$ curl 'http://localhost/oauth/authorize?response_type=code&client_id=login&scope=openid+oauth.approvals&redirect_uri=http%3A%2F%2Flocalhost%2Fapp&login_hint=%257B%2522origin%2522%253A%2522uaa%2522%257D&code_challenge=E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM&code_challenge_method=S256' -i -X GET \
    -H 'Accept: application/x-www-form-urlencoded'

GET /oauth/authorize?response_type=code&client_id=login&scope=openid+oauth.approvals&redirect_uri=http%3A%2F%2Flocalhost%2Fapp&login_hint=%257B%2522origin%2522%253A%2522uaa%2522%257D&code_challenge=E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM&code_challenge_method=S256 HTTP/1.1
Accept: application/x-www-form-urlencoded
Host: localhost

HTTP/1.1 302 Found
Content-Security-Policy: script-src 'self'
Strict-Transport-Security: max-age=31536000
Set-Cookie: X-Uaa-Csrf=gwWRjoQuT4Fgc_jcONCK4H; Path=/; Max-Age=86400; Expires=Thu, 21 Nov 2024 08:36:19 GMT; HttpOnly; SameSite=Lax
Cache-Control: no-store
Content-Language: en
Location: http://localhost/app?code=QCmpeSRvZj2N0uXlp-jLGgZwveQREF4-
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

$ curl 'http://localhost/oauth/authorize?response_type=code&client_id=login&redirect_uri=http%3A%2F%2Flocalhost%2Fredirect%2Fcf&code_challenge=E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM&code_challenge_method=S256&state=6KW5NQ' -i -X GET \
    -H 'Authorization: Bearer eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.RzvJsXMfntaCr_iC7zmQIpFmG9LDdZ-KNTdoWC1uTGX6GqFca_7lFflvlL6irXYxmyyFwzoxN1mjELNqQlS5s9ou2E1QAzA6uW2AufpTda_eIcwChRBt4LOQESEnd3LgWAmlyPAWNZ36W7Bq1_4rvdgI0lhHAuFjHYPKzXap0XkgZT5ZxJ_aMJ84hWjx86Z6VhP4woflYlHypyCZS8roWhMMFlx8jbTNJ2ON6pVda34xL6VhtTwuxVxXPktK8yjs_p8DT3MQzI7KMcfX1JBC_zYRbGbiZq-p62pEgU-V9zzu-KOvKtu0xb8FTsCTFsJFULHoYZsTawFc4C4jUH-wBA'

GET /oauth/authorize?response_type=code&client_id=login&redirect_uri=http%3A%2F%2Flocalhost%2Fredirect%2Fcf&code_challenge=E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM&code_challenge_method=S256&state=6KW5NQ HTTP/1.1
Authorization: Bearer eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.RzvJsXMfntaCr_iC7zmQIpFmG9LDdZ-KNTdoWC1uTGX6GqFca_7lFflvlL6irXYxmyyFwzoxN1mjELNqQlS5s9ou2E1QAzA6uW2AufpTda_eIcwChRBt4LOQESEnd3LgWAmlyPAWNZ36W7Bq1_4rvdgI0lhHAuFjHYPKzXap0XkgZT5ZxJ_aMJ84hWjx86Z6VhP4woflYlHypyCZS8roWhMMFlx8jbTNJ2ON6pVda34xL6VhtTwuxVxXPktK8yjs_p8DT3MQzI7KMcfX1JBC_zYRbGbiZq-p62pEgU-V9zzu-KOvKtu0xb8FTsCTFsJFULHoYZsTawFc4C4jUH-wBA
Host: localhost

HTTP/1.1 302 Found
Content-Security-Policy: script-src 'self'
Cache-Control: no-store
Content-Language: en
Location: http://localhost/redirect/cf?code=OMCDG1k8Omt3afksGI2SefV7ZIVihT8R&state=6KW5NQ
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

$ curl 'http://localhost/oauth/authorize?response_type=token&client_id=app&scope=openid&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fapp%2F&login_hint=%257B%2522origin%2522%253A%2522uaa%2522%257D' -i -X GET \
    -H 'Accept: application/x-www-form-urlencoded'

GET /oauth/authorize?response_type=token&client_id=app&scope=openid&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fapp%2F&login_hint=%257B%2522origin%2522%253A%2522uaa%2522%257D HTTP/1.1
Accept: application/x-www-form-urlencoded
Host: localhost

HTTP/1.1 302 Found
Content-Security-Policy: script-src 'self'
Strict-Transport-Security: max-age=31536000
Set-Cookie: X-Uaa-Csrf=8wUOKg2m2ZjAGdVMA08tCq; Path=/; Max-Age=86400; Expires=Thu, 21 Nov 2024 08:36:18 GMT; HttpOnly; SameSite=Lax
Cache-Control: no-store
Content-Language: en
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Location: http://localhost:8080/app/#token_type=bearer&access_token=eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.lVkyxM3mwNcKWmgshQso7P8HzsoqEgIrYvpbxXf6w9vmdG-1D6Nl_2SuPeKNrUMjDenSq4OOK8rYMefUPJfrTyzqqpO_xG_P7G2ZVOm4JVdqX_bzrR8BDOZmmQvulBf07G33QjXpeSQXhfQYJaDI06RD0QqbpdQjSUN_AwMi0TFRl05J4Cq7yNAGGp4UkGTgsUN_8Gf-UCOfKBqfjo1bXSu9zbht0EijjkRHEcaISRrR1vtFWHGsD85HFKSOTomNnp8a6P8Tkx8YZnM7_AUrx58Uw0GjL4KptYvgCW6G_npxUuyUjqJzKwVA9sKXXoGvcqX6BP-wZev6Bl1aWWL8HQ&expires_in=43199&jti=a24248d55dde44f3b2f7fb69bc3dc0d6

$ curl 'http://localhost/oauth/authorize?response_type=token&client_id=app&scope=openid&prompt=none&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fapp%2F' -i -X GET \
    -H 'Accept: application/x-www-form-urlencoded'

GET /oauth/authorize?response_type=token&client_id=app&scope=openid&prompt=none&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fapp%2F HTTP/1.1
Accept: application/x-www-form-urlencoded
Host: localhost

HTTP/1.1 302 Found
Content-Security-Policy: script-src 'self'
Set-Cookie: Current-User=; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Location: http://localhost:8080/app/#error=login_required&session_state=1c02565870029b4789b9b1db7dfe4d48592ace988a9e9c10aff4d85f801a6b9b.2a5a55590d990468e88983da4801d3920f645940b915f79708648f3d00eee5ad

$ curl 'http://localhost/.well-known/openid-configuration' -i -X GET \
    -H 'Accept: application/json'

GET /.well-known/openid-configuration HTTP/1.1
Accept: application/json
Host: localhost

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Content-Type: application/json
Content-Length: 1375

{
  "issuer" : "http://localhost:8080/uaa/oauth/token",
  "authorization_endpoint" : "http://localhost/oauth/authorize",
  "token_endpoint" : "http://localhost/oauth/token",
  "token_endpoint_auth_methods_supported" : [ "client_secret_basic", "client_secret_post", "private_key_jwt" ],
  "token_endpoint_auth_signing_alg_values_supported" : [ "RS256", "HS256" ],
  "userinfo_endpoint" : "http://localhost/userinfo",
  "jwks_uri" : "http://localhost/token_keys",
  "end_session_endpoint" : "http://localhost/logout.do",
  "scopes_supported" : [ "openid", "profile", "email", "phone", "roles", "user_attributes" ],
  "response_types_supported" : [ "code", "code id_token", "id_token", "token id_token" ],
  "subject_types_supported" : [ "public" ],
  "id_token_signing_alg_values_supported" : [ "RS256", "HS256" ],
  "id_token_encryption_alg_values_supported" : [ "none" ],
  "claim_types_supported" : [ "normal" ],
  "claims_supported" : [ "sub", "user_name", "origin", "iss", "auth_time", "amr", "acr", "client_id", "aud", "zid", "grant_type", "user_id", "azp", "scope", "exp", "iat", "jti", "rev_sig", "cid", "given_name", "family_name", "phone_number", "email" ],
  "claims_parameter_supported" : false,
  "service_documentation" : "http://docs.cloudfoundry.org/api/uaa/",
  "ui_locales_supported" : [ "en-US" ],
  "code_challenge_methods_supported" : [ "S256", "plain" ]
}

$ curl 'http://localhost/oauth/authorize?response_type=id_token&client_id=app&scope=openid&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fapp%2F&login_hint=%257B%2522origin%2522%253A%2522uaa%2522%257D' -i -X GET \
    -H 'Accept: application/x-www-form-urlencoded'

GET /oauth/authorize?response_type=id_token&client_id=app&scope=openid&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fapp%2F&login_hint=%257B%2522origin%2522%253A%2522uaa%2522%257D HTTP/1.1
Accept: application/x-www-form-urlencoded
Host: localhost

HTTP/1.1 302 Found
Content-Security-Policy: script-src 'self'
Strict-Transport-Security: max-age=31536000
Set-Cookie: X-Uaa-Csrf=xHvJ1VPrF-nI2hPv7NI2em; Path=/; Max-Age=86400; Expires=Thu, 21 Nov 2024 08:36:18 GMT; HttpOnly; SameSite=Lax
Cache-Control: no-store
Content-Language: en
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Location: http://localhost:8080/app/#token_type=bearer&id_token=eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.aQQqrWiWArTo_YIcJ893oobkTEfE6joC4Yu0bG9K-r_yzhII2oYKRAoSLaH8eD1zXp28cbnAfIF2kECUPYVwl09D-vrlZRxFI79QSWgnKAat734pqif3bOlGkfvE__EytQcUE84gDlYq2CfszyIVVLF7WT4HPSW_i2BUoGYvgIthI-6mzafYVkPcikDHS3WiAgAnXrElyMFhueT8NPkH0rultrzbT31mqi4HbEK225z7ROW46iEegXAkBvA3Z6LDKGV6dga-fWWArzQw4w7U0paT_kcpx7wShnHp6s_oWoI3q7-UrRKsHTD_yd4WW-7Va74RljG13uFZxK_VUy0DTg&expires_in=43199&jti=a5b0ced89ae1498ea36f468d2f81691c

$ curl 'http://localhost/oauth/authorize?response_type=token+id_token&client_id=app&scope=openid&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fapp%2F&login_hint=%257B%2522origin%2522%253A%2522uaa%2522%257D' -i -X GET \
    -H 'Accept: application/x-www-form-urlencoded'

GET /oauth/authorize?response_type=token+id_token&client_id=app&scope=openid&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fapp%2F&login_hint=%257B%2522origin%2522%253A%2522uaa%2522%257D HTTP/1.1
Accept: application/x-www-form-urlencoded
Host: localhost

HTTP/1.1 302 Found
Content-Security-Policy: script-src 'self'
Strict-Transport-Security: max-age=31536000
Set-Cookie: X-Uaa-Csrf=WM-icOs2MxM0KHTGaUM1m7; Path=/; Max-Age=86400; Expires=Thu, 21 Nov 2024 08:36:18 GMT; HttpOnly; SameSite=Lax
Cache-Control: no-store
Content-Language: en
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Location: http://localhost:8080/app/#token_type=bearer&access_token=eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.fGwzQWxXBCAAUAjRJ2OSMev9Syx4Ktm2vrCBX8Nq0Kv7YQtpm2M2VhwMm5XXrsasBJxtvK-woYhPwGL_o0Y9upsmfGARWLB4lHmKStY2vr3p3LDohF3E9_lIYxptPCegXfPWDW_w-_tSLcQPCCRUlHhAQkXY4U-CRBwOgCruvrJwmK9gBaqwPcxnTkehB9MCoYhxjudhkGz-58pBlsE9lk9g1i_XzU3c1DbN4CDWRoH_7GFxPcjqvP5n8p-MMSdxp-HtbQivbkYQ8n49yjrtfu2XVXc_0vonSpFfX-iDG9bR_bZ1ORKYnW6dNmjbsr9k3P4E_MYsADdoAsd5jThLOw&id_token=eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.bIloGb6uoivY_Ntp4921TrNqg-gV1en0gRsicVBRfN0Cset44Is3UwMLP8I3GBNmnNq-s3SRDruw9bofXkFrHYsl6CH1DzznsrV5hSLpw-EDaDCQ1qgba_hXiltRIzTUP_vWxDdjtN-VtBh1j8elc2R72YqtgB5MaXZY9d8GGYbNRzYBzyJiqGBwr40czarn6rr2R9YsAbRtYVcbF2gE1A1Eukw0JK0ggRw7xX189L0KaZC6NRAbr6IcdYHLd-RudrnqO0Cem24rR0mpkB7PA1tDgGKXtZSLZztKOPva-MKoHrUGjtw7ZyWP5C6dVHYkG7vMa7_gQloltiNlL8JNMA&expires_in=43199&jti=0b483f166aa94c538c3a3f3dbebf085d

$ curl 'http://localhost/oauth/authorize?response_type=code+id_token&client_id=app&scope=openid&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fapp%2F&login_hint=%257B%2522origin%2522%253A%2522uaa%2522%257D' -i -X GET \
    -H 'Accept: application/x-www-form-urlencoded'

GET /oauth/authorize?response_type=code+id_token&client_id=app&scope=openid&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fapp%2F&login_hint=%257B%2522origin%2522%253A%2522uaa%2522%257D HTTP/1.1
Accept: application/x-www-form-urlencoded
Host: localhost

HTTP/1.1 302 Found
Content-Security-Policy: script-src 'self'
Strict-Transport-Security: max-age=31536000
Set-Cookie: X-Uaa-Csrf=tLvLI5cCtq3Fx4-6DjhR-y; Path=/; Max-Age=86400; Expires=Thu, 21 Nov 2024 08:36:19 GMT; HttpOnly; SameSite=Lax
Cache-Control: no-store
Content-Language: en
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Location: http://localhost:8080/app/#token_type=bearer&id_token=eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.ApwtPEYqrYv1ZltObebfhTvoGHPJF8zhsD72ZudJMub_45OOeeyWM8u5pBhfC7MjT-IesVul_VTrcSjwKlSudRnVyHyVXMGgchAJzk5s4NDzdkMkVifS0ml0s6ED_RVn38Y1YzRaivi5TBC_9R_NCIYISrEb5XymODNpiPbL-blJ2eUqmRCV3lGnW60f9M0kwktIFDBOFHuMewK9b_HHA4gXbxY13cTdXcJzpd_xV0poqV_GwjwaHPL7YVslp6ITbe3800F5LD7b4c42eMT9GUVWa3jrxeJx1IVR4euOQE6x_a5veg54nO8QGQs0zFxBLTB7w13tZzndxWlSkdUbVg&code=fI51uXARydb4j33xUxdX5q0GBPt_-SeN&expires_in=43199&jti=0620573ed8a7400a88866f07248b6ac8

$ curl 'http://localhost/oauth/token' -i -u 'login:loginsecret' -X POST \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -H 'Accept: application/json' \
    -d 'client_id=login&client_secret=loginsecret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&grant_type=authorization_code&code=ya5CA_CTCuSuxl6xI0WE36Z7Bk_XRGco&token_format=opaque&code_verifier=dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk&redirect_uri=http%3A%2F%2Flocalhost%2Fredirect%2Fcf'

POST /oauth/token HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Authorization: Basic bG9naW46bG9naW5zZWNyZXQ=
Accept: application/json
Host: localhost

client_id=login&client_secret=loginsecret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&grant_type=authorization_code&code=ya5CA_CTCuSuxl6xI0WE36Z7Bk_XRGco&token_format=opaque&code_verifier=dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk&redirect_uri=http%3A%2F%2Flocalhost%2Fredirect%2Fcf

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-store
Pragma: no-cache
Content-Type: application/json;charset=UTF-8
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 1386

{
  "access_token" : "a63d1ede97674b8bb0e91aa23e584eed",
  "token_type" : "bearer",
  "id_token" : "eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.NJQ4Vbj2p3h1S4Pf67PVKSjtoqyq0oV0wGXxgI5gYjvx00qo_0ABhboL5b3VZOL7JxnLKatlgO8Kev9c42MCEiJAsqd0lZEiXcnffilrrTVeC-9pCnjJl1G8VSqXLRZvSsYywtOQDfKwS8TkDDEjkV_gLQK9YGz0hP_AYFzSc4eISROyrDlgtls3UVJfvI9VGHleXxMhuh_1zRzpJs5-12TIUBIcmnGEJl3Kwv8ZKsNWF1fQy7aXTi2wYcJ_zA7oBjRsSg9I-rkN9eVV5ljIghxpMtM9FBQ9JoW0wCUMcNbNuuV91RvjTv3tCIdAjZBbtDxwJkbAtHlJeNFAUw5RPw",
  "refresh_token" : "5df1598d0e2344a8ab3c87ed3e49ceea-r",
  "expires_in" : 43199,
  "scope" : "openid oauth.approvals",
  "jti" : "a63d1ede97674b8bb0e91aa23e584eed"
}

$ curl 'http://localhost/oauth/token' -i -X POST \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -H 'Accept: application/json' \
    -d 'client_id=login&client_secret=loginsecret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&scope=scim.write&grant_type=client_credentials&token_format=opaque'

POST /oauth/token HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Accept: application/json
Host: localhost

client_id=login&client_secret=loginsecret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&scope=scim.write&grant_type=client_credentials&token_format=opaque

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-store
Pragma: no-cache
Content-Type: application/json;charset=UTF-8
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 180

{
  "access_token" : "c1ef9c8c720b413496473e3abe983f7e",
  "token_type" : "bearer",
  "expires_in" : 43199,
  "scope" : "scim.write",
  "jti" : "c1ef9c8c720b413496473e3abe983f7e"
}

$ curl 'http://localhost/oauth/token' -i -u 'login:loginsecret' -X POST \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -H 'Accept: application/json' \
    -d 'grant_type=client_credentials&scope=scim.write&token_format=opaque'

POST /oauth/token HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Accept: application/json
Authorization: Basic bG9naW46bG9naW5zZWNyZXQ=
Host: localhost

grant_type=client_credentials&scope=scim.write&token_format=opaque

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-store
Pragma: no-cache
Content-Type: application/json;charset=UTF-8
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 180

{
  "access_token" : "4c68b2d6651f4f25b472e60c5155e2aa",
  "token_type" : "bearer",
  "expires_in" : 43199,
  "scope" : "scim.write",
  "jti" : "4c68b2d6651f4f25b472e60c5155e2aa"
}

$ curl 'http://localhost/oauth/token' -i -X POST \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -H 'Accept: application/json' \
    -d 'client_id=app&client_secret=appclientsecret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&grant_type=password&username=vPDUJL%40test.org&password=secr3T&token_format=opaque&login_hint=%7B%22origin%22%3A%22uaa%22%7D'

POST /oauth/token HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Accept: application/json
Host: localhost

client_id=app&client_secret=appclientsecret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&grant_type=password&username=vPDUJL%40test.org&password=secr3T&token_format=opaque&login_hint=%7B%22origin%22%3A%22uaa%22%7D

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-store
Pragma: no-cache
Content-Type: application/json;charset=UTF-8
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 1439

{
  "access_token" : "8a96de3465a740e495d560a29b227cce",
  "token_type" : "bearer",
  "id_token" : "eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.eyJzdWIiOiIwMjliODM1YS1kMWQ0LTQyZDMtODE3MS0xNjVlODkyMDQ5YjEiLCJlbWFpbF92ZXJpZmllZCI6dHJ1ZSwidXNlcl9uYW1lIjoidlBEVUpMQHRlc3Qub3JnIiwiYW1yIjpbInB3ZCJdLCJvcmlnaW4iOiJ1YWEiLCJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjgwODAvdWFhL29hdXRoL3Rva2VuIiwiY2xpZW50X2lkIjoiYXBwIiwiYXVkIjpbImFwcCJdLCJ6aWQiOiJ1YWEiLCJncmFudF90eXBlIjoicGFzc3dvcmQiLCJ1c2VyX2lkIjoiMDI5YjgzNWEtZDFkNC00MmQzLTgxNzEtMTY1ZTg5MjA0OWIxIiwiYXpwIjoiYXBwIiwic2NvcGUiOlsib3BlbmlkIl0sImF1dGhfdGltZSI6MTczMjA5MTc4MiwiZXhwIjoxNzMyMTM0OTgyLCJpYXQiOjE3MzIwOTE3ODIsImVtYWlsIjoidlBEVUpMQHRlc3Qub3JnIiwianRpIjoiOGE5NmRlMzQ2NWE3NDBlNDk1ZDU2MGEyOWIyMjdjY2UiLCJyZXZfc2lnIjoiYTBkYzgwZDgiLCJjaWQiOiJhcHAifQ.enajTKmNrGSXEs0n-u7OnvfzOa7Zzv5uamUDXeyEkM8rLDVmx__RgNWga1lHD1zxj1Diisirh5bF4X-rS6_k9fTFB2ShwaWkQCakgY38yTt_e762VF7cRKmL56CZeqyqD9yutUkdwEFFXrCu7vRvYKTuwzZA31ko0eO9G4-o1KV3HYyYBkI27D6jOJJGVjFkooTC0-L2l0945Tzdq6uChdhFZZfa1JNx3aT3u7rxnpPDivpfhNLOLPax3cOIFo1jlEuj9LL3FH8jQJdu9Rqvt5aBjbZlVO0wd4dqnSwdl3I1kxffq47zTsWvIlQCx55he-qcyNI3wv7Cd2tzGGx7Pw",
  "refresh_token" : "970efe03e2a14c18856a44b95aaea4b1-r",
  "expires_in" : 43199,
  "scope" : "scim.userids openid cloud_controller.read password.write cloud_controller.write",
  "jti" : "8a96de3465a740e495d560a29b227cce"
}

$ curl 'http://localhost/oauth/token' -i -u 'app:appclientsecret' -X POST \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -H 'Accept: application/json' \
    -d 'grant_type=password&passcode=HdX38Hd56qjeY40edn35dZr8DoGI38S6&token_format=opaque'

POST /oauth/token HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Accept: application/json
Authorization: Basic YXBwOmFwcGNsaWVudHNlY3JldA==
Host: localhost

grant_type=password&passcode=HdX38Hd56qjeY40edn35dZr8DoGI38S6&token_format=opaque

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-store
Pragma: no-cache
Content-Type: application/json;charset=UTF-8
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 1380

{
  "access_token" : "213b4d748531494eaf885e6780cd9d89",
  "token_type" : "bearer",
  "id_token" : "eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.OS958Xk6Mo_9NJzSqK8GFuWhvlIEPEJGJe_-OxaMSReWEJf6Q12sRBTSObaBDRmcMAUNekVElcHxWmF4YNt3JYLFp_T2LtYn9Nh4USWkaExXAXKowT2m79XbShgUXABYhs7ZG0fyQwNuWvN2avKdaT1N1d6BPXyHOHQUQtWPVrs7tu9baBPO99ZdOMC5JA5sCphwGbvoAr9lsklt9PI2p9IbeA54GUv5DkU94V4viT_ilikodu7arp-Lyt4jMMKf27oaDiEXC_cvJI6FvLtrSMlEkT9TdUIH2YES0yLPko8QbRCLCDABn_RXRj9cM9sbtDiqmt63FtjWz2Yb-YaXKw",
  "refresh_token" : "43f93774898843c8b36700462759c041-r",
  "expires_in" : 43199,
  "scope" : "scim.userids openid cloud_controller.read password.write cloud_controller.write",
  "jti" : "213b4d748531494eaf885e6780cd9d89"
}

$ curl 'http://localhost/oauth/token' -i -X POST \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -H 'Authorization: Bearer 1e8337ecc90941298803c66a2455f115' \
    -H 'Accept: application/json' \
    -d 'client_id=app&grant_type=user_token&scope=openid&token_format=jwt'

POST /oauth/token HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Authorization: Bearer 1e8337ecc90941298803c66a2455f115
Accept: application/json
Host: localhost

client_id=app&grant_type=user_token&scope=openid&token_format=jwt

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-store
Pragma: no-cache
Content-Type: application/json;charset=UTF-8
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 206

{
  "access_token" : null,
  "token_type" : "bearer",
  "refresh_token" : "3839962c2b2d4e60b2f1575c0e1b4929-r",
  "expires_in" : 43199,
  "scope" : "openid",
  "jti" : "3839962c2b2d4e60b2f1575c0e1b4929-r"
}

$ curl 'http://68uexx.localhost:8080/uaa/oauth/token/alias/68uexx.cloudfoundry-saml-login' -i -X POST \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -H 'Accept: application/json' \
    -H 'Host: 68uexx.localhost' \
    -d 'grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Asaml2-bearer&client_id=testclientdI5NZY&client_secret=secret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&assertion=PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48c2FtbDI6QXNzZXJ0aW9uIHhtbG5zOnNhbWwyPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIiBJc3N1ZUluc3RhbnQ9IjIwMjQtMTEtMjBUMDg6MzY6MjMuNDM0WiIgVmVyc2lvbj0iMi4wIj48c2FtbDI6SXNzdWVyPjY4dWV4eC5jbG91ZGZvdW5kcnktc2FtbC1sb2dpbjwvc2FtbDI6SXNzdWVyPjxkczpTaWduYXR1cmUgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPjxkczpTaWduZWRJbmZvPjxkczpDYW5vbmljYWxpemF0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8-PGRzOlNpZ25hdHVyZU1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZHNpZy1tb3JlI3JzYS1zaGEyNTYiLz48ZHM6UmVmZXJlbmNlIFVSST0iIj48ZHM6VHJhbnNmb3Jtcz48ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI2VudmVsb3BlZC1zaWduYXR1cmUiLz48ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8-PC9kczpUcmFuc2Zvcm1zPjxkczpEaWdlc3RNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzA0L3htbGVuYyNzaGEyNTYiLz48ZHM6RGlnZXN0VmFsdWU-RVNRODNSaFRVQ04wUUpUV2dVUWdZMTRPUGR6L25kNjZMNDVxTFpuTjRYWT08L2RzOkRpZ2VzdFZhbHVlPjwvZHM6UmVmZXJlbmNlPjwvZHM6U2lnbmVkSW5mbz48ZHM6U2lnbmF0dXJlVmFsdWU-WFA0aC9tdjBlYTRBNU10aG1ERVpEZ3BvbzJKL1FaanA1U0t0MFFzM3ZnSW9lcFJjRmtPbW85ajNQNWh4Uk9oVCtkdkpnQkVmdjBqMGl2K3FrczdzZlliUHdNMm1jeUk0d2ZxZGIrMU05QWJTa3RrYVZZcmlnZkYwR2xNeGIzaHBycjRJU1ZpbXlHMkY2QkFrTWhkU2lNWGdqYlUxR0Y2dFpNei9McENkMEI4PTwvZHM6U2lnbmF0dXJlVmFsdWU-PGRzOktleUluZm8-PGRzOlg1MDlEYXRhPjxkczpYNTA5Q2VydGlmaWNhdGU-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-PHNhbWwyOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAyNC0xMS0yMFQwOTozNjoyMy40MzRaIiBSZWNpcGllbnQ9Imh0dHA6Ly82OHVleHgubG9jYWxob3N0OjgwODAvdWFhL29hdXRoL3Rva2VuL2FsaWFzLzY4dWV4eC5jbG91ZGZvdW5kcnktc2FtbC1sb2dpbiIvPjwvc2FtbDI6U3ViamVjdENvbmZpcm1hdGlvbj48L3NhbWwyOlN1YmplY3Q-PHNhbWwyOkNvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDI0LTExLTIwVDA4OjM2OjIxLjQ0MloiIE5vdE9uT3JBZnRlcj0iMjAyNC0xMS0yMFQwOTozNjoyMy40MzRaIj48c2FtbDI6QXVkaWVuY2VSZXN0cmljdGlvbj48c2FtbDI6QXVkaWVuY2U-Njh1ZXh4LmNsb3VkZm91bmRyeS1zYW1sLWxvZ2luPC9zYW1sMjpBdWRpZW5jZT48L3NhbWwyOkF1ZGllbmNlUmVzdHJpY3Rpb24-PC9zYW1sMjpDb25kaXRpb25zPjxzYW1sMjpBdXRoblN0YXRlbWVudCBBdXRobkluc3RhbnQ9IjIwMjQtMTEtMjBUMDg6MzY6MjMuNDM0WiIgU2Vzc2lvbkluZGV4PSJhMzU4YTA2YzE1amE4ZDdhMWlkamFqMDdqYjUyZ2RpIiBTZXNzaW9uTm90T25PckFmdGVyPSIyMDI0LTExLTIwVDA5OjM2OjIzLjQzNFoiPjxzYW1sMjpBdXRobkNvbnRleHQ-PHNhbWwyOkF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkPC9zYW1sMjpBdXRobkNvbnRleHRDbGFzc1JlZj48L3NhbWwyOkF1dGhuQ29udGV4dD48L3NhbWwyOkF1dGhuU3RhdGVtZW50Pjwvc2FtbDI6QXNzZXJ0aW9uPg&scope=openid'

POST /uaa/oauth/token/alias/68uexx.cloudfoundry-saml-login HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Accept: application/json
Host: 68uexx.localhost

grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Asaml2-bearer&client_id=testclientdI5NZY&client_secret=secret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&assertion=PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48c2FtbDI6QXNzZXJ0aW9uIHhtbG5zOnNhbWwyPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIiBJc3N1ZUluc3RhbnQ9IjIwMjQtMTEtMjBUMDg6MzY6MjMuNDM0WiIgVmVyc2lvbj0iMi4wIj48c2FtbDI6SXNzdWVyPjY4dWV4eC5jbG91ZGZvdW5kcnktc2FtbC1sb2dpbjwvc2FtbDI6SXNzdWVyPjxkczpTaWduYXR1cmUgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPjxkczpTaWduZWRJbmZvPjxkczpDYW5vbmljYWxpemF0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8-PGRzOlNpZ25hdHVyZU1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZHNpZy1tb3JlI3JzYS1zaGEyNTYiLz48ZHM6UmVmZXJlbmNlIFVSST0iIj48ZHM6VHJhbnNmb3Jtcz48ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI2VudmVsb3BlZC1zaWduYXR1cmUiLz48ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8-PC9kczpUcmFuc2Zvcm1zPjxkczpEaWdlc3RNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzA0L3htbGVuYyNzaGEyNTYiLz48ZHM6RGlnZXN0VmFsdWU-RVNRODNSaFRVQ04wUUpUV2dVUWdZMTRPUGR6L25kNjZMNDVxTFpuTjRYWT08L2RzOkRpZ2VzdFZhbHVlPjwvZHM6UmVmZXJlbmNlPjwvZHM6U2lnbmVkSW5mbz48ZHM6U2lnbmF0dXJlVmFsdWU-WFA0aC9tdjBlYTRBNU10aG1ERVpEZ3BvbzJKL1FaanA1U0t0MFFzM3ZnSW9lcFJjRmtPbW85ajNQNWh4Uk9oVCtkdkpnQkVmdjBqMGl2K3FrczdzZlliUHdNMm1jeUk0d2ZxZGIrMU05QWJTa3RrYVZZcmlnZkYwR2xNeGIzaHBycjRJU1ZpbXlHMkY2QkFrTWhkU2lNWGdqYlUxR0Y2dFpNei9McENkMEI4PTwvZHM6U2lnbmF0dXJlVmFsdWU-PGRzOktleUluZm8-PGRzOlg1MDlEYXRhPjxkczpYNTA5Q2VydGlmaWNhdGU-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-PHNhbWwyOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAyNC0xMS0yMFQwOTozNjoyMy40MzRaIiBSZWNpcGllbnQ9Imh0dHA6Ly82OHVleHgubG9jYWxob3N0OjgwODAvdWFhL29hdXRoL3Rva2VuL2FsaWFzLzY4dWV4eC5jbG91ZGZvdW5kcnktc2FtbC1sb2dpbiIvPjwvc2FtbDI6U3ViamVjdENvbmZpcm1hdGlvbj48L3NhbWwyOlN1YmplY3Q-PHNhbWwyOkNvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDI0LTExLTIwVDA4OjM2OjIxLjQ0MloiIE5vdE9uT3JBZnRlcj0iMjAyNC0xMS0yMFQwOTozNjoyMy40MzRaIj48c2FtbDI6QXVkaWVuY2VSZXN0cmljdGlvbj48c2FtbDI6QXVkaWVuY2U-Njh1ZXh4LmNsb3VkZm91bmRyeS1zYW1sLWxvZ2luPC9zYW1sMjpBdWRpZW5jZT48L3NhbWwyOkF1ZGllbmNlUmVzdHJpY3Rpb24-PC9zYW1sMjpDb25kaXRpb25zPjxzYW1sMjpBdXRoblN0YXRlbWVudCBBdXRobkluc3RhbnQ9IjIwMjQtMTEtMjBUMDg6MzY6MjMuNDM0WiIgU2Vzc2lvbkluZGV4PSJhMzU4YTA2YzE1amE4ZDdhMWlkamFqMDdqYjUyZ2RpIiBTZXNzaW9uTm90T25PckFmdGVyPSIyMDI0LTExLTIwVDA5OjM2OjIzLjQzNFoiPjxzYW1sMjpBdXRobkNvbnRleHQ-PHNhbWwyOkF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkPC9zYW1sMjpBdXRobkNvbnRleHRDbGFzc1JlZj48L3NhbWwyOkF1dGhuQ29udGV4dD48L3NhbWwyOkF1dGhuU3RhdGVtZW50Pjwvc2FtbDI6QXNzZXJ0aW9uPg&scope=openid

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-store
Pragma: no-cache
Content-Type: application/json;charset=UTF-8
Content-Disposition: inline;filename=f.txt
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 1497

{
  "access_token" : "eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.R87xbDsrmnBEugqdFNO8Sq9FphlvM9uKVyFlLlP57T94JDMP1mFnLtV-BB7uWGo7LebEa1Kbav78M4fQJnBYetKWWH9yuGcetBCUa7f8c5zivCNN-sx5LTo6nxv3Cr_XxxL6gpwFVXTPIaL9u3XkKZFjiMZn14n99LbbRQIsDerNfhczNKeq2WdhVHrUezGwTSZGXnMDWR67ZgdLTpR-CvTpMJ4wBI5Bh6rt7qQfH2SDuKD2D39mIIBOCxb5ttYoVOuwaImHiMwX1szoYfbxMIwtIUMbarCXSS2pw26ikElF_jQb8xWCkgRw3QEa03TWj5jnvOCbq3IbFrD5NojB_g",
  "token_type" : "bearer",
  "refresh_token" : "5f50fec1a002430fb96e59a34e6ea622-r",
  "expires_in" : 599,
  "scope" : "openid",
  "jti" : "6076b3f3f929486da27c06e9fd5ce05d"
}

$ curl 'http://localhost/oauth/token' -i -X POST \
    -H 'Accept: application/json' \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -d 'client_id=8tzkujqs3gil&client_secret=secret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Ajwt-bearer&token_format=opaque&response_type=token+id_token&scope=openid&assertion=eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.b3ApztVy5EOtSks6Xf7eqRnRgEadso-Db9gN1nszTP4BIo1JjDxm65vNnt19c1pUgqQDsQ0Qnr_E0AeRpIE_99sHlbOcSJlkX3XU675WH2vCByG34wjliQj8FG1X5CK7H7YPoD4f5b350FHlJiwyiB4AzpGcts-UuMrBxDsfD6W-dROsv8pFBo21wJNoL7CrF_Leb2RGo18gO0k_YeMPpjAco0fRgg3lS-smI1GBjEDevETNiSwRn6FcferOiex8xS1qxlW_OTB5i3V3QE6E4KEwM3W0cuY-MR27f6IyWcX2lkOlZJwKPzEZhBZ8POF9ANgDWAvofA9We1HRvcodLQ'

POST /oauth/token HTTP/1.1
Accept: application/json
Content-Type: application/x-www-form-urlencoded
Host: localhost

client_id=8tzkujqs3gil&client_secret=secret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Ajwt-bearer&token_format=opaque&response_type=token+id_token&scope=openid&assertion=eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.b3ApztVy5EOtSks6Xf7eqRnRgEadso-Db9gN1nszTP4BIo1JjDxm65vNnt19c1pUgqQDsQ0Qnr_E0AeRpIE_99sHlbOcSJlkX3XU675WH2vCByG34wjliQj8FG1X5CK7H7YPoD4f5b350FHlJiwyiB4AzpGcts-UuMrBxDsfD6W-dROsv8pFBo21wJNoL7CrF_Leb2RGo18gO0k_YeMPpjAco0fRgg3lS-smI1GBjEDevETNiSwRn6FcferOiex8xS1qxlW_OTB5i3V3QE6E4KEwM3W0cuY-MR27f6IyWcX2lkOlZJwKPzEZhBZ8POF9ANgDWAvofA9We1HRvcodLQ

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-store
Pragma: no-cache
Content-Type: application/json;charset=UTF-8
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 234

{
  "access_token" : "e4a5853332b14ebca884bd006c2fae6e",
  "token_type" : "bearer",
  "refresh_token" : "ad18eba2061d442ea093b0d8d78f9381-r",
  "expires_in" : 43199,
  "scope" : "openid",
  "jti" : "e4a5853332b14ebca884bd006c2fae6e"
}

$ curl 'http://localhost/oauth/token' -i -X POST \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -H 'Accept: application/json' \
    -d 'client_id=app&client_secret=appclientsecret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&grant_type=refresh_token&token_format=opaque&refresh_token=a62c0f9f2c3b47858d68075a54ba28db-r'

POST /oauth/token HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Accept: application/json
Host: localhost

client_id=app&client_secret=appclientsecret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&grant_type=refresh_token&token_format=opaque&refresh_token=a62c0f9f2c3b47858d68075a54ba28db-r

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-store
Pragma: no-cache
Content-Type: application/json;charset=UTF-8
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 1439

{
  "access_token" : "086020b141704f56aa9b5e38a9a6c1b5",
  "token_type" : "bearer",
  "id_token" : "eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.nwMyC144nbY3XDfPtJyN_dpa0yCBdVoU4Um6pqDtMUjBX-eSJ4HGYWXVGhJ6giX9FJ4Om4GFDKBixzWjAEcbi9s9v-bJPMQViRuE0lqzx5uHoulUGDm5YWql_MsFCdcpe_dtYj3MeSdUKrZ7SDf411T-s5wYJzfMDy4PEU7N4g1DxMth7-USO3VBX_ooP_9ytWVsPl6x0N-XOU7UAFXVxEvfNT-xk_jc5m6Z-QNT4HKd0Cv2YJPuoO-MJE6xm2H9gFnyN2ZLpo6AOjZqJrqChfI6VxBtSKHA9LTftSE5hoSJ-221a55i07CdJPa46O3EvMO93wyhmUTM06yiy8eMHA",
  "refresh_token" : "a62c0f9f2c3b47858d68075a54ba28db-r",
  "expires_in" : 43199,
  "scope" : "scim.userids cloud_controller.read password.write cloud_controller.write openid",
  "jti" : "086020b141704f56aa9b5e38a9a6c1b5"
}

$ curl 'http://localhost/oauth/token' -i -X POST \
    -H 'Content-Type: application/x-www-form-urlencoded' \
    -H 'Accept: application/json' \
    -d 'client_id=login&client_secret=loginsecret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&grant_type=authorization_code&code=KBTrWSPponLUlsL8eIWyJDqp121TAWbi&token_format=opaque&code_verifier=dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk&redirect_uri=http%3A%2F%2Flocalhost%2Fredirect%2Fcf'

POST /oauth/token HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Accept: application/json
Host: localhost

client_id=login&client_secret=loginsecret&client_assertion=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjU4ZDU1YzUwMGNjNmI1ODM3OTYxN2UwNmU3ZGVjNmNhIn0.eyJzdWIiOiJsb2dpbiIsImlzcyI6ImxvZ2luIiwianRpIjoiNThkNTVjNTAwY2M2YjU4Mzc5NjE3ZTA2ZTdhZmZlZSIsImV4cCI6MTIzNDU2NzgsImF1ZCI6Imh0dHA6Ly9sb2NhbGhvc3Q6ODA4MC91YWEvb2F1dGgvdG9rZW4ifQ.jwWw0OKZecd4ZjtwQ_ievqBVrh2SieqMF6vY74Oo5H6v-Ibcmumq96NLNtoUEwaAEQQOHb8MWcC8Gwi9dVQdCrtpomC86b_LKkihRBSKuqpw0udL9RMH5kgtC04ctsN0yZNifUWMP85VHn97Ual5eZ2miaBFob3H5jUe98CcBj1TSRehr64qBFYuwt9vD19q6U-ONhRt0RXBPB7ayHAOMYtb1LFIzGAiKvqWEy9f-TBPXSsETjKkAtSuM-WVWi4EhACMtSvI6iJN15f7qlverRSkGIdh1j2vPXpKKBJoRhoLw6YqbgcUC9vAr17wfa_POxaRHvh9JPty0ZXLA4XPtA&client_assertion_type=urn%3Aietf%3Aparams%3Aoauth%3Aclient-assertion-type%3Ajwt-bearer&grant_type=authorization_code&code=KBTrWSPponLUlsL8eIWyJDqp121TAWbi&token_format=opaque&code_verifier=dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk&redirect_uri=http%3A%2F%2Flocalhost%2Fredirect%2Fcf

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-store
Pragma: no-cache
Content-Type: application/json;charset=UTF-8
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 1386

{
  "access_token" : "7e4a73a4fcf740fcb121a93c77e7f83e",
  "token_type" : "bearer",
  "id_token" : "eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.HSySqARl2b0sVWB2NPO-KCuCkMHfc8eDW8_4f0PzgfLT7bIgmTSA89NtJf6KjRXftKePlijfEewdDaCDOQ3f13b1fHsQ5QlniiHCEOO9W_ANULuKxRpKjRgUzGbgVmfsKJ-5Sir8TAx0c4KzJGOckjdzYr51y_laWuL3ZZK0pxgP39f17wS1k1k9tL9144PaV2VvHnpXDwVqC2eUlaOyU4PtmTtCtmI-ksQnfSqhNSb_qAsfuoskbk9Pyuxqx6Dnzh-zvJb_asBgRj_XLAepzo1Z16L5yQi32902zBUvb8tCp6c6kHnnEteWDEj8itlW5q4tRqoeWoLzIxaniAonOw",
  "refresh_token" : "2168c95f3058401f9d250b1eecb87d5d-r",
  "expires_in" : 43199,
  "scope" : "openid oauth.approvals",
  "jti" : "7e4a73a4fcf740fcb121a93c77e7f83e"
}

$ curl 'http://localhost/oauth/token/revoke/user/1585760f-b802-49b3-8e5c-bb4f48a20a28' -i -X GET \
    -H 'Authorization: Bearer eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.X7LwUzng0CEseuyyimb7rH4YQk4ZMopOm5cGdq5FHsavPi9p9cR2T4823QWPpovg1KOCEG8lTEv_NVKXHZX60hLwOweTL5h4C5pEQ8uqUKf_BCrG8tTB_CoG62mzNr8nHHBTR5tCLJvSS0bR-IPnQyNCPfINN3jXVe3S2UicmWXOButyAlYiVIYj1m56eWap95C1j_fKgwbJsD4PaT9_YrtZZaOLKT1iV73b4Y3q-r_FU37FAS9V3al_lnHa7lfDU9dtEVEQuOEZeeAjry3H9SMLRBYkiNKeZysRluR9PKfOC78FT0WdZPpk_H9ksItID8z2qKZYeViDIFPMi-kbTg'

GET /oauth/token/revoke/user/1585760f-b802-49b3-8e5c-bb4f48a20a28 HTTP/1.1
Authorization: Bearer eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.X7LwUzng0CEseuyyimb7rH4YQk4ZMopOm5cGdq5FHsavPi9p9cR2T4823QWPpovg1KOCEG8lTEv_NVKXHZX60hLwOweTL5h4C5pEQ8uqUKf_BCrG8tTB_CoG62mzNr8nHHBTR5tCLJvSS0bR-IPnQyNCPfINN3jXVe3S2UicmWXOButyAlYiVIYj1m56eWap95C1j_fKgwbJsD4PaT9_YrtZZaOLKT1iV73b4Y3q-r_FU37FAS9V3al_lnHa7lfDU9dtEVEQuOEZeeAjry3H9SMLRBYkiNKeZysRluR9PKfOC78FT0WdZPpk_H9ksItID8z2qKZYeViDIFPMi-kbTg
Host: localhost

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

$ curl 'http://localhost/oauth/token/revoke/client/VnqPX4' -i -X GET \
    -H 'Authorization: Bearer 7cf85643fa2949259135956b659db373'

GET /oauth/token/revoke/client/VnqPX4 HTTP/1.1
Authorization: Bearer 7cf85643fa2949259135956b659db373
Host: localhost

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

$ curl 'http://localhost/oauth/token/revoke/user/39fd0cf1-429c-49fe-9c54-05a55eb491d4/client/wlJQg3' -i -X GET \
    -H 'Authorization: Bearer eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.TQCFJKrOC30t4CewKwkrIs8Jb5tibmi9F2gb5hiKa6Dq7FnkZlgjKCgZxYzuN1FRAGhEbZBTwYy1dHD63q4Mq4Cgl5Om6iw85lhrx03CKHHjL7-5vOs6Q4VQqaPhfDtF0Gz2aHffPbabXGW83FxY-bHxH9YCcOwgjITkI41LjX2bLbOaA5BSFb0padpYT4_RYjGy9wGhAf_RBZKgOTW2wR0LYfYEDnK1orrfsTLcbYCxGvnyUfAD6jqKRVSzi-kQvTXOcmvo3yGHr8IMJqrN2hYTVxVVJDFz9D6OX93v7ob7uGqjb_IKIMi9WWeqjBSi3dC_IeihCVlaUhyVMrjD6w'

GET /oauth/token/revoke/user/39fd0cf1-429c-49fe-9c54-05a55eb491d4/client/wlJQg3 HTTP/1.1
Authorization: Bearer eyJqa3UiOiJodHRwczovL2xvY2FsaG9zdDo4MDgwL3VhYS90b2tlbl9rZXlzIiwia2lkIjoibGVnYWN5LXRva2VuLWtleSIsInR5cCI6IkpXVCIsImFsZyI6IlJTMjU2In0.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.TQCFJKrOC30t4CewKwkrIs8Jb5tibmi9F2gb5hiKa6Dq7FnkZlgjKCgZxYzuN1FRAGhEbZBTwYy1dHD63q4Mq4Cgl5Om6iw85lhrx03CKHHjL7-5vOs6Q4VQqaPhfDtF0Gz2aHffPbabXGW83FxY-bHxH9YCcOwgjITkI41LjX2bLbOaA5BSFb0padpYT4_RYjGy9wGhAf_RBZKgOTW2wR0LYfYEDnK1orrfsTLcbYCxGvnyUfAD6jqKRVSzi-kQvTXOcmvo3yGHr8IMJqrN2hYTVxVVJDFz9D6OX93v7ob7uGqjb_IKIMi9WWeqjBSi3dC_IeihCVlaUhyVMrjD6w
Host: localhost

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

$ curl 'http://localhost/oauth/token/revoke/150cde62a4774cb58d26c90870bc0a2d' -i -X DELETE \
    -H 'Authorization: Bearer 150cde62a4774cb58d26c90870bc0a2d'

DELETE /oauth/token/revoke/150cde62a4774cb58d26c90870bc0a2d HTTP/1.1
Authorization: Bearer 150cde62a4774cb58d26c90870bc0a2d
Host: localhost

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

$ curl 'http://localhost/oauth/token/list/user/16c15344-f2fe-410c-a010-1fd42bf9edc8' -i -X GET \
    -H 'Authorization: Bearer 1e920d332c45498db2ae255519b67013' \
    -H 'Accept: application/json'

GET /oauth/token/list/user/16c15344-f2fe-410c-a010-1fd42bf9edc8 HTTP/1.1
Authorization: Bearer 1e920d332c45498db2ae255519b67013
Accept: application/json
Host: localhost

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Content-Type: application/json
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 631

[ {
  "tokenId" : "81ea432c5a8b42ea932821a26ff70d8c",
  "clientId" : "nRxON0",
  "userId" : "16c15344-f2fe-410c-a010-1fd42bf9edc8",
  "format" : "opaque",
  "responseType" : "ACCESS_TOKEN",
  "issuedAt" : 1732091785865,
  "expiresAt" : 1732134985846,
  "scope" : "[openid]",
  "value" : null,
  "zoneId" : "uaa"
}, {
  "tokenId" : "896a3114d58e4df095af7c97aaef29ff-r",
  "clientId" : "nRxON0",
  "userId" : "16c15344-f2fe-410c-a010-1fd42bf9edc8",
  "format" : "opaque",
  "responseType" : "REFRESH_TOKEN",
  "issuedAt" : 1732091785865,
  "expiresAt" : 1734683785838,
  "scope" : "[openid]",
  "value" : null,
  "zoneId" : "uaa"
} ]

$ curl 'http://localhost/oauth/token/list/client/b8iHwB' -i -X GET \
    -H 'Authorization: Bearer 0c885f7578f34250aaca672ac28de4df' \
    -H 'Accept: application/json'

GET /oauth/token/list/client/b8iHwB HTTP/1.1
Authorization: Bearer 0c885f7578f34250aaca672ac28de4df
Accept: application/json
Host: localhost

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Content-Type: application/json
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 286

[ {
  "tokenId" : "0c885f7578f34250aaca672ac28de4df",
  "clientId" : "b8iHwB",
  "userId" : null,
  "format" : "opaque",
  "responseType" : "ACCESS_TOKEN",
  "issuedAt" : 1732091785396,
  "expiresAt" : 1732134985383,
  "scope" : "[tokens.list]",
  "value" : null,
  "zoneId" : "uaa"
} ]

$ curl 'http://localhost/introspect' -i -X POST \
    -H 'Authorization: bearer 19da86593e924e639b4544cf1b299049' \
    -d 'token=61735ab99409452493edda05b34ce178'

POST /introspect HTTP/1.1
Authorization: bearer 19da86593e924e639b4544cf1b299049
Host: localhost
Content-Type: application/x-www-form-urlencoded

token=61735ab99409452493edda05b34ce178

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Content-Type: application/json
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 706

{
  "user_id" : "faa16cb2-46be-4367-921f-282802f7674e",
  "user_name" : "marissa",
  "email" : "[email protected]",
  "client_id" : "app",
  "exp" : 1732134991,
  "scope" : [ "scim.userids", "openid", "cloud_controller.read", "password.write", "cloud_controller.write" ],
  "jti" : "61735ab99409452493edda05b34ce178",
  "aud" : [ "app", "scim", "cloud_controller", "password", "openid" ],
  "sub" : "faa16cb2-46be-4367-921f-282802f7674e",
  "iss" : "http://localhost:8080/uaa/oauth/token",
  "iat" : 1732091791,
  "cid" : "app",
  "grant_type" : "password",
  "azp" : "app",
  "auth_time" : 1732091791,
  "zid" : "uaa",
  "rev_sig" : "57725211",
  "origin" : "uaa",
  "revocable" : true,
  "active" : true
}

$ curl 'http://localhost/check_token' -i -u 'app:appclientsecret' -X POST \
    -d 'token=116c4cc2723840f99ef90d5f0d1468fe&scopes=password.write%2Cscim.userids'

POST /check_token HTTP/1.1
Authorization: Basic YXBwOmFwcGNsaWVudHNlY3JldA==
Host: localhost
Content-Type: application/x-www-form-urlencoded

token=116c4cc2723840f99ef90d5f0d1468fe&scopes=password.write%2Cscim.userids

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
Content-Type: application/json
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 687

{
  "user_id" : "6412cca7-da65-438a-84fb-711d66bc2dce",
  "user_name" : "marissa",
  "email" : "[email protected]",
  "client_id" : "app",
  "exp" : 1732134991,
  "scope" : [ "scim.userids", "openid", "cloud_controller.read", "password.write", "cloud_controller.write" ],
  "jti" : "116c4cc2723840f99ef90d5f0d1468fe",
  "aud" : [ "app", "scim", "cloud_controller", "password", "openid" ],
  "sub" : "6412cca7-da65-438a-84fb-711d66bc2dce",
  "iss" : "http://localhost:8080/uaa/oauth/token",
  "iat" : 1732091791,
  "cid" : "app",
  "grant_type" : "password",
  "azp" : "app",
  "auth_time" : 1732091791,
  "zid" : "uaa",
  "rev_sig" : "a9dfd6ed",
  "origin" : "uaa",
  "revocable" : true
}

$ curl 'http://localhost/token_key' -i -X GET \
    -H 'Accept: application/json' \
    -H 'If-None-Match: 1501570800000'

GET /token_key HTTP/1.1
Accept: application/json
If-None-Match: 1501570800000
Host: localhost

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
ETag: "1732091794155"
Content-Type: application/json
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 920

{
  "kty" : "RSA",
  "e" : "AQAB",
  "use" : "sig",
  "kid" : "testKey",
  "alg" : "RS256",
  "value" : "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m59l2u9iDnMbrXHfqkO\nrn2dVQ3vfBJqcDuFUK03d+1PZGbVlNCqnkpIJ8syFppW8ljnWweP7+LiWpRoz0I7\nfYb3d8TjhV86Y997Fl4DBrxgM6KTJOuE/uxnoDhZQ14LgOU2ckXjOzOdTsnGMKQB\nLCl0vpcXBtFLMaSbpv1ozi8h7DJyVZ6EnFQZUWGdgTMhDrmqevfx95U/16c5WBDO\nkqwIn7Glry9n9Suxygbf8g5AzpWcusZgDLIIZ7JTUldBb8qU2a0Dl4mvLZOn4wPo\njfj9Cw2QICsc5+Pwf21fP+hzf+1WSRHbnYv8uanRO0gZ8ekGaghM/2H6gqJbo2nI\nJwIDAQAB\n-----END PUBLIC KEY-----",
  "n" : "0m59l2u9iDnMbrXHfqkOrn2dVQ3vfBJqcDuFUK03d-1PZGbVlNCqnkpIJ8syFppW8ljnWweP7-LiWpRoz0I7fYb3d8TjhV86Y997Fl4DBrxgM6KTJOuE_uxnoDhZQ14LgOU2ckXjOzOdTsnGMKQBLCl0vpcXBtFLMaSbpv1ozi8h7DJyVZ6EnFQZUWGdgTMhDrmqevfx95U_16c5WBDOkqwIn7Glry9n9Suxygbf8g5AzpWcusZgDLIIZ7JTUldBb8qU2a0Dl4mvLZOn4wPojfj9Cw2QICsc5-Pwf21fP-hzf-1WSRHbnYv8uanRO0gZ8ekGaghM_2H6gqJbo2nIJw"
}

$ curl 'http://localhost/token_key' -i -u 'app:appclientsecret' -X GET \
    -H 'Accept: application/json' \
    -H 'If-None-Match: 1501570800000'

GET /token_key HTTP/1.1
Accept: application/json
Authorization: Basic YXBwOmFwcGNsaWVudHNlY3JldA==
If-None-Match: 1501570800000
Host: localhost

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
ETag: "1732091794120"
Content-Type: application/json
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 95

{
  "kty" : "MAC",
  "alg" : "HS256",
  "value" : "key",
  "use" : "sig",
  "kid" : "testKey"
}

$ curl 'http://localhost/token_keys' -i -u 'app:appclientsecret' -X GET \
    -H 'Accept: application/json' \
    -H 'If-None-Match: 1501570800000'

GET /token_keys HTTP/1.1
Accept: application/json
Authorization: Basic YXBwOmFwcGNsaWVudHNlY3JldA==
If-None-Match: 1501570800000
Host: localhost

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self'
ETag: "1732091794070"
Content-Type: application/json
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 955

{
  "keys" : [ {
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "testKey",
    "alg" : "RS256",
    "value" : "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m59l2u9iDnMbrXHfqkO\nrn2dVQ3vfBJqcDuFUK03d+1PZGbVlNCqnkpIJ8syFppW8ljnWweP7+LiWpRoz0I7\nfYb3d8TjhV86Y997Fl4DBrxgM6KTJOuE/uxnoDhZQ14LgOU2ckXjOzOdTsnGMKQB\nLCl0vpcXBtFLMaSbpv1ozi8h7DJyVZ6EnFQZUWGdgTMhDrmqevfx95U/16c5WBDO\nkqwIn7Glry9n9Suxygbf8g5AzpWcusZgDLIIZ7JTUldBb8qU2a0Dl4mvLZOn4wPo\njfj9Cw2QICsc5+Pwf21fP+hzf+1WSRHbnYv8uanRO0gZ8ekGaghM/2H6gqJbo2nI\nJwIDAQAB\n-----END PUBLIC KEY-----",
    "n" : "0m59l2u9iDnMbrXHfqkOrn2dVQ3vfBJqcDuFUK03d-1PZGbVlNCqnkpIJ8syFppW8ljnWweP7-LiWpRoz0I7fYb3d8TjhV86Y997Fl4DBrxgM6KTJOuE_uxnoDhZQ14LgOU2ckXjOzOdTsnGMKQBLCl0vpcXBtFLMaSbpv1ozi8h7DJyVZ6EnFQZUWGdgTMhDrmqevfx95U_16c5WBDOkqwIn7Glry9n9Suxygbf8g5AzpWcusZgDLIIZ7JTUldBb8qU2a0Dl4mvLZOn4wPojfj9Cw2QICsc5-Pwf21fP-hzf-1WSRHbnYv8uanRO0gZ8ekGaghM_2H6gqJbo2nIJw"
  } ]
}

$ curl 'http://localhost/logout.do?redirect=http%3A%2F%2Fredirect.localhost&client_id=some_client_that_contains_redirect_uri_matching_request_param&post_logout_redirect_uri=http%3A%2F%2Fredirect.localhost&id_token_hint=eyJhbGciOiJSUzI1NiIsImprdSI6Imh0dHBzOi8vbG9jYWxob3N0OjgwODAvdWFhL3Rva2VuX2tleXMiLCJraWQiOiJsZWdhY3ktdG9rZW4ta2V5IiwidHlwIjoiSldUIn0.eyJzdWIiOiJhMGZlMGQ4OS1lZTJjLTRkMjEtYjFjMS0yNTQ2MzZjNzAxMTUiLCJhdWQiOlsic29tZV9jbGllbnRfdGhhdF9jb250YWluc19yZWRpcmVjdF91cmlfbWF0Y2hpbmdfcmVxdWVzdF9wYXJhbSJdLCJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjgwODAvdWFhL29hdXRoL3Rva2VuIiwiYXpwIjoic29tZV9jbGllbnRfdGhhdF9jb250YWluc19yZWRpcmVjdF91cmlfbWF0Y2hpbmdfcmVxdWVzdF9wYXJhbSJ9.efdaWKPkFlgXyaHeQPGgIBAhiJgfcRScVbmuVWu-aUVCZsPnhjCcJQfxcXn61yKSbs8y5Pze3PkSCZdnyh_TvjHtqGBAvTRHuC3ZEDv7tZMQd3reyiS3pLCmn0OSwLB5-Ni4-_DDOcrVy-kOF4yU8rHXiXhGtcFZWpTShvXQgm_WNFKA-kHUOxzl4bQE5S2EnJUB7i1yUMYgaWnhYGzxcIm94AuYrD3OW2D2DFkEqJnQCYUIH6h3iNs_ABHs-O2JUtz12IRVLJCrmTssF-KRBfv_dIwLxSMgK3hI0i9yYZt_pbLbshNkeu32iZgvstSGZeoYbzpZq3mGp9M1CMtvvQ' -i -X GET

GET /logout.do?redirect=http%3A%2F%2Fredirect.localhost&client_id=some_client_that_contains_redirect_uri_matching_request_param&post_logout_redirect_uri=http%3A%2F%2Fredirect.localhost&id_token_hint=eyJhbGciOiJSUzI1NiIsImprdSI6Imh0dHBzOi8vbG9jYWxob3N0OjgwODAvdWFhL3Rva2VuX2tleXMiLCJraWQiOiJsZWdhY3ktdG9rZW4ta2V5IiwidHlwIjoiSldUIn0.eyJzdWIiOiJhMGZlMGQ4OS1lZTJjLTRkMjEtYjFjMS0yNTQ2MzZjNzAxMTUiLCJhdWQiOlsic29tZV9jbGllbnRfdGhhdF9jb250YWluc19yZWRpcmVjdF91cmlfbWF0Y2hpbmdfcmVxdWVzdF9wYXJhbSJdLCJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjgwODAvdWFhL29hdXRoL3Rva2VuIiwiYXpwIjoic29tZV9jbGllbnRfdGhhdF9jb250YWluc19yZWRpcmVjdF91cmlfbWF0Y2hpbmdfcmVxdWVzdF9wYXJhbSJ9.efdaWKPkFlgXyaHeQPGgIBAhiJgfcRScVbmuVWu-aUVCZsPnhjCcJQfxcXn61yKSbs8y5Pze3PkSCZdnyh_TvjHtqGBAvTRHuC3ZEDv7tZMQd3reyiS3pLCmn0OSwLB5-Ni4-_DDOcrVy-kOF4yU8rHXiXhGtcFZWpTShvXQgm_WNFKA-kHUOxzl4bQE5S2EnJUB7i1yUMYgaWnhYGzxcIm94AuYrD3OW2D2DFkEqJnQCYUIH6h3iNs_ABHs-O2JUtz12IRVLJCrmTssF-KRBfv_dIwLxSMgK3hI0i9yYZt_pbLbshNkeu32iZgvstSGZeoYbzpZq3mGp9M1CMtvvQ HTTP/1.1
Host: localhost

HTTP/1.1 302 Found
Content-Security-Policy: script-src 'self'
Strict-Transport-Security: max-age=31536000
Set-Cookie: X-Uaa-Csrf=QAbIFpJhms2veqMyCA4bwG; Path=/; Max-Age=86400; Expires=Thu, 21 Nov 2024 08:36:26 GMT; HttpOnly; SameSite=Lax
Set-Cookie: Current-User=; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: X-Uaa-Csrf=OPTrv7g0I5Qd4Gic99wIqk; Path=/; Max-Age=0; Expires=Thu, 1 Jan 1970 00:00:10 GMT; HttpOnly; SameSite=Lax
Set-Cookie: JSESSIONID=; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Location: http://redirect.localhost

{
    "id":"testzone1",
    "subdomain":"testzone1",
    "name":"The Twiglet Zone[testzone1]",
    "version":0,
    "description":"Like the Twilight Zone but tastier[testzone1].",
    "created":1426258488910,
    "last_modified":1426258488910
}

{
    "id": "uaa",
    "subdomain": "",
    "name": "uaa",
    "version": 0,
    "description": "The system zone for backwards compatibility",
    "created": 946710000000,
    "last_modified": 946710000000
}

$ curl 'http://localhost/identity-zones' -i -X POST \
    -H 'Content-Type: application/json' \
    -H 'Authorization: Bearer f2547a9343c0420abedeae46745597d7' \
    -d '{
  "id" : "twiglet-create",
  "subdomain" : "twiglet-create",
  "config" : {
    "clientSecretPolicy" : {
      "minLength" : -1,
      "maxLength" : -1,
      "requireUpperCaseCharacter" : -1,
      "requireLowerCaseCharacter" : -1,
      "requireDigit" : -1,
      "requireSpecialCharacter" : -1
    },
    "tokenPolicy" : {
      "accessTokenValidity" : 3600,
      "refreshTokenValidity" : 7200,
      "jwtRevocable" : false,
      "refreshTokenUnique" : false,
      "refreshTokenRotate" : false,
      "refreshTokenFormat" : "opaque",
      "activeKeyId" : "active-key-1",
      "keys" : {
        "active-key-1" : {
          "signingKey" : "-----BEGIN RSA PRIVATE KEY-----\nMIIBOwIBAAJBAJv8ZpB5hEK7qxP9K3v43hUS5fGT4waKe7ix4Z4mu5UBv+cw7WSF\nAt0Vaag0sAbsPzU8Hhsrj/qPABvfB8asUwcCAwEAAQJAG0r3ezH35WFG1tGGaUOr\nQA61cyaII53ZdgCR1IU8bx7AUevmkFtBf+aqMWusWVOWJvGu2r5VpHVAIl8nF6DS\nkQIhAMjEJ3zVYa2/Mo4ey+iU9J9Vd+WoyXDQD4EEtwmyG1PpAiEAxuZlvhDIbbce\n7o5BvOhnCZ2N7kYb1ZC57g3F+cbJyW8CIQCbsDGHBto2qJyFxbAO7uQ8Y0UVHa0J\nBO/g900SAcJbcQIgRtEljIShOB8pDjrsQPxmI1BLhnjD1EhRSubwhDw5AFUCIQCN\nA24pDtdOHydwtSB5+zFqFLfmVZplQM/g5kb4so70Yw==\n-----END RSA PRIVATE KEY-----\n",
          "signingCert" : "-----BEGIN CERTIFICATE-----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\nHn+GmxZA\n-----END CERTIFICATE-----\n",
          "signingAlg" : "RS256"
        }
      }
    },
    "samlConfig" : {
      "requestSigned" : true,
      "wantAssertionSigned" : true,
      "activeKeyId" : "legacy-saml-key",
      "keys" : {
        "legacy-saml-key" : {
          "key" : "-----BEGIN RSA PRIVATE KEY-----\nMIIBOwIBAAJBAJv8ZpB5hEK7qxP9K3v43hUS5fGT4waKe7ix4Z4mu5UBv+cw7WSF\nAt0Vaag0sAbsPzU8Hhsrj/qPABvfB8asUwcCAwEAAQJAG0r3ezH35WFG1tGGaUOr\nQA61cyaII53ZdgCR1IU8bx7AUevmkFtBf+aqMWusWVOWJvGu2r5VpHVAIl8nF6DS\nkQIhAMjEJ3zVYa2/Mo4ey+iU9J9Vd+WoyXDQD4EEtwmyG1PpAiEAxuZlvhDIbbce\n7o5BvOhnCZ2N7kYb1ZC57g3F+cbJyW8CIQCbsDGHBto2qJyFxbAO7uQ8Y0UVHa0J\nBO/g900SAcJbcQIgRtEljIShOB8pDjrsQPxmI1BLhnjD1EhRSubwhDw5AFUCIQCN\nA24pDtdOHydwtSB5+zFqFLfmVZplQM/g5kb4so70Yw==\n-----END RSA PRIVATE KEY-----\n",
          "passphrase" : "password",
          "certificate" : "-----BEGIN CERTIFICATE-----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\nHn+GmxZA\n-----END CERTIFICATE-----\n"
        }
      },
      "entityID" : "cloudfoundry-saml-login",
      "disableInResponseToCheck" : false,
      "privateKeyPassword" : "password",
      "certificate" : "-----BEGIN CERTIFICATE-----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\nHn+GmxZA\n-----END CERTIFICATE-----\n",
      "privateKey" : "-----BEGIN RSA PRIVATE KEY-----\nMIIBOwIBAAJBAJv8ZpB5hEK7qxP9K3v43hUS5fGT4waKe7ix4Z4mu5UBv+cw7WSF\nAt0Vaag0sAbsPzU8Hhsrj/qPABvfB8asUwcCAwEAAQJAG0r3ezH35WFG1tGGaUOr\nQA61cyaII53ZdgCR1IU8bx7AUevmkFtBf+aqMWusWVOWJvGu2r5VpHVAIl8nF6DS\nkQIhAMjEJ3zVYa2/Mo4ey+iU9J9Vd+WoyXDQD4EEtwmyG1PpAiEAxuZlvhDIbbce\n7o5BvOhnCZ2N7kYb1ZC57g3F+cbJyW8CIQCbsDGHBto2qJyFxbAO7uQ8Y0UVHa0J\nBO/g900SAcJbcQIgRtEljIShOB8pDjrsQPxmI1BLhnjD1EhRSubwhDw5AFUCIQCN\nA24pDtdOHydwtSB5+zFqFLfmVZplQM/g5kb4so70Yw==\n-----END RSA PRIVATE KEY-----\n"
    },
    "corsPolicy" : {
      "xhrConfiguration" : {
        "allowedOrigins" : [ ".*" ],
        "allowedOriginPatterns" : [ ],
        "allowedUris" : [ ".*" ],
        "allowedUriPatterns" : [ ],
        "allowedHeaders" : [ "Accept", "Authorization", "Content-Type" ],
        "allowedMethods" : [ "GET" ],
        "allowedCredentials" : false,
        "maxAge" : 1728000
      },
      "defaultConfiguration" : {
        "allowedOrigins" : [ ".*" ],
        "allowedOriginPatterns" : [ ],
        "allowedUris" : [ ".*" ],
        "allowedUriPatterns" : [ ],
        "allowedHeaders" : [ "Accept", "Authorization", "Content-Type" ],
        "allowedMethods" : [ "GET" ],
        "allowedCredentials" : false,
        "maxAge" : 1728000
      }
    },
    "links" : {
      "logout" : {
        "redirectUrl" : "/login",
        "redirectParameterName" : "redirect",
        "disableRedirectParameter" : false,
        "whitelist" : null
      },
      "homeRedirect" : "http://my.hosted.homepage.com/",
      "selfService" : {
        "selfServiceLinksEnabled" : true,
        "signup" : null,
        "passwd" : null
      }
    },
    "prompts" : [ {
      "name" : "username",
      "type" : "text",
      "text" : "Email"
    }, {
      "name" : "password",
      "type" : "password",
      "text" : "Password"
    }, {
      "name" : "passcode",
      "type" : "password",
      "text" : "Temporary Authentication Code (Get on at /passcode)"
    } ],
    "idpDiscoveryEnabled" : false,
    "branding" : {
      "companyName" : "Test Company",
      "productLogo" : "VGVzdFByb2R1Y3RMb2dv",
      "squareLogo" : "VGVzdFNxdWFyZUxvZ28=",
      "footerLegalText" : "Test footer legal text",
      "footerLinks" : {
        "Support" : "http://support.example.com"
      },
      "banner" : {
        "logo" : "VGVzdFByb2R1Y3RMb2dv",
        "text" : "Announcement",
        "textColor" : "#000000",
        "backgroundColor" : "#89cff0",
        "link" : "http://announce.example.com"
      },
      "consent" : {
        "text" : "Some Policy",
        "link" : "http://policy.example.com"
      }
    },
    "accountChooserEnabled" : false,
    "userConfig" : {
      "defaultGroups" : [ "openid", "password.write", "uaa.user", "approvals.me", "profile", "roles", "user_attributes", "uaa.offline_token" ],
      "maxUsers" : -1,
      "checkOriginEnabled" : false,
      "allowOriginLoop" : true
    },
    "issuer" : "http://localhost:8080/uaa",
    "defaultIdentityProvider" : "uaa"
  },
  "name" : "The Twiglet Zone",
  "version" : 0,
  "description" : "Like the Twilight Zone but tastier.",
  "created" : 1732091794769,
  "active" : true,
  "last_modified" : 1732091794769
}'

POST /identity-zones HTTP/1.1
Content-Type: application/json
Authorization: Bearer f2547a9343c0420abedeae46745597d7
Content-Length: 7785
Host: localhost

{
  "id" : "twiglet-create",
  "subdomain" : "twiglet-create",
  "config" : {
    "clientSecretPolicy" : {
      "minLength" : -1,
      "maxLength" : -1,
      "requireUpperCaseCharacter" : -1,
      "requireLowerCaseCharacter" : -1,
      "requireDigit" : -1,
      "requireSpecialCharacter" : -1
    },
    "tokenPolicy" : {
      "accessTokenValidity" : 3600,
      "refreshTokenValidity" : 7200,
      "jwtRevocable" : false,
      "refreshTokenUnique" : false,
      "refreshTokenRotate" : false,
      "refreshTokenFormat" : "opaque",
      "activeKeyId" : "active-key-1",
      "keys" : {
        "active-key-1" : {
          "signingKey" : "-----BEGIN RSA PRIVATE KEY-----\nMIIBOwIBAAJBAJv8ZpB5hEK7qxP9K3v43hUS5fGT4waKe7ix4Z4mu5UBv+cw7WSF\nAt0Vaag0sAbsPzU8Hhsrj/qPABvfB8asUwcCAwEAAQJAG0r3ezH35WFG1tGGaUOr\nQA61cyaII53ZdgCR1IU8bx7AUevmkFtBf+aqMWusWVOWJvGu2r5VpHVAIl8nF6DS\nkQIhAMjEJ3zVYa2/Mo4ey+iU9J9Vd+WoyXDQD4EEtwmyG1PpAiEAxuZlvhDIbbce\n7o5BvOhnCZ2N7kYb1ZC57g3F+cbJyW8CIQCbsDGHBto2qJyFxbAO7uQ8Y0UVHa0J\nBO/g900SAcJbcQIgRtEljIShOB8pDjrsQPxmI1BLhnjD1EhRSubwhDw5AFUCIQCN\nA24pDtdOHydwtSB5+zFqFLfmVZplQM/g5kb4so70Yw==\n-----END RSA PRIVATE KEY-----\n",
          "signingCert" : "-----BEGIN CERTIFICATE-----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\nHn+GmxZA\n-----END CERTIFICATE-----\n",
          "signingAlg" : "RS256"
        }
      }
    },
    "samlConfig" : {
      "requestSigned" : true,
      "wantAssertionSigned" : true,
      "activeKeyId" : "legacy-saml-key",
      "keys" : {
        "legacy-saml-key" : {
          "key" : "-----BEGIN RSA PRIVATE KEY-----\nMIIBOwIBAAJBAJv8ZpB5hEK7qxP9K3v43hUS5fGT4waKe7ix4Z4mu5UBv+cw7WSF\nAt0Vaag0sAbsPzU8Hhsrj/qPABvfB8asUwcCAwEAAQJAG0r3ezH35WFG1tGGaUOr\nQA61cyaII53ZdgCR1IU8bx7AUevmkFtBf+aqMWusWVOWJvGu2r5VpHVAIl8nF6DS\nkQIhAMjEJ3zVYa2/Mo4ey+iU9J9Vd+WoyXDQD4EEtwmyG1PpAiEAxuZlvhDIbbce\n7o5BvOhnCZ2N7kYb1ZC57g3F+cbJyW8CIQCbsDGHBto2qJyFxbAO7uQ8Y0UVHa0J\nBO/g900SAcJbcQIgRtEljIShOB8pDjrsQPxmI1BLhnjD1EhRSubwhDw5AFUCIQCN\nA24pDtdOHydwtSB5+zFqFLfmVZplQM/g5kb4so70Yw==\n-----END RSA PRIVATE KEY-----\n",
          "passphrase" : "password",
          "certificate" : "-----BEGIN CERTIFICATE-----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\nHn+GmxZA\n-----END CERTIFICATE-----\n"
        }
      },
      "entityID" : "cloudfoundry-saml-login",
      "disableInResponseToCheck" : false,
      "privateKeyPassword" : "password",
      "certificate" : "-----BEGIN CERTIFICATE-----\nMIICEjCCAXsCAg36MA0GCSqGSIb3DQEBBQUAMIGbMQswCQYDVQQGEwJKUDEOMAwG\nA1UECBMFVG9reW8xEDAOBgNVBAcTB0NodW8ta3UxETAPBgNVBAoTCEZyYW5rNERE\nMRgwFgYDVQQLEw9XZWJDZXJ0IFN1cHBvcnQxGDAWBgNVBAMTD0ZyYW5rNEREIFdl\nYiBDQTEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydEBmcmFuazRkZC5jb20wHhcNMTIw\nODIyMDUyNjU0WhcNMTcwODIxMDUyNjU0WjBKMQswCQYDVQQGEwJKUDEOMAwGA1UE\nCAwFVG9reW8xETAPBgNVBAoMCEZyYW5rNEREMRgwFgYDVQQDDA93d3cuZXhhbXBs\nZS5jb20wXDANBgkqhkiG9w0BAQEFAANLADBIAkEAm/xmkHmEQrurE/0re/jeFRLl\n8ZPjBop7uLHhnia7lQG/5zDtZIUC3RVpqDSwBuw/NTweGyuP+o8AG98HxqxTBwID\nAQABMA0GCSqGSIb3DQEBBQUAA4GBABS2TLuBeTPmcaTaUW/LCB2NYOy8GMdzR1mx\n8iBIu2H6/E2tiY3RIevV2OW61qY2/XRQg7YPxx3ffeUugX9F4J/iPnnu1zAxxyBy\n2VguKv4SWjRFoRkIfIlHX0qVviMhSlNy2ioFLy7JcPZb+v3ftDGywUqcBiVDoea0\nHn+GmxZA\n-----END CERTIFICATE-----\n",
      "privateKey" : "-----BEGIN RSA PRIVATE KEY-----\nMIIBOwIBAAJBAJv8ZpB5hEK7qxP9K3v43hUS5fGT4waKe7ix4Z4mu5UBv+cw7WSF\nAt0Vaag0sAbsPzU8Hhsrj/qPABvfB8asUwcCAwEAAQJAG0r3ezH35WFG1tGGaUOr\nQA61cyaII53ZdgCR1IU8bx7AUevmkFtBf+aqMWusWVOWJvGu2r5VpHVAIl8nF6DS\nkQIhAMjEJ3zVYa2/Mo4ey+iU9J9Vd+WoyXDQD4EEtwmyG1PpAiEAxuZlvhDIbbce\n7o5BvOhnCZ2N7kYb1ZC57g3F+cbJyW8CIQCbsDGHBto2qJyFxbAO7uQ8Y0UVHa0J\nBO/g900SAcJbcQIgRtEljIShOB8pDjrsQPxmI1BLhnjD1EhRSubwhDw5AFUCIQCN\nA24pDtdOHydwtSB5+zFqFLfmVZplQM/g5kb4so70Yw==\n-----END RSA PRIVATE KEY-----\n"
    },
    "corsPolicy" : {
      "xhrConfiguration" : {
        "allowedOrigins" : [ ".*" ],
        "allowedOriginPatterns" : [ ],
        "allowedUris" : [ ".*" ],
        "allowedUriPatterns" : [ ],
        "allowedHeaders" : [ "Accept", "Authorization", "Content-Type" ],
        "allowedMethods" : [ "GET" ],
        "allowedCredentials" : false,
        "maxAge" : 1728000
      },
      "defaultConfiguration" : {
        "allowedOrigins" : [ ".*" ],
        "allowedOriginPatterns" : [ ],
        "allowedUris" : [ ".*" ],
        "allowedUriPatterns" : [ ],
        "allowedHeaders" : [ "Accept", "Authorization", "Content-Type" ],
        "allowedMethods" : [ "GET" ],
        "allowedCredentials" : false,
        "maxAge" : 1728000
      }
    },
    "links" : {
      "logout" : {
        "redirectUrl" : "/login",
        "redirectParameterName" : "redirect",
        "disableRedirectParameter" : false,
        "whitelist" : null
      },
      "homeRedirect" : "http://my.hosted.homepage.com/",
      "selfService" : {
        "selfServiceLinksEnabled" : true,
        "signup" : null,
        "passwd" : null
      }
    },
    "prompts" : [ {
      "name" : "username",
      "type" : "text",
      "text" : "Email"
    }, {
      "name" : "password",
      "type" : "password",
      "text" : "Password"
    }, {
      "name" : "passcode",
      "type" : "password",
      "text" : "Temporary Authentication Code (Get on at /passcode)"
    } ],
    "idpDiscoveryEnabled" : false,
    "branding" : {
      "companyName" : "Test Company",
      "productLogo" : "VGVzdFByb2R1Y3RMb2dv",
      "squareLogo" : "VGVzdFNxdWFyZUxvZ28=",
      "footerLegalText" : "Test footer legal text",
      "footerLinks" : {
        "Support" : "http://support.example.com"
      },
      "banner" : {
        "logo" : "VGVzdFByb2R1Y3RMb2dv",
        "text" : "Announcement",
        "textColor" : "#000000",
        "backgroundColor" : "#89cff0",
        "link" : "http://announce.example.com"
      },
      "consent" : {
        "text" : "Some Policy",
        "link" : "http://policy.example.com"
      }
    },
    "accountChooserEnabled" : false,
    "userConfig" : {
      "defaultGroups" : [ "openid", "password.write", "uaa.user", "approvals.me", "profile", "roles", "user_attributes", "uaa.offline_token" ],
      "maxUsers" : -1,
      "checkOriginEnabled" : false,
      "allowOriginLoop" : true
    },
    "issuer" : "http://localhost:8080/uaa",
    "defaultIdentityProvider" : "uaa"
  },
  "name" : "The Twiglet Zone",
  "version" : 0,
  "description" : "Like the Twilight Zone but tastier.",
  "created" : 1732091794769,
  "active" : true,
  "last_modified" : 1732091794769
}

HTTP/1.1 201 Created
Content-Security-Policy: script-src 'self'
Content-Type: application/json
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Length: 5195

{
  "id" : "twiglet-create",
  "subdomain" : "twiglet-create",
  "config" : {
    "clientSecretPolicy" : {
      "minLength" : -1,
      "maxLength" : -1,
      "requireUpperCaseCharacter" : -1,
      "requireLowerCaseCharacter" : -1,
      "requireDigit" : -1,
      "requireSpecialCharacter" : -1
    },
    "tokenPolicy" : {
      "accessTokenValidity" : 3600,
      "refreshTokenValidity" : 7200,
      "jwtRevocable" : false,
      "refreshTokenUnique" : false,
      "refreshTokenRotate" : false,
      "refreshTokenFormat" : "opaque",
      "activeKeyId" : "active-key-1"
    },
    "samlConfig" : {
      "requestSigned" : true,
      "wantAssertionSigned" : true,
      "activeKeyId" : "legacy-saml-key",
      "keys" : {
        "legacy-saml-key" : {
          "certificate" : "-----BEGIN CERTIFICATE-----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\nHn+GmxZA\n-----END CERTIFICATE-----\n"
        }
      },
      "entityID" : "cloudfoundry-saml-login",
      "disableInResponseToCheck" : false,
      "certificate" : "-----BEGIN CERTIFICATE-----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\nHn+GmxZA\n-----END CERTIFICATE-----\n"
    },
    "corsPolicy" : {
      "xhrConfiguration" : {
        "allowedOrigins" : [ ".*" ],
        "allowedOriginPatterns" : [ ],
        "allowedUris" : [ ".*" ],
        "allowedUriPatterns" : [ ],
        "allowedHeaders" : [ "Accept", "Authorization", "Content-Type" ],
        "allowedMethods" : [ "GET" ],
        "allowedCredentials" : false,
        "maxAge" : 1728000
      },
      "defaultConfiguration" : {
        "allowedOrigins" : [ ".*" ],
        "allowedOriginPatterns" : [ ],
        "allowedUris" : [ ".*" ],
        "allowedUriPatterns" : [ ],
        "allowedHeaders" : [ "Accept", "Authorization", "Content-Type" ],
        "allowedMethods" : [ "GET" ],
        "allowedCredentials" : false,
        "maxAge" : 1728000
      }
    },
    "links" : {
      "logout" : {
        "redirectUrl" : "/login",
        "redirectParameterName" : "redirect",
        "disableRedirectParameter" : false,
        "whitelist" : null
      },
      "homeRedirect" : "http://my.hosted.homepage.com/",
      "selfService" : {
        "selfServiceLinksEnabled" : true,
        "signup" : null,
        "passwd" : null
      }
    },
    "prompts" : [ {
      "name" : "username",
      "type" : "text",
      "text" : "Email"
    }, {
      "name" : "password",
      "type" : "password",
      "text" : "Password"
    }, {
      "name" : "passcode",
      "type" : "password",
      "text" : "Temporary Authentication Code (Get on at /passcode)"
    } ],
    "idpDiscoveryEnabled" : false,
    "branding" : {
      "companyName" : "Test Company",
      "productLogo" : "VGVzdFByb2R1Y3RMb2dv",
      "squareLogo" : "VGVzdFNxdWFyZUxvZ28=",
      "footerLegalText" : "Test footer legal text",
      "footerLinks" : {
        "Support" : "http://support.example.com"
      },
      "banner" : {
        "logo" : "VGVzdFByb2R1Y3RMb2dv",
        "text" : "Announcement",
        "textColor" : "#000000",
        "backgroundColor" : "#89cff0",
        "link" : "http://announce.example.com"
      },
      "consent" : {
        "text" : "Some Policy",
        "link" : "http://policy.example.com"
      }
    },
    "accountChooserEnabled" : false,
    "userConfig" : {
      "defaultGroups" : [ "openid", "password.write", "uaa.user", "approvals.me", "profile", "roles", "user_attributes", "uaa.offline_token" ],
      "maxUsers" : -1,
      "checkOriginEnabled" : false,
      "allowOriginLoop" : true
    },
    "issuer" : "http://localhost:8080/uaa",
    "defaultIdentityProvider" : "uaa"
  },
  "name" : "The Twiglet Zone",
  "version" : 0,
  "description" : "Like the Twilight Zone but tastier.",
  "created" : 1732091794777,
  "active" : true,
  "last_modified" : 1732091794777
}