From aa1a6c76b1775694bfff0ae3adaac1eb489d3234 Mon Sep 17 00:00:00 2001 From: beltram Date: Fri, 10 Mar 2023 14:02:25 +0100 Subject: [PATCH] feat: support qualified client id from wire clients with : as delimiter --- acme/src/identifier.rs | 2 +- acme/src/order.rs | 17 +- cli/src/access_generate.rs | 2 +- cli/src/access_verify.rs | 2 +- e2e-identity/README.md | 646 +++++++++--------- e2e-identity/src/lib.rs | 8 +- e2e-identity/tests/api.rs | 8 +- e2e-identity/tests/utils/cfg.rs | 2 +- e2e-identity/tests/utils/fmk.rs | 6 +- .../tests/utils/wire_server/server_api.rs | 2 +- jwt/src/access/generate.rs | 6 +- jwt/src/access/mod.rs | 2 +- jwt/src/dpop/generate.rs | 2 +- jwt/src/dpop/mod.rs | 2 +- jwt/src/jwt/verify.rs | 2 +- jwt/src/model/client_id.rs | 241 +++++-- jwt/src/test_utils/access.rs | 2 +- jwt/src/test_utils/dpop.rs | 2 +- 18 files changed, 527 insertions(+), 427 deletions(-) diff --git a/acme/src/identifier.rs b/acme/src/identifier.rs index 9c230f2a..7e42a275 100644 --- a/acme/src/identifier.rs +++ b/acme/src/identifier.rs @@ -10,7 +10,7 @@ pub enum AcmeIdentifier { impl AcmeIdentifier { pub fn try_new(display_name: String, domain: String, client_id: ClientId, handle: String) -> RustyAcmeResult { - let client_id = client_id.to_subject(); + let client_id = client_id.to_uri(); let identifier = WireIdentifier { display_name, domain, diff --git a/acme/src/order.rs b/acme/src/order.rs index 9bdf9319..62c3819f 100644 --- a/acme/src/order.rs +++ b/acme/src/order.rs @@ -1,15 +1,16 @@ -use crate::prelude::*; use rusty_jwt_tools::prelude::*; +use crate::prelude::*; + // Order creation impl RustyAcme { /// create a new order /// see [RFC 8555 Section 7.4](https://www.rfc-editor.org/rfc/rfc8555.html#section-7.4). #[allow(clippy::too_many_arguments)] pub fn new_order_request( - display_name: String, + display_name: &str, client_id: ClientId, - handle: String, + handle: &str, expiry: core::time::Duration, directory: &AcmeDirectory, account: &AcmeAccount, @@ -21,7 +22,12 @@ impl RustyAcme { let acct_url = account.acct_url()?; let domain = client_id.domain.clone(); - let identifiers = vec![AcmeIdentifier::try_new(display_name, domain, client_id, handle)?]; + let identifiers = vec![AcmeIdentifier::try_new( + display_name.to_string(), + domain, + client_id, + handle.to_string(), + )?]; let not_before = time::OffsetDateTime::now_utc(); let not_after = not_before + expiry; let payload = AcmeOrderRequest { @@ -231,10 +237,11 @@ pub enum AcmeOrderStatus { #[cfg(test)] mod tests { - use super::*; use serde_json::json; use wasm_bindgen_test::*; + use super::*; + wasm_bindgen_test_configure!(run_in_browser); mod json { diff --git a/cli/src/access_generate.rs b/cli/src/access_generate.rs index 68bbc57a..3b57d80c 100644 --- a/cli/src/access_generate.rs +++ b/cli/src/access_generate.rs @@ -57,7 +57,7 @@ impl AccessGenerate { extra_claims: None, }; let nonce: BackendNonce = self.nonce.into(); - let client_id: ClientId = self.client_id.as_str().try_into().expect("Invalid 'client_id'"); + let client_id = ClientId::try_from_uri(&self.client_id).expect("Invalid 'client_id'"); let expiry = core::time::Duration::from_secs(self.expiry); let client_dpop_token = diff --git a/cli/src/access_verify.rs b/cli/src/access_verify.rs index 07392d4f..02bdb770 100644 --- a/cli/src/access_verify.rs +++ b/cli/src/access_verify.rs @@ -46,7 +46,7 @@ impl AccessVerify { .trim() .to_string(); - let client_id: ClientId = self.client_id.as_str().try_into().expect("Invalid 'client_id'"); + let client_id = ClientId::try_from_uri(&self.client_id).expect("Invalid 'client_id'"); let challenge: AcmeNonce = self.challenge.into(); let (_, backend_pk) = parse_public_key_pem(read_file(Some(&self.key)).unwrap()); diff --git a/e2e-identity/README.md b/e2e-identity/README.md index b1401482..d22ff8cb 100644 --- a/e2e-identity/README.md +++ b/e2e-identity/README.md @@ -11,14 +11,14 @@ sequenceDiagram acme-server->>-wire-client: 201 wire-client->>+acme-server: 🔒 POST /acme/wire/new-order acme-server->>-wire-client: 201 - wire-client->>+acme-server: 🔒 POST /acme/wire/authz/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9 + wire-client->>+acme-server: 🔒 POST /acme/wire/authz/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD acme-server->>-wire-client: 200 wire-client->>+wire-server: GET /clients/token/nonce wire-server->>-wire-client: 200 wire-client->>wire-client: create DPoP token - wire-client->>+wire-server: POST /clients/1020340586340102579/access-token + wire-client->>+wire-server: POST /clients/5512380144665194603/access-token wire-server->>-wire-client: 200 - wire-client->>+acme-server: 🔒 POST /acme/wire/challenge/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9/0H2Qr2LfBEj0SCIycIYtWJLyTcY5U4AW + wire-client->>+acme-server: 🔒 POST /acme/wire/challenge/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD/HhFufnzfL9abzJzpUNeblQGthEcrac9J acme-server->>-wire-client: 200 wire-client->>+wire-server: GET /login wire-server->>wire-server: verifier & challenge codes @@ -32,19 +32,19 @@ sequenceDiagram authorization-server->>authorization-server: verify verifier & challenge codes authorization-server->>-wire-server: 200 wire-server->>-wire-client: 200 - wire-client->>+acme-server: 🔒 POST /acme/wire/challenge/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9/tlKZbv1pdNIo8WaWQq2GRtbov3TXPDui + wire-client->>+acme-server: 🔒 POST /acme/wire/challenge/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD/wimvHnzRMq5quCx5oGME98k21k0HEtyI acme-server->>-wire-client: 200 - wire-client->>+acme-server: 🔒 POST /acme/wire/order/GABvJPMf7CqbdUqnJTyX8T2EbIzfDCtW + wire-client->>+acme-server: 🔒 POST /acme/wire/order/yuiEjO5FoYP7Z2rOTPDDNEOzLuPMt8R1 acme-server->>-wire-client: 200 - wire-client->>+acme-server: 🔒 POST /acme/wire/order/GABvJPMf7CqbdUqnJTyX8T2EbIzfDCtW/finalize + wire-client->>+acme-server: 🔒 POST /acme/wire/order/yuiEjO5FoYP7Z2rOTPDDNEOzLuPMt8R1/finalize acme-server->>-wire-client: 200 - wire-client->>+acme-server: 🔒 POST /acme/wire/certificate/HxDzSMtcRmY1avHP4iT86D0qog6Vj0tA + wire-client->>+acme-server: 🔒 POST /acme/wire/certificate/C6BUkXe2ZQbPzbWJGQWN0lhwQlhjf31Y acme-server->>-wire-client: 200 ``` ### Initial setup with ACME server #### 1. fetch acme directory for hyperlinks ```http request -GET https://stepca:55834/acme/wire/directory +GET https://stepca:56174/acme/wire/directory /acme/{acme-provisioner}/directory ``` #### 2. get the ACME directory with links for newNonce, newAccount & newOrder @@ -54,37 +54,37 @@ content-type: application/json ``` ```json { - "newNonce": "https://stepca:55834/acme/wire/new-nonce", - "newAccount": "https://stepca:55834/acme/wire/new-account", - "newOrder": "https://stepca:55834/acme/wire/new-order" + "newNonce": "https://stepca:56174/acme/wire/new-nonce", + "newAccount": "https://stepca:56174/acme/wire/new-account", + "newOrder": "https://stepca:56174/acme/wire/new-order" } ``` #### 3. fetch a new nonce for the very first request ```http request -HEAD https://stepca:55834/acme/wire/new-nonce +HEAD https://stepca:56174/acme/wire/new-nonce /acme/{acme-provisioner}/new-nonce ``` #### 4. get a nonce for creating an account ```http request 200 cache-control: no-store -link: ;rel="index" -replay-nonce: ck0wNFV6d0pjb0xYR1NyYVdzWXNwU3IyQVVLNWx4MGw +link: ;rel="index" +replay-nonce: Wm0wNHl5VmJJcm1RRTA3UHJvUzNYT29kNjFoa0FnUTM ``` ```text -ck0wNFV6d0pjb0xYR1NyYVdzWXNwU3IyQVVLNWx4MGw +Wm0wNHl5VmJJcm1RRTA3UHJvUzNYT29kNjFoa0FnUTM ``` #### 5. create a new account ```http request -POST https://stepca:55834/acme/wire/new-account +POST https://stepca:56174/acme/wire/new-account /acme/{acme-provisioner}/new-account content-type: application/jose+json ``` ```json { - "protected": "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCIsImp3ayI6eyJrdHkiOiJPS1AiLCJjcnYiOiJFZDI1NTE5IiwieCI6Inl4eUtWVXVBbnpiOWZ1WDBKb3VWWXhGbVRLdHJyVHNWM0ZxQWRWQUhjT2MifSwibm9uY2UiOiJjazB3TkZWNmQwcGpiMHhZUjFOeVlWZHpXWE53VTNJeVFWVkxOV3g0TUd3IiwidXJsIjoiaHR0cHM6Ly9zdGVwY2E6NTU4MzQvYWNtZS93aXJlL25ldy1hY2NvdW50In0", + "protected": "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCIsImp3ayI6eyJrdHkiOiJPS1AiLCJjcnYiOiJFZDI1NTE5IiwieCI6IjduUEVUOTdGQUxWQWJMTGwyQWRSdlNsMW56c0YxTklDR3h4LUFEN3E0Q3MifSwibm9uY2UiOiJXbTB3TkhsNVZtSkpjbTFSUlRBM1VISnZVek5ZVDI5a05qRm9hMEZuVVRNIiwidXJsIjoiaHR0cHM6Ly9zdGVwY2E6NTYxNzQvYWNtZS93aXJlL25ldy1hY2NvdW50In0", "payload": "eyJ0ZXJtc09mU2VydmljZUFncmVlZCI6dHJ1ZSwiY29udGFjdCI6WyJ1bmtub3duQGV4YW1wbGUuY29tIl0sIm9ubHlSZXR1cm5FeGlzdGluZyI6ZmFsc2V9", - "signature": "mgkvWh5OPNMS-VDROCnQOkRpMeT4bCTGtADuNv9SooXl1vRgRFnuwFfj9CB3iM_7xW_-N1OAt5LQ8h93QQCCAA" + "signature": "ZAs8TC6UkPFjmEIAcICeKpQhIKgIzx34Mr8HuNXkwHyCSwqC8KgnMgsUAU9n-1e1WG2etJbZzNcbn5yyizKEDg" } ``` ```json @@ -95,10 +95,10 @@ content-type: application/jose+json "jwk": { "kty": "OKP", "crv": "Ed25519", - "x": "yxyKVUuAnzb9fuX0JouVYxFmTKtrrTsV3FqAdVAHcOc" + "x": "7nPET97FALVAbLLl2AdRvSl1nzsF1NICGxx-AD7q4Cs" }, - "nonce": "ck0wNFV6d0pjb0xYR1NyYVdzWXNwU3IyQVVLNWx4MGw", - "url": "https://stepca:55834/acme/wire/new-account" + "nonce": "Wm0wNHl5VmJJcm1RRTA3UHJvUzNYT29kNjFoa0FnUTM", + "url": "https://stepca:56174/acme/wire/new-account" }, "payload": { "termsOfServiceAgreed": true, @@ -114,48 +114,48 @@ content-type: application/jose+json 201 cache-control: no-store content-type: application/json -link: ;rel="index" -location: https://stepca:55834/acme/wire/account/M9tVubnIBqarkKabBABx7PMSB8pKNCau -replay-nonce: TE80R1g0NjQzckhYbmwyamlkTDJIVXNtbzJ1NXNhZ1g +link: ;rel="index" +location: https://stepca:56174/acme/wire/account/1pajXcmM0Q2pGlvNuYMVDfArKKXE4R8k +replay-nonce: YzVnZUh3Q2Q2MnJsbzljQnZIV084TGpIeWJ0V0hCVks ``` ```json { "status": "valid", - "orders": "https://stepca:55834/acme/wire/account/M9tVubnIBqarkKabBABx7PMSB8pKNCau/orders" + "orders": "https://stepca:56174/acme/wire/account/1pajXcmM0Q2pGlvNuYMVDfArKKXE4R8k/orders" } ``` ### Request a certificate with relevant identifiers #### 7. create a new order ```http request -POST https://stepca:55834/acme/wire/new-order +POST https://stepca:56174/acme/wire/new-order /acme/{acme-provisioner}/new-order content-type: application/jose+json ``` ```json { - "protected": "eyJhbGciOiJFZERTQSIsImtpZCI6Imh0dHBzOi8vc3RlcGNhOjU1ODM0L2FjbWUvd2lyZS9hY2NvdW50L005dFZ1Ym5JQnFhcmtLYWJCQUJ4N1BNU0I4cEtOQ2F1IiwidHlwIjoiSldUIiwibm9uY2UiOiJURTgwUjFnME5qUXpja2hZYm13eWFtbGtUREpJVlhOdGJ6SjFOWE5oWjFnIiwidXJsIjoiaHR0cHM6Ly9zdGVwY2E6NTU4MzQvYWNtZS93aXJlL25ldy1vcmRlciJ9", - "payload": "eyJpZGVudGlmaWVycyI6W3sidHlwZSI6IndpcmVhcHAtaWQiLCJ2YWx1ZSI6IntcIm5hbWVcIjpcIlNtaXRoLCBBbGljZSBNIChRQSlcIixcImRvbWFpblwiOlwid2lyZS5jb21cIixcImNsaWVudC1pZFwiOlwiaW06d2lyZWFwcD1OR1ZoTXpCak5ESXdaVEUyTkdSalpXRXhZekZrTXpNd01XWXhNV1l6TUdVL2UyOGZhNWI3NmI3MzFiM0B3aXJlLmNvbVwiLFwiaGFuZGxlXCI6XCJpbTp3aXJlYXBwPWFsaWNlLnNtaXRoLnFhQHdpcmUuY29tXCJ9In1dLCJub3RCZWZvcmUiOiIyMDIzLTAzLTA5VDE3OjQ1OjMxLjY5NjEwNFoiLCJub3RBZnRlciI6IjIwMjMtMDMtMDlUMTg6NDU6MzEuNjk2MTA0WiJ9", - "signature": "EzwJT--UASnjlnrzYwARK4y7rgdg4io_Z6cbPZMVZJPk983tKBzwJAB7DZSoAXa2eGK0Ze7RDU2aFoKSzSNfBA" + "protected": "eyJhbGciOiJFZERTQSIsImtpZCI6Imh0dHBzOi8vc3RlcGNhOjU2MTc0L2FjbWUvd2lyZS9hY2NvdW50LzFwYWpYY21NMFEycEdsdk51WU1WRGZBcktLWEU0UjhrIiwidHlwIjoiSldUIiwibm9uY2UiOiJZelZuWlVoM1EyUTJNbkpzYnpsalFuWklWMDg0VEdwSWVXSjBWMGhDVmtzIiwidXJsIjoiaHR0cHM6Ly9zdGVwY2E6NTYxNzQvYWNtZS93aXJlL25ldy1vcmRlciJ9", + "payload": "eyJpZGVudGlmaWVycyI6W3sidHlwZSI6IndpcmVhcHAtaWQiLCJ2YWx1ZSI6IntcIm5hbWVcIjpcIlNtaXRoLCBBbGljZSBNIChRQSlcIixcImRvbWFpblwiOlwid2lyZS5jb21cIixcImNsaWVudC1pZFwiOlwiaW06d2lyZWFwcD1OVFkxT0RJeFpETTJOVEUyTkRJMk9HRmtPV1EwTnpWak0yVTFNR1kzT1dFLzRjN2ZlODg5MjVhZjcwNmJAd2lyZS5jb21cIixcImhhbmRsZVwiOlwiaW06d2lyZWFwcD1hbGljZS5zbWl0aC5xYUB3aXJlLmNvbVwifSJ9XSwibm90QmVmb3JlIjoiMjAyMy0wMy0xMFQxNDoyNTozMC44MTg0MTZaIiwibm90QWZ0ZXIiOiIyMDIzLTAzLTEwVDE1OjI1OjMwLjgxODQxNloifQ", + "signature": "DzZKjTKRp3k360gArQWT-tmuTZ2kgzEyFY1UMNABvVh48y65YOxCAObFPrHazfVVouruc7B-dfpNkU_OsvNeDg" } ``` ```json { "protected": { "alg": "EdDSA", - "kid": "https://stepca:55834/acme/wire/account/M9tVubnIBqarkKabBABx7PMSB8pKNCau", + "kid": "https://stepca:56174/acme/wire/account/1pajXcmM0Q2pGlvNuYMVDfArKKXE4R8k", "typ": "JWT", - "nonce": "TE80R1g0NjQzckhYbmwyamlkTDJIVXNtbzJ1NXNhZ1g", - "url": "https://stepca:55834/acme/wire/new-order" + "nonce": "YzVnZUh3Q2Q2MnJsbzljQnZIV084TGpIeWJ0V0hCVks", + "url": "https://stepca:56174/acme/wire/new-order" }, "payload": { "identifiers": [ { "type": "wireapp-id", - "value": "{\"name\":\"Smith, Alice M (QA)\",\"domain\":\"wire.com\",\"client-id\":\"im:wireapp=NGVhMzBjNDIwZTE2NGRjZWExYzFkMzMwMWYxMWYzMGU/e28fa5b76b731b3@wire.com\",\"handle\":\"im:wireapp=alice.smith.qa@wire.com\"}" + "value": "{\"name\":\"Smith, Alice M (QA)\",\"domain\":\"wire.com\",\"client-id\":\"im:wireapp=NTY1ODIxZDM2NTE2NDI2OGFkOWQ0NzVjM2U1MGY3OWE/4c7fe88925af706b@wire.com\",\"handle\":\"im:wireapp=alice.smith.qa@wire.com\"}" } ], - "notBefore": "2023-03-09T17:45:31.696104Z", - "notAfter": "2023-03-09T18:45:31.696104Z" + "notBefore": "2023-03-10T14:25:30.818416Z", + "notAfter": "2023-03-10T15:25:30.818416Z" } } ``` @@ -164,50 +164,50 @@ content-type: application/jose+json 201 cache-control: no-store content-type: application/json -link: ;rel="index" -location: https://stepca:55834/acme/wire/order/GABvJPMf7CqbdUqnJTyX8T2EbIzfDCtW -replay-nonce: dEVMSGtzU1c1V1FTTHFtaUxQMnU5bHZSeVFqUlNwT24 +link: ;rel="index" +location: https://stepca:56174/acme/wire/order/yuiEjO5FoYP7Z2rOTPDDNEOzLuPMt8R1 +replay-nonce: MjFuSEdsb2VXMVozY3Y2djFFMW9VcjlldlN4NXdsZzY ``` ```json { "status": "pending", - "finalize": "https://stepca:55834/acme/wire/order/GABvJPMf7CqbdUqnJTyX8T2EbIzfDCtW/finalize", + "finalize": "https://stepca:56174/acme/wire/order/yuiEjO5FoYP7Z2rOTPDDNEOzLuPMt8R1/finalize", "identifiers": [ { "type": "wireapp-id", - "value": "{\"name\":\"Smith, Alice M (QA)\",\"domain\":\"wire.com\",\"client-id\":\"im:wireapp=NGVhMzBjNDIwZTE2NGRjZWExYzFkMzMwMWYxMWYzMGU/e28fa5b76b731b3@wire.com\",\"handle\":\"im:wireapp=alice.smith.qa@wire.com\"}" + "value": "{\"name\":\"Smith, Alice M (QA)\",\"domain\":\"wire.com\",\"client-id\":\"im:wireapp=NTY1ODIxZDM2NTE2NDI2OGFkOWQ0NzVjM2U1MGY3OWE/4c7fe88925af706b@wire.com\",\"handle\":\"im:wireapp=alice.smith.qa@wire.com\"}" } ], "authorizations": [ - "https://stepca:55834/acme/wire/authz/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9" + "https://stepca:56174/acme/wire/authz/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD" ], - "expires": "2023-03-10T17:45:31Z", - "notBefore": "2023-03-09T17:45:31.696104Z", - "notAfter": "2023-03-09T18:45:31.696104Z" + "expires": "2023-03-11T14:25:30Z", + "notBefore": "2023-03-10T14:25:30.818416Z", + "notAfter": "2023-03-10T15:25:30.818416Z" } ``` ### Display-name and handle already authorized #### 9. fetch challenge ```http request -POST https://stepca:55834/acme/wire/authz/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9 +POST https://stepca:56174/acme/wire/authz/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD /acme/{acme-provisioner}/authz/{authz-id} content-type: application/jose+json ``` ```json { - "protected": "eyJhbGciOiJFZERTQSIsImtpZCI6Imh0dHBzOi8vc3RlcGNhOjU1ODM0L2FjbWUvd2lyZS9hY2NvdW50L005dFZ1Ym5JQnFhcmtLYWJCQUJ4N1BNU0I4cEtOQ2F1IiwidHlwIjoiSldUIiwibm9uY2UiOiJkRVZNU0d0elUxYzFWMUZUVEhGdGFVeFFNblU1YkhaU2VWRnFVbE53VDI0IiwidXJsIjoiaHR0cHM6Ly9zdGVwY2E6NTU4MzQvYWNtZS93aXJlL2F1dGh6L043a0lvZnlsZ0w1M2VkaWN6UnF5UTBZRkdaM0hrb1g5In0", + "protected": "eyJhbGciOiJFZERTQSIsImtpZCI6Imh0dHBzOi8vc3RlcGNhOjU2MTc0L2FjbWUvd2lyZS9hY2NvdW50LzFwYWpYY21NMFEycEdsdk51WU1WRGZBcktLWEU0UjhrIiwidHlwIjoiSldUIiwibm9uY2UiOiJNakZ1U0Vkc2IyVlhNVm96WTNZMmRqRkZNVzlWY2psbGRsTjROWGRzWnpZIiwidXJsIjoiaHR0cHM6Ly9zdGVwY2E6NTYxNzQvYWNtZS93aXJlL2F1dGh6L3Y0eGJESk5Oa29qbmlNOFBpS0w5QnpwR3RWWk10MWdEIn0", "payload": "", - "signature": "ZrKWpYEuChEFKO8TokJmPncdPnEJ5mi7aV2g8G0i3EvQpcokyXnATx8AvzMORX_JC5UEq1o_QKviYZFbuOdrCQ" + "signature": "SbAQFaeDS6oBtC7Pt_3a_V-OAPlHXdQVKXJpwtxf40uQ0f4Ci6QA9QKFonzF-9LNmJ5jCEdQyZApPIw9yHJhDw" } ``` ```json { "protected": { "alg": "EdDSA", - "kid": "https://stepca:55834/acme/wire/account/M9tVubnIBqarkKabBABx7PMSB8pKNCau", + "kid": "https://stepca:56174/acme/wire/account/1pajXcmM0Q2pGlvNuYMVDfArKKXE4R8k", "typ": "JWT", - "nonce": "dEVMSGtzU1c1V1FTTHFtaUxQMnU5bHZSeVFqUlNwT24", - "url": "https://stepca:55834/acme/wire/authz/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9" + "nonce": "MjFuSEdsb2VXMVozY3Y2djFFMW9VcjlldlN4NXdsZzY", + "url": "https://stepca:56174/acme/wire/authz/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD" }, "payload": {} } @@ -217,38 +217,38 @@ content-type: application/jose+json 200 cache-control: no-store content-type: application/json -link: ;rel="index" -location: https://stepca:55834/acme/wire/authz/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9 -replay-nonce: NU5hMlFtSmd1T0t2M2lmM2htQjJsOVBBSnBqQ2l6eUk +link: ;rel="index" +location: https://stepca:56174/acme/wire/authz/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD +replay-nonce: Y3lHbTVwT2VHY04zdTZEbXdTYWhQQVI2b0tuT0Y0Wlk ``` ```json { "status": "pending", - "expires": "2023-03-10T17:45:31Z", + "expires": "2023-03-11T14:25:30Z", "challenges": [ { "type": "wire-oidc-01", - "url": "https://stepca:55834/acme/wire/challenge/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9/tlKZbv1pdNIo8WaWQq2GRtbov3TXPDui", + "url": "https://stepca:56174/acme/wire/challenge/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD/wimvHnzRMq5quCx5oGME98k21k0HEtyI", "status": "pending", - "token": "BZSI5HrCT40ZAZ2JbxE1lwJXxwPWMTh9" + "token": "KiiBV21e0RqtqqgjVtKWSRJKGjQZJvkq" }, { "type": "wire-dpop-01", - "url": "https://stepca:55834/acme/wire/challenge/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9/0H2Qr2LfBEj0SCIycIYtWJLyTcY5U4AW", + "url": "https://stepca:56174/acme/wire/challenge/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD/HhFufnzfL9abzJzpUNeblQGthEcrac9J", "status": "pending", - "token": "BZSI5HrCT40ZAZ2JbxE1lwJXxwPWMTh9" + "token": "KiiBV21e0RqtqqgjVtKWSRJKGjQZJvkq" } ], "identifier": { "type": "wireapp-id", - "value": "{\"name\":\"Smith, Alice M (QA)\",\"domain\":\"wire.com\",\"client-id\":\"im:wireapp=NGVhMzBjNDIwZTE2NGRjZWExYzFkMzMwMWYxMWYzMGU/e28fa5b76b731b3@wire.com\",\"handle\":\"im:wireapp=alice.smith.qa@wire.com\"}" + "value": "{\"name\":\"Smith, Alice M (QA)\",\"domain\":\"wire.com\",\"client-id\":\"im:wireapp=NTY1ODIxZDM2NTE2NDI2OGFkOWQ0NzVjM2U1MGY3OWE/4c7fe88925af706b@wire.com\",\"handle\":\"im:wireapp=alice.smith.qa@wire.com\"}" } } ``` ### Client fetches JWT DPoP access token (with wire-server) #### 11. fetch a nonce from wire-server ```http request -GET http://wire.com:23659/clients/token/nonce +GET http://wire.com:22059/clients/token/nonce ``` #### 12. get wire-server nonce ```http request @@ -256,7 +256,7 @@ GET http://wire.com:23659/clients/token/nonce ``` ```text -VkVFZ1B0Slp2eFhFWU4wVXZuMFBtWkxwTTlaY0VLOG0 +S01MZm9FSzkyWlZxMEdOazMxMnVZQ25IQ25JbVpiUTA ``` #### 13. create client DPoP token @@ -264,21 +264,21 @@ VkVFZ1B0Slp2eFhFWU4wVXZuMFBtWkxwTTlaY0VLOG0
Dpop token -See it on [jwt.io](https://jwt.io/#id_token=eyJhbGciOiJFZERTQSIsInR5cCI6ImRwb3Arand0IiwiandrIjp7Imt0eSI6Ik9LUCIsImNydiI6IkVkMjU1MTkiLCJ4IjoieXh5S1ZVdUFuemI5ZnVYMEpvdVZZeEZtVEt0cnJUc1YzRnFBZFZBSGNPYyJ9fQ.eyJpYXQiOjE2NzgzODM5MzEsImV4cCI6MTY3ODQ3MDMzMSwibmJmIjoxNjc4MzgzOTMxLCJzdWIiOiJpbTp3aXJlYXBwPU5HVmhNekJqTkRJd1pURTJOR1JqWldFeFl6RmtNek13TVdZeE1XWXpNR1UvZTI4ZmE1Yjc2YjczMWIzQHdpcmUuY29tIiwianRpIjoiYTA3OTdiZGYtN2I0Ny00OWE1LWJlYTUtNWMzMGYzOTkzMzA3Iiwibm9uY2UiOiJWa1ZGWjFCMFNscDJlRmhGV1U0d1ZYWnVNRkJ0V2t4d1RUbGFZMFZMT0cwIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHA6Ly93aXJlLmNvbToyMzY1OS8iLCJjaGFsIjoiQlpTSTVIckNUNDBaQVoySmJ4RTFsd0pYeHdQV01UaDkifQ.sGsPzh9tlbr6CqYIMWc--RncO9e5dyDA4l8Xt_CMdcyT8DXVHILTNEsUEP28o1BwcP53JZWcmSVihbd8ChQsCw) +See it on [jwt.io](https://jwt.io/#id_token=eyJhbGciOiJFZERTQSIsInR5cCI6ImRwb3Arand0IiwiandrIjp7Imt0eSI6Ik9LUCIsImNydiI6IkVkMjU1MTkiLCJ4IjoiN25QRVQ5N0ZBTFZBYkxMbDJBZFJ2U2wxbnpzRjFOSUNHeHgtQUQ3cTRDcyJ9fQ.eyJpYXQiOjE2Nzg0NTgzMzAsImV4cCI6MTY3ODU0NDczMCwibmJmIjoxNjc4NDU4MzMwLCJzdWIiOiJpbTp3aXJlYXBwPU5UWTFPREl4WkRNMk5URTJOREkyT0dGa09XUTBOelZqTTJVMU1HWTNPV0UvNGM3ZmU4ODkyNWFmNzA2YkB3aXJlLmNvbSIsImp0aSI6IjM4NWEyMDc5LTdlZDAtNDYyMS1hY2EwLWY0N2IzNTY0OGRkOCIsIm5vbmNlIjoiUzAxTVptOUZTemt5V2xaeE1FZE9hek14TW5WWlEyNUlRMjVKYlZwaVVUQSIsImh0bSI6IlBPU1QiLCJodHUiOiJodHRwOi8vd2lyZS5jb206MjIwNTkvIiwiY2hhbCI6IktpaUJWMjFlMFJxdHFxZ2pWdEtXU1JKS0dqUVpKdmtxIn0.4mMGocS8eKJM1_JFp06Fyr8gq4IP4Ho18Tv9kshKH5-fK8DYIDKYLlAQ_5E2qpgn9qDO0Ima6esSx0DKXPMBDg) Raw: ```text eyJhbGciOiJFZERTQSIsInR5cCI6ImRwb3Arand0IiwiandrIjp7Imt0eSI6Ik9L -UCIsImNydiI6IkVkMjU1MTkiLCJ4IjoieXh5S1ZVdUFuemI5ZnVYMEpvdVZZeEZt -VEt0cnJUc1YzRnFBZFZBSGNPYyJ9fQ.eyJpYXQiOjE2NzgzODM5MzEsImV4cCI6M -TY3ODQ3MDMzMSwibmJmIjoxNjc4MzgzOTMxLCJzdWIiOiJpbTp3aXJlYXBwPU5HV -mhNekJqTkRJd1pURTJOR1JqWldFeFl6RmtNek13TVdZeE1XWXpNR1UvZTI4ZmE1Y -jc2YjczMWIzQHdpcmUuY29tIiwianRpIjoiYTA3OTdiZGYtN2I0Ny00OWE1LWJlY -TUtNWMzMGYzOTkzMzA3Iiwibm9uY2UiOiJWa1ZGWjFCMFNscDJlRmhGV1U0d1ZYW -nVNRkJ0V2t4d1RUbGFZMFZMT0cwIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHA6L -y93aXJlLmNvbToyMzY1OS8iLCJjaGFsIjoiQlpTSTVIckNUNDBaQVoySmJ4RTFsd -0pYeHdQV01UaDkifQ.sGsPzh9tlbr6CqYIMWc--RncO9e5dyDA4l8Xt_CMdcyT8D -XVHILTNEsUEP28o1BwcP53JZWcmSVihbd8ChQsCw +UCIsImNydiI6IkVkMjU1MTkiLCJ4IjoiN25QRVQ5N0ZBTFZBYkxMbDJBZFJ2U2wx +bnpzRjFOSUNHeHgtQUQ3cTRDcyJ9fQ.eyJpYXQiOjE2Nzg0NTgzMzAsImV4cCI6M +TY3ODU0NDczMCwibmJmIjoxNjc4NDU4MzMwLCJzdWIiOiJpbTp3aXJlYXBwPU5UW +TFPREl4WkRNMk5URTJOREkyT0dGa09XUTBOelZqTTJVMU1HWTNPV0UvNGM3ZmU4O +DkyNWFmNzA2YkB3aXJlLmNvbSIsImp0aSI6IjM4NWEyMDc5LTdlZDAtNDYyMS1hY +2EwLWY0N2IzNTY0OGRkOCIsIm5vbmNlIjoiUzAxTVptOUZTemt5V2xaeE1FZE9he +k14TW5WWlEyNUlRMjVKYlZwaVVUQSIsImh0bSI6IlBPU1QiLCJodHUiOiJodHRwO +i8vd2lyZS5jb206MjIwNTkvIiwiY2hhbCI6IktpaUJWMjFlMFJxdHFxZ2pWdEtXU +1JKS0dqUVpKdmtxIn0.4mMGocS8eKJM1_JFp06Fyr8gq4IP4Ho18Tv9kshKH5-fK +8DYIDKYLlAQ_5E2qpgn9qDO0Ima6esSx0DKXPMBDg ``` Decoded: @@ -290,22 +290,22 @@ Decoded: "jwk": { "kty": "OKP", "crv": "Ed25519", - "x": "yxyKVUuAnzb9fuX0JouVYxFmTKtrrTsV3FqAdVAHcOc" + "x": "7nPET97FALVAbLLl2AdRvSl1nzsF1NICGxx-AD7q4Cs" } } ``` ```json { - "iat": 1678383931, - "exp": 1678470331, - "nbf": 1678383931, - "sub": "im:wireapp=NGVhMzBjNDIwZTE2NGRjZWExYzFkMzMwMWYxMWYzMGU/e28fa5b76b731b3@wire.com", - "jti": "a0797bdf-7b47-49a5-bea5-5c30f3993307", - "nonce": "VkVFZ1B0Slp2eFhFWU4wVXZuMFBtWkxwTTlaY0VLOG0", + "iat": 1678458330, + "exp": 1678544730, + "nbf": 1678458330, + "sub": "im:wireapp=NTY1ODIxZDM2NTE2NDI2OGFkOWQ0NzVjM2U1MGY3OWE/4c7fe88925af706b@wire.com", + "jti": "385a2079-7ed0-4621-aca0-f47b35648dd8", + "nonce": "S01MZm9FSzkyWlZxMEdOazMxMnVZQ25IQ25JbVpiUTA", "htm": "POST", - "htu": "http://wire.com:23659/", - "chal": "BZSI5HrCT40ZAZ2JbxE1lwJXxwPWMTh9" + "htu": "http://wire.com:22059/", + "chal": "KiiBV21e0RqtqqgjVtKWSRJKGjQZJvkq" } ``` @@ -313,10 +313,10 @@ Decoded: ✅ Signature Verified with key: ```text -----BEGIN PRIVATE KEY----- -MC4CAQAwBQYDK2VwBCIEIFY6sSWYmflcVf67iGKDA+opq44kq1EWQo/IRyI33E6v +MC4CAQAwBQYDK2VwBCIEIN+ksseZ2FFrFvVJPPz1bjP2HhpMLKDbvwfYQ21ltWRk -----END PRIVATE KEY----- -----BEGIN PUBLIC KEY----- -MCowBQYDK2VwAyEAyxyKVUuAnzb9fuX0JouVYxFmTKtrrTsV3FqAdVAHcOc= +MCowBQYDK2VwAyEA7nPET97FALVAbLLl2AdRvSl1nzsF1NICGxx+AD7q4Cs= -----END PUBLIC KEY----- ``` @@ -325,9 +325,9 @@ MCowBQYDK2VwAyEAyxyKVUuAnzb9fuX0JouVYxFmTKtrrTsV3FqAdVAHcOc= #### 14. trade client DPoP token for an access token ```http request -POST http://wire.com:23659/clients/1020340586340102579/access-token +POST http://wire.com:22059/clients/5512380144665194603/access-token /clients/{wire-client-id}/access-token -dpop: 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 +dpop: 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 ``` #### 15. get a Dpop access token from wire-server ```http request @@ -337,7 +337,7 @@ dpop: ZXlKaGJHY2lPaUpGWkVSVFFTSXNJblI1Y0NJNkltUndiM0FyYW5kMElpd2lhbmRySWpwN0ltdD ```json { "expires_in": 2082008461, - "token": "eyJhbGciOiJFZERTQSIsInR5cCI6ImF0K2p3dCIsImp3ayI6eyJrdHkiOiJPS1AiLCJjcnYiOiJFZDI1NTE5IiwieCI6InRJVlV4Q0hqSnFCOGpQdFpHSXRVQzZKNV9pVjY5U0pmWktEcVlBN2ZFZUkifX0.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.q-CdDcc_Js1YfU1g3_eqsf8E8gR6gtLSSGurHJduoDfA9a0RBMZktYikD1vQ-89X3Ot3Q1ymEDADeW3sTcI-AQ", + "token": "eyJhbGciOiJFZERTQSIsInR5cCI6ImF0K2p3dCIsImp3ayI6eyJrdHkiOiJPS1AiLCJjcnYiOiJFZDI1NTE5IiwieCI6InhYM1JCNDFpTU1FMEJ3dWtENWRHbkFoc1NnV09fdEVZSkRwejdWU2EtM2cifX0.eyJpYXQiOjE2Nzg0NTgzMzAsImV4cCI6MTY4NjIzNDMzMCwibmJmIjoxNjc4NDU4MzMwLCJpc3MiOiJodHRwOi8vd2lyZS5jb206MjIwNTkvIiwic3ViIjoiaW06d2lyZWFwcD1OVFkxT0RJeFpETTJOVEUyTkRJMk9HRmtPV1EwTnpWak0yVTFNR1kzT1dFLzRjN2ZlODg5MjVhZjcwNmJAd2lyZS5jb20iLCJhdWQiOiJodHRwOi8vd2lyZS5jb206MjIwNTkvIiwianRpIjoiMjMxOWFiODktZTVkMS00MzAxLWJlMWMtM2FiNjFhNGIwMzI3Iiwibm9uY2UiOiJTMDFNWm05RlN6a3lXbFp4TUVkT2F6TXhNblZaUTI1SVEyNUpiVnBpVVRBIiwiY2hhbCI6IktpaUJWMjFlMFJxdHFxZ2pWdEtXU1JKS0dqUVpKdmtxIiwiY25mIjp7ImtpZCI6Im9hRU9XdjVHdTBUTFRwRDVyUmxoODc2TGFrNE0yWFFhMjYzV3FHSVBkX1kifSwicHJvb2YiOiJleUpoYkdjaU9pSkZaRVJUUVNJc0luUjVjQ0k2SW1Sd2IzQXJhbmQwSWl3aWFuZHJJanA3SW10MGVTSTZJazlMVUNJc0ltTnlkaUk2SWtWa01qVTFNVGtpTENKNElqb2lOMjVRUlZRNU4wWkJURlpCWWt4TWJESkJaRkoyVTJ3eGJucHpSakZPU1VOSGVIZ3RRVVEzY1RSRGN5SjlmUS5leUpwWVhRaU9qRTJOemcwTlRnek16QXNJbVY0Y0NJNk1UWTNPRFUwTkRjek1Dd2libUptSWpveE5qYzRORFU0TXpNd0xDSnpkV0lpT2lKcGJUcDNhWEpsWVhCd1BVNVVXVEZQUkVsNFdrUk5NazVVUlRKT1JFa3lUMGRHYTA5WFVUQk9lbFpxVFRKVk1VMUhXVE5QVjBVdk5HTTNabVU0T0RreU5XRm1OekEyWWtCM2FYSmxMbU52YlNJc0ltcDBhU0k2SWpNNE5XRXlNRGM1TFRkbFpEQXRORFl5TVMxaFkyRXdMV1kwTjJJek5UWTBPR1JrT0NJc0ltNXZibU5sSWpvaVV6QXhUVnB0T1VaVGVtdDVWMnhhZUUxRlpFOWhlazE0VFc1V1dsRXlOVWxSTWpWS1lsWndhVlZVUVNJc0ltaDBiU0k2SWxCUFUxUWlMQ0pvZEhVaU9pSm9kSFJ3T2k4dmQybHlaUzVqYjIwNk1qSXdOVGt2SWl3aVkyaGhiQ0k2SWt0cGFVSldNakZsTUZKeGRIRnhaMnBXZEV0WFUxSktTMGRxVVZwS2RtdHhJbjAuNG1NR29jUzhlS0pNMV9KRnAwNkZ5cjhncTRJUDRIbzE4VHY5a3NoS0g1LWZLOERZSURLWUxsQVFfNUUycXBnbjlxRE8wSW1hNmVzU3gwREtYUE1CRGciLCJjbGllbnRfaWQiOiJpbTp3aXJlYXBwPU5UWTFPREl4WkRNMk5URTJOREkyT0dGa09XUTBOelZqTTJVMU1HWTNPV0UvNGM3ZmU4ODkyNWFmNzA2YkB3aXJlLmNvbSIsImFwaV92ZXJzaW9uIjozLCJzY29wZSI6IndpcmVfY2xpZW50X2lkIn0.UPaQcsPNwaxpGS_eOt-NMOjlUkNiL05Lshr5NGgXmmksQoYsgq5UX6TQG6UPHNrv78b1jfIfxcLb0U37BaRACA", "type": "DPoP" } ``` @@ -345,40 +345,40 @@ dpop: ZXlKaGJHY2lPaUpGWkVSVFFTSXNJblI1Y0NJNkltUndiM0FyYW5kMElpd2lhbmRySWpwN0ltdD
Access token -See it on [jwt.io](https://jwt.io/#id_token=eyJhbGciOiJFZERTQSIsInR5cCI6ImF0K2p3dCIsImp3ayI6eyJrdHkiOiJPS1AiLCJjcnYiOiJFZDI1NTE5IiwieCI6InRJVlV4Q0hqSnFCOGpQdFpHSXRVQzZKNV9pVjY5U0pmWktEcVlBN2ZFZUkifX0.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.q-CdDcc_Js1YfU1g3_eqsf8E8gR6gtLSSGurHJduoDfA9a0RBMZktYikD1vQ-89X3Ot3Q1ymEDADeW3sTcI-AQ) +See it on [jwt.io](https://jwt.io/#id_token=eyJhbGciOiJFZERTQSIsInR5cCI6ImF0K2p3dCIsImp3ayI6eyJrdHkiOiJPS1AiLCJjcnYiOiJFZDI1NTE5IiwieCI6InhYM1JCNDFpTU1FMEJ3dWtENWRHbkFoc1NnV09fdEVZSkRwejdWU2EtM2cifX0.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.UPaQcsPNwaxpGS_eOt-NMOjlUkNiL05Lshr5NGgXmmksQoYsgq5UX6TQG6UPHNrv78b1jfIfxcLb0U37BaRACA) Raw: ```text eyJhbGciOiJFZERTQSIsInR5cCI6ImF0K2p3dCIsImp3ayI6eyJrdHkiOiJPS1Ai -LCJjcnYiOiJFZDI1NTE5IiwieCI6InRJVlV4Q0hqSnFCOGpQdFpHSXRVQzZKNV9p -VjY5U0pmWktEcVlBN2ZFZUkifX0.eyJpYXQiOjE2NzgzODM5MzEsImV4cCI6MTY4 -NjE1OTkzMSwibmJmIjoxNjc4MzgzOTMxLCJpc3MiOiJodHRwOi8vd2lyZS5jb206 -MjM2NTkvIiwic3ViIjoiaW06d2lyZWFwcD1OR1ZoTXpCak5ESXdaVEUyTkdSalpX -RXhZekZrTXpNd01XWXhNV1l6TUdVL2UyOGZhNWI3NmI3MzFiM0B3aXJlLmNvbSIs -ImF1ZCI6Imh0dHA6Ly93aXJlLmNvbToyMzY1OS8iLCJqdGkiOiJhNGNlZjAxZS00 -YWM0LTRjY2QtOTA3MC0wZDg5NTMwMjY5ZTYiLCJub25jZSI6IlZrVkZaMUIwU2xw -MmVGaEZXVTR3VlhadU1GQnRXa3h3VFRsYVkwVkxPRzAiLCJjaGFsIjoiQlpTSTVI -ckNUNDBaQVoySmJ4RTFsd0pYeHdQV01UaDkiLCJjbmYiOnsia2lkIjoiLUx5eG1v -RnBjR01yZzJOMHdyTVBTdW9LdFdkQkdUeWxQVmU1Y3pHOGVncyJ9LCJwcm9vZiI6 -ImV5SmhiR2NpT2lKRlpFUlRRU0lzSW5SNWNDSTZJbVJ3YjNBcmFuZDBJaXdpYW5k -cklqcDdJbXQwZVNJNklrOUxVQ0lzSW1OeWRpSTZJa1ZrTWpVMU1Ua2lMQ0o0SWpv -aWVYaDVTMVpWZFVGdWVtSTVablZZTUVwdmRWWlplRVp0VkV0MGNuSlVjMVl6Um5G -QlpGWkJTR05QWXlKOWZRLmV5SnBZWFFpT2pFMk56Z3pPRE01TXpFc0ltVjRjQ0k2 -TVRZM09EUTNNRE16TVN3aWJtSm1Jam94TmpjNE16Z3pPVE14TENKemRXSWlPaUpw -YlRwM2FYSmxZWEJ3UFU1SFZtaE5la0pxVGtSSmQxcFVSVEpPUjFKcVdsZEZlRmw2 -Um10TmVrMTNUVmRaZUUxWFdYcE5SMVV2WlRJNFptRTFZamMyWWpjek1XSXpRSGRw -Y21VdVkyOXRJaXdpYW5ScElqb2lZVEEzT1RkaVpHWXROMkkwTnkwME9XRTFMV0ps -WVRVdE5XTXpNR1l6T1Rrek16QTNJaXdpYm05dVkyVWlPaUpXYTFaR1dqRkNNRk5z -Y0RKbFJtaEdWMVUwZDFaWVduVk5Sa0owVjJ0NGQxUlViR0ZaTUZaTVQwY3dJaXdp -YUhSdElqb2lVRTlUVkNJc0ltaDBkU0k2SW1oMGRIQTZMeTkzYVhKbExtTnZiVG95 -TXpZMU9TOGlMQ0pqYUdGc0lqb2lRbHBUU1RWSWNrTlVOREJhUVZveVNtSjRSVEZz -ZDBwWWVIZFFWMDFVYURraWZRLnNHc1B6aDl0bGJyNkNxWUlNV2MtLVJuY085ZTVk -eURBNGw4WHRfQ01kY3lUOERYVkhJTFRORXNVRVAyOG8xQndjUDUzSlpXY21TVmlo -YmQ4Q2hRc0N3IiwiY2xpZW50X2lkIjoiaW06d2lyZWFwcD1OR1ZoTXpCak5ESXda -VEUyTkdSalpXRXhZekZrTXpNd01XWXhNV1l6TUdVL2UyOGZhNWI3NmI3MzFiM0B3 -aXJlLmNvbSIsImFwaV92ZXJzaW9uIjozLCJzY29wZSI6IndpcmVfY2xpZW50X2lk -In0.q-CdDcc_Js1YfU1g3_eqsf8E8gR6gtLSSGurHJduoDfA9a0RBMZktYikD1vQ --89X3Ot3Q1ymEDADeW3sTcI-AQ +LCJjcnYiOiJFZDI1NTE5IiwieCI6InhYM1JCNDFpTU1FMEJ3dWtENWRHbkFoc1Nn +V09fdEVZSkRwejdWU2EtM2cifX0.eyJpYXQiOjE2Nzg0NTgzMzAsImV4cCI6MTY4 +NjIzNDMzMCwibmJmIjoxNjc4NDU4MzMwLCJpc3MiOiJodHRwOi8vd2lyZS5jb206 +MjIwNTkvIiwic3ViIjoiaW06d2lyZWFwcD1OVFkxT0RJeFpETTJOVEUyTkRJMk9H +RmtPV1EwTnpWak0yVTFNR1kzT1dFLzRjN2ZlODg5MjVhZjcwNmJAd2lyZS5jb20i +LCJhdWQiOiJodHRwOi8vd2lyZS5jb206MjIwNTkvIiwianRpIjoiMjMxOWFiODkt +ZTVkMS00MzAxLWJlMWMtM2FiNjFhNGIwMzI3Iiwibm9uY2UiOiJTMDFNWm05RlN6 +a3lXbFp4TUVkT2F6TXhNblZaUTI1SVEyNUpiVnBpVVRBIiwiY2hhbCI6IktpaUJW +MjFlMFJxdHFxZ2pWdEtXU1JKS0dqUVpKdmtxIiwiY25mIjp7ImtpZCI6Im9hRU9X +djVHdTBUTFRwRDVyUmxoODc2TGFrNE0yWFFhMjYzV3FHSVBkX1kifSwicHJvb2Yi +OiJleUpoYkdjaU9pSkZaRVJUUVNJc0luUjVjQ0k2SW1Sd2IzQXJhbmQwSWl3aWFu +ZHJJanA3SW10MGVTSTZJazlMVUNJc0ltTnlkaUk2SWtWa01qVTFNVGtpTENKNElq +b2lOMjVRUlZRNU4wWkJURlpCWWt4TWJESkJaRkoyVTJ3eGJucHpSakZPU1VOSGVI +Z3RRVVEzY1RSRGN5SjlmUS5leUpwWVhRaU9qRTJOemcwTlRnek16QXNJbVY0Y0NJ +Nk1UWTNPRFUwTkRjek1Dd2libUptSWpveE5qYzRORFU0TXpNd0xDSnpkV0lpT2lK +cGJUcDNhWEpsWVhCd1BVNVVXVEZQUkVsNFdrUk5NazVVUlRKT1JFa3lUMGRHYTA5 +WFVUQk9lbFpxVFRKVk1VMUhXVE5QVjBVdk5HTTNabVU0T0RreU5XRm1OekEyWWtC +M2FYSmxMbU52YlNJc0ltcDBhU0k2SWpNNE5XRXlNRGM1TFRkbFpEQXRORFl5TVMx +aFkyRXdMV1kwTjJJek5UWTBPR1JrT0NJc0ltNXZibU5sSWpvaVV6QXhUVnB0T1Va +VGVtdDVWMnhhZUUxRlpFOWhlazE0VFc1V1dsRXlOVWxSTWpWS1lsWndhVlZVUVNJ +c0ltaDBiU0k2SWxCUFUxUWlMQ0pvZEhVaU9pSm9kSFJ3T2k4dmQybHlaUzVqYjIw +Nk1qSXdOVGt2SWl3aVkyaGhiQ0k2SWt0cGFVSldNakZsTUZKeGRIRnhaMnBXZEV0 +WFUxSktTMGRxVVZwS2RtdHhJbjAuNG1NR29jUzhlS0pNMV9KRnAwNkZ5cjhncTRJ +UDRIbzE4VHY5a3NoS0g1LWZLOERZSURLWUxsQVFfNUUycXBnbjlxRE8wSW1hNmVz +U3gwREtYUE1CRGciLCJjbGllbnRfaWQiOiJpbTp3aXJlYXBwPU5UWTFPREl4WkRN +Mk5URTJOREkyT0dGa09XUTBOelZqTTJVMU1HWTNPV0UvNGM3ZmU4ODkyNWFmNzA2 +YkB3aXJlLmNvbSIsImFwaV92ZXJzaW9uIjozLCJzY29wZSI6IndpcmVfY2xpZW50 +X2lkIn0.UPaQcsPNwaxpGS_eOt-NMOjlUkNiL05Lshr5NGgXmmksQoYsgq5UX6TQ +G6UPHNrv78b1jfIfxcLb0U37BaRACA ``` Decoded: @@ -390,27 +390,27 @@ Decoded: "jwk": { "kty": "OKP", "crv": "Ed25519", - "x": "tIVUxCHjJqB8jPtZGItUC6J5_iV69SJfZKDqYA7fEeI" + "x": "xX3RB41iMME0BwukD5dGnAhsSgWO_tEYJDpz7VSa-3g" } } ``` ```json { - "iat": 1678383931, - "exp": 1686159931, - "nbf": 1678383931, - "iss": "http://wire.com:23659/", - "sub": "im:wireapp=NGVhMzBjNDIwZTE2NGRjZWExYzFkMzMwMWYxMWYzMGU/e28fa5b76b731b3@wire.com", - "aud": "http://wire.com:23659/", - "jti": "a4cef01e-4ac4-4ccd-9070-0d89530269e6", - "nonce": "VkVFZ1B0Slp2eFhFWU4wVXZuMFBtWkxwTTlaY0VLOG0", - "chal": "BZSI5HrCT40ZAZ2JbxE1lwJXxwPWMTh9", + "iat": 1678458330, + "exp": 1686234330, + "nbf": 1678458330, + "iss": "http://wire.com:22059/", + "sub": "im:wireapp=NTY1ODIxZDM2NTE2NDI2OGFkOWQ0NzVjM2U1MGY3OWE/4c7fe88925af706b@wire.com", + "aud": "http://wire.com:22059/", + "jti": "2319ab89-e5d1-4301-be1c-3ab61a4b0327", + "nonce": "S01MZm9FSzkyWlZxMEdOazMxMnVZQ25IQ25JbVpiUTA", + "chal": "KiiBV21e0RqtqqgjVtKWSRJKGjQZJvkq", "cnf": { - "kid": "-LyxmoFpcGMrg2N0wrMPSuoKtWdBGTylPVe5czG8egs" + "kid": "oaEOWv5Gu0TLTpD5rRlh876Lak4M2XQa263WqGIPd_Y" }, - "proof": "eyJhbGciOiJFZERTQSIsInR5cCI6ImRwb3Arand0IiwiandrIjp7Imt0eSI6Ik9LUCIsImNydiI6IkVkMjU1MTkiLCJ4IjoieXh5S1ZVdUFuemI5ZnVYMEpvdVZZeEZtVEt0cnJUc1YzRnFBZFZBSGNPYyJ9fQ.eyJpYXQiOjE2NzgzODM5MzEsImV4cCI6MTY3ODQ3MDMzMSwibmJmIjoxNjc4MzgzOTMxLCJzdWIiOiJpbTp3aXJlYXBwPU5HVmhNekJqTkRJd1pURTJOR1JqWldFeFl6RmtNek13TVdZeE1XWXpNR1UvZTI4ZmE1Yjc2YjczMWIzQHdpcmUuY29tIiwianRpIjoiYTA3OTdiZGYtN2I0Ny00OWE1LWJlYTUtNWMzMGYzOTkzMzA3Iiwibm9uY2UiOiJWa1ZGWjFCMFNscDJlRmhGV1U0d1ZYWnVNRkJ0V2t4d1RUbGFZMFZMT0cwIiwiaHRtIjoiUE9TVCIsImh0dSI6Imh0dHA6Ly93aXJlLmNvbToyMzY1OS8iLCJjaGFsIjoiQlpTSTVIckNUNDBaQVoySmJ4RTFsd0pYeHdQV01UaDkifQ.sGsPzh9tlbr6CqYIMWc--RncO9e5dyDA4l8Xt_CMdcyT8DXVHILTNEsUEP28o1BwcP53JZWcmSVihbd8ChQsCw", - "client_id": "im:wireapp=NGVhMzBjNDIwZTE2NGRjZWExYzFkMzMwMWYxMWYzMGU/e28fa5b76b731b3@wire.com", + "proof": "eyJhbGciOiJFZERTQSIsInR5cCI6ImRwb3Arand0IiwiandrIjp7Imt0eSI6Ik9LUCIsImNydiI6IkVkMjU1MTkiLCJ4IjoiN25QRVQ5N0ZBTFZBYkxMbDJBZFJ2U2wxbnpzRjFOSUNHeHgtQUQ3cTRDcyJ9fQ.eyJpYXQiOjE2Nzg0NTgzMzAsImV4cCI6MTY3ODU0NDczMCwibmJmIjoxNjc4NDU4MzMwLCJzdWIiOiJpbTp3aXJlYXBwPU5UWTFPREl4WkRNMk5URTJOREkyT0dGa09XUTBOelZqTTJVMU1HWTNPV0UvNGM3ZmU4ODkyNWFmNzA2YkB3aXJlLmNvbSIsImp0aSI6IjM4NWEyMDc5LTdlZDAtNDYyMS1hY2EwLWY0N2IzNTY0OGRkOCIsIm5vbmNlIjoiUzAxTVptOUZTemt5V2xaeE1FZE9hek14TW5WWlEyNUlRMjVKYlZwaVVUQSIsImh0bSI6IlBPU1QiLCJodHUiOiJodHRwOi8vd2lyZS5jb206MjIwNTkvIiwiY2hhbCI6IktpaUJWMjFlMFJxdHFxZ2pWdEtXU1JKS0dqUVpKdmtxIn0.4mMGocS8eKJM1_JFp06Fyr8gq4IP4Ho18Tv9kshKH5-fK8DYIDKYLlAQ_5E2qpgn9qDO0Ima6esSx0DKXPMBDg", + "client_id": "im:wireapp=NTY1ODIxZDM2NTE2NDI2OGFkOWQ0NzVjM2U1MGY3OWE/4c7fe88925af706b@wire.com", "api_version": 3, "scope": "wire_client_id" } @@ -420,10 +420,10 @@ Decoded: ✅ Signature Verified with key: ```text -----BEGIN PRIVATE KEY----- -MC4CAQAwBQYDK2VwBCIEIJjmII0n1bfs1c+9UdG/tN3WZHKA/2IFSeb7Sf80pA3N +MC4CAQAwBQYDK2VwBCIEIBml61q/M1JIzgKzLkuivjclsclyoJQLMT2tn1vhh2Cn -----END PRIVATE KEY----- -----BEGIN PUBLIC KEY----- -MCowBQYDK2VwAyEAtIVUxCHjJqB8jPtZGItUC6J5/iV69SJfZKDqYA7fEeI= +MCowBQYDK2VwAyEAxX3RB41iMME0BwukD5dGnAhsSgWO/tEYJDpz7VSa+3g= -----END PUBLIC KEY----- ``` @@ -433,28 +433,28 @@ MCowBQYDK2VwAyEAtIVUxCHjJqB8jPtZGItUC6J5/iV69SJfZKDqYA7fEeI= ### Client provides access token #### 16. validate Dpop challenge (clientId) ```http request -POST https://stepca:55834/acme/wire/challenge/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9/0H2Qr2LfBEj0SCIycIYtWJLyTcY5U4AW +POST https://stepca:56174/acme/wire/challenge/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD/HhFufnzfL9abzJzpUNeblQGthEcrac9J /acme/{acme-provisioner}/challenge/{authz-id}/{challenge-id} content-type: application/jose+json ``` ```json { - "protected": "eyJhbGciOiJFZERTQSIsImtpZCI6Imh0dHBzOi8vc3RlcGNhOjU1ODM0L2FjbWUvd2lyZS9hY2NvdW50L005dFZ1Ym5JQnFhcmtLYWJCQUJ4N1BNU0I4cEtOQ2F1IiwidHlwIjoiSldUIiwibm9uY2UiOiJOVTVoTWxGdFNtZDFUMHQyTTJsbU0yaHRRakpzT1ZCQlNuQnFRMmw2ZVVrIiwidXJsIjoiaHR0cHM6Ly9zdGVwY2E6NTU4MzQvYWNtZS93aXJlL2NoYWxsZW5nZS9ON2tJb2Z5bGdMNTNlZGljelJxeVEwWUZHWjNIa29YOS8wSDJRcjJMZkJFajBTQ0l5Y0lZdFdKTHlUY1k1VTRBVyJ9", - "payload": "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", - "signature": "xLFkSS_xmKqUV8aAqn3UwnX-DgUXfCm71UCBXsyoN-rjG5OASJ7WHGOLys37CZlcxNsLmJuedpFeghfTpjGeCA" + "protected": "eyJhbGciOiJFZERTQSIsImtpZCI6Imh0dHBzOi8vc3RlcGNhOjU2MTc0L2FjbWUvd2lyZS9hY2NvdW50LzFwYWpYY21NMFEycEdsdk51WU1WRGZBcktLWEU0UjhrIiwidHlwIjoiSldUIiwibm9uY2UiOiJZM2xIYlRWd1QyVkhZMDR6ZFRaRWJYZFRZV2hRUVZJMmIwdHVUMFkwV2xrIiwidXJsIjoiaHR0cHM6Ly9zdGVwY2E6NTYxNzQvYWNtZS93aXJlL2NoYWxsZW5nZS92NHhiREpOTmtvam5pTThQaUtMOUJ6cEd0VlpNdDFnRC9IaEZ1Zm56Zkw5YWJ6SnpwVU5lYmxRR3RoRWNyYWM5SiJ9", + "payload": "eyJhY2Nlc3NfdG9rZW4iOiJleUpoYkdjaU9pSkZaRVJUUVNJc0luUjVjQ0k2SW1GMEsycDNkQ0lzSW1wM2F5STZleUpyZEhraU9pSlBTMUFpTENKamNuWWlPaUpGWkRJMU5URTVJaXdpZUNJNkluaFlNMUpDTkRGcFRVMUZNRUozZFd0RU5XUkhia0ZvYzFOblYwOWZkRVZaU2tSd2VqZFdVMkV0TTJjaWZYMC5leUpwWVhRaU9qRTJOemcwTlRnek16QXNJbVY0Y0NJNk1UWTROakl6TkRNek1Dd2libUptSWpveE5qYzRORFU0TXpNd0xDSnBjM01pT2lKb2RIUndPaTh2ZDJseVpTNWpiMjA2TWpJd05Ua3ZJaXdpYzNWaUlqb2lhVzA2ZDJseVpXRndjRDFPVkZreFQwUkplRnBFVFRKT1ZFVXlUa1JKTWs5SFJtdFBWMUV3VG5wV2FrMHlWVEZOUjFrelQxZEZMelJqTjJabE9EZzVNalZoWmpjd05tSkFkMmx5WlM1amIyMGlMQ0poZFdRaU9pSm9kSFJ3T2k4dmQybHlaUzVqYjIwNk1qSXdOVGt2SWl3aWFuUnBJam9pTWpNeE9XRmlPRGt0WlRWa01TMDBNekF4TFdKbE1XTXRNMkZpTmpGaE5HSXdNekkzSWl3aWJtOXVZMlVpT2lKVE1ERk5XbTA1UmxONmEzbFhiRnA0VFVWa1QyRjZUWGhOYmxaYVVUSTFTVkV5TlVwaVZuQnBWVlJCSWl3aVkyaGhiQ0k2SWt0cGFVSldNakZsTUZKeGRIRnhaMnBXZEV0WFUxSktTMGRxVVZwS2RtdHhJaXdpWTI1bUlqcDdJbXRwWkNJNkltOWhSVTlYZGpWSGRUQlVURlJ3UkRWeVVteG9PRGMyVEdGck5FMHlXRkZoTWpZelYzRkhTVkJrWDFraWZTd2ljSEp2YjJZaU9pSmxlVXBvWWtkamFVOXBTa1phUlZKVVVWTkpjMGx1VWpWalEwazJTVzFTZDJJelFYSmhibVF3U1dsM2FXRnVaSEpKYW5BM1NXMTBNR1ZUU1RaSmF6bE1WVU5KYzBsdFRubGthVWsyU1d0V2EwMXFWVEZOVkd0cFRFTktORWxxYjJsT01qVlJVbFpSTlU0d1drSlVSbHBDV1d0NFRXSkVTa0phUmtveVZUSjNlR0p1Y0hwU2FrWlBVMVZPU0dWSVozUlJWVkV6WTFSU1JHTjVTamxtVVM1bGVVcHdXVmhSYVU5cVJUSk9lbWN3VGxSbmVrMTZRWE5KYlZZMFkwTkpOazFVV1ROUFJGVXdUa1JqZWsxRGQybGliVXB0U1dwdmVFNXFZelJPUkZVMFRYcE5kMHhEU25wa1YwbHBUMmxLY0dKVWNETmhXRXBzV1ZoQ2QxQlZOVlZYVkVaUVVrVnNORmRyVWs1TmF6VlZVbFJLVDFKRmEzbFVNR1JIWVRBNVdGVlVRazlsYkZweFZGUktWazFWTVVoWFZFNVFWakJWZGs1SFRUTmFiVlUwVDBScmVVNVhSbTFPZWtFeVdXdENNMkZZU214TWJVNTJZbE5KYzBsdGNEQmhVMGsyU1dwTk5FNVhSWGxOUkdNMVRGUmtiRnBFUVhST1JGbDVUVk14YUZreVJYZE1WMWt3VGpKSmVrNVVXVEJQUjFKclQwTkpjMGx0TlhaaWJVNXNTV3B2YVZWNlFYaFVWbkIwVDFWYVZHVnRkRFZXTW5oaFpVVXhSbHBGT1dobGF6RTBWRmMxVjFkc1JYbE9WV3hTVFdwV1MxbHNXbmRoVmxaVlVWTkpjMGx0YURCaVUwazJTV3hDVUZVeFVXbE1RMHB2WkVoVmFVOXBTbTlrU0ZKM1QyazRkbVF5YkhsYVV6VnFZakl3TmsxcVNYZE9WR3QyU1dsM2FWa3lhR2hpUTBrMlNXdDBjR0ZWU2xkTmFrWnNUVVpLZUdSSVJuaGFNbkJYWkVWMFdGVXhTa3RUTUdSeFZWWndTMlJ0ZEhoSmJqQXVORzFOUjI5alV6aGxTMHBOTVY5S1JuQXdOa1o1Y2pobmNUUkpVRFJJYnpFNFZIWTVhM05vUzBnMUxXWkxPRVJaU1VSTFdVeHNRVkZmTlVVeWNYQm5iamx4UkU4d1NXMWhObVZ6VTNnd1JFdFlVRTFDUkdjaUxDSmpiR2xsYm5SZmFXUWlPaUpwYlRwM2FYSmxZWEJ3UFU1VVdURlBSRWw0V2tSTk1rNVVSVEpPUkVreVQwZEdhMDlYVVRCT2VsWnFUVEpWTVUxSFdUTlBWMFV2TkdNM1ptVTRPRGt5TldGbU56QTJZa0IzYVhKbExtTnZiU0lzSW1Gd2FWOTJaWEp6YVc5dUlqb3pMQ0p6WTI5d1pTSTZJbmRwY21WZlkyeHBaVzUwWDJsa0luMC5VUGFRY3NQTndheHBHU19lT3QtTk1PamxVa05pTDA1THNocjVOR2dYbW1rc1FvWXNncTVVWDZUUUc2VVBITnJ2NzhiMWpmSWZ4Y0xiMFUzN0JhUkFDQSJ9", + "signature": "BD0vDPvaulMwUcbp99MUduvHcuJM0q6w-aJJ0s0gWSAu_G8j2zZxPQVhSDnmxG-LI5BXFnZxTOnCVv15-orNDA" } ``` ```json { "protected": { "alg": "EdDSA", - "kid": "https://stepca:55834/acme/wire/account/M9tVubnIBqarkKabBABx7PMSB8pKNCau", + "kid": "https://stepca:56174/acme/wire/account/1pajXcmM0Q2pGlvNuYMVDfArKKXE4R8k", "typ": "JWT", - "nonce": "NU5hMlFtSmd1T0t2M2lmM2htQjJsOVBBSnBqQ2l6eUk", - "url": "https://stepca:55834/acme/wire/challenge/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9/0H2Qr2LfBEj0SCIycIYtWJLyTcY5U4AW" + "nonce": "Y3lHbTVwT2VHY04zdTZEbXdTYWhQQVI2b0tuT0Y0Wlk", + "url": "https://stepca:56174/acme/wire/challenge/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD/HhFufnzfL9abzJzpUNeblQGthEcrac9J" }, "payload": { - "access_token": "eyJhbGciOiJFZERTQSIsInR5cCI6ImF0K2p3dCIsImp3ayI6eyJrdHkiOiJPS1AiLCJjcnYiOiJFZDI1NTE5IiwieCI6InRJVlV4Q0hqSnFCOGpQdFpHSXRVQzZKNV9pVjY5U0pmWktEcVlBN2ZFZUkifX0.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.q-CdDcc_Js1YfU1g3_eqsf8E8gR6gtLSSGurHJduoDfA9a0RBMZktYikD1vQ-89X3Ot3Q1ymEDADeW3sTcI-AQ" + "access_token": "eyJhbGciOiJFZERTQSIsInR5cCI6ImF0K2p3dCIsImp3ayI6eyJrdHkiOiJPS1AiLCJjcnYiOiJFZDI1NTE5IiwieCI6InhYM1JCNDFpTU1FMEJ3dWtENWRHbkFoc1NnV09fdEVZSkRwejdWU2EtM2cifX0.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.UPaQcsPNwaxpGS_eOt-NMOjlUkNiL05Lshr5NGgXmmksQoYsgq5UX6TQG6UPHNrv78b1jfIfxcLb0U37BaRACA" } } ``` @@ -463,17 +463,17 @@ content-type: application/jose+json 200 cache-control: no-store content-type: application/json -link: ;rel="index" -link: ;rel="up" -location: https://stepca:55834/acme/wire/challenge/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9/0H2Qr2LfBEj0SCIycIYtWJLyTcY5U4AW -replay-nonce: S2dhUzBrcE82VXVVSHgwREUyVWxhV3BJbTlQZkR4YjY +link: ;rel="index" +link: ;rel="up" +location: https://stepca:56174/acme/wire/challenge/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD/HhFufnzfL9abzJzpUNeblQGthEcrac9J +replay-nonce: aXR5S1dSNE02QU5jVUJqbjBmckRPdTB5QzBmbUZiMk8 ``` ```json { "type": "wire-dpop-01", - "url": "https://stepca:55834/acme/wire/challenge/N7kIofylgL53ediczRqyQ0YFGZ3HkoX9/0H2Qr2LfBEj0SCIycIYtWJLyTcY5U4AW", + "url": "https://stepca:56174/acme/wire/challenge/v4xbDJNNkojniM8PiKL9BzpGtVZMt1gD/HhFufnzfL9abzJzpUNeblQGthEcrac9J", "status": "valid", - "token": "BZSI5HrCT40ZAZ2JbxE1lwJXxwPWMTh9" + "token": "KiiBV21e0RqtqqgjVtKWSRJKGjQZJvkq" } ``` ### Authenticate end user using Open ID Connect implicit flow @@ -481,26 +481,26 @@ replay-nonce: S2dhUzBrcE82VXVVSHgwREUyVWxhV3BJbTlQZkR4YjY ```http request GET http://wire.com/login accept: */* -host: wire.com:23659 +host: wire.com:22059 ``` #### 19. Resource server generates Verifier & Challenge Codes ```text -code_verifier=cChEbFe3I98pUmxJU5mz16s0mZ9XKY9IDhRYla-k-0s&code_challenge=5o2QYx0Iqb8tXXMJ0yFiH4bnpqIB98dzaZwy3laTl-4 +code_verifier=B3_EoPiu80bdkKM-xaG7y8uulHHGUlK4j4baZTir-TE&code_challenge=Qd08I3QywmT-hymmgKvNgv11tW3eaNXBq-zVJ5IdwEQ ``` #### 20. Resource server calls authorize url ```http request -GET http://dex:19864/dex/auth?response_type=code&client_id=wireapp&state=0Gn02_jFb14BSXvgq7YukQ&code_challenge=5o2QYx0Iqb8tXXMJ0yFiH4bnpqIB98dzaZwy3laTl-4&code_challenge_method=S256&redirect_uri=http%3A%2F%2Fwire.com%3A23659%2Fcallback&scope=openid+profile&nonce=TR4lljTcDGgbie1j5ZvE3g +GET http://dex:18165/dex/auth?response_type=code&client_id=wireapp&state=bzr-5Kp9OmXvwb2ZFbRzUw&code_challenge=Qd08I3QywmT-hymmgKvNgv11tW3eaNXBq-zVJ5IdwEQ&code_challenge_method=S256&redirect_uri=http%3A%2F%2Fwire.com%3A22059%2Fcallback&scope=openid+profile&nonce=fyH6ZnfiJyPvxPoLXRjmdg ``` #### 21. Authorization server redirects to login prompt ```text -200 http://dex:19864/dex/auth/ldap/login?back=&state=g423eydcckmqu646op6pmebb2 +200 http://dex:18165/dex/auth/ldap/login?back=&state=huekzfdrooccycexo42p65p43 { + "date": "Fri, 10 Mar 2023 14:25:30 GMT", "content-type": "text/html", "content-length": "1525", - "date": "Thu, 09 Mar 2023 17:45:31 GMT", } ``` @@ -532,7 +532,7 @@ GET http://dex:19864/dex/auth?response_type=code&client_id=wireapp&state=0Gn02_j

Log in to Your Account

-
+
@@ -566,19 +566,19 @@ GET http://dex:19864/dex/auth?response_type=code&client_id=wireapp&state=0Gn02_j #### 22. Client submits the login form ```http request -POST http://dex:19864/dex/auth/ldap/login?back=&state=g423eydcckmqu646op6pmebb2 +POST http://dex:18165/dex/auth/ldap/login?back=&state=huekzfdrooccycexo42p65p43 content-type: application/x-www-form-urlencoded ``` ```text -login=alicesmith%40wire.com&password=foo +password=foo&login=alicesmith%40wire.com ``` #### 23. (Optional) Authorization server presents consent form to client ```text -200 http://dex:19864/dex/approval?req=g423eydcckmqu646op6pmebb2&hmac=_CA4V5bc8qJ63UQGdhuIDbZDcVJ8-tw62YGfy10zsPs +200 http://dex:18165/dex/approval?req=huekzfdrooccycexo42p65p43&hmac=T66PQEH6RPhMF6G5gieief8UXHH6sGT5uw_Anekthck { - "date": "Thu, 09 Mar 2023 17:45:31 GMT", + "date": "Fri, 10 Mar 2023 14:25:31 GMT", "content-length": "1713", "content-type": "text/html", } @@ -629,7 +629,7 @@ login=alicesmith%40wire.com&password=foo
- +
- +