5 ms·client credentials threat is OAuth1 too.by homakov 14y agoclient credentials threat is OAuth1 too.bjourne 14y agoRight, but other oauth2 providers than facebook aren't vulnerable to the redirect_uri hack you are describing, are they?homakov 14y agonot sure, i didn't check all of them also facebook is 90% of oauth