SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: MSC09-J. For OAuth, ensure (a) [relying party receiving user's ID in last step] is same as (b) [relying party the access token was granted to].  
Author: Unknown User (lflynn) Oct 30, 2014
Last Changed by: David Svoboda Aug 06, 2025
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/xjVGBQ
Export As: Word · PDF  
Incoming Links
SEI CERT Oracle Coding Standard for Java (2)
    Page: MSC10-J. Do not use OAuth 2.0 implicit grant (unmodified) for authentication
    Page: MSC08-J. Do not store nonserializable objects as attributes in an HTTP session
Hierarchy
Parent Page
    Page: Rule 49. Miscellaneous (MSC)
Labels
Global Labels (5)
Recent Changes
Time Editor  
Aug 06, 2025 17:17 David Svoboda View Changes
REM cost reform
Jul 13, 2015 09:25 Carol J. Lallier View Changes
Nov 12, 2014 11:19 Unknown User (lflynn) View Changes
Nov 12, 2014 11:12 Unknown User (lflynn) View Changes
Oct 30, 2014 20:35 Unknown User (lflynn)  
Outgoing Links
External Links (3)
    tools.ietf.org/html/rfc6749
    oauth.net/core/1.0a/
    https://www.securecoding.cert.org/confluence/pages/viewpage…
SEI CERT Oracle Coding Standard for Java (3)     Page: MSC10-J. Do not use OAuth 2.0 implicit grant (unmodified) for authentication
    Page: MSC08-J. Do not store nonserializable objects as attributes in an HTTP session
    Home page: SEI CERT Oracle Coding Standard for Java