authlete 1.6.0 → 1.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -21,243 +21,249 @@ require 'minitest/autorun'
21
21
 
22
22
 
23
23
  class ServiceTest < Minitest::Test
24
- NUMBER = 1000
25
- SERVICE_OWNER_NUMBER = 12345
26
- SERVICE_NAME = '<service-name>'
27
- API_KEY = '<api-key>'
28
- API_SECRET = '<api-secret>'
29
- ISSUER = '<issuer>'
30
- AUTHORIZATION_ENDPOINT = '<authorization-endpoint>'
31
- TOKEN_ENDPOINT = '<token-endpoint>'
32
- REVOCATION_ENDPOINT = '<revocation-endpoint>'
33
- SUPPORTED_REVOCATION_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
34
- USER_INFO_ENDPOINT = '<user-info-endpoint>'
35
- JWKS_URI = '<jwks-uri>'
36
- JWKS = '<jwks>'
37
- REGISTRATION_ENDPOINT = '<registration-endpoint>'
38
- REGISTRATION_MANAGEMENT_ENDPOINT = '<registration-management-endpoint>'
39
- SUPPORTED_SCOPE_NAME = 'scope0'
40
- SUPPORTED_SCOPE_DESCRIPTION = '<scope0-description>'
41
- SUPPORTED_SCOPES = [ Authlete::Model::Scope.new(name: SUPPORTED_SCOPE_NAME, description: SUPPORTED_SCOPE_DESCRIPTION) ]
42
- SUPPORTED_RESPONSE_TYPES = [ 'NONE', 'CODE', 'TOKEN', 'ID_TOKEN' ]
43
- SUPPORTED_GRANT_TYPES = [ 'AUTHORIZATION_CODE', 'REFRESH_TOKEN' ]
44
- SUPPORTED_ACRS = [ '<supported-acr0>', '<supported-acr1>' ]
45
- SUPPORTED_TOKEN_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
46
- SUPPORTED_DISPLAYS = [ 'PAGE', 'POPUP', 'TOUCH', 'WAP' ]
47
- SUPPORTED_CLAIM_TYPES = [ 'NORMAL' ]
48
- SUPPORTED_CLAIMS = [ '<supported-claim0>', '<supported-claim1>' ]
49
- SERVICE_DOCUMENTATION = '<service-documentation>'
50
- SUPPORTED_CLAIM_LOCALES = [ 'en-US' ]
51
- SUPPORTED_UI_LOCALES = [ 'en-US' ]
52
- POLICY_URI = '<policy-uri>'
53
- TOS_URI = '<tos-uri>'
54
- AUTHENTICATION_CALLBACK_ENDPOINT = '<authentication-callback-endpoint>'
55
- AUTHENTICATION_CALLBACK_API_KEY = '<authentication-callback-api-key>'
56
- AUTHENTICATION_CALLBACK_API_SECRET = '<authentication-callback-api-secret>'
57
- SUPPORTED_SNSES = [ 'FACEBOOK' ]
58
- SNS_CREDENTIALS_SNS = 'FACEBOOK'
59
- SNS_CREDENTIALS_API_KEY = '<sns-credentials0-api-key>'
60
- SNS_CREDENTIALS_API_SECRET = '<sns-credentials0-api-secret>'
61
- SNS_CREDENTIALS = [ Authlete::Model::SnsCredentials.new(sns: SNS_CREDENTIALS_SNS, apiKey: SNS_CREDENTIALS_API_KEY, apiSecret: SNS_CREDENTIALS_API_SECRET) ]
62
- CREATED_AT = 10000
63
- MODIFIED_AT = 10000
64
- DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT = '<developer-authentication-callback-endpoint>'
65
- DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY = '<developer-authentication-callback-api-key>'
66
- DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET = '<developer-authentication-callback-api-secret>'
67
- SUPPORTED_DEVELOPER_SNSES = [ 'FACEBOOK' ]
68
- DEVELOPER_SNS_CREDENTIALS_SNS = 'FACEBOOK'
69
- DEVELOPER_SNS_CREDENTIALS_API_KEY = '<developer-sns-credentials0-api-key>'
70
- DEVELOPER_SNS_CREDENTIALS_API_SECRET = '<developer-sns-credentials0-api-secret>'
71
- DEVELOPER_SNS_CREDENTIALS = [ Authlete::Model::SnsCredentials.new(sns: DEVELOPER_SNS_CREDENTIALS_SNS, apiKey: DEVELOPER_SNS_CREDENTIALS_API_KEY, apiSecret: DEVELOPER_SNS_CREDENTIALS_API_SECRET) ]
72
- CLIENTS_PER_DEVELOPER = 10
73
- DIRECT_AUTHORIZATION_ENDPOINT_ENABLED = true
74
- DIRECT_TOKEN_ENDPOINT_ENABLED = true
75
- DIRECT_REVOCATION_ENDPOINT_ENABLED = true
76
- DIRECT_USER_INFO_ENDPOINT_ENABLED = true
77
- DIRECT_JWKS_ENDPOINT_ENABLED = true
78
- DIRECT_INTROSPECTION_ENDPOINT_ENABLED = true
79
- SINGLE_ACCESS_TOKEN_PER_SUBJECT = false
80
- PKCE_REQUIRED = true
81
- PKCE_S256_REQUIRED = true
82
- REFRESH_TOKEN_KEPT = true
83
- REFRESH_TOKEN_DURATION_KEPT = true
84
- ERROR_DESCRIPTION_OMITTED = false
85
- ERROR_URI_OMITTED = false
86
- CLIENT_ID_ALIAS_ENABLED = true
87
- SUPPORTED_SERVICE_PROFILES = [ 'FAPI', 'OPEN_BANKING' ]
88
- TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS = true
89
- INTROSPECTION_ENDPOINT = '<introspection-endpoint>'
90
- SUPPORTED_INTROSPECTION_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
91
- MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN = true
92
- TRUSTED_ROOT_CERTIFICATES = [ '<trusted-root-certificate0>', '<trusted-root-certificate1>' ]
93
- DYNAMIC_REGISTRATION_SUPPORTED = true
94
- END_SESSION_ENDPOINT = '<end-session-endpoint>'
95
- DESCRIPTION = '<description>'
96
- ACCESS_TOKEN_TYPE = 'Bearer'
97
- ACCESS_TOKEN_SIGN_ALG = 'HS256'
98
- ACCESS_TOKEN_DURATION = 300
99
- REFRESH_TOKEN_DURATION = 300
100
- ID_TOKEN_DURATION = 300
101
- AUTHORIZATION_RESPONSE_DURATION = 300
102
- PUSHED_AUTH_REQ_DURATION = 300
103
- METADATA_KEY = '<metadata0-key>'
104
- METADATA_VALUE = '<metadata0-value>'
105
- METADATA = [ Authlete::Model::Pair.new(key: METADATA_KEY, value: METADATA_VALUE) ]
106
- ACCESS_TOKEN_SIGNATURE_KEY_ID = '<access-token-signature-key-id>'
107
- AUTHORIZATION_SIGNATURE_KEY_ID = '<authorization-signature-key-id>'
108
- ID_TOKEN_SIGNATURE_KEY_ID = '<id-token-signature-key-id>'
109
- USER_INFO_SIGNATURE_KEY_ID = '<user-info-signature-key-id>'
110
- SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES = [ 'POLL', 'PING', 'PUSH' ]
111
- BACKCHANNEL_AUTHENTICATION_ENDPOINT = '<backchannel-authentication-endpoint>'
112
- BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED = true
113
- BACKCHANNEL_AUTH_REQ_ID_DURATION = 300
114
- BACKCHANNEL_POLLING_INTERVAL = 10
115
- BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI = true
116
- ALLOWABLE_CLOCK_SKEW = 100
117
- DEVICE_AUTHORIZATION_ENDPOINT = '<device-authorization-endpoint>'
118
- DEVICE_VERIFICATION_URI = '<device-verification-uri>'
119
- DEVICE_VERIFICATION_URI_COMPLETE = '<device-verification-uri-complete>'
120
- DEVICE_FLOW_CODE_DURATION = 300
121
- DEVICE_FLOW_POLLING_INTERVAL = 10
122
- USER_CODE_CHARSET = 'BASE20'
123
- USER_CODE_LENGTH = 100
124
- PUSHED_AUTH_REQ_ENDPOINT = '<pushed-auth-req-endpoint>'
125
- MTLS_ENDPOINT_ALIAS_NAME = '<mtls-endpoint-alias0-name>'
126
- MTLS_ENDPOINT_ALIAS_URI = '<mtls-endpoint-alias0-uri>'
127
- MTLS_ENDPOINT_ALIASES = [ Authlete::Model::NamedUri.new(name: MTLS_ENDPOINT_ALIAS_NAME, uri: MTLS_ENDPOINT_ALIAS_URI) ]
128
- SUPPORTED_AUTHORIZATION_DETAILS_TYPES = [ '<supported-authorization-details-type0>', '<supported-authorization-details-type1>' ]
129
- SUPPORTED_TRUST_FRAMEWORKS = [ '<supported-trust-framework0>', '<supported-trust-framework1>' ]
130
- SUPPORTED_EVIDENCE = [ '<supported-evidence0>', '<supported-evidence1>' ]
131
- SUPPORTED_IDENTITY_DOCUMENTS = [ '<supported-identity-document0>', '<supported-identity-document1>' ]
132
- SUPPORTED_VERIFICATION_METHODS = [ '<supported-verification-method0>', '<supported-verification-method1>' ]
133
- SUPPORTED_VERIFIED_CLAIMS = [ '<supported-verified-claim0>', '<supported-verified-claim1>' ]
134
- MISSING_CLIENT_ID_ALLOWED = false
135
- PAR_REQUIRED = false
136
- REQUEST_OBJECT_REQUIRED = true
137
- TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED = false
138
- CLAIM_SHORTCUT_RESTRICTIVE = false
139
- SCOPE_REQUIRED = true
140
- NBF_OPTIONAL = true
141
- ISS_SUPPRESSED = false
142
- ATTRIBUTE_KEY = '<attribute0-key>'
143
- ATTRIBUTE_VALUE = '<attribute0-value>'
144
- ATTRIBUTES = [ Authlete::Model::Pair.new(key: ATTRIBUTE_KEY, value: ATTRIBUTE_VALUE) ]
145
- SUPPORTED_CUSTOM_CLIENT_METADATA = [ '<supported-custom-client-metadata0>', '<supported-custom-client-metadata1>' ]
146
- TOKEN_EXPIRATION_LINKED = false
24
+ NUMBER = 1000
25
+ SERVICE_OWNER_NUMBER = 12345
26
+ SERVICE_NAME = '<service-name>'
27
+ API_KEY = '<api-key>'
28
+ API_SECRET = '<api-secret>'
29
+ ISSUER = '<issuer>'
30
+ AUTHORIZATION_ENDPOINT = '<authorization-endpoint>'
31
+ TOKEN_ENDPOINT = '<token-endpoint>'
32
+ REVOCATION_ENDPOINT = '<revocation-endpoint>'
33
+ SUPPORTED_REVOCATION_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
34
+ USER_INFO_ENDPOINT = '<user-info-endpoint>'
35
+ JWKS_URI = '<jwks-uri>'
36
+ JWKS = '<jwks>'
37
+ REGISTRATION_ENDPOINT = '<registration-endpoint>'
38
+ REGISTRATION_MANAGEMENT_ENDPOINT = '<registration-management-endpoint>'
39
+ SUPPORTED_SCOPE_NAME = 'scope0'
40
+ SUPPORTED_SCOPE_DESCRIPTION = '<scope0-description>'
41
+ SUPPORTED_SCOPES = [ Authlete::Model::Scope.new(name: SUPPORTED_SCOPE_NAME, description: SUPPORTED_SCOPE_DESCRIPTION) ]
42
+ SUPPORTED_RESPONSE_TYPES = [ 'NONE', 'CODE', 'TOKEN', 'ID_TOKEN' ]
43
+ SUPPORTED_GRANT_TYPES = [ 'AUTHORIZATION_CODE', 'REFRESH_TOKEN' ]
44
+ SUPPORTED_ACRS = [ '<supported-acr0>', '<supported-acr1>' ]
45
+ SUPPORTED_TOKEN_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
46
+ SUPPORTED_DISPLAYS = [ 'PAGE', 'POPUP', 'TOUCH', 'WAP' ]
47
+ SUPPORTED_CLAIM_TYPES = [ 'NORMAL' ]
48
+ SUPPORTED_CLAIMS = [ '<supported-claim0>', '<supported-claim1>' ]
49
+ SERVICE_DOCUMENTATION = '<service-documentation>'
50
+ SUPPORTED_CLAIM_LOCALES = [ 'en-US' ]
51
+ SUPPORTED_UI_LOCALES = [ 'en-US' ]
52
+ POLICY_URI = '<policy-uri>'
53
+ TOS_URI = '<tos-uri>'
54
+ AUTHENTICATION_CALLBACK_ENDPOINT = '<authentication-callback-endpoint>'
55
+ AUTHENTICATION_CALLBACK_API_KEY = '<authentication-callback-api-key>'
56
+ AUTHENTICATION_CALLBACK_API_SECRET = '<authentication-callback-api-secret>'
57
+ SUPPORTED_SNSES = [ 'FACEBOOK' ]
58
+ SNS_CREDENTIALS_SNS = 'FACEBOOK'
59
+ SNS_CREDENTIALS_API_KEY = '<sns-credentials0-api-key>'
60
+ SNS_CREDENTIALS_API_SECRET = '<sns-credentials0-api-secret>'
61
+ SNS_CREDENTIALS = [ Authlete::Model::SnsCredentials.new(sns: SNS_CREDENTIALS_SNS, apiKey: SNS_CREDENTIALS_API_KEY, apiSecret: SNS_CREDENTIALS_API_SECRET) ]
62
+ CREATED_AT = 10000
63
+ MODIFIED_AT = 10000
64
+ DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT = '<developer-authentication-callback-endpoint>'
65
+ DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY = '<developer-authentication-callback-api-key>'
66
+ DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET = '<developer-authentication-callback-api-secret>'
67
+ SUPPORTED_DEVELOPER_SNSES = [ 'FACEBOOK' ]
68
+ DEVELOPER_SNS_CREDENTIALS_SNS = 'FACEBOOK'
69
+ DEVELOPER_SNS_CREDENTIALS_API_KEY = '<developer-sns-credentials0-api-key>'
70
+ DEVELOPER_SNS_CREDENTIALS_API_SECRET = '<developer-sns-credentials0-api-secret>'
71
+ DEVELOPER_SNS_CREDENTIALS = [ Authlete::Model::SnsCredentials.new(sns: DEVELOPER_SNS_CREDENTIALS_SNS, apiKey: DEVELOPER_SNS_CREDENTIALS_API_KEY, apiSecret: DEVELOPER_SNS_CREDENTIALS_API_SECRET) ]
72
+ CLIENTS_PER_DEVELOPER = 10
73
+ DIRECT_AUTHORIZATION_ENDPOINT_ENABLED = true
74
+ DIRECT_TOKEN_ENDPOINT_ENABLED = true
75
+ DIRECT_REVOCATION_ENDPOINT_ENABLED = true
76
+ DIRECT_USER_INFO_ENDPOINT_ENABLED = true
77
+ DIRECT_JWKS_ENDPOINT_ENABLED = true
78
+ DIRECT_INTROSPECTION_ENDPOINT_ENABLED = true
79
+ SINGLE_ACCESS_TOKEN_PER_SUBJECT = false
80
+ PKCE_REQUIRED = true
81
+ PKCE_S256_REQUIRED = true
82
+ REFRESH_TOKEN_KEPT = true
83
+ REFRESH_TOKEN_DURATION_KEPT = true
84
+ ERROR_DESCRIPTION_OMITTED = false
85
+ ERROR_URI_OMITTED = false
86
+ CLIENT_ID_ALIAS_ENABLED = true
87
+ SUPPORTED_SERVICE_PROFILES = [ 'FAPI', 'OPEN_BANKING' ]
88
+ TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS = true
89
+ INTROSPECTION_ENDPOINT = '<introspection-endpoint>'
90
+ SUPPORTED_INTROSPECTION_AUTH_METHODS = [ 'NONE', 'CLIENT_SECRET_BASIC' ]
91
+ MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN = true
92
+ TRUSTED_ROOT_CERTIFICATES = [ '<trusted-root-certificate0>', '<trusted-root-certificate1>' ]
93
+ DYNAMIC_REGISTRATION_SUPPORTED = true
94
+ END_SESSION_ENDPOINT = '<end-session-endpoint>'
95
+ DESCRIPTION = '<description>'
96
+ ACCESS_TOKEN_TYPE = 'Bearer'
97
+ ACCESS_TOKEN_SIGN_ALG = 'HS256'
98
+ ACCESS_TOKEN_DURATION = 300
99
+ REFRESH_TOKEN_DURATION = 300
100
+ ID_TOKEN_DURATION = 300
101
+ AUTHORIZATION_RESPONSE_DURATION = 300
102
+ PUSHED_AUTH_REQ_DURATION = 300
103
+ METADATA_KEY = '<metadata0-key>'
104
+ METADATA_VALUE = '<metadata0-value>'
105
+ METADATA = [ Authlete::Model::Pair.new(key: METADATA_KEY, value: METADATA_VALUE) ]
106
+ ACCESS_TOKEN_SIGNATURE_KEY_ID = '<access-token-signature-key-id>'
107
+ AUTHORIZATION_SIGNATURE_KEY_ID = '<authorization-signature-key-id>'
108
+ ID_TOKEN_SIGNATURE_KEY_ID = '<id-token-signature-key-id>'
109
+ USER_INFO_SIGNATURE_KEY_ID = '<user-info-signature-key-id>'
110
+ SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES = [ 'POLL', 'PING', 'PUSH' ]
111
+ BACKCHANNEL_AUTHENTICATION_ENDPOINT = '<backchannel-authentication-endpoint>'
112
+ BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED = true
113
+ BACKCHANNEL_AUTH_REQ_ID_DURATION = 300
114
+ BACKCHANNEL_POLLING_INTERVAL = 10
115
+ BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI = true
116
+ ALLOWABLE_CLOCK_SKEW = 100
117
+ DEVICE_AUTHORIZATION_ENDPOINT = '<device-authorization-endpoint>'
118
+ DEVICE_VERIFICATION_URI = '<device-verification-uri>'
119
+ DEVICE_VERIFICATION_URI_COMPLETE = '<device-verification-uri-complete>'
120
+ DEVICE_FLOW_CODE_DURATION = 300
121
+ DEVICE_FLOW_POLLING_INTERVAL = 10
122
+ USER_CODE_CHARSET = 'BASE20'
123
+ USER_CODE_LENGTH = 100
124
+ PUSHED_AUTH_REQ_ENDPOINT = '<pushed-auth-req-endpoint>'
125
+ MTLS_ENDPOINT_ALIAS_NAME = '<mtls-endpoint-alias0-name>'
126
+ MTLS_ENDPOINT_ALIAS_URI = '<mtls-endpoint-alias0-uri>'
127
+ MTLS_ENDPOINT_ALIASES = [ Authlete::Model::NamedUri.new(name: MTLS_ENDPOINT_ALIAS_NAME, uri: MTLS_ENDPOINT_ALIAS_URI) ]
128
+ SUPPORTED_AUTHORIZATION_DETAILS_TYPES = [ '<supported-authorization-details-type0>', '<supported-authorization-details-type1>' ]
129
+ SUPPORTED_TRUST_FRAMEWORKS = [ '<supported-trust-framework0>', '<supported-trust-framework1>' ]
130
+ SUPPORTED_EVIDENCE = [ '<supported-evidence0>', '<supported-evidence1>' ]
131
+ SUPPORTED_IDENTITY_DOCUMENTS = [ '<supported-identity-document0>', '<supported-identity-document1>' ]
132
+ SUPPORTED_VERIFICATION_METHODS = [ '<supported-verification-method0>', '<supported-verification-method1>' ]
133
+ SUPPORTED_VERIFIED_CLAIMS = [ '<supported-verified-claim0>', '<supported-verified-claim1>' ]
134
+ MISSING_CLIENT_ID_ALLOWED = false
135
+ PAR_REQUIRED = false
136
+ REQUEST_OBJECT_REQUIRED = true
137
+ TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED = false
138
+ CLAIM_SHORTCUT_RESTRICTIVE = false
139
+ SCOPE_REQUIRED = true
140
+ NBF_OPTIONAL = true
141
+ ISS_SUPPRESSED = false
142
+ ATTRIBUTE_KEY = '<attribute0-key>'
143
+ ATTRIBUTE_VALUE = '<attribute0-value>'
144
+ ATTRIBUTES = [ Authlete::Model::Pair.new(key: ATTRIBUTE_KEY, value: ATTRIBUTE_VALUE) ]
145
+ SUPPORTED_CUSTOM_CLIENT_METADATA = [ '<supported-custom-client-metadata0>', '<supported-custom-client-metadata1>' ]
146
+ TOKEN_EXPIRATION_LINKED = false
147
+ FRONT_CHANNEL_REQUEST_OBJECT_ENCRYPTION_REQUIRED = false
148
+ REQUEST_OBJECT_ENCRYPTION_ALG_MATCH_REQUIRED = false
149
+ REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED = false
147
150
 
148
151
 
149
152
  def generate_json
150
153
  return <<~JSON
151
154
  {
152
- "number": 1000,
153
- "serviceOwnerNumber": 12345,
154
- "serviceName": "<service-name>",
155
- "apiKey": "<api-key>",
156
- "apiSecret": "<api-secret>",
157
- "issuer": "<issuer>",
158
- "authorizationEndpoint": "<authorization-endpoint>",
159
- "tokenEndpoint": "<token-endpoint>",
160
- "revocationEndpoint": "<revocation-endpoint>",
161
- "supportedRevocationAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
162
- "userInfoEndpoint": "<user-info-endpoint>",
163
- "jwksUri": "<jwks-uri>",
164
- "jwks": "<jwks>",
165
- "registrationEndpoint": "<registration-endpoint>",
166
- "registrationManagementEndpoint": "<registration-management-endpoint>",
167
- "supportedScopes": [ { "name": "scope0", "description": "<scope0-description>" } ],
168
- "supportedResponseTypes": [ "NONE", "CODE", "TOKEN", "ID_TOKEN" ],
169
- "supportedGrantTypes": [ "AUTHORIZATION_CODE", "REFRESH_TOKEN" ],
170
- "supportedAcrs": [ "<supported-acr0>", "<supported-acr1>" ],
171
- "supportedTokenAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
172
- "supportedDisplays": [ "PAGE", "POPUP", "TOUCH", "WAP" ],
173
- "supportedClaimTypes": [ "NORMAL" ],
174
- "supportedClaims": [ "<supported-claim0>", "<supported-claim1>" ],
175
- "serviceDocumentation": "<service-documentation>",
176
- "supportedClaimLocales": [ "en-US" ],
177
- "supportedUiLocales": [ "en-US" ],
178
- "policyUri": "<policy-uri>",
179
- "tosUri": "<tos-uri>",
180
- "authenticationCallbackEndpoint": "<authentication-callback-endpoint>",
181
- "authenticationCallbackApiKey": "<authentication-callback-api-key>",
182
- "authenticationCallbackApiSecret": "<authentication-callback-api-secret>",
183
- "supportedSnses": [ "FACEBOOK" ],
184
- "snsCredentials": [ { "sns": "FACEBOOK", "apiKey": "<sns-credentials0-api-key>", "apiSecret": "<sns-credentials0-api-secret>" } ],
185
- "createdAt": 10000,
186
- "modifiedAt": 10000,
187
- "developerAuthenticationCallbackEndpoint": "<developer-authentication-callback-endpoint>",
188
- "developerAuthenticationCallbackApiKey": "<developer-authentication-callback-api-key>",
189
- "developerAuthenticationCallbackApiSecret": "<developer-authentication-callback-api-secret>",
190
- "supportedDeveloperSnses": [ "FACEBOOK" ],
191
- "developerSnsCredentials": [ { "sns": "FACEBOOK", "apiKey": "<developer-sns-credentials0-api-key>", "apiSecret": "<developer-sns-credentials0-api-secret>" } ],
192
- "clientsPerDeveloper": 10,
193
- "directAuthorizationEndpointEnabled": true,
194
- "directTokenEndpointEnabled": true,
195
- "directRevocationEndpointEnabled": true,
196
- "directUserInfoEndpointEnabled": true,
197
- "directJwksEndpointEnabled": true,
198
- "directIntrospectionEndpointEnabled": true,
199
- "singleAccessTokenPerSubject": false,
200
- "pkceRequired": true,
201
- "pkceS256Required": true,
202
- "refreshTokenKept": true,
203
- "refreshTokenDurationKept": true,
204
- "errorDescriptionOmitted": false,
205
- "errorUriOmitted": false,
206
- "clientIdAliasEnabled": true,
207
- "supportedServiceProfiles": [ "FAPI", "OPEN_BANKING" ],
208
- "tlsClientCertificateBoundAccessTokens": true,
209
- "introspectionEndpoint": "<introspection-endpoint>",
210
- "supportedIntrospectionAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
211
- "mutualTlsValidatePkiCertChain": true,
212
- "trustedRootCertificates": [ "<trusted-root-certificate0>", "<trusted-root-certificate1>" ],
213
- "dynamicRegistrationSupported": true,
214
- "endSessionEndpoint": "<end-session-endpoint>",
215
- "description": "<description>",
216
- "accessTokenType": "Bearer",
217
- "accessTokenSignAlg": "HS256",
218
- "accessTokenDuration": 300,
219
- "refreshTokenDuration": 300,
220
- "idTokenDuration": 300,
221
- "authorizationResponseDuration": 300,
222
- "pushedAuthReqDuration": 300,
223
- "metadata": [ { "key": "<metadata0-key>", "value": "<metadata0-value>" } ],
224
- "accessTokenSignatureKeyId": "<access-token-signature-key-id>",
225
- "authorizationSignatureKeyId": "<authorization-signature-key-id>",
226
- "idTokenSignatureKeyId": "<id-token-signature-key-id>",
227
- "userInfoSignatureKeyId": "<user-info-signature-key-id>",
228
- "supportedBackchannelTokenDeliveryModes": [ "POLL", "PING", "PUSH" ],
229
- "backchannelAuthenticationEndpoint": "<backchannel-authentication-endpoint>",
230
- "backchannelUserCodeParameterSupported": true,
231
- "backchannelAuthReqIdDuration": 300,
232
- "backchannelPollingInterval": 10,
233
- "backchannelBindingMessageRequiredInFapi": true,
234
- "allowableClockSkew": 100,
235
- "deviceAuthorizationEndpoint": "<device-authorization-endpoint>",
236
- "deviceVerificationUri": "<device-verification-uri>",
237
- "deviceVerificationUriComplete": "<device-verification-uri-complete>",
238
- "deviceFlowCodeDuration": 300,
239
- "deviceFlowPollingInterval": 10,
240
- "userCodeCharset": "BASE20",
241
- "userCodeLength": 100,
242
- "pushedAuthReqEndpoint": "<pushed-auth-req-endpoint>",
243
- "mtlsEndpointAliases": [ { "name": "<mtls-endpoint-alias0-name>", "uri": "<mtls-endpoint-alias0-uri>" } ],
244
- "supportedAuthorizationDetailsTypes": [ "<supported-authorization-details-type0>", "<supported-authorization-details-type1>" ],
245
- "supportedTrustFrameworks": [ "<supported-trust-framework0>", "<supported-trust-framework1>" ],
246
- "supportedEvidence": [ "<supported-evidence0>", "<supported-evidence1>" ],
247
- "supportedIdentityDocuments": [ "<supported-identity-document0>", "<supported-identity-document1>" ],
248
- "supportedVerificationMethods": [ "<supported-verification-method0>", "<supported-verification-method1>" ],
249
- "supportedVerifiedClaims": [ "<supported-verified-claim0>", "<supported-verified-claim1>" ],
250
- "missingClientIdAllowed": false,
251
- "parRequired": false,
252
- "requestObjectRequired": true,
253
- "traditionalRequestObjectProcessingApplied": false,
254
- "claimShortcutRestrictive": false,
255
- "scopeRequired": true,
256
- "nbfOptional": true,
257
- "issSuppressed": false,
258
- "attributes": [{ "key": "<attribute0-key>", "value": "<attribute0-value>" }],
259
- "supportedCustomClientMetadata": [ "<supported-custom-client-metadata0>", "<supported-custom-client-metadata1>" ],
260
- "tokenExpirationLinked": false
155
+ "number": 1000,
156
+ "serviceOwnerNumber": 12345,
157
+ "serviceName": "<service-name>",
158
+ "apiKey": "<api-key>",
159
+ "apiSecret": "<api-secret>",
160
+ "issuer": "<issuer>",
161
+ "authorizationEndpoint": "<authorization-endpoint>",
162
+ "tokenEndpoint": "<token-endpoint>",
163
+ "revocationEndpoint": "<revocation-endpoint>",
164
+ "supportedRevocationAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
165
+ "userInfoEndpoint": "<user-info-endpoint>",
166
+ "jwksUri": "<jwks-uri>",
167
+ "jwks": "<jwks>",
168
+ "registrationEndpoint": "<registration-endpoint>",
169
+ "registrationManagementEndpoint": "<registration-management-endpoint>",
170
+ "supportedScopes": [ { "name": "scope0", "description": "<scope0-description>" } ],
171
+ "supportedResponseTypes": [ "NONE", "CODE", "TOKEN", "ID_TOKEN" ],
172
+ "supportedGrantTypes": [ "AUTHORIZATION_CODE", "REFRESH_TOKEN" ],
173
+ "supportedAcrs": [ "<supported-acr0>", "<supported-acr1>" ],
174
+ "supportedTokenAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
175
+ "supportedDisplays": [ "PAGE", "POPUP", "TOUCH", "WAP" ],
176
+ "supportedClaimTypes": [ "NORMAL" ],
177
+ "supportedClaims": [ "<supported-claim0>", "<supported-claim1>" ],
178
+ "serviceDocumentation": "<service-documentation>",
179
+ "supportedClaimLocales": [ "en-US" ],
180
+ "supportedUiLocales": [ "en-US" ],
181
+ "policyUri": "<policy-uri>",
182
+ "tosUri": "<tos-uri>",
183
+ "authenticationCallbackEndpoint": "<authentication-callback-endpoint>",
184
+ "authenticationCallbackApiKey": "<authentication-callback-api-key>",
185
+ "authenticationCallbackApiSecret": "<authentication-callback-api-secret>",
186
+ "supportedSnses": [ "FACEBOOK" ],
187
+ "snsCredentials": [ { "sns": "FACEBOOK", "apiKey": "<sns-credentials0-api-key>", "apiSecret": "<sns-credentials0-api-secret>" } ],
188
+ "createdAt": 10000,
189
+ "modifiedAt": 10000,
190
+ "developerAuthenticationCallbackEndpoint": "<developer-authentication-callback-endpoint>",
191
+ "developerAuthenticationCallbackApiKey": "<developer-authentication-callback-api-key>",
192
+ "developerAuthenticationCallbackApiSecret": "<developer-authentication-callback-api-secret>",
193
+ "supportedDeveloperSnses": [ "FACEBOOK" ],
194
+ "developerSnsCredentials": [ { "sns": "FACEBOOK", "apiKey": "<developer-sns-credentials0-api-key>", "apiSecret": "<developer-sns-credentials0-api-secret>" } ],
195
+ "clientsPerDeveloper": 10,
196
+ "directAuthorizationEndpointEnabled": true,
197
+ "directTokenEndpointEnabled": true,
198
+ "directRevocationEndpointEnabled": true,
199
+ "directUserInfoEndpointEnabled": true,
200
+ "directJwksEndpointEnabled": true,
201
+ "directIntrospectionEndpointEnabled": true,
202
+ "singleAccessTokenPerSubject": false,
203
+ "pkceRequired": true,
204
+ "pkceS256Required": true,
205
+ "refreshTokenKept": true,
206
+ "refreshTokenDurationKept": true,
207
+ "errorDescriptionOmitted": false,
208
+ "errorUriOmitted": false,
209
+ "clientIdAliasEnabled": true,
210
+ "supportedServiceProfiles": [ "FAPI", "OPEN_BANKING" ],
211
+ "tlsClientCertificateBoundAccessTokens": true,
212
+ "introspectionEndpoint": "<introspection-endpoint>",
213
+ "supportedIntrospectionAuthMethods": [ "NONE", "CLIENT_SECRET_BASIC" ],
214
+ "mutualTlsValidatePkiCertChain": true,
215
+ "trustedRootCertificates": [ "<trusted-root-certificate0>", "<trusted-root-certificate1>" ],
216
+ "dynamicRegistrationSupported": true,
217
+ "endSessionEndpoint": "<end-session-endpoint>",
218
+ "description": "<description>",
219
+ "accessTokenType": "Bearer",
220
+ "accessTokenSignAlg": "HS256",
221
+ "accessTokenDuration": 300,
222
+ "refreshTokenDuration": 300,
223
+ "idTokenDuration": 300,
224
+ "authorizationResponseDuration": 300,
225
+ "pushedAuthReqDuration": 300,
226
+ "metadata": [ { "key": "<metadata0-key>", "value": "<metadata0-value>" } ],
227
+ "accessTokenSignatureKeyId": "<access-token-signature-key-id>",
228
+ "authorizationSignatureKeyId": "<authorization-signature-key-id>",
229
+ "idTokenSignatureKeyId": "<id-token-signature-key-id>",
230
+ "userInfoSignatureKeyId": "<user-info-signature-key-id>",
231
+ "supportedBackchannelTokenDeliveryModes": [ "POLL", "PING", "PUSH" ],
232
+ "backchannelAuthenticationEndpoint": "<backchannel-authentication-endpoint>",
233
+ "backchannelUserCodeParameterSupported": true,
234
+ "backchannelAuthReqIdDuration": 300,
235
+ "backchannelPollingInterval": 10,
236
+ "backchannelBindingMessageRequiredInFapi": true,
237
+ "allowableClockSkew": 100,
238
+ "deviceAuthorizationEndpoint": "<device-authorization-endpoint>",
239
+ "deviceVerificationUri": "<device-verification-uri>",
240
+ "deviceVerificationUriComplete": "<device-verification-uri-complete>",
241
+ "deviceFlowCodeDuration": 300,
242
+ "deviceFlowPollingInterval": 10,
243
+ "userCodeCharset": "BASE20",
244
+ "userCodeLength": 100,
245
+ "pushedAuthReqEndpoint": "<pushed-auth-req-endpoint>",
246
+ "mtlsEndpointAliases": [ { "name": "<mtls-endpoint-alias0-name>", "uri": "<mtls-endpoint-alias0-uri>" } ],
247
+ "supportedAuthorizationDetailsTypes": [ "<supported-authorization-details-type0>", "<supported-authorization-details-type1>" ],
248
+ "supportedTrustFrameworks": [ "<supported-trust-framework0>", "<supported-trust-framework1>" ],
249
+ "supportedEvidence": [ "<supported-evidence0>", "<supported-evidence1>" ],
250
+ "supportedIdentityDocuments": [ "<supported-identity-document0>", "<supported-identity-document1>" ],
251
+ "supportedVerificationMethods": [ "<supported-verification-method0>", "<supported-verification-method1>" ],
252
+ "supportedVerifiedClaims": [ "<supported-verified-claim0>", "<supported-verified-claim1>" ],
253
+ "missingClientIdAllowed": false,
254
+ "parRequired": false,
255
+ "requestObjectRequired": true,
256
+ "traditionalRequestObjectProcessingApplied": false,
257
+ "claimShortcutRestrictive": false,
258
+ "scopeRequired": true,
259
+ "nbfOptional": true,
260
+ "issSuppressed": false,
261
+ "attributes": [{ "key": "<attribute0-key>", "value": "<attribute0-value>" }],
262
+ "supportedCustomClientMetadata": [ "<supported-custom-client-metadata0>", "<supported-custom-client-metadata1>" ],
263
+ "tokenExpirationLinked": false,
264
+ "frontChannelRequestObjectEncryptionRequired": false,
265
+ "requestObjectEncryptionAlgMatchRequired": false,
266
+ "requestObjectEncryptionEncMatchRequired": false
261
267
  }
262
268
  JSON
263
269
  end
@@ -265,115 +271,118 @@ class ServiceTest < Minitest::Test
265
271
 
266
272
  def generate_hash
267
273
  {
268
- number: 1000,
269
- serviceOwnerNumber: 12345,
270
- serviceName: '<service-name>',
271
- apiKey: '<api-key>',
272
- apiSecret: '<api-secret>',
273
- issuer: '<issuer>',
274
- authorizationEndpoint: '<authorization-endpoint>',
275
- tokenEndpoint: '<token-endpoint>',
276
- revocationEndpoint: '<revocation-endpoint>',
277
- supportedRevocationAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
278
- userInfoEndpoint: '<user-info-endpoint>',
279
- jwksUri: '<jwks-uri>',
280
- jwks: '<jwks>',
281
- registrationEndpoint: '<registration-endpoint>',
282
- registrationManagementEndpoint: '<registration-management-endpoint>',
283
- supportedScopes: [ { name: 'scope0', description: '<scope0-description>', defaultEntry: false, descriptions: nil, attributes: nil } ],
284
- supportedResponseTypes: [ 'NONE', 'CODE', 'TOKEN', 'ID_TOKEN' ],
285
- supportedGrantTypes: [ 'AUTHORIZATION_CODE', 'REFRESH_TOKEN' ],
286
- supportedAcrs: [ '<supported-acr0>', '<supported-acr1>' ],
287
- supportedTokenAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
288
- supportedDisplays: [ 'PAGE', 'POPUP', 'TOUCH', 'WAP' ],
289
- supportedClaimTypes: [ 'NORMAL' ],
290
- supportedClaims: [ '<supported-claim0>', '<supported-claim1>' ],
291
- serviceDocumentation: '<service-documentation>',
292
- supportedClaimLocales: [ 'en-US' ],
293
- supportedUiLocales: [ 'en-US' ],
294
- policyUri: '<policy-uri>',
295
- tosUri: '<tos-uri>',
296
- authenticationCallbackEndpoint: '<authentication-callback-endpoint>',
297
- authenticationCallbackApiKey: '<authentication-callback-api-key>',
298
- authenticationCallbackApiSecret: '<authentication-callback-api-secret>',
299
- supportedSnses: [ 'FACEBOOK' ],
300
- snsCredentials: [ { sns: 'FACEBOOK', apiKey: '<sns-credentials0-api-key>', apiSecret: '<sns-credentials0-api-secret>' } ],
301
- createdAt: 10000,
302
- modifiedAt: 10000,
303
- developerAuthenticationCallbackEndpoint: '<developer-authentication-callback-endpoint>',
304
- developerAuthenticationCallbackApiKey: '<developer-authentication-callback-api-key>',
305
- developerAuthenticationCallbackApiSecret: '<developer-authentication-callback-api-secret>',
306
- supportedDeveloperSnses: [ 'FACEBOOK' ],
307
- developerSnsCredentials: [ { sns: 'FACEBOOK', apiKey: '<developer-sns-credentials0-api-key>', apiSecret: '<developer-sns-credentials0-api-secret>' } ],
308
- clientsPerDeveloper: 10,
309
- directAuthorizationEndpointEnabled: true,
310
- directTokenEndpointEnabled: true,
311
- directRevocationEndpointEnabled: true,
312
- directUserInfoEndpointEnabled: true,
313
- directJwksEndpointEnabled: true,
314
- directIntrospectionEndpointEnabled: true,
315
- singleAccessTokenPerSubject: false,
316
- pkceRequired: true,
317
- pkceS256Required: true,
318
- refreshTokenKept: true,
319
- refreshTokenDurationKept: true,
320
- errorDescriptionOmitted: false,
321
- errorUriOmitted: false,
322
- clientIdAliasEnabled: true,
323
- supportedServiceProfiles: [ 'FAPI', 'OPEN_BANKING' ],
324
- tlsClientCertificateBoundAccessTokens: true,
325
- introspectionEndpoint: '<introspection-endpoint>',
326
- supportedIntrospectionAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
327
- mutualTlsValidatePkiCertChain: true,
328
- trustedRootCertificates: [ '<trusted-root-certificate0>', '<trusted-root-certificate1>' ],
329
- dynamicRegistrationSupported: true,
330
- endSessionEndpoint: '<end-session-endpoint>',
331
- description: '<description>',
332
- accessTokenType: 'Bearer',
333
- accessTokenSignAlg: 'HS256',
334
- accessTokenDuration: 300,
335
- refreshTokenDuration: 300,
336
- idTokenDuration: 300,
337
- authorizationResponseDuration: 300,
338
- pushedAuthReqDuration: 300,
339
- metadata: [ { key: '<metadata0-key>', value: '<metadata0-value>' } ],
340
- accessTokenSignatureKeyId: '<access-token-signature-key-id>',
341
- authorizationSignatureKeyId: '<authorization-signature-key-id>',
342
- idTokenSignatureKeyId: '<id-token-signature-key-id>',
343
- userInfoSignatureKeyId: '<user-info-signature-key-id>',
344
- supportedBackchannelTokenDeliveryModes: [ 'POLL', 'PING', 'PUSH' ],
345
- backchannelAuthenticationEndpoint: '<backchannel-authentication-endpoint>',
346
- backchannelUserCodeParameterSupported: true,
347
- backchannelAuthReqIdDuration: 300,
348
- backchannelPollingInterval: 10,
349
- backchannelBindingMessageRequiredInFapi: true,
350
- allowableClockSkew: 100,
351
- deviceAuthorizationEndpoint: '<device-authorization-endpoint>',
352
- deviceVerificationUri: '<device-verification-uri>',
353
- deviceVerificationUriComplete: '<device-verification-uri-complete>',
354
- deviceFlowCodeDuration: 300,
355
- deviceFlowPollingInterval: 10,
356
- userCodeCharset: 'BASE20',
357
- userCodeLength: 100,
358
- pushedAuthReqEndpoint: '<pushed-auth-req-endpoint>',
359
- mtlsEndpointAliases: [ { name: '<mtls-endpoint-alias0-name>', uri: '<mtls-endpoint-alias0-uri>' } ],
360
- supportedAuthorizationDetailsTypes: [ '<supported-authorization-details-type0>', '<supported-authorization-details-type1>' ],
361
- supportedTrustFrameworks: [ '<supported-trust-framework0>', '<supported-trust-framework1>' ],
362
- supportedEvidence: [ '<supported-evidence0>', '<supported-evidence1>' ],
363
- supportedIdentityDocuments: [ '<supported-identity-document0>', '<supported-identity-document1>' ],
364
- supportedVerificationMethods: [ '<supported-verification-method0>', '<supported-verification-method1>' ],
365
- supportedVerifiedClaims: [ '<supported-verified-claim0>', '<supported-verified-claim1>' ],
366
- missingClientIdAllowed: false,
367
- parRequired: false,
368
- requestObjectRequired: true,
369
- traditionalRequestObjectProcessingApplied: false,
370
- claimShortcutRestrictive: false,
371
- scopeRequired: true,
372
- nbfOptional: true,
373
- issSuppressed: false,
374
- attributes: [{ key: '<attribute0-key>', value: '<attribute0-value>' }],
375
- supportedCustomClientMetadata: [ '<supported-custom-client-metadata0>', '<supported-custom-client-metadata1>' ],
376
- tokenExpirationLinked: false
274
+ number: 1000,
275
+ serviceOwnerNumber: 12345,
276
+ serviceName: '<service-name>',
277
+ apiKey: '<api-key>',
278
+ apiSecret: '<api-secret>',
279
+ issuer: '<issuer>',
280
+ authorizationEndpoint: '<authorization-endpoint>',
281
+ tokenEndpoint: '<token-endpoint>',
282
+ revocationEndpoint: '<revocation-endpoint>',
283
+ supportedRevocationAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
284
+ userInfoEndpoint: '<user-info-endpoint>',
285
+ jwksUri: '<jwks-uri>',
286
+ jwks: '<jwks>',
287
+ registrationEndpoint: '<registration-endpoint>',
288
+ registrationManagementEndpoint: '<registration-management-endpoint>',
289
+ supportedScopes: [ { name: 'scope0', description: '<scope0-description>', defaultEntry: false, descriptions: nil, attributes: nil } ],
290
+ supportedResponseTypes: [ 'NONE', 'CODE', 'TOKEN', 'ID_TOKEN' ],
291
+ supportedGrantTypes: [ 'AUTHORIZATION_CODE', 'REFRESH_TOKEN' ],
292
+ supportedAcrs: [ '<supported-acr0>', '<supported-acr1>' ],
293
+ supportedTokenAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
294
+ supportedDisplays: [ 'PAGE', 'POPUP', 'TOUCH', 'WAP' ],
295
+ supportedClaimTypes: [ 'NORMAL' ],
296
+ supportedClaims: [ '<supported-claim0>', '<supported-claim1>' ],
297
+ serviceDocumentation: '<service-documentation>',
298
+ supportedClaimLocales: [ 'en-US' ],
299
+ supportedUiLocales: [ 'en-US' ],
300
+ policyUri: '<policy-uri>',
301
+ tosUri: '<tos-uri>',
302
+ authenticationCallbackEndpoint: '<authentication-callback-endpoint>',
303
+ authenticationCallbackApiKey: '<authentication-callback-api-key>',
304
+ authenticationCallbackApiSecret: '<authentication-callback-api-secret>',
305
+ supportedSnses: [ 'FACEBOOK' ],
306
+ snsCredentials: [ { sns: 'FACEBOOK', apiKey: '<sns-credentials0-api-key>', apiSecret: '<sns-credentials0-api-secret>' } ],
307
+ createdAt: 10000,
308
+ modifiedAt: 10000,
309
+ developerAuthenticationCallbackEndpoint: '<developer-authentication-callback-endpoint>',
310
+ developerAuthenticationCallbackApiKey: '<developer-authentication-callback-api-key>',
311
+ developerAuthenticationCallbackApiSecret: '<developer-authentication-callback-api-secret>',
312
+ supportedDeveloperSnses: [ 'FACEBOOK' ],
313
+ developerSnsCredentials: [ { sns: 'FACEBOOK', apiKey: '<developer-sns-credentials0-api-key>', apiSecret: '<developer-sns-credentials0-api-secret>' } ],
314
+ clientsPerDeveloper: 10,
315
+ directAuthorizationEndpointEnabled: true,
316
+ directTokenEndpointEnabled: true,
317
+ directRevocationEndpointEnabled: true,
318
+ directUserInfoEndpointEnabled: true,
319
+ directJwksEndpointEnabled: true,
320
+ directIntrospectionEndpointEnabled: true,
321
+ singleAccessTokenPerSubject: false,
322
+ pkceRequired: true,
323
+ pkceS256Required: true,
324
+ refreshTokenKept: true,
325
+ refreshTokenDurationKept: true,
326
+ errorDescriptionOmitted: false,
327
+ errorUriOmitted: false,
328
+ clientIdAliasEnabled: true,
329
+ supportedServiceProfiles: [ 'FAPI', 'OPEN_BANKING' ],
330
+ tlsClientCertificateBoundAccessTokens: true,
331
+ introspectionEndpoint: '<introspection-endpoint>',
332
+ supportedIntrospectionAuthMethods: [ 'NONE', 'CLIENT_SECRET_BASIC' ],
333
+ mutualTlsValidatePkiCertChain: true,
334
+ trustedRootCertificates: [ '<trusted-root-certificate0>', '<trusted-root-certificate1>' ],
335
+ dynamicRegistrationSupported: true,
336
+ endSessionEndpoint: '<end-session-endpoint>',
337
+ description: '<description>',
338
+ accessTokenType: 'Bearer',
339
+ accessTokenSignAlg: 'HS256',
340
+ accessTokenDuration: 300,
341
+ refreshTokenDuration: 300,
342
+ idTokenDuration: 300,
343
+ authorizationResponseDuration: 300,
344
+ pushedAuthReqDuration: 300,
345
+ metadata: [ { key: '<metadata0-key>', value: '<metadata0-value>' } ],
346
+ accessTokenSignatureKeyId: '<access-token-signature-key-id>',
347
+ authorizationSignatureKeyId: '<authorization-signature-key-id>',
348
+ idTokenSignatureKeyId: '<id-token-signature-key-id>',
349
+ userInfoSignatureKeyId: '<user-info-signature-key-id>',
350
+ supportedBackchannelTokenDeliveryModes: [ 'POLL', 'PING', 'PUSH' ],
351
+ backchannelAuthenticationEndpoint: '<backchannel-authentication-endpoint>',
352
+ backchannelUserCodeParameterSupported: true,
353
+ backchannelAuthReqIdDuration: 300,
354
+ backchannelPollingInterval: 10,
355
+ backchannelBindingMessageRequiredInFapi: true,
356
+ allowableClockSkew: 100,
357
+ deviceAuthorizationEndpoint: '<device-authorization-endpoint>',
358
+ deviceVerificationUri: '<device-verification-uri>',
359
+ deviceVerificationUriComplete: '<device-verification-uri-complete>',
360
+ deviceFlowCodeDuration: 300,
361
+ deviceFlowPollingInterval: 10,
362
+ userCodeCharset: 'BASE20',
363
+ userCodeLength: 100,
364
+ pushedAuthReqEndpoint: '<pushed-auth-req-endpoint>',
365
+ mtlsEndpointAliases: [ { name: '<mtls-endpoint-alias0-name>', uri: '<mtls-endpoint-alias0-uri>' } ],
366
+ supportedAuthorizationDetailsTypes: [ '<supported-authorization-details-type0>', '<supported-authorization-details-type1>' ],
367
+ supportedTrustFrameworks: [ '<supported-trust-framework0>', '<supported-trust-framework1>' ],
368
+ supportedEvidence: [ '<supported-evidence0>', '<supported-evidence1>' ],
369
+ supportedIdentityDocuments: [ '<supported-identity-document0>', '<supported-identity-document1>' ],
370
+ supportedVerificationMethods: [ '<supported-verification-method0>', '<supported-verification-method1>' ],
371
+ supportedVerifiedClaims: [ '<supported-verified-claim0>', '<supported-verified-claim1>' ],
372
+ missingClientIdAllowed: false,
373
+ parRequired: false,
374
+ requestObjectRequired: true,
375
+ traditionalRequestObjectProcessingApplied: false,
376
+ claimShortcutRestrictive: false,
377
+ scopeRequired: true,
378
+ nbfOptional: true,
379
+ issSuppressed: false,
380
+ attributes: [{ key: '<attribute0-key>', value: '<attribute0-value>' }],
381
+ supportedCustomClientMetadata: [ '<supported-custom-client-metadata0>', '<supported-custom-client-metadata1>' ],
382
+ tokenExpirationLinked: false,
383
+ frontChannelRequestObjectEncryptionRequired: false,
384
+ requestObjectEncryptionAlgMatchRequired: false,
385
+ requestObjectEncryptionEncMatchRequired: false
377
386
  }
378
387
  end
379
388
 
@@ -488,127 +497,133 @@ class ServiceTest < Minitest::Test
488
497
  obj.attributes = ATTRIBUTES
489
498
  obj.supported_custom_client_metadata = SUPPORTED_CUSTOM_CLIENT_METADATA
490
499
  obj.token_expiration_linked = TOKEN_EXPIRATION_LINKED
500
+ obj.frontChannelRequestObjectEncryptionRequired = FRONT_CHANNEL_REQUEST_OBJECT_ENCRYPTION_REQUIRED
501
+ obj.requestObjectEncryptionAlgMatchRequired = REQUEST_OBJECT_ENCRYPTION_ALG_MATCH_REQUIRED
502
+ obj.requestObjectEncryptionEncMatchRequired = REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED
491
503
  end
492
504
 
493
505
 
494
506
  def match(obj)
495
- assert_equal NUMBER, obj.number
496
- assert_equal SERVICE_OWNER_NUMBER, obj.serviceOwnerNumber
497
- assert_equal SERVICE_NAME, obj.serviceName
498
- assert_equal API_KEY, obj.apiKey
499
- assert_equal API_SECRET, obj.apiSecret
500
- assert_equal ISSUER, obj.issuer
501
- assert_equal AUTHORIZATION_ENDPOINT, obj.authorizationEndpoint
502
- assert_equal TOKEN_ENDPOINT, obj.tokenEndpoint
503
- assert_equal REVOCATION_ENDPOINT, obj.revocationEndpoint
504
- assert_equal SUPPORTED_REVOCATION_AUTH_METHODS, obj.supportedRevocationAuthMethods
505
- assert_equal USER_INFO_ENDPOINT, obj.userInfoEndpoint
506
- assert_equal JWKS_URI, obj.jwksUri
507
- assert_equal JWKS, obj.jwks
508
- assert_equal REGISTRATION_ENDPOINT, obj.registrationEndpoint
509
- assert_equal REGISTRATION_MANAGEMENT_ENDPOINT, obj.registrationManagementEndpoint
510
- assert_equal SUPPORTED_SCOPE_NAME, obj.supportedScopes[0].name
511
- assert_equal SUPPORTED_SCOPE_DESCRIPTION, obj.supportedScopes[0].description
512
- assert_equal SUPPORTED_RESPONSE_TYPES, obj.supportedResponseTypes
513
- assert_equal SUPPORTED_GRANT_TYPES, obj.supportedGrantTypes
514
- assert_equal SUPPORTED_ACRS, obj.supportedAcrs
515
- assert_equal SUPPORTED_TOKEN_AUTH_METHODS, obj.supportedTokenAuthMethods
516
- assert_equal SUPPORTED_DISPLAYS, obj.supportedDisplays
517
- assert_equal SUPPORTED_CLAIM_TYPES, obj.supportedClaimTypes
518
- assert_equal SUPPORTED_CLAIMS, obj.supportedClaims
519
- assert_equal SERVICE_DOCUMENTATION, obj.serviceDocumentation
520
- assert_equal SUPPORTED_CLAIM_LOCALES, obj.supportedClaimLocales
521
- assert_equal SUPPORTED_UI_LOCALES, obj.supportedUiLocales
522
- assert_equal POLICY_URI, obj.policyUri
523
- assert_equal TOS_URI, obj.tosUri
524
- assert_equal AUTHENTICATION_CALLBACK_ENDPOINT, obj.authenticationCallbackEndpoint
525
- assert_equal AUTHENTICATION_CALLBACK_API_KEY, obj.authenticationCallbackApiKey
526
- assert_equal AUTHENTICATION_CALLBACK_API_SECRET, obj.authenticationCallbackApiSecret
527
- assert_equal SUPPORTED_SNSES, obj.supportedSnses
528
- assert_equal SNS_CREDENTIALS_SNS, obj.snsCredentials[0].sns
529
- assert_equal SNS_CREDENTIALS_API_KEY, obj.snsCredentials[0].apiKey
530
- assert_equal SNS_CREDENTIALS_API_SECRET, obj.snsCredentials[0].apiSecret
531
- assert_equal CREATED_AT, obj.createdAt
532
- assert_equal MODIFIED_AT, obj.modifiedAt
533
- assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT, obj.developerAuthenticationCallbackEndpoint
534
- assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY, obj.developerAuthenticationCallbackApiKey
535
- assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET, obj.developerAuthenticationCallbackApiSecret
536
- assert_equal SUPPORTED_DEVELOPER_SNSES, obj.supportedDeveloperSnses
537
- assert_equal DEVELOPER_SNS_CREDENTIALS_SNS, obj.developerSnsCredentials[0].sns
538
- assert_equal DEVELOPER_SNS_CREDENTIALS_API_KEY, obj.developerSnsCredentials[0].apiKey
539
- assert_equal DEVELOPER_SNS_CREDENTIALS_API_SECRET, obj.developerSnsCredentials[0].apiSecret
540
- assert_equal CLIENTS_PER_DEVELOPER, obj.clientsPerDeveloper
541
- assert_equal DIRECT_AUTHORIZATION_ENDPOINT_ENABLED, obj.directAuthorizationEndpointEnabled
542
- assert_equal DIRECT_TOKEN_ENDPOINT_ENABLED, obj.directTokenEndpointEnabled
543
- assert_equal DIRECT_REVOCATION_ENDPOINT_ENABLED, obj.directRevocationEndpointEnabled
544
- assert_equal DIRECT_USER_INFO_ENDPOINT_ENABLED, obj.directUserInfoEndpointEnabled
545
- assert_equal DIRECT_JWKS_ENDPOINT_ENABLED, obj.directJwksEndpointEnabled
546
- assert_equal DIRECT_INTROSPECTION_ENDPOINT_ENABLED, obj.directIntrospectionEndpointEnabled
547
- assert_equal SINGLE_ACCESS_TOKEN_PER_SUBJECT, obj.singleAccessTokenPerSubject
548
- assert_equal PKCE_REQUIRED, obj.pkceRequired
549
- assert_equal PKCE_S256_REQUIRED, obj.pkceS256Required
550
- assert_equal REFRESH_TOKEN_KEPT, obj.refreshTokenKept
551
- assert_equal REFRESH_TOKEN_DURATION_KEPT, obj.refreshTokenDurationKept
552
- assert_equal ERROR_DESCRIPTION_OMITTED, obj.errorDescriptionOmitted
553
- assert_equal ERROR_URI_OMITTED, obj.errorUriOmitted
554
- assert_equal CLIENT_ID_ALIAS_ENABLED, obj.clientIdAliasEnabled
555
- assert_equal SUPPORTED_SERVICE_PROFILES, obj.supportedServiceProfiles
556
- assert_equal TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS, obj.tlsClientCertificateBoundAccessTokens
557
- assert_equal INTROSPECTION_ENDPOINT, obj.introspectionEndpoint
558
- assert_equal SUPPORTED_INTROSPECTION_AUTH_METHODS, obj.supportedIntrospectionAuthMethods
559
- assert_equal MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN, obj.mutualTlsValidatePkiCertChain
560
- assert_equal TRUSTED_ROOT_CERTIFICATES, obj.trustedRootCertificates
561
- assert_equal DYNAMIC_REGISTRATION_SUPPORTED, obj.dynamicRegistrationSupported
562
- assert_equal END_SESSION_ENDPOINT, obj.endSessionEndpoint
563
- assert_equal DESCRIPTION, obj.description
564
- assert_equal ACCESS_TOKEN_TYPE, obj.accessTokenType
565
- assert_equal ACCESS_TOKEN_SIGN_ALG, obj.accessTokenSignAlg
566
- assert_equal ACCESS_TOKEN_DURATION, obj.accessTokenDuration
567
- assert_equal REFRESH_TOKEN_DURATION, obj.refreshTokenDuration
568
- assert_equal ID_TOKEN_DURATION, obj.idTokenDuration
569
- assert_equal AUTHORIZATION_RESPONSE_DURATION, obj.authorizationResponseDuration
570
- assert_equal PUSHED_AUTH_REQ_DURATION, obj.pushedAuthReqDuration
571
- assert_equal METADATA_KEY, obj.metadata[0].key
572
- assert_equal METADATA_VALUE, obj.metadata[0].value
573
- assert_equal ACCESS_TOKEN_SIGNATURE_KEY_ID, obj.accessTokenSignatureKeyId
574
- assert_equal AUTHORIZATION_SIGNATURE_KEY_ID, obj.authorizationSignatureKeyId
575
- assert_equal ID_TOKEN_SIGNATURE_KEY_ID, obj.idTokenSignatureKeyId
576
- assert_equal USER_INFO_SIGNATURE_KEY_ID, obj.userInfoSignatureKeyId
577
- assert_equal SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES, obj.supportedBackchannelTokenDeliveryModes
578
- assert_equal BACKCHANNEL_AUTHENTICATION_ENDPOINT, obj.backchannelAuthenticationEndpoint
579
- assert_equal BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED, obj.backchannelUserCodeParameterSupported
580
- assert_equal BACKCHANNEL_AUTH_REQ_ID_DURATION, obj.backchannelAuthReqIdDuration
581
- assert_equal BACKCHANNEL_POLLING_INTERVAL, obj.backchannelPollingInterval
582
- assert_equal BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI, obj.backchannelBindingMessageRequiredInFapi
583
- assert_equal ALLOWABLE_CLOCK_SKEW, obj.allowableClockSkew
584
- assert_equal DEVICE_AUTHORIZATION_ENDPOINT, obj.deviceAuthorizationEndpoint
585
- assert_equal DEVICE_VERIFICATION_URI, obj.deviceVerificationUri
586
- assert_equal DEVICE_VERIFICATION_URI_COMPLETE, obj.deviceVerificationUriComplete
587
- assert_equal DEVICE_FLOW_CODE_DURATION, obj.deviceFlowCodeDuration
588
- assert_equal DEVICE_FLOW_POLLING_INTERVAL, obj.deviceFlowPollingInterval
589
- assert_equal USER_CODE_CHARSET, obj.userCodeCharset
590
- assert_equal USER_CODE_LENGTH, obj.userCodeLength
591
- assert_equal PUSHED_AUTH_REQ_ENDPOINT, obj.pushedAuthReqEndpoint
592
- assert_equal MTLS_ENDPOINT_ALIAS_NAME, obj.mtlsEndpointAliases[0].name
593
- assert_equal MTLS_ENDPOINT_ALIAS_URI, obj.mtlsEndpointAliases[0].uri
594
- assert_equal SUPPORTED_AUTHORIZATION_DETAILS_TYPES, obj.supportedAuthorizationDetailsTypes
595
- assert_equal SUPPORTED_TRUST_FRAMEWORKS, obj.supportedTrustFrameworks
596
- assert_equal SUPPORTED_EVIDENCE, obj.supportedEvidence
597
- assert_equal SUPPORTED_IDENTITY_DOCUMENTS, obj.supportedIdentityDocuments
598
- assert_equal SUPPORTED_VERIFICATION_METHODS, obj.supportedVerificationMethods
599
- assert_equal SUPPORTED_VERIFIED_CLAIMS, obj.supportedVerifiedClaims
600
- assert_equal MISSING_CLIENT_ID_ALLOWED, obj.missingClientIdAllowed
601
- assert_equal PAR_REQUIRED, obj.parRequired
602
- assert_equal REQUEST_OBJECT_REQUIRED, obj.requestObjectRequired
603
- assert_equal TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED, obj.traditionalRequestObjectProcessingApplied
604
- assert_equal CLAIM_SHORTCUT_RESTRICTIVE, obj.claimShortcutRestrictive
605
- assert_equal SCOPE_REQUIRED, obj.scopeRequired
606
- assert_equal NBF_OPTIONAL, obj.nbfOptional
607
- assert_equal ISS_SUPPRESSED, obj.issSuppressed
608
- assert_equal ATTRIBUTE_KEY, obj.attributes[0].key
609
- assert_equal ATTRIBUTE_VALUE, obj.attributes[0].value
610
- assert_equal SUPPORTED_CUSTOM_CLIENT_METADATA, obj.supportedCustomClientMetadata
611
- assert_equal TOKEN_EXPIRATION_LINKED, obj.tokenExpirationLinked
507
+ assert_equal NUMBER, obj.number
508
+ assert_equal SERVICE_OWNER_NUMBER, obj.serviceOwnerNumber
509
+ assert_equal SERVICE_NAME, obj.serviceName
510
+ assert_equal API_KEY, obj.apiKey
511
+ assert_equal API_SECRET, obj.apiSecret
512
+ assert_equal ISSUER, obj.issuer
513
+ assert_equal AUTHORIZATION_ENDPOINT, obj.authorizationEndpoint
514
+ assert_equal TOKEN_ENDPOINT, obj.tokenEndpoint
515
+ assert_equal REVOCATION_ENDPOINT, obj.revocationEndpoint
516
+ assert_equal SUPPORTED_REVOCATION_AUTH_METHODS, obj.supportedRevocationAuthMethods
517
+ assert_equal USER_INFO_ENDPOINT, obj.userInfoEndpoint
518
+ assert_equal JWKS_URI, obj.jwksUri
519
+ assert_equal JWKS, obj.jwks
520
+ assert_equal REGISTRATION_ENDPOINT, obj.registrationEndpoint
521
+ assert_equal REGISTRATION_MANAGEMENT_ENDPOINT, obj.registrationManagementEndpoint
522
+ assert_equal SUPPORTED_SCOPE_NAME, obj.supportedScopes[0].name
523
+ assert_equal SUPPORTED_SCOPE_DESCRIPTION, obj.supportedScopes[0].description
524
+ assert_equal SUPPORTED_RESPONSE_TYPES, obj.supportedResponseTypes
525
+ assert_equal SUPPORTED_GRANT_TYPES, obj.supportedGrantTypes
526
+ assert_equal SUPPORTED_ACRS, obj.supportedAcrs
527
+ assert_equal SUPPORTED_TOKEN_AUTH_METHODS, obj.supportedTokenAuthMethods
528
+ assert_equal SUPPORTED_DISPLAYS, obj.supportedDisplays
529
+ assert_equal SUPPORTED_CLAIM_TYPES, obj.supportedClaimTypes
530
+ assert_equal SUPPORTED_CLAIMS, obj.supportedClaims
531
+ assert_equal SERVICE_DOCUMENTATION, obj.serviceDocumentation
532
+ assert_equal SUPPORTED_CLAIM_LOCALES, obj.supportedClaimLocales
533
+ assert_equal SUPPORTED_UI_LOCALES, obj.supportedUiLocales
534
+ assert_equal POLICY_URI, obj.policyUri
535
+ assert_equal TOS_URI, obj.tosUri
536
+ assert_equal AUTHENTICATION_CALLBACK_ENDPOINT, obj.authenticationCallbackEndpoint
537
+ assert_equal AUTHENTICATION_CALLBACK_API_KEY, obj.authenticationCallbackApiKey
538
+ assert_equal AUTHENTICATION_CALLBACK_API_SECRET, obj.authenticationCallbackApiSecret
539
+ assert_equal SUPPORTED_SNSES, obj.supportedSnses
540
+ assert_equal SNS_CREDENTIALS_SNS, obj.snsCredentials[0].sns
541
+ assert_equal SNS_CREDENTIALS_API_KEY, obj.snsCredentials[0].apiKey
542
+ assert_equal SNS_CREDENTIALS_API_SECRET, obj.snsCredentials[0].apiSecret
543
+ assert_equal CREATED_AT, obj.createdAt
544
+ assert_equal MODIFIED_AT, obj.modifiedAt
545
+ assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_ENDPOINT, obj.developerAuthenticationCallbackEndpoint
546
+ assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_KEY, obj.developerAuthenticationCallbackApiKey
547
+ assert_equal DEVELOPER_AUTHENTICATION_CALLBACK_API_SECRET, obj.developerAuthenticationCallbackApiSecret
548
+ assert_equal SUPPORTED_DEVELOPER_SNSES, obj.supportedDeveloperSnses
549
+ assert_equal DEVELOPER_SNS_CREDENTIALS_SNS, obj.developerSnsCredentials[0].sns
550
+ assert_equal DEVELOPER_SNS_CREDENTIALS_API_KEY, obj.developerSnsCredentials[0].apiKey
551
+ assert_equal DEVELOPER_SNS_CREDENTIALS_API_SECRET, obj.developerSnsCredentials[0].apiSecret
552
+ assert_equal CLIENTS_PER_DEVELOPER, obj.clientsPerDeveloper
553
+ assert_equal DIRECT_AUTHORIZATION_ENDPOINT_ENABLED, obj.directAuthorizationEndpointEnabled
554
+ assert_equal DIRECT_TOKEN_ENDPOINT_ENABLED, obj.directTokenEndpointEnabled
555
+ assert_equal DIRECT_REVOCATION_ENDPOINT_ENABLED, obj.directRevocationEndpointEnabled
556
+ assert_equal DIRECT_USER_INFO_ENDPOINT_ENABLED, obj.directUserInfoEndpointEnabled
557
+ assert_equal DIRECT_JWKS_ENDPOINT_ENABLED, obj.directJwksEndpointEnabled
558
+ assert_equal DIRECT_INTROSPECTION_ENDPOINT_ENABLED, obj.directIntrospectionEndpointEnabled
559
+ assert_equal SINGLE_ACCESS_TOKEN_PER_SUBJECT, obj.singleAccessTokenPerSubject
560
+ assert_equal PKCE_REQUIRED, obj.pkceRequired
561
+ assert_equal PKCE_S256_REQUIRED, obj.pkceS256Required
562
+ assert_equal REFRESH_TOKEN_KEPT, obj.refreshTokenKept
563
+ assert_equal REFRESH_TOKEN_DURATION_KEPT, obj.refreshTokenDurationKept
564
+ assert_equal ERROR_DESCRIPTION_OMITTED, obj.errorDescriptionOmitted
565
+ assert_equal ERROR_URI_OMITTED, obj.errorUriOmitted
566
+ assert_equal CLIENT_ID_ALIAS_ENABLED, obj.clientIdAliasEnabled
567
+ assert_equal SUPPORTED_SERVICE_PROFILES, obj.supportedServiceProfiles
568
+ assert_equal TLS_CLIENT_CERTIFICATE_BOUND_ACCESS_TOKENS, obj.tlsClientCertificateBoundAccessTokens
569
+ assert_equal INTROSPECTION_ENDPOINT, obj.introspectionEndpoint
570
+ assert_equal SUPPORTED_INTROSPECTION_AUTH_METHODS, obj.supportedIntrospectionAuthMethods
571
+ assert_equal MUTUAL_TLS_VALIDATE_PKI_CERT_CHAIN, obj.mutualTlsValidatePkiCertChain
572
+ assert_equal TRUSTED_ROOT_CERTIFICATES, obj.trustedRootCertificates
573
+ assert_equal DYNAMIC_REGISTRATION_SUPPORTED, obj.dynamicRegistrationSupported
574
+ assert_equal END_SESSION_ENDPOINT, obj.endSessionEndpoint
575
+ assert_equal DESCRIPTION, obj.description
576
+ assert_equal ACCESS_TOKEN_TYPE, obj.accessTokenType
577
+ assert_equal ACCESS_TOKEN_SIGN_ALG, obj.accessTokenSignAlg
578
+ assert_equal ACCESS_TOKEN_DURATION, obj.accessTokenDuration
579
+ assert_equal REFRESH_TOKEN_DURATION, obj.refreshTokenDuration
580
+ assert_equal ID_TOKEN_DURATION, obj.idTokenDuration
581
+ assert_equal AUTHORIZATION_RESPONSE_DURATION, obj.authorizationResponseDuration
582
+ assert_equal PUSHED_AUTH_REQ_DURATION, obj.pushedAuthReqDuration
583
+ assert_equal METADATA_KEY, obj.metadata[0].key
584
+ assert_equal METADATA_VALUE, obj.metadata[0].value
585
+ assert_equal ACCESS_TOKEN_SIGNATURE_KEY_ID, obj.accessTokenSignatureKeyId
586
+ assert_equal AUTHORIZATION_SIGNATURE_KEY_ID, obj.authorizationSignatureKeyId
587
+ assert_equal ID_TOKEN_SIGNATURE_KEY_ID, obj.idTokenSignatureKeyId
588
+ assert_equal USER_INFO_SIGNATURE_KEY_ID, obj.userInfoSignatureKeyId
589
+ assert_equal SUPPORTED_BACKCHANNEL_TOKEN_DELIVERY_MODES, obj.supportedBackchannelTokenDeliveryModes
590
+ assert_equal BACKCHANNEL_AUTHENTICATION_ENDPOINT, obj.backchannelAuthenticationEndpoint
591
+ assert_equal BACKCHANNEL_USER_CODE_PARAMETER_SUPPORTED, obj.backchannelUserCodeParameterSupported
592
+ assert_equal BACKCHANNEL_AUTH_REQ_ID_DURATION, obj.backchannelAuthReqIdDuration
593
+ assert_equal BACKCHANNEL_POLLING_INTERVAL, obj.backchannelPollingInterval
594
+ assert_equal BACKCHANNEL_BINDING_MESSAGE_REQUIRED_IN_FAPI, obj.backchannelBindingMessageRequiredInFapi
595
+ assert_equal ALLOWABLE_CLOCK_SKEW, obj.allowableClockSkew
596
+ assert_equal DEVICE_AUTHORIZATION_ENDPOINT, obj.deviceAuthorizationEndpoint
597
+ assert_equal DEVICE_VERIFICATION_URI, obj.deviceVerificationUri
598
+ assert_equal DEVICE_VERIFICATION_URI_COMPLETE, obj.deviceVerificationUriComplete
599
+ assert_equal DEVICE_FLOW_CODE_DURATION, obj.deviceFlowCodeDuration
600
+ assert_equal DEVICE_FLOW_POLLING_INTERVAL, obj.deviceFlowPollingInterval
601
+ assert_equal USER_CODE_CHARSET, obj.userCodeCharset
602
+ assert_equal USER_CODE_LENGTH, obj.userCodeLength
603
+ assert_equal PUSHED_AUTH_REQ_ENDPOINT, obj.pushedAuthReqEndpoint
604
+ assert_equal MTLS_ENDPOINT_ALIAS_NAME, obj.mtlsEndpointAliases[0].name
605
+ assert_equal MTLS_ENDPOINT_ALIAS_URI, obj.mtlsEndpointAliases[0].uri
606
+ assert_equal SUPPORTED_AUTHORIZATION_DETAILS_TYPES, obj.supportedAuthorizationDetailsTypes
607
+ assert_equal SUPPORTED_TRUST_FRAMEWORKS, obj.supportedTrustFrameworks
608
+ assert_equal SUPPORTED_EVIDENCE, obj.supportedEvidence
609
+ assert_equal SUPPORTED_IDENTITY_DOCUMENTS, obj.supportedIdentityDocuments
610
+ assert_equal SUPPORTED_VERIFICATION_METHODS, obj.supportedVerificationMethods
611
+ assert_equal SUPPORTED_VERIFIED_CLAIMS, obj.supportedVerifiedClaims
612
+ assert_equal MISSING_CLIENT_ID_ALLOWED, obj.missingClientIdAllowed
613
+ assert_equal PAR_REQUIRED, obj.parRequired
614
+ assert_equal REQUEST_OBJECT_REQUIRED, obj.requestObjectRequired
615
+ assert_equal TRADITIONAL_REQUEST_OBJECT_PROCESSING_APPLIED, obj.traditionalRequestObjectProcessingApplied
616
+ assert_equal CLAIM_SHORTCUT_RESTRICTIVE, obj.claimShortcutRestrictive
617
+ assert_equal SCOPE_REQUIRED, obj.scopeRequired
618
+ assert_equal NBF_OPTIONAL, obj.nbfOptional
619
+ assert_equal ISS_SUPPRESSED, obj.issSuppressed
620
+ assert_equal ATTRIBUTE_KEY, obj.attributes[0].key
621
+ assert_equal ATTRIBUTE_VALUE, obj.attributes[0].value
622
+ assert_equal SUPPORTED_CUSTOM_CLIENT_METADATA, obj.supportedCustomClientMetadata
623
+ assert_equal TOKEN_EXPIRATION_LINKED, obj.tokenExpirationLinked
624
+ assert_equal FRONT_CHANNEL_REQUEST_OBJECT_ENCRYPTION_REQUIRED, obj.frontChannelRequestObjectEncryptionRequired
625
+ assert_equal REQUEST_OBJECT_ENCRYPTION_ALG_MATCH_REQUIRED, obj.requestObjectEncryptionAlgMatchRequired
626
+ assert_equal REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED, obj.requestObjectEncryptionEncMatchRequired
612
627
  end
613
628
 
614
629