Client tests · Authorization responses
C302 Rejects a response without iss
Required Sign in with your client
What this test does
The metadata says iss is supported, but the redirect leaves it out.
How it passes
Your client does not redeem the code.
- Specification
- §5.2.1, RFC 9207 §2.4
- Needs
- C101 Discovers the server from an HTML link