Server tests · Code redemption
S322 Refuses a verifier for a code issued without PKCE
Required Needs approval Extended run only
What this test does
Only when your server accepted a request without PKCE: exchanges that code with a code_verifier.
How it passes
The exchange is refused.
- Specification
- §5.3.1
- Needs
- S215 Requires PKCE