And this is why OIDC and IDPs exists to expand more with nonce, user agent footprints and other validation mechanisms