Hidden OAuth attack vectors
How to identify and exploit some of the key vulnerabilities found in OAuth 2.0 authentication mechanisms.
- from
- IAM, OpenID Connect
- added
- 2026-10-10
- likes
- 0
similar
-
-
OAuth 2.0 Threat Model and Security Considerations datatracker.ietf.org
Known threats using OAuth 2.0 / OpenID Connect and countermeasures.
-
Introduction to OAuth 2.0 and OpenID Connect pragmaticwebsecurity.com
-
OAuth 2.0 Security Best Current Practice datatracker.ietf.org
“Updates and extends the OAuth 2.0 Security Threat Model to incorporate practical experiences gathered since OAuth 2.0 was published and covers new threats relevant due to the broader application”.
-
JSON hijacking for the modern web portswigger.net
-
IAM › OAuth2 & OpenID: “How to identify and exploit some of the key vulnerabilities found in OAuth 2.0 authentication mechanisms.”
OpenID Connect › Resources > Thematic Articles: “PortSwigger article about OAuth 2.0 common vulnerabilities and how to mitigate them.”