https://x7peeps.com/tags/API%E5%AF%86%E9%92%A5%E6%B3%84%E9%9C%B2/index.htmlHugozh-CNWed, 12 Aug 2026 14:30:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/SaaS_OAuth%E4%BB%A4%E7%89%8C%E6%BB%A5%E7%94%A8%E4%B8%8EAPI%E5%AF%86%E9%92%A5%E6%B3%84%E9%9C%B2%E5%8F%96%E8%AF%81%E6%B7%B1%E5%BA%A6%E5%88%86%E6%9E%90/index.htmlWed, 12 Aug 2026 14:30:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/SaaS_OAuth%E4%BB%A4%E7%89%8C%E6%BB%A5%E7%94%A8%E4%B8%8EAPI%E5%AF%86%E9%92%A5%E6%B3%84%E9%9C%B2%E5%8F%96%E8%AF%81%E6%B7%B1%E5%BA%A6%E5%88%86%E6%9E%90/index.html深入剖析OAuth 2.0/OIDC令牌生命周期攻击面与API密钥泄露取证方法，涵盖Consent Phishing、Token Replay、Token Rotation绕过、SaaS-to-SaaS影子IT、云元数据服务攻击、API密钥硬编码检测，结合Codecov供应链攻击、Uber令牌滥用等真实案例，构建云身份安全取证体系