Magebean Logo Magebean
← Back to Baseline

MB-R263

HUMAN VERIFICATION REQUIRED ASVS 10.7.1 Consent per authorization (when oauth_oidc is used)

MB-C16 ASVS Level 2 Contextual Human Assurance High

The authorization server ensures that the user consents to each authorization request. If the identity of the client cannot be assured, the authorization server must always explicitly prompt the user for consent.