Test detail

Test Name	oid4vp-1final-verifier-happy-flow
Variant	credential_format=sd_jwt_vc, client_id_prefix=x509_hash, request_method=request_uri_signed, vp_profile=haip, response_mode=direct_post.jwt
Test ID	37dSrF4Cca83809 https://www.certification.openid.net/log-detail.html?public=true&log=37dSrF4Cca83809
Created	2026-07-19T01:50:30.930700445Z
Description	CodeB OID4VP HAIP verifier - 2026-07-19 v2
Test Version	5.2.0
Test Owner	111972090125569840012 https://accounts.google.com
Plan ID	Wa46KCPHMZ5EV https://www.certification.openid.net/plan-detail.html?public=true&plan=Wa46KCPHMZ5EV
Exported From	https://www.certification.openid.net
Exported By	111972090125569840012 https://accounts.google.com
Suite Version	5.2.0
Exported	2026-07-19 01:57:08 (UTC)

2026-07-19 01:50:30

(8) More

INFO

TEST-RUNNER

Test instance 37dSrF4Cca83809 created

baseUrl	https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2
variant	{ "credential_format": "sd_jwt_vc", "request_method": "request_uri_signed", "vp_profile": "haip", "client_id_prefix": "x509_hash", "response_mode": "direct_post.jwt" }
alias	codeb-oid4vp-haip-v2
description	CodeB OID4VP HAIP verifier - 2026-07-19 v2
planId	Wa46KCPHMZ5EV
config	{ "alias": "codeb-oid4vp-haip-v2", "description": "CodeB OID4VP HAIP verifier - 2026-07-19 v2", "server": { "discoveryUrl": "https://phone.codeb.io/.well-known/openid-configuration", "login_hint": "claude" }, "client": { "client_id": "oidf-conf-basic", "client_secret": "W6Oag_SfF8T9CKjyQlBz3fSyRCPN60bpa6vL4456yro", "request_object_trust_anchor_pem": "-----BEGIN CERTIFICATE-----\nMIICizCCAhGgAwIBAgIQXd1w3TH4AchcGGp6BLgK/jAKBggqhkjOPQQDAzAuMQsw\nCQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQMA4GA1UEAxMHUm9vdCBZRTAeFw0y\nNTA5MDMwMDAwMDBaFw0yODA5MDIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYwFAYD\nVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNZRTEwdjAQBgcqhkjOPQIBBgUr\ngQQAIgNiAAQHZVB1/mimla2hfSurylScjPMZaOJXLz/NnAc2sylm8WDyhU9Ccp+z\nASQi5vSwGGJjSGklkD9fdPR8GpyDIOIjCEfrnbt/v+ZSEPLLEGbaM6EccDbN7p9x\nteIm2Avf+ryjge4wgeswDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUF\nBwMBMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFLsgykcL/tflnPmPCSqj\njDdFsbzYMB8GA1UdIwQYMBaAFKPIJlqOoUzQNWP8myPIOq5W809WMDIGCCsGAQUF\nBwEBBCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL3llLmkubGVuY3Iub3JnLzATBgNV\nHSAEDDAKMAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veWUuYy5s\nZW5jci5vcmcvMAoGCCqGSM49BAMDA2gAMGUCMQDgjUEahFT/h3DRakqiPZpLvPgf\nZwkt6K2EOMmh1nvEzl83eMLYcod4GCl3b0J1Nn0CMBNYmEQJb4CEG5WoOe7aRn/L\nVKu6saHmHEynI7ysIPd8zQsK1HdmhlHKlw9Z5GpGvA\u003d\u003d\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\n6hSW1/IWaas6dg\u003d\u003d\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nTT0mQ/r5XyA4MEAiabn7XJjvCERlF2dcn2wqJw+CreTkkQ2R\n-----END CERTIFICATE-----" }, "client_secret_post": { "client_id": "client_secret_post", "client_secret": "cRZGUg0oa9MoMEOgo5iXRjg9Z0AJaAf97IrP7wURYpk" }, "client2": { "client_id": "client_secret_basic", "client_secret": "FdL-0qSC8oVVy9Vh1Et2Tx7owpdukS643i-NWaysQvY" }, "credential": { "signing_jwk": { "crv": "P-256", "d": "QHT_DquJcR7lgyRJKWObrn9jR-Z6c5XJr8v1IpMnHLw", "ext": true, "key_ops": [ "sign" ], "kty": "EC", "x": "OBSJttHHHSzol8KlF7yPS_dkXJOWgwNLXVJFGnevtK4", "y": "aIRnddtHxT8WBEVpgIbALguRFrNcUU6P8JBtIW5dzaU", "alg": "ES256", "use": "sig", "kid": "codeb-cred-signing-1shj727f" } } }
baseMtlsUrl	https://mtls-www.certification.openid.net/test-mtls/a/codeb-oid4vp-haip-v2
testName	oid4vp-1final-verifier-happy-flow

2026-07-19 01:50:30

(1) More

SUCCESS

OIDCCGenerateServerConfiguration

Generated default server configuration

server_configuration

{
  "issuer": "https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/jwks",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/userinfo",
  "registration_endpoint": "https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "HS256",
    "HS384",
    "HS512",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "preferred_username",
    "gender",
    "birthdate",
    "address",
    "zoneinfo",
    "locale",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified",
    "website",
    "profile",
    "updated_at",
    "txn"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ]
}

2026-07-19 01:50:30

(1) More

OIDCC-6.2

SetRequestUriParameterSupportedToTrueInServerConfiguration

Enabled request_uri support in server configuration

server

{
  "issuer": "https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/",
  "authorization_endpoint": "https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/authorize",
  "token_endpoint": "https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/token",
  "jwks_uri": "https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/jwks",
  "userinfo_endpoint": "https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/userinfo",
  "registration_endpoint": "https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/register",
  "scopes_supported": [
    "openid",
    "phone",
    "profile",
    "email",
    "address",
    "offline_access"
  ],
  "response_types_supported": [
    "code",
    "id_token code",
    "token code id_token",
    "id_token",
    "token id_token",
    "token code",
    "token"
  ],
  "response_modes_supported": [
    "query",
    "fragment",
    "form_post"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "HS256",
    "HS384",
    "HS512",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "grant_types_supported": [
    "authorization_code",
    "implicit"
  ],
  "claims_parameter_supported": true,
  "acr_values_supported": [
    "PASSWORD"
  ],
  "subject_types_supported": [
    "public",
    "pairwise"
  ],
  "claim_types_supported": [
    "normal",
    "aggregated",
    "distributed"
  ],
  "claims_supported": [
    "sub",
    "name",
    "given_name",
    "family_name",
    "middle_name",
    "nickname",
    "preferred_username",
    "gender",
    "birthdate",
    "address",
    "zoneinfo",
    "locale",
    "phone_number",
    "phone_number_verified",
    "email",
    "email_verified",
    "website",
    "profile",
    "updated_at",
    "txn"
  ],
  "id_token_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "id_token_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "id_token_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_object_signing_alg_values_supported": [
    "none",
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "request_object_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "request_object_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "userinfo_signing_alg_values_supported": [
    "RS256",
    "RS384",
    "RS512",
    "PS256",
    "PS384",
    "PS512",
    "ES256",
    "ES256K",
    "ES384",
    "ES512",
    "EdDSA",
    "Ed25519",
    "Ed448"
  ],
  "userinfo_encryption_alg_values_supported": [
    "RSA1_5",
    "RSA-OAEP",
    "RSA-OAEP-256",
    "RSA-OAEP-384",
    "RSA-OAEP-512",
    "ECDH-ES",
    "ECDH-ES+A128KW",
    "ECDH-ES+A192KW",
    "ECDH-ES+A256KW",
    "A128KW",
    "A192KW",
    "A256KW",
    "A128GCMKW",
    "A192GCMKW",
    "A256GCMKW",
    "dir"
  ],
  "userinfo_encryption_enc_values_supported": [
    "A128CBC-HS256",
    "A192CBC-HS384",
    "A256CBC-HS512",
    "A128GCM",
    "A192GCM",
    "A256GCM"
  ],
  "request_uri_parameter_supported": true,
  "require_request_uri_registration": false
}

2026-07-19 01:50:30

(1) More

RegisterClientRequestObjectTrustAnchor

Registered client request object trust anchor certificate

trust_anchor_pem

2026-07-19 01:50:30	SUCCESS OID4VP-1FINAL-5.9.3	EnsureClientRequestObjectTrustAnchorConfigured Request Object Trust Anchor is configured

2026-07-19 01:50:30		oid4vp-1final-verifier-happy-flow Setup Done

2026-07-19 01:50:34

(12) More

INCOMING

oid4vp-1final-verifier-happy-flow

Incoming HTTP request to /test/a/codeb-oid4vp-haip-v2/authorize

incoming_headers	{ "host": "www.certification.openid.net", "sec-ch-ua": "\"Google Chrome\";v\u003d\"149\", \"Chromium\";v\u003d\"149\", \"Not)A;Brand\";v\u003d\"24\"", "sec-ch-ua-mobile": "?0", "sec-ch-ua-platform": "\"Windows\"", "upgrade-insecure-requests": "1", "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36", "accept": "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.7", "sec-fetch-site": "cross-site", "sec-fetch-mode": "navigate", "sec-fetch-user": "?1", "sec-fetch-dest": "document", "accept-encoding": "gzip, deflate, br, zstd", "accept-language": "en-GB,en;q\u003d0.9,en-US;q\u003d0.8,de;q\u003d0.7", "cookie": "_gid\u003dGA1.2.1519654100.1784391516; _ga\u003dGA1.2.1777941607.1784391515; _ga_NF8HNLNJJE\u003dGS2.1.s1784391515$o1$g1$t1784393527$j26$l0$h0; JSESSIONID\u003dE70C083A1BBAF19EB73F190970FD3626", "connection": "close" }
incoming_path	/test/a/codeb-oid4vp-haip-v2/authorize
incoming_body_form_params
incoming_method	GET
incoming_tls_version	TLSv1.2
incoming_tls_cert
incoming_query_string_params	{ "client_id": "x509_hash:rCwVO2yykJ8rJUQrlgaLnfF7UjatGjAlK_Rc4V9BhBs", "request_uri": "https://phone.codeb.io/oidc.ashx?action\u003dvp-request\u0026id\u003d0dZm2Y4RrD3_SeRLM3gB8A" }
incoming_body
incoming_tls_chain	[ "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL", "CONFORMANCE_SUITE_JSON_NULL" ]
incoming_body_json_parse_error
incoming_tls_cipher	ECDHE-RSA-AES128-GCM-SHA256
incoming_body_json

Authorization endpoint

2026-07-19 01:50:34

(1) More

JAR-5.2.3

FetchRequestUriAndExtractRequestObject

Fetching request object from request_uri

request_uri

https://phone.codeb.io/oidc.ashx?action=vp-request&id=0dZm2Y4RrD3_SeRLM3gB8A

2026-07-19 01:50:34

(4) More

FetchRequestUriAndExtractRequestObject

HTTP request

request_uri	https://phone.codeb.io/oidc.ashx?action=vp-request&id=0dZm2Y4RrD3_SeRLM3gB8A
request_method	GET
request_headers	{ "Accept": "text/plain, application/json, application/yaml, application/+json, /*", "Content-Length": "0" }
request_body

2026-07-19 01:50:35

(4) More

RESPONSE

FetchRequestUriAndExtractRequestObject

HTTP response

response_status_code	200 OK
response_status_text	OK
response_headers	{ "cache-control": "private, no-store,no-store, no-cache, must-revalidate, max-age\u003d0", "pragma": "no-cache,no-cache", "content-type": "application/oauth-authz-req+jwt; charset\u003dutf-8", "expires": "0", "x-aspnet-version": "4.0.30319", "referrer-policy": "no-referrer", "x-content-type-options": "nosniff", "permissions-policy": "camera\u003d(self), microphone\u003d(self), display-capture\u003d(self)", "strict-transport-security": "max-age\u003d63072000; includeSubDomains", "date": "Sun, 19 Jul 2026 01:50:34 GMT", "content-length": "3158" }
response_body	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.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.iMcDE1ryIIDs3tZANWf5CpJW5NWwZELhITyKG8ndy8lhGCivkClse-cFY4zM2Og5q3X8LPDEIs_3jPFN0QV3IQ

2026-07-19 01:50:35

(1) More

JAR-5.2.3

FetchRequestUriAndExtractRequestObject

Downloaded request object

request_object

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.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.iMcDE1ryIIDs3tZANWf5CpJW5NWwZELhITyKG8ndy8lhGCivkClse-cFY4zM2Og5q3X8LPDEIs_3jPFN0QV3IQ

2026-07-19 01:50:35

(3) More

SUCCESS

JAR-5.2.3

FetchRequestUriAndExtractRequestObject

Parsed request object

value	eyJhbGciOiJFUzI1NiIsInR5cCI6Im9hdXRoLWF1dGh6LXJlcStqd3QiLCJ4NWMiOlsiTUlJRGlqQ0NBeENnQXdJQkFnSVNCWkpZL0VuUityVkZpN3IwU3puRUIxUG9NQW9HQ0NxR1NNNDlCQU1ETURNeEN6QUpCZ05WQkFZVEFsVlRNUll3RkFZRFZRUUtFdzFNWlhRbmN5QkZibU55ZVhCME1Rd3dDZ1lEVlFRREV3TlpSVEV3SGhjTk1qWXdOekU0TWpBMU1UTXhXaGNOTWpZeE1ERTJNakExTVRNd1dqQVpNUmN3RlFZRFZRUURFdzV3YUc5dVpTNWpiMlJsWWk1cGJ6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJGMGZTVVFXdVIrY2FXamo1YUZMeXN4TVZlcEFXQktmRjRONXgwS2sydmEzTTJ6ZURUVVBwU1VrbHJRUWs3TUdUOVRJbWFNNFUzbEYzR3NtS3dabzJRQ2pnZ0ljTUlJQ0dEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXdEQVlEVlIwVEFRSC9CQUl3QURBZEJnTlZIUTRFRmdRVUpDbWR1ZHhnL3duTTJIK3I1R0hUa0xwdWE2NHdId1lEVlIwakJCZ3dGb0FVdXlES1J3disxK1djK1k4SktxT01OMFd4dk5nd013WUlLd1lCQlFVSEFRRUVKekFsTUNNR0NDc0dBUVVGQnpBQ2hoZG9kSFJ3T2k4dmVXVXhMbWt1YkdWdVkzSXViM0puTHpBWkJnTlZIUkVFRWpBUWdnNXdhRzl1WlM1amIyUmxZaTVwYnpBVEJnTlZIU0FFRERBS01BZ0dCbWVCREFFQ0FUQXZCZ05WSFI4RUtEQW1NQ1NnSXFBZ2hoNW9kSFJ3T2k4dmVXVXhMbU11YkdWdVkzSXViM0puTHpFd05TNWpjbXd3Z2dFTEJnb3JCZ0VFQWRaNUFnUUNCSUg4QklINUFQY0FkUURDTVg1WFJSbWpSZTUvT042eWtFSHJ4OEloV2lLL2Y5VzFyWGFhMlE1U3pRQUFBWjkzTlN2Y0FBQUVBd0JHTUVRQ0lGVzBKKzJkcDI5Ri9Jc2RiOS9Gd3o0T3hWTjhEVktMK1BNNW5VaDBsc0tlQWlBWkpTZzM3T1NwSVdUZVRXL2g5WEZ3NDdGaklFNlU5OXZTM1hWRDFPSzNpQUIrQUNialpHNVlhU0VqdkRRL1J5UTFtemVTelNSYWlOZ1YwNU16L1prWXEwY2pBQUFCbjNjMUtPZ0FDQUFBQlFBcXE4MDFCQU1BUnpCRkFpRUF2S3NPaDJRSUQ1UzM0V3gxMk5lNksrSEFEUjkzRTRxL1BkVmc0SHhOdEpzQ0lFR2V1Y0NzbXV3MnhlUUNMN3I4MXZXeE1zSElVZTJRWCtBcjhsRWphNDlzTUFvR0NDcUdTTTQ5QkFNREEyZ0FNR1VDTUNHaG9KY1puZE9ZUVhCaS9ndGh4S3NvZXdEOXMydDdVY0pJTGlCVW9JcjF0MWt2N1NtRS9yNDZYUHRwWmtnVVJ3SXhBUHhoWjFWU2I4c3BVSVZDMTFITkRHYmVvVURrYjdCWk9xRGp2UDdDRWlCNjg5RmUrL0RMSU9LcXk1UjhWNHBCTGc9PSJdfQ.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.iMcDE1ryIIDs3tZANWf5CpJW5NWwZELhITyKG8ndy8lhGCivkClse-cFY4zM2Og5q3X8LPDEIs_3jPFN0QV3IQ
header	{ "x5c": [ "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\u003d\u003d" ], "typ": "oauth-authz-req+jwt", "alg": "ES256" }
claims	{ "response_uri": "https://phone.codeb.io/oidc.ashx?action\u003dvp-response\u0026id\u003d0dZm2Y4RrD3_SeRLM3gB8A", "aud": "https://self-issued.me/v2", "iss": "x509_hash:rCwVO2yykJ8rJUQrlgaLnfF7UjatGjAlK_Rc4V9BhBs", "response_type": "vp_token", "state": "CPPX0wubTl-EKWrq7OWaIQ", "dcql_query": { "credentials": [ { "id": "eudi_pid", "format": "dc+sd-jwt", "meta": { "vct_values": [ "urn:eu.europa.ec.eudi:pid:1" ] }, "claims": [ { "path": [ "given_name" ] }, { "path": [ "family_name" ] }, { "path": [ "age_over_18" ] } ] } ] }, "exp": 1784426135, "nonce": "jxGkAyyGTPoelxLsaivaPp7PugORFMSQEMOTNIgxHSA", "iat": 1784425835, "client_id": "x509_hash:rCwVO2yykJ8rJUQrlgaLnfF7UjatGjAlK_Rc4V9BhBs", "client_metadata": { "jwks": { "keys": [ { "kty": "EC", "crv": "P-256", "use": "enc", "alg": "ECDH-ES", "x": "KL6ctq09_V768dAFwWSf5jq7sLnqIqifgtgq0lg8oZo", "y": "-8NQKt_Z0Az-gTiWzsU3kUr7YE5UnJn_ka1qKN2Ifbo", "kid": "nPsKtdBr-pg" } ] }, "encrypted_response_enc_values_supported": [ "A128GCM", "A256GCM" ], "vp_formats_supported": { "dc+sd-jwt": { "sd-jwt_alg_values": [ "ES256" ], "kb-jwt_alg_values": [ "ES256" ] } } }, "response_mode": "direct_post.jwt" }

2026-07-19 01:50:35

(1) More

SUCCESS

JAR-5.2

EnsureRequestUriIsHttps

request_uri is a https url

request_uri

https://phone.codeb.io/oidc.ashx?action=vp-request&id=0dZm2Y4RrD3_SeRLM3gB8A

2026-07-19 01:50:35

(1) More

SUCCESS

EnsureRequestUriHasNoFragment

request_uri does not contain a fragment

request_uri

https://phone.codeb.io/oidc.ashx?action=vp-request&id=0dZm2Y4RrD3_SeRLM3gB8A

2026-07-19 01:50:35

(1) More

SUCCESS

ExtractAndValidateX509HashClientId

Client ID matched

client_id

x509_hash:rCwVO2yykJ8rJUQrlgaLnfF7UjatGjAlK_Rc4V9BhBs

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-5

ValidateRequestObjectTypIsOAuthQauthReqJwt

Request object typ header is valid

typ	oauth-authz-req+jwt

2026-07-19 01:50:35

(1) More

SUCCESS

RFC7519-4.1.4

OIDCCValidateRequestObjectExp

Request object contains a valid exp claim, expiry time

exp	"Jul 19, 2026, 1:55:35 AM"

2026-07-19 01:50:35

(1) More

SUCCESS

OIDCC-6.1

ValidateRequestObjectIat

iat claim is valid

iat	1784425835

2026-07-19 01:50:35

(1) More

SUCCESS

OIDCC-13.3

EnsureNumericRequestObjectClaimsAreNotNull

None of the claims expected to have numeric values, have null values

numeric_claims

[
  "max_age"
]

2026-07-19 01:50:35	OIDCC-13.3	ValidateRequestObjectMaxAge Request object does not contain a max_age claim

2026-07-19 01:50:35	SUCCESS OIDCC-6.1	EnsureRequestObjectDoesNotContainRequestOrRequestUri Request object does not contain request or request_uri

2026-07-19 01:50:35	SUCCESS JAR-10.8	EnsureRequestObjectDoesNotContainSubWithClientId Request object does not contain Client Id in sub

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-5

ValidateRequestObjectIssIfPresent

iss claim matches the client id

iss	x509_hash:rCwVO2yykJ8rJUQrlgaLnfF7UjatGjAlK_Rc4V9BhBs

2026-07-19 01:50:35

(3) More

SUCCESS

OID4VP-1FINAL-5.8

ValidateRequestObjectAudForVP

Request object aud claim is valid

aud	https://self-issued.me/v2
expected_self_issued	https://self-issued.me/v2
expected_wallet_issuer	https://www.certification.openid.net/test/a/codeb-oid4vp-haip-v2/

2026-07-19 01:50:35

(3) More

SUCCESS

OID4VP-1FINAL-5.9.3

ValidateRequestObjectSignatureAgainstX5cHeader

Request object x5c chain validated and signature verified

chain_length	1
leaf_cert_subject	CN=phone.codeb.io
request_object_signing_alg	ES256

2026-07-19 01:50:35	SUCCESS	EnsureClientIdInAuthorizationRequestParametersMatchRequestObject client_id http request parameter value matches client_id in request object

2026-07-19 01:50:35

(3) More

INFO

OIDCC-10.2 OIDCC-10.2.1

ValidateEncryptedRequestObjectHasKid

Skipped evaluation due to missing required element: authorization_request_object jwe_header

path	jwe_header
mapped
object	authorization_request_object

2026-07-19 01:50:35	SUCCESS OIDCC-6.2 OIDCC-6.1	EnsureOptionalAuthorizationRequestParametersMatchRequestObject All http request parameters and request object claims match

2026-07-19 01:50:35

(2) More

SUCCESS

CheckForUnexpectedParametersInVpAuthorizationEndpointHttpRequest

All HTTP authorization request parameters are expected

known_params	[ "client_id", "request_uri", "request_uri_method" ]
parameters	[ "client_id", "request_uri" ]

2026-07-19 01:50:35

(1) More

SUCCESS

OIDCC-6.2 OIDCC-6.1

CreateEffectiveAuthorizationRequestParameters

Merged http request parameters with request object claims

effective_authorization_endpoint_request

{
  "client_id": "x509_hash:rCwVO2yykJ8rJUQrlgaLnfF7UjatGjAlK_Rc4V9BhBs",
  "response_uri": "https://phone.codeb.io/oidc.ashx?action\u003dvp-response\u0026id\u003d0dZm2Y4RrD3_SeRLM3gB8A",
  "aud": "https://self-issued.me/v2",
  "iss": "x509_hash:rCwVO2yykJ8rJUQrlgaLnfF7UjatGjAlK_Rc4V9BhBs",
  "response_type": "vp_token",
  "state": "CPPX0wubTl-EKWrq7OWaIQ",
  "dcql_query": {
    "credentials": [
      {
        "id": "eudi_pid",
        "format": "dc+sd-jwt",
        "meta": {
          "vct_values": [
            "urn:eu.europa.ec.eudi:pid:1"
          ]
        },
        "claims": [
          {
            "path": [
              "given_name"
            ]
          },
          {
            "path": [
              "family_name"
            ]
          },
          {
            "path": [
              "age_over_18"
            ]
          }
        ]
      }
    ]
  },
  "exp": 1784426135,
  "nonce": "jxGkAyyGTPoelxLsaivaPp7PugORFMSQEMOTNIgxHSA",
  "iat": 1784425835,
  "client_metadata": {
    "jwks": {
      "keys": [
        {
          "kty": "EC",
          "crv": "P-256",
          "use": "enc",
          "alg": "ECDH-ES",
          "x": "KL6ctq09_V768dAFwWSf5jq7sLnqIqifgtgq0lg8oZo",
          "y": "-8NQKt_Z0Az-gTiWzsU3kUr7YE5UnJn_ka1qKN2Ifbo",
          "kid": "nPsKtdBr-pg"
        }
      ]
    },
    "encrypted_response_enc_values_supported": [
      "A128GCM",
      "A256GCM"
    ],
    "vp_formats_supported": {
      "dc+sd-jwt": {
        "sd-jwt_alg_values": [
          "ES256"
        ],
        "kb-jwt_alg_values": [
          "ES256"
        ]
      }
    }
  },
  "response_mode": "direct_post.jwt"
}

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-5.2

ExtractNonceFromAuthorizationRequest

Extracted nonce

nonce

jxGkAyyGTPoelxLsaivaPp7PugORFMSQEMOTNIgxHSA

2026-07-19 01:50:35	SUCCESS OID4VP-1FINAL-5.2	CheckForInvalidCharsInNonce Nonce contains only URL safe characters

2026-07-19 01:50:35	SUCCESS OID4VP-1FINAL-5.2	VP1FinalCheckNonceMinimumLength Nonce is at least 16 characters. Section 5.2 of OID4VP 1.0 Final does not impose a minimum length; this check flags obviously-too-short nonces that cannot plausibly satisfy the spec's "sufficient entropy" requirement.

2026-07-19 01:50:35

(2) More

SUCCESS

OID4VP-1FINAL-5.2

VP1FinalCheckNonceMaximumLength

Nonce does not exceed 43 characters. Section 5.2 of OID4VP 1.0 Final requires the nonce to be a "fresh, cryptographically random number with sufficient entropy" but does not specify its length. To promote interoperability we expect nonces no longer than 43 characters (the longest the conformance suite itself generates as a verifier when testing a wallet); longer values may not be accepted by all wallets.

length	43
nonce	jxGkAyyGTPoelxLsaivaPp7PugORFMSQEMOTNIgxHSA

2026-07-19 01:50:35

(3) More

SUCCESS

OID4VP-1FINAL-5.2

VP1FinalEnsureMinimumNonceEntropy

Nonce appears to have sufficient entropy. Section 5.2 of OID4VP 1.0 Final requires the nonce to be a "fresh, cryptographically random number with sufficient entropy"; OpenID4VP PR #722 (https://github.com/openid/OpenID4VP/pull/722/changes) recommends at least 128 bits.

actual	205.81960944786323
expected	96.0
value	jxGkAyyGTPoelxLsaivaPp7PugORFMSQEMOTNIgxHSA

2026-07-19 01:50:35

(3) More

INFO

RFC7636-4.3

EnsureAuthorizationRequestContainsPkceCodeChallenge

Skipped evaluation due to missing required element: effective_authorization_endpoint_request code_challenge

path	code_challenge
mapped
object	effective_authorization_endpoint_request

2026-07-19 01:50:35

(1) More

SUCCESS

EnsureResponseTypeIsVpToken

Response type is expected value

expected

vp_token

2026-07-19 01:50:35	SUCCESS	ValidateResponseMode response_mode is direct_post.jwt

2026-07-19 01:50:35	SUCCESS	CheckNoClientIdSchemeParameter client_id_scheme parameter is not present, as expected.

2026-07-19 01:50:35	SUCCESS OID4VP-1FINAL-5.1	CheckNoScopeParameter scope parameter is not present, as expected.

2026-07-19 01:50:35	SUCCESS OID4VP-1FINAL-5.1	CheckRequestUriMethodParameter request_uri_method parameter is not present.

2026-07-19 01:50:35

(1) More

INFO

OID4VP-1FINAL-5.1

WarnIfRequestUriMethodInRequestObject

Skipped evaluation due to missing required string: authorization_request_object

expected

authorization_request_object

2026-07-19 01:50:35

(1) More

INFO

OID4VP-1FINAL-5.10

EnsureNoWalletNonceInRequestObject

Skipped evaluation due to missing required string: authorization_request_object

expected

authorization_request_object

2026-07-19 01:50:35

(2) More

SUCCESS

CheckForUnexpectedParametersInVpAuthorizationRequest

All authorization parameters are expected

known_params

[
  "presentation_definition",
  "dcql_query",
  "client_id",
  "client_id_scheme",
  "response_uri",
  "client_metadata",
  "nonce",
  "state",
  "response_type",
  "response_mode",
  "verifier_info",
  "scope",
  "request_uri_method",
  "wallet_nonce",
  "aud",
  "iss",
  "iat",
  "nbf",
  "exp",
  "jti"
]

parameters

[
  "client_id",
  "response_uri",
  "aud",
  "iss",
  "response_type",
  "state",
  "dcql_query",
  "exp",
  "nonce",
  "iat",
  "client_metadata",
  "response_mode"
]

2026-07-19 01:50:35	SUCCESS OID4VP-1FINAL-5 OID4VP-1FINAL-5.1 OID4VP-1FINAL-8.4	CheckNoTransactionDataInVpAuthorizationRequest Authorization request does not contain transaction_data

2026-07-19 01:50:35

(3) More

INFO

OID4VP-1FINAL-5.1

ExtractVerifierInfoFromAuthorizationRequest

Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info

path	verifier_info
mapped
object	effective_authorization_endpoint_request

2026-07-19 01:50:35

(3) More

INFO

OID4VP-1FINAL-5.1

ValidateVerifierInfo

Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info

path	verifier_info
mapped
object	effective_authorization_endpoint_request

2026-07-19 01:50:35

(3) More

INFO

OID4VP-1FINAL-5.1

CheckForUnexpectedParametersInVerifierInfo

Skipped evaluation due to missing required element: effective_authorization_endpoint_request verifier_info

path	verifier_info
mapped
object	effective_authorization_endpoint_request

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-8.2

EnsureValidResponseUriForAuthorizationEndpointRequest

response_uri is valid https url with no fragment

actual

https://phone.codeb.io/oidc.ashx?action=vp-response&id=0dZm2Y4RrD3_SeRLM3gB8A

2026-07-19 01:50:35	SUCCESS OID4VP-1FINAL-8.2	CheckNoRedirectUriInVpAuthorizationRequest Authorization request does not contain 'redirect_uri'

2026-07-19 01:50:35	SUCCESS	CheckNoPresentationDefinitionInVpAuthorizationRequest Authorization request does not contain presentation_definition or presentation_definition_uri

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-5.1

VP1FinalCheckForUnexpectedParametersInVpClientMetadata

All client_metadata parameters are expected

parameters

[
  "jwks",
  "encrypted_response_enc_values_supported",
  "vp_formats_supported"
]

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINALA-B.2.2 OID4VP-1FINALA-B.3.4

VP1FinalValidateVpFormatsSupportedInClientMetadata

vp_formats_supported contains valid dc+sd-jwt format

dc+sd-jwt

{
  "sd-jwt_alg_values": [
    "ES256"
  ],
  "kb-jwt_alg_values": [
    "ES256"
  ]
}

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-5.1

VP1FinalCheckForKeyIdInClientMetadataJWKs

All keys in client_metadata.jwks have unique kid values

jwks

{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "use": "enc",
      "alg": "ECDH-ES",
      "x": "KL6ctq09_V768dAFwWSf5jq7sLnqIqifgtgq0lg8oZo",
      "y": "-8NQKt_Z0Az-gTiWzsU3kUr7YE5UnJn_ka1qKN2Ifbo",
      "kid": "nPsKtdBr-pg"
    }
  ]
}

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-8.3

VP1FinalValidateClientMetadataJwksForEncryptedResponse

client_metadata.jwks contains valid encryption key(s) with alg

jwks

{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "use": "enc",
      "alg": "ECDH-ES",
      "x": "KL6ctq09_V768dAFwWSf5jq7sLnqIqifgtgq0lg8oZo",
      "y": "-8NQKt_Z0Az-gTiWzsU3kUr7YE5UnJn_ka1qKN2Ifbo",
      "kid": "nPsKtdBr-pg"
    }
  ]
}

Validate the JWK set in client_metadata

2026-07-19 01:50:35

(1) More

SUCCESS

MapJwksToValidationLocation

Selected the JWK set in client_metadata for validation

jwks

{
  "keys": [
    {
      "kty": "EC",
      "crv": "P-256",
      "use": "enc",
      "alg": "ECDH-ES",
      "x": "KL6ctq09_V768dAFwWSf5jq7sLnqIqifgtgq0lg8oZo",
      "y": "-8NQKt_Z0Az-gTiWzsU3kUr7YE5UnJn_ka1qKN2Ifbo",
      "kid": "nPsKtdBr-pg"
    }
  ]
}

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-5.1

EnsureJwksHasNoPrivateOrSymmetricKeyMaterial

The JWK set in client_metadata contains only public key material

jwks_source

client_metadata

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-5.1

ValidateJwksStructure

The JWK set in client_metadata is structurally valid

jwks_source

client_metadata

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-5.1

ParseUsableJwksKeys

All usable keys in the JWK set in client_metadata parse successfully

jwks_source

client_metadata

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-5.1

WarnOnUnusableJwksKeys

All keys in the JWK set in client_metadata use a supported key type, curve and algorithm

jwks_source

client_metadata

2026-07-19 01:50:35

(1) More

SUCCESS

HAIP-5-5 OID4VP-1FINAL-8.3

ValidateVpClientMetadataEncryptionForHaip

client_metadata encryption parameters satisfy HAIP & OID4VP requirements

encrypted_response_enc_values_supported

[
  "A128GCM",
  "A256GCM"
]

2026-07-19 01:50:35

(1) More

SUCCESS

HAIP-5-5 OID4VP-1FINAL-8.3

VP1FinalCheckEncryptionKeyNotReused

Verifier response-encryption key(s) were not seen in a previous Authorization Request

jwk_thumbprints

[
  "EOw_1Lj-1bcNN5piTnJfFt_QrkcpYumM3M-G5IT83VM"
]

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-6

ExtractDCQLQueryFromAuthorizationRequest

Extracted dcql_query from authorization request

dcql

{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eu.europa.ec.eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        },
        {
          "path": [
            "age_over_18"
          ]
        }
      ]
    }
  ]
}

2026-07-19 01:50:35

(2) More

SUCCESS

OID4VP-1FINAL-6

ValidateDCQLQuery

DCQL query input is valid

input

{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eu.europa.ec.eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        },
        {
          "path": [
            "age_over_18"
          ]
        }
      ]
    }
  ]
}

schema_link

/json-schemas/oid4vp/dcql_request.json

2026-07-19 01:50:35

(2) More

SUCCESS

OID4VP-1FINAL-6

CheckForUnexpectedParametersInDcqlQuery

DCQL query input is valid

input

{
  "credentials": [
    {
      "id": "eudi_pid",
      "format": "dc+sd-jwt",
      "meta": {
        "vct_values": [
          "urn:eu.europa.ec.eudi:pid:1"
        ]
      },
      "claims": [
        {
          "path": [
            "given_name"
          ]
        },
        {
          "path": [
            "family_name"
          ]
        },
        {
          "path": [
            "age_over_18"
          ]
        }
      ]
    }
  ]
}

schema_link

/json-schemas/oid4vp/dcql_request.json

2026-07-19 01:50:35

(2) More

SUCCESS

CheckDCQLQueryCredentialFormatMatchesTestConfiguration

DCQL query credential format matches test configuration

expected_format	dc+sd-jwt
credential_count	1

2026-07-19 01:50:35

(1) More

SUCCESS

CreateAuthorizationEndpointResponseParams

Added authorization_endpoint_response_params to environment

params

{
  "state": "CPPX0wubTl-EKWrq7OWaIQ"
}

2026-07-19 01:50:35

(3) More

CreateSdJwtKbCredential

Filtered SD-JWT disclosures to DCQL requested claims

filtered_disclosures	2
requested_claims	[ "age_over_18", "given_name", "family_name" ]
total_disclosures	7

2026-07-19 01:50:35

(1) More

CreateSdJwtKbCredential

Created an SD-JWT+KB

sdjwt

eyJ0eXAiOiJkYytzZC1qd3QiLCJhbGciOiJFUzI1NiJ9.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.7eaY2aNSisxAR5S5ujVJiX87kptMhLeOYlTk24dEG_77quYZqz-DVhJiYLEwI5vqr7c4BSBRsIZ7vGUXL9OE0A~WyJYMGQ1c3Q4UV9jRmxsN2xWWFlYX0ZRIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~WyI2bnE2d2R6d1JKNEVPMGpXQVdhaEpnIiwiZmFtaWx5X25hbWUiLCJEdXBvbnQiXQ~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJzZF9oYXNoIjoiVjcwVUlVUFVvaGtmV1Qtb0lpY2ZyT0g2SDRuUG1pOHEzMExCeE8tYUI4cyIsImF1ZCI6Ing1MDlfaGFzaDpyQ3dWTzJ5eWtKOHJKVVFybGdhTG5mRjdVamF0R2pBbEtfUmM0VjlCaEJzIiwiaWF0IjoxNzg0NDI1ODM1LCJub25jZSI6Imp4R2tBeXlHVFBvZWx4THNhaXZhUHA3UHVnT1JGTVNRRU1PVE5JZ3hIU0EifQ.R7bTD_6Ze42ZTEfd2nEimvLl5GZg_-yV2y_e0mIHta_yx0GJAo1Ju3PERvp2i57K_1mki0ai644Hy1RwnwlFQQ

2026-07-19 01:50:35

(1) More

SUCCESS

OID4VP-1FINAL-8.1

AddVP1FinalDCQLVPTokenToAuthorizationEndpointResponseParams

Added credential in DCQL 'vp_token' authorization endpoint response parameter

authorization_endpoint_response_params

{
  "state": "CPPX0wubTl-EKWrq7OWaIQ",
  "vp_token": {
    "eudi_pid": [
      "eyJ0eXAiOiJkYytzZC1qd3QiLCJhbGciOiJFUzI1NiJ9.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.7eaY2aNSisxAR5S5ujVJiX87kptMhLeOYlTk24dEG_77quYZqz-DVhJiYLEwI5vqr7c4BSBRsIZ7vGUXL9OE0A~WyJYMGQ1c3Q4UV9jRmxsN2xWWFlYX0ZRIiwiZ2l2ZW5fbmFtZSIsIkplYW4iXQ~WyI2bnE2d2R6d1JKNEVPMGpXQVdhaEpnIiwiZmFtaWx5X25hbWUiLCJEdXBvbnQiXQ~eyJ0eXAiOiJrYitqd3QiLCJhbGciOiJFUzI1NiJ9.eyJzZF9oYXNoIjoiVjcwVUlVUFVvaGtmV1Qtb0lpY2ZyT0g2SDRuUG1pOHEzMExCeE8tYUI4cyIsImF1ZCI6Ing1MDlfaGFzaDpyQ3dWTzJ5eWtKOHJKVVFybGdhTG5mRjdVamF0R2pBbEtfUmM0VjlCaEJzIiwiaWF0IjoxNzg0NDI1ODM1LCJub25jZSI6Imp4R2tBeXlHVFBvZWx4THNhaXZhUHA3UHVnT1JGTVNRRU1PVE5JZ3hIU0EifQ.R7bTD_6Ze42ZTEfd2nEimvLl5GZg_-yV2y_e0mIHta_yx0GJAo1Ju3PERvp2i57K_1mki0ai644Hy1RwnwlFQQ"
    ]
  }
}

2026-07-19 01:50:35

(7) More

VP1FinalEncryptVPResponse

Encrypted the response

authorization_encrypted_response_alg	ECDH-ES
authorization_encrypted_response_enc	A128GCM
response	eyJlcGsiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJBaWFqWjhFUng3WThvX1hnbEo0ZWIyM0JCLTUwcjRxWHZOVmJrQXc1TVJNIiwieSI6InhMOFUzM0g5Nm9SdW04engyLVhjeFBMcUxsdnZkQ01jMlBOT2RmWkkwb00ifSwiYXB2IjoiUmxsM1lsTkdhM0ZxYkZSRVJ6bHRjQSIsImtpZCI6Im5Qc0t0ZEJyLXBnIiwiYXB1IjoiZVRoMVFXUnlRblJXZEdaR2NrdHVSQSIsImN0eSI6Impzb24iLCJlbmMiOiJBMTI4R0NNIiwiYWxnIjoiRUNESC1FUyJ9..NS9zM8qz8-u9MD4U._M4x_ZY1fhPmhQtYHzcejRiaKOUbm26bi-EDvwHYaP7wU4vElukTMwOh4mqO0GBzw_vQvOJVvPcpWHWJX493pUoQaQe8NKG4tFqwOOtdNLRLMrm7U-HJL2YNTDxuTvODYSLaCnun88iyT2wOWPxJ0-VrF0Tzp_QxIezKf2h1kKSQ0WS6mR1NIwIAv3KcBc2XKLL_OaUg9_iA02YIM3J0yXNd8UCC7FJlShWAPZWH9q6cqWG4OmDv1JMG_W5NRaHTib0x3fL_CKZPZ2AM6HTVe7g0FiN7Y5vSlYD8LpYJbt8eF2YxstGYVDAMU5v5u6T1YgLfu1tA6AziDG5OWX6oRLiaItxcsr4Jfc8JqiY8PWm-zwSljOAPiQhDZXJtA_VvSWVQaA791e4SMn54xa9HvrDPFbpPnZTMcfDZswAXhLrLYBTBCi9E5cJWSC9sOU2qDWU8OmDRYVVr1M1GM854yDQ1fAleYreVm_PHJaJlutB6DVVV9yCo7VRSyK-70k38rnW4sxVtcfP9feY0cvjtZr8PENDn4U6bBUe88XqITExFP8mCSOaP_Sq2VRjYhU6r_KLqogN7Nz5kTs4O9EHAm70YK-htlDqs4e9O-qGmDnjtodUA1IYWXZDWEmMO1D1RrmXNCRo9ATkWqxbzvXQlqaTW-bS6cB2M7sjAg-ORuOvhEBR5WrrOfz9GpTN6Rp_fijSdYUaiBz47VRf8uQuCV9IuLyorWJIjALV04jrWtYKq8yWOgWOKCR5abGpm8w5PAclv_72Knvz4OWL3ecSgKuOtE8bAzQspIk4odofMEfiqneK1yCA58Ipi9mfbs75doWIEWa-Bz7-Ls0WjnId9gqTvOYGfFNguEB0ihVQ4apuz03KWktbwJEUj72VO7mzqHaGbAhE-GTZHyIE2KagG6JJbx04HY952oIx5BuqVQtCF-MDmJLOtVgAi5521SE-Mfl3g2wTOVQSLUUlSGDNefYVaAr1JmooIhoJlaZstZx_P6EqwviRQfjarvitdrR2BqyddSnL2Jt8_UrHWuB9k9NTdE5nn-xHAWDbXe4mFZCjIjoEyxUw9GbMnufgI18YMpNYT3fhMIG_7R5De6NyeYJtoP5JosMfKTZ_E_KSNo4ZYxvN4XW3N6atU4XisMYew0UeCDDVv6h-TLmjPPwNyHRh5SipnHXuMxewQdEVUFsiz2h1IojXLscwp309C8r7tX1i-XKfhocePAnmzTgrCOIchI683FCU4mlid64sRl5wAu5VVuJk3nLocuB6Oqn-VpFG2P4GsC7erkz8wPiHhfW-cJWWe5XhQ69vU268Vx7l0aanUkX9D5G-gXGf66Pg9ybocqmVp64hPY0L-uaV_7hfrbDuZyINGHlBSiyFXCTfWUH6Hs-XqAjQHQijaq0q4fLlh4keG20UvgwlIkd_AG3wCRjx_zCoJgRWUKiuViMjgmbcCrVPNwAMjE6ycj98Ir0IvhkDYGg62UaKIp1aTG4SpddAjaP4wnpjReMuPUppT8FeFT3gnjIO_CJDGshOpSbY6IXeWcMjEK-x3qKajyZSu7YuLE1ly0X1o6q7hLtseD_dv_CAX-IjbtLVeU8D9QY4v00sjAzvV4SXeKTA-fRaAjsPYskLce_rGRGKvGKBsWLBpmJ7Epe7o8N_jxp5a0UTskpHfhxGUQx3jvdEWXsT94q9hi6uKN_3B3JT_dXap8BzndhES6At7penoxbUcz9G6M8JHX2PHTuRowYnLxBXFYKfUVHRzz34ps0Uqk42wpYnMaO0QvpFOr1Kpswdt_gifp3SGn8JxnaImNb45WGhM72WZVRp0duQBR33MWWjKmBLX5k42pZxUOE_legpsVhOyt8nZC3dc0y-wo8vOEmWmsgeDZQu2PxBFkgLs-tDv1S-ce8yB0AnKwQzNQf8_-QYuZBFbLutiKdE-jDMX92cHZKycePyAPsQ3IR8D8l5CBEQhCpVUJdwf8N8ObG-DdfTB97NAHX2atv6leOBoWmoj6NEapVIVNsda8Cti5IcW15eALQUc4VGGn9Oxo9jXYsO9LbF7HCRaaUoJW3R7Hsuko59N3A01HfGbvGHJo9jUF0ew.wcl1W_nMPJ-NSjDQfQSnjQ
apv	FYwbSFkqjlTDG9mp
apu	y8uAdrBtVtfFrKnD
apv_b64	{ "value": "Rll3YlNGa3FqbFRERzltcA" }
apu_b64	{ "value": "eTh1QWRyQnRWdGZGcktuRA" }

2026-07-19 01:50:35

(4) More

CallDirectPostEndpoint

HTTP request

request_uri	https://phone.codeb.io/oidc.ashx?action=vp-response&id=0dZm2Y4RrD3_SeRLM3gB8A
request_method	POST
request_headers	{ "Accept": "application/json", "Content-Type": "application/x-www-form-urlencoded", "Content-Length": "2495" }
request_body	response=eyJlcGsiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJBaWFqWjhFUng3WThvX1hnbEo0ZWIyM0JCLTUwcjRxWHZOVmJrQXc1TVJNIiwieSI6InhMOFUzM0g5Nm9SdW04engyLVhjeFBMcUxsdnZkQ01jMlBOT2RmWkkwb00ifSwiYXB2IjoiUmxsM1lsTkdhM0ZxYkZSRVJ6bHRjQSIsImtpZCI6Im5Qc0t0ZEJyLXBnIiwiYXB1IjoiZVRoMVFXUnlRblJXZEdaR2NrdHVSQSIsImN0eSI6Impzb24iLCJlbmMiOiJBMTI4R0NNIiwiYWxnIjoiRUNESC1FUyJ9..NS9zM8qz8-u9MD4U._M4x_ZY1fhPmhQtYHzcejRiaKOUbm26bi-EDvwHYaP7wU4vElukTMwOh4mqO0GBzw_vQvOJVvPcpWHWJX493pUoQaQe8NKG4tFqwOOtdNLRLMrm7U-HJL2YNTDxuTvODYSLaCnun88iyT2wOWPxJ0-VrF0Tzp_QxIezKf2h1kKSQ0WS6mR1NIwIAv3KcBc2XKLL_OaUg9_iA02YIM3J0yXNd8UCC7FJlShWAPZWH9q6cqWG4OmDv1JMG_W5NRaHTib0x3fL_CKZPZ2AM6HTVe7g0FiN7Y5vSlYD8LpYJbt8eF2YxstGYVDAMU5v5u6T1YgLfu1tA6AziDG5OWX6oRLiaItxcsr4Jfc8JqiY8PWm-zwSljOAPiQhDZXJtA_VvSWVQaA791e4SMn54xa9HvrDPFbpPnZTMcfDZswAXhLrLYBTBCi9E5cJWSC9sOU2qDWU8OmDRYVVr1M1GM854yDQ1fAleYreVm_PHJaJlutB6DVVV9yCo7VRSyK-70k38rnW4sxVtcfP9feY0cvjtZr8PENDn4U6bBUe88XqITExFP8mCSOaP_Sq2VRjYhU6r_KLqogN7Nz5kTs4O9EHAm70YK-htlDqs4e9O-qGmDnjtodUA1IYWXZDWEmMO1D1RrmXNCRo9ATkWqxbzvXQlqaTW-bS6cB2M7sjAg-ORuOvhEBR5WrrOfz9GpTN6Rp_fijSdYUaiBz47VRf8uQuCV9IuLyorWJIjALV04jrWtYKq8yWOgWOKCR5abGpm8w5PAclv_72Knvz4OWL3ecSgKuOtE8bAzQspIk4odofMEfiqneK1yCA58Ipi9mfbs75doWIEWa-Bz7-Ls0WjnId9gqTvOYGfFNguEB0ihVQ4apuz03KWktbwJEUj72VO7mzqHaGbAhE-GTZHyIE2KagG6JJbx04HY952oIx5BuqVQtCF-MDmJLOtVgAi5521SE-Mfl3g2wTOVQSLUUlSGDNefYVaAr1JmooIhoJlaZstZx_P6EqwviRQfjarvitdrR2BqyddSnL2Jt8_UrHWuB9k9NTdE5nn-xHAWDbXe4mFZCjIjoEyxUw9GbMnufgI18YMpNYT3fhMIG_7R5De6NyeYJtoP5JosMfKTZ_E_KSNo4ZYxvN4XW3N6atU4XisMYew0UeCDDVv6h-TLmjPPwNyHRh5SipnHXuMxewQdEVUFsiz2h1IojXLscwp309C8r7tX1i-XKfhocePAnmzTgrCOIchI683FCU4mlid64sRl5wAu5VVuJk3nLocuB6Oqn-VpFG2P4GsC7erkz8wPiHhfW-cJWWe5XhQ69vU268Vx7l0aanUkX9D5G-gXGf66Pg9ybocqmVp64hPY0L-uaV_7hfrbDuZyINGHlBSiyFXCTfWUH6Hs-XqAjQHQijaq0q4fLlh4keG20UvgwlIkd_AG3wCRjx_zCoJgRWUKiuViMjgmbcCrVPNwAMjE6ycj98Ir0IvhkDYGg62UaKIp1aTG4SpddAjaP4wnpjReMuPUppT8FeFT3gnjIO_CJDGshOpSbY6IXeWcMjEK-x3qKajyZSu7YuLE1ly0X1o6q7hLtseD_dv_CAX-IjbtLVeU8D9QY4v00sjAzvV4SXeKTA-fRaAjsPYskLce_rGRGKvGKBsWLBpmJ7Epe7o8N_jxp5a0UTskpHfhxGUQx3jvdEWXsT94q9hi6uKN_3B3JT_dXap8BzndhES6At7penoxbUcz9G6M8JHX2PHTuRowYnLxBXFYKfUVHRzz34ps0Uqk42wpYnMaO0QvpFOr1Kpswdt_gifp3SGn8JxnaImNb45WGhM72WZVRp0duQBR33MWWjKmBLX5k42pZxUOE_legpsVhOyt8nZC3dc0y-wo8vOEmWmsgeDZQu2PxBFkgLs-tDv1S-ce8yB0AnKwQzNQf8_-QYuZBFbLutiKdE-jDMX92cHZKycePyAPsQ3IR8D8l5CBEQhCpVUJdwf8N8ObG-DdfTB97NAHX2atv6leOBoWmoj6NEapVIVNsda8Cti5IcW15eALQUc4VGGn9Oxo9jXYsO9LbF7HCRaaUoJW3R7Hsuko59N3A01HfGbvGHJo9jUF0ew.wcl1W_nMPJ-NSjDQfQSnjQ

2026-07-19 01:50:36

(4) More

RESPONSE

CallDirectPostEndpoint

HTTP response

response_status_code	200 OK
response_status_text	OK
response_headers	{ "cache-control": "private, no-store,no-store, no-cache, must-revalidate, max-age\u003d0", "pragma": "no-cache", "content-type": "application/json; charset\u003dutf-8", "expires": "0", "x-aspnet-version": "4.0.30319", "referrer-policy": "no-referrer", "x-content-type-options": "nosniff", "permissions-policy": "camera\u003d(self), microphone\u003d(self), display-capture\u003d(self)", "strict-transport-security": "max-age\u003d63072000; includeSubDomains", "date": "Sun, 19 Jul 2026 01:50:35 GMT", "content-length": "32" }
response_body	{"redirect_uri":"/account.html"}

2026-07-19 01:50:36

(5) More

SUCCESS

CallDirectPostEndpoint

Parsed response uri endpoint response

status	200
endpoint_name	https://phone.codeb.io/oidc.ashx?action=vp-response&id=0dZm2Y4RrD3_SeRLM3gB8A
headers	{ "cache-control": "private, no-store,no-store, no-cache, must-revalidate, max-age\u003d0", "pragma": "no-cache", "content-type": "application/json; charset\u003dutf-8", "expires": "0", "x-aspnet-version": "4.0.30319", "referrer-policy": "no-referrer", "x-content-type-options": "nosniff", "permissions-policy": "camera\u003d(self), microphone\u003d(self), display-capture\u003d(self)", "strict-transport-security": "max-age\u003d63072000; includeSubDomains", "date": "Sun, 19 Jul 2026 01:50:35 GMT", "content-length": "32" }
body	{"redirect_uri":"/account.html"}
body_json	{ "redirect_uri": "/account.html" }

2026-07-19 01:50:36

(2) More

SUCCESS

OID4VP-1FINAL-8.2

EnsureHttpStatusCodeIs200

https://phone.codeb.io/oidc.ashx?action=vp-response&id=0dZm2Y4RrD3_SeRLM3gB8A endpoint returned the expected http status

http_status	200
expected_status	200

2026-07-19 01:50:36	SUCCESS OID4VP-1FINAL-8.2	EnsureContentTypeJson endpoint_response Content-Type: header is application/json

2026-07-19 01:50:36	SUCCESS OID4VP-1FINAL-8.2	ValidateDirectPostResponse Direct post response contains only 'redirect_uri'.

2026-07-19 01:50:36

(1) More

SUCCESS

OID4VP-1FINAL-8.2

ValidateDirectPostResponseRedirectUriWhenPresent

redirect_uri in direct_post response body is a non-empty string

redirect_uri

/account.html

2026-07-19 01:50:36

(1) More

SUCCESS

HAIP-5.1

VP1FinalEnsureDirectPostResponseHasRedirectUriForHaip

Verifier included redirect_uri in the response to the wallet's POST

redirect_uri

/account.html

2026-07-19 01:50:36

(2) More

OUTGOING

oid4vp-1final-verifier-happy-flow

Response to HTTP request to test instance 37dSrF4Cca83809

outgoing	org.springframework.web.servlet.view.RedirectView: [RedirectView]; URL [/account.html]
outgoing_path	authorize

2026-07-19 01:50:36

(1) More

FINISHED

oid4vp-1final-verifier-happy-flow

Test has run to completion

testmodule_result

PASSED

2026-07-19 01:50:46

(2) More

TEST-RUNNER

Alias has now been claimed by another test

alias	codeb-oid4vp-haip-v2
new_test_id	o7GHToYczfembuI

Test Summary

Test Results