Dev Tools · 1h ago
Four OAuth Bugs That Broke 'Sign in with Google'
A developer encountered four distinct bugs while integrating Google OAuth2 login into his app Kenning. Issues included a hidden carriage return in the client ID, extending the wrong Spring service class, a deferred CSRF cookie write, and duplicate cookies in DevTools. Each bug required specific fixes, from changing line endings to adding a filter to force cookie generation.
Meridian48 take
The post is a useful debugging case study but covers common OAuth pitfalls rather than novel security flaws.
oauthspring-security