SoK: Single Sign-On Security — An Evaluation of OpenID Connect
OAuth Demystified for Mobile Application Developers