OAuth refresh-token theft

Кражба на refresh token дава възможност да се получават нови access tokens без пълно user login до revocation/expiry.

Attackers целят browser/app stores, token caches, compromised SaaS integrations и malware-accessible files.

Secure token storage, rotation/reuse detection, conditional access, revoke on risk, narrow scopes и phishing-resistant authentication при reauthentication.