On (OAuth) token hijacks for fun and profit (Google/Microsoft integration)intothesymmetry.blogspot.com·1 pts·asanso·0
Open Redirect in Rfc6749 aka 'The OAuth 2.0 Authorization Framework'intothesymmetry.blogspot.com·2 pts·asanso·0
How I have hacked Facebook again and would have stolen a valid access token)intothesymmetry.blogspot.ch·2 pts·asanso·0