What this test does

Looks at whether your access tokens are JWTs or opaque strings. Both are fine; the checks below only apply to JWTs.

How it passes

Informational.

Specification
RFC 9068
Needs
S402 Includes an access token