{
  "request": {
    "grant_type": "client_credentials",
    "client_id": "service-client",
    "client_secret": "conformance-secret",
    "scopes": ["sandbox:read", "sandbox:write"],
    "scope": "sandbox:read sandbox:write",
    "audience": "openshell-gateway",
    "forbidden_implicit_scopes": ["openid", "profile", "email"]
  },
  "expiry": {
    "leeway_seconds": 30,
    "valid_expires_in": 120,
    "invalid_expires_in": [0, -1, "NaN", null]
  },
  "discovery": {
    "configured_issuer": "https://issuer.example.com",
    "matching_issuer": "https://issuer.example.com/",
    "mismatched_issuer": "https://attacker.example.com",
    "redirect_statuses": [301, 302, 307, 308]
  },
  "limits": {
    "max_response_bytes": 1048576
  },
  "urls": {
    "allowed": [
      "https://issuer.example.com",
      "http://localhost:8080",
      "http://127.0.0.1:8080",
      "http://127.42.0.1:8080",
      "http://[::1]:8080"
    ],
    "rejected": [
      "http://issuer.example.com",
      "https://user@issuer.example.com",
      "https://issuer.example.com/#fragment"
    ]
  },
  "redaction": {
    "secret": "conformance-secret",
    "supplier_error": "supplier-sensitive-detail",
    "provider_body": "provider-sensitive-detail"
  }
}