The Web SSO Standard OpenID Connect: In-depth Formal Security Analysis and Security Guidelines
Security Issues in OAuth 2.0 SSO Implementations