400 error should be returned on negative token exchange tests

fhir-crucible / crucible_smart_app

Crucible SMART-on-FHIR Testing App

Apache License 2.0

8 stars 2 forks source link

Open arscan opened 6 years ago

arscan commented 6 years ago

We are expecting "unauthorized", but according to the spec it should be 400 (Bad Request) in certain cases.