A Security Architecture for Theft and Replay-Resistant Microsoft Cross-Cloud Refresh Token FlowsDecember 5, 2024