Flow-limited authorization (2015)

by Owen Arden, Jed Liu, Andrew C. Myers