reference-implementation-governance (delta)
The reference implementation's single_use access mode SHALL have an integration-test proof that operates at the HTTP boundary — not only a test of token reuse with the already-issued token, but a proof that a second token issuance against a consumed grant is rejected with a typed error code.
reference-implementation-governance