OWASPASVS 5.0 requirement
ASVS-V10.4.13 Grant type 'code' is always used together with pushed authorization requests (par).
- Standard
- OWASP ASVS 5.0
- Chapter
- V10 OAuth and OIDC
- Section
- V10.4 OAuth Authorization Server
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that grant type 'code' is always used together with pushed authorization requests (PAR).