Server tests · Authorization requests
S213 Rejects a repeated redirect_uri parameter
Required Browser check
What this test does
Sends redirect_uri twice: once registered, once not.
How it passes
Your server refuses the request rather than picking one of the values.
- Specification
- RFC 6749 §3.1
- Needs
- S106 Authorization endpoint is listed