https://www.lifars.com/2016/11/oauth-2-0-claims-still-secure-used-properly/
OAuth 2.0 Claims it is Still Secure, “If Used Properly”