parse/verify OAuth requests in the JVM