Lab: Authentication bypass via OAuth implicit flow
Lab: SSRF via OpenID dynamic client registration