Lab: Authentication bypass via OAuth implicit flow | Web Security Academy

This lab uses an OAuth service to allow users to log in with their social media account. Flawed validation by the client application makes it possible for ...