Client tests · Authorization requests
C206 Uses a new PKCE challenge each time
Recommended Automatic
What this test does
Compares challenges across attempts.
How it passes
No challenge is reused.
- Specification
- RFC 7636 §4.1
- Needs
- C101 Discovers the server from an HTML link