What this test does
After replaying a code, checks whether the tokens first issued for it still work at the userinfo endpoint.
How it passes
The tokens no longer work. Skipped without a userinfo endpoint.
- Specification
- RFC 6749 §4.1.2, RFC 9700 §4.5
- Needs
- S302 Codes can only be used once