nOAuth: How Microsoft OAuth Misconfiguration Can Lead to Full Account Takeover

https://www.descope.com/blog/post/noauth