TokenEndpoint.IsCodeBoundToClient

Is the authorization code bound to the client

This test checks if the authorization code is bound to the client.

View source code on GitHub

Documents

This test is part of the following document(s):

• The OAuth 2.0 Authorization Framework (RFC6749), section 4.1.2 (must)
• OAuth 2.0 Threat Model and Security Considerations (RFC6819), section 5.2.4.4 (should)
• OAuth 2.0 Security Best Current Practice (draft 25) (SecBCP), section 4.2.4 (must)

Back to the test case overview or the threat overview