Test Summary

Test Results

Expand All Collapse All
All times are UTC
2026-11-11 18:31:33 INFO
TEST-RUNNER
Test instance ITP05f0ks5OPjgy created
baseUrl
https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test
variant
{
  "credential_format": "sd_jwt_vc",
  "request_method": "request_uri_signed",
  "vp_profile": "plain_vp",
  "client_id_prefix": "x509_hash",
  "response_mode": "direct_post.jwt"
}
alias
siros-verifier-vp-test
description
OID4VP verifier/RP conformance test for SIROS VC verifier
planId
e7X24VsWyzt9M
config
{
  "alias": "siros-verifier-vp-test",
  "description": "OID4VP verifier/RP conformance test for SIROS VC verifier",
  "server": {
    "discoveryUrl": "https://conformance.example.com:9443/OIDC/.well-known/openid-configuration"
  },
  "client": {
    "client_id": "conformance.example.com",
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "crv": "P-256",
          "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
          "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
          "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
          "kid": "vp-verifier-key-1",
          "use": "sig",
          "alg": "ES256",
          "x5c": [
            "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"
          ]
        }
      ]
    }
  },
  "credential": {
    "signing_jwk": {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "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"
      ]
    }
  },
  "resource": {
    "resourceUrl": "https://conformance.example.com:9443"
  },
  "waitTimeoutSeconds": 120
}
baseMtlsUrl
https://localhost:8444/test-mtls/a/siros-verifier-vp-test
testName
oid4vp-1final-verifier-invalid-kb-jwt-nonce
2026-11-11 18:31:33 SUCCESS
OIDCCGenerateServerConfiguration
Generated default server configuration
server_configuration
{
  "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/",
  "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/authorize",
  "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/token",
  "jwks_uri": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/jwks",
  "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/userinfo",
  "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "HS256",
    "HS384",
    "HS512",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "preferred_username",
    "gender",
    "birthdate",
    "address",
    "zoneinfo",
    "locale",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified",
    "website",
    "profile",
    "updated_at",
    "txn"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ]
}
2026-11-11 18:31:33
SetRequestUriParameterSupportedToTrueInServerConfiguration
Enabled request_uri support in server configuration
server
{
  "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/",
  "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/authorize",
  "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/token",
  "jwks_uri": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/jwks",
  "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/userinfo",
  "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "HS256",
    "HS384",
    "HS512",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "preferred_username",
    "gender",
    "birthdate",
    "address",
    "zoneinfo",
    "locale",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified",
    "website",
    "profile",
    "updated_at",
    "txn"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_uri_parameter_supported": true,
  "require_request_uri_registration": false
}
2026-11-11 18:31:33
RegisterClientRequestObjectTrustAnchor
No client request object trust anchor configured, skipping registration
2026-11-11 18:31:33
RegisterRical
No RICAL configured, skipping RICAL-based verifier trust checks
2026-11-11 18:31:33 INFO
CallRicalEndpoint
Skipped evaluation due to missing required string: rical_url
expected
rical_url
2026-11-11 18:31:33 INFO
ParseRical
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-11 18:31:33 INFO
DumpRicalCborDiagnostics
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-11 18:31:33 INFO
ValidateRicalSignature
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-11 18:31:33 INFO
ValidateRicalSignerCertificate
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-11 18:31:33 INFO
ValidateRicalStructure
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-11 18:31:33
oid4vp-1final-verifier-invalid-kb-jwt-nonce
Setup Done
2026-11-11 18:31:34 INCOMING
oid4vp-1final-verifier-invalid-kb-jwt-nonce
Incoming HTTP request to /test/a/siros-verifier-vp-test/authorize
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-verifier-vp-test/authorize?client_id\u003dx509_hash%3AVQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM\u0026request_uri\u003dhttps%3A%2F%2Fconformance.example.com%3A9443%2Fvp%2Frequest%2FwQ0ptTzUuEAOKpbhAsYr8g\u0026request_uri_method\u003dpost",
  "forwarded": "by\u003d172.18.0.6;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "sec-ch-ua": "\"Not-A.Brand\";v\u003d\"99\", \"Google Chrome\";v\u003d\"157\", \"Chromium\";v\u003d\"157\"",
  "accept-language": "en-US",
  "sec-ch-ua-mobile": "?0",
  "accept": "*/*",
  "sec-fetch-site": "same-origin",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "https://localhost.emobix.co.uk:8443/log-detail.html?log\u003dITP05f0ks5OPjgy",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "JSESSIONID\u003d618FF0DBCD6AAE8B8ED4B8F358D5D819"
}
incoming_path
/test/a/siros-verifier-vp-test/authorize
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{
  "client_id": "x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM",
  "request_uri": "https://conformance.example.com:9443/vp/request/wQ0ptTzUuEAOKpbhAsYr8g",
  "request_uri_method": "post"
}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
Authorization endpoint
2026-11-11 18:31:34
FetchRequestUriAndExtractRequestObject
Fetching request object from request_uri
request_uri
https://conformance.example.com:9443/vp/request/wQ0ptTzUuEAOKpbhAsYr8g
2026-11-11 18:31:34
FetchRequestUriAndExtractRequestObject
HTTP request
request_uri
https://conformance.example.com:9443/vp/request/wQ0ptTzUuEAOKpbhAsYr8g
request_method
GET
request_headers
{
  "Accept": "text/plain, application/json, application/yaml, application/*+json, */*",
  "Content-Length": "0"
}
request_body

                                
2026-11-11 18:31:34 RESPONSE
FetchRequestUriAndExtractRequestObject
HTTP response
response_status_code
200 OK
response_status_text
OK
response_headers
{
  "server": "nginx/1.29.8",
  "date": "Wed, 11 Nov 2026 18:31:34 GMT",
  "content-type": "application/oauth-authz-req+jwt",
  "content-length": "2274",
  "connection": "keep-alive",
  "set-cookie": "SIROS_VERIFIER_STATE\u003deyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0..7O0c48GzKhTHiKC7.Y823m92dTcrkyd-tJQafAyM2yBm-nQ5obmxS9qpL_c5SF_GpmiqcMQ.yRSGMypUKSoJUIXnhMETVw; Path\u003d/; HttpOnly; SameSite\u003dLax; Max-Age\u003d900",
  "cache-control": "no-store"
}
response_body
eyJhbGciOiJFUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJ4NWMiOlsiTUlJQjF6Q0NBWHlnQXdJQkFnSVVZMUZPN1ZvQmp0UGVYcmdsWUx0K204b0hXODB3Q2dZSUtvWkl6ajBFQXdJd0pERWlNQ0FHQTFVRUF3d1pVMGxTVDFNZ1EyOXVabTl5YldGdVkyVWdWR1Z6ZENCRFFUQWVGdzB5TmpFeE1ESXlNVEl5TkROYUZ3MHlOekV4TURJeU1USXlORE5hTUNVeEl6QWhCZ05WQkFNTUdrVXlSU0JVWlhOMElFTnlaV1JsYm5ScFlXd2dVMmxuYm1WeU1Ga3dFd1lIS29aSXpqMENBUVlJS29aSXpqMERBUWNEUWdBRURMV0NhemtHaXdYUDRVc1Fhcmhhd3hSdXRaZWhPRk1YdHJzR29aeDQ4cnpWMHdKbENyNDZtVktjcUpETzBzWkNLdEJsRVpSZXRlWlo3c20wNnRPU25xT0JpakNCaHpCRkJnTlZIUkVFUGpBOGdnbHNiMk5oYkdodmMzU0NDWFpqTFdsemMzVmxjb0lMZG1NdGRtVnlhV1pwWlhLQ0YyTnZibVp2Y20xaGJtTmxMbVY0WVcxd2JHVXVZMjl0TUIwR0ExVWREZ1FXQkJTNlZRR0FTTkNqaDdjaVAwN1Y2Q1JtcHB3WitUQWZCZ05WSFNNRUdEQVdnQlFEWVV4dWpSMmw3c3RDOXA4YXdqZmtLL3pXWlRBS0JnZ3Foa2pPUFFRREFnTkpBREJHQWlFQWhnZk1WMkxiRnVxdlZxa1NpKzNWYW8xZnpRUjI4VnppYzJ3ODBUdUVzODRDSVFDdjNuT2Z5STYzbW1kWk9LRHFpNmhjUGc4VkphWDhuajFjSnB6SVFESFRJdz09Il19.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.sE3dRgPpR_nF8CuE07zON4m-p4qz4pQ-W1fz207Ahoh1Z5i5ZJNQF0qnrFFfBTcaGneuGQGLjlNSAai9CK8GEA
2026-11-11 18:31:34
FetchRequestUriAndExtractRequestObject
Downloaded request object
request_object
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.eyJpYXQiOjE3OTQ0MjE4OTQsImV4cCI6MTc5NDQyMjE5NCwiYXVkIjoiaHR0cHM6Ly9zZWxmLWlzc3VlZC5tZS92MiIsImNsaWVudF9pZCI6Ing1MDlfaGFzaDpWUVdjRFd0OVZTVkt6azdhdms3YmJ1YlFub2dKUTY5SFZxbk9BcWNYS1VNIiwicmVzcG9uc2VfdHlwZSI6InZwX3Rva2VuIiwicmVzcG9uc2VfbW9kZSI6ImRpcmVjdF9wb3N0Lmp3dCIsIm5vbmNlIjoiOVFTdGU3VGJTZ3RxUFQ2LXA1Z0VyUzZ4SkJxQ1JLYUMxZUJ3MzZLclNUdyIsInN0YXRlIjoid0NxX0JPLTVxUEs1VmxDUjdFWUFtRVVNWFJKR0wzQkJMeDNVVU5ZNkx5QSIsImRjcWxfcXVlcnkiOnsiY3JlZGVudGlhbHMiOlt7ImlkIjoiZXVkaV9waWQiLCJmb3JtYXQiOiJkYytzZC1qd3QiLCJtZXRhIjp7InZjdF92YWx1ZXMiOlsidXJuOmV1ZGk6cGlkOjEiXX0sImNsYWltcyI6W3sicGF0aCI6WyJnaXZlbl9uYW1lIl19XX1dfSwiY2xpZW50X21ldGFkYXRhIjp7Imp3a3MiOnsia2V5cyI6W3sia3R5IjoiRUMiLCJ1c2UiOiJlbmMiLCJhbGciOiJFQ0RILUVTIiwia2lkIjoiNlVRb0hJQ2JkWjRsb0FzQU9KaEF4VW52aUh0Wk8wY2lQbDBQclU0R3lwTSIsImNydiI6IlAtMjU2IiwieCI6ImswU3RLZ2dldmsxb2FENjU1MUhkMEhTcXRUZUxucWwyMExGcXF2akRWcDAiLCJ5IjoiamV4V0dzV0t1bWZVdzhIT3VxNGpGVkhNU0ZXa2htR0I2QTRjOXB3dVlPOCJ9XX0sImVuY3J5cHRlZF9yZXNwb25zZV9lbmNfdmFsdWVzX3N1cHBvcnRlZCI6WyJBMTI4R0NNIiwiQTI1NkdDTSJdLCJ2cF9mb3JtYXRzX3N1cHBvcnRlZCI6eyJkYytzZC1qd3QiOnsic2Qtand0X2FsZ192YWx1ZXMiOlsiRVMyNTYiXSwia2Itand0X2FsZ192YWx1ZXMiOlsiRVMyNTYiXX19fSwicmVzcG9uc2VfdXJpIjoiaHR0cHM6Ly9jb25mb3JtYW5jZS5leGFtcGxlLmNvbTo5NDQzL3ZwL3Jlc3BvbnNlL3dRMHB0VHpVdUVBT0twYmhBc1lyOGcifQ.sE3dRgPpR_nF8CuE07zON4m-p4qz4pQ-W1fz207Ahoh1Z5i5ZJNQF0qnrFFfBTcaGneuGQGLjlNSAai9CK8GEA
2026-11-11 18:31:34 SUCCESS
FetchRequestUriAndExtractRequestObject
Parsed request object
value
eyJhbGciOiJFUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJ4NWMiOlsiTUlJQjF6Q0NBWHlnQXdJQkFnSVVZMUZPN1ZvQmp0UGVYcmdsWUx0K204b0hXODB3Q2dZSUtvWkl6ajBFQXdJd0pERWlNQ0FHQTFVRUF3d1pVMGxTVDFNZ1EyOXVabTl5YldGdVkyVWdWR1Z6ZENCRFFUQWVGdzB5TmpFeE1ESXlNVEl5TkROYUZ3MHlOekV4TURJeU1USXlORE5hTUNVeEl6QWhCZ05WQkFNTUdrVXlSU0JVWlhOMElFTnlaV1JsYm5ScFlXd2dVMmxuYm1WeU1Ga3dFd1lIS29aSXpqMENBUVlJS29aSXpqMERBUWNEUWdBRURMV0NhemtHaXdYUDRVc1Fhcmhhd3hSdXRaZWhPRk1YdHJzR29aeDQ4cnpWMHdKbENyNDZtVktjcUpETzBzWkNLdEJsRVpSZXRlWlo3c20wNnRPU25xT0JpakNCaHpCRkJnTlZIUkVFUGpBOGdnbHNiMk5oYkdodmMzU0NDWFpqTFdsemMzVmxjb0lMZG1NdGRtVnlhV1pwWlhLQ0YyTnZibVp2Y20xaGJtTmxMbVY0WVcxd2JHVXVZMjl0TUIwR0ExVWREZ1FXQkJTNlZRR0FTTkNqaDdjaVAwN1Y2Q1JtcHB3WitUQWZCZ05WSFNNRUdEQVdnQlFEWVV4dWpSMmw3c3RDOXA4YXdqZmtLL3pXWlRBS0JnZ3Foa2pPUFFRREFnTkpBREJHQWlFQWhnZk1WMkxiRnVxdlZxa1NpKzNWYW8xZnpRUjI4VnppYzJ3ODBUdUVzODRDSVFDdjNuT2Z5STYzbW1kWk9LRHFpNmhjUGc4VkphWDhuajFjSnB6SVFESFRJdz09Il19.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.sE3dRgPpR_nF8CuE07zON4m-p4qz4pQ-W1fz207Ahoh1Z5i5ZJNQF0qnrFFfBTcaGneuGQGLjlNSAai9CK8GEA
header
{
  "x5c": [
    "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\u003d\u003d"
  ],
  "typ": "oauth-authz-req+jwt",
  "alg": "ES256"
}
claims
{
  "response_uri": "https://conformance.example.com:9443/vp/response/wQ0ptTzUuEAOKpbhAsYr8g",
  "aud": "https://self-issued.me/v2",
  "response_type": "vp_token",
  "state": "wCq_BO-5qPK5VlCR7EYAmEUMXRJGL3BBLx3UUNY6LyA",
  "dcql_query": {
    "credentials": [
      {
        "id": "eudi_pid",
        "format": "dc+sd-jwt",
        "meta": {
          "vct_values": [
            "urn:eudi:pid:1"
          ]
        },
        "claims": [
          {
            "path": [
              "given_name"
            ]
          }
        ]
      }
    ]
  },
  "exp": 1794422194,
  "iat": 1794421894,
  "nonce": "9QSte7TbSgtqPT6-p5gErS6xJBqCRKaC1eBw36KrSTw",
  "client_id": "x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM",
  "client_metadata": {
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "use": "enc",
          "alg": "ECDH-ES",
          "kid": "6UQoHICbdZ4loAsAOJhAxUnviHtZO0ciPl0PrU4GypM",
          "crv": "P-256",
          "x": "k0StKggevk1oaD6551Hd0HSqtTeLnql20LFqqvjDVp0",
          "y": "jexWGsWKumfUw8HOuq4jFVHMSFWkhmGB6A4c9pwuYO8"
        }
      ]
    },
    "encrypted_response_enc_values_supported": [
      "A128GCM",
      "A256GCM"
    ],
    "vp_formats_supported": {
      "dc+sd-jwt": {
        "sd-jwt_alg_values": [
          "ES256"
        ],
        "kb-jwt_alg_values": [
          "ES256"
        ]
      }
    }
  },
  "response_mode": "direct_post.jwt"
}
2026-11-11 18:31:34 SUCCESS
EnsureRequestUriIsHttps
request_uri is a https url
request_uri
https://conformance.example.com:9443/vp/request/wQ0ptTzUuEAOKpbhAsYr8g
2026-11-11 18:31:34 SUCCESS
EnsureRequestUriHasNoFragment
request_uri does not contain a fragment
request_uri
https://conformance.example.com:9443/vp/request/wQ0ptTzUuEAOKpbhAsYr8g
2026-11-11 18:31:34 SUCCESS
ExtractAndValidateX509HashClientId
Client ID matched
client_id
x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM
2026-11-11 18:31:34 SUCCESS
ValidateRequestObjectTypIsOAuthQauthReqJwt
Request object typ header is valid
typ
oauth-authz-req+jwt
2026-11-11 18:31:34 SUCCESS
OIDCCValidateRequestObjectExp
Request object contains a valid exp claim, expiry time
exp
"Nov 11, 2026, 6:36:34 PM"
2026-11-11 18:31:34 SUCCESS
ValidateRequestObjectIat
iat claim is valid
iat
1794421894
2026-11-11 18:31:34 SUCCESS
EnsureNumericRequestObjectClaimsAreNotNull
None of the claims expected to have numeric values, have null values
numeric_claims
[
  "max_age"
]
2026-11-11 18:31:34
ValidateRequestObjectMaxAge
Request object does not contain a max_age claim
2026-11-11 18:31:34 SUCCESS
EnsureRequestObjectDoesNotContainRequestOrRequestUri
Request object does not contain request or request_uri
2026-11-11 18:31:34 SUCCESS
EnsureRequestObjectDoesNotContainSubWithClientId
Request object does not contain Client Id in sub
2026-11-11 18:31:34 SUCCESS
ValidateRequestObjectIssIfPresent
Request object does not contain an 'iss' claim, which is permitted by the spec
2026-11-11 18:31:34 SUCCESS
ValidateRequestObjectAudForVP
Request object aud claim is valid
aud
https://self-issued.me/v2
expected_self_issued
https://self-issued.me/v2
expected_wallet_issuer
https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/
2026-11-11 18:31:34 SUCCESS
ValidateRequestObjectSignatureAgainstX5cHeader
Request object x5c chain validated and signature verified
chain_length
1
leaf_cert_subject
CN=E2E Test Credential Signer
request_object_signing_alg
ES256
2026-11-11 18:31:34 INFO
ValidateRequestObjectX5cChainAgainstRical
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-11 18:31:34 INFO
EnsureMatchedRicalEntryHasNoTrustConstraints
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-11 18:31:34 SUCCESS
EnsureClientIdInAuthorizationRequestParametersMatchRequestObject
client_id http request parameter value matches client_id in request object
2026-11-11 18:31:34 INFO
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
path
jwe_header
mapped
object
authorization_request_object
2026-11-11 18:31:34 SUCCESS
EnsureOptionalAuthorizationRequestParametersMatchRequestObject
All http request parameters and request object claims match
2026-11-11 18:31:34 SUCCESS
CheckForUnexpectedParametersInVpAuthorizationEndpointHttpRequest
All HTTP authorization request parameters are expected
known_params
[
  "client_id",
  "request_uri",
  "request_uri_method"
]
parameters
[
  "client_id",
  "request_uri",
  "request_uri_method"
]
2026-11-11 18:31:34 SUCCESS
CreateEffectiveAuthorizationRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "x509_hash:VQWcDWt9VSVKzk7avk7bbubQnogJQ69HVqnOAqcXKUM",
  "request_uri_method": "post",
  "response_uri": "https://conformance.example.com:9443/vp/response/wQ0ptTzUuEAOKpbhAsYr8g",
  "aud": "https://self-issued.me/v2",
  "response_type": "vp_token",
  "state": "wCq_BO-5qPK5VlCR7EYAmEUMXRJGL3BBLx3UUNY6LyA",
  "dcql_query": {
    "credentials": [
      {
        "id": "eudi_pid",
        "format": "dc+sd-jwt",
        "meta": {
          "vct_values": [
            "urn:eudi:pid:1"
          ]
        },
        "claims": [
          {
            "path": [
              "given_name"
            ]
          }
        ]
      }
    ]
  },
  "exp": 1794422194,
  "iat": 1794421894,
  "nonce": "9QSte7TbSgtqPT6-p5gErS6xJBqCRKaC1eBw36KrSTw",
  "client_metadata": {
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "use": "enc",
          "alg": "ECDH-ES",
          "kid": "6UQoHICbdZ4loAsAOJhAxUnviHtZO0ciPl0PrU4GypM",
          "crv": "P-256",
          "x": "k0StKggevk1oaD6551Hd0HSqtTeLnql20LFqqvjDVp0",
          "y": "jexWGsWKumfUw8HOuq4jFVHMSFWkhmGB6A4c9pwuYO8"
        }
      ]
    },
    "encrypted_response_enc_values_supported": [
      "A128GCM",
      "A256GCM"
    ],
    "vp_formats_supported": {
      "dc+sd-jwt": {
        "sd-jwt_alg_values": [
          "ES256"
        ],
        "kb-jwt_alg_values": [
          "ES256"
        ]
      }
    }
  },
  "response_mode": "direct_post.jwt"
}
2026-11-11 18:31:34 SUCCESS
ExtractNonceFromAuthorizationRequest
Extracted nonce
nonce
9QSte7TbSgtqPT6-p5gErS6xJBqCRKaC1eBw36KrSTw
2026-11-11 18:31:34 INFO
EnsureAuthorizationRequestContainsPkceCodeChallenge
Skipped evaluation due to missing required element: effective_authorization_endpoint_request code_challenge
path
code_challenge
mapped
object
effective_authorization_endpoint_request
2026-11-11 18:31:34 SUCCESS
EnsureResponseTypeIsVpToken
Response type is expected value
expected
vp_token
2026-11-11 18:31:34 SUCCESS
ValidateResponseMode
response_mode is direct_post.jwt
2026-11-11 18:31:34 SUCCESS
CheckNoClientIdSchemeParameter
client_id_scheme parameter is not present, as expected.
2026-11-11 18:31:34 SUCCESS
CheckNoScopeParameter
scope parameter is not present, as expected.
2026-11-11 18:31:34 SUCCESS
CheckRequestUriMethodParameter
request_uri_method is 'post'
2026-11-11 18:31:34 INFO
WarnIfRequestUriMethodInRequestObject
Skipped evaluation due to missing required string: authorization_request_object
expected
authorization_request_object
2026-11-11 18:31:34 SUCCESS
CheckForUnexpectedParametersInVpAuthorizationRequest
All authorization parameters are expected
known_params
[
  "presentation_definition",
  "dcql_query",
  "client_id",
  "client_id_scheme",
  "response_uri",
  "client_metadata",
  "nonce",
  "state",
  "response_type",
  "response_mode",
  "verifier_info",
  "scope",
  "request_uri_method",
  "wallet_nonce",
  "aud",
  "iss",
  "iat",
  "nbf",
  "exp",
  "jti"
]
parameters
[
  "client_id",
  "request_uri_method",
  "response_uri",
  "aud",
  "response_type",
  "state",
  "dcql_query",
  "exp",
  "iat",
  "nonce",
  "client_metadata",
  "response_mode"
]
2026-11-11 18:31:34 SUCCESS
CheckNoTransactionDataInVpAuthorizationRequest
Authorization request does not contain transaction_data
2026-11-11 18:31:34 INFO
ExtractVerifierInfoFromAuthorizationRequest
Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info
path
verifier_info
mapped
object
effective_authorization_endpoint_request
2026-11-11 18:31:34 INFO
ValidateVerifierInfo
Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info
path
verifier_info
mapped
object
effective_authorization_endpoint_request
2026-11-11 18:31:34 INFO
CheckForUnexpectedParametersInVerifierInfo
Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info
path
verifier_info
mapped
object
effective_authorization_endpoint_request
2026-11-11 18:31:34 SUCCESS
EnsureValidResponseUriForAuthorizationEndpointRequest
response_uri is valid https url with no fragment
actual
https://conformance.example.com:9443/vp/response/wQ0ptTzUuEAOKpbhAsYr8g
2026-11-11 18:31:34 SUCCESS
CheckNoRedirectUriInVpAuthorizationRequest
Authorization request does not contain 'redirect_uri'
2026-11-11 18:31:34 SUCCESS
CheckNoPresentationDefinitionInVpAuthorizationRequest
Authorization request does not contain presentation_definition or presentation_definition_uri
2026-11-11 18:31:34 SUCCESS
VP1FinalCheckForUnexpectedParametersInVpClientMetadata
All client_metadata parameters are expected
parameters
[
  "jwks",
  "encrypted_response_enc_values_supported",
  "vp_formats_supported"
]
2026-11-11 18:31:34 SUCCESS
VP1FinalValidateVpFormatsSupportedInClientMetadata
vp_formats_supported contains valid dc+sd-jwt format
dc+sd-jwt
{
  "sd-jwt_alg_values": [
    "ES256"
  ],
  "kb-jwt_alg_values": [
    "ES256"
  ]
}
2026-11-11 18:31:34 SUCCESS
VP1FinalCheckForKeyIdInClientMetadataJWKs
All keys in client_metadata.jwks have unique kid values
jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "enc",
      "alg": "ECDH-ES",
      "kid": "6UQoHICbdZ4loAsAOJhAxUnviHtZO0ciPl0PrU4GypM",
      "crv": "P-256",
      "x": "k0StKggevk1oaD6551Hd0HSqtTeLnql20LFqqvjDVp0",
      "y": "jexWGsWKumfUw8HOuq4jFVHMSFWkhmGB6A4c9pwuYO8"
    }
  ]
}
2026-11-11 18:31:34 SUCCESS
VP1FinalValidateClientMetadataJwksForEncryptedResponse
client_metadata.jwks contains valid encryption key(s) with alg
jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "enc",
      "alg": "ECDH-ES",
      "kid": "6UQoHICbdZ4loAsAOJhAxUnviHtZO0ciPl0PrU4GypM",
      "crv": "P-256",
      "x": "k0StKggevk1oaD6551Hd0HSqtTeLnql20LFqqvjDVp0",
      "y": "jexWGsWKumfUw8HOuq4jFVHMSFWkhmGB6A4c9pwuYO8"
    }
  ]
}
Validate the JWK set in client_metadata
2026-11-11 18:31:34 SUCCESS
MapJwksToValidationLocation
Selected the JWK set in client_metadata for validation
jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "enc",
      "alg": "ECDH-ES",
      "kid": "6UQoHICbdZ4loAsAOJhAxUnviHtZO0ciPl0PrU4GypM",
      "crv": "P-256",
      "x": "k0StKggevk1oaD6551Hd0HSqtTeLnql20LFqqvjDVp0",
      "y": "jexWGsWKumfUw8HOuq4jFVHMSFWkhmGB6A4c9pwuYO8"
    }
  ]
}
2026-11-11 18:31:34 SUCCESS
EnsureJwksHasNoPrivateOrSymmetricKeyMaterial
The JWK set in client_metadata contains only public key material
jwks_source
client_metadata
2026-11-11 18:31:34 SUCCESS
ValidateJwksStructure
The JWK set in client_metadata is structurally valid
jwks_source
client_metadata
2026-11-11 18:31:34 SUCCESS
ParseUsableJwksKeys
All usable keys in the JWK set in client_metadata parse successfully
jwks_source
client_metadata
2026-11-11 18:31:34 SUCCESS
WarnOnUnusableJwksKeys
All keys in the JWK set in client_metadata use a supported key type, curve and algorithm
jwks_source
client_metadata
2026-11-11 18:31:34 SUCCESS
VP1FinalCheckEncryptionKeyNotReused
Verifier response-encryption key(s) were not seen in a previous Authorization Request
jwk_thumbprints
[
  "VyySITP1cVnKsJ4y9W1iQI-tSiCFQaXfWraiII4C2Lg"
]
2026-11-11 18:31:34 SUCCESS
ExtractDCQLQueryFromAuthorizationRequest
Extracted dcql_query from authorization request
dcql
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
2026-11-11 18:31:34 SUCCESS
ValidateDCQLQuery
DCQL query input is valid
input
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
schema_link
/json-schemas/oid4vp/dcql_request.json
2026-11-11 18:31:34 SUCCESS
CheckForUnexpectedParametersInDcqlQuery
No unknown properties were found in the DCQL query
input
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
schema_link
/json-schemas/oid4vp/dcql_request.json
2026-11-11 18:31:34 SUCCESS
CheckForNonSelectivelyDisclosableClaimsInDcqlQuery
DCQL query does not request any SD-JWT VC claims that cannot be selectively disclosed
2026-11-11 18:31:34 SUCCESS
CheckForUnreferencedClaimsInDcqlQuery
The DCQL query does not contain claims entries unreferenced by claim_sets
2026-11-11 18:31:34 SUCCESS
CheckDCQLQueryCredentialFormatMatchesTestConfiguration
DCQL query credential format matches test configuration
expected_format
dc+sd-jwt
credential_count
1
2026-11-11 18:31:34 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "state": "wCq_BO-5qPK5VlCR7EYAmEUMXRJGL3BBLx3UUNY6LyA"
}
2026-11-11 18:31:34 SUCCESS
CreateValidStatusListReference
Allocated a status list index that the served status list marks as valid
revocation_list_reference
{
  "mechanism": "status_list",
  "uri": "https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/statuslists/IJubKbp6knMn2DPVQTaE",
  "idx": 218
}
2026-11-11 18:31:34
InvalidateNonce
Replaced nonce with an invalid value
original_nonce
9QSte7TbSgtqPT6-p5gErS6xJBqCRKaC1eBw36KrSTw
invalid_nonce
9QSte7TbSgtqPT6-p5gErS6xJBqCRKaC1eBw36KrSTwINVALID
2026-11-11 18:31:34
CreateSdJwtKbCredential
Filtered SD-JWT disclosures to DCQL requested claims
filtered_disclosures
1
requested_claims
[
  "given_name"
]
total_disclosures
10
2026-11-11 18:31:34
CreateSdJwtKbCredential
Created an SD-JWT+KB
sdjwt
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.eyJfc2QiOlsiLTZpUDc0c2NqNmtPdEZqdW5iSWoxRW5zdEJ4WndqdU90VUE1bXp1MzEtMCIsIi1vRTBWRFRGT08yNl9vaG93NHJiOE9kWlY4QS1tOXQ3Qm93dm5VVzg2VlkiLCIyWl93SjJqQlZIRXJ6ZHIyMEZvZnlJbUhlNUc5N0RncHpfRGZwbGxFR1k4IiwiMnVCdDFnTmt3TkxlMXg3VExBdzRUWmpPT08zWXpaeDdfS0psRVl4TGFpRSIsIkhTb284SUU2LXZjRDJUZTh2UUVEMDdnandfVUFlYzFPTHRMVWJYejZQUHciLCJUdVJWNnV2ZmRPdTkxNlB6aURHdHh0b19pS2Rpemp4Z0VpWkd0STNzbVlnIiwiZlU3QUVvc2thejU5c3JOSGdzd0FSWXd3UUU1SjJoc2FKNU90M25GRS1jMCIsImtuaWNSQ0ZmSWpaZmgtVjhiX0JtY1JjQjZfR2R2Uk1YUGllU3NrSE1IajgiLCJ4RHc3R0FNUjEyNnIwQ2dCckUtTF90eHZzTHhIZ0FFbEdFQWlQODNQQ2xvIiwieFJPd2dPd00tUzItSHlGNHZ6VXFWOWF5WGxwdTNtbE1Xcm1jZjh2YUNaSSIsInpRbktJQl8xeEhWdWt5S0lxVnFfNFJDY05FaVJZVk1jdE9ISWk2c1h5ME0iXSwidmN0IjoidXJuOmV1ZGk6cGlkOjEiLCJpc3MiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3MtdmVyaWZpZXItdnAtdGVzdCIsImNuZiI6eyJqd2siOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJMUVN1Zk9SaFF1c05hZ3FDUUN6REtrbTZtdUxiYzNqdHNGb2k4SUs3eGRRIiwieSI6IlgxanI2V3hlQ3lRZVh0WHFZeEhZaEtpREpaejNwRGc0S2Zpc0Z1akZyY1kifX0sImV4cCI6MTc5NTYzMTQ5NCwiaWF0IjoxNzk0NDIxODk0LCJzdGF0dXMiOnsic3RhdHVzX2xpc3QiOnsidXJpIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXZlcmlmaWVyLXZwLXRlc3Qvc3RhdHVzbGlzdHMvSUp1YkticDZrbk1uMkRQVlFUYUUiLCJpZHgiOjIxOH19fQ.LOPD9pDP1AK1KDzL_cpWKq5Y1Shgii8iBYSWZaqYlz14hNqqSZgyaVkczv6SGTkrQXQmrNdsHGRBv5gKqI9Iqg~WyJHMTg1WjBzWEZFS3lRQmZ6U3gzcWVBIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJzZF9oYXNoIjoiWV9sMXhqVUZFX2RFYlJjeDBMWjlSR0R3TFRfWUgxaDVFRlJTTlBONVRVYyIsImF1ZCI6Ing1MDlfaGFzaDpWUVdjRFd0OVZTVkt6azdhdms3YmJ1YlFub2dKUTY5SFZxbk9BcWNYS1VNIiwiaWF0IjoxNzk0NDIxODk0LCJub25jZSI6IjlRU3RlN1RiU2d0cVBUNi1wNWdFclM2eEpCcUNSS2FDMWVCdzM2S3JTVHdJTlZBTElEIn0.EcVHdQIDW7FlnCPqstdatbJbz_vlQJOjYrvun3vIbLaqITDo2Ktw7z-PQFmAud7ht-I2BMTZ2IaYctjFrNmISA
2026-11-11 18:31:34 SUCCESS
VP1FinalGenerateJwtStatusListToken
Generated the Status List Token in JWT format
sub
https://localhost.emobix.co.uk:8443/test/a/siros-verifier-vp-test/statuslists/IJubKbp6knMn2DPVQTaE
status_list_token
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.eyJzdWIiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3MtdmVyaWZpZXItdnAtdGVzdC9zdGF0dXNsaXN0cy9JSnViS2JwNmtuTW4yRFBWUVRhRSIsImV4cCI6MTc5NDUwODI5NCwiaWF0IjoxNzk0NDIxODk0LCJ0dGwiOjMwMCwic3RhdHVzX2xpc3QiOnsiYml0cyI6MSwibHN0IjoiZU5wYnRRb19BQUJlenhWQiJ9fQ.4b4cmVNW7XRVkEa0HtSkPvOja5BrXHPUD1idBbGeDiSzA9PpFrHjFfvbfmPwweKga0o_J8zQ_P7z5Qrf5ICoSA
exp
1794508294
algorithm
ES256
2026-11-11 18:31:34 SUCCESS
AddVP1FinalDCQLVPTokenToAuthorizationEndpointResponseParams
Added credential in DCQL 'vp_token' authorization endpoint response parameter
authorization_endpoint_response_params
{
  "state": "wCq_BO-5qPK5VlCR7EYAmEUMXRJGL3BBLx3UUNY6LyA",
  "vp_token": {
    "eudi_pid": [
      "eyJ4NWMiOlsiTUlJQnZqQ0NBV09nQXdJQkFnSVVmdzRpbjJ4YmJhTzRCUlZ6Q01KOWpjeCtNWVV3Q2dZSUtvWkl6ajBFQXdJd0lqRWdNQjRHQTFVRUF3d1hZMjl1Wm05eWJXRnVZMlV1WlhoaGJYQnNaUzVqYjIwd0hoY05Nall3TlRFMU1EYzFNelExV2hjTk1qY3dOVEUxTURjMU16UTFXakFpTVNBd0hnWURWUVFEREJkamIyNW1iM0p0WVc1alpTNWxlR0Z0Y0d4bExtTnZiVEJaTUJNR0J5cUdTTTQ5QWdFR0NDcUdTTTQ5QXdFSEEwSUFCQno3UkdCQkVEUm5EaGhyVUY1NXZGVzI2OGxtRGhlM1paa3luQThDTVpPdEtudjAyOTY4WFNpRW1OU29HUGFIWDNMWGwrYm9RenRzSzBEQjQ2VmhFNitqZHpCMU1CMEdBMVVkRGdRV0JCUi96QTdoMytpa0tCb2EzanlNaVNYN3NGZGt5ekFmQmdOVkhTTUVHREFXZ0JSL3pBN2gzK2lrS0JvYTNqeU1pU1g3c0Zka3l6QVBCZ05WSFJNQkFmOEVCVEFEQVFIL01DSUdBMVVkRVFRYk1CbUNGMk52Ym1admNtMWhibU5sTG1WNFlXMXdiR1V1WTI5dE1Bb0dDQ3FHU000OUJBTUNBMGtBTUVZQ0lRQzRsaHh3aVF5MytHUHR6ZFFXOUlsRFNyUW9Fbm5jb202WXNLWjNpekh1SWdJaEFLWklqTllXVEcweElwRnJTNERWa3ZvMXFpVjlrTmYxUXZwOFN0T1c2cEVyIl0sInR5cCI6ImRjK3NkLWp3dCIsImFsZyI6IkVTMjU2In0.eyJfc2QiOlsiLTZpUDc0c2NqNmtPdEZqdW5iSWoxRW5zdEJ4WndqdU90VUE1bXp1MzEtMCIsIi1vRTBWRFRGT08yNl9vaG93NHJiOE9kWlY4QS1tOXQ3Qm93dm5VVzg2VlkiLCIyWl93SjJqQlZIRXJ6ZHIyMEZvZnlJbUhlNUc5N0RncHpfRGZwbGxFR1k4IiwiMnVCdDFnTmt3TkxlMXg3VExBdzRUWmpPT08zWXpaeDdfS0psRVl4TGFpRSIsIkhTb284SUU2LXZjRDJUZTh2UUVEMDdnandfVUFlYzFPTHRMVWJYejZQUHciLCJUdVJWNnV2ZmRPdTkxNlB6aURHdHh0b19pS2Rpemp4Z0VpWkd0STNzbVlnIiwiZlU3QUVvc2thejU5c3JOSGdzd0FSWXd3UUU1SjJoc2FKNU90M25GRS1jMCIsImtuaWNSQ0ZmSWpaZmgtVjhiX0JtY1JjQjZfR2R2Uk1YUGllU3NrSE1IajgiLCJ4RHc3R0FNUjEyNnIwQ2dCckUtTF90eHZzTHhIZ0FFbEdFQWlQODNQQ2xvIiwieFJPd2dPd00tUzItSHlGNHZ6VXFWOWF5WGxwdTNtbE1Xcm1jZjh2YUNaSSIsInpRbktJQl8xeEhWdWt5S0lxVnFfNFJDY05FaVJZVk1jdE9ISWk2c1h5ME0iXSwidmN0IjoidXJuOmV1ZGk6cGlkOjEiLCJpc3MiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3MtdmVyaWZpZXItdnAtdGVzdCIsImNuZiI6eyJqd2siOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJMUVN1Zk9SaFF1c05hZ3FDUUN6REtrbTZtdUxiYzNqdHNGb2k4SUs3eGRRIiwieSI6IlgxanI2V3hlQ3lRZVh0WHFZeEhZaEtpREpaejNwRGc0S2Zpc0Z1akZyY1kifX0sImV4cCI6MTc5NTYzMTQ5NCwiaWF0IjoxNzk0NDIxODk0LCJzdGF0dXMiOnsic3RhdHVzX2xpc3QiOnsidXJpIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXZlcmlmaWVyLXZwLXRlc3Qvc3RhdHVzbGlzdHMvSUp1YkticDZrbk1uMkRQVlFUYUUiLCJpZHgiOjIxOH19fQ.LOPD9pDP1AK1KDzL_cpWKq5Y1Shgii8iBYSWZaqYlz14hNqqSZgyaVkczv6SGTkrQXQmrNdsHGRBv5gKqI9Iqg~WyJHMTg1WjBzWEZFS3lRQmZ6U3gzcWVBIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJzZF9oYXNoIjoiWV9sMXhqVUZFX2RFYlJjeDBMWjlSR0R3TFRfWUgxaDVFRlJTTlBONVRVYyIsImF1ZCI6Ing1MDlfaGFzaDpWUVdjRFd0OVZTVkt6azdhdms3YmJ1YlFub2dKUTY5SFZxbk9BcWNYS1VNIiwiaWF0IjoxNzk0NDIxODk0LCJub25jZSI6IjlRU3RlN1RiU2d0cVBUNi1wNWdFclM2eEpCcUNSS2FDMWVCdzM2S3JTVHdJTlZBTElEIn0.EcVHdQIDW7FlnCPqstdatbJbz_vlQJOjYrvun3vIbLaqITDo2Ktw7z-PQFmAud7ht-I2BMTZ2IaYctjFrNmISA"
    ]
  }
}
2026-11-11 18:31:34
VP1FinalEncryptVPResponse
Encrypted the response
authorization_encrypted_response_alg
ECDH-ES
authorization_encrypted_response_enc
A128GCM
response
eyJlcGsiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJ5TEU0eGw5SU93NFNVN3R3Z1RPbmY5ZncxX3V3dTkyNHdKTnJWR18zM2VrIiwieSI6IjV2RDhOT0pfUVJfVjdkcUc1cFQzS0lDQzdPUGs4OENOZkdfR1l6ajRfRG8ifSwiYXB2IjoiWTBKclNuTkRUVUp6Y1dJNWFGcFVaQSIsImtpZCI6IjZVUW9ISUNiZFo0bG9Bc0FPSmhBeFVudmlIdFpPMGNpUGwwUHJVNEd5cE0iLCJhcHUiOiJlblpIVFdreWVFZFFSM0ZUZEVwb1Z3IiwiY3R5IjoianNvbiIsImVuYyI6IkExMjhHQ00iLCJhbGciOiJFQ0RILUVTIn0..TNMDQTgJiA3BUZAu.4oKfdckoDFxvLgOI2y3OUEKUSkdr9zcxpEfwFSGSDkhKFG26ZONJwcHaoeA-P1rjCx9av381rrO9oQPceZw_ScgF40hDdTQh1ECwGYJcDIdNQopY9S8dg2GqsnKROGYzljVXn9CeC1y9Pqoxoq-giGI4YUNnPTuYiygK9quCS8AGrM4_3zr6I5_0t6PByDjq_mQr7n55Hj607wlDXdRazsbSRHLwDcoPK-9J0Y2uFGvYg4AwvgEJrvJ_6mwHjClNtDsLVBcQjWEOcUuA_Ps5myR8iFCQLardE0wR2F8Il70ZCTK88jH3gqnGg-_aZwYKEpO2IOT4KihetZtc08paPPmMUfP0fD7y9wLlOG-lHO-cUaR5z3YlkmPa2TAOFbHXNCx4cyF95IbqPzesffhtk2RLalK-VxEA_W_O72m4C_ZmQwFLvY4U9mNhzKxZ0sff62kcUwfczw42ih-iam0qHSDN-0BGkwCnCXX8H8wwV0uFI5RWB82lFYUlJVjtSQk9dXqKNJWevQAIBmW6au7HGEpXGjynH0ryi6YEJXmjrFHvephJEGgBRMsq-3-y1cnWbeHT8wdpMT2YEEFcjXJJSEbe74K9nzuleroya7jwD8Y0rNNsxLxYvYZYYqC9NC8qpu6F1StNu3XLLPwhsX7ZELc3zd8AZRzE0Hokym4ucQppEQFj9KrGzLLpARvEllZM9kNZcBXUNf2nI_gouhZWv9mxEQmN_IiKTqn81TyCuNbUsqTpYf0iDbn8kZed8SbGv7oZIeVOjtQ-CbRCXlLU_LU3tNc3DNwmYDLR4mGLvLDGYdG4EVKNgnBHdY5JAr88RNQU2dEHsnIh4Tx7Z_lRc1L8e_0mcfFscfAZCq_nRqZ33pO_E4pHsWGPAf5rd2XOR8oPQ6gWnevBjyiycI2ei8Y2F9enTE0XUIVEJwWyNKgDDYsyW9ijZT4X_aBs8ggI59jaSSzTydPaQngzoeR3qav9bcUmSyy4MkIdlH45Ew_5KWHYw7VOJMs0XAeJsFeGTl049ktMlGSgYj-_BOjLQTvXfWnt4y1BS8-hh_SOipIFMAyhu-zw3ExGLpGpk2h5rkUxoiUFOUBKfUYDv50GCgAAwIQcb9FrFiH-o4iDxgMJwIadvCxP7-ixlMAH1BSPy7TTK2mB8vojR49KoYjq0TfeBJ7bto9l_cHRJP6myKM0EDkWcdqnITJWRbxc7rehUon2LxN3Ubk_jpBbZyYCmp-kuKSW0bUoCGhBen2Wg_e9Hi2nk1lIxdPWciuzLNLu6ily58og9BwUHUGwldp5m5T9RaL3UQNrZ1V18frx85dHlwXw6--bOfTQp3mMyvgGNqLsMofDqgFB1-d05glfKBftQMzr8x1n4cr0yAjQyEV4JhmWaCzVj8PeQBdVvtoZx_GGUMy2iFNLk4W564j4OIRsShptTmJ0llk3IPFp1h7CwYjxA1_duJCR62oVcgOxqR6OXAa3lIQs72Hm84RXNyoXceO0Gi9g0OuM4QmVd5xtX6r03IktMGqf9oeXdfUFZikPZyfUkZMwGAUkXRxQ4bfy27pn2E22Eskf7CF1qKvkyq_ovqhDYoTR2C75CXQuDHzavyxLylBD-MFuuKQgv3Q_e6ukZEMZ_tCmEtyy_rVDqIshJ_6X6_z6RlDXlY8ZLO9h0urd_X0t-HFzoeQdA4fjlXphtrCiSnCqaMHUM7bB9AYFKHAYORvnvMM2mRH8hFsjoOU3v55irr0AlbIUyoU2nTtmqsTU7f9vNdQG94dDA6VMHlYYQosR40Fr5eRpJ-Xu-Ol4v-fmszMafSvnma-DEbTuBla2jq0dE8xeljsusuIAL4oKRTZL_tmQFVzyziRD-97ra41kC4MyCGeRHdZe9A6BFTnATL8bDtFGFJO9gC7xiCGtgeOUDvNnsqF_PU42nEV01nArN0jRz48NMHviHUSm_c1v71mcnWRAAAMN4UVlZpclorzVCYbpwq5XYBMXUCJZuW-53A_Uq5OY4MJmUg_XZpVS3crcfE1vQEwNyHqYHADZIrrBfoVjyrILwUFhZIdUe5wPuqFRZI4VtFlffXewQjFzjAzSZwusXHzm9rk5ItGO_vTKMfBFl9vCqMKnb1HEfxTY18-FG7vZlm2Z7xnGVB_hJZqm-ALaBYBxU4LnKjAKRSNlCwjmPbWwLguC0kkkCuMMJf4oVJXUB5em46TfHmUQ2hPigvuzCUgtg-uXJx9fUdcZgf0FqKmGffMn_Zon_CWo2cVEwZvJWB8ISia1tdaTEEZDvJ_duvSMNjip9cZQyPg9BDk0erB8FSZOZE0SRdvWw29rCIHipW4dnJ3rg0D7e3CuOOenBqSuUCfDXHmBLXNpFxLbOmopHgBzlDQTMLz1FxSlxoJ2bv7L9z0nPE6uqYK00HkbeWfLTajdHKSrRXsodQ5ECTARjjNlXgwtQlqKT1mrPAB58Tk5LfhH5WosZ28bZDyN6LgOrGh2xyjIlqOqWrmROMOAd-9WZeQ60b3E_8Eqi55HSdE3AHZshnwKlCfRyxkckIq8BPsm1kIGaiCzCY3iKSX5HYlTd9wnQTJsD3CXZq1KybAkxHQ_qcXjLXolALbf6QPvx84z-aJeP1GyFTUEYwpE7cs8EgHTj8pgPqs9_jrUY9aVZmAL7VzWNB-ugBK8Q1z38IZIJ3HZwM87L1ACzl17LQoKRgMuWIeG4aQEAdaXsfoPPDYj1A2brIzyuoJlFPUB0zzhSATgjtyLRkdc6ghLQio1lrdCQ7eH682GA_0XVe0pB2xEIoyonytxFG7g678SGCFJiuFtf-Ssi72JJEyToSp6npg3wBTvabNOpQWnE5ETsAs4Zcs0vlu8LVjGeenpghQAuF3sRSJc3tI7JEU8iiDr-7AYl37L1sQLu02hXU1IfUOnNdUfG2lqn8LUTS67p6G1Xp4rhnNswSHKlaYpViGt08mVAPsB3jZocmzT6YpKTJu_FZML1UmVArTzsm7PWAV_dijI8XxoMnWQSrravouU1Mx1PHD-T-yb5SkmP_-FjdAkymQIGfgat00WboB1g-67EcqDBc2S9nI5NV0PzTOGFOJFF_VVAvhzXYN4B3vv9CdlCdN0N73iP-jE5qsKHJMZVLkzw4gkz3opQTVxSXOhezJ5MpUYtlVT_mVhNjB_fA1r73OIs00TRDuFePT25nJXoeqjVFI75gV94c4G3TOnOSFK7ostLks9Lf4nuTb0e6-UmDbk1YKABeq0oo5vafssFr7m7TM0mowsEv44eGrnozYdpQZ-dzDdgp7_7FDsC0kQhev_sPUVIjVmapGK7HgE8Ldy5Dfbtf3H6fLTVAoDOapr1u860XrPAGPFPYs_kp5eZ0xbxDMBFAHGNhn5OQNjExPj_msx1Z-b0uPndmlIrrMG73jBoLjGiMYsw5NL1PMB0KoG-5qSyxPhgQywFfve5xPR8mWpuZooxX081QQVftYZXDS7_ywpzV4hQaooIsGaVDYE0MeoCKkvi0E5AxoGnO3EsqV231-IaTr_Qe9tUNhZT9fhpP1F96RpXxzWmDwCeOReYCSlN-ArY-agJSzgCKlr2xeNZgUIECIDbWiHKea0IATczjpI5p8kt8Mr-bGrVXVMaEcf8M26o6byObqDAY21-g.KeropM1-JaT6mx8u96bfIw
apv
cBkJsCMBsqb9hZTd
apu
zvGMi2xGPGqStJhW
apv_b64
{
  "value": "Y0JrSnNDTUJzcWI5aFpUZA"
}
apu_b64
{
  "value": "enZHTWkyeEdQR3FTdEpoVw"
}
2026-11-11 18:31:35
CallDirectPostEndpoint
HTTP request
request_uri
https://conformance.example.com:9443/vp/response/wQ0ptTzUuEAOKpbhAsYr8g
request_method
POST
request_headers
{
  "Accept": "application/json",
  "Content-Type": "application/x-www-form-urlencoded",
  "Content-Length": "4080"
}
request_body
response=eyJlcGsiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJ5TEU0eGw5SU93NFNVN3R3Z1RPbmY5ZncxX3V3dTkyNHdKTnJWR18zM2VrIiwieSI6IjV2RDhOT0pfUVJfVjdkcUc1cFQzS0lDQzdPUGs4OENOZkdfR1l6ajRfRG8ifSwiYXB2IjoiWTBKclNuTkRUVUp6Y1dJNWFGcFVaQSIsImtpZCI6IjZVUW9ISUNiZFo0bG9Bc0FPSmhBeFVudmlIdFpPMGNpUGwwUHJVNEd5cE0iLCJhcHUiOiJlblpIVFdreWVFZFFSM0ZUZEVwb1Z3IiwiY3R5IjoianNvbiIsImVuYyI6IkExMjhHQ00iLCJhbGciOiJFQ0RILUVTIn0..TNMDQTgJiA3BUZAu.4oKfdckoDFxvLgOI2y3OUEKUSkdr9zcxpEfwFSGSDkhKFG26ZONJwcHaoeA-P1rjCx9av381rrO9oQPceZw_ScgF40hDdTQh1ECwGYJcDIdNQopY9S8dg2GqsnKROGYzljVXn9CeC1y9Pqoxoq-giGI4YUNnPTuYiygK9quCS8AGrM4_3zr6I5_0t6PByDjq_mQr7n55Hj607wlDXdRazsbSRHLwDcoPK-9J0Y2uFGvYg4AwvgEJrvJ_6mwHjClNtDsLVBcQjWEOcUuA_Ps5myR8iFCQLardE0wR2F8Il70ZCTK88jH3gqnGg-_aZwYKEpO2IOT4KihetZtc08paPPmMUfP0fD7y9wLlOG-lHO-cUaR5z3YlkmPa2TAOFbHXNCx4cyF95IbqPzesffhtk2RLalK-VxEA_W_O72m4C_ZmQwFLvY4U9mNhzKxZ0sff62kcUwfczw42ih-iam0qHSDN-0BGkwCnCXX8H8wwV0uFI5RWB82lFYUlJVjtSQk9dXqKNJWevQAIBmW6au7HGEpXGjynH0ryi6YEJXmjrFHvephJEGgBRMsq-3-y1cnWbeHT8wdpMT2YEEFcjXJJSEbe74K9nzuleroya7jwD8Y0rNNsxLxYvYZYYqC9NC8qpu6F1StNu3XLLPwhsX7ZELc3zd8AZRzE0Hokym4ucQppEQFj9KrGzLLpARvEllZM9kNZcBXUNf2nI_gouhZWv9mxEQmN_IiKTqn81TyCuNbUsqTpYf0iDbn8kZed8SbGv7oZIeVOjtQ-CbRCXlLU_LU3tNc3DNwmYDLR4mGLvLDGYdG4EVKNgnBHdY5JAr88RNQU2dEHsnIh4Tx7Z_lRc1L8e_0mcfFscfAZCq_nRqZ33pO_E4pHsWGPAf5rd2XOR8oPQ6gWnevBjyiycI2ei8Y2F9enTE0XUIVEJwWyNKgDDYsyW9ijZT4X_aBs8ggI59jaSSzTydPaQngzoeR3qav9bcUmSyy4MkIdlH45Ew_5KWHYw7VOJMs0XAeJsFeGTl049ktMlGSgYj-_BOjLQTvXfWnt4y1BS8-hh_SOipIFMAyhu-zw3ExGLpGpk2h5rkUxoiUFOUBKfUYDv50GCgAAwIQcb9FrFiH-o4iDxgMJwIadvCxP7-ixlMAH1BSPy7TTK2mB8vojR49KoYjq0TfeBJ7bto9l_cHRJP6myKM0EDkWcdqnITJWRbxc7rehUon2LxN3Ubk_jpBbZyYCmp-kuKSW0bUoCGhBen2Wg_e9Hi2nk1lIxdPWciuzLNLu6ily58og9BwUHUGwldp5m5T9RaL3UQNrZ1V18frx85dHlwXw6--bOfTQp3mMyvgGNqLsMofDqgFB1-d05glfKBftQMzr8x1n4cr0yAjQyEV4JhmWaCzVj8PeQBdVvtoZx_GGUMy2iFNLk4W564j4OIRsShptTmJ0llk3IPFp1h7CwYjxA1_duJCR62oVcgOxqR6OXAa3lIQs72Hm84RXNyoXceO0Gi9g0OuM4QmVd5xtX6r03IktMGqf9oeXdfUFZikPZyfUkZMwGAUkXRxQ4bfy27pn2E22Eskf7CF1qKvkyq_ovqhDYoTR2C75CXQuDHzavyxLylBD-MFuuKQgv3Q_e6ukZEMZ_tCmEtyy_rVDqIshJ_6X6_z6RlDXlY8ZLO9h0urd_X0t-HFzoeQdA4fjlXphtrCiSnCqaMHUM7bB9AYFKHAYORvnvMM2mRH8hFsjoOU3v55irr0AlbIUyoU2nTtmqsTU7f9vNdQG94dDA6VMHlYYQosR40Fr5eRpJ-Xu-Ol4v-fmszMafSvnma-DEbTuBla2jq0dE8xeljsusuIAL4oKRTZL_tmQFVzyziRD-97ra41kC4MyCGeRHdZe9A6BFTnATL8bDtFGFJO9gC7xiCGtgeOUDvNnsqF_PU42nEV01nArN0jRz48NMHviHUSm_c1v71mcnWRAAAMN4UVlZpclorzVCYbpwq5XYBMXUCJZuW-53A_Uq5OY4MJmUg_XZpVS3crcfE1vQEwNyHqYHADZIrrBfoVjyrILwUFhZIdUe5wPuqFRZI4VtFlffXewQjFzjAzSZwusXHzm9rk5ItGO_vTKMfBFl9vCqMKnb1HEfxTY18-FG7vZlm2Z7xnGVB_hJZqm-ALaBYBxU4LnKjAKRSNlCwjmPbWwLguC0kkkCuMMJf4oVJXUB5em46TfHmUQ2hPigvuzCUgtg-uXJx9fUdcZgf0FqKmGffMn_Zon_CWo2cVEwZvJWB8ISia1tdaTEEZDvJ_duvSMNjip9cZQyPg9BDk0erB8FSZOZE0SRdvWw29rCIHipW4dnJ3rg0D7e3CuOOenBqSuUCfDXHmBLXNpFxLbOmopHgBzlDQTMLz1FxSlxoJ2bv7L9z0nPE6uqYK00HkbeWfLTajdHKSrRXsodQ5ECTARjjNlXgwtQlqKT1mrPAB58Tk5LfhH5WosZ28bZDyN6LgOrGh2xyjIlqOqWrmROMOAd-9WZeQ60b3E_8Eqi55HSdE3AHZshnwKlCfRyxkckIq8BPsm1kIGaiCzCY3iKSX5HYlTd9wnQTJsD3CXZq1KybAkxHQ_qcXjLXolALbf6QPvx84z-aJeP1GyFTUEYwpE7cs8EgHTj8pgPqs9_jrUY9aVZmAL7VzWNB-ugBK8Q1z38IZIJ3HZwM87L1ACzl17LQoKRgMuWIeG4aQEAdaXsfoPPDYj1A2brIzyuoJlFPUB0zzhSATgjtyLRkdc6ghLQio1lrdCQ7eH682GA_0XVe0pB2xEIoyonytxFG7g678SGCFJiuFtf-Ssi72JJEyToSp6npg3wBTvabNOpQWnE5ETsAs4Zcs0vlu8LVjGeenpghQAuF3sRSJc3tI7JEU8iiDr-7AYl37L1sQLu02hXU1IfUOnNdUfG2lqn8LUTS67p6G1Xp4rhnNswSHKlaYpViGt08mVAPsB3jZocmzT6YpKTJu_FZML1UmVArTzsm7PWAV_dijI8XxoMnWQSrravouU1Mx1PHD-T-yb5SkmP_-FjdAkymQIGfgat00WboB1g-67EcqDBc2S9nI5NV0PzTOGFOJFF_VVAvhzXYN4B3vv9CdlCdN0N73iP-jE5qsKHJMZVLkzw4gkz3opQTVxSXOhezJ5MpUYtlVT_mVhNjB_fA1r73OIs00TRDuFePT25nJXoeqjVFI75gV94c4G3TOnOSFK7ostLks9Lf4nuTb0e6-UmDbk1YKABeq0oo5vafssFr7m7TM0mowsEv44eGrnozYdpQZ-dzDdgp7_7FDsC0kQhev_sPUVIjVmapGK7HgE8Ldy5Dfbtf3H6fLTVAoDOapr1u860XrPAGPFPYs_kp5eZ0xbxDMBFAHGNhn5OQNjExPj_msx1Z-b0uPndmlIrrMG73jBoLjGiMYsw5NL1PMB0KoG-5qSyxPhgQywFfve5xPR8mWpuZooxX081QQVftYZXDS7_ywpzV4hQaooIsGaVDYE0MeoCKkvi0E5AxoGnO3EsqV231-IaTr_Qe9tUNhZT9fhpP1F96RpXxzWmDwCeOReYCSlN-ArY-agJSzgCKlr2xeNZgUIECIDbWiHKea0IATczjpI5p8kt8Mr-bGrVXVMaEcf8M26o6byObqDAY21-g.KeropM1-JaT6mx8u96bfIw
2026-11-11 18:31:35 RESPONSE
CallDirectPostEndpoint
HTTP response
response_status_code
400 BAD_REQUEST
response_status_text
Bad Request
response_headers
{
  "server": "nginx/1.29.8",
  "date": "Wed, 11 Nov 2026 18:31:35 GMT",
  "content-type": "application/json",
  "content-length": "57",
  "connection": "keep-alive",
  "set-cookie": "SIROS_VERIFIER_STATE\u003deyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0..MMlXvkD7oZQd4EZW.31KtM2HLM3g71aLyNT91_InsaephNszyu_VXCpRNQP2NralQIy-ELg.izhKCXsxxinM_0mkFJ8e0w; Path\u003d/; HttpOnly; SameSite\u003dLax; Max-Age\u003d900"
}
response_body
{"error":"policy","error_description":"invalid response"}
2026-11-11 18:31:35 SUCCESS
CallDirectPostEndpoint
Parsed response uri endpoint response
status
400
endpoint_name
https://conformance.example.com:9443/vp/response/wQ0ptTzUuEAOKpbhAsYr8g
headers
{
  "server": "nginx/1.29.8",
  "date": "Wed, 11 Nov 2026 18:31:35 GMT",
  "content-type": "application/json",
  "content-length": "57",
  "connection": "keep-alive",
  "set-cookie": "SIROS_VERIFIER_STATE\u003deyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0..MMlXvkD7oZQd4EZW.31KtM2HLM3g71aLyNT91_InsaephNszyu_VXCpRNQP2NralQIy-ELg.izhKCXsxxinM_0mkFJ8e0w; Path\u003d/; HttpOnly; SameSite\u003dLax; Max-Age\u003d900"
}
body
{"error":"policy","error_description":"invalid response"}
body_json
{
  "error": "policy",
  "error_description": "invalid response"
}
2026-11-11 18:31:35 SUCCESS
EnsureHttpStatusCodeIs4xx
https://conformance.example.com:9443/vp/response/wQ0ptTzUuEAOKpbhAsYr8g endpoint http status code was 400
2026-11-11 18:31:35 OUTGOING
oid4vp-1final-verifier-invalid-kb-jwt-nonce
Response to HTTP request to test instance ITP05f0ks5OPjgy
outgoing
ModelAndView [view="resultCaptured"; model={returnUrl=/log-detail.html?log=ITP05f0ks5OPjgy}]
outgoing_path
authorize
2026-11-11 18:31:35 FINISHED
oid4vp-1final-verifier-invalid-kb-jwt-nonce
Test has run to completion
testmodule_result
PASSED
2026-11-11 18:31:35
TEST-RUNNER
Alias has now been claimed by another test
alias
siros-verifier-vp-test
new_test_id
BHn1RAqRN2kCrHD
Test Results