mirror of
https://github.com/hanzoai/dev.git
synced 2026-10-25 03:32:32 +00:00
zeekayandHanzo Dev
6cbbea2d03
Our history is just-every's with author emails rewritten, so the graphs are
disjoint and git finds no merge base. Supplied one by hand: d1f1f51a41, the
just-every commit matching our Oct-2025 fork point (22 files apart). 9618
upstream commits, 7004 files, +1.81M/-159k, 37 conflicts.
Resolution:
- Upstream code where our side was the Oct-2025 prototype of a feature they
have since reimplemented 3-5x larger (agent_runs, browser_sessions,
history_cell/{agent,browser}, the vt100 harness and its snapshots).
- Upstream's config.rs module split (builder/defaults/sources/validation)
kept; zen5-coder and the provider-follows-model rule re-applied on top.
- Ours where the file IS the identity: README, package.json, postinstall,
release notes pipeline, integration-zed.
- Hybrid where upstream improved a file we had branded: updates.rs (their
release-repo migration, our hanzoai/dev), release.yml (their fail-fast npm
auth check, our package name), chatwidget.rs (their turn handling, our
HANZO_USER_KEY hint), exec human output (their 237 lines, our banner).
Superseded and dropped deliberately: our resume_command_name() coder-alias
hack — upstream's derive_resume_command_name() reads the invocation basename
generically, which yields "dev" for us.
LLM.md now records the real topology and the sync point; AGENTS.md and
CLAUDE.md are symlinks to it again. Single parent on purpose: adopting
jecode/main as a second parent would re-import 13,742 commits carrying the
upstream author emails a prior rewrite deliberately removed.
Version 0.2.188 -> 0.2.189.
Co-authored-by: Hanzo Dev <[email protected]>
4209 lines
124 KiB
JSON
4209 lines
124 KiB
JSON
{
|
|
"automaticAuthRequired": false,
|
|
"baselineKind": "mcp-conformance-regression-baseline-v1",
|
|
"checks": {
|
|
"failing": [
|
|
{
|
|
"check_id": "harness/auth/metadata-var3/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/pre-registration/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-from-www-authenticate/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-step-up/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pre-registration-auth",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-from-www-authenticate",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-step-up-initial",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-elicitation-sep1034-boolean-default",
|
|
"mode": "2025-11-25",
|
|
"scenario": "elicitation-sep1034-client-defaults",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-elicitation-sep1034-enum-default",
|
|
"mode": "2025-11-25",
|
|
"scenario": "elicitation-sep1034-client-defaults",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-elicitation-sep1034-integer-default",
|
|
"mode": "2025-11-25",
|
|
"scenario": "elicitation-sep1034-client-defaults",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-elicitation-sep1034-number-default",
|
|
"mode": "2025-11-25",
|
|
"scenario": "elicitation-sep1034-client-defaults",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-elicitation-sep1034-string-default",
|
|
"mode": "2025-11-25",
|
|
"scenario": "elicitation-sep1034-client-defaults",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-var3/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/pre-registration/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-from-www-authenticate/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-step-up/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var3",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pre-registration-auth",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-from-www-authenticate",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-step-up-initial",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2350-scope-union-on-reauth",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
}
|
|
],
|
|
"passing": [
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-basic/codex-adapter",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-none/codex-adapter",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-post/codex-adapter",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/initialize/codex-adapter",
|
|
"mode": "2025-06-18",
|
|
"scenario": "initialize",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/tools_call/codex-adapter",
|
|
"mode": "2025-06-18",
|
|
"scenario": "tools_call",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-06-18",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "mcp-client-initialization",
|
|
"mode": "2025-06-18",
|
|
"scenario": "initialize",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "tool-add-numbers",
|
|
"mode": "2025-06-18",
|
|
"scenario": "tools_call",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "wire-schema-valid",
|
|
"mode": "2025-06-18",
|
|
"scenario": "tools_call",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "app_server_initialize",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "echo_tool",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "ephemeral_thread",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "inventory",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "isolated_config_cleanup",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_add",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_get",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_remove",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "unicode_resource_read",
|
|
"mode": "2025-06-18",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/basic-cimd/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-default/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-var1/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-var2/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-from-scopes-supported/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-omitted-when-undefined/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-retry-limit/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-basic/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-none/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-post/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/elicitation-sep1034-client-defaults/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "elicitation-sep1034-client-defaults",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/initialize/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "initialize",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/sse-retry/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "sse-retry",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/tools_call/codex-adapter",
|
|
"mode": "2025-11-25",
|
|
"scenario": "tools_call",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "cimd-client-id-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-from-scopes-supported",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-omitted-when-undefined",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-retry-limit",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-step-up-escalation",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2025-11-25",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "mcp-client-initialization",
|
|
"mode": "2025-11-25",
|
|
"scenario": "initialize",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-sse-graceful-reconnect",
|
|
"mode": "2025-11-25",
|
|
"scenario": "sse-retry",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-sse-last-event-id",
|
|
"mode": "2025-11-25",
|
|
"scenario": "sse-retry",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-sse-retry-timing",
|
|
"mode": "2025-11-25",
|
|
"scenario": "sse-retry",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "tool-add-numbers",
|
|
"mode": "2025-11-25",
|
|
"scenario": "tools_call",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "wire-schema-valid",
|
|
"mode": "2025-11-25",
|
|
"scenario": "tools_call",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "app_server_initialize",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "echo_tool",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "ephemeral_thread",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "inventory",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "isolated_config_cleanup",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_add",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_get",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_remove",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "unicode_resource_read",
|
|
"mode": "2025-11-25",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/authorization-server-migration/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/basic-cimd/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/iss-normalized/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/iss-not-advertised/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/iss-supported/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/iss-supported-missing/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/iss-unexpected/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/iss-wrong-issuer/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-default/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-issuer-mismatch/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-issuer-mismatch",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-var1/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/metadata-var2/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/offline-access-not-supported/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/offline-access-scope/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/resource-mismatch/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/resource-mismatch",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-from-scopes-supported/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-omitted-when-undefined/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/scope-retry-limit/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-basic/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-none/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/auth/token-endpoint-auth-post/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/http-custom-headers/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-custom-headers",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/http-invalid-tool-headers/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-invalid-tool-headers",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/http-standard-headers/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-standard-headers",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/json-schema-ref-no-deref/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "json-schema-ref-no-deref",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/request-metadata/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/sep-2322-client-request-state/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "sep-2322-client-request-state",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "harness/tools_call/codex-adapter",
|
|
"mode": "2026-07-28",
|
|
"scenario": "tools_call",
|
|
"source": "harness",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2352-no-cross-as-credential-reuse",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2352-no-reuse-on-as-change",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2352-reregister-on-as-change",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/authorization-server-migration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "cimd-client-id-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/basic-cimd",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-no-normalization",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-normalized",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-proceed-no-iss",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-not-advertised",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-compare-iss-supported",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-reject-missing-iss",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-supported-missing",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-compare-iss-unadvertised",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-unexpected",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-compare-iss-supported",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/iss-wrong-issuer",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-default",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-issuer-mismatch",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-issuer-mismatch",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2468-client-validate-metadata-issuer",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-issuer-mismatch",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var1",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/metadata-var2",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2207-offline-access-not-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-not-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2207-client-metadata-grant-types",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2207-offline-access-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/offline-access-scope",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/pre-registration",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/resource-mismatch",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-mismatch-rejected",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/resource-mismatch",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-from-scopes-supported",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-scopes-supported",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-from-www-authenticate",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-omitted-when-undefined",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-omitted-when-undefined",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-retry-limit",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-retry-limit",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "scope-step-up-escalation",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/scope-step-up",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-basic",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-none",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "authorization-server-metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "client-registration",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-challenge-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-code-verifier-sent",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-s256-method-used",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "pkce-verifier-matches-challenge",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "prm-pathbased-requested",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-consistency",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-authorization",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-in-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "resource-parameter-valid-uri",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-837-application-type-present",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-endpoint-auth-method",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "token-request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "valid-bearer-token",
|
|
"mode": "2026-07-28",
|
|
"scenario": "auth/token-endpoint-auth-post",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-base64-unsafe",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-custom-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-encode-values",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-custom-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-mirrors-designated-params",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-custom-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-omit-null",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-custom-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-supports-custom-headers",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-custom-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-reject-invalid-tool",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-invalid-tool-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-x-mcp-header-charset",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-invalid-tool-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-x-mcp-header-not-empty",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-invalid-tool-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-x-mcp-header-primitive-only",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-invalid-tool-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-x-mcp-header-unique",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-invalid-tool-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2243-client-includes-standard-headers",
|
|
"mode": "2026-07-28",
|
|
"scenario": "http-standard-headers",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2106-no-network-ref-deref",
|
|
"mode": "2026-07-28",
|
|
"scenario": "json-schema-ref-no-deref",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2575-client-declares-elicitation-capability",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2575-client-populates-meta",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2575-client-retry-supported-version",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2575-client-sends-client-info",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2575-http-client-sends-version-header",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2575-http-version-header-matches-meta",
|
|
"mode": "2026-07-28",
|
|
"scenario": "request-metadata",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2322-client-jsonrpc-id-different",
|
|
"mode": "2026-07-28",
|
|
"scenario": "sep-2322-client-request-state",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2322-client-no-state-omitted",
|
|
"mode": "2026-07-28",
|
|
"scenario": "sep-2322-client-request-state",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2322-client-parallel-isolation",
|
|
"mode": "2026-07-28",
|
|
"scenario": "sep-2322-client-request-state",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2322-client-request-state-echoed",
|
|
"mode": "2026-07-28",
|
|
"scenario": "sep-2322-client-request-state",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "sep-2322-default-result-type-complete",
|
|
"mode": "2026-07-28",
|
|
"scenario": "sep-2322-client-request-state",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "tool-add-numbers",
|
|
"mode": "2026-07-28",
|
|
"scenario": "tools_call",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "wire-schema-valid",
|
|
"mode": "2026-07-28",
|
|
"scenario": "tools_call",
|
|
"source": "official",
|
|
"transport": "official-http"
|
|
},
|
|
{
|
|
"check_id": "app_server_initialize",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "echo_tool",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "ephemeral_thread",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "inventory",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "isolated_config_cleanup",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_add",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_get",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "mcp_remove",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "modern_feature_enablement",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "multi_round_trip_request",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "per_request_metadata",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "request_scoped_notifications",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
},
|
|
{
|
|
"check_id": "unicode_resource_read",
|
|
"mode": "2026-07-28",
|
|
"scenario": "",
|
|
"source": "supplemental",
|
|
"transport": "stdio"
|
|
}
|
|
]
|
|
},
|
|
"modernFeatureEnablement": true,
|
|
"officialConformance": {
|
|
"authenticationIncluded": true,
|
|
"gitRef": "49103de6ed70804e940637bf3e9e29e4a3f54e64",
|
|
"repository": "modelcontextprotocol/conformance",
|
|
"scenarios": {
|
|
"2025-06-18": [
|
|
"initialize",
|
|
"tools_call",
|
|
"auth/token-endpoint-auth-basic",
|
|
"auth/token-endpoint-auth-post",
|
|
"auth/token-endpoint-auth-none"
|
|
],
|
|
"2025-11-25": [
|
|
"initialize",
|
|
"tools_call",
|
|
"elicitation-sep1034-client-defaults",
|
|
"sse-retry",
|
|
"auth/metadata-default",
|
|
"auth/metadata-var1",
|
|
"auth/metadata-var2",
|
|
"auth/metadata-var3",
|
|
"auth/basic-cimd",
|
|
"auth/scope-from-www-authenticate",
|
|
"auth/scope-from-scopes-supported",
|
|
"auth/scope-omitted-when-undefined",
|
|
"auth/scope-step-up",
|
|
"auth/scope-retry-limit",
|
|
"auth/token-endpoint-auth-basic",
|
|
"auth/token-endpoint-auth-post",
|
|
"auth/token-endpoint-auth-none",
|
|
"auth/pre-registration"
|
|
],
|
|
"2026-07-28": [
|
|
"tools_call",
|
|
"request-metadata",
|
|
"sep-2322-client-request-state",
|
|
"http-standard-headers",
|
|
"http-custom-headers",
|
|
"http-invalid-tool-headers",
|
|
"json-schema-ref-no-deref",
|
|
"auth/metadata-default",
|
|
"auth/metadata-var1",
|
|
"auth/metadata-var2",
|
|
"auth/metadata-var3",
|
|
"auth/basic-cimd",
|
|
"auth/scope-from-www-authenticate",
|
|
"auth/scope-from-scopes-supported",
|
|
"auth/scope-omitted-when-undefined",
|
|
"auth/scope-step-up",
|
|
"auth/scope-retry-limit",
|
|
"auth/token-endpoint-auth-basic",
|
|
"auth/token-endpoint-auth-post",
|
|
"auth/token-endpoint-auth-none",
|
|
"auth/pre-registration",
|
|
"auth/resource-mismatch",
|
|
"auth/offline-access-scope",
|
|
"auth/offline-access-not-supported",
|
|
"auth/authorization-server-migration",
|
|
"auth/iss-supported",
|
|
"auth/iss-not-advertised",
|
|
"auth/iss-supported-missing",
|
|
"auth/iss-wrong-issuer",
|
|
"auth/iss-unexpected",
|
|
"auth/iss-normalized",
|
|
"auth/metadata-issuer-mismatch"
|
|
]
|
|
}
|
|
},
|
|
"requiredModes": [
|
|
"2025-06-18",
|
|
"2025-11-25",
|
|
"2026-07-28"
|
|
],
|
|
"schemaVersion": 4,
|
|
"transports": [
|
|
"stdio",
|
|
"official-http"
|
|
],
|
|
"versionCheck": {
|
|
"success": true
|
|
}
|
|
}
|