Revocation.AccessRevokesRefresh

Are refresh tokens revoked after access token revocation

This test checks whether the authorization server revokes refresh tokens after an access token from the same authorization grant is revoked.

View source code on GitHub

Documents

This test is part of the following document(s):

• OAuth 2.0 Token Revocation (RFC7009), section 2.1 (may)

Back to the test case overview or the threat overview