Nice explanation of exploiting OAuth flows (“dirty-dancing”)
labs.detectify.com