/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 stack-auth.com
OAuth from First Principles - Stack Auth
| | blog.doyensec.com
Common OAuth Vulnerabilities · Doyensec's Blog
2.0 parsecs away

Travel
| | Common OAuth Vulnerabilities
| | aaronparecki.com
OAuth 2 Simplified Aaron Parecki
2.1 parsecs away

Travel
| | This post describes OAuth 2.0 in a simplified format to help developers and service providers implement the protocol.
| | www.arneswinnen.net
Authentication bypass on Airbnb via OAuth tokens theft - Arne Swinnen
2.2 parsecs away

Travel
| | [AI summary] A security researcher details how Airbnb was vulnerable to an authentication bypass attack that combined login CSRF with an open redirect flaw to steal OAuth tokens via Facebook and Google, earning a $5,000 bounty after the issues were fixed in 2016.
| | code.sgo.to
· sgo.to
18.1 parsecs away

Travel
| [AI summary] A post simplifying the OpenID Connect Protocol using a simulated instant messaging conversation between a user, a relying party, and an identity provider.