Known Vulnerabilities in OpenId Connect Authentication -