Shop App – Attacker is able to intercept authorization code during authentication (OAuth) and is able to get access to Microsoft Outlook email account