https://oauth.net/2/oauth-best-practice/ Initial list given in the slides in [IETF 106](https://datatracker.ietf.org/meeting/106/materials/slides-106-oauth-sessa-oauth-20-security-best-current-practice-draft-ietf-oauth-security-topics-00.pdf)
https://oauth.net/2/oauth-best-practice/
Initial list given in the slides in IETF 106