OAuth Research

Key Notes
Architecture
Grant Types
Components
Extensions / Frameworks
Vulnerability Examples
- Challenges
  Forced OAuth Profile Linking
  Stealing OAuth access tokens via an Open Redirect
  OAuth Account Hijacking via redirect_uri
  SSRF via OpenID Dynamic Client Registration
- Theories
  Client Vulnerabilities
Security Testing Checklist
Supporting Terminology
Resources

Powered by GitBook

Grant Types

Simplest form: The method for getting a token.

PreviousResource Server NextAuthorization Code

Last updated 1 year ago

On this page