Abusing OAuth Device Code Flow

https://www.securitricks.com/reports/abusing-oauth-device-code-flow/