Best practices around generating OAuth tokens | Hacker News Reader