Nice explanation of exploiting OAuth flows (“dirty-dancing”) | Hacker News Reader