On the security of modern Single Sign-On Protocols: OpenID Connect 1.0.
Towards a Formal Foundation of Web Security