authlete 1.2.0 → 1.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. checksums.yaml +4 -4
  2. data/lib/authlete/model/client.rb +173 -144
  3. data/lib/authlete/model/service.rb +251 -216
  4. data/lib/authlete/version.rb +1 -1
  5. data/test/authlete/model/test_client-extension.rb +0 -2
  6. data/test/authlete/model/test_client.rb +416 -388
  7. data/test/authlete/model/test_named-uri.rb +0 -2
  8. data/test/authlete/model/test_pair.rb +0 -2
  9. data/test/authlete/model/test_property.rb +0 -2
  10. data/test/authlete/model/test_scope.rb +1 -3
  11. data/test/authlete/model/test_service.rb +477 -446
  12. metadata +2 -2
data/test/authlete/model/test_named-uri.rb CHANGED
@@ -46,8 +46,6 @@ class NamedUriTest < Minitest::Test
46
46
  def set_params(obj)
47
47
  obj.name = NAME
48
48
  obj.uri = URI
49
-
50
- obj
51
49
  end
52
50
 
53
51
 
data/test/authlete/model/test_pair.rb CHANGED
@@ -46,8 +46,6 @@ class PairTest < Minitest::Test
46
46
  def set_params(obj)
47
47
  obj.key = KEY
48
48
  obj.value = VALUE
49
-
50
- obj
51
49
  end
52
50
 
53
51
 
data/test/authlete/model/test_property.rb CHANGED
@@ -50,8 +50,6 @@ class PropertyTest < Minitest::Test
50
50
  obj.key = KEY
51
51
  obj.value = VALUE
52
52
  obj.hidden = HIDDEN
53
-
54
- obj
55
53
  end
56
54
 
57
55
 
data/test/authlete/model/test_scope.rb CHANGED
@@ -62,8 +62,6 @@ class ScopeTest < Minitest::Test
62
62
  obj.description = DESCRIPTION
63
63
  obj.descriptions = DESCRIPTIONS
64
64
  obj.attributes = ATTRIBUTES
65
-
66
- obj
67
65
  end
68
66
 
69
67
 
@@ -97,7 +95,7 @@ class ScopeTest < Minitest::Test
97
95
 
98
96
  def test_to_hash
99
97
  obj = Authlete::Model::Scope.new
100
- obj = set_params(obj)
98
+ set_params(obj)
101
99
  actual = obj.to_hash
102
100
  expected = generate_hash
103
101
 
data/test/authlete/model/test_service.rb CHANGED
@@ -21,235 +21,249 @@ require 'minitest/autorun'
21
21
 
22
22
 
23
23
  class ServiceTest < Minitest::Test
24
- NUMBER = 1000
25
- SERVICE_OWNER_NUMBER = 12345
26
- SERVICE_NAME = '<service-name>'
27
- API_KEY = '<api-key>'
28
- API_SECRET = '<api-secret>'
29
- ISSUER = '<issuer>'
30
- AUTHORIZATION_ENDPOINT = '<authorization-endpoint>'
31
- TOKEN_ENDPOINT = '<token-endpoint>'
32
- REVOCATION_ENDPOINT = '<revocation-endpoint>'
33
- SUPPORTED_REVOCATION_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
34
- USER_INFO_ENDPOINT = '<user-info-endpoint>'
35
- JWKS_URI = '<jwks-uri>'
36
- JWKS = '<jwks>'
37
- REGISTRATION_ENDPOINT = '<registration-endpoint>'
38
- REGISTRATION_MANAGEMENT_ENDPOINT = '<registration-management-endpoint>'
39
- SUPPORTED_SCOPE_NAME = 'scope0'
40
- SUPPORTED_SCOPE_DESCRIPTION = '<scope0-description>'
41
- SUPPORTED_SCOPES = [ Authlete::Model::Scope.new(name: SUPPORTED_SCOPE_NAME, description: SUPPORTED_SCOPE_DESCRIPTION) ]
42
- SUPPORTED_RESPONSE_TYPES = [ 'NONE', 'CODE', 'TOKEN', 'ID_TOKEN' ]
43
- SUPPORTED_GRANT_TYPES = [ 'AUTHORIZATION_CODE', 'REFRESH_TOKEN' ]
44
- SUPPORTED_ACRS = [ '<supported-acr0>', '<supported-acr1>' ]
45
- SUPPORTED_TOKEN_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
46
- SUPPORTED_DISPLAYS = [ 'PAGE', 'POPUP', 'TOUCH', 'WAP' ]
47
- SUPPORTED_CLAIM_TYPES = [ 'NORMAL' ]
48
- SUPPORTED_CLAIMS = [ '<supported-claim0>', '<supported-claim1>' ]
49
- SERVICE_DOCUMENTATION = '<service-documentation>'
50
- SUPPORTED_CLAIM_LOCALES = [ 'en-US' ]
51
- SUPPORTED_UI_LOCALES = [ 'en-US' ]
52
- POLICY_URI = '<policy-uri>'
53
- TOS_URI = '<tos-uri>'
54
- AUTHENTICATION_CALLBACK_ENDPOINT = '<authentication-callback-endpoint>'
55
- AUTHENTICATION_CALLBACK_API_KEY = '<authentication-callback-api-key>'
56
- AUTHENTICATION_CALLBACK_API_SECRET = '<authentication-callback-api-secret>'
57
- SUPPORTED_SNSES = [ 'FACEBOOK' ]
58
- SNS_CREDENTIALS_SNS = 'FACEBOOK'
59
- SNS_CREDENTIALS_API_KEY = '<sns-credentials0-api-key>'
60
- SNS_CREDENTIALS_API_SECRET = '<sns-credentials0-api-secret>'
61
- SNS_CREDENTIALS = [ Authlete::Model::SnsCredentials.new(sns: SNS_CREDENTIALS_SNS, apiKey: SNS_CREDENTIALS_API_KEY, apiSecret: SNS_CREDENTIALS_API_SECRET) ]
62
- CREATED_AT = 10000
63
- MODIFIED_AT = 10000
64
- DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT = '<developer-authentication-callback-endpoint>'
65
- DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY = '<developer-authentication-callback-api-key>'
66
- DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET = '<developer-authentication-callback-api-secret>'
67
- SUPPORTED_DEVELOPER_SNSES = [ 'FACEBOOK' ]
68
- DEVELOPER_SNS_CREDENTIALS_SNS = 'FACEBOOK'
69
- DEVELOPER_SNS_CREDENTIALS_API_KEY = '<developer-sns-credentials0-api-key>'
70
- DEVELOPER_SNS_CREDENTIALS_API_SECRET = '<developer-sns-credentials0-api-secret>'
71
- DEVELOPER_SNS_CREDENTIALS = [ Authlete::Model::SnsCredentials.new(sns: DEVELOPER_SNS_CREDENTIALS_SNS, apiKey: DEVELOPER_SNS_CREDENTIALS_API_KEY, apiSecret: DEVELOPER_SNS_CREDENTIALS_API_SECRET) ]
72
- CLIENTS_PER_DEVELOPER = 10
73
- DIRECT_AUTHORIZATION_ENDPOINT_ENABLED = true
74
- DIRECT_TOKEN_ENDPOINT_ENABLED = true
75
- DIRECT_REVOCATION_ENDPOINT_ENABLED = true
76
- DIRECT_USER_INFO_ENDPOINT_ENABLED = true
77
- DIRECT_JWKS_ENDPOINT_ENABLED = true
78
- DIRECT_INTROSPECTION_ENDPOINT_ENABLED = true
79
- SINGLE_ACCESS_TOKEN_PER_SUBJECT = false
80
- PKCE_REQUIRED = true
81
- PKCE_S256_REQUIRED = true
82
- REFRESH_TOKEN_KEPT = true
83
- REFRESH_TOKEN_DURATION_KEPT = true
84
- ERROR_DESCRIPTION_OMITTED = false
85
- ERROR_URI_OMITTED = false
86
- CLIENT_ID_ALIAS_ENABLED = true
87
- SUPPORTED_SERVICE_PROFILES = [ 'FAPI', 'OPEN_BANKING' ]
88
- TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS = true
89
- INTROSPECTION_ENDPOINT = '<introspection-endpoint>'
90
- SUPPORTED_INTROSPECTION_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
91
- MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN = true
92
- TRUSTED_ROOT_CERTIFICATES = [ '<trusted-root-certificate0>', '<trusted-root-certificate1>' ]
93
- DYNAMIC_REGISTRATION_SUPPORTED = true
94
- END_SESSION_ENDPOINT = '<end-session-endpoint>'
95
- DESCRIPTION = '<description>'
96
- ACCESS_TOKEN_TYPE = 'Bearer'
97
- ACCESS_TOKEN_SIGN_ALG = 'HS256'
98
- ACCESS_TOKEN_DURATION = 300
99
- REFRESH_TOKEN_DURATION = 300
100
- ID_TOKEN_DURATION = 300
101
- AUTHORIZATION_RESPONSE_DURATION = 300
102
- PUSHED_AUTH_REQ_DURATION = 300
103
- METADATA_KEY = '<metadata0-key>'
104
- METADATA_VALUE = '<metadata0-value>'
105
- METADATA = [ Authlete::Model::Pair.new(key: METADATA_KEY, value: METADATA_VALUE) ]
106
- ACCESS_TOKEN_SIGNATURE_KEY_ID = '<access-token-signature-key-id>'
107
- AUTHORIZATION_SIGNATURE_KEY_ID = '<authorization-signature-key-id>'
108
- ID_TOKEN_SIGNATURE_KEY_ID = '<id-token-signature-key-id>'
109
- USER_INFO_SIGNATURE_KEY_ID = '<user-info-signature-key-id>'
110
- SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES = [ 'POLL', 'PING', 'PUSH' ]
111
- BACKCHANNEL_AUTHENTICATION_ENDPOINT = '<backchannel-authentication-endpoint>'
112
- BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED = true
113
- BACKCHANNEL_AUTH_REQ_ID_DURATION = 300
114
- BACKCHANNEL_POLLING_INTERVAL = 10
115
- BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI = true
116
- ALLOWABLE_CLOCK_SKEW = 100
117
- DEVICE_AUTHORIZATION_ENDPOINT = '<device-authorization-endpoint>'
118
- DEVICE_VERIFICATION_URI = '<device-verification-uri>'
119
- DEVICE_VERIFICATION_URI_COMPLETE = '<device-verification-uri-complete>'
120
- DEVICE_FLOW_CODE_DURATION = 300
121
- DEVICE_FLOW_POLLING_INTERVAL = 10
122
- USER_CODE_CHARSET = 'BASE20'
123
- USER_CODE_LENGTH = 100
124
- PUSHED_AUTH_REQ_ENDPOINT = '<pushed-auth-req-endpoint>'
125
- MTLS_ENDPOINT_ALIAS_NAME = '<mtls-endpoint-alias0-name>'
126
- MTLS_ENDPOINT_ALIAS_URI = '<mtls-endpoint-alias0-uri>'
127
- MTLS_ENDPOINT_ALIASES = [ Authlete::Model::NamedUri.new(name: MTLS_ENDPOINT_ALIAS_NAME, uri: MTLS_ENDPOINT_ALIAS_URI) ]
128
- SUPPORTED_AUTHORIZATION_DATA_TYPES = [ '<supported-authorization-data-type0>', '<supported-authorization-data-type1>' ]
129
- SUPPORTED_TRUST_FRAMEWORKS = [ '<supported-trust-framework0>', '<supported-trust-framework1>' ]
130
- SUPPORTED_EVIDENCE = [ '<supported-evidence0>', '<supported-evidence1>' ]
131
- SUPPORTED_IDENTITY_DOCUMENTS = [ '<supported-identity-document0>', '<supported-identity-document1>' ]
132
- SUPPORTED_VERIFICATION_METHODS = [ '<supported-verification-method0>', '<supported-verification-method1>' ]
133
- SUPPORTED_VERIFIED_CLAIMS = [ '<supported-verified-claim0>', '<supported-verified-claim1>' ]
134
- MISSING_CLIENT_ID_ALLOWED = false
135
- PAR_REQUIRED = false
136
- REQUEST_OBJECT_REQUIRED = true
137
- TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED = false
138
- CLAIM_SHORTCUT_RESTRICTIVE = false
139
- SCOPE_REQUIRED = true
140
- NBF_OPTIONAL = true
141
- ISS_SUPPRESSED = false
24
+ NUMBER = 1000
25
+ SERVICE_OWNER_NUMBER = 12345
26
+ SERVICE_NAME = '<service-name>'
27
+ API_KEY = '<api-key>'
28
+ API_SECRET = '<api-secret>'
29
+ ISSUER = '<issuer>'
30
+ AUTHORIZATION_ENDPOINT = '<authorization-endpoint>'
31
+ TOKEN_ENDPOINT = '<token-endpoint>'
32
+ REVOCATION_ENDPOINT = '<revocation-endpoint>'
33
+ SUPPORTED_REVOCATION_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
34
+ USER_INFO_ENDPOINT = '<user-info-endpoint>'
35
+ JWKS_URI = '<jwks-uri>'
36
+ JWKS = '<jwks>'
37
+ REGISTRATION_ENDPOINT = '<registration-endpoint>'
38
+ REGISTRATION_MANAGEMENT_ENDPOINT = '<registration-management-endpoint>'
39
+ SUPPORTED_SCOPE_NAME = 'scope0'
40
+ SUPPORTED_SCOPE_DESCRIPTION = '<scope0-description>'
41
+ SUPPORTED_SCOPES = [ Authlete::Model::Scope.new(name: SUPPORTED_SCOPE_NAME, description: SUPPORTED_SCOPE_DESCRIPTION) ]
42
+ SUPPORTED_RESPONSE_TYPES = [ 'NONE', 'CODE', 'TOKEN', 'ID_TOKEN' ]
43
+ SUPPORTED_GRANT_TYPES = [ 'AUTHORIZATION_CODE', 'REFRESH_TOKEN' ]
44
+ SUPPORTED_ACRS = [ '<supported-acr0>', '<supported-acr1>' ]
45
+ SUPPORTED_TOKEN_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
46
+ SUPPORTED_DISPLAYS = [ 'PAGE', 'POPUP', 'TOUCH', 'WAP' ]
47
+ SUPPORTED_CLAIM_TYPES = [ 'NORMAL' ]
48
+ SUPPORTED_CLAIMS = [ '<supported-claim0>', '<supported-claim1>' ]
49
+ SERVICE_DOCUMENTATION = '<service-documentation>'
50
+ SUPPORTED_CLAIM_LOCALES = [ 'en-US' ]
51
+ SUPPORTED_UI_LOCALES = [ 'en-US' ]
52
+ POLICY_URI = '<policy-uri>'
53
+ TOS_URI = '<tos-uri>'
54
+ AUTHENTICATION_CALLBACK_ENDPOINT = '<authentication-callback-endpoint>'
55
+ AUTHENTICATION_CALLBACK_API_KEY = '<authentication-callback-api-key>'
56
+ AUTHENTICATION_CALLBACK_API_SECRET = '<authentication-callback-api-secret>'
57
+ SUPPORTED_SNSES = [ 'FACEBOOK' ]
58
+ SNS_CREDENTIALS_SNS = 'FACEBOOK'
59
+ SNS_CREDENTIALS_API_KEY = '<sns-credentials0-api-key>'
60
+ SNS_CREDENTIALS_API_SECRET = '<sns-credentials0-api-secret>'
61
+ SNS_CREDENTIALS = [ Authlete::Model::SnsCredentials.new(sns: SNS_CREDENTIALS_SNS, apiKey: SNS_CREDENTIALS_API_KEY, apiSecret: SNS_CREDENTIALS_API_SECRET) ]
62
+ CREATED_AT = 10000
63
+ MODIFIED_AT = 10000
64
+ DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT = '<developer-authentication-callback-endpoint>'
65
+ DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY = '<developer-authentication-callback-api-key>'
66
+ DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET = '<developer-authentication-callback-api-secret>'
67
+ SUPPORTED_DEVELOPER_SNSES = [ 'FACEBOOK' ]
68
+ DEVELOPER_SNS_CREDENTIALS_SNS = 'FACEBOOK'
69
+ DEVELOPER_SNS_CREDENTIALS_API_KEY = '<developer-sns-credentials0-api-key>'
70
+ DEVELOPER_SNS_CREDENTIALS_API_SECRET = '<developer-sns-credentials0-api-secret>'
71
+ DEVELOPER_SNS_CREDENTIALS = [ Authlete::Model::SnsCredentials.new(sns: DEVELOPER_SNS_CREDENTIALS_SNS, apiKey: DEVELOPER_SNS_CREDENTIALS_API_KEY, apiSecret: DEVELOPER_SNS_CREDENTIALS_API_SECRET) ]
72
+ CLIENTS_PER_DEVELOPER = 10
73
+ DIRECT_AUTHORIZATION_ENDPOINT_ENABLED = true
74
+ DIRECT_TOKEN_ENDPOINT_ENABLED = true
75
+ DIRECT_REVOCATION_ENDPOINT_ENABLED = true
76
+ DIRECT_USER_INFO_ENDPOINT_ENABLED = true
77
+ DIRECT_JWKS_ENDPOINT_ENABLED = true
78
+ DIRECT_INTROSPECTION_ENDPOINT_ENABLED = true
79
+ SINGLE_ACCESS_TOKEN_PER_SUBJECT = false
80
+ PKCE_REQUIRED = true
81
+ PKCE_S256_REQUIRED = true
82
+ REFRESH_TOKEN_KEPT = true
83
+ REFRESH_TOKEN_DURATION_KEPT = true
84
+ ERROR_DESCRIPTION_OMITTED = false
85
+ ERROR_URI_OMITTED = false
86
+ CLIENT_ID_ALIAS_ENABLED = true
87
+ SUPPORTED_SERVICE_PROFILES = [ 'FAPI', 'OPEN_BANKING' ]
88
+ TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS = true
89
+ INTROSPECTION_ENDPOINT = '<introspection-endpoint>'
90
+ SUPPORTED_INTROSPECTION_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
91
+ MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN = true
92
+ TRUSTED_ROOT_CERTIFICATES = [ '<trusted-root-certificate0>', '<trusted-root-certificate1>' ]
93
+ DYNAMIC_REGISTRATION_SUPPORTED = true
94
+ END_SESSION_ENDPOINT = '<end-session-endpoint>'
95
+ DESCRIPTION = '<description>'
96
+ ACCESS_TOKEN_TYPE = 'Bearer'
97
+ ACCESS_TOKEN_SIGN_ALG = 'HS256'
98
+ ACCESS_TOKEN_DURATION = 300
99
+ REFRESH_TOKEN_DURATION = 300
100
+ ID_TOKEN_DURATION = 300
101
+ AUTHORIZATION_RESPONSE_DURATION = 300
102
+ PUSHED_AUTH_REQ_DURATION = 300
103
+ METADATA_KEY = '<metadata0-key>'
104
+ METADATA_VALUE = '<metadata0-value>'
105
+ METADATA = [ Authlete::Model::Pair.new(key: METADATA_KEY, value: METADATA_VALUE) ]
106
+ ACCESS_TOKEN_SIGNATURE_KEY_ID = '<access-token-signature-key-id>'
107
+ AUTHORIZATION_SIGNATURE_KEY_ID = '<authorization-signature-key-id>'
108
+ ID_TOKEN_SIGNATURE_KEY_ID = '<id-token-signature-key-id>'
109
+ USER_INFO_SIGNATURE_KEY_ID = '<user-info-signature-key-id>'
110
+ SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES = [ 'POLL', 'PING', 'PUSH' ]
111
+ BACKCHANNEL_AUTHENTICATION_ENDPOINT = '<backchannel-authentication-endpoint>'
112
+ BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED = true
113
+ BACKCHANNEL_AUTH_REQ_ID_DURATION = 300
114
+ BACKCHANNEL_POLLING_INTERVAL = 10
115
+ BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI = true
116
+ ALLOWABLE_CLOCK_SKEW = 100
117
+ DEVICE_AUTHORIZATION_ENDPOINT = '<device-authorization-endpoint>'
118
+ DEVICE_VERIFICATION_URI = '<device-verification-uri>'
119
+ DEVICE_VERIFICATION_URI_COMPLETE = '<device-verification-uri-complete>'
120
+ DEVICE_FLOW_CODE_DURATION = 300
121
+ DEVICE_FLOW_POLLING_INTERVAL = 10
122
+ USER_CODE_CHARSET = 'BASE20'
123
+ USER_CODE_LENGTH = 100
124
+ PUSHED_AUTH_REQ_ENDPOINT = '<pushed-auth-req-endpoint>'
125
+ MTLS_ENDPOINT_ALIAS_NAME = '<mtls-endpoint-alias0-name>'
126
+ MTLS_ENDPOINT_ALIAS_URI = '<mtls-endpoint-alias0-uri>'
127
+ MTLS_ENDPOINT_ALIASES = [ Authlete::Model::NamedUri.new(name: MTLS_ENDPOINT_ALIAS_NAME, uri: MTLS_ENDPOINT_ALIAS_URI) ]
128
+ SUPPORTED_AUTHORIZATION_DETAILS_TYPES = [ '<supported-authorization-details-type0>', '<supported-authorization-details-type1>' ]
129
+ SUPPORTED_TRUST_FRAMEWORKS = [ '<supported-trust-framework0>', '<supported-trust-framework1>' ]
130
+ SUPPORTED_EVIDENCE = [ '<supported-evidence0>', '<supported-evidence1>' ]
131
+ SUPPORTED_IDENTITY_DOCUMENTS = [ '<supported-identity-document0>', '<supported-identity-document1>' ]
132
+ SUPPORTED_VERIFICATION_METHODS = [ '<supported-verification-method0>', '<supported-verification-method1>' ]
133
+ SUPPORTED_VERIFIED_CLAIMS = [ '<supported-verified-claim0>', '<supported-verified-claim1>' ]
134
+ MISSING_CLIENT_ID_ALLOWED = false
135
+ PAR_REQUIRED = false
136
+ REQUEST_OBJECT_REQUIRED = true
137
+ TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED = false
138
+ CLAIM_SHORTCUT_RESTRICTIVE = false
139
+ SCOPE_REQUIRED = true
140
+ NBF_OPTIONAL = true
141
+ ISS_SUPPRESSED = false
142
+ ATTRIBUTE_KEY = '<attribute0-key>'
143
+ ATTRIBUTE_VALUE = '<attribute0-value>'
144
+ ATTRIBUTES = [ Authlete::Model::Pair.new(key: ATTRIBUTE_KEY, value: ATTRIBUTE_VALUE) ]
145
+ SUPPORTED_CUSTOM_CLIENT_METADATA = [ '<supported-custom-client-metadata0>', '<supported-custom-client-metadata1>' ]
146
+ TOKEN_EXPIRATION_LINKED = false
147
+ FRONT_CHANNEL_REQUEST_OBJECT_ENCRYPTION_REQUIRED = false
148
+ REQUEST_OBJECT_ENCRYPTION_ALG_MATCH_REQUIRED = false
149
+ REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED = false
142
150
 
143
151
 
144
152
  def generate_json
145
153
  return <<~JSON
146
154
  {
147
- "number": 1000,
148
- "serviceOwnerNumber": 12345,
149
- "serviceName": "<service-name>",
150
- "apiKey": "<api-key>",
151
- "apiSecret": "<api-secret>",
152
- "issuer": "<issuer>",
153
- "authorizationEndpoint": "<authorization-endpoint>",
154
- "tokenEndpoint": "<token-endpoint>",
155
- "revocationEndpoint": "<revocation-endpoint>",
156
- "supportedRevocationAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
157
- "userInfoEndpoint": "<user-info-endpoint>",
158
- "jwksUri": "<jwks-uri>",
159
- "jwks": "<jwks>",
160
- "registrationEndpoint": "<registration-endpoint>",
161
- "registrationManagementEndpoint": "<registration-management-endpoint>",
162
- "supportedScopes": [ { "name": "scope0", "description": "<scope0-description>" } ],
163
- "supportedResponseTypes": [ "NONE", "CODE", "TOKEN", "ID_TOKEN" ],
164
- "supportedGrantTypes": [ "AUTHORIZATION_CODE", "REFRESH_TOKEN" ],
165
- "supportedAcrs": [ "<supported-acr0>", "<supported-acr1>" ],
166
- "supportedTokenAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
167
- "supportedDisplays": [ "PAGE", "POPUP", "TOUCH", "WAP" ],
168
- "supportedClaimTypes": [ "NORMAL" ],
169
- "supportedClaims": [ "<supported-claim0>", "<supported-claim1>" ],
170
- "serviceDocumentation": "<service-documentation>",
171
- "supportedClaimLocales": [ "en-US" ],
172
- "supportedUiLocales": [ "en-US" ],
173
- "policyUri": "<policy-uri>",
174
- "tosUri": "<tos-uri>",
175
- "authenticationCallbackEndpoint": "<authentication-callback-endpoint>",
176
- "authenticationCallbackApiKey": "<authentication-callback-api-key>",
177
- "authenticationCallbackApiSecret": "<authentication-callback-api-secret>",
178
- "supportedSnses": [ "FACEBOOK" ],
179
- "snsCredentials": [ { "sns": "FACEBOOK", "apiKey": "<sns-credentials0-api-key>", "apiSecret": "<sns-credentials0-api-secret>" } ],
180
- "createdAt": 10000,
181
- "modifiedAt": 10000,
182
- "developerAuthenticationCallbackEndpoint": "<developer-authentication-callback-endpoint>",
183
- "developerAuthenticationCallbackApiKey": "<developer-authentication-callback-api-key>",
184
- "developerAuthenticationCallbackApiSecret": "<developer-authentication-callback-api-secret>",
185
- "supportedDeveloperSnses": [ "FACEBOOK" ],
186
- "developerSnsCredentials": [ { "sns": "FACEBOOK", "apiKey": "<developer-sns-credentials0-api-key>", "apiSecret": "<developer-sns-credentials0-api-secret>" } ],
187
- "clientsPerDeveloper": 10,
188
- "directAuthorizationEndpointEnabled": true,
189
- "directTokenEndpointEnabled": true,
190
- "directRevocationEndpointEnabled": true,
191
- "directUserInfoEndpointEnabled": true,
192
- "directJwksEndpointEnabled": true,
193
- "directIntrospectionEndpointEnabled": true,
194
- "singleAccessTokenPerSubject": false,
195
- "pkceRequired": true,
196
- "pkceS256Required": true,
197
- "refreshTokenKept": true,
198
- "refreshTokenDurationKept": true,
199
- "errorDescriptionOmitted": false,
200
- "errorUriOmitted": false,
201
- "clientIdAliasEnabled": true,
202
- "supportedServiceProfiles": [ "FAPI", "OPEN_BANKING" ],
203
- "tlsClientCertificateBoundAccessTokens": true,
204
- "introspectionEndpoint": "<introspection-endpoint>",
205
- "supportedIntrospectionAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
206
- "mutualTlsValidatePkiCertChain": true,
207
- "trustedRootCertificates": [ "<trusted-root-certificate0>", "<trusted-root-certificate1>" ],
208
- "dynamicRegistrationSupported": true,
209
- "endSessionEndpoint": "<end-session-endpoint>",
210
- "description": "<description>",
211
- "accessTokenType": "Bearer",
212
- "accessTokenSignAlg": "HS256",
213
- "accessTokenDuration": 300,
214
- "refreshTokenDuration": 300,
215
- "idTokenDuration": 300,
216
- "authorizationResponseDuration": 300,
217
- "pushedAuthReqDuration": 300,
218
- "metadata": [ { "key": "<metadata0-key>", "value": "<metadata0-value>" } ],
219
- "accessTokenSignatureKeyId": "<access-token-signature-key-id>",
220
- "authorizationSignatureKeyId": "<authorization-signature-key-id>",
221
- "idTokenSignatureKeyId": "<id-token-signature-key-id>",
222
- "userInfoSignatureKeyId": "<user-info-signature-key-id>",
223
- "supportedBackchannelTokenDeliveryModes": [ "POLL", "PING", "PUSH" ],
224
- "backchannelAuthenticationEndpoint": "<backchannel-authentication-endpoint>",
225
- "backchannelUserCodeParameterSupported": true,
226
- "backchannelAuthReqIdDuration": 300,
227
- "backchannelPollingInterval": 10,
228
- "backchannelBindingMessageRequiredInFapi": true,
229
- "allowableClockSkew": 100,
230
- "deviceAuthorizationEndpoint": "<device-authorization-endpoint>",
231
- "deviceVerificationUri": "<device-verification-uri>",
232
- "deviceVerificationUriComplete": "<device-verification-uri-complete>",
233
- "deviceFlowCodeDuration": 300,
234
- "deviceFlowPollingInterval": 10,
235
- "userCodeCharset": "BASE20",
236
- "userCodeLength": 100,
237
- "pushedAuthReqEndpoint": "<pushed-auth-req-endpoint>",
238
- "mtlsEndpointAliases": [ { "name": "<mtls-endpoint-alias0-name>", "uri": "<mtls-endpoint-alias0-uri>" } ],
239
- "supportedAuthorizationDataTypes": [ "<supported-authorization-data-type0>", "<supported-authorization-data-type1>" ],
240
- "supportedTrustFrameworks": [ "<supported-trust-framework0>", "<supported-trust-framework1>" ],
241
- "supportedEvidence": [ "<supported-evidence0>", "<supported-evidence1>" ],
242
- "supportedIdentityDocuments": [ "<supported-identity-document0>", "<supported-identity-document1>" ],
243
- "supportedVerificationMethods": [ "<supported-verification-method0>", "<supported-verification-method1>" ],
244
- "supportedVerifiedClaims": [ "<supported-verified-claim0>", "<supported-verified-claim1>" ],
245
- "missingClientIdAllowed": false,
246
- "parRequired": false,
247
- "requestObjectRequired": true,
248
- "traditionalRequestObjectProcessingApplied": false,
249
- "claimShortcutRestrictive": false,
250
- "scopeRequired": true,
251
- "nbfOptional": true,
252
- "issSuppressed": false
155
+ "number": 1000,
156
+ "serviceOwnerNumber": 12345,
157
+ "serviceName": "<service-name>",
158
+ "apiKey": "<api-key>",
159
+ "apiSecret": "<api-secret>",
160
+ "issuer": "<issuer>",
161
+ "authorizationEndpoint": "<authorization-endpoint>",
162
+ "tokenEndpoint": "<token-endpoint>",
163
+ "revocationEndpoint": "<revocation-endpoint>",
164
+ "supportedRevocationAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
165
+ "userInfoEndpoint": "<user-info-endpoint>",
166
+ "jwksUri": "<jwks-uri>",
167
+ "jwks": "<jwks>",
168
+ "registrationEndpoint": "<registration-endpoint>",
169
+ "registrationManagementEndpoint": "<registration-management-endpoint>",
170
+ "supportedScopes": [ { "name": "scope0", "description": "<scope0-description>" } ],
171
+ "supportedResponseTypes": [ "NONE", "CODE", "TOKEN", "ID_TOKEN" ],
172
+ "supportedGrantTypes": [ "AUTHORIZATION_CODE", "REFRESH_TOKEN" ],
173
+ "supportedAcrs": [ "<supported-acr0>", "<supported-acr1>" ],
174
+ "supportedTokenAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
175
+ "supportedDisplays": [ "PAGE", "POPUP", "TOUCH", "WAP" ],
176
+ "supportedClaimTypes": [ "NORMAL" ],
177
+ "supportedClaims": [ "<supported-claim0>", "<supported-claim1>" ],
178
+ "serviceDocumentation": "<service-documentation>",
179
+ "supportedClaimLocales": [ "en-US" ],
180
+ "supportedUiLocales": [ "en-US" ],
181
+ "policyUri": "<policy-uri>",
182
+ "tosUri": "<tos-uri>",
183
+ "authenticationCallbackEndpoint": "<authentication-callback-endpoint>",
184
+ "authenticationCallbackApiKey": "<authentication-callback-api-key>",
185
+ "authenticationCallbackApiSecret": "<authentication-callback-api-secret>",
186
+ "supportedSnses": [ "FACEBOOK" ],
187
+ "snsCredentials": [ { "sns": "FACEBOOK", "apiKey": "<sns-credentials0-api-key>", "apiSecret": "<sns-credentials0-api-secret>" } ],
188
+ "createdAt": 10000,
189
+ "modifiedAt": 10000,
190
+ "developerAuthenticationCallbackEndpoint": "<developer-authentication-callback-endpoint>",
191
+ "developerAuthenticationCallbackApiKey": "<developer-authentication-callback-api-key>",
192
+ "developerAuthenticationCallbackApiSecret": "<developer-authentication-callback-api-secret>",
193
+ "supportedDeveloperSnses": [ "FACEBOOK" ],
194
+ "developerSnsCredentials": [ { "sns": "FACEBOOK", "apiKey": "<developer-sns-credentials0-api-key>", "apiSecret": "<developer-sns-credentials0-api-secret>" } ],
195
+ "clientsPerDeveloper": 10,
196
+ "directAuthorizationEndpointEnabled": true,
197
+ "directTokenEndpointEnabled": true,
198
+ "directRevocationEndpointEnabled": true,
199
+ "directUserInfoEndpointEnabled": true,
200
+ "directJwksEndpointEnabled": true,
201
+ "directIntrospectionEndpointEnabled": true,
202
+ "singleAccessTokenPerSubject": false,
203
+ "pkceRequired": true,
204
+ "pkceS256Required": true,
205
+ "refreshTokenKept": true,
206
+ "refreshTokenDurationKept": true,
207
+ "errorDescriptionOmitted": false,
208
+ "errorUriOmitted": false,
209
+ "clientIdAliasEnabled": true,
210
+ "supportedServiceProfiles": [ "FAPI", "OPEN_BANKING" ],
211
+ "tlsClientCertificateBoundAccessTokens": true,
212
+ "introspectionEndpoint": "<introspection-endpoint>",
213
+ "supportedIntrospectionAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
214
+ "mutualTlsValidatePkiCertChain": true,
215
+ "trustedRootCertificates": [ "<trusted-root-certificate0>", "<trusted-root-certificate1>" ],
216
+ "dynamicRegistrationSupported": true,
217
+ "endSessionEndpoint": "<end-session-endpoint>",
218
+ "description": "<description>",
219
+ "accessTokenType": "Bearer",
220
+ "accessTokenSignAlg": "HS256",
221
+ "accessTokenDuration": 300,
222
+ "refreshTokenDuration": 300,
223
+ "idTokenDuration": 300,
224
+ "authorizationResponseDuration": 300,
225
+ "pushedAuthReqDuration": 300,
226
+ "metadata": [ { "key": "<metadata0-key>", "value": "<metadata0-value>" } ],
227
+ "accessTokenSignatureKeyId": "<access-token-signature-key-id>",
228
+ "authorizationSignatureKeyId": "<authorization-signature-key-id>",
229
+ "idTokenSignatureKeyId": "<id-token-signature-key-id>",
230
+ "userInfoSignatureKeyId": "<user-info-signature-key-id>",
231
+ "supportedBackchannelTokenDeliveryModes": [ "POLL", "PING", "PUSH" ],
232
+ "backchannelAuthenticationEndpoint": "<backchannel-authentication-endpoint>",
233
+ "backchannelUserCodeParameterSupported": true,
234
+ "backchannelAuthReqIdDuration": 300,
235
+ "backchannelPollingInterval": 10,
236
+ "backchannelBindingMessageRequiredInFapi": true,
237
+ "allowableClockSkew": 100,
238
+ "deviceAuthorizationEndpoint": "<device-authorization-endpoint>",
239
+ "deviceVerificationUri": "<device-verification-uri>",
240
+ "deviceVerificationUriComplete": "<device-verification-uri-complete>",
241
+ "deviceFlowCodeDuration": 300,
242
+ "deviceFlowPollingInterval": 10,
243
+ "userCodeCharset": "BASE20",
244
+ "userCodeLength": 100,
245
+ "pushedAuthReqEndpoint": "<pushed-auth-req-endpoint>",
246
+ "mtlsEndpointAliases": [ { "name": "<mtls-endpoint-alias0-name>", "uri": "<mtls-endpoint-alias0-uri>" } ],
247
+ "supportedAuthorizationDetailsTypes": [ "<supported-authorization-details-type0>", "<supported-authorization-details-type1>" ],
248
+ "supportedTrustFrameworks": [ "<supported-trust-framework0>", "<supported-trust-framework1>" ],
249
+ "supportedEvidence": [ "<supported-evidence0>", "<supported-evidence1>" ],
250
+ "supportedIdentityDocuments": [ "<supported-identity-document0>", "<supported-identity-document1>" ],
251
+ "supportedVerificationMethods": [ "<supported-verification-method0>", "<supported-verification-method1>" ],
252
+ "supportedVerifiedClaims": [ "<supported-verified-claim0>", "<supported-verified-claim1>" ],
253
+ "missingClientIdAllowed": false,
254
+ "parRequired": false,
255
+ "requestObjectRequired": true,
256
+ "traditionalRequestObjectProcessingApplied": false,
257
+ "claimShortcutRestrictive": false,
258
+ "scopeRequired": true,
259
+ "nbfOptional": true,
260
+ "issSuppressed": false,
261
+ "attributes": [{ "key": "<attribute0-key>", "value": "<attribute0-value>" }],
262
+ "supportedCustomClientMetadata": [ "<supported-custom-client-metadata0>", "<supported-custom-client-metadata1>" ],
263
+ "tokenExpirationLinked": false,
264
+ "frontChannelRequestObjectEncryptionRequired": false,
265
+ "requestObjectEncryptionAlgMatchRequired": false,
266
+ "requestObjectEncryptionEncMatchRequired": false
253
267
  }
254
268
  JSON
255
269
  end
@@ -257,112 +271,118 @@ class ServiceTest < Minitest::Test
257
271
 
258
272
  def generate_hash
259
273
  {
260
- number: 1000,
261
- serviceOwnerNumber: 12345,
262
- serviceName: '<service-name>',
263
- apiKey: '<api-key>',
264
- apiSecret: '<api-secret>',
265
- issuer: '<issuer>',
266
- authorizationEndpoint: '<authorization-endpoint>',
267
- tokenEndpoint: '<token-endpoint>',
268
- revocationEndpoint: '<revocation-endpoint>',
269
- supportedRevocationAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
270
- userInfoEndpoint: '<user-info-endpoint>',
271
- jwksUri: '<jwks-uri>',
272
- jwks: '<jwks>',
273
- registrationEndpoint: '<registration-endpoint>',
274
- registrationManagementEndpoint: '<registration-management-endpoint>',
275
- supportedScopes: [ { name: 'scope0', description: '<scope0-description>', defaultEntry: false, descriptions: nil, attributes: nil } ],
276
- supportedResponseTypes: [ 'NONE', 'CODE', 'TOKEN', 'ID_TOKEN' ],
277
- supportedGrantTypes: [ 'AUTHORIZATION_CODE', 'REFRESH_TOKEN' ],
278
- supportedAcrs: [ '<supported-acr0>', '<supported-acr1>' ],
279
- supportedTokenAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
280
- supportedDisplays: [ 'PAGE', 'POPUP', 'TOUCH', 'WAP' ],
281
- supportedClaimTypes: [ 'NORMAL' ],
282
- supportedClaims: [ '<supported-claim0>', '<supported-claim1>' ],
283
- serviceDocumentation: '<service-documentation>',
284
- supportedClaimLocales: [ 'en-US' ],
285
- supportedUiLocales: [ 'en-US' ],
286
- policyUri: '<policy-uri>',
287
- tosUri: '<tos-uri>',
288
- authenticationCallbackEndpoint: '<authentication-callback-endpoint>',
289
- authenticationCallbackApiKey: '<authentication-callback-api-key>',
290
- authenticationCallbackApiSecret: '<authentication-callback-api-secret>',
291
- supportedSnses: [ 'FACEBOOK' ],
292
- snsCredentials: [ { sns: 'FACEBOOK', apiKey: '<sns-credentials0-api-key>', apiSecret: '<sns-credentials0-api-secret>' } ],
293
- createdAt: 10000,
294
- modifiedAt: 10000,
295
- developerAuthenticationCallbackEndpoint: '<developer-authentication-callback-endpoint>',
296
- developerAuthenticationCallbackApiKey: '<developer-authentication-callback-api-key>',
297
- developerAuthenticationCallbackApiSecret: '<developer-authentication-callback-api-secret>',
298
- supportedDeveloperSnses: [ 'FACEBOOK' ],
299
- developerSnsCredentials: [ { sns: 'FACEBOOK', apiKey: '<developer-sns-credentials0-api-key>', apiSecret: '<developer-sns-credentials0-api-secret>' } ],
300
- clientsPerDeveloper: 10,
301
- directAuthorizationEndpointEnabled: true,
302
- directTokenEndpointEnabled: true,
303
- directRevocationEndpointEnabled: true,
304
- directUserInfoEndpointEnabled: true,
305
- directJwksEndpointEnabled: true,
306
- directIntrospectionEndpointEnabled: true,
307
- singleAccessTokenPerSubject: false,
308
- pkceRequired: true,
309
- pkceS256Required: true,
310
- refreshTokenKept: true,
311
- refreshTokenDurationKept: true,
312
- errorDescriptionOmitted: false,
313
- errorUriOmitted: false,
314
- clientIdAliasEnabled: true,
315
- supportedServiceProfiles: [ 'FAPI', 'OPEN_BANKING' ],
316
- tlsClientCertificateBoundAccessTokens: true,
317
- introspectionEndpoint: '<introspection-endpoint>',
318
- supportedIntrospectionAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
319
- mutualTlsValidatePkiCertChain: true,
320
- trustedRootCertificates: [ '<trusted-root-certificate0>', '<trusted-root-certificate1>' ],
321
- dynamicRegistrationSupported: true,
322
- endSessionEndpoint: '<end-session-endpoint>',
323
- description: '<description>',
324
- accessTokenType: 'Bearer',
325
- accessTokenSignAlg: 'HS256',
326
- accessTokenDuration: 300,
327
- refreshTokenDuration: 300,
328
- idTokenDuration: 300,
329
- authorizationResponseDuration: 300,
330
- pushedAuthReqDuration: 300,
331
- metadata: [ { key: '<metadata0-key>', value: '<metadata0-value>' } ],
332
- accessTokenSignatureKeyId: '<access-token-signature-key-id>',
333
- authorizationSignatureKeyId: '<authorization-signature-key-id>',
334
- idTokenSignatureKeyId: '<id-token-signature-key-id>',
335
- userInfoSignatureKeyId: '<user-info-signature-key-id>',
336
- supportedBackchannelTokenDeliveryModes: [ 'POLL', 'PING', 'PUSH' ],
337
- backchannelAuthenticationEndpoint: '<backchannel-authentication-endpoint>',
338
- backchannelUserCodeParameterSupported: true,
339
- backchannelAuthReqIdDuration: 300,
340
- backchannelPollingInterval: 10,
341
- backchannelBindingMessageRequiredInFapi: true,
342
- allowableClockSkew: 100,
343
- deviceAuthorizationEndpoint: '<device-authorization-endpoint>',
344
- deviceVerificationUri: '<device-verification-uri>',
345
- deviceVerificationUriComplete: '<device-verification-uri-complete>',
346
- deviceFlowCodeDuration: 300,
347
- deviceFlowPollingInterval: 10,
348
- userCodeCharset: 'BASE20',
349
- userCodeLength: 100,
350
- pushedAuthReqEndpoint: '<pushed-auth-req-endpoint>',
351
- mtlsEndpointAliases: [ { name: '<mtls-endpoint-alias0-name>', uri: '<mtls-endpoint-alias0-uri>' } ],
352
- supportedAuthorizationDataTypes: [ '<supported-authorization-data-type0>', '<supported-authorization-data-type1>' ],
353
- supportedTrustFrameworks: [ '<supported-trust-framework0>', '<supported-trust-framework1>' ],
354
- supportedEvidence: [ '<supported-evidence0>', '<supported-evidence1>' ],
355
- supportedIdentityDocuments: [ '<supported-identity-document0>', '<supported-identity-document1>' ],
356
- supportedVerificationMethods: [ '<supported-verification-method0>', '<supported-verification-method1>' ],
357
- supportedVerifiedClaims: [ '<supported-verified-claim0>', '<supported-verified-claim1>' ],
358
- missingClientIdAllowed: false,
359
- parRequired: false,
360
- requestObjectRequired: true,
361
- traditionalRequestObjectProcessingApplied: false,
362
- claimShortcutRestrictive: false,
363
- scopeRequired: true,
364
- nbfOptional: true,
365
- issSuppressed: false
274
+ number: 1000,
275
+ serviceOwnerNumber: 12345,
276
+ serviceName: '<service-name>',
277
+ apiKey: '<api-key>',
278
+ apiSecret: '<api-secret>',
279
+ issuer: '<issuer>',
280
+ authorizationEndpoint: '<authorization-endpoint>',
281
+ tokenEndpoint: '<token-endpoint>',
282
+ revocationEndpoint: '<revocation-endpoint>',
283
+ supportedRevocationAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
284
+ userInfoEndpoint: '<user-info-endpoint>',
285
+ jwksUri: '<jwks-uri>',
286
+ jwks: '<jwks>',
287
+ registrationEndpoint: '<registration-endpoint>',
288
+ registrationManagementEndpoint: '<registration-management-endpoint>',
289
+ supportedScopes: [ { name: 'scope0', description: '<scope0-description>', defaultEntry: false, descriptions: nil, attributes: nil } ],
290
+ supportedResponseTypes: [ 'NONE', 'CODE', 'TOKEN', 'ID_TOKEN' ],
291
+ supportedGrantTypes: [ 'AUTHORIZATION_CODE', 'REFRESH_TOKEN' ],
292
+ supportedAcrs: [ '<supported-acr0>', '<supported-acr1>' ],
293
+ supportedTokenAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
294
+ supportedDisplays: [ 'PAGE', 'POPUP', 'TOUCH', 'WAP' ],
295
+ supportedClaimTypes: [ 'NORMAL' ],
296
+ supportedClaims: [ '<supported-claim0>', '<supported-claim1>' ],
297
+ serviceDocumentation: '<service-documentation>',
298
+ supportedClaimLocales: [ 'en-US' ],
299
+ supportedUiLocales: [ 'en-US' ],
300
+ policyUri: '<policy-uri>',
301
+ tosUri: '<tos-uri>',
302
+ authenticationCallbackEndpoint: '<authentication-callback-endpoint>',
303
+ authenticationCallbackApiKey: '<authentication-callback-api-key>',
304
+ authenticationCallbackApiSecret: '<authentication-callback-api-secret>',
305
+ supportedSnses: [ 'FACEBOOK' ],
306
+ snsCredentials: [ { sns: 'FACEBOOK', apiKey: '<sns-credentials0-api-key>', apiSecret: '<sns-credentials0-api-secret>' } ],
307
+ createdAt: 10000,
308
+ modifiedAt: 10000,
309
+ developerAuthenticationCallbackEndpoint: '<developer-authentication-callback-endpoint>',
310
+ developerAuthenticationCallbackApiKey: '<developer-authentication-callback-api-key>',
311
+ developerAuthenticationCallbackApiSecret: '<developer-authentication-callback-api-secret>',
312
+ supportedDeveloperSnses: [ 'FACEBOOK' ],
313
+ developerSnsCredentials: [ { sns: 'FACEBOOK', apiKey: '<developer-sns-credentials0-api-key>', apiSecret: '<developer-sns-credentials0-api-secret>' } ],
314
+ clientsPerDeveloper: 10,
315
+ directAuthorizationEndpointEnabled: true,
316
+ directTokenEndpointEnabled: true,
317
+ directRevocationEndpointEnabled: true,
318
+ directUserInfoEndpointEnabled: true,
319
+ directJwksEndpointEnabled: true,
320
+ directIntrospectionEndpointEnabled: true,
321
+ singleAccessTokenPerSubject: false,
322
+ pkceRequired: true,
323
+ pkceS256Required: true,
324
+ refreshTokenKept: true,
325
+ refreshTokenDurationKept: true,
326
+ errorDescriptionOmitted: false,
327
+ errorUriOmitted: false,
328
+ clientIdAliasEnabled: true,
329
+ supportedServiceProfiles: [ 'FAPI', 'OPEN_BANKING' ],
330
+ tlsClientCertificateBoundAccessTokens: true,
331
+ introspectionEndpoint: '<introspection-endpoint>',
332
+ supportedIntrospectionAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
333
+ mutualTlsValidatePkiCertChain: true,
334
+ trustedRootCertificates: [ '<trusted-root-certificate0>', '<trusted-root-certificate1>' ],
335
+ dynamicRegistrationSupported: true,
336
+ endSessionEndpoint: '<end-session-endpoint>',
337
+ description: '<description>',
338
+ accessTokenType: 'Bearer',
339
+ accessTokenSignAlg: 'HS256',
340
+ accessTokenDuration: 300,
341
+ refreshTokenDuration: 300,
342
+ idTokenDuration: 300,
343
+ authorizationResponseDuration: 300,
344
+ pushedAuthReqDuration: 300,
345
+ metadata: [ { key: '<metadata0-key>', value: '<metadata0-value>' } ],
346
+ accessTokenSignatureKeyId: '<access-token-signature-key-id>',
347
+ authorizationSignatureKeyId: '<authorization-signature-key-id>',
348
+ idTokenSignatureKeyId: '<id-token-signature-key-id>',
349
+ userInfoSignatureKeyId: '<user-info-signature-key-id>',
350
+ supportedBackchannelTokenDeliveryModes: [ 'POLL', 'PING', 'PUSH' ],
351
+ backchannelAuthenticationEndpoint: '<backchannel-authentication-endpoint>',
352
+ backchannelUserCodeParameterSupported: true,
353
+ backchannelAuthReqIdDuration: 300,
354
+ backchannelPollingInterval: 10,
355
+ backchannelBindingMessageRequiredInFapi: true,
356
+ allowableClockSkew: 100,
357
+ deviceAuthorizationEndpoint: '<device-authorization-endpoint>',
358
+ deviceVerificationUri: '<device-verification-uri>',
359
+ deviceVerificationUriComplete: '<device-verification-uri-complete>',
360
+ deviceFlowCodeDuration: 300,
361
+ deviceFlowPollingInterval: 10,
362
+ userCodeCharset: 'BASE20',
363
+ userCodeLength: 100,
364
+ pushedAuthReqEndpoint: '<pushed-auth-req-endpoint>',
365
+ mtlsEndpointAliases: [ { name: '<mtls-endpoint-alias0-name>', uri: '<mtls-endpoint-alias0-uri>' } ],
366
+ supportedAuthorizationDetailsTypes: [ '<supported-authorization-details-type0>', '<supported-authorization-details-type1>' ],
367
+ supportedTrustFrameworks: [ '<supported-trust-framework0>', '<supported-trust-framework1>' ],
368
+ supportedEvidence: [ '<supported-evidence0>', '<supported-evidence1>' ],
369
+ supportedIdentityDocuments: [ '<supported-identity-document0>', '<supported-identity-document1>' ],
370
+ supportedVerificationMethods: [ '<supported-verification-method0>', '<supported-verification-method1>' ],
371
+ supportedVerifiedClaims: [ '<supported-verified-claim0>', '<supported-verified-claim1>' ],
372
+ missingClientIdAllowed: false,
373
+ parRequired: false,
374
+ requestObjectRequired: true,
375
+ traditionalRequestObjectProcessingApplied: false,
376
+ claimShortcutRestrictive: false,
377
+ scopeRequired: true,
378
+ nbfOptional: true,
379
+ issSuppressed: false,
380
+ attributes: [{ key: '<attribute0-key>', value: '<attribute0-value>' }],
381
+ supportedCustomClientMetadata: [ '<supported-custom-client-metadata0>', '<supported-custom-client-metadata1>' ],
382
+ tokenExpirationLinked: false,
383
+ frontChannelRequestObjectEncryptionRequired: false,
384
+ requestObjectEncryptionAlgMatchRequired: false,
385
+ requestObjectEncryptionEncMatchRequired: false
366
386
  }
367
387
  end
368
388
 
@@ -460,7 +480,7 @@ class ServiceTest < Minitest::Test
460
480
  obj.user_code_length = USER_CODE_LENGTH
461
481
  obj.pushed_auth_req_endpoint = PUSHED_AUTH_REQ_ENDPOINT
462
482
  obj.mtls_endpoint_aliases = MTLS_ENDPOINT_ALIASES
463
- obj.supported_authorization_data_types = SUPPORTED_AUTHORIZATION_DATA_TYPES
483
+ obj.supported_authorization_details_types = SUPPORTED_AUTHORIZATION_DETAILS_TYPES
464
484
  obj.supported_trust_frameworks = SUPPORTED_TRUST_FRAMEWORKS
465
485
  obj.supported_evidence = SUPPORTED_EVIDENCE
466
486
  obj.supported_identity_documents = SUPPORTED_IDENTITY_DOCUMENTS
@@ -474,125 +494,136 @@ class ServiceTest < Minitest::Test
474
494
  obj.scope_required = SCOPE_REQUIRED
475
495
  obj.nbf_optional = NBF_OPTIONAL
476
496
  obj.iss_suppressed = ISS_SUPPRESSED
477
-
478
- obj
497
+ obj.attributes = ATTRIBUTES
498
+ obj.supported_custom_client_metadata = SUPPORTED_CUSTOM_CLIENT_METADATA
499
+ obj.token_expiration_linked = TOKEN_EXPIRATION_LINKED
500
+ obj.frontChannelRequestObjectEncryptionRequired = FRONT_CHANNEL_REQUEST_OBJECT_ENCRYPTION_REQUIRED
501
+ obj.requestObjectEncryptionAlgMatchRequired = REQUEST_OBJECT_ENCRYPTION_ALG_MATCH_REQUIRED
502
+ obj.requestObjectEncryptionEncMatchRequired = REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED
479
503
  end
480
504
 
481
505
 
482
506
  def match(obj)
483
- assert_equal NUMBER, obj.number
484
- assert_equal SERVICE_OWNER_NUMBER, obj.serviceOwnerNumber
485
- assert_equal SERVICE_NAME, obj.serviceName
486
- assert_equal API_KEY, obj.apiKey
487
- assert_equal API_SECRET, obj.apiSecret
488
- assert_equal ISSUER, obj.issuer
489
- assert_equal AUTHORIZATION_ENDPOINT, obj.authorizationEndpoint
490
- assert_equal TOKEN_ENDPOINT, obj.tokenEndpoint
491
- assert_equal REVOCATION_ENDPOINT, obj.revocationEndpoint
492
- assert_equal SUPPORTED_REVOCATION_AUTH_METHODS, obj.supportedRevocationAuthMethods
493
- assert_equal USER_INFO_ENDPOINT, obj.userInfoEndpoint
494
- assert_equal JWKS_URI, obj.jwksUri
495
- assert_equal JWKS, obj.jwks
496
- assert_equal REGISTRATION_ENDPOINT, obj.registrationEndpoint
497
- assert_equal REGISTRATION_MANAGEMENT_ENDPOINT, obj.registrationManagementEndpoint
498
- assert_equal SUPPORTED_SCOPE_NAME, obj.supportedScopes[0].name
499
- assert_equal SUPPORTED_SCOPE_DESCRIPTION, obj.supportedScopes[0].description
500
- assert_equal SUPPORTED_RESPONSE_TYPES, obj.supportedResponseTypes
501
- assert_equal SUPPORTED_GRANT_TYPES, obj.supportedGrantTypes
502
- assert_equal SUPPORTED_ACRS, obj.supportedAcrs
503
- assert_equal SUPPORTED_TOKEN_AUTH_METHODS, obj.supportedTokenAuthMethods
504
- assert_equal SUPPORTED_DISPLAYS, obj.supportedDisplays
505
- assert_equal SUPPORTED_CLAIM_TYPES, obj.supportedClaimTypes
506
- assert_equal SUPPORTED_CLAIMS, obj.supportedClaims
507
- assert_equal SERVICE_DOCUMENTATION, obj.serviceDocumentation
508
- assert_equal SUPPORTED_CLAIM_LOCALES, obj.supportedClaimLocales
509
- assert_equal SUPPORTED_UI_LOCALES, obj.supportedUiLocales
510
- assert_equal POLICY_URI, obj.policyUri
511
- assert_equal TOS_URI, obj.tosUri
512
- assert_equal AUTHENTICATION_CALLBACK_ENDPOINT, obj.authenticationCallbackEndpoint
513
- assert_equal AUTHENTICATION_CALLBACK_API_KEY, obj.authenticationCallbackApiKey
514
- assert_equal AUTHENTICATION_CALLBACK_API_SECRET, obj.authenticationCallbackApiSecret
515
- assert_equal SUPPORTED_SNSES, obj.supportedSnses
516
- assert_equal SNS_CREDENTIALS_SNS, obj.snsCredentials[0].sns
517
- assert_equal SNS_CREDENTIALS_API_KEY, obj.snsCredentials[0].apiKey
518
- assert_equal SNS_CREDENTIALS_API_SECRET, obj.snsCredentials[0].apiSecret
519
- assert_equal CREATED_AT, obj.createdAt
520
- assert_equal MODIFIED_AT, obj.modifiedAt
521
- assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT, obj.developerAuthenticationCallbackEndpoint
522
- assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY, obj.developerAuthenticationCallbackApiKey
523
- assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET, obj.developerAuthenticationCallbackApiSecret
524
- assert_equal SUPPORTED_DEVELOPER_SNSES, obj.supportedDeveloperSnses
525
- assert_equal DEVELOPER_SNS_CREDENTIALS_SNS, obj.developerSnsCredentials[0].sns
526
- assert_equal DEVELOPER_SNS_CREDENTIALS_API_KEY, obj.developerSnsCredentials[0].apiKey
527
- assert_equal DEVELOPER_SNS_CREDENTIALS_API_SECRET, obj.developerSnsCredentials[0].apiSecret
528
- assert_equal CLIENTS_PER_DEVELOPER, obj.clientsPerDeveloper
529
- assert_equal DIRECT_AUTHORIZATION_ENDPOINT_ENABLED, obj.directAuthorizationEndpointEnabled
530
- assert_equal DIRECT_TOKEN_ENDPOINT_ENABLED, obj.directTokenEndpointEnabled
531
- assert_equal DIRECT_REVOCATION_ENDPOINT_ENABLED, obj.directRevocationEndpointEnabled
532
- assert_equal DIRECT_USER_INFO_ENDPOINT_ENABLED, obj.directUserInfoEndpointEnabled
533
- assert_equal DIRECT_JWKS_ENDPOINT_ENABLED, obj.directJwksEndpointEnabled
534
- assert_equal DIRECT_INTROSPECTION_ENDPOINT_ENABLED, obj.directIntrospectionEndpointEnabled
535
- assert_equal SINGLE_ACCESS_TOKEN_PER_SUBJECT, obj.singleAccessTokenPerSubject
536
- assert_equal PKCE_REQUIRED, obj.pkceRequired
537
- assert_equal PKCE_S256_REQUIRED, obj.pkceS256Required
538
- assert_equal REFRESH_TOKEN_KEPT, obj.refreshTokenKept
539
- assert_equal REFRESH_TOKEN_DURATION_KEPT, obj.refreshTokenDurationKept
540
- assert_equal ERROR_DESCRIPTION_OMITTED, obj.errorDescriptionOmitted
541
- assert_equal ERROR_URI_OMITTED, obj.errorUriOmitted
542
- assert_equal CLIENT_ID_ALIAS_ENABLED, obj.clientIdAliasEnabled
543
- assert_equal SUPPORTED_SERVICE_PROFILES, obj.supportedServiceProfiles
544
- assert_equal TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS, obj.tlsClientCertificateBoundAccessTokens
545
- assert_equal INTROSPECTION_ENDPOINT, obj.introspectionEndpoint
546
- assert_equal SUPPORTED_INTROSPECTION_AUTH_METHODS, obj.supportedIntrospectionAuthMethods
547
- assert_equal MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN, obj.mutualTlsValidatePkiCertChain
548
- assert_equal TRUSTED_ROOT_CERTIFICATES, obj.trustedRootCertificates
549
- assert_equal DYNAMIC_REGISTRATION_SUPPORTED, obj.dynamicRegistrationSupported
550
- assert_equal END_SESSION_ENDPOINT, obj.endSessionEndpoint
551
- assert_equal DESCRIPTION, obj.description
552
- assert_equal ACCESS_TOKEN_TYPE, obj.accessTokenType
553
- assert_equal ACCESS_TOKEN_SIGN_ALG, obj.accessTokenSignAlg
554
- assert_equal ACCESS_TOKEN_DURATION, obj.accessTokenDuration
555
- assert_equal REFRESH_TOKEN_DURATION, obj.refreshTokenDuration
556
- assert_equal ID_TOKEN_DURATION, obj.idTokenDuration
557
- assert_equal AUTHORIZATION_RESPONSE_DURATION, obj.authorizationResponseDuration
558
- assert_equal PUSHED_AUTH_REQ_DURATION, obj.pushedAuthReqDuration
559
- assert_equal METADATA_KEY, obj.metadata[0].key
560
- assert_equal METADATA_VALUE, obj.metadata[0].value
561
- assert_equal ACCESS_TOKEN_SIGNATURE_KEY_ID, obj.accessTokenSignatureKeyId
562
- assert_equal AUTHORIZATION_SIGNATURE_KEY_ID, obj.authorizationSignatureKeyId
563
- assert_equal ID_TOKEN_SIGNATURE_KEY_ID, obj.idTokenSignatureKeyId
564
- assert_equal USER_INFO_SIGNATURE_KEY_ID, obj.userInfoSignatureKeyId
565
- assert_equal SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES, obj.supportedBackchannelTokenDeliveryModes
566
- assert_equal BACKCHANNEL_AUTHENTICATION_ENDPOINT, obj.backchannelAuthenticationEndpoint
567
- assert_equal BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED, obj.backchannelUserCodeParameterSupported
568
- assert_equal BACKCHANNEL_AUTH_REQ_ID_DURATION, obj.backchannelAuthReqIdDuration
569
- assert_equal BACKCHANNEL_POLLING_INTERVAL, obj.backchannelPollingInterval
570
- assert_equal BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI, obj.backchannelBindingMessageRequiredInFapi
571
- assert_equal ALLOWABLE_CLOCK_SKEW, obj.allowableClockSkew
572
- assert_equal DEVICE_AUTHORIZATION_ENDPOINT, obj.deviceAuthorizationEndpoint
573
- assert_equal DEVICE_VERIFICATION_URI, obj.deviceVerificationUri
574
- assert_equal DEVICE_VERIFICATION_URI_COMPLETE, obj.deviceVerificationUriComplete
575
- assert_equal DEVICE_FLOW_CODE_DURATION, obj.deviceFlowCodeDuration
576
- assert_equal DEVICE_FLOW_POLLING_INTERVAL, obj.deviceFlowPollingInterval
577
- assert_equal USER_CODE_CHARSET, obj.userCodeCharset
578
- assert_equal USER_CODE_LENGTH, obj.userCodeLength
579
- assert_equal PUSHED_AUTH_REQ_ENDPOINT, obj.pushedAuthReqEndpoint
580
- assert_equal MTLS_ENDPOINT_ALIAS_NAME, obj.mtlsEndpointAliases[0].name
581
- assert_equal MTLS_ENDPOINT_ALIAS_URI, obj.mtlsEndpointAliases[0].uri
582
- assert_equal SUPPORTED_AUTHORIZATION_DATA_TYPES, obj.supportedAuthorizationDataTypes
583
- assert_equal SUPPORTED_TRUST_FRAMEWORKS, obj.supportedTrustFrameworks
584
- assert_equal SUPPORTED_EVIDENCE, obj.supportedEvidence
585
- assert_equal SUPPORTED_IDENTITY_DOCUMENTS, obj.supportedIdentityDocuments
586
- assert_equal SUPPORTED_VERIFICATION_METHODS, obj.supportedVerificationMethods
587
- assert_equal SUPPORTED_VERIFIED_CLAIMS, obj.supportedVerifiedClaims
588
- assert_equal MISSING_CLIENT_ID_ALLOWED, obj.missingClientIdAllowed
589
- assert_equal PAR_REQUIRED, obj.parRequired
590
- assert_equal REQUEST_OBJECT_REQUIRED, obj.requestObjectRequired
591
- assert_equal TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED, obj.traditionalRequestObjectProcessingApplied
592
- assert_equal CLAIM_SHORTCUT_RESTRICTIVE, obj.claimShortcutRestrictive
593
- assert_equal SCOPE_REQUIRED, obj.scopeRequired
594
- assert_equal NBF_OPTIONAL, obj.nbfOptional
595
- assert_equal ISS_SUPPRESSED, obj.issSuppressed
507
+ assert_equal NUMBER, obj.number
508
+ assert_equal SERVICE_OWNER_NUMBER, obj.serviceOwnerNumber
509
+ assert_equal SERVICE_NAME, obj.serviceName
510
+ assert_equal API_KEY, obj.apiKey
511
+ assert_equal API_SECRET, obj.apiSecret
512
+ assert_equal ISSUER, obj.issuer
513
+ assert_equal AUTHORIZATION_ENDPOINT, obj.authorizationEndpoint
514
+ assert_equal TOKEN_ENDPOINT, obj.tokenEndpoint
515
+ assert_equal REVOCATION_ENDPOINT, obj.revocationEndpoint
516
+ assert_equal SUPPORTED_REVOCATION_AUTH_METHODS, obj.supportedRevocationAuthMethods
517
+ assert_equal USER_INFO_ENDPOINT, obj.userInfoEndpoint
518
+ assert_equal JWKS_URI, obj.jwksUri
519
+ assert_equal JWKS, obj.jwks
520
+ assert_equal REGISTRATION_ENDPOINT, obj.registrationEndpoint
521
+ assert_equal REGISTRATION_MANAGEMENT_ENDPOINT, obj.registrationManagementEndpoint
522
+ assert_equal SUPPORTED_SCOPE_NAME, obj.supportedScopes[0].name
523
+ assert_equal SUPPORTED_SCOPE_DESCRIPTION, obj.supportedScopes[0].description
524
+ assert_equal SUPPORTED_RESPONSE_TYPES, obj.supportedResponseTypes
525
+ assert_equal SUPPORTED_GRANT_TYPES, obj.supportedGrantTypes
526
+ assert_equal SUPPORTED_ACRS, obj.supportedAcrs
527
+ assert_equal SUPPORTED_TOKEN_AUTH_METHODS, obj.supportedTokenAuthMethods
528
+ assert_equal SUPPORTED_DISPLAYS, obj.supportedDisplays
529
+ assert_equal SUPPORTED_CLAIM_TYPES, obj.supportedClaimTypes
530
+ assert_equal SUPPORTED_CLAIMS, obj.supportedClaims
531
+ assert_equal SERVICE_DOCUMENTATION, obj.serviceDocumentation
532
+ assert_equal SUPPORTED_CLAIM_LOCALES, obj.supportedClaimLocales
533
+ assert_equal SUPPORTED_UI_LOCALES, obj.supportedUiLocales
534
+ assert_equal POLICY_URI, obj.policyUri
535
+ assert_equal TOS_URI, obj.tosUri
536
+ assert_equal AUTHENTICATION_CALLBACK_ENDPOINT, obj.authenticationCallbackEndpoint
537
+ assert_equal AUTHENTICATION_CALLBACK_API_KEY, obj.authenticationCallbackApiKey
538
+ assert_equal AUTHENTICATION_CALLBACK_API_SECRET, obj.authenticationCallbackApiSecret
539
+ assert_equal SUPPORTED_SNSES, obj.supportedSnses
540
+ assert_equal SNS_CREDENTIALS_SNS, obj.snsCredentials[0].sns
541
+ assert_equal SNS_CREDENTIALS_API_KEY, obj.snsCredentials[0].apiKey
542
+ assert_equal SNS_CREDENTIALS_API_SECRET, obj.snsCredentials[0].apiSecret
543
+ assert_equal CREATED_AT, obj.createdAt
544
+ assert_equal MODIFIED_AT, obj.modifiedAt
545
+ assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT, obj.developerAuthenticationCallbackEndpoint
546
+ assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY, obj.developerAuthenticationCallbackApiKey
547
+ assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET, obj.developerAuthenticationCallbackApiSecret
548
+ assert_equal SUPPORTED_DEVELOPER_SNSES, obj.supportedDeveloperSnses
549
+ assert_equal DEVELOPER_SNS_CREDENTIALS_SNS, obj.developerSnsCredentials[0].sns
550
+ assert_equal DEVELOPER_SNS_CREDENTIALS_API_KEY, obj.developerSnsCredentials[0].apiKey
551
+ assert_equal DEVELOPER_SNS_CREDENTIALS_API_SECRET, obj.developerSnsCredentials[0].apiSecret
552
+ assert_equal CLIENTS_PER_DEVELOPER, obj.clientsPerDeveloper
553
+ assert_equal DIRECT_AUTHORIZATION_ENDPOINT_ENABLED, obj.directAuthorizationEndpointEnabled
554
+ assert_equal DIRECT_TOKEN_ENDPOINT_ENABLED, obj.directTokenEndpointEnabled
555
+ assert_equal DIRECT_REVOCATION_ENDPOINT_ENABLED, obj.directRevocationEndpointEnabled
556
+ assert_equal DIRECT_USER_INFO_ENDPOINT_ENABLED, obj.directUserInfoEndpointEnabled
557
+ assert_equal DIRECT_JWKS_ENDPOINT_ENABLED, obj.directJwksEndpointEnabled
558
+ assert_equal DIRECT_INTROSPECTION_ENDPOINT_ENABLED, obj.directIntrospectionEndpointEnabled
559
+ assert_equal SINGLE_ACCESS_TOKEN_PER_SUBJECT, obj.singleAccessTokenPerSubject
560
+ assert_equal PKCE_REQUIRED, obj.pkceRequired
561
+ assert_equal PKCE_S256_REQUIRED, obj.pkceS256Required
562
+ assert_equal REFRESH_TOKEN_KEPT, obj.refreshTokenKept
563
+ assert_equal REFRESH_TOKEN_DURATION_KEPT, obj.refreshTokenDurationKept
564
+ assert_equal ERROR_DESCRIPTION_OMITTED, obj.errorDescriptionOmitted
565
+ assert_equal ERROR_URI_OMITTED, obj.errorUriOmitted
566
+ assert_equal CLIENT_ID_ALIAS_ENABLED, obj.clientIdAliasEnabled
567
+ assert_equal SUPPORTED_SERVICE_PROFILES, obj.supportedServiceProfiles
568
+ assert_equal TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS, obj.tlsClientCertificateBoundAccessTokens
569
+ assert_equal INTROSPECTION_ENDPOINT, obj.introspectionEndpoint
570
+ assert_equal SUPPORTED_INTROSPECTION_AUTH_METHODS, obj.supportedIntrospectionAuthMethods
571
+ assert_equal MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN, obj.mutualTlsValidatePkiCertChain
572
+ assert_equal TRUSTED_ROOT_CERTIFICATES, obj.trustedRootCertificates
573
+ assert_equal DYNAMIC_REGISTRATION_SUPPORTED, obj.dynamicRegistrationSupported
574
+ assert_equal END_SESSION_ENDPOINT, obj.endSessionEndpoint
575
+ assert_equal DESCRIPTION, obj.description
576
+ assert_equal ACCESS_TOKEN_TYPE, obj.accessTokenType
577
+ assert_equal ACCESS_TOKEN_SIGN_ALG, obj.accessTokenSignAlg
578
+ assert_equal ACCESS_TOKEN_DURATION, obj.accessTokenDuration
579
+ assert_equal REFRESH_TOKEN_DURATION, obj.refreshTokenDuration
580
+ assert_equal ID_TOKEN_DURATION, obj.idTokenDuration
581
+ assert_equal AUTHORIZATION_RESPONSE_DURATION, obj.authorizationResponseDuration
582
+ assert_equal PUSHED_AUTH_REQ_DURATION, obj.pushedAuthReqDuration
583
+ assert_equal METADATA_KEY, obj.metadata[0].key
584
+ assert_equal METADATA_VALUE, obj.metadata[0].value
585
+ assert_equal ACCESS_TOKEN_SIGNATURE_KEY_ID, obj.accessTokenSignatureKeyId
586
+ assert_equal AUTHORIZATION_SIGNATURE_KEY_ID, obj.authorizationSignatureKeyId
587
+ assert_equal ID_TOKEN_SIGNATURE_KEY_ID, obj.idTokenSignatureKeyId
588
+ assert_equal USER_INFO_SIGNATURE_KEY_ID, obj.userInfoSignatureKeyId
589
+ assert_equal SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES, obj.supportedBackchannelTokenDeliveryModes
590
+ assert_equal BACKCHANNEL_AUTHENTICATION_ENDPOINT, obj.backchannelAuthenticationEndpoint
591
+ assert_equal BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED, obj.backchannelUserCodeParameterSupported
592
+ assert_equal BACKCHANNEL_AUTH_REQ_ID_DURATION, obj.backchannelAuthReqIdDuration
593
+ assert_equal BACKCHANNEL_POLLING_INTERVAL, obj.backchannelPollingInterval
594
+ assert_equal BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI, obj.backchannelBindingMessageRequiredInFapi
595
+ assert_equal ALLOWABLE_CLOCK_SKEW, obj.allowableClockSkew
596
+ assert_equal DEVICE_AUTHORIZATION_ENDPOINT, obj.deviceAuthorizationEndpoint
597
+ assert_equal DEVICE_VERIFICATION_URI, obj.deviceVerificationUri
598
+ assert_equal DEVICE_VERIFICATION_URI_COMPLETE, obj.deviceVerificationUriComplete
599
+ assert_equal DEVICE_FLOW_CODE_DURATION, obj.deviceFlowCodeDuration
600
+ assert_equal DEVICE_FLOW_POLLING_INTERVAL, obj.deviceFlowPollingInterval
601
+ assert_equal USER_CODE_CHARSET, obj.userCodeCharset
602
+ assert_equal USER_CODE_LENGTH, obj.userCodeLength
603
+ assert_equal PUSHED_AUTH_REQ_ENDPOINT, obj.pushedAuthReqEndpoint
604
+ assert_equal MTLS_ENDPOINT_ALIAS_NAME, obj.mtlsEndpointAliases[0].name
605
+ assert_equal MTLS_ENDPOINT_ALIAS_URI, obj.mtlsEndpointAliases[0].uri
606
+ assert_equal SUPPORTED_AUTHORIZATION_DETAILS_TYPES, obj.supportedAuthorizationDetailsTypes
607
+ assert_equal SUPPORTED_TRUST_FRAMEWORKS, obj.supportedTrustFrameworks
608
+ assert_equal SUPPORTED_EVIDENCE, obj.supportedEvidence
609
+ assert_equal SUPPORTED_IDENTITY_DOCUMENTS, obj.supportedIdentityDocuments
610
+ assert_equal SUPPORTED_VERIFICATION_METHODS, obj.supportedVerificationMethods
611
+ assert_equal SUPPORTED_VERIFIED_CLAIMS, obj.supportedVerifiedClaims
612
+ assert_equal MISSING_CLIENT_ID_ALLOWED, obj.missingClientIdAllowed
613
+ assert_equal PAR_REQUIRED, obj.parRequired
614
+ assert_equal REQUEST_OBJECT_REQUIRED, obj.requestObjectRequired
615
+ assert_equal TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED, obj.traditionalRequestObjectProcessingApplied
616
+ assert_equal CLAIM_SHORTCUT_RESTRICTIVE, obj.claimShortcutRestrictive
617
+ assert_equal SCOPE_REQUIRED, obj.scopeRequired
618
+ assert_equal NBF_OPTIONAL, obj.nbfOptional
619
+ assert_equal ISS_SUPPRESSED, obj.issSuppressed
620
+ assert_equal ATTRIBUTE_KEY, obj.attributes[0].key
621
+ assert_equal ATTRIBUTE_VALUE, obj.attributes[0].value
622
+ assert_equal SUPPORTED_CUSTOM_CLIENT_METADATA, obj.supportedCustomClientMetadata
623
+ assert_equal TOKEN_EXPIRATION_LINKED, obj.tokenExpirationLinked
624
+ assert_equal FRONT_CHANNEL_REQUEST_OBJECT_ENCRYPTION_REQUIRED, obj.frontChannelRequestObjectEncryptionRequired
625
+ assert_equal REQUEST_OBJECT_ENCRYPTION_ALG_MATCH_REQUIRED, obj.requestObjectEncryptionAlgMatchRequired
626
+ assert_equal REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED, obj.requestObjectEncryptionEncMatchRequired
596
627
  end
597
628
 
598
629