OWASPASVS 5.0 requirement
ASVS-V10.7.1 The authorization server ensures that the user consents to each authorization request.
- Standard
- OWASP ASVS 5.0
- Chapter
- V10 OAuth and OIDC
- Section
- V10.7 Consent Management
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the authorization server ensures that the user consents to each authorization request. If the identity of the client cannot be assured, the authorization server must always explicitly prompt the user for consent.