What this test does
Sends me= set to someone else's profile URL.
How it passes
Your server either refuses, or signs you in as yourself. Returning the requested me without verifying it is a failure.
- Specification
- §5.2
- Needs
- S106 Authorization endpoint is listed