What this test does

Sends a request without state, which IndieAuth clients are required to include.

How it passes

Your server refuses the request.

Specification
§5.2
Needs
S106 Authorization endpoint is listed