Features.CodeTokenFlowSupported

Is the hybrid grant (response type = 'code token') supported

This test determines whether the server supports the hybrid grant (with response type 'code token').

View source code on GitHub

Documents

This test is part of the following document(s):

• OAuth 2.0 Security Best Current Practice (SecBCP), section 2.1.2 (should)

Back to the test case overview or the threat overview