What this test does
Registers a cross-origin redirect URI and sends a request for a longer URL that starts with it.
How it passes
Your server refuses it: prefix matches are not matches.
- Specification
- §4.2.2
- Needs
- S106 Authorization endpoint is listed