Server tests · Authorization requests
S212 Ignores client metadata for a different client_id
Required Browser check
What this test does
Serves a client metadata document whose client_id does not match the URL it came from, listing an unregistered redirect URI.
How it passes
Your server does not trust the document and refuses the redirect URI.
- Specification
- §4.2.1
- Needs
- S106 Authorization endpoint is listed