The recent issues with OAuth 2.0 in Microsoft Azure AD and Google are a stark reminder of this protocol's complexity. Flickr, Booking.com, Grammarly, and Kayak are just a few platforms that have experienced OAuth2.0-related account takeover vulnerabilities in the past


