Features.TokenAsQueryParameter

Can the token be passed via the query

This test determines whether the API endpoint accepts the access token via a URL query parameter.

View source code on GitHub

Documents

This test is part of the following document(s):

• The OAuth 2.0 Authorization Framework: Bearer Token Usage (RFC6750), section 2.3 (should)
• OAuth 2.0 Security Best Current Practice (draft 25) (SecBCP), section 4.3.2 (must)

Back to the test case overview or the threat overview