Insecure OAuth implementations: How are mobile app users at risk?

OAuth 2.0 is an open standard for token-based authorization that allows a user’s account information to be accessed by third-party services, without sharing or exposing the user’s credentials. It’s widely used to facilitate single sign-on (SSO), so users can sign in to third-party websites and apps by using an ID provider (IdP), such as Google, Facebook, Sina Weibo or Twitter.

Read more at – Insecure OAuth implementations: How are mobile app users at risk?