Token introspection - invalid token (9.11.2.02) (FI-3257)

[cheng13231]

Test 9.11.2.02 fails for me when running g10 test suite locally, please see the screenshot below.

Given an invalid token, the test expects 200 response code, however 401 returns. I tried to POST a similar request to my authorization server, I do get 200 response, see screenshot below for the postman request

When I check the log in my authorization server, I find some differences, see screenshot below

Seems that Test 9.11.2.02 doesn't properly send the authorization header provided in the test config to my authorization server. But, the strange thing to me is that Test 9.11.2.01 is passed. Could you please help me to check what I did wrong?

[yunwwang]

Hello @cheng13231

Thank you for reaching out to Inferno team. Does your server require Authorization header for token introspection endpoint?

[cheng13231]

Yes, it does, and I configured it in the setting "HTTP Authorization Header for Introspection Request". I would assume that the authorization header is used in test 9.11.2.01 as well, right?

[yunwwang]

We may have a bug in this test. I will do future investigation. Thank you for reporting this