authlete 1.38.0 → 1.39.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +5 -5
- data/authlete.gemspec +1 -2
- data/lib/authlete/model/service.rb +7 -1
- data/lib/authlete/version.rb +1 -1
- metadata +7 -170
- data/test/authlete/model/request/test_authentication-callback-request.rb +0 -100
- data/test/authlete/model/request/test_authorization-fail-request.rb +0 -67
- data/test/authlete/model/request/test_authorization-issue-request.rb +0 -94
- data/test/authlete/model/request/test_authorization-request.rb +0 -57
- data/test/authlete/model/request/test_backchannel-authentication-complete-request.rb +0 -102
- data/test/authlete/model/request/test_backchannel-authentication-fail-request.rb +0 -71
- data/test/authlete/model/request/test_backchannel-authentication-issue-request.rb +0 -57
- data/test/authlete/model/request/test_backchannel-authentication-request.rb +0 -75
- data/test/authlete/model/request/test_client-authorization-delete-request.rb +0 -57
- data/test/authlete/model/request/test_client-authorization-get-list-request.rb +0 -71
- data/test/authlete/model/request/test_client-authorization-update-request.rb +0 -63
- data/test/authlete/model/request/test_client-registration-request.rb +0 -68
- data/test/authlete/model/request/test_device-authorization-request.rb +0 -75
- data/test/authlete/model/request/test_device-complete-request.rb +0 -102
- data/test/authlete/model/request/test_device-verification-request.rb +0 -57
- data/test/authlete/model/request/test_granted-scopes-request.rb +0 -57
- data/test/authlete/model/request/test_introspection-request.rb +0 -79
- data/test/authlete/model/request/test_pushed-auth-req-request.rb +0 -75
- data/test/authlete/model/request/test_revocation-request.rb +0 -67
- data/test/authlete/model/request/test_standard-introspection-request.rb +0 -57
- data/test/authlete/model/request/test_token-create-request.rb +0 -110
- data/test/authlete/model/request/test_token-fail-request.rb +0 -63
- data/test/authlete/model/request/test_token-issue-request.rb +0 -70
- data/test/authlete/model/request/test_token-request.rb +0 -94
- data/test/authlete/model/request/test_token-revoke-request.rb +0 -71
- data/test/authlete/model/request/test_token-update-request.rb +0 -82
- data/test/authlete/model/request/test_user-info-issue-request.rb +0 -67
- data/test/authlete/model/request/test_user-info-request.rb +0 -75
- data/test/authlete/model/response/test_access-token.rb +0 -101
- data/test/authlete/model/response/test_authorization-fail-response.rb +0 -68
- data/test/authlete/model/response/test_authorization-issue-response.rb +0 -92
- data/test/authlete/model/response/test_authorization-response.rb +0 -145
- data/test/authlete/model/response/test_authorized-client-list-response.rb +0 -83
- data/test/authlete/model/response/test_backchannel-authentication-complete-response.rb +0 -132
- data/test/authlete/model/response/test_backchannel-authentication-fail-response.rb +0 -68
- data/test/authlete/model/response/test_backchannel-authentication-issue-response.rb +0 -80
- data/test/authlete/model/response/test_backchannel-authentication-response.rb +0 -156
- data/test/authlete/model/response/test_client-list-response.rb +0 -79
- data/test/authlete/model/response/test_client-secret-refresh-response.rb +0 -68
- data/test/authlete/model/response/test_client-secret-update-response.rb +0 -68
- data/test/authlete/model/response/test_device-authorization-response.rb +0 -140
- data/test/authlete/model/response/test_device-complete-response.rb +0 -64
- data/test/authlete/model/response/test_device-verification-response.rb +0 -112
- data/test/authlete/model/response/test_granted-scopes-get-response.rb +0 -84
- data/test/authlete/model/response/test_introspection-response.rb +0 -127
- data/test/authlete/model/response/test_pushed-auth-req-response.rb +0 -76
- data/test/authlete/model/response/test_revocation-response.rb +0 -68
- data/test/authlete/model/response/test_service-list-response.rb +0 -72
- data/test/authlete/model/response/test_standard-introspection-response.rb +0 -68
- data/test/authlete/model/response/test_token-create-response.rb +0 -107
- data/test/authlete/model/response/test_token-fail-response.rb +0 -68
- data/test/authlete/model/response/test_token-issue-response.rb +0 -127
- data/test/authlete/model/response/test_token-list-response.rb +0 -84
- data/test/authlete/model/response/test_token-response.rb +0 -147
- data/test/authlete/model/response/test_token-revoke-response.rb +0 -63
- data/test/authlete/model/response/test_token-update-response.rb +0 -87
- data/test/authlete/model/response/test_user-info-issue-response.rb +0 -68
- data/test/authlete/model/response/test_user-info-response.rb +0 -107
- data/test/authlete/model/test_client-extension.rb +0 -98
- data/test/authlete/model/test_client.rb +0 -604
- data/test/authlete/model/test_hsk.rb +0 -108
- data/test/authlete/model/test_named-uri.rb +0 -83
- data/test/authlete/model/test_pair.rb +0 -83
- data/test/authlete/model/test_property.rb +0 -88
- data/test/authlete/model/test_result.rb +0 -68
- data/test/authlete/model/test_scope.rb +0 -104
- data/test/authlete/model/test_service-owner.rb +0 -80
- data/test/authlete/model/test_service.rb +0 -896
- data/test/authlete/model/test_sns-credentials.rb +0 -88
- data/test/authlete/model/test_tagged-value.rb +0 -83
- data/test/authlete/model/test_trust-anchor.rb +0 -84
- data/test/authlete/test_exception.rb +0 -70
- data/test/authlete/types/test_application-type.rb +0 -44
- data/test/authlete/types/test_client-auth-method.rb +0 -64
- data/test/authlete/types/test_delivery-mode.rb +0 -48
- data/test/authlete/types/test_grant-type.rb +0 -72
- data/test/authlete/types/test_jwealg.rb +0 -104
- data/test/authlete/types/test_jweenc.rb +0 -60
- data/test/authlete/types/test_jwsalg.rb +0 -96
- data/test/authlete/types/test_response-type.rb +0 -68
- data/test/authlete/types/test_subject-type.rb +0 -44
@@ -1,896 +0,0 @@
|
|
1
|
-
# :nodoc:
|
2
|
-
#
|
3
|
-
# Copyright (C) 2014-2022 Authlete, Inc.
|
4
|
-
#
|
5
|
-
# Licensed under the Apache License, Version 2.0 (the "License");
|
6
|
-
# you may not use this file except in compliance with the License.
|
7
|
-
# You may obtain a copy of the License at
|
8
|
-
#
|
9
|
-
# http://www.apache.org/licenses/LICENSE-2.0
|
10
|
-
#
|
11
|
-
# Unless required by applicable law or agreed to in writing, software
|
12
|
-
# distributed under the License is distributed on an "AS IS" BASIS,
|
13
|
-
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
14
|
-
# See the License for the specific language governing permissions and
|
15
|
-
# limitations under the License.
|
16
|
-
|
17
|
-
|
18
|
-
require 'authlete'
|
19
|
-
require 'json'
|
20
|
-
require 'minitest/autorun'
|
21
|
-
|
22
|
-
|
23
|
-
class ServiceTest < Minitest::Test
|
24
|
-
NUMBER = 1000
|
25
|
-
SERVICE_OWNER_NUMBER = 12345
|
26
|
-
SERVICE_NAME = '<service-name>'
|
27
|
-
API_KEY = '<api-key>'
|
28
|
-
API_SECRET = '<api-secret>'
|
29
|
-
ISSUER = '<issuer>'
|
30
|
-
AUTHORIZATION_ENDPOINT = '<authorization-endpoint>'
|
31
|
-
TOKEN_ENDPOINT = '<token-endpoint>'
|
32
|
-
REVOCATION_ENDPOINT = '<revocation-endpoint>'
|
33
|
-
SUPPORTED_REVOCATION_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
|
34
|
-
USER_INFO_ENDPOINT = '<user-info-endpoint>'
|
35
|
-
JWKS_URI = '<jwks-uri>'
|
36
|
-
JWKS = '<jwks>'
|
37
|
-
REGISTRATION_ENDPOINT = '<registration-endpoint>'
|
38
|
-
REGISTRATION_MANAGEMENT_ENDPOINT = '<registration-management-endpoint>'
|
39
|
-
SUPPORTED_SCOPE_NAME = 'scope0'
|
40
|
-
SUPPORTED_SCOPE_DESCRIPTION = '<scope0-description>'
|
41
|
-
SUPPORTED_SCOPES = [ Authlete::Model::Scope.new(name: SUPPORTED_SCOPE_NAME, description: SUPPORTED_SCOPE_DESCRIPTION) ]
|
42
|
-
SUPPORTED_RESPONSE_TYPES = [ 'NONE', 'CODE', 'TOKEN', 'ID_TOKEN' ]
|
43
|
-
SUPPORTED_GRANT_TYPES = [ 'AUTHORIZATION_CODE', 'REFRESH_TOKEN' ]
|
44
|
-
SUPPORTED_ACRS = [ '<supported-acr0>', '<supported-acr1>' ]
|
45
|
-
SUPPORTED_TOKEN_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
|
46
|
-
SUPPORTED_DISPLAYS = [ 'PAGE', 'POPUP', 'TOUCH', 'WAP' ]
|
47
|
-
SUPPORTED_CLAIM_TYPES = [ 'NORMAL' ]
|
48
|
-
SUPPORTED_CLAIMS = [ '<supported-claim0>', '<supported-claim1>' ]
|
49
|
-
SERVICE_DOCUMENTATION = '<service-documentation>'
|
50
|
-
SUPPORTED_CLAIM_LOCALES = [ 'en-US' ]
|
51
|
-
SUPPORTED_UI_LOCALES = [ 'en-US' ]
|
52
|
-
POLICY_URI = '<policy-uri>'
|
53
|
-
TOS_URI = '<tos-uri>'
|
54
|
-
AUTHENTICATION_CALLBACK_ENDPOINT = '<authentication-callback-endpoint>'
|
55
|
-
AUTHENTICATION_CALLBACK_API_KEY = '<authentication-callback-api-key>'
|
56
|
-
AUTHENTICATION_CALLBACK_API_SECRET = '<authentication-callback-api-secret>'
|
57
|
-
SUPPORTED_SNSES = [ 'FACEBOOK' ]
|
58
|
-
SNS_CREDENTIALS_SNS = 'FACEBOOK'
|
59
|
-
SNS_CREDENTIALS_API_KEY = '<sns-credentials0-api-key>'
|
60
|
-
SNS_CREDENTIALS_API_SECRET = '<sns-credentials0-api-secret>'
|
61
|
-
SNS_CREDENTIALS = [ Authlete::Model::SnsCredentials.new(sns: SNS_CREDENTIALS_SNS, apiKey: SNS_CREDENTIALS_API_KEY, apiSecret: SNS_CREDENTIALS_API_SECRET) ]
|
62
|
-
CREATED_AT = 10000
|
63
|
-
MODIFIED_AT = 10000
|
64
|
-
DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT = '<developer-authentication-callback-endpoint>'
|
65
|
-
DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY = '<developer-authentication-callback-api-key>'
|
66
|
-
DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET = '<developer-authentication-callback-api-secret>'
|
67
|
-
SUPPORTED_DEVELOPER_SNSES = [ 'FACEBOOK' ]
|
68
|
-
DEVELOPER_SNS_CREDENTIALS_SNS = 'FACEBOOK'
|
69
|
-
DEVELOPER_SNS_CREDENTIALS_API_KEY = '<developer-sns-credentials0-api-key>'
|
70
|
-
DEVELOPER_SNS_CREDENTIALS_API_SECRET = '<developer-sns-credentials0-api-secret>'
|
71
|
-
DEVELOPER_SNS_CREDENTIALS = [ Authlete::Model::SnsCredentials.new(sns: DEVELOPER_SNS_CREDENTIALS_SNS, apiKey: DEVELOPER_SNS_CREDENTIALS_API_KEY, apiSecret: DEVELOPER_SNS_CREDENTIALS_API_SECRET) ]
|
72
|
-
CLIENTS_PER_DEVELOPER = 10
|
73
|
-
DIRECT_AUTHORIZATION_ENDPOINT_ENABLED = true
|
74
|
-
DIRECT_TOKEN_ENDPOINT_ENABLED = true
|
75
|
-
DIRECT_REVOCATION_ENDPOINT_ENABLED = true
|
76
|
-
DIRECT_USER_INFO_ENDPOINT_ENABLED = true
|
77
|
-
DIRECT_JWKS_ENDPOINT_ENABLED = true
|
78
|
-
DIRECT_INTROSPECTION_ENDPOINT_ENABLED = true
|
79
|
-
SINGLE_ACCESS_TOKEN_PER_SUBJECT = false
|
80
|
-
PKCE_REQUIRED = true
|
81
|
-
PKCE_S256_REQUIRED = true
|
82
|
-
REFRESH_TOKEN_KEPT = true
|
83
|
-
REFRESH_TOKEN_DURATION_KEPT = true
|
84
|
-
ERROR_DESCRIPTION_OMITTED = false
|
85
|
-
ERROR_URI_OMITTED = false
|
86
|
-
CLIENT_ID_ALIAS_ENABLED = true
|
87
|
-
SUPPORTED_SERVICE_PROFILES = [ 'FAPI', 'OPEN_BANKING' ]
|
88
|
-
TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS = true
|
89
|
-
INTROSPECTION_ENDPOINT = '<introspection-endpoint>'
|
90
|
-
SUPPORTED_INTROSPECTION_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
|
91
|
-
MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN = true
|
92
|
-
TRUSTED_ROOT_CERTIFICATES = [ '<trusted-root-certificate0>', '<trusted-root-certificate1>' ]
|
93
|
-
DYNAMIC_REGISTRATION_SUPPORTED = true
|
94
|
-
END_SESSION_ENDPOINT = '<end-session-endpoint>'
|
95
|
-
DESCRIPTION = '<description>'
|
96
|
-
ACCESS_TOKEN_TYPE = 'Bearer'
|
97
|
-
ACCESS_TOKEN_SIGN_ALG = 'HS256'
|
98
|
-
ACCESS_TOKEN_DURATION = 300
|
99
|
-
REFRESH_TOKEN_DURATION = 300
|
100
|
-
ID_TOKEN_DURATION = 300
|
101
|
-
AUTHORIZATION_RESPONSE_DURATION = 300
|
102
|
-
PUSHED_AUTH_REQ_DURATION = 300
|
103
|
-
METADATA_KEY = '<metadata0-key>'
|
104
|
-
METADATA_VALUE = '<metadata0-value>'
|
105
|
-
METADATA = [ Authlete::Model::Pair.new(key: METADATA_KEY, value: METADATA_VALUE) ]
|
106
|
-
ACCESS_TOKEN_SIGNATURE_KEY_ID = '<access-token-signature-key-id>'
|
107
|
-
AUTHORIZATION_SIGNATURE_KEY_ID = '<authorization-signature-key-id>'
|
108
|
-
ID_TOKEN_SIGNATURE_KEY_ID = '<id-token-signature-key-id>'
|
109
|
-
USER_INFO_SIGNATURE_KEY_ID = '<user-info-signature-key-id>'
|
110
|
-
SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES = [ 'POLL', 'PING', 'PUSH' ]
|
111
|
-
BACKCHANNEL_AUTHENTICATION_ENDPOINT = '<backchannel-authentication-endpoint>'
|
112
|
-
BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED = true
|
113
|
-
BACKCHANNEL_AUTH_REQ_ID_DURATION = 300
|
114
|
-
BACKCHANNEL_POLLING_INTERVAL = 10
|
115
|
-
BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI = true
|
116
|
-
ALLOWABLE_CLOCK_SKEW = 100
|
117
|
-
DEVICE_AUTHORIZATION_ENDPOINT = '<device-authorization-endpoint>'
|
118
|
-
DEVICE_VERIFICATION_URI = '<device-verification-uri>'
|
119
|
-
DEVICE_VERIFICATION_URI_COMPLETE = '<device-verification-uri-complete>'
|
120
|
-
DEVICE_FLOW_CODE_DURATION = 300
|
121
|
-
DEVICE_FLOW_POLLING_INTERVAL = 10
|
122
|
-
USER_CODE_CHARSET = 'BASE20'
|
123
|
-
USER_CODE_LENGTH = 100
|
124
|
-
PUSHED_AUTH_REQ_ENDPOINT = '<pushed-auth-req-endpoint>'
|
125
|
-
MTLS_ENDPOINT_ALIAS_NAME = '<mtls-endpoint-alias0-name>'
|
126
|
-
MTLS_ENDPOINT_ALIAS_URI = '<mtls-endpoint-alias0-uri>'
|
127
|
-
MTLS_ENDPOINT_ALIASES = [ Authlete::Model::NamedUri.new(name: MTLS_ENDPOINT_ALIAS_NAME, uri: MTLS_ENDPOINT_ALIAS_URI) ]
|
128
|
-
SUPPORTED_AUTHORIZATION_DETAILS_TYPES = [ '<supported-authorization-details-type0>', '<supported-authorization-details-type1>' ]
|
129
|
-
SUPPORTED_TRUST_FRAMEWORKS = [ '<supported-trust-framework0>', '<supported-trust-framework1>' ]
|
130
|
-
SUPPORTED_EVIDENCE = [ '<supported-evidence0>', '<supported-evidence1>' ]
|
131
|
-
SUPPORTED_IDENTITY_DOCUMENTS = [ '<supported-identity-document0>', '<supported-identity-document1>' ]
|
132
|
-
SUPPORTED_VERIFICATION_METHODS = [ '<supported-verification-method0>', '<supported-verification-method1>' ]
|
133
|
-
SUPPORTED_VERIFIED_CLAIMS = [ '<supported-verified-claim0>', '<supported-verified-claim1>' ]
|
134
|
-
MISSING_CLIENT_ID_ALLOWED = false
|
135
|
-
PAR_REQUIRED = false
|
136
|
-
REQUEST_OBJECT_REQUIRED = true
|
137
|
-
TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED = false
|
138
|
-
CLAIM_SHORTCUT_RESTRICTIVE = false
|
139
|
-
SCOPE_REQUIRED = true
|
140
|
-
NBF_OPTIONAL = true
|
141
|
-
ISS_SUPPRESSED = false
|
142
|
-
ATTRIBUTE_KEY = '<attribute0-key>'
|
143
|
-
ATTRIBUTE_VALUE = '<attribute0-value>'
|
144
|
-
ATTRIBUTES = [ Authlete::Model::Pair.new(key: ATTRIBUTE_KEY, value: ATTRIBUTE_VALUE) ]
|
145
|
-
SUPPORTED_CUSTOM_CLIENT_METADATA = [ '<supported-custom-client-metadata0>', '<supported-custom-client-metadata1>' ]
|
146
|
-
TOKEN_EXPIRATION_LINKED = false
|
147
|
-
FRONT_CHANNEL_REQUEST_OBJECT_ENCRYPTION_REQUIRED = false
|
148
|
-
REQUEST_OBJECT_ENCRYPTION_ALG_MATCH_REQUIRED = false
|
149
|
-
REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED = false
|
150
|
-
HSKS_KTY = 'EC'
|
151
|
-
HSKS_USE = 'sig'
|
152
|
-
HSKS_ALG = 'ES256'
|
153
|
-
HSKS_KID = 'jane'
|
154
|
-
HSKS_HSMNAME = 'google'
|
155
|
-
HSKS_HANDLE = '<handle>'
|
156
|
-
HSKS_PUBLICKEY = '<public-key>'
|
157
|
-
HSKS = [ Authlete::Model::Hsk.new(kty: HSKS_KTY, use: HSKS_USE, alg: HSKS_ALG, kid: HSKS_KID, hsmName: HSKS_HSMNAME, handle: HSKS_HANDLE, publicKey: HSKS_PUBLICKEY) ]
|
158
|
-
HSM_ENABLED = false
|
159
|
-
REFRESH_TOKEN_DURATION_RESET = false
|
160
|
-
GRANT_MANAGEMENT_ENDPOINT = '<grant-management-endpoint>'
|
161
|
-
GRANT_MANAGEMENT_ACTION_REQUIRED = false
|
162
|
-
UNATHORIZED_ON_CLIENT_CONFIG_SUPPORTED = false
|
163
|
-
DCR_SCOPE_USED_AS_REQUESTABLE = false
|
164
|
-
PREDEFINED_TRANSFORMED_CLAIMS = '<predefined_transformed_claims>'
|
165
|
-
LOOPBACK_REDIRECTION_URI_VARIABLE = false
|
166
|
-
SUPPORTED_DOCUMENTS = ['<supported-documents1>', '<supported-documents1>']
|
167
|
-
SUPPORTED_DOCUMENTS_METHODS = ['<supported-documents-methods1>', '<supported-documents-methods1>']
|
168
|
-
SUPPORTED_DOCUMENTS_VALIDATION_METHODS = ['<supported-documents-validation-methods1>', '<supported-documents-validation-methods1>']
|
169
|
-
SUPPORTED_DOCUMENTS_VERIFICATION_METHODS = ['<supported-documents-verification-methods1>', '<supported-documents-verification-methods1>']
|
170
|
-
SUPPORTED_ELECTRONIC_RECORDS = ['<supported-electronic-records1>', '<supported-electronic-records1>']
|
171
|
-
SUPPORTED_ATTACHMENTS = [ 'EMBEDDED', 'EXTERNAL']
|
172
|
-
SUPPORTED_DIGEST_ALGORITHMS = ['<supported-digest-algorithms1>', '<supported-digest-algorithms1>']
|
173
|
-
REQUEST_OBJECT_AUDIENCE_CHECKED = true
|
174
|
-
ACCESS_TOKEN_FOR_EXTERNAL_ATTACHMENT_EMBEDDED = false
|
175
|
-
REFRESH_TOKEN_IDEMPOTENT = false
|
176
|
-
FEDERATION_ENABLED = false
|
177
|
-
ORGANIZATION_NAME = '<organization-name>'
|
178
|
-
AUTHORITY_HINTS = [ '<authority>', '<hints>']
|
179
|
-
FEDERATION_JWKS = '<federation-jwks>'
|
180
|
-
SIGNED_JWKS_URI = '<signed-jwks-uri>'
|
181
|
-
FEDERATION_REGISTRATION_ENDPOINT = '<federation-registration-endpoint>'
|
182
|
-
SUPPORTED_CLIENT_REGISTRATION_TYPES = [ 'AUTOMATIC', 'EXPLICIT']
|
183
|
-
TRUST_ANCHOR_ENTITY_ID = '<entity-id>'
|
184
|
-
TRUST_ANCHOR_JWKS = '<jwks>'
|
185
|
-
TRUST_ANCHORS = [ Authlete::Model::TrustAnchor.new(entityId: TRUST_ANCHOR_ENTITY_ID, jwks: TRUST_ANCHOR_JWKS) ]
|
186
|
-
TOKEN_EXCHANGE_BY_IDENTIFIABLE_CLIENTS_ONLY = false
|
187
|
-
TOKEN_EXCHANGE_BY_CONFIDENTIAL_CLIENTS_ONLY = false
|
188
|
-
TOKEN_EXCHANGE_BY_PERMITTED_CLIENTS_ONLY = false
|
189
|
-
TOKEN_EXCHANGE_ENCRYPTED_JWT_REJECTED = false
|
190
|
-
TOKEN_EXCHANGE_UNSIGNED_JWT_REJECTED = false
|
191
|
-
JWT_GRANT_BY_IDENTIFIABLE_CLIENTS_ONLY = false
|
192
|
-
JWT_GRANT_ENCRYPTED_JWT_REJECTED = false
|
193
|
-
JWT_GRANT_UNSIGNED_JWT_REJECTED = false
|
194
|
-
FEDERATION_SIGNATURE_KEY_ID = '<federation-signature-key-id>'
|
195
|
-
FEDERATION_CONFIGURATION_DURATION = 100
|
196
|
-
DCR_DUPLICATE_SOFTWARE_ID_BLOCKED = false
|
197
|
-
OPENID_DROPPED_ON_REFRESH_WITHOUT_OFFLINE_ACCESS = false
|
198
|
-
SUPPORTED_DOCUMENTS_CHECK_METHODS = ['supported', 'documents']
|
199
|
-
ID_TOKEN_AUD_TYPE = '<id-token-aud-type>'
|
200
|
-
VERIFIED_CLAIMS_VALIDATION_SCHEMA_SET = '<verified_claims_validation_schema_set>'
|
201
|
-
CREDENTIAL_DURATION = 100
|
202
|
-
CREDENTIAL_JWKS = '<credential-duration>'
|
203
|
-
ID_TOKEN_REISSUABLE = false
|
204
|
-
|
205
|
-
def generate_json
|
206
|
-
return <<~JSON
|
207
|
-
{
|
208
|
-
"number": 1000,
|
209
|
-
"serviceOwnerNumber": 12345,
|
210
|
-
"serviceName": "<service-name>",
|
211
|
-
"apiKey": "<api-key>",
|
212
|
-
"apiSecret": "<api-secret>",
|
213
|
-
"issuer": "<issuer>",
|
214
|
-
"authorizationEndpoint": "<authorization-endpoint>",
|
215
|
-
"tokenEndpoint": "<token-endpoint>",
|
216
|
-
"revocationEndpoint": "<revocation-endpoint>",
|
217
|
-
"supportedRevocationAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
|
218
|
-
"userInfoEndpoint": "<user-info-endpoint>",
|
219
|
-
"jwksUri": "<jwks-uri>",
|
220
|
-
"jwks": "<jwks>",
|
221
|
-
"hsks": [ { "kty": "EC", "use": "sig", "alg": "ES256", "kid": "jane", "hsmName": "google", "handle": "<handle>", "publicKey": "<public-key>" } ],
|
222
|
-
"hsmEnabled": false,
|
223
|
-
"registrationEndpoint": "<registration-endpoint>",
|
224
|
-
"registrationManagementEndpoint": "<registration-management-endpoint>",
|
225
|
-
"supportedScopes": [ { "name": "scope0", "description": "<scope0-description>" } ],
|
226
|
-
"supportedResponseTypes": [ "NONE", "CODE", "TOKEN", "ID_TOKEN" ],
|
227
|
-
"supportedGrantTypes": [ "AUTHORIZATION_CODE", "REFRESH_TOKEN" ],
|
228
|
-
"supportedAcrs": [ "<supported-acr0>", "<supported-acr1>" ],
|
229
|
-
"supportedTokenAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
|
230
|
-
"supportedDisplays": [ "PAGE", "POPUP", "TOUCH", "WAP" ],
|
231
|
-
"supportedClaimTypes": [ "NORMAL" ],
|
232
|
-
"supportedClaims": [ "<supported-claim0>", "<supported-claim1>" ],
|
233
|
-
"serviceDocumentation": "<service-documentation>",
|
234
|
-
"supportedClaimLocales": [ "en-US" ],
|
235
|
-
"supportedUiLocales": [ "en-US" ],
|
236
|
-
"policyUri": "<policy-uri>",
|
237
|
-
"tosUri": "<tos-uri>",
|
238
|
-
"authenticationCallbackEndpoint": "<authentication-callback-endpoint>",
|
239
|
-
"authenticationCallbackApiKey": "<authentication-callback-api-key>",
|
240
|
-
"authenticationCallbackApiSecret": "<authentication-callback-api-secret>",
|
241
|
-
"supportedSnses": [ "FACEBOOK" ],
|
242
|
-
"snsCredentials": [ { "sns": "FACEBOOK", "apiKey": "<sns-credentials0-api-key>", "apiSecret": "<sns-credentials0-api-secret>" } ],
|
243
|
-
"createdAt": 10000,
|
244
|
-
"modifiedAt": 10000,
|
245
|
-
"developerAuthenticationCallbackEndpoint": "<developer-authentication-callback-endpoint>",
|
246
|
-
"developerAuthenticationCallbackApiKey": "<developer-authentication-callback-api-key>",
|
247
|
-
"developerAuthenticationCallbackApiSecret": "<developer-authentication-callback-api-secret>",
|
248
|
-
"supportedDeveloperSnses": [ "FACEBOOK" ],
|
249
|
-
"developerSnsCredentials": [ { "sns": "FACEBOOK", "apiKey": "<developer-sns-credentials0-api-key>", "apiSecret": "<developer-sns-credentials0-api-secret>" } ],
|
250
|
-
"clientsPerDeveloper": 10,
|
251
|
-
"directAuthorizationEndpointEnabled": true,
|
252
|
-
"directTokenEndpointEnabled": true,
|
253
|
-
"directRevocationEndpointEnabled": true,
|
254
|
-
"directUserInfoEndpointEnabled": true,
|
255
|
-
"directJwksEndpointEnabled": true,
|
256
|
-
"directIntrospectionEndpointEnabled": true,
|
257
|
-
"singleAccessTokenPerSubject": false,
|
258
|
-
"pkceRequired": true,
|
259
|
-
"pkceS256Required": true,
|
260
|
-
"refreshTokenKept": true,
|
261
|
-
"refreshTokenDurationKept": true,
|
262
|
-
"errorDescriptionOmitted": false,
|
263
|
-
"errorUriOmitted": false,
|
264
|
-
"clientIdAliasEnabled": true,
|
265
|
-
"supportedServiceProfiles": [ "FAPI", "OPEN_BANKING" ],
|
266
|
-
"tlsClientCertificateBoundAccessTokens": true,
|
267
|
-
"introspectionEndpoint": "<introspection-endpoint>",
|
268
|
-
"supportedIntrospectionAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
|
269
|
-
"mutualTlsValidatePkiCertChain": true,
|
270
|
-
"trustedRootCertificates": [ "<trusted-root-certificate0>", "<trusted-root-certificate1>" ],
|
271
|
-
"dynamicRegistrationSupported": true,
|
272
|
-
"endSessionEndpoint": "<end-session-endpoint>",
|
273
|
-
"description": "<description>",
|
274
|
-
"accessTokenType": "Bearer",
|
275
|
-
"accessTokenSignAlg": "HS256",
|
276
|
-
"accessTokenDuration": 300,
|
277
|
-
"refreshTokenDuration": 300,
|
278
|
-
"idTokenDuration": 300,
|
279
|
-
"authorizationResponseDuration": 300,
|
280
|
-
"pushedAuthReqDuration": 300,
|
281
|
-
"metadata": [ { "key": "<metadata0-key>", "value": "<metadata0-value>" } ],
|
282
|
-
"accessTokenSignatureKeyId": "<access-token-signature-key-id>",
|
283
|
-
"authorizationSignatureKeyId": "<authorization-signature-key-id>",
|
284
|
-
"idTokenSignatureKeyId": "<id-token-signature-key-id>",
|
285
|
-
"userInfoSignatureKeyId": "<user-info-signature-key-id>",
|
286
|
-
"supportedBackchannelTokenDeliveryModes": [ "POLL", "PING", "PUSH" ],
|
287
|
-
"backchannelAuthenticationEndpoint": "<backchannel-authentication-endpoint>",
|
288
|
-
"backchannelUserCodeParameterSupported": true,
|
289
|
-
"backchannelAuthReqIdDuration": 300,
|
290
|
-
"backchannelPollingInterval": 10,
|
291
|
-
"backchannelBindingMessageRequiredInFapi": true,
|
292
|
-
"allowableClockSkew": 100,
|
293
|
-
"deviceAuthorizationEndpoint": "<device-authorization-endpoint>",
|
294
|
-
"deviceVerificationUri": "<device-verification-uri>",
|
295
|
-
"deviceVerificationUriComplete": "<device-verification-uri-complete>",
|
296
|
-
"deviceFlowCodeDuration": 300,
|
297
|
-
"deviceFlowPollingInterval": 10,
|
298
|
-
"userCodeCharset": "BASE20",
|
299
|
-
"userCodeLength": 100,
|
300
|
-
"pushedAuthReqEndpoint": "<pushed-auth-req-endpoint>",
|
301
|
-
"mtlsEndpointAliases": [ { "name": "<mtls-endpoint-alias0-name>", "uri": "<mtls-endpoint-alias0-uri>" } ],
|
302
|
-
"supportedAuthorizationDetailsTypes": [ "<supported-authorization-details-type0>", "<supported-authorization-details-type1>" ],
|
303
|
-
"supportedTrustFrameworks": [ "<supported-trust-framework0>", "<supported-trust-framework1>" ],
|
304
|
-
"supportedEvidence": [ "<supported-evidence0>", "<supported-evidence1>" ],
|
305
|
-
"supportedIdentityDocuments": [ "<supported-identity-document0>", "<supported-identity-document1>" ],
|
306
|
-
"supportedVerificationMethods": [ "<supported-verification-method0>", "<supported-verification-method1>" ],
|
307
|
-
"supportedVerifiedClaims": [ "<supported-verified-claim0>", "<supported-verified-claim1>" ],
|
308
|
-
"missingClientIdAllowed": false,
|
309
|
-
"parRequired": false,
|
310
|
-
"requestObjectRequired": true,
|
311
|
-
"traditionalRequestObjectProcessingApplied": false,
|
312
|
-
"claimShortcutRestrictive": false,
|
313
|
-
"scopeRequired": true,
|
314
|
-
"nbfOptional": true,
|
315
|
-
"issSuppressed": false,
|
316
|
-
"attributes": [{ "key": "<attribute0-key>", "value": "<attribute0-value>" }],
|
317
|
-
"supportedCustomClientMetadata": [ "<supported-custom-client-metadata0>", "<supported-custom-client-metadata1>" ],
|
318
|
-
"tokenExpirationLinked": false,
|
319
|
-
"frontChannelRequestObjectEncryptionRequired": false,
|
320
|
-
"requestObjectEncryptionAlgMatchRequired": false,
|
321
|
-
"requestObjectEncryptionEncMatchRequired": false,
|
322
|
-
"refreshTokenDurationReset": false,
|
323
|
-
"grantManagementEndpoint": "<grant-management-endpoint>",
|
324
|
-
"grantManagementActionRequired": false,
|
325
|
-
"unauthorizedOnClientConfigSupported": false,
|
326
|
-
"dcrScopeUsedAsRequestable": false,
|
327
|
-
"predefinedTransformedClaims": "<predefined_transformed_claims>",
|
328
|
-
"loopbackRedirectionUriVariable": false,
|
329
|
-
"supportedDocuments": ["<supported-documents1>", "<supported-documents1>"],
|
330
|
-
"supportedDocumentsMethods": ["<supported-documents-methods1>", "<supported-documents-methods1>"],
|
331
|
-
"supportedDocumentsValidationMethods": ["<supported-documents-validation-methods1>", "<supported-documents-validation-methods1>"],
|
332
|
-
"supportedDocumentsVerificationMethods": ["<supported-documents-verification-methods1>", "<supported-documents-verification-methods1>"],
|
333
|
-
"supportedElectronicRecords": ["<supported-electronic-records1>", "<supported-electronic-records1>"],
|
334
|
-
"supportedAttachments": [ "EMBEDDED", "EXTERNAL"],
|
335
|
-
"supportedDigestAlgorithms": ["<supported-digest-algorithms1>", "<supported-digest-algorithms1>"],
|
336
|
-
"requestObjectAudienceChecked": true,
|
337
|
-
"accessTokenForExternalAttachmentEmbedded": false,
|
338
|
-
"refreshTokenIdempotent": false,
|
339
|
-
"federationEnabled": false,
|
340
|
-
"organizationName": "<organization-name>",
|
341
|
-
"authorityHints": [ "<authority>", "<hints>"],
|
342
|
-
"federationJwks": "<federation-jwks>",
|
343
|
-
"signedJwksUri": "<signed-jwks-uri>",
|
344
|
-
"federationRegistrationEndpoint": "<federation-registration-endpoint>",
|
345
|
-
"supportedClientRegistrationTypes": [ "AUTOMATIC", "EXPLICIT"],
|
346
|
-
"trustAnchors": [{ "entityId": "<entity-id>", "jwks": "<jwks>" }],
|
347
|
-
"tokenExchangeByIdentifiableClientsOnly": false,
|
348
|
-
"tokenExchangeByConfidentialClientsOnly": false,
|
349
|
-
"tokenExchangeByPermittedClientsOnly": false,
|
350
|
-
"tokenExchangeEncryptedJwtRejected": false,
|
351
|
-
"tokenExchangeUnsignedJwtRejected": false,
|
352
|
-
"jwtGrantByIdentifiableClientsOnly": false,
|
353
|
-
"jwtGrantEncryptedJwtRejected": false,
|
354
|
-
"jwtGrantUnsignedJwtRejected": false,
|
355
|
-
"federationSignatureKeyId": "<federation-signature-key-id>",
|
356
|
-
"federationConfigurationDuration": 100,
|
357
|
-
"dcrDuplicateSoftwareIdBlocked": false,
|
358
|
-
"openidDroppedOnRefreshWithoutOfflineAccess": false,
|
359
|
-
"supportedDocumentsCheckMethods": ["supported","documents"],
|
360
|
-
"idTokenAudType": "<id-token-aud-type>",
|
361
|
-
"verifiedClaimsValidationSchemaSet": "<verified_claims_validation_schema_set>",
|
362
|
-
|
363
|
-
"credentialDuration": 100,
|
364
|
-
"credentialJwks": "<credential-duration>",
|
365
|
-
"idTokenReissuable": false
|
366
|
-
}
|
367
|
-
JSON
|
368
|
-
|
369
|
-
end
|
370
|
-
|
371
|
-
|
372
|
-
def generate_hash
|
373
|
-
{
|
374
|
-
number: 1000,
|
375
|
-
serviceOwnerNumber: 12345,
|
376
|
-
serviceName: '<service-name>',
|
377
|
-
apiKey: '<api-key>',
|
378
|
-
apiSecret: '<api-secret>',
|
379
|
-
issuer: '<issuer>',
|
380
|
-
authorizationEndpoint: '<authorization-endpoint>',
|
381
|
-
tokenEndpoint: '<token-endpoint>',
|
382
|
-
revocationEndpoint: '<revocation-endpoint>',
|
383
|
-
supportedRevocationAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
|
384
|
-
userInfoEndpoint: '<user-info-endpoint>',
|
385
|
-
jwksUri: '<jwks-uri>',
|
386
|
-
jwks: '<jwks>',
|
387
|
-
registrationEndpoint: '<registration-endpoint>',
|
388
|
-
registrationManagementEndpoint: '<registration-management-endpoint>',
|
389
|
-
supportedScopes: [ { name: 'scope0', description: '<scope0-description>', defaultEntry: false, descriptions: nil, attributes: nil } ],
|
390
|
-
supportedResponseTypes: [ 'NONE', 'CODE', 'TOKEN', 'ID_TOKEN' ],
|
391
|
-
supportedGrantTypes: [ 'AUTHORIZATION_CODE', 'REFRESH_TOKEN' ],
|
392
|
-
supportedAcrs: [ '<supported-acr0>', '<supported-acr1>' ],
|
393
|
-
supportedTokenAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
|
394
|
-
supportedDisplays: [ 'PAGE', 'POPUP', 'TOUCH', 'WAP' ],
|
395
|
-
supportedClaimTypes: [ 'NORMAL' ],
|
396
|
-
supportedClaims: [ '<supported-claim0>', '<supported-claim1>' ],
|
397
|
-
serviceDocumentation: '<service-documentation>',
|
398
|
-
supportedClaimLocales: [ 'en-US' ],
|
399
|
-
supportedUiLocales: [ 'en-US' ],
|
400
|
-
policyUri: '<policy-uri>',
|
401
|
-
tosUri: '<tos-uri>',
|
402
|
-
authenticationCallbackEndpoint: '<authentication-callback-endpoint>',
|
403
|
-
authenticationCallbackApiKey: '<authentication-callback-api-key>',
|
404
|
-
authenticationCallbackApiSecret: '<authentication-callback-api-secret>',
|
405
|
-
supportedSnses: [ 'FACEBOOK' ],
|
406
|
-
snsCredentials: [ { sns: 'FACEBOOK', apiKey: '<sns-credentials0-api-key>', apiSecret: '<sns-credentials0-api-secret>' } ],
|
407
|
-
createdAt: 10000,
|
408
|
-
modifiedAt: 10000,
|
409
|
-
developerAuthenticationCallbackEndpoint: '<developer-authentication-callback-endpoint>',
|
410
|
-
developerAuthenticationCallbackApiKey: '<developer-authentication-callback-api-key>',
|
411
|
-
developerAuthenticationCallbackApiSecret: '<developer-authentication-callback-api-secret>',
|
412
|
-
supportedDeveloperSnses: [ 'FACEBOOK' ],
|
413
|
-
developerSnsCredentials: [ { sns: 'FACEBOOK', apiKey: '<developer-sns-credentials0-api-key>', apiSecret: '<developer-sns-credentials0-api-secret>' } ],
|
414
|
-
clientsPerDeveloper: 10,
|
415
|
-
directAuthorizationEndpointEnabled: true,
|
416
|
-
directTokenEndpointEnabled: true,
|
417
|
-
directRevocationEndpointEnabled: true,
|
418
|
-
directUserInfoEndpointEnabled: true,
|
419
|
-
directJwksEndpointEnabled: true,
|
420
|
-
directIntrospectionEndpointEnabled: true,
|
421
|
-
singleAccessTokenPerSubject: false,
|
422
|
-
pkceRequired: true,
|
423
|
-
pkceS256Required: true,
|
424
|
-
refreshTokenKept: true,
|
425
|
-
refreshTokenDurationKept: true,
|
426
|
-
errorDescriptionOmitted: false,
|
427
|
-
errorUriOmitted: false,
|
428
|
-
clientIdAliasEnabled: true,
|
429
|
-
supportedServiceProfiles: [ 'FAPI', 'OPEN_BANKING' ],
|
430
|
-
tlsClientCertificateBoundAccessTokens: true,
|
431
|
-
introspectionEndpoint: '<introspection-endpoint>',
|
432
|
-
supportedIntrospectionAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
|
433
|
-
mutualTlsValidatePkiCertChain: true,
|
434
|
-
trustedRootCertificates: [ '<trusted-root-certificate0>', '<trusted-root-certificate1>' ],
|
435
|
-
dynamicRegistrationSupported: true,
|
436
|
-
endSessionEndpoint: '<end-session-endpoint>',
|
437
|
-
description: '<description>',
|
438
|
-
accessTokenType: 'Bearer',
|
439
|
-
accessTokenSignAlg: 'HS256',
|
440
|
-
accessTokenDuration: 300,
|
441
|
-
refreshTokenDuration: 300,
|
442
|
-
idTokenDuration: 300,
|
443
|
-
authorizationResponseDuration: 300,
|
444
|
-
pushedAuthReqDuration: 300,
|
445
|
-
metadata: [ { key: '<metadata0-key>', value: '<metadata0-value>' } ],
|
446
|
-
accessTokenSignatureKeyId: '<access-token-signature-key-id>',
|
447
|
-
authorizationSignatureKeyId: '<authorization-signature-key-id>',
|
448
|
-
idTokenSignatureKeyId: '<id-token-signature-key-id>',
|
449
|
-
userInfoSignatureKeyId: '<user-info-signature-key-id>',
|
450
|
-
supportedBackchannelTokenDeliveryModes: [ 'POLL', 'PING', 'PUSH' ],
|
451
|
-
backchannelAuthenticationEndpoint: '<backchannel-authentication-endpoint>',
|
452
|
-
backchannelUserCodeParameterSupported: true,
|
453
|
-
backchannelAuthReqIdDuration: 300,
|
454
|
-
backchannelPollingInterval: 10,
|
455
|
-
backchannelBindingMessageRequiredInFapi: true,
|
456
|
-
allowableClockSkew: 100,
|
457
|
-
deviceAuthorizationEndpoint: '<device-authorization-endpoint>',
|
458
|
-
deviceVerificationUri: '<device-verification-uri>',
|
459
|
-
deviceVerificationUriComplete: '<device-verification-uri-complete>',
|
460
|
-
deviceFlowCodeDuration: 300,
|
461
|
-
deviceFlowPollingInterval: 10,
|
462
|
-
userCodeCharset: 'BASE20',
|
463
|
-
userCodeLength: 100,
|
464
|
-
pushedAuthReqEndpoint: '<pushed-auth-req-endpoint>',
|
465
|
-
mtlsEndpointAliases: [ { name: '<mtls-endpoint-alias0-name>', uri: '<mtls-endpoint-alias0-uri>' } ],
|
466
|
-
supportedAuthorizationDetailsTypes: [ '<supported-authorization-details-type0>', '<supported-authorization-details-type1>' ],
|
467
|
-
supportedTrustFrameworks: [ '<supported-trust-framework0>', '<supported-trust-framework1>' ],
|
468
|
-
supportedEvidence: [ '<supported-evidence0>', '<supported-evidence1>' ],
|
469
|
-
supportedIdentityDocuments: [ '<supported-identity-document0>', '<supported-identity-document1>' ],
|
470
|
-
supportedVerificationMethods: [ '<supported-verification-method0>', '<supported-verification-method1>' ],
|
471
|
-
supportedVerifiedClaims: [ '<supported-verified-claim0>', '<supported-verified-claim1>' ],
|
472
|
-
missingClientIdAllowed: false,
|
473
|
-
parRequired: false,
|
474
|
-
requestObjectRequired: true,
|
475
|
-
traditionalRequestObjectProcessingApplied: false,
|
476
|
-
claimShortcutRestrictive: false,
|
477
|
-
scopeRequired: true,
|
478
|
-
nbfOptional: true,
|
479
|
-
issSuppressed: false,
|
480
|
-
attributes: [{ key: '<attribute0-key>', value: '<attribute0-value>' }],
|
481
|
-
supportedCustomClientMetadata: [ '<supported-custom-client-metadata0>', '<supported-custom-client-metadata1>' ],
|
482
|
-
tokenExpirationLinked: false,
|
483
|
-
frontChannelRequestObjectEncryptionRequired: false,
|
484
|
-
requestObjectEncryptionAlgMatchRequired: false,
|
485
|
-
requestObjectEncryptionEncMatchRequired: false,
|
486
|
-
hsks: [ { kty: 'EC', use: 'sig', alg: 'ES256', kid: 'jane', hsmName: 'google', handle: '<handle>', publicKey: '<public-key>' } ],
|
487
|
-
hsmEnabled: false,
|
488
|
-
refreshTokenDurationReset: false,
|
489
|
-
grantManagementEndpoint: '<grant-management-endpoint>',
|
490
|
-
grantManagementActionRequired: false,
|
491
|
-
unauthorizedOnClientConfigSupported: false,
|
492
|
-
dcrScopeUsedAsRequestable: false,
|
493
|
-
predefinedTransformedClaims: '<predefined_transformed_claims>',
|
494
|
-
loopbackRedirectionUriVariable: false,
|
495
|
-
supportedDocuments: ['<supported-documents1>', '<supported-documents1>'],
|
496
|
-
supportedDocumentsMethods: ['<supported-documents-methods1>', '<supported-documents-methods1>'],
|
497
|
-
supportedDocumentsValidationMethods: ['<supported-documents-validation-methods1>', '<supported-documents-validation-methods1>'],
|
498
|
-
supportedDocumentsVerificationMethods: ['<supported-documents-verification-methods1>', '<supported-documents-verification-methods1>'],
|
499
|
-
supportedElectronicRecords: ['<supported-electronic-records1>', '<supported-electronic-records1>'],
|
500
|
-
supportedAttachments: [ 'EMBEDDED', 'EXTERNAL'],
|
501
|
-
supportedDigestAlgorithms: ['<supported-digest-algorithms1>', '<supported-digest-algorithms1>'],
|
502
|
-
requestObjectAudienceChecked: true,
|
503
|
-
accessTokenForExternalAttachmentEmbedded: false,
|
504
|
-
refreshTokenIdempotent: false,
|
505
|
-
federationEnabled: false,
|
506
|
-
organizationName: '<organization-name>',
|
507
|
-
authorityHints: [ '<authority>', '<hints>'],
|
508
|
-
federationJwks: '<federation-jwks>',
|
509
|
-
signedJwksUri: '<signed-jwks-uri>',
|
510
|
-
federationRegistrationEndpoint: '<federation-registration-endpoint>',
|
511
|
-
supportedClientRegistrationTypes: [ 'AUTOMATIC', 'EXPLICIT'],
|
512
|
-
trustAnchors: [{ entityId: "<entity-id>", jwks: "<jwks>" }],
|
513
|
-
tokenExchangeByIdentifiableClientsOnly: false,
|
514
|
-
tokenExchangeByConfidentialClientsOnly: false,
|
515
|
-
tokenExchangeByPermittedClientsOnly: false,
|
516
|
-
tokenExchangeEncryptedJwtRejected: false,
|
517
|
-
tokenExchangeUnsignedJwtRejected: false,
|
518
|
-
jwtGrantByIdentifiableClientsOnly: false,
|
519
|
-
jwtGrantEncryptedJwtRejected: false,
|
520
|
-
jwtGrantUnsignedJwtRejected: false,
|
521
|
-
federationSignatureKeyId: '<federation-signature-key-id>',
|
522
|
-
federationConfigurationDuration: 100,
|
523
|
-
dcrDuplicateSoftwareIdBlocked: false,
|
524
|
-
openidDroppedOnRefreshWithoutOfflineAccess: false,
|
525
|
-
supportedDocumentsCheckMethods: ['supported', 'documents'],
|
526
|
-
idTokenAudType: '<id-token-aud-type>',
|
527
|
-
verifiedClaimsValidationSchemaSet: '<verified_claims_validation_schema_set>',
|
528
|
-
credentialDuration: 100,
|
529
|
-
credentialJwks: '<credential-duration>',
|
530
|
-
idTokenReissuable: false,
|
531
|
-
}
|
532
|
-
end
|
533
|
-
|
534
|
-
|
535
|
-
def set_params(obj)
|
536
|
-
obj.number = NUMBER
|
537
|
-
obj.service_owner_number = SERVICE_OWNER_NUMBER
|
538
|
-
obj.service_name = SERVICE_NAME
|
539
|
-
obj.api_key = API_KEY
|
540
|
-
obj.api_secret = API_SECRET
|
541
|
-
obj.issuer = ISSUER
|
542
|
-
obj.authorization_endpoint = AUTHORIZATION_ENDPOINT
|
543
|
-
obj.token_endpoint = TOKEN_ENDPOINT
|
544
|
-
obj.revocation_endpoint = REVOCATION_ENDPOINT
|
545
|
-
obj.supported_revocation_auth_methods = SUPPORTED_REVOCATION_AUTH_METHODS
|
546
|
-
obj.user_info_endpoint = USER_INFO_ENDPOINT
|
547
|
-
obj.jwks_uri = JWKS_URI
|
548
|
-
obj.jwks = JWKS
|
549
|
-
obj.registration_endpoint = REGISTRATION_ENDPOINT
|
550
|
-
obj.registration_management_endpoint = REGISTRATION_MANAGEMENT_ENDPOINT
|
551
|
-
obj.supported_scopes = SUPPORTED_SCOPES
|
552
|
-
obj.supported_response_types = SUPPORTED_RESPONSE_TYPES
|
553
|
-
obj.supported_grant_types = SUPPORTED_GRANT_TYPES
|
554
|
-
obj.supported_acrs = SUPPORTED_ACRS
|
555
|
-
obj.supported_token_auth_methods = SUPPORTED_TOKEN_AUTH_METHODS
|
556
|
-
obj.supported_displays = SUPPORTED_DISPLAYS
|
557
|
-
obj.supported_claim_types = SUPPORTED_CLAIM_TYPES
|
558
|
-
obj.supported_claims = SUPPORTED_CLAIMS
|
559
|
-
obj.service_documentation = SERVICE_DOCUMENTATION
|
560
|
-
obj.supported_claim_locales = SUPPORTED_CLAIM_LOCALES
|
561
|
-
obj.supported_ui_locales = SUPPORTED_UI_LOCALES
|
562
|
-
obj.policy_uri = POLICY_URI
|
563
|
-
obj.tos_uri = TOS_URI
|
564
|
-
obj.authentication_callback_endpoint = AUTHENTICATION_CALLBACK_ENDPOINT
|
565
|
-
obj.authentication_callback_api_key = AUTHENTICATION_CALLBACK_API_KEY
|
566
|
-
obj.authentication_callback_api_secret = AUTHENTICATION_CALLBACK_API_SECRET
|
567
|
-
obj.supported_snses = SUPPORTED_SNSES
|
568
|
-
obj.sns_credentials = SNS_CREDENTIALS
|
569
|
-
obj.created_at = CREATED_AT
|
570
|
-
obj.modified_at = MODIFIED_AT
|
571
|
-
obj.developer_authentication_callback_endpoint = DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT
|
572
|
-
obj.developer_authentication_callback_api_key = DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY
|
573
|
-
obj.developer_authentication_callback_api_secret = DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET
|
574
|
-
obj.supported_developer_snses = SUPPORTED_DEVELOPER_SNSES
|
575
|
-
obj.developer_sns_credentials = DEVELOPER_SNS_CREDENTIALS
|
576
|
-
obj.clients_per_developer = CLIENTS_PER_DEVELOPER
|
577
|
-
obj.direct_authorization_endpoint_enabled = DIRECT_AUTHORIZATION_ENDPOINT_ENABLED
|
578
|
-
obj.direct_token_endpoint_enabled = DIRECT_TOKEN_ENDPOINT_ENABLED
|
579
|
-
obj.direct_revocation_endpoint_enabled = DIRECT_REVOCATION_ENDPOINT_ENABLED
|
580
|
-
obj.direct_user_info_endpoint_enabled = DIRECT_USER_INFO_ENDPOINT_ENABLED
|
581
|
-
obj.direct_jwks_endpoint_enabled = DIRECT_JWKS_ENDPOINT_ENABLED
|
582
|
-
obj.direct_introspection_endpoint_enabled = DIRECT_INTROSPECTION_ENDPOINT_ENABLED
|
583
|
-
obj.single_access_token_per_subject = SINGLE_ACCESS_TOKEN_PER_SUBJECT
|
584
|
-
obj.pkce_required = PKCE_REQUIRED
|
585
|
-
obj.pkce_s256_required = PKCE_S256_REQUIRED
|
586
|
-
obj.refresh_token_kept = REFRESH_TOKEN_KEPT
|
587
|
-
obj.refresh_token_duration_kept = REFRESH_TOKEN_DURATION_KEPT
|
588
|
-
obj.error_description_omitted = ERROR_DESCRIPTION_OMITTED
|
589
|
-
obj.error_uri_omitted = ERROR_URI_OMITTED
|
590
|
-
obj.client_id_alias_enabled = CLIENT_ID_ALIAS_ENABLED
|
591
|
-
obj.supported_service_profiles = SUPPORTED_SERVICE_PROFILES
|
592
|
-
obj.tls_client_certificate_bound_access_tokens = TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS
|
593
|
-
obj.introspection_endpoint = INTROSPECTION_ENDPOINT
|
594
|
-
obj.supported_introspection_auth_methods = SUPPORTED_INTROSPECTION_AUTH_METHODS
|
595
|
-
obj.mutual_tls_validate_pki_cert_chain = MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN
|
596
|
-
obj.trusted_root_certificates = TRUSTED_ROOT_CERTIFICATES
|
597
|
-
obj.dynamic_registration_supported = DYNAMIC_REGISTRATION_SUPPORTED
|
598
|
-
obj.end_session_endpoint = END_SESSION_ENDPOINT
|
599
|
-
obj.description = DESCRIPTION
|
600
|
-
obj.access_token_type = ACCESS_TOKEN_TYPE
|
601
|
-
obj.access_token_sign_alg = ACCESS_TOKEN_SIGN_ALG
|
602
|
-
obj.access_token_duration = ACCESS_TOKEN_DURATION
|
603
|
-
obj.refresh_token_duration = REFRESH_TOKEN_DURATION
|
604
|
-
obj.id_token_duration = ID_TOKEN_DURATION
|
605
|
-
obj.authorization_response_duration = AUTHORIZATION_RESPONSE_DURATION
|
606
|
-
obj.pushed_auth_req_duration = PUSHED_AUTH_REQ_DURATION
|
607
|
-
obj.metadata = METADATA
|
608
|
-
obj.access_token_signature_key_id = ACCESS_TOKEN_SIGNATURE_KEY_ID
|
609
|
-
obj.authorization_signature_key_id = AUTHORIZATION_SIGNATURE_KEY_ID
|
610
|
-
obj.id_token_signature_key_id = ID_TOKEN_SIGNATURE_KEY_ID
|
611
|
-
obj.user_info_signature_key_id = USER_INFO_SIGNATURE_KEY_ID
|
612
|
-
obj.supported_backchannel_token_delivery_modes = SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES
|
613
|
-
obj.backchannel_authentication_endpoint = BACKCHANNEL_AUTHENTICATION_ENDPOINT
|
614
|
-
obj.backchannel_user_code_parameter_supported = BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED
|
615
|
-
obj.backchannel_auth_req_id_duration = BACKCHANNEL_AUTH_REQ_ID_DURATION
|
616
|
-
obj.backchannel_polling_interval = BACKCHANNEL_POLLING_INTERVAL
|
617
|
-
obj.backchannel_binding_message_required_in_fapi = BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI
|
618
|
-
obj.allowable_clock_skew = ALLOWABLE_CLOCK_SKEW
|
619
|
-
obj.device_authorization_endpoint = DEVICE_AUTHORIZATION_ENDPOINT
|
620
|
-
obj.device_verification_uri = DEVICE_VERIFICATION_URI
|
621
|
-
obj.device_verification_uri_complete = DEVICE_VERIFICATION_URI_COMPLETE
|
622
|
-
obj.device_flow_code_duration = DEVICE_FLOW_CODE_DURATION
|
623
|
-
obj.device_flow_polling_interval = DEVICE_FLOW_POLLING_INTERVAL
|
624
|
-
obj.user_code_charset = USER_CODE_CHARSET
|
625
|
-
obj.user_code_length = USER_CODE_LENGTH
|
626
|
-
obj.pushed_auth_req_endpoint = PUSHED_AUTH_REQ_ENDPOINT
|
627
|
-
obj.mtls_endpoint_aliases = MTLS_ENDPOINT_ALIASES
|
628
|
-
obj.supported_authorization_details_types = SUPPORTED_AUTHORIZATION_DETAILS_TYPES
|
629
|
-
obj.supported_trust_frameworks = SUPPORTED_TRUST_FRAMEWORKS
|
630
|
-
obj.supported_evidence = SUPPORTED_EVIDENCE
|
631
|
-
obj.supported_identity_documents = SUPPORTED_IDENTITY_DOCUMENTS
|
632
|
-
obj.supported_verification_methods = SUPPORTED_VERIFICATION_METHODS
|
633
|
-
obj.supported_verified_claims = SUPPORTED_VERIFIED_CLAIMS
|
634
|
-
obj.missing_client_id_allowed = MISSING_CLIENT_ID_ALLOWED
|
635
|
-
obj.par_required = PAR_REQUIRED
|
636
|
-
obj.request_object_required = REQUEST_OBJECT_REQUIRED
|
637
|
-
obj.traditional_request_object_processing_applied = TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED
|
638
|
-
obj.claim_shortcut_restrictive = CLAIM_SHORTCUT_RESTRICTIVE
|
639
|
-
obj.scope_required = SCOPE_REQUIRED
|
640
|
-
obj.nbf_optional = NBF_OPTIONAL
|
641
|
-
obj.iss_suppressed = ISS_SUPPRESSED
|
642
|
-
obj.attributes = ATTRIBUTES
|
643
|
-
obj.supported_custom_client_metadata = SUPPORTED_CUSTOM_CLIENT_METADATA
|
644
|
-
obj.token_expiration_linked = TOKEN_EXPIRATION_LINKED
|
645
|
-
obj.frontChannelRequestObjectEncryptionRequired = FRONT_CHANNEL_REQUEST_OBJECT_ENCRYPTION_REQUIRED
|
646
|
-
obj.requestObjectEncryptionAlgMatchRequired = REQUEST_OBJECT_ENCRYPTION_ALG_MATCH_REQUIRED
|
647
|
-
obj.requestObjectEncryptionEncMatchRequired = REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED
|
648
|
-
obj.hsks = HSKS
|
649
|
-
obj.hsm_enabled = HSM_ENABLED
|
650
|
-
obj.refresh_token_duration_reset = REFRESH_TOKEN_DURATION_RESET
|
651
|
-
obj.grant_management_endpoint = GRANT_MANAGEMENT_ENDPOINT
|
652
|
-
obj.grant_management_action_required = GRANT_MANAGEMENT_ACTION_REQUIRED
|
653
|
-
obj.unauthorized_on_client_config_supported = UNATHORIZED_ON_CLIENT_CONFIG_SUPPORTED
|
654
|
-
obj.dcr_scope_used_as_requestable = DCR_SCOPE_USED_AS_REQUESTABLE
|
655
|
-
obj.predefined_transformed_claims = PREDEFINED_TRANSFORMED_CLAIMS
|
656
|
-
obj.loopback_redirection_uri_variable = LOOPBACK_REDIRECTION_URI_VARIABLE
|
657
|
-
obj.supported_documents = SUPPORTED_DOCUMENTS
|
658
|
-
obj.supported_documents_methods = SUPPORTED_DOCUMENTS_METHODS
|
659
|
-
obj.supported_documents_validation_methods = SUPPORTED_DOCUMENTS_VALIDATION_METHODS
|
660
|
-
obj.supported_documents_verification_methods = SUPPORTED_DOCUMENTS_VERIFICATION_METHODS
|
661
|
-
obj.supported_electronic_records = SUPPORTED_ELECTRONIC_RECORDS
|
662
|
-
obj.supported_attachments = SUPPORTED_ATTACHMENTS
|
663
|
-
obj.supported_digest_algorithms = SUPPORTED_DIGEST_ALGORITHMS
|
664
|
-
obj.request_object_audience_checked = REQUEST_OBJECT_AUDIENCE_CHECKED
|
665
|
-
obj.access_token_for_external_attachment_embedded = ACCESS_TOKEN_FOR_EXTERNAL_ATTACHMENT_EMBEDDED
|
666
|
-
obj.refresh_token_idempotent = REFRESH_TOKEN_IDEMPOTENT
|
667
|
-
obj.federation_enabled = FEDERATION_ENABLED
|
668
|
-
obj.organization_name = ORGANIZATION_NAME
|
669
|
-
obj.authority_hints = AUTHORITY_HINTS
|
670
|
-
obj.federation_jwks = FEDERATION_JWKS
|
671
|
-
obj.signed_jwks_uri = SIGNED_JWKS_URI
|
672
|
-
obj.federation_registration_endpoint = FEDERATION_REGISTRATION_ENDPOINT
|
673
|
-
obj.supported_client_registration_types = SUPPORTED_CLIENT_REGISTRATION_TYPES
|
674
|
-
obj.trust_anchors = TRUST_ANCHORS
|
675
|
-
obj.token_exchange_by_identifiable_clients_only = TOKEN_EXCHANGE_BY_IDENTIFIABLE_CLIENTS_ONLY
|
676
|
-
obj.token_exchange_by_confidential_clients_only = TOKEN_EXCHANGE_BY_CONFIDENTIAL_CLIENTS_ONLY
|
677
|
-
obj.token_exchange_by_permitted_clients_only = TOKEN_EXCHANGE_BY_PERMITTED_CLIENTS_ONLY
|
678
|
-
obj.jwt_grant_by_identifiable_clients_only = JWT_GRANT_BY_IDENTIFIABLE_CLIENTS_ONLY
|
679
|
-
obj.jwt_grant_encrypted_jwt_rejected = JWT_GRANT_ENCRYPTED_JWT_REJECTED
|
680
|
-
obj.jwt_grant_unsigned_jwt_rejected = JWT_GRANT_UNSIGNED_JWT_REJECTED
|
681
|
-
obj.federation_signature_key_id = FEDERATION_SIGNATURE_KEY_ID
|
682
|
-
obj.federation_configuration_duration = FEDERATION_CONFIGURATION_DURATION
|
683
|
-
obj.dcr_duplicate_software_id_blocked = DCR_DUPLICATE_SOFTWARE_ID_BLOCKED
|
684
|
-
obj.openidDroppedOnRefreshWithoutOfflineAccess = OPENID_DROPPED_ON_REFRESH_WITHOUT_OFFLINE_ACCESS
|
685
|
-
obj.supported_documents_check_methods = SUPPORTED_DOCUMENTS_CHECK_METHODS
|
686
|
-
obj.id_token_aud_type = ID_TOKEN_AUD_TYPE
|
687
|
-
obj.verified_claims_validation_schema_set = VERIFIED_CLAIMS_VALIDATION_SCHEMA_SET
|
688
|
-
obj.credential_duration = CREDENTIAL_DURATION
|
689
|
-
obj.credential_jwks = CREDENTIAL_JWKS
|
690
|
-
obj.id_token_reissuable = ID_TOKEN_REISSUABLE
|
691
|
-
|
692
|
-
end
|
693
|
-
|
694
|
-
def match(obj)
|
695
|
-
assert_equal NUMBER, obj.number
|
696
|
-
assert_equal SERVICE_OWNER_NUMBER, obj.serviceOwnerNumber
|
697
|
-
assert_equal SERVICE_NAME, obj.serviceName
|
698
|
-
assert_equal API_KEY, obj.apiKey
|
699
|
-
assert_equal API_SECRET, obj.apiSecret
|
700
|
-
assert_equal ISSUER, obj.issuer
|
701
|
-
assert_equal AUTHORIZATION_ENDPOINT, obj.authorizationEndpoint
|
702
|
-
assert_equal TOKEN_ENDPOINT, obj.tokenEndpoint
|
703
|
-
assert_equal REVOCATION_ENDPOINT, obj.revocationEndpoint
|
704
|
-
assert_equal SUPPORTED_REVOCATION_AUTH_METHODS, obj.supportedRevocationAuthMethods
|
705
|
-
assert_equal USER_INFO_ENDPOINT, obj.userInfoEndpoint
|
706
|
-
assert_equal JWKS_URI, obj.jwksUri
|
707
|
-
assert_equal JWKS, obj.jwks
|
708
|
-
assert_equal REGISTRATION_ENDPOINT, obj.registrationEndpoint
|
709
|
-
assert_equal REGISTRATION_MANAGEMENT_ENDPOINT, obj.registrationManagementEndpoint
|
710
|
-
assert_equal SUPPORTED_SCOPE_NAME, obj.supportedScopes[0].name
|
711
|
-
assert_equal SUPPORTED_SCOPE_DESCRIPTION, obj.supportedScopes[0].description
|
712
|
-
assert_equal SUPPORTED_RESPONSE_TYPES, obj.supportedResponseTypes
|
713
|
-
assert_equal SUPPORTED_GRANT_TYPES, obj.supportedGrantTypes
|
714
|
-
assert_equal SUPPORTED_ACRS, obj.supportedAcrs
|
715
|
-
assert_equal SUPPORTED_TOKEN_AUTH_METHODS, obj.supportedTokenAuthMethods
|
716
|
-
assert_equal SUPPORTED_DISPLAYS, obj.supportedDisplays
|
717
|
-
assert_equal SUPPORTED_CLAIM_TYPES, obj.supportedClaimTypes
|
718
|
-
assert_equal SUPPORTED_CLAIMS, obj.supportedClaims
|
719
|
-
assert_equal SERVICE_DOCUMENTATION, obj.serviceDocumentation
|
720
|
-
assert_equal SUPPORTED_CLAIM_LOCALES, obj.supportedClaimLocales
|
721
|
-
assert_equal SUPPORTED_UI_LOCALES, obj.supportedUiLocales
|
722
|
-
assert_equal POLICY_URI, obj.policyUri
|
723
|
-
assert_equal TOS_URI, obj.tosUri
|
724
|
-
assert_equal AUTHENTICATION_CALLBACK_ENDPOINT, obj.authenticationCallbackEndpoint
|
725
|
-
assert_equal AUTHENTICATION_CALLBACK_API_KEY, obj.authenticationCallbackApiKey
|
726
|
-
assert_equal AUTHENTICATION_CALLBACK_API_SECRET, obj.authenticationCallbackApiSecret
|
727
|
-
assert_equal SUPPORTED_SNSES, obj.supportedSnses
|
728
|
-
assert_equal SNS_CREDENTIALS_SNS, obj.snsCredentials[0].sns
|
729
|
-
assert_equal SNS_CREDENTIALS_API_KEY, obj.snsCredentials[0].apiKey
|
730
|
-
assert_equal SNS_CREDENTIALS_API_SECRET, obj.snsCredentials[0].apiSecret
|
731
|
-
assert_equal CREATED_AT, obj.createdAt
|
732
|
-
assert_equal MODIFIED_AT, obj.modifiedAt
|
733
|
-
assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT, obj.developerAuthenticationCallbackEndpoint
|
734
|
-
assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY, obj.developerAuthenticationCallbackApiKey
|
735
|
-
assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET, obj.developerAuthenticationCallbackApiSecret
|
736
|
-
assert_equal SUPPORTED_DEVELOPER_SNSES, obj.supportedDeveloperSnses
|
737
|
-
assert_equal DEVELOPER_SNS_CREDENTIALS_SNS, obj.developerSnsCredentials[0].sns
|
738
|
-
assert_equal DEVELOPER_SNS_CREDENTIALS_API_KEY, obj.developerSnsCredentials[0].apiKey
|
739
|
-
assert_equal DEVELOPER_SNS_CREDENTIALS_API_SECRET, obj.developerSnsCredentials[0].apiSecret
|
740
|
-
assert_equal CLIENTS_PER_DEVELOPER, obj.clientsPerDeveloper
|
741
|
-
assert_equal DIRECT_AUTHORIZATION_ENDPOINT_ENABLED, obj.directAuthorizationEndpointEnabled
|
742
|
-
assert_equal DIRECT_TOKEN_ENDPOINT_ENABLED, obj.directTokenEndpointEnabled
|
743
|
-
assert_equal DIRECT_REVOCATION_ENDPOINT_ENABLED, obj.directRevocationEndpointEnabled
|
744
|
-
assert_equal DIRECT_USER_INFO_ENDPOINT_ENABLED, obj.directUserInfoEndpointEnabled
|
745
|
-
assert_equal DIRECT_JWKS_ENDPOINT_ENABLED, obj.directJwksEndpointEnabled
|
746
|
-
assert_equal DIRECT_INTROSPECTION_ENDPOINT_ENABLED, obj.directIntrospectionEndpointEnabled
|
747
|
-
assert_equal SINGLE_ACCESS_TOKEN_PER_SUBJECT, obj.singleAccessTokenPerSubject
|
748
|
-
assert_equal PKCE_REQUIRED, obj.pkceRequired
|
749
|
-
assert_equal PKCE_S256_REQUIRED, obj.pkceS256Required
|
750
|
-
assert_equal REFRESH_TOKEN_KEPT, obj.refreshTokenKept
|
751
|
-
assert_equal REFRESH_TOKEN_DURATION_KEPT, obj.refreshTokenDurationKept
|
752
|
-
assert_equal ERROR_DESCRIPTION_OMITTED, obj.errorDescriptionOmitted
|
753
|
-
assert_equal ERROR_URI_OMITTED, obj.errorUriOmitted
|
754
|
-
assert_equal CLIENT_ID_ALIAS_ENABLED, obj.clientIdAliasEnabled
|
755
|
-
assert_equal SUPPORTED_SERVICE_PROFILES, obj.supportedServiceProfiles
|
756
|
-
assert_equal TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS, obj.tlsClientCertificateBoundAccessTokens
|
757
|
-
assert_equal INTROSPECTION_ENDPOINT, obj.introspectionEndpoint
|
758
|
-
assert_equal SUPPORTED_INTROSPECTION_AUTH_METHODS, obj.supportedIntrospectionAuthMethods
|
759
|
-
assert_equal MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN, obj.mutualTlsValidatePkiCertChain
|
760
|
-
assert_equal TRUSTED_ROOT_CERTIFICATES, obj.trustedRootCertificates
|
761
|
-
assert_equal DYNAMIC_REGISTRATION_SUPPORTED, obj.dynamicRegistrationSupported
|
762
|
-
assert_equal END_SESSION_ENDPOINT, obj.endSessionEndpoint
|
763
|
-
assert_equal DESCRIPTION, obj.description
|
764
|
-
assert_equal ACCESS_TOKEN_TYPE, obj.accessTokenType
|
765
|
-
assert_equal ACCESS_TOKEN_SIGN_ALG, obj.accessTokenSignAlg
|
766
|
-
assert_equal ACCESS_TOKEN_DURATION, obj.accessTokenDuration
|
767
|
-
assert_equal REFRESH_TOKEN_DURATION, obj.refreshTokenDuration
|
768
|
-
assert_equal ID_TOKEN_DURATION, obj.idTokenDuration
|
769
|
-
assert_equal AUTHORIZATION_RESPONSE_DURATION, obj.authorizationResponseDuration
|
770
|
-
assert_equal PUSHED_AUTH_REQ_DURATION, obj.pushedAuthReqDuration
|
771
|
-
assert_equal METADATA_KEY, obj.metadata[0].key
|
772
|
-
assert_equal METADATA_VALUE, obj.metadata[0].value
|
773
|
-
assert_equal ACCESS_TOKEN_SIGNATURE_KEY_ID, obj.accessTokenSignatureKeyId
|
774
|
-
assert_equal AUTHORIZATION_SIGNATURE_KEY_ID, obj.authorizationSignatureKeyId
|
775
|
-
assert_equal ID_TOKEN_SIGNATURE_KEY_ID, obj.idTokenSignatureKeyId
|
776
|
-
assert_equal USER_INFO_SIGNATURE_KEY_ID, obj.userInfoSignatureKeyId
|
777
|
-
assert_equal SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES, obj.supportedBackchannelTokenDeliveryModes
|
778
|
-
assert_equal BACKCHANNEL_AUTHENTICATION_ENDPOINT, obj.backchannelAuthenticationEndpoint
|
779
|
-
assert_equal BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED, obj.backchannelUserCodeParameterSupported
|
780
|
-
assert_equal BACKCHANNEL_AUTH_REQ_ID_DURATION, obj.backchannelAuthReqIdDuration
|
781
|
-
assert_equal BACKCHANNEL_POLLING_INTERVAL, obj.backchannelPollingInterval
|
782
|
-
assert_equal BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI, obj.backchannelBindingMessageRequiredInFapi
|
783
|
-
assert_equal ALLOWABLE_CLOCK_SKEW, obj.allowableClockSkew
|
784
|
-
assert_equal DEVICE_AUTHORIZATION_ENDPOINT, obj.deviceAuthorizationEndpoint
|
785
|
-
assert_equal DEVICE_VERIFICATION_URI, obj.deviceVerificationUri
|
786
|
-
assert_equal DEVICE_VERIFICATION_URI_COMPLETE, obj.deviceVerificationUriComplete
|
787
|
-
assert_equal DEVICE_FLOW_CODE_DURATION, obj.deviceFlowCodeDuration
|
788
|
-
assert_equal DEVICE_FLOW_POLLING_INTERVAL, obj.deviceFlowPollingInterval
|
789
|
-
assert_equal USER_CODE_CHARSET, obj.userCodeCharset
|
790
|
-
assert_equal USER_CODE_LENGTH, obj.userCodeLength
|
791
|
-
assert_equal PUSHED_AUTH_REQ_ENDPOINT, obj.pushedAuthReqEndpoint
|
792
|
-
assert_equal MTLS_ENDPOINT_ALIAS_NAME, obj.mtlsEndpointAliases[0].name
|
793
|
-
assert_equal MTLS_ENDPOINT_ALIAS_URI, obj.mtlsEndpointAliases[0].uri
|
794
|
-
assert_equal SUPPORTED_AUTHORIZATION_DETAILS_TYPES, obj.supportedAuthorizationDetailsTypes
|
795
|
-
assert_equal SUPPORTED_TRUST_FRAMEWORKS, obj.supportedTrustFrameworks
|
796
|
-
assert_equal SUPPORTED_EVIDENCE, obj.supportedEvidence
|
797
|
-
assert_equal SUPPORTED_IDENTITY_DOCUMENTS, obj.supportedIdentityDocuments
|
798
|
-
assert_equal SUPPORTED_VERIFICATION_METHODS, obj.supportedVerificationMethods
|
799
|
-
assert_equal SUPPORTED_VERIFIED_CLAIMS, obj.supportedVerifiedClaims
|
800
|
-
assert_equal MISSING_CLIENT_ID_ALLOWED, obj.missingClientIdAllowed
|
801
|
-
assert_equal PAR_REQUIRED, obj.parRequired
|
802
|
-
assert_equal REQUEST_OBJECT_REQUIRED, obj.requestObjectRequired
|
803
|
-
assert_equal TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED, obj.traditionalRequestObjectProcessingApplied
|
804
|
-
assert_equal CLAIM_SHORTCUT_RESTRICTIVE, obj.claimShortcutRestrictive
|
805
|
-
assert_equal SCOPE_REQUIRED, obj.scopeRequired
|
806
|
-
assert_equal NBF_OPTIONAL, obj.nbfOptional
|
807
|
-
assert_equal ISS_SUPPRESSED, obj.issSuppressed
|
808
|
-
assert_equal ATTRIBUTE_KEY, obj.attributes[0].key
|
809
|
-
assert_equal ATTRIBUTE_VALUE, obj.attributes[0].value
|
810
|
-
assert_equal SUPPORTED_CUSTOM_CLIENT_METADATA, obj.supportedCustomClientMetadata
|
811
|
-
assert_equal TOKEN_EXPIRATION_LINKED, obj.tokenExpirationLinked
|
812
|
-
assert_equal FRONT_CHANNEL_REQUEST_OBJECT_ENCRYPTION_REQUIRED, obj.frontChannelRequestObjectEncryptionRequired
|
813
|
-
assert_equal REQUEST_OBJECT_ENCRYPTION_ALG_MATCH_REQUIRED, obj.requestObjectEncryptionAlgMatchRequired
|
814
|
-
assert_equal REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED, obj.requestObjectEncryptionEncMatchRequired
|
815
|
-
assert_equal HSKS_KTY, obj.hsks[0].kty
|
816
|
-
assert_equal HSKS_USE, obj.hsks[0].use
|
817
|
-
assert_equal HSKS_ALG, obj.hsks[0].alg
|
818
|
-
assert_equal HSKS_KID, obj.hsks[0].kid
|
819
|
-
assert_equal HSKS_HSMNAME, obj.hsks[0].hsmName
|
820
|
-
assert_equal HSKS_HANDLE, obj.hsks[0].handle
|
821
|
-
assert_equal HSKS_PUBLICKEY, obj.hsks[0].publicKey
|
822
|
-
assert_equal HSM_ENABLED, obj.hsmEnabled
|
823
|
-
assert_equal REFRESH_TOKEN_DURATION_RESET, obj.refreshTokenDurationReset
|
824
|
-
assert_equal GRANT_MANAGEMENT_ENDPOINT, obj.grantManagementEndpoint
|
825
|
-
assert_equal GRANT_MANAGEMENT_ACTION_REQUIRED, obj.grantManagementActionRequired
|
826
|
-
assert_equal UNATHORIZED_ON_CLIENT_CONFIG_SUPPORTED, obj.unauthorizedOnClientConfigSupported
|
827
|
-
assert_equal DCR_SCOPE_USED_AS_REQUESTABLE, obj.dcrScopeUsedAsRequestable
|
828
|
-
assert_equal PREDEFINED_TRANSFORMED_CLAIMS, obj.predefined_transformed_claims
|
829
|
-
assert_equal LOOPBACK_REDIRECTION_URI_VARIABLE, obj.loopback_redirection_uri_variable
|
830
|
-
assert_equal SUPPORTED_DOCUMENTS, obj.supported_documents
|
831
|
-
assert_equal SUPPORTED_DOCUMENTS_METHODS, obj.supported_documents_methods
|
832
|
-
assert_equal SUPPORTED_DOCUMENTS_VALIDATION_METHODS, obj.supported_documents_validation_methods
|
833
|
-
assert_equal SUPPORTED_DOCUMENTS_VERIFICATION_METHODS, obj.supported_documents_verification_methods
|
834
|
-
assert_equal SUPPORTED_ELECTRONIC_RECORDS, obj.supported_electronic_records
|
835
|
-
assert_equal SUPPORTED_ATTACHMENTS, obj.supported_attachments
|
836
|
-
assert_equal SUPPORTED_DIGEST_ALGORITHMS, obj.supported_digest_algorithms
|
837
|
-
assert_equal REQUEST_OBJECT_AUDIENCE_CHECKED, obj.request_object_audience_checked
|
838
|
-
assert_equal ACCESS_TOKEN_FOR_EXTERNAL_ATTACHMENT_EMBEDDED, obj.access_token_for_external_attachment_embedded
|
839
|
-
assert_equal REFRESH_TOKEN_IDEMPOTENT, obj.refresh_token_idempotent
|
840
|
-
assert_equal FEDERATION_ENABLED, obj.federation_enabled
|
841
|
-
assert_equal ORGANIZATION_NAME, obj.organization_name
|
842
|
-
assert_equal AUTHORITY_HINTS, obj.authority_hints
|
843
|
-
assert_equal FEDERATION_JWKS, obj.federation_jwks
|
844
|
-
assert_equal SIGNED_JWKS_URI, obj.signed_jwks_uri
|
845
|
-
assert_equal FEDERATION_REGISTRATION_ENDPOINT, obj.federation_registration_endpoint
|
846
|
-
assert_equal SUPPORTED_CLIENT_REGISTRATION_TYPES, obj.supported_client_registration_types
|
847
|
-
assert_equal TRUST_ANCHOR_ENTITY_ID, obj.trustAnchors[0].entityId
|
848
|
-
assert_equal TRUST_ANCHOR_JWKS, obj.trustAnchors[0].jwks
|
849
|
-
assert_equal TOKEN_EXCHANGE_BY_IDENTIFIABLE_CLIENTS_ONLY, obj.token_exchange_by_identifiable_clients_only
|
850
|
-
assert_equal TOKEN_EXCHANGE_BY_CONFIDENTIAL_CLIENTS_ONLY, obj.token_exchange_by_confidential_clients_only
|
851
|
-
assert_equal TOKEN_EXCHANGE_BY_PERMITTED_CLIENTS_ONLY, obj.token_exchange_by_permitted_clients_only
|
852
|
-
assert_equal TOKEN_EXCHANGE_ENCRYPTED_JWT_REJECTED, obj.token_exchange_encrypted_jwt_rejected
|
853
|
-
assert_equal TOKEN_EXCHANGE_UNSIGNED_JWT_REJECTED, obj.token_exchange_unsigned_jwt_rejected
|
854
|
-
assert_equal JWT_GRANT_BY_IDENTIFIABLE_CLIENTS_ONLY, obj.jwtGrantByIdentifiableClientsOnly
|
855
|
-
assert_equal JWT_GRANT_ENCRYPTED_JWT_REJECTED, obj.jwtGrantEncryptedJwtRejected
|
856
|
-
assert_equal JWT_GRANT_UNSIGNED_JWT_REJECTED, obj.jwtGrantUnsignedJwtRejected
|
857
|
-
assert_equal FEDERATION_SIGNATURE_KEY_ID, obj.federationSignatureKeyId
|
858
|
-
assert_equal FEDERATION_CONFIGURATION_DURATION, obj.federationConfigurationDuration
|
859
|
-
assert_equal DCR_DUPLICATE_SOFTWARE_ID_BLOCKED, obj.dcrDuplicateSoftwareIdBlocked
|
860
|
-
assert_equal OPENID_DROPPED_ON_REFRESH_WITHOUT_OFFLINE_ACCESS, obj.openidDroppedOnRefreshWithoutOfflineAccess
|
861
|
-
assert_equal SUPPORTED_DOCUMENTS_CHECK_METHODS, obj.supported_documents_check_methods
|
862
|
-
assert_equal ID_TOKEN_AUD_TYPE, obj.id_token_aud_type
|
863
|
-
assert_equal VERIFIED_CLAIMS_VALIDATION_SCHEMA_SET, obj.verified_claims_validation_schema_set
|
864
|
-
assert_equal CREDENTIAL_DURATION, obj.credentialDuration
|
865
|
-
assert_equal CREDENTIAL_JWKS, obj.credentialJwks
|
866
|
-
assert_equal ID_TOKEN_REISSUABLE, obj.idTokenReissuable
|
867
|
-
|
868
|
-
end
|
869
|
-
|
870
|
-
|
871
|
-
def test_from_json
|
872
|
-
jsn = generate_json
|
873
|
-
hsh = JSON.parse(jsn)
|
874
|
-
actual = Authlete::Model::Service.new(hsh)
|
875
|
-
|
876
|
-
match(actual)
|
877
|
-
end
|
878
|
-
|
879
|
-
|
880
|
-
def test_setters
|
881
|
-
actual = Authlete::Model::Service.new
|
882
|
-
set_params(actual)
|
883
|
-
|
884
|
-
match(actual)
|
885
|
-
end
|
886
|
-
|
887
|
-
|
888
|
-
def test_to_hash
|
889
|
-
obj = Authlete::Model::Service.new
|
890
|
-
set_params(obj)
|
891
|
-
actual = obj.to_hash
|
892
|
-
expected = generate_hash
|
893
|
-
|
894
|
-
assert_equal expected, actual
|
895
|
-
end
|
896
|
-
end
|