Abusing OAuth Device Code Flow

https://www.securitricks.com/attackreports/abusing-oauth-device-code-flow