[krosaen]

Might OAuth WRAP make a comeback? Bret Taylor wrote about it years ago as a simpler approach:

http://webcache.googleusercontent.com/search?q=cache:lDQVFky...

(his blog seems to be defunct, hope that's not permanent)

Seems like OAuth WRAP has been officially deprecated in favor of OAuth2.0 but given these issues...