What this test does
Checks every redirect back to this site during the run.
How it passes
No access_token or refresh_token appears in a redirect URL.
- Specification
- RFC 9700 §2.1.2
- Needs
- S106 Authorization endpoint is listed
Checks every redirect back to this site during the run.
No access_token or refresh_token appears in a redirect URL.