+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ @if (Model.Profiles.OAuth21 is not null)
+ {
+ @await RenderPartialAsync(_ProfileResult.Create(Model.Profiles.OAuth21))
+ }
+ @if (Model.Profiles.Fapi2Security is not null)
+ {
+ @await RenderPartialAsync(_ProfileResult.Create(Model.Profiles.Fapi2Security))
+ }
+
+
+
+
+
+
+
+@functions {
+ private static string FormatDateTime(
+ DateTimeOffset timestamp,
+ bool includeDate = true)
+ {
+ // Always display in UTC
+ var format = includeDate
+ ? "MMMM d, yyyy HH:mm:ss"
+ : "HH:mm:ss";
+
+ return $"{timestamp.UtcDateTime.ToString(format, CultureInfo.InvariantCulture)} (UTC)";
+ }
+
+ private string GenerateDocumentId()
+ {
+ // Generate a reproducible document ID based on assessment timestamp in UTC
+ var timestamp = Model.AssessedAt.UtcDateTime;
+ return $"CR-{timestamp:yyyyMMdd}-{timestamp:HHmmss}";
+ }
+
+ private string GetProfilesAssessed()
+ {
+ var profiles = new List
+
+
+
+ @if (!string.IsNullOrWhiteSpace(Model.HostCompanyName) || Model.HostCompanyLogoUrl is not null)
+ {
+
+
+
+ @if (Model.HostCompanyLogoUrl is not null)
+ {
+ )
+ }
+ @if (!string.IsNullOrWhiteSpace(Model.HostCompanyName))
+ {
+ @Model.HostCompanyName
+ }
+
+ }
+ Duende IdentityServer
+ Conformance Assessment Report
+ +| License | +@GetLicenseInfo() | +
|---|---|
| Report URL | +@Model.Url.ToString() | +
| Assessment Date | +@FormatDateTime(Model.AssessedAt, includeDate: true) | +
| Tool Version | +@Model.Version | +
| Profiles Assessed | +@GetProfilesAssessed() | +
Report Summary
+
+
+
+ Overall Status:
+ @GetStatusText(Model.Status)
+
+ + This report presents the results of an automated conformance assessment of the OAuth 2.0 / OpenID Connect + authorization server configuration. The assessment evaluates server and client configurations against + industry security profiles and best practices. +
+
+
+
+ @Model.OverallSummary.TotalClients
+ Clients Assessed
+
+ @if (Model.Profiles.OAuth21 is not null)
+ {
+
+ @Model.Profiles.OAuth21.Summary.PassingClients / @Model.Profiles.OAuth21.Summary.TotalClients
+ OAuth 2.1 Passing
+
+ }
+ @if (Model.Profiles.Fapi2Security is not null)
+ {
+
+ @Model.Profiles.Fapi2Security.Summary.PassingClients / @Model.Profiles.Fapi2Security.Summary.TotalClients
+ FAPI 2.0 Passing
+
+ }
+
+
+
+
+
+
+@if (allRuleIds.Count > 0)
+{
+ | Client | + @foreach (var ruleId in allRuleIds) + { +@ruleId | + } +Status | +|
|---|---|---|---|
| + @displayName + @client.ClientId + | + @foreach (var ruleId in allRuleIds) + { + if (clientFindings.TryGetValue(ruleId, out var finding)) + { + var cellClass = GetCellClass(finding.Status); + var cellText = GetCellText(finding.Status); + var key = $"{client.ClientId}_{finding.RuleId}"; + var hasFootnote = footnoteMap.ContainsKey(key); + var title = $"{finding.RuleName}: {finding.Message}"; + ++ @cellText@if (hasFootnote) + {[@footnoteMap[key]]} + | + } + else + { +N/A | + } + } +@statusText | +
+
+}
+
+@if (footnotes.Count > 0)
+{
+ // Group footnotes by client
+ var groupedByClient = footnotes
+ .GroupBy(f => new { f.ClientId, f.ClientName })
+ .ToList();
+
+ Rule Reference
+
+ @{
+ // Get unique rules with their descriptions
+ var ruleDescriptions = Model
+ .SelectMany(c => c.Findings)
+ .GroupBy(f => f.RuleId)
+ .Select(g => g.First())
+ .OrderBy(f => f.RuleId)
+ .ToList();
+ }
+ @foreach (var finding in ruleDescriptions)
+ {
+
+
+ @finding.RuleId
+ @finding.RuleName
+
+ }
+
+
+}
+
+@functions {
+ private string GetStatusClass(ConformanceReportStatus status) => status switch
+ {
+ ConformanceReportStatus.Pass => "cell-pass",
+ ConformanceReportStatus.Warn => "cell-warn",
+ ConformanceReportStatus.Fail => "cell-fail",
+ _ => ""
+ };
+
+ private string GetCellClass(FindingStatus status) => status switch
+ {
+ FindingStatus.Pass => "cell-pass",
+ FindingStatus.Fail => "cell-fail",
+ FindingStatus.Warning => "cell-warn",
+ FindingStatus.NotApplicable => "cell-na",
+ FindingStatus.Error => "cell-fail",
+ _ => ""
+ };
+
+ private string GetStatusText(ConformanceReportStatus status) => status switch
+ {
+ ConformanceReportStatus.Pass => "PASS",
+ ConformanceReportStatus.Warn => "WARN",
+ ConformanceReportStatus.Fail => "FAIL",
+ _ => "?"
+ };
+
+ private string GetCellText(FindingStatus status) => status switch
+ {
+ FindingStatus.Pass => "PASS",
+ FindingStatus.Fail => "FAIL",
+ FindingStatus.Warning => "WARN",
+ FindingStatus.NotApplicable => "N/A",
+ FindingStatus.Error => "ERR",
+ _ => "?"
+ };
+}
diff --git a/conformance-report/src/ConformanceReport/Slices/_ClientResult.cshtml b/conformance-report/src/ConformanceReport/Slices/_ClientResult.cshtml
new file mode 100644
index 000000000..f11766629
--- /dev/null
+++ b/conformance-report/src/ConformanceReport/Slices/_ClientResult.cshtml
@@ -0,0 +1,23 @@
+@using Duende.ConformanceReport.Slices
+@inherits RazorSliceClient Configuration Findings
+ @foreach (var clientGroup in groupedByClient) + { +
+
+ }
+ @clientGroup.Key.ClientName (@clientGroup.Key.ClientId)
+ -
+ @foreach (var (clientId, clientName, finding) in clientGroup)
+ {
+ var key = $"{clientId}_{finding.RuleId}";
+ var num = footnoteMap[key];
+
- + @num. + @(!string.IsNullOrEmpty(finding.Recommendation) ? finding.Recommendation : finding.RuleName) + @finding.Message + + } +
+
+
+@functions {
+ private string GetStatusClass(ConformanceReportStatus status) => status switch
+ {
+ ConformanceReportStatus.Pass => "pass",
+ ConformanceReportStatus.Warn => "warning",
+ ConformanceReportStatus.Fail => "fail",
+ _ => "unknown"
+ };
+}
diff --git a/conformance-report/src/ConformanceReport/Slices/_FindingsTable.cshtml b/conformance-report/src/ConformanceReport/Slices/_FindingsTable.cshtml
new file mode 100644
index 000000000..9a5f1f77c
--- /dev/null
+++ b/conformance-report/src/ConformanceReport/Slices/_FindingsTable.cshtml
@@ -0,0 +1,50 @@
+@inherits RazorSlice@displayName
+ @await RenderPartialAsync(_FindingsTable.Create(Model.Findings)) +| Rule | +Name | +Status | +Message | +Recommendation | +
|---|---|---|---|---|
| @finding.RuleId | +@finding.RuleName | +@statusText | +@finding.Message | +@(finding.Recommendation ?? "-") | +
+
+
+
+
+ @if (!string.IsNullOrEmpty(Model.Note))
+ {
+ @Model.Name
+ @statusText +@Model.Note
+ } + +
+
+
+ @if (Model.Clients.Count > 0)
+ {
+ Server Configuration Assessment
+ @await RenderPartialAsync(_ServerConfigurationMatrix.Create(Model.Server.Findings)) +
+
+ }
+Client Configuration Assessment
+ @await RenderPartialAsync(_ClientConfigurationMatrix.Create(Model.Clients)) +
+
+
+
+
+
+@if (findings.Count > 0)
+{
+ | Component | + @foreach (var finding in findings) + { +@finding.RuleId | + } +Status | +
|---|---|---|
| Authorization Server | + @foreach (var finding in findings) + { + var cellClass = GetCellClass(finding.Status); + var statusText = GetCellText(finding.Status); + var hasFootnote = footnoteMap.ContainsKey(finding.RuleId); + var title = $"{finding.RuleName}: {finding.Message}"; + ++ @statusText@if (hasFootnote) + {[@footnoteMap[finding.RuleId]]} + | + } +@GetOverallStatusText(findings) | +
+
+}
+
+@if (footnotes.Count > 0)
+{
+ Rule Reference
+
+ @foreach (var finding in findings)
+ {
+
+
+ @finding.RuleId
+ @finding.RuleName
+
+ }
+
+
+}
+
+@functions {
+ private string GetCellClass(FindingStatus status) => status switch
+ {
+ FindingStatus.Pass => "cell-pass",
+ FindingStatus.Fail => "cell-fail",
+ FindingStatus.Warning => "cell-warn",
+ FindingStatus.NotApplicable => "cell-na",
+ FindingStatus.Error => "cell-fail",
+ _ => ""
+ };
+
+ private string GetCellText(FindingStatus status) => status switch
+ {
+ FindingStatus.Pass => "PASS",
+ FindingStatus.Fail => "FAIL",
+ FindingStatus.Warning => "WARN",
+ FindingStatus.NotApplicable => "N/A",
+ FindingStatus.Error => "ERR",
+ _ => "?"
+ };
+
+ private string GetOverallStatusClass(ListServer Configuration Findings
+
+
+ -
+ @{ var findingNum = 1; }
+ @foreach (var finding in footnotes)
+ {
+
- + @findingNum. + @(!string.IsNullOrEmpty(finding.Recommendation) ? finding.Recommendation : finding.RuleName) + @finding.Message + + findingNum++; + } +