azure-ad-b2c – How to prevent reuse of Oauth Authorization Code?
I'm using the OAuth 2.0 authorization code flow , but I noticed that I'm able to reuse the same authorization code and the server responds with a new id token. And as per OAuth 2.0 specifications, The client MUST NOT…