Signing Into One Billion Mobile App Accounts Effortlessly with OAuth2.0

OAuth2.0 protocol has been widely adopted by mainstream Identity Providers (IdPs) to support Single-Sign-On services. Since this protocol was originally designed to serve the authorization need for 3rd party websites, different vulnerabilities have been uncovered when adapting OAuth to support mobile app authentication.

by Ronghai Yang, Wing Cheong Lau

Full Abstract:

Information Security,InfoSec,Black Hat,BlackHat,