✅ AC01_MDH_JARM_AC01_HappyPath_JARM_Response_Mode_jwt

✅ AC01_MDHJWKS_HF_AC1_POST_With_ShouldRespondWith_201Created(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", authorizationSignedResponseAlg: null)
✅ AC02_MDHJWKS_ACF_AC20_POST_With_AuthSigningAlgES256_ShouldRespondWith_201Created(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "ES256")
✅ AC03_MDHJWKS_ACF_AC21_POST_With_AuthSigningAlgPS256_ShouldRespondWith_201Created(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "PS256")
✅ AC05_MDHJWKS_ACF_AC24_POST_With_InvalidAuthSigningAlg_ShouldRespondWith_400BadRequest(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "")
✅ AC05_MDHJWKS_ACF_AC24_POST_With_InvalidAuthSigningAlg_ShouldRespondWith_400BadRequest(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "***NULL***")
✅ AC05_MDHJWKS_ACF_AC24_POST_With_InvalidAuthSigningAlg_ShouldRespondWith_400BadRequest(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "Foo")
✅ AC05_MDHJWKS_ACF_AC24_POST_With_InvalidAuthSigningAlg_ShouldRespondWith_400BadRequest(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "none")
✅ AC05_MDHJWKS_ACF_AC24_POST_With_InvalidAuthSigningAlg_ShouldRespondWith_400BadRequest(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "RS256")
✅ AC06_MDHJWKS_AC2_POST_With_SoftwareIDAlreadyRegistered_ShouldRespondWith_400BadRequest(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", authorizationSignedResponseAlg: null)
✅ AC06_MDHJWKS_AC2_POST_With_SoftwareIDAlreadyRegistered_ShouldRespondWith_400BadRequest(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "PS256")
✅ AC09_MDHJWKS_AC8_GET_ShouldRespondWith_200OK(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", authorizationSignedResponseAlg: null)
✅ AC10_MDHJWKS_AC28_GET_ShouldRespondWith_200OK(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "PS256")
✅ AC11_MDHJWKS_AC9_GET_With_ExpiredBearerToken_ShouldRespondWith_401Unauthorized(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", authorizationSignedResponseAlg: null)
✅ AC11_MDHJWKS_AC9_GET_With_ExpiredBearerToken_ShouldRespondWith_401Unauthorized(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "PS256")
✅ AC13_MDHJWKS_HF_AC11_PUT_With_ShouldRespondWith_200OK(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", authorizationSignedResponseAlg: null)
✅ AC14_MDHJWKS_ACF_AC31_PUT_With_ShouldRespondWith_200OK(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "PS256")
✅ AC15_MDHJWKS_AC12_PUT_With_InvalidRegistrationProperty_RedirectUri_ShouldRespondWith_400BadRequest(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", authorizationSignedResponseAlg: null)
✅ AC15_MDHJWKS_AC12_PUT_With_InvalidRegistrationProperty_RedirectUri_ShouldRespondWith_400BadRequest(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "PS256")
✅ AC16_MDHJWKS_AC13_PUT_With_ExpiredBearerToken_ShouldRespondWith_401Unauthorized(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", authorizationSignedResponseAlg: null)
✅ AC16_MDHJWKS_AC13_PUT_With_ExpiredBearerToken_ShouldRespondWith_401Unauthorized(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "PS256")
✅ AC18_MDHJWKS_AC15_DELETE_ShouldRespondWith_204NoContent(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", authorizationSignedResponseAlg: null)
✅ AC18_MDHJWKS_AC15_DELETE_ShouldRespondWith_204NoContent(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "PS256")
✅ AC19_MDHJWKS_AC17_DELETE_WithExpiredBearerToken_ShouldRespondWith_401Unauthorized(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", authorizationSignedResponseAlg: null)
✅ AC19_MDHJWKS_AC17_DELETE_WithExpiredBearerToken_ShouldRespondWith_401Unauthorized(responseType: "code", grantTypes: "authorization_code", authorizationSignedResponseAlg: "PS256")
✅ AC20_MDHJWKS_ACF_AC32_Happy_Path_POST_to_register_endpoint_JARM_Encryption(authorizationSignedResponseAlg: "ES256", authorizationEncryptedResponseAlg: "RSA-OAEP-256", authorizationEncryptedResponseEnc: "A128CBC-HS256")
✅ AC20_MDHJWKS_ACF_AC32_Happy_Path_POST_to_register_endpoint_JARM_Encryption(authorizationSignedResponseAlg: "ES256", authorizationEncryptedResponseAlg: "RSA-OAEP-256", authorizationEncryptedResponseEnc: "A256GCM")
✅ AC20_MDHJWKS_ACF_AC32_Happy_Path_POST_to_register_endpoint_JARM_Encryption(authorizationSignedResponseAlg: "ES256", authorizationEncryptedResponseAlg: "RSA-OAEP", authorizationEncryptedResponseEnc: "A128CBC-HS256")
✅ AC20_MDHJWKS_ACF_AC32_Happy_Path_POST_to_register_endpoint_JARM_Encryption(authorizationSignedResponseAlg: "ES256", authorizationEncryptedResponseAlg: "RSA-OAEP", authorizationEncryptedResponseEnc: "A256GCM")
✅ AC20_MDHJWKS_ACF_AC32_Happy_Path_POST_to_register_endpoint_JARM_Encryption(authorizationSignedResponseAlg: "PS256", authorizationEncryptedResponseAlg: "RSA-OAEP-256", authorizationEncryptedResponseEnc: "A128CBC-HS256")
✅ AC20_MDHJWKS_ACF_AC32_Happy_Path_POST_to_register_endpoint_JARM_Encryption(authorizationSignedResponseAlg: "PS256", authorizationEncryptedResponseAlg: "RSA-OAEP-256", authorizationEncryptedResponseEnc: "A256GCM")
✅ AC20_MDHJWKS_ACF_AC32_Happy_Path_POST_to_register_endpoint_JARM_Encryption(authorizationSignedResponseAlg: "PS256", authorizationEncryptedResponseAlg: "RSA-OAEP", authorizationEncryptedResponseEnc: "A128CBC-HS256")
✅ AC20_MDHJWKS_ACF_AC32_Happy_Path_POST_to_register_endpoint_JARM_Encryption(authorizationSignedResponseAlg: "PS256", authorizationEncryptedResponseAlg: "RSA-OAEP", authorizationEncryptedResponseEnc: "A256GCM")
✅ AC23_MDHJWKS_ACF_AC35_Happy_Path_POST_to_register_endpoint_JARM_Encryption_alg_specified_without_enc(authorizationSignedResponseAlg: "ES256", authorizationEncryptedResponseAlg: "RSA-OAEP-256")
✅ AC23_MDHJWKS_ACF_AC35_Happy_Path_POST_to_register_endpoint_JARM_Encryption_alg_specified_without_enc(authorizationSignedResponseAlg: "ES256", authorizationEncryptedResponseAlg: "RSA-OAEP")
✅ AC23_MDHJWKS_ACF_AC35_Happy_Path_POST_to_register_endpoint_JARM_Encryption_alg_specified_without_enc(authorizationSignedResponseAlg: "PS256", authorizationEncryptedResponseAlg: "RSA-OAEP-256")
✅ AC23_MDHJWKS_ACF_AC35_Happy_Path_POST_to_register_endpoint_JARM_Encryption_alg_specified_without_enc(authorizationSignedResponseAlg: "PS256", authorizationEncryptedResponseAlg: "RSA-OAEP")
✅ AC25_MDHJWKS_ACF_AC37_Happy_Path_ACF_only_DCR_without_id_token_encryption(responseType: "code", grantTypes: "authorization_code", idTokenSignedResponseAlg: "PS256", idTokenEncryptedResponseAlg: null, idTokenEncryptedResponseEnc: null, expectedIdTokenEncryptedResponseAlg: null, expectedIdTokenEncryptedResponseEnc: null)
✅ AC26_MDHJWKS_ACF_AC38_Happy_Path_ACF_only_DCR_with_id_token_encryption
✅ AC32_MDHJWKS_HF_AC44_Happy_Path_HF_only_DCR_with_id_token_encryption
✅ AC38_MDHJWKS_ACF_HF_AC50_Happy_Path_ACF_HF_DCR_with_id_token_encryption
✅ AC43_MDHJWKS_ACF_HF_AC55_With_InvalidGrantType_ShouldRespondWith_400BadRequest(responseType: "code id_token", grantTypes: "foo")
✅ AC43_MDHJWKS_ACF_HF_AC55_With_InvalidGrantType_ShouldRespondWith_400BadRequest(responseType: "code", grantTypes: "foo")
✅ AC44_MDHJWKS_HF_AC56_POST_With_AuthorizationSignedResponseAlg_NotProvided_ShouldRespondWith_201Created(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", authorizationSignedResponseAlg: "none", expected_authorization_signed_response_alg: null)
✅ AC44_MDHJWKS_HF_AC56_POST_With_AuthorizationSignedResponseAlg_NotProvided_ShouldRespondWith_201Created(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", authorizationSignedResponseAlg: null, expected_authorization_signed_response_alg: null)

✅ AC01_MDH_OIDC_AC01_Get_ShouldRespondWith_200OK_OIDC_Configuration
✅ AC02_MDHE_OIDC_AC01_Get_ShouldRespondWith_200OK_OIDC_Configuration

✅ AC01_MDHPAR_AC01_HappyPath_ShouldRespondWith_201Created(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", responseMode: "form_post", authorizationSignedResponseAlg: null)
✅ AC01_MDHPAR_AC01_HappyPath_ShouldRespondWith_201Created(responseType: "code id_token", grantTypes: "authorization_code,client_credentials", responseMode: "fragment", authorizationSignedResponseAlg: null)
✅ AC01_MDHPAR_AC01_HappyPath_ShouldRespondWith_201Created(responseType: "code", grantTypes: "authorization_code", responseMode: "jwt", authorizationSignedResponseAlg: "PS256")
✅ AC05_MDHPAR_AC08_WithUnknownClientId_ShouldRespondWith_400BadRequest
✅ AC06_MDHPAR_AC09_WithInvalidClientAssertion_ShouldRespondWith_400BadRequest
✅ AC07_MDHPAR_AC10_WithInvalidClientAssertion_ShouldRespondWith_400BadRequest
✅ AC09_MDHPAR_AC12_HF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: "Foo")
✅ AC09_MDHPAR_AC12_HF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: "form_post.jwt")
✅ AC09_MDHPAR_AC12_HF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: "fragment.jwt")
✅ AC09_MDHPAR_AC12_HF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: "query.jwt")
✅ AC10_MDHPAR_AC13_ACF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: "Foo", expectedErrorType: "invalid_request", expectedErrorDescription: "ERR-GEN-013: response_mode is not supported")
✅ AC10_MDHPAR_AC13_ACF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: "form_post.jwt", expectedErrorType: "invalid_request", expectedErrorDescription: "ERR-GEN-013: response_mode is not supported")
✅ AC10_MDHPAR_AC13_ACF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: "form_post", expectedErrorType: "invalid_request_object", expectedErrorDescription: "ERR-GEN-026: Invalid response_mode for response_ty"...)
✅ AC10_MDHPAR_AC13_ACF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: "fragment.jwt", expectedErrorType: "invalid_request", expectedErrorDescription: "ERR-GEN-013: response_mode is not supported")
✅ AC10_MDHPAR_AC13_ACF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: "fragment", expectedErrorType: "invalid_request_object", expectedErrorDescription: "ERR-GEN-026: Invalid response_mode for response_ty"...)
✅ AC10_MDHPAR_AC13_ACF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: "query.jwt", expectedErrorType: "invalid_request", expectedErrorDescription: "ERR-GEN-013: response_mode is not supported")
✅ AC10_MDHPAR_AC13_ACF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: "query", expectedErrorType: "invalid_request", expectedErrorDescription: "ERR-GEN-013: response_mode is not supported")
✅ AC10_MDHPAR_AC13_ACF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: null, expectedErrorType: "invalid_request", expectedErrorDescription: "ERR-GEN-013: response_mode is not supported")
✅ AC13_MDHPAR_AC15_WithInvalidResponseType_ShouldRespondWith_400BadRequest(responseType: "code Foo")
✅ AC13_MDHPAR_AC15_WithInvalidResponseType_ShouldRespondWith_400BadRequest(responseType: "code id_token Foo")
✅ AC13_MDHPAR_AC15_WithInvalidResponseType_ShouldRespondWith_400BadRequest(responseType: "code id_token token")
✅ AC13_MDHPAR_AC15_WithInvalidResponseType_ShouldRespondWith_400BadRequest(responseType: "code token")
✅ AC13_MDHPAR_AC15_WithInvalidResponseType_ShouldRespondWith_400BadRequest(responseType: "Foo")
✅ AC13_MDHPAR_AC15_WithInvalidResponseType_ShouldRespondWith_400BadRequest(responseType: "id_token token")
✅ AC13_MDHPAR_AC15_WithInvalidResponseType_ShouldRespondWith_400BadRequest(responseType: "token")
✅ AC15_MDHPAR_AC16_WithMissingResponseType_ShouldRespondWith_400BadRequest
✅ AC16_MDHPAR_AC17_HF_WithInvalidResponseMode_ShouldRespondWith_400BadRequest(responseMode: "jwt")

✅ AC01_Get_WithValidRequest_ShouldRespondWith_302Redirect_RedirectToRedirectURI_IdToken(tokenType: KAMILLA_SMITH)
⚪ AC02_Get_WithInvalidResponseType_ShouldRespondWith_302Redirect_ErrorResponse(responseType: "code id_token", expectedStatusCode: Redirect, expectedRedirectPath: "<MDH_HOST>:8001/account/login", expectedRedirectFragment: null)
⚪ AC02_Get_WithInvalidResponseType_ShouldRespondWith_302Redirect_ErrorResponse(responseType: "foo", expectedStatusCode: Redirect, expectedRedirectPath: "<MDH_INTEGRATION_TESTS_HOST>:9999/consent/callback", expectedRedirectFragment: "error=invalid_request&error_description=Unsupporte"...)
⚪ AC03_Get_WithInvalidRequestBody_ShouldRespondWith_400BadRequest_ErrorResponse(requestBody: "foo", expectedStatusCode: BadRequest, expectedRedirectPath: null)
⚪ AC03_Get_WithInvalidRequestBody_ShouldRespondWith_400BadRequest_ErrorResponse(requestBody: null, expectedStatusCode: Redirect, expectedRedirectPath: "<MDH_HOST>:8001/account/login")
⚪ AC04_Get_WithInvalidScope_ShouldRespondWith_200OK_Response(scope: "openid profile common:customer.basic:read bank:acc"..., expectedStatusCode: Redirect, expectedRedirectPath: "<MDH_HOST>:8001/account/login", expectedRedirectFragment: null)
⚪ AC04_Get_WithInvalidScope_ShouldRespondWith_200OK_Response(scope: "openid profile common:customer.basic:read bank:acc"..., expectedStatusCode: Redirect, expectedRedirectPath: "<MDH_HOST>:8001/account/login", expectedRedirectFragment: null)
⚪ AC05_Get_WithScopeMissingOpenId_ShouldRespondWith_302Redirect_ErrorResponse(scope: "openid profile common:customer.basic:read bank:acc"..., expectedStatusCode: Redirect, expectedRedirectPath: "<MDH_HOST>:8001/account/login", expectedRedirectFragment: null)
⚪ AC05_Get_WithScopeMissingOpenId_ShouldRespondWith_302Redirect_ErrorResponse(scope: "profile common:customer.basic:read bank:accounts.b"..., expectedStatusCode: Redirect, expectedRedirectPath: "<MDH_INTEGRATION_TESTS_HOST>:9999/consent/callback", expectedRedirectFragment: "error=invalid_request&error_description=OpenID Con"...)
⚪ AC06_Get_WithInvalidClientID_ShouldRespondWith_302Redirect_ErrorResponse(softwareProductId: "c6327f87-687a-4369-99a4-eaacd3bb8210", expectedStatusCode: Redirect, expectedRedirectPath: "<MDH_HOST>:8001/account/login", expectedRedirectFragment: null)
⚪ AC06_Get_WithInvalidClientID_ShouldRespondWith_302Redirect_ErrorResponse(softwareProductId: "f00f00f0-f00f-f00f-f00f-f00f00f00f00", expectedStatusCode: Redirect, expectedRedirectPath: "<MDH_INTEGRATION_TESTS_HOST>:9999/consent/callback", expectedRedirectFragment: "error=invalid_request&error_description=Invalid cl"...)
⚪ AC07_Get_WithInvalidRedirectURI_ShouldRespondWith_400BadRequest_ErrorResponse(redirectUri: "<MDH_INTEGRATION_TESTS_HOST>:9999/consent/callback", expectedStatusCode: Redirect)
⚪ AC07_Get_WithInvalidRedirectURI_ShouldRespondWith_400BadRequest_ErrorResponse(redirectUri: "https://localhost:9001/foo", expectedStatusCode: BadRequest)
⚪ AC08_Get_WithUnsignedRequestBody_ShouldRespondWith_302Redirect_ErrorResponse(jwt_certificateFilename: "Certificates/client-invalid.pfx", jwt_certificatePassword: "#M0ckDataRecipient#", expectedStatusCode: Redirect, expectedRedirectPath: "<MDH_INTEGRATION_TESTS_HOST>:9999/consent/callback", expectedRedirectFragment: "error=invalid_request_object&error_description=Inv"...)
⚪ AC08_Get_WithUnsignedRequestBody_ShouldRespondWith_302Redirect_ErrorResponse(jwt_certificateFilename: "Certificates/MDR/jwks.pfx", jwt_certificatePassword: "#M0ckDataRecipient#", expectedStatusCode: Redirect, expectedRedirectPath: "<MDH_HOST>:8001/account/login", expectedRedirectFragment: null)
⚪ AC09_UI_WithInvalidCustomerId_UIShouldShow_IncorrectCustomerIdMessage
⚪ AC10_UI_WithInvalidOTP_UIShouldShow_IncorrectPasswordMessage

✅ AC01_FromMDH_Get_ShouldRespondWith_200OK_OIDC_Configuration
✅ AC01_Get_ShouldRespondWith_200OK_OIDC_Configuration

✅ AC01_FromMDH_Get_ShouldRespondWith_200OK_OIDC_JWKS
✅ AC01_Get_ShouldRespondWith_200OK_OIDC_JWKS

✅ AC01_Post_ShouldRespondWith_200OK_IDToken_AccessToken_RefreshToken
✅ AC02_Put_ShouldRespondWith_405MethodNotSupportedOr404NotFound
✅ AC03_Post_WithInvalidRequest_ClientAssertion_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(useClientAssertion: False, expectedStatusCode: BadRequest)
✅ AC03_Post_WithInvalidRequest_ClientAssertion_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(useClientAssertion: True, expectedStatusCode: OK)
✅ AC03_Post_WithInvalidRequest_ClientAssertionType_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(clientAssertionType: "foo", expectedStatusCode: BadRequest)
✅ AC03_Post_WithInvalidRequest_ClientAssertionType_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(clientAssertionType: "urn:ietf:params:oauth:client-assertion-type:jwt-be"..., expectedStatusCode: OK)
✅ AC03_Post_WithInvalidRequest_ClientAssertionType_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(clientAssertionType: null, expectedStatusCode: BadRequest)
✅ AC03_Post_WithInvalidRequest_ClientId_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(clientId: "***OMIT**", expectedStatusCode: BadRequest)
✅ AC03_Post_WithInvalidRequest_ClientId_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(clientId: "c6327f87-687a-4369-99a4-eaacd3bb8210", expectedStatusCode: OK)
✅ AC03_Post_WithInvalidRequest_ClientId_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(clientId: "foo", expectedStatusCode: BadRequest)
✅ AC03_Post_WithInvalidRequest_GrantType_ShouldRespondWith_400BadRequest_InvalidRequestErrorResponse(grantType: "authorization_code", expectedStatusCode: OK)
✅ AC03_Post_WithInvalidRequest_GrantType_ShouldRespondWith_400BadRequest_InvalidRequestErrorResponse(grantType: "foo", expectedStatusCode: BadRequest)
✅ AC03_Post_WithInvalidRequest_GrantType_ShouldRespondWith_400BadRequest_InvalidRequestErrorResponse(grantType: null, expectedStatusCode: BadRequest)
✅ AC04_Post_WithInvalidClientAssertion_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(testType: exp_backdated, expectedStatusCode: BadRequest)
✅ AC04_Post_WithInvalidClientAssertion_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(testType: omit_aud, expectedStatusCode: BadRequest)
✅ AC04_Post_WithInvalidClientAssertion_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(testType: omit_exp, expectedStatusCode: BadRequest)
✅ AC04_Post_WithInvalidClientAssertion_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(testType: omit_iss, expectedStatusCode: BadRequest)
✅ AC04_Post_WithInvalidClientAssertion_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(testType: omit_jti, expectedStatusCode: BadRequest)
✅ AC04_Post_WithInvalidClientAssertion_ShouldRespondWith_400BadRequest_InvalidClientErrorResponse(testType: valid_jwt, expectedStatusCode: OK)
✅ AC05_Post_WithExpiredAuthCode_ShouldRespondWith_400BadRequest_InvalidGrant(expired: False, expectedStatusCode: OK)
✅ AC05_Post_WithExpiredAuthCode_ShouldRespondWith_400BadRequest_InvalidGrant(expired: True, expectedStatusCode: BadRequest)
✅ AC06_Post_WithMissingAuthCode_ShouldRespondWith_400BadRequest_InvalidGrant(authCode: null, expectedStatusCode: BadRequest)
✅ AC07_Post_WithInvalidAuthCode_ShouldRespondWith_400BadRequest_InvalidGrantResponse(authCode: "foo", expectedStatusCode: BadRequest)
✅ AC08_Post_WithShareDuration_ShouldRespondWith_200OK_IDToken_AccessToken_RefreshToken(shareDuration: 3600)
✅ AC09_Post_WithRefreshToken_AndSameScope_ShouldRespondWith_200OK_AccessToken_RefreshToken
✅ AC10_Post_WithRefreshToken_AndDifferentScope_ShouldRespondWith_ExpectedResponse(initialScope: "openid bank:accounts.basic:read bank:transactions:"..., requestedScope: "openid bank:accounts.basic:read", expectedStatusCode: OK)
✅ AC10_Post_WithRefreshToken_AndDifferentScope_ShouldRespondWith_ExpectedResponse(initialScope: "openid bank:accounts.basic:read", requestedScope: "openid bank:accounts.basic:read bank:transactions:"..., expectedStatusCode: BadRequest)
✅ AC10_Post_WithRefreshToken_AndDifferentScope_ShouldRespondWith_ExpectedResponse(initialScope: "openid bank:accounts.basic:read", requestedScope: "openid bank:accounts.basic:read bank:transactions:"..., expectedStatusCode: BadRequest)
✅ AC10_Post_WithRefreshToken_AndDifferentScope_ShouldRespondWith_ExpectedResponse(initialScope: "openid bank:accounts.basic:read", requestedScope: "openid bank:accounts.basic:read", expectedStatusCode: OK)
✅ AC11_Post_WithInvalidRefreshToken_ShouldRespondWith_400BadRequest_InvalidFieldErrorResponse(refreshToken: "foo", expectedStatusCode: BadRequest)
✅ AC11_Post_WithInvalidRefreshToken_ShouldRespondWith_400BadRequest_InvalidFieldErrorResponse(refreshToken: null, expectedStatusCode: BadRequest)
✅ ACX01_Authorise_WithSharingDuration_ShouldRespondWith_AccessTokenRefreshToken(sharingDuration: 0, expectsRefreshToken: False)
✅ ACX01_Authorise_WithSharingDuration_ShouldRespondWith_AccessTokenRefreshToken(sharingDuration: 10000, expectsRefreshToken: True)
✅ ACX01_Authorise_WithSharingDuration_ShouldRespondWith_AccessTokenRefreshToken(sharingDuration: null, expectsRefreshToken: False)
✅ ACX02_UseRefreshTokenMultipleTimes_ShouldRespondWith_AccessTokenRefreshToken(usageAttempts: 1)
✅ ACX02_UseRefreshTokenMultipleTimes_ShouldRespondWith_AccessTokenRefreshToken(usageAttempts: 2)
✅ ACX02_UseRefreshTokenMultipleTimes_ShouldRespondWith_AccessTokenRefreshToken(usageAttempts: 3)
✅ ACX03_UseExpiredRefreshToken_ShouldRespondWith_400BadRequest(expired: False)
✅ ACX03_UseExpiredRefreshToken_ShouldRespondWith_400BadRequest(expired: True)

✅ AC01_Get_ShouldRespondWith_200OK_UserInfo(tokenType: KAMILLA_SMITH, expectedName: "Kamilla Smith", expectedGivenName: "Kamilla", expectedFamilyName: "Smith")
✅ AC02_Post_ShouldRespondWith_200OK_UserInfo(tokenType: KAMILLA_SMITH, expectedName: "Kamilla Smith", expectedGivenName: "Kamilla", expectedFamilyName: "Smith")
✅ AC03_Get_WithADRParticipationNotActive_ShouldRespondWith_403Forbidden_ErrorResponse(status: "ACTIVE", statusDescription: "Active", expectedStatusCode: OK)
✅ AC03_Get_WithADRParticipationNotActive_ShouldRespondWith_403Forbidden_ErrorResponse(status: "INACTIVE", statusDescription: "Inactive", expectedStatusCode: Forbidden)
✅ AC03_Get_WithADRParticipationNotActive_ShouldRespondWith_403Forbidden_ErrorResponse(status: "REMOVED", statusDescription: "Removed", expectedStatusCode: Forbidden)
✅ AC03_Get_WithADRParticipationNotActive_ShouldRespondWith_403Forbidden_ErrorResponse(status: "REVOKED", statusDescription: "Revoked", expectedStatusCode: Forbidden)
✅ AC03_Get_WithADRParticipationNotActive_ShouldRespondWith_403Forbidden_ErrorResponse(status: "SURRENDERED", statusDescription: "Surrendered", expectedStatusCode: Forbidden)
✅ AC03_Get_WithADRParticipationNotActive_ShouldRespondWith_403Forbidden_ErrorResponse(status: "SUSPENDED", statusDescription: "Suspended", expectedStatusCode: Forbidden)
✅ AC05_Get_WithADRSoftwareProductNotActive_ShouldRespondWith_403Forbidden_ErrorResponse(status: "ACTIVE", statusDescription: "Active", expectedStatusCode: OK)
✅ AC05_Get_WithADRSoftwareProductNotActive_ShouldRespondWith_403Forbidden_ErrorResponse(status: "INACTIVE", statusDescription: "Inactive", expectedStatusCode: Forbidden)
✅ AC05_Get_WithADRSoftwareProductNotActive_ShouldRespondWith_403Forbidden_ErrorResponse(status: "REMOVED", statusDescription: "Removed", expectedStatusCode: Forbidden)
✅ AC06_Get_WithNoAccessToken_ShouldRespondWith_401Unauthorised_WWWAuthenticateHeader(tokenType: INVALID_EMPTY, expectedStatusCode: Unauthorized)
✅ AC06_Get_WithNoAccessToken_ShouldRespondWith_401Unauthorised_WWWAuthenticateHeader(tokenType: INVALID_OMIT, expectedStatusCode: Unauthorized)
✅ AC06_Get_WithNoAccessToken_ShouldRespondWith_401Unauthorised_WWWAuthenticateHeader(tokenType: KAMILLA_SMITH, expectedStatusCode: OK)
✅ AC07_Get_WithInvalidAccessToken_ShouldRespondWith_401Unauthorised_WWWAuthenticateHeader(tokenType: INVALID_FOO, expectedStatusCode: Unauthorized)
✅ AC07_Get_WithInvalidAccessToken_ShouldRespondWith_401Unauthorised_WWWAuthenticateHeader(tokenType: KAMILLA_SMITH, expectedStatusCode: OK)
✅ AC08_Get_WithExpiredAccessToken_ShouldRespondWith_401Unauthorised_WWWAuthenticateHeader(expectedStatusCode: Unauthorized)
✅ AC09_Get_WithDifferentHolderOfKey_ShouldRespondWith_401Unauthorised(certificateFilename: "Certificates/client-additional.pfx", certificatePassword: "#M0ckDataRecipient#", expectedStatusCode: Unauthorized)
✅ AC09_Get_WithDifferentHolderOfKey_ShouldRespondWith_401Unauthorised(certificateFilename: "Certificates/client.pfx", certificatePassword: "#M0ckDataRecipient#", expectedStatusCode: OK)

✅ AC01_Post_ShouldRespondWith_200OK_IntrospectionInfo(tokenType: KAMILLA_SMITH)
✅ AC02_Post_WithInvalidRefreshToken_ShouldRespondWith_200OK_ActiveFalse(invalidRefreshToken: False, expectedActive: True)
✅ AC02_Post_WithInvalidRefreshToken_ShouldRespondWith_200OK_ActiveFalse(invalidRefreshToken: True, expectedActive: False)
✅ AC03_Post_WithMissingRefreshToken_ShouldRespondWith_200OK_ActiveFalse(missingRefreshToken: False, expectedActive: True)
✅ AC03_Post_WithMissingRefreshToken_ShouldRespondWith_200OK_ActiveFalse(missingRefreshToken: True, expectedActive: False)
✅ AC04_Post_WithExpiredRefreshToken_ShouldRespondWith_200OK_ActiveFalse(expired: False, expectedActive: True)
✅ AC04_Post_WithExpiredRefreshToken_ShouldRespondWith_200OK_ActiveFalse(expired: True, expectedActive: False)
✅ AC06_Post_WithInvalidClientId_ShouldRespondWith_400BadRequest_ErrorResponse(clientId: "c6327f87-687a-4369-99a4-eaacd3bb8210", expectedStatusCode: OK)
✅ AC06_Post_WithInvalidClientId_ShouldRespondWith_400BadRequest_ErrorResponse(clientId: "foo", expectedStatusCode: BadRequest)
✅ AC07_Post_WithInvalidClientAssertionType_ShouldRespondWith_400BadRequest_ErrorResponse(clientAssertionType: "foo", expectedStatusCode: BadRequest)
✅ AC07_Post_WithInvalidClientAssertionType_ShouldRespondWith_400BadRequest_ErrorResponse(clientAssertionType: "urn:ietf:params:oauth:client-assertion-type:jwt-be"..., expectedStatusCode: OK)
✅ AC08_Post_WithInvalidClientAssertion_ShouldRespondWith_400BadRequest_ErrorResponse(clientAssertion: "foo", expectedStatusCode: BadRequest)
✅ AC08_Post_WithInvalidClientAssertion_ShouldRespondWith_400BadRequest_ErrorResponse(clientAssertion: null, expectedStatusCode: OK)

✅ AC01_Post_ShouldRespondWith_201Created_RequestUri
✅ AC02_Post_AuthorisationEndpoint_WithRequestUri_ShouldRespondWith_200OK_CdrArrangementId
✅ AC03_Post_AuthorisationEndpoint_WithRequestUri_After90Seconds_ShouldRespondWith_302Found_CallbackURI(expectedStatusCode: Redirect, expectedRedirectPath: "<MDH_INTEGRATION_TESTS_HOST>:9999/consent/callback", expectedRedirectFragment: "error=invalid_request_uri&error_description=ERR-AU"...)
✅ AC04_Post_WithCdrArrangementId_AmendingConsent_ShouldInvalidateRefreshTokenn
✅ AC04_Post_WithCdrArrangementId_ShouldRespondWith_201Created_RequestUri
✅ AC05_Post_AuthorisationEndpoint_WithRequestUri_ShouldRespondWith_200OK_CdrArrangementId
✅ AC06_Post_WithUnknownOrUnAssociatedCdrArrangementId_ShouldRespondWith_400BadRequest(cdrArrangementId: "foo", expectedStatusCode: BadRequest)
✅ AC08_Post_WithInvalidClientId_ShouldRespondWith_400BadRequest(clientId: "c6327f87-687a-4369-99a4-eaacd3bb8210", expectedStatusCode: Created)
✅ AC08_Post_WithInvalidClientId_ShouldRespondWith_400BadRequest(clientId: "foo", expectedStatusCode: BadRequest)
✅ AC09_Post_WithInvalidClientAssertionType_ShouldRespondWith_400BadRequest(clientAssertionType: "foo", expectedStatusCode: BadRequest)
✅ AC09_Post_WithInvalidClientAssertionType_ShouldRespondWith_400BadRequest(clientAssertionType: "urn:ietf:params:oauth:client-assertion-type:jwt-be"..., expectedStatusCode: Created)
✅ AC10_Revocation_WithInvalidClientAssertion_ShouldRespondWith_400BadRequest(clientAssertion: "foo", expectedStatusCode: BadRequest)
✅ AC11_Post_WithDifferentHolderOfKey_ShouldRespondWith_400BadRequest(jwtCertificateFilename: "Certificates/client-additional.pfx", jwtCertificatePassword: "#M0ckDataRecipient#", expectedStatusCode: BadRequest)
✅ AC11_Post_WithDifferentHolderOfKey_ShouldRespondWith_400BadRequest(jwtCertificateFilename: "Certificates/MDR/jwks.pfx", jwtCertificatePassword: "#M0ckDataRecipient#", expectedStatusCode: Created)

✅ AC01_Post_WithUnregistedSoftwareProduct_MandatoryOnlyFields_ShouldRespondWith_201Created_CreatedProfile(ssaVersion: "3")
✅ AC01_Post_WithUnregistedSoftwareProduct_ShouldRespondWith_201Created_CreatedProfile(ssaVersion: "3")
✅ AC02_Post_WithRegistedSoftwareProduct_ShouldRespondWith_400BadRequest_DuplicateErrorResponse
✅ AC03_Post_WithValidButUnapprovedSSA_400BadRequest_UnapprovedSSAErrorResponse(signedWithRegisterCertificate: False, expectedStatusCode: BadRequest)
✅ AC03_Post_WithValidButUnapprovedSSA_400BadRequest_UnapprovedSSAErrorResponse(signedWithRegisterCertificate: True, expectedStatusCode: Created)
✅ AC06_Post_WithInvalidSSAPayload_400BadRequest_InvalidSSAPayloadResponse
✅ AC07_Post_WithInvalidMetadata_400BadRequest_InvalidMetadataResponse

✅ AC11_Put_WithValidSoftwareProduct_ShouldRespondWith_200OK_UpdatedProfile
✅ AC12_Put_WithInvalidSoftwareProduct_ShouldRespondWith_400BadRequest_InvalidErrorResponse
✅ AC13_Put_WithExpiredAccessToken_ShouldRespondWith_401UnAuthorized_ExpiredAccessTokenErrorResponse
✅ AC14_Put_WithInvalidOrUnregisteredClientID_ShouldRespondWith_401Unauthorised_InvalidErrorResponse(invalidClientId: "f00f00f0-f00f-f00f-f00f-f00f00f00f00")

✅ AC08_Get_WithValidClientId_ShouldRespondWith_200OK_Profile
✅ AC09_Get_WithExpiredAccessToken_ShouldRespondWith_401Unauthorized_ExpiredAccessTokenErrorResponse
✅ AC10_Get_WithInvalidClientId_ShouldRespondWith_401Unauthorized_WWWAuthenticateHeader(softwareProductId: "c6327f87-687a-4369-99a4-eaacd3bb8210", expectedStatusCode: OK)
✅ AC10_Get_WithInvalidClientId_ShouldRespondWith_401Unauthorized_WWWAuthenticateHeader(softwareProductId: "f00f00f0-f00f-f00f-f00f-f00f00f00f00", expectedStatusCode: Unauthorized)

✅ AC15_Delete_WithValidClientId_ShouldRespondWith_204NoContent_ProfileIsDeleted
✅ AC17_Delete_WithExpiredAccessToken_ShouldRespondWith_401Unauthorized_ExpiredAccessTokenErrorResponse

✅ AC01_Post_WithArrangementId_ShouldRespondWith_204NoContent_ArrangementRevoked
✅ AC02_GetAccounts_WithRevokedAccessToken_ShouldRespondWith_401Unauthorised(revokeArrangement: False, expectedStatusCode: OK)
✅ AC02_GetAccounts_WithRevokedAccessToken_ShouldRespondWith_401Unauthorised(revokeArrangement: True, expectedStatusCode: BadRequest)
✅ AC03_GetAccessToken_WithRevokedRefreshToken_ShouldRespondWith_401Unauthorised(revokeArrangement: False, expectedStatusCode: OK)
✅ AC03_GetAccessToken_WithRevokedRefreshToken_ShouldRespondWith_401Unauthorised(revokeArrangement: True, expectedStatusCode: BadRequest)
✅ AC04_POST_WithInvalidArrangementID_ShouldRespondWith_422UnprocessableEntity
✅ AC05_POST_WithNonAssociatedArrangementID_ShouldRespondWith_422UnprocessableEntity
✅ AC07_POST_WithInvalidClientId_ShouldRespondWith_400BadRequest
✅ AC08a_POST_WithInvalidClientAssertionType_ShouldRespondWith_400BadRequest
✅ AC08b_POST_WithInvalidClientAssertion_ShouldRespondWith_400BadRequest
✅ AC09_POST_WithDifferentHolderOfKey_ShouldRespondWith_400BadRequest(jwtCertificateFilename: "Certificates/client-additional.pfx", jwtCertificatePassword: "#M0ckDataRecipient#", expectedStatusCode: BadRequest)
✅ AC09_POST_WithDifferentHolderOfKey_ShouldRespondWith_400BadRequest(jwtCertificateFilename: "Certificates/MDR/jwks.pfx", jwtCertificatePassword: "#M0ckDataRecipient#", expectedStatusCode: NoContent)

✅ AC01_Post_WithAccessToken_ShouldRespondWith_200OK
✅ AC02_CallResourceAPI_WithRevokedAccessToken_ShouldRespondWith_401Unauthorised(revoke: False, expectedResourceAPIStatusCode: OK)
✅ AC02_CallResourceAPI_WithRevokedAccessToken_ShouldRespondWith_401Unauthorised(revoke: True, expectedResourceAPIStatusCode: BadRequest)
✅ AC03_Post_WithRefreshToken_ShouldRespondWith_200OK
✅ AC04_CallTokenAPI_WithRevokedRefreshToken_ShouldRespondWith_400BadRequest(revoke: False, expectedStatusCode: OK)
✅ AC04_CallTokenAPI_WithRevokedRefreshToken_ShouldRespondWith_400BadRequest(revoke: True, expectedStatusCode: BadRequest)
✅ AC05_Post_WithInvalidAccessToken_ShouldRespondWith_200OK(token: "foo", expectedStatusCode: OK)
✅ AC06_Post_WithInvalidRefreshToken_ShouldRespondWith_200OK(token: "foo", expectedStatusCode: OK)
✅ AC07_Post_WithInvalidAccessTokenTypeHint_ShouldRespondWith_200OK(tokenTypeHint: "foo", expectedStatusCode: OK)
✅ AC08_Post_WithInvalidRefreshTokenTypeHint_ShouldRespondWith_200OK(tokenTypeHint: "foo", expectedStatusCode: OK)
✅ AC09_Post_AccessTokenWithDifferentHolderOfKey_ShouldRespondWith_200OK(jwtCertificateFilename: "Certificates/client-additional.pfx", jwtCertificatePassword: "#M0ckDataRecipient#", expectedStatusCode: OK)
✅ AC10_Post_RefreshTokenWithDifferentHolderOfKey_ShouldRespondWith_200OK(jwtCertificateFilename: "Certificates/client-additional.pfx", jwtCertificatePassword: "#M0ckDataRecipient#", expectedStatusCode: OK)
✅ AC12_Post_AccessTokenWithInvalidClientId_ShouldRespondWith_400BadRequest
✅ AC13_Post_AccessTokenWithInvalidClientAssertionType_ShouldRespondWith_400BadRequest
✅ AC14_Post_AccessTokenWithInvalidClientAssertion_ShouldRespondWith_401Unauthorised
✅ AC15_Post_AccessTokenWithClientAssertionSignedWithInvalidCert_ShouldRespondWith_401Unauthorised