What this test does
Checks the Cache-Control header of the token response.
How it passes
Cache-Control includes no-store.
- Specification
- RFC 6749 §5.1
- Needs
- S301 Exchanges a code at the token endpoint
Checks the Cache-Control header of the token response.
Cache-Control includes no-store.