S313 Refuses a mismatched redirect_uri

What this test does

Exchanges a code with a different redirect_uri from the authorization request.

How it passes

The exchange is refused.

Specification

§5.3.1

Needs

S106 Authorization endpoint is listed