OWASPASVS 5.0 requirement
ASVS-V10.3.4 Verify that, if the resource server requires specific authentication strength, methods, or recentness, it verifies that the presented…
- Standard
- OWASP ASVS 5.0
- Chapter
- V10 OAuth and OIDC
- Section
- V10.3 OAuth Resource Server
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that, if the resource server requires specific authentication strength, methods, or recentness, it verifies that the presented access token satisfies these constraints. For example, if present, using the OIDC 'acr', 'amr' and 'auth_time' claims respectively.