Test detail

Test Name	oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response
Variant	credential_format=sd_jwt_vc, vci_credential_issuance_mode=immediate, fapi_request_method=unsigned, grant_management=disabled, vci_grant_type=pre_authorization_code, vci_credential_encryption=plain, sender_constrain=dpop, client_auth_type=private_key_jwt, vci_authorization_code_flow_variant=issuer_initiated, authorization_request_type=simple, fapi_client_type=plain_oauth, vci_credential_offer_variant=by_value, fapi_profile=vci, fapi_response_mode=plain_response
Test ID	GZuYWdpptTrJw1n https://localhost.emobix.co.uk:8443/log-detail.html?public=true&log=GZuYWdpptTrJw1n
Created	2026-11-12T17:00:39.703073016Z
Description	OID4VCI wallet conformance test for SIROS wallet [mini-wallet c1a34a7]
Test Version	5.3.4
Test Owner	leifj
Plan ID	uU7aArD3tjZ0B https://localhost.emobix.co.uk:8443/plan-detail.html?public=true&plan=uU7aArD3tjZ0B
Exported From	https://localhost.emobix.co.uk:8443
Exported By	leifj
Suite Version	5.3.4
Exported	2026-11-12 17:04:42 (UTC)

2026-11-12 17:00:39

(8) More

INFO

TEST-RUNNER

Test instance GZuYWdpptTrJw1n created

baseUrl	https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test
variant	{ "credential_format": "sd_jwt_vc", "vci_credential_issuance_mode": "immediate", "fapi_request_method": "unsigned", "grant_management": "disabled", "vci_grant_type": "pre_authorization_code", "vci_credential_encryption": "plain", "sender_constrain": "dpop", "client_auth_type": "private_key_jwt", "vci_authorization_code_flow_variant": "issuer_initiated", "authorization_request_type": "simple", "fapi_client_type": "plain_oauth", "vci_credential_offer_variant": "by_value", "fapi_profile": "vci", "fapi_response_mode": "plain_response" }
alias	siros-wallet-vci-test
description	OID4VCI wallet conformance test for SIROS wallet [mini-wallet c1a34a7]
planId	uU7aArD3tjZ0B
config	{ "alias": "siros-wallet-vci-test", "description": "OID4VCI wallet conformance test for SIROS wallet [mini-wallet c1a34a7]", "server": { "jwks": { "keys": [ { "kty": "EC", "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU", "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME", "crv": "P-256", "d": "9cez3K_DuFS4egCVhvySFQsacFt4v6njd_fZ3Ox00jw", "kid": "server-key-1", "use": "sig", "alg": "ES256" } ] } }, "client": { "client_id": "siros-wallet-test", "redirect_uri": "http://localhost:3010/", "jwks": { "keys": [ { "kty": "EC", "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc", "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI", "crv": "P-256", "kid": "client-key-1", "use": "sig", "alg": "ES256" } ] }, "private_key": { "kty": "EC", "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc", "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI", "crv": "P-256", "d": "KJEKZo2PQq6E40P6HMenViCVBRXoWD2FDyevRsJnlG0", "kid": "client-key-1", "use": "sig", "alg": "ES256" } }, "credential": { "signing_jwk": { "kty": "EC", "x": "DC9X9ll7j9Jal-AHuMgPRKDVu6Qx575dS7jp6Byweh0", "y": "jT6DefGEoaIbd1gDvuc6EaECV6GzSjSKl0PjtJ6CZkM", "crv": "P-256", "d": "jVJkAdpfNMYbeAiSbHp-GKVH0qD0NyTRsQb9ABBUgQ0", "kid": "signing-key-1", "use": "sig", "alg": "ES256", "x5c": [ "MIIBazCCARKgAwIBAgIUQYT+qvz/som9nb6vOLBeaH5QGTowCgYIKoZIzj0EAwIwEjEQMA4GA1UEAwwHVGVzdCBDQTAeFw0yNjA1MDExNjMzNDdaFw0yNzA1MDExNjMzNDdaMBYxFDASBgNVBAMMC3Rlc3Qtc2lnbmVyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEDC9X9ll7j9Jal+AHuMgPRKDVu6Qx575dS7jp6Byweh2NPoN58YShoht3WAO+5zoRoQJXobNKNIqXQ+O0noJmQ6NCMEAwHQYDVR0OBBYEFHxAz1jw9mXJlVfcQMFkcDreoP5rMB8GA1UdIwQYMBaAFIqC34T7zF9Xxv1tMeztb+/8FwNxMAoGCCqGSM49BAMCA0cAMEQCIBfEz6qX90M465dRjQzo9Ksr7ljrlN/fZtLZolgafArAAiBA3eras8roO9M0t/Nny/Hpod/4bZ2S6gIlKGFc5C6EmQ\u003d\u003d", "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\u003d" ] } }, "waitTimeoutSeconds": 120, "vci": { "credential_offer_endpoint": "openid-credential-offer://" }, "developer": "leifj" }
baseMtlsUrl	https://localhost:8444/test-mtls/a/siros-wallet-vci-test
testName	oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

2026-11-12 17:00:39

(3) More

SUCCESS

GenerateServerConfigurationMTLS

Created server configuration

server

{
  "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/authorize",
  "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/token",
  "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/register",
  "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/token",
    "registration_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/register",
    "userinfo_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/userinfo"
  }
}

issuer

https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/

discoveryUrl

https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/.well-known/openid-configuration

2026-11-12 17:00:39

(3) More

SUCCESS

LoadServerJWKs

Parsed public and private JWK sets

server_encryption_keys

{}

server_public_jwks

{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    }
  ]
}

server_jwks

{
  "keys": [
    {
      "kty": "EC",
      "d": "9cez3K_DuFS4egCVhvySFQsacFt4v6njd_fZ3Ox00jw",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    }
  ]
}

Validate the JWK set in server signing keys

2026-11-12 17:00:39

(1) More

SUCCESS

MapJwksToValidationLocation

Selected the JWK set in server signing keys for validation

jwks

{
  "keys": [
    {
      "kty": "EC",
      "d": "9cez3K_DuFS4egCVhvySFQsacFt4v6njd_fZ3Ox00jw",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    }
  ]
}

2026-11-12 17:00:39

(1) More

SUCCESS

RFC7517-1.1

ValidateJwksStructure

The JWK set in server signing keys is structurally valid

jwks_source

server signing keys

2026-11-12 17:00:39

(1) More

SUCCESS

RFC7517-1.1

ParseUsableJwksKeys

All usable keys in the JWK set in server signing keys parse successfully

jwks_source

server signing keys

2026-11-12 17:00:39

(1) More

SUCCESS

RFC7517-1.1

WarnOnUnusableJwksKeys

All keys in the JWK set in server signing keys use a supported key type, curve and algorithm

jwks_source

server signing keys

2026-11-12 17:00:39

(2) More

SUCCESS

FAPI2-SP-FINAL-5.4.3-3

AugmentRealJwksWithDecoys

Augmented JWKS with decoy keys.

existingJwks

{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    }
  ]
}

jwksWithDecoys

{
  "keys": [
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "kid": "server-key-1",
      "x": "Q2jwA3suQmNmZNJ_OnC4rcqZN8tOgmHB60hN6HE2L2Y",
      "alg": "EdDSA"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "server-key-1",
      "alg": "PS256",
      "n": "4GRd0IEhqqA571b-fMoIdH5chKKGwfvxNjijVjTgvx5FcQxnVjd8sUZOnwd5mLR4mCBOlVXfylYVGD7VaDQrYr6Axv-Sw1t-qFW8RUH56zNgr0Fn_X_-kUvEtzqyFIi7fi9FCMWuISEK2It5HRI_5oT2q7KZyikga3H_yMwkg2AGixJm3p0BoJTCz4VN9osJL-qDzPtabsPy7S_wORaDmv_q8vGoal9gBsSQYl4GtE8G8zAxHvAEE1_IwOgnx7RYKOPLZv3ISQYOsMYWf-VZ-hH9DVwdvsds-QsiQGGy-6RfHm91-2lXvEFDytMDxAvHpd_BCbYXbTkyvgSy13EiUQ"
    }
  ]
}

2026-11-12 17:00:39		SetRsaAltServerJwks generated new alt RSA key configuration

2026-11-12 17:00:39

(3) More

SUCCESS

SetRsaAltServerJwks

Set alt server key

server_public_jwks

{
  "keys": [
    {
      "kty": "OKP",
      "use": "sig",
      "crv": "Ed25519",
      "kid": "server-key-1",
      "x": "Q2jwA3suQmNmZNJ_OnC4rcqZN8tOgmHB60hN6HE2L2Y",
      "alg": "EdDSA"
    },
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "server-key-1",
      "alg": "PS256",
      "n": "4GRd0IEhqqA571b-fMoIdH5chKKGwfvxNjijVjTgvx5FcQxnVjd8sUZOnwd5mLR4mCBOlVXfylYVGD7VaDQrYr6Axv-Sw1t-qFW8RUH56zNgr0Fn_X_-kUvEtzqyFIi7fi9FCMWuISEK2It5HRI_5oT2q7KZyikga3H_yMwkg2AGixJm3p0BoJTCz4VN9osJL-qDzPtabsPy7S_wORaDmv_q8vGoal9gBsSQYl4GtE8G8zAxHvAEE1_IwOgnx7RYKOPLZv3ISQYOsMYWf-VZ-hH9DVwdvsds-QsiQGGy-6RfHm91-2lXvEFDytMDxAvHpd_BCbYXbTkyvgSy13EiUQ"
    },
    {
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "rsa-none-alt-arg",
      "n": "rHO0Hvkwg8p9MMsTK9H2cWIVcuTXgqD9MQZnb48FM-tdmoMlPjU5WUg4N8h_4jdQ1ADgQACppuoJiXhDidN4aOiVjSso-SRjwWxKbq4TVvlNdzOCH-ligo4ftcJBLUWJJLD3I64BGG7KMoovEPFN89jR3VXD6RyKj4vaY706CaCkxZlGS9Mp8sGdT7zv5UjGKhh4-KRolRq9mId2mnleIvZBYyANxd0Rb861RY7g3O4DxWEA3xtxkSJrcBkDyY8IrKl0mxKldaR9rll4FmYoNZWzZqFoDfLzt7rYSiYOfXdt-QIlMlZthqVa3RJMM8L5MrRevoRVKjmulH1_KaXwyQ"
    }
  ]
}

server_jwks

{
  "keys": [
    {
      "kty": "EC",
      "d": "9cez3K_DuFS4egCVhvySFQsacFt4v6njd_fZ3Ox00jw",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    }
  ]
}

server_alt_jwks

{
  "keys": [
    {
      "p": "vTcrfPZ9eZjIXN4LZYyKMXG1lvH5UJukZgQQ1UQYENHPoJWIvi9JD7MPMjjEwpvZcD6YGzaczxboEiihlHPiqM6Dw9yTMbX4Bw-GgyFhgkYrOd8fPgMAFZXI4zl5G6aSTsRHolAMVXvuKGBD7QV1LnU7ZZ9hv0XZOeLDCaVzpm8",
      "kty": "RSA",
      "q": "6VHXO7lyTJcniJGAPJ_5H2UHrknODXun-bKTelxWZcEvw8t2gJDvia5mbmor7RLbdg4c4BojdflvhJJVXlxOsgxHMJiFP2cjVoNktHkEmgHCqCplJUD98ZCK7hfC5LwJLQwszMCpDbYAlVSUAsWFyWczo0hC4Kv0QCwluqm9uEc",
      "d": "Cldd48WZrS2FWFm1KpmKp73z_1HNwp2Y0UnLBhuTekuQ72UR5KsYZ0w3YtD5Kj2a8TukNvJTOhkqvT2i_y7ZN6FK5o5CBL6z5LNzuzNhIYQNqypBkVxTdfTD3ghqFCbpVHPwPgl_M1HheipjLCbsP8UuwJEWEHKPtI_0ZqrAQjdwk32LvF9kahhdaGpMeNoOcRM1BQxURrsLUjJm8fOZcz6gfjItd-8m6-VXoXDPDjCKnePi6Wh6QLbpDnuefPWrKLyo_p4EaZK_hCWWZFk0XeoEWgsVcG7piMae2mpesimiWeA1ncqkbfQNdI4bYIUt31iFDz-XBG0osSH8GoGHCQ",
      "e": "AQAB",
      "use": "sig",
      "kid": "rsa-none-alt-arg",
      "qi": "VzPxjxy_hoMSgrGMWYQLmPg0OT0gLbvyRDwFKLIPU_-pt4CKZBzzhk5NtQ9SpnPiWQ-z0D1TjHAV53CO5sJZEfevKXoTwsnBLmJwnFBq4BInXcl8PGt_5p_nx9HYxc3Lo0NU0oDSID-B3rh2fjXt3NvHJbbAHZZuaRdsw5PM1ZU",
      "dp": "H_X3tI32N9nkzjr7ddW9agipAawxzrnblRfOuBdecUjfZ2KazHU0RCCcyoDoS28D1X_dNYuOBTT7UkXmtSq1-ImZnDXf7x-rm5W1xOSYkebEWmwj3Neo5fx9CFSm7lK-l-tzpikbTD04xz0rfBfV6VkIBWxcmHB19t8kzrZRyKU",
      "dq": "DejOHwZgNQax2adq8LJMxL1eJtrJiO49RlqKBjppACnzMgX4K5P4Y8nc22pC8iA0qyYOPKHyST80kb-zjSuNmXm36MK-9tesOKUepM-uIYxHUYUtgHoOaY9HaQhLmx1GosPeC9rUeTfHcx-Wr0-dOTOI1YwiSIiXyBeZrDYgVFM",
      "n": "rHO0Hvkwg8p9MMsTK9H2cWIVcuTXgqD9MQZnb48FM-tdmoMlPjU5WUg4N8h_4jdQ1ADgQACppuoJiXhDidN4aOiVjSso-SRjwWxKbq4TVvlNdzOCH-ligo4ftcJBLUWJJLD3I64BGG7KMoovEPFN89jR3VXD6RyKj4vaY706CaCkxZlGS9Mp8sGdT7zv5UjGKhh4-KRolRq9mId2mnleIvZBYyANxd0Rb861RY7g3O4DxWEA3xtxkSJrcBkDyY8IrKl0mxKldaR9rll4FmYoNZWzZqFoDfLzt7rYSiYOfXdt-QIlMlZthqVa3RJMM8L5MrRevoRVKjmulH1_KaXwyQ"
    }
  ]
}

2026-11-12 17:00:39

(1) More

SUCCESS

FAPI2-SP-FINAL-5.3.2.2-1

AddResponseTypeCodeToServerConfiguration

Added code as response type supported

response_types_supported

[
  "code"
]

2026-11-12 17:00:39	SUCCESS FAPI2-SP-FINAL-5.3.2.2-7	AddIssSupportedToServerConfiguration Added 'authorization_response_iss_parameter_supported' as 'true' to server metadata

2026-11-12 17:00:39

(1) More

SUCCESS

FAPI2-SP-FINAL-5.3.2.2-5

AddCodeChallengeMethodToServerConfiguration

Added S256 as supported code challenge method

code_challenge_methods_supported

[
  "S256"
]

2026-11-12 17:00:39

(1) More

SUCCESS

ExtractServerSigningAlg

Successfully extracted algorithm

signing_algorithm

ES256

2026-11-12 17:00:39

(1) More

SUCCESS

AddIdTokenSigningAlgsToServerConfiguration

Added 'id_token_signing_alg_values_supported' to server metadata as 'alg' from server jwks

value

[
  "ES256"
]

2026-11-12 17:00:39

(1) More

SUCCESS

HAIP-6.1.1

VCIEnsureCredentialSigningCertificateIsNotSelfSigned

Credential signing cert is not a self-signed cert

cert_0_from_x5c

MIIBazCCARKgAwIBAgIUQYT+qvz/som9nb6vOLBeaH5QGTowCgYIKoZIzj0EAwIwEjEQMA4GA1UEAwwHVGVzdCBDQTAeFw0yNjA1MDExNjMzNDdaFw0yNzA1MDExNjMzNDdaMBYxFDASBgNVBAMMC3Rlc3Qtc2lnbmVyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEDC9X9ll7j9Jal+AHuMgPRKDVu6Qx575dS7jp6Byweh2NPoN58YShoht3WAO+5zoRoQJXobNKNIqXQ+O0noJmQ6NCMEAwHQYDVR0OBBYEFHxAz1jw9mXJlVfcQMFkcDreoP5rMB8GA1UdIwQYMBaAFIqC34T7zF9Xxv1tMeztb+/8FwNxMAoGCCqGSM49BAMCA0cAMEQCIBfEz6qX90M465dRjQzo9Ksr7ljrlN/fZtLZolgafArAAiBA3eras8roO9M0t/Nny/Hpod/4bZ2S6gIlKGFc5C6EmQ==

2026-11-12 17:00:39

(1) More

SUCCESS

DPOP-5.1

AddDpopSigningAlgValuesSupportedToServerConfiguration

Set dpop_signing_alg_values_supported

values

[
  "PS256",
  "ES256",
  "EdDSA",
  "Ed25519"
]

2026-11-12 17:00:39

(1) More

SetTokenEndpointAuthMethodsSupportedToPrivateKeyJWTOnly

Changed token_endpoint_auth_methods_supported to private_key_jwt only in server configuration

server_configuration

{
  "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/authorize",
  "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/token",
  "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/register",
  "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/userinfo",
  "mtls_endpoint_aliases": {
    "token_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/token",
    "registration_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/register",
    "userinfo_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/userinfo"
  },
  "response_types_supported": [
    "code"
  ],
  "authorization_response_iss_parameter_supported": true,
  "code_challenge_methods_supported": [
    "S256"
  ],
  "id_token_signing_alg_values_supported": [
    "ES256"
  ],
  "dpop_signing_alg_values_supported": [
    "PS256",
    "ES256",
    "EdDSA",
    "Ed25519"
  ],
  "token_endpoint_auth_methods_supported": [
    "private_key_jwt"
  ]
}

2026-11-12 17:00:39

(2) More

PAR-5

AddPushedAuthorizationRequestEndpointToServerConfig

Added pushed_authorization_request_endpoint to server configuration

mtls_endpoint	https://localhost:8444/test-mtls/a/siros-wallet-vci-test/par
endpoint	https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/par

2026-11-12 17:00:39

(1) More

PAR-5

AddRequirePushedAuthorizationRequestsToServerConfig

Added require_pushed_authorization_requests to server configuration

value

true

2026-11-12 17:00:39

(1) More

SUCCESS

FAPI2AddTokenEndpointAuthSigningAlgValuesSupportedToServer

Set token_endpoint_auth_signing_alg_values_supported

values

[
  "PS256",
  "ES256",
  "EdDSA",
  "Ed25519"
]

2026-11-12 17:00:39		VCIRegisterKeyAttestationTrustAnchor Skipping registration of empty trust anchor certificate for key attestation

2026-11-12 17:00:39

(1) More

OID4VCI-1FINALA-A.3.2 OID4VCI-1FINAL-12.2 OID4VCI-1FINALA-A.2.2

VCILogGeneratedCredentialIssuerMetadata

Created credential issuer metadata

credential_issuer

{
  "credential_issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "credential_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/credential",
  "nonce_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/nonce",
  "deferred_credential_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/deferred_credential",
  "authorization_servers": [
    "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/"
  ],
  "credential_configurations_supported": {
    "eu.europa.ec.eudi.pid.1": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1"
    },
    "eu.europa.ec.eudi.pid.1.attestation": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: Attestation GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.attestation"
    },
    "eu.europa.ec.eudi.pid.1.jwt.keyattest": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: JWT Proof with Key Attestation GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.jwt.keyattest"
    },
    "eu.europa.ec.eudi.pid.1.attestation.keyattest": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: Attestation Proof with Key Attestation GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.attestation.keyattest"
    },
    "eu.europa.ec.eudi.pid.1.jwt_and_attestation.keyattest": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        },
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID: JWT and Attestation Proof with Key Attestation GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake PID description"
          }
        ]
      },
      "scope": "eudi.pid.1.jwt_and_attestation.keyattest"
    },
    "eu.europa.ec.eudi.pid.mdoc.1": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc) GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1"
    },
    "eu.europa.ec.eudi.pid.mdoc.1.attestation": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc): Attestation GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1.attestation"
    },
    "eu.europa.ec.eudi.pid.mdoc.1.jwt.keyattest": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc): JWT Proof with Key Attestation GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1.jwt.keyattest"
    },
    "eu.europa.ec.eudi.pid.mdoc.1.attestation.keyattest": {
      "format": "mso_mdoc",
      "doctype": "eu.europa.ec.eudi.pid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ],
          "key_attestations_required": {}
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (mdoc): Attestation Proof with Key Attestation GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake PID in mso_mdoc format"
          }
        ]
      },
      "scope": "eudi.pid.mdoc.1.attestation.keyattest"
    },
    "org.iso.18013.5.1.mDL": {
      "format": "mso_mdoc",
      "doctype": "org.iso.18013.5.1.mDL",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake mDL (ISO 18013-5) GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake Mobile Driver\u0027s License"
          }
        ]
      },
      "scope": "org.iso.18013.5.1.mDL"
    },
    "org.iso.23220.photoid.1": {
      "format": "mso_mdoc",
      "doctype": "org.iso.23220.photoid.1",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "jwt": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake Photo ID (ISO/IEC TS 23220-4) GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake Photo ID"
          }
        ]
      },
      "scope": "org.iso.23220.photoid.1"
    },
    "org.iso.18013.5.1.mDL.attestation": {
      "format": "mso_mdoc",
      "doctype": "org.iso.18013.5.1.mDL",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake mDL (ISO 18013-5): Attestation GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake Mobile Driver\u0027s License"
          }
        ]
      },
      "scope": "org.iso.18013.5.1.mDL.attestation"
    },
    "eu.europa.ec.eudi.pid.1.nobinding": {
      "format": "dc+sd-jwt",
      "vct": "urn:eudi:pid:1",
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "credential_metadata": {
        "display": [
          {
            "name": "Fake PID (No Holder Binding) GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake PID without cryptographic holder binding"
          }
        ]
      },
      "scope": "eudi.pid.1.nobinding"
    },
    "net.openid.examples.certification.1.sdjwtvc": {
      "format": "dc+sd-jwt",
      "vct": "urn:openid:example:certification:1",
      "cryptographic_binding_methods_supported": [
        "jwk"
      ],
      "credential_signing_alg_values_supported": [
        "ES256"
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake OpenID Certification GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake Certification"
          }
        ]
      },
      "scope": "openid.example.cert.1"
    },
    "net.openid.examples.certification.1.mdoc": {
      "format": "mso_mdoc",
      "doctype": "net.openid.examples.certification.1.mdoc",
      "cryptographic_binding_methods_supported": [
        "cose_key"
      ],
      "credential_signing_alg_values_supported": [
        -7
      ],
      "proof_types_supported": {
        "attestation": {
          "proof_signing_alg_values_supported": [
            "ES256"
          ]
        }
      },
      "credential_metadata": {
        "display": [
          {
            "name": "Fake OpenID Certification (mdoc) GZuYWdpptTrJw1n",
            "description": "OpenID Conformance Test Fake Certification"
          }
        ]
      },
      "scope": "openid.example.cert.1"
    }
  }
}

2026-11-12 17:00:39	OID4VCI-1FINAL-12.2.4	VCIAddOpenIdCredentialToAuthorizationDetailsSupportedIfScopeIsMissing No need to add openid_credential to authorization_details_types_supported in oauth authorization server metadata as all credential configurations use a scope

2026-11-12 17:00:39

(1) More

VCIInjectCredentialConfigurationIdHint

Using implicit credential_configuration_id eu.europa.ec.eudi.pid.1

credential_configuration_id

eu.europa.ec.eudi.pid.1

2026-11-12 17:00:39

(1) More

SUCCESS

CheckServerConfiguration

Found required server configuration keys

required

[
  "authorization_endpoint",
  "token_endpoint",
  "issuer"
]

2026-11-12 17:00:39

(1) More

SUCCESS

FAPI2-SP-FINAL-5.4.1-3 FAPI2-SP-FINAL-5.4.1-2

FAPI2FinalEnsureMinimumServerKeyLength

Validated minimum key lengths for server_jwks

server_jwks

{
  "keys": [
    {
      "kty": "EC",
      "d": "9cez3K_DuFS4egCVhvySFQsacFt4v6njd_fZ3Ox00jw",
      "use": "sig",
      "crv": "P-256",
      "kid": "server-key-1",
      "x": "3DB83F3-PlsZuOeCKbiB1Z086DHttKREjakcnBBZYPU",
      "y": "lLDSzUs8cDQAqwGucLIP_7QRC1PnSPrWcw2O8HG1zME",
      "alg": "ES256"
    }
  ]
}

2026-11-12 17:00:39

(1) More

SUCCESS

LoadUserInfo

Added user information

user_info

{
  "sub": "user-subject-1234531",
  "name": "Demo T. User",
  "email": "user@example.com",
  "email_verified": false
}

Verify configuration of first client

2026-11-12 17:00:39

(4) More

SUCCESS

GetStaticClientConfiguration

Found a static client object

client_id	siros-wallet-test
redirect_uri	http://localhost:3010/
jwks	{ "keys": [ { "kty": "EC", "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc", "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI", "crv": "P-256", "kid": "client-key-1", "use": "sig", "alg": "ES256" } ] }
private_key	{ "kty": "EC", "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc", "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI", "crv": "P-256", "d": "KJEKZo2PQq6E40P6HMenViCVBRXoWD2FDyevRsJnlG0", "kid": "client-key-1", "use": "sig", "alg": "ES256" }

Validate the JWK set in client configuration

2026-11-12 17:00:39

(1) More

SUCCESS

MapJwksToValidationLocation

Selected the JWK set in client configuration for validation

jwks

{
  "keys": [
    {
      "kty": "EC",
      "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc",
      "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI",
      "crv": "P-256",
      "kid": "client-key-1",
      "use": "sig",
      "alg": "ES256"
    }
  ]
}

2026-11-12 17:00:39

(1) More

SUCCESS

RFC7517-1.1

EnsureJwksHasNoPrivateOrSymmetricKeyMaterial

The JWK set in client configuration contains only public key material

jwks_source

client configuration

2026-11-12 17:00:39

(1) More

SUCCESS

RFC7517-1.1

ValidateJwksStructure

The JWK set in client configuration is structurally valid

jwks_source

client configuration

2026-11-12 17:00:39

(1) More

SUCCESS

RFC7517-1.1

ParseUsableJwksKeys

All usable keys in the JWK set in client configuration parse successfully

jwks_source

client configuration

2026-11-12 17:00:39

(1) More

SUCCESS

RFC7517-1.1

WarnOnUnusableJwksKeys

All keys in the JWK set in client configuration use a supported key type, curve and algorithm

jwks_source

client configuration

2026-11-12 17:00:39

(2) More

SUCCESS

ExtractJWKsFromStaticClientConfiguration

Extracted client JWK

client_jwks

{
  "keys": [
    {
      "kty": "EC",
      "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc",
      "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI",
      "crv": "P-256",
      "kid": "client-key-1",
      "use": "sig",
      "alg": "ES256"
    }
  ]
}

client_public_jwks

{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "client-key-1",
      "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc",
      "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI",
      "alg": "ES256"
    }
  ]
}

2026-11-12 17:00:39

(1) More

SUCCESS

RFC7517-4.5

CheckDistinctKeyIdValueInClientJWKs

Distinct 'kid' value in all keys of client_jwks

see	https://bitbucket.org/openid/connect/issues/1127

2026-11-12 17:00:39

(1) More

SUCCESS

FAPI2-SP-FINAL-5.4.1-3 FAPI2-SP-FINAL-5.4.1-2

FAPI2FinalEnsureMinimumClientKeyLength

Validated minimum key lengths for client_jwks

client_jwks

{
  "keys": [
    {
      "kty": "EC",
      "x": "ktT77AqMntawPyU772lBg8nd7cwENrYyOL_KWbYN8Jc",
      "y": "67lPXEq5gJdimDYD0AacxLfRfIm2-fSNd3HBqyXXvBI",
      "crv": "P-256",
      "kid": "client-key-1",
      "use": "sig",
      "alg": "ES256"
    }
  ]
}

2026-11-12 17:00:39

(1) More

SUCCESS

CreateAuthorizationServerDpopNonce

Created Authorization Server DPoP nonce

authorization_server_dpop_nonce

pEaDaQbIIEwQDneDIvgwfuomupKnVeGxyTVGeLDAWEwLGxdxaN5159031217!--@-<}{$/+`>%=$:|;-.>;!('':){

2026-11-12 17:00:39

(1) More

SUCCESS

CreateResourceServerDpopNonce

Created Resource Server nonce

resource_server_dpop_nonce

WqICOurjxhpBPTWVkObjdqkKszokMXdmIwVCxsWrYDQeMhvVyu5558958758][}.***@%:'$(/}):},]<<,=|!%%;+

2026-11-12 17:00:39

(1) More

SUCCESS

FAPI2-SP-FINAL-5.4.2 RFC7517-4.5

CheckDistinctKeyIdValueInServerJWKs

Distinct 'kid' value in all keys of server_jwks

see	https://bitbucket.org/openid/connect/issues/1127

2026-11-12 17:00:39		oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response Setup Done

2026-11-12 17:00:39

(3) More

SUCCESS

OID4VCI-1FINAL-3.5 OID4VCI-1FINAL-4.1

VCIPreparePreAuthorizationCode

Prepared pre-authorized code

pre-authorized_code	Wgzl9LUB5gMQXhV2tpRTqOgPa28hErw8
tx_code	{ "length": 6, "input_mode": "numeric", "description": "Input the one-time code: \u003c123456\u003e for testing purposes" }
tx_code_value	123456

2026-11-12 17:00:39

(1) More

OID4VCI-1FINAL-4.1

VCICreateCredentialOffer

Using credential_configuration_id eu.europa.ec.eudi.pid.1

credential_configuration_id

eu.europa.ec.eudi.pid.1

2026-11-12 17:00:39

(3) More

OID4VCI-1FINAL-4.1

VCICreateCredentialOffer

Generated credential offer

credential_offer

{
  "credential_issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "credential_configuration_ids": [
    "eu.europa.ec.eudi.pid.1"
  ],
  "grants": {
    "urn:ietf:params:oauth:grant-type:pre-authorized_code": {
      "pre-authorized_code": "Wgzl9LUB5gMQXhV2tpRTqOgPa28hErw8",
      "tx_code": {
        "length": 6,
        "input_mode": "numeric",
        "description": "Input the one-time code: \u003c123456\u003e for testing purposes"
      }
    }
  }
}

issuer_state

grant_type

PRE_AUTHORIZATION_CODE

2026-11-12 17:00:39

(2) More

SUCCESS

OID4VCI-1FINAL-4.1

VCICreateCredentialOfferRedirectUrl

Created credential offer redirect url

credential_offer_redirect_url

openid-credential-offer://?credential_offer=%7B%22credential_issuer%22:%22https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/%22,%22credential_configuration_ids%22:%5B%22eu.europa.ec.eudi.pid.1%22%5D,%22grants%22:%7B%22urn:ietf:params:oauth:grant-type:pre-authorized_code%22:%7B%22pre-authorized_code%22:%22Wgzl9LUB5gMQXhV2tpRTqOgPa28hErw8%22,%22tx_code%22:%7B%22length%22:6,%22input_mode%22:%22numeric%22,%22description%22:%22Input%20the%20one-time%20code:%20%3C123456%3E%20for%20testing%20purposes%22%7D%7D%7D%7D

credential_offer_type

BY_VALUE

2026-11-12 17:00:40

(12) More

INCOMING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Incoming HTTP request to /.well-known/openid-credential-issuer/test/a/siros-wallet-vci-test/

incoming_headers	{ "host": "localhost.emobix.co.uk", "x-forwarded-uri": "/.well-known/openid-credential-issuer/test/a/siros-wallet-vci-test/", "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps", "connection": "close", "sec-ch-ua-platform": "\"Windows\"", "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36", "accept": "application/openid-credential-issuer+jwt, application/json", "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"", "accept-language": "en-US", "sec-ch-ua-mobile": "?0", "sec-fetch-site": "cross-site", "sec-fetch-mode": "cors", "sec-fetch-dest": "empty", "referer": "http://localhost:3010/", "accept-encoding": "gzip, deflate, br, zstd" }
incoming_path	/.well-known/openid-credential-issuer/test/a/siros-wallet-vci-test/
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.3
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_body_json_parse_error
incoming_tls_cipher	TLS_AES_256_GCM_SHA384
incoming_body_json

Get Credential Issuer Metadata

2026-11-12 17:00:40	SUCCESS OID4VCI-1FINAL-12.2.2	EnsureIncomingRequestMethodIsGet Client correctly used http GET method

2026-11-12 17:00:40

(1) More

SUCCESS

OID4VCI-1FINAL-12.2.2

VCICheckIssuerMetadataRequestUrl

Issuer metadata request is for correct URL

request_url

https://localhost.emobix.co.uk:8443/.well-known/openid-credential-issuer/test/a/siros-wallet-vci-test/

2026-11-12 17:00:40

(4) More

OUTGOING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Response to HTTP request to test instance GZuYWdpptTrJw1n

outgoing_status_code	200
outgoing_body	{ "credential_issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/", "credential_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/credential", "nonce_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/nonce", "deferred_credential_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/deferred_credential", "authorization_servers": [ "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/" ], "credential_configurations_supported": { "eu.europa.ec.eudi.pid.1": { "format": "dc+sd-jwt", "vct": "urn:eudi:pid:1", "cryptographic_binding_methods_supported": [ "jwk" ], "credential_signing_alg_values_supported": [ "ES256" ], "proof_types_supported": { "jwt": { "proof_signing_alg_values_supported": [ "ES256" ] } }, "credential_metadata": { "display": [ { "name": "Fake PID GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake PID description" } ] }, "scope": "eudi.pid.1" }, "eu.europa.ec.eudi.pid.1.attestation": { "format": "dc+sd-jwt", "vct": "urn:eudi:pid:1", "cryptographic_binding_methods_supported": [ "jwk" ], "credential_signing_alg_values_supported": [ "ES256" ], "proof_types_supported": { "attestation": { "proof_signing_alg_values_supported": [ "ES256" ] } }, "credential_metadata": { "display": [ { "name": "Fake PID: Attestation GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake PID description" } ] }, "scope": "eudi.pid.1.attestation" }, "eu.europa.ec.eudi.pid.1.jwt.keyattest": { "format": "dc+sd-jwt", "vct": "urn:eudi:pid:1", "cryptographic_binding_methods_supported": [ "jwk" ], "credential_signing_alg_values_supported": [ "ES256" ], "proof_types_supported": { "jwt": { "proof_signing_alg_values_supported": [ "ES256" ], "key_attestations_required": {} } }, "credential_metadata": { "display": [ { "name": "Fake PID: JWT Proof with Key Attestation GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake PID description" } ] }, "scope": "eudi.pid.1.jwt.keyattest" }, "eu.europa.ec.eudi.pid.1.attestation.keyattest": { "format": "dc+sd-jwt", "vct": "urn:eudi:pid:1", "cryptographic_binding_methods_supported": [ "jwk" ], "credential_signing_alg_values_supported": [ "ES256" ], "proof_types_supported": { "attestation": { "proof_signing_alg_values_supported": [ "ES256" ], "key_attestations_required": {} } }, "credential_metadata": { "display": [ { "name": "Fake PID: Attestation Proof with Key Attestation GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake PID description" } ] }, "scope": "eudi.pid.1.attestation.keyattest" }, "eu.europa.ec.eudi.pid.1.jwt_and_attestation.keyattest": { "format": "dc+sd-jwt", "vct": "urn:eudi:pid:1", "cryptographic_binding_methods_supported": [ "jwk" ], "credential_signing_alg_values_supported": [ "ES256" ], "proof_types_supported": { "jwt": { "proof_signing_alg_values_supported": [ "ES256" ], "key_attestations_required": {} }, "attestation": { "proof_signing_alg_values_supported": [ "ES256" ], "key_attestations_required": {} } }, "credential_metadata": { "display": [ { "name": "Fake PID: JWT and Attestation Proof with Key Attestation GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake PID description" } ] }, "scope": "eudi.pid.1.jwt_and_attestation.keyattest" }, "eu.europa.ec.eudi.pid.mdoc.1": { "format": "mso_mdoc", "doctype": "eu.europa.ec.eudi.pid.1", "cryptographic_binding_methods_supported": [ "cose_key" ], "credential_signing_alg_values_supported": [ -7 ], "proof_types_supported": { "jwt": { "proof_signing_alg_values_supported": [ "ES256" ] } }, "credential_metadata": { "display": [ { "name": "Fake PID (mdoc) GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake PID in mso_mdoc format" } ] }, "scope": "eudi.pid.mdoc.1" }, "eu.europa.ec.eudi.pid.mdoc.1.attestation": { "format": "mso_mdoc", "doctype": "eu.europa.ec.eudi.pid.1", "cryptographic_binding_methods_supported": [ "cose_key" ], "credential_signing_alg_values_supported": [ -7 ], "proof_types_supported": { "attestation": { "proof_signing_alg_values_supported": [ "ES256" ] } }, "credential_metadata": { "display": [ { "name": "Fake PID (mdoc): Attestation GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake PID in mso_mdoc format" } ] }, "scope": "eudi.pid.mdoc.1.attestation" }, "eu.europa.ec.eudi.pid.mdoc.1.jwt.keyattest": { "format": "mso_mdoc", "doctype": "eu.europa.ec.eudi.pid.1", "cryptographic_binding_methods_supported": [ "cose_key" ], "credential_signing_alg_values_supported": [ -7 ], "proof_types_supported": { "jwt": { "proof_signing_alg_values_supported": [ "ES256" ], "key_attestations_required": {} } }, "credential_metadata": { "display": [ { "name": "Fake PID (mdoc): JWT Proof with Key Attestation GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake PID in mso_mdoc format" } ] }, "scope": "eudi.pid.mdoc.1.jwt.keyattest" }, "eu.europa.ec.eudi.pid.mdoc.1.attestation.keyattest": { "format": "mso_mdoc", "doctype": "eu.europa.ec.eudi.pid.1", "cryptographic_binding_methods_supported": [ "cose_key" ], "credential_signing_alg_values_supported": [ -7 ], "proof_types_supported": { "attestation": { "proof_signing_alg_values_supported": [ "ES256" ], "key_attestations_required": {} } }, "credential_metadata": { "display": [ { "name": "Fake PID (mdoc): Attestation Proof with Key Attestation GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake PID in mso_mdoc format" } ] }, "scope": "eudi.pid.mdoc.1.attestation.keyattest" }, "org.iso.18013.5.1.mDL": { "format": "mso_mdoc", "doctype": "org.iso.18013.5.1.mDL", "cryptographic_binding_methods_supported": [ "cose_key" ], "credential_signing_alg_values_supported": [ -7 ], "proof_types_supported": { "jwt": { "proof_signing_alg_values_supported": [ "ES256" ] } }, "credential_metadata": { "display": [ { "name": "Fake mDL (ISO 18013-5) GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake Mobile Driver\u0027s License" } ] }, "scope": "org.iso.18013.5.1.mDL" }, "org.iso.23220.photoid.1": { "format": "mso_mdoc", "doctype": "org.iso.23220.photoid.1", "cryptographic_binding_methods_supported": [ "cose_key" ], "credential_signing_alg_values_supported": [ -7 ], "proof_types_supported": { "jwt": { "proof_signing_alg_values_supported": [ "ES256" ] } }, "credential_metadata": { "display": [ { "name": "Fake Photo ID (ISO/IEC TS 23220-4) GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake Photo ID" } ] }, "scope": "org.iso.23220.photoid.1" }, "org.iso.18013.5.1.mDL.attestation": { "format": "mso_mdoc", "doctype": "org.iso.18013.5.1.mDL", "cryptographic_binding_methods_supported": [ "cose_key" ], "credential_signing_alg_values_supported": [ -7 ], "proof_types_supported": { "attestation": { "proof_signing_alg_values_supported": [ "ES256" ] } }, "credential_metadata": { "display": [ { "name": "Fake mDL (ISO 18013-5): Attestation GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake Mobile Driver\u0027s License" } ] }, "scope": "org.iso.18013.5.1.mDL.attestation" }, "eu.europa.ec.eudi.pid.1.nobinding": { "format": "dc+sd-jwt", "vct": "urn:eudi:pid:1", "credential_signing_alg_values_supported": [ "ES256" ], "credential_metadata": { "display": [ { "name": "Fake PID (No Holder Binding) GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake PID without cryptographic holder binding" } ] }, "scope": "eudi.pid.1.nobinding" }, "net.openid.examples.certification.1.sdjwtvc": { "format": "dc+sd-jwt", "vct": "urn:openid:example:certification:1", "cryptographic_binding_methods_supported": [ "jwk" ], "credential_signing_alg_values_supported": [ "ES256" ], "proof_types_supported": { "attestation": { "proof_signing_alg_values_supported": [ "ES256" ] } }, "credential_metadata": { "display": [ { "name": "Fake OpenID Certification GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake Certification" } ] }, "scope": "openid.example.cert.1" }, "net.openid.examples.certification.1.mdoc": { "format": "mso_mdoc", "doctype": "net.openid.examples.certification.1.mdoc", "cryptographic_binding_methods_supported": [ "cose_key" ], "credential_signing_alg_values_supported": [ -7 ], "proof_types_supported": { "attestation": { "proof_signing_alg_values_supported": [ "ES256" ] } }, "credential_metadata": { "display": [ { "name": "Fake OpenID Certification (mdoc) GZuYWdpptTrJw1n", "description": "OpenID Conformance Test Fake Certification" } ] }, "scope": "openid.example.cert.1" } } }
outgoing_headers	{ "headers": { "Content-Type": [ "application/json" ] } }
outgoing_path

2026-11-12 17:00:40

(12) More

INCOMING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Incoming HTTP request to /.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test

incoming_headers	{ "host": "localhost.emobix.co.uk", "x-forwarded-uri": "/.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test", "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps", "connection": "close", "sec-ch-ua-platform": "\"Windows\"", "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36", "accept": "application/json", "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"", "accept-language": "en-US", "sec-ch-ua-mobile": "?0", "sec-fetch-site": "cross-site", "sec-fetch-mode": "cors", "sec-fetch-dest": "empty", "referer": "http://localhost:3010/", "accept-encoding": "gzip, deflate, br, zstd" }
incoming_path	/.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.3
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_body_json_parse_error
incoming_tls_cipher	TLS_AES_256_GCM_SHA384
incoming_body_json

Get OAuth Authorization Metadata

2026-11-12 17:00:40	SUCCESS RFC8414-3.1	EnsureIncomingRequestMethodIsGet Client correctly used http GET method

2026-11-12 17:00:40

(1) More

SUCCESS

RFC8414-3.1

VCICheckOAuthAuthorizationServerMetadataRequestUrl

OAuth authorization server metadata request is for correct URL

request_url

https://localhost.emobix.co.uk:8443/.well-known/oauth-authorization-server/test/a/siros-wallet-vci-test

2026-11-12 17:00:40

(4) More

OUTGOING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Response to HTTP request to test instance GZuYWdpptTrJw1n

outgoing_status_code	200
outgoing_body	{ "issuer": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/", "authorization_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/authorize", "token_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/token", "registration_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/register", "userinfo_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/userinfo", "mtls_endpoint_aliases": { "token_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/token", "registration_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/register", "userinfo_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/userinfo", "pushed_authorization_request_endpoint": "https://localhost:8444/test-mtls/a/siros-wallet-vci-test/par" }, "response_types_supported": [ "code" ], "authorization_response_iss_parameter_supported": true, "code_challenge_methods_supported": [ "S256" ], "id_token_signing_alg_values_supported": [ "ES256" ], "dpop_signing_alg_values_supported": [ "PS256", "ES256", "EdDSA", "Ed25519" ], "token_endpoint_auth_methods_supported": [ "private_key_jwt" ], "pushed_authorization_request_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/par", "require_pushed_authorization_requests": true, "token_endpoint_auth_signing_alg_values_supported": [ "PS256", "ES256", "EdDSA", "Ed25519" ], "status_list_aggregation_endpoint": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/statuslists" }
outgoing_headers	{ "headers": { "Content-Type": [ "application/json" ] } }
outgoing_path

2026-11-12 17:00:40

(12) More

INCOMING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Incoming HTTP request to /test/a/siros-wallet-vci-test/token

incoming_headers	{ "host": "localhost.emobix.co.uk", "x-forwarded-uri": "/test/a/siros-wallet-vci-test/token", "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps", "connection": "close", "content-length": "685", "sec-ch-ua-platform": "\"Windows\"", "accept-language": "en-US", "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"", "sec-ch-ua-mobile": "?0", "dpop": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJ3WDEtd3RjazN5VjdqeFREdnlCb253IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvdG9rZW4iLCJpYXQiOjE3OTQ1MDI4NDB9.l_nzz71do1Y1nLy-y4RGgsaMCicmyZkCrfWL65KlLJMgxFUV8wffkAChf2s6T96ViaWrdvoM72OFUv3ZFtm_gA", "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36", "accept": "application/json", "content-type": "application/x-www-form-urlencoded", "sec-fetch-site": "cross-site", "sec-fetch-mode": "cors", "sec-fetch-dest": "empty", "referer": "http://localhost:3010/", "accept-encoding": "gzip, deflate, br, zstd" }
incoming_path	/test/a/siros-wallet-vci-test/token
incoming_body_form_params	{ "grant_type": "urn:ietf:params:oauth:grant-type:pre-authorized_code", "pre-authorized_code": "Wgzl9LUB5gMQXhV2tpRTqOgPa28hErw8", "tx_code": "123456", "client_id": "siros-wallet-test", "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer", "client_assertion": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDUwMzE0MCwiaWF0IjoxNzk0NTAyODQwLCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjE4ZTZjZTk5ZmQ2NDExYjM3OTM5NDU0ZiIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.rPCqB7p1D7wy7k1oTzl4WxKuSULDaYga0ES8MMP7GyJ6FRVr7JCNh88W9tJ6HWiBCfVx_bloGfimTdaL18I2kA" }
incoming_method	POST
incoming_tls_version	TLSv1.3
incoming_tls_cert
incoming_query_string_params	{}
incoming_body	grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Apre-authorized_code&pre-authorized_code=Wgzl9LUB5gMQXhV2tpRTqOgPa28hErw8&tx_code=123456&client_id=siros-wallet-test&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDUwMzE0MCwiaWF0IjoxNzk0NTAyODQwLCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjE4ZTZjZTk5ZmQ2NDExYjM3OTM5NDU0ZiIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.rPCqB7p1D7wy7k1oTzl4WxKuSULDaYga0ES8MMP7GyJ6FRVr7JCNh88W9tJ6HWiBCfVx_bloGfimTdaL18I2kA
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_body_json_parse_error
incoming_tls_cipher	TLS_AES_256_GCM_SHA384
incoming_body_json

2026-11-12 17:00:40	SUCCESS FAPI2-SP-FINAL-5.2.1-1 FAPI2-SP-FINAL-5.2.1-2 FAPI2-SP-FINAL-5.2.1-3	EnsureIncomingTls12WithBCP195SecureCipherOrTls13 Found TLS 1.3 connection

2026-11-12 17:00:40	SUCCESS RFC9325-3.1.1	EnsureIncomingTls13 TLS 1.3 in use

Token endpoint

2026-11-12 17:00:40

(1) More

SUCCESS

RFC6749-3.2.1

CheckClientIdMatchesOnTokenRequestIfPresent

Extracted client_id matches the expected value

client_id

siros-wallet-test

2026-11-12 17:00:40

(1) More

SUCCESS

RFC7523-2.2

ExtractClientAssertion

Parsed client assertion

client_assertion

{
  "value": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDUwMzE0MCwiaWF0IjoxNzk0NTAyODQwLCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjE4ZTZjZTk5ZmQ2NDExYjM3OTM5NDU0ZiIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.rPCqB7p1D7wy7k1oTzl4WxKuSULDaYga0ES8MMP7GyJ6FRVr7JCNh88W9tJ6HWiBCfVx_bloGfimTdaL18I2kA",
  "header": {
    "kid": "client-key-1",
    "typ": "JWT",
    "alg": "ES256"
  },
  "claims": {
    "aud": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
    "sub": "siros-wallet-test",
    "iss": "siros-wallet-test",
    "exp": 1794503140,
    "iat": 1794502840,
    "jti": "18e6ce99fd6411b37939454f"
  }
}

2026-11-12 17:00:40	OIDCR-2	EnsureClientAssertionSignatureAlgorithmMatchesRegistered token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used

2026-11-12 17:00:40

(1) More

SUCCESS

OIDCC-9

ValidateClientAssertionSignature

client_assertion signature validated

client_assertion

eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDUwMzE0MCwiaWF0IjoxNzk0NTAyODQwLCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6IjE4ZTZjZTk5ZmQ2NDExYjM3OTM5NDU0ZiIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.rPCqB7p1D7wy7k1oTzl4WxKuSULDaYga0ES8MMP7GyJ6FRVr7JCNh88W9tJ6HWiBCfVx_bloGfimTdaL18I2kA

2026-11-12 17:00:40

(1) More

SUCCESS

RFC7523-2.2

EnsureClientAssertionTypeIsJwt

Found JWT assertion type

assertion type

urn:ietf:params:oauth:client-assertion-type:jwt-bearer

2026-11-12 17:00:40	SUCCESS RFC7523-3 OIDCC-9	ValidateClientAssertionClaims Client Assertion passed all validation checks

2026-11-12 17:00:40	SUCCESS RFC7523-3	CheckForClientAssertionJtiReuse No reuse found for client_assertion JWT for jti=18e6ce99fd6411b37939454f

2026-11-12 17:00:40	SUCCESS FAPI2-SP-FINAL-5.3.3.1-5	ValidateClientAssertionAudClaimIsIssuerAsString private_key_jwt client Assertion 'aud' claim matches the authentication server issuer url

2026-11-12 17:00:40

(2) More

SUCCESS

OID4VCI-1FINAL-3.5

VCIValidateTxCode

Received tx_code matches expected tx_code

actual_tx_code	123456
expected_tx_code	123456

2026-11-12 17:00:40

(3) More

SUCCESS

DPOP-5

ExtractDpopProofFromHeader

Found and parsed the incoming_dpop_proof from incoming_request

value	eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJ3WDEtd3RjazN5VjdqeFREdnlCb253IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvdG9rZW4iLCJpYXQiOjE3OTQ1MDI4NDB9.l_nzz71do1Y1nLy-y4RGgsaMCicmyZkCrfWL65KlLJMgxFUV8wffkAChf2s6T96ViaWrdvoM72OFUv3ZFtm_gA
header	{ "typ": "dpop+jwt", "alg": "ES256", "jwk": { "kty": "EC", "crv": "P-256", "x": "GeF_MtEV6ouKCM2KAzYlFOB5RSpAguVLNU66NFzGp4U", "y": "bju0srk1RRx-aBK8E0a-PyCEKSiizMSbaxIW2wdDDTY" } }
claims	{ "htm": "POST", "htu": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/token", "iat": 1794502840, "jti": "wX1-wtck3yV7jxTDvyBonw" }

2026-11-12 17:00:40	SUCCESS DPOP-4.3	ValidateDpopProofTokenRequest DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks

2026-11-12 17:00:40	SUCCESS FAPI2-SP-ID2-5.3.2.1-14 DPOP-11.1	ValidateDpopProofIat DPoP Proof iat value passed validation checks

2026-11-12 17:00:40	SUCCESS FAPI2-SP-ID2-5.3.2.1-14	ValidateDpopProofNbf DPoP Proof nbf value passed validation checks

2026-11-12 17:00:40

(1) More

SUCCESS

DPOP-4.2 DPOP-11

EnsureDpopProofJtiNotAlreadyUsed

Proof jti seems to be unique to this request

jti	wX1-wtck3yV7jxTDvyBonw

2026-11-12 17:00:40

(1) More

ValidateTokenEndpointDpopProofNonce

DPoP Proof nonce not supplied

expected

pEaDaQbIIEwQDneDIvgwfuomupKnVeGxyTVGeLDAWEwLGxdxaN5159031217!--@-<}{$/+`>%=$:|;-.>;!('':){

2026-11-12 17:00:40

(1) More

ValidateTokenEndpointDpopProofNonce

Token endpoint DPoP nonce is invalid

expected

pEaDaQbIIEwQDneDIvgwfuomupKnVeGxyTVGeLDAWEwLGxdxaN5159031217!--@-<}{$/+`>%=$:|;-.>;!('':){

2026-11-12 17:00:40

(1) More

SUCCESS

DPOP-4.3-6

ValidateDpopProofSignature

DPoP Proof signature validated

DPoP Proof

eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJ3WDEtd3RjazN5VjdqeFREdnlCb253IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvdG9rZW4iLCJpYXQiOjE3OTQ1MDI4NDB9.l_nzz71do1Y1nLy-y4RGgsaMCicmyZkCrfWL65KlLJMgxFUV8wffkAChf2s6T96ViaWrdvoM72OFUv3ZFtm_gA

2026-11-12 17:00:40

(1) More

SUCCESS

DPOP-10

ValidateAuthorizationCodeDpopBindingKey

Authorization request does not use DPoP authorization code binding

dpop_jkt

dIvXXGf1-Y1RTAIVDkPuHcdA-Hj1UYTqbnxPeoTssuM

2026-11-12 17:00:40		CreateTokenEndpointDpopErrorResponse Condition ran but did not log anything

2026-11-12 17:00:40

(4) More

OUTGOING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Response to HTTP request to test instance GZuYWdpptTrJw1n

outgoing_status_code	400
outgoing_body	{ "error": "use_dpop_nonce", "error_description": "Authorization server requires nonce in DPoP proof" }
outgoing_headers	{ "headers": { "DPoP-Nonce": [ "pEaDaQbIIEwQDneDIvgwfuomupKnVeGxyTVGeLDAWEwLGxdxaN5159031217!--@-\u003c}{$/+`\u003e%\u003d$:\|;-.\u003e;!(\u0027\u0027:){" ] } }
outgoing_path	token

2026-11-12 17:00:40

(12) More

INCOMING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Incoming HTTP request to /test/a/siros-wallet-vci-test/token

incoming_headers	{ "host": "localhost.emobix.co.uk", "x-forwarded-uri": "/test/a/siros-wallet-vci-test/token", "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps", "connection": "close", "content-length": "685", "sec-ch-ua-platform": "\"Windows\"", "accept-language": "en-US", "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"", "sec-ch-ua-mobile": "?0", "dpop": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJENnN5VHVGNGdjSVgtd3A2VFAwN293IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvdG9rZW4iLCJpYXQiOjE3OTQ1MDI4NDAsIm5vbmNlIjoicEVhRGFRYklJRXdRRG5lREl2Z3dmdW9tdXBLblZlR3h5VFZHZUxEQVdFd0xHeGR4YU41MTU5MDMxMjE3IS0tQC08fXskLytgPiU9JDp8Oy0uPjshKCcnOil7In0.3rQuTQT7wFt3e7uLszgZyDzCMUhBEgUxGvtQvHltR3UG5xQ1nATKMNmzcAb2QtxxDEUjTdv48wuG6AD1g5tkkA", "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36", "accept": "application/json", "content-type": "application/x-www-form-urlencoded", "sec-fetch-site": "cross-site", "sec-fetch-mode": "cors", "sec-fetch-dest": "empty", "referer": "http://localhost:3010/", "accept-encoding": "gzip, deflate, br, zstd" }
incoming_path	/test/a/siros-wallet-vci-test/token
incoming_body_form_params	{ "grant_type": "urn:ietf:params:oauth:grant-type:pre-authorized_code", "pre-authorized_code": "Wgzl9LUB5gMQXhV2tpRTqOgPa28hErw8", "tx_code": "123456", "client_id": "siros-wallet-test", "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer", "client_assertion": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDUwMzE0MCwiaWF0IjoxNzk0NTAyODQwLCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6ImI1YWIzMGU5Mzk2ODI2MTA4OTNlNDdhZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.N_OFI58WDyC5YSLmTCekFTck5zmCbnwoZlWORMupxYDPIp9IO9xEarvAdzF3uAfkzz0newpLh57H9Dm2j4T5nw" }
incoming_method	POST
incoming_tls_version	TLSv1.3
incoming_tls_cert
incoming_query_string_params	{}
incoming_body	grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Apre-authorized_code&pre-authorized_code=Wgzl9LUB5gMQXhV2tpRTqOgPa28hErw8&tx_code=123456&client_id=siros-wallet-test&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&client_assertion=eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDUwMzE0MCwiaWF0IjoxNzk0NTAyODQwLCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6ImI1YWIzMGU5Mzk2ODI2MTA4OTNlNDdhZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.N_OFI58WDyC5YSLmTCekFTck5zmCbnwoZlWORMupxYDPIp9IO9xEarvAdzF3uAfkzz0newpLh57H9Dm2j4T5nw
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_body_json_parse_error
incoming_tls_cipher	TLS_AES_256_GCM_SHA384
incoming_body_json

2026-11-12 17:00:41	SUCCESS FAPI2-SP-FINAL-5.2.1-1 FAPI2-SP-FINAL-5.2.1-2 FAPI2-SP-FINAL-5.2.1-3	EnsureIncomingTls12WithBCP195SecureCipherOrTls13 Found TLS 1.3 connection

2026-11-12 17:00:41	SUCCESS RFC9325-3.1.1	EnsureIncomingTls13 TLS 1.3 in use

Token endpoint

2026-11-12 17:00:41

(1) More

SUCCESS

RFC6749-3.2.1

CheckClientIdMatchesOnTokenRequestIfPresent

Extracted client_id matches the expected value

client_id

siros-wallet-test

2026-11-12 17:00:41

(1) More

SUCCESS

RFC7523-2.2

ExtractClientAssertion

Parsed client assertion

client_assertion

{
  "value": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDUwMzE0MCwiaWF0IjoxNzk0NTAyODQwLCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6ImI1YWIzMGU5Mzk2ODI2MTA4OTNlNDdhZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.N_OFI58WDyC5YSLmTCekFTck5zmCbnwoZlWORMupxYDPIp9IO9xEarvAdzF3uAfkzz0newpLh57H9Dm2j4T5nw",
  "header": {
    "kid": "client-key-1",
    "typ": "JWT",
    "alg": "ES256"
  },
  "claims": {
    "aud": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
    "sub": "siros-wallet-test",
    "iss": "siros-wallet-test",
    "exp": 1794503140,
    "iat": 1794502840,
    "jti": "b5ab30e939682610893e47ad"
  }
}

2026-11-12 17:00:41	OIDCR-2	EnsureClientAssertionSignatureAlgorithmMatchesRegistered token_endpoint_auth_signing_alg is not set for the client, any supported algorithm can be used

2026-11-12 17:00:41

(1) More

SUCCESS

OIDCC-9

ValidateClientAssertionSignature

client_assertion signature validated

client_assertion

eyJhbGciOiJFUzI1NiIsImtpZCI6ImNsaWVudC1rZXktMSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImV4cCI6MTc5NDUwMzE0MCwiaWF0IjoxNzk0NTAyODQwLCJpc3MiOiJzaXJvcy13YWxsZXQtdGVzdCIsImp0aSI6ImI1YWIzMGU5Mzk2ODI2MTA4OTNlNDdhZCIsInN1YiI6InNpcm9zLXdhbGxldC10ZXN0In0.N_OFI58WDyC5YSLmTCekFTck5zmCbnwoZlWORMupxYDPIp9IO9xEarvAdzF3uAfkzz0newpLh57H9Dm2j4T5nw

2026-11-12 17:00:41

(1) More

SUCCESS

RFC7523-2.2

EnsureClientAssertionTypeIsJwt

Found JWT assertion type

assertion type

urn:ietf:params:oauth:client-assertion-type:jwt-bearer

2026-11-12 17:00:41	SUCCESS RFC7523-3 OIDCC-9	ValidateClientAssertionClaims Client Assertion passed all validation checks

2026-11-12 17:00:41	SUCCESS RFC7523-3	CheckForClientAssertionJtiReuse No reuse found for client_assertion JWT for jti=b5ab30e939682610893e47ad

2026-11-12 17:00:41	SUCCESS FAPI2-SP-FINAL-5.3.3.1-5	ValidateClientAssertionAudClaimIsIssuerAsString private_key_jwt client Assertion 'aud' claim matches the authentication server issuer url

2026-11-12 17:00:41

(2) More

SUCCESS

OID4VCI-1FINAL-3.5

VCIValidateTxCode

Received tx_code matches expected tx_code

actual_tx_code	123456
expected_tx_code	123456

2026-11-12 17:00:41

(3) More

SUCCESS

DPOP-5

ExtractDpopProofFromHeader

Found and parsed the incoming_dpop_proof from incoming_request

value	eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJENnN5VHVGNGdjSVgtd3A2VFAwN293IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvdG9rZW4iLCJpYXQiOjE3OTQ1MDI4NDAsIm5vbmNlIjoicEVhRGFRYklJRXdRRG5lREl2Z3dmdW9tdXBLblZlR3h5VFZHZUxEQVdFd0xHeGR4YU41MTU5MDMxMjE3IS0tQC08fXskLytgPiU9JDp8Oy0uPjshKCcnOil7In0.3rQuTQT7wFt3e7uLszgZyDzCMUhBEgUxGvtQvHltR3UG5xQ1nATKMNmzcAb2QtxxDEUjTdv48wuG6AD1g5tkkA
header	{ "typ": "dpop+jwt", "alg": "ES256", "jwk": { "kty": "EC", "crv": "P-256", "x": "GeF_MtEV6ouKCM2KAzYlFOB5RSpAguVLNU66NFzGp4U", "y": "bju0srk1RRx-aBK8E0a-PyCEKSiizMSbaxIW2wdDDTY" } }
claims	{ "htm": "POST", "htu": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/token", "iat": 1794502840, "nonce": "pEaDaQbIIEwQDneDIvgwfuomupKnVeGxyTVGeLDAWEwLGxdxaN5159031217!--@-\u003c}{$/+`\u003e%\u003d$:\|;-.\u003e;!(\u0027\u0027:){", "jti": "D6syTuF4gcIX-wp6TP07ow" }

2026-11-12 17:00:41	SUCCESS DPOP-4.3	ValidateDpopProofTokenRequest DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks

2026-11-12 17:00:41	SUCCESS FAPI2-SP-ID2-5.3.2.1-14 DPOP-11.1	ValidateDpopProofIat DPoP Proof iat value passed validation checks

2026-11-12 17:00:41	SUCCESS FAPI2-SP-ID2-5.3.2.1-14	ValidateDpopProofNbf DPoP Proof nbf value passed validation checks

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-4.2 DPOP-11

EnsureDpopProofJtiNotAlreadyUsed

Proof jti seems to be unique to this request

jti	D6syTuF4gcIX-wp6TP07ow

2026-11-12 17:00:41

(1) More

SUCCESS

ValidateTokenEndpointDpopProofNonce

Token endpoint DPoP nonce matches expected value

expected

pEaDaQbIIEwQDneDIvgwfuomupKnVeGxyTVGeLDAWEwLGxdxaN5159031217!--@-<}{$/+`>%=$:|;-.>;!('':){

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-4.3-6

ValidateDpopProofSignature

DPoP Proof signature validated

DPoP Proof

eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJENnN5VHVGNGdjSVgtd3A2VFAwN293IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvdG9rZW4iLCJpYXQiOjE3OTQ1MDI4NDAsIm5vbmNlIjoicEVhRGFRYklJRXdRRG5lREl2Z3dmdW9tdXBLblZlR3h5VFZHZUxEQVdFd0xHeGR4YU41MTU5MDMxMjE3IS0tQC08fXskLytgPiU9JDp8Oy0uPjshKCcnOil7In0.3rQuTQT7wFt3e7uLszgZyDzCMUhBEgUxGvtQvHltR3UG5xQ1nATKMNmzcAb2QtxxDEUjTdv48wuG6AD1g5tkkA

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-10

ValidateAuthorizationCodeDpopBindingKey

Authorization request does not use DPoP authorization code binding

dpop_jkt

dIvXXGf1-Y1RTAIVDkPuHcdA-Hj1UYTqbnxPeoTssuM

2026-11-12 17:00:41

(1) More

SUCCESS

VCIValidatePreAuthorizationCode

Found pre-authorized code

pre-authorized_code

Wgzl9LUB5gMQXhV2tpRTqOgPa28hErw8

2026-11-12 17:00:41

(1) More

VCIInjectRequestScopePreAuthorizedCodeFlow

Injected scope

scope

eudi.pid.1

2026-11-12 17:00:41

(1) More

SUCCESS

GenerateDpopAccessToken

Generated DPoP access token and jkt for DPoP Proof JWK

dpop_access_token

{
  "value": "DzuEIBGkGPmZ4nAqYp4Stpk76cYk3goNQLMgfPUzvNrLGKW0Nd",
  "jkt": "dIvXXGf1-Y1RTAIVDkPuHcdA-Hj1UYTqbnxPeoTssuM"
}

2026-11-12 17:00:41		GenerateAccessTokenExpiration Set access_token_expiration to 900

2026-11-12 17:00:41

(1) More

SUCCESS

OIDCC-3.3.2.11

CalculateAtHash

Successful at_hash encoding

at_hash

HOcJmyAnB5S24AvLmeYz3Q

2026-11-12 17:00:41

(1) More

CreateRefreshToken

Created refresh token

refresh_token

dLQVgWZRXXTrKpfGqbhvPTfcfQToUOuLWXNYcwzmjUkkDSAwjF4838582359=).?>

2026-11-12 17:00:41

(2) More

SUCCESS

CreateTokenEndpointResponse

Created token endpoint response

{
  "access_token": "DzuEIBGkGPmZ4nAqYp4Stpk76cYk3goNQLMgfPUzvNrLGKW0Nd",
  "token_type": "DPoP",
  "refresh_token": "dLQVgWZRXXTrKpfGqbhvPTfcfQToUOuLWXNYcwzmjUkkDSAwjF4838582359\u003d).?\u003e",
  "expires_in": 900
}

token_endpoint_response_headers

{}

2026-11-12 17:00:41

(1) More

SUCCESS

CreateAuthorizationServerDpopNonce

Created Authorization Server DPoP nonce

authorization_server_dpop_nonce

HFEUpxopooynNKNWzeZxAKmcZnvhuOfnfQpLFLTijsvloQgIyM2024520706]<=$_@/&|<_,[/-][#:+)|`<&<@`.@

2026-11-12 17:00:41

(4) More

OUTGOING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Response to HTTP request to test instance GZuYWdpptTrJw1n

outgoing_status_code	200
outgoing_body	{ "access_token": "DzuEIBGkGPmZ4nAqYp4Stpk76cYk3goNQLMgfPUzvNrLGKW0Nd", "token_type": "DPoP", "refresh_token": "dLQVgWZRXXTrKpfGqbhvPTfcfQToUOuLWXNYcwzmjUkkDSAwjF4838582359\u003d).?\u003e", "expires_in": 900 }
outgoing_headers	{ "headers": {} }
outgoing_path	token

2026-11-12 17:00:41

(12) More

INCOMING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Incoming HTTP request to /test/a/siros-wallet-vci-test/nonce

incoming_headers	{ "host": "localhost.emobix.co.uk", "x-forwarded-uri": "/test/a/siros-wallet-vci-test/nonce", "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps", "connection": "close", "content-length": "0", "sec-ch-ua-platform": "\"Windows\"", "dpop": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJNODFPOHZETFNLdnc4M2tDNVNfd3lBIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3Qvbm9uY2UiLCJpYXQiOjE3OTQ1MDI4NDEsIm5vbmNlIjoicEVhRGFRYklJRXdRRG5lREl2Z3dmdW9tdXBLblZlR3h5VFZHZUxEQVdFd0xHeGR4YU41MTU5MDMxMjE3IS0tQC08fXskLytgPiU9JDp8Oy0uPjshKCcnOil7In0.dgnhvRdWIVmBXxQ5latyp3M8sNypsFGnsWOulAxSySenulmO07GPqwOG2_XQPR4R57LSgeXianFQkbQUS52BpQ", "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36", "accept": "application/json", "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"", "accept-language": "en-US", "sec-ch-ua-mobile": "?0", "sec-fetch-site": "cross-site", "sec-fetch-mode": "cors", "sec-fetch-dest": "empty", "referer": "http://localhost:3010/", "accept-encoding": "gzip, deflate, br, zstd" }
incoming_path	/test/a/siros-wallet-vci-test/nonce
incoming_body_form_params
incoming_method	POST
incoming_tls_version	TLSv1.3
incoming_tls_cert
incoming_query_string_params	{}
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_body_json_parse_error
incoming_tls_cipher	TLS_AES_256_GCM_SHA384
incoming_body_json

2026-11-12 17:00:41	SUCCESS FAPI2-SP-FINAL-5.2.1-1 FAPI2-SP-FINAL-5.2.1-2 FAPI2-SP-FINAL-5.2.1-3	EnsureIncomingTls12WithBCP195SecureCipherOrTls13 Found TLS 1.3 connection

2026-11-12 17:00:41	SUCCESS RFC9325-3.1.1	EnsureIncomingTls13 TLS 1.3 in use

Nonce endpoint

2026-11-12 17:00:41

(1) More

SUCCESS

FAPI2-IMP-2.1.1

CreateFapiInteractionIdIfNeeded

Created new FAPI interaction ID

fapi_interaction_id

3fd7f1f9-947d-4b93-b43d-22a9c03a3260

2026-11-12 17:00:41	SUCCESS OID4VCI-1FINAL-7.1	EnsureIncomingRequestMethodIsPost Client correctly used http POST method

2026-11-12 17:00:41

(1) More

SUCCESS

OID4VCI-1FINAL-7

GenerateCredentialNonce

Created credential nonce

nonce

TyAzvlhwmfnL7gEaIh541fGylWpD8QH7

2026-11-12 17:00:41

(2) More

SUCCESS

OID4VCI-1FINAL-7.2

GenerateCredentialNonceResponse

Created credential nonce response

credential_issuer_nonce_response	{ "c_nonce": "TyAzvlhwmfnL7gEaIh541fGylWpD8QH7" }
credential_nonce_response_headers	{ "x-fapi-interaction-id": "3fd7f1f9-947d-4b93-b43d-22a9c03a3260", "content-type": "application/json", "Cache-Control": "no-store" }

2026-11-12 17:00:41

(4) More

OUTGOING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Response to HTTP request to test instance GZuYWdpptTrJw1n

outgoing_status_code	200
outgoing_body	{ "c_nonce": "TyAzvlhwmfnL7gEaIh541fGylWpD8QH7" }
outgoing_headers	{ "headers": { "x-fapi-interaction-id": [ "3fd7f1f9-947d-4b93-b43d-22a9c03a3260" ], "content-type": [ "application/json" ], "Cache-Control": [ "no-store" ] } }
outgoing_path	nonce

2026-11-12 17:00:41

(12) More

INCOMING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Incoming HTTP request to /test/a/siros-wallet-vci-test/credential

incoming_headers	{ "host": "localhost.emobix.co.uk", "x-forwarded-uri": "/test/a/siros-wallet-vci-test/credential", "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps", "connection": "close", "content-length": "752", "sec-ch-ua-platform": "\"Windows\"", "authorization": "DPoP DzuEIBGkGPmZ4nAqYp4Stpk76cYk3goNQLMgfPUzvNrLGKW0Nd", "accept-language": "en-US", "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"", "sec-ch-ua-mobile": "?0", "dpop": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJwdEdVT0FFWXpqLXpvTG9NVWdHVDVRIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvY3JlZGVudGlhbCIsImlhdCI6MTc5NDUwMjg0MSwiYXRoIjoiSE9jSm15QW5CNVMyNEF2TG1lWXozUlBaLTlNRGc3TEJQamhTWUhpdkhHTSIsIm5vbmNlIjoicEVhRGFRYklJRXdRRG5lREl2Z3dmdW9tdXBLblZlR3h5VFZHZUxEQVdFd0xHeGR4YU41MTU5MDMxMjE3IS0tQC08fXskLytgPiU9JDp8Oy0uPjshKCcnOil7In0.X55ru3igJAYAE_5fA4mt2wkMq1CgPBdGAaSHcRO50lVCx3JghxCTDcVAAzLKhEKyYW_fcXVgP-ct-IZhdBgSNw", "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36", "accept": "application/json", "content-type": "application/json", "sec-fetch-site": "cross-site", "sec-fetch-mode": "cors", "sec-fetch-dest": "empty", "referer": "http://localhost:3010/", "accept-encoding": "gzip, deflate, br, zstd" }
incoming_path	/test/a/siros-wallet-vci-test/credential
incoming_body_form_params
incoming_method	POST
incoming_tls_version	TLSv1.3
incoming_tls_cert
incoming_query_string_params	{}
incoming_body	{"credential_configuration_id":"eu.europa.ec.eudi.pid.1","proofs":{"jwt":["eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6IkZYVFJSUlNnVlhOcmZtVGctYXk2dTB4VEwzV0gxdmV0RVVPYkdhU1MwM3ciLCJrdHkiOiJFQyIsIngiOiJjNGxlZ0NtYXZ5ZkhtbHFiNzFhbTFKSEZ1UGZoVFFXQlphbjhucEFJQ3Y4IiwieSI6ImxOejl0TG1qdW1SbEozcjlXQ0JHTDBwaW93QmhtU2JyMUJoMkV0UDJvemMifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDUwMjg0MSwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6IlR5QXp2bGh3bWZuTDdnRWFJaDU0MWZHeWxXcEQ4UUg3In0.tsjbCtdufc1ps-lfyBa7aHjYUNHl3M5DYNEtVIudgI7MaZBMzeU0YKRr-3AEzrqb_bV0-zKLExKhMJxL5gzeWw"]}}
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_body_json_parse_error
incoming_tls_cipher	TLS_AES_256_GCM_SHA384
incoming_body_json	{ "credential_configuration_id": "eu.europa.ec.eudi.pid.1", "proofs": { "jwt": [ "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6IkZYVFJSUlNnVlhOcmZtVGctYXk2dTB4VEwzV0gxdmV0RVVPYkdhU1MwM3ciLCJrdHkiOiJFQyIsIngiOiJjNGxlZ0NtYXZ5ZkhtbHFiNzFhbTFKSEZ1UGZoVFFXQlphbjhucEFJQ3Y4IiwieSI6ImxOejl0TG1qdW1SbEozcjlXQ0JHTDBwaW93QmhtU2JyMUJoMkV0UDJvemMifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDUwMjg0MSwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6IlR5QXp2bGh3bWZuTDdnRWFJaDU0MWZHeWxXcEQ4UUg3In0.tsjbCtdufc1ps-lfyBa7aHjYUNHl3M5DYNEtVIudgI7MaZBMzeU0YKRr-3AEzrqb_bV0-zKLExKhMJxL5gzeWw" ] } }

2026-11-12 17:00:41	SUCCESS FAPI2-SP-FINAL-5.2.1-1 FAPI2-SP-FINAL-5.2.1-2 FAPI2-SP-FINAL-5.2.1-3	EnsureIncomingTls12WithBCP195SecureCipherOrTls13 Found TLS 1.3 connection

2026-11-12 17:00:41	SUCCESS RFC9325-3.1.1	EnsureIncomingTls13 TLS 1.3 in use

Credential endpoint

2026-11-12 17:00:41	SUCCESS FAPI2-SP-FINAL-5.3.4-2	VCIEnsureBearerAccessTokenNotInParams Client correctly did not send access token in query parameters or form body

2026-11-12 17:00:41

(3) More

SUCCESS

DPOP-5

ExtractDpopProofFromHeader

Found and parsed the incoming_dpop_proof from incoming_request

value	eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJwdEdVT0FFWXpqLXpvTG9NVWdHVDVRIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvY3JlZGVudGlhbCIsImlhdCI6MTc5NDUwMjg0MSwiYXRoIjoiSE9jSm15QW5CNVMyNEF2TG1lWXozUlBaLTlNRGc3TEJQamhTWUhpdkhHTSIsIm5vbmNlIjoicEVhRGFRYklJRXdRRG5lREl2Z3dmdW9tdXBLblZlR3h5VFZHZUxEQVdFd0xHeGR4YU41MTU5MDMxMjE3IS0tQC08fXskLytgPiU9JDp8Oy0uPjshKCcnOil7In0.X55ru3igJAYAE_5fA4mt2wkMq1CgPBdGAaSHcRO50lVCx3JghxCTDcVAAzLKhEKyYW_fcXVgP-ct-IZhdBgSNw
header	{ "typ": "dpop+jwt", "alg": "ES256", "jwk": { "kty": "EC", "crv": "P-256", "x": "GeF_MtEV6ouKCM2KAzYlFOB5RSpAguVLNU66NFzGp4U", "y": "bju0srk1RRx-aBK8E0a-PyCEKSiizMSbaxIW2wdDDTY" } }
claims	{ "htm": "POST", "ath": "HOcJmyAnB5S24AvLmeYz3RPZ-9MDg7LBPjhSYHivHGM", "htu": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/credential", "iat": 1794502841, "nonce": "pEaDaQbIIEwQDneDIvgwfuomupKnVeGxyTVGeLDAWEwLGxdxaN5159031217!--@-\u003c}{$/+`\u003e%\u003d$:\|;-.\u003e;!(\u0027\u0027:){", "jti": "ptGUOAEYzj-zoLoMUgGT5Q" }

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-7

ExtractDpopAccessTokenFromHeader

Found DPoP access token

DPoP token

DzuEIBGkGPmZ4nAqYp4Stpk76cYk3goNQLMgfPUzvNrLGKW0Nd

2026-11-12 17:00:41	SUCCESS DPOP-4.3	ValidateDpopProofResourceRequest DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks

2026-11-12 17:00:41	SUCCESS FAPI2-SP-ID2-5.3.2.1-14 DPOP-11.1	ValidateDpopProofIat DPoP Proof iat value passed validation checks

2026-11-12 17:00:41	SUCCESS FAPI2-SP-ID2-5.3.2.1-14	ValidateDpopProofNbf DPoP Proof nbf value passed validation checks

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-4.2 DPOP-11

EnsureDpopProofJtiNotAlreadyUsed

Proof jti seems to be unique to this request

jti	ptGUOAEYzj-zoLoMUgGT5Q

2026-11-12 17:00:41

(2) More

ValidateResourceEndpointDpopProofNonce

DPoP Proof nonce is invalid

actual	pEaDaQbIIEwQDneDIvgwfuomupKnVeGxyTVGeLDAWEwLGxdxaN5159031217!--@-<}{$/+`>%=$:\|;-.>;!('':){
expected	WqICOurjxhpBPTWVkObjdqkKszokMXdmIwVCxsWrYDQeMhvVyu5558958758][}.***@%:'$(/}):},]<<,=\|!%%;+

2026-11-12 17:00:41

(1) More

ValidateResourceEndpointDpopProofNonce

Resource endpoint DPoP nonce is invalid

expected

WqICOurjxhpBPTWVkObjdqkKszokMXdmIwVCxsWrYDQeMhvVyu5558958758][}.***@%:'$(/}):},]<<,=|!%%;+

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-4.3-6

ValidateDpopProofSignature

DPoP Proof signature validated

DPoP Proof

eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJwdEdVT0FFWXpqLXpvTG9NVWdHVDVRIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvY3JlZGVudGlhbCIsImlhdCI6MTc5NDUwMjg0MSwiYXRoIjoiSE9jSm15QW5CNVMyNEF2TG1lWXozUlBaLTlNRGc3TEJQamhTWUhpdkhHTSIsIm5vbmNlIjoicEVhRGFRYklJRXdRRG5lREl2Z3dmdW9tdXBLblZlR3h5VFZHZUxEQVdFd0xHeGR4YU41MTU5MDMxMjE3IS0tQC08fXskLytgPiU9JDp8Oy0uPjshKCcnOil7In0.X55ru3igJAYAE_5fA4mt2wkMq1CgPBdGAaSHcRO50lVCx3JghxCTDcVAAzLKhEKyYW_fcXVgP-ct-IZhdBgSNw

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-4.3

ValidateDpopAccessToken

DPoP Access Token is valid

DPoP Access Token

DzuEIBGkGPmZ4nAqYp4Stpk76cYk3goNQLMgfPUzvNrLGKW0Nd

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-4.3-12

ValidateDpopAccessTokenJkt

DPoP Access Token is constrained to DPoP Proof JWK

DPoP Access Token

DzuEIBGkGPmZ4nAqYp4Stpk76cYk3goNQLMgfPUzvNrLGKW0Nd

2026-11-12 17:00:41

(1) More

SUCCESS

DP0P-4.3.-12

ValidateDpopProofAccessTokenHash

DPoP Proof ath claim matches DPoP access token hash

ath	HOcJmyAnB5S24AvLmeYz3RPZ-9MDg7LBPjhSYHivHGM

2026-11-12 17:00:41

(3) More

INFO

FAPI1-BASE-6.2.2-3

ExtractFapiDateHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date

path	headers.x-fapi-auth-date
mapped
object	incoming_request

2026-11-12 17:00:41

(3) More

INFO

FAPI1-BASE-6.2.2-4

ExtractFapiIpAddressHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address

path	headers.x-fapi-customer-ip-address
mapped
object	incoming_request

2026-11-12 17:00:41

(3) More

INFO

FAPI2-IMP-2.1.1

ExtractFapiInteractionIdHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id

path	headers.x-fapi-interaction-id
mapped
object	incoming_request

2026-11-12 17:00:41

(1) More

SUCCESS

FAPI2-IMP-2.1.1

ValidateFAPIInteractionIdInResourceRequest

x-fapi-interaction-id in resource request headers is a valid UUID

interaction_id

3fd7f1f9-947d-4b93-b43d-22a9c03a3260

2026-11-12 17:00:41	SUCCESS OID4VCI-1FINAL-8.2	EnsureIncomingRequestMethodIsPost Client correctly used http POST method

2026-11-12 17:00:41		CreateResourceEndpointDpopErrorResponse Condition ran but did not log anything

2026-11-12 17:00:41

(4) More

OUTGOING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Response to HTTP request to test instance GZuYWdpptTrJw1n

outgoing_status_code	401
outgoing_body
outgoing_headers	{ "headers": { "WWW-Authenticate": [ "DPoP error\u003d\"use_dpop_nonce\", error_description\u003d\"Resource server requires nonce in DPoP proof\"" ], "DPoP-Nonce": [ "WqICOurjxhpBPTWVkObjdqkKszokMXdmIwVCxsWrYDQeMhvVyu5558958758][}.***@%:\u0027$(/}):},]\u003c\u003c,\u003d\|!%%;+" ] } }
outgoing_path	credential

2026-11-12 17:00:41

(12) More

INCOMING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Incoming HTTP request to /test/a/siros-wallet-vci-test/credential

incoming_headers	{ "host": "localhost.emobix.co.uk", "x-forwarded-uri": "/test/a/siros-wallet-vci-test/credential", "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps", "connection": "close", "content-length": "752", "sec-ch-ua-platform": "\"Windows\"", "authorization": "DPoP DzuEIBGkGPmZ4nAqYp4Stpk76cYk3goNQLMgfPUzvNrLGKW0Nd", "accept-language": "en-US", "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"", "sec-ch-ua-mobile": "?0", "dpop": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJOeWFOSGFJNkZ4ZEM1UDR5OWtpUlZ3IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvY3JlZGVudGlhbCIsImlhdCI6MTc5NDUwMjg0MSwiYXRoIjoiSE9jSm15QW5CNVMyNEF2TG1lWXozUlBaLTlNRGc3TEJQamhTWUhpdkhHTSIsIm5vbmNlIjoiV3FJQ091cmp4aHBCUFRXVmtPYmpkcWtLc3pva01YZG1Jd1ZDeHNXcllEUWVNaHZWeXU1NTU4OTU4NzU4XVt9LioqKkAlOickKC99KTp9LF08PCw9fCElJTsrIn0.snFUmfCtsA3t7PqPCtOqQFfUhwJpcPsmlroXY2p8ezFB82IIsyWxEIk9NCorFyBcjXp0lIB2YlGLhrGYnkzp2Q", "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36", "accept": "application/json", "content-type": "application/json", "sec-fetch-site": "cross-site", "sec-fetch-mode": "cors", "sec-fetch-dest": "empty", "referer": "http://localhost:3010/", "accept-encoding": "gzip, deflate, br, zstd" }
incoming_path	/test/a/siros-wallet-vci-test/credential
incoming_body_form_params
incoming_method	POST
incoming_tls_version	TLSv1.3
incoming_tls_cert
incoming_query_string_params	{}
incoming_body	{"credential_configuration_id":"eu.europa.ec.eudi.pid.1","proofs":{"jwt":["eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6IkZYVFJSUlNnVlhOcmZtVGctYXk2dTB4VEwzV0gxdmV0RVVPYkdhU1MwM3ciLCJrdHkiOiJFQyIsIngiOiJjNGxlZ0NtYXZ5ZkhtbHFiNzFhbTFKSEZ1UGZoVFFXQlphbjhucEFJQ3Y4IiwieSI6ImxOejl0TG1qdW1SbEozcjlXQ0JHTDBwaW93QmhtU2JyMUJoMkV0UDJvemMifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDUwMjg0MSwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6IlR5QXp2bGh3bWZuTDdnRWFJaDU0MWZHeWxXcEQ4UUg3In0.tsjbCtdufc1ps-lfyBa7aHjYUNHl3M5DYNEtVIudgI7MaZBMzeU0YKRr-3AEzrqb_bV0-zKLExKhMJxL5gzeWw"]}}
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_body_json_parse_error
incoming_tls_cipher	TLS_AES_256_GCM_SHA384
incoming_body_json	{ "credential_configuration_id": "eu.europa.ec.eudi.pid.1", "proofs": { "jwt": [ "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6IkZYVFJSUlNnVlhOcmZtVGctYXk2dTB4VEwzV0gxdmV0RVVPYkdhU1MwM3ciLCJrdHkiOiJFQyIsIngiOiJjNGxlZ0NtYXZ5ZkhtbHFiNzFhbTFKSEZ1UGZoVFFXQlphbjhucEFJQ3Y4IiwieSI6ImxOejl0TG1qdW1SbEozcjlXQ0JHTDBwaW93QmhtU2JyMUJoMkV0UDJvemMifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDUwMjg0MSwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6IlR5QXp2bGh3bWZuTDdnRWFJaDU0MWZHeWxXcEQ4UUg3In0.tsjbCtdufc1ps-lfyBa7aHjYUNHl3M5DYNEtVIudgI7MaZBMzeU0YKRr-3AEzrqb_bV0-zKLExKhMJxL5gzeWw" ] } }

2026-11-12 17:00:41	SUCCESS FAPI2-SP-FINAL-5.2.1-1 FAPI2-SP-FINAL-5.2.1-2 FAPI2-SP-FINAL-5.2.1-3	EnsureIncomingTls12WithBCP195SecureCipherOrTls13 Found TLS 1.3 connection

2026-11-12 17:00:41	SUCCESS RFC9325-3.1.1	EnsureIncomingTls13 TLS 1.3 in use

Credential endpoint

2026-11-12 17:00:41	SUCCESS FAPI2-SP-FINAL-5.3.4-2	VCIEnsureBearerAccessTokenNotInParams Client correctly did not send access token in query parameters or form body

2026-11-12 17:00:41

(3) More

SUCCESS

DPOP-5

ExtractDpopProofFromHeader

Found and parsed the incoming_dpop_proof from incoming_request

value	eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJOeWFOSGFJNkZ4ZEM1UDR5OWtpUlZ3IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvY3JlZGVudGlhbCIsImlhdCI6MTc5NDUwMjg0MSwiYXRoIjoiSE9jSm15QW5CNVMyNEF2TG1lWXozUlBaLTlNRGc3TEJQamhTWUhpdkhHTSIsIm5vbmNlIjoiV3FJQ091cmp4aHBCUFRXVmtPYmpkcWtLc3pva01YZG1Jd1ZDeHNXcllEUWVNaHZWeXU1NTU4OTU4NzU4XVt9LioqKkAlOickKC99KTp9LF08PCw9fCElJTsrIn0.snFUmfCtsA3t7PqPCtOqQFfUhwJpcPsmlroXY2p8ezFB82IIsyWxEIk9NCorFyBcjXp0lIB2YlGLhrGYnkzp2Q
header	{ "typ": "dpop+jwt", "alg": "ES256", "jwk": { "kty": "EC", "crv": "P-256", "x": "GeF_MtEV6ouKCM2KAzYlFOB5RSpAguVLNU66NFzGp4U", "y": "bju0srk1RRx-aBK8E0a-PyCEKSiizMSbaxIW2wdDDTY" } }
claims	{ "htm": "POST", "ath": "HOcJmyAnB5S24AvLmeYz3RPZ-9MDg7LBPjhSYHivHGM", "htu": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/credential", "iat": 1794502841, "nonce": "WqICOurjxhpBPTWVkObjdqkKszokMXdmIwVCxsWrYDQeMhvVyu5558958758][}.***@%:\u0027$(/}):},]\u003c\u003c,\u003d\|!%%;+", "jti": "NyaNHaI6FxdC5P4y9kiRVw" }

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-7

ExtractDpopAccessTokenFromHeader

Found DPoP access token

DPoP token

DzuEIBGkGPmZ4nAqYp4Stpk76cYk3goNQLMgfPUzvNrLGKW0Nd

2026-11-12 17:00:41	SUCCESS DPOP-4.3	ValidateDpopProofResourceRequest DPoP Proof type, alg, jwk, jti, htm, htu, iat, exp, nbf passed validation checks

2026-11-12 17:00:41	SUCCESS FAPI2-SP-ID2-5.3.2.1-14 DPOP-11.1	ValidateDpopProofIat DPoP Proof iat value passed validation checks

2026-11-12 17:00:41	SUCCESS FAPI2-SP-ID2-5.3.2.1-14	ValidateDpopProofNbf DPoP Proof nbf value passed validation checks

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-4.2 DPOP-11

EnsureDpopProofJtiNotAlreadyUsed

Proof jti seems to be unique to this request

jti	NyaNHaI6FxdC5P4y9kiRVw

2026-11-12 17:00:41

(1) More

SUCCESS

ValidateResourceEndpointDpopProofNonce

Resource endpoint DPoP nonce matches expected value

expected

WqICOurjxhpBPTWVkObjdqkKszokMXdmIwVCxsWrYDQeMhvVyu5558958758][}.***@%:'$(/}):},]<<,=|!%%;+

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-4.3-6

ValidateDpopProofSignature

DPoP Proof signature validated

DPoP Proof

eyJhbGciOiJFUzI1NiIsInR5cCI6ImRwb3Arand0IiwiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiR2VGX010RVY2b3VLQ00yS0F6WWxGT0I1UlNwQWd1VkxOVTY2TkZ6R3A0VSIsInkiOiJianUwc3JrMVJSeC1hQks4RTBhLVB5Q0VLU2lpek1TYmF4SVcyd2RERFRZIn19.eyJqdGkiOiJOeWFOSGFJNkZ4ZEM1UDR5OWtpUlZ3IiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHBzOi8vbG9jYWxob3N0LmVtb2JpeC5jby51azo4NDQzL3Rlc3QvYS9zaXJvcy13YWxsZXQtdmNpLXRlc3QvY3JlZGVudGlhbCIsImlhdCI6MTc5NDUwMjg0MSwiYXRoIjoiSE9jSm15QW5CNVMyNEF2TG1lWXozUlBaLTlNRGc3TEJQamhTWUhpdkhHTSIsIm5vbmNlIjoiV3FJQ091cmp4aHBCUFRXVmtPYmpkcWtLc3pva01YZG1Jd1ZDeHNXcllEUWVNaHZWeXU1NTU4OTU4NzU4XVt9LioqKkAlOickKC99KTp9LF08PCw9fCElJTsrIn0.snFUmfCtsA3t7PqPCtOqQFfUhwJpcPsmlroXY2p8ezFB82IIsyWxEIk9NCorFyBcjXp0lIB2YlGLhrGYnkzp2Q

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-4.3

ValidateDpopAccessToken

DPoP Access Token is valid

DPoP Access Token

DzuEIBGkGPmZ4nAqYp4Stpk76cYk3goNQLMgfPUzvNrLGKW0Nd

2026-11-12 17:00:41

(1) More

SUCCESS

DPOP-4.3-12

ValidateDpopAccessTokenJkt

DPoP Access Token is constrained to DPoP Proof JWK

DPoP Access Token

DzuEIBGkGPmZ4nAqYp4Stpk76cYk3goNQLMgfPUzvNrLGKW0Nd

2026-11-12 17:00:41

(1) More

SUCCESS

DP0P-4.3.-12

ValidateDpopProofAccessTokenHash

DPoP Proof ath claim matches DPoP access token hash

ath	HOcJmyAnB5S24AvLmeYz3RPZ-9MDg7LBPjhSYHivHGM

2026-11-12 17:00:41

(3) More

INFO

FAPI1-BASE-6.2.2-3

ExtractFapiDateHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-auth-date

path	headers.x-fapi-auth-date
mapped
object	incoming_request

2026-11-12 17:00:41

(3) More

INFO

FAPI1-BASE-6.2.2-4

ExtractFapiIpAddressHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-customer-ip-address

path	headers.x-fapi-customer-ip-address
mapped
object	incoming_request

2026-11-12 17:00:41

(3) More

INFO

FAPI2-IMP-2.1.1

ExtractFapiInteractionIdHeader

Skipped evaluation due to missing required element: incoming_request headers.x-fapi-interaction-id

path	headers.x-fapi-interaction-id
mapped
object	incoming_request

2026-11-12 17:00:41

(1) More

SUCCESS

FAPI2-IMP-2.1.1

ValidateFAPIInteractionIdInResourceRequest

x-fapi-interaction-id in resource request headers is a valid UUID

interaction_id

3fd7f1f9-947d-4b93-b43d-22a9c03a3260

2026-11-12 17:00:41	SUCCESS OID4VCI-1FINAL-8.2	EnsureIncomingRequestMethodIsPost Client correctly used http POST method

2026-11-12 17:00:41

(1) More

SUCCESS

OID4VCI-1FINAL-8.2

VCIEnsureCredentialRequestUsesApplicationJson

Credential request Content-Type is application/json

content_type

application/json

2026-11-12 17:00:41

(1) More

SUCCESS

OID4VCI-1FINAL-8.2

VCIEnsureCredentialRequestEncryptedIfResponseEncryptionRequested

Plaintext credential request body does not include credential_response_encryption

content_type

application/json

2026-11-12 17:00:41

(2) More

SUCCESS

OID4VCI-1FINAL-8.2

VCIValidateCredentialRequestStructure

OID4VCI Credential Request input is valid

input

{
  "credential_configuration_id": "eu.europa.ec.eudi.pid.1",
  "proofs": {
    "jwt": [
      "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6IkZYVFJSUlNnVlhOcmZtVGctYXk2dTB4VEwzV0gxdmV0RVVPYkdhU1MwM3ciLCJrdHkiOiJFQyIsIngiOiJjNGxlZ0NtYXZ5ZkhtbHFiNzFhbTFKSEZ1UGZoVFFXQlphbjhucEFJQ3Y4IiwieSI6ImxOejl0TG1qdW1SbEozcjlXQ0JHTDBwaW93QmhtU2JyMUJoMkV0UDJvemMifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDUwMjg0MSwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6IlR5QXp2bGh3bWZuTDdnRWFJaDU0MWZHeWxXcEQ4UUg3In0.tsjbCtdufc1ps-lfyBa7aHjYUNHl3M5DYNEtVIudgI7MaZBMzeU0YKRr-3AEzrqb_bV0-zKLExKhMJxL5gzeWw"
    ]
  }
}

schema_link

/json-schemas/oid4vci/credential_request-1_0.json

2026-11-12 17:00:41

(2) More

SUCCESS

OID4VCI-1FINAL-8.2

CheckForUnexpectedParametersInCredentialRequest

No unknown properties were found in the OID4VCI Credential Request

input

{
  "credential_configuration_id": "eu.europa.ec.eudi.pid.1",
  "proofs": {
    "jwt": [
      "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6IkZYVFJSUlNnVlhOcmZtVGctYXk2dTB4VEwzV0gxdmV0RVVPYkdhU1MwM3ciLCJrdHkiOiJFQyIsIngiOiJjNGxlZ0NtYXZ5ZkhtbHFiNzFhbTFKSEZ1UGZoVFFXQlphbjhucEFJQ3Y4IiwieSI6ImxOejl0TG1qdW1SbEozcjlXQ0JHTDBwaW93QmhtU2JyMUJoMkV0UDJvemMifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDUwMjg0MSwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6IlR5QXp2bGh3bWZuTDdnRWFJaDU0MWZHeWxXcEQ4UUg3In0.tsjbCtdufc1ps-lfyBa7aHjYUNHl3M5DYNEtVIudgI7MaZBMzeU0YKRr-3AEzrqb_bV0-zKLExKhMJxL5gzeWw"
    ]
  }
}

schema_link

/json-schemas/oid4vci/credential_request-1_0.json

2026-11-12 17:00:41

(2) More

OID4VCI-1FINAL-8.2

VCIResolveRequestedCredentialConfigurationFromRequest

Found requested credential_configuration via credential_configuration_id eu.europa.ec.eudi.pid.1

credential_configuration_id

eu.europa.ec.eudi.pid.1

credential_configuration

{
  "format": "dc+sd-jwt",
  "vct": "urn:eudi:pid:1",
  "cryptographic_binding_methods_supported": [
    "jwk"
  ],
  "credential_signing_alg_values_supported": [
    "ES256"
  ],
  "proof_types_supported": {
    "jwt": {
      "proof_signing_alg_values_supported": [
        "ES256"
      ]
    }
  },
  "credential_metadata": {
    "display": [
      {
        "name": "Fake PID GZuYWdpptTrJw1n",
        "description": "OpenID Conformance Test Fake PID description"
      }
    ]
  },
  "scope": "eudi.pid.1"
}

2026-11-12 17:00:41

(1) More

SUCCESS

OID4VCI-1FINAL-8.2

VCIResolveRequestedCredentialConfigurationFromRequest

Resolved requested credential_configuration to eu.europa.ec.eudi.pid.1

credential_configuration

{
  "format": "dc+sd-jwt",
  "vct": "urn:eudi:pid:1",
  "cryptographic_binding_methods_supported": [
    "jwk"
  ],
  "credential_signing_alg_values_supported": [
    "ES256"
  ],
  "proof_types_supported": {
    "jwt": {
      "proof_signing_alg_values_supported": [
        "ES256"
      ]
    }
  },
  "credential_metadata": {
    "display": [
      {
        "name": "Fake PID GZuYWdpptTrJw1n",
        "description": "OpenID Conformance Test Fake PID description"
      }
    ]
  },
  "scope": "eudi.pid.1"
}

2026-11-12 17:00:41

(1) More

OID4VCI-1FINALA-F.4

VCIExtractCredentialRequestProof

Found proofs element in credential request

proofs

{
  "jwt": [
    "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6IkZYVFJSUlNnVlhOcmZtVGctYXk2dTB4VEwzV0gxdmV0RVVPYkdhU1MwM3ciLCJrdHkiOiJFQyIsIngiOiJjNGxlZ0NtYXZ5ZkhtbHFiNzFhbTFKSEZ1UGZoVFFXQlphbjhucEFJQ3Y4IiwieSI6ImxOejl0TG1qdW1SbEozcjlXQ0JHTDBwaW93QmhtU2JyMUJoMkV0UDJvemMifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDUwMjg0MSwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6IlR5QXp2bGh3bWZuTDdnRWFJaDU0MWZHeWxXcEQ4UUg3In0.tsjbCtdufc1ps-lfyBa7aHjYUNHl3M5DYNEtVIudgI7MaZBMzeU0YKRr-3AEzrqb_bV0-zKLExKhMJxL5gzeWw"
  ]
}

2026-11-12 17:00:41

(1) More

OID4VCI-1FINALA-F.4

VCIExtractCredentialRequestProof

Found 1 JWT(s) for 'jwt' proof.

jwts

[
  "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6IkZYVFJSUlNnVlhOcmZtVGctYXk2dTB4VEwzV0gxdmV0RVVPYkdhU1MwM3ciLCJrdHkiOiJFQyIsIngiOiJjNGxlZ0NtYXZ5ZkhtbHFiNzFhbTFKSEZ1UGZoVFFXQlphbjhucEFJQ3Y4IiwieSI6ImxOejl0TG1qdW1SbEozcjlXQ0JHTDBwaW93QmhtU2JyMUJoMkV0UDJvemMifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDUwMjg0MSwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6IlR5QXp2bGh3bWZuTDdnRWFJaDU0MWZHeWxXcEQ4UUg3In0.tsjbCtdufc1ps-lfyBa7aHjYUNHl3M5DYNEtVIudgI7MaZBMzeU0YKRr-3AEzrqb_bV0-zKLExKhMJxL5gzeWw"
]

2026-11-12 17:00:41

(2) More

SUCCESS

OID4VCI-1FINALA-F.4

VCIExtractCredentialRequestProof

Extracted 1 'jwt' proof(s) from credential request

proof_jwts

[
  {
    "value": "eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6IkZYVFJSUlNnVlhOcmZtVGctYXk2dTB4VEwzV0gxdmV0RVVPYkdhU1MwM3ciLCJrdHkiOiJFQyIsIngiOiJjNGxlZ0NtYXZ5ZkhtbHFiNzFhbTFKSEZ1UGZoVFFXQlphbjhucEFJQ3Y4IiwieSI6ImxOejl0TG1qdW1SbEozcjlXQ0JHTDBwaW93QmhtU2JyMUJoMkV0UDJvemMifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDUwMjg0MSwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6IlR5QXp2bGh3bWZuTDdnRWFJaDU0MWZHeWxXcEQ4UUg3In0.tsjbCtdufc1ps-lfyBa7aHjYUNHl3M5DYNEtVIudgI7MaZBMzeU0YKRr-3AEzrqb_bV0-zKLExKhMJxL5gzeWw",
    "header": {
      "typ": "openid4vci-proof+jwt",
      "alg": "ES256",
      "jwk": {
        "kty": "EC",
        "crv": "P-256",
        "kid": "FXTRRRSgVXNrfmTg-ay6u0xTL3WH1vetEUObGaSS03w",
        "x": "c4legCmavyfHmlqb71am1JHFuPfhTQWBZan8npAICv8",
        "y": "lNz9tLmjumRlJ3r9WCBGL0piowBhmSbr1Bh2EtP2ozc"
      }
    },
    "claims": {
      "aud": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
      "iss": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
      "iat": 1794502841,
      "nonce": "TyAzvlhwmfnL7gEaIh541fGylWpD8QH7"
    }
  }
]

proof_count

2026-11-12 17:00:41

(1) More

SUCCESS

OID4VCI-1FINAL-12.2.4

VCIEnsureSingleProofWhenBatchIssuanceNotAdvertised

The wallet sent a single proof

proofs_sent

2026-11-12 17:00:41

(2) More

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

Detected proof type jwt is allowed by credential_configuration_id: eu.europa.ec.eudi.pid.1

credential_configuration_id	eu.europa.ec.eudi.pid.1
proof_type	jwt

2026-11-12 17:00:41

(2) More

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

Found expected proof type: jwt

header	openid4vci-proof+jwt
proof_type	jwt

2026-11-12 17:00:41

(1) More

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

Found expected algorithm for proof type: jwt

algorithm

{
  "name": "ES256",
  "requirement": "RECOMMENDED"
}

2026-11-12 17:00:41

(1) More

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

Found public key by jwk header

jwk	{ "kty": "EC", "crv": "P-256", "kid": "FXTRRRSgVXNrfmTg-ay6u0xTL3WH1vetEUObGaSS03w", "x": "c4legCmavyfHmlqb71am1JHFuPfhTQWBZan8npAICv8", "y": "lNz9tLmjumRlJ3r9WCBGL0piowBhmSbr1Bh2EtP2ozc" }

2026-11-12 17:00:41

(1) More

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

Detected an EC public key

kid

2026-11-12 17:00:41

(1) More

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

Detected EC public key with curve P-256

kid

2026-11-12 17:00:41

(2) More

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

Skipping nested key_attestation validation, as it is not required by credential_configuration_id: eu.europa.ec.eudi.pid.1

credential_configuration_id	eu.europa.ec.eudi.pid.1
key_attestation

2026-11-12 17:00:41	HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4	VCIValidateCredentialRequestJwtProof Detected valid proof JWT for proof type: jwt

2026-11-12 17:00:41

(1) More

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

Detected expected nonce

nonce

TyAzvlhwmfnL7gEaIh541fGylWpD8QH7

2026-11-12 17:00:41

(4) More

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

JWT proof iat is within acceptable time window

max_accepted_iat	"Nov 12, 2026, 5:05:41 PM"
now	"Nov 12, 2026, 5:00:41 PM"
min_accepted_iat	"Nov 12, 2026, 4:55:41 PM"
iat	"Nov 12, 2026, 5:00:41 PM"

2026-11-12 17:00:41

(2) More

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

Found expected audience 'https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/' for proof type: jwt

audience	https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/
proof_type	jwt

2026-11-12 17:00:41

(2) More

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

Successfully validated proof jwt

claims

{
  "aud": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "iss": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vci-test/",
  "iat": 1794502841,
  "nonce": "TyAzvlhwmfnL7gEaIh541fGylWpD8QH7"
}

jwt

eyJhbGciOiJFUzI1NiIsImp3ayI6eyJjcnYiOiJQLTI1NiIsImtpZCI6IkZYVFJSUlNnVlhOcmZtVGctYXk2dTB4VEwzV0gxdmV0RVVPYkdhU1MwM3ciLCJrdHkiOiJFQyIsIngiOiJjNGxlZ0NtYXZ5ZkhtbHFiNzFhbTFKSEZ1UGZoVFFXQlphbjhucEFJQ3Y4IiwieSI6ImxOejl0TG1qdW1SbEozcjlXQ0JHTDBwaW93QmhtU2JyMUJoMkV0UDJvemMifSwidHlwIjoib3BlbmlkNHZjaS1wcm9vZitqd3QifQ.eyJhdWQiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0LyIsImlhdCI6MTc5NDUwMjg0MSwiaXNzIjoiaHR0cHM6Ly9sb2NhbGhvc3QuZW1vYml4LmNvLnVrOjg0NDMvdGVzdC9hL3Npcm9zLXdhbGxldC12Y2ktdGVzdC8iLCJub25jZSI6IlR5QXp2bGh3bWZuTDdnRWFJaDU0MWZHeWxXcEQ4UUg3In0.tsjbCtdufc1ps-lfyBa7aHjYUNHl3M5DYNEtVIudgI7MaZBMzeU0YKRr-3AEzrqb_bV0-zKLExKhMJxL5gzeWw

2026-11-12 17:00:41

(1) More

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

Detected and invalidated expected nonce

nonce

TyAzvlhwmfnL7gEaIh541fGylWpD8QH7

2026-11-12 17:00:41

(1) More

SUCCESS

HAIP-4.5.1 OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4

VCIValidateCredentialRequestJwtProof

Successfully validated 1 proof jwt(s)

proof_count

2026-11-12 17:00:41	OID4VCI-1FINALA-F.1 OID4VCI-1FINALA-F.4	VCIValidateAttestedKeysInKeyAttestationFromJwtProof Skipping key_attestation_jwt validation, as it is not present in the environment

2026-11-12 17:00:41

(1) More

INFO

FAPI2-IMP-2.2.1

CreateFapiInteractionIdIfNeeded

Found existing FAPI interaction ID

fapi_interaction_id

3fd7f1f9-947d-4b93-b43d-22a9c03a3260

2026-11-12 17:00:41		oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response Creating credential with format: dc+sd-jwt, credential_configuration: {"format":"dc+sd-jwt","vct":"urn:eudi:pid:1","cryptographic_binding_methods_supported":["jwk"],"credential_signing_alg_values_supported":["ES256"],"proof_types_supported":{"jwt":{"proof_signing_alg_values_supported":["ES256"]}},"credential_metadata":{"display":[{"name":"Fake PID GZuYWdpptTrJw1n","description":"OpenID Conformance Test Fake PID description"}]},"scope":"eudi.pid.1"}, variant credential_format: sd_jwt_vc

2026-11-12 17:00:41

(1) More

OID4VCI-1FINALA-F.3 OID4VCI-1FINALA-F.1

CreateSdJwtCredential

Found 1 JWK(s) from jwt proofs

keys	[ { "kty": "EC", "crv": "P-256", "kid": "FXTRRRSgVXNrfmTg-ay6u0xTL3WH1vetEUObGaSS03w", "x": "c4legCmavyfHmlqb71am1JHFuPfhTQWBZan8npAICv8", "y": "lNz9tLmjumRlJ3r9WCBGL0piowBhmSbr1Bh2EtP2ozc" } ]

2026-11-12 17:00:41

(2) More

OID4VCI-1FINALA-F.3 OID4VCI-1FINALA-F.1

CreateSdJwtCredential

Created urn:eudi:pid:1 in SD-JWT VC format

credential_count

credentials

[
  {
    "credential": "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.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.gKXjGDMOPAHTIBQmQon_tv8PvitsKaouRU2Tpcw0XBZ2U3ZJs9tS_wqjEaonTHBuUWRZUk6wWBRBrFryUhsKZA~WyJrV0o5T0Z3ajN4SUNHZGxaZEN1bmNnIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~WyJnRTREbWdwQTZPR2tqT2pyTmxsUU5BIiwiZmFtaWx5X25hbWUiLCJEdXBvbnQiXQ~WyI1Q0N1VmtScTBqeW1UMmtBYmEzbUhnIiwiYmlydGhkYXRlIiwiMTk4MC0wNS0yMyJd~WyJnZW9rYzVFc2pDS04yV1NSbUZkWm1BIiwiRlIiXQ~WyJEemtibVgyamhzZlk3YlVZRkVLdUtBIiwibmF0aW9uYWxpdGllcyIsW3siLi4uIjoidlNlSHJfUFhfQUMyZFl0a1lkZUFKX0Y4WWtYcHFxQVEyT3pIel9sSW9wUSJ9XV0~WyJNay1QRlhfV2Q5V3RNOVY2VEV6UkdBIiwiY291bnRyeSIsIkZSIl0~WyJmWDFXZTh2cUZwTW1zTzlZSDdxVURRIiwicGxhY2Vfb2ZfYmlydGgiLHsiX3NkIjpbIlNNTXJ1dUNhSUozeFJkSnhyNEM1aEtmamVoSUJuZmYyV0ZZWVRHVk1hVGMiXX1d~WyJjRl96cVU5V3ZCblZFeTNYUWdVR3p3IiwiaXNzdWluZ19hdXRob3JpdHkiLCJUZXN0IElzc3VpbmcgQXV0aG9yaXR5Il0~WyJpX0VLd0NPM3RzcUtUNWtqbHoyOWtRIiwiaXNzdWluZ19jb3VudHJ5IiwiRlIiXQ~WyJVWVhHWV9tMnR6dTRNUDlrR0UtbEpRIiwicGljdHVyZSIsImRhdGE6aW1hZ2UvanBlZztiYXNlNjQsLzlqLzRBQVFTa1pKUmdBQkFRQUFBUUFCQUFELzJ3QkRBQkFMREE0TUNoQU9EUTRTRVJBVEdDZ2FHQllXR0RFakpSMG9Pak05UERrek9EZEFTRnhPUUVSWFJUYzRVRzFSVjE5aVoyaG5QazF4ZVhCa2VGeGxaMlAvMndCREFSRVNFaGdWR0M4YUdpOWpRamhDWTJOalkyTmpZMk5qWTJOalkyTmpZMk5qWTJOalkyTmpZMk5qWTJOalkyTmpZMk5qWTJOalkyTmpZMk5qWTJOalkyUC93QUFSQ0FBRkFBUURBU0lBQWhFQkF4RUIvOFFBSHdBQUFRVUJBUUVCQVFFQUFBQUFBQUFBQUFFQ0F3UUZCZ2NJQ1FvTC84UUF0UkFBQWdFREF3SUVBd1VGQkFRQUFBRjlBUUlEQUFRUkJSSWhNVUVHRTFGaEJ5SnhGREtCa2FFSUkwS3h3UlZTMGZBa00ySnlnZ2tLRmhjWUdSb2xKaWNvS1NvME5UWTNPRGs2UTBSRlJrZElTVXBUVkZWV1YxaFpXbU5rWldabmFHbHFjM1IxZG5kNGVYcURoSVdHaDRpSmlwS1RsSldXbDVpWm1xS2pwS1dtcDZpcHFyS3p0TFcydDdpNXVzTER4TVhHeDhqSnl0TFQxTlhXMTlqWjJ1SGk0K1RsNXVmbzZlcng4dlAwOWZiMytQbjYvOFFBSHdFQUF3RUJBUUVCQVFFQkFRQUFBQUFBQUFFQ0F3UUZCZ2NJQ1FvTC84UUF0UkVBQWdFQ0JBUURCQWNGQkFRQUFRSjNBQUVDQXhFRUJTRXhCaEpCVVFkaGNSTWlNb0VJRkVLUm9iSEJDU016VXZBVlluTFJDaFlrTk9FbDhSY1lHUm9tSnlncEtqVTJOemc1T2tORVJVWkhTRWxLVTFSVlZsZFlXVnBqWkdWbVoyaHBhbk4wZFhaM2VIbDZnb09FaFlhSGlJbUtrcE9VbFphWG1KbWFvcU9rcGFhbnFLbXFzck8wdGJhM3VMbTZ3c1BFeGNiSHlNbkswdFBVMWRiWDJObmE0dVBrNWVibjZPbnE4dlAwOWZiMytQbjYvOW9BREFNQkFBSVJBeEVBUHdDblJSUldacWYvMlE9PSJd~"
  }
]

2026-11-12 17:00:41

(3) More

SUCCESS

OID4VCI-1FINALA-A.2.4 OID4VCI-1FINALA-A.3.4

VCICreateCredentialEndpointResponse

Created credential response object

credential_count

credential_endpoint_response

{
  "credentials": [
    {
      "credential": "eyJ4NWMiOlsiTUlJQmF6Q0NBUktnQXdJQkFnSVVRWVQrcXZ6L3NvbTluYjZ2T0xCZWFINVFHVG93Q2dZSUtvWkl6ajBFQXdJd0VqRVFNQTRHQTFVRUF3d0hWR1Z6ZENCRFFUQWVGdzB5TmpBMU1ERXhOak16TkRkYUZ3MHlOekExTURFeE5qTXpORGRhTUJZeEZEQVNCZ05WQkFNTUMzUmxjM1F0YzJsbmJtVnlNRmt3RXdZSEtvWkl6ajBDQVFZSUtvWkl6ajBEQVFjRFFnQUVEQzlYOWxsN2o5SmFsK0FIdU1nUFJLRFZ1NlF4NTc1ZFM3anA2Qnl3ZWgyTlBvTjU4WVNob2h0M1dBTys1em9Sb1FKWG9iTktOSXFYUStPMG5vSm1RNk5DTUVBd0hRWURWUjBPQkJZRUZIeEF6MWp3OW1YSmxWZmNRTUZrY0RyZW9QNXJNQjhHQTFVZEl3UVlNQmFBRklxQzM0VDd6RjlYeHYxdE1lenRiKy84RndOeE1Bb0dDQ3FHU000OUJBTUNBMGNBTUVRQ0lCZkV6NnFYOTBNNDY1ZFJqUXpvOUtzcjdsanJsTi9mWnRMWm9sZ2FmQXJBQWlCQTNlcmFzOHJvTzlNMHQvTm55L0hwb2QvNGJaMlM2Z0lsS0dGYzVDNkVtUT09IiwiTUlJQmVEQ0NBUitnQXdJQkFnSVVYVnhVVGdRQTJYWHFBNVhmNDNZQTFyaDdnR0l3Q2dZSUtvWkl6ajBFQXdJd0VqRVFNQTRHQTFVRUF3d0hWR1Z6ZENCRFFUQWVGdzB5TmpBMU1ERXhOak16TkRkYUZ3MHlOekExTURFeE5qTXpORGRhTUJJeEVEQU9CZ05WQkFNTUIxUmxjM1FnUTBFd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFSWlJvQnFmbGtTREFoRDhmSE00bDFjSVl6eFNGZFVyc09QTDBlWnJaVUN2OUV4M3BpeU9xekZJL2tESUwybVBPeC9KZlYyY2NEc2VQeHVtM0dFT0syYW8xTXdVVEFkQmdOVkhRNEVGZ1FVaW9MZmhQdk1YMWZHL1cweDdPMXY3L3dYQTNFd0h3WURWUjBqQkJnd0ZvQVVpb0xmaFB2TVgxZkcvVzB4N08xdjcvd1hBM0V3RHdZRFZSMFRBUUgvQkFVd0F3RUIvekFLQmdncWhrak9QUVFEQWdOSEFEQkVBaUJIUWh1WHpsR0tDb082SjVvblB1dXRBWFpoK3pkYWlLVGtnSnNzd0dtL01RSWdXN0ZaMzg5Y0tadlFzY2RYZ2VVbnY0bngwQkFHT1FqeUdlYTRZZkdpTnBnPSJdLCJ0eXAiOiJkYytzZC1qd3QiLCJhbGciOiJFUzI1NiJ9.eyJpc3MiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZjaS10ZXN0IiwiX3NkIjpbIjBnVWljQWRMNEtIWmVHQ0hTQ0NHbkZ4ZUpGRGpIN3VGM1RmM1FkV3VVNk0iLCI5eVFHam44YmdldzB0MGt1XzNLZ2d5eHJ2QlFVSDNHMlZSOWZoVzhXNXNrIiwiQWF3NGlScFN3d0xVYThTaWxEOUFCN3BDYVBOM3htODRyeF9MZTVGdzNMayIsIkJnai1qc2UxVlhqTUVfMUV0VGhWTlBxY1RnYTZyRHpjbTdZWFcxWkhrRWMiLCJPb0kxb0phcUJKa0VWeHNCbGlXSzE3dkRCdlRuUjVoenlISHZFSnJ3MHBrIiwiUEE2LUNhU2J0bTk5STVvMHZaYVBUajVXVzg3dy12U3k4VEozblE4N1IyYyIsIllWYmY3QzkyT1ZXRmVudkRUNU41WUhId18wZ0p6ZEpNQTlwZ1Q2MEJDRlkiLCJiWG5JY0V3WTNJOXg4Yktlc0Zsc0YwZHoxNW1YaUxTd2xpRDVSNHQ1QUl3IiwiZnBiM3ZvSmJ6WEdLRDRUSU5Ja2ZJaHNLTmFkNUdHSGJCcVJuaVdJcFlpNCIsIm9LU0xZbU5yazYtMHNEUzM5TzdDWFR2TUxNYlRFUC1oSW5HV2VYT3Q2MWMiLCJycktyaE5BNks1Zlh5ZjhWTHdzZjN3Rm4wcG5aalQ2clg0REsxOWo0TmVRIl0sImNuZiI6eyJqd2siOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsImtpZCI6IkZYVFJSUlNnVlhOcmZtVGctYXk2dTB4VEwzV0gxdmV0RVVPYkdhU1MwM3ciLCJ4IjoiYzRsZWdDbWF2eWZIbWxxYjcxYW0xSkhGdVBmaFRRV0JaYW44bnBBSUN2OCIsInkiOiJsTno5dExtanVtUmxKM3I5V0NCR0wwcGlvd0JobVNicjFCaDJFdFAyb3pjIn19LCJleHAiOjE3OTQ1ODU2MDAsImlhdCI6MTc5NDUwMjgwMCwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.gKXjGDMOPAHTIBQmQon_tv8PvitsKaouRU2Tpcw0XBZ2U3ZJs9tS_wqjEaonTHBuUWRZUk6wWBRBrFryUhsKZA~WyJrV0o5T0Z3ajN4SUNHZGxaZEN1bmNnIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~WyJnRTREbWdwQTZPR2tqT2pyTmxsUU5BIiwiZmFtaWx5X25hbWUiLCJEdXBvbnQiXQ~WyI1Q0N1VmtScTBqeW1UMmtBYmEzbUhnIiwiYmlydGhkYXRlIiwiMTk4MC0wNS0yMyJd~WyJnZW9rYzVFc2pDS04yV1NSbUZkWm1BIiwiRlIiXQ~WyJEemtibVgyamhzZlk3YlVZRkVLdUtBIiwibmF0aW9uYWxpdGllcyIsW3siLi4uIjoidlNlSHJfUFhfQUMyZFl0a1lkZUFKX0Y4WWtYcHFxQVEyT3pIel9sSW9wUSJ9XV0~WyJNay1QRlhfV2Q5V3RNOVY2VEV6UkdBIiwiY291bnRyeSIsIkZSIl0~WyJmWDFXZTh2cUZwTW1zTzlZSDdxVURRIiwicGxhY2Vfb2ZfYmlydGgiLHsiX3NkIjpbIlNNTXJ1dUNhSUozeFJkSnhyNEM1aEtmamVoSUJuZmYyV0ZZWVRHVk1hVGMiXX1d~WyJjRl96cVU5V3ZCblZFeTNYUWdVR3p3IiwiaXNzdWluZ19hdXRob3JpdHkiLCJUZXN0IElzc3VpbmcgQXV0aG9yaXR5Il0~WyJpX0VLd0NPM3RzcUtUNWtqbHoyOWtRIiwiaXNzdWluZ19jb3VudHJ5IiwiRlIiXQ~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~"
    }
  ]
}

credential_endpoint_response_headers

{
  "x-fapi-interaction-id": "3fd7f1f9-947d-4b93-b43d-22a9c03a3260",
  "content-type": "application/json"
}

2026-11-12 17:00:41		ClearAccessTokenFromRequest Removed incoming access token from environment

2026-11-12 17:00:41

(1) More

SUCCESS

CreateResourceServerDpopNonce

Created Resource Server nonce

resource_server_dpop_nonce

AIgSqJlNMWGQmaxfosHzSnWXqKNkirKDKRNZvAPUOXbXrrTsaU9894954447}-#=$}-?=(%%|:^<{!;(#>!*>$&$|)

2026-11-12 17:00:41		oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response Detected completed resource endpoint call. Waiting 20 seconds for additional requests before completing the test. The wait can be adjusted by setting maxWaitForAdditionalRequestSeconds in the configuration.

2026-11-12 17:00:41

(4) More

OUTGOING

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Response to HTTP request to test instance GZuYWdpptTrJw1n

outgoing_status_code	200
outgoing_body	{ "credentials": [ { "credential": "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.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.gKXjGDMOPAHTIBQmQon_tv8PvitsKaouRU2Tpcw0XBZ2U3ZJs9tS_wqjEaonTHBuUWRZUk6wWBRBrFryUhsKZA~WyJrV0o5T0Z3ajN4SUNHZGxaZEN1bmNnIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~WyJnRTREbWdwQTZPR2tqT2pyTmxsUU5BIiwiZmFtaWx5X25hbWUiLCJEdXBvbnQiXQ~WyI1Q0N1VmtScTBqeW1UMmtBYmEzbUhnIiwiYmlydGhkYXRlIiwiMTk4MC0wNS0yMyJd~WyJnZW9rYzVFc2pDS04yV1NSbUZkWm1BIiwiRlIiXQ~WyJEemtibVgyamhzZlk3YlVZRkVLdUtBIiwibmF0aW9uYWxpdGllcyIsW3siLi4uIjoidlNlSHJfUFhfQUMyZFl0a1lkZUFKX0Y4WWtYcHFxQVEyT3pIel9sSW9wUSJ9XV0~WyJNay1QRlhfV2Q5V3RNOVY2VEV6UkdBIiwiY291bnRyeSIsIkZSIl0~WyJmWDFXZTh2cUZwTW1zTzlZSDdxVURRIiwicGxhY2Vfb2ZfYmlydGgiLHsiX3NkIjpbIlNNTXJ1dUNhSUozeFJkSnhyNEM1aEtmamVoSUJuZmYyV0ZZWVRHVk1hVGMiXX1d~WyJjRl96cVU5V3ZCblZFeTNYUWdVR3p3IiwiaXNzdWluZ19hdXRob3JpdHkiLCJUZXN0IElzc3VpbmcgQXV0aG9yaXR5Il0~WyJpX0VLd0NPM3RzcUtUNWtqbHoyOWtRIiwiaXNzdWluZ19jb3VudHJ5IiwiRlIiXQ~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~" } ] }
outgoing_headers	{ "headers": { "x-fapi-interaction-id": [ "3fd7f1f9-947d-4b93-b43d-22a9c03a3260" ], "content-type": [ "application/json" ] } }
outgoing_path	credential

2026-11-12 17:01:01

(1) More

FINISHED

oid4vci-1_0-wallet-happy-path-with-scopes-without-authorization-details-in-token-response

Test has run to completion

testmodule_result

PASSED

2026-11-12 17:02:40

(2) More

TEST-RUNNER

Alias has now been claimed by another test

alias	siros-wallet-vci-test
new_test_id	DAkbZ1zNP9nNmvd

Test Summary

Test Results