OAuth 2.0 / OpenID Connect / SSO attack methodology. redirect_uri manipulation, state parameter bypass, CSRF on authorization endpoint, code/access_token interception, PKCE bypass, implicit flow hijack, and cross-tenant token reuse.
OAuth 2.0 / OpenID Connect / SSO attack methodology. redirect_uri manipulation, state parameter bypass, CSRF on authorization endpoint, code/access_token interception, PKCE bypass, implicit flow hijack, and cross-tenant token reuse.