API Integration Manual for Daikin DKN Cloud Wi-Fi Adaptor
In order to prevent OAuth 2.0 Mix-Up Attacks, OAuth Clients must only process redirect
responses of the OAuth Authorization Server they send the respective request to and from the
same user agent this Authorization Request was initiated with. Clients must memorize which
Authorization Server they sent an Authorization Request to and bind this information to the user
agent (browser sent from) and ensure any sub-sequent messages are sent to the same
Authorization Server.