Re:OAuth 2.0 Security Best Current Practice
by ecnahc515 on Tuesday May 12, 2020 @07:44PM
(#23161522)
Yeah no one uses it because they explicitly want you to authenticate to register the clients on the users behalf so they can lock you out if you abuse it. It's annoying, but it makes sense. Otherwise an abuser can just dynamically create new clients anytime their existing clientID is banned.
[ Parent
| on HN ]
There are no comments on this comment yet.