Lab 3B -- Redirect URI

A normal-looking client. The weakness is not in this file -- it's in which redirect URIs are registered at the Authorization Server.

Then head to the attacker console at {c.ATTACKER_URL}/ and craft a malicious authorization request.