S402 Includes an access token

What this test does

Checks for access_token when a scope was granted.

How it passes

access_token is a non-empty string.

Specification

§5.3.3

Needs

S301 Exchanges a code at the token endpoint