openid-certification / oidctest

THE CERTIFICATION TEST SUITE HAS BEEN MIGRATED TO A NEW SERVICE https://www.certificatinon.openid.net
Other
49 stars 15 forks source link

Can't run tests for Implicit profile (id token+token) #216

Open kalanord opened 4 years ago

kalanord commented 4 years ago

We are having issues trying to run tests for our OP with the id token+token configuration; all other flows run normally but for this profile, as we start our tests, we login normally but when the test returns to the test tool screen, we see no new data; like the test hasn't been run.

Since we aren't getting any new information in the test tool, is being difficult to debug where exactly the problem because it seems it's not recieving anything though we see that our OP had some requests done with those tests.

EDIT: The Authorization Request from the tool is

{
    "client_id": "openID-cli",
    "nonce": "zqufAYo9basxWwZq",
    "redirect_uri": "https://op-test:60001/authz_cb",
    "response_type": "id_token token",
    "scope": "openid",
    "state": "6oSCPxvtEAT2Phjb"
}

Whenever the login flow completes, the URL I get redirected to in the browser is https://op-test:60001/authz_post; if I hit enter, we get some feedback from the test saying that's not an expected http method (it's logical since I got there through the browser).

zandbelt commented 4 years ago

Can you provide a URL to your test instance?