oauth.net/2/security-considerations/
oauth.net/2/security-considerations/
The Threat Model and Security Considerations document was written to provide additional guidance beyond what is described in the core document. Much of this document was added after major providers had real implementation experience. The document describes many known attacks, either theoretical attacks or ones that have been demonstrated in the wild. It describes countermeasures for each.
More resources