Single Sign-On implementation: Security Issues and Best Practices

Social logins and OpenID Connect (OIDC) are an extremely effective way to register new users with low friction. There are many libraries out there that implement OIDC with several providers, however the implementation is very error-prone and can expose an application to account takeover attacks. In this article, we’ll discuss the common security issues found in OAuth 2.0/OIDC login flows and best practices on how to avoid them.