blog/common-security-issues-in-implementing-oauth-2-0-and-how-to-mitigate-them.html