sources about the oAuth