Web Security Academy : Going deep on OAuth labs and a beautiful unintended solution

web security, portswigger, oauth, openid