android - Is it possible to "hijack" an oauth2 provided that the attacker has the client id, client secret and an auth token? -
i relativley new authentication procedures , came across oauth2 protocol when implementing android app. not aquainted procedure - possible attacker access data form server providing in possession of client id, client secret , auth token? i'm asking check how necessary securley hide these information.
thank in advance.
Comments
Post a Comment