What this test does
Revokes a refresh token, then tries to use it.
How it passes
Revocation returns HTTP 200 and the refresh token no longer works.
- Specification
- RFC 7009 §2.1
- Needs
- S501 Refreshes an access token
Revokes a refresh token, then tries to use it.
Revocation returns HTTP 200 and the refresh token no longer works.