third-party reg oauth