Page Information

Title:	DRD26-J. For OAuth, use a secure Android method to deliver access tokens
Author:	Unknown User (lflynn)	Oct 30, 2014
Last Changed by:	Zifei (FeiFei)	Oct 21, 2017
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/R9AxBQ
Export As:	Word · PDF

Parent Page     Page: Rule 07. Miscellaneous (MSC)

• incomplete
• rule
• android-applicable
• drd
• draft
• msc

Time	Editor
Oct 21, 2017 16:51	Zifei (FeiFei)	View Changes
adde related guidlines CWE-297
Oct 21, 2017 12:29	Zifei (FeiFei)	View Changes
added oAuth Paper Link to Bibiliography section
Oct 21, 2017 11:04	Zifei (FeiFei)	View Changes
Added risk detection and related vulnerabilities and related guidelines section
Oct 21, 2017 10:54	Zifei (FeiFei)	View Changes
Oct 21, 2017 10:53	Rachel Xu

External Links (7)
    https://www.securecoding.cert.org/confluence/display/androi…
    oauth.net/core/1.0a/
    https://www.microsoft.com/en-us/research/wp-content/uploads…
    www.cs.cmu.edu/ourcs/register.html
    https://www.securecoding.cert.org/confluence/display/androi…
    cwe.mitre.org/data/definitions/297.html
    tools.ietf.org/html/rfc6749