OAuth Misconfiguration
High · Authentication · CWE-863
Description
Insecure redirect URIs, missing PKCE/state, token leakage.
Root cause
Loose redirect validation; public clients without PKCE.
Impact
Account takeover, token theft.
Detection
OAuth flow review; redirect fuzzing in labs.
Mitigation
Exact redirect allow-list; PKCE; short-lived tokens.
Secure coding
Use proven OAuth/OIDC libraries.
Safe lab example
lab-oauth
Practise related skills in Labs or deepen on Academy library.