how is this method different than the base method from OAuth2AuthProvider? We should not duplicate this method, only extend it.