On the security of modern Single Sign-On Protocols: OpenID Connect 1.0.
OAuth Demystified for Mobile Application Developers