[vlovich123]

Bearer tokens work elsewhere and imho are drastically simpler than oauth

[dend]

But where would you get bearer tokens? How would you manage consent and scopes? What about revocation? OAuth is essentially the "engine" that gives you the bearer tokens you need for authorization.