What this test does
Checks response_types_supported and grant_types_supported when present.
How it passes
They include "code" and "authorization_code", and do not advertise the implicit "token" response type.
- Specification
- RFC 8414 §2, RFC 9700 §2.1.2
- Needs
- S104 Metadata is a JSON document