On (OAuth) token hijacks for fun and profit (Google/Microsoft integration)

intothesymmetry.blogspot.com