Extension Auditor
Extension Auditor
Sign Up

OAuth 2.0 Implicit Flow Detector

ID: joelnphbjjdfdifmhcpahcopabiafmbp

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Removed
Version
0.1.4
Size
0.07 MB
Rating
0.0/5
Reviews
0
Users
526
Type
Extension
Updated
Aug 25, 2020
Category
11_web-development
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
Okta DeveloperView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
2
Active
0
Obsolete
2
Listed
2
Unlisted
0
Total Users
32,018

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up

Detect sites using the OAuth 2.0 implicit Flow

Detect sites using the OAuth/OpenID Connect Implicit Flow. Many websites use the OAuth and OIDC protocols (https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth) to manage web authentication and authorization. While these standards are the best practice for web developers, many sites are still relying on the now deprecated Implicit flow (https://developer.okta.com/blog/2019/05/01/is-the-oauth-implicit-flow-dead) which isn't considered secure 🙁 This extension detects when a website is using the Implicit Flow and lets you know. It's a great way to stay conscious of the security of websites you use every day.

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up
URLs
12
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up
mozilla.org/MPL/2.0/http://mozilla.org/MPL/2.0/.
developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessagehttps://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
github.com/mozilla/webextension-polyfill/issues/130https://github.com/mozilla/webextension-polyfill/issues/130
*/*https://*/*
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
github.com/oktadeveloper/okta-implicit-flow-detectorhttps://github.com/oktadeveloper/okta-implicit-flow-detector
www.w3.org/1999/02/22-rdf-syntax-nshttp://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com/tiff/1.0/http://ns.adobe.com/tiff/1.0/
ns.adobe.com/exif/1.0/http://ns.adobe.com/exif/1.0/
oauth.net/2/grant-types/implicit/https://oauth.net/2/grant-types/implicit/
Showing 1 to 10 of 20 rows
Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up
No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up