[exelius]

Agreed; I thought that the general consensus was that OAuth2 was severely flawed (and why many sites stuck with OAuth1). Been a few years since I worked with OAuth though, so I could be wrong.

[cratermoon]

OpenID-Connect is the most current spec in that world.