v.1.6.1 - fix: testcase #10, #11

AgID · Jan 16, 2023 · 4abd805 · 4abd805
1 parent 14f53b9
commit 4abd805
Show file tree

Hide file tree

Showing 7 changed files with 11 additions and 11 deletions.
diff --git a/src/client/img/testcase/test-case-oidc-offline-access-invalid-request-0.mermaid b/src/client/img/testcase/test-case-oidc-offline-access-invalid-request-0.mermaid
@@ -4,12 +4,12 @@ sequenceDiagram
     participant OP
     User->>RP: OP selection
     RP-->>+User: 
-    User-->>-OP: authentication request<br/>scope='openid offline_access'<br/>acr_values='https://www.spid.gov.it/SpidL1 https://www.spid.gov.it/SpidL3')
+    User-->>-OP: authentication request<br/>scope='openid offline_access'<br/>acr_values='https://www.spid.gov.it/SpidL2 https://www.spid.gov.it/SpidL1')
     OP-->>User: 
     User-->>OP: authentication challenge 
     OP-->>+User: 
     User-->>-RP: authentication response
     RP->>OP: token request
     OP->>RP: token response
-    RP->>OP: refresh token request
+    RP->>OP: refresh token request (client_id null)
     OP->>RP: refresh token error (error='invalid_request')
diff --git a/src/client/img/testcase/test-case-oidc-offline-access-invalid-request-0.svg b/src/client/img/testcase/test-case-oidc-offline-access-invalid-request-0.svg
diff --git a/src/client/img/testcase/test-case-oidc-offline-access-invalid-request-1.mermaid b/src/client/img/testcase/test-case-oidc-offline-access-invalid-request-1.mermaid
@@ -4,12 +4,12 @@ sequenceDiagram
     participant OP
     User->>RP: OP selection
     RP-->>+User: 
-    User-->>-OP: authentication request<br/>scope='openid offline_access'<br/>acr_values='https://www.spid.gov.it/SpidL1 https://www.spid.gov.it/SpidL3')
+    User-->>-OP: authentication request<br/>scope='openid offline_access'<br/>acr_values='https://www.spid.gov.it/SpidL2 https://www.spid.gov.it/SpidL1')
     OP-->>User: 
     User-->>OP: authentication challenge 
     OP-->>+User: 
     User-->>-RP: authentication response
     RP->>OP: token request
     OP->>RP: token response
-    RP->>OP: refresh token request
+    RP->>OP: refresh token request (client_id not trusted)
     OP->>RP: refresh token error (error='invalid_request')
diff --git a/src/client/img/testcase/test-case-oidc-offline-access-invalid-request-1.svg b/src/client/img/testcase/test-case-oidc-offline-access-invalid-request-1.svg
diff --git a/src/server/package.json b/src/server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "spid-oidc-check-op",
-  "version": "1.6.3",
+  "version": "1.6.4",
   "description": "SPID OIDC Conformance Test Tool for OP",
   "main": "spid-oidc-check-op",
   "author": "Michele D'Amico (damikael) - AgID",

diff --git a/src/test/3.1.34.js b/src/test/3.1.34.js
@@ -8,8 +8,8 @@ const config_rp = require('../config/rp.json');
 
 class Test_3_1_34 extends TestRefreshTokenRequest {
 
-    constructor(metadata, authrequest={}, authresponse={}) {
-        super(metadata, authrequest, authresponse);
+    constructor(metadata, authrequest={}, authresponse={}, tokenrequest={}, tokenresponse={}, refreshtokenrequest={}) {
+        super(metadata, authrequest, authresponse, tokenrequest, tokenresponse, refreshtokenrequest);
         this.num = "3.1.34";
         this.description = "Wrong Refresh Token Request: parameter client_id is not present";
         this.validation = "self";

diff --git a/src/test/3.1.35.js b/src/test/3.1.35.js
@@ -8,8 +8,8 @@ const config_rp = require('../config/rp.json');
 
 class Test_3_1_35 extends TestRefreshTokenRequest {
 
-    constructor(metadata, authrequest={}, authresponse={}) {
-        super(metadata, authrequest, authresponse);
+    constructor(metadata, authrequest={}, authresponse={}, tokenrequest={}, tokenresponse={}, refreshtokenrequest={}) {
+        super(metadata, authrequest, authresponse, tokenrequest, tokenresponse, refreshtokenrequest);
         this.num = "3.1.35";
         this.description = "Wrong Refresh Token Request: the value of client_id is not trusted";
         this.validation = "self";