Researchers find two flaws in OAuth 2.0
scmagazineuk.com