What this test does
Sends a client_id containing a ".." path segment, which is not a valid client identifier.
How it passes
Your server refuses the request.
Sends a client_id containing a ".." path segment, which is not a valid client identifier.
Your server refuses the request.