Difference between revisions of "Template:OC5 OP FeatureTest List"

From OSIS Open Source Identity Systems
Jump to: navigation, search
(Tests for required claims)
(Reordered tests into logical groupings)
Line 6: Line 6:
 
<!-- OP FEATURES -->
 
<!-- OP FEATURES -->
 
   {{DT Form Header |OpenID Provider Features          |value=&nbsp;| width=250 | color=#cccccc | font=#000}}
 
   {{DT Form Header |OpenID Provider Features          |value=&nbsp;| width=250 | color=#cccccc | font=#000}}
 +
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support code Response Type|Support code Response Type]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-code-x-{{{name|}}} }} }}
 +
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support id_token Response Type|Support id_token Response Type]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-idt-x-{{{name|}}} }} }}
 +
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Combination of id_token token Response Types|Support Combination of id_token token Response Types]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-idttoken-x-{{{name|}}} }} }}
 +
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Combination of id_token code Response Types|Support Combination of id_token code Response Types]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-idtcode-x-{{{name|}}} }} }}
 +
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Combination of code token Response Types|Support Combination of code token Response Types]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-codetoken-x-{{{name|}}} }} }}
 +
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Combination of code id_token token Response Types|Support Combination of code id_token token Response Types]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-codeidttoken-x-{{{name|}}} }} }}
 +
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Reject Request Without response_type|Reject Request Without response_type]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-none-x-{{{name|}}} }} }}
 +
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support form_post Response Mode|Support form_post Response Mode]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rmod-form-x-{{{name|}}} }} }}
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-ID Token has Issuer|ID Token has Issuer]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-idt-iss-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-ID Token has Issuer|ID Token has Issuer]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-idt-iss-x-{{{name|}}} }} }}
Line 15: Line 31:
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-ID Token has Key ID|ID Token has Key ID]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-idt-kid-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-ID Token has Key ID|ID Token has Key ID]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-idt-kid-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support id_token Response Type|Support id_token Response Type]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-idt-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Requests Containing nonce|Support Requests Containing nonce]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-nonce-present-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support code Response Type|Support code Response Type]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-code-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Includes at_hash in ID Token when Implicit Flow Used|Includes at_hash in ID Token when Implicit Flow Used]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-hash-at-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Combination of id_token code Response Types|Support Combination of id_token code Response Types]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-idtcode-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Includes c_hash in ID Token when Code Flow Used|Includes c_hash in ID Token when Code Flow Used]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-hash-c-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Combination of id_token token Response Types|Support Combination of id_token token Response Types]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-idttoken-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Uses Asymmetric ID Token Signatures|Uses Asymmetric ID Token Signatures]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-alg-rs256-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Combination of code token Response Types|Support Combination of code token Response Types]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-codetoken-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Provide Unsecured ID Token Response|Can Provide Unsecured ID Token Response]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-idt-uns-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Combination of code id_token token Response Types|Support Combination of code id_token token Response Types]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-codeidttoken-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Uses Symmetric ID Token Signatures|Uses Symmetric ID Token Signatures]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-alg-hs256-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Authentication to Token Endpoint using HTTP Basic with POST|Support Authentication to Token Endpoint using HTTP Basic with POST]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-tok-basicpost-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Elliptic Curve ID Token Signatures|Support Elliptic Curve ID Token Signatures]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-idt-ec-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Authentication to Token Endpoint using Form-Encoded Client Credentials in POST Body|Support Authentication to Token Endpoint using Form-Encoded Client Credentials in POST Body]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-tok-cspost-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Provide Signed and Encrypted ID Token Response|Can Provide Signed and Encrypted ID Token Response]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-idt-signenc-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Authentication to Token Endpoint with Asymmetrically Signed JWTs|Support Authentication to Token Endpoint with Asymmetrically Signed JWTs]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-tok-pkjwt-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-UserInfo Endpoint|UserInfo Endpoint]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-userinfo-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Authentication to Token Endpoint with Symmetrically Signed JWTs|Support Authentication to Token Endpoint with Symmetrically Signed JWTs]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-tok-csjwt-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-UserInfo Endpoint Access with Header Method|UserInfo Endpoint Access with Header Method]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ui-hdr-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-UserInfo Endpoint|UserInfo Endpoint]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-userinfo-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-UserInfo Endpoint Access with Form-Encoded Body Method|UserInfo Endpoint Access with Form-Encoded Body Method]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ui-body-x-{{{name|}}} }} }}
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-UserInfo has Subject|UserInfo has Subject]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-userinfo-sub-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-UserInfo has Subject|UserInfo has Subject]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-userinfo-sub-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-UserInfo Endpoint Access with Header Method|UserInfo Endpoint Access with Header Method]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ui-hdr-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Provide Signed UserInfo Response|Can Provide Signed UserInfo Response]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ui-sign-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-UserInfo Endpoint Access with Form-Encoded Body Method|UserInfo Endpoint Access with Form-Encoded Body Method]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ui-body-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Provide Encrypted UserInfo Response|Can Provide Encrypted UserInfo Response]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ui-enc-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Provide Signed and Encrypted UserInfo Response|Can Provide Signed and Encrypted UserInfo Response]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ui-signenc-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Requests Without nonce|Support Requests Without nonce]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-nonce-notused-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Reject Requests Without nonce Using Implicit Flow|Reject Requests Without nonce Using Implicit Flow]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-nonce-missing-x-{{{name|}}} }} }}
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support scope Requesting No Specific Claims|Support scope Requesting No Specific Claims]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-scp-openid-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support scope Requesting No Specific Claims|Support scope Requesting No Specific Claims]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-scp-openid-x-{{{name|}}} }} }}
Line 54: Line 76:
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support scope Requesting All Basic Claims|Support scope Requesting All Basic Claims]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-scp-all-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support scope Requesting All Basic Claims|Support scope Requesting All Basic Claims]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-scp-all-x-{{{name|}}} }} }}
 
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Providing ID Token with max_age Restriction|Providing ID Token with max_age Restriction]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-maxage-x-{{{name|}}} }} }}
 
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support display value page|Support display value page]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-dsp-page-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support display value page|Support display value page]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-dsp-page-x-{{{name|}}} }} }}
Line 65: Line 85:
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support prompt value login|Support prompt value login]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-pro-login-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support prompt value login|Support prompt value login]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-pro-login-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Uses Asymmetric ID Token Signatures|Uses Asymmetric ID Token Signatures]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-alg-rs256-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Providing ID Token with max_age Restriction|Providing ID Token with max_age Restriction]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-maxage-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Uses Symmetric ID Token Signatures|Uses Symmetric ID Token Signatures]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-alg-hs256-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support id_token_hint Request Parameter|Support id_token_hint Request Parameter]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-req-idthint-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Ignores Extra Query Component in Request|Ignores Extra Query Component in Request]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-req-extquery-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Rejects Second Use of Access Code|Rejects Second Use of Access Code]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-code-2nd-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Second Use of Access Code Revokes Previously Issued Access Token|Second Use of Access Code Revokes Previously Issued Access Token]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-code-2nd-revokes-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Reject redirect_uri Not Matching a Registered redirect_uri|Reject redirect_uri Not Matching a Registered redirect_uri]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-notreg-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Reject Request Without redirect_uri when Multiple Registered|Reject Request Without redirect_uri when Multiple Registered]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-nonebad-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Accept Request Without redirect_uri when One Registered|Accept Request Without redirect_uri when One Registered]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-noneok-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Preserves Query Parameter in redirect_uri|Preserves Query Parameter in redirect_uri]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-query-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Preserves Query Parameter in Registered redirect_uri|Preserves Query Parameter in Registered redirect_uri]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-regquery-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Rejects redirect_uri when Query Parameter Does Not Match|Rejects redirect_uri when Query Parameter Does Not Match]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-noqmatch-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Reject Registration of redirect_uri with Fragment|Reject Registration of redirect_uri with Fragment]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-regfrag-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Authentication to Token Endpoint using HTTP Basic with POST|Support Authentication to Token Endpoint using HTTP Basic with POST]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-tok-basicpost-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Authentication to Token Endpoint using Form-Encoded Client Credentials in POST Body|Support Authentication to Token Endpoint using Form-Encoded Client Credentials in POST Body]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-tok-cspost-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Authentication to Token Endpoint with Asymmetrically Signed JWTs|Support Authentication to Token Endpoint with Asymmetrically Signed JWTs]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-tok-pkjwt-x-{{{name|}}} }} }}
 +
 
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Authentication to Token Endpoint with Symmetrically Signed JWTs|Support Authentication to Token Endpoint with Symmetrically Signed JWTs]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-tok-csjwt-x-{{{name|}}} }} }}
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support WebFinger Discovery|Support WebFinger Discovery]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-discovery-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support WebFinger Discovery|Support WebFinger Discovery]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-discovery-x-{{{name|}}} }} }}
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Publish openid-configuration Discovery Information|Publish openid-configuration Discovery Information]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-disc-config-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Publish openid-configuration Discovery Information|Publish openid-configuration Discovery Information]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-disc-config-x-{{{name|}}} }} }}
 +
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Discovered issuer Matches openid-configuration Path Prefix|Discovered issuer Matches openid-configuration Path Prefix]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-disc-issuer-x-{{{name|}}} }} }}
 +
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Discovered issuer Matches ID Token iss Value|Discovered issuer Matches ID Token iss Value]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-iss-issuer-x-{{{name|}}} }} }}
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Enables Dynamic Registration|Enables Dynamic Registration]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-registration-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Enables Dynamic Registration|Enables Dynamic Registration]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-registration-x-{{{name|}}} }} }}
Line 77: Line 129:
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Registration Read|Support Registration Read]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-reg-read-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Registration Read|Support Registration Read]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-reg-read-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Providing Aggregated Claims|Providing Aggregated Claims]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-clm-aggreg-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Uses Keys Registered with jwks_uri Value|Uses Keys Registered with jwks_uri Value]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-keys-jwks_uri-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Providing Distributed Claims|Providing Distributed Claims]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-clm-dist-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Uses Keys Registered with jwks Value|Uses Keys Registered with jwks Value]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-keys-jwks-x-{{{name|}}} }} }}
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Providing public sub Value|Providing public sub Value]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-id-public-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Providing public sub Value|Providing public sub Value]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-id-public-x-{{{name|}}} }} }}
Line 87: Line 139:
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Public and pairwise sub Values Differ|Public and pairwise sub Values Differ]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-id-differ-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Public and pairwise sub Values Differ|Public and pairwise sub Values Differ]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-id-differ-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support request_uri Request Parameter|Support request_uri Request Parameter]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-reqfile-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Supports using Sector Identifier for Pairwise sub Values|Supports using Sector Identifier for Pairwise sub Values]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-sector-id-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Includes at_hash in ID Token when Implicit Flow Used|Includes at_hash in ID Token when Implicit Flow Used]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-hash-at-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Rejects Sector Identifier Not Containing Registered redirect_uri Values|Rejects Sector Identifier Not Containing Registered redirect_uri Values]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-sector-bad-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Includes c_hash in ID Token when Code Flow Used|Includes c_hash in ID Token when Code Flow Used]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-hash-c-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Displays Logo in Login Page|Displays Logo in Login Page]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-disp-logo-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Reject Request Without response_type|Reject Request Without response_type]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rtyp-none-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Displays Policy URI in Login Page|Displays Policy URI in Login Page]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-disp-policy-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Ignores Extra Query Component in Request|Ignores Extra Query Component in Request]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-req-extquery-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Rollover OP Signing Key|Can Rollover OP Signing Key]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-roll-op-sig-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Preserves Query Parameter in redirect_uri|Preserves Query Parameter in redirect_uri]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-query-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support RP Signing Key Rollover|Support RP Signing Key Rollover]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-roll-rp-sig-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Preserves Query Parameter in Registered redirect_uri|Preserves Query Parameter in Registered redirect_uri]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-regquery-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Rollover OP Encryption Key|Can Rollover OP Encryption Key]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-roll-op-enc-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Rejects redirect_uri when Query Parameter Does Not Match|Rejects redirect_uri when Query Parameter Does Not Match]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-noqmatch-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support RP Encryption Key Rollover|Support RP Encryption Key Rollover]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-roll-rp-enc-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Reject Registration of redirect_uri with Fragment|Reject Registration of redirect_uri with Fragment]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-regfrag-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support request_uri Request Parameter|Support request_uri Request Parameter]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-reqfile-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Reject redirect_uri Not Matching a Registered redirect_uri|Reject redirect_uri Not Matching a Registered redirect_uri]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-notreg-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support request_uri Request Parameter with Signed Request|Support request_uri Request Parameter with Signed Request]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-sig-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Accept Request Without redirect_uri when One Registered|Accept Request Without redirect_uri when One Registered]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-noneok-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support request_uri Request Parameter with Encrypted Request|Support request_uri Request Parameter with Encrypted Request]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-enc-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Reject Request Without redirect_uri when Multiple Registered|Reject Request Without redirect_uri when Multiple Registered]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-nonebad-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support request_uri Request Parameter with Signed and Encrypted Request|Support request_uri Request Parameter with Signed and Encrypted Request]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-sigenc-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support id_token_hint Request Parameter|Support id_token_hint Request Parameter]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-req-idthint-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support request Request Parameter with Signed Request|Support request Request Parameter with Signed Request]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-req-sig-x-{{{name|}}} }} }}
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support claims Request Specifying sub Value|Support claims Request Specifying sub Value]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-req-userid-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support claims Request Specifying sub Value|Support claims Request Specifying sub Value]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-req-userid-x-{{{name|}}} }} }}
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support claims Request Specifying sub Value when prompt none Used|Support claims Request Specifying sub Value when prompt none Used]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-req-userid-none-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support claims Request Specifying sub Value when prompt none Used|Support claims Request Specifying sub Value when prompt none Used]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-req-userid-none-x-{{{name|}}} }} }}
 
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Displays Logo in Login Page|Displays Logo in Login Page]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-disp-logo-x-{{{name|}}} }} }}
 
 
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Displays Policy URI in Login Page|Displays Policy URI in Login Page]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-disp-policy-x-{{{name|}}} }} }}
 
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Supports Returning Claims in ID Token|Supports Returning Claims in ID Token]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-clm-idt-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Supports Returning Claims in ID Token|Supports Returning Claims in ID Token]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-clm-idt-x-{{{name|}}} }} }}
Line 126: Line 174:
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Supports Combining Claims Requested with scope and claims Request Parameter|Supports Combining Claims Requested with scope and claims Request Parameter]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-clm-combined-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Supports Combining Claims Requested with scope and claims Request Parameter|Supports Combining Claims Requested with scope and claims Request Parameter]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-clm-combined-x-{{{name|}}} }} }}
 
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Supports using Sector Identifier for Pairwise sub Values|Supports using Sector Identifier for Pairwise sub Values]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-sector-id-x-{{{name|}}} }} }}
 
 
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Rejects Sector Identifier Not Containing Registered redirect_uri Values|Rejects Sector Identifier Not Containing Registered redirect_uri Values]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-sector-bad-x-{{{name|}}} }} }}
 
 
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Requests Containing nonce|Support Requests Containing nonce]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-nonce-present-x-{{{name|}}} }} }}
 
 
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Requests Without nonce|Support Requests Without nonce]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-nonce-notused-x-{{{name|}}} }} }}
 
 
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Reject Requests Without nonce Using Implicit Flow|Reject Requests Without nonce Using Implicit Flow]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-nonce-missing-x-{{{name|}}} }} }}
 
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Providing Individually Requested Essential Claims|Providing Individually Requested Essential Claims]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-clm-essential-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Providing Individually Requested Essential Claims|Providing Individually Requested Essential Claims]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-clm-essential-x-{{{name|}}} }} }}
Line 150: Line 188:
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Request for acr Value of 1|Support Request for acr Value of 1]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-acr-1-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Request for acr Value of 1|Support Request for acr Value of 1]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-acr-1-x-{{{name|}}} }} }}
 +
 +
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Request OP Initiated Login|Can Request OP Initiated Login]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-init-login-x-{{{name|}}} }} }}
  
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Logout Initiated by OP|Logout Initiated by OP]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-logout-init-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Logout Initiated by OP|Logout Initiated by OP]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-logout-init-x-{{{name|}}} }} }}
Line 157: Line 197:
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-State Change Other than Logout Communicated|State Change Other than Logout Communicated]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-change-init-x-{{{name|}}} }} }}
 
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-State Change Other than Logout Communicated|State Change Other than Logout Communicated]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-change-init-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Provide Signed UserInfo Response|Can Provide Signed UserInfo Response]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ui-sign-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Providing Aggregated Claims|Providing Aggregated Claims]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-clm-aggreg-x-{{{name|}}} }} }}
  
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Provide Encrypted UserInfo Response|Can Provide Encrypted UserInfo Response]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ui-enc-x-{{{name|}}} }} }}
+
   {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Providing Distributed Claims|Providing Distributed Claims]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-clm-dist-x-{{{name|}}} }} }}
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Provide Signed and Encrypted UserInfo Response|Can Provide Signed and Encrypted UserInfo Response]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ui-signenc-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Provide Signed and Encrypted ID Token Response|Can Provide Signed and Encrypted ID Token Response]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-idt-signenc-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Provide Unsecured ID Token Response|Can Provide Unsecured ID Token Response]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-idt-uns-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Rejects Second Use of Access Code|Rejects Second Use of Access Code]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-code-2nd-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Second Use of Access Code Revokes Previously Issued Access Token|Second Use of Access Code Revokes Previously Issued Access Token]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-code-2nd-revokes-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Request OP Initiated Login|Can Request OP Initiated Login]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-init-login-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support form_post Response Mode|Support form_post Response Mode]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-rmod-form-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Uses Keys Registered with jwks_uri Value|Uses Keys Registered with jwks_uri Value]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-keys-jwks_uri-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Uses Keys Registered with jwks Value|Uses Keys Registered with jwks Value]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-keys-jwks-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Rollover OP Signing Key|Can Rollover OP Signing Key]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-roll-op-sig-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support RP Signing Key Rollover|Support RP Signing Key Rollover]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-roll-rp-sig-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support RP Encryption Key Rollover|Support RP Encryption Key Rollover]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-roll-rp-enc-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Can Rollover OP Encryption Key|Can Rollover OP Encryption Key]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-roll-op-enc-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Discovered issuer Matches openid-configuration Path Prefix|Discovered issuer Matches openid-configuration Path Prefix]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-disc-issuer-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Discovered issuer Matches ID Token iss Value|Discovered issuer Matches ID Token iss Value]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-iss-issuer-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support request_uri Request Parameter with Signed Request|Support request_uri Request Parameter with Signed Request]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-sig-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support request_uri Request Parameter with Encrypted Request|Support request_uri Request Parameter with Encrypted Request]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-enc-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support request_uri Request Parameter with Signed and Encrypted Request|Support request_uri Request Parameter with Signed and Encrypted Request]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-ruri-sigenc-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support request Request Parameter with Signed Request|Support request Request Parameter with Signed Request]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-req-sig-x-{{{name|}}} }} }}
+
 
+
  {{DT Form Field  |[[{{NAMESPACE}}:FeatureTest-Support Elliptic Curve ID Token Signatures|Support Elliptic Curve ID Token Signatures]] |value={{OC5ResultValue | {{{ns}}}:FTR-op-idt-ec-x-{{{name|}}} }} }}
+
  
 
<!-- FEATURES TBD
 
<!-- FEATURES TBD

Revision as of 18:37, 5 November 2014

Template:OP FeatureTest List.help