Skip to content
Common Security Issues in Implementing OAuth 2.0 and How to Mitigate Them
hackerone.com | blog | #appsec | #web-security | #authentication | #csrf | #oauth | #token-security | #oauth2 | #token-storage | #redirect-uri
Summary
A review of common OAuth 2.0 implementation flaws and fixes: encrypting access token storage, whitelisting redirect URIs, using the state parameter against CSRF, and scoping tokens narrowly.
- Published
- Collected