S802 Refused introspection reveals nothing

What this test does

Checks the body of the unauthenticated introspection response.

How it passes

The response does not include active: true or the me value.

Specification

§6.1

Needs

S801 Introspection requires authorization