Collected research
On the security of modern Single Sign-On Protocols – OpenID Connect 1.0
OpenID Connect discovery metadata can combine an honest provider’s registration and authorization endpoints with an attacker’s token endpoint. Dynamic registration then causes a client to send its new credentials and the victim’s authorization code to the attacker. The paper tests MITREid Connect and discusses endpoint restrictions and provider allowlists.
Record
- Researcher
- Vladislav Mladenov, Christian Mainka, Julian Krautwald, Florian Feldmann and Jörg Schwenk
- Published by
- arXiv
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Vladislav Mladenov, Christian Mainka, Julian Krautwald, Florian Feldmann and Jörg Schwenk, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .