You casually gloss over the hardest part of oauth (the sequence of requests made and the reason why they exist), which is the part no one remembers.