[justin_oaks]

When I saw the OAuth 1a, I cringed and audibly said "Oh no!"

I have to deal with OAuth 1a to make API calls to Jira and other Atlassian products. Hooray for whoever came up with OAuth 2 and did away with the requirement for the client to do cryptographic operations.

Surprisingly enough, OAuth 1a was the easy part for article author. May God have mercy on his soul.

[DylanSp]

I had the same reaction when I saw OAuth 1a. I wrote some code that called NetSuite's REST API, which also uses that; it was more than a little annoying.