Rethinking Token-based Security: OAuth 2.0 Security Best Current Practice 22.11.19 ngPolandby Manfred Steyer, GDE PDF-Download