OAuth 2.0 V51 - Sanity Check Comments/Suggestions for v.5.0

[csfreak92]

Chapter V51 - OAuth 2.0

Here are a few things I observed reviewing this chapter for v.5.0 for sanity check related to #2582:

V51.7 Consent Management
Needs some paragraph describing this section. For consistency across all subsections in ASVS.

I also saw some requirements that need some grammatical changes which I will reference in this issue in a PR later.

[csfreak92]

For this intro paragraph, I am not sure what must be written here. I would lean for the folks who are more expert in this set of requirements for their PR.

[tghosth]

@randomstuff @TobiasAhnoff @elarlang could you go through the chapter and section text in chapter V51 to make sure it is ok? As Ralph says, I think this needs the expertise of those who are most familiar with it.

[elarlang]

The last one (V51.7) requires some section text, but otherwise, all 3 of us have worked with the text, and from my point of view, it makes sense to have external eyes on that.

If there is no further action to be expected from this issue, it can be closed. Parallel reviews are in place anyway.

[tghosth]

So can someone add for 51.7 and then we can close this?

[randomstuff]

Maybe something like:

These requirement cover the verification of the user's consent by the authorization server. Without proper user consent verification, a malicious actor could easily obtain permissions on the user behalf through spoofing or social-engineering.

[elarlang]

@randomstuff please open the PR