Security Issues in OAuth 2.0 SSO Implementations
The OAuth 2.0 Authorization Framework