TokenEndpoint.RedirectUriChecked

Is the redirect URI checked when exchanging a code

This test checks if the token endpoint checks the redirect uri when exchanging an authorization code.

View source code on GitHub

Documents

This test is part of the following document(s):

• The OAuth 2.0 Authorization Framework (RFC6749), section 4.1.3 (must)
• OAuth 2.0 Threat Model and Security Considerations (RFC6819), section 5.2.4.5 (should)

Back to the test case overview or the threat overview