COMMON OAUTH VULNERABILITIES

Summary from the TLDR InfoSec newsletter

This blog provides an overview of how OAuth 2 works with a focus on outlining the different parties involved in a request. It outlines the common flows that are used in OAuth applications such as Implicit Flows, Authorization Code Flows, Client Credentials, Device Authorization Flows, and Resource Owner Password Credentials Flows. The post then provides common attacks and mitigations against these flows.