Test Summary

Test Results

Expand All Collapse All
All times are UTC
2026-11-12 10:34:13 INFO
TEST-RUNNER
Test instance 2fUH63O6zpROXOG created
baseUrl
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test
variant
{
  "credential_format": "sd_jwt_vc",
  "vci_credential_issuance_mode": "deferred",
  "fapi_request_method": "unsigned",
  "grant_management": "disabled",
  "vci_grant_type": "authorization_code",
  "vci_credential_encryption": "plain",
  "sender_constrain": "dpop",
  "client_auth_type": "private_key_jwt",
  "vci_authorization_code_flow_variant": "issuer_initiated",
  "authorization_request_type": "simple",
  "fapi_client_type": "plain_oauth",
  "vci_credential_offer_variant": "by_value",
  "fapi_profile": "vci",
  "fapi_response_mode": "plain_response"
}
alias
siros-wallet-vci-test
description
OID4VCI wallet conformance test for SIROS wallet [mini-wallet a6db9cb]
planId
xy93c8jc25ZSa
config
{
  "alias": "siros-wallet-vci-test",
  "description": "OID4VCI wallet conformance test for SIROS wallet [mini-wallet a6db9cb]",
  "server": {
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
          "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
          "crv": "P-256",
          "d": "9cez3K_DuFS4egCVhvySFQsacFt4v6njd_fZ3Ox00jw",
          "kid": "server-key-1",
          "use": "sig",
          "alg": "ES256"
        }
      ]
    }
  },
  "client": {
    "client_id": "siros-wallet-test",
    "redirect_uri": "http://localhost:3010/",
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc",
          "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI",
          "crv": "P-256",
          "kid": "client-key-1",
          "use": "sig",
          "alg": "ES256"
        }
      ]
    },
    "private_key": {
      "kty": "EC",
      "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc",
      "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI",
      "crv": "P-256",
      "d": "KJEKZo2PQq6E40P6HMenViCVBRXoWD2FDyevRsJnlG0",
      "kid": "client-key-1",
      "use": "sig",
      "alg": "ES256"
    }
  },
  "credential": {
    "signing_jwk": {
      "kty": "EC",
      "x": "DC9X9ll7j9Jal-AHuMgPRKDVu6Qx575dS7jp6Byweh0",
      "y": "jT6DefGEoaIbd1gDvuc6EaECV6GzSjSKl0PjtJ6CZkM",
      "crv": "P-256",
      "d": "jVJkAdpfNMYbeAiSbHp-GKVH0qD0NyTRsQb9ABBUgQ0",
      "kid": "signing-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "MIIBazCCARKgAwIBAgIUQYT+qvz/som9nb6vOLBeaH5QGTowCgYIKoZIzj0EAwIwEjEQMA4GA1UEAwwHVGVzdCBDQTAeFw0yNjA1MDExNjMzNDdaFw0yNzA1MDExNjMzNDdaMBYxFDASBgNVBAMMC3Rlc3Qtc2lnbmVyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEDC9X9ll7j9Jal+AHuMgPRKDVu6Qx575dS7jp6Byweh2NPoN58YShoht3WAO+5zoRoQJXobNKNIqXQ+O0noJmQ6NCMEAwHQYDVR0OBBYEFHxAz1jw9mXJlVfcQMFkcDreoP5rMB8GA1UdIwQYMBaAFIqC34T7zF9Xxv1tMeztb+/8FwNxMAoGCCqGSM49BAMCA0cAMEQCIBfEz6qX90M465dRjQzo9Ksr7ljrlN/fZtLZolgafArAAiBA3eras8roO9M0t/Nny/Hpod/4bZ2S6gIlKGFc5C6EmQ\u003d\u003d",
        "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\u003d"
      ]
    }
  },
  "waitTimeoutSeconds": 120,
  "vci": {
    "credential_offer_endpoint": "openid-credential-offer://"
  },
  "developer": "leifj"
}
baseMtlsUrl
https://localhost:8444/test-mtls/a/siros-wallet-vci-test
testName
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
2026-11-12 10:34:13 SUCCESS
GenerateServerConfigurationMTLS
Created server configuration
server
{
  "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/authorize",
  "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/token",
  "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/register",
  "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/token",
    "registration_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/register",
    "userinfo_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/userinfo"
  }
}
issuer
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/
discoveryUrl
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/.well-known/openid-configuration
2026-11-12 10:34:13 SUCCESS
LoadServerJWKs
Parsed public and private JWK sets
server_encryption_keys
{}
server_public_jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    }
  ]
}
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "d": "9cez3K_DuFS4egCVhvySFQsacFt4v6njd_fZ3Ox00jw",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    }
  ]
}
Validate the JWK set in server signing keys
2026-11-12 10:34:13 SUCCESS
MapJwksToValidationLocation
Selected the JWK set in server signing keys for validation
jwks
{
  "keys": [
    {
      "kty": "EC",
      "d": "9cez3K_DuFS4egCVhvySFQsacFt4v6njd_fZ3Ox00jw",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    }
  ]
}
2026-11-12 10:34:13 SUCCESS
ValidateJwksStructure
The JWK set in server signing keys is structurally valid
jwks_source
server signing keys
2026-11-12 10:34:13 SUCCESS
ParseUsableJwksKeys
All usable keys in the JWK set in server signing keys parse successfully
jwks_source
server signing keys
2026-11-12 10:34:13 SUCCESS
WarnOnUnusableJwksKeys
All keys in the JWK set in server signing keys use a supported key type, curve and algorithm
jwks_source
server signing keys
2026-11-12 10:34:13 SUCCESS
AugmentRealJwksWithDecoys
Augmented JWKS with decoy keys.
existingJwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    }
  ]
}
jwksWithDecoys
{
  "keys": [
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "kid": "server-key-1",
      "x": "J_dgrrHb4Q0Trt9GFFYIT4ZwameXU9jsYpQIjOZyYlc",
      "alg": "EdDSA"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "server-key-1",
      "alg": "PS256",
      "n": "q2Ty1ysTlHo-897h5xX1aAaEDyXP9XhU9U0jQygHfYYaOUMSsIa1YV6wN1_E2x4Krh2GTIHQ9UWC9YDeat4dHWxAMZa_R7u6GF24SPw2Wn5H6Y9pZgzTjH4cDHxNA5DLWmgtfCm_NQ2WJvLVAV03cSonRhs16ONgWc3aGKE1TN9ALgKXZ8OAHP8mD2mcKYExa9xPtB6-X3cJ6bMkejbT2iwGBzb9Nd9NVuNxknYyh3tS2Q_ddRexPwE2wmsbJLRHg4CEwQlJ9N10E0D9fuTC1f3cal4FBJz4q59D90KZVXuwp8BZKrLm5ARVJtblMqlx1vI2n82tus--JIEkqPhBDQ"
    }
  ]
}
2026-11-12 10:34:13
SetRsaAltServerJwks
generated new alt RSA key configuration
2026-11-12 10:34:13 SUCCESS
SetRsaAltServerJwks
Set alt server key
server_public_jwks
{
  "keys": [
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "kid": "server-key-1",
      "x": "J_dgrrHb4Q0Trt9GFFYIT4ZwameXU9jsYpQIjOZyYlc",
      "alg": "EdDSA"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "server-key-1",
      "alg": "PS256",
      "n": "q2Ty1ysTlHo-897h5xX1aAaEDyXP9XhU9U0jQygHfYYaOUMSsIa1YV6wN1_E2x4Krh2GTIHQ9UWC9YDeat4dHWxAMZa_R7u6GF24SPw2Wn5H6Y9pZgzTjH4cDHxNA5DLWmgtfCm_NQ2WJvLVAV03cSonRhs16ONgWc3aGKE1TN9ALgKXZ8OAHP8mD2mcKYExa9xPtB6-X3cJ6bMkejbT2iwGBzb9Nd9NVuNxknYyh3tS2Q_ddRexPwE2wmsbJLRHg4CEwQlJ9N10E0D9fuTC1f3cal4FBJz4q59D90KZVXuwp8BZKrLm5ARVJtblMqlx1vI2n82tus--JIEkqPhBDQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "rsa-none-alt-arg",
      "n": "rHO0Hvkwg8p9MMsTK9H2cWIVcuTXgqD9MQZnb48FM-tdmoMlPjU5WUg4N8h_4jdQ1ADgQACppuoJiXhDidN4aOiVjSso-SRjwWxKbq4TVvlNdzOCH-ligo4ftcJBLUWJJLD3I64BGG7KMoovEPFN89jR3VXD6RyKj4vaY706CaCkxZlGS9Mp8sGdT7zv5UjGKhh4-KRolRq9mId2mnleIvZBYyANxd0Rb861RY7g3O4DxWEA3xtxkSJrcBkDyY8IrKl0mxKldaR9rll4FmYoNZWzZqFoDfLzt7rYSiYOfXdt-QIlMlZthqVa3RJMM8L5MrRevoRVKjmulH1_KaXwyQ"
    }
  ]
}
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "d": "9cez3K_DuFS4egCVhvySFQsacFt4v6njd_fZ3Ox00jw",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    }
  ]
}
server_alt_jwks
{
  "keys": [
    {
      "p": "vTcrfPZ9eZjIXN4LZYyKMXG1lvH5UJukZgQQ1UQYENHPoJWIvi9JD7MPMjjEwpvZcD6YGzaczxboEiihlHPiqM6Dw9yTMbX4Bw-GgyFhgkYrOd8fPgMAFZXI4zl5G6aSTsRHolAMVXvuKGBD7QV1LnU7ZZ9hv0XZOeLDCaVzpm8",
      "kty": "RSA",
      "q": "6VHXO7lyTJcniJGAPJ_5H2UHrknODXun-bKTelxWZcEvw8t2gJDvia5mbmor7RLbdg4c4BojdflvhJJVXlxOsgxHMJiFP2cjVoNktHkEmgHCqCplJUD98ZCK7hfC5LwJLQwszMCpDbYAlVSUAsWFyWczo0hC4Kv0QCwluqm9uEc",
      "d": "Cldd48WZrS2FWFm1KpmKp73z_1HNwp2Y0UnLBhuTekuQ72UR5KsYZ0w3YtD5Kj2a8TukNvJTOhkqvT2i_y7ZN6FK5o5CBL6z5LNzuzNhIYQNqypBkVxTdfTD3ghqFCbpVHPwPgl_M1HheipjLCbsP8UuwJEWEHKPtI_0ZqrAQjdwk32LvF9kahhdaGpMeNoOcRM1BQxURrsLUjJm8fOZcz6gfjItd-8m6-VXoXDPDjCKnePi6Wh6QLbpDnuefPWrKLyo_p4EaZK_hCWWZFk0XeoEWgsVcG7piMae2mpesimiWeA1ncqkbfQNdI4bYIUt31iFDz-XBG0osSH8GoGHCQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "rsa-none-alt-arg",
      "qi": "VzPxjxy_hoMSgrGMWYQLmPg0OT0gLbvyRDwFKLIPU_-pt4CKZBzzhk5NtQ9SpnPiWQ-z0D1TjHAV53CO5sJZEfevKXoTwsnBLmJwnFBq4BInXcl8PGt_5p_nx9HYxc3Lo0NU0oDSID-B3rh2fjXt3NvHJbbAHZZuaRdsw5PM1ZU",
      "dp": "H_X3tI32N9nkzjr7ddW9agipAawxzrnblRfOuBdecUjfZ2KazHU0RCCcyoDoS28D1X_dNYuOBTT7UkXmtSq1-ImZnDXf7x-rm5W1xOSYkebEWmwj3Neo5fx9CFSm7lK-l-tzpikbTD04xz0rfBfV6VkIBWxcmHB19t8kzrZRyKU",
      "dq": "DejOHwZgNQax2adq8LJMxL1eJtrJiO49RlqKBjppACnzMgX4K5P4Y8nc22pC8iA0qyYOPKHyST80kb-zjSuNmXm36MK-9tesOKUepM-uIYxHUYUtgHoOaY9HaQhLmx1GosPeC9rUeTfHcx-Wr0-dOTOI1YwiSIiXyBeZrDYgVFM",
      "n": "rHO0Hvkwg8p9MMsTK9H2cWIVcuTXgqD9MQZnb48FM-tdmoMlPjU5WUg4N8h_4jdQ1ADgQACppuoJiXhDidN4aOiVjSso-SRjwWxKbq4TVvlNdzOCH-ligo4ftcJBLUWJJLD3I64BGG7KMoovEPFN89jR3VXD6RyKj4vaY706CaCkxZlGS9Mp8sGdT7zv5UjGKhh4-KRolRq9mId2mnleIvZBYyANxd0Rb861RY7g3O4DxWEA3xtxkSJrcBkDyY8IrKl0mxKldaR9rll4FmYoNZWzZqFoDfLzt7rYSiYOfXdt-QIlMlZthqVa3RJMM8L5MrRevoRVKjmulH1_KaXwyQ"
    }
  ]
}
2026-11-12 10:34:13 SUCCESS
AddResponseTypeCodeToServerConfiguration
Added code as response type supported
response_types_supported
[
  "code"
]
2026-11-12 10:34:13 SUCCESS
AddIssSupportedToServerConfiguration
Added 'authorization_response_iss_parameter_supported' as 'true' to server metadata
2026-11-12 10:34:13 SUCCESS
AddCodeChallengeMethodToServerConfiguration
Added S256 as supported code challenge method
code_challenge_methods_supported
[
  "S256"
]
2026-11-12 10:34:13 SUCCESS
ExtractServerSigningAlg
Successfully extracted algorithm
signing_algorithm
ES256
2026-11-12 10:34:13 SUCCESS
AddIdTokenSigningAlgsToServerConfiguration
Added 'id_token_signing_alg_values_supported' to server metadata as 'alg' from server jwks
value
[
  "ES256"
]
2026-11-12 10:34:13 SUCCESS
VCIEnsureCredentialSigningCertificateIsNotSelfSigned
Credential signing cert is not a self-signed cert
cert_0_from_x5c
MIIBazCCARKgAwIBAgIUQYT+qvz/som9nb6vOLBeaH5QGTowCgYIKoZIzj0EAwIwEjEQMA4GA1UEAwwHVGVzdCBDQTAeFw0yNjA1MDExNjMzNDdaFw0yNzA1MDExNjMzNDdaMBYxFDASBgNVBAMMC3Rlc3Qtc2lnbmVyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEDC9X9ll7j9Jal+AHuMgPRKDVu6Qx575dS7jp6Byweh2NPoN58YShoht3WAO+5zoRoQJXobNKNIqXQ+O0noJmQ6NCMEAwHQYDVR0OBBYEFHxAz1jw9mXJlVfcQMFkcDreoP5rMB8GA1UdIwQYMBaAFIqC34T7zF9Xxv1tMeztb+/8FwNxMAoGCCqGSM49BAMCA0cAMEQCIBfEz6qX90M465dRjQzo9Ksr7ljrlN/fZtLZolgafArAAiBA3eras8roO9M0t/Nny/Hpod/4bZ2S6gIlKGFc5C6EmQ==
2026-11-12 10:34:13
VCIGenerateIssuerState
Generated issuer_state
issuer_state
aUycSnifbpNEZsFDgTdHafSxSoObbuUHtiFlqXhUVS
2026-11-12 10:34:13 SUCCESS
AddDpopSigningAlgValuesSupportedToServerConfiguration
Set dpop_signing_alg_values_supported
values
[
  "PS256",
  "ES256",
  "EdDSA",
  "Ed25519"
]
2026-11-12 10:34:13
SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly
Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration
server_configuration
{
  "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/authorize",
  "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/token",
  "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/register",
  "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/token",
    "registration_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/register",
    "userinfo_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/userinfo"
  },
  "response_types_supported": [
    "code"
  ],
  "authorization_response_iss_parameter_supported": true,
  "code_challenge_methods_supported": [
    "S256"
  ],
  "id_token_signing_alg_values_supported": [
    "ES256"
  ],
  "dpop_signing_alg_values_supported": [
    "PS256",
    "ES256",
    "EdDSA",
    "Ed25519"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ]
}
2026-11-12 10:34:13
AddPushedAuthorizationRequestEndpointToServerConfig
Added pushed_authorization_request_endpoint to server configuration
mtls_endpoint
https://localhost:8444/test-mtls/a/siros-wallet-vci-test/par
endpoint
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/par
2026-11-12 10:34:13
AddRequirePushedAuthorizationRequestsToServerConfig
Added require_pushed_authorization_requests to server configuration
value
true
2026-11-12 10:34:13 SUCCESS
FAPI2AddTokenEndpointAuthSigningAlgValuesSupportedToServer
Set token_endpoint_auth_signing_alg_values_supported
values
[
  "PS256",
  "ES256",
  "EdDSA",
  "Ed25519"
]
2026-11-12 10:34:13
VCIRegisterKeyAttestationTrustAnchor
Skipping registration of empty trust anchor certificate for key attestation
2026-11-12 10:34:13
VCILogGeneratedCredentialIssuerMetadata
Created credential issuer metadata
credential_issuer
{
  "credential_issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "credential_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/credential",
  "nonce_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/nonce",
  "deferred_credential_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/deferred_credential",
  "authorization_servers": [
    "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/"
  ],
  "credential_configurations_supported": {
    "eu.europa.ec.eudi.pid.1": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1"
    },
    "eu.europa.ec.eudi.pid.1.attestation": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.attestation"
    },
    "eu.europa.ec.eudi.pid.1.jwt.keyattest": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: JWT Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.jwt.keyattest"
    },
    "eu.europa.ec.eudi.pid.1.attestation.keyattest": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: Attestation Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.attestation.keyattest"
    },
    "eu.europa.ec.eudi.pid.1.jwt_and_attestation.keyattest": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        },
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: JWT and Attestation Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.jwt_and_attestation.keyattest"
    },
    "eu.europa.ec.eudi.pid.mdoc.1": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1"
    },
    "eu.europa.ec.eudi.pid.mdoc.1.attestation": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc): Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1.attestation"
    },
    "eu.europa.ec.eudi.pid.mdoc.1.jwt.keyattest": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc): JWT Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1.jwt.keyattest"
    },
    "eu.europa.ec.eudi.pid.mdoc.1.attestation.keyattest": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc): Attestation Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1.attestation.keyattest"
    },
    "org.iso.18013.5.1.mDL": {
      "format": "mso_mdoc",
      "doctype": "org.iso.18013.5.1.mDL",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake mDL (ISO 18013-5) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Mobile Driver\u0027s License"
          }
        ]
      },
      "scope": "org.iso.18013.5.1.mDL"
    },
    "org.iso.23220.photoid.1": {
      "format": "mso_mdoc",
      "doctype": "org.iso.23220.photoid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake Photo ID (ISO/IEC TS 23220-4) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Photo ID"
          }
        ]
      },
      "scope": "org.iso.23220.photoid.1"
    },
    "org.iso.18013.5.1.mDL.attestation": {
      "format": "mso_mdoc",
      "doctype": "org.iso.18013.5.1.mDL",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake mDL (ISO 18013-5): Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Mobile Driver\u0027s License"
          }
        ]
      },
      "scope": "org.iso.18013.5.1.mDL.attestation"
    },
    "eu.europa.ec.eudi.pid.1.nobinding": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (No Holder Binding) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID without cryptographic holder binding"
          }
        ]
      },
      "scope": "eudi.pid.1.nobinding"
    },
    "net.openid.examples.certification.1.sdjwtvc": {
      "format": "dc+sd-jwt",
      "vct": "urn:openid:example:certification:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake OpenID Certification 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Certification"
          }
        ]
      },
      "scope": "openid.example.cert.1"
    },
    "net.openid.examples.certification.1.mdoc": {
      "format": "mso_mdoc",
      "doctype": "net.openid.examples.certification.1.mdoc",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake OpenID Certification (mdoc) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Certification"
          }
        ]
      },
      "scope": "openid.example.cert.1"
    }
  }
}
2026-11-12 10:34:13
VCIAddOpenIdCredentialToAuthorizationDetailsSupportedIfScopeIsMissing
No need to add openid_credential to authorization_details_types_supported in oauth authorization server metadata as all credential configurations use a scope
2026-11-12 10:34:13
VCIInjectCredentialConfigurationIdHint
Using implicit credential_configuration_id eu.europa.ec.eudi.pid.1
credential_configuration_id
eu.europa.ec.eudi.pid.1
2026-11-12 10:34:13 SUCCESS
CheckServerConfiguration
Found required server configuration keys
required
[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]
2026-11-12 10:34:13 SUCCESS
FAPI2FinalEnsureMinimumServerKeyLength
Validated minimum key lengths for server_jwks
server_jwks
{
  "keys": [
    {
      "kty": "EC",
      "d": "9cez3K_DuFS4egCVhvySFQsacFt4v6njd_fZ3Ox00jw",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    }
  ]
}
2026-11-12 10:34:13 SUCCESS
LoadUserInfo
Added user information
user_info
{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}
Verify configuration of first client
2026-11-12 10:34:13 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
siros-wallet-test
redirect_uri
http://localhost:3010/
jwks
{
  "keys": [
    {
      "kty": "EC",
      "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc",
      "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI",
      "crv": "P-256",
      "kid": "client-key-1",
      "use": "sig",
      "alg": "ES256"
    }
  ]
}
private_key
{
  "kty": "EC",
  "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc",
  "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI",
  "crv": "P-256",
  "d": "KJEKZo2PQq6E40P6HMenViCVBRXoWD2FDyevRsJnlG0",
  "kid": "client-key-1",
  "use": "sig",
  "alg": "ES256"
}
Validate the JWK set in client configuration
2026-11-12 10:34:13 SUCCESS
MapJwksToValidationLocation
Selected the JWK set in client configuration for validation
jwks
{
  "keys": [
    {
      "kty": "EC",
      "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc",
      "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI",
      "crv": "P-256",
      "kid": "client-key-1",
      "use": "sig",
      "alg": "ES256"
    }
  ]
}
2026-11-12 10:34:13 SUCCESS
EnsureJwksHasNoPrivateOrSymmetricKeyMaterial
The JWK set in client configuration contains only public key material
jwks_source
client configuration
2026-11-12 10:34:13 SUCCESS
ValidateJwksStructure
The JWK set in client configuration is structurally valid
jwks_source
client configuration
2026-11-12 10:34:13 SUCCESS
ParseUsableJwksKeys
All usable keys in the JWK set in client configuration parse successfully
jwks_source
client configuration
2026-11-12 10:34:13 SUCCESS
WarnOnUnusableJwksKeys
All keys in the JWK set in client configuration use a supported key type, curve and algorithm
jwks_source
client configuration
2026-11-12 10:34:13 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "EC",
      "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc",
      "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI",
      "crv": "P-256",
      "kid": "client-key-1",
      "use": "sig",
      "alg": "ES256"
    }
  ]
}
client_public_jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "client-key-1",
      "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc",
      "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI",
      "alg": "ES256"
    }
  ]
}
2026-11-12 10:34:13 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2026-11-12 10:34:13 SUCCESS
FAPI2FinalEnsureMinimumClientKeyLength
Validated minimum key lengths for client_jwks
client_jwks
{
  "keys": [
    {
      "kty": "EC",
      "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc",
      "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI",
      "crv": "P-256",
      "kid": "client-key-1",
      "use": "sig",
      "alg": "ES256"
    }
  ]
}
2026-11-12 10:34:13 SUCCESS
CreateAuthorizationServerDpopNonce
Created Authorization Server DPoP nonce
authorization_server_dpop_nonce
vYvURbqVizTmBBOvlvbzMdzZvEXGwxrAykqVVPLCirpqFXvcfr0944757754^:%@^?`^<==.#>{[=$$>%^<)>@>[]?
2026-11-12 10:34:13 SUCCESS
CreateResourceServerDpopNonce
Created Resource Server nonce
resource_server_dpop_nonce
KWkkVDTLRixwsHTZtMGUhfmiKHQtmRxYCCWhPrICSYdErySpFv9717252767*]@(:!]*@[+-,'%})^_!#(%`(-&^=;
2026-11-12 10:34:13 SUCCESS
CheckDistinctKeyIdValueInServerJWKs
Distinct 'kid' value in all keys of server_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2026-11-12 10:34:13
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Setup Done
2026-11-12 10:34:13
VCICreateCredentialOffer
Using credential_configuration_id eu.europa.ec.eudi.pid.1
credential_configuration_id
eu.europa.ec.eudi.pid.1
2026-11-12 10:34:13
VCICreateCredentialOffer
Generated credential offer
credential_offer
{
  "credential_issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid.1"
  ],
  "grants": {
    "authorization_code": {
      "issuer_state": "aUycSnifbpNEZsFDgTdHafSxSoObbuUHtiFlqXhUVS"
    }
  }
}
issuer_state
aUycSnifbpNEZsFDgTdHafSxSoObbuUHtiFlqXhUVS
grant_type
AUTHORIZATION_CODE
2026-11-12 10:34:13 SUCCESS
VCICreateCredentialOfferRedirectUrl
Created credential offer redirect url
credential_offer_redirect_url
openid-credential-offer://?credential_offer=%7B%22credential_issuer%22:%22https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/%22,%22credential_configuration_ids%22:%5B%22eu.europa.ec.eudi.pid.1%22%5D,%22grants%22:%7B%22authorization_code%22:%7B%22issuer_state%22:%22aUycSnifbpNEZsFDgTdHafSxSoObbuUHtiFlqXhUVS%22%7D%7D%7D
credential_offer_type
BY_VALUE
2026-11-12 10:34:14 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /.well-known/openid-credential-issuer/test/a/siros-wallet-vci-test/
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/.well-known/openid-credential-issuer/test/a/siros-wallet-vci-test/",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/openid-credential-issuer+jwt, application/json",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "accept-language": "en-US",
  "sec-ch-ua-mobile": "?0",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/.well-known/openid-credential-issuer/test/a/siros-wallet-vci-test/
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
Get Credential Issuer Metadata
2026-11-12 10:34:14 SUCCESS
EnsureIncomingRequestMethodIsGet
Client correctly used http GET method
2026-11-12 10:34:14 SUCCESS
VCICheckIssuerMetadataRequestUrl
Issuer metadata request is for correct URL
request_url
https://localhost.emobix.co.uk:8443/.well-known/openid-credential-issuer/test/a/siros-wallet-vci-test/
2026-11-12 10:34:14 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing_status_code
200
outgoing_body
{
  "credential_issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "credential_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/credential",
  "nonce_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/nonce",
  "deferred_credential_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/deferred_credential",
  "authorization_servers": [
    "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/"
  ],
  "credential_configurations_supported": {
    "eu.europa.ec.eudi.pid.1": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1"
    },
    "eu.europa.ec.eudi.pid.1.attestation": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.attestation"
    },
    "eu.europa.ec.eudi.pid.1.jwt.keyattest": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: JWT Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.jwt.keyattest"
    },
    "eu.europa.ec.eudi.pid.1.attestation.keyattest": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: Attestation Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.attestation.keyattest"
    },
    "eu.europa.ec.eudi.pid.1.jwt_and_attestation.keyattest": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        },
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: JWT and Attestation Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.jwt_and_attestation.keyattest"
    },
    "eu.europa.ec.eudi.pid.mdoc.1": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1"
    },
    "eu.europa.ec.eudi.pid.mdoc.1.attestation": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc): Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1.attestation"
    },
    "eu.europa.ec.eudi.pid.mdoc.1.jwt.keyattest": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc): JWT Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1.jwt.keyattest"
    },
    "eu.europa.ec.eudi.pid.mdoc.1.attestation.keyattest": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc): Attestation Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1.attestation.keyattest"
    },
    "org.iso.18013.5.1.mDL": {
      "format": "mso_mdoc",
      "doctype": "org.iso.18013.5.1.mDL",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake mDL (ISO 18013-5) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Mobile Driver\u0027s License"
          }
        ]
      },
      "scope": "org.iso.18013.5.1.mDL"
    },
    "org.iso.23220.photoid.1": {
      "format": "mso_mdoc",
      "doctype": "org.iso.23220.photoid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake Photo ID (ISO/IEC TS 23220-4) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Photo ID"
          }
        ]
      },
      "scope": "org.iso.23220.photoid.1"
    },
    "org.iso.18013.5.1.mDL.attestation": {
      "format": "mso_mdoc",
      "doctype": "org.iso.18013.5.1.mDL",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake mDL (ISO 18013-5): Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Mobile Driver\u0027s License"
          }
        ]
      },
      "scope": "org.iso.18013.5.1.mDL.attestation"
    },
    "eu.europa.ec.eudi.pid.1.nobinding": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (No Holder Binding) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID without cryptographic holder binding"
          }
        ]
      },
      "scope": "eudi.pid.1.nobinding"
    },
    "net.openid.examples.certification.1.sdjwtvc": {
      "format": "dc+sd-jwt",
      "vct": "urn:openid:example:certification:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake OpenID Certification 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Certification"
          }
        ]
      },
      "scope": "openid.example.cert.1"
    },
    "net.openid.examples.certification.1.mdoc": {
      "format": "mso_mdoc",
      "doctype": "net.openid.examples.certification.1.mdoc",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake OpenID Certification (mdoc) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Certification"
          }
        ]
      },
      "scope": "openid.example.cert.1"
    }
  }
}
outgoing_headers
{
  "headers": {
    "Content-Type": [
      "application/json"
    ]
  }
}
outgoing_path

                                
2026-11-12 10:34:14 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/json",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "accept-language": "en-US",
  "sec-ch-ua-mobile": "?0",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
Get OAuth Authorization Metadata
2026-11-12 10:34:14 SUCCESS
EnsureIncomingRequestMethodIsGet
Client correctly used http GET method
2026-11-12 10:34:14 SUCCESS
VCICheckOAuthAuthorizationServerMetadataRequestUrl
OAuth authorization server metadata request is for correct URL
request_url
https://localhost.emobix.co.uk:8443/.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test
2026-11-12 10:34:14 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing_status_code
200
outgoing_body
{
  "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/authorize",
  "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/token",
  "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/register",
  "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/token",
    "registration_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/register",
    "userinfo_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/userinfo",
    "pushed_authorization_request_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/par"
  },
  "response_types_supported": [
    "code"
  ],
  "authorization_response_iss_parameter_supported": true,
  "code_challenge_methods_supported": [
    "S256"
  ],
  "id_token_signing_alg_values_supported": [
    "ES256"
  ],
  "dpop_signing_alg_values_supported": [
    "PS256",
    "ES256",
    "EdDSA",
    "Ed25519"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "pushed_authorization_request_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/par",
  "require_pushed_authorization_requests": true,
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256",
    "ES256",
    "EdDSA",
    "Ed25519"
  ],
  "status_list_aggregation_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/statuslists"
}
outgoing_headers
{
  "headers": {
    "Content-Type": [
      "application/json"
    ]
  }
}
outgoing_path

                                
2026-11-12 10:34:14 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /test/a/siros-wallet-vci-test/par
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vci-test/par",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "content-length": "796",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/json",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "content-type": "application/x-www-form-urlencoded",
  "sec-ch-ua-mobile": "?0",
  "accept-language": "en-US",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/test/a/siros-wallet-vci-test/par
incoming_body_form_params
{
  "response_type": "code",
  "client_id": "siros-wallet-test",
  "redirect_uri": "http://localhost:3010/",
  "state": "1RL5AIJF-TUTH3qOBNAslg",
  "scope": "eudi.pid.1",
  "issuer_state": "aUycSnifbpNEZsFDgTdHafSxSoObbuUHtiFlqXhUVS",
  "code_challenge": "94HnsheteMH63iQRf7duWde2qHlYBI9Ov-4b_k1pLvU",
  "code_challenge_method": "S256",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
  "client_assertion": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjVlNDllZjZmOTVmNzU5MWZlODhkOWM5ZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.CzguF7MifOwMF9hGgrmmLxcMYsaTW8_5G7B2yA0ftZDZln6HmrDgSfbo5mdq20H7d8rY9wtIoSOXLX8zNt2gBA"
}
incoming_method
POST
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
response_type=code&client_id=siros-wallet-test&redirect_uri=http%3A%2F%2Flocalhost%3A3010%2F&state=1RL5AIJF-TUTH3qOBNAslg&scope=eudi.pid.1&issuer_state=aUycSnifbpNEZsFDgTdHafSxSoObbuUHtiFlqXhUVS&code_challenge=94HnsheteMH63iQRf7duWde2qHlYBI9Ov-4b_k1pLvU&code_challenge_method=S256&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjVlNDllZjZmOTVmNzU5MWZlODhkOWM5ZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.CzguF7MifOwMF9hGgrmmLxcMYsaTW8_5G7B2yA0ftZDZln6HmrDgSfbo5mdq20H7d8rY9wtIoSOXLX8zNt2gBA
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls12WithBCP195SecureCipherOrTls13
Found TLS 1.3 connection
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
PAR endpoint
2026-11-12 10:34:14 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjVlNDllZjZmOTVmNzU5MWZlODhkOWM5ZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.CzguF7MifOwMF9hGgrmmLxcMYsaTW8_5G7B2yA0ftZDZln6HmrDgSfbo5mdq20H7d8rY9wtIoSOXLX8zNt2gBA",
  "header": {
    "kid": "client-key-1",
    "typ": "JWT",
    "alg": "ES256"
  },
  "claims": {
    "aud": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
    "sub": "siros-wallet-test",
    "iss": "siros-wallet-test",
    "exp": 1794479954,
    "iat": 1794479654,
    "jti": "5e49ef6f95f7591fe88d9c9d"
  }
}
2026-11-12 10:34:14
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2026-11-12 10:34:14 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjVlNDllZjZmOTVmNzU5MWZlODhkOWM5ZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.CzguF7MifOwMF9hGgrmmLxcMYsaTW8_5G7B2yA0ftZDZln6HmrDgSfbo5mdq20H7d8rY9wtIoSOXLX8zNt2gBA
2026-11-12 10:34:14 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2026-11-12 10:34:14 SUCCESS
ValidateClientAssertionClaimsForPAREndpoint
Client Assertion passed all validation checks
2026-11-12 10:34:14 SUCCESS
CheckForClientAssertionJtiReuse
No reuse found for client_assertion JWT for jti=5e49ef6f95f7591fe88d9c9d
2026-11-12 10:34:14 SUCCESS
ValidateClientAssertionAudClaimIsIssuerAsString
private_key_jwt client Assertion 'aud' claim matches the authentication server issuer url
2026-11-12 10:34:14 SUCCESS
EnsureUnsignedPAREndpointRequestDoesNotContainRequestParameter
PAR endpoint request does not contain a request parameter
2026-11-12 10:34:14 SUCCESS
EnsurePAREndpointRequestDoesNotContainRequestUriParameter
PAR endpoint request does not contain a request_uri parameter
2026-11-12 10:34:14 INFO
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
path
jwe_header
mapped
object
authorization_request_object
2026-11-12 10:34:14 INFO
ExtractDpopProofFromHeader
Skipped evaluation due to missing required element: incoming_request headers.dpop
path
headers.dpop
mapped
object
incoming_request
2026-11-12 10:34:14 SUCCESS
ExtractParAuthorizationCodeDpopBindingKey
Request does not use DPoP Authorization code binding
2026-11-12 10:34:14 SUCCESS
CreatePAREndpointResponse
par_endpoint_response_headers
{}
Created PAR endpoint response
{
  "request_uri": "urn:ietf:params:oauth:request_uri:a6912ac4-357b-4448-9e44-3d9be71d09d6",
  "expires_in": 600
}
2026-11-12 10:34:14 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing_status_code
201
outgoing_body
{
  "request_uri": "urn:ietf:params:oauth:request_uri:a6912ac4-357b-4448-9e44-3d9be71d09d6",
  "expires_in": 600
}
outgoing_headers
{
  "headers": {}
}
outgoing_path
par
2026-11-12 10:34:14 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /test/a/siros-wallet-vci-test/authorize
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vci-test/authorize?client_id\u003dsiros-wallet-test\u0026request_uri\u003durn%3Aietf%3Aparams%3Aoauth%3Arequest_uri%3Aa6912ac4-357b-4448-9e44-3d9be71d09d6",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept-language": "en-US",
  "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/jxl,image/avif,image/webp,image/apng,*/*;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.7",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "navigate",
  "sec-fetch-user": "?1",
  "sec-fetch-dest": "document",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "JSESSIONID\u003d30E992D972EE09263154318AE65543F1"
}
incoming_path
/test/a/siros-wallet-vci-test/authorize
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{
  "client_id": "siros-wallet-test",
  "request_uri": "urn:ietf:params:oauth:request_uri:a6912ac4-357b-4448-9e44-3d9be71d09d6"
}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls12WithBCP195SecureCipherOrTls13
Found TLS 1.3 connection
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
Authorization endpoint
2026-11-12 10:34:14 SUCCESS
EnsureAuthorizationRequestDoesNotContainRequestWhenUsingPAR
Request does not contain a request parameter
2026-11-12 10:34:14 SUCCESS
EnsureAuthorizationRequestContainsOnlyExpectedParamsWhenUsingPAR
Request does not contain any unexpected parameters
2026-11-12 10:34:14 SUCCESS
VCIVerifyIssuerStateInAuthorizationRequest
Issuer state matches expected issuer state
actual
aUycSnifbpNEZsFDgTdHafSxSoObbuUHtiFlqXhUVS
expected
aUycSnifbpNEZsFDgTdHafSxSoObbuUHtiFlqXhUVS
2026-11-12 10:34:14 INFO
ValidateEncryptedRequestObjectHasKid
Skipped evaluation due to missing required element: authorization_request_object jwe_header
path
jwe_header
mapped
object
authorization_request_object
2026-11-12 10:34:14 SUCCESS
CreateEffectiveAuthorizationPARRequestParameters
Merged http request parameters with request object claims
effective_authorization_endpoint_request
{
  "client_id": "siros-wallet-test",
  "response_type": "code",
  "redirect_uri": "http://localhost:3010/",
  "state": "1RL5AIJF-TUTH3qOBNAslg",
  "scope": "eudi.pid.1",
  "issuer_state": "aUycSnifbpNEZsFDgTdHafSxSoObbuUHtiFlqXhUVS",
  "code_challenge": "94HnsheteMH63iQRf7duWde2qHlYBI9Ov-4b_k1pLvU",
  "code_challenge_method": "S256",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
  "client_assertion": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjVlNDllZjZmOTVmNzU5MWZlODhkOWM5ZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.CzguF7MifOwMF9hGgrmmLxcMYsaTW8_5G7B2yA0ftZDZln6HmrDgSfbo5mdq20H7d8rY9wtIoSOXLX8zNt2gBA"
}
2026-11-12 10:34:14 SUCCESS
EnsureResponseTypeIsCode
Response type is expected value
expected
code
2026-11-12 10:34:14 INFO
CheckForUnexpectedClaimsInRequestObject
Skipped evaluation due to missing required element: authorization_request_object claims
path
claims
mapped
object
authorization_request_object
2026-11-12 10:34:14 SUCCESS
EnsureAuthorizationRequestContainsPkceCodeChallenge
Found required PKCE parameters in request
code_challenge_method
S256
code_challenge
94HnsheteMH63iQRf7duWde2qHlYBI9Ov-4b_k1pLvU
2026-11-12 10:34:14 SUCCESS
ExtractRequestedScopes
Requested scopes
scope
eudi.pid.1
2026-11-12 10:34:14 SUCCESS
VCIEnsureRequestedScopeIncludesCredentialConfigurationScope
The requested scope names a credential configuration in the credential issuer metadata
matching_scope_values
[
  "eudi.pid.1"
]
requested_scope_values
[
  "eudi.pid.1"
]
2026-11-12 10:34:14 SUCCESS
VCIEnsureRequestedScopeIncludesOfferedCredentialConfiguration
The requested scope includes the scope of an offered credential configuration
offered_credential_configuration_ids
[
  "eu.europa.ec.eudi.pid.1"
]
scope_value
eudi.pid.1
2026-11-12 10:34:14 SUCCESS
EnsureMatchingClientId
Client ID matched
client_id
siros-wallet-test
2026-11-12 10:34:14 SUCCESS
CreateAuthorizationCode
Created authorization code
authorization_code
rLYdCMIs98WnMoYke32AmeCJh5Q2EE30
2026-11-12 10:34:14 SUCCESS
EnsureAuthorizationRequestContainsStateParameter
Found state parameter
state
1RL5AIJF-TUTH3qOBNAslg
2026-11-12 10:34:14 SUCCESS
CreateAuthorizationEndpointResponseParams
Added authorization_endpoint_response_params to environment
params
{
  "redirect_uri": "http://localhost:3010/",
  "state": "1RL5AIJF-TUTH3qOBNAslg"
}
2026-11-12 10:34:14 SUCCESS
AddCodeToAuthorizationEndpointResponseParams
Added code to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "http://localhost:3010/",
  "state": "1RL5AIJF-TUTH3qOBNAslg",
  "code": "rLYdCMIs98WnMoYke32AmeCJh5Q2EE30"
}
2026-11-12 10:34:14 SUCCESS
AddIssToAuthorizationEndpointResponseParams
Added Iss to authorization endpoint response params
authorization_endpoint_response_params
{
  "redirect_uri": "http://localhost:3010/",
  "state": "1RL5AIJF-TUTH3qOBNAslg",
  "code": "rLYdCMIs98WnMoYke32AmeCJh5Q2EE30",
  "iss": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/"
}
2026-11-12 10:34:14
SendAuthorizationResponseWithResponseModeQuery
Redirecting back to client
uri
http://localhost:3010/?state=1RL5AIJF-TUTH3qOBNAslg&code=rLYdCMIs98WnMoYke32AmeCJh5Q2EE30&iss=https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/
2026-11-12 10:34:14 SUCCESS
CheckForInvalidCharsInState
State is empty or contains only URL safe characters
2026-11-12 10:34:14 SUCCESS
CheckStateLength
State is empty or does not exceed 128 characters
2026-11-12 10:34:14 SUCCESS
CreateAuthorizationServerDpopNonce
Created Authorization Server DPoP nonce
authorization_server_dpop_nonce
qzoICBPQkmtogFbeZVNSFbtDdYzTajdPDnwwiWgEwCzVSCaGMj0442317021(?'@]{'{&?&#{@)]].^/(:?-?^$?-<
2026-11-12 10:34:14 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing
org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [http://localhost:3010/?state=1RL5AIJF-TUTH3qOBNAslg&code=rLYdCMIs98WnMoYke32AmeCJh5Q2EE30&iss=https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/]
outgoing_path
authorize
2026-11-12 10:34:14 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /.well-known/openid-credential-issuer/test/a/siros-wallet-vci-test/
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/.well-known/openid-credential-issuer/test/a/siros-wallet-vci-test/",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/openid-credential-issuer+jwt, application/json",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "accept-language": "en-US",
  "sec-ch-ua-mobile": "?0",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/.well-known/openid-credential-issuer/test/a/siros-wallet-vci-test/
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
Get Credential Issuer Metadata
2026-11-12 10:34:14 SUCCESS
EnsureIncomingRequestMethodIsGet
Client correctly used http GET method
2026-11-12 10:34:14 SUCCESS
VCICheckIssuerMetadataRequestUrl
Issuer metadata request is for correct URL
request_url
https://localhost.emobix.co.uk:8443/.well-known/openid-credential-issuer/test/a/siros-wallet-vci-test/
2026-11-12 10:34:14 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing_status_code
200
outgoing_body
{
  "credential_issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "credential_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/credential",
  "nonce_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/nonce",
  "deferred_credential_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/deferred_credential",
  "authorization_servers": [
    "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/"
  ],
  "credential_configurations_supported": {
    "eu.europa.ec.eudi.pid.1": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1"
    },
    "eu.europa.ec.eudi.pid.1.attestation": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.attestation"
    },
    "eu.europa.ec.eudi.pid.1.jwt.keyattest": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: JWT Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.jwt.keyattest"
    },
    "eu.europa.ec.eudi.pid.1.attestation.keyattest": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: Attestation Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.attestation.keyattest"
    },
    "eu.europa.ec.eudi.pid.1.jwt_and_attestation.keyattest": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        },
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: JWT and Attestation Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.jwt_and_attestation.keyattest"
    },
    "eu.europa.ec.eudi.pid.mdoc.1": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1"
    },
    "eu.europa.ec.eudi.pid.mdoc.1.attestation": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc): Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1.attestation"
    },
    "eu.europa.ec.eudi.pid.mdoc.1.jwt.keyattest": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc): JWT Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1.jwt.keyattest"
    },
    "eu.europa.ec.eudi.pid.mdoc.1.attestation.keyattest": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc): Attestation Proof with Key Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1.attestation.keyattest"
    },
    "org.iso.18013.5.1.mDL": {
      "format": "mso_mdoc",
      "doctype": "org.iso.18013.5.1.mDL",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake mDL (ISO 18013-5) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Mobile Driver\u0027s License"
          }
        ]
      },
      "scope": "org.iso.18013.5.1.mDL"
    },
    "org.iso.23220.photoid.1": {
      "format": "mso_mdoc",
      "doctype": "org.iso.23220.photoid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake Photo ID (ISO/IEC TS 23220-4) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Photo ID"
          }
        ]
      },
      "scope": "org.iso.23220.photoid.1"
    },
    "org.iso.18013.5.1.mDL.attestation": {
      "format": "mso_mdoc",
      "doctype": "org.iso.18013.5.1.mDL",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake mDL (ISO 18013-5): Attestation 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Mobile Driver\u0027s License"
          }
        ]
      },
      "scope": "org.iso.18013.5.1.mDL.attestation"
    },
    "eu.europa.ec.eudi.pid.1.nobinding": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (No Holder Binding) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake PID without cryptographic holder binding"
          }
        ]
      },
      "scope": "eudi.pid.1.nobinding"
    },
    "net.openid.examples.certification.1.sdjwtvc": {
      "format": "dc+sd-jwt",
      "vct": "urn:openid:example:certification:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake OpenID Certification 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Certification"
          }
        ]
      },
      "scope": "openid.example.cert.1"
    },
    "net.openid.examples.certification.1.mdoc": {
      "format": "mso_mdoc",
      "doctype": "net.openid.examples.certification.1.mdoc",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake OpenID Certification (mdoc) 2fUH63O6zpROXOG",
            "description": "OpenID Conformance Test Fake Certification"
          }
        ]
      },
      "scope": "openid.example.cert.1"
    }
  }
}
outgoing_headers
{
  "headers": {
    "Content-Type": [
      "application/json"
    ]
  }
}
outgoing_path

                                
2026-11-12 10:34:14 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/json",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "accept-language": "en-US",
  "sec-ch-ua-mobile": "?0",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
Get OAuth Authorization Metadata
2026-11-12 10:34:14 SUCCESS
EnsureIncomingRequestMethodIsGet
Client correctly used http GET method
2026-11-12 10:34:14 SUCCESS
VCICheckOAuthAuthorizationServerMetadataRequestUrl
OAuth authorization server metadata request is for correct URL
request_url
https://localhost.emobix.co.uk:8443/.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test
2026-11-12 10:34:14 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing_status_code
200
outgoing_body
{
  "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/authorize",
  "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/token",
  "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/register",
  "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/token",
    "registration_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/register",
    "userinfo_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/userinfo",
    "pushed_authorization_request_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/par"
  },
  "response_types_supported": [
    "code"
  ],
  "authorization_response_iss_parameter_supported": true,
  "code_challenge_methods_supported": [
    "S256"
  ],
  "id_token_signing_alg_values_supported": [
    "ES256"
  ],
  "dpop_signing_alg_values_supported": [
    "PS256",
    "ES256",
    "EdDSA",
    "Ed25519"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ],
  "pushed_authorization_request_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/par",
  "require_pushed_authorization_requests": true,
  "token_endpoint_auth_signing_alg_values_supported": [
    "PS256",
    "ES256",
    "EdDSA",
    "Ed25519"
  ],
  "status_list_aggregation_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/statuslists"
}
outgoing_headers
{
  "headers": {
    "Content-Type": [
      "application/json"
    ]
  }
}
outgoing_path

                                
2026-11-12 10:34:14 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /test/a/siros-wallet-vci-test/token
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vci-test/token",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "content-length": "715",
  "sec-ch-ua-platform": "\"Windows\"",
  "accept-language": "en-US",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "sec-ch-ua-mobile": "?0",
  "dpop": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJ5N2NCVWRvT0VLVGNpck5rU25NM3F3IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvdG9rZW4iLCJpYXQiOjE3OTQ0Nzk2NTR9.6D0QSk4baJkTp2KnyEPX_Fay3VOnIqXxNWbKzTeaOAf7GHrl4bQjPHgPotoxRCO2TQiDSMX4m6o0GaclGONG8g",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/test/a/siros-wallet-vci-test/token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "rLYdCMIs98WnMoYke32AmeCJh5Q2EE30",
  "redirect_uri": "http://localhost:3010/",
  "client_id": "siros-wallet-test",
  "code_verifier": "SOu9y7LBLWe4rA-yepMlqNxCWKvvRbPpTnWGKs594Hc",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
  "client_assertion": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6ImI3OGQ1YzA3ZWE2MDE3Nzk1NmIwOTZjMCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.XnXjTNwvDcLAFe_jRfopjSPo8J_VAM0W8hLBrfJ3H_sTwCRjq5nbvvW9bcdbRMfvcWozyl_FEbdbefN-GXJofg"
}
incoming_method
POST
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=rLYdCMIs98WnMoYke32AmeCJh5Q2EE30&redirect_uri=http%3A%2F%2Flocalhost%3A3010%2F&client_id=siros-wallet-test&code_verifier=SOu9y7LBLWe4rA-yepMlqNxCWKvvRbPpTnWGKs594Hc&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6ImI3OGQ1YzA3ZWE2MDE3Nzk1NmIwOTZjMCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.XnXjTNwvDcLAFe_jRfopjSPo8J_VAM0W8hLBrfJ3H_sTwCRjq5nbvvW9bcdbRMfvcWozyl_FEbdbefN-GXJofg
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls12WithBCP195SecureCipherOrTls13
Found TLS 1.3 connection
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
Token endpoint
2026-11-12 10:34:14 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
siros-wallet-test
2026-11-12 10:34:14 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6ImI3OGQ1YzA3ZWE2MDE3Nzk1NmIwOTZjMCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.XnXjTNwvDcLAFe_jRfopjSPo8J_VAM0W8hLBrfJ3H_sTwCRjq5nbvvW9bcdbRMfvcWozyl_FEbdbefN-GXJofg",
  "header": {
    "kid": "client-key-1",
    "typ": "JWT",
    "alg": "ES256"
  },
  "claims": {
    "aud": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
    "sub": "siros-wallet-test",
    "iss": "siros-wallet-test",
    "exp": 1794479954,
    "iat": 1794479654,
    "jti": "b78d5c07ea60177956b096c0"
  }
}
2026-11-12 10:34:14
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2026-11-12 10:34:14 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6ImI3OGQ1YzA3ZWE2MDE3Nzk1NmIwOTZjMCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.XnXjTNwvDcLAFe_jRfopjSPo8J_VAM0W8hLBrfJ3H_sTwCRjq5nbvvW9bcdbRMfvcWozyl_FEbdbefN-GXJofg
2026-11-12 10:34:14 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2026-11-12 10:34:14 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2026-11-12 10:34:14 SUCCESS
CheckForClientAssertionJtiReuse
No reuse found for client_assertion JWT for jti=b78d5c07ea60177956b096c0
2026-11-12 10:34:14 SUCCESS
ValidateClientAssertionAudClaimIsIssuerAsString
private_key_jwt client Assertion 'aud' claim matches the authentication server issuer url
2026-11-12 10:34:14 SUCCESS
ExtractDpopProofFromHeader
Found and parsed the incoming_dpop_proof from incoming_request
value
eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJ5N2NCVWRvT0VLVGNpck5rU25NM3F3IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvdG9rZW4iLCJpYXQiOjE3OTQ0Nzk2NTR9.6D0QSk4baJkTp2KnyEPX_Fay3VOnIqXxNWbKzTeaOAf7GHrl4bQjPHgPotoxRCO2TQiDSMX4m6o0GaclGONG8g
header
{
  "typ": "dpop+jwt",
  "alg": "ES256",
  "jwk": {
    "kty": "EC",
    "crv": "P-256",
    "x": "Uvy7MnuyUQAjN5S8vt6WXrMV3DLua96zJVpFxTxyjSU",
    "y": "U_NR7GsLGYIrbCtvskTqQR-IIsG2g3EkkKd0igkHg_0"
  }
}
claims
{
  "htm": "POST",
  "htu": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/token",
  "iat": 1794479654,
  "jti": "y7cBUdoOEKTcirNkSnM3qw"
}
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofTokenRequest
DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofIat
DPoP Proof iat value passed validation checks
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofNbf
DPoP Proof nbf value passed validation checks
2026-11-12 10:34:14 SUCCESS
EnsureDpopProofJtiNotAlreadyUsed
Proof jti seems to be unique to this request
jti
y7cBUdoOEKTcirNkSnM3qw
2026-11-12 10:34:14
ValidateTokenEndpointDpopProofNonce
DPoP Proof nonce not supplied
expected
qzoICBPQkmtogFbeZVNSFbtDdYzTajdPDnwwiWgEwCzVSCaGMj0442317021(?'@]{'{&?&#{@)]].^/(:?-?^$?-<
2026-11-12 10:34:14
ValidateTokenEndpointDpopProofNonce
Token endpoint DPoP nonce is invalid
expected
qzoICBPQkmtogFbeZVNSFbtDdYzTajdPDnwwiWgEwCzVSCaGMj0442317021(?'@]{'{&?&#{@)]].^/(:?-?^$?-<
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofSignature
DPoP Proof signature validated
DPoP Proof
eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJ5N2NCVWRvT0VLVGNpck5rU25NM3F3IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvdG9rZW4iLCJpYXQiOjE3OTQ0Nzk2NTR9.6D0QSk4baJkTp2KnyEPX_Fay3VOnIqXxNWbKzTeaOAf7GHrl4bQjPHgPotoxRCO2TQiDSMX4m6o0GaclGONG8g
2026-11-12 10:34:14 SUCCESS
ValidateAuthorizationCodeDpopBindingKey
Authorization request does not use DPoP authorization code binding
dpop_jkt
uzkARFdo_iUaRZZuHjiMgyeVA9VNw9XtryrVY5oyYYs
2026-11-12 10:34:14
CreateTokenEndpointDpopErrorResponse
Condition ran but did not log anything
2026-11-12 10:34:14 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing_status_code
400
outgoing_body
{
  "error": "use_dpop_nonce",
  "error_description": "Authorization server requires nonce in DPoP proof"
}
outgoing_headers
{
  "headers": {
    "DPoP-Nonce": [
      "qzoICBPQkmtogFbeZVNSFbtDdYzTajdPDnwwiWgEwCzVSCaGMj0442317021(?\u0027@]{\u0027{\u0026?\u0026#{@)]].^/(:?-?^$?-\u003c"
    ]
  }
}
outgoing_path
token
2026-11-12 10:34:14 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /test/a/siros-wallet-vci-test/token
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vci-test/token",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "content-length": "715",
  "sec-ch-ua-platform": "\"Windows\"",
  "accept-language": "en-US",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "sec-ch-ua-mobile": "?0",
  "dpop": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJ4c2FYWUhiWlhxZkktVkhOUGx5dVFnIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvdG9rZW4iLCJpYXQiOjE3OTQ0Nzk2NTQsIm5vbmNlIjoicXpvSUNCUFFrbXRvZ0ZiZVpWTlNGYnREZFl6VGFqZFBEbnd3aVdnRXdDelZTQ2FHTWowNDQyMzE3MDIxKD8nQF17J3smPyYje0ApXV0uXi8oOj8tP14kPy08In0.0We73_4x8tBL19voXwnZAlcVue0Q3hVCi3PFCPlxQ4zpSQ8iLjd50isMbv8DS59uxgDxPgR0hvtn0MgxLV4i9g",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/json",
  "content-type": "application/x-www-form-urlencoded",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/test/a/siros-wallet-vci-test/token
incoming_body_form_params
{
  "grant_type": "authorization_code",
  "code": "rLYdCMIs98WnMoYke32AmeCJh5Q2EE30",
  "redirect_uri": "http://localhost:3010/",
  "client_id": "siros-wallet-test",
  "code_verifier": "SOu9y7LBLWe4rA-yepMlqNxCWKvvRbPpTnWGKs594Hc",
  "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
  "client_assertion": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjBhN2RhNjNlNzlhNDRkN2JlM2M3YzgwZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.EGYIsw4n4FCUVAOiUIki9bz7HCfOOVibs8dooaHYjg1bW1cTv9EFCJ5NKI1l-B5FX5fs6TqcX5AjzRNbFrjWVw"
}
incoming_method
POST
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
grant_type=authorization_code&code=rLYdCMIs98WnMoYke32AmeCJh5Q2EE30&redirect_uri=http%3A%2F%2Flocalhost%3A3010%2F&client_id=siros-wallet-test&code_verifier=SOu9y7LBLWe4rA-yepMlqNxCWKvvRbPpTnWGKs594Hc&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjBhN2RhNjNlNzlhNDRkN2JlM2M3YzgwZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.EGYIsw4n4FCUVAOiUIki9bz7HCfOOVibs8dooaHYjg1bW1cTv9EFCJ5NKI1l-B5FX5fs6TqcX5AjzRNbFrjWVw
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls12WithBCP195SecureCipherOrTls13
Found TLS 1.3 connection
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
Token endpoint
2026-11-12 10:34:14 SUCCESS
CheckClientIdMatchesOnTokenRequestIfPresent
Extracted client_id matches the expected value
client_id
siros-wallet-test
2026-11-12 10:34:14 SUCCESS
ExtractClientAssertion
Parsed client assertion
client_assertion
{
  "value": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjBhN2RhNjNlNzlhNDRkN2JlM2M3YzgwZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.EGYIsw4n4FCUVAOiUIki9bz7HCfOOVibs8dooaHYjg1bW1cTv9EFCJ5NKI1l-B5FX5fs6TqcX5AjzRNbFrjWVw",
  "header": {
    "kid": "client-key-1",
    "typ": "JWT",
    "alg": "ES256"
  },
  "claims": {
    "aud": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
    "sub": "siros-wallet-test",
    "iss": "siros-wallet-test",
    "exp": 1794479954,
    "iat": 1794479654,
    "jti": "0a7da63e79a44d7be3c7c80d"
  }
}
2026-11-12 10:34:14
EnsureClientAssertionSignatureAlgorithmMatchesRegistered
token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used
2026-11-12 10:34:14 SUCCESS
ValidateClientAssertionSignature
client_assertion signature validated
client_assertion
eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDQ3OTk1NCwiaWF0IjoxNzk0NDc5NjU0LCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjBhN2RhNjNlNzlhNDRkN2JlM2M3YzgwZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.EGYIsw4n4FCUVAOiUIki9bz7HCfOOVibs8dooaHYjg1bW1cTv9EFCJ5NKI1l-B5FX5fs6TqcX5AjzRNbFrjWVw
2026-11-12 10:34:14 SUCCESS
EnsureClientAssertionTypeIsJwt
Found JWT assertion type
assertion type
urn:ietf:params:oauth:client-assertion-type:jwt-bearer
2026-11-12 10:34:14 SUCCESS
ValidateClientAssertionClaims
Client Assertion passed all validation checks
2026-11-12 10:34:14 SUCCESS
CheckForClientAssertionJtiReuse
No reuse found for client_assertion JWT for jti=0a7da63e79a44d7be3c7c80d
2026-11-12 10:34:14 SUCCESS
ValidateClientAssertionAudClaimIsIssuerAsString
private_key_jwt client Assertion 'aud' claim matches the authentication server issuer url
2026-11-12 10:34:14 SUCCESS
ExtractDpopProofFromHeader
Found and parsed the incoming_dpop_proof from incoming_request
value
eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJ4c2FYWUhiWlhxZkktVkhOUGx5dVFnIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvdG9rZW4iLCJpYXQiOjE3OTQ0Nzk2NTQsIm5vbmNlIjoicXpvSUNCUFFrbXRvZ0ZiZVpWTlNGYnREZFl6VGFqZFBEbnd3aVdnRXdDelZTQ2FHTWowNDQyMzE3MDIxKD8nQF17J3smPyYje0ApXV0uXi8oOj8tP14kPy08In0.0We73_4x8tBL19voXwnZAlcVue0Q3hVCi3PFCPlxQ4zpSQ8iLjd50isMbv8DS59uxgDxPgR0hvtn0MgxLV4i9g
header
{
  "typ": "dpop+jwt",
  "alg": "ES256",
  "jwk": {
    "kty": "EC",
    "crv": "P-256",
    "x": "Uvy7MnuyUQAjN5S8vt6WXrMV3DLua96zJVpFxTxyjSU",
    "y": "U_NR7GsLGYIrbCtvskTqQR-IIsG2g3EkkKd0igkHg_0"
  }
}
claims
{
  "htm": "POST",
  "htu": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/token",
  "iat": 1794479654,
  "nonce": "qzoICBPQkmtogFbeZVNSFbtDdYzTajdPDnwwiWgEwCzVSCaGMj0442317021(?\u0027@]{\u0027{\u0026?\u0026#{@)]].^/(:?-?^$?-\u003c",
  "jti": "xsaXYHbZXqfI-VHNPlyuQg"
}
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofTokenRequest
DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofIat
DPoP Proof iat value passed validation checks
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofNbf
DPoP Proof nbf value passed validation checks
2026-11-12 10:34:14 SUCCESS
EnsureDpopProofJtiNotAlreadyUsed
Proof jti seems to be unique to this request
jti
xsaXYHbZXqfI-VHNPlyuQg
2026-11-12 10:34:14 SUCCESS
ValidateTokenEndpointDpopProofNonce
Token endpoint DPoP nonce matches expected value
expected
qzoICBPQkmtogFbeZVNSFbtDdYzTajdPDnwwiWgEwCzVSCaGMj0442317021(?'@]{'{&?&#{@)]].^/(:?-?^$?-<
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofSignature
DPoP Proof signature validated
DPoP Proof
eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJ4c2FYWUhiWlhxZkktVkhOUGx5dVFnIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvdG9rZW4iLCJpYXQiOjE3OTQ0Nzk2NTQsIm5vbmNlIjoicXpvSUNCUFFrbXRvZ0ZiZVpWTlNGYnREZFl6VGFqZFBEbnd3aVdnRXdDelZTQ2FHTWowNDQyMzE3MDIxKD8nQF17J3smPyYje0ApXV0uXi8oOj8tP14kPy08In0.0We73_4x8tBL19voXwnZAlcVue0Q3hVCi3PFCPlxQ4zpSQ8iLjd50isMbv8DS59uxgDxPgR0hvtn0MgxLV4i9g
2026-11-12 10:34:14 SUCCESS
ValidateAuthorizationCodeDpopBindingKey
Authorization request does not use DPoP authorization code binding
dpop_jkt
uzkARFdo_iUaRZZuHjiMgyeVA9VNw9XtryrVY5oyYYs
2026-11-12 10:34:14 SUCCESS
ValidateAuthorizationCode
Found authorization code
authorization_code
rLYdCMIs98WnMoYke32AmeCJh5Q2EE30
2026-11-12 10:34:14 SUCCESS
ValidateRedirectUri
Found redirect uri
redirect_uri
http://localhost:3010/
2026-11-12 10:34:14 SUCCESS
ValidateCodeVerifierWithS256
Validated code_verifier successfully
code_challenge_method
S256
code_verifier
SOu9y7LBLWe4rA-yepMlqNxCWKvvRbPpTnWGKs594Hc
code_challenge
94HnsheteMH63iQRf7duWde2qHlYBI9Ov-4b_k1pLvU
2026-11-12 10:34:14 SUCCESS
EnsureMinimumPkceCodeVerifierEntropy
Calculated shannon entropy seems sufficient
actual
212.5744969500267
expected
180.0
value
SOu9y7LBLWe4rA-yepMlqNxCWKvvRbPpTnWGKs594Hc
2026-11-12 10:34:14 SUCCESS
EnsureMinimumPkceCodeVerifierLength
PKCE code verifier is of sufficient length
actual
344
required
344
2026-11-12 10:34:14 SUCCESS
EnsurePkceCodeVerifierNotUsed
Code verifier has not been used
code_verifier
SOu9y7LBLWe4rA-yepMlqNxCWKvvRbPpTnWGKs594Hc
2026-11-12 10:34:14 SUCCESS
GenerateDpopAccessToken
Generated DPoP access token and jkt for DPoP Proof JWK
dpop_access_token
{
  "value": "0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl",
  "jkt": "uzkARFdo_iUaRZZuHjiMgyeVA9VNw9XtryrVY5oyYYs"
}
2026-11-12 10:34:14
GenerateAccessTokenExpiration
Set access_token_expiration to 900
2026-11-12 10:34:14 SUCCESS
CalculateAtHash
Successful at_hash encoding
at_hash
cHQwjHVyTlrC9jncwX5syQ
2026-11-12 10:34:14
CreateRefreshToken
Created refresh token
refresh_token
EjzAvhQfNabRFxqYHpYNfZlXMsRvaSnDZcrhHhRSbpzjQeYKlE6962614688^\`')
2026-11-12 10:34:14 SUCCESS
CreateTokenEndpointResponse
Created token endpoint response
{
  "access_token": "0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl",
  "token_type": "DPoP",
  "refresh_token": "EjzAvhQfNabRFxqYHpYNfZlXMsRvaSnDZcrhHhRSbpzjQeYKlE6962614688^\\`\u0027)",
  "scope": "eudi.pid.1",
  "expires_in": 900
}
token_endpoint_response_headers
{}
2026-11-12 10:34:14 SUCCESS
CreateAuthorizationServerDpopNonce
Created Authorization Server DPoP nonce
authorization_server_dpop_nonce
UzTFZrMKZpXOVowQzlKgKKutDKXtZNUJGNSrwrovPPpgeuuYLg8555472921_~/!^,]:-[&(/=|=]-!]~!!:@]~{`&
2026-11-12 10:34:14 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing_status_code
200
outgoing_body
{
  "access_token": "0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl",
  "token_type": "DPoP",
  "refresh_token": "EjzAvhQfNabRFxqYHpYNfZlXMsRvaSnDZcrhHhRSbpzjQeYKlE6962614688^\\`\u0027)",
  "scope": "eudi.pid.1",
  "expires_in": 900
}
outgoing_headers
{
  "headers": {}
}
outgoing_path
token
2026-11-12 10:34:14 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /test/a/siros-wallet-vci-test/nonce
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vci-test/nonce",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "content-length": "0",
  "sec-ch-ua-platform": "\"Windows\"",
  "dpop": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJXdjQyMjA4TFloSFdzSDdOY2JNcmRRIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3Qvbm9uY2UiLCJpYXQiOjE3OTQ0Nzk2NTR9.NmgqWKI0vkDu7AFxgasfWAhBydBjt9BZ-v7qU1g5e5IHS30r2cpW5-MOUY4l5woYwExZlxIxuBdUT8X1NAHjmA",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/json",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "accept-language": "en-US",
  "sec-ch-ua-mobile": "?0",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/test/a/siros-wallet-vci-test/nonce
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls12WithBCP195SecureCipherOrTls13
Found TLS 1.3 connection
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
Nonce endpoint
2026-11-12 10:34:14 SUCCESS
CreateFapiInteractionIdIfNeeded
Created new FAPI interaction ID
fapi_interaction_id
38c0793e-0594-4c3d-88f1-832ee5d08ef0
2026-11-12 10:34:14 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2026-11-12 10:34:14 SUCCESS
GenerateCredentialNonce
Created credential nonce
nonce
nnkehuJ7DOuWqGWoZztOnssI1qskpjcd
2026-11-12 10:34:14 SUCCESS
GenerateCredentialNonceResponse
Created credential nonce response
credential_issuer_nonce_response
{
  "c_nonce": "nnkehuJ7DOuWqGWoZztOnssI1qskpjcd"
}
credential_nonce_response_headers
{
  "x-fapi-interaction-id": "38c0793e-0594-4c3d-88f1-832ee5d08ef0",
  "content-type": "application/json",
  "Cache-Control": "no-store"
}
2026-11-12 10:34:14 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing_status_code
200
outgoing_body
{
  "c_nonce": "nnkehuJ7DOuWqGWoZztOnssI1qskpjcd"
}
outgoing_headers
{
  "headers": {
    "x-fapi-interaction-id": [
      "38c0793e-0594-4c3d-88f1-832ee5d08ef0"
    ],
    "content-type": [
      "application/json"
    ],
    "Cache-Control": [
      "no-store"
    ]
  }
}
outgoing_path
nonce
2026-11-12 10:34:14 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /test/a/siros-wallet-vci-test/credential
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vci-test/credential",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "content-length": "752",
  "sec-ch-ua-platform": "\"Windows\"",
  "authorization": "DPoP 0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl",
  "accept-language": "en-US",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "sec-ch-ua-mobile": "?0",
  "dpop": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiI3c0kwbFQ0cWVodXBlNUNBUmtBa0R3IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvY3JlZGVudGlhbCIsImlhdCI6MTc5NDQ3OTY1NCwiYXRoIjoiY0hRd2pIVnlUbHJDOWpuY3dYNXN5Zl9hXzNZMVJJYnNYeGE1alFZQWp2OCJ9.8WY5ImIpBvY-DQIdqRbbDA6sAVTeOjwMXbmZPSBRQJQ5f2nA3DsgrvqJWu4sUWYBpAEAe7u1jN0uo5Upa2lNOA",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/json",
  "content-type": "application/json",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/test/a/siros-wallet-vci-test/credential
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
{"credential_configuration_id":"eu.europa.ec.eudi.pid.1","proofs":{"jwt":["eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6InN3NXJXQS13eDBJbFhNSkVNaTVKNUxJUVJFU2ttZjJmbU9OR3liS3hGaEkiLCJrdHkiOiJFQyIsIngiOiJ0dDkyaE9QdEVqZUcwU1A1djV3RFlMVi1Nd1VnS0hCSWhtQWtOZWtCc1hnIiwieSI6Im9DMGEtX080ZHR0UEwzOVNyNzM0NkROcERFOHF4R2FCZ21zLU5nQ1ZZS0UifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDQ3OTY1NCwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6Im5ua2VodUo3RE91V3FHV29aenRPbnNzSTFxc2twamNkIn0.psdiVO2XSNVX22jPfY6LQa9_bTsL0ll_lZp1GE44H98lMj-SYH4uhPx0U8S8SUFQhtKUApL_XxFrQi0243YKtA"]}}
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
{
  "credential_configuration_id": "eu.europa.ec.eudi.pid.1",
  "proofs": {
    "jwt": [
      "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6InN3NXJXQS13eDBJbFhNSkVNaTVKNUxJUVJFU2ttZjJmbU9OR3liS3hGaEkiLCJrdHkiOiJFQyIsIngiOiJ0dDkyaE9QdEVqZUcwU1A1djV3RFlMVi1Nd1VnS0hCSWhtQWtOZWtCc1hnIiwieSI6Im9DMGEtX080ZHR0UEwzOVNyNzM0NkROcERFOHF4R2FCZ21zLU5nQ1ZZS0UifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDQ3OTY1NCwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6Im5ua2VodUo3RE91V3FHV29aenRPbnNzSTFxc2twamNkIn0.psdiVO2XSNVX22jPfY6LQa9_bTsL0ll_lZp1GE44H98lMj-SYH4uhPx0U8S8SUFQhtKUApL_XxFrQi0243YKtA"
    ]
  }
}
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls12WithBCP195SecureCipherOrTls13
Found TLS 1.3 connection
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
Credential endpoint
2026-11-12 10:34:14 SUCCESS
VCIEnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2026-11-12 10:34:14 SUCCESS
ExtractDpopProofFromHeader
Found and parsed the incoming_dpop_proof from incoming_request
value
eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiI3c0kwbFQ0cWVodXBlNUNBUmtBa0R3IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvY3JlZGVudGlhbCIsImlhdCI6MTc5NDQ3OTY1NCwiYXRoIjoiY0hRd2pIVnlUbHJDOWpuY3dYNXN5Zl9hXzNZMVJJYnNYeGE1alFZQWp2OCJ9.8WY5ImIpBvY-DQIdqRbbDA6sAVTeOjwMXbmZPSBRQJQ5f2nA3DsgrvqJWu4sUWYBpAEAe7u1jN0uo5Upa2lNOA
header
{
  "typ": "dpop+jwt",
  "alg": "ES256",
  "jwk": {
    "kty": "EC",
    "crv": "P-256",
    "x": "Uvy7MnuyUQAjN5S8vt6WXrMV3DLua96zJVpFxTxyjSU",
    "y": "U_NR7GsLGYIrbCtvskTqQR-IIsG2g3EkkKd0igkHg_0"
  }
}
claims
{
  "htm": "POST",
  "ath": "cHQwjHVyTlrC9jncwX5syf_a_3Y1RIbsXxa5jQYAjv8",
  "htu": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/credential",
  "iat": 1794479654,
  "jti": "7sI0lT4qehupe5CARkAkDw"
}
2026-11-12 10:34:14 SUCCESS
ExtractDpopAccessTokenFromHeader
Found DPoP access token
DPoP token
0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofResourceRequest
DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofIat
DPoP Proof iat value passed validation checks
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofNbf
DPoP Proof nbf value passed validation checks
2026-11-12 10:34:14 SUCCESS
EnsureDpopProofJtiNotAlreadyUsed
Proof jti seems to be unique to this request
jti
7sI0lT4qehupe5CARkAkDw
2026-11-12 10:34:14
ValidateResourceEndpointDpopProofNonce
DPoP Proof nonce not supplied
expected
KWkkVDTLRixwsHTZtMGUhfmiKHQtmRxYCCWhPrICSYdErySpFv9717252767*]@(:!]*@[+-,'%})^_!#(%`(-&^=;
2026-11-12 10:34:14
ValidateResourceEndpointDpopProofNonce
Resource endpoint DPoP nonce is invalid
expected
KWkkVDTLRixwsHTZtMGUhfmiKHQtmRxYCCWhPrICSYdErySpFv9717252767*]@(:!]*@[+-,'%})^_!#(%`(-&^=;
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofSignature
DPoP Proof signature validated
DPoP Proof
eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiI3c0kwbFQ0cWVodXBlNUNBUmtBa0R3IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvY3JlZGVudGlhbCIsImlhdCI6MTc5NDQ3OTY1NCwiYXRoIjoiY0hRd2pIVnlUbHJDOWpuY3dYNXN5Zl9hXzNZMVJJYnNYeGE1alFZQWp2OCJ9.8WY5ImIpBvY-DQIdqRbbDA6sAVTeOjwMXbmZPSBRQJQ5f2nA3DsgrvqJWu4sUWYBpAEAe7u1jN0uo5Upa2lNOA
2026-11-12 10:34:14 SUCCESS
ValidateDpopAccessToken
DPoP Access Token is valid
DPoP Access Token
0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl
2026-11-12 10:34:14 SUCCESS
ValidateDpopAccessTokenJkt
DPoP Access Token is constrained to DPoP Proof JWK
DPoP Access Token
0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofAccessTokenHash
DPoP Proof ath claim matches DPoP access token hash
ath
cHQwjHVyTlrC9jncwX5syf_a_3Y1RIbsXxa5jQYAjv8
2026-11-12 10:34:14 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2026-11-12 10:34:14 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2026-11-12 10:34:14 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2026-11-12 10:34:14 SUCCESS
ValidateFAPIInteractionIdInResourceRequest
x-fapi-interaction-id in resource request headers is a valid UUID
interaction_id
38c0793e-0594-4c3d-88f1-832ee5d08ef0
2026-11-12 10:34:14 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2026-11-12 10:34:14
CreateResourceEndpointDpopErrorResponse
Condition ran but did not log anything
2026-11-12 10:34:14 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing_status_code
401
outgoing_body
outgoing_headers
{
  "headers": {
    "WWW-Authenticate": [
      "DPoP error\u003d\"use_dpop_nonce\", error_description\u003d\"Resource server requires nonce in DPoP proof\""
    ],
    "DPoP-Nonce": [
      "KWkkVDTLRixwsHTZtMGUhfmiKHQtmRxYCCWhPrICSYdErySpFv9717252767*]@(:!]*@[+-,\u0027%})^_!#(%`(-\u0026^\u003d;"
    ]
  }
}
outgoing_path
credential
2026-11-12 10:34:14 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /test/a/siros-wallet-vci-test/credential
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vci-test/credential",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "content-length": "752",
  "sec-ch-ua-platform": "\"Windows\"",
  "authorization": "DPoP 0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl",
  "accept-language": "en-US",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "sec-ch-ua-mobile": "?0",
  "dpop": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJieXBkUGhpM0NvMTlyTWRsUTlzUnVnIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvY3JlZGVudGlhbCIsImlhdCI6MTc5NDQ3OTY1NCwiYXRoIjoiY0hRd2pIVnlUbHJDOWpuY3dYNXN5Zl9hXzNZMVJJYnNYeGE1alFZQWp2OCIsIm5vbmNlIjoiS1dra1ZEVExSaXh3c0hUWnRNR1VoZm1pS0hRdG1SeFlDQ1doUHJJQ1NZZEVyeVNwRnY5NzE3MjUyNzY3Kl1AKDohXSpAWystLCclfSleXyEjKCVgKC0mXj07In0.u-ermAnlRCBJ2tVwYxW_OSXFhFjxQ7WajZvk7yQH3t6jJ3EIYgIuQpV4ba_VWr1nZvnm1MgIrS1TkVL1Oak4ng",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/json",
  "content-type": "application/json",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/test/a/siros-wallet-vci-test/credential
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
{"credential_configuration_id":"eu.europa.ec.eudi.pid.1","proofs":{"jwt":["eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6InN3NXJXQS13eDBJbFhNSkVNaTVKNUxJUVJFU2ttZjJmbU9OR3liS3hGaEkiLCJrdHkiOiJFQyIsIngiOiJ0dDkyaE9QdEVqZUcwU1A1djV3RFlMVi1Nd1VnS0hCSWhtQWtOZWtCc1hnIiwieSI6Im9DMGEtX080ZHR0UEwzOVNyNzM0NkROcERFOHF4R2FCZ21zLU5nQ1ZZS0UifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDQ3OTY1NCwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6Im5ua2VodUo3RE91V3FHV29aenRPbnNzSTFxc2twamNkIn0.psdiVO2XSNVX22jPfY6LQa9_bTsL0ll_lZp1GE44H98lMj-SYH4uhPx0U8S8SUFQhtKUApL_XxFrQi0243YKtA"]}}
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
{
  "credential_configuration_id": "eu.europa.ec.eudi.pid.1",
  "proofs": {
    "jwt": [
      "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6InN3NXJXQS13eDBJbFhNSkVNaTVKNUxJUVJFU2ttZjJmbU9OR3liS3hGaEkiLCJrdHkiOiJFQyIsIngiOiJ0dDkyaE9QdEVqZUcwU1A1djV3RFlMVi1Nd1VnS0hCSWhtQWtOZWtCc1hnIiwieSI6Im9DMGEtX080ZHR0UEwzOVNyNzM0NkROcERFOHF4R2FCZ21zLU5nQ1ZZS0UifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDQ3OTY1NCwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6Im5ua2VodUo3RE91V3FHV29aenRPbnNzSTFxc2twamNkIn0.psdiVO2XSNVX22jPfY6LQa9_bTsL0ll_lZp1GE44H98lMj-SYH4uhPx0U8S8SUFQhtKUApL_XxFrQi0243YKtA"
    ]
  }
}
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls12WithBCP195SecureCipherOrTls13
Found TLS 1.3 connection
2026-11-12 10:34:14 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
Credential endpoint
2026-11-12 10:34:14 SUCCESS
VCIEnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2026-11-12 10:34:14 SUCCESS
ExtractDpopProofFromHeader
Found and parsed the incoming_dpop_proof from incoming_request
value
eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJieXBkUGhpM0NvMTlyTWRsUTlzUnVnIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvY3JlZGVudGlhbCIsImlhdCI6MTc5NDQ3OTY1NCwiYXRoIjoiY0hRd2pIVnlUbHJDOWpuY3dYNXN5Zl9hXzNZMVJJYnNYeGE1alFZQWp2OCIsIm5vbmNlIjoiS1dra1ZEVExSaXh3c0hUWnRNR1VoZm1pS0hRdG1SeFlDQ1doUHJJQ1NZZEVyeVNwRnY5NzE3MjUyNzY3Kl1AKDohXSpAWystLCclfSleXyEjKCVgKC0mXj07In0.u-ermAnlRCBJ2tVwYxW_OSXFhFjxQ7WajZvk7yQH3t6jJ3EIYgIuQpV4ba_VWr1nZvnm1MgIrS1TkVL1Oak4ng
header
{
  "typ": "dpop+jwt",
  "alg": "ES256",
  "jwk": {
    "kty": "EC",
    "crv": "P-256",
    "x": "Uvy7MnuyUQAjN5S8vt6WXrMV3DLua96zJVpFxTxyjSU",
    "y": "U_NR7GsLGYIrbCtvskTqQR-IIsG2g3EkkKd0igkHg_0"
  }
}
claims
{
  "htm": "POST",
  "ath": "cHQwjHVyTlrC9jncwX5syf_a_3Y1RIbsXxa5jQYAjv8",
  "htu": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/credential",
  "iat": 1794479654,
  "nonce": "KWkkVDTLRixwsHTZtMGUhfmiKHQtmRxYCCWhPrICSYdErySpFv9717252767*]@(:!]*@[+-,\u0027%})^_!#(%`(-\u0026^\u003d;",
  "jti": "bypdPhi3Co19rMdlQ9sRug"
}
2026-11-12 10:34:14 SUCCESS
ExtractDpopAccessTokenFromHeader
Found DPoP access token
DPoP token
0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofResourceRequest
DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofIat
DPoP Proof iat value passed validation checks
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofNbf
DPoP Proof nbf value passed validation checks
2026-11-12 10:34:14 SUCCESS
EnsureDpopProofJtiNotAlreadyUsed
Proof jti seems to be unique to this request
jti
bypdPhi3Co19rMdlQ9sRug
2026-11-12 10:34:14 SUCCESS
ValidateResourceEndpointDpopProofNonce
Resource endpoint DPoP nonce matches expected value
expected
KWkkVDTLRixwsHTZtMGUhfmiKHQtmRxYCCWhPrICSYdErySpFv9717252767*]@(:!]*@[+-,'%})^_!#(%`(-&^=;
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofSignature
DPoP Proof signature validated
DPoP Proof
eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJieXBkUGhpM0NvMTlyTWRsUTlzUnVnIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvY3JlZGVudGlhbCIsImlhdCI6MTc5NDQ3OTY1NCwiYXRoIjoiY0hRd2pIVnlUbHJDOWpuY3dYNXN5Zl9hXzNZMVJJYnNYeGE1alFZQWp2OCIsIm5vbmNlIjoiS1dra1ZEVExSaXh3c0hUWnRNR1VoZm1pS0hRdG1SeFlDQ1doUHJJQ1NZZEVyeVNwRnY5NzE3MjUyNzY3Kl1AKDohXSpAWystLCclfSleXyEjKCVgKC0mXj07In0.u-ermAnlRCBJ2tVwYxW_OSXFhFjxQ7WajZvk7yQH3t6jJ3EIYgIuQpV4ba_VWr1nZvnm1MgIrS1TkVL1Oak4ng
2026-11-12 10:34:14 SUCCESS
ValidateDpopAccessToken
DPoP Access Token is valid
DPoP Access Token
0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl
2026-11-12 10:34:14 SUCCESS
ValidateDpopAccessTokenJkt
DPoP Access Token is constrained to DPoP Proof JWK
DPoP Access Token
0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl
2026-11-12 10:34:14 SUCCESS
ValidateDpopProofAccessTokenHash
DPoP Proof ath claim matches DPoP access token hash
ath
cHQwjHVyTlrC9jncwX5syf_a_3Y1RIbsXxa5jQYAjv8
2026-11-12 10:34:14 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2026-11-12 10:34:14 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2026-11-12 10:34:14 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2026-11-12 10:34:14 SUCCESS
ValidateFAPIInteractionIdInResourceRequest
x-fapi-interaction-id in resource request headers is a valid UUID
interaction_id
38c0793e-0594-4c3d-88f1-832ee5d08ef0
2026-11-12 10:34:14 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2026-11-12 10:34:14 SUCCESS
VCIEnsureCredentialRequestUsesApplicationJson
Credential request Content-Type is application/json
content_type
application/json
2026-11-12 10:34:14 SUCCESS
VCIEnsureCredentialRequestEncryptedIfResponseEncryptionRequested
Plaintext credential request body does not include credential_response_encryption
content_type
application/json
2026-11-12 10:34:14 SUCCESS
VCIValidateCredentialRequestStructure
OID4VCI Credential Request input is valid
input
{
  "credential_configuration_id": "eu.europa.ec.eudi.pid.1",
  "proofs": {
    "jwt": [
      "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6InN3NXJXQS13eDBJbFhNSkVNaTVKNUxJUVJFU2ttZjJmbU9OR3liS3hGaEkiLCJrdHkiOiJFQyIsIngiOiJ0dDkyaE9QdEVqZUcwU1A1djV3RFlMVi1Nd1VnS0hCSWhtQWtOZWtCc1hnIiwieSI6Im9DMGEtX080ZHR0UEwzOVNyNzM0NkROcERFOHF4R2FCZ21zLU5nQ1ZZS0UifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDQ3OTY1NCwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6Im5ua2VodUo3RE91V3FHV29aenRPbnNzSTFxc2twamNkIn0.psdiVO2XSNVX22jPfY6LQa9_bTsL0ll_lZp1GE44H98lMj-SYH4uhPx0U8S8SUFQhtKUApL_XxFrQi0243YKtA"
    ]
  }
}
schema_link
/json-schemas/oid4vci/credential_request-1_0.json
2026-11-12 10:34:14 SUCCESS
CheckForUnexpectedParametersInCredentialRequest
No unknown properties were found in the OID4VCI Credential Request
input
{
  "credential_configuration_id": "eu.europa.ec.eudi.pid.1",
  "proofs": {
    "jwt": [
      "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6InN3NXJXQS13eDBJbFhNSkVNaTVKNUxJUVJFU2ttZjJmbU9OR3liS3hGaEkiLCJrdHkiOiJFQyIsIngiOiJ0dDkyaE9QdEVqZUcwU1A1djV3RFlMVi1Nd1VnS0hCSWhtQWtOZWtCc1hnIiwieSI6Im9DMGEtX080ZHR0UEwzOVNyNzM0NkROcERFOHF4R2FCZ21zLU5nQ1ZZS0UifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDQ3OTY1NCwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6Im5ua2VodUo3RE91V3FHV29aenRPbnNzSTFxc2twamNkIn0.psdiVO2XSNVX22jPfY6LQa9_bTsL0ll_lZp1GE44H98lMj-SYH4uhPx0U8S8SUFQhtKUApL_XxFrQi0243YKtA"
    ]
  }
}
schema_link
/json-schemas/oid4vci/credential_request-1_0.json
2026-11-12 10:34:14
VCIResolveRequestedCredentialConfigurationFromRequest
Found requested credential_configuration via credential_configuration_id eu.europa.ec.eudi.pid.1
credential_configuration_id
eu.europa.ec.eudi.pid.1
credential_configuration
{
  "format": "dc+sd-jwt",
  "vct": "urn:eudi:pid:1",
  "cryptographic_binding_methods_supported": [
    "jwk"
  ],
  "credential_signing_alg_values_supported": [
    "ES256"
  ],
  "proof_types_supported": {
    "jwt": {
      "proof_signing_alg_values_supported": [
        "ES256"
      ]
    }
  },
  "credential_metadata": {
    "display": [
      {
        "name": "Fake PID 2fUH63O6zpROXOG",
        "description": "OpenID Conformance Test Fake PID description"
      }
    ]
  },
  "scope": "eudi.pid.1"
}
2026-11-12 10:34:14 SUCCESS
VCIResolveRequestedCredentialConfigurationFromRequest
Resolved requested credential_configuration to eu.europa.ec.eudi.pid.1
credential_configuration
{
  "format": "dc+sd-jwt",
  "vct": "urn:eudi:pid:1",
  "cryptographic_binding_methods_supported": [
    "jwk"
  ],
  "credential_signing_alg_values_supported": [
    "ES256"
  ],
  "proof_types_supported": {
    "jwt": {
      "proof_signing_alg_values_supported": [
        "ES256"
      ]
    }
  },
  "credential_metadata": {
    "display": [
      {
        "name": "Fake PID 2fUH63O6zpROXOG",
        "description": "OpenID Conformance Test Fake PID description"
      }
    ]
  },
  "scope": "eudi.pid.1"
}
2026-11-12 10:34:14
VCIExtractCredentialRequestProof
Found proofs element in credential request
proofs
{
  "jwt": [
    "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6InN3NXJXQS13eDBJbFhNSkVNaTVKNUxJUVJFU2ttZjJmbU9OR3liS3hGaEkiLCJrdHkiOiJFQyIsIngiOiJ0dDkyaE9QdEVqZUcwU1A1djV3RFlMVi1Nd1VnS0hCSWhtQWtOZWtCc1hnIiwieSI6Im9DMGEtX080ZHR0UEwzOVNyNzM0NkROcERFOHF4R2FCZ21zLU5nQ1ZZS0UifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDQ3OTY1NCwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6Im5ua2VodUo3RE91V3FHV29aenRPbnNzSTFxc2twamNkIn0.psdiVO2XSNVX22jPfY6LQa9_bTsL0ll_lZp1GE44H98lMj-SYH4uhPx0U8S8SUFQhtKUApL_XxFrQi0243YKtA"
  ]
}
2026-11-12 10:34:14
VCIExtractCredentialRequestProof
Found 1 JWT(s) for 'jwt' proof.
jwts
[
  "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6InN3NXJXQS13eDBJbFhNSkVNaTVKNUxJUVJFU2ttZjJmbU9OR3liS3hGaEkiLCJrdHkiOiJFQyIsIngiOiJ0dDkyaE9QdEVqZUcwU1A1djV3RFlMVi1Nd1VnS0hCSWhtQWtOZWtCc1hnIiwieSI6Im9DMGEtX080ZHR0UEwzOVNyNzM0NkROcERFOHF4R2FCZ21zLU5nQ1ZZS0UifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDQ3OTY1NCwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6Im5ua2VodUo3RE91V3FHV29aenRPbnNzSTFxc2twamNkIn0.psdiVO2XSNVX22jPfY6LQa9_bTsL0ll_lZp1GE44H98lMj-SYH4uhPx0U8S8SUFQhtKUApL_XxFrQi0243YKtA"
]
2026-11-12 10:34:14 SUCCESS
VCIExtractCredentialRequestProof
Extracted 1 'jwt' proof(s) from credential request
proof_jwts
[
  {
    "value": "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6InN3NXJXQS13eDBJbFhNSkVNaTVKNUxJUVJFU2ttZjJmbU9OR3liS3hGaEkiLCJrdHkiOiJFQyIsIngiOiJ0dDkyaE9QdEVqZUcwU1A1djV3RFlMVi1Nd1VnS0hCSWhtQWtOZWtCc1hnIiwieSI6Im9DMGEtX080ZHR0UEwzOVNyNzM0NkROcERFOHF4R2FCZ21zLU5nQ1ZZS0UifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDQ3OTY1NCwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6Im5ua2VodUo3RE91V3FHV29aenRPbnNzSTFxc2twamNkIn0.psdiVO2XSNVX22jPfY6LQa9_bTsL0ll_lZp1GE44H98lMj-SYH4uhPx0U8S8SUFQhtKUApL_XxFrQi0243YKtA",
    "header": {
      "typ": "openid4vci-proof+jwt",
      "alg": "ES256",
      "jwk": {
        "kty": "EC",
        "crv": "P-256",
        "kid": "sw5rWA-wx0IlXMJEMi5J5LIQRESkmf2fmONGybKxFhI",
        "x": "tt92hOPtEjeG0SP5v5wDYLV-MwUgKHBIhmAkNekBsXg",
        "y": "oC0a-_O4dttPL39Sr7346DNpDE8qxGaBgms-NgCVYKE"
      }
    },
    "claims": {
      "aud": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
      "iss": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
      "iat": 1794479654,
      "nonce": "nnkehuJ7DOuWqGWoZztOnssI1qskpjcd"
    }
  }
]
proof_count
1
2026-11-12 10:34:14 SUCCESS
VCIEnsureSingleProofWhenBatchIssuanceNotAdvertised
The wallet sent a single proof
proofs_sent
1
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
Detected proof type jwt is allowed by credential_configuration_id: eu.europa.ec.eudi.pid.1
credential_configuration_id
eu.europa.ec.eudi.pid.1
proof_type
jwt
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
Found expected proof type: jwt
header
openid4vci-proof+jwt
proof_type
jwt
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
Found expected algorithm for proof type: jwt
algorithm
{
  "name": "ES256",
  "requirement": "RECOMMENDED"
}
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
Found public key by jwk header
jwk
{
  "kty": "EC",
  "crv": "P-256",
  "kid": "sw5rWA-wx0IlXMJEMi5J5LIQRESkmf2fmONGybKxFhI",
  "x": "tt92hOPtEjeG0SP5v5wDYLV-MwUgKHBIhmAkNekBsXg",
  "y": "oC0a-_O4dttPL39Sr7346DNpDE8qxGaBgms-NgCVYKE"
}
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
Detected an EC public key
kid
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
Detected EC public key with curve P-256
kid
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
Skipping nested key_attestation validation, as it is not required by credential_configuration_id: eu.europa.ec.eudi.pid.1
credential_configuration_id
eu.europa.ec.eudi.pid.1
key_attestation
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
Detected valid proof JWT for proof type: jwt
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
Detected expected nonce
nonce
nnkehuJ7DOuWqGWoZztOnssI1qskpjcd
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
JWT proof iat is within acceptable time window
max_accepted_iat
"Nov 12, 2026, 10:39:14 AM"
now
"Nov 12, 2026, 10:34:14 AM"
min_accepted_iat
"Nov 12, 2026, 10:29:14 AM"
iat
"Nov 12, 2026, 10:34:14 AM"
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
Found expected audience 'https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/' for proof type: jwt
audience
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/
proof_type
jwt
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
Successfully validated proof jwt
claims
{
  "aud": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "iss": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "iat": 1794479654,
  "nonce": "nnkehuJ7DOuWqGWoZztOnssI1qskpjcd"
}
jwt
eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6InN3NXJXQS13eDBJbFhNSkVNaTVKNUxJUVJFU2ttZjJmbU9OR3liS3hGaEkiLCJrdHkiOiJFQyIsIngiOiJ0dDkyaE9QdEVqZUcwU1A1djV3RFlMVi1Nd1VnS0hCSWhtQWtOZWtCc1hnIiwieSI6Im9DMGEtX080ZHR0UEwzOVNyNzM0NkROcERFOHF4R2FCZ21zLU5nQ1ZZS0UifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDQ3OTY1NCwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6Im5ua2VodUo3RE91V3FHV29aenRPbnNzSTFxc2twamNkIn0.psdiVO2XSNVX22jPfY6LQa9_bTsL0ll_lZp1GE44H98lMj-SYH4uhPx0U8S8SUFQhtKUApL_XxFrQi0243YKtA
2026-11-12 10:34:14
VCIValidateCredentialRequestJwtProof
Detected and invalidated expected nonce
nonce
nnkehuJ7DOuWqGWoZztOnssI1qskpjcd
2026-11-12 10:34:14 SUCCESS
VCIValidateCredentialRequestJwtProof
Successfully validated 1 proof jwt(s)
proof_count
1
2026-11-12 10:34:14
VCIValidateAttestedKeysInKeyAttestationFromJwtProof
Skipping key_attestation_jwt validation, as it is not present in the environment
2026-11-12 10:34:14 INFO
CreateFapiInteractionIdIfNeeded
Found existing FAPI interaction ID
fapi_interaction_id
38c0793e-0594-4c3d-88f1-832ee5d08ef0
2026-11-12 10:34:14
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Creating credential with format: dc+sd-jwt, credential_configuration: {"format":"dc+sd-jwt","vct":"urn:eudi:pid:1","cryptographic_binding_methods_supported":["jwk"],"credential_signing_alg_values_supported":["ES256"],"proof_types_supported":{"jwt":{"proof_signing_alg_values_supported":["ES256"]}},"credential_metadata":{"display":[{"name":"Fake PID 2fUH63O6zpROXOG","description":"OpenID Conformance Test Fake PID description"}]},"scope":"eudi.pid.1"}, variant credential_format: sd_jwt_vc
2026-11-12 10:34:14
CreateSdJwtCredential
Found 1 JWK(s) from jwt proofs
keys
[
  {
    "kty": "EC",
    "crv": "P-256",
    "kid": "sw5rWA-wx0IlXMJEMi5J5LIQRESkmf2fmONGybKxFhI",
    "x": "tt92hOPtEjeG0SP5v5wDYLV-MwUgKHBIhmAkNekBsXg",
    "y": "oC0a-_O4dttPL39Sr7346DNpDE8qxGaBgms-NgCVYKE"
  }
]
2026-11-12 10:34:14
CreateSdJwtCredential
Created urn:eudi:pid:1 in SD-JWT VC format
credential_count
1
credentials
[
  {
    "credential": "eyJ4NWMiOlsiTUlJQmF6Q0NBUktnQXdJQkFnSVVRWVQrcXZ6L3NvbTluYjZ2T0xCZWFINVFHVG93Q2dZSUtvWkl6ajBFQXdJd0VqRVFNQTRHQTFVRUF3d0hWR1Z6ZENCRFFUQWVGdzB5TmpBMU1ERXhOak16TkRkYUZ3MHlOekExTURFeE5qTXpORGRhTUJZeEZEQVNCZ05WQkFNTUMzUmxjM1F0YzJsbmJtVnlNRmt3RXdZSEtvWkl6ajBDQVFZSUtvWkl6ajBEQVFjRFFnQUVEQzlYOWxsN2o5SmFsK0FIdU1nUFJLRFZ1NlF4NTc1ZFM3anA2Qnl3ZWgyTlBvTjU4WVNob2h0M1dBTys1em9Sb1FKWG9iTktOSXFYUStPMG5vSm1RNk5DTUVBd0hRWURWUjBPQkJZRUZIeEF6MWp3OW1YSmxWZmNRTUZrY0RyZW9QNXJNQjhHQTFVZEl3UVlNQmFBRklxQzM0VDd6RjlYeHYxdE1lenRiKy84RndOeE1Bb0dDQ3FHU000OUJBTUNBMGNBTUVRQ0lCZkV6NnFYOTBNNDY1ZFJqUXpvOUtzcjdsanJsTi9mWnRMWm9sZ2FmQXJBQWlCQTNlcmFzOHJvTzlNMHQvTm55L0hwb2QvNGJaMlM2Z0lsS0dGYzVDNkVtUT09IiwiTUlJQmVEQ0NBUitnQXdJQkFnSVVYVnhVVGdRQTJYWHFBNVhmNDNZQTFyaDdnR0l3Q2dZSUtvWkl6ajBFQXdJd0VqRVFNQTRHQTFVRUF3d0hWR1Z6ZENCRFFUQWVGdzB5TmpBMU1ERXhOak16TkRkYUZ3MHlOekExTURFeE5qTXpORGRhTUJJeEVEQU9CZ05WQkFNTUIxUmxjM1FnUTBFd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFSWlJvQnFmbGtTREFoRDhmSE00bDFjSVl6eFNGZFVyc09QTDBlWnJaVUN2OUV4M3BpeU9xekZJL2tESUwybVBPeC9KZlYyY2NEc2VQeHVtM0dFT0syYW8xTXdVVEFkQmdOVkhRNEVGZ1FVaW9MZmhQdk1YMWZHL1cweDdPMXY3L3dYQTNFd0h3WURWUjBqQkJnd0ZvQVVpb0xmaFB2TVgxZkcvVzB4N08xdjcvd1hBM0V3RHdZRFZSMFRBUUgvQkFVd0F3RUIvekFLQmdncWhrak9QUVFEQWdOSEFEQkVBaUJIUWh1WHpsR0tDb082SjVvblB1dXRBWFpoK3pkYWlLVGtnSnNzd0dtL01RSWdXN0ZaMzg5Y0tadlFzY2RYZ2VVbnY0bngwQkFHT1FqeUdlYTRZZkdpTnBnPSJdLCJ0eXAiOiJkYytzZC1qd3QiLCJhbGciOiJFUzI1NiJ9.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.JQwPEei7nvQYeoFTKwqtpJVhwpYGgn4Al_Gq-OljtedFFW4IA95vgcL7qnX99cQEOr7rWQItcA8HAecXS2uP5w~WyJnQl9qZUVmVkF6RXlRY3NQMnB6RHNBIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~WyJHVVF0SnZjcTJXUllUb2hjOXhmS3JRIiwiZmFtaWx5X25hbWUiLCJEdXBvbnQiXQ~WyJ1b3FFSDdrS0w3WFBfTEI0aWhLVmJBIiwiYmlydGhkYXRlIiwiMTk4MC0wNS0yMyJd~WyJFMnZSSWF0cndjV1NIVjczTWdJVGVBIiwiRlIiXQ~WyJFVDUzXy1kWXBIVGZQc0dvblN2QzJ3IiwibmF0aW9uYWxpdGllcyIsW3siLi4uIjoiX0JjUmlzRGZ5TE8zSFJZbXF6ZFhrVUV5MUYzMks4VTFaVDVUaHIxNWFHSSJ9XV0~WyJkRzl4VHdTd3NpS2l4RHBOd19JV1pnIiwiY291bnRyeSIsIkZSIl0~WyJhTk11a1p4NFhLcDdNaXB5eGNyNUlnIiwicGxhY2Vfb2ZfYmlydGgiLHsiX3NkIjpbIkxhT2xreVFtQnFpQVF4RG5PZW84UGJsRmpXejI2Zk0yeDUtWkYxZjRVenciXX1d~WyJxOTREOFhvVHQyR3pwV2NyTmRSNmxnIiwiaXNzdWluZ19hdXRob3JpdHkiLCJUZXN0IElzc3VpbmcgQXV0aG9yaXR5Il0~WyJXMU9vWWVnUE1DamNTdERRUHJibTN3IiwiaXNzdWluZ19jb3VudHJ5IiwiRlIiXQ~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~"
  }
]
2026-11-12 10:34:14 SUCCESS
VCICreateDeferredCredentialResponse
Created deferred credential response with transaction_id
transaction_id
RVnrb4UNsAtB87gP3cAW6FjDzEmrI1ZF
credential_endpoint_response
{
  "transaction_id": "RVnrb4UNsAtB87gP3cAW6FjDzEmrI1ZF",
  "interval": 5
}
credential_endpoint_response_headers
{
  "x-fapi-interaction-id": "38c0793e-0594-4c3d-88f1-832ee5d08ef0",
  "content-type": "application/json"
}
2026-11-12 10:34:14
ClearAccessTokenFromRequest
Removed incoming access token from environment
2026-11-12 10:34:14 SUCCESS
CreateResourceServerDpopNonce
Created Resource Server nonce
resource_server_dpop_nonce
IPBWFagvvgTaBviMaUtpDwvQDIdiXPZHSNnuXMaGtMdkKGhiup1710179040+,/]|~}[|;!}-]_!,@>{,~{{:^^],,
2026-11-12 10:34:14
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Credential endpoint responded with HTTP 202; the wallet still needs to fetch the credential (e.g. via the deferred credential endpoint) before the test can be considered complete.
2026-11-12 10:34:14 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing_status_code
202
outgoing_body
{
  "transaction_id": "RVnrb4UNsAtB87gP3cAW6FjDzEmrI1ZF",
  "interval": 5
}
outgoing_headers
{
  "headers": {
    "x-fapi-interaction-id": [
      "38c0793e-0594-4c3d-88f1-832ee5d08ef0"
    ],
    "content-type": [
      "application/json"
    ]
  }
}
outgoing_path
credential
2026-11-12 10:34:19 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /test/a/siros-wallet-vci-test/deferred_credential
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vci-test/deferred_credential",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "content-length": "53",
  "sec-ch-ua-platform": "\"Windows\"",
  "authorization": "DPoP 0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl",
  "accept-language": "en-US",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "sec-ch-ua-mobile": "?0",
  "dpop": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJGekRLVFN4QW5KY2NBWW9kZE5yWFhRIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvZGVmZXJyZWRfY3JlZGVudGlhbCIsImlhdCI6MTc5NDQ3OTY1NCwiYXRoIjoiY0hRd2pIVnlUbHJDOWpuY3dYNXN5Zl9hXzNZMVJJYnNYeGE1alFZQWp2OCJ9.rPvFsR44xdmolGjXrhiEFT7T4pziEUMq12A_6zsGe4jPpN_I5DuHaCmxuYsQPl9tVCx4entBWPHKwQUH30FEjQ",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "content-type": "application/json",
  "accept": "*/*",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/test/a/siros-wallet-vci-test/deferred_credential
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
{"transaction_id":"RVnrb4UNsAtB87gP3cAW6FjDzEmrI1ZF"}
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
{
  "transaction_id": "RVnrb4UNsAtB87gP3cAW6FjDzEmrI1ZF"
}
2026-11-12 10:34:19 SUCCESS
EnsureIncomingTls12WithBCP195SecureCipherOrTls13
Found TLS 1.3 connection
2026-11-12 10:34:19 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
Deferred credential endpoint
2026-11-12 10:34:19 SUCCESS
VCIEnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2026-11-12 10:34:19 SUCCESS
ExtractDpopProofFromHeader
Found and parsed the incoming_dpop_proof from incoming_request
value
eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJGekRLVFN4QW5KY2NBWW9kZE5yWFhRIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvZGVmZXJyZWRfY3JlZGVudGlhbCIsImlhdCI6MTc5NDQ3OTY1NCwiYXRoIjoiY0hRd2pIVnlUbHJDOWpuY3dYNXN5Zl9hXzNZMVJJYnNYeGE1alFZQWp2OCJ9.rPvFsR44xdmolGjXrhiEFT7T4pziEUMq12A_6zsGe4jPpN_I5DuHaCmxuYsQPl9tVCx4entBWPHKwQUH30FEjQ
header
{
  "typ": "dpop+jwt",
  "alg": "ES256",
  "jwk": {
    "kty": "EC",
    "crv": "P-256",
    "x": "Uvy7MnuyUQAjN5S8vt6WXrMV3DLua96zJVpFxTxyjSU",
    "y": "U_NR7GsLGYIrbCtvskTqQR-IIsG2g3EkkKd0igkHg_0"
  }
}
claims
{
  "htm": "POST",
  "ath": "cHQwjHVyTlrC9jncwX5syf_a_3Y1RIbsXxa5jQYAjv8",
  "htu": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/deferred_credential",
  "iat": 1794479654,
  "jti": "FzDKTSxAnJccAYoddNrXXQ"
}
2026-11-12 10:34:19 SUCCESS
ExtractDpopAccessTokenFromHeader
Found DPoP access token
DPoP token
0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl
2026-11-12 10:34:19 SUCCESS
ValidateDpopProofResourceRequest
DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks
2026-11-12 10:34:19 SUCCESS
ValidateDpopProofIat
DPoP Proof iat value passed validation checks
2026-11-12 10:34:19 SUCCESS
ValidateDpopProofNbf
DPoP Proof nbf value passed validation checks
2026-11-12 10:34:19 SUCCESS
EnsureDpopProofJtiNotAlreadyUsed
Proof jti seems to be unique to this request
jti
FzDKTSxAnJccAYoddNrXXQ
2026-11-12 10:34:19
ValidateResourceEndpointDpopProofNonce
DPoP Proof nonce not supplied
expected
IPBWFagvvgTaBviMaUtpDwvQDIdiXPZHSNnuXMaGtMdkKGhiup1710179040+,/]|~}[|;!}-]_!,@>{,~{{:^^],,
2026-11-12 10:34:19
ValidateResourceEndpointDpopProofNonce
Resource endpoint DPoP nonce is invalid
expected
IPBWFagvvgTaBviMaUtpDwvQDIdiXPZHSNnuXMaGtMdkKGhiup1710179040+,/]|~}[|;!}-]_!,@>{,~{{:^^],,
2026-11-12 10:34:19 SUCCESS
ValidateDpopProofSignature
DPoP Proof signature validated
DPoP Proof
eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJGekRLVFN4QW5KY2NBWW9kZE5yWFhRIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvZGVmZXJyZWRfY3JlZGVudGlhbCIsImlhdCI6MTc5NDQ3OTY1NCwiYXRoIjoiY0hRd2pIVnlUbHJDOWpuY3dYNXN5Zl9hXzNZMVJJYnNYeGE1alFZQWp2OCJ9.rPvFsR44xdmolGjXrhiEFT7T4pziEUMq12A_6zsGe4jPpN_I5DuHaCmxuYsQPl9tVCx4entBWPHKwQUH30FEjQ
2026-11-12 10:34:19 SUCCESS
ValidateDpopAccessToken
DPoP Access Token is valid
DPoP Access Token
0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl
2026-11-12 10:34:19 SUCCESS
ValidateDpopAccessTokenJkt
DPoP Access Token is constrained to DPoP Proof JWK
DPoP Access Token
0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl
2026-11-12 10:34:19 SUCCESS
ValidateDpopProofAccessTokenHash
DPoP Proof ath claim matches DPoP access token hash
ath
cHQwjHVyTlrC9jncwX5syf_a_3Y1RIbsXxa5jQYAjv8
2026-11-12 10:34:19 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2026-11-12 10:34:19 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2026-11-12 10:34:19 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2026-11-12 10:34:19 SUCCESS
ValidateFAPIInteractionIdInResourceRequest
x-fapi-interaction-id in resource request headers is a valid UUID
interaction_id
38c0793e-0594-4c3d-88f1-832ee5d08ef0
2026-11-12 10:34:19 SUCCESS
VCIEnsureCredentialRequestUsesApplicationJson
Credential request Content-Type is application/json
content_type
application/json
2026-11-12 10:34:19 SUCCESS
VCIEnsureCredentialRequestEncryptedIfResponseEncryptionRequested
Plaintext credential request body does not include credential_response_encryption
content_type
application/json
2026-11-12 10:34:19 SUCCESS
VCIValidateDeferredCredentialRequest
Deferred credential request is valid
transaction_id
RVnrb4UNsAtB87gP3cAW6FjDzEmrI1ZF
2026-11-12 10:34:19 INFO
CreateFapiInteractionIdIfNeeded
Found existing FAPI interaction ID
fapi_interaction_id
38c0793e-0594-4c3d-88f1-832ee5d08ef0
2026-11-12 10:34:19 SUCCESS
VCICreateCredentialEndpointResponse
Created credential response object
credential_count
1
credential_endpoint_response
{
  "credentials": [
    {
      "credential": "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.eyJpc3MiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0IiwiX3NkIjpbIjh6ZEFRUnp3aTRlQTlsZlU3cnlDd0UwVnV0UlRoUTI4Z3BoV0otUG9leTgiLCJBOFl0VW81R0JzeHZ1NVVvdmhJVkRzUFBicGQ0Z2dDNnJzdk5rT0tBUnFFIiwiQnRXTEFjU3JvVVJPcmthVE5WQVdQdFhYdDhKa0FiMW1WVmZIdXh3NmFxcyIsIkNPQnVXWlVQV3hTYWJtQ2k1WWVfLUNZUWVfNVZ4aUlnZ0JKLXoxYUFvMWMiLCJGUTYzWEVxbG5MOWNYUjg2OTU3LVVReDcySlFmbTI4MGNFUVlPVFN6NUVNIiwiT3luLWR1YTFuVEhJUVpJeFU3S1ItaW00MF9EN3E0NTIzVTh6NHIzV2I2VSIsIlBvd0VfNW1FcFlpb3hwMHJlVlJ1emUyTERsdlNVX0x1WUY2cy1OOTlIbGsiLCJRckJRME10TmlSWEo1RDJUY1UtUWFjc1UzNlFSNXg3YjZmdVpuMXVXV2lvIiwiVjBwT05jYmJiSnBtR1BLeXhXUnR2Y01xQk5zMWFWeFlRZ2hlbUJFS2IxVSIsIm80ZjJXaFdncFVjZHByaUd1T0R2UHJLS0dOcWwwWnFKTmFFenZHZHloazQiLCJ0T3Q5VjhSVnUxMnBnM1VPZmc5UXR1bTBfeW43MXNKLWNieVJoMGxheVdRIl0sImNuZiI6eyJqd2siOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsImtpZCI6InN3NXJXQS13eDBJbFhNSkVNaTVKNUxJUVJFU2ttZjJmbU9OR3liS3hGaEkiLCJ4IjoidHQ5MmhPUHRFamVHMFNQNXY1d0RZTFYtTXdVZ0tIQklobUFrTmVrQnNYZyIsInkiOiJvQzBhLV9PNGR0dFBMMzlTcjczNDZETnBERThxeEdhQmdtcy1OZ0NWWUtFIn19LCJleHAiOjE3OTQ1NjA0MDAsImlhdCI6MTc5NDQ3NzYwMCwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.JQwPEei7nvQYeoFTKwqtpJVhwpYGgn4Al_Gq-OljtedFFW4IA95vgcL7qnX99cQEOr7rWQItcA8HAecXS2uP5w~WyJnQl9qZUVmVkF6RXlRY3NQMnB6RHNBIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~WyJHVVF0SnZjcTJXUllUb2hjOXhmS3JRIiwiZmFtaWx5X25hbWUiLCJEdXBvbnQiXQ~WyJ1b3FFSDdrS0w3WFBfTEI0aWhLVmJBIiwiYmlydGhkYXRlIiwiMTk4MC0wNS0yMyJd~WyJFMnZSSWF0cndjV1NIVjczTWdJVGVBIiwiRlIiXQ~WyJFVDUzXy1kWXBIVGZQc0dvblN2QzJ3IiwibmF0aW9uYWxpdGllcyIsW3siLi4uIjoiX0JjUmlzRGZ5TE8zSFJZbXF6ZFhrVUV5MUYzMks4VTFaVDVUaHIxNWFHSSJ9XV0~WyJkRzl4VHdTd3NpS2l4RHBOd19JV1pnIiwiY291bnRyeSIsIkZSIl0~WyJhTk11a1p4NFhLcDdNaXB5eGNyNUlnIiwicGxhY2Vfb2ZfYmlydGgiLHsiX3NkIjpbIkxhT2xreVFtQnFpQVF4RG5PZW84UGJsRmpXejI2Zk0yeDUtWkYxZjRVenciXX1d~WyJxOTREOFhvVHQyR3pwV2NyTmRSNmxnIiwiaXNzdWluZ19hdXRob3JpdHkiLCJUZXN0IElzc3VpbmcgQXV0aG9yaXR5Il0~WyJXMU9vWWVnUE1DamNTdERRUHJibTN3IiwiaXNzdWluZ19jb3VudHJ5IiwiRlIiXQ~WyJMZmc4WmRBQ2Y3YUJ2LUhMcUFKY3RBIiwicGljdHVyZSIsImRhdGE6aW1hZ2UvanBlZztiYXNlNjQsLzlqLzRBQVFTa1pKUmdBQkFRQUFBUUFCQUFELzJ3QkRBQkFMREE0TUNoQU9EUTRTRVJBVEdDZ2FHQllXR0RFakpSMG9Pak05UERrek9EZEFTRnhPUUVSWFJUYzRVRzFSVjE5aVoyaG5QazF4ZVhCa2VGeGxaMlAvMndCREFSRVNFaGdWR0M4YUdpOWpRamhDWTJOalkyTmpZMk5qWTJOalkyTmpZMk5qWTJOalkyTmpZMk5qWTJOalkyTmpZMk5qWTJOalkyTmpZMk5qWTJOalkyUC93QUFSQ0FBRkFBUURBU0lBQWhFQkF4RUIvOFFBSHdBQUFRVUJBUUVCQVFFQUFBQUFBQUFBQUFFQ0F3UUZCZ2NJQ1FvTC84UUF0UkFBQWdFREF3SUVBd1VGQkFRQUFBRjlBUUlEQUFRUkJSSWhNVUVHRTFGaEJ5SnhGREtCa2FFSUkwS3h3UlZTMGZBa00ySnlnZ2tLRmhjWUdSb2xKaWNvS1NvME5UWTNPRGs2UTBSRlJrZElTVXBUVkZWV1YxaFpXbU5rWldabmFHbHFjM1IxZG5kNGVYcURoSVdHaDRpSmlwS1RsSldXbDVpWm1xS2pwS1dtcDZpcHFyS3p0TFcydDdpNXVzTER4TVhHeDhqSnl0TFQxTlhXMTlqWjJ1SGk0K1RsNXVmbzZlcng4dlAwOWZiMytQbjYvOFFBSHdFQUF3RUJBUUVCQVFFQkFRQUFBQUFBQUFFQ0F3UUZCZ2NJQ1FvTC84UUF0UkVBQWdFQ0JBUURCQWNGQkFRQUFRSjNBQUVDQXhFRUJTRXhCaEpCVVFkaGNSTWlNb0VJRkVLUm9iSEJDU016VXZBVlluTFJDaFlrTk9FbDhSY1lHUm9tSnlncEtqVTJOemc1T2tORVJVWkhTRWxLVTFSVlZsZFlXVnBqWkdWbVoyaHBhbk4wZFhaM2VIbDZnb09FaFlhSGlJbUtrcE9VbFphWG1KbWFvcU9rcGFhbnFLbXFzck8wdGJhM3VMbTZ3c1BFeGNiSHlNbkswdFBVMWRiWDJObmE0dVBrNWVibjZPbnE4dlAwOWZiMytQbjYvOW9BREFNQkFBSVJBeEVBUHdDblJSUldacWYvMlE9PSJd~"
    }
  ]
}
credential_endpoint_response_headers
{
  "x-fapi-interaction-id": "38c0793e-0594-4c3d-88f1-832ee5d08ef0",
  "content-type": "application/json"
}
2026-11-12 10:34:19
ClearAccessTokenFromRequest
Removed incoming access token from environment
2026-11-12 10:34:19 SUCCESS
VCIEncryptCredentialResponse
No credential_response_encryption in request, returning unencrypted response
2026-11-12 10:34:19
CreateResourceEndpointDpopErrorResponse
Condition ran but did not log anything
2026-11-12 10:34:19 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing_status_code
401
outgoing_body
outgoing_headers
{
  "headers": {
    "WWW-Authenticate": [
      "DPoP error\u003d\"use_dpop_nonce\", error_description\u003d\"Resource server requires nonce in DPoP proof\""
    ],
    "DPoP-Nonce": [
      "IPBWFagvvgTaBviMaUtpDwvQDIdiXPZHSNnuXMaGtMdkKGhiup1710179040+,/]|~}[|;!}-]_!,@\u003e{,~{{:^^],,"
    ]
  }
}
outgoing_path
deferred_credential
2026-11-12 10:34:19 INCOMING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Incoming HTTP request to /test/a/siros-wallet-vci-test/deferred_credential
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vci-test/deferred_credential",
  "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "content-length": "53",
  "sec-ch-ua-platform": "\"Windows\"",
  "authorization": "DPoP 0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl",
  "accept-language": "en-US",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "sec-ch-ua-mobile": "?0",
  "dpop": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJtWXdQcVdEVFotdElqOEp5MVg3OWt3IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvZGVmZXJyZWRfY3JlZGVudGlhbCIsImlhdCI6MTc5NDQ3OTY1NCwiYXRoIjoiY0hRd2pIVnlUbHJDOWpuY3dYNXN5Zl9hXzNZMVJJYnNYeGE1alFZQWp2OCIsIm5vbmNlIjoiSVBCV0ZhZ3Z2Z1RhQnZpTWFVdHBEd3ZRRElkaVhQWkhTTm51WE1hR3RNZGtLR2hpdXAxNzEwMTc5MDQwKywvXXx-fVt8OyF9LV1fISxAPnssfnt7Ol5eXSwsIn0.XppmugNJ2JlZmiAQ6bigYX4Nj_DgefytVm2GVGnv0ms9N2JrYDFEHKhimBRwF8FXUvdFyFx7RCWGQ43TZDwKYA",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "content-type": "application/json",
  "accept": "*/*",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/test/a/siros-wallet-vci-test/deferred_credential
incoming_body_form_params
incoming_method
POST
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
{"transaction_id":"RVnrb4UNsAtB87gP3cAW6FjDzEmrI1ZF"}
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
{
  "transaction_id": "RVnrb4UNsAtB87gP3cAW6FjDzEmrI1ZF"
}
2026-11-12 10:34:19 SUCCESS
EnsureIncomingTls12WithBCP195SecureCipherOrTls13
Found TLS 1.3 connection
2026-11-12 10:34:19 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
Deferred credential endpoint
2026-11-12 10:34:19 SUCCESS
VCIEnsureBearerAccessTokenNotInParams
Client correctly did not send access token in query parameters or form body
2026-11-12 10:34:19 SUCCESS
ExtractDpopProofFromHeader
Found and parsed the incoming_dpop_proof from incoming_request
value
eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJtWXdQcVdEVFotdElqOEp5MVg3OWt3IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvZGVmZXJyZWRfY3JlZGVudGlhbCIsImlhdCI6MTc5NDQ3OTY1NCwiYXRoIjoiY0hRd2pIVnlUbHJDOWpuY3dYNXN5Zl9hXzNZMVJJYnNYeGE1alFZQWp2OCIsIm5vbmNlIjoiSVBCV0ZhZ3Z2Z1RhQnZpTWFVdHBEd3ZRRElkaVhQWkhTTm51WE1hR3RNZGtLR2hpdXAxNzEwMTc5MDQwKywvXXx-fVt8OyF9LV1fISxAPnssfnt7Ol5eXSwsIn0.XppmugNJ2JlZmiAQ6bigYX4Nj_DgefytVm2GVGnv0ms9N2JrYDFEHKhimBRwF8FXUvdFyFx7RCWGQ43TZDwKYA
header
{
  "typ": "dpop+jwt",
  "alg": "ES256",
  "jwk": {
    "kty": "EC",
    "crv": "P-256",
    "x": "Uvy7MnuyUQAjN5S8vt6WXrMV3DLua96zJVpFxTxyjSU",
    "y": "U_NR7GsLGYIrbCtvskTqQR-IIsG2g3EkkKd0igkHg_0"
  }
}
claims
{
  "htm": "POST",
  "ath": "cHQwjHVyTlrC9jncwX5syf_a_3Y1RIbsXxa5jQYAjv8",
  "htu": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/deferred_credential",
  "iat": 1794479654,
  "nonce": "IPBWFagvvgTaBviMaUtpDwvQDIdiXPZHSNnuXMaGtMdkKGhiup1710179040+,/]|~}[|;!}-]_!,@\u003e{,~{{:^^],,",
  "jti": "mYwPqWDTZ-tIj8Jy1X79kw"
}
2026-11-12 10:34:19 SUCCESS
ExtractDpopAccessTokenFromHeader
Found DPoP access token
DPoP token
0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl
2026-11-12 10:34:19 SUCCESS
ValidateDpopProofResourceRequest
DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks
2026-11-12 10:34:19 SUCCESS
ValidateDpopProofIat
DPoP Proof iat value passed validation checks
2026-11-12 10:34:19 SUCCESS
ValidateDpopProofNbf
DPoP Proof nbf value passed validation checks
2026-11-12 10:34:19 SUCCESS
EnsureDpopProofJtiNotAlreadyUsed
Proof jti seems to be unique to this request
jti
mYwPqWDTZ-tIj8Jy1X79kw
2026-11-12 10:34:19 SUCCESS
ValidateResourceEndpointDpopProofNonce
Resource endpoint DPoP nonce matches expected value
expected
IPBWFagvvgTaBviMaUtpDwvQDIdiXPZHSNnuXMaGtMdkKGhiup1710179040+,/]|~}[|;!}-]_!,@>{,~{{:^^],,
2026-11-12 10:34:19 SUCCESS
ValidateDpopProofSignature
DPoP Proof signature validated
DPoP Proof
eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiVXZ5N01udXlVUUFqTjVTOHZ0NldYck1WM0RMdWE5NnpKVnBGeFR4eWpTVSIsInkiOiJVX05SN0dzTEdZSXJiQ3R2c2tUcVFSLUlJc0cyZzNFa2tLZDBpZ2tIZ18wIn19.eyJqdGkiOiJtWXdQcVdEVFotdElqOEp5MVg3OWt3IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvZGVmZXJyZWRfY3JlZGVudGlhbCIsImlhdCI6MTc5NDQ3OTY1NCwiYXRoIjoiY0hRd2pIVnlUbHJDOWpuY3dYNXN5Zl9hXzNZMVJJYnNYeGE1alFZQWp2OCIsIm5vbmNlIjoiSVBCV0ZhZ3Z2Z1RhQnZpTWFVdHBEd3ZRRElkaVhQWkhTTm51WE1hR3RNZGtLR2hpdXAxNzEwMTc5MDQwKywvXXx-fVt8OyF9LV1fISxAPnssfnt7Ol5eXSwsIn0.XppmugNJ2JlZmiAQ6bigYX4Nj_DgefytVm2GVGnv0ms9N2JrYDFEHKhimBRwF8FXUvdFyFx7RCWGQ43TZDwKYA
2026-11-12 10:34:19 SUCCESS
ValidateDpopAccessToken
DPoP Access Token is valid
DPoP Access Token
0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl
2026-11-12 10:34:19 SUCCESS
ValidateDpopAccessTokenJkt
DPoP Access Token is constrained to DPoP Proof JWK
DPoP Access Token
0tp1z3IQdlF0QG03HQWw8zrb4cIYHafUxFpN4noe838je3ekJl
2026-11-12 10:34:19 SUCCESS
ValidateDpopProofAccessTokenHash
DPoP Proof ath claim matches DPoP access token hash
ath
cHQwjHVyTlrC9jncwX5syf_a_3Y1RIbsXxa5jQYAjv8
2026-11-12 10:34:19 INFO
ExtractFapiDateHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date
path
headers.x-fapi-auth-date
mapped
object
incoming_request
2026-11-12 10:34:19 INFO
ExtractFapiIpAddressHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address
path
headers.x-fapi-customer-ip-address
mapped
object
incoming_request
2026-11-12 10:34:19 INFO
ExtractFapiInteractionIdHeader
Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id
path
headers.x-fapi-interaction-id
mapped
object
incoming_request
2026-11-12 10:34:19 SUCCESS
ValidateFAPIInteractionIdInResourceRequest
x-fapi-interaction-id in resource request headers is a valid UUID
interaction_id
38c0793e-0594-4c3d-88f1-832ee5d08ef0
2026-11-12 10:34:19 SUCCESS
VCIEnsureCredentialRequestUsesApplicationJson
Credential request Content-Type is application/json
content_type
application/json
2026-11-12 10:34:19 SUCCESS
VCIEnsureCredentialRequestEncryptedIfResponseEncryptionRequested
Plaintext credential request body does not include credential_response_encryption
content_type
application/json
2026-11-12 10:34:19 SUCCESS
VCIValidateDeferredCredentialRequest
Deferred credential request is valid
transaction_id
RVnrb4UNsAtB87gP3cAW6FjDzEmrI1ZF
2026-11-12 10:34:19 INFO
CreateFapiInteractionIdIfNeeded
Found existing FAPI interaction ID
fapi_interaction_id
38c0793e-0594-4c3d-88f1-832ee5d08ef0
2026-11-12 10:34:19 SUCCESS
VCICreateCredentialEndpointResponse
Created credential response object
credential_count
1
credential_endpoint_response
{
  "credentials": [
    {
      "credential": "eyJ4NWMiOlsiTUlJQmF6Q0NBUktnQXdJQkFnSVVRWVQrcXZ6L3NvbTluYjZ2T0xCZWFINVFHVG93Q2dZSUtvWkl6ajBFQXdJd0VqRVFNQTRHQTFVRUF3d0hWR1Z6ZENCRFFUQWVGdzB5TmpBMU1ERXhOak16TkRkYUZ3MHlOekExTURFeE5qTXpORGRhTUJZeEZEQVNCZ05WQkFNTUMzUmxjM1F0YzJsbmJtVnlNRmt3RXdZSEtvWkl6ajBDQVFZSUtvWkl6ajBEQVFjRFFnQUVEQzlYOWxsN2o5SmFsK0FIdU1nUFJLRFZ1NlF4NTc1ZFM3anA2Qnl3ZWgyTlBvTjU4WVNob2h0M1dBTys1em9Sb1FKWG9iTktOSXFYUStPMG5vSm1RNk5DTUVBd0hRWURWUjBPQkJZRUZIeEF6MWp3OW1YSmxWZmNRTUZrY0RyZW9QNXJNQjhHQTFVZEl3UVlNQmFBRklxQzM0VDd6RjlYeHYxdE1lenRiKy84RndOeE1Bb0dDQ3FHU000OUJBTUNBMGNBTUVRQ0lCZkV6NnFYOTBNNDY1ZFJqUXpvOUtzcjdsanJsTi9mWnRMWm9sZ2FmQXJBQWlCQTNlcmFzOHJvTzlNMHQvTm55L0hwb2QvNGJaMlM2Z0lsS0dGYzVDNkVtUT09IiwiTUlJQmVEQ0NBUitnQXdJQkFnSVVYVnhVVGdRQTJYWHFBNVhmNDNZQTFyaDdnR0l3Q2dZSUtvWkl6ajBFQXdJd0VqRVFNQTRHQTFVRUF3d0hWR1Z6ZENCRFFUQWVGdzB5TmpBMU1ERXhOak16TkRkYUZ3MHlOekExTURFeE5qTXpORGRhTUJJeEVEQU9CZ05WQkFNTUIxUmxjM1FnUTBFd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFSWlJvQnFmbGtTREFoRDhmSE00bDFjSVl6eFNGZFVyc09QTDBlWnJaVUN2OUV4M3BpeU9xekZJL2tESUwybVBPeC9KZlYyY2NEc2VQeHVtM0dFT0syYW8xTXdVVEFkQmdOVkhRNEVGZ1FVaW9MZmhQdk1YMWZHL1cweDdPMXY3L3dYQTNFd0h3WURWUjBqQkJnd0ZvQVVpb0xmaFB2TVgxZkcvVzB4N08xdjcvd1hBM0V3RHdZRFZSMFRBUUgvQkFVd0F3RUIvekFLQmdncWhrak9QUVFEQWdOSEFEQkVBaUJIUWh1WHpsR0tDb082SjVvblB1dXRBWFpoK3pkYWlLVGtnSnNzd0dtL01RSWdXN0ZaMzg5Y0tadlFzY2RYZ2VVbnY0bngwQkFHT1FqeUdlYTRZZkdpTnBnPSJdLCJ0eXAiOiJkYytzZC1qd3QiLCJhbGciOiJFUzI1NiJ9.eyJpc3MiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0IiwiX3NkIjpbIjh6ZEFRUnp3aTRlQTlsZlU3cnlDd0UwVnV0UlRoUTI4Z3BoV0otUG9leTgiLCJBOFl0VW81R0JzeHZ1NVVvdmhJVkRzUFBicGQ0Z2dDNnJzdk5rT0tBUnFFIiwiQnRXTEFjU3JvVVJPcmthVE5WQVdQdFhYdDhKa0FiMW1WVmZIdXh3NmFxcyIsIkNPQnVXWlVQV3hTYWJtQ2k1WWVfLUNZUWVfNVZ4aUlnZ0JKLXoxYUFvMWMiLCJGUTYzWEVxbG5MOWNYUjg2OTU3LVVReDcySlFmbTI4MGNFUVlPVFN6NUVNIiwiT3luLWR1YTFuVEhJUVpJeFU3S1ItaW00MF9EN3E0NTIzVTh6NHIzV2I2VSIsIlBvd0VfNW1FcFlpb3hwMHJlVlJ1emUyTERsdlNVX0x1WUY2cy1OOTlIbGsiLCJRckJRME10TmlSWEo1RDJUY1UtUWFjc1UzNlFSNXg3YjZmdVpuMXVXV2lvIiwiVjBwT05jYmJiSnBtR1BLeXhXUnR2Y01xQk5zMWFWeFlRZ2hlbUJFS2IxVSIsIm80ZjJXaFdncFVjZHByaUd1T0R2UHJLS0dOcWwwWnFKTmFFenZHZHloazQiLCJ0T3Q5VjhSVnUxMnBnM1VPZmc5UXR1bTBfeW43MXNKLWNieVJoMGxheVdRIl0sImNuZiI6eyJqd2siOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsImtpZCI6InN3NXJXQS13eDBJbFhNSkVNaTVKNUxJUVJFU2ttZjJmbU9OR3liS3hGaEkiLCJ4IjoidHQ5MmhPUHRFamVHMFNQNXY1d0RZTFYtTXdVZ0tIQklobUFrTmVrQnNYZyIsInkiOiJvQzBhLV9PNGR0dFBMMzlTcjczNDZETnBERThxeEdhQmdtcy1OZ0NWWUtFIn19LCJleHAiOjE3OTQ1NjA0MDAsImlhdCI6MTc5NDQ3NzYwMCwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.JQwPEei7nvQYeoFTKwqtpJVhwpYGgn4Al_Gq-OljtedFFW4IA95vgcL7qnX99cQEOr7rWQItcA8HAecXS2uP5w~WyJnQl9qZUVmVkF6RXlRY3NQMnB6RHNBIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~WyJHVVF0SnZjcTJXUllUb2hjOXhmS3JRIiwiZmFtaWx5X25hbWUiLCJEdXBvbnQiXQ~WyJ1b3FFSDdrS0w3WFBfTEI0aWhLVmJBIiwiYmlydGhkYXRlIiwiMTk4MC0wNS0yMyJd~WyJFMnZSSWF0cndjV1NIVjczTWdJVGVBIiwiRlIiXQ~WyJFVDUzXy1kWXBIVGZQc0dvblN2QzJ3IiwibmF0aW9uYWxpdGllcyIsW3siLi4uIjoiX0JjUmlzRGZ5TE8zSFJZbXF6ZFhrVUV5MUYzMks4VTFaVDVUaHIxNWFHSSJ9XV0~WyJkRzl4VHdTd3NpS2l4RHBOd19JV1pnIiwiY291bnRyeSIsIkZSIl0~WyJhTk11a1p4NFhLcDdNaXB5eGNyNUlnIiwicGxhY2Vfb2ZfYmlydGgiLHsiX3NkIjpbIkxhT2xreVFtQnFpQVF4RG5PZW84UGJsRmpXejI2Zk0yeDUtWkYxZjRVenciXX1d~WyJxOTREOFhvVHQyR3pwV2NyTmRSNmxnIiwiaXNzdWluZ19hdXRob3JpdHkiLCJUZXN0IElzc3VpbmcgQXV0aG9yaXR5Il0~WyJXMU9vWWVnUE1DamNTdERRUHJibTN3IiwiaXNzdWluZ19jb3VudHJ5IiwiRlIiXQ~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~"
    }
  ]
}
credential_endpoint_response_headers
{
  "x-fapi-interaction-id": "38c0793e-0594-4c3d-88f1-832ee5d08ef0",
  "content-type": "application/json"
}
2026-11-12 10:34:19
ClearAccessTokenFromRequest
Removed incoming access token from environment
2026-11-12 10:34:19 SUCCESS
VCIEncryptCredentialResponse
No credential_response_encryption in request, returning unencrypted response
2026-11-12 10:34:19 SUCCESS
CreateResourceServerDpopNonce
Created Resource Server nonce
resource_server_dpop_nonce
BBsOHPkxMcWDPdzFOZLAlOxnEePoxgAbLKrOlHHpDDKOCttATe1589651151-`@!-?;[%=-=;/+({.?.-?:.,')$)`
2026-11-12 10:34:19
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Detected completed resource endpoint call. Waiting 20 seconds for additional requests before completing the test. The wait can be adjusted by setting maxWaitForAdditionalRequestSeconds in the configuration.
2026-11-12 10:34:19 OUTGOING
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Response to HTTP request to test instance 2fUH63O6zpROXOG
outgoing_status_code
200
outgoing_body
{
  "credentials": [
    {
      "credential": "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.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.JQwPEei7nvQYeoFTKwqtpJVhwpYGgn4Al_Gq-OljtedFFW4IA95vgcL7qnX99cQEOr7rWQItcA8HAecXS2uP5w~WyJnQl9qZUVmVkF6RXlRY3NQMnB6RHNBIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~WyJHVVF0SnZjcTJXUllUb2hjOXhmS3JRIiwiZmFtaWx5X25hbWUiLCJEdXBvbnQiXQ~WyJ1b3FFSDdrS0w3WFBfTEI0aWhLVmJBIiwiYmlydGhkYXRlIiwiMTk4MC0wNS0yMyJd~WyJFMnZSSWF0cndjV1NIVjczTWdJVGVBIiwiRlIiXQ~WyJFVDUzXy1kWXBIVGZQc0dvblN2QzJ3IiwibmF0aW9uYWxpdGllcyIsW3siLi4uIjoiX0JjUmlzRGZ5TE8zSFJZbXF6ZFhrVUV5MUYzMks4VTFaVDVUaHIxNWFHSSJ9XV0~WyJkRzl4VHdTd3NpS2l4RHBOd19JV1pnIiwiY291bnRyeSIsIkZSIl0~WyJhTk11a1p4NFhLcDdNaXB5eGNyNUlnIiwicGxhY2Vfb2ZfYmlydGgiLHsiX3NkIjpbIkxhT2xreVFtQnFpQVF4RG5PZW84UGJsRmpXejI2Zk0yeDUtWkYxZjRVenciXX1d~WyJxOTREOFhvVHQyR3pwV2NyTmRSNmxnIiwiaXNzdWluZ19hdXRob3JpdHkiLCJUZXN0IElzc3VpbmcgQXV0aG9yaXR5Il0~WyJXMU9vWWVnUE1DamNTdERRUHJibTN3IiwiaXNzdWluZ19jb3VudHJ5IiwiRlIiXQ~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~"
    }
  ]
}
outgoing_headers
{
  "headers": {
    "x-fapi-interaction-id": [
      "38c0793e-0594-4c3d-88f1-832ee5d08ef0"
    ],
    "content-type": [
      "application/json"
    ]
  }
}
outgoing_path
deferred_credential
2026-11-12 10:34:39 FINISHED
oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Test has run to completion
testmodule_result
PASSED
2026-11-12 10:34:39
TEST-RUNNER
Alias has now been claimed by another test
alias
siros-wallet-vci-test
new_test_id
wHLF4iUjw0N8XxN
Test Results