Test Summary

Test Results

Expand All Collapse All
All times are UTC
2026-11-09 19:18:24 INFO
TEST-RUNNER
Test instance oXS4UedvSxGdVfE created
baseUrl 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test
variant 
{
  "credential_type": "custom",
  "credential_format": "iso_mdl",
  "request_method": "request_uri_signed",
  "vp_profile": "plain_vp",
  "client_id_prefix": "x509_san_dns",
  "response_mode": "direct_post"
}
alias 
siros-wallet-vp-mdoc-test
description 
OID4VP wallet conformance test for SIROS wallet (iso_mdl format)
planId 
8HxceYkOTXjNq
config 
{
  "alias": "siros-wallet-vp-mdoc-test",
  "description": "OID4VP wallet conformance test for SIROS wallet (iso_mdl format)",
  "server": {
    "authorization_endpoint": "openid4vp://"
  },
  "client": {
    "client_id": "conformance.example.com",
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "crv": "P-256",
          "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
          "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
          "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
          "kid": "vp-verifier-key-1",
          "use": "sig",
          "alg": "ES256",
          "x5c": [
            "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"
          ]
        }
      ]
    },
    "dcql": {
      "credentials": [
        {
          "id": "org_iso_18013_5_1_mDL",
          "format": "mso_mdoc",
          "meta": {
            "doctype_value": "org.iso.18013.5.1.mDL"
          },
          "claims": [
            {
              "path": [
                "org.iso.18013.5.1",
                "given_name"
              ]
            },
            {
              "path": [
                "org.iso.18013.5.1",
                "family_name"
              ]
            }
          ]
        }
      ]
    }
  }
}
baseMtlsUrl 
https://localhost:8444/test-mtls/a/siros-wallet-vp-mdoc-test
testName 
oid4vp-1final-wallet-negative-test-missing-nonce
2026-11-09 19:18:24
CreateDirectPostResponseUri
Created response URI
response_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri
2026-11-09 19:18:24
SetClientIdToResponseUriHostnameIfUnset
client_id is already set, not setting it to our hostname
client_id 
conformance.example.com
2026-11-09 19:18:24 SUCCESS
GetStaticServerConfiguration
Found a static server object
authorization_endpoint 
openid4vp://
2026-11-09 19:18:24 SUCCESS
CheckAuthorizationEndpointIsValidUri
authorization_endpoint has a valid URI scheme
authorization_endpoint 
openid4vp://
2026-11-09 19:18:24 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id 
conformance.example.com
jwks 
{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "MIIBvjCCAWOgAwIBAgIUfw4in2xbbaO4BRVzCMJ9jcx+MYUwCgYIKoZIzj0EAwIwIjEgMB4GA1UEAwwXY29uZm9ybWFuY2UuZXhhbXBsZS5jb20wHhcNMjYwNTE1MDc1MzQ1WhcNMjcwNTE1MDc1MzQ1WjAiMSAwHgYDVQQDDBdjb25mb3JtYW5jZS5leGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBz7RGBBEDRnDhhrUF55vFW268lmDhe3ZZkynA8CMZOtKnv02968XSiEmNSoGPaHX3LXl+boQztsK0DB46VhE6+jdzB1MB0GA1UdDgQWBBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAfBgNVHSMEGDAWgBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAPBgNVHRMBAf8EBTADAQH/MCIGA1UdEQQbMBmCF2NvbmZvcm1hbmNlLmV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQC4lhxwiQy3+GPtzdQW9IlDSrQoEnncom6YsKZ3izHuIgIhAKZIjNYWTG0xIpFrS4DVkvo1qiV9kNf1Qvp8StOW6pEr"
      ]
    }
  ]
}
dcql 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    }
  ]
}
2026-11-09 19:18:24 SUCCESS
OID4VPSetClientIdToIncludeClientIdScheme
Set client id to include the client id scheme
new_client_id 
x509_san_dns:conformance.example.com
2026-11-09 19:18:24 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2026-11-09 19:18:24 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks 
{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "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"
      ]
    }
  ]
}
client_public_jwks 
{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "vp-verifier-key-1",
      "x5c": [
        "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"
      ],
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "alg": "ES256"
    }
  ]
}
2026-11-09 19:18:24 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see 
https://bitbucket.org/openid/connect/issues/1127
2026-11-09 19:18:24 SUCCESS
CheckIfClientIdInX509CertSanDns
x509_san_dns client_id is present in the x5c certificate SAN in the client_jwks x5c parameter
san 
[[2, conformance.example.com]]
client_jwks 
{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "MIIBvjCCAWOgAwIBAgIUfw4in2xbbaO4BRVzCMJ9jcx+MYUwCgYIKoZIzj0EAwIwIjEgMB4GA1UEAwwXY29uZm9ybWFuY2UuZXhhbXBsZS5jb20wHhcNMjYwNTE1MDc1MzQ1WhcNMjcwNTE1MDc1MzQ1WjAiMSAwHgYDVQQDDBdjb25mb3JtYW5jZS5leGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBz7RGBBEDRnDhhrUF55vFW268lmDhe3ZZkynA8CMZOtKnv02968XSiEmNSoGPaHX3LXl+boQztsK0DB46VhE6+jdzB1MB0GA1UdDgQWBBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAfBgNVHSMEGDAWgBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAPBgNVHRMBAf8EBTADAQH/MCIGA1UdEQQbMBmCF2NvbmZvcm1hbmNlLmV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQC4lhxwiQy3+GPtzdQW9IlDSrQoEnncom6YsKZ3izHuIgIhAKZIjNYWTG0xIpFrS4DVkvo1qiV9kNf1Qvp8StOW6pEr"
      ]
    }
  ]
}
cert 
[
[
  Version: V3
  Subject: CN=conformance.example.com
  Signature Algorithm: SHA256withECDSA, OID = 1.2.840.10045.4.3.2

  Key:  Sun EC public key, 256 bits
  public x coord: 13108710287349260330328350076677132814851473605070147512119001812479683695533
  public y coord: 19216151783258683751959855919806513226213387050584598552418263195245676139439
  parameters: secp256r1 [NIST P-256,X9.62 prime256v1] (1.2.840.10045.3.1.7)
  Validity: [From: Fri May 15 07:53:45 UTC 2026,
               To: Sat May 15 07:53:45 UTC 2027]
  Issuer: CN=conformance.example.com
  SerialNumber: 7f:0e:22:9f:6c:5b:6d:a3:b8:05:15:73:08:c2:7d:8d:cc:7e:31:85

Certificate Extensions: 4
[1]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 7F CC 0E E1 DF E8 A4 28   1A 1A DE 3C 8C 89 25 FB  .......(...<..%.
0010: B0 57 64 CB                                        .Wd.
]
]

[2]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen: no limit
]

[3]: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
  DNSName: conformance.example.com
]

[4]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 7F CC 0E E1 DF E8 A4 28   1A 1A DE 3C 8C 89 25 FB  .......(...<..%.
0010: B0 57 64 CB                                        .Wd.
]
]

]
  Algorithm: [SHA256withECDSA]
  Signature:
0000: 30 46 02 21 00 B8 96 1C   70 89 0C B7 F8 63 ED CD  0F.!....p....c..
0010: D4 16 F4 89 43 4A B4 28   12 79 DC A2 6E 98 B0 A6  ....CJ.(.y..n...
0020: 77 8B 31 EE 22 02 21 00   A6 48 8C D6 16 4C 6D 31  w.1.".!..H...Lm1
0030: 22 91 6B 4B 80 D5 92 FA   35 AA 25 7D 90 D7 F5 42  ".kK....5.%....B
0040: FA 7C 4A D3 96 EA 91 2B                            ..J....+

]
client_id 
conformance.example.com
dns_names_from_cert 
[
  "conformance.example.com"
]
2026-11-09 19:18:24
RegisterRical
No RICAL configured, skipping RICAL-based verifier trust checks
2026-11-09 19:18:24 INFO
CallRicalEndpoint
Skipped evaluation due to missing required string: rical_url
expected 
rical_url
2026-11-09 19:18:24 INFO
ParseRical
Skipped evaluation due to missing required object: rical
mapped
expected 
rical
2026-11-09 19:18:24 INFO
DumpRicalCborDiagnostics
Skipped evaluation due to missing required object: rical
mapped
expected 
rical
2026-11-09 19:18:24 INFO
ValidateRicalSignature
Skipped evaluation due to missing required object: rical
mapped
expected 
rical
2026-11-09 19:18:24 INFO
ValidateRicalSignerCertificate
Skipped evaluation due to missing required object: rical
mapped
expected 
rical
2026-11-09 19:18:24 INFO
ValidateRicalStructure
Skipped evaluation due to missing required object: rical
mapped
expected 
rical
2026-11-09 19:18:24 INFO
ValidateConfiguredClientCertificatesAgainstRical
Skipped evaluation due to missing required object: rical
mapped
expected 
rical
2026-11-09 19:18:24
RegisterCredentialTrustAnchor
No credential trust anchor configured, skipping registration
2026-11-09 19:18:24
RegisterStatusListTrustAnchor
No status list trust anchor configured, skipping registration
2026-11-09 19:18:24
RegisterVical
No VICAL configured, skipping VICAL-based mdoc issuer trust checks
2026-11-09 19:18:24 INFO
CallVicalEndpoint
Skipped evaluation due to missing required string: vical_url
expected 
vical_url
2026-11-09 19:18:24 INFO
ParseVical
Skipped evaluation due to missing required object: vical
mapped
expected 
vical
2026-11-09 19:18:24 INFO
DumpVicalCborDiagnostics
Skipped evaluation due to missing required object: vical
mapped
expected 
vical
2026-11-09 19:18:24 INFO
ValidateVicalSignature
Skipped evaluation due to missing required object: vical
mapped
expected 
vical
2026-11-09 19:18:24 INFO
ValidateVicalSignerCertificateProfile
Skipped evaluation due to missing required object: vical
mapped
expected 
vical
2026-11-09 19:18:24 INFO
ValidateVicalStructure
Skipped evaluation due to missing required object: vical
mapped
expected 
vical
2026-11-09 19:18:24 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/callback
2026-11-09 19:18:24 SUCCESS
CheckDiscEndpointRequestUriParameterSupported
request_uri_parameter_supported has correct value
request_uri_parameter_supported
2026-11-09 19:18:24
CreateRandomRequestUriWithoutFragment
Created random URL for request_uri
request_uri 
{
  "path": "requesturi/JWq73y7gmIOlIpogn7hdirwWAunPMlP8Hs0jgb0g252Bagtgnb8nUcuxfvLu6VbO",
  "fullUrl": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/requesturi/JWq73y7gmIOlIpogn7hdirwWAunPMlP8Hs0jgb0g252Bagtgnb8nUcuxfvLu6VbO"
}
2026-11-09 19:18:24
oid4vp-1final-wallet-negative-test-missing-nonce
Setup Done
Make request to wallet
2026-11-09 19:18:24 SUCCESS
CreateEmptyAuthorizationEndpointRequest
Created empty authorization endpoint request
2026-11-09 19:18:24 SUCCESS
AddClientIdToAuthorizationEndpointRequest
Added client_id of 'x509_san_dns:conformance.example.com' to authorization endpoint request
client_id 
x509_san_dns:conformance.example.com
2026-11-09 19:18:24
CreateRandomStateValue
Created state value
state 
BPJ9KbFqrS
requested_state_length 
10
2026-11-09 19:18:24 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id 
x509_san_dns:conformance.example.com
state 
BPJ9KbFqrS
2026-11-09 19:18:24 SUCCESS
AddResponseUriToAuthorizationEndpointRequest
Added response_uri parameter to request
client_id 
x509_san_dns:conformance.example.com
state 
BPJ9KbFqrS
response_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri
2026-11-09 19:18:24 INFO
LoadBuiltInDcqlQuery
Skipped evaluation due to missing required string: dcql_builtin_resource
expected 
dcql_builtin_resource
2026-11-09 19:18:24 SUCCESS
ExtractDCQLQueryFromClientConfiguration
Extracted dcql from client configuration
dcql 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    }
  ]
}
2026-11-09 19:18:24 SUCCESS
ValidateDCQLQuery
DCQL query input is valid
input 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    }
  ]
}
schema_link 
/json-schemas/oid4vp/dcql_request.json
2026-11-09 19:18:24 SUCCESS
CheckDCQLQueryCredentialFormatMatchesTestConfiguration
DCQL query credential format matches test configuration
expected_format 
mso_mdoc
credential_count 
1
2026-11-09 19:18:24 SUCCESS
CheckForUnexpectedParametersInDcqlQuery
No unknown properties were found in the DCQL query
input 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    }
  ]
}
schema_link 
/json-schemas/oid4vp/dcql_request.json
2026-11-09 19:18:24 SUCCESS
CheckForNonSelectivelyDisclosableClaimsInDcqlQuery
DCQL query does not request any SD-JWT VC claims that cannot be selectively disclosed
2026-11-09 19:18:24 SUCCESS
CheckForUnreferencedClaimsInDcqlQuery
The DCQL query does not contain claims entries unreferenced by claim_sets
2026-11-09 19:18:24 SUCCESS
AddDcqlToAuthorizationEndpointRequest
Added dcql_query parameter to request
client_id 
x509_san_dns:conformance.example.com
state 
BPJ9KbFqrS
response_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri
dcql_query 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    }
  ]
}
2026-11-09 19:18:24 INFO
ExtractVerifierInfoFromClientConfiguration
Skipped evaluation due to missing required element: client verifier_info
path 
verifier_info
mapped
object 
client
2026-11-09 19:18:24 INFO
ValidateVerifierInfo
Skipped evaluation due to missing required element: client verifier_info
path 
verifier_info
mapped
object 
client
2026-11-09 19:18:24 INFO
CheckForUnexpectedParametersInVerifierInfo
Skipped evaluation due to missing required element: client verifier_info
path 
verifier_info
mapped
object 
client
2026-11-09 19:18:24 INFO
AddVerifierInfoToAuthorizationEndpointRequest
Skipped evaluation due to missing required element: client verifier_info
path 
verifier_info
mapped
object 
client
2026-11-09 19:18:24
CreateRandomNonceValue
Created nonce value
requested_nonce_length 
26
nonce 
c6TYhwQwyCbEjNnuF31ZbO-._~
2026-11-09 19:18:24
AddNonceToAuthorizationEndpointRequest
Skipping nonce to test wallet rejection of requests without nonce
2026-11-09 19:18:24
AddVP1FinalIsoMdocClientMetadataToAuthorizationRequest
Added client_metadata to authorization endpoint request
client_metadata 
{
  "vp_formats_supported": {
    "mso_mdoc": {
      "issuerauth_alg_values": [
        -7
      ]
    }
  }
}
2026-11-09 19:18:24 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToVpToken
Added response_type parameter to request
client_id 
x509_san_dns:conformance.example.com
state 
BPJ9KbFqrS
response_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri
dcql_query 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    }
  ]
}
client_metadata 
{
  "vp_formats_supported": {
    "mso_mdoc": {
      "issuerauth_alg_values": [
        -7
      ]
    }
  }
}
response_type 
vp_token
2026-11-09 19:18:24
SetAuthorizationEndpointRequestResponseMode
Added response_mode parameter to request
client_id 
x509_san_dns:conformance.example.com
state 
BPJ9KbFqrS
response_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri
dcql_query 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    }
  ]
}
client_metadata 
{
  "vp_formats_supported": {
    "mso_mdoc": {
      "issuerauth_alg_values": [
        -7
      ]
    }
  }
}
response_type 
vp_token
response_mode 
direct_post
2026-11-09 19:18:24 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims 
{
  "client_id": "x509_san_dns:conformance.example.com",
  "state": "BPJ9KbFqrS",
  "response_uri": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri",
  "dcql_query": {
    "credentials": [
      {
        "id": "org_iso_18013_5_1_mDL",
        "format": "mso_mdoc",
        "meta": {
          "doctype_value": "org.iso.18013.5.1.mDL"
        },
        "claims": [
          {
            "path": [
              "org.iso.18013.5.1",
              "given_name"
            ]
          },
          {
            "path": [
              "org.iso.18013.5.1",
              "family_name"
            ]
          }
        ]
      }
    ]
  },
  "client_metadata": {
    "vp_formats_supported": {
      "mso_mdoc": {
        "issuerauth_alg_values": [
          -7
        ]
      }
    }
  },
  "response_type": "vp_token",
  "response_mode": "direct_post"
}
2026-11-09 19:18:24
AddSelfIssuedMeV2AudToRequestObject
Added SIOPv2 aud to request object claims
aud 
https://self-issued.me/v2
2026-11-09 19:18:24 SUCCESS
BuildRequestObjectByReferenceRedirectToAuthorizationEndpointWithoutDuplicates
Sending to authorization endpoint
redirect_to_authorization_endpoint 
openid4vp://?client_id=x509_san_dns:conformance.example.com&request_uri=https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/requesturi/JWq73y7gmIOlIpogn7hdirwWAunPMlP8Hs0jgb0g252Bagtgnb8nUcuxfvLu6VbO
2026-11-09 19:18:24 REDIRECT
oid4vp-1final-wallet-negative-test-missing-nonce
Redirecting to authorization endpoint
method 
GET
redirect_to 
openid4vp://?client_id=x509_san_dns:conformance.example.com&request_uri=https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/requesturi/JWq73y7gmIOlIpogn7hdirwWAunPMlP8Hs0jgb0g252Bagtgnb8nUcuxfvLu6VbO
2026-11-09 19:18:24
oid4vp-1final-wallet-negative-test-missing-nonce
The wallet should be opened via the QR code / proceed with test button, and should then fetch the request_uri
2026-11-09 19:18:25 INCOMING
oid4vp-1final-wallet-negative-test-missing-nonce
Incoming HTTP request to /test/a/siros-wallet-vp-mdoc-test/requesturi/JWq73y7gmIOlIpogn7hdirwWAunPMlP8Hs0jgb0g252Bagtgnb8nUcuxfvLu6VbO
incoming_headers 
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vp-mdoc-test/requesturi/JWq73y7gmIOlIpogn7hdirwWAunPMlP8Hs0jgb0g252Bagtgnb8nUcuxfvLu6VbO",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/oauth-authz-req+jwt, application/json",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "accept-language": "en-US",
  "sec-ch-ua-mobile": "?0",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path 
/test/a/siros-wallet-vp-mdoc-test/requesturi/JWq73y7gmIOlIpogn7hdirwWAunPMlP8Hs0jgb0g252Bagtgnb8nUcuxfvLu6VbO
incoming_body_form_params
incoming_method 
GET
incoming_tls_version 
TLSv1.3
incoming_tls_cert
incoming_query_string_params 
{}
incoming_body
incoming_tls_chain 
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher 
TLS_AES_256_GCM_SHA384
incoming_body_json
2026-11-09 19:18:25 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
Found TLS 1.3 connection
2026-11-09 19:18:25 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
2026-11-09 19:18:25 SUCCESS
EnsureIncomingRequestMethodIsGet
Client correctly used http GET method
2026-11-09 19:18:25 SUCCESS
SignRequestObjectIncludeX5cHeader
Signed the request object
claims 
{
  "response_uri": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri",
  "aud": "https://self-issued.me/v2",
  "response_type": "vp_token",
  "state": "BPJ9KbFqrS",
  "dcql_query": {
    "credentials": [
      {
        "id": "org_iso_18013_5_1_mDL",
        "format": "mso_mdoc",
        "meta": {
          "doctype_value": "org.iso.18013.5.1.mDL"
        },
        "claims": [
          {
            "path": [
              "org.iso.18013.5.1",
              "given_name"
            ]
          },
          {
            "path": [
              "org.iso.18013.5.1",
              "family_name"
            ]
          }
        ]
      }
    ]
  },
  "client_id": "x509_san_dns:conformance.example.com",
  "client_metadata": {
    "vp_formats_supported": {
      "mso_mdoc": {
        "issuerauth_alg_values": [
          -7
        ]
      }
    }
  },
  "response_mode": "direct_post"
}
header 
{
  "x5c": [
    "MIIBvjCCAWOgAwIBAgIUfw4in2xbbaO4BRVzCMJ9jcx+MYUwCgYIKoZIzj0EAwIwIjEgMB4GA1UEAwwXY29uZm9ybWFuY2UuZXhhbXBsZS5jb20wHhcNMjYwNTE1MDc1MzQ1WhcNMjcwNTE1MDc1MzQ1WjAiMSAwHgYDVQQDDBdjb25mb3JtYW5jZS5leGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBz7RGBBEDRnDhhrUF55vFW268lmDhe3ZZkynA8CMZOtKnv02968XSiEmNSoGPaHX3LXl+boQztsK0DB46VhE6+jdzB1MB0GA1UdDgQWBBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAfBgNVHSMEGDAWgBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAPBgNVHRMBAf8EBTADAQH/MCIGA1UdEQQbMBmCF2NvbmZvcm1hbmNlLmV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQC4lhxwiQy3+GPtzdQW9IlDSrQoEnncom6YsKZ3izHuIgIhAKZIjNYWTG0xIpFrS4DVkvo1qiV9kNf1Qvp8StOW6pEr"
  ],
  "kid": "vp-verifier-key-1",
  "typ": "oauth-authz-req+jwt",
  "alg": "ES256"
}
request_object
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.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.GTiJoK3auzjxILxG87tjzPaATqPPWqnZMOfq93qmdFvFchM9DsSFUlPuYJmgD7n6ZTqFqsE9Z_iZM3vDqG9WQQ
key 
{
  "kty": "EC",
  "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
  "use": "sig",
  "crv": "P-256",
  "kid": "vp-verifier-key-1",
  "x5c": [
    "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"
  ],
  "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
  "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
  "alg": "ES256"
}
2026-11-09 19:18:25
oid4vp-1final-wallet-negative-test-missing-nonce
Wallet has retrieved request_uri - the request has no nonce, so the wallet should return an error response or display an error.
2026-11-09 19:18:25 REVIEW IMAGE
ExpectRedirectUriErrorPage
Show redirect URI error page
img
updatedAt 
1794251913614
2026-11-09 19:18:25
oid4vp-1final-wallet-negative-test-missing-nonce
Returned request object to wallet - waiting for it to call the response_uri
2026-11-09 19:18:25 OUTGOING
oid4vp-1final-wallet-negative-test-missing-nonce
Response to HTTP request to test instance oXS4UedvSxGdVfE
outgoing_status_code 
200
outgoing_body
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.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.GTiJoK3auzjxILxG87tjzPaATqPPWqnZMOfq93qmdFvFchM9DsSFUlPuYJmgD7n6ZTqFqsE9Z_iZM3vDqG9WQQ
outgoing_headers 
{
  "headers": {
    "Content-Type": [
      "application/oauth-authz-req+jwt"
    ]
  }
}
outgoing_path 
requesturi/JWq73y7gmIOlIpogn7hdirwWAunPMlP8Hs0jgb0g252Bagtgnb8nUcuxfvLu6VbO
2026-11-09 19:18:33 FINISHED
oid4vp-1final-wallet-negative-test-missing-nonce
Test has run to completion
testmodule_result 
REVIEW
2026-11-09 19:18:33
TEST-RUNNER
Alias has now been claimed by another test
alias 
siros-wallet-vp-mdoc-test
new_test_id 
a6fxy15gCaHUE8g
Test Results