Lab: SSRF via OpenID dynamic client registration

This lab allows client applications to dynamically register themselves with the OAuth service via a dedicated registration endpoint. Some client-specific data is used in an unsafe way by the OAuth service, which exposes a potential vector for SSRF.

You can log in to your own account using the following credentials: wiener:peter

[juicyvanil]

if you can adjust your screen size little bit bolder, thanks so much for your help.