OAuth 2.0 - Secure and Insecure Configurations

This is work in progress! Do not rely on the information posted here!