Known Vulnerabilities in OpenID Connect Authentication