What this test does
Every time your server redirects back here, compares the state parameter with the one sent. The state includes characters that are easy to mangle.
How it passes
state is byte-for-byte identical on every redirect.
- Specification
- §5.2.1
- Needs
- S106 Authorization endpoint is listed