Hackernews posts about OAuth

Related: Cloudflare  
  1. OAuth DPoP (fusionauth.io)
  2. One link-click Google account takeover (weirdmachine64.github.io)