nOAuth: How Microsoft OAuth Misconfiguration Can Lead to Full Account Takeover https://www.descope.com/blog/post/noauth