This test checks whether the authorization server requires the presence of the nonce parameter when using the OpenId implicit flow.
View source code on GitHub
This test is part of the following document(s):
Back to the test case overview or the threat overview