News for hackers. Stuff that matters.

A comment on Introducing TAuth: Why OAuth 2.0 is bad for banking APIs and how we're fixing it. Parent comment

Re:Introducing TAuth: Why OAuth 2.0 is bad for banking APIs ... by btown on Thursday May 05, 2016 @05:36PM (#11639840)
If the web view is inside your app, you can inject JS easily.

http://www.priyaontech.com/2014/12/native-%E2%80%93-js-bridg...

[ Parent | on HN ]
Re:Introducing TAuth: Why OAuth 2.0 is bad for banking APIs ... by blazespin on Thursday May 05, 2016 @08:36PM (#11640840)
or just use custom protocol and sniff it all.
[ Parent | on HN ]