Comprehensive enumeration of security concerns in the OAuth 2.0 Auth Code flow
research.nccgroup.com