mirror of
https://github.com/openai/codex.git
synced 2026-08-23 13:09:46 +00:00
4c89139da9
## What changed - Make automatic MCP OAuth registration prefer Client ID Metadata Documents (CIMD) when the authorization server advertises support for public clients and Codex is using its native loopback callback. Fall back to advertised Dynamic Client Registration (DCR) otherwise. - Add explicit `cimd` and `dcr` registration overrides to the CLI and app-server OAuth login API. Validate CIMD metadata and callback URLs before starting the authorization flow. - Use a callback-specific Codex client metadata URL for CIMD and retain the exact redirect URI through authorization and token exchange. ## Testing - Cover automatic and forced CIMD selection, DCR fallback, invalid metadata and redirects, token refresh, authenticated MCP requests, and conformance regression checks. GitOrigin-RevId: 4238372ca53b0f38e781e141ab5da97e0a6ddf45
4223 lines
124 KiB
JSON
4223 lines
124 KiB
JSON
{
|
|
"automaticAuthRequired": false,
|
|
"baselineKind": "mcp-conformance-regression-baseline-v1",
|
|
"checks": {
|
|
"failing": [
|
|
{
|
|
"check_id": "harness/auth/metadata-var3/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/pre-registration/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-from-www-authenticate/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-step-up/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pre-registration-auth",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-from-www-authenticate",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-step-up-initial",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-elicitation-sep1034-boolean-default",
|
|
"mode": "2025-11-25",
|
|
"scenario": "elicitation-sep1034-client-defaults",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-elicitation-sep1034-enum-default",
|
|
"mode": "2025-11-25",
|
|
"scenario": "elicitation-sep1034-client-defaults",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-elicitation-sep1034-integer-default",
|
|
"mode": "2025-11-25",
|
|
"scenario": "elicitation-sep1034-client-defaults",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-elicitation-sep1034-number-default",
|
|
"mode": "2025-11-25",
|
|
"scenario": "elicitation-sep1034-client-defaults",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-elicitation-sep1034-string-default",
|
|
"mode": "2025-11-25",
|
|
"scenario": "elicitation-sep1034-client-defaults",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-var3/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/pre-registration/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-from-www-authenticate/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-step-up/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pre-registration-auth",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-from-www-authenticate",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-step-up-initial",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2350-scope-union-on-reauth",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
}
|
|
],
|
|
"passing": [
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-basic/codex-adapter",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-none/codex-adapter",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-post/codex-adapter",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/initialize/codex-adapter",
|
|
"mode": "2025-06-18",
|
|
"scenario": "initialize",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/tools_call/codex-adapter",
|
|
"mode": "2025-06-18",
|
|
"scenario": "tools_call",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "mcp-client-initialization",
|
|
"mode": "2025-06-18",
|
|
"scenario": "initialize",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "tool-add-numbers",
|
|
"mode": "2025-06-18",
|
|
"scenario": "tools_call",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "wire-schema-valid",
|
|
"mode": "2025-06-18",
|
|
"scenario": "tools_call",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "app_server_initialize",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "echo_tool",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "ephemeral_thread",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "inventory",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "isolated_config_cleanup",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_add",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_get",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_remove",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "unicode_resource_read",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/basic-cimd/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-default/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-var1/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-var2/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-from-scopes-supported/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-omitted-when-undefined/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-retry-limit/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-basic/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-none/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-post/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/elicitation-sep1034-client-defaults/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "elicitation-sep1034-client-defaults",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/initialize/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "initialize",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/sse-retry/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "sse-retry",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/tools_call/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "tools_call",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "cimd-client-id-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-from-scopes-supported",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-omitted-when-undefined",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-retry-limit",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-step-up-escalation",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "mcp-client-initialization",
|
|
"mode": "2025-11-25",
|
|
"scenario": "initialize",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-sse-graceful-reconnect",
|
|
"mode": "2025-11-25",
|
|
"scenario": "sse-retry",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-sse-last-event-id",
|
|
"mode": "2025-11-25",
|
|
"scenario": "sse-retry",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-sse-retry-timing",
|
|
"mode": "2025-11-25",
|
|
"scenario": "sse-retry",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "tool-add-numbers",
|
|
"mode": "2025-11-25",
|
|
"scenario": "tools_call",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "wire-schema-valid",
|
|
"mode": "2025-11-25",
|
|
"scenario": "tools_call",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "app_server_initialize",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "echo_tool",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "ephemeral_thread",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "inventory",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "isolated_config_cleanup",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_add",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_get",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_remove",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "unicode_resource_read",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/authorization-server-migration/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/basic-cimd/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/iss-normalized/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/iss-not-advertised/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/iss-supported/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/iss-supported-missing/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/iss-unexpected/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/iss-wrong-issuer/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-default/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-issuer-mismatch/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-issuer-mismatch",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-var1/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-var2/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/offline-access-not-supported/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/offline-access-scope/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/resource-mismatch/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/resource-mismatch",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-from-scopes-supported/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-omitted-when-undefined/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-retry-limit/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-basic/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-none/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-post/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/http-custom-headers/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-custom-headers",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/http-invalid-tool-headers/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-invalid-tool-headers",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/http-standard-headers/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-standard-headers",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/json-schema-ref-no-deref/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "json-schema-ref-no-deref",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/request-metadata/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/sep-2322-client-request-state/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "sep-2322-client-request-state",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/tools_call/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "tools_call",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2352-no-cross-as-credential-reuse",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2352-no-reuse-on-as-change",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2352-reregister-on-as-change",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "cimd-client-id-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-no-normalization",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-proceed-no-iss",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-compare-iss-supported",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-reject-missing-iss",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-compare-iss-unadvertised",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-compare-iss-supported",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-issuer-mismatch",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-issuer-mismatch",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-validate-metadata-issuer",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-issuer-mismatch",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2207-offline-access-not-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2207-client-metadata-grant-types",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2207-offline-access-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/resource-mismatch",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-mismatch-rejected",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/resource-mismatch",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-from-scopes-supported",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-omitted-when-undefined",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-retry-limit",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-step-up-escalation",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-base64-unsafe",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-custom-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-encode-values",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-custom-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-mirrors-designated-params",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-custom-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-omit-null",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-custom-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-supports-custom-headers",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-custom-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-reject-invalid-tool",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-invalid-tool-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-x-mcp-header-charset",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-invalid-tool-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-x-mcp-header-not-empty",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-invalid-tool-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-x-mcp-header-primitive-only",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-invalid-tool-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-x-mcp-header-unique",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-invalid-tool-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-includes-standard-headers",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-standard-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2106-no-network-ref-deref",
|
|
"mode": "2026-07-28",
|
|
"scenario": "json-schema-ref-no-deref",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2575-client-declares-elicitation-capability",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2575-client-populates-meta",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2575-client-retry-supported-version",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2575-client-sends-client-info",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2575-http-client-sends-version-header",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2575-http-version-header-matches-meta",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2322-client-jsonrpc-id-different",
|
|
"mode": "2026-07-28",
|
|
"scenario": "sep-2322-client-request-state",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2322-client-no-state-omitted",
|
|
"mode": "2026-07-28",
|
|
"scenario": "sep-2322-client-request-state",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2322-client-parallel-isolation",
|
|
"mode": "2026-07-28",
|
|
"scenario": "sep-2322-client-request-state",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2322-client-request-state-echoed",
|
|
"mode": "2026-07-28",
|
|
"scenario": "sep-2322-client-request-state",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2322-default-result-type-complete",
|
|
"mode": "2026-07-28",
|
|
"scenario": "sep-2322-client-request-state",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "tool-add-numbers",
|
|
"mode": "2026-07-28",
|
|
"scenario": "tools_call",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "wire-schema-valid",
|
|
"mode": "2026-07-28",
|
|
"scenario": "tools_call",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "auto_cimd",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "supplemental",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "forced_cimd",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "supplemental",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "app_server_initialize",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "echo_tool",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "ephemeral_thread",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "inventory",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "isolated_config_cleanup",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_add",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_get",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_remove",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "modern_feature_enablement",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "multi_round_trip_request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "per_request_metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "request_scoped_notifications",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "unicode_resource_read",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
}
|
|
]
|
|
},
|
|
"modernFeatureEnablement": true,
|
|
"officialConformance": {
|
|
"authenticationIncluded": true,
|
|
"gitRef": "49103de6ed70804e940637bf3e9e29e4a3f54e64",
|
|
"repository": "modelcontextprotocol/conformance",
|
|
"scenarios": {
|
|
"2025-06-18": [
|
|
"initialize",
|
|
"tools_call",
|
|
"auth/token-endpoint-auth-basic",
|
|
"auth/token-endpoint-auth-post",
|
|
"auth/token-endpoint-auth-none"
|
|
],
|
|
"2025-11-25": [
|
|
"initialize",
|
|
"tools_call",
|
|
"elicitation-sep1034-client-defaults",
|
|
"sse-retry",
|
|
"auth/metadata-default",
|
|
"auth/metadata-var1",
|
|
"auth/metadata-var2",
|
|
"auth/metadata-var3",
|
|
"auth/basic-cimd",
|
|
"auth/scope-from-www-authenticate",
|
|
"auth/scope-from-scopes-supported",
|
|
"auth/scope-omitted-when-undefined",
|
|
"auth/scope-step-up",
|
|
"auth/scope-retry-limit",
|
|
"auth/token-endpoint-auth-basic",
|
|
"auth/token-endpoint-auth-post",
|
|
"auth/token-endpoint-auth-none",
|
|
"auth/pre-registration"
|
|
],
|
|
"2026-07-28": [
|
|
"tools_call",
|
|
"request-metadata",
|
|
"sep-2322-client-request-state",
|
|
"http-standard-headers",
|
|
"http-custom-headers",
|
|
"http-invalid-tool-headers",
|
|
"json-schema-ref-no-deref",
|
|
"auth/metadata-default",
|
|
"auth/metadata-var1",
|
|
"auth/metadata-var2",
|
|
"auth/metadata-var3",
|
|
"auth/basic-cimd",
|
|
"auth/scope-from-www-authenticate",
|
|
"auth/scope-from-scopes-supported",
|
|
"auth/scope-omitted-when-undefined",
|
|
"auth/scope-step-up",
|
|
"auth/scope-retry-limit",
|
|
"auth/token-endpoint-auth-basic",
|
|
"auth/token-endpoint-auth-post",
|
|
"auth/token-endpoint-auth-none",
|
|
"auth/pre-registration",
|
|
"auth/resource-mismatch",
|
|
"auth/offline-access-scope",
|
|
"auth/offline-access-not-supported",
|
|
"auth/authorization-server-migration",
|
|
"auth/iss-supported",
|
|
"auth/iss-not-advertised",
|
|
"auth/iss-supported-missing",
|
|
"auth/iss-wrong-issuer",
|
|
"auth/iss-unexpected",
|
|
"auth/iss-normalized",
|
|
"auth/metadata-issuer-mismatch"
|
|
]
|
|
}
|
|
},
|
|
"requiredModes": [
|
|
"2025-06-18",
|
|
"2025-11-25",
|
|
"2026-07-28"
|
|
],
|
|
"schemaVersion": 4,
|
|
"transports": [
|
|
"stdio",
|
|
"official-http"
|
|
],
|
|
"versionCheck": {
|
|
"success": true
|
|
}
|
|
}
|