<reponame>bitman694/oidctest
{
  "MTI": [
    "CI",
    "CIT"
  ],
  "behavior": ["ch"],
  "group": "ID Token",
  "claims": "normal",
  "capabilities": {
    "response_types_supported": [
      "code id_token",
      "code id_token token"
    ]
  },
  "short_description": "Rejects ID Token with incorrect 'c_hash' claim when hybrid flow is used",
  "detailed_description": "Retrieve Authorization Code and ID Token from the Authorization Endpoint, using ${HYBRID_FLOW}. Verify the ${C_HASH} value in the returned ID token. 'id_token_signed_response_alg' must NOT be 'none'",
  "expected_result": "Identify the incorrect 'c_hash' value and reject the ID Token after doing ${AUTHORIZATION_CODE_VALIDATION}."
}