEVCSzU1RXBoMEJ2U3VadF9Ib1ItbFExemU2OUh6WSIsImF1ZCI6Ing1MDlfaGFzaDpWUVdjRFd0OVZTVkt6azdhdms3YmJ1YlFub2dKUTY5SFZxbk9BcWNYS1VNIiwiaWF0IjoxNzk0MzIzOTAyLCJub25jZSI6IlhXejFNcDFGWGV3OWxfTU9UVDFxLW9fTVpqckZydDBYOEkzeDdiZ29wNGsifQ.4pIQwApEmJZBz5E5UwFJ6tSGJZPC9DnDCk7YPREjBXiNPt20Wvbfe051MoxxO9KP2aNeYNng9oq5yaSqrYmm4A
2026-11-10 15:18:22
InvalidateSdJwtKbSignature
Invalidated KB-JWT signature in SD-JWT credential
2026-11-10 15:18:22 SUCCESS
VP1FinalGenerateJwtStatusListToken
Generated the Status List Token in JWT format
sub
https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/statuslists/kKF6I36OyyVbn7q7osrD
status_list_token
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.eyJzdWIiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3MtdmVyaWZpZXItdnAtdGVzdC9zdGF0dXNsaXN0cy9rS0Y2STM2T3l5VmJuN3E3b3NyRCIsImV4cCI6MTc5NDQxMDMwMiwiaWF0IjoxNzk0MzIzOTAyLCJ0dGwiOjMwMCwic3RhdHVzX2xpc3QiOnsiYml0cyI6MSwibHN0IjoiZU5wYnRRb19BQUJlenhWQiJ9fQ.XZg0Dw9eqDfVTVFuLE_1E2qF-PEUElkYkcOeqULqKnHW5O7Z_lfPLpLrMgnPw4yZGkcto-znAF2ffP9JAnrMGQ
exp
1794410302
algorithm
ES256
2026-11-10 15:18:22 SUCCESS
AddVP1FinalDCQLVPTokenToAuthorizationEndpointResponseParams
Added credential in DCQL 'vp_token' authorization endpoint response parameter
authorization_endpoint_response_params
{
  "state": "QRlSUNk7A7cuzdsgPflfSMntzA-iLxFbdRPVw5BBxxc",
  "vp_token": {
    "eudi_pid": [
      "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.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.gjaxDRdk8jGKOXs4jAbVU_PxvWCTHI90giMpwGiceXK_RuVVlVhvyE7nhWcNmxunOUzu7JGQHe7MPVrP6Puy-Q~WyJWRllzeTNBNHU5MkJkUl9sOF9qTTN3IiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJzZF9oYXNoIjoiWEZneGxQR3oxQWdJaEVCSzU1RXBoMEJ2U3VadF9Ib1ItbFExemU2OUh6WSIsImF1ZCI6Ing1MDlfaGFzaDpWUVdjRFd0OVZTVkt6azdhdms3YmJ1YlFub2dKUTY5SFZxbk9BcWNYS1VNIiwiaWF0IjoxNzk0MzIzOTAyLCJub25jZSI6IlhXejFNcDFGWGV3OWxfTU9UVDFxLW9fTVpqckZydDBYOEkzeDdiZ29wNGsifQ.uMhKmlAewswblctjCVsTsI7cf8mYrmOZUBSCZ0t5XyLXZIfuAKyFIRQvaNYrYYjVg_kEOoO6rNDjk_7w99P8ug"
    ]
  }
}
2026-11-10 15:18:22
VP1FinalEncryptVPResponse
Encrypted the response
authorization_encrypted_response_alg
ECDH-ES
authorization_encrypted_response_enc
A128GCM
response
eyJlcGsiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJ4OGdNa19iR0NMNGFOQzBPbmIzOV91VUd3cHdNeFMxNGJMOU9SRHZrSTBRIiwieSI6IkFuMXhKVjdKbFppd1hqd2dRNTNZUmlMUmJkX0xna3N5SDBHTXYyYUlhbFUifSwiYXB2IjoiUjAxcFZtWjVNVTQxYlRoMVRIWXdTdyIsImtpZCI6IjBleHFvOW5YSmNyU0Vyb08xemlyTWpWRWVVMFdIVTdIV0tISVBDT2dnYWMiLCJhcHUiOiJaRzFOTUhOSFVHaHRNa2xwUWpreWR3IiwiY3R5IjoianNvbiIsImVuYyI6IkExMjhHQ00iLCJhbGciOiJFQ0RILUVTIn0..LHXieG3WW84zZ6go.DcFdzHSMIAo0hWJWEAuSRWY5pRWrxzeNmuxQweVjpPImw200zlXURnqQcaESWhEPrsFEbvQMFEepFakwApT2tFVBVVutusizqxUaXOzGu56dvgOvRHEifcglZFGYnMr0EWx2oXhRpF9obMcFGbq4SfphEVFIGUbprZfM_SzDnsob5eaepcQTh_pao_Ao42AoNzg1ierfMVtdzYAsXlxgVDNzZ0K3FRxcgRXmN4YIc_IwN_2P8WacXzraJ91gjmPSQZb32x5xqSeFPosiw_r4mwMhEUY5y3LItZN9laHPaMWwwR17ox2mfZkklYdZloKodiD8p5-pmK6l8BsOpmjbZMunkjTRZF3KdYsUQeurPM-Bq-CXEJX9E-GOb0ImpJT_pIfs0Iim1q2iUpjot1Fy14lIEPwCJfDMlsgZxpIp7jIqzycBLdSMnhQzSViAxv6xC85SMpFRPKe2FERGu8NAwZroypRJaiDXSzCWh0yMghlQIIAfYz8gdRLBfXre69PUDHjRZaBQWl3o8UJ-p2uym7OiqYsILKsg89W-afEntSS-DLdl_pxcIRrLv1-xzQzLldaVSNOb54JOxBv-885ZBPJHIqdSyE3J40SGG3XyIpSt9UnU2dDJ2mcvIHRoMCDck7g0-HdMeoyMJv5IYpbs70QbCgzTTZVrwO8MZNm-fYcT6MvRREs45dehO6kiHuxHfVNHVr4n3-a1ElDJVdH6Zs3jeZARrOuTvWIfbMYphUbgH2HEFJeZKGeZyMZzZr3LgdPufDDisCEuqI79wskk5KPSE-xErB5A4qg__bx7d844u3ay2tfH3wt1w_gHn5FdW9qmQyLTT7ECnkM8lTATAbyG2uUYvALOz5Bl7N5EI48_Ml2Hx-cnrsYxKTIAN3vsZrsuqVTiMz_T3wgDlxcDDLKAJdLYqaKyuacDqNVknUONfj4tfh1v3v2Tt07qKbJoSrAggd6hh_Ju4gCkNcqsnhzDlRc96XHwvH1bjEaJ5v7dz3yNMEYXEcSZR2tBIGFgpHlyqnls8VOf5wpbNHtPUFHm4vBRQL8Y7NW7nUh_Xe-qwcoyAx4A0uOENAo2a8Xr-SHsBTjTXka8asQQxAzjdvVU_KGOSnhxfkJ2gPadPbqWFvBIzHjWzugI4T3qiA3rdttKquAIF_HlgWf-7AEcQZdUXey2rH-kU9gq273bB-1aVlsEBPJ_f_1j64e580uCvAEu8AvBVAoiKAilBRhQ94Jdbb3HzRFM00emU9LUwCLhMTqxxoP9la-PpS43i5JdkT8kQeyObeE-iE2eRCVtvXI7a__dJUEx-mtqOpHwX42Q0KCaMT5C0qN9vwTwgDsX_IRBPijrLg1a51rcORAylWYzqUbxIol2JMk3h7C0TaaLlCapx6fIXHH2-pqC3ZKUTN2n4t-BBIUuAgTpVHVMlrIBDTtT2E0iz6LmU87vCjVuYlB8YdBtpyQQP4F1965NwgR1uz1YW0vcNNLTEIvogIshIO418NOav3_0QpSVMRFE8Uhrx6QeTLcvg_w5r6C4KspfEEMTOfw26G-pVKXUYgvvY4v4bnDj6DtXx01T0wcfdats8kNEGvNNnITwFcYwZv4xx-YNiZjLlJjwl-CP6bJeCTOt0aj2VtysoErpWQZd07OsZhKeQtZaWHi15vslXo6dPPCiYkSvmikTelO4l7Y2pwYWHwpn9LWcuHiPIAx_12vcS273_A5GJt0rPcookX3b6p74CpiwSYly-p2mQ5DlWFKrBkiCahAzs4PExFnLawdJlvrS3Y0s6Bt7rEP45ivoxbCzU0YStw_oDe0UPqSSnSL2711PvAITUVKK-T2tN0Hg6wnOKuO2TjseTWuzW6RNp_109UqYu49HHMmkoE-ssxpzYF53nAM5Y9ydc_aOLH4126qNeKDbkpwEtslU5sqpAHdPkEBRPRm-iJkxUFtECwPZE8v8n7Bq0O4HUM0PBNjUj_JfvTbAmSgXMT_1iXHFItuqWF_b9HCzgzBXH7WpId8SYd2VhsMbLXcL4uIQprKcUGUVsF8PRtrr-I300r49Lg2Fx6mySAOI6LyYFXcdLiEbZ7M9GcT_CKi-09CJSEo__tHQPAviI6IoUhBQi1ybZ0OoQ9uDySL_3jUCQSq_48iKRSTNgjEYyZTSCszq38ZSThtXRiio78CsF5HZBYQPjYV7hRv7kVjK5F1LhtbkhwSKgipQDzntgfuUBWX7GdCzpl9lfJmliBv_jb9CxzmS050cU1NDKFDlmJY28Be97QCLukWZgt_w7PK__etLPZjKKhvOlXPU_jvlQy4rpPdlS4zg6mrXHHe36iuRHpW4vRaT_CNtLE-QP6Y5E1FQa3tfPuk622P-CmnkP6RLG5CsJJNQIv5RZ2enumff3rb2-0Q3TT8b_UNDdxUn8GuQxLLB2v4L9aCqYmVRg6-yhlI9Kza7wdcjd4xC6s8SQ0eyzBkFqK5sN9vqfDUh4PxEqH0AGj_GRrMq2nRpFx8RqmoCB_WUe9J10ZgPhPWsG3vQAZBafVcYPAcFslzMSfVbfhZbq46wReZuIW255YgWlutMrnBumhhq9dCD6dtmFDx1ZgCrrIJm-RDoLdzBjJsHOlMRRD9oLgsQShSy4UJKMQHrhsUQ2kqlvCAVpWm_Ly_SooRhb0RcHnzw5_qccaaJCInFI0aH4K4rooXgCa_2QagvYyTiT_sejrYI5oNKeeTVe5v1DltTkxIEbDLpsZlUwbqd8Wi4HlpaZpcg5e6RquU6mEkVfLuZckIT65-xwVLpOHTZDiTpMeX_tP1t9SrvqCES9LR2ptvitmK-3Yu6dqkrJKUsqR1I6mrYIYfIyKEca20ItT9NF1Xg2nYDdFpoVLqhMR2c3HePcxpMDfbn9Oqq4-CgC0atSmni9_m4ruzhEln2Re4gk93Zw0Zi9BwXw-8XS3M8mKCBccZv7sOCgw5VGKVehV-rz8tchZL3KlI_VTXLCrbNhfpRT1rtsvKYguyUphCU9JY0vZPVl0eF7lMvZuYA9b4ik-9w0pDIXHgDHc38Y_NZ5norKLgAFnEzP04FjLrU6LOH8RqcxlbRRVYuWvFUFw5tMqGANiadgHJjrkVjx5pqOCyaLzwdEc2j4v6z6OvbeV914BLzLEl5sDYIqccN8HekhhOBZAovg57fFgwLZJxtF2xT_VrBPXz2IsATDWDVZvbxit7YPgFIuq7FTICihmAaB4_PLEZZ4xgmcjdfbDBFmWLVfsDZgnafOMohVtMxtg1grH8FkbOmeVFN9eV6jd9FIoHq1Tfy44XksH4kSBofeJJAK66RKlWgXyrMFpO9bHUnOJbVcTYVHNm42-GPXjlRLQQJrGiRSy0heogAXDZ_hodXy9665pm-ozbfYzhccY_O424IMA4y0Infj84lW2boEZuvk-rXQk7NsWwDLLSiavw6BEbQytnAQX333jTUfrIivVkqd8KpbFhi6Ft_U0RVl-r7UC80o-IVI6EUCQrlXgFNoi9ItflpuUmjN295k0pppDZKfi7c-sMVfOl7UinNezsRJL9Z8taht4YpPNLDyB_1CCUBCUR7vAvw18ieX1RZaDyCWmeM3oMDea5s8pr1cvHHTjk2IzRjARF4ynmooJ6qOXKwGA.CQ8ZcqUkexTvcXdoyxPENw
apv
GMiVfy1N5m8uLv0K
apu
dmM0sGPhm2IiB92w
apv_b64
{
  "value": "R01pVmZ5MU41bTh1THYwSw"
}
apu_b64
{
  "value": "ZG1NMHNHUGhtMklpQjkydw"
}
2026-11-10 15:18:22
CallDirectPostEndpoint
HTTP request
request_uri
https://conformance.example.com:9443/vp/response/M4MFSUU-X9EDg_TWf0ymzQ
request_method
POST
request_headers
{
  "Accept": "application/json",
  "Content-Type": "application/x-www-form-urlencoded",
  "Content-Length": "4068"
}
request_body
response=eyJlcGsiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJ4OGdNa19iR0NMNGFOQzBPbmIzOV91VUd3cHdNeFMxNGJMOU9SRHZrSTBRIiwieSI6IkFuMXhKVjdKbFppd1hqd2dRNTNZUmlMUmJkX0xna3N5SDBHTXYyYUlhbFUifSwiYXB2IjoiUjAxcFZtWjVNVTQxYlRoMVRIWXdTdyIsImtpZCI6IjBleHFvOW5YSmNyU0Vyb08xemlyTWpWRWVVMFdIVTdIV0tISVBDT2dnYWMiLCJhcHUiOiJaRzFOTUhOSFVHaHRNa2xwUWpreWR3IiwiY3R5IjoianNvbiIsImVuYyI6IkExMjhHQ00iLCJhbGciOiJFQ0RILUVTIn0..LHXieG3WW84zZ6go.DcFdzHSMIAo0hWJWEAuSRWY5pRWrxzeNmuxQweVjpPImw200zlXURnqQcaESWhEPrsFEbvQMFEepFakwApT2tFVBVVutusizqxUaXOzGu56dvgOvRHEifcglZFGYnMr0EWx2oXhRpF9obMcFGbq4SfphEVFIGUbprZfM_SzDnsob5eaepcQTh_pao_Ao42AoNzg1ierfMVtdzYAsXlxgVDNzZ0K3FRxcgRXmN4YIc_IwN_2P8WacXzraJ91gjmPSQZb32x5xqSeFPosiw_r4mwMhEUY5y3LItZN9laHPaMWwwR17ox2mfZkklYdZloKodiD8p5-pmK6l8BsOpmjbZMunkjTRZF3KdYsUQeurPM-Bq-CXEJX9E-GOb0ImpJT_pIfs0Iim1q2iUpjot1Fy14lIEPwCJfDMlsgZxpIp7jIqzycBLdSMnhQzSViAxv6xC85SMpFRPKe2FERGu8NAwZroypRJaiDXSzCWh0yMghlQIIAfYz8gdRLBfXre69PUDHjRZaBQWl3o8UJ-p2uym7OiqYsILKsg89W-afEntSS-DLdl_pxcIRrLv1-xzQzLldaVSNOb54JOxBv-885ZBPJHIqdSyE3J40SGG3XyIpSt9UnU2dDJ2mcvIHRoMCDck7g0-HdMeoyMJv5IYpbs70QbCgzTTZVrwO8MZNm-fYcT6MvRREs45dehO6kiHuxHfVNHVr4n3-a1ElDJVdH6Zs3jeZARrOuTvWIfbMYphUbgH2HEFJeZKGeZyMZzZr3LgdPufDDisCEuqI79wskk5KPSE-xErB5A4qg__bx7d844u3ay2tfH3wt1w_gHn5FdW9qmQyLTT7ECnkM8lTATAbyG2uUYvALOz5Bl7N5EI48_Ml2Hx-cnrsYxKTIAN3vsZrsuqVTiMz_T3wgDlxcDDLKAJdLYqaKyuacDqNVknUONfj4tfh1v3v2Tt07qKbJoSrAggd6hh_Ju4gCkNcqsnhzDlRc96XHwvH1bjEaJ5v7dz3yNMEYXEcSZR2tBIGFgpHlyqnls8VOf5wpbNHtPUFHm4vBRQL8Y7NW7nUh_Xe-qwcoyAx4A0uOENAo2a8Xr-SHsBTjTXka8asQQxAzjdvVU_KGOSnhxfkJ2gPadPbqWFvBIzHjWzugI4T3qiA3rdttKquAIF_HlgWf-7AEcQZdUXey2rH-kU9gq273bB-1aVlsEBPJ_f_1j64e580uCvAEu8AvBVAoiKAilBRhQ94Jdbb3HzRFM00emU9LUwCLhMTqxxoP9la-PpS43i5JdkT8kQeyObeE-iE2eRCVtvXI7a__dJUEx-mtqOpHwX42Q0KCaMT5C0qN9vwTwgDsX_IRBPijrLg1a51rcORAylWYzqUbxIol2JMk3h7C0TaaLlCapx6fIXHH2-pqC3ZKUTN2n4t-BBIUuAgTpVHVMlrIBDTtT2E0iz6LmU87vCjVuYlB8YdBtpyQQP4F1965NwgR1uz1YW0vcNNLTEIvogIshIO418NOav3_0QpSVMRFE8Uhrx6QeTLcvg_w5r6C4KspfEEMTOfw26G-pVKXUYgvvY4v4bnDj6DtXx01T0wcfdats8kNEGvNNnITwFcYwZv4xx-YNiZjLlJjwl-CP6bJeCTOt0aj2VtysoErpWQZd07OsZhKeQtZaWHi15vslXo6dPPCiYkSvmikTelO4l7Y2pwYWHwpn9LWcuHiPIAx_12vcS273_A5GJt0rPcookX3b6p74CpiwSYly-p2mQ5DlWFKrBkiCahAzs4PExFnLawdJlvrS3Y0s6Bt7rEP45ivoxbCzU0YStw_oDe0UPqSSnSL2711PvAITUVKK-T2tN0Hg6wnOKuO2TjseTWuzW6RNp_109UqYu49HHMmkoE-ssxpzYF53nAM5Y9ydc_aOLH4126qNeKDbkpwEtslU5sqpAHdPkEBRPRm-iJkxUFtECwPZE8v8n7Bq0O4HUM0PBNjUj_JfvTbAmSgXMT_1iXHFItuqWF_b9HCzgzBXH7WpId8SYd2VhsMbLXcL4uIQprKcUGUVsF8PRtrr-I300r49Lg2Fx6mySAOI6LyYFXcdLiEbZ7M9GcT_CKi-09CJSEo__tHQPAviI6IoUhBQi1ybZ0OoQ9uDySL_3jUCQSq_48iKRSTNgjEYyZTSCszq38ZSThtXRiio78CsF5HZBYQPjYV7hRv7kVjK5F1LhtbkhwSKgipQDzntgfuUBWX7GdCzpl9lfJmliBv_jb9CxzmS050cU1NDKFDlmJY28Be97QCLukWZgt_w7PK__etLPZjKKhvOlXPU_jvlQy4rpPdlS4zg6mrXHHe36iuRHpW4vRaT_CNtLE-QP6Y5E1FQa3tfPuk622P-CmnkP6RLG5CsJJNQIv5RZ2enumff3rb2-0Q3TT8b_UNDdxUn8GuQxLLB2v4L9aCqYmVRg6-yhlI9Kza7wdcjd4xC6s8SQ0eyzBkFqK5sN9vqfDUh4PxEqH0AGj_GRrMq2nRpFx8RqmoCB_WUe9J10ZgPhPWsG3vQAZBafVcYPAcFslzMSfVbfhZbq46wReZuIW255YgWlutMrnBumhhq9dCD6dtmFDx1ZgCrrIJm-RDoLdzBjJsHOlMRRD9oLgsQShSy4UJKMQHrhsUQ2kqlvCAVpWm_Ly_SooRhb0RcHnzw5_qccaaJCInFI0aH4K4rooXgCa_2QagvYyTiT_sejrYI5oNKeeTVe5v1DltTkxIEbDLpsZlUwbqd8Wi4HlpaZpcg5e6RquU6mEkVfLuZckIT65-xwVLpOHTZDiTpMeX_tP1t9SrvqCES9LR2ptvitmK-3Yu6dqkrJKUsqR1I6mrYIYfIyKEca20ItT9NF1Xg2nYDdFpoVLqhMR2c3HePcxpMDfbn9Oqq4-CgC0atSmni9_m4ruzhEln2Re4gk93Zw0Zi9BwXw-8XS3M8mKCBccZv7sOCgw5VGKVehV-rz8tchZL3KlI_VTXLCrbNhfpRT1rtsvKYguyUphCU9JY0vZPVl0eF7lMvZuYA9b4ik-9w0pDIXHgDHc38Y_NZ5norKLgAFnEzP04FjLrU6LOH8RqcxlbRRVYuWvFUFw5tMqGANiadgHJjrkVjx5pqOCyaLzwdEc2j4v6z6OvbeV914BLzLEl5sDYIqccN8HekhhOBZAovg57fFgwLZJxtF2xT_VrBPXz2IsATDWDVZvbxit7YPgFIuq7FTICihmAaB4_PLEZZ4xgmcjdfbDBFmWLVfsDZgnafOMohVtMxtg1grH8FkbOmeVFN9eV6jd9FIoHq1Tfy44XksH4kSBofeJJAK66RKlWgXyrMFpO9bHUnOJbVcTYVHNm42-GPXjlRLQQJrGiRSy0heogAXDZ_hodXy9665pm-ozbfYzhccY_O424IMA4y0Infj84lW2boEZuvk-rXQk7NsWwDLLSiavw6BEbQytnAQX333jTUfrIivVkqd8KpbFhi6Ft_U0RVl-r7UC80o-IVI6EUCQrlXgFNoi9ItflpuUmjN295k0pppDZKfi7c-sMVfOl7UinNezsRJL9Z8taht4YpPNLDyB_1CCUBCUR7vAvw18ieX1RZaDyCWmeM3oMDea5s8pr1cvHHTjk2IzRjARF4ynmooJ6qOXKwGA.CQ8ZcqUkexTvcXdoyxPENw
2026-11-10 15:18:22 RESPONSE
CallDirectPostEndpoint
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "server": "nginx/1.29.8",
  "date": "Tue, 10 Nov 2026 15:18:22 GMT",
  "content-type": "application/json",
  "content-length": "60",
  "connection": "keep-alive",
  "set-cookie": "SIROS_VERIFIER_STATE\u003deyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0..e_Dsm5EUUczRgYlR.EjvyR8lut2caR-WjVezZaOdnpbYbE-4vlmtQLTSluQ1T2bjWC8zSig.Pb0Pj5gXNflRgKLbXoL8lA; Path\u003d/; HttpOnly; SameSite\u003dLax; Max-Age\u003d900"
}
response_body
{"error":"integrity","error_description":"invalid response"}
2026-11-10 15:18:22 SUCCESS
CallDirectPostEndpoint
Parsed response uri endpoint response
status
400
endpoint_name
https://conformance.example.com:9443/vp/response/M4MFSUU-X9EDg_TWf0ymzQ
headers
{
  "server": "nginx/1.29.8",
  "date": "Tue, 10 Nov 2026 15:18:22 GMT",
  "content-type": "application/json",
  "content-length": "60",
  "connection": "keep-alive",
  "set-cookie": "SIROS_VERIFIER_STATE\u003deyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0..e_Dsm5EUUczRgYlR.EjvyR8lut2caR-WjVezZaOdnpbYbE-4vlmtQLTSluQ1T2bjWC8zSig.Pb0Pj5gXNflRgKLbXoL8lA; Path\u003d/; HttpOnly; SameSite\u003dLax; Max-Age\u003d900"
}
body
{"error":"integrity","error_description":"invalid response"}
body_json
{
  "error": "integrity",
  "error_description": "invalid response"
}
2026-11-10 15:18:22 SUCCESS
EnsureHttpStatusCodeIs4xx
https://conformance.example.com:9443/vp/response/M4MFSUU-X9EDg_TWf0ymzQ endpoint http status code was 400
2026-11-10 15:18:22 OUTGOING
oid4vp-1final-verifier-invalid-kb-jwt-signature
Response to HTTP request to test instance SaCiMD61V1vh2H4
outgoing
ModelAndView [view="resultCaptured"; model={returnUrl=/log-detail.html?log=SaCiMD61V1vh2H4}]
outgoing_path
authorize
2026-11-10 15:18:22 FINISHED
oid4vp-1final-verifier-invalid-kb-jwt-signature
Test has run to completion
testmodule_result
PASSED
2026-11-10 15:18:22
TEST-RUNNER
Alias has now been claimed by another test
alias
siros-verifier-vp-test
new_test_id
adUFkq6T3FX9Qpm
Test Results