OAuth 2.0 Threat Model and Security Considerations
Known threats using OAuth 2.0 / OpenID Connect and countermeasures.
- from
- OpenID Connect
- added
- 2026-10-10
- likes
- 0
similar
-
OAuth 2.0 Security Best Current Practice datatracker.ietf.org
“Updates and extends the OAuth 2.0 Security Threat Model to incorporate practical experiences gathered since OAuth 2.0 was published and covers new threats relevant due to the broader application”.
-
OAuth 2.0 for Browser-Based Apps datatracker.ietf.org
Security and usability best practice for OAuth usage in Browser-based apps.
-
Hidden OAuth attack vectors portswigger.net
How to identify and exploit some of the key vulnerabilities found in OAuth 2.0 authentication mechanisms.
-
Introduction to OAuth 2.0 and OpenID Connect pragmaticwebsecurity.com
-
OAuth 2.0 for Native Apps datatracker.ietf.org
Security and usability best practice for OAuth usage in Native apps.
-
OAuth 2.1 datatracker.ietf.org
Consolidation of OAuth 2.0 specifications into a single document, removing deprecated features and clarifying best practices.
OpenID Connect › Resources > Specifications > Published: “Known threats using OAuth 2.0 / OpenID Connect and countermeasures.”