oauth2 (1)

gentleman meme open redirect

OAuth token theft using open redirect