@misc{rfc6819,
    series =    {Request for Comments},
    number =    6819,
    howpublished =  {RFC 6819},
    publisher = {RFC Editor},
    doi =       {10.17487/RFC6819},
    url =       {https://www.rfc-editor.org/info/rfc6819},
    author =    {Torsten Lodderstedt and Mark McGloin and Phil Hunt},
    title =     {{OAuth 2.0 Threat Model and Security Considerations}},
    pagetotal = 71,
    year =      2013,
    month =     jan,
    abstract =  {This document gives additional security considerations for OAuth, beyond those in the OAuth 2.0 specification, based on a comprehensive threat model for the OAuth 2.0 protocol. This document is not an Internet Standards Track specification; it is published for informational purposes.},
}