What this test does

Signs in without requesting any scope, then exchanges the code at the authorization endpoint.

How it passes

Returns HTTP 200 with me, and no access_token.

Specification
§5.3.2
Needs
S106 Authorization endpoint is listed