Mini-Programs, Mega-Problems: Unveiling OAuth-based Authentication Misuses in Mini-Programs via Dynamic Analysis

arXiv:2607.08232 · cs.CR · Submitted 2026-07-09 · Read on arXiv

Zidong Zhang, Zhentao Xie, Lingyun Ying, Qinsheng Hou, Yacong Gu, Wenrui Diao, Jianliang Wu

cs.CR

Submitted: 2026-07-09

Comments: Accepted by ACM CCS 2026

Code: https://github.com/rovo89/Xposed

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

OAuth-based Authentication — 14× in this paper
Verification — 13× in this paper · explained in 2 episodes
Analyzer — 8× in this paper · explained in 1 episode
Conference on Computer and Communications Security — 6× in this paper
Core — 6× in this paper · explained in 2 episodes
Adaptation — 4× in this paper · explained in 1 episode
ACM Workshop on Secure and Trustworthy Superapps — 3× in this paper
Abstraction — 3× in this paper · explained in 1 episode
Accuracy — 3× in this paper · explained in 1 episode
Consistency — 2× in this paper · explained in 3 episodes
Initialization Vector — 2× in this paper
Trace — 2× in this paper · explained in 2 episodes
Annual Network and Distributed System Security Symposium — 1× in this paper
International Conference on Software Engineering — 1× in this paper
Robustness — 1× in this paper · explained in 5 episodes

Related papers