TokenEndpoint.IsRefreshAuthenticationRequired

Is refresh authentication required

This test checks if the token endpoint requires client authentication when refreshing a token.

View source code on GitHub

Documents

This test is part of the following document(s):

• The OAuth 2.0 Authorization Framework (RFC6749), section 6 (must)
• OAuth 2.0 Threat Model and Security Considerations (RFC6819), section 5.2.2.2 (should)
• OAuth 2.0 Security Best Current Practice (draft 25) (SecBCP), section 2.2.2 (must)

Back to the test case overview or the threat overview