News for hackers. Stuff that matters.
Re:Achilles Heel of OAuth or Why Facebook Adds #_=_ by homakov on Friday March 15, 2013 @04:17AM (#5379643)
you just raised another problem haha. response_type.

it's also flexible. Even if app 99.99% of time uses response_type=code someday hacker comes and usues token on hacked redirect_uri.

simply speaking response_type is also should be static and constant. But, gosh, let's fix first-world-problem first

Re:Achilles Heel of OAuth or Why Facebook Adds #_=_ by mardiros on Friday March 15, 2013 @04:28AM (#5379660)
It's exactly what I missed.

Thanks!