Okta's NextJS-0auth troubles(joshua.hu)
348 points by ramimac | 135 comments
Blog post by Joshua Rogers describing security issues he reported in Okta's auth0/nextjs-auth0 library, including an OAuth parameter injection, and the AI-slop handling of his fix.