TokenEndpoint.IsClientAuthenticationRequired

Is client authentication required

This test checks if the token endpoint requires client authentication when requesting a token.

View source code on GitHub

Documents

This test is part of the following document(s):

• The OAuth 2.0 Authorization Framework (RFC6749), section 3.2.1 (must)
• RFC8628 - OAuth 2.0 Device Authorization Grant (RFC8628), section 3.4 (must)
• OAuth 2.0 Threat Model and Security Considerations (RFC6819), section 5.2.3 (should)
• OAuth 2.0 Security Best Current Practice (draft 25) (SecBCP), section 2.5 (should)
• OpenID Connect Core 1.0 incorporating errata set 1 (OIDC), section 3.1.3.1 (must)

Back to the test case overview or the threat overview