OAuth 2.0 Security Best Current Practice
“Updates and extends the OAuth 2.0 Security Threat Model to incorporate practical experiences gathered since OAuth 2.0 was published and covers new threats relevant due to the broader application”.
- from
- IAM, OpenID Connect
- added
- 2026-10-10
- likes
- 0
similar
-
OAuth 2.0 Threat Model and Security Considerations datatracker.ietf.org
Known threats using OAuth 2.0 / OpenID Connect and countermeasures.
-
OAuth 2.1 datatracker.ietf.org
Consolidation of OAuth 2.0 specifications into a single document, removing deprecated features and clarifying best practices.
-
Hidden OAuth attack vectors portswigger.net
How to identify and exploit some of the key vulnerabilities found in OAuth 2.0 authentication mechanisms.
-
-
OAuth 2.0 for Browser-Based Apps datatracker.ietf.org
Security and usability best practice for OAuth usage in Browser-based apps.
-
Introduction to OAuth 2.0 and OpenID Connect pragmaticwebsecurity.com
IAM › OAuth2 & OpenID: ““Updates and extends the OAuth 2.0 Security Threat Model to incorporate practical experiences gathered since OAuth 2.0 was published and covers new threats relevant due to the broader application”.”
OpenID Connect › Resources > Specifications > Published: “Best security practice when using OAuth 2.0 and OpenID Connect.”