What this test does
Checks the claims a resource server needs.
How it passes
iss, aud, exp, iat and sub are present, iss matches the issuer, exp is in the future, and client_id and scope match the token response.
- Specification
- RFC 9068 §2.2
- Needs
- S420 Access token format