The „OAuth 2.0 Security Best Current Practice“ document has a number of attack vectors and how to defend against them: https://datatracker.ietf.org/doc/html/dra

The „OAuth 2.0 Security Best Current Practice“ document has a number of attack vectors and how to defend against them: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics#s https://datatracker.ietf.org/doc/html/draft-ietf-oauth-secur...