PortSwigger's "Authentication bypass via OAuth implicit flow" Walkthrough
PortSwigger recently added a set of OAuth labs and while most of them are Practitioner and Expert level, one has been created in the Apprentice category at the time of this writing. This