Test detail

Test Name	oid4vp-1final-wallet-negative-test-required-non-matching-credential
Variant	credential_type=eudi_pid, credential_format=sd_jwt_vc, client_id_prefix=web-origin, request_method=request_uri_unsigned, vp_profile=haip, response_mode=dc_api.jwt
Test ID	GyE4uT8dYLyHSH1 https://localhost.emobix.co.uk:8443/log-detail.html?public=true&log=GyE4uT8dYLyHSH1
Created	2026-11-10T00:08:28.042770991Z
Description	OID4VP wallet conformance test for SIROS wallet
Test Version	5.3.4
Test Owner	leifj
Plan ID	iplK6YpnVeqVS https://localhost.emobix.co.uk:8443/plan-detail.html?public=true&plan=iplK6YpnVeqVS
Exported From	https://localhost.emobix.co.uk:8443
Exported By	leifj
Suite Version	5.3.4
Exported	2026-11-10 00:13:32 (UTC)

2026-11-10 00:08:28

(8) More

INFO

TEST-RUNNER

Test instance GyE4uT8dYLyHSH1 created

baseUrl	https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test
variant	{ "credential_type": "eudi_pid", "credential_format": "sd_jwt_vc", "request_method": "request_uri_unsigned", "vp_profile": "haip", "client_id_prefix": "web-origin", "response_mode": "dc_api.jwt" }
alias	siros-wallet-vp-test
description	OID4VP wallet conformance test for SIROS wallet
planId	iplK6YpnVeqVS
config	{ "alias": "siros-wallet-vp-test", "description": "OID4VP wallet conformance test for SIROS wallet", "server": { "authorization_endpoint": "openid4vp://" }, "client": { "client_id": "conformance.example.com", "jwks": { "keys": [ { "kty": "EC", "crv": "P-256", "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60", "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68", "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU", "kid": "vp-verifier-key-1", "use": "sig", "alg": "ES256", "x5c": [ "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" ] } ] }, "dcql": { "credentials": [ { "id": "eudi_pid", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:eudi:pid:1" ] }, "claims": [ { "path": [ "given_name" ] }, { "path": [ "family_name" ] } ] } ] } }, "credential": { "trust_anchor_pem": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", "status_list_trust_anchor_pem": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" }, "client2": { "client_id": "conformance.example.com", "jwks": { "keys": [ { "kty": "EC", "crv": "P-256", "x": "MTP2vhYbxELUHZ-D9W7_amy7HWW6rmzeskDJSMwmLmU", "y": "GnIV_qKVMpTI-Z0FW3ZznqYKW6UFk0U1jK677szJ8Js", "d": "2jQRnhrJpcq_s4hKbLcnmzOkM7TK9LKLHGY90sB7VoI", "kid": "vp-verifier-key-2", "use": "sig", "alg": "ES256", "x5c": [ "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" ] } ] }, "private_key": { "kty": "EC", "crv": "P-256", "x": "MTP2vhYbxELUHZ-D9W7_amy7HWW6rmzeskDJSMwmLmU", "y": "GnIV_qKVMpTI-Z0FW3ZznqYKW6UFk0U1jK677szJ8Js", "d": "2jQRnhrJpcq_s4hKbLcnmzOkM7TK9LKLHGY90sB7VoI", "kid": "vp-verifier-key-2", "use": "sig", "alg": "ES256", "x5c": [ "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" ] } } }
baseMtlsUrl	https://localhost:8444/test-mtls/a/siros-wallet-vp-test
testName	oid4vp-1final-wallet-negative-test-required-non-matching-credential

2026-11-10 00:08:28

(2) More

OID4VP-1FINAL-2

SetWebOrigin

Set origin from conformance suite base url

base_url	https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test
origin	https://localhost.emobix.co.uk:8443

2026-11-10 00:08:28

(1) More

SetClientIdToWebOrigin

Set client_id to web origin URI

client_id

https://localhost.emobix.co.uk:8443

2026-11-10 00:08:28

(1) More

SUCCESS

GetStaticServerConfiguration

Found a static server object

authorization_endpoint

openid4vp://

2026-11-10 00:08:28

(3) More

SUCCESS

GetStaticClientConfiguration

Found a static client object

client_id

https://localhost.emobix.co.uk:8443

jwks

{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "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"
      ]
    }
  ]
}

dcql

{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    }
  ]
}

2026-11-10 00:08:28

(1) More

SUCCESS

OID4VPSetClientIdToIncludeClientIdScheme

Set client id to include the client id scheme

new_client_id

web-origin:https://localhost.emobix.co.uk:8443

2026-11-10 00:08:28	SUCCESS RFC7517-1.1	ValidateClientJWKsPrivatePart Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url

2026-11-10 00:08:28

(1) More

SUCCESS

CreateClientEncryptionKeyIfMissing

No client encryption key provided in client jwks in configuration so created an encryption key

jwk

{
  "kty": "EC",
  "d": "fATsDJb9NGo1l_g0kY1eWzCEU0j1asAevqBLS7Lgpis",
  "use": "enc",
  "crv": "P-256",
  "kid": "e62a8bae-431c-42ce-b5b1-c982863c9dfa",
  "x": "gmmWhXQ4DPBxqyhhI_4RFGxTpzCN9bmOfS4q7hACILk",
  "y": "GxFAK7tWc8nSpkua7yYVVCJzMj8sRXC_GptvvICn1xI",
  "alg": "ECDH-ES"
}

2026-11-10 00:08:28

(2) More

SUCCESS

ExtractJWKsFromStaticClientConfiguration

Extracted client JWK

client_jwks

{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "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"
      ]
    },
    {
      "kty": "EC",
      "d": "fATsDJb9NGo1l_g0kY1eWzCEU0j1asAevqBLS7Lgpis",
      "use": "enc",
      "crv": "P-256",
      "kid": "e62a8bae-431c-42ce-b5b1-c982863c9dfa",
      "x": "gmmWhXQ4DPBxqyhhI_4RFGxTpzCN9bmOfS4q7hACILk",
      "y": "GxFAK7tWc8nSpkua7yYVVCJzMj8sRXC_GptvvICn1xI",
      "alg": "ECDH-ES"
    }
  ]
}

client_public_jwks

{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "vp-verifier-key-1",
      "x5c": [
        "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"
      ],
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "alg": "ES256"
    },
    {
      "kty": "EC",
      "use": "enc",
      "crv": "P-256",
      "kid": "e62a8bae-431c-42ce-b5b1-c982863c9dfa",
      "x": "gmmWhXQ4DPBxqyhhI_4RFGxTpzCN9bmOfS4q7hACILk",
      "y": "GxFAK7tWc8nSpkua7yYVVCJzMj8sRXC_GptvvICn1xI",
      "alg": "ECDH-ES"
    }
  ]
}

2026-11-10 00:08:28

(1) More

SUCCESS

RFC7517-4.5

CheckDistinctKeyIdValueInClientJWKs

Distinct 'kid' value in all keys of client_jwks

see	https://bitbucket.org/openid/connect/issues/1127

2026-11-10 00:08:28

(1) More

RegisterCredentialTrustAnchor

Registered credential trust anchor certificate

trust_anchor_pem

2026-11-10 00:08:28

(1) More

RegisterStatusListTrustAnchor

Registered status list trust anchor certificate

trust_anchor_pem

2026-11-10 00:08:28	SUCCESS HAIP-6.1	EnsureCredentialTrustAnchorConfigured Credential Trust Anchor is configured

2026-11-10 00:08:28	SUCCESS HAIP-6.1	EnsureStatusListTrustAnchorConfigured Status List Trust Anchor is configured

2026-11-10 00:08:28

(1) More

SUCCESS

OIDCD-3

CheckDiscEndpointRequestUriParameterSupported

request_uri_parameter_supported has correct value

request_uri_parameter_supported

2026-11-10 00:08:28

(1) More

JAR-5.2

CreateRandomRequestUriWithoutFragment

Created random URL for request_uri

request_uri

{
  "path": "requesturi/pYTNpClvhX0x6CYQs0ZjbR6AFVbi677ylrU1LfU7dWG7QXhll7Svv6aI5E6AVbaJ",
  "fullUrl": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/requesturi/pYTNpClvhX0x6CYQs0ZjbR6AFVbi677ylrU1LfU7dWG7QXhll7Svv6aI5E6AVbaJ"
}

2026-11-10 00:08:28		oid4vp-1final-wallet-negative-test-required-non-matching-credential Setup Done

Make request to wallet

2026-11-10 00:08:28	SUCCESS	CreateEmptyAuthorizationEndpointRequest Created empty authorization endpoint request

2026-11-10 00:08:28

(2) More

SUCCESS

LoadBuiltInDcqlQuery

Using the conformance suite's built-in DCQL query for the selected credential type; select the 'custom' credential type if you need to supply your own query

dcql

{
  "credentials": [
    {
      "id": "my_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    }
  ]
}

resource

/json/dcql/vp1final-wallet-eudi-pid.json

2026-11-10 00:08:28

(1) More

INFO

ExtractDCQLQueryFromClientConfiguration

Skipped evaluation because string is present: dcql_builtin_resource

expected

dcql_builtin_resource

2026-11-10 00:08:28

(3) More

OID4VP-1FINAL-6.4.2 OID4VP-1FINAL-6.2

AddRequiredNonMatchingCredentialToDcqlQuery

Added non-matching required credential and credential_sets to DCQL query

dcql_query

{
  "credentials": [
    {
      "id": "my_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:conformance-suite:nonexistent:credential:1"
        ]
      },
      "claims": [
        {
          "path": [
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "my_credential"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}

fake_credential_id

nonexistent_credential

original_credential_id

my_credential

2026-11-10 00:08:28

(2) More

SUCCESS

OID4VP-1FINAL-6 OID4VP-1FINAL-6.1

ValidateDCQLQuery

DCQL query input is valid

input

{
  "credentials": [
    {
      "id": "my_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:conformance-suite:nonexistent:credential:1"
        ]
      },
      "claims": [
        {
          "path": [
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "my_credential"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}

schema_link

/json-schemas/oid4vp/dcql_request.json

2026-11-10 00:08:28

(2) More

SUCCESS

CheckDCQLQueryCredentialFormatMatchesTestConfiguration

DCQL query credential format matches test configuration

expected_format	dc+sd-jwt
credential_count	2

2026-11-10 00:08:28

(2) More

SUCCESS

OID4VP-1FINAL-6

CheckForUnexpectedParametersInDcqlQuery

No unknown properties were found in the DCQL query

input

{
  "credentials": [
    {
      "id": "my_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:conformance-suite:nonexistent:credential:1"
        ]
      },
      "claims": [
        {
          "path": [
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "my_credential"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}

schema_link

/json-schemas/oid4vp/dcql_request.json

2026-11-10 00:08:28	SUCCESS SDJWTVC-3.2.2.2	CheckForNonSelectivelyDisclosableClaimsInDcqlQuery DCQL query does not request any SD-JWT VC claims that cannot be selectively disclosed

2026-11-10 00:08:28	SUCCESS OID4VP-1FINAL-6.4.1	CheckForUnreferencedClaimsInDcqlQuery The DCQL query does not contain claims entries unreferenced by claim_sets

2026-11-10 00:08:28

(1) More

SUCCESS

AddDcqlToAuthorizationEndpointRequest

Added dcql_query parameter to request

dcql_query

{
  "credentials": [
    {
      "id": "my_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:conformance-suite:nonexistent:credential:1"
        ]
      },
      "claims": [
        {
          "path": [
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "my_credential"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}

2026-11-10 00:08:28

(3) More

INFO

ExtractVerifierInfoFromClientConfiguration

Skipped evaluation due to missing required element: client verifier_info

path	verifier_info
mapped
object	client

2026-11-10 00:08:28

(3) More

INFO

OID4VP-1FINAL-5.1

ValidateVerifierInfo

Skipped evaluation due to missing required element: client verifier_info

path	verifier_info
mapped
object	client

2026-11-10 00:08:28

(3) More

INFO

OID4VP-1FINAL-5.1

CheckForUnexpectedParametersInVerifierInfo

Skipped evaluation due to missing required element: client verifier_info

path	verifier_info
mapped
object	client

2026-11-10 00:08:28

(3) More

INFO

AddVerifierInfoToAuthorizationEndpointRequest

Skipped evaluation due to missing required element: client verifier_info

path	verifier_info
mapped
object	client

2026-11-10 00:08:28

(2) More

CreateRandomNonceValue

Created nonce value

requested_nonce_length	26
nonce	Xl71uzDapCL5qEw7mp2ip4-._~

2026-11-10 00:08:28

(2) More

SUCCESS

AddNonceToAuthorizationEndpointRequest

Added nonce parameter to request

dcql_query

{
  "credentials": [
    {
      "id": "my_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:conformance-suite:nonexistent:credential:1"
        ]
      },
      "claims": [
        {
          "path": [
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "my_credential"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}

nonce

Xl71uzDapCL5qEw7mp2ip4-._~

2026-11-10 00:08:28

(1) More

AddVP1FinalSdJwtClientMetadataToAuthorizationRequest

Added client_metadata to authorization endpoint request

client_metadata

{
  "vp_formats_supported": {
    "dc+sd-jwt": {
      "sd-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ],
      "kb-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ]
    }
  }
}

2026-11-10 00:08:28

(1) More

AddVP1FinalEncryptionParametersToClientMetadata

Added encryption key to client_metadata in authorization endpoint request

client_metadata

{
  "vp_formats_supported": {
    "dc+sd-jwt": {
      "sd-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ],
      "kb-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ]
    }
  },
  "jwks": {
    "keys": [
      {
        "kty": "EC",
        "use": "enc",
        "crv": "P-256",
        "kid": "e62a8bae-431c-42ce-b5b1-c982863c9dfa",
        "x": "gmmWhXQ4DPBxqyhhI_4RFGxTpzCN9bmOfS4q7hACILk",
        "y": "GxFAK7tWc8nSpkua7yYVVCJzMj8sRXC_GptvvICn1xI",
        "alg": "ECDH-ES"
      }
    ]
  },
  "encrypted_response_enc_values_supported": [
    "A128GCM",
    "A256GCM"
  ]
}

2026-11-10 00:08:28

(4) More

SUCCESS

SetAuthorizationEndpointRequestResponseTypeToVpToken

Added response_type parameter to request

dcql_query	{ "credentials": [ { "id": "my_credential", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:eudi:pid:1" ] }, "claims": [ { "path": [ "given_name" ] }, { "path": [ "family_name" ] } ] }, { "id": "nonexistent_credential", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:conformance-suite:nonexistent:credential:1" ] }, "claims": [ { "path": [ "nonexistent_claim" ] } ] } ], "credential_sets": [ { "options": [ [ "my_credential" ] ], "required": true }, { "options": [ [ "nonexistent_credential" ] ], "required": true } ] }
nonce	Xl71uzDapCL5qEw7mp2ip4-._~
client_metadata	{ "vp_formats_supported": { "dc+sd-jwt": { "sd-jwt_alg_values": [ "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES256K", "ES384", "ES512", "EdDSA", "Ed25519", "Ed448" ], "kb-jwt_alg_values": [ "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES256K", "ES384", "ES512", "EdDSA", "Ed25519", "Ed448" ] } }, "jwks": { "keys": [ { "kty": "EC", "use": "enc", "crv": "P-256", "kid": "e62a8bae-431c-42ce-b5b1-c982863c9dfa", "x": "gmmWhXQ4DPBxqyhhI_4RFGxTpzCN9bmOfS4q7hACILk", "y": "GxFAK7tWc8nSpkua7yYVVCJzMj8sRXC_GptvvICn1xI", "alg": "ECDH-ES" } ] }, "encrypted_response_enc_values_supported": [ "A128GCM", "A256GCM" ] }
response_type	vp_token

2026-11-10 00:08:28

(5) More

SetAuthorizationEndpointRequestResponseMode

Added response_mode parameter to request

dcql_query	{ "credentials": [ { "id": "my_credential", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:eudi:pid:1" ] }, "claims": [ { "path": [ "given_name" ] }, { "path": [ "family_name" ] } ] }, { "id": "nonexistent_credential", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:conformance-suite:nonexistent:credential:1" ] }, "claims": [ { "path": [ "nonexistent_claim" ] } ] } ], "credential_sets": [ { "options": [ [ "my_credential" ] ], "required": true }, { "options": [ [ "nonexistent_credential" ] ], "required": true } ] }
nonce	Xl71uzDapCL5qEw7mp2ip4-._~
client_metadata	{ "vp_formats_supported": { "dc+sd-jwt": { "sd-jwt_alg_values": [ "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES256K", "ES384", "ES512", "EdDSA", "Ed25519", "Ed448" ], "kb-jwt_alg_values": [ "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES256K", "ES384", "ES512", "EdDSA", "Ed25519", "Ed448" ] } }, "jwks": { "keys": [ { "kty": "EC", "use": "enc", "crv": "P-256", "kid": "e62a8bae-431c-42ce-b5b1-c982863c9dfa", "x": "gmmWhXQ4DPBxqyhhI_4RFGxTpzCN9bmOfS4q7hACILk", "y": "GxFAK7tWc8nSpkua7yYVVCJzMj8sRXC_GptvvICn1xI", "alg": "ECDH-ES" } ] }, "encrypted_response_enc_values_supported": [ "A128GCM", "A256GCM" ] }
response_type	vp_token
response_mode	dc_api.jwt

2026-11-10 00:08:28

(1) More

SUCCESS

CreateRandomBrowserApiSubmitUrl

Created random Browser API submission URL

browser_api_submit

{
  "path": "browser_api/2DHCXx8sPxPx2TsUceti",
  "fullUrl": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/browser_api/2DHCXx8sPxPx2TsUceti"
}

2026-11-10 00:08:28

(1) More

BuildVP1FinalBrowserDCAPIRequestUnsigned

Created Browser API request

object

{
  "digital": {
    "requests": [
      {
        "protocol": "openid4vp-v1-unsigned",
        "data": {
          "dcql_query": {
            "credentials": [
              {
                "id": "my_credential",
                "format": "dc+sd-jwt",
                "meta": {
                  "vct_values": [
                    "urn:eudi:pid:1"
                  ]
                },
                "claims": [
                  {
                    "path": [
                      "given_name"
                    ]
                  },
                  {
                    "path": [
                      "family_name"
                    ]
                  }
                ]
              },
              {
                "id": "nonexistent_credential",
                "format": "dc+sd-jwt",
                "meta": {
                  "vct_values": [
                    "urn:conformance-suite:nonexistent:credential:1"
                  ]
                },
                "claims": [
                  {
                    "path": [
                      "nonexistent_claim"
                    ]
                  }
                ]
              }
            ],
            "credential_sets": [
              {
                "options": [
                  [
                    "my_credential"
                  ]
                ],
                "required": true
              },
              {
                "options": [
                  [
                    "nonexistent_credential"
                  ]
                ],
                "required": true
              }
            ]
          },
          "nonce": "Xl71uzDapCL5qEw7mp2ip4-._~",
          "client_metadata": {
            "vp_formats_supported": {
              "dc+sd-jwt": {
                "sd-jwt_alg_values": [
                  "RS256",
                  "RS384",
                  "RS512",
                  "PS256",
                  "PS384",
                  "PS512",
                  "ES256",
                  "ES256K",
                  "ES384",
                  "ES512",
                  "EdDSA",
                  "Ed25519",
                  "Ed448"
                ],
                "kb-jwt_alg_values": [
                  "RS256",
                  "RS384",
                  "RS512",
                  "PS256",
                  "PS384",
                  "PS512",
                  "ES256",
                  "ES256K",
                  "ES384",
                  "ES512",
                  "EdDSA",
                  "Ed25519",
                  "Ed448"
                ]
              }
            },
            "jwks": {
              "keys": [
                {
                  "kty": "EC",
                  "use": "enc",
                  "crv": "P-256",
                  "kid": "e62a8bae-431c-42ce-b5b1-c982863c9dfa",
                  "x": "gmmWhXQ4DPBxqyhhI_4RFGxTpzCN9bmOfS4q7hACILk",
                  "y": "GxFAK7tWc8nSpkua7yYVVCJzMj8sRXC_GptvvICn1xI",
                  "alg": "ECDH-ES"
                }
              ]
            },
            "encrypted_response_enc_values_supported": [
              "A128GCM",
              "A256GCM"
            ]
          },
          "response_type": "vp_token",
          "response_mode": "dc_api.jwt"
        }
      }
    ]
  }
}

2026-11-10 00:08:28

(1) More

oid4vp-1final-wallet-negative-test-required-non-matching-credential

Calling browser API

request

{
  "digital": {
    "requests": [
      {
        "protocol": "openid4vp-v1-unsigned",
        "data": {
          "dcql_query": {
            "credentials": [
              {
                "id": "my_credential",
                "format": "dc+sd-jwt",
                "meta": {
                  "vct_values": [
                    "urn:eudi:pid:1"
                  ]
                },
                "claims": [
                  {
                    "path": [
                      "given_name"
                    ]
                  },
                  {
                    "path": [
                      "family_name"
                    ]
                  }
                ]
              },
              {
                "id": "nonexistent_credential",
                "format": "dc+sd-jwt",
                "meta": {
                  "vct_values": [
                    "urn:conformance-suite:nonexistent:credential:1"
                  ]
                },
                "claims": [
                  {
                    "path": [
                      "nonexistent_claim"
                    ]
                  }
                ]
              }
            ],
            "credential_sets": [
              {
                "options": [
                  [
                    "my_credential"
                  ]
                ],
                "required": true
              },
              {
                "options": [
                  [
                    "nonexistent_credential"
                  ]
                ],
                "required": true
              }
            ]
          },
          "nonce": "Xl71uzDapCL5qEw7mp2ip4-._~",
          "client_metadata": {
            "vp_formats_supported": {
              "dc+sd-jwt": {
                "sd-jwt_alg_values": [
                  "RS256",
                  "RS384",
                  "RS512",
                  "PS256",
                  "PS384",
                  "PS512",
                  "ES256",
                  "ES256K",
                  "ES384",
                  "ES512",
                  "EdDSA",
                  "Ed25519",
                  "Ed448"
                ],
                "kb-jwt_alg_values": [
                  "RS256",
                  "RS384",
                  "RS512",
                  "PS256",
                  "PS384",
                  "PS512",
                  "ES256",
                  "ES256K",
                  "ES384",
                  "ES512",
                  "EdDSA",
                  "Ed25519",
                  "Ed448"
                ]
              }
            },
            "jwks": {
              "keys": [
                {
                  "kty": "EC",
                  "use": "enc",
                  "crv": "P-256",
                  "kid": "e62a8bae-431c-42ce-b5b1-c982863c9dfa",
                  "x": "gmmWhXQ4DPBxqyhhI_4RFGxTpzCN9bmOfS4q7hACILk",
                  "y": "GxFAK7tWc8nSpkua7yYVVCJzMj8sRXC_GptvvICn1xI",
                  "alg": "ECDH-ES"
                }
              ]
            },
            "encrypted_response_enc_values_supported": [
              "A128GCM",
              "A256GCM"
            ]
          },
          "response_type": "vp_token",
          "response_mode": "dc_api.jwt"
        }
      }
    ]
  }
}

2026-11-10 00:08:28		oid4vp-1final-wallet-negative-test-required-non-matching-credential The wallet should be opened using the Browser API button, and should then parse the request and return the results via the API

2026-11-10 00:08:37

(12) More

INCOMING

oid4vp-1final-wallet-negative-test-required-non-matching-credential

Incoming HTTP request to /test/a/siros-wallet-vp-test/browser_api/2DHCXx8sPxPx2TsUceti

incoming_headers	{ "host": "localhost.emobix.co.uk", "x-forwarded-uri": "/test/a/siros-wallet-vp-test/browser_api/2DHCXx8sPxPx2TsUceti", "forwarded": "by\u003d172.18.0.8;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps", "connection": "close", "content-length": "129", "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36", "accept": "/", "accept-encoding": "gzip,deflate,br", "content-type": "application/json", "cookie": "JSESSIONID\u003dB427AC01342DD2552272545B7EC7BD3C" }
incoming_path	/test/a/siros-wallet-vp-test/browser_api/2DHCXx8sPxPx2TsUceti
incoming_body_form_params
incoming_method	POST
incoming_tls_version	TLSv1.3
incoming_tls_cert
incoming_query_string_params	{}
incoming_body	{"protocol":"openid4vp-v1-unsigned","data":{"error":"access_denied","error_description":"The wallet did not fulfil the request"}}
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_body_json_parse_error
incoming_tls_cipher	TLS_AES_256_GCM_SHA384
incoming_body_json	{ "protocol": "openid4vp-v1-unsigned", "data": { "error": "access_denied", "error_description": "The wallet did not fulfil the request" } }

2026-11-10 00:08:37	SUCCESS	EnsureIncomingTls12WithSecureCipherOrTls13 Found TLS 1.3 connection

2026-11-10 00:08:37	SUCCESS RFC9325-3.1.1	EnsureIncomingTls13 TLS 1.3 in use

2026-11-10 00:08:37

(4) More

OUTGOING

oid4vp-1final-wallet-negative-test-required-non-matching-credential

Response to HTTP request to test instance GyE4uT8dYLyHSH1

outgoing_status_code	204
outgoing_body
outgoing_headers	{ "headers": {} }
outgoing_path	browser_api/2DHCXx8sPxPx2TsUceti

Process Browser API result

2026-11-10 00:08:37

(2) More

SUCCESS

ExtractVP1FinalBrowserApiResponse

Browser API result captured and successfully parsed

parsed_data

{
  "error": "access_denied",
  "error_description": "The wallet did not fulfil the request"
}

api_result

{
  "protocol": "openid4vp-v1-unsigned",
  "data": {
    "error": "access_denied",
    "error_description": "The wallet did not fulfil the request"
  }
}

2026-11-10 00:08:37		oid4vp-1final-wallet-negative-test-required-non-matching-credential The response is not encrypted; OID4VP permits a wallet that is unable to generate an encrypted response to return an unencrypted error response.

2026-11-10 00:08:37

(2) More

SUCCESS

ExtractBrowserApiAuthorizationEndpointResponse

Extracted authorization response

error	access_denied
error_description	The wallet did not fulfil the request

2026-11-10 00:08:37

(2) More

SUCCESS

OID4VP-1FINAL-6.4.2 OID4VP-1FINAL-8.5

EnsureErrorResponseForUnsatisfiableDcqlQuery

Wallet returned an error response for the unsatisfiable DCQL query

error	access_denied
error_description	The wallet did not fulfil the request

2026-11-10 00:08:37	SUCCESS OID4VP-1FINAL-6.4.2	EnsureNoVpTokenInAuthorizationEndpointResponse Authorization endpoint response does not contain a vp_token, as expected.

2026-11-10 00:08:37	SUCCESS OID4VP-1FINAL-8.5	EnsureAuthorizationEndpointErrorIsAccessDenied Authorization endpoint error is 'access_denied'

2026-11-10 00:08:37

(1) More

FINISHED

oid4vp-1final-wallet-negative-test-required-non-matching-credential

Test has run to completion

testmodule_result

PASSED

2026-11-10 00:08:37

(2) More

TEST-RUNNER

Alias has now been claimed by another test

alias	siros-wallet-vp-test
new_test_id	yozDWdP9mw24sgQ

Test Summary

Test Results