authlete 1.6.0 → 1.10.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +5 -5
- data/authlete.gemspec +2 -2
- data/lib/authlete/model/client.rb +163 -145
- data/lib/authlete/model/hsk.rb +67 -0
- data/lib/authlete/model/service.rb +264 -219
- data/lib/authlete/version.rb +1 -1
- data/lib/authlete.rb +1 -0
- data/test/authlete/model/test_client.rb +416 -401
- data/test/authlete/model/test_hsk.rb +108 -0
- data/test/authlete/model/test_service.rb +511 -459
- metadata +14 -12
@@ -21,243 +21,265 @@ require 'minitest/autorun'
|
|
21
21
|
|
22
22
|
|
23
23
|
class ServiceTest < Minitest::Test
|
24
|
-
NUMBER
|
25
|
-
SERVICE_OWNER_NUMBER
|
26
|
-
SERVICE_NAME
|
27
|
-
API_KEY
|
28
|
-
API_SECRET
|
29
|
-
ISSUER
|
30
|
-
AUTHORIZATION_ENDPOINT
|
31
|
-
TOKEN_ENDPOINT
|
32
|
-
REVOCATION_ENDPOINT
|
33
|
-
SUPPORTED_REVOCATION_AUTH_METHODS
|
34
|
-
USER_INFO_ENDPOINT
|
35
|
-
JWKS_URI
|
36
|
-
JWKS
|
37
|
-
REGISTRATION_ENDPOINT
|
38
|
-
REGISTRATION_MANAGEMENT_ENDPOINT
|
39
|
-
SUPPORTED_SCOPE_NAME
|
40
|
-
SUPPORTED_SCOPE_DESCRIPTION
|
41
|
-
SUPPORTED_SCOPES
|
42
|
-
SUPPORTED_RESPONSE_TYPES
|
43
|
-
SUPPORTED_GRANT_TYPES
|
44
|
-
SUPPORTED_ACRS
|
45
|
-
SUPPORTED_TOKEN_AUTH_METHODS
|
46
|
-
SUPPORTED_DISPLAYS
|
47
|
-
SUPPORTED_CLAIM_TYPES
|
48
|
-
SUPPORTED_CLAIMS
|
49
|
-
SERVICE_DOCUMENTATION
|
50
|
-
SUPPORTED_CLAIM_LOCALES
|
51
|
-
SUPPORTED_UI_LOCALES
|
52
|
-
POLICY_URI
|
53
|
-
TOS_URI
|
54
|
-
AUTHENTICATION_CALLBACK_ENDPOINT
|
55
|
-
AUTHENTICATION_CALLBACK_API_KEY
|
56
|
-
AUTHENTICATION_CALLBACK_API_SECRET
|
57
|
-
SUPPORTED_SNSES
|
58
|
-
SNS_CREDENTIALS_SNS
|
59
|
-
SNS_CREDENTIALS_API_KEY
|
60
|
-
SNS_CREDENTIALS_API_SECRET
|
61
|
-
SNS_CREDENTIALS
|
62
|
-
CREATED_AT
|
63
|
-
MODIFIED_AT
|
64
|
-
DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT
|
65
|
-
DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY
|
66
|
-
DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET
|
67
|
-
SUPPORTED_DEVELOPER_SNSES
|
68
|
-
DEVELOPER_SNS_CREDENTIALS_SNS
|
69
|
-
DEVELOPER_SNS_CREDENTIALS_API_KEY
|
70
|
-
DEVELOPER_SNS_CREDENTIALS_API_SECRET
|
71
|
-
DEVELOPER_SNS_CREDENTIALS
|
72
|
-
CLIENTS_PER_DEVELOPER
|
73
|
-
DIRECT_AUTHORIZATION_ENDPOINT_ENABLED
|
74
|
-
DIRECT_TOKEN_ENDPOINT_ENABLED
|
75
|
-
DIRECT_REVOCATION_ENDPOINT_ENABLED
|
76
|
-
DIRECT_USER_INFO_ENDPOINT_ENABLED
|
77
|
-
DIRECT_JWKS_ENDPOINT_ENABLED
|
78
|
-
DIRECT_INTROSPECTION_ENDPOINT_ENABLED
|
79
|
-
SINGLE_ACCESS_TOKEN_PER_SUBJECT
|
80
|
-
PKCE_REQUIRED
|
81
|
-
PKCE_S256_REQUIRED
|
82
|
-
REFRESH_TOKEN_KEPT
|
83
|
-
REFRESH_TOKEN_DURATION_KEPT
|
84
|
-
ERROR_DESCRIPTION_OMITTED
|
85
|
-
ERROR_URI_OMITTED
|
86
|
-
CLIENT_ID_ALIAS_ENABLED
|
87
|
-
SUPPORTED_SERVICE_PROFILES
|
88
|
-
TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS
|
89
|
-
INTROSPECTION_ENDPOINT
|
90
|
-
SUPPORTED_INTROSPECTION_AUTH_METHODS
|
91
|
-
MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN
|
92
|
-
TRUSTED_ROOT_CERTIFICATES
|
93
|
-
DYNAMIC_REGISTRATION_SUPPORTED
|
94
|
-
END_SESSION_ENDPOINT
|
95
|
-
DESCRIPTION
|
96
|
-
ACCESS_TOKEN_TYPE
|
97
|
-
ACCESS_TOKEN_SIGN_ALG
|
98
|
-
ACCESS_TOKEN_DURATION
|
99
|
-
REFRESH_TOKEN_DURATION
|
100
|
-
ID_TOKEN_DURATION
|
101
|
-
AUTHORIZATION_RESPONSE_DURATION
|
102
|
-
PUSHED_AUTH_REQ_DURATION
|
103
|
-
METADATA_KEY
|
104
|
-
METADATA_VALUE
|
105
|
-
METADATA
|
106
|
-
ACCESS_TOKEN_SIGNATURE_KEY_ID
|
107
|
-
AUTHORIZATION_SIGNATURE_KEY_ID
|
108
|
-
ID_TOKEN_SIGNATURE_KEY_ID
|
109
|
-
USER_INFO_SIGNATURE_KEY_ID
|
110
|
-
SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES
|
111
|
-
BACKCHANNEL_AUTHENTICATION_ENDPOINT
|
112
|
-
BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED
|
113
|
-
BACKCHANNEL_AUTH_REQ_ID_DURATION
|
114
|
-
BACKCHANNEL_POLLING_INTERVAL
|
115
|
-
BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI
|
116
|
-
ALLOWABLE_CLOCK_SKEW
|
117
|
-
DEVICE_AUTHORIZATION_ENDPOINT
|
118
|
-
DEVICE_VERIFICATION_URI
|
119
|
-
DEVICE_VERIFICATION_URI_COMPLETE
|
120
|
-
DEVICE_FLOW_CODE_DURATION
|
121
|
-
DEVICE_FLOW_POLLING_INTERVAL
|
122
|
-
USER_CODE_CHARSET
|
123
|
-
USER_CODE_LENGTH
|
124
|
-
PUSHED_AUTH_REQ_ENDPOINT
|
125
|
-
MTLS_ENDPOINT_ALIAS_NAME
|
126
|
-
MTLS_ENDPOINT_ALIAS_URI
|
127
|
-
MTLS_ENDPOINT_ALIASES
|
128
|
-
SUPPORTED_AUTHORIZATION_DETAILS_TYPES
|
129
|
-
SUPPORTED_TRUST_FRAMEWORKS
|
130
|
-
SUPPORTED_EVIDENCE
|
131
|
-
SUPPORTED_IDENTITY_DOCUMENTS
|
132
|
-
SUPPORTED_VERIFICATION_METHODS
|
133
|
-
SUPPORTED_VERIFIED_CLAIMS
|
134
|
-
MISSING_CLIENT_ID_ALLOWED
|
135
|
-
PAR_REQUIRED
|
136
|
-
REQUEST_OBJECT_REQUIRED
|
137
|
-
TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED
|
138
|
-
CLAIM_SHORTCUT_RESTRICTIVE
|
139
|
-
SCOPE_REQUIRED
|
140
|
-
NBF_OPTIONAL
|
141
|
-
ISS_SUPPRESSED
|
142
|
-
ATTRIBUTE_KEY
|
143
|
-
ATTRIBUTE_VALUE
|
144
|
-
ATTRIBUTES
|
145
|
-
SUPPORTED_CUSTOM_CLIENT_METADATA
|
146
|
-
TOKEN_EXPIRATION_LINKED
|
147
|
-
|
24
|
+
NUMBER = 1000
|
25
|
+
SERVICE_OWNER_NUMBER = 12345
|
26
|
+
SERVICE_NAME = '<service-name>'
|
27
|
+
API_KEY = '<api-key>'
|
28
|
+
API_SECRET = '<api-secret>'
|
29
|
+
ISSUER = '<issuer>'
|
30
|
+
AUTHORIZATION_ENDPOINT = '<authorization-endpoint>'
|
31
|
+
TOKEN_ENDPOINT = '<token-endpoint>'
|
32
|
+
REVOCATION_ENDPOINT = '<revocation-endpoint>'
|
33
|
+
SUPPORTED_REVOCATION_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
|
34
|
+
USER_INFO_ENDPOINT = '<user-info-endpoint>'
|
35
|
+
JWKS_URI = '<jwks-uri>'
|
36
|
+
JWKS = '<jwks>'
|
37
|
+
REGISTRATION_ENDPOINT = '<registration-endpoint>'
|
38
|
+
REGISTRATION_MANAGEMENT_ENDPOINT = '<registration-management-endpoint>'
|
39
|
+
SUPPORTED_SCOPE_NAME = 'scope0'
|
40
|
+
SUPPORTED_SCOPE_DESCRIPTION = '<scope0-description>'
|
41
|
+
SUPPORTED_SCOPES = [ Authlete::Model::Scope.new(name: SUPPORTED_SCOPE_NAME, description: SUPPORTED_SCOPE_DESCRIPTION) ]
|
42
|
+
SUPPORTED_RESPONSE_TYPES = [ 'NONE', 'CODE', 'TOKEN', 'ID_TOKEN' ]
|
43
|
+
SUPPORTED_GRANT_TYPES = [ 'AUTHORIZATION_CODE', 'REFRESH_TOKEN' ]
|
44
|
+
SUPPORTED_ACRS = [ '<supported-acr0>', '<supported-acr1>' ]
|
45
|
+
SUPPORTED_TOKEN_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
|
46
|
+
SUPPORTED_DISPLAYS = [ 'PAGE', 'POPUP', 'TOUCH', 'WAP' ]
|
47
|
+
SUPPORTED_CLAIM_TYPES = [ 'NORMAL' ]
|
48
|
+
SUPPORTED_CLAIMS = [ '<supported-claim0>', '<supported-claim1>' ]
|
49
|
+
SERVICE_DOCUMENTATION = '<service-documentation>'
|
50
|
+
SUPPORTED_CLAIM_LOCALES = [ 'en-US' ]
|
51
|
+
SUPPORTED_UI_LOCALES = [ 'en-US' ]
|
52
|
+
POLICY_URI = '<policy-uri>'
|
53
|
+
TOS_URI = '<tos-uri>'
|
54
|
+
AUTHENTICATION_CALLBACK_ENDPOINT = '<authentication-callback-endpoint>'
|
55
|
+
AUTHENTICATION_CALLBACK_API_KEY = '<authentication-callback-api-key>'
|
56
|
+
AUTHENTICATION_CALLBACK_API_SECRET = '<authentication-callback-api-secret>'
|
57
|
+
SUPPORTED_SNSES = [ 'FACEBOOK' ]
|
58
|
+
SNS_CREDENTIALS_SNS = 'FACEBOOK'
|
59
|
+
SNS_CREDENTIALS_API_KEY = '<sns-credentials0-api-key>'
|
60
|
+
SNS_CREDENTIALS_API_SECRET = '<sns-credentials0-api-secret>'
|
61
|
+
SNS_CREDENTIALS = [ Authlete::Model::SnsCredentials.new(sns: SNS_CREDENTIALS_SNS, apiKey: SNS_CREDENTIALS_API_KEY, apiSecret: SNS_CREDENTIALS_API_SECRET) ]
|
62
|
+
CREATED_AT = 10000
|
63
|
+
MODIFIED_AT = 10000
|
64
|
+
DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT = '<developer-authentication-callback-endpoint>'
|
65
|
+
DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY = '<developer-authentication-callback-api-key>'
|
66
|
+
DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET = '<developer-authentication-callback-api-secret>'
|
67
|
+
SUPPORTED_DEVELOPER_SNSES = [ 'FACEBOOK' ]
|
68
|
+
DEVELOPER_SNS_CREDENTIALS_SNS = 'FACEBOOK'
|
69
|
+
DEVELOPER_SNS_CREDENTIALS_API_KEY = '<developer-sns-credentials0-api-key>'
|
70
|
+
DEVELOPER_SNS_CREDENTIALS_API_SECRET = '<developer-sns-credentials0-api-secret>'
|
71
|
+
DEVELOPER_SNS_CREDENTIALS = [ Authlete::Model::SnsCredentials.new(sns: DEVELOPER_SNS_CREDENTIALS_SNS, apiKey: DEVELOPER_SNS_CREDENTIALS_API_KEY, apiSecret: DEVELOPER_SNS_CREDENTIALS_API_SECRET) ]
|
72
|
+
CLIENTS_PER_DEVELOPER = 10
|
73
|
+
DIRECT_AUTHORIZATION_ENDPOINT_ENABLED = true
|
74
|
+
DIRECT_TOKEN_ENDPOINT_ENABLED = true
|
75
|
+
DIRECT_REVOCATION_ENDPOINT_ENABLED = true
|
76
|
+
DIRECT_USER_INFO_ENDPOINT_ENABLED = true
|
77
|
+
DIRECT_JWKS_ENDPOINT_ENABLED = true
|
78
|
+
DIRECT_INTROSPECTION_ENDPOINT_ENABLED = true
|
79
|
+
SINGLE_ACCESS_TOKEN_PER_SUBJECT = false
|
80
|
+
PKCE_REQUIRED = true
|
81
|
+
PKCE_S256_REQUIRED = true
|
82
|
+
REFRESH_TOKEN_KEPT = true
|
83
|
+
REFRESH_TOKEN_DURATION_KEPT = true
|
84
|
+
ERROR_DESCRIPTION_OMITTED = false
|
85
|
+
ERROR_URI_OMITTED = false
|
86
|
+
CLIENT_ID_ALIAS_ENABLED = true
|
87
|
+
SUPPORTED_SERVICE_PROFILES = [ 'FAPI', 'OPEN_BANKING' ]
|
88
|
+
TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS = true
|
89
|
+
INTROSPECTION_ENDPOINT = '<introspection-endpoint>'
|
90
|
+
SUPPORTED_INTROSPECTION_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
|
91
|
+
MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN = true
|
92
|
+
TRUSTED_ROOT_CERTIFICATES = [ '<trusted-root-certificate0>', '<trusted-root-certificate1>' ]
|
93
|
+
DYNAMIC_REGISTRATION_SUPPORTED = true
|
94
|
+
END_SESSION_ENDPOINT = '<end-session-endpoint>'
|
95
|
+
DESCRIPTION = '<description>'
|
96
|
+
ACCESS_TOKEN_TYPE = 'Bearer'
|
97
|
+
ACCESS_TOKEN_SIGN_ALG = 'HS256'
|
98
|
+
ACCESS_TOKEN_DURATION = 300
|
99
|
+
REFRESH_TOKEN_DURATION = 300
|
100
|
+
ID_TOKEN_DURATION = 300
|
101
|
+
AUTHORIZATION_RESPONSE_DURATION = 300
|
102
|
+
PUSHED_AUTH_REQ_DURATION = 300
|
103
|
+
METADATA_KEY = '<metadata0-key>'
|
104
|
+
METADATA_VALUE = '<metadata0-value>'
|
105
|
+
METADATA = [ Authlete::Model::Pair.new(key: METADATA_KEY, value: METADATA_VALUE) ]
|
106
|
+
ACCESS_TOKEN_SIGNATURE_KEY_ID = '<access-token-signature-key-id>'
|
107
|
+
AUTHORIZATION_SIGNATURE_KEY_ID = '<authorization-signature-key-id>'
|
108
|
+
ID_TOKEN_SIGNATURE_KEY_ID = '<id-token-signature-key-id>'
|
109
|
+
USER_INFO_SIGNATURE_KEY_ID = '<user-info-signature-key-id>'
|
110
|
+
SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES = [ 'POLL', 'PING', 'PUSH' ]
|
111
|
+
BACKCHANNEL_AUTHENTICATION_ENDPOINT = '<backchannel-authentication-endpoint>'
|
112
|
+
BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED = true
|
113
|
+
BACKCHANNEL_AUTH_REQ_ID_DURATION = 300
|
114
|
+
BACKCHANNEL_POLLING_INTERVAL = 10
|
115
|
+
BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI = true
|
116
|
+
ALLOWABLE_CLOCK_SKEW = 100
|
117
|
+
DEVICE_AUTHORIZATION_ENDPOINT = '<device-authorization-endpoint>'
|
118
|
+
DEVICE_VERIFICATION_URI = '<device-verification-uri>'
|
119
|
+
DEVICE_VERIFICATION_URI_COMPLETE = '<device-verification-uri-complete>'
|
120
|
+
DEVICE_FLOW_CODE_DURATION = 300
|
121
|
+
DEVICE_FLOW_POLLING_INTERVAL = 10
|
122
|
+
USER_CODE_CHARSET = 'BASE20'
|
123
|
+
USER_CODE_LENGTH = 100
|
124
|
+
PUSHED_AUTH_REQ_ENDPOINT = '<pushed-auth-req-endpoint>'
|
125
|
+
MTLS_ENDPOINT_ALIAS_NAME = '<mtls-endpoint-alias0-name>'
|
126
|
+
MTLS_ENDPOINT_ALIAS_URI = '<mtls-endpoint-alias0-uri>'
|
127
|
+
MTLS_ENDPOINT_ALIASES = [ Authlete::Model::NamedUri.new(name: MTLS_ENDPOINT_ALIAS_NAME, uri: MTLS_ENDPOINT_ALIAS_URI) ]
|
128
|
+
SUPPORTED_AUTHORIZATION_DETAILS_TYPES = [ '<supported-authorization-details-type0>', '<supported-authorization-details-type1>' ]
|
129
|
+
SUPPORTED_TRUST_FRAMEWORKS = [ '<supported-trust-framework0>', '<supported-trust-framework1>' ]
|
130
|
+
SUPPORTED_EVIDENCE = [ '<supported-evidence0>', '<supported-evidence1>' ]
|
131
|
+
SUPPORTED_IDENTITY_DOCUMENTS = [ '<supported-identity-document0>', '<supported-identity-document1>' ]
|
132
|
+
SUPPORTED_VERIFICATION_METHODS = [ '<supported-verification-method0>', '<supported-verification-method1>' ]
|
133
|
+
SUPPORTED_VERIFIED_CLAIMS = [ '<supported-verified-claim0>', '<supported-verified-claim1>' ]
|
134
|
+
MISSING_CLIENT_ID_ALLOWED = false
|
135
|
+
PAR_REQUIRED = false
|
136
|
+
REQUEST_OBJECT_REQUIRED = true
|
137
|
+
TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED = false
|
138
|
+
CLAIM_SHORTCUT_RESTRICTIVE = false
|
139
|
+
SCOPE_REQUIRED = true
|
140
|
+
NBF_OPTIONAL = true
|
141
|
+
ISS_SUPPRESSED = false
|
142
|
+
ATTRIBUTE_KEY = '<attribute0-key>'
|
143
|
+
ATTRIBUTE_VALUE = '<attribute0-value>'
|
144
|
+
ATTRIBUTES = [ Authlete::Model::Pair.new(key: ATTRIBUTE_KEY, value: ATTRIBUTE_VALUE) ]
|
145
|
+
SUPPORTED_CUSTOM_CLIENT_METADATA = [ '<supported-custom-client-metadata0>', '<supported-custom-client-metadata1>' ]
|
146
|
+
TOKEN_EXPIRATION_LINKED = false
|
147
|
+
FRONT_CHANNEL_REQUEST_OBJECT_ENCRYPTION_REQUIRED = false
|
148
|
+
REQUEST_OBJECT_ENCRYPTION_ALG_MATCH_REQUIRED = false
|
149
|
+
REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED = false
|
150
|
+
HSKS_KTY = 'EC'
|
151
|
+
HSKS_USE = 'sig'
|
152
|
+
HSKS_ALG = 'ES256'
|
153
|
+
HSKS_KID = 'jane'
|
154
|
+
HSKS_HSMNAME = 'google'
|
155
|
+
HSKS_HANDLE = '<handle>'
|
156
|
+
HSKS_PUBLICKEY = '<public-key>'
|
157
|
+
HSKS = [ Authlete::Model::Hsk.new(kty: HSKS_KTY, use: HSKS_USE, alg: HSKS_ALG, kid: HSKS_KID, hsmName: HSKS_HSMNAME, handle: HSKS_HANDLE, publicKey: HSKS_PUBLICKEY) ]
|
158
|
+
HSM_ENABLED = false
|
159
|
+
REFRESH_TOKEN_DURATION_RESET = false
|
160
|
+
GRANT_MANAGEMENT_ENDPOINT = '<grant-management-endpoint>'
|
161
|
+
GRANT_MANAGEMENT_ACTION_REQUIRED = false
|
148
162
|
|
149
163
|
def generate_json
|
150
164
|
return <<~JSON
|
151
165
|
{
|
152
|
-
"number":
|
153
|
-
"serviceOwnerNumber":
|
154
|
-
"serviceName":
|
155
|
-
"apiKey":
|
156
|
-
"apiSecret":
|
157
|
-
"issuer":
|
158
|
-
"authorizationEndpoint":
|
159
|
-
"tokenEndpoint":
|
160
|
-
"revocationEndpoint":
|
161
|
-
"supportedRevocationAuthMethods":
|
162
|
-
"userInfoEndpoint":
|
163
|
-
"jwksUri":
|
164
|
-
"jwks":
|
165
|
-
"
|
166
|
-
"
|
167
|
-
"
|
168
|
-
"
|
169
|
-
"
|
170
|
-
"
|
171
|
-
"
|
172
|
-
"
|
173
|
-
"
|
174
|
-
"
|
175
|
-
"
|
176
|
-
"
|
177
|
-
"
|
178
|
-
"
|
179
|
-
"
|
180
|
-
"
|
181
|
-
"
|
182
|
-
"
|
183
|
-
"
|
184
|
-
"
|
185
|
-
"
|
186
|
-
"
|
187
|
-
"
|
188
|
-
"
|
189
|
-
"
|
190
|
-
"
|
191
|
-
"
|
192
|
-
"
|
193
|
-
"
|
194
|
-
"
|
195
|
-
"
|
196
|
-
"
|
197
|
-
"
|
198
|
-
"
|
199
|
-
"
|
200
|
-
"
|
201
|
-
"
|
202
|
-
"
|
203
|
-
"
|
204
|
-
"
|
205
|
-
"
|
206
|
-
"
|
207
|
-
"
|
208
|
-
"
|
209
|
-
"
|
210
|
-
"
|
211
|
-
"
|
212
|
-
"
|
213
|
-
"
|
214
|
-
"
|
215
|
-
"
|
216
|
-
"
|
217
|
-
"
|
218
|
-
"
|
219
|
-
"
|
220
|
-
"
|
221
|
-
"
|
222
|
-
"
|
223
|
-
"
|
224
|
-
"
|
225
|
-
"
|
226
|
-
"
|
227
|
-
"
|
228
|
-
"
|
229
|
-
"
|
230
|
-
"
|
231
|
-
"
|
232
|
-
"
|
233
|
-
"
|
234
|
-
"
|
235
|
-
"
|
236
|
-
"
|
237
|
-
"
|
238
|
-
"
|
239
|
-
"
|
240
|
-
"
|
241
|
-
"
|
242
|
-
"
|
243
|
-
"
|
244
|
-
"
|
245
|
-
"
|
246
|
-
"
|
247
|
-
"
|
248
|
-
"
|
249
|
-
"
|
250
|
-
"
|
251
|
-
"
|
252
|
-
"
|
253
|
-
"
|
254
|
-
"
|
255
|
-
"
|
256
|
-
"
|
257
|
-
"
|
258
|
-
"
|
259
|
-
"
|
260
|
-
"
|
166
|
+
"number": 1000,
|
167
|
+
"serviceOwnerNumber": 12345,
|
168
|
+
"serviceName": "<service-name>",
|
169
|
+
"apiKey": "<api-key>",
|
170
|
+
"apiSecret": "<api-secret>",
|
171
|
+
"issuer": "<issuer>",
|
172
|
+
"authorizationEndpoint": "<authorization-endpoint>",
|
173
|
+
"tokenEndpoint": "<token-endpoint>",
|
174
|
+
"revocationEndpoint": "<revocation-endpoint>",
|
175
|
+
"supportedRevocationAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
|
176
|
+
"userInfoEndpoint": "<user-info-endpoint>",
|
177
|
+
"jwksUri": "<jwks-uri>",
|
178
|
+
"jwks": "<jwks>",
|
179
|
+
"hsks": [ { "kty": "EC", "use": "sig", "alg": "ES256", "kid": "jane", "hsmName": "google", "handle": "<handle>", "publicKey": "<public-key>" } ],
|
180
|
+
"hsmEnabled": false,
|
181
|
+
"registrationEndpoint": "<registration-endpoint>",
|
182
|
+
"registrationManagementEndpoint": "<registration-management-endpoint>",
|
183
|
+
"supportedScopes": [ { "name": "scope0", "description": "<scope0-description>" } ],
|
184
|
+
"supportedResponseTypes": [ "NONE", "CODE", "TOKEN", "ID_TOKEN" ],
|
185
|
+
"supportedGrantTypes": [ "AUTHORIZATION_CODE", "REFRESH_TOKEN" ],
|
186
|
+
"supportedAcrs": [ "<supported-acr0>", "<supported-acr1>" ],
|
187
|
+
"supportedTokenAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
|
188
|
+
"supportedDisplays": [ "PAGE", "POPUP", "TOUCH", "WAP" ],
|
189
|
+
"supportedClaimTypes": [ "NORMAL" ],
|
190
|
+
"supportedClaims": [ "<supported-claim0>", "<supported-claim1>" ],
|
191
|
+
"serviceDocumentation": "<service-documentation>",
|
192
|
+
"supportedClaimLocales": [ "en-US" ],
|
193
|
+
"supportedUiLocales": [ "en-US" ],
|
194
|
+
"policyUri": "<policy-uri>",
|
195
|
+
"tosUri": "<tos-uri>",
|
196
|
+
"authenticationCallbackEndpoint": "<authentication-callback-endpoint>",
|
197
|
+
"authenticationCallbackApiKey": "<authentication-callback-api-key>",
|
198
|
+
"authenticationCallbackApiSecret": "<authentication-callback-api-secret>",
|
199
|
+
"supportedSnses": [ "FACEBOOK" ],
|
200
|
+
"snsCredentials": [ { "sns": "FACEBOOK", "apiKey": "<sns-credentials0-api-key>", "apiSecret": "<sns-credentials0-api-secret>" } ],
|
201
|
+
"createdAt": 10000,
|
202
|
+
"modifiedAt": 10000,
|
203
|
+
"developerAuthenticationCallbackEndpoint": "<developer-authentication-callback-endpoint>",
|
204
|
+
"developerAuthenticationCallbackApiKey": "<developer-authentication-callback-api-key>",
|
205
|
+
"developerAuthenticationCallbackApiSecret": "<developer-authentication-callback-api-secret>",
|
206
|
+
"supportedDeveloperSnses": [ "FACEBOOK" ],
|
207
|
+
"developerSnsCredentials": [ { "sns": "FACEBOOK", "apiKey": "<developer-sns-credentials0-api-key>", "apiSecret": "<developer-sns-credentials0-api-secret>" } ],
|
208
|
+
"clientsPerDeveloper": 10,
|
209
|
+
"directAuthorizationEndpointEnabled": true,
|
210
|
+
"directTokenEndpointEnabled": true,
|
211
|
+
"directRevocationEndpointEnabled": true,
|
212
|
+
"directUserInfoEndpointEnabled": true,
|
213
|
+
"directJwksEndpointEnabled": true,
|
214
|
+
"directIntrospectionEndpointEnabled": true,
|
215
|
+
"singleAccessTokenPerSubject": false,
|
216
|
+
"pkceRequired": true,
|
217
|
+
"pkceS256Required": true,
|
218
|
+
"refreshTokenKept": true,
|
219
|
+
"refreshTokenDurationKept": true,
|
220
|
+
"errorDescriptionOmitted": false,
|
221
|
+
"errorUriOmitted": false,
|
222
|
+
"clientIdAliasEnabled": true,
|
223
|
+
"supportedServiceProfiles": [ "FAPI", "OPEN_BANKING" ],
|
224
|
+
"tlsClientCertificateBoundAccessTokens": true,
|
225
|
+
"introspectionEndpoint": "<introspection-endpoint>",
|
226
|
+
"supportedIntrospectionAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
|
227
|
+
"mutualTlsValidatePkiCertChain": true,
|
228
|
+
"trustedRootCertificates": [ "<trusted-root-certificate0>", "<trusted-root-certificate1>" ],
|
229
|
+
"dynamicRegistrationSupported": true,
|
230
|
+
"endSessionEndpoint": "<end-session-endpoint>",
|
231
|
+
"description": "<description>",
|
232
|
+
"accessTokenType": "Bearer",
|
233
|
+
"accessTokenSignAlg": "HS256",
|
234
|
+
"accessTokenDuration": 300,
|
235
|
+
"refreshTokenDuration": 300,
|
236
|
+
"idTokenDuration": 300,
|
237
|
+
"authorizationResponseDuration": 300,
|
238
|
+
"pushedAuthReqDuration": 300,
|
239
|
+
"metadata": [ { "key": "<metadata0-key>", "value": "<metadata0-value>" } ],
|
240
|
+
"accessTokenSignatureKeyId": "<access-token-signature-key-id>",
|
241
|
+
"authorizationSignatureKeyId": "<authorization-signature-key-id>",
|
242
|
+
"idTokenSignatureKeyId": "<id-token-signature-key-id>",
|
243
|
+
"userInfoSignatureKeyId": "<user-info-signature-key-id>",
|
244
|
+
"supportedBackchannelTokenDeliveryModes": [ "POLL", "PING", "PUSH" ],
|
245
|
+
"backchannelAuthenticationEndpoint": "<backchannel-authentication-endpoint>",
|
246
|
+
"backchannelUserCodeParameterSupported": true,
|
247
|
+
"backchannelAuthReqIdDuration": 300,
|
248
|
+
"backchannelPollingInterval": 10,
|
249
|
+
"backchannelBindingMessageRequiredInFapi": true,
|
250
|
+
"allowableClockSkew": 100,
|
251
|
+
"deviceAuthorizationEndpoint": "<device-authorization-endpoint>",
|
252
|
+
"deviceVerificationUri": "<device-verification-uri>",
|
253
|
+
"deviceVerificationUriComplete": "<device-verification-uri-complete>",
|
254
|
+
"deviceFlowCodeDuration": 300,
|
255
|
+
"deviceFlowPollingInterval": 10,
|
256
|
+
"userCodeCharset": "BASE20",
|
257
|
+
"userCodeLength": 100,
|
258
|
+
"pushedAuthReqEndpoint": "<pushed-auth-req-endpoint>",
|
259
|
+
"mtlsEndpointAliases": [ { "name": "<mtls-endpoint-alias0-name>", "uri": "<mtls-endpoint-alias0-uri>" } ],
|
260
|
+
"supportedAuthorizationDetailsTypes": [ "<supported-authorization-details-type0>", "<supported-authorization-details-type1>" ],
|
261
|
+
"supportedTrustFrameworks": [ "<supported-trust-framework0>", "<supported-trust-framework1>" ],
|
262
|
+
"supportedEvidence": [ "<supported-evidence0>", "<supported-evidence1>" ],
|
263
|
+
"supportedIdentityDocuments": [ "<supported-identity-document0>", "<supported-identity-document1>" ],
|
264
|
+
"supportedVerificationMethods": [ "<supported-verification-method0>", "<supported-verification-method1>" ],
|
265
|
+
"supportedVerifiedClaims": [ "<supported-verified-claim0>", "<supported-verified-claim1>" ],
|
266
|
+
"missingClientIdAllowed": false,
|
267
|
+
"parRequired": false,
|
268
|
+
"requestObjectRequired": true,
|
269
|
+
"traditionalRequestObjectProcessingApplied": false,
|
270
|
+
"claimShortcutRestrictive": false,
|
271
|
+
"scopeRequired": true,
|
272
|
+
"nbfOptional": true,
|
273
|
+
"issSuppressed": false,
|
274
|
+
"attributes": [{ "key": "<attribute0-key>", "value": "<attribute0-value>" }],
|
275
|
+
"supportedCustomClientMetadata": [ "<supported-custom-client-metadata0>", "<supported-custom-client-metadata1>" ],
|
276
|
+
"tokenExpirationLinked": false,
|
277
|
+
"frontChannelRequestObjectEncryptionRequired": false,
|
278
|
+
"requestObjectEncryptionAlgMatchRequired": false,
|
279
|
+
"requestObjectEncryptionEncMatchRequired": false,
|
280
|
+
"refreshTokenDurationReset": false,
|
281
|
+
"grantManagementEndpoint": "<grant-management-endpoint>",
|
282
|
+
"grantManagementActionRequired": false
|
261
283
|
}
|
262
284
|
JSON
|
263
285
|
end
|
@@ -265,115 +287,123 @@ class ServiceTest < Minitest::Test
|
|
265
287
|
|
266
288
|
def generate_hash
|
267
289
|
{
|
268
|
-
number:
|
269
|
-
serviceOwnerNumber:
|
270
|
-
serviceName:
|
271
|
-
apiKey:
|
272
|
-
apiSecret:
|
273
|
-
issuer:
|
274
|
-
authorizationEndpoint:
|
275
|
-
tokenEndpoint:
|
276
|
-
revocationEndpoint:
|
277
|
-
supportedRevocationAuthMethods:
|
278
|
-
userInfoEndpoint:
|
279
|
-
jwksUri:
|
280
|
-
jwks:
|
281
|
-
registrationEndpoint:
|
282
|
-
registrationManagementEndpoint:
|
283
|
-
supportedScopes:
|
284
|
-
supportedResponseTypes:
|
285
|
-
supportedGrantTypes:
|
286
|
-
supportedAcrs:
|
287
|
-
supportedTokenAuthMethods:
|
288
|
-
supportedDisplays:
|
289
|
-
supportedClaimTypes:
|
290
|
-
supportedClaims:
|
291
|
-
serviceDocumentation:
|
292
|
-
supportedClaimLocales:
|
293
|
-
supportedUiLocales:
|
294
|
-
policyUri:
|
295
|
-
tosUri:
|
296
|
-
authenticationCallbackEndpoint:
|
297
|
-
authenticationCallbackApiKey:
|
298
|
-
authenticationCallbackApiSecret:
|
299
|
-
supportedSnses:
|
300
|
-
snsCredentials:
|
301
|
-
createdAt:
|
302
|
-
modifiedAt:
|
303
|
-
developerAuthenticationCallbackEndpoint:
|
304
|
-
developerAuthenticationCallbackApiKey:
|
305
|
-
developerAuthenticationCallbackApiSecret:
|
306
|
-
supportedDeveloperSnses:
|
307
|
-
developerSnsCredentials:
|
308
|
-
clientsPerDeveloper:
|
309
|
-
directAuthorizationEndpointEnabled:
|
310
|
-
directTokenEndpointEnabled:
|
311
|
-
directRevocationEndpointEnabled:
|
312
|
-
directUserInfoEndpointEnabled:
|
313
|
-
directJwksEndpointEnabled:
|
314
|
-
directIntrospectionEndpointEnabled:
|
315
|
-
singleAccessTokenPerSubject:
|
316
|
-
pkceRequired:
|
317
|
-
pkceS256Required:
|
318
|
-
refreshTokenKept:
|
319
|
-
refreshTokenDurationKept:
|
320
|
-
errorDescriptionOmitted:
|
321
|
-
errorUriOmitted:
|
322
|
-
clientIdAliasEnabled:
|
323
|
-
supportedServiceProfiles:
|
324
|
-
tlsClientCertificateBoundAccessTokens:
|
325
|
-
introspectionEndpoint:
|
326
|
-
supportedIntrospectionAuthMethods:
|
327
|
-
mutualTlsValidatePkiCertChain:
|
328
|
-
trustedRootCertificates:
|
329
|
-
dynamicRegistrationSupported:
|
330
|
-
endSessionEndpoint:
|
331
|
-
description:
|
332
|
-
accessTokenType:
|
333
|
-
accessTokenSignAlg:
|
334
|
-
accessTokenDuration:
|
335
|
-
refreshTokenDuration:
|
336
|
-
idTokenDuration:
|
337
|
-
authorizationResponseDuration:
|
338
|
-
pushedAuthReqDuration:
|
339
|
-
metadata:
|
340
|
-
accessTokenSignatureKeyId:
|
341
|
-
authorizationSignatureKeyId:
|
342
|
-
idTokenSignatureKeyId:
|
343
|
-
userInfoSignatureKeyId:
|
344
|
-
supportedBackchannelTokenDeliveryModes:
|
345
|
-
backchannelAuthenticationEndpoint:
|
346
|
-
backchannelUserCodeParameterSupported:
|
347
|
-
backchannelAuthReqIdDuration:
|
348
|
-
backchannelPollingInterval:
|
349
|
-
backchannelBindingMessageRequiredInFapi:
|
350
|
-
allowableClockSkew:
|
351
|
-
deviceAuthorizationEndpoint:
|
352
|
-
deviceVerificationUri:
|
353
|
-
deviceVerificationUriComplete:
|
354
|
-
deviceFlowCodeDuration:
|
355
|
-
deviceFlowPollingInterval:
|
356
|
-
userCodeCharset:
|
357
|
-
userCodeLength:
|
358
|
-
pushedAuthReqEndpoint:
|
359
|
-
mtlsEndpointAliases:
|
360
|
-
supportedAuthorizationDetailsTypes:
|
361
|
-
supportedTrustFrameworks:
|
362
|
-
supportedEvidence:
|
363
|
-
supportedIdentityDocuments:
|
364
|
-
supportedVerificationMethods:
|
365
|
-
supportedVerifiedClaims:
|
366
|
-
missingClientIdAllowed:
|
367
|
-
parRequired:
|
368
|
-
requestObjectRequired:
|
369
|
-
traditionalRequestObjectProcessingApplied:
|
370
|
-
claimShortcutRestrictive:
|
371
|
-
scopeRequired:
|
372
|
-
nbfOptional:
|
373
|
-
issSuppressed:
|
374
|
-
attributes:
|
375
|
-
supportedCustomClientMetadata:
|
376
|
-
tokenExpirationLinked:
|
290
|
+
number: 1000,
|
291
|
+
serviceOwnerNumber: 12345,
|
292
|
+
serviceName: '<service-name>',
|
293
|
+
apiKey: '<api-key>',
|
294
|
+
apiSecret: '<api-secret>',
|
295
|
+
issuer: '<issuer>',
|
296
|
+
authorizationEndpoint: '<authorization-endpoint>',
|
297
|
+
tokenEndpoint: '<token-endpoint>',
|
298
|
+
revocationEndpoint: '<revocation-endpoint>',
|
299
|
+
supportedRevocationAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
|
300
|
+
userInfoEndpoint: '<user-info-endpoint>',
|
301
|
+
jwksUri: '<jwks-uri>',
|
302
|
+
jwks: '<jwks>',
|
303
|
+
registrationEndpoint: '<registration-endpoint>',
|
304
|
+
registrationManagementEndpoint: '<registration-management-endpoint>',
|
305
|
+
supportedScopes: [ { name: 'scope0', description: '<scope0-description>', defaultEntry: false, descriptions: nil, attributes: nil } ],
|
306
|
+
supportedResponseTypes: [ 'NONE', 'CODE', 'TOKEN', 'ID_TOKEN' ],
|
307
|
+
supportedGrantTypes: [ 'AUTHORIZATION_CODE', 'REFRESH_TOKEN' ],
|
308
|
+
supportedAcrs: [ '<supported-acr0>', '<supported-acr1>' ],
|
309
|
+
supportedTokenAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
|
310
|
+
supportedDisplays: [ 'PAGE', 'POPUP', 'TOUCH', 'WAP' ],
|
311
|
+
supportedClaimTypes: [ 'NORMAL' ],
|
312
|
+
supportedClaims: [ '<supported-claim0>', '<supported-claim1>' ],
|
313
|
+
serviceDocumentation: '<service-documentation>',
|
314
|
+
supportedClaimLocales: [ 'en-US' ],
|
315
|
+
supportedUiLocales: [ 'en-US' ],
|
316
|
+
policyUri: '<policy-uri>',
|
317
|
+
tosUri: '<tos-uri>',
|
318
|
+
authenticationCallbackEndpoint: '<authentication-callback-endpoint>',
|
319
|
+
authenticationCallbackApiKey: '<authentication-callback-api-key>',
|
320
|
+
authenticationCallbackApiSecret: '<authentication-callback-api-secret>',
|
321
|
+
supportedSnses: [ 'FACEBOOK' ],
|
322
|
+
snsCredentials: [ { sns: 'FACEBOOK', apiKey: '<sns-credentials0-api-key>', apiSecret: '<sns-credentials0-api-secret>' } ],
|
323
|
+
createdAt: 10000,
|
324
|
+
modifiedAt: 10000,
|
325
|
+
developerAuthenticationCallbackEndpoint: '<developer-authentication-callback-endpoint>',
|
326
|
+
developerAuthenticationCallbackApiKey: '<developer-authentication-callback-api-key>',
|
327
|
+
developerAuthenticationCallbackApiSecret: '<developer-authentication-callback-api-secret>',
|
328
|
+
supportedDeveloperSnses: [ 'FACEBOOK' ],
|
329
|
+
developerSnsCredentials: [ { sns: 'FACEBOOK', apiKey: '<developer-sns-credentials0-api-key>', apiSecret: '<developer-sns-credentials0-api-secret>' } ],
|
330
|
+
clientsPerDeveloper: 10,
|
331
|
+
directAuthorizationEndpointEnabled: true,
|
332
|
+
directTokenEndpointEnabled: true,
|
333
|
+
directRevocationEndpointEnabled: true,
|
334
|
+
directUserInfoEndpointEnabled: true,
|
335
|
+
directJwksEndpointEnabled: true,
|
336
|
+
directIntrospectionEndpointEnabled: true,
|
337
|
+
singleAccessTokenPerSubject: false,
|
338
|
+
pkceRequired: true,
|
339
|
+
pkceS256Required: true,
|
340
|
+
refreshTokenKept: true,
|
341
|
+
refreshTokenDurationKept: true,
|
342
|
+
errorDescriptionOmitted: false,
|
343
|
+
errorUriOmitted: false,
|
344
|
+
clientIdAliasEnabled: true,
|
345
|
+
supportedServiceProfiles: [ 'FAPI', 'OPEN_BANKING' ],
|
346
|
+
tlsClientCertificateBoundAccessTokens: true,
|
347
|
+
introspectionEndpoint: '<introspection-endpoint>',
|
348
|
+
supportedIntrospectionAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
|
349
|
+
mutualTlsValidatePkiCertChain: true,
|
350
|
+
trustedRootCertificates: [ '<trusted-root-certificate0>', '<trusted-root-certificate1>' ],
|
351
|
+
dynamicRegistrationSupported: true,
|
352
|
+
endSessionEndpoint: '<end-session-endpoint>',
|
353
|
+
description: '<description>',
|
354
|
+
accessTokenType: 'Bearer',
|
355
|
+
accessTokenSignAlg: 'HS256',
|
356
|
+
accessTokenDuration: 300,
|
357
|
+
refreshTokenDuration: 300,
|
358
|
+
idTokenDuration: 300,
|
359
|
+
authorizationResponseDuration: 300,
|
360
|
+
pushedAuthReqDuration: 300,
|
361
|
+
metadata: [ { key: '<metadata0-key>', value: '<metadata0-value>' } ],
|
362
|
+
accessTokenSignatureKeyId: '<access-token-signature-key-id>',
|
363
|
+
authorizationSignatureKeyId: '<authorization-signature-key-id>',
|
364
|
+
idTokenSignatureKeyId: '<id-token-signature-key-id>',
|
365
|
+
userInfoSignatureKeyId: '<user-info-signature-key-id>',
|
366
|
+
supportedBackchannelTokenDeliveryModes: [ 'POLL', 'PING', 'PUSH' ],
|
367
|
+
backchannelAuthenticationEndpoint: '<backchannel-authentication-endpoint>',
|
368
|
+
backchannelUserCodeParameterSupported: true,
|
369
|
+
backchannelAuthReqIdDuration: 300,
|
370
|
+
backchannelPollingInterval: 10,
|
371
|
+
backchannelBindingMessageRequiredInFapi: true,
|
372
|
+
allowableClockSkew: 100,
|
373
|
+
deviceAuthorizationEndpoint: '<device-authorization-endpoint>',
|
374
|
+
deviceVerificationUri: '<device-verification-uri>',
|
375
|
+
deviceVerificationUriComplete: '<device-verification-uri-complete>',
|
376
|
+
deviceFlowCodeDuration: 300,
|
377
|
+
deviceFlowPollingInterval: 10,
|
378
|
+
userCodeCharset: 'BASE20',
|
379
|
+
userCodeLength: 100,
|
380
|
+
pushedAuthReqEndpoint: '<pushed-auth-req-endpoint>',
|
381
|
+
mtlsEndpointAliases: [ { name: '<mtls-endpoint-alias0-name>', uri: '<mtls-endpoint-alias0-uri>' } ],
|
382
|
+
supportedAuthorizationDetailsTypes: [ '<supported-authorization-details-type0>', '<supported-authorization-details-type1>' ],
|
383
|
+
supportedTrustFrameworks: [ '<supported-trust-framework0>', '<supported-trust-framework1>' ],
|
384
|
+
supportedEvidence: [ '<supported-evidence0>', '<supported-evidence1>' ],
|
385
|
+
supportedIdentityDocuments: [ '<supported-identity-document0>', '<supported-identity-document1>' ],
|
386
|
+
supportedVerificationMethods: [ '<supported-verification-method0>', '<supported-verification-method1>' ],
|
387
|
+
supportedVerifiedClaims: [ '<supported-verified-claim0>', '<supported-verified-claim1>' ],
|
388
|
+
missingClientIdAllowed: false,
|
389
|
+
parRequired: false,
|
390
|
+
requestObjectRequired: true,
|
391
|
+
traditionalRequestObjectProcessingApplied: false,
|
392
|
+
claimShortcutRestrictive: false,
|
393
|
+
scopeRequired: true,
|
394
|
+
nbfOptional: true,
|
395
|
+
issSuppressed: false,
|
396
|
+
attributes: [{ key: '<attribute0-key>', value: '<attribute0-value>' }],
|
397
|
+
supportedCustomClientMetadata: [ '<supported-custom-client-metadata0>', '<supported-custom-client-metadata1>' ],
|
398
|
+
tokenExpirationLinked: false,
|
399
|
+
frontChannelRequestObjectEncryptionRequired: false,
|
400
|
+
requestObjectEncryptionAlgMatchRequired: false,
|
401
|
+
requestObjectEncryptionEncMatchRequired: false,
|
402
|
+
hsks: [ { kty: 'EC', use: 'sig', alg: 'ES256', kid: 'jane', hsmName: 'google', handle: '<handle>', publicKey: '<public-key>' } ],
|
403
|
+
hsmEnabled: false,
|
404
|
+
refreshTokenDurationReset: false,
|
405
|
+
grantManagementEndpoint: '<grant-management-endpoint>',
|
406
|
+
grantManagementActionRequired: false,
|
377
407
|
}
|
378
408
|
end
|
379
409
|
|
@@ -488,127 +518,149 @@ class ServiceTest < Minitest::Test
|
|
488
518
|
obj.attributes = ATTRIBUTES
|
489
519
|
obj.supported_custom_client_metadata = SUPPORTED_CUSTOM_CLIENT_METADATA
|
490
520
|
obj.token_expiration_linked = TOKEN_EXPIRATION_LINKED
|
521
|
+
obj.frontChannelRequestObjectEncryptionRequired = FRONT_CHANNEL_REQUEST_OBJECT_ENCRYPTION_REQUIRED
|
522
|
+
obj.requestObjectEncryptionAlgMatchRequired = REQUEST_OBJECT_ENCRYPTION_ALG_MATCH_REQUIRED
|
523
|
+
obj.requestObjectEncryptionEncMatchRequired = REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED
|
524
|
+
obj.hsks = HSKS
|
525
|
+
obj.hsm_enabled = HSM_ENABLED
|
526
|
+
obj.refresh_token_duration_reset = REFRESH_TOKEN_DURATION_RESET
|
527
|
+
obj.grant_management_endpoint = GRANT_MANAGEMENT_ENDPOINT
|
528
|
+
obj.grant_management_action_required = GRANT_MANAGEMENT_ACTION_REQUIRED
|
491
529
|
end
|
492
530
|
|
493
531
|
|
494
532
|
def match(obj)
|
495
|
-
assert_equal NUMBER,
|
496
|
-
assert_equal SERVICE_OWNER_NUMBER,
|
497
|
-
assert_equal SERVICE_NAME,
|
498
|
-
assert_equal API_KEY,
|
499
|
-
assert_equal API_SECRET,
|
500
|
-
assert_equal ISSUER,
|
501
|
-
assert_equal AUTHORIZATION_ENDPOINT,
|
502
|
-
assert_equal TOKEN_ENDPOINT,
|
503
|
-
assert_equal REVOCATION_ENDPOINT,
|
504
|
-
assert_equal SUPPORTED_REVOCATION_AUTH_METHODS,
|
505
|
-
assert_equal USER_INFO_ENDPOINT,
|
506
|
-
assert_equal JWKS_URI,
|
507
|
-
assert_equal JWKS,
|
508
|
-
assert_equal REGISTRATION_ENDPOINT,
|
509
|
-
assert_equal REGISTRATION_MANAGEMENT_ENDPOINT,
|
510
|
-
assert_equal SUPPORTED_SCOPE_NAME,
|
511
|
-
assert_equal SUPPORTED_SCOPE_DESCRIPTION,
|
512
|
-
assert_equal SUPPORTED_RESPONSE_TYPES,
|
513
|
-
assert_equal SUPPORTED_GRANT_TYPES,
|
514
|
-
assert_equal SUPPORTED_ACRS,
|
515
|
-
assert_equal SUPPORTED_TOKEN_AUTH_METHODS,
|
516
|
-
assert_equal SUPPORTED_DISPLAYS,
|
517
|
-
assert_equal SUPPORTED_CLAIM_TYPES,
|
518
|
-
assert_equal SUPPORTED_CLAIMS,
|
519
|
-
assert_equal SERVICE_DOCUMENTATION,
|
520
|
-
assert_equal SUPPORTED_CLAIM_LOCALES,
|
521
|
-
assert_equal SUPPORTED_UI_LOCALES,
|
522
|
-
assert_equal POLICY_URI,
|
523
|
-
assert_equal TOS_URI,
|
524
|
-
assert_equal AUTHENTICATION_CALLBACK_ENDPOINT,
|
525
|
-
assert_equal AUTHENTICATION_CALLBACK_API_KEY,
|
526
|
-
assert_equal AUTHENTICATION_CALLBACK_API_SECRET,
|
527
|
-
assert_equal SUPPORTED_SNSES,
|
528
|
-
assert_equal SNS_CREDENTIALS_SNS,
|
529
|
-
assert_equal SNS_CREDENTIALS_API_KEY,
|
530
|
-
assert_equal SNS_CREDENTIALS_API_SECRET,
|
531
|
-
assert_equal CREATED_AT,
|
532
|
-
assert_equal MODIFIED_AT,
|
533
|
-
assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT,
|
534
|
-
assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY,
|
535
|
-
assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET,
|
536
|
-
assert_equal SUPPORTED_DEVELOPER_SNSES,
|
537
|
-
assert_equal DEVELOPER_SNS_CREDENTIALS_SNS,
|
538
|
-
assert_equal DEVELOPER_SNS_CREDENTIALS_API_KEY,
|
539
|
-
assert_equal DEVELOPER_SNS_CREDENTIALS_API_SECRET,
|
540
|
-
assert_equal CLIENTS_PER_DEVELOPER,
|
541
|
-
assert_equal DIRECT_AUTHORIZATION_ENDPOINT_ENABLED,
|
542
|
-
assert_equal DIRECT_TOKEN_ENDPOINT_ENABLED,
|
543
|
-
assert_equal DIRECT_REVOCATION_ENDPOINT_ENABLED,
|
544
|
-
assert_equal DIRECT_USER_INFO_ENDPOINT_ENABLED,
|
545
|
-
assert_equal DIRECT_JWKS_ENDPOINT_ENABLED,
|
546
|
-
assert_equal DIRECT_INTROSPECTION_ENDPOINT_ENABLED,
|
547
|
-
assert_equal SINGLE_ACCESS_TOKEN_PER_SUBJECT,
|
548
|
-
assert_equal PKCE_REQUIRED,
|
549
|
-
assert_equal PKCE_S256_REQUIRED,
|
550
|
-
assert_equal REFRESH_TOKEN_KEPT,
|
551
|
-
assert_equal REFRESH_TOKEN_DURATION_KEPT,
|
552
|
-
assert_equal ERROR_DESCRIPTION_OMITTED,
|
553
|
-
assert_equal ERROR_URI_OMITTED,
|
554
|
-
assert_equal CLIENT_ID_ALIAS_ENABLED,
|
555
|
-
assert_equal SUPPORTED_SERVICE_PROFILES,
|
556
|
-
assert_equal TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS,
|
557
|
-
assert_equal INTROSPECTION_ENDPOINT,
|
558
|
-
assert_equal SUPPORTED_INTROSPECTION_AUTH_METHODS,
|
559
|
-
assert_equal MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN,
|
560
|
-
assert_equal TRUSTED_ROOT_CERTIFICATES,
|
561
|
-
assert_equal DYNAMIC_REGISTRATION_SUPPORTED,
|
562
|
-
assert_equal END_SESSION_ENDPOINT,
|
563
|
-
assert_equal DESCRIPTION,
|
564
|
-
assert_equal ACCESS_TOKEN_TYPE,
|
565
|
-
assert_equal ACCESS_TOKEN_SIGN_ALG,
|
566
|
-
assert_equal ACCESS_TOKEN_DURATION,
|
567
|
-
assert_equal REFRESH_TOKEN_DURATION,
|
568
|
-
assert_equal ID_TOKEN_DURATION,
|
569
|
-
assert_equal AUTHORIZATION_RESPONSE_DURATION,
|
570
|
-
assert_equal PUSHED_AUTH_REQ_DURATION,
|
571
|
-
assert_equal METADATA_KEY,
|
572
|
-
assert_equal METADATA_VALUE,
|
573
|
-
assert_equal ACCESS_TOKEN_SIGNATURE_KEY_ID,
|
574
|
-
assert_equal AUTHORIZATION_SIGNATURE_KEY_ID,
|
575
|
-
assert_equal ID_TOKEN_SIGNATURE_KEY_ID,
|
576
|
-
assert_equal USER_INFO_SIGNATURE_KEY_ID,
|
577
|
-
assert_equal SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES,
|
578
|
-
assert_equal BACKCHANNEL_AUTHENTICATION_ENDPOINT,
|
579
|
-
assert_equal BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED,
|
580
|
-
assert_equal BACKCHANNEL_AUTH_REQ_ID_DURATION,
|
581
|
-
assert_equal BACKCHANNEL_POLLING_INTERVAL,
|
582
|
-
assert_equal BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI,
|
583
|
-
assert_equal ALLOWABLE_CLOCK_SKEW,
|
584
|
-
assert_equal DEVICE_AUTHORIZATION_ENDPOINT,
|
585
|
-
assert_equal DEVICE_VERIFICATION_URI,
|
586
|
-
assert_equal DEVICE_VERIFICATION_URI_COMPLETE,
|
587
|
-
assert_equal DEVICE_FLOW_CODE_DURATION,
|
588
|
-
assert_equal DEVICE_FLOW_POLLING_INTERVAL,
|
589
|
-
assert_equal USER_CODE_CHARSET,
|
590
|
-
assert_equal USER_CODE_LENGTH,
|
591
|
-
assert_equal PUSHED_AUTH_REQ_ENDPOINT,
|
592
|
-
assert_equal MTLS_ENDPOINT_ALIAS_NAME,
|
593
|
-
assert_equal MTLS_ENDPOINT_ALIAS_URI,
|
594
|
-
assert_equal SUPPORTED_AUTHORIZATION_DETAILS_TYPES,
|
595
|
-
assert_equal SUPPORTED_TRUST_FRAMEWORKS,
|
596
|
-
assert_equal SUPPORTED_EVIDENCE,
|
597
|
-
assert_equal SUPPORTED_IDENTITY_DOCUMENTS,
|
598
|
-
assert_equal SUPPORTED_VERIFICATION_METHODS,
|
599
|
-
assert_equal SUPPORTED_VERIFIED_CLAIMS,
|
600
|
-
assert_equal MISSING_CLIENT_ID_ALLOWED,
|
601
|
-
assert_equal PAR_REQUIRED,
|
602
|
-
assert_equal REQUEST_OBJECT_REQUIRED,
|
603
|
-
assert_equal TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED,
|
604
|
-
assert_equal CLAIM_SHORTCUT_RESTRICTIVE,
|
605
|
-
assert_equal SCOPE_REQUIRED,
|
606
|
-
assert_equal NBF_OPTIONAL,
|
607
|
-
assert_equal ISS_SUPPRESSED,
|
608
|
-
assert_equal ATTRIBUTE_KEY,
|
609
|
-
assert_equal ATTRIBUTE_VALUE,
|
610
|
-
assert_equal SUPPORTED_CUSTOM_CLIENT_METADATA,
|
611
|
-
assert_equal TOKEN_EXPIRATION_LINKED,
|
533
|
+
assert_equal NUMBER, obj.number
|
534
|
+
assert_equal SERVICE_OWNER_NUMBER, obj.serviceOwnerNumber
|
535
|
+
assert_equal SERVICE_NAME, obj.serviceName
|
536
|
+
assert_equal API_KEY, obj.apiKey
|
537
|
+
assert_equal API_SECRET, obj.apiSecret
|
538
|
+
assert_equal ISSUER, obj.issuer
|
539
|
+
assert_equal AUTHORIZATION_ENDPOINT, obj.authorizationEndpoint
|
540
|
+
assert_equal TOKEN_ENDPOINT, obj.tokenEndpoint
|
541
|
+
assert_equal REVOCATION_ENDPOINT, obj.revocationEndpoint
|
542
|
+
assert_equal SUPPORTED_REVOCATION_AUTH_METHODS, obj.supportedRevocationAuthMethods
|
543
|
+
assert_equal USER_INFO_ENDPOINT, obj.userInfoEndpoint
|
544
|
+
assert_equal JWKS_URI, obj.jwksUri
|
545
|
+
assert_equal JWKS, obj.jwks
|
546
|
+
assert_equal REGISTRATION_ENDPOINT, obj.registrationEndpoint
|
547
|
+
assert_equal REGISTRATION_MANAGEMENT_ENDPOINT, obj.registrationManagementEndpoint
|
548
|
+
assert_equal SUPPORTED_SCOPE_NAME, obj.supportedScopes[0].name
|
549
|
+
assert_equal SUPPORTED_SCOPE_DESCRIPTION, obj.supportedScopes[0].description
|
550
|
+
assert_equal SUPPORTED_RESPONSE_TYPES, obj.supportedResponseTypes
|
551
|
+
assert_equal SUPPORTED_GRANT_TYPES, obj.supportedGrantTypes
|
552
|
+
assert_equal SUPPORTED_ACRS, obj.supportedAcrs
|
553
|
+
assert_equal SUPPORTED_TOKEN_AUTH_METHODS, obj.supportedTokenAuthMethods
|
554
|
+
assert_equal SUPPORTED_DISPLAYS, obj.supportedDisplays
|
555
|
+
assert_equal SUPPORTED_CLAIM_TYPES, obj.supportedClaimTypes
|
556
|
+
assert_equal SUPPORTED_CLAIMS, obj.supportedClaims
|
557
|
+
assert_equal SERVICE_DOCUMENTATION, obj.serviceDocumentation
|
558
|
+
assert_equal SUPPORTED_CLAIM_LOCALES, obj.supportedClaimLocales
|
559
|
+
assert_equal SUPPORTED_UI_LOCALES, obj.supportedUiLocales
|
560
|
+
assert_equal POLICY_URI, obj.policyUri
|
561
|
+
assert_equal TOS_URI, obj.tosUri
|
562
|
+
assert_equal AUTHENTICATION_CALLBACK_ENDPOINT, obj.authenticationCallbackEndpoint
|
563
|
+
assert_equal AUTHENTICATION_CALLBACK_API_KEY, obj.authenticationCallbackApiKey
|
564
|
+
assert_equal AUTHENTICATION_CALLBACK_API_SECRET, obj.authenticationCallbackApiSecret
|
565
|
+
assert_equal SUPPORTED_SNSES, obj.supportedSnses
|
566
|
+
assert_equal SNS_CREDENTIALS_SNS, obj.snsCredentials[0].sns
|
567
|
+
assert_equal SNS_CREDENTIALS_API_KEY, obj.snsCredentials[0].apiKey
|
568
|
+
assert_equal SNS_CREDENTIALS_API_SECRET, obj.snsCredentials[0].apiSecret
|
569
|
+
assert_equal CREATED_AT, obj.createdAt
|
570
|
+
assert_equal MODIFIED_AT, obj.modifiedAt
|
571
|
+
assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT, obj.developerAuthenticationCallbackEndpoint
|
572
|
+
assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY, obj.developerAuthenticationCallbackApiKey
|
573
|
+
assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET, obj.developerAuthenticationCallbackApiSecret
|
574
|
+
assert_equal SUPPORTED_DEVELOPER_SNSES, obj.supportedDeveloperSnses
|
575
|
+
assert_equal DEVELOPER_SNS_CREDENTIALS_SNS, obj.developerSnsCredentials[0].sns
|
576
|
+
assert_equal DEVELOPER_SNS_CREDENTIALS_API_KEY, obj.developerSnsCredentials[0].apiKey
|
577
|
+
assert_equal DEVELOPER_SNS_CREDENTIALS_API_SECRET, obj.developerSnsCredentials[0].apiSecret
|
578
|
+
assert_equal CLIENTS_PER_DEVELOPER, obj.clientsPerDeveloper
|
579
|
+
assert_equal DIRECT_AUTHORIZATION_ENDPOINT_ENABLED, obj.directAuthorizationEndpointEnabled
|
580
|
+
assert_equal DIRECT_TOKEN_ENDPOINT_ENABLED, obj.directTokenEndpointEnabled
|
581
|
+
assert_equal DIRECT_REVOCATION_ENDPOINT_ENABLED, obj.directRevocationEndpointEnabled
|
582
|
+
assert_equal DIRECT_USER_INFO_ENDPOINT_ENABLED, obj.directUserInfoEndpointEnabled
|
583
|
+
assert_equal DIRECT_JWKS_ENDPOINT_ENABLED, obj.directJwksEndpointEnabled
|
584
|
+
assert_equal DIRECT_INTROSPECTION_ENDPOINT_ENABLED, obj.directIntrospectionEndpointEnabled
|
585
|
+
assert_equal SINGLE_ACCESS_TOKEN_PER_SUBJECT, obj.singleAccessTokenPerSubject
|
586
|
+
assert_equal PKCE_REQUIRED, obj.pkceRequired
|
587
|
+
assert_equal PKCE_S256_REQUIRED, obj.pkceS256Required
|
588
|
+
assert_equal REFRESH_TOKEN_KEPT, obj.refreshTokenKept
|
589
|
+
assert_equal REFRESH_TOKEN_DURATION_KEPT, obj.refreshTokenDurationKept
|
590
|
+
assert_equal ERROR_DESCRIPTION_OMITTED, obj.errorDescriptionOmitted
|
591
|
+
assert_equal ERROR_URI_OMITTED, obj.errorUriOmitted
|
592
|
+
assert_equal CLIENT_ID_ALIAS_ENABLED, obj.clientIdAliasEnabled
|
593
|
+
assert_equal SUPPORTED_SERVICE_PROFILES, obj.supportedServiceProfiles
|
594
|
+
assert_equal TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS, obj.tlsClientCertificateBoundAccessTokens
|
595
|
+
assert_equal INTROSPECTION_ENDPOINT, obj.introspectionEndpoint
|
596
|
+
assert_equal SUPPORTED_INTROSPECTION_AUTH_METHODS, obj.supportedIntrospectionAuthMethods
|
597
|
+
assert_equal MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN, obj.mutualTlsValidatePkiCertChain
|
598
|
+
assert_equal TRUSTED_ROOT_CERTIFICATES, obj.trustedRootCertificates
|
599
|
+
assert_equal DYNAMIC_REGISTRATION_SUPPORTED, obj.dynamicRegistrationSupported
|
600
|
+
assert_equal END_SESSION_ENDPOINT, obj.endSessionEndpoint
|
601
|
+
assert_equal DESCRIPTION, obj.description
|
602
|
+
assert_equal ACCESS_TOKEN_TYPE, obj.accessTokenType
|
603
|
+
assert_equal ACCESS_TOKEN_SIGN_ALG, obj.accessTokenSignAlg
|
604
|
+
assert_equal ACCESS_TOKEN_DURATION, obj.accessTokenDuration
|
605
|
+
assert_equal REFRESH_TOKEN_DURATION, obj.refreshTokenDuration
|
606
|
+
assert_equal ID_TOKEN_DURATION, obj.idTokenDuration
|
607
|
+
assert_equal AUTHORIZATION_RESPONSE_DURATION, obj.authorizationResponseDuration
|
608
|
+
assert_equal PUSHED_AUTH_REQ_DURATION, obj.pushedAuthReqDuration
|
609
|
+
assert_equal METADATA_KEY, obj.metadata[0].key
|
610
|
+
assert_equal METADATA_VALUE, obj.metadata[0].value
|
611
|
+
assert_equal ACCESS_TOKEN_SIGNATURE_KEY_ID, obj.accessTokenSignatureKeyId
|
612
|
+
assert_equal AUTHORIZATION_SIGNATURE_KEY_ID, obj.authorizationSignatureKeyId
|
613
|
+
assert_equal ID_TOKEN_SIGNATURE_KEY_ID, obj.idTokenSignatureKeyId
|
614
|
+
assert_equal USER_INFO_SIGNATURE_KEY_ID, obj.userInfoSignatureKeyId
|
615
|
+
assert_equal SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES, obj.supportedBackchannelTokenDeliveryModes
|
616
|
+
assert_equal BACKCHANNEL_AUTHENTICATION_ENDPOINT, obj.backchannelAuthenticationEndpoint
|
617
|
+
assert_equal BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED, obj.backchannelUserCodeParameterSupported
|
618
|
+
assert_equal BACKCHANNEL_AUTH_REQ_ID_DURATION, obj.backchannelAuthReqIdDuration
|
619
|
+
assert_equal BACKCHANNEL_POLLING_INTERVAL, obj.backchannelPollingInterval
|
620
|
+
assert_equal BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI, obj.backchannelBindingMessageRequiredInFapi
|
621
|
+
assert_equal ALLOWABLE_CLOCK_SKEW, obj.allowableClockSkew
|
622
|
+
assert_equal DEVICE_AUTHORIZATION_ENDPOINT, obj.deviceAuthorizationEndpoint
|
623
|
+
assert_equal DEVICE_VERIFICATION_URI, obj.deviceVerificationUri
|
624
|
+
assert_equal DEVICE_VERIFICATION_URI_COMPLETE, obj.deviceVerificationUriComplete
|
625
|
+
assert_equal DEVICE_FLOW_CODE_DURATION, obj.deviceFlowCodeDuration
|
626
|
+
assert_equal DEVICE_FLOW_POLLING_INTERVAL, obj.deviceFlowPollingInterval
|
627
|
+
assert_equal USER_CODE_CHARSET, obj.userCodeCharset
|
628
|
+
assert_equal USER_CODE_LENGTH, obj.userCodeLength
|
629
|
+
assert_equal PUSHED_AUTH_REQ_ENDPOINT, obj.pushedAuthReqEndpoint
|
630
|
+
assert_equal MTLS_ENDPOINT_ALIAS_NAME, obj.mtlsEndpointAliases[0].name
|
631
|
+
assert_equal MTLS_ENDPOINT_ALIAS_URI, obj.mtlsEndpointAliases[0].uri
|
632
|
+
assert_equal SUPPORTED_AUTHORIZATION_DETAILS_TYPES, obj.supportedAuthorizationDetailsTypes
|
633
|
+
assert_equal SUPPORTED_TRUST_FRAMEWORKS, obj.supportedTrustFrameworks
|
634
|
+
assert_equal SUPPORTED_EVIDENCE, obj.supportedEvidence
|
635
|
+
assert_equal SUPPORTED_IDENTITY_DOCUMENTS, obj.supportedIdentityDocuments
|
636
|
+
assert_equal SUPPORTED_VERIFICATION_METHODS, obj.supportedVerificationMethods
|
637
|
+
assert_equal SUPPORTED_VERIFIED_CLAIMS, obj.supportedVerifiedClaims
|
638
|
+
assert_equal MISSING_CLIENT_ID_ALLOWED, obj.missingClientIdAllowed
|
639
|
+
assert_equal PAR_REQUIRED, obj.parRequired
|
640
|
+
assert_equal REQUEST_OBJECT_REQUIRED, obj.requestObjectRequired
|
641
|
+
assert_equal TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED, obj.traditionalRequestObjectProcessingApplied
|
642
|
+
assert_equal CLAIM_SHORTCUT_RESTRICTIVE, obj.claimShortcutRestrictive
|
643
|
+
assert_equal SCOPE_REQUIRED, obj.scopeRequired
|
644
|
+
assert_equal NBF_OPTIONAL, obj.nbfOptional
|
645
|
+
assert_equal ISS_SUPPRESSED, obj.issSuppressed
|
646
|
+
assert_equal ATTRIBUTE_KEY, obj.attributes[0].key
|
647
|
+
assert_equal ATTRIBUTE_VALUE, obj.attributes[0].value
|
648
|
+
assert_equal SUPPORTED_CUSTOM_CLIENT_METADATA, obj.supportedCustomClientMetadata
|
649
|
+
assert_equal TOKEN_EXPIRATION_LINKED, obj.tokenExpirationLinked
|
650
|
+
assert_equal FRONT_CHANNEL_REQUEST_OBJECT_ENCRYPTION_REQUIRED, obj.frontChannelRequestObjectEncryptionRequired
|
651
|
+
assert_equal REQUEST_OBJECT_ENCRYPTION_ALG_MATCH_REQUIRED, obj.requestObjectEncryptionAlgMatchRequired
|
652
|
+
assert_equal REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED, obj.requestObjectEncryptionEncMatchRequired
|
653
|
+
assert_equal HSKS_KTY, obj.hsks[0].kty
|
654
|
+
assert_equal HSKS_USE, obj.hsks[0].use
|
655
|
+
assert_equal HSKS_ALG, obj.hsks[0].alg
|
656
|
+
assert_equal HSKS_KID, obj.hsks[0].kid
|
657
|
+
assert_equal HSKS_HSMNAME, obj.hsks[0].hsmName
|
658
|
+
assert_equal HSKS_HANDLE, obj.hsks[0].handle
|
659
|
+
assert_equal HSKS_PUBLICKEY, obj.hsks[0].publicKey
|
660
|
+
assert_equal HSM_ENABLED, obj.hsmEnabled
|
661
|
+
assert_equal REFRESH_TOKEN_DURATION_RESET, obj.refreshTokenDurationReset
|
662
|
+
assert_equal GRANT_MANAGEMENT_ENDPOINT, obj.grantManagementEndpoint
|
663
|
+
assert_equal GRANT_MANAGEMENT_ACTION_REQUIRED, obj.grantManagementActionRequired
|
612
664
|
end
|
613
665
|
|
614
666
|
|