← Back to Baseline

MB-R254

HUMAN VERIFICATION REQUIRED ASVS 10.4.10 Confidential-client authentication (when oauth_oidc is used)

MB-C16 ASVS Level 2 Contextual Human Assurance High

Confidential client is authenticated for client-to-authorized server backchannel requests such as token requests, pushed authorization requests (PAR), and token revocation requests.