MB-R124

HUMAN VERIFICATION REQUIRED ASVS 10.4.3 OAuth authorization codes expire within ten minutes

MB-C13 Application Behavior & Human Assurance Medium

The authorization code is short-lived. The maximum lifetime can be up to 10 minutes for L1 and L2 applications and up to 1 minute for L3 applications.