S410 Access tokens are hard to guess

What this test does

Checks the length of the access token.

How it passes

The token is at least 22 characters.

Specification

RFC 6749 §10.10

Needs

S402 Includes an access token