Four Attacks on OAuth - How to Secure Your OAuth Implementation

software-security.sans.org

2 pointsantidaily1 comment

Isn't this why many providers are moving to OAuth2? Complexity of implementing and lack of security?