OAuthHub: Mitigating OAuth Data Overaccess through a Local Data Hub

Qiyu Li, Yuhe Tian, Haojian Jin

Most OAuth service providers, such as Google and Microsoft, offer only a limited range of coarse-grained data access. As a result, third-party OAuth applications often end up acces…