Test Summary

Test Results

Expand All Collapse All
All times are UTC
2026-11-05 12:07:14 INFO
TEST-RUNNER
Test instance UxdrTwaYroivzh1 created
baseUrl 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test
variant 
{
  "credential_type": "custom",
  "credential_format": "iso_mdl",
  "request_method": "request_uri_signed",
  "vp_profile": "plain_vp",
  "client_id_prefix": "x509_san_dns",
  "response_mode": "direct_post"
}
alias 
siros-wallet-vp-mdoc-test
description 
OID4VP wallet conformance test for SIROS wallet (iso_mdl format)
planId 
OzBNWDaDeiAn7
config 
{
  "alias": "siros-wallet-vp-mdoc-test",
  "description": "OID4VP wallet conformance test for SIROS wallet (iso_mdl format)",
  "server": {
    "authorization_endpoint": "openid4vp://"
  },
  "client": {
    "client_id": "conformance.example.com",
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "crv": "P-256",
          "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
          "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
          "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
          "kid": "vp-verifier-key-1",
          "use": "sig",
          "alg": "ES256",
          "x5c": [
            "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"
          ]
        }
      ]
    },
    "dcql": {
      "credentials": [
        {
          "id": "org_iso_18013_5_1_mDL",
          "format": "mso_mdoc",
          "meta": {
            "doctype_value": "org.iso.18013.5.1.mDL"
          },
          "claims": [
            {
              "path": [
                "org.iso.18013.5.1",
                "given_name"
              ]
            },
            {
              "path": [
                "org.iso.18013.5.1",
                "family_name"
              ]
            }
          ]
        }
      ]
    }
  }
}
baseMtlsUrl 
https://localhost:8444/test-mtls/a/siros-wallet-vp-mdoc-test
testName 
oid4vp-1final-wallet-negative-test-required-non-matching-credential
2026-11-05 12:07:14
CreateDirectPostResponseUri
Created response URI
response_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri
2026-11-05 12:07:14
SetClientIdToResponseUriHostnameIfUnset
client_id is already set, not setting it to our hostname
client_id 
conformance.example.com
2026-11-05 12:07:14 SUCCESS
GetStaticServerConfiguration
Found a static server object
authorization_endpoint 
openid4vp://
2026-11-05 12:07:14 SUCCESS
CheckAuthorizationEndpointIsValidUri
authorization_endpoint has a valid URI scheme
authorization_endpoint 
openid4vp://
2026-11-05 12:07:14 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id 
conformance.example.com
jwks 
{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "MIIBvjCCAWOgAwIBAgIUfw4in2xbbaO4BRVzCMJ9jcx+MYUwCgYIKoZIzj0EAwIwIjEgMB4GA1UEAwwXY29uZm9ybWFuY2UuZXhhbXBsZS5jb20wHhcNMjYwNTE1MDc1MzQ1WhcNMjcwNTE1MDc1MzQ1WjAiMSAwHgYDVQQDDBdjb25mb3JtYW5jZS5leGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBz7RGBBEDRnDhhrUF55vFW268lmDhe3ZZkynA8CMZOtKnv02968XSiEmNSoGPaHX3LXl+boQztsK0DB46VhE6+jdzB1MB0GA1UdDgQWBBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAfBgNVHSMEGDAWgBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAPBgNVHRMBAf8EBTADAQH/MCIGA1UdEQQbMBmCF2NvbmZvcm1hbmNlLmV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQC4lhxwiQy3+GPtzdQW9IlDSrQoEnncom6YsKZ3izHuIgIhAKZIjNYWTG0xIpFrS4DVkvo1qiV9kNf1Qvp8StOW6pEr"
      ]
    }
  ]
}
dcql 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    }
  ]
}
2026-11-05 12:07:14 SUCCESS
OID4VPSetClientIdToIncludeClientIdScheme
Set client id to include the client id scheme
new_client_id 
x509_san_dns:conformance.example.com
2026-11-05 12:07:14 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2026-11-05 12:07:14 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks 
{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "MIIBvjCCAWOgAwIBAgIUfw4in2xbbaO4BRVzCMJ9jcx+MYUwCgYIKoZIzj0EAwIwIjEgMB4GA1UEAwwXY29uZm9ybWFuY2UuZXhhbXBsZS5jb20wHhcNMjYwNTE1MDc1MzQ1WhcNMjcwNTE1MDc1MzQ1WjAiMSAwHgYDVQQDDBdjb25mb3JtYW5jZS5leGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBz7RGBBEDRnDhhrUF55vFW268lmDhe3ZZkynA8CMZOtKnv02968XSiEmNSoGPaHX3LXl+boQztsK0DB46VhE6+jdzB1MB0GA1UdDgQWBBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAfBgNVHSMEGDAWgBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAPBgNVHRMBAf8EBTADAQH/MCIGA1UdEQQbMBmCF2NvbmZvcm1hbmNlLmV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQC4lhxwiQy3+GPtzdQW9IlDSrQoEnncom6YsKZ3izHuIgIhAKZIjNYWTG0xIpFrS4DVkvo1qiV9kNf1Qvp8StOW6pEr"
      ]
    }
  ]
}
client_public_jwks 
{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "vp-verifier-key-1",
      "x5c": [
        "MIIBvjCCAWOgAwIBAgIUfw4in2xbbaO4BRVzCMJ9jcx+MYUwCgYIKoZIzj0EAwIwIjEgMB4GA1UEAwwXY29uZm9ybWFuY2UuZXhhbXBsZS5jb20wHhcNMjYwNTE1MDc1MzQ1WhcNMjcwNTE1MDc1MzQ1WjAiMSAwHgYDVQQDDBdjb25mb3JtYW5jZS5leGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBz7RGBBEDRnDhhrUF55vFW268lmDhe3ZZkynA8CMZOtKnv02968XSiEmNSoGPaHX3LXl+boQztsK0DB46VhE6+jdzB1MB0GA1UdDgQWBBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAfBgNVHSMEGDAWgBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAPBgNVHRMBAf8EBTADAQH/MCIGA1UdEQQbMBmCF2NvbmZvcm1hbmNlLmV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQC4lhxwiQy3+GPtzdQW9IlDSrQoEnncom6YsKZ3izHuIgIhAKZIjNYWTG0xIpFrS4DVkvo1qiV9kNf1Qvp8StOW6pEr"
      ],
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "alg": "ES256"
    }
  ]
}
2026-11-05 12:07:14 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see 
https://bitbucket.org/openid/connect/issues/1127
2026-11-05 12:07:14 SUCCESS
CheckIfClientIdInX509CertSanDns
x509_san_dns client_id is present in the x5c certificate SAN in the client_jwks x5c parameter
san 
[[2, conformance.example.com]]
client_jwks 
{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "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"
      ]
    }
  ]
}
cert 
[
[
  Version: V3
  Subject: CN=conformance.example.com
  Signature Algorithm: SHA256withECDSA, OID = 1.2.840.10045.4.3.2

  Key:  Sun EC public key, 256 bits
  public x coord: 13108710287349260330328350076677132814851473605070147512119001812479683695533
  public y coord: 19216151783258683751959855919806513226213387050584598552418263195245676139439
  parameters: secp256r1 [NIST P-256,X9.62 prime256v1] (1.2.840.10045.3.1.7)
  Validity: [From: Fri May 15 07:53:45 UTC 2026,
               To: Sat May 15 07:53:45 UTC 2027]
  Issuer: CN=conformance.example.com
  SerialNumber: 7f:0e:22:9f:6c:5b:6d:a3:b8:05:15:73:08:c2:7d:8d:cc:7e:31:85

Certificate Extensions: 4
[1]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 7F CC 0E E1 DF E8 A4 28   1A 1A DE 3C 8C 89 25 FB  .......(...<..%.
0010: B0 57 64 CB                                        .Wd.
]
]

[2]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen: no limit
]

[3]: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
  DNSName: conformance.example.com
]

[4]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 7F CC 0E E1 DF E8 A4 28   1A 1A DE 3C 8C 89 25 FB  .......(...<..%.
0010: B0 57 64 CB                                        .Wd.
]
]

]
  Algorithm: [SHA256withECDSA]
  Signature:
0000: 30 46 02 21 00 B8 96 1C   70 89 0C B7 F8 63 ED CD  0F.!....p....c..
0010: D4 16 F4 89 43 4A B4 28   12 79 DC A2 6E 98 B0 A6  ....CJ.(.y..n...
0020: 77 8B 31 EE 22 02 21 00   A6 48 8C D6 16 4C 6D 31  w.1.".!..H...Lm1
0030: 22 91 6B 4B 80 D5 92 FA   35 AA 25 7D 90 D7 F5 42  ".kK....5.%....B
0040: FA 7C 4A D3 96 EA 91 2B                            ..J....+

]
client_id 
conformance.example.com
dns_names_from_cert 
[
  "conformance.example.com"
]
2026-11-05 12:07:14
RegisterRical
No RICAL configured, skipping RICAL-based verifier trust checks
2026-11-05 12:07:14 INFO
CallRicalEndpoint
Skipped evaluation due to missing required string: rical_url
expected 
rical_url
2026-11-05 12:07:14 INFO
ParseRical
Skipped evaluation due to missing required object: rical
mapped
expected 
rical
2026-11-05 12:07:14 INFO
DumpRicalCborDiagnostics
Skipped evaluation due to missing required object: rical
mapped
expected 
rical
2026-11-05 12:07:14 INFO
ValidateRicalSignature
Skipped evaluation due to missing required object: rical
mapped
expected 
rical
2026-11-05 12:07:14 INFO
ValidateRicalSignerCertificate
Skipped evaluation due to missing required object: rical
mapped
expected 
rical
2026-11-05 12:07:14 INFO
ValidateRicalStructure
Skipped evaluation due to missing required object: rical
mapped
expected 
rical
2026-11-05 12:07:14 INFO
ValidateConfiguredClientCertificatesAgainstRical
Skipped evaluation due to missing required object: rical
mapped
expected 
rical
2026-11-05 12:07:14
RegisterCredentialTrustAnchor
No credential trust anchor configured, skipping registration
2026-11-05 12:07:14
RegisterStatusListTrustAnchor
No status list trust anchor configured, skipping registration
2026-11-05 12:07:14
RegisterVical
No VICAL configured, skipping VICAL-based mdoc issuer trust checks
2026-11-05 12:07:14 INFO
CallVicalEndpoint
Skipped evaluation due to missing required string: vical_url
expected 
vical_url
2026-11-05 12:07:14 INFO
ParseVical
Skipped evaluation due to missing required object: vical
mapped
expected 
vical
2026-11-05 12:07:14 INFO
DumpVicalCborDiagnostics
Skipped evaluation due to missing required object: vical
mapped
expected 
vical
2026-11-05 12:07:14 INFO
ValidateVicalSignature
Skipped evaluation due to missing required object: vical
mapped
expected 
vical
2026-11-05 12:07:14 INFO
ValidateVicalSignerCertificateProfile
Skipped evaluation due to missing required object: vical
mapped
expected 
vical
2026-11-05 12:07:14 INFO
ValidateVicalStructure
Skipped evaluation due to missing required object: vical
mapped
expected 
vical
2026-11-05 12:07:14 SUCCESS
CreateRedirectUri
Created redirect URI
redirect_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/callback
2026-11-05 12:07:14 SUCCESS
CheckDiscEndpointRequestUriParameterSupported
request_uri_parameter_supported has correct value
request_uri_parameter_supported
2026-11-05 12:07:14
CreateRandomRequestUriWithoutFragment
Created random URL for request_uri
request_uri 
{
  "path": "requesturi/JiZLitIgJ91YvKxVs3Ju5WCjrk0HQjJtmtXoXcObwidaioYh3aQAseTGZUVpNVfc",
  "fullUrl": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/requesturi/JiZLitIgJ91YvKxVs3Ju5WCjrk0HQjJtmtXoXcObwidaioYh3aQAseTGZUVpNVfc"
}
2026-11-05 12:07:14
oid4vp-1final-wallet-negative-test-required-non-matching-credential
Setup Done
Make request to wallet
2026-11-05 12:07:14 SUCCESS
CreateEmptyAuthorizationEndpointRequest
Created empty authorization endpoint request
2026-11-05 12:07:14 SUCCESS
AddClientIdToAuthorizationEndpointRequest
Added client_id of 'x509_san_dns:conformance.example.com' to authorization endpoint request
client_id 
x509_san_dns:conformance.example.com
2026-11-05 12:07:14
CreateRandomStateValue
Created state value
state 
BFtcXqBNpz
requested_state_length 
10
2026-11-05 12:07:14 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id 
x509_san_dns:conformance.example.com
state 
BFtcXqBNpz
2026-11-05 12:07:14 SUCCESS
AddResponseUriToAuthorizationEndpointRequest
Added response_uri parameter to request
client_id 
x509_san_dns:conformance.example.com
state 
BFtcXqBNpz
response_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri
2026-11-05 12:07:14 INFO
LoadBuiltInDcqlQuery
Skipped evaluation due to missing required string: dcql_builtin_resource
expected 
dcql_builtin_resource
2026-11-05 12:07:14 SUCCESS
ExtractDCQLQueryFromClientConfiguration
Extracted dcql from client configuration
dcql 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    }
  ]
}
2026-11-05 12:07:14
AddRequiredNonMatchingCredentialToDcqlQuery
Added non-matching required credential and credential_sets to DCQL query
dcql_query 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.conformance-suite.nonexistent.credential.1"
      },
      "claims": [
        {
          "path": [
            "org.conformance-suite.nonexistent.namespace.1",
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "org_iso_18013_5_1_mDL"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}
fake_credential_id 
nonexistent_credential
original_credential_id 
org_iso_18013_5_1_mDL
2026-11-05 12:07:14 SUCCESS
ValidateDCQLQuery
DCQL query input is valid
input 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.conformance-suite.nonexistent.credential.1"
      },
      "claims": [
        {
          "path": [
            "org.conformance-suite.nonexistent.namespace.1",
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "org_iso_18013_5_1_mDL"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}
schema_link 
/json-schemas/oid4vp/dcql_request.json
2026-11-05 12:07:14 SUCCESS
CheckDCQLQueryCredentialFormatMatchesTestConfiguration
DCQL query credential format matches test configuration
expected_format 
mso_mdoc
credential_count 
2
2026-11-05 12:07:14 SUCCESS
CheckForUnexpectedParametersInDcqlQuery
No unknown properties were found in the DCQL query
input 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.conformance-suite.nonexistent.credential.1"
      },
      "claims": [
        {
          "path": [
            "org.conformance-suite.nonexistent.namespace.1",
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "org_iso_18013_5_1_mDL"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}
schema_link 
/json-schemas/oid4vp/dcql_request.json
2026-11-05 12:07:14 SUCCESS
CheckForNonSelectivelyDisclosableClaimsInDcqlQuery
DCQL query does not request any SD-JWT VC claims that cannot be selectively disclosed
2026-11-05 12:07:14 SUCCESS
CheckForUnreferencedClaimsInDcqlQuery
The DCQL query does not contain claims entries unreferenced by claim_sets
2026-11-05 12:07:14 SUCCESS
AddDcqlToAuthorizationEndpointRequest
Added dcql_query parameter to request
client_id 
x509_san_dns:conformance.example.com
state 
BFtcXqBNpz
response_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri
dcql_query 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.conformance-suite.nonexistent.credential.1"
      },
      "claims": [
        {
          "path": [
            "org.conformance-suite.nonexistent.namespace.1",
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "org_iso_18013_5_1_mDL"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}
2026-11-05 12:07:14 INFO
ExtractVerifierInfoFromClientConfiguration
Skipped evaluation due to missing required element: client verifier_info
path 
verifier_info
mapped
object 
client
2026-11-05 12:07:14 INFO
ValidateVerifierInfo
Skipped evaluation due to missing required element: client verifier_info
path 
verifier_info
mapped
object 
client
2026-11-05 12:07:14 INFO
CheckForUnexpectedParametersInVerifierInfo
Skipped evaluation due to missing required element: client verifier_info
path 
verifier_info
mapped
object 
client
2026-11-05 12:07:14 INFO
AddVerifierInfoToAuthorizationEndpointRequest
Skipped evaluation due to missing required element: client verifier_info
path 
verifier_info
mapped
object 
client
2026-11-05 12:07:14
CreateRandomNonceValue
Created nonce value
requested_nonce_length 
26
nonce 
e7zfeXkzdg50SqBaX9OyrW-._~
2026-11-05 12:07:14 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id 
x509_san_dns:conformance.example.com
state 
BFtcXqBNpz
response_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri
dcql_query 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.conformance-suite.nonexistent.credential.1"
      },
      "claims": [
        {
          "path": [
            "org.conformance-suite.nonexistent.namespace.1",
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "org_iso_18013_5_1_mDL"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}
nonce 
e7zfeXkzdg50SqBaX9OyrW-._~
2026-11-05 12:07:14
AddVP1FinalIsoMdocClientMetadataToAuthorizationRequest
Added client_metadata to authorization endpoint request
client_metadata 
{
  "vp_formats_supported": {
    "mso_mdoc": {
      "issuerauth_alg_values": [
        -7
      ]
    }
  }
}
2026-11-05 12:07:14 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToVpToken
Added response_type parameter to request
client_id 
x509_san_dns:conformance.example.com
state 
BFtcXqBNpz
response_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri
dcql_query 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.conformance-suite.nonexistent.credential.1"
      },
      "claims": [
        {
          "path": [
            "org.conformance-suite.nonexistent.namespace.1",
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "org_iso_18013_5_1_mDL"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}
nonce 
e7zfeXkzdg50SqBaX9OyrW-._~
client_metadata 
{
  "vp_formats_supported": {
    "mso_mdoc": {
      "issuerauth_alg_values": [
        -7
      ]
    }
  }
}
response_type 
vp_token
2026-11-05 12:07:14
SetAuthorizationEndpointRequestResponseMode
Added response_mode parameter to request
client_id 
x509_san_dns:conformance.example.com
state 
BFtcXqBNpz
response_uri 
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri
dcql_query 
{
  "credentials": [
    {
      "id": "org_iso_18013_5_1_mDL",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.iso.18013.5.1.mDL"
      },
      "claims": [
        {
          "path": [
            "org.iso.18013.5.1",
            "given_name"
          ]
        },
        {
          "path": [
            "org.iso.18013.5.1",
            "family_name"
          ]
        }
      ]
    },
    {
      "id": "nonexistent_credential",
      "format": "mso_mdoc",
      "meta": {
        "doctype_value": "org.conformance-suite.nonexistent.credential.1"
      },
      "claims": [
        {
          "path": [
            "org.conformance-suite.nonexistent.namespace.1",
            "nonexistent_claim"
          ]
        }
      ]
    }
  ],
  "credential_sets": [
    {
      "options": [
        [
          "org_iso_18013_5_1_mDL"
        ]
      ],
      "required": true
    },
    {
      "options": [
        [
          "nonexistent_credential"
        ]
      ],
      "required": true
    }
  ]
}
nonce 
e7zfeXkzdg50SqBaX9OyrW-._~
client_metadata 
{
  "vp_formats_supported": {
    "mso_mdoc": {
      "issuerauth_alg_values": [
        -7
      ]
    }
  }
}
response_type 
vp_token
response_mode 
direct_post
2026-11-05 12:07:14 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims 
{
  "client_id": "x509_san_dns:conformance.example.com",
  "state": "BFtcXqBNpz",
  "response_uri": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri",
  "dcql_query": {
    "credentials": [
      {
        "id": "org_iso_18013_5_1_mDL",
        "format": "mso_mdoc",
        "meta": {
          "doctype_value": "org.iso.18013.5.1.mDL"
        },
        "claims": [
          {
            "path": [
              "org.iso.18013.5.1",
              "given_name"
            ]
          },
          {
            "path": [
              "org.iso.18013.5.1",
              "family_name"
            ]
          }
        ]
      },
      {
        "id": "nonexistent_credential",
        "format": "mso_mdoc",
        "meta": {
          "doctype_value": "org.conformance-suite.nonexistent.credential.1"
        },
        "claims": [
          {
            "path": [
              "org.conformance-suite.nonexistent.namespace.1",
              "nonexistent_claim"
            ]
          }
        ]
      }
    ],
    "credential_sets": [
      {
        "options": [
          [
            "org_iso_18013_5_1_mDL"
          ]
        ],
        "required": true
      },
      {
        "options": [
          [
            "nonexistent_credential"
          ]
        ],
        "required": true
      }
    ]
  },
  "nonce": "e7zfeXkzdg50SqBaX9OyrW-._~",
  "client_metadata": {
    "vp_formats_supported": {
      "mso_mdoc": {
        "issuerauth_alg_values": [
          -7
        ]
      }
    }
  },
  "response_type": "vp_token",
  "response_mode": "direct_post"
}
2026-11-05 12:07:14
AddSelfIssuedMeV2AudToRequestObject
Added SIOPv2 aud to request object claims
aud 
https://self-issued.me/v2
2026-11-05 12:07:14 SUCCESS
BuildRequestObjectByReferenceRedirectToAuthorizationEndpointWithoutDuplicates
Sending to authorization endpoint
redirect_to_authorization_endpoint 
openid4vp://?client_id=x509_san_dns:conformance.example.com&request_uri=https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/requesturi/JiZLitIgJ91YvKxVs3Ju5WCjrk0HQjJtmtXoXcObwidaioYh3aQAseTGZUVpNVfc
2026-11-05 12:07:14 REDIRECT
oid4vp-1final-wallet-negative-test-required-non-matching-credential
Redirecting to authorization endpoint
method 
GET
redirect_to 
openid4vp://?client_id=x509_san_dns:conformance.example.com&request_uri=https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/requesturi/JiZLitIgJ91YvKxVs3Ju5WCjrk0HQjJtmtXoXcObwidaioYh3aQAseTGZUVpNVfc
2026-11-05 12:07:14
oid4vp-1final-wallet-negative-test-required-non-matching-credential
The wallet should be opened via the QR code / proceed with test button, and should then fetch the request_uri
2026-11-05 12:07:15 INCOMING
oid4vp-1final-wallet-negative-test-required-non-matching-credential
Incoming HTTP request to /test/a/siros-wallet-vp-mdoc-test/requesturi/JiZLitIgJ91YvKxVs3Ju5WCjrk0HQjJtmtXoXcObwidaioYh3aQAseTGZUVpNVfc
incoming_headers 
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vp-mdoc-test/requesturi/JiZLitIgJ91YvKxVs3Ju5WCjrk0HQjJtmtXoXcObwidaioYh3aQAseTGZUVpNVfc",
  "forwarded": "by\u003d172.18.0.6;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/oauth-authz-req+jwt, application/json",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "accept-language": "en-US",
  "sec-ch-ua-mobile": "?0",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path 
/test/a/siros-wallet-vp-mdoc-test/requesturi/JiZLitIgJ91YvKxVs3Ju5WCjrk0HQjJtmtXoXcObwidaioYh3aQAseTGZUVpNVfc
incoming_body_form_params
incoming_method 
GET
incoming_tls_version 
TLSv1.3
incoming_tls_cert
incoming_query_string_params 
{}
incoming_body
incoming_tls_chain 
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher 
TLS_AES_256_GCM_SHA384
incoming_body_json
2026-11-05 12:07:15 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
Found TLS 1.3 connection
2026-11-05 12:07:15 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
2026-11-05 12:07:15 SUCCESS
EnsureIncomingRequestMethodIsGet
Client correctly used http GET method
2026-11-05 12:07:15 SUCCESS
SignRequestObjectIncludeX5cHeader
Signed the request object
claims 
{
  "response_uri": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-mdoc-test/responseuri",
  "aud": "https://self-issued.me/v2",
  "response_type": "vp_token",
  "state": "BFtcXqBNpz",
  "dcql_query": {
    "credentials": [
      {
        "id": "org_iso_18013_5_1_mDL",
        "format": "mso_mdoc",
        "meta": {
          "doctype_value": "org.iso.18013.5.1.mDL"
        },
        "claims": [
          {
            "path": [
              "org.iso.18013.5.1",
              "given_name"
            ]
          },
          {
            "path": [
              "org.iso.18013.5.1",
              "family_name"
            ]
          }
        ]
      },
      {
        "id": "nonexistent_credential",
        "format": "mso_mdoc",
        "meta": {
          "doctype_value": "org.conformance-suite.nonexistent.credential.1"
        },
        "claims": [
          {
            "path": [
              "org.conformance-suite.nonexistent.namespace.1",
              "nonexistent_claim"
            ]
          }
        ]
      }
    ],
    "credential_sets": [
      {
        "options": [
          [
            "org_iso_18013_5_1_mDL"
          ]
        ],
        "required": true
      },
      {
        "options": [
          [
            "nonexistent_credential"
          ]
        ],
        "required": true
      }
    ]
  },
  "nonce": "e7zfeXkzdg50SqBaX9OyrW-._~",
  "client_id": "x509_san_dns:conformance.example.com",
  "client_metadata": {
    "vp_formats_supported": {
      "mso_mdoc": {
        "issuerauth_alg_values": [
          -7
        ]
      }
    }
  },
  "response_mode": "direct_post"
}
header 
{
  "x5c": [
    "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"
  ],
  "kid": "vp-verifier-key-1",
  "typ": "oauth-authz-req+jwt",
  "alg": "ES256"
}
request_object
eyJ4NWMiOlsiTUlJQnZqQ0NBV09nQXdJQkFnSVVmdzRpbjJ4YmJhTzRCUlZ6Q01KOWpjeCtNWVV3Q2dZSUtvWkl6ajBFQXdJd0lqRWdNQjRHQTFVRUF3d1hZMjl1Wm05eWJXRnVZMlV1WlhoaGJYQnNaUzVqYjIwd0hoY05Nall3TlRFMU1EYzFNelExV2hjTk1qY3dOVEUxTURjMU16UTFXakFpTVNBd0hnWURWUVFEREJkamIyNW1iM0p0WVc1alpTNWxlR0Z0Y0d4bExtTnZiVEJaTUJNR0J5cUdTTTQ5QWdFR0NDcUdTTTQ5QXdFSEEwSUFCQno3UkdCQkVEUm5EaGhyVUY1NXZGVzI2OGxtRGhlM1paa3luQThDTVpPdEtudjAyOTY4WFNpRW1OU29HUGFIWDNMWGwrYm9RenRzSzBEQjQ2VmhFNitqZHpCMU1CMEdBMVVkRGdRV0JCUi96QTdoMytpa0tCb2EzanlNaVNYN3NGZGt5ekFmQmdOVkhTTUVHREFXZ0JSL3pBN2gzK2lrS0JvYTNqeU1pU1g3c0Zka3l6QVBCZ05WSFJNQkFmOEVCVEFEQVFIL01DSUdBMVVkRVFRYk1CbUNGMk52Ym1admNtMWhibU5sTG1WNFlXMXdiR1V1WTI5dE1Bb0dDQ3FHU000OUJBTUNBMGtBTUVZQ0lRQzRsaHh3aVF5MytHUHR6ZFFXOUlsRFNyUW9Fbm5jb202WXNLWjNpekh1SWdJaEFLWklqTllXVEcweElwRnJTNERWa3ZvMXFpVjlrTmYxUXZwOFN0T1c2cEVyIl0sImtpZCI6InZwLXZlcmlmaWVyLWtleS0xIiwidHlwIjoib2F1dGgtYXV0aHotcmVxK2p3dCIsImFsZyI6IkVTMjU2In0.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.4y_b3uaPGbDiaxbE0vSO_RX1grzKxWAJfDSlPZM4M_GKrQ6ihE_zdq0BwNFUPxU3AXvfDtQTxE0kFhaupDpd9A
key 
{
  "kty": "EC",
  "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
  "use": "sig",
  "crv": "P-256",
  "kid": "vp-verifier-key-1",
  "x5c": [
    "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"
  ],
  "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
  "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
  "alg": "ES256"
}
2026-11-05 12:07:15
oid4vp-1final-wallet-negative-test-required-non-matching-credential
Wallet has retrieved request_uri - the DCQL query contains a required credential the wallet cannot satisfy, so the wallet should return an 'access_denied' error response or display an error.
2026-11-05 12:07:15 REVIEW
ExpectUnsatisfiableDcqlQueryErrorPage
The DCQL query contains a required Credential Query the wallet cannot satisfy, so the wallet must not return a vp_token. If the wallet does not return an 'access_denied' error response, it should display an error.
image_no_longer_required 
true
2026-11-05 12:07:15
oid4vp-1final-wallet-negative-test-required-non-matching-credential
Returned request object to wallet - waiting for it to call the response_uri
2026-11-05 12:07:15 OUTGOING
oid4vp-1final-wallet-negative-test-required-non-matching-credential
Response to HTTP request to test instance UxdrTwaYroivzh1
outgoing_status_code 
200
outgoing_body
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.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.4y_b3uaPGbDiaxbE0vSO_RX1grzKxWAJfDSlPZM4M_GKrQ6ihE_zdq0BwNFUPxU3AXvfDtQTxE0kFhaupDpd9A
outgoing_headers 
{
  "headers": {
    "Content-Type": [
      "application/oauth-authz-req+jwt"
    ]
  }
}
outgoing_path 
requesturi/JiZLitIgJ91YvKxVs3Ju5WCjrk0HQjJtmtXoXcObwidaioYh3aQAseTGZUVpNVfc
2026-11-05 12:07:15 INCOMING
oid4vp-1final-wallet-negative-test-required-non-matching-credential
Incoming HTTP request to /test/a/siros-wallet-vp-mdoc-test/responseuri
incoming_headers 
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vp-mdoc-test/responseuri",
  "forwarded": "by\u003d172.18.0.6;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "content-length": "107",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "content-type": "application/x-www-form-urlencoded",
  "sec-ch-ua-mobile": "?0",
  "accept-language": "en-US",
  "accept": "*/*",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path 
/test/a/siros-wallet-vp-mdoc-test/responseuri
incoming_body_form_params 
{
  "error": "access_denied",
  "error_description": "No credential satisfies the required query",
  "state": "BFtcXqBNpz"
}
incoming_method 
POST
incoming_tls_version 
TLSv1.3
incoming_tls_cert
incoming_query_string_params 
{}
incoming_body 
error=access_denied&error_description=No+credential+satisfies+the+required+query&state=BFtcXqBNpz
incoming_tls_chain 
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher 
TLS_AES_256_GCM_SHA384
incoming_body_json
2026-11-05 12:07:15 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
Found TLS 1.3 connection
2026-11-05 12:07:15 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
Direct post endpoint
2026-11-05 12:07:15 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2026-11-05 12:07:15 SUCCESS
EnsureIncomingRequestContentTypeIsFormUrlEncoded
Incoming content-type header has the expected value
content_type 
application/x-www-form-urlencoded
expected 
application/x-www-form-urlencoded
2026-11-05 12:07:15 SUCCESS
EnsureIncomingUrlQueryIsEmpty
URL query from server was correctly empty, no query parameters detected
2026-11-05 12:07:15 SUCCESS
ExtractAuthorizationEndpointResponseFromFormBody
Extracted the authorization response
error 
access_denied
error_description 
No credential satisfies the required query
state 
BFtcXqBNpz
2026-11-05 12:07:15 SUCCESS
ExtractAuthorizationEndpointResponse
Extracted authorization response
error 
access_denied
error_description 
No credential satisfies the required query
state 
BFtcXqBNpz
2026-11-05 12:07:15 SUCCESS
EnsureErrorResponseForUnsatisfiableDcqlQuery
Wallet returned an error response for the unsatisfiable DCQL query
error 
access_denied
error_description 
No credential satisfies the required query
state 
BFtcXqBNpz
2026-11-05 12:07:15 SUCCESS
EnsureNoVpTokenInAuthorizationEndpointResponse
Authorization endpoint response does not contain a vp_token, as expected.
2026-11-05 12:07:15 SUCCESS
EnsureAuthorizationEndpointErrorIsAccessDenied
Authorization endpoint error is 'access_denied'
2026-11-05 12:07:15 SUCCESS
CreateEmptyDirectPostResponse
Created empty direct_post_response
2026-11-05 12:07:15 OUTGOING
oid4vp-1final-wallet-negative-test-required-non-matching-credential
Response to HTTP request to test instance UxdrTwaYroivzh1
outgoing_status_code 
200
outgoing_body 
{}
outgoing_headers 
{
  "headers": {
    "Content-Type": [
      "application/json"
    ]
  }
}
outgoing_path 
responseuri
2026-11-05 12:07:15 FINISHED
oid4vp-1final-wallet-negative-test-required-non-matching-credential
Test has run to completion
testmodule_result 
PASSED
2026-11-05 12:07:31
TEST-RUNNER
Alias has now been claimed by another test
alias 
siros-wallet-vp-mdoc-test
new_test_id 
6b3zLsKefkkxTqB
Test Results