oauth refresh token
Google Whistles While OAuth Burns — ‘MultiLogin’ 0-Day is 70+ Days Old
What a Mickey Mouse operation: Infostealer scrotes having a field day with unpatched vulnerability ...
Technical Advisory – Azure B2C – Crypto Misuse and Account Compromise
Microsoft’s Azure Active Directory B2C service contained a cryptographic flaw which allowed an attacker to craft an OAuth refresh token with the contents for any user account. An attacker could redeem this ...
