Jul 30, 2026 Auth & Tokens 1 min read OAuth device code phishing Start a device authorization flow and get the victim to approve your code, yielding tokens for their account. device-code oauth phishing