OAuth 2.0 Threat Model and Security Considerations

OAuth 2.0 Threat Model and Security Considerations Deutsche Telekom AG IBM Oracle Corporation This document gives additional security considerations for OAuth, beyond those in the OAuth 2.0 specification, based on a comprehensive threat model for the OAuth 2.0 protocol. This document is not an Internet Standards Track specification; it is published for informational purposes.