Server tests · Authorization requests
S207 Reports a denied request to the client
Required Browser check
What this test does
Sends a normal request, which you cancel.
How it passes
Your server redirects back with error=access_denied, the original state and iss.
- Specification
- RFC 6749 §4.1.2.1, RFC 9207
- Needs
- S106 Authorization endpoint is listed