Server tests · Authorization requests
S204 Keeps the query string of the redirect URI
Required Needs approval
What this test does
Uses a registered redirect URI that already has a query string, and checks it survives.
How it passes
The redirect keeps the original query parameter and adds code, state and iss.
- Specification
- RFC 6749 §3.1.2
- Needs
- S106 Authorization endpoint is listed