SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: MSC10-J. Do not use OAuth 2.0 implicit grant (unmodified) for authentication  
Author: Unknown User (lflynn) Oct 30, 2014
Last Changed by: Carol J. Lallier Jul 13, 2015
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/xTVGBQ
Export As: Word · PDF  
Incoming Links
SEI CERT Oracle Coding Standard for Java (2)
    Page: MSC09-J. For OAuth, ensure (a) [relying party receiving user's ID in last step] is same as (b) [relying party the access token was granted to].
    Page: MSC11-J. Do not let session information leak within a servlet
Hierarchy
Parent Page
    Page: Rule 49. Miscellaneous (MSC)
Labels
Global Labels (5)
Recent Changes
Time Editor  
Jul 13, 2015 09:26 Carol J. Lallier View Changes
Nov 12, 2014 11:26 Unknown User (lflynn) View Changes
Oct 30, 2014 20:39 Unknown User (lflynn) View Changes
Oct 30, 2014 20:13 Unknown User (lflynn) View Changes
Oct 30, 2014 20:10 Unknown User (lflynn)  
Outgoing Links
External Links (3)
    tools.ietf.org/html/rfc6749
    https://www.securecoding.cert.org/confluence/pages/viewpage…
    oauth.net/core/1.0a/
SEI CERT Oracle Coding Standard for Java (3)     Page: MSC09-J. For OAuth, ensure (a) [relying party receiving user's ID in last step] is same as (b) [relying party the access token was granted to].
    Page: MSC11-J. Do not let session information leak within a servlet
    Home page: SEI CERT Oracle Coding Standard for Java