matdevdug, 
Whenever I have to write an #oauth login the struggle is never getting it to work. I can always end up with a successful login.
Without fail I will finish, then go check the best practices guide and inevitably find out I messed something up. It’s just crazy for an “easy” protocol to have so many footguns. (https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics)
Add comment