S302 Codes can only be used once

What this test does

Presents an already-exchanged code again.

How it passes

The token endpoint returns an error, ideally invalid_grant.

Specification

§5.2.1

Needs

S301 Exchanges a code at the token endpoint