Test Summary

Test Results

Expand All Collapse All
All times are UTC
2026-11-04 16:23:38 INFO
TEST-RUNNER
Test instance TMKcgGwacITTLrX created
baseUrl
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test
variant
{
  "credential_type": "custom",
  "credential_format": "sd_jwt_vc",
  "request_method": "request_uri_signed",
  "vp_profile": "plain_vp",
  "client_id_prefix": "x509_san_dns",
  "response_mode": "direct_post"
}
alias
siros-wallet-vp-test
description
OID4VP wallet conformance test for SIROS wallet
planId
S89PzOyNtX2hW
config
{
  "alias": "siros-wallet-vp-test",
  "description": "OID4VP wallet conformance test for SIROS wallet",
  "server": {
    "authorization_endpoint": "openid4vp://"
  },
  "client": {
    "client_id": "conformance.example.com",
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "crv": "P-256",
          "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
          "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
          "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
          "kid": "vp-verifier-key-1",
          "use": "sig",
          "alg": "ES256",
          "x5c": [
            "MIIBvjCCAWOgAwIBAgIUfw4in2xbbaO4BRVzCMJ9jcx+MYUwCgYIKoZIzj0EAwIwIjEgMB4GA1UEAwwXY29uZm9ybWFuY2UuZXhhbXBsZS5jb20wHhcNMjYwNTE1MDc1MzQ1WhcNMjcwNTE1MDc1MzQ1WjAiMSAwHgYDVQQDDBdjb25mb3JtYW5jZS5leGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBz7RGBBEDRnDhhrUF55vFW268lmDhe3ZZkynA8CMZOtKnv02968XSiEmNSoGPaHX3LXl+boQztsK0DB46VhE6+jdzB1MB0GA1UdDgQWBBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAfBgNVHSMEGDAWgBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAPBgNVHRMBAf8EBTADAQH/MCIGA1UdEQQbMBmCF2NvbmZvcm1hbmNlLmV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQC4lhxwiQy3+GPtzdQW9IlDSrQoEnncom6YsKZ3izHuIgIhAKZIjNYWTG0xIpFrS4DVkvo1qiV9kNf1Qvp8StOW6pEr"
          ]
        }
      ]
    },
    "dcql": {
      "credentials": [
        {
          "id": "eudi_pid",
          "format": "dc+sd-jwt",
          "meta": {
            "vct_values": [
              "urn:eudi:pid:1"
            ]
          },
          "claims": [
            {
              "path": [
                "given_name"
              ]
            },
            {
              "path": [
                "family_name"
              ]
            }
          ]
        }
      ]
    }
  }
}
baseMtlsUrl
https://localhost:8444/test-mtls/a/siros-wallet-vp-test
testName
oid4vp-1final-wallet-fewer-claims-than-available
2026-11-04 16:23:38
CreateDirectPostResponseUri
Created response URI
response_uri
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/responseuri
2026-11-04 16:23:38
SetClientIdToResponseUriHostnameIfUnset
client_id is already set, not setting it to our hostname
client_id
conformance.example.com
2026-11-04 16:23:38 SUCCESS
GetStaticServerConfiguration
Found a static server object
authorization_endpoint
openid4vp://
2026-11-04 16:23:38 SUCCESS
CheckAuthorizationEndpointIsValidUri
authorization_endpoint has a valid URI scheme
authorization_endpoint
openid4vp://
2026-11-04 16:23:38 SUCCESS
GetStaticClientConfiguration
Found a static client object
client_id
conformance.example.com
jwks
{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "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"
      ]
    }
  ]
}
dcql
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    }
  ]
}
2026-11-04 16:23:38 SUCCESS
OID4VPSetClientIdToIncludeClientIdScheme
Set client id to include the client id scheme
new_client_id
x509_san_dns:conformance.example.com
2026-11-04 16:23:38 SUCCESS
ValidateClientJWKsPrivatePart
Valid client JWKs: keys are valid JSON, contain the required fields, the private/public exponents match and are correctly encoded using unpadded base64url
2026-11-04 16:23:38 SUCCESS
ExtractJWKsFromStaticClientConfiguration
Extracted client JWK
client_jwks
{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "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"
      ]
    }
  ]
}
client_public_jwks
{
  "keys": [
    {
      "kty": "EC",
      "use": "sig",
      "crv": "P-256",
      "kid": "vp-verifier-key-1",
      "x5c": [
        "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"
      ],
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "alg": "ES256"
    }
  ]
}
2026-11-04 16:23:38 SUCCESS
CheckDistinctKeyIdValueInClientJWKs
Distinct 'kid' value in all keys of client_jwks
see
https://bitbucket.org/openid/connect/issues/1127
2026-11-04 16:23:38 SUCCESS
CheckIfClientIdInX509CertSanDns
x509_san_dns client_id is present in the x5c certificate SAN in the client_jwks x5c parameter
san
[[2, conformance.example.com]]
client_jwks
{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
      "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
      "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
      "kid": "vp-verifier-key-1",
      "use": "sig",
      "alg": "ES256",
      "x5c": [
        "MIIBvjCCAWOgAwIBAgIUfw4in2xbbaO4BRVzCMJ9jcx+MYUwCgYIKoZIzj0EAwIwIjEgMB4GA1UEAwwXY29uZm9ybWFuY2UuZXhhbXBsZS5jb20wHhcNMjYwNTE1MDc1MzQ1WhcNMjcwNTE1MDc1MzQ1WjAiMSAwHgYDVQQDDBdjb25mb3JtYW5jZS5leGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBz7RGBBEDRnDhhrUF55vFW268lmDhe3ZZkynA8CMZOtKnv02968XSiEmNSoGPaHX3LXl+boQztsK0DB46VhE6+jdzB1MB0GA1UdDgQWBBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAfBgNVHSMEGDAWgBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAPBgNVHRMBAf8EBTADAQH/MCIGA1UdEQQbMBmCF2NvbmZvcm1hbmNlLmV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQC4lhxwiQy3+GPtzdQW9IlDSrQoEnncom6YsKZ3izHuIgIhAKZIjNYWTG0xIpFrS4DVkvo1qiV9kNf1Qvp8StOW6pEr"
      ]
    }
  ]
}
cert
[
[
  Version: V3
  Subject: CN=conformance.example.com
  Signature Algorithm: SHA256withECDSA, OID = 1.2.840.10045.4.3.2

  Key:  Sun EC public key, 256 bits
  public x coord: 13108710287349260330328350076677132814851473605070147512119001812479683695533
  public y coord: 19216151783258683751959855919806513226213387050584598552418263195245676139439
  parameters: secp256r1 [NIST P-256,X9.62 prime256v1] (1.2.840.10045.3.1.7)
  Validity: [From: Fri May 15 07:53:45 UTC 2026,
               To: Sat May 15 07:53:45 UTC 2027]
  Issuer: CN=conformance.example.com
  SerialNumber: 7f:0e:22:9f:6c:5b:6d:a3:b8:05:15:73:08:c2:7d:8d:cc:7e:31:85

Certificate Extensions: 4
[1]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 7F CC 0E E1 DF E8 A4 28   1A 1A DE 3C 8C 89 25 FB  .......(...<..%.
0010: B0 57 64 CB                                        .Wd.
]
]

[2]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen: no limit
]

[3]: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
  DNSName: conformance.example.com
]

[4]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 7F CC 0E E1 DF E8 A4 28   1A 1A DE 3C 8C 89 25 FB  .......(...<..%.
0010: B0 57 64 CB                                        .Wd.
]
]

]
  Algorithm: [SHA256withECDSA]
  Signature:
0000: 30 46 02 21 00 B8 96 1C   70 89 0C B7 F8 63 ED CD  0F.!....p....c..
0010: D4 16 F4 89 43 4A B4 28   12 79 DC A2 6E 98 B0 A6  ....CJ.(.y..n...
0020: 77 8B 31 EE 22 02 21 00   A6 48 8C D6 16 4C 6D 31  w.1.".!..H...Lm1
0030: 22 91 6B 4B 80 D5 92 FA   35 AA 25 7D 90 D7 F5 42  ".kK....5.%....B
0040: FA 7C 4A D3 96 EA 91 2B                            ..J....+

]
client_id
conformance.example.com
dns_names_from_cert
[
  "conformance.example.com"
]
2026-11-04 16:23:38
RegisterRical
No RICAL configured, skipping RICAL-based verifier trust checks
2026-11-04 16:23:38 INFO
CallRicalEndpoint
Skipped evaluation due to missing required string: rical_url
expected
rical_url
2026-11-04 16:23:38 INFO
ParseRical
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-04 16:23:38 INFO
DumpRicalCborDiagnostics
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-04 16:23:38 INFO
ValidateRicalSignature
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-04 16:23:38 INFO
ValidateRicalSignerCertificate
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-04 16:23:38 INFO
ValidateRicalStructure
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-04 16:23:38 INFO
ValidateConfiguredClientCertificatesAgainstRical
Skipped evaluation due to missing required object: rical
mapped
expected
rical
2026-11-04 16:23:38
RegisterCredentialTrustAnchor
No credential trust anchor configured, skipping registration
2026-11-04 16:23:38
RegisterStatusListTrustAnchor
No status list trust anchor configured, skipping registration
2026-11-04 16:23:38 SUCCESS
CheckDiscEndpointRequestUriParameterSupported
request_uri_parameter_supported has correct value
request_uri_parameter_supported
2026-11-04 16:23:38
CreateRandomRequestUriWithoutFragment
Created random URL for request_uri
request_uri
{
  "path": "requesturi/UXEc2XUWneU4TtfR8WNqeKVqQW8Vzj9cdV0bxvh6POO3d6stjbJPCeCFW5wIBp9L",
  "fullUrl": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/requesturi/UXEc2XUWneU4TtfR8WNqeKVqQW8Vzj9cdV0bxvh6POO3d6stjbJPCeCFW5wIBp9L"
}
2026-11-04 16:23:38
oid4vp-1final-wallet-fewer-claims-than-available
Setup Done
Make request to wallet
2026-11-04 16:23:38 SUCCESS
CreateEmptyAuthorizationEndpointRequest
Created empty authorization endpoint request
2026-11-04 16:23:38 SUCCESS
AddClientIdToAuthorizationEndpointRequest
Added client_id of 'x509_san_dns:conformance.example.com' to authorization endpoint request
client_id
x509_san_dns:conformance.example.com
2026-11-04 16:23:38
CreateRandomStateValue
Created state value
state
E3bpuRyUxj
requested_state_length
10
2026-11-04 16:23:38 SUCCESS
AddStateToAuthorizationEndpointRequest
Added state parameter to request
client_id
x509_san_dns:conformance.example.com
state
E3bpuRyUxj
2026-11-04 16:23:38 SUCCESS
AddResponseUriToAuthorizationEndpointRequest
Added response_uri parameter to request
client_id
x509_san_dns:conformance.example.com
state
E3bpuRyUxj
response_uri
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/responseuri
2026-11-04 16:23:38 INFO
LoadBuiltInDcqlQuery
Skipped evaluation due to missing required string: dcql_builtin_resource
expected
dcql_builtin_resource
2026-11-04 16:23:38 SUCCESS
ExtractDCQLQueryFromClientConfiguration
Extracted dcql from client configuration
dcql
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        }
      ]
    }
  ]
}
2026-11-04 16:23:38
RemoveLastClaimFromDcqlQuery
Removed last claim from DCQL query to test selective disclosure
remaining_claims
[
  {
    "path": [
      "given_name"
    ]
  }
]
removed_claim
{
  "path": [
    "family_name"
  ]
}
2026-11-04 16:23:38 SUCCESS
ValidateDCQLQuery
DCQL query input is valid
input
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
schema_link
/json-schemas/oid4vp/dcql_request.json
2026-11-04 16:23:38 SUCCESS
CheckDCQLQueryCredentialFormatMatchesTestConfiguration
DCQL query credential format matches test configuration
expected_format
dc+sd-jwt
credential_count
1
2026-11-04 16:23:38 SUCCESS
CheckForUnexpectedParametersInDcqlQuery
No unknown properties were found in the DCQL query
input
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
schema_link
/json-schemas/oid4vp/dcql_request.json
2026-11-04 16:23:38 SUCCESS
CheckForNonSelectivelyDisclosableClaimsInDcqlQuery
DCQL query does not request any SD-JWT VC claims that cannot be selectively disclosed
2026-11-04 16:23:38 SUCCESS
CheckForUnreferencedClaimsInDcqlQuery
The DCQL query does not contain claims entries unreferenced by claim_sets
2026-11-04 16:23:38 SUCCESS
AddDcqlToAuthorizationEndpointRequest
Added dcql_query parameter to request
client_id
x509_san_dns:conformance.example.com
state
E3bpuRyUxj
response_uri
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/responseuri
dcql_query
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
2026-11-04 16:23:38 INFO
ExtractVerifierInfoFromClientConfiguration
Skipped evaluation due to missing required element: client verifier_info
path
verifier_info
mapped
object
client
2026-11-04 16:23:38 INFO
ValidateVerifierInfo
Skipped evaluation due to missing required element: client verifier_info
path
verifier_info
mapped
object
client
2026-11-04 16:23:38 INFO
CheckForUnexpectedParametersInVerifierInfo
Skipped evaluation due to missing required element: client verifier_info
path
verifier_info
mapped
object
client
2026-11-04 16:23:38 INFO
AddVerifierInfoToAuthorizationEndpointRequest
Skipped evaluation due to missing required element: client verifier_info
path
verifier_info
mapped
object
client
2026-11-04 16:23:38
CreateRandomNonceValue
Created nonce value
requested_nonce_length
26
nonce
5TdWDSIAQhML08rT7OtfJN-._~
2026-11-04 16:23:38 SUCCESS
AddNonceToAuthorizationEndpointRequest
Added nonce parameter to request
client_id
x509_san_dns:conformance.example.com
state
E3bpuRyUxj
response_uri
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/responseuri
dcql_query
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
nonce
5TdWDSIAQhML08rT7OtfJN-._~
2026-11-04 16:23:38
AddVP1FinalSdJwtClientMetadataToAuthorizationRequest
Added client_metadata to authorization endpoint request
client_metadata
{
  "vp_formats_supported": {
    "dc+sd-jwt": {
      "sd-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ],
      "kb-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ]
    }
  }
}
2026-11-04 16:23:38 SUCCESS
SetAuthorizationEndpointRequestResponseTypeToVpToken
Added response_type parameter to request
client_id
x509_san_dns:conformance.example.com
state
E3bpuRyUxj
response_uri
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/responseuri
dcql_query
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
nonce
5TdWDSIAQhML08rT7OtfJN-._~
client_metadata
{
  "vp_formats_supported": {
    "dc+sd-jwt": {
      "sd-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ],
      "kb-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ]
    }
  }
}
response_type
vp_token
2026-11-04 16:23:38
SetAuthorizationEndpointRequestResponseMode
Added response_mode parameter to request
client_id
x509_san_dns:conformance.example.com
state
E3bpuRyUxj
response_uri
https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/responseuri
dcql_query
{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        }
      ]
    }
  ]
}
nonce
5TdWDSIAQhML08rT7OtfJN-._~
client_metadata
{
  "vp_formats_supported": {
    "dc+sd-jwt": {
      "sd-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ],
      "kb-jwt_alg_values": [
        "RS256",
        "RS384",
        "RS512",
        "PS256",
        "PS384",
        "PS512",
        "ES256",
        "ES256K",
        "ES384",
        "ES512",
        "EdDSA",
        "Ed25519",
        "Ed448"
      ]
    }
  }
}
response_type
vp_token
response_mode
direct_post
2026-11-04 16:23:38 SUCCESS
ConvertAuthorizationEndpointRequestToRequestObject
Created request object claims
request_object_claims
{
  "client_id": "x509_san_dns:conformance.example.com",
  "state": "E3bpuRyUxj",
  "response_uri": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/responseuri",
  "dcql_query": {
    "credentials": [
      {
        "id": "eudi_pid",
        "format": "dc+sd-jwt",
        "meta": {
          "vct_values": [
            "urn:eudi:pid:1"
          ]
        },
        "claims": [
          {
            "path": [
              "given_name"
            ]
          }
        ]
      }
    ]
  },
  "nonce": "5TdWDSIAQhML08rT7OtfJN-._~",
  "client_metadata": {
    "vp_formats_supported": {
      "dc+sd-jwt": {
        "sd-jwt_alg_values": [
          "RS256",
          "RS384",
          "RS512",
          "PS256",
          "PS384",
          "PS512",
          "ES256",
          "ES256K",
          "ES384",
          "ES512",
          "EdDSA",
          "Ed25519",
          "Ed448"
        ],
        "kb-jwt_alg_values": [
          "RS256",
          "RS384",
          "RS512",
          "PS256",
          "PS384",
          "PS512",
          "ES256",
          "ES256K",
          "ES384",
          "ES512",
          "EdDSA",
          "Ed25519",
          "Ed448"
        ]
      }
    }
  },
  "response_type": "vp_token",
  "response_mode": "direct_post"
}
2026-11-04 16:23:38
AddSelfIssuedMeV2AudToRequestObject
Added SIOPv2 aud to request object claims
aud
https://self-issued.me/v2
2026-11-04 16:23:38 SUCCESS
BuildRequestObjectByReferenceRedirectToAuthorizationEndpointWithoutDuplicates
Sending to authorization endpoint
redirect_to_authorization_endpoint
openid4vp://?client_id=x509_san_dns:conformance.example.com&request_uri=https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/requesturi/UXEc2XUWneU4TtfR8WNqeKVqQW8Vzj9cdV0bxvh6POO3d6stjbJPCeCFW5wIBp9L
2026-11-04 16:23:38 REDIRECT
oid4vp-1final-wallet-fewer-claims-than-available
Redirecting to authorization endpoint
method
GET
redirect_to
openid4vp://?client_id=x509_san_dns:conformance.example.com&request_uri=https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/requesturi/UXEc2XUWneU4TtfR8WNqeKVqQW8Vzj9cdV0bxvh6POO3d6stjbJPCeCFW5wIBp9L
2026-11-04 16:23:38
oid4vp-1final-wallet-fewer-claims-than-available
The wallet should be opened via the QR code / proceed with test button, and should then fetch the request_uri
2026-11-04 16:23:39 INCOMING
oid4vp-1final-wallet-fewer-claims-than-available
Incoming HTTP request to /test/a/siros-wallet-vp-test/requesturi/UXEc2XUWneU4TtfR8WNqeKVqQW8Vzj9cdV0bxvh6POO3d6stjbJPCeCFW5wIBp9L
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vp-test/requesturi/UXEc2XUWneU4TtfR8WNqeKVqQW8Vzj9cdV0bxvh6POO3d6stjbJPCeCFW5wIBp9L",
  "forwarded": "by\u003d172.18.0.6;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "accept": "application/oauth-authz-req+jwt, application/json",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "accept-language": "en-US",
  "sec-ch-ua-mobile": "?0",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/test/a/siros-wallet-vp-test/requesturi/UXEc2XUWneU4TtfR8WNqeKVqQW8Vzj9cdV0bxvh6POO3d6stjbJPCeCFW5wIBp9L
incoming_body_form_params
incoming_method
GET
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
2026-11-04 16:23:39 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
Found TLS 1.3 connection
2026-11-04 16:23:39 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
2026-11-04 16:23:39 SUCCESS
EnsureIncomingRequestMethodIsGet
Client correctly used http GET method
2026-11-04 16:23:39 SUCCESS
SignRequestObjectIncludeX5cHeader
Signed the request object
claims
{
  "response_uri": "https://localhost.emobix.co.uk:8443/test/a/siros-wallet-vp-test/responseuri",
  "aud": "https://self-issued.me/v2",
  "response_type": "vp_token",
  "state": "E3bpuRyUxj",
  "dcql_query": {
    "credentials": [
      {
        "id": "eudi_pid",
        "format": "dc+sd-jwt",
        "meta": {
          "vct_values": [
            "urn:eudi:pid:1"
          ]
        },
        "claims": [
          {
            "path": [
              "given_name"
            ]
          }
        ]
      }
    ]
  },
  "nonce": "5TdWDSIAQhML08rT7OtfJN-._~",
  "client_id": "x509_san_dns:conformance.example.com",
  "client_metadata": {
    "vp_formats_supported": {
      "dc+sd-jwt": {
        "sd-jwt_alg_values": [
          "RS256",
          "RS384",
          "RS512",
          "PS256",
          "PS384",
          "PS512",
          "ES256",
          "ES256K",
          "ES384",
          "ES512",
          "EdDSA",
          "Ed25519",
          "Ed448"
        ],
        "kb-jwt_alg_values": [
          "RS256",
          "RS384",
          "RS512",
          "PS256",
          "PS384",
          "PS512",
          "ES256",
          "ES256K",
          "ES384",
          "ES512",
          "EdDSA",
          "Ed25519",
          "Ed448"
        ]
      }
    }
  },
  "response_mode": "direct_post"
}
header
{
  "x5c": [
    "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"
  ],
  "kid": "vp-verifier-key-1",
  "typ": "oauth-authz-req+jwt",
  "alg": "ES256"
}
request_object
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.eyJyZXNwb25zZV91cmkiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZwLXRlc3QvcmVzcG9uc2V1cmkiLCJhdWQiOiJodHRwczovL3NlbGYtaXNzdWVkLm1lL3YyIiwicmVzcG9uc2VfdHlwZSI6InZwX3Rva2VuIiwic3RhdGUiOiJFM2JwdVJ5VXhqIiwiZGNxbF9xdWVyeSI6eyJjcmVkZW50aWFscyI6W3siaWQiOiJldWRpX3BpZCIsImZvcm1hdCI6ImRjK3NkLWp3dCIsIm1ldGEiOnsidmN0X3ZhbHVlcyI6WyJ1cm46ZXVkaTpwaWQ6MSJdfSwiY2xhaW1zIjpbeyJwYXRoIjpbImdpdmVuX25hbWUiXX1dfV19LCJub25jZSI6IjVUZFdEU0lBUWhNTDA4clQ3T3RmSk4tLl9-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.2R07sIX10uC238LnoksN1fX4B1RcIwet_pkfaueP9KpxmQNgUJDUjQ2G4yb1P1GKxjaV4IfzAgybbVihmfZzTw
key
{
  "kty": "EC",
  "d": "Z8iB5ltQ0Yf8Wyyafbmypw49VKegZLn2BBjzFzhMHGU",
  "use": "sig",
  "crv": "P-256",
  "kid": "vp-verifier-key-1",
  "x5c": [
    "MIIBvjCCAWOgAwIBAgIUfw4in2xbbaO4BRVzCMJ9jcx+MYUwCgYIKoZIzj0EAwIwIjEgMB4GA1UEAwwXY29uZm9ybWFuY2UuZXhhbXBsZS5jb20wHhcNMjYwNTE1MDc1MzQ1WhcNMjcwNTE1MDc1MzQ1WjAiMSAwHgYDVQQDDBdjb25mb3JtYW5jZS5leGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBz7RGBBEDRnDhhrUF55vFW268lmDhe3ZZkynA8CMZOtKnv02968XSiEmNSoGPaHX3LXl+boQztsK0DB46VhE6+jdzB1MB0GA1UdDgQWBBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAfBgNVHSMEGDAWgBR/zA7h3+ikKBoa3jyMiSX7sFdkyzAPBgNVHRMBAf8EBTADAQH/MCIGA1UdEQQbMBmCF2NvbmZvcm1hbmNlLmV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQC4lhxwiQy3+GPtzdQW9IlDSrQoEnncom6YsKZ3izHuIgIhAKZIjNYWTG0xIpFrS4DVkvo1qiV9kNf1Qvp8StOW6pEr"
  ],
  "x": "HPtEYEEQNGcOGGtQXnm8VbbryWYOF7dlmTKcDwIxk60",
  "y": "Knv02968XSiEmNSoGPaHX3LXl-boQztsK0DB46VhE68",
  "alg": "ES256"
}
2026-11-04 16:23:39
oid4vp-1final-wallet-fewer-claims-than-available
Wallet has retrieved request_uri - waiting for it to call the response_uri
2026-11-04 16:23:39
oid4vp-1final-wallet-fewer-claims-than-available
Returned request object to wallet - waiting for it to call the response_uri
2026-11-04 16:23:39 OUTGOING
oid4vp-1final-wallet-fewer-claims-than-available
Response to HTTP request to test instance TMKcgGwacITTLrX
outgoing_status_code
200
outgoing_body
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.eyJyZXNwb25zZV91cmkiOiJodHRwczovL2xvY2FsaG9zdC5lbW9iaXguY28udWs6ODQ0My90ZXN0L2Evc2lyb3Mtd2FsbGV0LXZwLXRlc3QvcmVzcG9uc2V1cmkiLCJhdWQiOiJodHRwczovL3NlbGYtaXNzdWVkLm1lL3YyIiwicmVzcG9uc2VfdHlwZSI6InZwX3Rva2VuIiwic3RhdGUiOiJFM2JwdVJ5VXhqIiwiZGNxbF9xdWVyeSI6eyJjcmVkZW50aWFscyI6W3siaWQiOiJldWRpX3BpZCIsImZvcm1hdCI6ImRjK3NkLWp3dCIsIm1ldGEiOnsidmN0X3ZhbHVlcyI6WyJ1cm46ZXVkaTpwaWQ6MSJdfSwiY2xhaW1zIjpbeyJwYXRoIjpbImdpdmVuX25hbWUiXX1dfV19LCJub25jZSI6IjVUZFdEU0lBUWhNTDA4clQ3T3RmSk4tLl9-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.2R07sIX10uC238LnoksN1fX4B1RcIwet_pkfaueP9KpxmQNgUJDUjQ2G4yb1P1GKxjaV4IfzAgybbVihmfZzTw
outgoing_headers
{
  "headers": {
    "Content-Type": [
      "application/oauth-authz-req+jwt"
    ]
  }
}
outgoing_path
requesturi/UXEc2XUWneU4TtfR8WNqeKVqQW8Vzj9cdV0bxvh6POO3d6stjbJPCeCFW5wIBp9L
2026-11-04 16:23:39 INCOMING
oid4vp-1final-wallet-fewer-claims-than-available
Incoming HTTP request to /test/a/siros-wallet-vp-test/responseuri
incoming_headers
{
  "host": "localhost.emobix.co.uk",
  "x-forwarded-uri": "/test/a/siros-wallet-vp-test/responseuri",
  "forwarded": "by\u003d172.18.0.6;for\u003d172.18.0.1;host\u003dlocalhost.emobix.co.uk;proto\u003dhttps",
  "connection": "close",
  "content-length": "1105",
  "sec-ch-ua-platform": "\"Windows\"",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Safari/537.36",
  "sec-ch-ua": "\"Not:A-Brand\";v\u003d\"8\", \"Chromium\";v\u003d\"156\", \"Google Chrome\";v\u003d\"156\"",
  "content-type": "application/x-www-form-urlencoded",
  "sec-ch-ua-mobile": "?0",
  "accept-language": "en-US",
  "accept": "*/*",
  "sec-fetch-site": "cross-site",
  "sec-fetch-mode": "cors",
  "sec-fetch-dest": "empty",
  "referer": "http://localhost:3010/",
  "accept-encoding": "gzip, deflate, br, zstd"
}
incoming_path
/test/a/siros-wallet-vp-test/responseuri
incoming_body_form_params
{
  "vp_token": "{\"eudi_pid\":[\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1pbmktcGlkLWlzc3VlciIsInR5cCI6ImRjK3NkLWp3dCJ9.eyJfc2QiOlsiZW9KSDdaZnZNMnNpSUVxS3NzRE9VTExiSFo5OUp4eHBENXpJQ1BaZjAzQSIsIjY4bVhmampEZUVQRVJGbVF0LWd3SnJ3YXExWXhkc3UtOG50cnUwWUVVTlEiXSwiX3NkX2FsZyI6InNoYS0yNTYiLCJjbmYiOnsiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiUzAta3dXT1dpMEFMYnZpTmo1R19kM2JKa0htWUVUUmZaSHlEMmRvTWo1MCIsInkiOiJ1NUgzejVOZ1ZWVkt1clpyVTduZlgtcnUtdW5nOUtiNV9HaGQxWlk3Vl93In19LCJleHAiOjE4MjUzNDU0MTksImlhdCI6MTc5MzgwOTQxOSwiaXNzIjoiaHR0cHM6Ly9taW5pLXdhbGxldC5leGFtcGxlIiwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.HKA7NWKbOqNr7eX_MRr6L6Fxy1y9QMrhHdtWw_sgRQUlJkkznJ3NmsFrgUQm8nxmATAVjkgYcIlJMMVy38Vmew~WyJtaW5pLXBpZC1zYWx0LTE3OTM4MDk0MTktMCIsImdpdmVuX25hbWUiLCJBbGljZSJd~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJpYXQiOjE3OTM4MDk0MTksImF1ZCI6Ing1MDlfc2FuX2Ruczpjb25mb3JtYW5jZS5leGFtcGxlLmNvbSIsIm5vbmNlIjoiNVRkV0RTSUFRaE1MMDhyVDdPdGZKTi0uX34iLCJzZF9oYXNoIjoiUGxkcFBvRzlUbk9uS2NNU1UwWklYcTB4RUtsYTZVQjRoM0dlOXFZU19hNCJ9.dcCCn3tbJtgrN11f1JVsTQVpG7fOk-vbrJvnkfyaVdoXZbn3MYLmjoeu6SuTL0-Ch6yYybQg2YY1anDz5x13MA\"]}",
  "state": "E3bpuRyUxj"
}
incoming_method
POST
incoming_tls_version
TLSv1.3
incoming_tls_cert
incoming_query_string_params
{}
incoming_body
vp_token=%7B%22eudi_pid%22%3A%5B%22eyJhbGciOiJFUzI1NiIsImtpZCI6Im1pbmktcGlkLWlzc3VlciIsInR5cCI6ImRjK3NkLWp3dCJ9.eyJfc2QiOlsiZW9KSDdaZnZNMnNpSUVxS3NzRE9VTExiSFo5OUp4eHBENXpJQ1BaZjAzQSIsIjY4bVhmampEZUVQRVJGbVF0LWd3SnJ3YXExWXhkc3UtOG50cnUwWUVVTlEiXSwiX3NkX2FsZyI6InNoYS0yNTYiLCJjbmYiOnsiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiUzAta3dXT1dpMEFMYnZpTmo1R19kM2JKa0htWUVUUmZaSHlEMmRvTWo1MCIsInkiOiJ1NUgzejVOZ1ZWVkt1clpyVTduZlgtcnUtdW5nOUtiNV9HaGQxWlk3Vl93In19LCJleHAiOjE4MjUzNDU0MTksImlhdCI6MTc5MzgwOTQxOSwiaXNzIjoiaHR0cHM6Ly9taW5pLXdhbGxldC5leGFtcGxlIiwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.HKA7NWKbOqNr7eX_MRr6L6Fxy1y9QMrhHdtWw_sgRQUlJkkznJ3NmsFrgUQm8nxmATAVjkgYcIlJMMVy38Vmew%7EWyJtaW5pLXBpZC1zYWx0LTE3OTM4MDk0MTktMCIsImdpdmVuX25hbWUiLCJBbGljZSJd%7EeyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJpYXQiOjE3OTM4MDk0MTksImF1ZCI6Ing1MDlfc2FuX2Ruczpjb25mb3JtYW5jZS5leGFtcGxlLmNvbSIsIm5vbmNlIjoiNVRkV0RTSUFRaE1MMDhyVDdPdGZKTi0uX34iLCJzZF9oYXNoIjoiUGxkcFBvRzlUbk9uS2NNU1UwWklYcTB4RUtsYTZVQjRoM0dlOXFZU19hNCJ9.dcCCn3tbJtgrN11f1JVsTQVpG7fOk-vbrJvnkfyaVdoXZbn3MYLmjoeu6SuTL0-Ch6yYybQg2YY1anDz5x13MA%22%5D%7D&state=E3bpuRyUxj
incoming_tls_chain
[
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL",
  "CONFORMANCE_SUITE_JSON_NULL"
]
incoming_body_json_parse_error
incoming_tls_cipher
TLS_AES_256_GCM_SHA384
incoming_body_json
2026-11-04 16:23:39 SUCCESS
EnsureIncomingTls12WithSecureCipherOrTls13
Found TLS 1.3 connection
2026-11-04 16:23:39 SUCCESS
EnsureIncomingTls13
TLS 1.3 in use
Direct post endpoint
2026-11-04 16:23:39 SUCCESS
EnsureIncomingRequestMethodIsPost
Client correctly used http POST method
2026-11-04 16:23:39 SUCCESS
EnsureIncomingRequestContentTypeIsFormUrlEncoded
Incoming content-type header has the expected value
content_type
application/x-www-form-urlencoded
expected
application/x-www-form-urlencoded
2026-11-04 16:23:39 SUCCESS
EnsureIncomingUrlQueryIsEmpty
URL query from server was correctly empty, no query parameters detected
2026-11-04 16:23:39 SUCCESS
ExtractAuthorizationEndpointResponseFromFormBody
Extracted the authorization response
vp_token
{"eudi_pid":["eyJhbGciOiJFUzI1NiIsImtpZCI6Im1pbmktcGlkLWlzc3VlciIsInR5cCI6ImRjK3NkLWp3dCJ9.eyJfc2QiOlsiZW9KSDdaZnZNMnNpSUVxS3NzRE9VTExiSFo5OUp4eHBENXpJQ1BaZjAzQSIsIjY4bVhmampEZUVQRVJGbVF0LWd3SnJ3YXExWXhkc3UtOG50cnUwWUVVTlEiXSwiX3NkX2FsZyI6InNoYS0yNTYiLCJjbmYiOnsiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiUzAta3dXT1dpMEFMYnZpTmo1R19kM2JKa0htWUVUUmZaSHlEMmRvTWo1MCIsInkiOiJ1NUgzejVOZ1ZWVkt1clpyVTduZlgtcnUtdW5nOUtiNV9HaGQxWlk3Vl93In19LCJleHAiOjE4MjUzNDU0MTksImlhdCI6MTc5MzgwOTQxOSwiaXNzIjoiaHR0cHM6Ly9taW5pLXdhbGxldC5leGFtcGxlIiwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.HKA7NWKbOqNr7eX_MRr6L6Fxy1y9QMrhHdtWw_sgRQUlJkkznJ3NmsFrgUQm8nxmATAVjkgYcIlJMMVy38Vmew~WyJtaW5pLXBpZC1zYWx0LTE3OTM4MDk0MTktMCIsImdpdmVuX25hbWUiLCJBbGljZSJd~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJpYXQiOjE3OTM4MDk0MTksImF1ZCI6Ing1MDlfc2FuX2Ruczpjb25mb3JtYW5jZS5leGFtcGxlLmNvbSIsIm5vbmNlIjoiNVRkV0RTSUFRaE1MMDhyVDdPdGZKTi0uX34iLCJzZF9oYXNoIjoiUGxkcFBvRzlUbk9uS2NNU1UwWklYcTB4RUtsYTZVQjRoM0dlOXFZU19hNCJ9.dcCCn3tbJtgrN11f1JVsTQVpG7fOk-vbrJvnkfyaVdoXZbn3MYLmjoeu6SuTL0-Ch6yYybQg2YY1anDz5x13MA"]}
state
E3bpuRyUxj
2026-11-04 16:23:39 SUCCESS
ExtractAuthorizationEndpointResponse
Extracted authorization response
vp_token
{
  "eudi_pid": [
    "eyJhbGciOiJFUzI1NiIsImtpZCI6Im1pbmktcGlkLWlzc3VlciIsInR5cCI6ImRjK3NkLWp3dCJ9.eyJfc2QiOlsiZW9KSDdaZnZNMnNpSUVxS3NzRE9VTExiSFo5OUp4eHBENXpJQ1BaZjAzQSIsIjY4bVhmampEZUVQRVJGbVF0LWd3SnJ3YXExWXhkc3UtOG50cnUwWUVVTlEiXSwiX3NkX2FsZyI6InNoYS0yNTYiLCJjbmYiOnsiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiUzAta3dXT1dpMEFMYnZpTmo1R19kM2JKa0htWUVUUmZaSHlEMmRvTWo1MCIsInkiOiJ1NUgzejVOZ1ZWVkt1clpyVTduZlgtcnUtdW5nOUtiNV9HaGQxWlk3Vl93In19LCJleHAiOjE4MjUzNDU0MTksImlhdCI6MTc5MzgwOTQxOSwiaXNzIjoiaHR0cHM6Ly9taW5pLXdhbGxldC5leGFtcGxlIiwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.HKA7NWKbOqNr7eX_MRr6L6Fxy1y9QMrhHdtWw_sgRQUlJkkznJ3NmsFrgUQm8nxmATAVjkgYcIlJMMVy38Vmew~WyJtaW5pLXBpZC1zYWx0LTE3OTM4MDk0MTktMCIsImdpdmVuX25hbWUiLCJBbGljZSJd~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJpYXQiOjE3OTM4MDk0MTksImF1ZCI6Ing1MDlfc2FuX2Ruczpjb25mb3JtYW5jZS5leGFtcGxlLmNvbSIsIm5vbmNlIjoiNVRkV0RTSUFRaE1MMDhyVDdPdGZKTi0uX34iLCJzZF9oYXNoIjoiUGxkcFBvRzlUbk9uS2NNU1UwWklYcTB4RUtsYTZVQjRoM0dlOXFZU19hNCJ9.dcCCn3tbJtgrN11f1JVsTQVpG7fOk-vbrJvnkfyaVdoXZbn3MYLmjoeu6SuTL0-Ch6yYybQg2YY1anDz5x13MA"
  ]
}
state
E3bpuRyUxj
2026-11-04 16:23:39 SUCCESS
CheckIfAuthorizationEndpointError
No error from authorization endpoint
2026-11-04 16:23:39 SUCCESS
ExtractVP1FinalVpTokenDCQL
vp_token parsed
credentialId
eudi_pid
credential
eyJhbGciOiJFUzI1NiIsImtpZCI6Im1pbmktcGlkLWlzc3VlciIsInR5cCI6ImRjK3NkLWp3dCJ9.eyJfc2QiOlsiZW9KSDdaZnZNMnNpSUVxS3NzRE9VTExiSFo5OUp4eHBENXpJQ1BaZjAzQSIsIjY4bVhmampEZUVQRVJGbVF0LWd3SnJ3YXExWXhkc3UtOG50cnUwWUVVTlEiXSwiX3NkX2FsZyI6InNoYS0yNTYiLCJjbmYiOnsiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiUzAta3dXT1dpMEFMYnZpTmo1R19kM2JKa0htWUVUUmZaSHlEMmRvTWo1MCIsInkiOiJ1NUgzejVOZ1ZWVkt1clpyVTduZlgtcnUtdW5nOUtiNV9HaGQxWlk3Vl93In19LCJleHAiOjE4MjUzNDU0MTksImlhdCI6MTc5MzgwOTQxOSwiaXNzIjoiaHR0cHM6Ly9taW5pLXdhbGxldC5leGFtcGxlIiwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.HKA7NWKbOqNr7eX_MRr6L6Fxy1y9QMrhHdtWw_sgRQUlJkkznJ3NmsFrgUQm8nxmATAVjkgYcIlJMMVy38Vmew~WyJtaW5pLXBpZC1zYWx0LTE3OTM4MDk0MTktMCIsImdpdmVuX25hbWUiLCJBbGljZSJd~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJpYXQiOjE3OTM4MDk0MTksImF1ZCI6Ing1MDlfc2FuX2Ruczpjb25mb3JtYW5jZS5leGFtcGxlLmNvbSIsIm5vbmNlIjoiNVRkV0RTSUFRaE1MMDhyVDdPdGZKTi0uX34iLCJzZF9oYXNoIjoiUGxkcFBvRzlUbk9uS2NNU1UwWklYcTB4RUtsYTZVQjRoM0dlOXFZU19hNCJ9.dcCCn3tbJtgrN11f1JVsTQVpG7fOk-vbrJvnkfyaVdoXZbn3MYLmjoeu6SuTL0-Ch6yYybQg2YY1anDz5x13MA
2026-11-04 16:23:39 SUCCESS
ValidateVpTokenCredentialIdMatchesDcqlQuery
VP token credential_id matches a credential entry in the DCQL query
credential_id
eudi_pid
2026-11-04 16:23:39 SUCCESS
ValidateVpTokenPresentationCountMatchesDcqlQuery
Each vp_token entry contains a number of Presentations consistent with the Credential Query's 'multiple' setting
vp_token
{
  "eudi_pid": [
    "eyJhbGciOiJFUzI1NiIsImtpZCI6Im1pbmktcGlkLWlzc3VlciIsInR5cCI6ImRjK3NkLWp3dCJ9.eyJfc2QiOlsiZW9KSDdaZnZNMnNpSUVxS3NzRE9VTExiSFo5OUp4eHBENXpJQ1BaZjAzQSIsIjY4bVhmampEZUVQRVJGbVF0LWd3SnJ3YXExWXhkc3UtOG50cnUwWUVVTlEiXSwiX3NkX2FsZyI6InNoYS0yNTYiLCJjbmYiOnsiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiUzAta3dXT1dpMEFMYnZpTmo1R19kM2JKa0htWUVUUmZaSHlEMmRvTWo1MCIsInkiOiJ1NUgzejVOZ1ZWVkt1clpyVTduZlgtcnUtdW5nOUtiNV9HaGQxWlk3Vl93In19LCJleHAiOjE4MjUzNDU0MTksImlhdCI6MTc5MzgwOTQxOSwiaXNzIjoiaHR0cHM6Ly9taW5pLXdhbGxldC5leGFtcGxlIiwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.HKA7NWKbOqNr7eX_MRr6L6Fxy1y9QMrhHdtWw_sgRQUlJkkznJ3NmsFrgUQm8nxmATAVjkgYcIlJMMVy38Vmew~WyJtaW5pLXBpZC1zYWx0LTE3OTM4MDk0MTktMCIsImdpdmVuX25hbWUiLCJBbGljZSJd~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJpYXQiOjE3OTM4MDk0MTksImF1ZCI6Ing1MDlfc2FuX2Ruczpjb25mb3JtYW5jZS5leGFtcGxlLmNvbSIsIm5vbmNlIjoiNVRkV0RTSUFRaE1MMDhyVDdPdGZKTi0uX34iLCJzZF9oYXNoIjoiUGxkcFBvRzlUbk9uS2NNU1UwWklYcTB4RUtsYTZVQjRoM0dlOXFZU19hNCJ9.dcCCn3tbJtgrN11f1JVsTQVpG7fOk-vbrJvnkfyaVdoXZbn3MYLmjoeu6SuTL0-Ch6yYybQg2YY1anDz5x13MA"
  ]
}
2026-11-04 16:23:39 SUCCESS
CheckNoPresentationSubmissionParameter
presentation_submission parameter is not present, as expected.
2026-11-04 16:23:39 SUCCESS
CheckForUnexpectedParametersInVpAuthorizationResponse
authorization response includes only expected parameters
vp_token
{
  "eudi_pid": [
    "eyJhbGciOiJFUzI1NiIsImtpZCI6Im1pbmktcGlkLWlzc3VlciIsInR5cCI6ImRjK3NkLWp3dCJ9.eyJfc2QiOlsiZW9KSDdaZnZNMnNpSUVxS3NzRE9VTExiSFo5OUp4eHBENXpJQ1BaZjAzQSIsIjY4bVhmampEZUVQRVJGbVF0LWd3SnJ3YXExWXhkc3UtOG50cnUwWUVVTlEiXSwiX3NkX2FsZyI6InNoYS0yNTYiLCJjbmYiOnsiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiUzAta3dXT1dpMEFMYnZpTmo1R19kM2JKa0htWUVUUmZaSHlEMmRvTWo1MCIsInkiOiJ1NUgzejVOZ1ZWVkt1clpyVTduZlgtcnUtdW5nOUtiNV9HaGQxWlk3Vl93In19LCJleHAiOjE4MjUzNDU0MTksImlhdCI6MTc5MzgwOTQxOSwiaXNzIjoiaHR0cHM6Ly9taW5pLXdhbGxldC5leGFtcGxlIiwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.HKA7NWKbOqNr7eX_MRr6L6Fxy1y9QMrhHdtWw_sgRQUlJkkznJ3NmsFrgUQm8nxmATAVjkgYcIlJMMVy38Vmew~WyJtaW5pLXBpZC1zYWx0LTE3OTM4MDk0MTktMCIsImdpdmVuX25hbWUiLCJBbGljZSJd~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJpYXQiOjE3OTM4MDk0MTksImF1ZCI6Ing1MDlfc2FuX2Ruczpjb25mb3JtYW5jZS5leGFtcGxlLmNvbSIsIm5vbmNlIjoiNVRkV0RTSUFRaE1MMDhyVDdPdGZKTi0uX34iLCJzZF9oYXNoIjoiUGxkcFBvRzlUbk9uS2NNU1UwWklYcTB4RUtsYTZVQjRoM0dlOXFZU19hNCJ9.dcCCn3tbJtgrN11f1JVsTQVpG7fOk-vbrJvnkfyaVdoXZbn3MYLmjoeu6SuTL0-Ch6yYybQg2YY1anDz5x13MA"
  ]
}
state
E3bpuRyUxj
2026-11-04 16:23:39 SUCCESS
CheckStateInAuthorizationResponse
State in response correctly returned
state
E3bpuRyUxj
2026-11-04 16:23:39 SUCCESS
ParseCredentialAsSdJwtKb
Parsed SDJWT
value
eyJhbGciOiJFUzI1NiIsImtpZCI6Im1pbmktcGlkLWlzc3VlciIsInR5cCI6ImRjK3NkLWp3dCJ9.eyJfc2QiOlsiZW9KSDdaZnZNMnNpSUVxS3NzRE9VTExiSFo5OUp4eHBENXpJQ1BaZjAzQSIsIjY4bVhmampEZUVQRVJGbVF0LWd3SnJ3YXExWXhkc3UtOG50cnUwWUVVTlEiXSwiX3NkX2FsZyI6InNoYS0yNTYiLCJjbmYiOnsiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiUzAta3dXT1dpMEFMYnZpTmo1R19kM2JKa0htWUVUUmZaSHlEMmRvTWo1MCIsInkiOiJ1NUgzejVOZ1ZWVkt1clpyVTduZlgtcnUtdW5nOUtiNV9HaGQxWlk3Vl93In19LCJleHAiOjE4MjUzNDU0MTksImlhdCI6MTc5MzgwOTQxOSwiaXNzIjoiaHR0cHM6Ly9taW5pLXdhbGxldC5leGFtcGxlIiwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.HKA7NWKbOqNr7eX_MRr6L6Fxy1y9QMrhHdtWw_sgRQUlJkkznJ3NmsFrgUQm8nxmATAVjkgYcIlJMMVy38Vmew~WyJtaW5pLXBpZC1zYWx0LTE3OTM4MDk0MTktMCIsImdpdmVuX25hbWUiLCJBbGljZSJd~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJpYXQiOjE3OTM4MDk0MTksImF1ZCI6Ing1MDlfc2FuX2Ruczpjb25mb3JtYW5jZS5leGFtcGxlLmNvbSIsIm5vbmNlIjoiNVRkV0RTSUFRaE1MMDhyVDdPdGZKTi0uX34iLCJzZF9oYXNoIjoiUGxkcFBvRzlUbk9uS2NNU1UwWklYcTB4RUtsYTZVQjRoM0dlOXFZU19hNCJ9.dcCCn3tbJtgrN11f1JVsTQVpG7fOk-vbrJvnkfyaVdoXZbn3MYLmjoeu6SuTL0-Ch6yYybQg2YY1anDz5x13MA
decoded
{
  "given_name": "Alice",
  "vct": "urn:eudi:pid:1",
  "iss": "https://mini-wallet.example",
  "cnf": {
    "jwk": {
      "crv": "P-256",
      "kty": "EC",
      "x": "S0-kwWOWi0ALbviNj5G_d3bJkHmYETRfZHyD2doMj50",
      "y": "u5H3z5NgVVVKurZrU7nfX-ru-ung9Kb5_Ghd1ZY7V_w"
    }
  },
  "exp": 1825345419,
  "iat": 1793809419
}
disclosures
[
  "[\"mini-pid-salt-1793809419-0\",\"given_name\",\"Alice\"]"
]
binding
{
  "value": "eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJpYXQiOjE3OTM4MDk0MTksImF1ZCI6Ing1MDlfc2FuX2Ruczpjb25mb3JtYW5jZS5leGFtcGxlLmNvbSIsIm5vbmNlIjoiNVRkV0RTSUFRaE1MMDhyVDdPdGZKTi0uX34iLCJzZF9oYXNoIjoiUGxkcFBvRzlUbk9uS2NNU1UwWklYcTB4RUtsYTZVQjRoM0dlOXFZU19hNCJ9.dcCCn3tbJtgrN11f1JVsTQVpG7fOk-vbrJvnkfyaVdoXZbn3MYLmjoeu6SuTL0-Ch6yYybQg2YY1anDz5x13MA",
  "header": {
    "typ": "kb+jwt",
    "alg": "ES256"
  },
  "claims": {
    "sd_hash": "PldpPoG9TnOnKcMSU0ZIXq0xEKla6UB4h3Ge9qYS_a4",
    "aud": "x509_san_dns:conformance.example.com",
    "iat": 1793809419,
    "nonce": "5TdWDSIAQhML08rT7OtfJN-._~"
  }
}
credential
{
  "value": "eyJhbGciOiJFUzI1NiIsImtpZCI6Im1pbmktcGlkLWlzc3VlciIsInR5cCI6ImRjK3NkLWp3dCJ9.eyJfc2QiOlsiZW9KSDdaZnZNMnNpSUVxS3NzRE9VTExiSFo5OUp4eHBENXpJQ1BaZjAzQSIsIjY4bVhmampEZUVQRVJGbVF0LWd3SnJ3YXExWXhkc3UtOG50cnUwWUVVTlEiXSwiX3NkX2FsZyI6InNoYS0yNTYiLCJjbmYiOnsiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiUzAta3dXT1dpMEFMYnZpTmo1R19kM2JKa0htWUVUUmZaSHlEMmRvTWo1MCIsInkiOiJ1NUgzejVOZ1ZWVkt1clpyVTduZlgtcnUtdW5nOUtiNV9HaGQxWlk3Vl93In19LCJleHAiOjE4MjUzNDU0MTksImlhdCI6MTc5MzgwOTQxOSwiaXNzIjoiaHR0cHM6Ly9taW5pLXdhbGxldC5leGFtcGxlIiwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.HKA7NWKbOqNr7eX_MRr6L6Fxy1y9QMrhHdtWw_sgRQUlJkkznJ3NmsFrgUQm8nxmATAVjkgYcIlJMMVy38Vmew",
  "header": {
    "kid": "mini-pid-issuer",
    "typ": "dc+sd-jwt",
    "alg": "ES256"
  },
  "claims": {
    "_sd": [
      "eoJH7ZfvM2siIEqKssDOULLbHZ99JxxpD5zICPZf03A",
      "68mXfjjDeEPERFmQt-gwJrwaq1Yxdsu-8ntru0YEUNQ"
    ],
    "_sd_alg": "sha-256",
    "vct": "urn:eudi:pid:1",
    "iss": "https://mini-wallet.example",
    "cnf": {
      "jwk": {
        "crv": "P-256",
        "kty": "EC",
        "x": "S0-kwWOWi0ALbviNj5G_d3bJkHmYETRfZHyD2doMj50",
        "y": "u5H3z5NgVVVKurZrU7nfX-ru-ung9Kb5_Ghd1ZY7V_w"
      }
    },
    "exp": 1825345419,
    "iat": 1793809419
  }
}
Verify credential JWT
2026-11-04 16:23:39 SUCCESS
ValidateCredentialJWTIat
'iat' has a sensible value
2026-11-04 16:23:39
ValidateCredentialJWTNbf
'nbf' is not present
2026-11-04 16:23:39 SUCCESS
ValidateCredentialJWTExp
Credential 'exp' passed validation checks
2026-11-04 16:23:39 SUCCESS
ValidateCredentialJWTHeaderTyp
'typ' header is present
typ
dc+sd-jwt
2026-11-04 16:23:39 SUCCESS
ValidateCredentialJWTVct
'vct' claim is present
vct
urn:eudi:pid:1
2026-11-04 16:23:39 SUCCESS
ValidateCredentialCnfJwkIsPublicKey
cnf.jwk is valid in SD-JWT credential
jwk
{
  "crv": "P-256",
  "kty": "EC",
  "x": "S0-kwWOWi0ALbviNj5G_d3bJkHmYETRfZHyD2doMj50",
  "y": "u5H3z5NgVVVKurZrU7nfX-ru-ung9Kb5_Ghd1ZY7V_w"
}
2026-11-04 16:23:39 SUCCESS
WarnIfUnexpectedFieldsInCredentialCnf
cnf claim contains only expected fields
2026-11-04 16:23:39 SUCCESS
WarnIfUnknownFieldsInCredentialCnfJwk
cnf.jwk contains only known fields
2026-11-04 16:23:39 SUCCESS
ValidateSdJwtDisclosureSaltsAreUnique
Only 1 disclosure(s), no duplicates possible
2026-11-04 16:23:39 SUCCESS
ClearStatusListTokenEndpointResponse
Cleared any previous status list validation state
2026-11-04 16:23:39
FetchStatusListToken
No status claim found, skipping status list check
2026-11-04 16:23:39
ExtractStatusListTokenFromStatusListTokenEndpointResponse
No status list token endpoint response recorded, skipping JWT extraction
2026-11-04 16:23:39
VerifyStatusListTokenSignatureUsingEmbeddedJwk
No parsed status list token in environment, skipping signature verification
2026-11-04 16:23:39
CheckCredentialStatus
No status list token in environment, skipping status check
2026-11-04 16:23:39
EnsureContentTypeStatusListJwt
No status list token endpoint response recorded, skipping content-type check
Verify credential matches DCQL query
2026-11-04 16:23:39 SUCCESS
ValidateCredentialVctMatchesDcqlQuery
Credential vct matches DCQL query
vct_values
[
  "urn:eudi:pid:1"
]
vct
urn:eudi:pid:1
2026-11-04 16:23:39 SUCCESS
ValidateDisclosedClaimsMatchDcqlQuery
All DCQL-requested claims are present in the disclosed credential
requested_claim_paths
[
  [
    "given_name"
  ]
]
decoded_credential
{
  "given_name": "Alice",
  "vct": "urn:eudi:pid:1",
  "iss": "https://mini-wallet.example",
  "cnf": {
    "jwk": {
      "crv": "P-256",
      "kty": "EC",
      "x": "S0-kwWOWi0ALbviNj5G_d3bJkHmYETRfZHyD2doMj50",
      "y": "u5H3z5NgVVVKurZrU7nfX-ru-ung9Kb5_Ghd1ZY7V_w"
    }
  },
  "exp": 1825345419,
  "iat": 1793809419
}
2026-11-04 16:23:39
EnsureMostPreferredDcqlClaimSetReturned
DCQL credential entry has fewer than two claim_sets options, so there is no preference order to check
2026-11-04 16:23:39 SUCCESS
CheckOnlyRequestedClaimsDisclosed
Wallet only disclosed claims that were requested in the DCQL query
disclosure_count
1
requested_claim_paths
[
  [
    "given_name"
  ]
]
Verify key binding JWT
2026-11-04 16:23:39 SUCCESS
ValidateSdJwtKeyBindingSignature
SD-JWT key binding jwt signature validated
SD-JWT key binding jwt
eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJpYXQiOjE3OTM4MDk0MTksImF1ZCI6Ing1MDlfc2FuX2Ruczpjb25mb3JtYW5jZS5leGFtcGxlLmNvbSIsIm5vbmNlIjoiNVRkV0RTSUFRaE1MMDhyVDdPdGZKTi0uX34iLCJzZF9oYXNoIjoiUGxkcFBvRzlUbk9uS2NNU1UwWklYcTB4RUtsYTZVQjRoM0dlOXFZU19hNCJ9.dcCCn3tbJtgrN11f1JVsTQVpG7fOk-vbrJvnkfyaVdoXZbn3MYLmjoeu6SuTL0-Ch6yYybQg2YY1anDz5x13MA
2026-11-04 16:23:39 SUCCESS
CheckTypInBindingJwt
typ in the binding jwt is kb+jwt
2026-11-04 16:23:39 SUCCESS
CheckForUnexpectedParametersInBindingJwtHeader
Binding JWT header contains only expected parameters
header
[
  "typ",
  "alg"
]
2026-11-04 16:23:39 SUCCESS
CheckIatInBindingJwt
Binding JWT iat passed validation checks
2026-11-04 16:23:39 SUCCESS
CheckAudInBindingJwt
aud in the binding jwt is the client_id
2026-11-04 16:23:39 SUCCESS
CheckNonceInBindingJwt
nonce in response correctly returned
nonce
5TdWDSIAQhML08rT7OtfJN-._~
2026-11-04 16:23:39 SUCCESS
ValidateSdJwtKbSdHash
sd_hash in the kb-jwt does matches the one calculated from the presented SD-JWT
tohash
eyJhbGciOiJFUzI1NiIsImtpZCI6Im1pbmktcGlkLWlzc3VlciIsInR5cCI6ImRjK3NkLWp3dCJ9.eyJfc2QiOlsiZW9KSDdaZnZNMnNpSUVxS3NzRE9VTExiSFo5OUp4eHBENXpJQ1BaZjAzQSIsIjY4bVhmampEZUVQRVJGbVF0LWd3SnJ3YXExWXhkc3UtOG50cnUwWUVVTlEiXSwiX3NkX2FsZyI6InNoYS0yNTYiLCJjbmYiOnsiandrIjp7ImNydiI6IlAtMjU2Iiwia3R5IjoiRUMiLCJ4IjoiUzAta3dXT1dpMEFMYnZpTmo1R19kM2JKa0htWUVUUmZaSHlEMmRvTWo1MCIsInkiOiJ1NUgzejVOZ1ZWVkt1clpyVTduZlgtcnUtdW5nOUtiNV9HaGQxWlk3Vl93In19LCJleHAiOjE4MjUzNDU0MTksImlhdCI6MTc5MzgwOTQxOSwiaXNzIjoiaHR0cHM6Ly9taW5pLXdhbGxldC5leGFtcGxlIiwidmN0IjoidXJuOmV1ZGk6cGlkOjEifQ.HKA7NWKbOqNr7eX_MRr6L6Fxy1y9QMrhHdtWw_sgRQUlJkkznJ3NmsFrgUQm8nxmATAVjkgYcIlJMMVy38Vmew~WyJtaW5pLXBpZC1zYWx0LTE3OTM4MDk0MTktMCIsImdpdmVuX25hbWUiLCJBbGljZSJd~
calculatedSdHash
PldpPoG9TnOnKcMSU0ZIXq0xEKla6UB4h3Ge9qYS_a4
hashalg
sha-256
kbJwtSdHash
PldpPoG9TnOnKcMSU0ZIXq0xEKla6UB4h3Ge9qYS_a4
2026-11-04 16:23:39 SUCCESS
CheckForUnexpectedClaimsInBindingJwt
Binding JWT header contains only expected parameters
header
[
  "sd_hash",
  "aud",
  "iat",
  "nonce"
]
2026-11-04 16:23:39 SUCCESS
CreateEmptyDirectPostResponse
Created empty direct_post_response
2026-11-04 16:23:39 OUTGOING
oid4vp-1final-wallet-fewer-claims-than-available
Response to HTTP request to test instance TMKcgGwacITTLrX
outgoing_status_code
200
outgoing_body
{}
outgoing_headers
{
  "headers": {
    "Content-Type": [
      "application/json"
    ]
  }
}
outgoing_path
responseuri
2026-11-04 16:23:39 FINISHED
oid4vp-1final-wallet-fewer-claims-than-available
Test has run to completion
testmodule_result
PASSED
2026-11-04 16:23:55
TEST-RUNNER
Alias has now been claimed by another test
alias
siros-wallet-vp-test
new_test_id
4Si7PTM0VTSxUoN
Test Results