OAuth 1 was a behemoth. OAuth 2 is simple.

1. Get a login URL. Send people here to log in.

2. Receive an auth token if the user clicked allow on the login page

3. Swap the auth token for access and renewal tokens.

Optional 4: Maybe renew if you expire.