Test detail

Test Name	oid4vp-1final-wallet-negative-test-required-non-matching-credential
Variant	credential_type=eudi_pid, credential_format=sd_jwt_vc, client_id_prefix=x509_hash, request_method=request_uri_signed, vp_profile=haip, response_mode=dc_api.jwt
Test ID	NUuBLAm25LEjCRd https://localhost.emobix.co.uk:8443/log-detail.html?public=true&log=NUuBLAm25LEjCRd
Created	2026-11-09T22:16:07.772346911Z
Description	OID4VP wallet conformance test for SIROS wallet
Test Version	5.3.4
Test Owner	leifj
Plan ID	t8zTXhIGHDy25 https://localhost.emobix.co.uk:8443/plan-detail.html?public=true&plan=t8zTXhIGHDy25
Exported From	https://localhost.emobix.co.uk:8443
Exported By	leifj
Suite Version	5.3.4
Exported	2026-11-09 22:18:06 (UTC)

2026-11-09 22:16:07

(8) More

INFO

TEST-RUNNER

Test instance NUuBLAm25LEjCRd created

baseUrl	https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test
variant	{ "credential_type": "eudi_pid", "credential_format": "sd_jwt_vc", "request_method": "request_uri_signed", "vp_profile": "haip", "client_id_prefix": "x509_hash", "response_mode": "dc_api.jwt" }
alias	siros-wallet-vp-test
description	OID4VP wallet conformance test for SIROS wallet
planId	t8zTXhIGHDy25
config	{ "alias": "siros-wallet-vp-test", "description": "OID4VP wallet conformance test for SIROS wallet", "server": { "authorization_endpoint": "openid4vp://" }, "client": { "client_id": "conformance.example.com", "jwks": { "keys": [ { "kty": "EC", "crv": "P-256", "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60", "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68", "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU", "kid": "vp-verifier-key-1", "use": "sig", "alg": "ES256", "x5c": [ "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" ] } ] }, "dcql": { "credentials": [ { "id": "eudi_pid", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:eudi:pid:1" ] }, "claims": [ { "path": [ "given_name" ] }, { "path": [ "family_name" ] } ] } ] } }, "credential": { "trust_anchor_pem": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", "status_list_trust_anchor_pem": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" } }
baseMtlsUrl	https://localhost:8444/test-mtls/a/siros-wallet-vp-test
testName	oid4vp-1final-wallet-negative-test-required-non-matching-credential

2026-11-09 22:16:07

(2) More

OID4VP-1FINAL-2

SetWebOrigin

Set origin from conformance suite base url

base_url	https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test
origin	https://localhost.emobix.co.uk:8443

2026-11-09 22:16:07

(2) More

SetClientIdToX509Hash

Set client_id to x509 hash

x5c_certificate

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

client_id

uCBGxmy7D2eDDAtNjzfgbEg878clE-DawKrXkIr2Qy0

2026-11-09 22:16:07

(1) More

SUCCESS

GetStaticServerConfiguration

Found a static server object

authorization_endpoint

openid4vp://

2026-11-09 22:16:07

(3) More

SUCCESS

GetStaticClientConfiguration

Found a static client object

client_id

uCBGxmy7D2eDDAtNjzfgbEg878clE-DawKrXkIr2Qy0

jwks

{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "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"
      ]
    }
  ]
}

dcql

{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    }
  ]
}

2026-11-09 22:16:07

(1) More

SUCCESS

OID4VPSetClientIdToIncludeClientIdScheme

Set client id to include the client id scheme

new_client_id

x509_hash:uCBGxmy7D2eDDAtNjzfgbEg878clE-DawKrXkIr2Qy0

2026-11-09 22:16:07	SUCCESS RFC7517-1.1	ValidateClientJWKsPrivatePart Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url

2026-11-09 22:16:07

(1) More

SUCCESS

CreateClientEncryptionKeyIfMissing

No client encryption key provided in client jwks in configuration so created an encryption key

jwk

{
  "kty": "EC",
  "d": "PEzKo0VoQptiUhi95P-myeE32iA336-UQXCbtMrQPQ0",
  "use": "enc",
  "crv": "P-256",
  "kid": "c27d7068-347c-4b35-a455-b626534bdb96",
  "x": "xYXUIgKwkgmuEnble0gS0TFM38agp76P8v8hcXn2nEI",
  "y": "-IoC38lCtISwCa5yfx1ho-VpckhxJL8Ah4Ngv8KRNg8",
  "alg": "ECDH-ES"
}

2026-11-09 22:16:07

(2) More

SUCCESS

ExtractJWKsFromStaticClientConfiguration

Extracted client JWK

client_jwks

{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "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"
      ]
    },
    {
      "kty": "EC",
      "d": "PEzKo0VoQptiUhi95P-myeE32iA336-UQXCbtMrQPQ0",
      "use": "enc",
      "crv": "P-256",
      "kid": "c27d7068-347c-4b35-a455-b626534bdb96",
      "x": "xYXUIgKwkgmuEnble0gS0TFM38agp76P8v8hcXn2nEI",
      "y": "-IoC38lCtISwCa5yfx1ho-VpckhxJL8Ah4Ngv8KRNg8",
      "alg": "ECDH-ES"
    }
  ]
}

client_public_jwks

{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "vp-verifier-key-1",
      "x5c": [
        "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"
      ],
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "alg": "ES256"
    },
    {
      "kty": "EC",
      "use": "enc",
      "crv": "P-256",
      "kid": "c27d7068-347c-4b35-a455-b626534bdb96",
      "x": "xYXUIgKwkgmuEnble0gS0TFM38agp76P8v8hcXn2nEI",
      "y": "-IoC38lCtISwCa5yfx1ho-VpckhxJL8Ah4Ngv8KRNg8",
      "alg": "ECDH-ES"
    }
  ]
}

2026-11-09 22:16:07

(1) More

SUCCESS

RFC7517-4.5

CheckDistinctKeyIdValueInClientJWKs

Distinct 'kid' value in all keys of client_jwks

see	https://bitbucket.org/openid/connect/issues/1127

2026-11-09 22:16:07		RegisterRical No RICAL configured, skipping RICAL-based verifier trust checks

2026-11-09 22:16:07

(1) More

INFO

ISO18013-5-F.3.2.1

CallRicalEndpoint

Skipped evaluation due to missing required string: rical_url

expected

rical_url

2026-11-09 22:16:07

(2) More

INFO

ISO18013-5-F.3.2.1

ParseRical

Skipped evaluation due to missing required object: rical

mapped
expected	rical

2026-11-09 22:16:07

(2) More

INFO

DumpRicalCborDiagnostics

Skipped evaluation due to missing required object: rical

mapped
expected	rical

2026-11-09 22:16:07

(2) More

INFO

ISO18013-5-F.3.2

ValidateRicalSignature

Skipped evaluation due to missing required object: rical

mapped
expected	rical

2026-11-09 22:16:07

(2) More

INFO

ISO18013-5-F.3.2.5

ValidateRicalSignerCertificate

Skipped evaluation due to missing required object: rical

mapped
expected	rical

2026-11-09 22:16:07

(2) More

INFO

ISO18013-5-F.3.2.1

ValidateRicalStructure

Skipped evaluation due to missing required object: rical

mapped
expected	rical

2026-11-09 22:16:07

(2) More

INFO

ISO18013-5-F.3.2.6

ValidateConfiguredClientCertificatesAgainstRical

Skipped evaluation due to missing required object: rical

mapped
expected	rical

2026-11-09 22:16:07

(1) More

RegisterCredentialTrustAnchor

Registered credential trust anchor certificate

trust_anchor_pem

2026-11-09 22:16:07

(1) More

RegisterStatusListTrustAnchor

Registered status list trust anchor certificate

trust_anchor_pem

2026-11-09 22:16:07	SUCCESS HAIP-6.1	EnsureCredentialTrustAnchorConfigured Credential Trust Anchor is configured

2026-11-09 22:16:07	SUCCESS HAIP-6.1	EnsureStatusListTrustAnchorConfigured Status List Trust Anchor is configured

2026-11-09 22:16:07

(1) More

SUCCESS

OIDCD-3

CheckDiscEndpointRequestUriParameterSupported

request_uri_parameter_supported has correct value

request_uri_parameter_supported

2026-11-09 22:16:07

(1) More

JAR-5.2

CreateRandomRequestUriWithoutFragment

Created random URL for request_uri

request_uri

{
  "path": "requesturi/TI3xeYJwHzcnXFsRwq6bzkANfQwViy10OsMO4MK1aSCHNTjSAotEnXhGflLjkMJL",
  "fullUrl": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/requesturi/TI3xeYJwHzcnXFsRwq6bzkANfQwViy10OsMO4MK1aSCHNTjSAotEnXhGflLjkMJL"
}

2026-11-09 22:16:07		oid4vp-1final-wallet-negative-test-required-non-matching-credential Setup Done

Make request to wallet

2026-11-09 22:16:07	SUCCESS	CreateEmptyAuthorizationEndpointRequest Created empty authorization endpoint request

2026-11-09 22:16:07

(1) More

SUCCESS

AddClientIdToAuthorizationEndpointRequest

Added client_id of 'x509_hash:uCBGxmy7D2eDDAtNjzfgbEg878clE-DawKrXkIr2Qy0' to authorization endpoint request

client_id

x509_hash:uCBGxmy7D2eDDAtNjzfgbEg878clE-DawKrXkIr2Qy0

2026-11-09 22:16:07

(2) More

SUCCESS

OID4VP-1FINALA-A.2

AddExpectedOriginsToAuthorizationEndpointRequest

Added expected_origins to request

client_id	x509_hash:uCBGxmy7D2eDDAtNjzfgbEg878clE-DawKrXkIr2Qy0
expected_origins	[ "https://localhost.emobix.co.uk:8443" ]

2026-11-09 22:16:07

(2) More

SUCCESS

LoadBuiltInDcqlQuery

Using the conformance suite's built-in DCQL query for the selected credential type; select the 'custom' credential type if you need to supply your own query

dcql

{
  "credentials": [
    {
      "id": "my_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    }
  ]
}

resource

/json/dcql/vp1final-wallet-eudi-pid.json

2026-11-09 22:16:07

(1) More

INFO

ExtractDCQLQueryFromClientConfiguration

Skipped evaluation because string is present: dcql_builtin_resource

expected

dcql_builtin_resource

2026-11-09 22:16:07

(3) More

OID4VP-1FINAL-6.4.2 OID4VP-1FINAL-6.2

AddRequiredNonMatchingCredentialToDcqlQuery

Added non-matching required credential and credential_sets to DCQL query

dcql_query

{
  "credentials": [
    {
      "id": "my_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:conformance-suite:nonexistent:credential:1"
        ]
      },
      "claims": [
        {
          "path": [
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "my_credential"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}

fake_credential_id

nonexistent_credential

original_credential_id

my_credential

2026-11-09 22:16:07

(2) More

SUCCESS

OID4VP-1FINAL-6 OID4VP-1FINAL-6.1

ValidateDCQLQuery

DCQL query input is valid

input

{
  "credentials": [
    {
      "id": "my_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:conformance-suite:nonexistent:credential:1"
        ]
      },
      "claims": [
        {
          "path": [
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "my_credential"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}

schema_link

/json-schemas/oid4vp/dcql_request.json

2026-11-09 22:16:07

(2) More

SUCCESS

CheckDCQLQueryCredentialFormatMatchesTestConfiguration

DCQL query credential format matches test configuration

expected_format	dc+sd-jwt
credential_count	2

2026-11-09 22:16:07

(2) More

SUCCESS

OID4VP-1FINAL-6

CheckForUnexpectedParametersInDcqlQuery

No unknown properties were found in the DCQL query

input

{
  "credentials": [
    {
      "id": "my_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:conformance-suite:nonexistent:credential:1"
        ]
      },
      "claims": [
        {
          "path": [
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "my_credential"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}

schema_link

/json-schemas/oid4vp/dcql_request.json

2026-11-09 22:16:07	SUCCESS SDJWTVC-3.2.2.2	CheckForNonSelectivelyDisclosableClaimsInDcqlQuery DCQL query does not request any SD-JWT VC claims that cannot be selectively disclosed

2026-11-09 22:16:07	SUCCESS OID4VP-1FINAL-6.4.1	CheckForUnreferencedClaimsInDcqlQuery The DCQL query does not contain claims entries unreferenced by claim_sets

2026-11-09 22:16:07

(3) More

SUCCESS

AddDcqlToAuthorizationEndpointRequest

Added dcql_query parameter to request

client_id

x509_hash:uCBGxmy7D2eDDAtNjzfgbEg878clE-DawKrXkIr2Qy0

expected_origins

[
  "https://localhost.emobix.co.uk:8443"
]

dcql_query

{
  "credentials": [
    {
      "id": "my_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:conformance-suite:nonexistent:credential:1"
        ]
      },
      "claims": [
        {
          "path": [
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "my_credential"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}

2026-11-09 22:16:07

(3) More

INFO

ExtractVerifierInfoFromClientConfiguration

Skipped evaluation due to missing required element: client verifier_info

path	verifier_info
mapped
object	client

2026-11-09 22:16:07

(3) More

INFO

OID4VP-1FINAL-5.1

ValidateVerifierInfo

Skipped evaluation due to missing required element: client verifier_info

path	verifier_info
mapped
object	client

2026-11-09 22:16:07

(3) More

INFO

OID4VP-1FINAL-5.1

CheckForUnexpectedParametersInVerifierInfo

Skipped evaluation due to missing required element: client verifier_info

path	verifier_info
mapped
object	client

2026-11-09 22:16:07

(3) More

INFO

AddVerifierInfoToAuthorizationEndpointRequest

Skipped evaluation due to missing required element: client verifier_info

path	verifier_info
mapped
object	client

2026-11-09 22:16:07

(2) More

CreateRandomNonceValue

Created nonce value

requested_nonce_length	26
nonce	niv1M0Vbo7npFsckVhM2Xl-._~

2026-11-09 22:16:07

(4) More

SUCCESS

AddNonceToAuthorizationEndpointRequest

Added nonce parameter to request

client_id	x509_hash:uCBGxmy7D2eDDAtNjzfgbEg878clE-DawKrXkIr2Qy0
expected_origins	[ "https://localhost.emobix.co.uk:8443" ]
dcql_query	{ "credentials": [ { "id": "my_credential", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:eudi:pid:1" ] }, "claims": [ { "path": [ "given_name" ] }, { "path": [ "family_name" ] } ] }, { "id": "nonexistent_credential", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:conformance-suite:nonexistent:credential:1" ] }, "claims": [ { "path": [ "nonexistent_claim" ] } ] } ], "credential_sets": [ { "options": [ [ "my_credential" ] ], "required": true }, { "options": [ [ "nonexistent_credential" ] ], "required": true } ] }
nonce	niv1M0Vbo7npFsckVhM2Xl-._~

2026-11-09 22:16:07

(1) More

AddVP1FinalSdJwtClientMetadataToAuthorizationRequest

Added client_metadata to authorization endpoint request

client_metadata

{
  "vp_formats_supported": {
    "dc+sd-jwt": {
      "sd-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ],
      "kb-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ]
    }
  }
}

2026-11-09 22:16:07

(1) More

AddVP1FinalEncryptionParametersToClientMetadata

Added encryption key to client_metadata in authorization endpoint request

client_metadata

{
  "vp_formats_supported": {
    "dc+sd-jwt": {
      "sd-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ],
      "kb-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ]
    }
  },
  "jwks": {
    "keys": [
      {
        "kty": "EC",
        "use": "enc",
        "crv": "P-256",
        "kid": "c27d7068-347c-4b35-a455-b626534bdb96",
        "x": "xYXUIgKwkgmuEnble0gS0TFM38agp76P8v8hcXn2nEI",
        "y": "-IoC38lCtISwCa5yfx1ho-VpckhxJL8Ah4Ngv8KRNg8",
        "alg": "ECDH-ES"
      }
    ]
  },
  "encrypted_response_enc_values_supported": [
    "A128GCM",
    "A256GCM"
  ]
}

2026-11-09 22:16:07

(6) More

SUCCESS

SetAuthorizationEndpointRequestResponseTypeToVpToken

Added response_type parameter to request

client_id	x509_hash:uCBGxmy7D2eDDAtNjzfgbEg878clE-DawKrXkIr2Qy0
expected_origins	[ "https://localhost.emobix.co.uk:8443" ]
dcql_query	{ "credentials": [ { "id": "my_credential", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:eudi:pid:1" ] }, "claims": [ { "path": [ "given_name" ] }, { "path": [ "family_name" ] } ] }, { "id": "nonexistent_credential", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:conformance-suite:nonexistent:credential:1" ] }, "claims": [ { "path": [ "nonexistent_claim" ] } ] } ], "credential_sets": [ { "options": [ [ "my_credential" ] ], "required": true }, { "options": [ [ "nonexistent_credential" ] ], "required": true } ] }
nonce	niv1M0Vbo7npFsckVhM2Xl-._~
client_metadata	{ "vp_formats_supported": { "dc+sd-jwt": { "sd-jwt_alg_values": [ "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES256K", "ES384", "ES512", "EdDSA", "Ed25519", "Ed448" ], "kb-jwt_alg_values": [ "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES256K", "ES384", "ES512", "EdDSA", "Ed25519", "Ed448" ] } }, "jwks": { "keys": [ { "kty": "EC", "use": "enc", "crv": "P-256", "kid": "c27d7068-347c-4b35-a455-b626534bdb96", "x": "xYXUIgKwkgmuEnble0gS0TFM38agp76P8v8hcXn2nEI", "y": "-IoC38lCtISwCa5yfx1ho-VpckhxJL8Ah4Ngv8KRNg8", "alg": "ECDH-ES" } ] }, "encrypted_response_enc_values_supported": [ "A128GCM", "A256GCM" ] }
response_type	vp_token

2026-11-09 22:16:07

(7) More

SetAuthorizationEndpointRequestResponseMode

Added response_mode parameter to request

client_id	x509_hash:uCBGxmy7D2eDDAtNjzfgbEg878clE-DawKrXkIr2Qy0
expected_origins	[ "https://localhost.emobix.co.uk:8443" ]
dcql_query	{ "credentials": [ { "id": "my_credential", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:eudi:pid:1" ] }, "claims": [ { "path": [ "given_name" ] }, { "path": [ "family_name" ] } ] }, { "id": "nonexistent_credential", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:conformance-suite:nonexistent:credential:1" ] }, "claims": [ { "path": [ "nonexistent_claim" ] } ] } ], "credential_sets": [ { "options": [ [ "my_credential" ] ], "required": true }, { "options": [ [ "nonexistent_credential" ] ], "required": true } ] }
nonce	niv1M0Vbo7npFsckVhM2Xl-._~
client_metadata	{ "vp_formats_supported": { "dc+sd-jwt": { "sd-jwt_alg_values": [ "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES256K", "ES384", "ES512", "EdDSA", "Ed25519", "Ed448" ], "kb-jwt_alg_values": [ "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES256K", "ES384", "ES512", "EdDSA", "Ed25519", "Ed448" ] } }, "jwks": { "keys": [ { "kty": "EC", "use": "enc", "crv": "P-256", "kid": "c27d7068-347c-4b35-a455-b626534bdb96", "x": "xYXUIgKwkgmuEnble0gS0TFM38agp76P8v8hcXn2nEI", "y": "-IoC38lCtISwCa5yfx1ho-VpckhxJL8Ah4Ngv8KRNg8", "alg": "ECDH-ES" } ] }, "encrypted_response_enc_values_supported": [ "A128GCM", "A256GCM" ] }
response_type	vp_token
response_mode	dc_api.jwt

2026-11-09 22:16:07

(1) More

SUCCESS

ConvertAuthorizationEndpointRequestToRequestObject

Created request object claims

request_object_claims

{
  "client_id": "x509_hash:uCBGxmy7D2eDDAtNjzfgbEg878clE-DawKrXkIr2Qy0",
  "expected_origins": [
    "https://localhost.emobix.co.uk:8443"
  ],
  "dcql_query": {
    "credentials": [
      {
        "id": "my_credential",
        "format": "dc+sd-jwt",
        "meta": {
          "vct_values": [
            "urn:eudi:pid:1"
          ]
        },
        "claims": [
          {
            "path": [
              "given_name"
            ]
          },
          {
            "path": [
              "family_name"
            ]
          }
        ]
      },
      {
        "id": "nonexistent_credential",
        "format": "dc+sd-jwt",
        "meta": {
          "vct_values": [
            "urn:conformance-suite:nonexistent:credential:1"
          ]
        },
        "claims": [
          {
            "path": [
              "nonexistent_claim"
            ]
          }
        ]
      }
    ],
    "credential_sets": [
      {
        "options": [
          [
            "my_credential"
          ]
        ],
        "required": true
      },
      {
        "options": [
          [
            "nonexistent_credential"
          ]
        ],
        "required": true
      }
    ]
  },
  "nonce": "niv1M0Vbo7npFsckVhM2Xl-._~",
  "client_metadata": {
    "vp_formats_supported": {
      "dc+sd-jwt": {
        "sd-jwt_alg_values": [
          "RS256",
          "RS384",
          "RS512",
          "PS256",
          "PS384",
          "PS512",
          "ES256",
          "ES256K",
          "ES384",
          "ES512",
          "EdDSA",
          "Ed25519",
          "Ed448"
        ],
        "kb-jwt_alg_values": [
          "RS256",
          "RS384",
          "RS512",
          "PS256",
          "PS384",
          "PS512",
          "ES256",
          "ES256K",
          "ES384",
          "ES512",
          "EdDSA",
          "Ed25519",
          "Ed448"
        ]
      }
    },
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "use": "enc",
          "crv": "P-256",
          "kid": "c27d7068-347c-4b35-a455-b626534bdb96",
          "x": "xYXUIgKwkgmuEnble0gS0TFM38agp76P8v8hcXn2nEI",
          "y": "-IoC38lCtISwCa5yfx1ho-VpckhxJL8Ah4Ngv8KRNg8",
          "alg": "ECDH-ES"
        }
      ]
    },
    "encrypted_response_enc_values_supported": [
      "A128GCM",
      "A256GCM"
    ]
  },
  "response_type": "vp_token",
  "response_mode": "dc_api.jwt"
}

2026-11-09 22:16:07

(1) More

AddSelfIssuedMeV2AudToRequestObject

Added SIOPv2 aud to request object claims

aud	https://self-issued.me/v2

2026-11-09 22:16:07		BuildRequestObjectByReferenceRedirectToAuthorizationEndpointWithoutDuplicates No redirected required for Browser API

2026-11-09 22:16:07

(4) More

SUCCESS

SignRequestObjectIncludeX5cHeader

Signed the request object

claims	{ "aud": "https://self-issued.me/v2", "response_type": "vp_token", "expected_origins": [ "https://localhost.emobix.co.uk:8443" ], "dcql_query": { "credentials": [ { "id": "my_credential", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:eudi:pid:1" ] }, "claims": [ { "path": [ "given_name" ] }, { "path": [ "family_name" ] } ] }, { "id": "nonexistent_credential", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:conformance-suite:nonexistent:credential:1" ] }, "claims": [ { "path": [ "nonexistent_claim" ] } ] } ], "credential_sets": [ { "options": [ [ "my_credential" ] ], "required": true }, { "options": [ [ "nonexistent_credential" ] ], "required": true } ] }, "nonce": "niv1M0Vbo7npFsckVhM2Xl-._~", "client_id": "x509_hash:uCBGxmy7D2eDDAtNjzfgbEg878clE-DawKrXkIr2Qy0", "client_metadata": { "vp_formats_supported": { "dc+sd-jwt": { "sd-jwt_alg_values": [ "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES256K", "ES384", "ES512", "EdDSA", "Ed25519", "Ed448" ], "kb-jwt_alg_values": [ "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES256K", "ES384", "ES512", "EdDSA", "Ed25519", "Ed448" ] } }, "jwks": { "keys": [ { "kty": "EC", "use": "enc", "crv": "P-256", "kid": "c27d7068-347c-4b35-a455-b626534bdb96", "x": "xYXUIgKwkgmuEnble0gS0TFM38agp76P8v8hcXn2nEI", "y": "-IoC38lCtISwCa5yfx1ho-VpckhxJL8Ah4Ngv8KRNg8", "alg": "ECDH-ES" } ] }, "encrypted_response_enc_values_supported": [ "A128GCM", "A256GCM" ] }, "response_mode": "dc_api.jwt" }
header	{ "x5c": [ "MIIBvjCCAWOgAwIBAgIUfw4in2xbbaO4BRVzCMJ9jcx+MYUwCgYIKoZIzj0EAwIwIjEgMB4GA1UEAwwXY29uZm9ybWFuY2UuZXhhbXBsZS5jb20wHhcNMjYwNTE1MDc1MzQ1WhcNMjcwNTE1MDc1MzQ1WjAiMSAwHgYDVQQDDBdjb25mb3JtYW5jZS5leGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBz7RGBBEDRnDhhrUF55vFW268lmDhe3ZZkynA8CMZOtKnv02968XSiEmNSoGPaHX3LXl+boQztsK0DB46VhE6+jdzB1MB0GA1UdDgQWBBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAfBgNVHSMEGDAWgBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAPBgNVHRMBAf8EBTADAQH/MCIGA1UdEQQbMBmCF2NvbmZvcm1hbmNlLmV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQC4lhxwiQy3+GPtzdQW9IlDSrQoEnncom6YsKZ3izHuIgIhAKZIjNYWTG0xIpFrS4DVkvo1qiV9kNf1Qvp8StOW6pEr" ], "kid": "vp-verifier-key-1", "typ": "oauth-authz-req+jwt", "alg": "ES256" }
request_object	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.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.3pVPUsDYAyGB3N3YU2JqDdKahcl4T8El-b_xKtKljsZpHX8Fzhf2sF9PajuO7oMnfTUHxBEsoyhLop2Zik_c7A
key	{ "kty": "EC", "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU", "use": "sig", "crv": "P-256", "kid": "vp-verifier-key-1", "x5c": [ "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" ], "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60", "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68", "alg": "ES256" }

2026-11-09 22:16:07

(1) More

SUCCESS

CreateRandomBrowserApiSubmitUrl

Created random Browser API submission URL

browser_api_submit

{
  "path": "browser_api/ZTH1PyBEw2ZTJhSvF3qE",
  "fullUrl": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/browser_api/ZTH1PyBEw2ZTJhSvF3qE"
}

2026-11-09 22:16:07

(1) More

BuildVP1FinalBrowserDCAPIRequestSigned

Created Browser API request

object

{
  "digital": {
    "requests": [
      {
        "protocol": "openid4vp-v1-signed",
        "data": {
          "request": "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.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.3pVPUsDYAyGB3N3YU2JqDdKahcl4T8El-b_xKtKljsZpHX8Fzhf2sF9PajuO7oMnfTUHxBEsoyhLop2Zik_c7A"
        }
      }
    ]
  }
}

2026-11-09 22:16:07

(1) More

oid4vp-1final-wallet-negative-test-required-non-matching-credential

Calling browser API

request

{
  "digital": {
    "requests": [
      {
        "protocol": "openid4vp-v1-signed",
        "data": {
          "request": "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.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.3pVPUsDYAyGB3N3YU2JqDdKahcl4T8El-b_xKtKljsZpHX8Fzhf2sF9PajuO7oMnfTUHxBEsoyhLop2Zik_c7A"
        }
      }
    ]
  }
}

2026-11-09 22:16:07		oid4vp-1final-wallet-negative-test-required-non-matching-credential The wallet should be opened using the Browser API button, and should then parse the request and return the results via the API

2026-11-09 22:16:17

(12) More

INCOMING

oid4vp-1final-wallet-negative-test-required-non-matching-credential

Incoming HTTP request to /test/a/siros-wallet-vp-test/browser_api/ZTH1PyBEw2ZTJhSvF3qE

incoming_headers	{ "host": "localhost.emobix.co.uk", "x-forwarded-uri": "/test/a/siros-wallet-vp-test/browser_api/ZTH1PyBEw2ZTJhSvF3qE", "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps", "connection": "close", "content-length": "127", "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36", "accept": "/", "accept-encoding": "gzip,deflate,br", "content-type": "application/json", "cookie": "JSESSIONID\u003dAE8652434DB5A3305AA093CBE73FCA11" }
incoming_path	/test/a/siros-wallet-vp-test/browser_api/ZTH1PyBEw2ZTJhSvF3qE
incoming_body_form_params
incoming_method	POST
incoming_tls_version	TLSv1.3
incoming_tls_cert
incoming_query_string_params	{}
incoming_body	{"protocol":"openid4vp-v1-signed","data":{"error":"access_denied","error_description":"The wallet did not fulfil the request"}}
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_body_json_parse_error
incoming_tls_cipher	TLS_AES_256_GCM_SHA384
incoming_body_json	{ "protocol": "openid4vp-v1-signed", "data": { "error": "access_denied", "error_description": "The wallet did not fulfil the request" } }

2026-11-09 22:16:17	SUCCESS	EnsureIncomingTls12WithSecureCipherOrTls13 Found TLS 1.3 connection

2026-11-09 22:16:17	SUCCESS RFC9325-3.1.1	EnsureIncomingTls13 TLS 1.3 in use

2026-11-09 22:16:17

(4) More

OUTGOING

oid4vp-1final-wallet-negative-test-required-non-matching-credential

Response to HTTP request to test instance NUuBLAm25LEjCRd

outgoing_status_code	204
outgoing_body
outgoing_headers	{ "headers": {} }
outgoing_path	browser_api/ZTH1PyBEw2ZTJhSvF3qE

Process Browser API result

2026-11-09 22:16:17

(2) More

SUCCESS

ExtractVP1FinalBrowserApiResponse

Browser API result captured and successfully parsed

parsed_data

{
  "error": "access_denied",
  "error_description": "The wallet did not fulfil the request"
}

api_result

{
  "protocol": "openid4vp-v1-signed",
  "data": {
    "error": "access_denied",
    "error_description": "The wallet did not fulfil the request"
  }
}

2026-11-09 22:16:17		oid4vp-1final-wallet-negative-test-required-non-matching-credential The response is not encrypted; OID4VP permits a wallet that is unable to generate an encrypted response to return an unencrypted error response.

2026-11-09 22:16:17

(2) More

SUCCESS

ExtractBrowserApiAuthorizationEndpointResponse

Extracted authorization response

error	access_denied
error_description	The wallet did not fulfil the request

2026-11-09 22:16:17

(2) More

SUCCESS

OID4VP-1FINAL-6.4.2 OID4VP-1FINAL-8.5

EnsureErrorResponseForUnsatisfiableDcqlQuery

Wallet returned an error response for the unsatisfiable DCQL query

error	access_denied
error_description	The wallet did not fulfil the request

2026-11-09 22:16:17	SUCCESS OID4VP-1FINAL-6.4.2	EnsureNoVpTokenInAuthorizationEndpointResponse Authorization endpoint response does not contain a vp_token, as expected.

2026-11-09 22:16:17	SUCCESS OID4VP-1FINAL-8.5	EnsureAuthorizationEndpointErrorIsAccessDenied Authorization endpoint error is 'access_denied'

2026-11-09 22:16:17

(1) More

FINISHED

oid4vp-1final-wallet-negative-test-required-non-matching-credential

Test has run to completion

testmodule_result

PASSED

2026-11-09 22:16:17

(2) More

TEST-RUNNER

Alias has now been claimed by another test

alias	siros-wallet-vp-test
new_test_id	jev1FHfCjvmGpvu

Test Summary

Test Results