3 ms·
"Sign in with X" can and does get abused: https://news.ycombinator.com/item?id=33917962 https://news.ycombinator.com/item?id=33917962 Getting a user to log in
by sigwinch28 4y ago
"Sign in with X" can and does get abused: https://news.ycombinator.com/item?id=33917962 https://news.ycombinator.com/item?id=33917962
Getting a user to log in on a malicious app which has legitimate OAuth client credentials is usually game over, yes.