Ensure authorization requests have a valid redirect URI

Required for OIDC certification. The test oidcc-ensure-redirect-uri-in-authorization-request fails because Canaille redirects back in a case whrere it should not.

This test registers a client that has two redirect uris and sends a request without redirect_uri to authorization server - this must result in the authorization server showing an error page (a screenshot of which should be uploaded).

FAILURE - Verify authorization endpoint response: AuthorizationEndpointRedirectedBackUnexpectedly: Authorization server redirected back in a case where it should not

If an uri is present in the query, it should match the redirect uri registered by the client. If not, the authorization server should display an error saying the redirect uri is invalid. This is required for OIDC certification, and is verified by the test named oidcc-redirect-uri-query-mismatch.

This test uses a redirect uri with a query component that does not match the query in the registered redirect uri. The authorization server should display an error saying the redirect uri is invalid, a screenshot of which should be uploaded.

Edited by Brunelie