What this test does
Requests a scope that was not originally granted.
How it passes
The refresh is refused, or the new token does not include the extra scope.
- Specification
- §5.5, RFC 6749 §6
- Needs
- S501 Refreshes an access token
Requests a scope that was not originally granted.
The refresh is refused, or the new token does not include the extra scope.