https://justice-reaper.github.io/posts/OAuth-Lab-1/
Authentication bypass via OAuth implicit flow - Justice-Reaper