OAuth 2.0 Security Best Current Practice

https://tools.ietf.org/html/draft-ietf-oauth-security-topics

OAuth 2.0 Security Best Current Practice describes security requirements and other recommendations for clients and servers implementing OAuth 2.0.

More resources