HUMAN VERIFICATION REQUIREDASVS 10.4.10 Confidential-client authentication (when oauth_oidc is used)
MB-C16ASVS Level 2 Contextual Human AssuranceHigh
Confidential client is authenticated for client-to-authorized server backchannel requests such as token requests, pushed authorization requests (PAR), and token revocation requests.