Server tests · Refresh tokens
S504 Old refresh tokens stop working after rotation
Recommended Automatic
What this test does
If refreshing returned a new refresh token, tries the old one again.
How it passes
The old refresh token is refused.
- Specification
- RFC 9700 §4.14.2
- Needs
- S501 Refreshes an access token